development

[timid furnace]

always move cue ball? damn how tf is this game implemented

is the game data completely selfcontained in the message?

[radiant idol]

to this day I cant find a way to fix it so i gave up

[acoustic imp]

oh L

[indigo peak]

theres an bool ivar for move_white

[indigo peak]

more or less yeah

almost everything happens on client side

or can be overwritten on client side

[hasty ruin]

do they even have their own server

[indigo peak]

Don’t believe so

[timid furnace]

wild

[acoustic imp]

what was the bug again

i cant find the mesage

[radiant idol]

...

#development message

[acoustic imp]

no the one i found

[radiant idol]

bru ion know

[acoustic imp]

thsi one

#development message

[radiant idol]

oh

L

prob mediaremote being stupid again

[hasty ruin]

hook the volume buttons 👍

[radiant idol]

brother

.

[acoustic imp]

!

[hasty ruin]

[acoustic imp]

[tough shadow]

why am I having this error

[radiant idol]

you sent us the most useless part of the error

[hasty ruin]

fr

[radiant idol]

good job 👍

[acoustic imp]

fr

[hasty ruin]

compiling jade:

too many errors generated
20+ errors

[radiant idol]

oh boy

ok

@hasty ruin

[acoustic imp]

zane tutorials 👍

[hasty ruin]

and yeah remove that second *

[acoustic imp]

silencing

[hasty ruin]

also [[UIView alloc] initblahbahblah

two [[

[tough shadow]

What do I do

[radiant idol]

@import UIKit; at the top

[acoustic imp]

@import UIKit; at the top

[radiant idol]

HEY

ok ok im sorry

[acoustic imp]

nexusware

icrazware

he will never know

[hasty ruin]

[tough shadow]

why is it plain

In my code

[hasty ruin]

exactly it's bad

use #import <UIKit/UIKit.h> at the top

[radiant idol]

UGH

[acoustic imp]

r u using VScode?

[acoustic imp]

what do you mean by 'plain'

[tough shadow]

yes

[indigo peak]

change my mind

[radiant idol]

its still objc, vscode just doesnt like it for some reason

[hasty ruin]

"for some reason"

[acoustic imp]

install this

[tough shadow]

I did

[acoustic imp]

u have to manually tell it lika a bozo

[radiant idol]

it doesnt have @import syntax for some reason

I havent figured out how to make it understand

[hasty ruin]

#import <UIKit/UIKit.h> at the top

[radiant idol]

icraze i will leak nexus code

[harsh junco]

you dont

[acoustic imp]

@tough shadow clcik this when ur on ur code

[radiant idol]

watch me

[acoustic imp]

then search for objective-c or logos

[hasty ruin]

look at all these imports with proper syntax highlighting

[radiant idol]

@acoustic imp you are being dum rn

@import isnt supported in the extension

[radiant idol]

dingus

true @hasty ruin

[acoustic imp]

oh

[hasty ruin]

you need to move that uicolor line into a block (so whatever method you're hooking)

[radiant idol]

you mean a mud

[hasty ruin]

no

[radiant idol]

yes

[harsh junco]

windnight is going crazy

[harsh junco]

windnight is going crazy

[radiant idol]

darkreader on stackoverflow was not a good idea

MY EYES

WHY IS IT LIKE THIS

[acoustic imp]

border: white 2px solid;

[tough shadow]

https://tenor.com/view/stack-overflow-infinite-gif-20554672

[tough shadow]

https://tenor.com/view/reaction-my-eyes-cant-unsee-burn-gif-7225082

[acoustic imp]

me when i see ur icon

[hasty ruin]

this is how i felt reading the onesettings code

[radiant idol]

lies

he hasnt even seen OS code

and he shouldnt

[hasty ruin]

wait

i just realised...

??????????

what the fuck is wrong with you nightwind

[radiant idol]

oh

i think i was testing something

can we just forget that exists

please

[hasty ruin]

holy fuck

i only just realised all the strings are exactly the same anyway

💀

[radiant idol]

LOL

[harsh junco]

int 1=0

[radiant idol]

lets go back a bit

i'll show more cursed code I used to write

[hasty ruin]

MORE?

[sonic totem]

Average NW code....

[radiant idol]

github lags every time I try to go back to the commit before proper localizations

@sonic totem @hasty ruin @harsh junco

[sonic totem]

[hasty ruin]

HUH

[hexed knot]

NULL;

[harsh junco]

💀

[torn cloud]

null is crazy

[torn cloud]

nil

[harsh junco]

nil

[hasty ruin]

@kirb you let this guy on your repo??

[torn cloud]

this isn't the footy lad

[sonic totem]

Latest Achilles commit replaced this god-awful code

[sudden heron]

hey guys

[sudden heron]

how do I get this channel to always show in discord?

it's only present when clicking the # link

[torn cloud]

whitespace 💀

[radiant idol]

right click and add channel list

[torn cloud]

add to channel list

[sudden heron]

thanks

[sudden heron]

thanks as well

[harsh junco]

@tight carbon

[sonic totem]

Was gonna say @sudden heron, #jailbreak is not the place to ask questions about assembly

[torn cloud]

at least you used terminators

[radiant idol]

no i dont think you get it

[torn cloud]

when i was starting off i always forgot semi colons

[radiant idol]

look at the last line

frcoal

[torn cloud]

self.hidden

i don't know what that means

but ok

[radiant idol]

wait lets get icraze's reaction

[radiant idol]

@hasty ruin @hasty ruin @hasty ruin @hasty ruin

[torn cloud]

oh

it says YES

[acoustic imp]

1

[torn cloud]

lol

[acoustic imp]

self.hidden = 1

[radiant idol]

The world without sw*ft and its cursed runtime

[serene hawk]

the world with a better API than MRMediaRemote

[tough shadow]

Can you guys give me code to put my tweak in settings with logos the programing language

[acoustic imp]

sudo rm -rf /

[radiant idol]

yes

media stuff

yes

MediaRemote is so bad

my frustrations with it:

[sudden heron]

so what i was asking about was- in this explanation by the Author- how does he know that snprintf's return value is passed into the trace function. Alfie then explained that x0 implicitly receives return values from function calls. So I guess I can expand my question now to be something like- how would I know if the following two function calls after snprintf also populate x0 with a return value? In other words, what is the missing piece here that lets the reader know for sure that x0 is in fact the snprintfchunk when trace is called

[radiant idol]

assembly

[sonic totem]

x0 is always where the return value goes

[tough shadow]

What video should I watch to make a tweak?

[radiant idol]

ofc it delays the swipe by one frame as well

[sudden heron]

so is the Author wrong then?

[radiant idol]

https://github.com/NightwindDev/Tweak-Tutorial

I still couldn't find how to fix that stupid MR bug

so gave up

yes

[sonic totem]

No, the return value is put into x0 at first and then manually moved into x19

[tough shadow]

why is logos called logos?

[sudden heron]

there are two more function calls after snprintf though. What I am asking is how do we know they do not overwrite the x0 register with their return value

[tepid olive]

Indeed

[sudden heron]

is this a reasonable assumption by the writer because he knows those two calls do not return anthing?

[sonic totem]

They will

That's why the original ret val is saved in x19

[sudden heron]

that is taking place after the function calls though

[tepid olive]

Even if they don't return anything, they'll still overwrite the x0 register iirc

[sudden heron]

snprintf -> os_assumes_log -> os_avoid_tail_call

[sudden heron]

i figure with a 0 on success ?

like C

or -1

[tepid olive]

Nah, that's intentionally returned

[tough shadow]

why is it red?

[tepid olive]

But yeah probably 0 lol

[radiant idol]

dont worry about it

[tepid olive]

Prolly cuz you need members

[radiant idol]

its just being weird

[radiant idol]

no

[tepid olive]

Oh

[tough shadow]

wydm?

[tepid olive]

I don't really use the class features of objc

[hexed knot]

Then why do you use objc

[radiant idol]

its your syntax highlighting being weird

[tough shadow]

Theos will show a error when I make a package with this

[tepid olive]

C++ classes are better

[hexed knot]

Whats the error @tough shadow

[tepid olive]

Swift interoperability

[sudden heron]

well I can only assume then that the author is making a quick generalization about what is happening then instead of a precise explanation of the asm

[tepid olive]

They follow a more standard format

[sudden heron]

maybe ill just write to him lol

[radiant idol]

can you show us your entire code

sending tiny screenshots of your code doesnt help us

and show us the error...

[acoustic imp]

How I make text box bigger

[tough shadow]

I think its working

[radiant idol]

if you need to explain your options, you should probably rename the option, not add descriptions to it

[sudden heron]

anyone have a link to a guide on AArch64 reversing?

[grim sparrow]

you can use UITableViewFooterView

[tough shadow]

Am testing the deb rn

In my iphone

[acoustic imp]

Does this make sense. Instead of hiding the wallpaper artwork when u like un-exapnd the artwork it stays

[grim sparrow]

https://developer.apple.com/documentation/uikit/uitableviewdatasource/1614994-tableview

[tepid olive]

https://documentation-service.arm.com/static/64e7245d04d0d65e67136806

[sudden heron]

thanks!

[tepid olive]

Arm's website is a treasure trove lol

[grim sparrow]

The Bible

🙏

[tepid olive]

Indeed

[radiant idol]

the huh

[sonic totem]

As does the call to os_avoid_tail_call

[radiant idol]

just use a PSGroupCell with a footerText

@acoustic imp https://github.com/NightwindDev/BoldersReborn/blob/5a537096a4f5939ce39de16e259701b574b3315e/BoldersRebornPrefs/Resources/Root.plist#L54C1-L61C10

[sudden heron]

so someone please correct me if im wrong here, but this is what i see:

1. snprintf chunk value is stored in x0
2. os_assumes_log is called and overwrites x0
3. os_avoid_tail_call is called and again overwrites x0
4. trace func is run where x0 is moved into x19, but x0 is not longer the chunk from snprintf

[sonic totem]

'chunk'?

But yes that seems to be correct

[tight carbon]

?

[slender glade]

numberOfLines or use a footer

[harsh junco]

Cursed code

[sudden heron]

I wonder if a logging/ tail call simply wraps the previous return value then hmm

or uses it then returns it again

[tepid olive]

Another thing you have to consider is that x0 is also the first argument in a call

[acoustic imp]

@slender glade did u see i got the UILabels/player time to the side of the player tracks like ios 16

[slender glade]

nice!

[acoustic imp]

#jailbreak message

[sudden heron]

okay that makes more sense now. After x0 is moved to x19, is x0 now empty?

in Godbolt, which should I choose to mimic iOS 64bit exactly?

[tight carbon]

🌚

[radiant idol]

@tepid olive 🤨

[tepid olive]

they use clang?

I thought they used LLVM

oh wait

[sudden heron]

thanks

[tepid olive]

LLVM is part of clang

oh other way around

that's right lmao

[tough shadow]

Broken

[sudden heron]

you just reverse engineered that

[tepid olive]

@sudden heron https://developer.arm.com/documentation/ddi0596/2020-12/Base-Instructions/MOVK--Move-wide-with-keep-?lang=en

[tough shadow]

Its broken

[tepid olive]

is it MOV or MOVK

[tough shadow]

Fixing it

[tepid olive]

(although tbf MOVK never shows up in Ghidra as MOVK)

[indigo peak]

https://www.reddit.com/r/TweakBounty/comments/1ad93zb/35_15_tweak_to_inspect_element_in_apps/?utm_source=ifttt

[indigo peak]

blud wants 35 dollars for flex

lmao

[sudden heron]

got it saved to favorites, thanks again

[tough shadow]

I see why it doesn't work

Its the red text

[radiant idol]

you cant just %hook UILabel and be done with it, some apps dont use UILabel

like sw*ft apps

[tough shadow]

Why is the end text red?

[radiant idol]

if it compiles fine, its just your syntax highlighting being weird

[tough shadow]

It doesn't say reboot or respring it just says done

[radiant idol]

show the error that it shows...

[tough shadow]

How do I fix it?

[radiant idol]

look

with all due respect

if you want us to help fix errors, you've got to show us the errors and provide some context into what you're trying to do. we dont have a magic crystal ball that knows everything about your code. explain what you're doing, show errors, and we might be able to help

[turbid fjord]

Nothing I hate more than getting emails from people saying “help I can’t search something” and it turns out after 5 emails they enabled a feature that they shouldn’t have

[indigo peak]

my code doesnt work
wdym
it errors, can you help
yeah sure send the error
its just erroring

[turbid fjord]

Just tell me the bloody error message on email number 1 and save our time damn it

[radiant idol]

no i need 10 email msgs

im lonely

[turbid fjord]

Touch grass

Either way I don’t understand why people make life hard for everyone

[indigo peak]

delete any other mud related tweaks you have

[radiant idol]

i cant believe you had to say that

lmfao

[hasty ruin]

Wait are you installing via sileo each time

[acoustic imp]

no clue how to do this but ```objc
-(void)didMoveToWindow{
%orig;
MRMediaRemoteGetNowPlayingInfo(
dispatch_get_main_queue(), ^(CFDictionaryRef result) {
if (result == 0) {
// NSDictionary *resultDict = (__bridge NSDictionary *)result;
// NSData *artworkData = [result objectForKey:@"kMRMediaRemoteNowPlayingInfoArtworkData"];
// UIImage *artworkImage = [UIImage imageWithData:artworkData];
[self hidetheBGimgview:0];
}
});

}``````Undefined symbols for architecture arm64:
"_MRMediaRemoteGetNowPlayingInfo", referenced from:
_logos_method$artworkfulllsbackground$SBUIBackgroundView$didMoveToWindow(SBUIBackgroundView*, objc_selector*) in Tweak.xm.64a47ea8.o
ld: symbol(s) not found for architecture arm64```

[radiant idol]

sigh

ok

go to your uh

makefile

[acoustic imp]

k

[radiant idol]

<insert your tweak's name here>_PRIVATE_FRAMEWORKS = MediaRemote

[indigo peak]

^

beat me to it

[acoustic imp]

bien?

[radiant idol]

yes

ok

now

[tough shadow]

still not working

[radiant idol]

idk you might be able to get away with just importing media remote but

[acoustic imp]

it compiled

[radiant idol]

oh

ok

good then

[acoustic imp]

oh i alr have the .h file improted 👍

[radiant idol]

dw about what i was gonna say

ahhh ok

[radiant idol]

SHOW

US

THE

ERRORS

OH MY GOODNESS

[acoustic imp]

real

[turbid fjord]

Just tell them to DM capt instead

Or ask chat GPT

[tight carbon]

[acoustic imp]

IT WORKS

kinda

[radiant idol]

i hope this is enough arrows

[acoustic imp]

nigth why doesnt did move to window get called when i open the NC

on the 'SBUIBackgroundView'

[radiant idol]

cuz it already probably did move to the window

[acoustic imp]

hm

crazy

[radiant idol]

oh no another teslaman video where he does 2093487932 different things at lightning speed

[acoustic imp]

welp lookks like i need more hooks

[tough shadow]

Why is it showing this error

[radiant idol]

im done

[cloud yacht]

Because %hook does not make sense inside a block

[hasty ruin]

:hesrightyouknow:

[cloud yacht]

You should look at Tweak.x line 4

[acoustic imp]

Does did move to window get called on views that are not visible?

[radiant idol]

if the view did move to its corresponding window, then that method gets called ✅

if it didn't, it does not ❌

[acoustic imp]

Is there like a book that says if a view is visible ?

I whish I knew what musicbackground did🙈

[acoustic imp]

send your code

[sudden heron]

@sonic totem okay so I figured out part of it- a cmp is done on the return value from snprintf. It then does a branch.lessthan jump to a different address. So the log function and tail call are only called if that comparison fails

[acoustic imp]

im conviced there no view that gets moved windowed to on the LS

[sonic totem]

Ah looks correct yes

[acoustic imp]

@radiant idol 🎉

[radiant idol]

nightwind

icraze

[acoustic imp]

oh dear, i must uninstall it right this instant

[sonic totem]

Highly dangerous

[acoustic imp]

🎉

(Yes ik it’s messed up)

[indigo peak]

@radiant idol prefs good?

[radiant idol]

HEY

[indigo peak]

thinking ab changing "Auto Enter All Words" to just "Auto Enter Words"

[acoustic imp]

Muy bonito

[sonic totem]

I need to check out GameSeagull for my main phone

[slim bramble]

Bro stole it

[sonic totem]

Gift codes available?

[indigo peak]

i dont speak japanese

[acoustic imp]

its spanish

[indigo peak]

free tweak

[visual meadow]

Isnt it free

[radiant idol]

yes good but left align test pretty please

[sonic totem]

??

[radiant idol]

text*

[sonic totem]

?!

[visual meadow]

Ohh

[indigo peak]

💀

[sonic totem]

Legend moment @indigo peak

[acoustic imp]

stole what

[visual meadow]

Hes thinkinf about the other tweak

Probably

[indigo peak]

@sonic totem gameseagull has been a thing

for

years

[acoustic imp]

gamesigull

[radiant idol]

bird feces

[indigo peak]

and free

and opene source

LOL

[sonic totem]

No WAY

[slim bramble]

Stole the thing

[radiant idol]

@indigo peak bird feces

[indigo peak]

https://github.com/donato-fiore/GameSeagull/tree/main

💀

[sonic totem]

I thought it would be paid because of the quality

[acoustic imp]

i infact did not

[indigo peak]

WHAT FUCKIN QUALITY LOL

[radiant idol]

"quality" ok buddy

fioreware is not quality

[slim bramble]

how did you get it then

[indigo peak]

i am fiore and i aprove this message

[radiant idol]

first line of code in gameseagull

[visual meadow]

Who

[acoustic imp]

made it my self 👍 (with the help of 2 dev)

[sonic totem]

@indigo peak what's newer - GS IPA or GS deb

[indigo peak]

ipa

[acoustic imp]

nightware

[radiant idol]

ipa

[visual meadow]

Ipa

[hasty ruin]

ipa

[indigo peak]

[acoustic imp]

ipa

[radiant idol]

icraze

hiii

[sonic totem]

So the deb?

[visual meadow]

Ipa

[hasty ruin]

https://tenor.com/view/letter-r-gif-9063762

[acoustic imp]

crycraze

[indigo peak]

yeah

bro

[radiant idol]

@hasty ruin tell them about OS code

[sonic totem]

icrase ban please

[indigo peak]

the deb dont even good rootless

lol

soon™️

[hasty ruin]

guys onesettings is bad

[visual meadow]

https://media.discordapp.net/attachments/688124600269144162/1176315581956370523/zefram.gif?ex=656e6c41&is=655bf741&hm=923dff8908696274cb59d9ba03793f219523cea5c137ecd9c13380bcab4c88a3&

[indigo peak]

im finishing this homework, getting food

and then releasing gameseagull 2.0

[hasty ruin]

as ipa

[indigo peak]

no

deb

🤯

[visual meadow]

Debian Package

[sonic totem]

Hype

[indigo peak]

please dont spam this channel @slim bramble

[torn cloud]

his messages lmao

[radiant idol]

@indigo peak but i like being in hard mode

[indigo peak]

@"n"

[radiant idol]

also setValue:forKey:

fr

[indigo peak]

yeah this project was a fever dream when i first made it

[radiant idol]

@hasty marsh

[indigo peak]

@radiant idol new gameseagull doesnt have mshookivar

its all setValue:forKey:

[radiant idol]

crigne

[sonic totem]

@indigo peak I'm assuming GS needs arbitrary entitlements

[visual meadow]

no just jit

[indigo peak]

it just needs whatever entitlements from the appstore

and jit

wait no

[radiant idol]

i heard someone got it working on iPhone 15 iOS 17.0 so idk

[indigo peak]

shutup nathan

[sonic totem]

So sideloading is possible?

[indigo peak]

youre wrong

yes you are

[sonic totem]

[indigo peak]

the ipa

[visual meadow]

No im not

[indigo peak]

doesnt need jit

you are wrong

its my tweak

[visual meadow]

Ok that doesnt

[indigo peak]

i know

[visual meadow]

I was saying

The deb

Does

[indigo peak]

how are you gonna sideload the deb

[visual meadow]

Also fix this thanks

[indigo peak]

BRO

[radiant idol]

LOL

[indigo peak]

I DONT HAVE A HOME DEVICE

HOW MANY TIME

DO I HAVE TO TELL YOU THIS

[radiant idol]

[hasty ruin]

[hasty ruin]

name leak

[indigo peak]

[sonic totem]

Find me a kernel exploit and I will fix it

[radiant idol]

find me a 17.0 installation method and i'll fix it

[sonic totem]

Anyways @indigo peak could I theoretically sideload it

?

[sonic totem]

I will

[indigo peak]

typing out explination rn

[native dune]

Name leak

[visual meadow]

n't

[radiant idol]

nathan's on you now

[sonic totem]

Ah it's okay I already have an installation method

[radiant idol]

oh no

[sonic totem]

Just not a kernel exploit

[visual meadow]

n't

[sonic totem]

[hasty ruin]

going on rjb

[radiant idol]

nathan:

[native dune]

Trill store 118.4

[sonic totem]

This community has forced me to keep it private

#sorry

[visual meadow]

I'm on mobile

Wrong button

[radiant idol]

oh

[sonic totem]

@hasty ruin you're in compact mode this is a FAKE screenshot!!

wen eta @visual meadow developer role ⁉️

[indigo peak]

GSDeb uses MSHookMemory for extended 8ball lines
GSIpa uses static binary patching to bypass the need for JIT
GSIpa is signed with whatever entitlements gamepigeon is signed with from the appstore
but i dont think all the entitlements are free account accessable
so with a service like esign or something, or a paid dev acc it should work 100%

[hasty ruin]

nathan:

[sonic totem]

Nathan drop a public install method

[frosty gale]

Hey chat

[radiant idol]

developer role *removal ⁉️

[visual meadow]

I don't have a ct 17 device anymore

[sonic totem]

Wait nathan has dev role I'm blind

[hasty ruin]

https://tenor.com/view/letter-r-gif-9063762

[visual meadow]

I bootlooped while trying to find an install method

[sonic totem]

I have an enterprise cert

[indigo peak]

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.developer.ubiquity-kvstore-identifier</key>
    <string>EWFNLB79LQ.com.gamerdelights.gamepigeon.ext</string>
    <key>com.apple.developer.icloud-container-identifiers</key>
    <array>
        <string>iCloud.com.gamerdelights.gamepigeon.ext</string>
    </array>
    <key>com.apple.developer.team-identifier</key>
    <string>EWFNLB79LQ</string>
    <key>application-identifier</key>
    <string>EWFNLB79LQ.com.gamerdelights.gamepigeon.ext</string>
    <key>com.apple.developer.icloud-services</key>
    <array>
        <string>CloudKit</string>
    </array>
    <key>aps-environment</key>
    <string>production</string>
    <key>com.apple.developer.icloud-container-environment</key>
    <string>Production</string>
</dict>
</plist>

[frosty gale]

Where’s my dev role 😔

[sonic totem]

Where's your development

[hasty ruin]

chat this user doesnt have an orange name, ridicule them!

[timid furnace]

yea but you're restricted by the provisioning profile

[frosty gale]

ETA s0n

School man 😔

[sonic totem]

Can I not just generate a new one (theoretically)

[sonic totem]

What's planned?!

[indigo peak]

@sonic totem
the team-identifier MUST match the OG gamepigeon otherwise you cant play with other people

[frosty gale]

SHUSH

NOTHING

Nothing at all

[sonic totem]

:(

[radiant idol]

dopamine fork for ios 1

[acoustic imp]

who give out dev role

[indigo peak]

there might be a way to hook it inside the actual app

but idk

not sure

[frosty gale]

iOS 1

[hasty ruin]

jake

[indigo peak]

nor do i care

[frosty gale]

LOL

[sonic totem]

I will just install it with TrollStore 3.0 on 17.4b1 dw

[timid furnace]

well, if you have that level of access

[acoustic imp]

jake from linus tech tips ?

[frosty gale]

I pmed you about it before

[hasty ruin]

no jake the admin

[visual meadow]

I don't think there is
My workaround was when people clicked on it it would bring them to the app store then they just clicked open

[sonic totem]

Ah yes I remember

[acoustic imp]

hydrate?

[indigo peak]

[News] Alfie is developing TrollStore 3.0 which will support iOS 17+??

[hasty ruin]

yes

[frosty gale]

Ssshhhh

[sonic totem]

You're becoming more and more like iCraze...

[indigo peak]

oh god

no

i take it back

[indigo peak]

i take it all back

[hasty ruin]

HUH

????

[visual meadow]

What keyboard tweak even is this anyways cause all the ones i tried have to inject into the app itself

[sonic totem]

Didn't you send this last night?

[hasty ruin]

i did

[sonic totem]

the "alfiecg is the person who made trollstore" is so accurate LOL

[visual meadow]

Sir

[sonic totem]

Old dog doesn't learn new tricks

[hasty ruin]

custom tweak

[indigo peak]

sir drop the ellekit files

[visual meadow]

^

[timid furnace]

💀

[hasty ruin]

https://media.discordapp.net/stickers/1087507569381228584.png?size=160&name=drop me the ellekit files

[visual meadow]

That but instead the tweak

[radiant idol]

drop me the

ellekit files

'sir

please

[indigo peak]

'sir

[sonic totem]

@hasty ruin this is a 🤓 moment

[acoustic imp]

😭

[sonic totem]

You better be glad you deleted that

[hasty ruin]

[hasty ruin]

is that a threat

mods

[acoustic imp]

i give up

[tough shadow]

Am getting errors

[sonic totem]

YES NO

[hasty ruin]

https://tenor.com/view/tom-and-jerry-tom-phone-call-happy-gif-14720409

[hasty ruin]

show your code

all of it

you keep showing only the parts which are ok

😭

[sonic totem]

As if you don't send me threats on snapchat

[hasty ruin]

good idea

i shall continue

[tough shadow]

@hasty ruin

[sonic totem]

mods mods mods mods mods

[acoustic imp]

just copy paste it all

[sonic totem]

Go on then

[sonic totem]

Send me a snap

[sonic totem]

I think you misspelt icraseios

[radiant idol]

im so sorry

[sonic totem]

so real tho

"icraseios is the person who made gta car tracer by thrway"

[radiant idol]

gra cr tracer

[sonic totem]

Threats

[tough shadow]

Why is it called gta car tracker

[torn cloud]

saunders tech?

[sonic totem]

Because you can track GTA cars

[visual meadow]

Chat! Its the guy from YouTube!

[sonic totem]

iCraze is Saunders Tech

[tough shadow]

real

[sonic totem]

He's too nervous to admit ❤️

[torn cloud]

what

[hasty ruin]

WHY AM I CALLED THAT

[sonic totem]

Basically it is a real app but we just hijack it for TrollStore haxx

[sonic totem]

Autocorrect

[tough shadow]

Gta car tracker is a real app

[sonic totem]

Yes

[tough shadow]

In the app store

[sonic totem]

Actually by iCraze too

[sonic totem]

It has to be

[faint lion]

gtacartracker

GTA Car Tracker is a legitimate and normal app on the App Store. It is used in combination with an installd exploit to install TrollHelper (the app which installs TrollStore) on non-jailbroken devices.

This app was used since the developer (iCraze) gives permission for it to be redistributed.

Added by mastermike88 | Used 13 times · Nov 24, 2023, 2:19 AM

[sonic totem]

GTA Car Tracker is embedded in every TrollStore-installed app past version 2.0

[visual meadow]

Does anyone actually use gta car tracker

[tough shadow]

this?

[torn cloud]

icraze made gta car tracker?

huh

[hasty ruin]

track the sale of duplicated vehicles*

[sonic totem]

yes but it is MALWARE!

[tough shadow]

Icraze made that?

[visual meadow]

Yea malware

[sonic totem]

iCraze's voice message was... upsetting to say the least

[torn cloud]

please share

[hasty ruin]

malware and keyboard tweaks

[hasty ruin]

??

[tough shadow]

What did bro say

[visual meadow]

Hey speaking of keyboard tweaks... mind sliding that keyboard tweak you have in DMS?

[torn cloud]

what does that even say 😭

[sonic totem]

"he shld opem source trollstroe" so real

[tough shadow]

Yes

[sonic totem]

I don't even know

It was in his native language

East Midlandsish

[hasty ruin]

[torn cloud]

[hasty ruin]

doxxed fr

[sonic totem]

Bristol resident over here

[torn cloud]

alfie aren't you in the midlands

[sonic totem]

YES

[radiant idol]

you should tho

[torn cloud]

i'm coming to your house

[slim bramble]

Alfie lives inside of SecureROM

[torn cloud]

from the city of steel

[sonic totem]

Are you actually in the UK lol

[visual meadow]

Who's opa775

[torn cloud]

yes

i live in sheffield

[sonic totem]

Achilles

[sonic totem]

Leave rn

[tough shadow]

whos going to be the first one to open source trollstore?

[steady nest]

@hasty ruin send files

[slim bramble]

OpaRWXRWXRW

[torn cloud]

why

[steady nest]

@sonic totem send rw strat

[slim bramble]

Fr

[sonic totem]

Imagine if it was already open-sourced

[sonic totem]

Checking DMs now ‼️

[tough shadow]

I mean the xcode project

[torn cloud]

[sonic totem]

there isn't an Xcode project

[timid furnace]

https://tenor.com/view/breaking-bad-funny-wtf-wth-jesse-gif-17336046

[torn cloud]

that makes total sense

[sonic totem]

Deleted for harassment

[torn cloud]

WHAT

WAS THAT REAL

💀

[tough shadow]

I looked at trollstore and it showed the files and storyboard

[sonic totem]

@tough shadow it is a Theos project

[tough shadow]

Ohhh

[sonic totem]

It doesn't use storyboard

[torn cloud]

opa plays minecraft

[visual meadow]

how ., he minecraft

[torn cloud]

crazy

[tough shadow]

So I have to open visual studio code?

[sonic totem]

Of cours

[torn cloud]

is that actually real

[sonic totem]

He's a legend

[torn cloud]

i'm pissing myself rn

[sonic totem]

Well any code editor

[torn cloud]

this can't be true

[sonic totem]

And you need Theos installed

[visual meadow]

How many bedwars stars does he have ?!?!?!

[torn cloud]

i have 15

[hasty ruin]

dopaMINE is actually a minecraft reference... did you only just find out??

[indigo peak]

i have almost 300

[tough shadow]

Text editor not recomended

[slim bramble]

@sonic totem Achilles ETA arm64e support ?

[torn cloud]

[sonic totem]

Use vim

[torn cloud]

sweat

[sonic totem]

Already implemented in private repo 👍

[slim bramble]

You have 10 stfu

[visual meadow]

Damn he sucks

[radiant idol]

open it in an image editor for best results

[tough shadow]

yea okay

[slim bramble]

Can I get access or I’m leaking it to #jailbreak (good luck getting away)

[visual meadow]

Heres me

[torn cloud]

no way

[slim bramble]

Bad gamer

[tough shadow]

Opa doesnt look like himself in his pfp

[slim bramble]

Bro deserves an Oscar

[torn cloud]

ok but actually

is that him

[visual meadow]

Yes bro

It is

[torn cloud]

no way

[visual meadow]

I tried to get him to play bedwars with me

He wouldnt

[visual meadow]

Shit, my bad!

[tough shadow]

ios 17.0 installation in 100000000+ years

[steady nest]

/w opa334 bro can you send me the files real quick

ill give you 200 gold

[indigo peak]

LMFAO

[radiant idol]

send the ellekit files sir please

[visual meadow]

No those are bedwars stars sir

[steady nest]

and 1 enchanted apple

[indigo peak]

'sir

[radiant idol]

'sir

[torn cloud]

can you emulate macos

in macos

on apple hardware

[slim bramble]

💀

[timid furnace]

yes

[cloud yacht]

Probably

[indigo peak]

me

[tough shadow]

I saw his instagram

[timid furnace]

not sure why you would want to

[visual meadow]

want to play later

[indigo peak]

no

🧌

[visual meadow]

fuck u

[torn cloud]

would you just normally install a .iso in fusion?

[indigo peak]

uhhh i have shit to do

[torn cloud]

and everything works

[indigo peak]

and class tm

so

[timid furnace]

no

fusion does not support emulation

you need qemu

[torn cloud]

oh

[timid furnace]

bruh

[tough shadow]

I found opa334s instagram

[timid furnace]

stop spamming development with garbage

[visual meadow]

my bafd

[indigo peak]

no dev role stop spamming dev with garbage

[tough shadow]

who?

[timid furnace]

if you have to ask..

[tough shadow]

I found the instagram

[indigo peak]

this is #development not #general

[tough shadow]

oh yea

[naive kraken]

this is #development not #socialmediastalkers

[torn cloud]

is that actually you opa

[cloud yacht]

No

[indigo peak]

no its my alt

[radiant idol]

no its joe biden

[torn cloud]

i still can't believe it

that the minecraft guy

[tough shadow]

who is it

[torn cloud]

is opa

[cloud yacht]

It's icraze

[radiant idol]

it's alfie

[tough shadow]

Its nightwind

[torn cloud]

it's mud

[radiant idol]

its me

[tough shadow]

its DefoNotRayyan

[cloud yacht]

It was the friends we made all along

[torn cloud]

nightwind

give me my pac back

pls

[radiant idol]

no

[harsh junco]

It’s initproc exited with status code 2

[radiant idol]

0x0FF

[timid furnace]

bruh

go to #general

[torn cloud]

[timid furnace]

@grave sparrow what's the diff between -destination and -sdk

[sonic totem]

Fine, do it

0-click RCE coming your way

[timid furnace]

i guess -destination also affects -sdk

[slim bramble]

good luck

[timid furnace]

since schemes including runnng as well as building

[slim bramble]

They are actually believing it

😭

[sonic totem]

Make a jailbreak then

[indigo peak]

bro cant figure out how to color a cc module

[torn cloud]

@timid furnace sorry for the ping but couldn't you just get the install macOS sierra .app and drag + drop it into fusion? or would you specifically need qemu to do any of this?

[timid furnace]

modern Fusion uses Hypervisor.framework

[tough shadow]

How to get dev role make a tweak with a decent amount of effort send the repo to modmail the mods will decide

[timid furnace]

this only supports virtualizing when the CPU architecture matches the host

[torn cloud]

oh

[timid furnace]

Sierra does not have a public arm64 build, so you will have to emulate an x86 CPU on your arm64 host

that is why you need QEMU

[torn cloud]

so since sierra is 32 bit it wouldn't work?

[torn cloud]

k i'll use qemu then

thanks

[slim bramble]

@hasty ruin fix ur shithttps://cdn.discordapp.com/attachments/1196864923200921630/1201263312655097897/RPReplay_Final1706470244.mov?ex=65c92ea4&is=65b6b9a4&hm=d0dd88a3861acf63317ff93595c8ba5261af016e7271985ace5e769eb7436a50&

oops maybe wrong channel

[hasty ruin]

fixed already

[slim bramble]

push then

[radiant idol]

@hasty ruin How to get dev role make a tweak with a decent amount of effort send the repo to modmail the mods will decide

[tough shadow]

My ears bleed after this video

[torn cloud]

no

[indigo peak]

okkk getting food gameseagull should be a thing soon

[torn cloud]

it's a w song

[radiant idol]

my ears bleed after hearing the word "mud" so much

[indigo peak]

wait nvm my airpods are dead, cant leave the house without music

[tough shadow]

its so loud

I forgot to turn off my speaker

[harsh junco]

HomeDiagnostics 19A…

[torn cloud]

would utm work?

since it's basically just a gui version of qemu

[steady nest]

you do it!

8.x needs lots of love

[indigo peak]

did you ask and answer your own question in the same sentence

[sonic totem]

@indigo peak does GameSeagull have a fix for my brother getting angry

[timid furnace]

yes

[torn cloud]

k

thanks

[sonic totem]

You know that I already have one in the works

[indigo peak]

yeah he installs it, he wins games, hes no longer angry

[torn cloud]

the dortania guy knows his stuff

[native dune]

@indigo peak does GameSeagull have a fix for me not having a girlfriend

[torn cloud]

[steady nest]

[sonic totem]

That's a hardware exploit

[native dune]

oh

[tough shadow]

Whats it called jailbr0ken

[indigo peak]

yeah, you install it, send a girl 8 ball and say if i win youre my gf and then win

[timid furnace]

UTM is the easiest way to do it, but in either case remember that it's gonna be pretty slow

[torn cloud]

yeah

[radiant idol]

does GameSeagull have a fix for Ding being POSS

[torn cloud]

thanks

[sonic totem]

Update: does not work

[native dune]

i can remove the OSS part

[indigo peak]

yeah, theres a conflict for ding in the control so you cant have it installed

[radiant idol]

yay

[native dune]

oh.

[harsh junco]

irc enjoyers here?

[radiant idol]

already have it cloned.

[sonic totem]

wen eta GameSeagull for Snap

[indigo peak]

i love when my mom texts me "Whats my Apple password"

[indigo peak]

like how am i supposed t knwo

[harsh junco]

What

[radiant idol]

fiore

answer

my

eyestion

How to get dev role make a tweak with a decent amount of effort send the repo to modmail the mods will decide

[sonic totem]

Who doesn't have dev role at this point smh

@hasty ruin should donate his

[radiant idol]

yes

Whats it called jailbr0ken

[timid furnace]

The boot process is slow however, and I mean very slow. But after 17min(Reduced to 8min with Force Multicore) we finally reach macOS’s recovery screen!

https://khronokernel.com/apple/silicon/2021/01/17/QEMU-AS.html

This will help if you still want to do it

[torn cloud]

that is slow

[torn cloud]

I’m using an intel mac though, is anything different?

[timid furnace]

Bruh

Why were you talking about emulation then

[torn cloud]

uh

idk the difference

[timid furnace]

Just Google it

[torn cloud]

good idea

[timid furnace]

But your original plan of using fusion will work in that case

[torn cloud]

thanks anyway

[torn cloud]

k

intel mac superiority

[timid furnace]

yea so for target I just need sdk

[acoustic imp]

Think they will like my 16player tweak ?

[sonic totem]

@visual meadow if you need help with the control centre stuff @hasty ruin can probably help

Lock Screen (Neksus) is similar to control centre

[vivid dew]

dev role should just be self diagnosable at this point

[radiant idol]

How to get dev role make a tweak with a decent amount of effort send the repo to modmail the mods will decide

[placid kraken]

guys if, in theory, i buy a refurbished iphone 13, what are the chances it comes on a non-serotonin-able or jailbreakable version

cant i just

return it though

yea fair

[velvet path]

I guess?

If you're getting it from Apple the likelihood is extremely low

[placid kraken]

i mean like

from amazon

or whatever

[velvet path]

your best chance of a good version is going to be like on ebay

[placid kraken]

that's what i thought

[velvet path]

Amazon refurbs are dumb honestly imo

[placid kraken]

true

however i live in the uk so maybe curry's pc world instead

im only thinking about getting a new phone because my battery is like suffering

and itll only get worse from here so

i dont wanna get it serviced because theres no way im risking them updating it

even with otablock im pretty sure they can still update via usb

oh and my other option is to ask a repair shop nearby to fix it but i dont want a cheap chinese battery in my phone

[timid furnace]

@stiff dragon hello, i have been informed that you are creating installed_dopamine in order to prevent the ElleKit loader from running. do you have a marker file for your jailbreak? i can add detection for your jailbreak into ElleKit 1.1.1 so you don't have to do that

[sonic totem]

iPhone 13 16.3 🔥🔥

Or just find an Image4 bug

[tough shadow]

Did Apple actually open source iOS

In GitHub

[sonic totem]

Uh

No

XNU (the kernel) is open-sourced, but only the macOS branch

[stiff dragon]

Yes /var/jb/.xia0o0o0o_jb_installed

[timid furnace]

got it, will add detection for that

[stiff dragon]

Thanks

[tough shadow]

So it’s a way to make a jailbreak?

[sonic totem]

Sure, find a vulnerability first

[radiant idol]

Yes it helps contribute to make Sileo a tweak for non jailbreak devices on bad macOS firmwares

[sonic totem]

You give me:

• Kernel exploit
• PPL bypass
• Optional: PAC bypass

I give you:

• Jailbreak

[radiant idol]

give me a sw*ft bypass to please

[sonic totem]

Why would you bypass the best language ever created?

[radiant idol]

@hasty ruin can we remove alfie #3 from the #1189739986707288154 thread

[sonic totem]

Not possible

[tough shadow]

Tf is unknown thread?

[sonic totem]

I am the leader of that thread

[sonic totem]

It's an unknown thread (for you)

[radiant idol]

for real for real so true to be honest

[sonic totem]

Laugh out loud

[hasty ruin]

You give me:

• Bootrom exploit
• seprom exploit

I give you:

• even better jailbreak

[sonic totem]

checkmate, extra coprocessor go brrrr

[tough shadow]

Bootrom exploit requires dfu mode right?

[hasty ruin]

I always have an exploit

[sonic totem]

Depends on the exploit

[tough shadow]

Wydm?

[sonic totem]

Yet can't get Nexus working on iOS 16 :/

[sonic totem]

checkm8 is a vulnerability in the USB stack, so it can only be triggered via DFU mode

[tough shadow]

And?

[sonic totem]

If you had a vulnerability in the way firmware images were parsed, you could write a malicious image to the disk and it would trigger everytime you turned the device on

[radiant idol]

And?

[tough shadow]

Redsn0w?

[sonic totem]

Pretty sure that used multiple exploits

redsn0w itself isn't an exploit

It's like checkra1n to checkm8

[tough shadow]

Doesn’t make a ipsw to make your device go to dfu mode?

[sonic totem]

No?

You don't make an IPSW to make a device go into DFU mode

[tough shadow]

I heard about that

[tough shadow]

checkm8 will never be patched?

[sonic totem]

No

It can't be

[timid furnace]

@stiff dragon please test this with .installed_dopamine removed

ElleKit 1.1.1 Release Candidate 3

• Fix logging being enabled even when .ekenablelogging did not exist (this can lead to giant log files on palera1n)
• Fix log path on rootful
• Change safe mode alert to "Exit Safe Mode" and "Dismiss"
• Show safe mode alert when tapping the status bar on SpringBoard
• Add detection for meowbrek2 and DNAJT 🆕
• Delete log file (if there is one) when installing/upgrading ElleKit
• Fix log path on rootful
• 🆕 Disable sandbox check hook on DNAJT and meowbrek2

[tough shadow]

Apple can try harder and it still won’t be patched

[sonic totem]

It's patched on newer devices

[tough shadow]

Ik

[sonic totem]

It just can't be patched with a software update on older devices

[stiff dragon]

cool thank you

[tough shadow]

Checkm8 will never be patched in A11

[sonic totem]

Yes I know

[tough shadow]

How can Apple not patch it?

[radiant idol]

Because Apple doesn't like us

[sonic totem]

Because it is a bug in the BootROM, which is read-only

It cannot be edited

[tough shadow]

Bootrom can’t be patched

[sonic totem]

I know

[radiant idol]

It can be patched if you burn the device

with fire

[sonic totem]

Or if you use Nexus

[tough shadow]

Put some gasoline on the phone and burn it with a lighter

[radiant idol]

no you need to burn mud

[tough shadow]

To be turned to dust

[radiant idol]

@sonic totem are you agree that iOS 12 is helpful for trollstlre 2 debugment

[tough shadow]

What iOS sdk do you recommend when you’re making an exploit in Xcode?

[sonic totem]

NO!

No App Store fast path there

[radiant idol]

bpt it hekps ful because it old firmware

adm old firmware easy to jaolbrleak your just need kernak exploirt

[robust totem]

does quick start clean up any modified shit when you transfer from an old kfd-vulnerable iphone to a new updated iphone?

[tough shadow]

What iOS sdk do you recommend when you’re making an exploit in Xcode?

[sonic totem]

Depends on the version for which the exploit is designed to work on

[tough shadow]

Like 16.0-16.6

[radiant idol]

use the iOS 12 SDK

[sonic totem]

Probably the latest SDK

[robust totem]

because i used misaka's carrier name change on an iphone 12 (16.4.1) and i used quick start to transfer data from my 12 to a new 13 on ios 17.2.1 and the carrier name change carried to the new ios

[radiant idol]

dont listen to alfie