development

[elfin quarry]

I just hope it's not CVE-2023-32424 lol

instead the one linus found

[elfin quarry]

oh nvm that's a PAC vuln

[steady nest]

what about both

[left lantern]

roller.m -o /Users/royalgraphx/ReviveOTA/build/usprebooter.build/Release-iphoneos/usprebooter.build/Objects-normal/arm64/troller.o
/Users/royalgraphx/ReviveOTA/usprebooter/troller.m:124:5: error: call to undeclared function
      'xpc_connection_activate'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration]
    xpc_connection_activate(connection);
    ^
/Users/royalgraphx/ReviveOTA/usprebooter/troller.m:124:5: note: did you mean 'xpc_connection_create'?
In module 'Foundation' imported from /Users/royalgraphx/ReviveOTA/usprebooter/util.h:10:
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS17.0.sdk/usr/include/xpc/connection.h:147:1: note: 
      'xpc_connection_create' declared here
xpc_connection_create(const char *name, dispatch_queue_t targetq);
^
/Users/royalgraphx/ReviveOTA/usprebooter/troller.m:106:18: warning: unused variable 'xreply'
      [-Wunused-variable]
    xpc_object_t xreply;
                 ^
1 warning and 1 error generated.

** BUILD FAILED **


The following build commands failed:
        CompileC /Users/royalgraphx/ReviveOTA/build/usprebooter.build/Release-iphoneos/usprebooter.build/Objects-normal/arm64/troller.o /Users/royalgraphx/ReviveOTA/usprebooter/troller.m normal arm64 objective-c com.apple.compilers.llvm.clang.1_0.compiler (in target 'usprebooter' from project 'usprebooter')
(1 failure)

where do I get the proper headers wtf

[fluid lintel]

could you point me to which trollstore file i find this on ?

[granite frigate]

copy it from the macOS sdk over

sorry didnt mention it

sweet PPL write :p

https://vxtwitter.com/pattern_f_/status/1737782603036651528

[sonic totem]

Doubt it’ll get released

He’ll probably keep it for further research

[blazing warren]

Only use with unc0ver
😂😂

[naive kraken]

it's either krw -> ppl (0day) or krw -> pac (0day) -> ppl (n-day)

[granite frigate]

or both nday… the phone is on 16.3.1

[naive kraken]

there is no PAC nday

[granite frigate]

oh i see

[naive kraken]

at least none that's publicly known

[granite frigate]

not keeping my hopes up for any release tho 😅

[acoustic imp]

@indigo peak how’s ur game pigon cheats going ?

[west bloom]

Do we have any idea of What iOS that wil support if it release?

[sonic totem]

Well in the screenshot it’s on 16.3.1

So there’s a clue

[blazing warren]

Maybe
< 16.3.1

[wooden yarrow]

there'll probably be a pac n-day within 5 years

so stay on the version

:3

[elfin quarry]

ios 16.4 did fix a PAC vuln

https://www.usenix.org/system/files/sec23_slides_cai.pdf
https://i.blackhat.com/BH-US-23/Presentations/US-23-Zec-Apple-PAC-Four-Years-Later.pdf

[sonic totem]

[blazing warren]

[granite frigate]

cool

[elfin quarry]

https://fxtwitter.com/Fame_G_Monster/status/1711501845762576854 lol

[granite frigate]

yeah this was a bit ago. i forgot

[fluid lintel]

could someone please explain to me how the tweaks part works on trollstore, I just can't figure it out, or point me in the code which flow to follow

[sonic totem]

Wdym the “tweaks part”?

[fluid lintel]

I read on x that it is possible with trollstore to run tweaks on other processes ( even on the springboard) but on the code I can't see where this part is. Also because I knew that without PPL bypass this was not possible

[elfin quarry]

even on the springboard
that's only possible with KFD

[elfin quarry]

and this part isn't built into trollstore

it's the bug that allows it

[sonic totem]

^^^

[fluid lintel]

a ok, but with KFD you want to know is there an example of this on any github repo?

[west bloom]

I don’t think anyone have achieved springboard injection with TrollStore and kfd yet

[urban moon]

Anyone knows if there are similar resources to this handbook on arm?
https://azeria-labs.com/writing-arm-assembly-part-1/

I wanted to gets hands-on, but specifically on iOS device (arm64). The guide is tailored for 32bit. I have a arm64 jailbroken device, so I thought might just as well fully utilize it without getting additional hardware. Corellium is so expensive for me.

[fluid lintel]

ok thanks 🙂

[west bloom]

But if you want to try the best ^guide I can give you^. Would be reading this conversation with jb hub Evelyn and Jake James

https://x.com/eveiyneee/status/1736078446583816306?s=46&t=uESiJ_nOfdZzD0m-rYigOA

[fluid lintel]

ok thank you i will try

[granite frigate]

1. injecting tweaks into other processes isn’t with trollstore, it’s by using the bug that trollstore uses

2. tweak injection into springboard and other system binaries is only in theory, no one has actually written code to try and do it. what evelyne has suggested is, (with KFD), symlink the system binary to a fastpathsigned binary that can do whatever you want with. afaik this is so that the codesign cache is removed

3. on app store signed apps, this can be done by fastpathsigning your dylibs to have the same teamID as the app binary’s teamID. currently, fastpathsign can only sign binaries to the teamID of GTA car tracker. to change fastpathsign / ChOma to sign binaries to any arbitrary team IDs, you’d have to:
   (from Alfie)

1. Pass in the App Store-signed app
2. Create the custom signature blob structure by adding in extra SignerInfo and CertificateChoice elements
3. Update load commands and CodeDirectory hashes in SHA256 CodeDirectory
4. Update signed attributes in the new signature blob
5. Generate signature

[fluid lintel]

OK clear, I will do some tests. One thing a little different, once I enable jit in my process is it possible to download a dlyb and start it in memory ? because to my knowledge it is not possible to start in memory dlyb that are not inside the app, but from some tests I did I realized that if the app is in debug I can do this thing. Could it be related to jit ?

if this my thinking is right then you could start a system app enable its JIT and then have a signed dlyb loaded into memory with fastpathsign or not ? even though doing so would not achieve anything because it would be a second app anyway and I would not go touching the original one

[granite frigate]

yes you can dump a system app and use opainject to inject dylibs into a trollstore installed version of it

just not that practical and a bit dangerous i think

unless you changed your installed app’s bundleid

[fluid lintel]

I was saying without changing the system app physically couldn't you start the app with active jit lock it in the main and have our own dlyb loaded there. In theory if the dlyb is signed with fastpath it should go. A Maybe not , because the teamId is different

[radiant idol]

https://github.com/beeper/phone-registration-provider

lol nice

[radiant idol]

can this not be exploited?

or is it unstable

[elfin quarry]

I have no idea

Just a thing I found while I was searching for the PAC CVE

[radiant idol]

Interesting

[indigo peak]

good

[cursive rampart]

gonna try this later

[radiant idol]

Lol

[cursive rampart]

i have a 7 plus with taurine so i'm set

[radiant idol]

I just find it amusing that a company had to resort to jailbreak tweaks to get their stuff working

[cursive rampart]

cause jailbreaking is epic

[radiant idol]

So true

[cursive rampart]

inshallah rcs ios

[granite frigate]

they’re just coping atp

[radiant idol]

So true

[restive ether]

you mean imessage android

dumbass

[cursive rampart]

how about both

i want both

[left lantern]

could you be a bit more descriptive? or possibly a link to said proper SDK

[granite frigate]

1. go to wherever the macOS sdk for xcode is on your device, typically it’s just in Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs
2. copy over xpc.h files and bootstrap.h file over to the iOS sdk which you are using to build

[left lantern]

ohhhh bruhhhh

i see now

[left lantern]

excuse the ping, can I ask what SDK you're targeting? atm, it's ofc set to 17.0 by default as i've not set up anything previously regarding theos at all

i notice when im building there are multiple versions being used, 15.2, 15.5, and 17.0, so i'm just confused as to how I can unify them all, or wtf is going on with my environment atm

wait i may just be slow asf, i just read the log as discord formatted it much cleaner lmfao

nope, they're there

[faint stag]

you can specify which sdk version to target in the makefile for the theos project

but theos will only use ones that exist in $THEOS/sdks unless you specify a path yourself

[left lantern]

ah shit, i completely forgor, yeah setting it to latest has fixed theos issues

but im still getting build errors with trying to compile the rest with the 17.0 sdk in xcode

[faint stag]

it said it couldn't find launch.h and foundation failed for some reason

[left lantern]

yeah, i've deleted all sdks in theos, and i'm gonna attempt to generate fresh one myself I guess

then maybe reinstall that simulator/sdk

[timid furnace]

you need to copy launch.h as well

[faint stag]

^

[timid furnace]

and make sure your system include path is configured properly

[left lantern]

oof from the macOS SDK? alr bet

yeah custom IDE that only does one thing

sadge

[faint stag]

yeah you need launch.h when doing stuff that goes through launchd
which makes sense for xpc

[left lantern]

luh mao, thought i moved it over before from a downloaded launch.h

it only looks nice

[summer zealot]

GM

[faint stag]

i mean it being proprietary has some justification

[left lantern]

okay finally

LMFAOO

the app crashes on my device but im pretty sure thats just because im using 16.5 theos and 17.0 SDK so, need to get on 15.5 for those i guess

it also could be that since I didnt make any changes to the app, its prob empty lol

[faint stag]

i mean

you could find out exactly why from logs

[left lantern]

thats true, where @? just on console? or did you mean at a path on iOS

interesting lol

[faint stag]

crashes generate a log file
or you could look at console too ye

log file would be more helpful here though

since it will typically tell you what terminated it and why

[left lantern]

mmm could you tell me the path its at? I'm assuming ~/Library/Logs/CrashReporter or something? idk what it is for iOS

[faint stag]

i don't remember the path but ios lists them in settings > privacy > analytics > analytics data

from there you could search for the name of the app and the log should be there

[left lantern]

wow yeah nothing there

damn RIP

its all good ill get on 15.5 SDK as to eliminate that possiblity anyways

[faint stag]

/private/var/mobile/Library/Logs/CrashReporter/
yeah

maybe you don't see it in the syslog since you filtered to the bundle tho
at some point it could've been referred to by the executable's name or PID at the time so

[radiant idol]

@hasty ruin what do you think of my types

[hasty ruin]

I’ve done far worse, don’t worry

[radiant idol]

such as?

now I need to know

[hasty ruin]

like 6 levels of that

[radiant idol]

whaaaaat

[hasty ruin]

Why not type the array??

[radiant idol]

why

I mean I guess I could

fine

no

too much

[hasty ruin]

[radiant idol]

you're going to ham on that beeper project lmao

[turbid fjord]

This is worse than Swift!

[radiant idol]

it is

[radiant idol]

can I typedef this somehow or something

this is attrocious

to look at

[hasty ruin]

i was gonna do a third but decided 2 was enough lmao

[radiant idol]

what were you gonna do for the third one lol

[timid furnace]

whar

[radiant idol]

but that's zefram

zefram is special

because it is written by c*pt

that's just as big as mine

in fact I think mine is bigger

NSDictionary<NSString *, NSDictionary<NSString *, NSDictionary<NSString *, NSString *> *> *> *map;

still bigger

woohoo

[faint stag]

type measuring contest

1 point for length
0 points for readability

take a joke

smh

[radiant idol]

so true!

what is the way to do that in swift

[sonic totem]

URL.stringByAppendingPathComponent()

[radiant idol]

oh

mmm maybe swift did something normally for once

[left lantern]

LMAOO

[faint stag]

doesn't really work when they provide the same files

lol

[timid furnace]

install rosetta homebrew

profit

[faint stag]

bru

yeah that'll work

[wicked summit]

gm

[zenith compass]

arch -x86_64 zsh
install brew in this session

[faint stag]

wait i thought you could just cross-compile

wtf

[timid furnace]

well yea

that's the other option

just build brotli yourself

and then statically link it

[summer zealot]

Is M1 still good for simple Xcode projects?

[hasty ruin]

yes

[radiant idol]

yeah

M1 is a decent PC

[lament turret]

can anyone recommend me some devs for a projoect ? dm me

[sonic totem]

You should probably explain the project a bit more

No one will just give you a list of developers

[radiant idol]

except the kernel panics

very weird occurances

L

but aside from that its good yeah

odd

that sounds quite sketchy

[timid furnace]

Dude I just have fucking stalls in the DCP code somewhere

Internal display dies while external works fine

[summer zealot]

Microsoft moment

[left lantern]

lmaooo

[fiery seal]

Who are all the people who have found PPL bypasses?
To my knowledge, it is 3 people (Linus Henze, pattern-f, Asahi Lina) and I'm wondering if there's anyone I forgot
(This question isn't really dev related but I'm posting here at the advice of Nightwind)

[granite frigate]

bazad

[fiery seal]

thanks

https://bugs.chromium.org/p/project-zero/issues/detail?id=2035#c4

Fixed in iOS 13.6
ancient ahh PPL bypass

[granite frigate]

he’s the OG

[timid furnace]

how much do you care about properly building it

build normal

build rosetta

lipo

otherwise look up how to cross compile with meson i guess

never used it

[pearl sail]

Bring a loaded gun with you as well

[restive ether]

except that requires a mac

https://tenor.com/view/sad-gif-13261737358986789359

this seems like something hayden has already done and he’d called you stupid for not figuring it out

what do you need an ini parser for

[left lantern]

so its arch -x86_64 and whats the identifier for apple silicon? arm64?

Mmm

[pearl sail]

Meson build system is like cmake

[left lantern]

ok ☠️

i guess

[restive ether]

what did you plan on accomplishing there

[ocean raptor]

meson is super easy to get to cross compile

Way better than all the other alternatives

lipo

look at procursus

build_misc/templates/ there is a file for meson

[restive ether]

see procursus does it all

[ocean raptor]

Basically make a cross.ini that does cc = xcrun -sdk macosx cc -arch x86_64

I will not help you more than that

Until you show me that you actually tried

BORING!

DONT BUILD AS FAT

[cloud yacht]

Build armv7

[ocean raptor]

It never works

“Why shouldn’t I use this thing that I just complained about not working” - capt

[tepid olive]

hahahaha so your momther

im sorry

[radiant idol]

go away

member plus

this is for devs

/s

[tepid olive]

im sorry bbg

im outta here

[radiant idol]

👋

[cloud yacht]

Oh I guess that means I should go

[radiant idol]

oh what

why do you not have dev

[cloud yacht]

Uhh I didn't qualify

[radiant idol]

oh?

[cloud yacht]

Idk maybe I do now

It's been a while

[faint stag]

apple when they ship every binary as FAT:

though i guess it makes sense cause of rosetta

[radiant idol]

theos also currently builds all tweak dylibs as FAT

even if they have a single slice

[faint stag]

oh right, libs

fun fun

[timid furnace]

i mean

you lose nothing by doing so

its probably easier to just unconditionally do it, or it might just be a byproduct of how its built

[radiant idol]

yeah true

there is an open pr to change that though

[lime pivot]

I think I saw the team working on making single-arch binaries build as non-fat

[radiant idol]

yep

[radiant idol]

^

[lime pivot]

oh true I should read

[radiant idol]

lol all good

also gm adam

[lime pivot]

gm

[minor vortex]

Hello, sorry to bother you, I thought I heard that it is still possible to upgrade to 17.0 (I'm jailbroken with Taurine 14.3), with Dallas or Palllas I just saw someone who succeeded, can you please confirm?

[timid furnace]

that was a special case

[hexed knot]

Tf texas gotta do with jbing

[timid furnace]

lol

[minor vortex]

Oh no 😦

[hexed knot]

No in dead serious

Idk shit

[minor vortex]

I thought it was still possible, I was hopeful when I saw the guy upgrade to 17.0 by forcing the update or something.

[timid furnace]

pallas is the OTA server

my budget hax one is called dallas

[timid furnace]

it requires a bunch of manual work from me and i don't have the time to do that now

assuming i even have data for your device to begin with

[minor vortex]

Okay no worries I can wait if I have to, there's no problem if it suits you, unless you have a lot of work and the chances are minimal 😦 which I also understand.

I don't want to hold you back in your work

I'll wait as long as it takes, otherwise I'll be stuck with it

[hexed knot]

What does this mean

[minor vortex]

I'm so angry at myself for not wanting to upgrade, I'm losing support for almost all my applications, I'm just a moron that's what I am

[timid furnace]

Pallas is the codename for the server where your iOS device looks for updates

i am uncreative

[hexed knot]

Oooh so u like make a custom one

[timid furnace]

so i made my interposer thingy Dallas

[hexed knot]

And it says yo you can update to this version

[timid furnace]

basically

[hexed knot]

But in reality u cant

But cuz u hacked it u can

[timid furnace]

well you still can, TSS is signing it

my server in the middle is just feeding the right parameters to make Pallas return XYZ

[hexed knot]

Oooh but pallas by default gives the latest version

So u say ok lets pretend this the latest version and boom

[minor vortex]

You're a genius wtf

[timid furnace]

in most cases, my server quite literally inserts "give me XYZ" into the request

sometimes its a bit more work

ie. security updates for devices that didn't support that (apple added support with 14.5)

[minor vortex]

I'm on 14.3 with Taurine, so it should be easier, but as I said, I don't want to bother you, I've just seen the guy who's succeeding thanks to you.

#jailbreak message

[timid furnace]

what device do you have

if i am available later i will check if it's possible

[minor vortex]

iPhone 12

[timid furnace]

mini or normal?

[minor vortex]

I'd be so happy, I'm always available, I'd wait until you are.

normal

[minor vortex]

norman

[timid furnace]

ok i will look later

[minor vortex]

Thank's you Dhina 😄

[timid furnace]

@ocean raptor what's the best way to normal reboot

[ocean raptor]

reboot(8), shutdown(8), launchctl(1)

You’ve got lots of options

They’re all identical

[timid furnace]

do any of those exist on stock

[ocean raptor]

No

shutdown(8) is only on procursus, elu and tele don’t have it iirc

Just use reboot3(3)

[timid furnace]

is my best option to just copy the reboot code then, which essentially consists of

sync();
(void)signal(SIGHUP,  SIG_IGN);
(void)signal(SIGINT,  SIG_IGN);
(void)signal(SIGQUIT, SIG_IGN);
(void)signal(SIGTERM, SIG_IGN);
(void)signal(SIGTSTP, SIG_IGN);
(void)signal(SIGPIPE, SIG_IGN);
exit(reboot3(howto) == 0 ? EXIT_SUCCESS : EXIT_FAILURE);

do i need the signals

[ocean raptor]

No

That’s just so that you can’t ^C and stop it

[timid furnace]

ah alr

[faint timber]

evil

[timid furnace]

so sync & reboot3 it is

[ocean raptor]

the sync() is probably a good idea, but unneeded tbh

[timid furnace]

no loss from including it ¯_(ツ)_/¯

[ocean raptor]

https://github.com/ProcursusTeam/launchctl/blob/main/reboot.c

[timid furnace]

yee have already been looking at that

thanks

[minor vortex]

I have time to go eat and take a shower, do you think?

[timid furnace]

yes

i need to sleep

[minor vortex]

I'll see you tomorrow

Good night

I'd love to know if this is possible, and if it is, going straight to TrollStore would be great

[minor vortex]

rest well and take care of yourself

[sage kite]

Quick question (sorry this is a macOS question but idk what to search): When I make a macOS app in for example XCode, and 7 days after compile it complains that it can't be opened anymore (I guess its to do with free developer accounts only being able to sign apps for 7 days), is there a way to disable this check on macOS?

[primal perch]

cant you just right click open it

[slender glade]

Fixed the page on chariz like 2 days ago and now there’s actually sales… I always knew you guys were part of the #antoine squad

(Sorry for all the sudden promotion and price stuff, uni and some other stuff is coming up so)

[lime pivot]

squad

glad you're getting some sales 🚀

[slender glade]

🫡

[topaz yew]

hey how do i find a virtual address in another process

im trying to use it with vtophys in kfd

[frank fossil]

I’ve thought of another way to sandbox app after enabling JIT, by execv() to binary with restricted entitlements, but it turns out really weird. App home directory is changed to GTA Car Tracker’s PlugInKit data directory. Any ideas?

[sonic totem]

It’s somehow triggering the TrollStore bug where all apps share the same data container

Have you specified the entitlement for your plugin to fix this?

https://t.co/HU4nA0QvH1

[turbid fjord]

MORE SALES THAN NEXUS WWWW

[gaunt helm]

i had to buy another gift so it's at least 18 now

[turbid fjord]

Probably more sales than rune too

Fr

[slender glade]

okay u can shut up the joke isn't funny the 2nd time

does anyone know how the hell do I make a window draggable anywhere like PIP

[harsh junco]

why i cant build static irecovery?

....
make[2]: Entering directory '/home/Admin/libirecovery/tools'
  CC       irecovery-irecovery.o
  CCLD     irecovery.exe
C:/msys64/mingw64/bin/../lib/gcc/x86_64-w64-mingw32/13.2.0/../../../../x86_64-w64-mingw32/bin/ld.exe: irecovery-irecovery.o: in function `postcommand_cb':
C:/msys64/home/Admin/libirecovery/tools/irecovery.c:344:(.text+0x1b7): undefined reference to `__imp_irecv_getenv'
...```

[slender glade]

it means that the function _imp_irecv_getenv is defined and used but the linker can't find the reference to it

[harsh junco]

so i need to link library with this function?

[slender glade]

well yes but presumably _imp_irecv_getenv would be in irecovery...

[west bloom]

https://fixvx.com/lfy_trav/status/1738233582315864144?s=46&t=uESiJ_nOfdZzD0m-rYigOA

[harsh junco]

[left lantern]

this is an interesting development

[proper reef]

did you not link it to libirecovery

[left lantern]

modified sileo? seems like everything hes using has already been shared

[ashen birch]

why does he keep saying turbo’s producer tag 😭

[west bloom]

Lmao

[left lantern]

now im curious lol, im going through the guy he replied to's github, and he's gotten things decent with just a CT bug

[harsh junco]

you mean -lirecovery-1.0 ?

[west bloom]

I am just get so confused lol

[left lantern]

wdym

[west bloom]

It looks real but are probably fake

[radiant idol]

Wym

[left lantern]

https://twitter.com/TranKha50277352/status/1730223940818075978

what if its possible to do that to springboard lol

a respring would make sense?

[radiant idol]

I guess

[left lantern]

and, the guy sharing the AOD previously thanked someone for sharing the sileo ipa

so, assuming its modified to run on TS/CT

https://twitter.com/TranKha50277352/status/1731951879872270453

[radiant idol]

It does say “unknown jailbreak” instead of “palera1n (rootless)” which is what it said before iirc

[left lantern]

unknown jb possibly because there is no jb

its just CT

[radiant idol]

No but the thing is

When you bootstrap

[west bloom]

Well xina also says unknown jailbreak

[radiant idol]

It bootstraps with the palera1n bootstrap

So Sileo thinks you’re using palera1n even though you aren’t

[left lantern]

in this case we're talking ab a device thats iphone 14pro max, i dont recall whether it has any exploits on 16.5 thats a jb

other than trollstore

[left lantern]

hence modified ipa

lol

[radiant idol]

Well no

Sileo just checks if a file is present in the filesystem

[left lantern]

why no? bro prob patched it out

[radiant idol]

Delete that file, and Sileo won’t know what jb it is

[left lantern]

and it falls back to a default?

[radiant idol]

Yeah

Which is “unknown jailbreak”

[left lantern]

couldn't you just patch out the default?

i thought sileo was fully OSS

[west bloom]

@nimble oriole anything to coment?

[radiant idol]

Yeah but this is easier

https://github.com/Sileo/Sileo/blob/83bbf7196f5105204b631c54a3ab5982a001d6cb/Sileo/Backend/Root Wrapper/Jailbreak.swift#L75

[left lantern]

my theory is, simply modified sileo ipa shared by dude he thanked, he is on 16.5 meaning he does have exploits, and the guy he thanked has the ability to fast sign and load tweaks into non apple store apps, which in theory could explain the respring, if bro is crazy and modifed springboard app container

[radiant idol]

This is the place where the checking happens

[left lantern]

and the deb

the deb is fixed up to work on CT/rootless i guess

its just patches all around ofc, same as when rootful -> rootless, but now even more restricted to containers, but atleast CT can still do things such as the tweet above apparently

[radiant idol]

You’re talking about Cylinder?

[left lantern]

ye, the deb he installs lol

[radiant idol]

Hm

[left lantern]

mhm c:

[sonic totem]

@radiant idol trav dropped a new video that looks even more realistic

[left lantern]

have you seen it?

[radiant idol]

I mean it’ll still install because all the bootstrap files for palera1n are there

[sonic totem]

I now realise you’re all talking about it

[left lantern]

bomboclat

[radiant idol]

Yeah we’re discussing that

[west bloom]

What do you think

[left lantern]

ye, and the possibility of it being possible, with enough effort lmao

[west bloom]

He is confusing me so much

[left lantern]

atleast from @TranKha50277352

TS2JailbreakEnv

[harsh junco]

make LDFLAGS="-all-static -lreadline -lncurses -lirecovery-1.0"
same

[left lantern]

ok so he patched it

answers my question

has his own bootstrap

[drifting heron]

wait this looks legit

[left lantern]

it is c:

[drifting heron]

[left lantern]

read the rest till now as well, seems fully possible

[radiant idol]

Well we’ve always known that it was possible

[drifting heron]

why does he keep dropping his phone

[radiant idol]

We’re just not sure if that guy actually made it work

[left lantern]

throwing something to someone to the floor is a sign of disrespect basically

[left lantern]

well, only one way to find out, he's given the sauce out and explained it decently, i'm sure someone more talented than I would be able to take an actual attempt at it, and get it to work, so we can't say its fake atleast, but him flexing like he made it, is a lul rough

[radiant idol]

Mhm

[radiant idol]

One could ask him for the hash of the cylinder deb, presuming it needs to be patched in order to run in such an environment, the hash would be different

If it is the same, then something might be up

[west bloom]

Soooooo are we believing it’s real now or still fake?

[left lantern]

thats true, if the deb file is mishashed, itll let us know right away

esp since he explicitly shows he is not installing the tweak from sileo, but instead simply using sileo to install mentioned deb

also i've been out of the game so long i finally learned what procursus is lmao, jesus so much has changed

[radiant idol]

daaang

How long have you been out for?

[left lantern]

since iOS 11 to 12 tbh

i did jailbreak up until 13.5, but by then, i was just enjoying jb not actually doing anything productive

https://gist.github.com/khanhduytran0/675bba3db59bb7fac3ceaa49f2ef24e1

check this out though

its crazy we're on iOS 17, jesus

[radiant idol]

Did you update ur tweaks for rootless though

[left lantern]

never lol, i only ever dropped two things, one was a literal small thing i made simply for when i got into theming (showed app bundle ID on 3d touch) then apple killed 3d though, and then the second, i was da one who decompiled game pigeon c: and posted that on gh

but by the time i did, i had to restore to 15.5 ☠️ never did anything with it

[radiant idol]

i see

[left lantern]

yeah, i mean i guess now theoretically i can work on GamePigeon hacks still, but that would be kinda yknow, trivial having to install a modified copy of the game

[radiant idol]

you should make tweaks

[blazing warren]

POPCORN JELBREK :V

[left lantern]

i’d like to, i just have no idea where to start atm, being made to relearn everything in this climate is tough lol

[radiant idol]

Weeeeellll

[left lantern]

as far as me being on iPhone XS Max, and on 15.5, i can use kfd or only CT bug?

[radiant idol]

https://nightwinddev.github.io/Tweak-Tutorial

self promo

shameless

[left lantern]

wow you’re cracked

[radiant idol]

but yes

[left lantern]

nah that’s me asf

[radiant idol]

hahaha

[left lantern]

ong

[left lantern]

and so, it’s just that KFD is unreliable? or unstable 😵‍💫

or both lmfao

[radiant idol]

no kfd is fine

should work

[left lantern]

ah, good, that’s just fud then

[radiant idol]

it just needs offsets for every single device + iOS combo

[west bloom]

He confuses the shit out of me

[radiant idol]

that’s mainly the reason it’s quite annoying to deal with

but I think someone managed to make an offsetfinder

so that shouldn’t be an issue

[left lantern]

i thought someone made a lil tool a while ago for finding?

ah yeee

decent decent then, i have fiores troll decrypt but it doesn’t show imessage extension applications, any way you’d think i could add that?

oh actually, this may be tricky

[radiant idol]

I wouldn’t know, no

[left lantern]

crap yeah i may have to actually uh, make a tweak for gamepigeon first, that loads classdump or something, but basically i need to generate new headers c: are there any macOS tools that could do that with just the binary?

because basically, reason why imessage extensions are a PITA to dump is cause they only remain active while the window is in focus ☠️

[radiant idol]

shouldn’t class-dump work

i can’t remember

[left lantern]

if not it’s insta dead

[radiant idol]

there is also ktool which should work

never used it though

[left lantern]

ooo i saw that

[timid furnace]

unsure if ktool works on the newest binaries

try it first though

[left lantern]

ah okay, but to my understanding it’s kinda like IDA pro where it reverses it and gets the headers?

[timid furnace]

no

[radiant idol]

https://github.com/0cyn/ktool

[timid furnace]

it doesn't really reverse it

[left lantern]

ah it’s in the binary

[timid furnace]

all the metadata is in the binary already, you just need to take the pieces and put them together

the problem is every year apple changes some aspect of the format

[left lantern]

oof wow

dope, so i can theoretically yoink the apps executable from filza, and open with ktool? that would be nice lmao

[radiant idol]

Try it

[left lantern]

ong bet

[radiant idol]

I also have done example tweaks on my GitHub if you’re curious about all the rootless stuff

Pretty simple though

It’s just a macro

[left lantern]

yezzz ill def be bugging you lmao, atleast until i finally get to understanding

[timid furnace]

people conflate rootless as much harder than it really is

its just because people are often updating their tweak for 15+ at the same time as well

so depending on what you're doing there may have been no changes or a lot

[radiant idol]

Yeah

[left lantern]

would either of you happen to have a template application that would basically build into a blank app that works with TS?

thats a decent repo idea

[radiant idol]

It’s just annoying for tweaks that won’t be updated for one reason or another

[timid furnace]

use whatever template theos has

[left lantern]

dope, ill check that one out

[timid furnace]

to build it into a ts app you add entitlements as necessary and rename the ipa to tipa

pretty simple

[left lantern]

most have their tweaks still closed source or something?

[left lantern]

lol aint no way lmaooo

[timid furnace]

if you dont need entitlements you can just feed it the ipa directly into TS

yea tipa's aren't special

[left lantern]

and then whats tsroothelper for?

[timid furnace]

the only reason it exists pretty much is to make airdrop work

[left lantern]

ahh

[timid furnace]

trollstore's root helper?

[left lantern]

yeah i saw that lol, airdroppable application or something

[timid furnace]

that's just how TS does anything that needs root

[radiant idol]

Closed source tweaks can be patched for rootless, but that’s quite difficult if you don’t want to use symlinks. Open source tweaks can just be compiled for rootless with very minor changes

[left lantern]

ah yeah cause i'd like to be able to basically have access to the filesystem and spawn arbitrary binaries, i wonder if i could get classdump-dyld or its derivatives working somehow on-device again

[left lantern]

decent decent

[radiant idol]

iOS 12’s rootlessJB (if you remember that) patched them with symlinks

But that’s quite hacky

[slender glade]

middle school times

[radiant idol]

Lol

[left lantern]

oh bplanks?

[radiant idol]

Ye

[left lantern]

nah i didnt get to use it

a11

[radiant idol]

I see

But yeah just saying

[slender glade]

the transition period between iOS 10-12 jb impls looking back at it now was so mesmerizing though I knew nothing at the time abt how they were implemented

[radiant idol]

Haha

[left lantern]

crazy how the twitter scene still rages on

never a rest

[radiant idol]

Yeah but it’s quite quiet now comparing to before

Unfortunately

[drifting heron]

if someone wants a tweak idea suggestion this would be very neat to have on older iOS versions https://www.macrumors.com/how-to/make-haptic-touch-faster-on-iphone/

I think there was a tweak that forced 3D Touch and it was quick but hasn't been updated in a long time

[minor vortex]

@timid furnace Hello Dhina, How are you doing? hope you slept well, I am yesterday's person regarding the 17.0 update on the 14.3 iPhone 12

[naive kraken]

stop giving this dude attention, this shit is 1000% fake

[sonic totem]

Oh he’s now saying he’s written a jailbreak?

[tepid olive]

Exactly

[sonic totem]

Even faker now

[tepid olive]

Like bro we only have a coretrust bug

[acoustic imp]

@radiant idol will all the new tweak injection while being jailed, will it come to iOS 15?

Also will it “fix” spinlocks ?

[west bloom]

The app tweak injection?

[acoustic imp]

Yea, and the possible springboard injection

[radiant idol]

No, spinlock panics will only be fixed on versions that Apple fixed them on

Afaik Apple fixed that particular bug some point after 15.5

[acoustic imp]

🥲

[radiant idol]

or if a KTRR bypass is found

[sonic totem]

It’s technically possible to fix

If the issue is what it’s theorised to be, it can be fixed

[radiant idol]

well

opa has been trying to fix it for so long now

in #1084320818231787552

[sonic totem]

He only properly diagnosed it a few weeks ago iirc

It’s possible but atm the attempted fixes are not working

[radiant idol]

interesting

[sonic totem]

This is assuming the diagnosis is correct though

[radiant idol]

well but those aren't fixes, they just get around the bug in pmap, no?

[sonic totem]

Oh yeah

But it would fix the actual panics happening

[radiant idol]

you'd need a KTRR bypass to actually fix the bug

[sonic totem]

Or a bootchain exploit

[radiant idol]

good luck finding one :P

[sonic totem]

Gonna try at some point

[topaz yew]

i hate pmap

[radiant idol]

L

[sonic totem]

If you hate it so much just find a bypass for it

[radiant idol]

does pmap stand for process map

probably

[cloud yacht]

can a trollstore installed app prevent itself from being killed in the background by iOS?

Like a daemon lite

Without like using location or playing music

[left lantern]

even apple music will get killed when it uses too much memory

so who knows lmao

[cloud yacht]

Assuming I don't use too much memory

The maps app can keep itself around when giving directions but I wouldn't be surprised if that was partially the location services

Also it has an annoying pill

Like let's say I wanted to persist to handle cron jobs or run a simple server that doesn't use much resources

[topaz yew]

physical map

i thnk

pretty sure

[topaz yew]

i heard the bsd thingys work

[native orbit]

debugging asm by only using a crash logs printed thread state is not it man

[radiant idol]

is this related to the "project" we're working on

or just general frustration

lmao

[native orbit]

it is not

[radiant idol]

ah

ok

but yeah that sounds painful

[native orbit]

hardcoded patching moment ig

[radiant idol]

should've just done front end dev smhsmh

[native orbit]

never

[naive kraken]

I never diagnosed it

[cloud yacht]

Do they persist when the app that launches them dies?

[naive kraken]

it's impossible to diagnose

[sonic totem]

I meant the big description in the issue on the Dopamine repo

[naive kraken]

I just collected all the info I know of and concluded is must be something related to shit being paged out

[sonic totem]

Ah

[naive kraken]

but like

that I could tell months ago because the issue is triggered when something tries to fault in memory

[topaz yew]

im pretty sure

i havent tried it though

[cloud yacht]

Ok I'll take a look later

Like which bsd thingies?

[topaz yew]

bsd daemons

oh

trollstore

not so sure

[native orbit]

bootstrap apis work fine

[cloud yacht]

So can I daemonize something?

I thought trollstore only worked with things launched via springboard and down and not daemons

[native orbit]

not a real daemon

[sonic totem]

You can have UIDaemons but not LaunchDaemons

[cloud yacht]

Hmm never heard the term UIDaemon

Sounds promising though

[minor vortex]

Once Tatsu doesn't sign iOS 17 I won't be able to upgrade, right? I hope to upgrade before then 😦

[timid furnace]

it is still signed

[odd timber]

17.0?

[minor vortex]

Yes

window closed but still signed with tatsu

i think

[timid furnace]

yes

[minor vortex]

But it requires manual work and that's not easy.

I hope you can find the data for my device, I'd be so happy

[odd timber]

First time I'm hearing about this. IPSW.me says it's unsigned and ik the delayOTA window is closed. Where can I read more about this?

[timid furnace]

ipsw.me never had delay OTA status

[minor vortex]

it's something that only someone who knows about it can do, it's not for novice users if you know what I mean, it requires knowledge

[left lantern]

?

whats this?

MDM style delayed update?

[timid furnace]

damn you gir

[left lantern]

dang

[faint lion]

iPhone 12

All brand names

iPhone 12 mini (iPhone13,1)
iPhone 12 (iPhone13,2)

Model(s)

A2172, A2176, A2398, A2399, A2400, A2401, A2402, A2403, A2404, A2405

Latest firmware

17.2.1 (21C66)

SoC

A14 chip (arm64e)

Powered by https://appledb.dev

[timid furnace]

it's this right

yea it is

D53gAP

[minor vortex]

its my device yes

[left lantern]

huh thats interesting asf

any way i would be able to do such method dhina?

[timid furnace]

no

need jb

[left lantern]

ah yeah seems to be Apple Internal related, makes sense

[timid furnace]

#nathanlr message

[odd timber]

Being an apple employee with access to the TSS room?

[timid furnace]

i wish

[left lantern]

need that juicy apple vpn profile

[odd timber]

what kinda knowledge then lmao

[timid furnace]

nowhere

[visual meadow]

hopefully that japanese guys thing is actually legit

then someone can try and modify it to work on 16

i doubt its legit tho

[timid furnace]

it ain't legit until you can use it

tried and true mantra

[visual meadow]

yeah

send tim cock an email

[timid furnace]

already checked there didnt find it

lets convince us lawmakers that we need to make tss keys public

given how inept they are with technological issues it shouldnt be that hard

anyways

[visual meadow]

Does that webkit bug even work on 16

Has anyone tried to get it to work lol

[sonic totem]

It doesn't work iirc

[visual meadow]

But it was patched there

Weird

[sonic totem]

Well the PoC doesn't work there

But the bug probably works

[visual meadow]

Shouldn't be too hard to make it work on 16 I gues

s

[sonic totem]

Why does T8011 have to be unique and have a random checkm8 issue

[visual meadow]

Apple™️

[odd timber]

some kinda repeat of 15.6RC1👀

[left lantern]

Mmm

[timid furnace]

@minor vortex https://cdn.discordapp.com/attachments/688122301975363591/1187269030474698792/Dallasfunnyshenanigans.signed.mobileconfig?ex=65964573&is=6583d073&hm=cc3a7c744b806f5f4441727a6d5ea8a12ea0e514744fe5126adf1a17a96d7b34&

[minor vortex]

OMG Thanks i'll try this now

[minor vortex]

Can I follow the ioscfw update (blobless) tutorial? then it seems to me that I have to keep TrollStore open in my appswitcher to recover it on iOS 17 otherwise I’m fucked

[timid furnace]

yes follow that tutorial

[minor vortex]

thank's you man

[minor vortex]

The profile is available until when? I'm finishing the work I have to do. I'd just like to know how much time I have left to install it

[timid furnace]

i genuinely have no clue

you probably have at least 12 hours

but i can't guarantee that at all

[minor vortex]

Thank you

[minor vortex]

I have 62/64gb of RAM in use, do I need to make storage in order to upgrade? or it doesn't matter

[timid furnace]

uh

RAM != storage

and yes you will definitely need more space than that

i would say at least 5GB

[minor vortex]

oh shit okay thanks wait

[cloud yacht]

Nah apple would just tell them if they did that a bad guy would be able to remotely control their grandmas phone and block her sending their birthday money.

Now what you want to do is convince them that no one is safe unless the government has the keys and then wait for someone to leak it

[young meteor]

that would be easy

if you want the TSS keys to be public, better have lots of bribery lobbying funds

[minor vortex]

@timid furnace On the guide it says activate supervision, on the other it says activate supervision-less mode, what should I do?

I just got home and I'm going to get started

[timid furnace]

for the delay ota steps follow what ios.cfw.guide says

[tepid olive]

I wish someone made a jailbreak for iOS 15.6.1 A12

[kind herald]

I wish someone would make a jailbreak for iOS 18 but that isn't happening

[frank fossil]

But another problem is it should go to the regular data directory instead of PlugInKit one

[minor vortex]

I need to install Dallas Enabler ? Step 3 or i can just put the profile that you sent me

[timid furnace]

you need dallas enabler

[minor vortex]

Ok thanks

[native orbit]

chimera on 4k has finally been fixed

[hasty ruin]

based

[minor vortex]

In the profile description I see that the profile is made for 17.0 XS D331AP is this normal?

[native orbit]

had to write like 200 lines of asm

[timid furnace]

yea i forgot to change the description

[minor vortex]

oh okay thanks you

[hasty ruin]

arm though

🙏

[native orbit]

the best

[primal perch]

x64 better

[native orbit]

real mfs use arm64

[primal perch]

[pearl sail]

What a weird way of saying you are a virgin

[native orbit]

struct cat Walter

real

[gentle grove]

i didnt do anything

[timid briar]

I c nothing wrong w that

[primal perch]

die

[slender glade]

when presenting a vc onto SB

do I use UIApplication.shared.keyWindow?.rootViewController?

[radiant idol]

Serena doing tweak dev???

Am I dreaming???

[slender glade]

LMAO

[radiant idol]

whatcha makin?

[slender glade]

<redacted>

[radiant idol]

tell me

or else

wait

is it the calculator

but in springboard????

[slender glade]

no 😭

[radiant idol]

Great idea, you should do it

[slender glade]

dude it's like

been a full year

[radiant idol]

yes

[slender glade]

since femboy calc

[radiant idol]

I’ll never let it go

[slender glade]

😭

[radiant idol]

Until you make it

[slender glade]

I would never

[radiant idol]

Do it

Why are you so resistant 🤔

[slender glade]

cause it's a waste of time & effort

[radiant idol]

Mk

[primal perch]

linux 2

[slender glade]

Figured it out: this'll mess up the vc presentation, so instead store the SpringBoard UIApplication from applicationDidFinishLaunching into a variable and then use that to get the keyWindow

if you use the standard UIApplication.shared it'll be wonky when switching between lock/home screen

[gentle grove]

circa 1996

[minor vortex]

@timid furnace it downloads the update it tells me there are 0 seconds left I'm waiting it's been 5 minutes :p

[slender glade]

@lime pivot https://vxtwitter.com/coreserena/status/1738526619940118841

@interface UIViewController (UIViewControllerClassDumpWarning)
- (void)attentionClassDumpUser:(id)fp8 yesItsUsAgain:(id)fp12 althoughSwizzlingAndOverridingPrivateMethodsIsFun:(id)fp16 itWasntMuchFunWhenYourAppStoppedWorking:(id)fp20 pleaseRefrainFromDoingSoInTheFutureOkayThanksBye:(id)fp24;
@end

[chilly plover]

What is the best way to analyse ios binary?

[wooden yarrow]

apple used to be creative

:c

[hasty ruin]

They hated swizzling so much they made swift

[grim sparrow]

£4000 will get you an IDA Pro license

[wooden yarrow]

and £0 will get you Ghidra

🔥

[proper reef]

£0 will also get you IDA Pro

[faint lion]

Hey @proper reef, have a look at this!

Rule 3 - Piracy

Do not link or discuss piracy. Repeat offenders will be banned.

We take the same stance as r/jailbreak regarding this. It's recommended to read up on their rules. You can find a more in-depth explanation of our piracy rules below.

[wooden yarrow]

tr

[proper reef]

ok fine

[granite frigate]

you can get anything for $0

[proper reef]

not true

[granite frigate]

mostly

[proper reef]

thats true

[wooden yarrow]

i can get money for $0

its called getting a job

💀

[young meteor]

you can get nexus for $0

[hasty ruin]

[proper reef]

how much did you pay for nexus?

[hasty ruin]

four dollars

[proper reef]

also i will start work on spring board scrolling in a few days (im on vacation rn and hotel wifi isnt fast enough to download simulator runtime)

[gray scaffold]

So I want to develop some small tweaks directly for apps (similar principle as YoutubeReborn where everything is in the app) and I already know a bit swift but not really much of obj-c. Would it be worth it to learn obj-c for that or would it be also relatively easy to accomplish with swift?

[granite frigate]

time is money

[hexed knot]

Nobody uses their time for money though usually

[slender glade]

I’m not doing all dat

[hexed knot]

Capt is gay

[ocean raptor]

I use my time at work to make money

[hexed knot]

This is rjailbreak do you think most people here have a job

[ocean raptor]

I should hope so

@grave sparrow is this your brother?

[harsh junco]

👀

[harsh junco]

What mail client is that

[ocean raptor]

Airmail

It’s just ok

[radiant idol]

• learn C
• attempt some crackme’s, gradually going up in difficulty
• once you feel confident with those, look at past exploits and try to study them
• preferably get an old device on like iOS 9 and try to make a jailbreak based on an existing exploit
• then I guess you’d have enough knowledge to know what to do from there, but idk

[slender glade]

Yeah but presenting it

[radiant idol]

A window could be used for a calculator

[slender glade]

If you don’t shut your ass

[harsh junco]

Calculator made of windows

[brazen timber]

https://opensource.apple.com/source/xnu/xnu-4570.1.46/osfmk/arm64/WKdmCompress_4k.s.auto.html

average apple code

[sage kite]

holy fuck thats cursed

[sonic totem]

Biggest issue with writing a jailbreak for iOS 9 is that Xcode doesn’t support anything below iOS 12(?)

[radiant idol]

right

that

uhhhhh

write it using theos

frcoal

[sonic totem]

I think it’s actual possible

[radiant idol]

it is

[sonic totem]

To compile for older devices

[radiant idol]

it's just a pain not to have debugging tools

[sonic totem]

Using Xcode CLI tools

[sonic totem]

Yes

[radiant idol]

can I just say

clangd with VSC is actually quite good

almost xcode-like autocompletion

[summer zealot]

@visual meadow I’m looking at twitter and it looks like the catstore developer gave you access?

[visual meadow]

I made a pr shits n giggles and it worked idk

[sonic totem]

It’s access for when it releases

[summer zealot]

You should leak it on a alt

[sonic totem]

And that’s assuming that it will release

[visual meadow]

Idk im on 16.6.1 but my irl friend is on 17.0

[sonic totem]

I will believe it’s fake until I see it

[visual meadow]

(hopefully they leave the tar update code in 🧌)

[summer zealot]

Just unfortunate that google is taking their sweet time rn

I’m guessing they adhere to the extended 14 days

[sonic totem]

I’m really looking forward to the Google writeup

[summer zealot]

Same brother

[sonic totem]

I wanna see how the spyware vendor managed to install the bypass binary

I didn’t even think it would be possible with the exploits they used

[summer zealot]

We have a kexploit web exploit and certificate validation bypass

How is that not enough

[visual meadow]

Probably just exec from /tmp right?

[sonic totem]

It’s not a kernel exploit

It’s a LPE bug

Which makes no sense

All they had was WebKit r/w and a LPE

They’re still sandboxed inside WebKit

[sonic totem]

You can’t execute from /tmp I don’t think

[summer zealot]

I’m confused am I looking at the right cve?

[visual meadow]

Isnt webkit a platform binary?

[sonic totem]

Yeah it’s a privilege escalation bug but not a kernel r/w bug

[visual meadow]

Like does it have platform-application

[sonic totem]

Yes it has CS_PLATFORMIZED

So maybe but idk

[visual meadow]

Then it should be able to exec binaries then i think

[sonic totem]

How would they get the binary into /tmp in the first place though

[summer zealot]

So you can spawn binary’s with a lpe?

[sonic totem]

Again, they’re still sandboxed

[visual meadow]

Lpe??

[sonic totem]

You need unsandboxing

[sonic totem]

Sandboxed

Inside WebKit

[visual meadow]

No clue then

[summer zealot]

I thought the other exploit was r/w inside safari webcontent

[sonic totem]

Yes but if you have r/w you’re still sandboxed

[summer zealot]

It sounds to me if they make a good write up that there is actually a 4th exploit

Undocumented

[sonic totem]

So maybe they managed to somehow escape the sandbox and then they could just replace a system app binary

[sonic totem]

Three different sources say there are only three exploits

Google (twice) and a Citizen Lab blog post

And only three vulnerabilities were patched

[summer zealot]

Since we have r/w to the safari process if we had unsandboxing is that enough for a 17.0 install method

[sonic totem]

You’d need the LPE as well

And then yes

[summer zealot]

Ah

[sonic totem]

Because you could just write to a system app bundle

[summer zealot]

Tips

Why does everyone use tips

lol

[sonic totem]

Because it’s the most useless removable system app

[radiant idol]

source: @slender glade

[topaz yew]

LMFAO

itWasntMuchFunWhenYourAppStoppedWorking

[slender glade]

they really had a sense of humor

[radiant idol]

it was quite amusing

[slender glade]

now u just lose a hundred dollars instead lol

[drifting heron]

Same

[fiery seal]

[radiant idol]

What's the best way to combine two thinned Mach-O's back together, programmatically? Should I just do it via a posix_spawn of lipo, or is there a better way of doing it?

[sonic totem]

Is this inside an iOS app or something?

ChOma has a test for it called fat_create and there’s no restrictions on creating a fat with duplicate architectures

[radiant idol]

Not exactly - I split a FAT file into two and patched the individual slices. Now I want to just combine them into one again

[sonic totem]

As a one time thing, or as part of a larger program?

[radiant idol]

Well

I'm taking a .deb of a tweak, unpacking it into a folder, looping through all of the mach-o files within that, recursively, and then splitting them into their respective thinned .dylibs. Then I patch the thinned .dylibs accordingly. After that, I would like to combine all of these thinned .dylibs back into a FAT macho and then replace the original one that was there. At the end, I just repack that folder as a .deb.
Right now I'm doing this in a test Theos project. Later, though, I plan to rewrite this as an iOS app with Xcode

[sonic totem]

I’d say check out the ChOma code for doing this

Not sure if it works on dylibs but it produced 1:1 copies (compared to lipo) with two executables when I checked

[radiant idol]

would it be worth it to do that instead of just posix_spawn'ing lipo?

[sonic totem]

Well idk if iOS has a lipo build

[radiant idol]

works for me via the iOS terminal

yeah

[sonic totem]

Oh okay

Yeah that’s probably easier then

[radiant idol]

I don't wanna do it the lazy way, but I do think that just using a native tool to combine them instead of hacking together something is best

[native orbit]

all lipo does it hack it together as well lol

[radiant idol]

well yeah

but it's the "native" way of doing it

[native orbit]

need a lipo api fr

[radiant idol]

real

yeah

[primal perch]

https://tenor.com/view/learn-learning-javascript-learns-javascript-stupid-generator-programming-gif-26843752

[radiant idol]

just gonna do this then

lipo arm64_slice.dylib arm64e_slice.dylib -output combined.dylib -create

[sonic totem]

You have to specify the architectures iirc

Although that syntax might also be correct

[radiant idol]

https://stackoverflow.com/a/22938726

looks like it works

[sonic totem]

Oh cool okay

[radiant idol]

pretty cool

[steady nest]

not an issue

wtfis was written with xcode 15 in the last stages

[sonic totem]

Huh?

How??

That would be very useful for some of my older projects

[steady nest]

https://github.com/TheRealClarity/wtfis/blob/023b6d26e1ffa12bebc6293ceb90815824d1b452/Makefile#L15

[radiant idol]

yes

lipo -thin ...

[steady nest]

could even automate having it installed on device but eh

[native orbit]

xcode 13.4.1 still working good for ios 9

[radiant idol]

why use xcode

just use

vsc

ez

[sonic totem]

So it will build for iOS 9 anyway?

[steady nest]

and before

[native orbit]

easier for simple debugging

[steady nest]

even for armv7 i think

[radiant idol]

yeah true

[sonic totem]

what…?

I had no idea

[steady nest]

maybe armv6 too

[native orbit]

that was removed in like xcode 6 bruh

[radiant idol]

what's the oldest arch supported?

[sonic totem]

PowerPC

[radiant idol]

😭

[native orbit]

need the m68k support back

[radiant idol]

I have some great organization

[native orbit]

goated tool once its done

[radiant idol]

so true

but I plan to rewrite this again

as an app

rn it's just a theos tool

[native orbit]

should release as both ngl

[radiant idol]

prob

though idk what to do when things like this exist 😭

[native orbit]

ive done way worse lo

[radiant idol]

how bad

[native orbit]

its in a swift project lemme screenshot it

[radiant idol]

of course its swift

[native orbit]

i cannot find it rip

[radiant idol]

sad

[sonic totem]

Linus did it

[radiant idol]

it is

what

im not writing a jb in swift

i would never

its runtime SUCKS

thats compile time

I mean how it functions during when you're actually using the app, tweak, whatever

its so cursed

eh

UIKit works in both objc AND swift

so

SwiftUI is swift only tho

and should stay that way

no one should write SwiftUI

[brazen timber]

no one should write swift*