development

[tough shadow]

Why?

[robust totem]

is that supposed to happen

[radiant idol]

iOS 12 best

[radiant idol]

because apple

[sonic totem]

Don't listen to @radiant idol they only started programming a week ago

[radiant idol]

dont listen to alfie, I'm the one who made trollstore

[sonic totem]

Just use the latest SDK, it works down to iOS 12 anyway

[tough shadow]

Imagine jailbreaking a iphone in Xcode simulator

[sonic totem]

We all know that that was @hasty ruin

[radiant idol]

false info

[tough shadow]

Ch0ma guy

[sonic totem]

Fr

@radiant idol the irresistable urge to tell everyone in #jailbreak to ping iCraze because they will listen

[tough shadow]

Can I use your exploit

[sonic totem]

Sure

[radiant idol]

i'll do it instead

[sonic totem]

Disaster

Absolute disaster

[robust totem]

is it possible to maybe modify some values on a vulnerable iphone and then use quick start to carry that over to a non vulnerable phone

its like changing a setting on a tweak but instead of respringing you just reset the entire phone

[shrewd smelt]

@hasty ruin

[tough shadow]

Can I make TrollStore 3 with your exploit?

[hasty ruin]

https://cdn.discordapp.com/attachments/1169461256386785290/1178720132755882084/caption.gif

[radiant idol]

@hasty ruin

[sonic totem]

No you cannot

[sonic totem]

Not the one in ChOma

[tough shadow]

Ok

[sonic totem]

It was patched in 17.0

[robust totem]

most exploits are written using objective-c correct?

[radiant idol]

C

[sonic totem]

No

[tough shadow]

To recreate TrollStore

[sonic totem]

Mine was written in C

[robust totem]

whats the huge difference between c and objective-c

[tough shadow]

What about shell?

[sonic totem]

ObjC is OOP

@radiant idol will tell you more

[robust totem]

oh

[radiant idol]

@acoustic imp

[radiant idol]

i hate you

[sonic totem]

Can't really write an exploit in shell

[robust totem]

i thought u needed objective-c for any type of ios programming

i guess not

[sonic totem]

Jade > Rune

Is that better?

[tough shadow]

Doesn’t TrollStore use shell?

[slim bramble]

W

[sonic totem]

You can use Swift

[sonic totem]

No...?

[radiant idol]

theres a tweak written in arm64 assembly

[tough shadow]

Ohhh

[radiant idol]

yes ❤️

[robust totem]

who the fuck would go through all that just for a tweak

[radiant idol]

why not

[robust totem]

fair

[sonic totem]

Somewhere on my Mac there is an Xcode project Hello World app written in arm64 assembly

Where is it...

[radiant idol]

why

[slim bramble]

Who is masochistic to that extent ?

[robust totem]

now write an entire jailbreak using only binary

[radiant idol]

lemme send

[sonic totem]

Already got one

[robust totem]

all i can say is it probably has atleast 1 1 and 1 0

[tough shadow]

Make an os with assembly

[robust totem]

real

[slim bramble]

It's actually easy

[robust totem]

ok make one for ios 17

[slim bramble]

Well idk asm so can't do it

[radiant idol]

@robust totem @slim bramble https://github.com/qwertyuiop1379/Tweaks/blob/master/fixshitbook/Tweak.S

[slim bramble]

but the process of making it is easy

[tough shadow]

Get a kernel exploit

[robust totem]

oh

[sonic totem]

@radiant idol should I drop fastPathSigned3: Assembly edition?

[robust totem]

ok yea let me find one rq

easy job

[radiant idol]

drop slowPathSigned -1

[robust totem]

damn

[tough shadow]

Download xnu kernel

[sonic totem]

That's called Jade

JOKING

[radiant idol]

ok buddy

[robust totem]

how do people even find exploits without any access to ios backend?

[sonic totem]

Reverse engineering

[robust totem]

can you use like the firmware file and inspect that with a program

[sonic totem]

Like this

[robust totem]

mhm

yes i understand all this

definitely

i gotta learn assembly

[sonic totem]

@radiant idol "alfiecg who developd choma is finding bug in coortrust iso 17.4"

[radiant idol]

ysy

[sonic totem]

Decompiler exists

[robust totem]

ok thats better

now i go find coretrust bug for ios <17.2.1

[sonic totem]

Look at 17.4b1

[robust totem]

will ghidra work i dont got a mac

[sonic totem]

Yes

[robust totem]

ok cool

[robust totem]

the thing is while 17.4b1 will probably have something changed related to coretrust and possibly an exploit i dont think any bug introduced in the beta will be in older versions

[brazen timber]

first ever binja user spotted in the wild

[sonic totem]

Exactly

[acoustic imp]

Real

[sonic totem]

I love Binja

Binja is the reason we have TrollStore 2

[sonic totem]

There’s most likely more bugs in 17.4 though

[sonic totem]

Moving to IDA eventually though

[serene hawk]

anyone seen this already? https://x.com/eveiyneee/status/1751723085659566525?s=46&t=slL8cf6usQejcJzNt825vw

évelyne (@eveiyneee) on X

if you even care, 17.2 and lower seem to have a UaF (krw!) in igmp_flush_relq. I’m
not smart enough to exploit it, someone else should try

Twitter · Jan 28, 2024, 9:45 PM

[robust totem]

no way

[sonic totem]

Yes

[robust totem]

of course im 1 version higher

[sonic totem]

It doesn’t mean there will be an exploit

[robust totem]

17.2.1

[brazen timber]

laurie is making an actual objc decomp for ghidra so we'll see how that turns out

[sonic totem]

Okay W

[brazen timber]

binja scripting is already better than ida 🙏

[sonic totem]

The Binja decomp for ObjC is not good

[sonic totem]

I’ll take both

[brazen timber]

and swift too apparently 😳

[sonic totem]

@radiant idol will be happy

[radiant idol]

yes

[primal perch]

value wise(assuming no piracy) binja destroys ida

goes pretty hard cus i can run it bare metal

[sonic totem]

Agreed

[primal perch]

i hate booting up a vm for ida

[sonic totem]

And why would you have to do that?

[primal perch]

cracked ida

im not a genius but if someone can crack the app designed for reverse engineers they can probably hide malware in it well

[sonic totem]

LOL

Just buy IDA

[primal perch]

[sonic totem]

@hasty ruin how much is IDA

I feel like you’d know

[hasty ruin]

Free

[primal perch]

well for the bare minimum arm64 package like 4.5 grand for an actual license

[hasty ruin]

Use the 100% discount code

[primal perch]

~6 with arm64 and x64

[primal perch]

Xi Jinping

[sonic totem]

HUH?

4.5???

Time to get a job

[sudden heron]

anyone have a working link to this google drive ?

[tough shadow]

[sudden heron]

hey @hasty ruin you still up for a quick chat

[robust totem]

this man is a future jailbreak developer

[sudden heron]

I've found that companies hide all their good stuff in iOS apps lol. SInce android is so easy to reverse

[radiant idol]

iphonedevwiki is ancient so I would guess that that link, along with other ones, are probably dead

[sudden heron]

oh bummer

[sonic totem]

Tbh that’s outdated by now

[sudden heron]

okay

[sonic totem]

Explain the path that you’re looking to go down

Hopefully I can offer some advice

[radiant idol]

advice: dont touch sw*ft

[robust totem]

u dont have to tell me twice

lol

[acoustic imp]

https://cdn.discordapp.com/attachments/688124600269144162/1189761389858930878/banned2.png?ex=65c440a4&is=65b1cba4&hm=4aff4547288c209699d6d1e6dfdfe915cf5c0ace5b59ab126b76b774e26c83d5&

[faint stag]

well i mean
with android you have a built in debug bridge
and if you want to modify an app you can just patch it, resign and install (either lspatch or actually patch functions)
then there's frida lol

[tough shadow]

Sw*ft is the stupidest way to make a jailbreak

[slim bramble]

GIR broken™️

[acoustic imp]

womp womp

[faint stag]

don't say that in front of linus

[slim bramble]

Objc is worse

[robust totem]

make a jailbreak using brainfuck

[slim bramble]

Only valid way to make a jb is c

[tough shadow]

Make a jailbreak using assembly

[robust totem]

more possible than brainfuck

lol

[sonic totem]

Seconded

[robust totem]

how similar are c and c++

[faint stag]

c++ is c with various extensions

[robust totem]

in c++ i am kind of intermediate level

[sonic totem]

Not similar at all

Tbh

[serene hawk]

c -> imperative programming language, c++ -> oop

[sonic totem]

My C++ knowledge would not be good and I consider myself fairly well-versed with C

[robust totem]

oh

so i gotta learn c

ik c++ and c# but didnt touch c ever

[radiant idol]

C++ belongs in a molten lava pit on Mars that is about to explode
C should belong to every programmer's brain because it is so simple, elegant, and great

[slim bramble]

C is better imo

[sonic totem]

C is the best

[slim bramble]

That whole C++ class shit is quite weird

[sonic totem]

My two biggest projects have been in C

Best language ever

[radiant idol]

if you think THATS the weirdest part of C++ then you'e way off

[robust totem]

time to learn c ig

[slim bramble]

Is achilles one of them ?

[sonic totem]

It is indeed

[acoustic imp]

what achilles

[slim bramble]

Where have I said that

[sonic totem]

Just rewritten v2 if you didn’t see 🔥🔥

[slim bramble]

Gaster skidded

[sonic totem]

OSS checkra1n 1337 alternative

[sonic totem]

Also incorporates gaster for disabling signature checks

[slim bramble]

With some memory issues

[sonic totem]

??

[native dune]

@sonic totem i wouldnt let this slide if i were you

[slim bramble]

Sshhhhh

[serene hawk]

c is great until you stumble upon more complicated declarations like this for the first time: long �*const *�(�xyz)(char� var);

[sonic totem]

Where are their projects?

[native dune]

lmaoo

[slim bramble]

Saw that comment from siguza

In HD

[sonic totem]

Oh yeah

That wasn’t even memory issues

Just horrific code

[slim bramble]

I read it half

[tough shadow]

You payed 299 dollars?

[slim bramble]

Uhhh void*

[robust totem]

ok done

[sonic totem]

Exactly

[robust totem]

ik what a print does and what a variable is

[sonic totem]

No?

Oh right

[robust totem]

can i make a jailvreak now

[acoustic imp]

@serene hawk btw thanks for the media remote thing it works great

[sonic totem]

No I got the student discount

[robust totem]

🔥🔥

[serene hawk]

no worries, glad it works. the api is just a pain in the a** to work with

[sudden heron]

I want to master arm64 assembly / reverse engineering binaries / frida method hooking etc for reversing apps mostly

[sonic totem]

You need to try Achilles v2

[native dune]

idk where my iphone x is

[acoustic imp]

me?

[sonic totem]

No clue if it actually works on anyone else’s machine

No one has tested it except me LOL

[sudden heron]

"Go right when you can, and left when you must" or something lol

[sonic totem]

Oh very nice

[slim bramble]

Well they are on my GitHub

[sonic totem]

Oh you’re actually a dev

Didn’t even realise

And you’re French

[slim bramble]

😭

[slim bramble]

W

[acoustic imp]

is there i way i can say if one or both of these(vars) is = to 1 then do {}

[slim bramble]

||

if (cond1 || cond2)

[acoustic imp]

ah thx

[slim bramble]

Use && for and

[acoustic imp]

ik

didn't know what or was

[slim bramble]

A simple Google research would have told you

[acoustic imp]

tru

[radiant idol]

brother

how

[slim bramble]

I have a lot of unfinished shit

A lot of shitcode™️

[acoustic imp]

sister i frogot

[sudden heron]

king of languages!

let's go!

[sonic totem]

Two words: arm64e support

[slim bramble]

@sonic totem achilles windows support eta wen

[radiant idol]

palera1n arm64e wen

[slim bramble]

Uhhh checkm9 eta wen ?

[sonic totem]

I don’t want have a Windows computer

[acoustic imp]

KTRR full jb eta when

[radiant idol]

checkm8 works on A12 and A13 but needs a mem leak to function

[slim bramble]

Yeah and version string to be 2 byte shorter

For A14

[sonic totem]

No

That’s A12

[slim bramble]

Oh

Mb

[sonic totem]

The UaF is completely gone on A14

[slim bramble]

Well I still want checkm9

[radiant idol]

checkm8 would be so cool on A12/A13

[slim bramble]

Yeah read your blog post about it

[radiant idol]

would revive the jb community a lil

[slim bramble]

And A14

[native dune]

alife developing checkm9

[slim bramble]

Yes

[sonic totem]

SEP mitigations:

[acoustic imp]

(the security chip)

SEp*

[radiant idol]

yikes right

forgot about that

[sonic totem]

Secret Haxx™️

[slim bramble]

Untethered ?

[sonic totem]

I cannot comment

[primal perch]

eh itd still be fun

[acoustic imp]

witawee use kttr

[native dune]

ios 17:

[elder scaffold]

*bypass

[radiant idol]

ios 18:

[native dune]

p sure ios 17 makes it impossible to boot from dfu without a sep exploit

[slim bramble]

We want untethered bootrom exploit A17 pro

[primal perch]

ios 19:

[primal perch]

could still fuck around with pongo tho

boot another OS

[sonic totem]

I wanted to test that

[native dune]

true

[sonic totem]

Because part of me thinks that’s not the case

[radiant idol]

find SEP and SSV exploits please thank you

[primal perch]

done

[radiant idol]

oh

[acoustic imp]

fugu15

[primal perch]

please send 50000000$ to my paypal

[native dune]

someone comment out the line that runs sep auto in palera1n

trol

[sonic totem]

No more booting

[radiant idol]

i'll send it straight to tim apple himself because i know you're secretly working for him (or maybe you ARE him?)

[sonic totem]

Because SEP won’t even boot in that case

[primal perch]

[native dune]

someone remove blackbird from pongo

trol

[slim bramble]

I killed SSV

[sonic totem]

Reminds me of when I tried to get custom SEPOS booting with blackbird

[elder scaffold]

Just process it like they are A11

[slim bramble]

No passcode SEPOS™️

[native dune]

true

[sonic totem]

Me when I’m totally NOT using blackbird to bruteforce an iPhone passcode for an assessed school qualification

[native dune]

sounds fun

[slim bramble]

Mind sliding that in dms

[sonic totem]

The assessors gonna love it

[sonic totem]

It’s not done yet

[tough shadow]

How do you decompile?

[sonic totem]

It’s on my school timetable for… Wednesday?

[slim bramble]

You doing that for school ??

[serene hawk]

for educational purposes only i assume

[slim bramble]

Fr

Educational purposes only

[timid furnace]

Help Alfie is trying to hack m-

[sonic totem]

Yeah

[sonic totem]

Cut off mid-message by my 0click RCE

[tough shadow]

How do you decompile?

[drifting heron]

@slender glade hii

[sonic totem]

Oh it actually is

It’s a proper qualification you put on your university application here in the UK

[sonic totem]

Install Binja, Ghidra whatever

[acoustic imp]

any way to make freePip not default to freepip mode?

[sonic totem]

Rest is fairly self-explanatory

[radiant idol]

you use a decompiler such as declang, degcc, and dellvm

[serene hawk]

damn that’s actually great

[slim bramble]

How do you get to do cool projects when I’m studying stupid shit at the same age

[serene hawk]

i’m asking myself the same question rn

[sonic totem]

Fr

It’s a self-guided project

[sonic totem]

LOL

I have like a year to do it

[slim bramble]

NEA ?

[sonic totem]

?

NEA?

[native dune]

NEA ?

[acoustic imp]

NEA ?

[slim bramble]

I have a brit friend that have something called a NEA (Non Examined Assement) to do

[sonic totem]

Oh I see

[slim bramble]

He’s making a java re tool

[sonic totem]

No it’s not that

It’s called an EPQ (extended project qualification)

[serene hawk]

what course do you want to apply for exactly?

[sonic totem]

It’s hard to explain without a knowledge of the UK education system but it’s like half an A-level

[sonic totem]

Computer science

But I’m contemplating whether to go to uni tbh

[serene hawk]

it’s a lot of maths + much theory and shit you already know in the first few semesters lol

[sonic totem]

Ughhh

Not sure if it’s worth it tbh

If I got to go somewhere cool it would be

[serene hawk]

but it’s good to have some sort of qualification

[sonic totem]

agreed

But like

[slim bramble]

Half A level ?

[serene hawk]

…if you don’t already got a good job you like

[sonic totem]

Once you’ve got 2/3 years experience your degree doesn’t matter that much

[sonic totem]

Well exactly

[serene hawk]

true that

[slim bramble]

Just pull a jjtech

Find a 0day pro max

[sonic totem]

Yeah lol

It’s worth half the points

[slim bramble]

And get a job

[sonic totem]

I’m trying

[slim bramble]

Ping me first when you find checkm9 super pro

[sonic totem]

I’m not looking for ROM bugs rn

Well not in A12+ anyway…

[slim bramble]

😭

[sonic totem]

I have like 3(?) projects going at the same time

Pain

[slim bramble]

Is it fun to stay 10h+ looking at binja ?

[sonic totem]

No

[slim bramble]

[sonic totem]

I have PTSD of Binja from diffing CoreTrust

[slim bramble]

Oh

[acoustic imp]

whats this mean ?

[slim bramble]

Push

[acoustic imp]

i have checks to see if the views r there why is it doin thees

[slim bramble]

New coretrust exploit eta

[radiant idol]

brother

[acoustic imp]

(dont mind the 15 .superview's)

[radiant idol]

how far does it go

im afraid to ask

[acoustic imp]

idk how to get a referance

[sonic totem]

2 years

[radiant idol]

BRO

the most I've ever done is like 3-4

[slim bramble]

Tbh leave school and work fully on coretrust exploit

[sonic totem]

I’ve considered it lol

[slim bramble]

Lmao

[acoustic imp]

what esle would u spose i do

[serene hawk]

@acoustic imp https://medium.com/@rajeshvelmani/best-practices-for-writing-clean-and-maintainable-code-8de6ffca3986

[radiant idol]

hold on bruh I can't let this stay

one moment

[slim bramble]

I would leave cuz I’m just bored at school but I need to finish to attend an engineering school

[radiant idol]

what is this hooking

what class

[slim bramble]

Basic shit

[acoustic imp]

i belive MRUNowPlayignView

[sonic totem]

See I don’t need to finish which is the problem lol

[radiant idol]

ok

[sonic totem]

Why do I need an A-level in economics

[acoustic imp]

@radiant idol MRUNowPlayingView

[sonic totem]

If I’m never gonna need it again

[slim bramble]

Well it’s just a qualification

I ain’t getting anywhere without the french equivalent of A level

[serene hawk]

for building your own business i suppose

[sonic totem]

Hmm what’s that again

It’s not IB is it?

[slim bramble]

Wait for him to release PaidJB only 10$ a month

[slim bramble]

BAC

[sonic totem]

That’s A-level business 🤓☝️

[sonic totem]

Ah yeah

I took A-level French for like three months

But dropped it

[serene hawk]

based

[sonic totem]

I dropped it to devote more time to diffing CoreTrust

[radiant idol]

ok nvm the lockscreen is cursed

[acoustic imp]

yes ik

[slim bramble]

But you found the vulnerability anyway

[sonic totem]

Fr

[acoustic imp]

15 .superview's it is

[slim bramble]

At this point isn’t 16player OSS ?

[sonic totem]

Fun fact we went from PoC to automation in like a week

And automation to TS2 in < 48h

[slim bramble]

I’m pretty sure @radiant idol alr have the full source code

[acoustic imp]

i jus inv him

[radiant idol]

i wouldnt be surprised if i can piece it together

[slim bramble]

I’m pretty sure too

[acoustic imp]

u rpobly can exept the notifaction fuckery

[radiant idol]

im gonna cry if i see this

[acoustic imp]

oh u will

[slim bramble]

Bro you don’t wanna see it

[acoustic imp]

i didnt clean my mess's up yet

[slim bramble]

His animateartworktolarge is worse than blackmagic

[radiant idol]

why

[acoustic imp]

that was @slim bramble

[slim bramble]

Oh that’s me

[radiant idol]

why is it a submodule

[slim bramble]

It’s easier to get it

[sonic totem]

@radiant idol I need an app to track my cars in GTA, got any ideas?

[slim bramble]

GTA CAR TRACKER by opa334

[radiant idol]

use iCraze's newest app called Asphalt 10 car eater

[sonic totem]

Not sure if that worked when I tried it

[slim bramble]

🔥

[sonic totem]

Car eater?

[radiant idol]

yes

car eater

[sonic totem]

Sounds like a blast

[radiant idol]

@acoustic imp bro what is going on with these variable names 😭

i feel like i'm having a seizure looking at them

[sonic totem]

[slim bramble]

Don’t take a look at the function name

I’m trying to keep everything sane

[serene hawk]

bro doesn’t know camel case

[slim bramble]

But this man is mad

[acoustic imp]

ik what they do

[slim bramble]

I tried to explain him

[radiant idol]

you know you can just do UIScreen.mainScreen.nativeBounds.size.width right

//artwork LARGO

[acoustic imp]

wheres this

[radiant idol]

at the top of tweak.xm

[slim bramble]

@radiant idol I’m rewriting the code dw

[acoustic imp]

oh this is stolen artfull code

[radiant idol]

um

heres an idea

YOU MISPELLED HEIGHT THERE

[serene hawk]

layoutSubviews

[radiant idol]

NAH

LMAO

[acoustic imp]

me beloved

[radiant idol]

int controlsViewHeight = 0;

%hook MRUNowPlayingControlsView

- (void)setFrame:(CGRect)frame {
    %orig;
    controlsViewHeight = frame.size.height;
}

%end

crazy

or setBounds if you want bounds

[slim bramble]

@sonic totem anyway, how are you making a custom SEPOS without knowing how sep is loaded and handled ???

[serene hawk]

thank you windnight 🙏🏻

[radiant idol]

never mind it got worse

[slim bramble]

Oh bro

No

This reminds me

[acoustic imp]

there temp frame who cares

[slim bramble]

Some deep stuff

[acoustic imp]

oh wait these should be like real things bc they r used alot

[radiant idol]

ok this one is an actual criticism

dont EVER directly call layoutSubviews

always call layoutIfNeeded instead

[acoustic imp]

ok, but y?

[radiant idol]

hold on

[acoustic imp]

(i call it a bunch)

[slim bramble]

It might fuck the location of things

[serene hawk]

does this animation even do anything with duration 0?

[sonic totem]

??

I don’t get what you mean

[restive ether]

rip your battery

[radiant idol]

@acoustic imp im glad you invited me to this because if you were to make it a paid tweak without this code review, yeesh the community would rip ya apart 😭

[vivid dew]

if youre actually using it to layout subviews then its fine

[slim bramble]

Like you are writing a custom SEPOS right ?

[slim bramble]

I’m rewriting everything

[acoustic imp]

how woudl they know?

[slim bramble]

Once I get my hand back

[slim bramble]

Battery issues ?

[restive ether]

when their phone dies in two hours

[radiant idol]

this code is so inneficient its crazy

[native dune]

Battery drain

[radiant idol]

im scared

[sonic totem]

Oh I’m not

[radiant idol]

it works

but like

[sonic totem]

I’m just patching sepOS

[radiant idol]

yikes

[sonic totem]

Specific instructions

[acoustic imp]

how else whould i do it?

where is inecficent

[slim bramble]

Ohhhh like seprmvr64 do ?

[sonic totem]

I know how to boot fully custom images but it’s a pain

[radiant idol]

everywhere 😭

[sonic totem]

Well I’ll be doing it from PongoOS

Pongo already patches sepOS anyways

[radiant idol]

@acoustic imp is this just a temporary method that you'll later remove

[slim bramble]

Well fun

[sonic totem]

Yeah hopefully it goes well

I might post a demo video if I get it working

[acoustic imp]

stuff was there but got moved to layoutsubview, but it might go back if i do it a dif way

[radiant idol]

if not, this is just an extra call and is inefficient code

[sonic totem]

But obviously no public release

[slim bramble]

Can’t you patch sep directly to remove passcode

[sonic totem]

No

[radiant idol]

https://nightwinddev.github.io/Tweak-Tutorial/no_layoutsubviews.html

read this

[sonic totem]

The SEP cannot decrypt user data without you entering the passcode

[radiant idol]

this page specifically please

[slim bramble]

I’ve heard somewhere that apple could sign a SEPOS version that do not have a passcode and boot it to get access to user’s data

[acoustic imp]

yea, well, that the only way

[radiant idol]

no

it is not

[acoustic imp]

well idk set_subclass

[sonic totem]

It never stores the actual passcode, just a hash of the passcode entangled with the device UID iirc

But you can’t just patch the SEP to decrypt the data without a passcode as it physically cannot do it without knowing the passcode

[radiant idol]

@acoustic imp is this for ios 14/15 compat

[slim bramble]

Yes I made this

[acoustic imp]

this was the part that caused the thread hang

[slim bramble]

If it’s wrong blame it on me

[acoustic imp]

it is but im gona chnage it to just use the ivar bc that exists on both 14 and 15

[radiant idol]

ok make sure to set the variable to nil before, just incase
because just declaring the var but not initializing it, and then later using it, is undefined behavior

[slim bramble]

Sadly

[acoustic imp]

oh, i do this w alot of int's

[radiant idol]

PLPlatterView *platterView = [self valueForKey:@"_platterView"];

[slim bramble]

Thanks 👍

[sonic totem]

Apple specifically designed SEP in a way that even if a government forced them, they couldn’t write a sepOS image that got around the passcode

[radiant idol]

ints are fine, they default to 0. object types no

[slim bramble]

Oh @frail cedar was wrong then

[sonic totem]

There’s specific protections involved so that you can’t change the SEP firmware installed without the passcode

[acoustic imp]

so i can delete these

[radiant idol]

no keep that, it's better to make it more explicit

but

[steady nest]

which is bruteforcable if it's a 6 digit passcode

or was

[radiant idol]

not having them also doesnt do much

I like how this chat is becoming a mix of cursed code and actually sane Alfie stuff

[acoustic imp]

huh

[slim bramble]

Ig that by patching sep you can change max passcode attempts before lock

[radiant idol]

there is so much wrong in this image

[acoustic imp]

yea but like idk atm another way

[slim bramble]

Idk why bro is using tags

[serene hawk]

bro doesn’t know if (!existingRedRectangle)

[sonic totem]

You can just stop the counter from ever increasing

So that it always thinks you’ve had 0 failed attempts

[radiant idol]

ok but like at least do this 😭

1. addSubview, not addwsubview
2. if (!existingRedRectangle)

[slim bramble]

Fun™️

[slim bramble]

You make me want to make that bruteforcer

[acoustic imp]

ok, this was also written like 1 month ago

before bibi

[radiant idol]

is there a reason the top one cant be [self.superview removeConstraints:self.superview.constraints]; lol

[indigo peak]

bro 😭

[acoustic imp]

idk this was tinywidget14 stuff

[slim bramble]

@radiant idol how do you efficiently find a view from another with like a 6+ distance

[radiant idol]

uh

you find it once and then store a ref to it

here hold on

[acoustic imp]

thats smart

[slim bramble]

That was my original idea but if there is multiple it fucks up everything

[radiant idol]

@interface SomeView : UIView
@property (nonatomic, strong) UIView *_16p_anotherView; // new custom property
@end

%hook SomeView
%property (nonatomic, strong) UIView *_16p_anotherView; // new custom property

- (void)didMoveToSuperview {
    %orig;
    self._16p_anotherView = self.superview.superview.superview.superview.superview;
}

%new
- (void)exampleMethod {
    UIView *theView = self._16p_anotherView;
    NSLog(@"%@", theView);
}

%end

but again stuff like this isnt recommended but if you must do it, I guess this is the better way

[slim bramble]

I’d just hook init

[radiant idol]

no

thats too early

[slim bramble]

And store the pointer locally

Oh mb

[radiant idol]

the view didnt move to the superview yet when you call init

[tepid olive]

hook alloc

[radiant idol]

oh

[slim bramble]

Well yeah but can’t you do something like this

[radiant idol]

@acoustic imp fix your naming scheme i beg

[acoustic imp]

where eve is that

[radiant idol]

16PlayerRootListController.m would be just fine

[acoustic imp]

pla - player

[radiant idol]

class names are supposed to start with a capital letter

[acoustic imp]

oh

[radiant idol]

i mean they dont have to but like

thats the common rule

[acoustic imp]

on the zane tutorial it said u need a 3 leter prefix, didn;t know you could jus put the name

[radiant idol]

yea it can be whatever

JadeRootListController.m

[slim bramble]

FunnyView view* = nil;
%hook FunnyView

-(void) didMoveToWjayeverp {
view=self;
}
%end

-(void)funcIdfk{
// use the stored view
}

[radiant idol]

yes but global vars are bad

avoid when you can

[acoustic imp]

why? memory

[radiant idol]

yes

[slim bramble]

Cooking code on phone is tough

[radiant idol]

and they F up namespace stuff

use %property

its your friend here

[slim bramble]

Maybe I should learn logos deeper

[radiant idol]

example in Jade

[acoustic imp]

so is this, bad?

[slim bramble]

You don’t have the choice

[radiant idol]

honestly I would add static in front of all of those

[slim bramble]

Oop be like

[radiant idol]

oh no

this is in a header

[acoustic imp]

maybe the colors but the image chnages

[slim bramble]

Well I see a little clearer

[radiant idol]

nvm its in tweak.xm

its fine

[acoustic imp]

any atrocities at the bottom?

[slim bramble]

@radiant idol I’ll dm you smth tell me if it’s accurate or not

[radiant idol]

just say it here

[tough shadow]

Can you make a os like iOS in c?

[frail cedar]

you could but it'd be a pain in the ass

[acoustic imp]

@radiant idol

[tough shadow]

Wydm?

[hasty ruin]

PLRRootListController

[frail cedar]

idk about you but I like my OOP for stuff like an OS

[tough shadow]

Doesn’t iOS use c and c++?

[radiant idol]

whatever the hell this is

[frail cedar]

some C, but mostly objc/swift

[tough shadow]

That’s how I memorized it

[frail cedar]

the kernel is c/c++

[acoustic imp]

what hook is this in

mrucontrolsview?

[frail cedar]

iOS apparently has some c++

but it's mostly objc/swift

[radiant idol]

MRUNowPlayingHeaderView

[tough shadow]

It’s impossible to make a app to make your device go to dfu mode

[frail cedar]

DFU? yes

well, sorta

if you manage to corrupt iboot

it will boot to dfu

[acoustic imp]

this in in layotusubview 🙈

[frail cedar]

but then you have to restore

[radiant idol]

i pinged the wrong guy

oops

@acoustic imp

[hasty ruin]

ADD A SPOILER

[tough shadow]

So you delete your system files in filza?

To do that?

[radiant idol]

😭

[frail cedar]

iboot is not a system file

[tough shadow]

Oh

But how do you break it?

[frail cedar]

iboot is your bootloader.

[slim bramble]

You dd a partition

[frail cedar]

iboot is a separate partition

note that to boot to dfu on a9 and older, you have to break LLB and not iboot (separate partitions I believe)

[tough shadow]

Is it only read-only

[frail cedar]

but a10+, iboot is unified

[acoustic imp]

honeslty idk y the if's like that

[frail cedar]

of course

it's not even mounted in ios

[radiant idol]

BRO

@hasty ruin @hasty ruin @hasty ruin @hasty ruin @hasty ruin

[tough shadow]

Is there an exploit to bypass read-only files?

[acoustic imp]

oops

[frail cedar]

it's. not. a. file.

[tough shadow]

I meant other files

[acoustic imp]

and theres no orig oops

[slim bramble]

How much is didMoveToWindow called ?

[radiant idol]

once

[frail cedar]

i hope not

[radiant idol]

but it is important 😭

[slim bramble]

And no orig

[hasty ruin]

https://cdn.discordapp.com/attachments/688121419980341282/1059693318365265930/gornflag.gif

[radiant idol]

he messed up the view lifecycle

[tough shadow]

Is it impossible to break iOS?

[radiant idol]

you dont call layoutSubviews right after the view moves to the window

[slim bramble]

Cement :

[frail cedar]

no it's very easy

[acoustic imp]

y

[frail cedar]

delete /usr/libexec/logd

[hasty ruin]

1984

[frail cedar]

1984

[slim bramble]

1984

[tough shadow]

what is logd?

[hasty ruin]

log daemon

[slim bramble]

Log daemon

[radiant idol]

log daemon

[radiant idol]

https://medium.com/@nirajpaul.ios/uiview-lifecycle-12435f8de492 read

[frail cedar]

deleting it causes ios to freeze after about 10 seconds

it will not unfreeze

if you force reboot, ios wont boot

you get bootloop

[slim bramble]

A restore fixes it

[frail cedar]

restore your device (i restored to 15.1)

[slim bramble]

Sadly

[hasty ruin]

jade is instant 😎

[frail cedar]

yep

[radiant idol]

MORE

[frail cedar]

rest in piss 14.2 you wont be missed

[slim bramble]

How do cement work @frail cedar

[tough shadow]

I mean you can still jailbreak if you JB your phone if it’s A11 if it’s updated

[hasty ruin]

@primal perch ?

[frail cedar]

it doesn't

[primal perch]

hacked

[frail cedar]

i created it based off incorrect information so it does nothing

[radiant idol]

@hasty ruin

[frail cedar]

well

it will fuck up your bootargs but it wont brick

i could make it brick but im too lazy

[hasty ruin]

[tough shadow]

There used to be a brick button in iOS

[frail cedar]

there never was

[slim bramble]

Is it possible to brick no restore possible ?

[frail cedar]

except in internalui, but all that did was delete iboot

just restore

ez

[acoustic imp]

ssv

[frail cedar]

yes, cement could do that but i have no interest in making it do that

so im not

[slim bramble]

You can restore

[tough shadow]

There was it’s in a iPhone 6s prototype I think

[frail cedar]

prototype

[slim bramble]

How tho

[frail cedar]

.

[frail cedar]

rename snapshot, remount rootfs as rw, touch a file to /, reboot

rip device

[radiant idol]

ok im having a headache from this, once you try and fix this code, please lmk @slim bramble @acoustic imp
or add me to a live share so i can watch you fail to fix the code maybe

kek

[tough shadow]

iOS had one in one of the prototype iPhones

[radiant idol]

icraze

[frail cedar]

did you

fucking

read my message

[frail cedar]

read this ive linked it twice now

[slim bramble]

I am rewriting everything

[acoustic imp]

whats live share?

[hasty ruin]

https://media.discordapp.net/attachments/1159588280577294388/1159588361179254885/Untitled-7.gif?ex=653191d1&is=651f1cd1&hm=81b8901fed47379438a7d8aafa593a70e9c66ba7cf0a59ea7f0cafdf5db55dcb&

[slim bramble]

But only once I get my hand back

[frail cedar]

?

[tough shadow]

Someone should recreate the brick button in settings

[frail cedar]

i could

[slim bramble]

Can’t a dfu fix that ?

[frail cedar]

idc enough

im currently taking a break from ios dev stuff

to write music

[hasty ruin]

lmao

[frail cedar]

restore fails

restored_external checks for ssv break and aborts the restore if it finds one

[slim bramble]

How tf

[frail cedar]

it is an intentional bug apparently

[hasty ruin]

(https://open.spotify.com/track/3IxMaULfjq4IT2IN6v54PB)

[radiant idol]

i heard it got fixed or something

[frail cedar]

yeah it did

in like

16.4 or something

[slim bramble]

So there is no way to fix it ?

[frail cedar]

if your device is running an ios before that fix

[acoustic imp]

@radiant idol now what

[frail cedar]

you can brick

[frail cedar]

send it to apple

[radiant idol]

? ? ?

[brazen timber]

the worse version of codetogether

[tough shadow]

Is rebooting your phone from a app impossible?

[frail cedar]

no im writing actual good music

[tough shadow]

On like 16.7

[slim bramble]

reboot();

[acoustic imp]

?

[frail cedar]

find a way to panic ios

that will reboot

[hasty ruin]

are you disrespecting dreams music

[radiant idol]

@hasty ruin

[hasty ruin]

framesss

[frail cedar]

i have no clue what that is

[tough shadow]

Looks like a shell script

[radiant idol]

send the link to me and @acoustic imp

in dms

[frail cedar]

isartlarge

dying

[hasty ruin]

nah bro what the fuck is this

[frail cedar]

being murdered

should

be

[brazen timber]

i think he's talking abt the minecraft pedo?

[frail cedar]

isArtLarge

centerArt

Capitalize your fucking variables

[slim bramble]

setuid(0); reboot();

[frail cedar]

oh i wasnt sure if it was someone else

sure

[hasty ruin]

LMFAO

[radiant idol]

@frail cedar @hasty ruin

[frail cedar]

kill me

[acoustic imp]

idk y one there, but its like if the artwork is epanded

[frail cedar]

artworkX
artworkY

centerArtWhen

[radiant idol]

i dont think thats the worst part

hold on let me show you something

[frail cedar]

i do not want to see

but ok

[frail cedar]

nope

[slim bramble]

@acoustic imp I am giving you until tomorrow evening to fix everything or I nuke the repo

[frail cedar]

ending

whoever made this

[acoustic imp]

what repo

[hasty ruin]

https://open.spotify.com/track/1f466T8PHzdRdnWBwnvCB3 what is this 😭

[tough shadow]

Someone can make a jailbreak for 16.7 A12 if a ppl and pac and kernel exploit releases

[slim bramble]

16player

[frail cedar]

so everything?

who would have thought

[radiant idol]

@frail cedar

[frail cedar]

Who wrote this

[acoustic imp]

[kind herald]

jade source code (specifically the part that bootloops)

[frail cedar]

bro my website is coded better than this

[radiant idol]

then again I've written bad code too

[frail cedar]

https://thanos.lol/
and it looks like this

[radiant idol]

my code

[tough shadow]

What does kfd do?

[radiant idol]

USED to be my code***

[frail cedar]

switch case my beloved

[radiant idol]

objc doesnt support string switch cases

crying

sobbing

[frail cedar]

swift supremacy

[tough shadow]

What does the WebKit exploit do?

[frail cedar]

i dont know and i dont care

go to #jailbreak

[acoustic imp]

https://cdn.discordapp.com/attachments/688124600269144162/1189761389858930878/banned2.png?ex=65c440a4&is=65b1cba4&hm=4aff4547288c209699d6d1e6dfdfe915cf5c0ace5b59ab126b76b774e26c83d5&

[tough shadow]

Alright

[radiant idol]

it asks you to do this

Go to Google and search for yourself!

[slim bramble]

Jailbreak-me

[acoustic imp]

@radiant idol live share not working

[tough shadow]

Someone could make a web-jailbreak with the WebKit exploit

[frail cedar]

be me
trying to write a song
come up with a cool melody
go to write it down
forget it

[frail cedar]

no

[frail cedar]

i hate this

[radiant idol]

@acoustic imp a lot of these things are easy to fix, most of them are just horrific var names
just fix that and then stop using layoutSubviews for everything

[tough shadow]

Web-jailbreaks are dead

[radiant idol]

@frail cedar

[frail cedar]

bye

[tough shadow]

Until further notice

[slim bramble]

@radiant idol I give you a whip in case @acoustic imp is doing shady things

[acoustic imp]

ok ,but what about the puting label views on the sides of the track, if i hook anything other than layoutsubview it doesnt work

[radiant idol]

you add the views in didMoveToWindow and then make the constraints/frames in layoutSubviews

[radiant idol]

we need a live share

all three of us

wait

its worse than i thought

[kind herald]

cydia 2 for ios 17

[acoustic imp]

huh

[slim bramble]

Why 😭

[tough shadow]

Some guy should name their jailbreak p0is0napple

[radiant idol]

@hasty ruin

[tough shadow]

How do I go to dry mode?

[slim bramble]

What’s wrong with quartzcore

?

[acoustic imp]

i dont think that was me

[slim bramble]

I think I added it but don’t need it

[radiant idol]

the last time you had to import QuartzCore was like 2009

[primal perch]

real

[acoustic imp]

@radiant idol does live share work w ssh?

?

[slim bramble]

Secure Shell (SSH)

Shell

[radiant idol]

? ? ?

[acoustic imp]

no, like im ssh'ed into a mac, in VScode

[tough shadow]

Someone should make a tweak that will brick your device in settings

[slim bramble]

Shell

[radiant idol]

oh

[acoustic imp]

bc it just keeps saying canceld

[radiant idol]

bro shut up ok we get it

[radiant idol]

oh I see I see

ok

[tough shadow]

I need someone to do this

[radiant idol]

WHY

[tough shadow]

Am bored

[acoustic imp]

go to the palera1n server

[kind herald]

just install jade

[slim bramble]

Fr

Jade insta brick

[radiant idol]

@acoustic imp open the project in https://vscode.dev and try live share from there ig

[acoustic imp]

what

i dont wana code on a browser

[slim bramble]

I’m off to bed gn

[radiant idol]

k then

wel

idk

[acoustic imp]

il try it on the mac

ugh im not signed in

@radiant idol how do i share it

[radiant idol]

you... send the link

[acoustic imp]

where the link

[kind herald]

browser

[radiant idol]

press here

press share

[acoustic imp]

got it

[radiant idol]

and it should automatically put the link into ur clipboard

[acoustic imp]

yea i just gota send it to my pc some how

idk if this will work

[indigo peak]

wtf is cephei different on rootless vs rootful

tweak compiles for rootless but not for rootful

./GSPRootListController.h:1:21: error: no submodule named 'Swift' in module 'CepheiPrefs'; did you mean 'HBTwitterCell'?
@import CepheiPrefs.Swift;
        ~~~~~~~~~~~ ^~~~~
                    HBTwitterCell

GSPRootListController.m:17:48: error: definition of 'HBAppearanceSettings' must be imported from module 'CepheiPrefs.HBAppearanceSettings' before it is required
                HBAppearanceSettings *appearanceSettings = [[HBAppearanceSettings alloc] init];
                                                             ^
/Users/fiore/theos/vendor/lib/CepheiPrefs.framework/Headers/HBAppearanceSettings.h:49:12: note: definition here is not reachable
@interface HBAppearanceSettings : NSObject
           ^

this makes zero sense

[serene hawk]

hbappearancesettings is gone afaik

[indigo peak]

moved to a different header

[serene hawk]

ahh alr

[indigo peak]

okkk i figured it out

ifeq ($(THEOS_PACKAGE_SCHEME),rootless)
GameSeagullPrefs_CFLAGS += -DROOTLESS
endif```
in the makefile

#ifdef ROOTLESS
@import CepheiPrefs.Swift;
#else
@import Preferences.PSSpecifier;
@import CepheiPrefs.HBAppearanceSettings;
#endif

and that in my prefs

[radiant idol]

tbh I still don't actually understand this decision

why is it rootless only

i guess but it doesnt hurt to keep backwards compat for stuff like this when people are trying to update old stuff for rootless

also compiling Cephei 2.0 for rootful so that there's no weird version discrepancy

idk, just my thoughts

no yea I agree

ok yea that makes sense too I guess

[tough shadow]

Do you recommend rootless or rootful

[kind herald]

rootless on iOS 15+, rootful on iOS 14 or below

[radiant idol]

today I learned that @acoustic imp's PC is posessed

[acoustic imp]

mac VM or pc who knows

also how doi stop live share

[radiant idol]

idk

@acoustic imp also u know u can develop on windows + WSL right

[acoustic imp]

yea but like i dont have enouhg storage to do that

[radiant idol]

but you have enough for a VM? 😭

[acoustic imp]

its running on my laptop

[radiant idol]

huh?

yea WSL needs like 12 gb i think

[acoustic imp]

i have a desktop and a laptop

[radiant idol]

thats all

[acoustic imp]

oh ok

but like u got f wit the tool chain n stuff

right?

if u want new abi?

[radiant idol]

you cant compile for new abi via WSL but you can just use old abi when testing and then github actions to compile when you want to compile for release

[acoustic imp]

im not using old abi

.

i already have a 2day > uptime as it is

[radiant idol]

yea so what diff does it make

[acoustic imp]

it will make it worse

[radiant idol]

i dont think it can get much worse

[acoustic imp]

i did

iv had it installed and i dint know an i got like 2 reboots aday

[radiant idol]

yeesh

[acoustic imp]

also 71+ tweak isnt helpful

[radiant idol]

wat

oh

i see what you mean

[acoustic imp]

632

[radiant idol]

maybe you should cut down on that

[acoustic imp]

iv tried but use it all

i need a new phone

my 110 charge cycles no bien

cracked back

64gb 4gb ram

[radiant idol]

yikes

[acoustic imp]

also why does system datd take up like half my storage

wth