development

[slender glade]

Yeah but what was it specifically

That’s vague as hell

[shy veldt]

Yeah a

That’s what I’m saying

[gentle grove]

average citizen of kirbistan

[restive ether]

av1 soon 🙏🙏🙏

[slender glade]

Is it bc of the bg here

[gentle grove]

So I guess zefram is banned

[shy veldt]

That’s what they say

[slender glade]

Well let me tell u something buddy that’s the worst fucking onboarding bg I’ve ever seen in my life.

[velvet path]

This is why the tweak got removed

[shy veldt]

Seems like a made up shit

[velvet path]

I don't see how that's a bad reason

[slender glade]

Yeah that shit would probably send my grandma into 3 comas

[restive ether]

why wouldn’t they just use the native onboarding lol

[gentle grove]

can't you just change the bg then

[slender glade]

Idek

[gentle grove]

and then it's all good

[restive ether]

if it hurts your feelings that’s really no one else’s problem but your own

[shy veldt]

That’s a bad reason to pull it for good instead of telling me change the background

[slender glade]

okay look here on a serious note

when I submitted Antoine

I went through like

[turbid fjord]

Fixed the performance issues @compact swift thanks for your help once again

[gentle grove]

they're banning it and don't let you resubmit after fixing?

[restive ether]

brother you could’ve literally used the native onboarding

[cloud yacht]

Also isn't chariz like the most strict package manager on quality control

[restive ether]

yes lol

[shy veldt]

Yes

[gentle grove]

No

It's not a package manager

[slender glade]

A process of like 10 days back and forth where Adam was telling me like yo change this change that, and that was def for the better

[cloud yacht]

Repository sorry

[slender glade]

So imo

Just do what they ask

[shy veldt]

Dude

[slender glade]

They’re correct anyways because why are you applying a blur onto onboarding

[velvet path]

I think you're just misinterpreting stuff

[slender glade]

That’s like if a pigeon fucked a rat

You wouldn’t be like that’s normal is it

-300 Aaron social credit points

[shy veldt]

So why they didn’t tell me to fix it re submit?

[restive ether]

we got those in nyc

[slender glade]

MAN WHO GIVES A FUCK 😭 GO FIX IT

[slender glade]

You got everything in nyc

[restive ether]

we have the worlds largest rats

[slender glade]

Rudy Giuliani

[restive ether]

oh yeah he’s up there next to gunna

[slender glade]

Lmfao

[shy veldt]

Yeah well so why did they refund all purchases?

[restive ether]

why don’t you ask him buddy

[shy veldt]

Something’s off. I’m not stupid, that’s not the real reason. Like they told me to fix X Y Z before release they could’ve told me we are pulling it off until you fix things

But they refunded all the purchases

[restive ether]

real interactions in the wild

[restive ether]

so you think there’s a conspiracy against you despite the fact that person is losing money

[shy veldt]

Maybe, so just say it

I prefer the truth

[restive ether]

it sounds like you’re inventing your own right now

[slender glade]

Who u voting for in 2024

[shy veldt]

Saying ‘this page is eye sore’… bah

[slender glade]

It is

[restive ether]

Jill Stein, not genocide Joe certainly

[shy veldt]

No. I’m not stupid to believe them

There’s a difference

[slender glade]

So what’s ur theory

[restive ether]

there’s a conspiracy against you where the guy who is conspiring against you lost money

makes sense

lmaooo

[shy veldt]

Maybe

[restive ether]

do you want me to do it for you

[shy veldt]

I’ll take this over a fucking lame shit lie

[velvet path]

@shy veldt ok so basically three things happened:

• package was pushed when it was supposed to have been rejected
• people bought it
• Chariz refunded a package that should've been rejected because why wouldn't they

[restive ether]

ouch

[slender glade]

You don’t think this is an eyesore?

[restive ether]

what the hell is with that icon lol

and the spacing

[slender glade]

Idk should’ve been rejected just for that

[cloud yacht]

Maybe they didn't see the change log right away

[slender glade]

They need a system onboarding class in UIKit man

[restive ether]

ArabBarX

[shy veldt]

That’s fine with me I don’t care, but the thing all seems fishy

Package was rejected after they told me to fix 5 things before the release

So you want to tell me they didn’t checked it?

Sure

[velvet path]

more may have been found after that

[slender glade]

bro does NOT know about the r/jailbreak caste system 😭

What was the tweak’s name

[shy veldt]

That was before the release

So to say they didn’t throughly checked it, I doubt it

[velvet path]

something getting missed =! it wasn't thoroughly checked

[velvet path]

I've thoroughly checked stuff and still missed other stuff before

[slender glade]

It’s a UIMenu hook

Buddy just change the onboarding screen

[shy veldt]

This is not the whole tweak

This is a very tiny part of what it can do

But that’s not the point again

And again, I don’t care they took the tweak off their repo

I care about the communication and lack of response

[velvet path]

they care that everybody got refunded let's be real

[slender glade]

@lime pivot @restive ether is it moral if I keep Antoine oss and everything but make it 0.99 on chariz

[velvet path]

dude, you got told why it got rejected

I don't think that's a "lack of communication" or "lack of response"

[shy veldt]

You want to see the whole mails?

[velvet path]

I think that's more of a "I can't comprehend people making mistakes and accidentally pushing stuff"

[slender glade]

But is it moral

[velvet path]

I mean it's not immoral

[slender glade]

Ok bet

[velvet path]

take that as you will

[shy veldt]

Look

Nvm

I’m not arguing

It’s fine

We just have different opinions about this case

[velvet path]

I mean imo it seems open and shut to me, but you do you

[shy veldt]

And again the main problem is that I can’t re submit and fix it

That’s my main problem

[shy veldt]

Quality standard means?

Give me an actual reason

No. That’s not an answer

Give me a specific problem

[velvet path]

@shy veldt I would encourage you to read this sometime https://docs.chariz.com/policies/seller-guidelines.html

[shy veldt]

No?

They didn’t

[velvet path]

they did, you fixed the ones they shared, then they accidentally pushed the tweak without looking further into it, then they looked further into it, noticed it didn't meet the quality standards, and pulled it

that's the complete timeline of events

end of story

[shy veldt]

Yeah, so how come I can’t fix it re submit? Not sure why.

[velvet path]

they gave the reason when they rejected the package after accidentally approving it

[shy veldt]

So tweak don’t have bugs? That’s again, complete bullshit.

That’s a fix I can do in 2 min

[velvet path]

there's a difference between bugs and tweaks not meeting quality standards

[shy veldt]

Quality standards = changelog page with grey label on black background?

[blazing warren]

https://x.com/xvonfers/status/1734978834909266002?s=20

[turbid fjord]

Maybe submit to the App Store. You might have better luck there

[shy veldt]

That’s good, but it did

[velvet path]

here's the entire thing you said

It wasn't just the changelog

[shy veldt]

They are both the same just different views

[velvet path]

again, it was an accident it got pushed

[shy veldt]

But yeah I get that

I don’t mind it was pulled off again. The whole thing is vague that’s all

[velvet path]

I don't see how it's vague, they gave you reasons why it's been rejected every single time

[shy veldt]

I take the L it doesn’t bother me. I just have a gut feeling that’s not the real reason

[velvet path]

the only difference here is that it accidentally got approved before being rejected

[turbid fjord]

it doesn’t bother me
keeps denying the truth and malds in rjb

[shy veldt]

They didn’t, again. I can show you the mails. No one said it was mistakenly pushed

So how do you assume this?

[velvet path]

in the fucking Chariz discord

[shy veldt]

I’m not there

That’s fine now

Now that I know that is was a mistake it’s all fine

[velvet path]

I don't know why a seller of a repository is not in the discord of the repository but whatever

[native dune]

what was the new tweak

[shy veldt]

3DGlassierTouch

[velvet path]

also what are you talking about

[turbid fjord]

Whitenames are not known for their intelligence

[shy veldt]

Didn’t know I was there actually

[velvet path]

[shy veldt]

Anyway. They didn’t told me it was mistakenly pushed in the mail

Now we can all go to sleep with a smile

Thank you MasterMike for solving this case

[frail cedar]

what

[velvet path]

what

[native orbit]

whar

[velvet path]

I don't know why either

at the very least imo complain in the right discord

[frail cedar]

in other news, i have created something awful. instead of using i, j, and k for nested for loops
i am using index, jndex, and kndex

[native dune]

what was the tweak that was pulled

[turbid fjord]

It’s mentioned above

[frail cedar]

3DGlassierTouch

[turbid fjord]

Something something yeah that

[frail cedar]

or something like that

i saw it and didnt think it was worth the money but it looked cool

[radiant idol]

jndex my code

[gentle grove]

please at least use idx

jdx

kdx

[frail cedar]

no

[gentle grove]

ind?

[frail cedar]

index

jndex

kndex

i say them "j index" and "k index" in my head

[gentle grove]

not jin dex and Kin decks?

[frail cedar]

nope

[native orbit]

what comes after kndex then

[wicked summit]

lndex

[gentle grove]

Index

[frail cedar]

why the fuck would you nest more than

three

????

[gentle grove]

nest?

nest thermostat??

[frail cedar]

if i got for loops next to each other i just use index again

[gentle grove]

why

why not x y and x

[frail cedar]

single letters are annoying to keep track of

[native orbit]

just do i1, i2, i3..

[frail cedar]

i do not use numbers in my variables

anyone who does has issues

[gentle grove]

how's index and jindex whatever better

[native orbit]

jeez nut....

[frail cedar]

i(ndex)
j(ndex)
k(ndex)

[wicked summit]

I prefer reverse indentation

    for (int i = 0; i < 10; ++i) {
// Perform operations.
call_function();
call_other_function(i);
    }

[frail cedar]

im declaring you mentally unfit to take care of yourself

[gentle grove]

aka the man that copy pasted from stackoverflow and doesn't know how to highlight and press the tab key

[native orbit]

fuck a for loop, just ctrl c+v

[gentle grove]

what

[wicked summit]

Ctrl C+V 🤢

yy p 😇

[gentle grove]

"+p

[frail cedar]

the code edits itself at runtime

[blazing warren]

https://x.com/lavochka04/status/1735020306392051981?s=46 🤔

[grave sparrow]

how is that any different from what we already have

[timid furnace]

So many clones coming out these days

Like come on at least bring something new to the table

[lime pivot]

totally fine as a business model

[primal perch]

make it 1.99

all my homies happily pay one time fees for well written software

[lime pivot]

@shy veldt I read through the entire conversation here, I guess my question is why do you feel we had an ulterior motive? I’m incredibly sorry for the error on our part, but you’re trying to read into something where there is nothing else to be said. the team decided it isn’t up to our standards at this point in time, and that’s all it is

[restive ether]

ouch

[brazen timber]

based business model

the nintendo switch emulator yuzu does this

so does redhat

[restive ether]

capitalists don’t believe in giving out trade secrets liberal

i would never look at the business model as anything other than a donation of sorts

[shy veldt]

That’s fine, that was not the impression I was getting from iAdmin

The whole thing seemed shady

I bet you can understand my point of view

[restive ether]

not really lol, businesses exist to make money. they lost money by doing this

[lime pivot]

this was a team decision, you will have communicated with him but we decide on whether to approve or reject packages as a team

[restive ether]

who gains out that

[shy veldt]

Again, the explanation I was given was extremely vague

The ‘quality standard’ is kind of weird when you approve a package then 2 days after pull it with the explanation of ‘the settings page is eye sore’

Without taking to me first because again before the release you tested the tweak and I know it because I had to make fixes

Probably it is one big misunderstanding on both part but eventually your communication was extremely poor

[lime pivot]

I get you, I’m sorry. I haven’t reviewed the email thread yet but I’ll make sure we can improve as a team on what went wrong

[native dune]

Yes

Compile it if you can’t/don’t want to pay for it, buy it to support the dev and get auto updates

[tawdry storm]

fr what i was gonna say

[shy veldt]

That’s fine

Again i get it if it’s not there yet (my tweak) and it’s fine

Just make sure to communicate more

[lime pivot]

I guess the way I would explain it is that we can tell when a package feels “off”, like unfinished. and would take many iterations with us back and forth to get it to a point that it’s ready. the issue is that we aren’t really there to be testing something that’s unfinished, we’re just the final sanity check in case you missed something, if that makes sense

[native dune]

The package shouldn’t have been accepted in the first place then

Because people bought it and used it

[lime pivot]

right. and that’s the error we’re talking about

that was a miscommunication in the team

[brazen timber]

also buy it for support in general

[hasty ruin]

honestly

just buy rune

[brazen timber]

TRUE

[native orbit]

imagine not owning rune and nexus

[hasty ruin]

imagine not OWNING rune and nexus

[native orbit]

imagine cracking rune and nexus

[hasty ruin]

👎

[brazen timber]

TRUE

[native orbit]

ida dies

[hasty ruin]

[tepid olive]

imagine not edging to rune and nexus

[hasty ruin]

?

i mean

fair.

but

?

[cloud yacht]

imagine not just using an iOS device on iOS 5

[native dune]

I don’t have rune cuz I’m broke

[tepid olive]

i have nexus

[native dune]

Told icraze to gift it if he hates furries but he never gifted it

[brazen timber]

fr

[tepid olive]

he must love furries

[hasty ruin]

[timid furnace]

@hasty ruin when eta zsign shenanigans

[hasty ruin]

Oh yeah

What’s you need again?

The flags?

[timid furnace]

yea

[hasty ruin]

Ight gimme a min

[timid furnace]

genuinely cannot get it to sign a valid binary

[primal perch]

icraze hates blacks and jews

[hasty ruin]

zsign -k "/path/to/p12" -m "/path/to/mobileprovision" -p "cert pass" -z 9 -o "./appname-resigned.ipa" "/path/to/appname.ipa" -b "com.randomised.bundleid" -n "appname - jailbreaks.app"

@timid furnace

[hasty ruin]

oh

btw can one of you ping me in the priv thread please

[timid furnace]

Processing test/data/Undecimus-v3.8.0.b1.ipa
>>> Unzip:      /Users/dhinak/Downloads/zsign/test/data/Undecimus-v3.8.0.b1.ipa (32.96 MB) -> /tmp/zsign_folder_1702519891069719 ... 
>>> Unzip OK! (0.216s, 215828us)
>>> BundleId:   science.xnu.undecimus -> com.randomised.bundleid
>>> BundleName: unc0ver -> appname - jailbreaks.app
>>> Signing:    /tmp/zsign_folder_1702519891069719/Payload/Undecimus.app ...
>>> AppName:    appname - jailbreaks.app
>>> BundleId:   com.randomised.bundleid
>>> BundleVer:  1
>>> TeamId:     W94WHMS6HF
>>> SubjectCN:  iPhone Distribution: Henan Provincial Communications Planning Survey & Design Institute Co.,Ltd.
>>> ReadCache:  NO
>>> SignFolder: Undecimus.app, (Undecimus)
>>> No Enough CodeSignature Space. Length => Now: 12032, Need: 18655
>>> Realloc CodeSignature Space... 
>>> Success!
>>> Signed OK! (0.046s, 46095us)
>>> Archiving:  /Users/dhinak/Downloads/zsign/test/output/Undecimus-v3.8.0.b1.ipa ... 
>>> Archive OK! (32.98 MB) (0.965s, 964679us)
>>> Done. (1.240s, 1239567us)

    test/output/unzipped/Payload/Undecimus.app/Undecimus: invalid signature (code or signature have been modified)
    In architecture: arm64e

./zsign -k "$P12_PATH" -m "$PROVISIONING_PROFILE_PATH" -p "$PASSWORD" -z 9 -o  "$OUTPUT_PATH/$(basename "$file")" "$file" -b "com.randomised.bundleid" -n "appname - jailbreaks.app"

why wont it work

[cloud yacht]

ah yes I love unmodifed placeholders

[timid furnace]

i mean

i didn't have to replace it, so why not

this was my original anyway

[primal perch]

https://tenor.com/view/learn-learning-javascript-learns-javascript-stupid-generator-programming-gif-26843752

[hasty ruin]

https://tenor.com/view/learn-learning-javascript-learns-javascript-stupid-generator-programming-gif-26843752

[visual meadow]

https://tenor.com/view/sad-cement-seal-java-programming-gif-24524699

[primal perch]

f

[timid furnace]

@grave sparrow gm can you explain how __TEXT,__stubs and __DATA,__la_symbol_ptr are related

[primal perch]

@grave sparrow gm can you explain how __TEXT,__stubs and __DATA,__la_symbol_ptr are related

[proud geyser]

how do i get dylib from deb file

[faint timber]

how do you not know what a deb is

[proud geyser]

i got

how do i fix crash on launch for ipa

do i have to inject substrate if yes how do i do it through azula mobile

[timid furnace]

sandbox_init is in __la_symbol_ptr

which i think means that im fucked

mdc

kill sandbox_init

iOS

the tccd bypass

yea i know

this is for a sandbox extension

or smth idk how exactly this works but it works

anyways

the way zhuowei did it on 15+ was to edit __got and change the bind to a rebase pointing to a function returning 0

[timid furnace]

however this was with chained fixups

no chained fixups on 14

[primal perch]

wtf you mean i cant just handwrite _start and bypass the sandbox?

[timid furnace]

instead we have lc_dyld_info_only

which is in linkedit

[primal perch]

truly shocking apple would do such a thing

[timid furnace]

which afaik i cant modify

yea but does lc_dyld_info_only make dyld touch __la_symbol_ptr

i can overwrite __la_symbol_ptr but not lc_dyld_info_only

the lazy binding info

i cant theres no tweak injection

i can only edit the pages in the page cache

i can

but afaik only data pages

[primal perch]

dyld-o

[timid furnace]

yea :/

The trick is that while using the bug to write to binary text segments or the shared cache won't work (wait for the blogpost to learn why!); writing to the data segments of binaries (not the shared cache) does work 😉

from ian beer

to date no blog post

[naive kraken]

there are still processes that do this on iOS

[wicked summit]

gm

[acoustic imp]

For anyone who know what they are doing, will this new method of tweaks fix spinlocks ? And will iOS 15> get the new like tweak injection stuff ?

[slender glade]

no downloads for Antoine in North Korea 👎 gamers can we get ONE download for Antoine in North Korea

[topaz yew]

kim jong cracks

[lime pivot]

I’d be surprised if chariz.com is even accessible from there

[drifting heron]

yipeee welcome back again @slender glade

[slender glade]

Hello

[drifting heron]

[slender glade]

I think you asked me abt Santander downloads bc they expired

The answer is that there’s a repo called like santanderrootless by someone else

[drifting heron]

I already got it

f1shy forked it and used GH actions

[slender glade]

bet

[drifting heron]

Santander is cool but I just wish it wouldn't lag when I search for something

and searching inside folders doesn't work if you just search for names

[cursive rampart]

what browser would i use on windows xp

also does discord run on it

i think i could run minecraft

[slender glade]

Unfortunately I very hastily made the search feature

[proven solar]

does anyone know how to extract a framework from iOS 17.0's dyld_shared_cache?

[slender glade]

See blacktop/ipsw on gh

[proven solar]

it's what I used to read the dyld cache from the ipsw, I thought it couldn't extract a single framework but I'll take a closer look

thanks

[drifting heron]

[minor cargo]

where can i find the code for checkm8

[faint stag]

some ancient version of firefox

[faint stag]

https://github.com/0x7ff/gaster
c implementation
!!!

[faint timber]

new people spawned in

lacking all the information known since 2019

[indigo peak]

“Checkm8 GitHub”

crazy google search

[primal perch]

[pearl sail]

I forgot about that user

[wind ravine]

it annoys me that swift doesnt have pointers

[indigo peak]

don’t use swift then jackass

[hexed knot]

Hopefully you will now make the switch to a good language.

[wind ravine]

i am already using objc in my current project

[hexed knot]

Good

Hows ur friend

[wind ravine]

huh

[hexed knot]

The one who violates licenses

Forgot his name

[wind ravine]

who

[hasty ruin]

source

[hexed knot]

sourcelocation yeah that was his name

[wind ravine]

i dont talk to him

[hexed knot]

i thought yall was bros

[wind ravine]

how do i remove a tap gesture from something?

[hasty ruin]

-[UIView removeGestureRecognizer:]

[wind ravine]

whats the name of the tap gesture

wait nvm

like this?

for (UIGestureRecognizer *recognizer in self.view.gestureRecognizers) {
    if ([gestureRecognizer isKindOfClass:[UITapGestureRecognizer class]]) {
        [self.view removeGestureRecognizer:recognizer];
    }
}```

[hasty ruin]

indeed

[wind ravine]

property view cannot be found in the class

[radiant idol]

what are you hooking

[wind ravine]

initWithFrame

[radiant idol]

self instead of self.view

[wind ravine]

still doesnt work

[radiant idol]

whats the error now

[wind ravine]

"receiver type 'SBIconView' for instance message is a forward declaration"

[radiant idol]

did you interface it

@interface SBIconView : UIView
@end

[wind ravine]

"error: %orig does not make sense outside a method"

??

[prime ingot]

how can i decompile a deb

[native orbit]

it does tho

[radiant idol]

where did you put the interface

[wind ravine]

do i put it inside or outside the hook?

[radiant idol]

outside

[wind ravine]

do i need to declare selectors?

[native orbit]

mfw made my own swift library to add * pointer (de)referencing to make it bearable to use

[radiant idol]

make sure dpkg is installed

dpkg-deb -R path/to/deb path/to/some_directory

then you'll go to /path/to/some_directory, then go to the Library/MobileSubstrate/DynamicLibraries
you'll find the .dylib of the tweak there

then you can use a disassembler such as IDA or Hopper to check what is happening inside of the binary

[wind ravine]

it says properties arent found in the class

[radiant idol]

send the full error

take a screenshot or something

[wind ravine]

theres a lot of them

[radiant idol]

ok yes you need to declare properties/selectors that you want to use

[wind ravine]

oh wait it needs an interface for UIView too

[radiant idol]

@import UIKit;

at the top

[minor cargo]

thank u

[wind ravine]

linker error now bruh

[radiant idol]

send

[wind ravine]

send what

[radiant idol]

the error

[wind ravine]

\

[radiant idol]

yea idk

[wind ravine]

ae

do i need to link something for uikit?

[radiant idol]

dont think so

[wind ravine]

ill reinstall theos ig

[wind ravine]

nope still linker error

[tepid olive]

I fucking hate qemu

[wind ravine]

idk what its complaining about

how to fix

[radiant idol]

what about

make THEOS_PACKAGE_SCHEME=rootless MESSAGES=1

[tepid olive]

Merhaba

Yardım alabilirmiyim acaba

Havoc uygulamasından carbridge satın aldım ama kuramıyorum

[radiant idol]

Ermeniyim bu yüzden tercüman kullanıyorum. Bu muhtemelen bu kanal yerine #jailbreak'de sorulacak daha iyi bir sorudur. Telefonunuz hangi iOS'ta ve hangi telefonu kullanıyorsunuz?

[tepid olive]

iOS 15.7.3

[radiant idol]

ve hangi telefonu kullanıyorsunuz? iPhone7 mi? iPhone8 mi?

[tepid olive]

iPhone 6s

[radiant idol]

https://ios.cfw.guide/installing-palera1n

[wind ravine]

god i hate linker errors

[radiant idol]

Telefonunuzu jailbreak yapmak ve CarBridge'i kullanmak için bu kılavuzu kullanın

[tepid olive]

Bilgisayarsız yapabilirmiyim

[radiant idol]

hayır

[tepid olive]

Tamam teşekkürler

[topaz yew]

mfw kwrite crashes

[wind ravine]

i cant even compile my older tweak

[timid furnace]

did you update theos

[wind ravine]

yes

i did

[timid furnace]

did you update theos today

[wind ravine]

yes

at like 8:30

[timid furnace]

cat the substrate tbd that it mentions

[wind ravine]

what about it

its there and it has the archs

[timid furnace]

what is the platform

[wind ravine]

wdym

[wind ravine]

ios

[timid furnace]

there were updates to theos to fix platform issues

why does it think it's for sim then

which arches

[wind ravine]

both arm64 and arm64e

[timid furnace]

all of them

are those the only two in the tbd?

[wind ravine]

no

armv7, armv7s, arm64, arm64e, i386, x86_64

[timid furnace]

you did not update theos

[wind ravine]

i did

i just now ran update theos and it says already up to date

[timid furnace]

man

cd $THEOS/vendor/lib

git rev-parse HEAD

[wind ravine]

113e0cd132df53649a6bbee2572b2d39fd2beaa1

[timid furnace]

yea not latest

[wind ravine]

???

[timid furnace]

git checkout origin/master

it should be on 3d7033b3c54e074f3da409771475f16dfefb046b after that

[wind ravine]

that was the issue

[timid furnace]

yea it happened to me too

[wind ravine]

a deb doesnt get made tho

[timid furnace]

what's the error now

[wind ravine]

no error

theres just no deb in the packages directory

[timid furnace]

are you still doing this

[wind ravine]

not the message

im doing the make rootless

[timid furnace]

add package

ie. make package THEOS_PACKAGE_SCHEME=rootless, or you can put package after, doesn't matter

[wind ravine]

oopsie

it sent me into safe mode

well that definitely didnt work

i think the function im hooking onto gets called too early

[radiant idol]

try didMoveToWindow instead

[wind ravine]

i only need to call it once tho

[radiant idol]

%hook SBIconView

- (void)didMoveToWindow {
    %orig;

    if (self.gestureRecognizers.count == 0) return;

    for (UIGestureRecognizer *recognizer in self.gestureRecognizers) {
        if ([gestureRecognizer isKindOfClass:[UITapGestureRecognizer class]]) {
            [self removeGestureRecognizer:recognizer];
        }
    }
}

%end

[wind ravine]

but there will be multiple recognizers

[radiant idol]

wdym

[wind ravine]

thats not the main thing im trying to get

[radiant idol]

oh well

idk then

sorry lol

[wind ravine]

i got it

the gessture recognizer code sends me into safe mode

how do i have a property thats not defined?

like SBFolderIcon *folderIcon

[hasty ruin]

are you making a BlankIcons clone

[wind ravine]

yes

because blank icons needs oldabi

[hasty ruin]

try hooking _handleTap or performTap

definitely is a better way than removing the recognisers

[wind ravine]

i need to actually make it hidden first

its hiding regular icons tho

[radiant idol]

%hook SBIconView

- (void)_handleTap { }
- (void)performTap { }

- (void)setApplicationBundleIdentifierForShortcuts:(NSString *)bundleID {
    if (bundleID == nil) [self setHidden:YES];
    
    %orig;
}

%end

try that(?)

[wind ravine]

nope

i mean the click works

but hiding doesnt

[radiant idol]

ok then what if

[wind ravine]

i need to fix tapping for real icons but i can do that myself

wait

ik how

[radiant idol]

- (void)didMoveToWindow {
    if (self.applicationBundleIdentifierForShortcuts == nil || self.applicationBundleIdentifierForShortcuts.length == 0) {
        self.hidden = YES;
    }

    %orig;
}

[wind ravine]

i think that might hide folders

[radiant idol]

try it

[wind ravine]

it does

wait

thats exactly what i was doing before

[hasty ruin]

-(BOOL)isFolderIcon exists

[wind ravine]

is there a way to get the webclip url?

no visible @interface for 'SBIconView' declares the selector 'isFolderIcon'

wait

i just gotta add it to the itnerface

[wind ravine]

they come back when u go to another page

[radiant idol]

try this

[wind ravine]

i was just gonna hook onto the set hidden function

[radiant idol]

- (void)setHidden:(BOOL)isHidden {
    if (self.applicationBundleIdentifierForShortcuts == nil || self.applicationBundleIdentifierForShortcuts.length == 0) {
        %orig(YES);
    } else {
        %orig;
    }
}

or

yeah

[wind ravine]

thats literally what i just wrote lol

[radiant idol]

lmfaoooo

[wind ravine]

uh

that hides regular icons

[radiant idol]

uh right since thats getting called early

I guess you could use layoutSubviews

https://cdn.discordapp.com/emojis/1049200696228057118.webp?size=48&name=cringe~2&quality=lossless

[wind ravine]

what if i just remove the image

hecking egg it gets added back wtf

how do u add custom properties to objects?

[wind ravine]

this did not work either

[radiant idol]

L

[hasty ruin]

https://theos.dev/docs/logos-syntax

[tepid olive]

Does anyone have the com.apple.terminal ipa?

[topaz yew]

why though

[tepid olive]

Testing purposes

[wind ravine]

it sends me into safe mode

[frail cedar]

yes I do

why

[tepid olive]

Can I dm you

[frail cedar]

no

[tepid olive]

Alright can you dm me

[frail cedar]

no

[tepid olive]

Why would you say yes and then say no

[frail cedar]

i said i have it

which i do

[tepid olive]

Just looking to test it

[frail cedar]

having it and sharing it are different

[tepid olive]

Ah ok

[frail cedar]

however it's not hard to find

[tepid olive]

Does anyone have the com.apple.terminal ipa AND willing to share it?

[topaz yew]

[hasty ruin]

not at all

there is no need to check dms

[tepid olive]

Sadly I can’t find it on the iPhone wiki or the apple wiki

[indigo peak]

@interface ClassName
@property (property_attributes) SomeClass *newProperty;
@end

%hook ClassName
%property (property_attributes) SomeClass *newProperty;

- (void)someMethod {
  self.newProperty = someInstance;
  %orig;
}

%end

[tepid olive]

I’m looking at apple internal apps

[frail cedar]

yeah they wont have links

they'll have info - a good chunk of which i contributed - but no links

[tepid olive]

I’m just confused why it’s not even listed

I get the no links

But not even listed?

Hm

Hmmmm

[wind ravine]

i am getting linker error for SBBookmarkIcon

[hasty ruin]

screenshot code/error

[radiant idol]

where are you using it in your .x file

[wind ravine]

top of it

below the import statements

wait

[radiant idol]

ok

[wind ravine]

im using it at the bottom

inside a function

[radiant idol]

send a screenshot of the method you're using it in

[radiant idol]

ah thats why

instead of doing [SBBookmarkIcon class] do %c(SBBookmarkIcon)

also this is SBBookmarkIcon not SBHBookmarkIcon fyi

[wind ravine]

yes

ong

its so close

[radiant idol]

lol

[hasty ruin]

btw please prefix your names when using %new / %property

[wind ravine]

how

[hasty ruin]

to avoid conflicts or confusing devs

[radiant idol]

cough cough

[wind ravine]

man

im so close

[hasty ruin]

isInvisIcon -> prefix_isInvisIcon

[wind ravine]

but its still hiding user icons

add prefix before it?

[radiant idol]

ya

[hasty ruin]

That’s how prefixes work yes

[pearl sail]

https://tenor.com/view/231-gif-25095509

[cursive rampart]

how about you develop some bitches

[radiant idol]

is this a good way to structure an NSArray <NSDictionary *> * for a rootless patcher to store references to the old strings and the new ones

i cant think of the best way to store it as one structure

hm

"offset" being the offset (distance) between the original string and the patched one in the __PATCH_ROOTLESS,__cstring section?

[hasty ruin]

🤓

[radiant idol]

you're literally british

shut up

[timid furnace]

dont listen to capt

[hasty ruin]

💪💪🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿🙏🙏💪💪🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿💪💪🙏🙏🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿💪

[timid furnace]

store it as an array of zefram memes

[radiant idol]

so true

I already have two separate funcs to just print the strings

now as to how to combine them

ig

[pearl sail]

I have been saying his dev role needs to be removed and him banned from this channel

Brother I don’t live in LA

I would’ve killed myself already If I did

[wind ravine]

why is it hiding apps that arent webclips

i dont get why it doesnt work

[granite frigate]

am i going crazy why does your weather say tomato soup

[primal perch]

doge

[topaz yew]

@granite frigate hey you work with kfd right

[granite frigate]

ummm why

[topaz yew]

ive been messing with it for the past couple hours and i was just wondering if anyone tried adding entitlements with it

[granite frigate]

what ents

to do what

[topaz yew]

get-task-allow

like

can you set that on springboard

or do i have the wrong idea

[indigo peak]

how do i bundle files into a deb

like

without prefs

add a plist for

loadSpecifiersFromPlistName:

[topaz yew]

with a layout folder, no?

[granite frigate]

no

[topaz yew]

its been pretty interesting poking around, thanks

[ocean raptor]

I'm back

Only cause I need to torture capt with fun codesign bs

@grave sparrow can you figure out how codesign decides what CodeDirectory version to use?

for some reason when signing this ppc binary, codesign uses v=20100 but for arm and intel it uses v=20400

20100 = scatter
20400 = execseg

[native orbit]

cuz ppc old

[ocean raptor]

but how does it know??

[native orbit]

how does codesign know that a ppc binary needs to use 0x20100?

[ocean raptor]

yes

how does codesign decide what CD version to use?

[primal perch]

holy shit he’s back

[ocean raptor]

where is the dsc on macOS??

not at /System/Library/dyld/dyld_shared_cache_arm64e anymore?

found it

i hate cryptexes

[ocean raptor]

I graduated so I have nothing better to do

[native orbit]

my guess is hardcoded for ppc as it has no use for anything past version 2.1 as it's max os version is still 10.5 (10.6?), but idk just a guess

[ocean raptor]

at least until green fees go down

[native orbit]

intel/arm likely just does the newest

[ocean raptor]

not quite

[primal perch]

congrats on finishing jr high

🙏🙏🙏

[ocean raptor]

the newest is 20600 which has linkage stuff and encryption stuff

[ocean raptor]

college actually

[primal perch]

nice

[native orbit]

newest if needed ig, if options arent set to sign with that stuff, no reason to use that version ig

[timid furnace]

can you send the binaries

[ocean raptor]

it's got like a hundred slices

[timid furnace]

are they all the same code

[native orbit]

bro got the infinity stones of macho slices

[ocean raptor]

they say "Hello from <arch name>" I think

Nick Chan gave this to me

cause ldid was segfaulting when trying to sign it

got all that fixed, now just trying to get ldid to mimic codesign behavior

[timid furnace]

@ocean raptor if LC_BUILD_VERSION is present and the platform field in it != 0 it will enable execseg

[primal perch]

https://tenor.com/view/learn-learning-javascript-learns-javascript-stupid-generator-programming-gif-26843752

[timid furnace]

else if the area to sign exceeds UINT32_MAX 20300
else if a team ID is required 20200
otherwise 20100

behavior controlling 20500 is more complicated and idk about 20600

[ocean raptor]

20500 is preencrypt stuff

so weird

[ocean raptor]

where'd you get all this info?

[timid furnace]

security src

mostly cdbuilder.cpp

[ocean raptor]

man

I was just looking there

[naive kraken]

what do we know about execseg btw? I assume it contains info about the only part of the file that is allowed to be mapped executable?

Is this also enforced to the point where you only get exec flags if you map in the entire area as opposed to just some part of it?

Questions and questions…

[ocean raptor]

I have an answer for you

give me one sec to find it again

[ocean raptor]

execSegBase points to the segment that is marked as executable in the initprot of the segment_command, execSegLimit is the size

so usually it'll point to __TEXT_EXEC

or __TEXT

execSegFlags marks if it's a main binary, and some other flags based off of the entitlements https://github.com/apple-oss-distributions/Security/blob/main/OSX/libsecurity_codesigning/lib/CSCommonPriv.h#L96-L106

I'm not sure it's actually enforced anywhere tbh

I don't see anything in apple-oss-distrib at least

[fluid lintel]

Good morning, but to your knowledge is there any way to run unsigned binaries on ios16 arm64e? Or is there nothing usable yet?

[ocean raptor]

unsigned or fake-signed

[fluid lintel]

Yes exactly. Because I saw kfd. That from r/w kernel but without a ppl by-pass you can't make a binary run with an invalid signature. And looking around I didn't find much

[ocean raptor]

Someone test pls

https://github.com/ProcursusTeam/ldid/commit/6c7f767eb2e127123f38bfd68097a64a03deb66e

[tepid olive]

Bet bbg

[fluid lintel]

But this is for signing with a fake signature. But even after doing this you won't be able to start this binary because of core trust and amfid

[ocean raptor]

I am not talking to you

[fluid lintel]

A ok sorry 👍

[sonic totem]

If we had a way to run unsigned binaries it would make code-signing completely useless

Apple won’t just knowingly leave a way to do that in iOS

[fluid lintel]

I know this. In fact I was asking if by any chance publicly there is any ppl by-pass for iOS 16.

[sonic totem]

No

Not that don’t also require a PAC bypass

[torn oriole]

@ocean raptor surely update yt-dlp

Proc version is currently kil

[primal perch]

club penguin is kil

[peak knot]

no

[naive kraken]

I know that iOS 15 is very picky about mapping stuff as executable (as in if you don't use the exact segment bounds, you do not get executable permission) and I'm wondering whether this is what controls that

So if this is what enforces it, I guess you can not have multiple code segments in one library

[hasty ruin]

☹️

[slender glade]

As of today Antoine is 1.50$ 🙂

If anyone needs a code then

HKDJCVGW4MK3WT6MGFW7

[restive ether]

a job

[slender glade]

no

im doing ap bio

no time for anything

all I need honestly is a 3/5

[restive ether]

nah it’s cause you ain’t no citizen admit it

[hasty ruin]

[slender glade]

too little time in a day for both ap studies and a job

[wicked summit]

gm

[ocean raptor]

I have 0 motivation to touch procursus

[visual meadow]

Anybody know what springboard exactly does to spawn a binary from an app

Doesn't runningboardd tell launchd to spawn it at path

[faint stag]

open a pr smh

[faint stag]

RBProcessManager (RunningBoard.framework) has this method
- (id)executeLaunchRequest:(RBSLaunchRequest *)launchRequest withError:(NSError **)errorOut
usual communications with runningboard are encoded XPC
all the xpc headers are in RunningBoardServices.framework and so is RBSLaunchRequest.h

[crisp frost]

will the future updates be OSS

[slender glade]

all will be

i'm not abt that "partially oss" bs

it's 100% oss but paid on chariz

[wooden yarrow]

get that bag

🔥

[slender glade]

🔥

[crisp frost]

🔥

[granite frigate]

🔥

[visual meadow]

Thanks

[visual meadow]

Does telling runningboardd to do it require an entitlement

Anyways:
Springboard reads info.plist
Tells runningboard to execute binary from there

Right

Like

Is it possible to communicate with runningboardd inside an app sandbox

I was able to access its xpc so

[sonic totem]

Would there even be a benefit to doing so

[visual meadow]

I have an idea if it lets you

Like make xpc calls to it like springboard would

[sonic totem]

Yes but this most likely won’t circumvent the userland checks done on an app

If you’re talking install method

[visual meadow]

I might know what i could do

Ill check some stuff when I get home

[velvet path]

can somebody diff 15.7.9 and 15.8 by chance?

[native orbit]

what apple fuck up this time

[velvet path]

that's puaf_smith's CVE

[native orbit]

ios 12.4 moment?

[velvet path]

and in 15.8 that's its only patch

[velvet path]

no because we know it doesn't work as-is

you end up with:

[smith_run:err]: assertion failed: (vm_copy(mach_task_self(), smith->vme[2].address, (0ull - smith->vme[2].address - 1), 0) == KERN_PROTECTION_FAILURE)

[velvet path]

@sonic totem to answer your question in Hack Different, somebody did try it and got this

so the question is, what changed between 15.7.9 and 15.8

[sonic totem]

Ah okay

Very odd

Maybe it didn’t patch the original kernel r/w strategy used in kfd or something

Like, they patched the bridge between the vulnerability and the exploitation strategy or something

[ocean raptor]

I figured it out myself

https://github.com/ProcursusTeam/ldid/commit/6c7f767eb2e127123f38bfd68097a64a03deb66e

[indigo peak]

@grave sparrow @primal perch

gameseagull prefs inside sideloaded gamepigeon

[visual meadow]

Is this latest game pigeon

[indigo peak]

yes

[visual meadow]

Cause some of the cheats broke in latest

Like one shot cup pong

[indigo peak]

?

mine works

im 99% sure thats latest

[visual meadow]

I swear cup pong one shot broke in latest game pigeon lol

Maybe im wrong

[indigo peak]

im 99% sure it the latest

[visual meadow]

ok

[indigo peak]

@visual meadow yeah it is, and cuppong still works

[visual meadow]

how is rest of progress on the app

[indigo peak]

wdym

[visual meadow]

The tweak i meant

For game pigeon cheating

lol

[indigo peak]

oh everything works

except for extend lines

bc that requires mshookmemory

[visual meadow]

Doesnt that need hit

Jit

[indigo peak]

yeah

[visual meadow]

I know how to do jit

[indigo peak]

i dont

[visual meadow]

If you send me an ipa I can try it when i get home

In dms

You have extend lines implemented right

[indigo peak]

n

[visual meadow]

Put it back in

[indigo peak]

i took the whole implementation out

[visual meadow]

Put it back in and send me ipa of it

Yes you can

I know how

[radiant idol]

show us nathan

[visual meadow]

I'm not home

Ill be home in

2 hour

Its jit brother

You will see

[sonic totem]

Is it DDI + debugserver

[visual meadow]

No

[sonic totem]

Is it TrollStore

[visual meadow]

Ye its trollstore

[sonic totem]

🔥💯

TrollStore #1 epic method frfr

[visual meadow]

Does trollstore with entitlements count

[restive ether]

i’m fine with that bet

[visual meadow]

Yes it is

Its still jit

[radiant idol]

how about you publish zefram source instead

[restive ether]

no it’s not true jit lol

there’s multiple forms of jit

[sonic totem]

I mean technically they removed the dynamic-codesigning trustcache check in iOS 17

What if you have an SRD

[timid briar]

Technically a “”stock”” SRD

[native orbit]

inb4 some apple engineer pulls up and get the token leaked

[steady nest]

What if you have jtag

[hasty ruin]

someone make a nonce setter rq

[ashen birch]

on it

[hasty ruin]

🙏

[ashen birch]

trollpynonceset170 coming soon

[radiant idol]

why does xcode have a print feature

I accidentally triggered it

[ashen birch]

sometimes you just gotta study that code like a book fr

[radiant idol]

so true

[timid briar]

Maybe it’s used for like classes where the teacher wants a printed out version for whatever reason

[ashen birch]

me tryna figure out tf wrong with my code on some paper

[radiant idol]

lets be honest for a class they wouldnt be using xcode, they would be using some ide that hasnt been updated since 2002 with java

[ashen birch]

^

[timid briar]

BlueJ best Java ide frfr

[hasty ruin]

Xcode hasn’t had a good update in pretty much the same time to be fair

[ashen birch]

[radiant idol]

real

Xcode makes me question my sanity

[timid briar]

Everyone always says Xcode, but they never ask “how code”

[radiant idol]

well said

[ocean raptor]

I have a manpage printed out

[radiant idol]

of course you do

[restive ether]

that’s next level dedication

[granite frigate]

everyone says Xcode, but no one asks Ycode

[timid briar]

SO true

[cloud yacht]

What about safari. It's using jit on the js, isn't it?

[ocean raptor]

Can’t you jit if debugserver is attached to the app?

[indigo peak]

real

titles dont work

lmao

[radiant idol]

graphic design is my passion

[indigo peak]

real

idk how to get the title to show up

or how to change the color of the switches

but

lowkey

that dont matter

[ocean raptor]

someone give me an encrypted ipa pls

or just an encrypted app store binary

with the signature from the app store

[sonic totem]

Hold on a sec

[ocean raptor]

thanks

[timid furnace]

this is also gta tracker

[sonic totem]

Damn you beat me to it 😅

[timid furnace]

i had the files lying around from the installd shenanigans lol

[ocean raptor]

thanks bro

[sonic totem]

What's 'dnr'

[timid furnace]

do not run

[sonic totem]

lol

[ocean raptor]

VERSION 0x20500! LETS GO

[timid furnace]

lmao

[sonic totem]

What's the diff between 0x20400 and 0x20500

iirc didn't 0x20400 introduce team offset

[timid furnace]

that was 20100

[ocean raptor]

pre-encrypt

[ocean raptor]

0x20400 is execseg

0x20500 is preencrypt

0x20600 is linkage

nobody has reversed 0x20500 or 0x20600 yet

until NOW

[sonic totem]

W

[ocean raptor]

I've gotta figure out how to make a binary that doesn't support execseg still

I guess I need a binary with no executable segments??

need to figure out how scatter works too

[timid furnace]

have fun

[sonic totem]

Oh I remember seeing that in my CoreTrust adventures

[timid furnace]

i will be stealing your work for the ldid JS edition

[sonic totem]

Something along the lines of hashes in different places or something?

[sonic totem]

I'll do ldid-Swift

ldid-Assembly

[timid furnace]

honestly we could probably just take ldid and port to webasm

[sonic totem]

https://ldid.procursus

[ocean raptor]

yeah, I guess but gotta figure out how they are decided and generated

[ocean raptor]

terrible idea

ldid APE binary

[timid furnace]

true i mean ldid codebase is cursed anyway

[sonic totem]

//
// The main page hash array can be "scattered" across the code file
// by specifying an array of Scatter elements, terminated with an
// element whose count field is zero.
// The scatter vector is optional; if absent, the hash array covers
// a single contiguous range of pages. CodeDirectory versions below
// supportsScatter never have scatter vectors (they lack the scatterOffset field).
//
struct Scatter {
Endian<uint32_t> count; // number of pages; zero for sentinel (only)
Endian<uint32_t> base; // first page number
Endian<uint64_t> targetOffset; // byte offset in target
Endian<uint64_t> spare; // reserved (must be zero)
};
Scatter *scatterVector() // first scatter vector element (NULL if none)
{ return (version >= supportsScatter && scatterOffset) ? at<Scatter>(scatterOffset) : NULL; }
const Scatter *scatterVector() const
{ return (version >= supportsScatter && scatterOffset) ? at<const Scatter>(scatterOffset) : NULL; }

https://opensource.apple.com/source/Security/Security-55471.14/libsecurity_codesigning/lib/codedirectory.h.auto.html

[timid furnace]

remember when codesign was open source

pepperidge farm remembers

now it's only partially open source

[sonic totem]

It was?!

That must've been before I was even aware codesign existed

[timid furnace]

yea the actual CLI itself used to be open source and then they removed it

but it's mostly a wrapper around SecCodeSigner anyway

#1084320818231787552 message

[restive ether]

give them man an award

[sonic totem]

I had no idea woah

[primal perch]

iphone 16 pro plus max

[wind ravine]

why do i get a linker error "framework not found Preferences" when trying to compile my preference bundle

it is

thats where the linker error is occurring

i see it in my sdk path

[sonic totem]

Have you got the patched SDK matching your iPhoneOS compiling version?

[wind ravine]

yes

it doesnt work with the 15.0 sdk or the latest sdk

??

ok idk what i did but i fixed it

[wind ravine]

what am i doing wrong with this?

the button doesnt do anything

[hexed knot]

did you debug

[wind ravine]

how

[hexed knot]

NSLog(@"[lemin]");

[wind ravine]

where do i see the log

[native orbit]

idevicesyslog or macos console

[hasty ruin]

when did the bar for orange name get so low

[sonic totem]

Is this channel only for people with the dev role?

[hasty ruin]

nah

public

[sonic totem]

Ohh

[grave orchid]

Can I host a website on my home server

[hasty ruin]

yes

[primal perch]

when you got it

[hasty ruin]

ky

[primal perch]

[grave orchid]

Oh then my code is just shit, lemme fix it

[fiery seal]

(Alfie missed the Froyo incident)

[sonic totem]

Froyo?

[fiery seal]

some random (apparently an administrator on sidestore) who would come to this channel and ask "Any news?" like 2 or 3 times daily before trollstore 2.0 came out

they got banned for being annoying

[sonic totem]

Not surprising at all lol

Had an hour-long Discord outage and the only thing I come back to is a ping for a message “any news for 17.0?”

[fiery seal]

[indigo peak]

wellllllll
is there any?

[sonic totem]

Yes

[primal perch]

[sonic totem]

News: I am waiting for the Google TAG writeup

[blazing warren]

https://tenor.com/view/discord-dead-dead-chat-alive-chat-server-gif-3046424171004137887

[indigo peak]

where is the sandbox binary located in ios

[primal perch]

/sandbox