never heard of him
#development
placid kraken
radiant idol
He seems to be offline unfortunately
placid kraken
OH so thats what those were
restive ether
LLL
radiant idol
Smh
Bolders is a cool tweak though
Props to that guy
Wonder where he went
Wait hm
hasty ruin
the ones in your walls
average react nativer
radiant idol
BR is under GPLv3
hasty ruin
hasty ruin
BR is under GPLv3
Add an exception for him
radiant idol
BR is under GPLv3
could I let him use a part of my prefs (which was not a part taken from another GPLv3 tweak)?
the part that was taken from Atria is in the main Tweak.xm
restive ether
https://becca.ooo/blog/so-you-want-to-ship-a-command-line-tool-for-macos/
interesting.
placid kraken
love
restive ether
no it’s like adguard
kind herald
interesting.
simply a skill issue
restive ether
idk what filter, not checking
placid kraken
Man licenses are hard
someone kept stealing my code so i had to completely unlicense my code and get them to follow copyright law lmfao
brazen timber
could I let him use a part of my prefs (which was not a part taken from another ...
if you are the copyright holder you can generally do whatever you want and dual license or re license to specific people
placid kraken
i love licensing sooooo much 🎀🎀
radiant idol
if you are the copyright holder you can generally do whatever you want and dual ...
Hm ok
acoustic imp
so yay or nay
acoustic imp
i alr started messing with it
hasty ruin
i alr started messing with it
arrest this man immediately
radiant idol
Well he can have the respiring part, idc. I wrote that part by myself, the only part that was taken from another GPLv3 tweak was the part in Tweak.xm
The rest is all my code
placid kraken
so yay or nay
make sure you get a written copy lmfao you dont want nightwind going after you in your sleep 16 years from now because you stole 14 lines from BR
radiant idol
LOL
placid kraken
😭
restive ether
if you are the copyright holder you can generally do whatever you want and dual ...
doesn’t that still only apply to commits made after the relicence
brazen timber
no
acoustic imp
@radiant idol what part did you steal from atria?
brazen timber
that's if you relicense a more restrictive license or something
hasty ruin
As long as you’re not a cunt or big company (so also a cunt), no one gives a fuck about licenses
brazen timber
because most software contracts say that it's irrevocable
nothing is stopping you from being more permissible
acoustic imp
As long as you’re not a cunt or big company (so also a cunt), no one gives a fuc...
litten
radiant idol
<@799410351207612426> what part did you steal from atria?
I didn’t steal anything, I copied some code with some licensing — but it does say it in comments in the Tweak.xm
radiant idol
I didn’t steal anything, I copied some code with some licensing — but it does sa...
Can’t be bothered to look atm
restive ether
i just checked GPLv3 it’s irrevocable @brazen timber
acoustic imp
so its fine if i use the respring menu thing?
brazen timber
i just checked GPLv3 it’s irrevocable <@219915802818773014>
yeah
restive ether
so you’d have to use earlier versions or something else
hasty ruin
so its fine if i use the respring menu thing?
Just use it no one cares
brazen timber
people can still use the previous commits as gpl
nothing is stopping you, the copyright holder from dual licensing as mit, or giving specific people exceptions
acoustic imp
Just use it no one cares
yea i could probly make chat gpt write it so 🤷♂️
restive ether
oh yeah i see what you’re talking about now
restive ether
you can offer a proprietary version alongside a GPL one if you want to
brazen timber
yeah no license can take power away from the copyright holder
because they are the ones who get to enforce it afterall
restive ether
unless it goes public domain i guess, but that’s just a free for all
and that’s not a worldwide accepted legal concept so
acoustic imp
@radiant idol thanks (urs is the second one) also @slim bramble sorta used ur respring thing
should i chnage it so the button opens the alertView ?
i think that would be better
radiant idol
i think that would be better
Your call
radiant idol
<@799410351207612426> thanks (urs is the second one) also <@448800441690619915> ...
__P__ortrait Mode, not “portrait Mode”
radiant idol
<@799410351207612426> thanks (urs is the second one) also <@448800441690619915> ...
“sbreload” not “SB reload”
placid kraken
can i do that?
radiant idol
can i do that?
Yes!
radiant idol
HELL YEAH
radiant idol
LESSSGOOOO
indigo peak
im so confused
did i miss some messages
am i lagging
💀
@radiant idol fix my makefile
radiant idol
<@799410351207612426> fix my makefile
No
indigo peak
after-jellyfishd-stage::
$(ECHO_NOTHING) rm $(THEOS_STAGING_DIR)/Library/LaunchDaemons/com.fiore.jellyfishd.plist$(ECHO_END)
$(ECHO_NOTHING) mv $(THEOS_STAGING_DIR)/Library/LaunchDaemons/com.fiore.jellyfishd.rootless.plist $(THEOS_STAGING_DIR)/Library/LaunchDaemons/com.fiore.jellyfishd.plist$(ECHO_END)
$(ECHO_NOTHING)$(FAKEROOT) chown root:wheel $(THEOS_STAGING_DIR)/Library/LaunchDaemons/com.fiore.jellyfishd.plist$(ECHO_END)
i stole it from sandyd
and it wont compile
im so lost
radiant idol
Isn’t it just
indigo peak
> Making stage for tool jellyfishd…
fakeroot: FAKEROOTKEY set to 1807167095
fakeroot: nested operation not yet supported
make[1]: *** [Makefile:22: after-jellyfishd-stage] Error 1
make: *** [/Users/fiore/theos/makefiles/master/rules.mk:146: jellyfishd.stage.tool.variables] Error 2
after-stage::
indigo peak
radiant idol
Yeah idk
placid kraken
yeah
indigo peak
didnt understand before
placid kraken
maybe i can finish
indigo peak
pea brain
placid kraken
today
twilit jungle
indigo peak
wtf dghost
twilit jungle
indigo peak
```make
after-jellyfishd-stage::
$(ECHO_NOTHING) rm $(THEOS_STAGING_DIR)/Lib...
@twilit jungle do yk whats up w my makefile from these messages or nah
twilit jungle
fakeroot: nested operation not yet supported
indigo peak
not how did you know
i meant how did that happen
ok well
i killed term and restarted
> Making stage for tool jellyfishd…
chown: /Users/fiore/jellyfishd/.theos/_/Library/LaunchDaemons/com.fiore.jellyfishd.plist: Operation not permitted
make[1]: *** [Makefile:22: after-jellyfishd-stage] Error 1
make: *** [/Users/fiore/theos/makefiles/master/rules.mk:146: jellyfishd.stage.tool.variables] Error 2
Should i just put the gear where it says “respring” on the root plist ? Also thoughts?
(Fg ab portrait thing)
And I fg SBreload 😭
tepid olive
what the fuck is that uialertcontroller
indigo peak
alpine tweak
tepid olive
[[alpine]]
faint lionBOT
Powered by Canister
timid furnace
```
> Making stage for tool jellyfishd…
chown: /Users/fiore/jellyfishd/.theos/_/...
Are you on a mac
indigo peak
yeah
indigo peak
but it worked when i compiled libsandy 💀
placid kraken
if you have to disable sip to build a tweak youre doing something wrong i think
placid kraken
ah i see i guess
indigo peak
Fakeroot requires sip disabled because of how it works
dyld[2278]: tried: '/opt/homebrew/Cellar/fakeroot/1.33/lib/libfakeroot.dylib' (mach-o file, but is an incompatible architecture (have 'arm64', need '')), '/System/Volumes/Preboot/Cryptexes/OS/opt/homebrew/Cellar/fakeroot/1.33/lib/libfakeroot.dylib' (no such file), '/opt/homebrew/Cellar/fakeroot/1.33/lib/libfakeroot.dylib' (mach-o file, but is an incompatible architecture (have 'arm64', need '')), '/opt/homebrew/Cellar/fakeroot/1.33/lib/libfakeroot-0.dylib' (mach-o file, but is an incompatible architecture (have 'arm64', need '')), '/System/Volumes/Preboot/Cryptexes/OS/opt/homebrew/Cellar/fakeroot/1.33/lib/libfakeroot-0.dylib' (no such file), '/opt/homebrew/Cellar/fakeroot/1.33/lib/libfakeroot-0.dylib' (mach-o file, but is an incompatible architecture (have 'arm64', need ''))
/opt/homebrew/bin/fakeroot: line 178: 2278 Abort trap: 6 FAKEROOTKEY=$FAKEROOTKEY DYLD_INSERT_LIBRARIES="$FAKEROOT_LIB" "$@"
/opt/homebrew/bin/fakeroot: line 180: 2279 Abort trap: 6 exit $RESULT
make[1]: *** [Makefile:22: after-jellyfishd-stage] Error 134```oh god
timid furnace
Yea use procursus fakeroot
indigo peak
Yea use procursus fakeroot
where i get that
indigo peak
Since when is procursus on Mac
Last time I looked their install on mac guide was coming soon
wooden yarrow
can you use procursus with brew
why not
i mean if there's package collision the one that'll be used is the one that has higher priority in PATH or whatev
but otherwise i dont see how it wouldnt work
they install in different locations
hexed knot
Since when is procursus on Mac
Forever
hexed knot
Last time I looked their install on mac guide was coming soon
Yeah never been “public”
But sileo and procursus been on mac
topaz yew
they install in different locations
ah okay might try it then 
versed nymph
Any idea on how to make apt-cache search show iphoneos-arm packages on Dopamine 2?
I'd like to download packages using apt-get install -d. In Zebra they show up even though they're for iphoneos-arm, but the search command only seem to show packages from Sileo's repositories.
indigo peak
But sileo and procursus been on mac
ok but how to i install either
nvm i figured out both
tough shadow
Hello
versed nymph
I figured out that the command apt-config dump shows me where apt gets the packages from but i'm not sur how I could make it show Zebra stuff
onyx ember
I'd like to download packages using `apt-get install -d`. In Zebra they show up ...
This is not possible, while iphoneos-arm are based on /, iphoneos-arm64 are based on /var/jb. I think apt only sees available packages based on the rootless repos.
versed nymph
Ok so its part of the apt binaries themselves
Damn, any idea how I could download iphoneos-arm packages throught command line?
versed nymph
I GOT IT
slim bramble
__P__ortrait Mode, not “portrait Mode”
Bro it’s annoying, yesterday I spent 1h capitalising everything
Still have not finished
hasty ruin
😭
slim bramble
😭
Watch that crazy tesla_man code
Bro I'm dying from that
how useless is that
please tell me
cedar stag
gm
edgy bluff
LOL
orchid fulcrum
Is there a way to work around this
serene hawk
hi, uhmm does anyone know how i can import Lottie in my tweak?
slim bramble
hi, uhmm does anyone know how i can import Lottie in my tweak?
Uhhh looks like there is a framework in the releases, perhaps you can put that into the sdk and it'll work
serene hawk
alr haven't noticed that one
but besides that, last time i used xcframework theos had some problems with it iirc
and there was no quick fix for it
serene hawk
yeah extracted the arm64 Lottie.framework and placed it inside theos/lib, works now, thanks @slim bramble , haven't noticed the releases inb4 and would have probably compiled from source now lol
slim bramble
yeah extracted the arm64 Lottie.framework and placed it inside theos/lib, works ...
yw ;)
serene hawk
compiled from source now 
acoustic imp
Watch that crazy tesla_man code
It’s bc it wasn’t happy with the var or what ever, I’m gona fix and play with it today
slim bramble
It’s bc it wasn’t happy with the var or what ever, I’m gona fix and play with it...
it crashed me
astral hound
hey, does anyone know why I get this error when compiling a tweak using theos? ```console
main.m:27:9: fatal error: could not build module 'Foundation'
#import <Foundation/Foundation.h>
9 errors generated.
```Can i put an SVG as an image in plist ?
hexed knot
hey, does anyone know why I get this error when compiling a tweak using theos? `...
No you didn’t give the full error
tough shadow
puaf_phypuppet puaf_smith and puaf_landa what’s next puaf_fanta?
harsh junco
astral hound
thank you
crisp frost
Is Procursus even officially compilable on recent macOS versions ( Ventura )? Every time I try I get some undefined symbols error..
Latest I can get it to compile on is Big Sur.
Some packages are fine, it's just that making the bootstrap fails now..
I can retrieve the error string when I install macOS Ventura + compile again, if needed.
ocean raptor
I can retrieve the error string when I install macOS Ventura + compile again, if...
That would be preferable
ocean raptor
Is Procursus even officially compilable on recent macOS versions ( Ventura )? Ev...
It should be, but tbh I haven’t touched procursus in ages
crisp frost
That would be preferable
Alright, will install right now then.
( I downgraded my hackintosh to Big Sur yesterday because of this )
native orbit
works fine for me on ventura
native dune
im on sonoma and it works fine
torn cloud
@radiant idol is this a onesettings issue with dopamine 2? jb icon won’t show, tried clearing cache but doesn’t change anything
slim bramble
™️
crisp frost
That would be preferable
undef: _BZ2_bzReadClose
undef: _BZ2_bzReadGetUnused
undef: _BZ2_bzReadOpen
undef: _BZ2_bzWrite
undef: _BZ2_bzWriteClose64
undef: _BZ2_bzWriteOpen
undef: _BZ2_bzlibVersion
Undefined symbols for architecture arm64:
"_BZ2_bzRead", referenced from:
_uncompress in lto.o
_testf in lto.o
"_BZ2_bzReadClose", referenced from:
_uncompress in lto.o
_testf in lto.o
"_BZ2_bzReadGetUnused", referenced from:
_uncompress in lto.o
_testf in lto.o
"_BZ2_bzReadOpen", referenced from:
_uncompress in lto.o
_testf in lto.o
"_BZ2_bzWrite", referenced from:
_compress in lto.o
"_BZ2_bzWriteClose64", referenced from:
_compress in lto.o
"_BZ2_bzWriteOpen", referenced from:
_compress in lto.o
"_BZ2_bzlibVersion", referenced from:
_main in lto.o
_usage in lto.o
ld: symbol(s) not found for architecture arm64
clang: error: linker command failed with exit code 1 (use -v to see invocation)
gmake[1]: *** [Makefile:41: bzip2] Error 1
gmake: *** [makefiles/bzip2.mk:20: bzip2] Error 2
For example, this is a package that fails to build..
I don't know if it can have anything to do with x86_64 -> arm64 compiling?
ah.. more errors
faint stag
Is there a way to work around this
not sure, i suggest looking at the header
torn cloud
<:shitdev:790744816807575595>™️
slim bramble
always
radiant idol
<@799410351207612426> is this a onesettings issue with dopamine 2? jb icon won’t...
Yeah I’ll take a look
hasty ruin
acoustic imp
When eta
naive kraken
<@799410351207612426> is this a onesettings issue with dopamine 2? jb icon won’t...
the reason for this is that the icon is now only in the assets.car file
faint stag
not the fake lenovo earbuds 😭
hasty ruin
not the fake lenovo earbuds 😭
@tepid olive explain yourself
faint stag
ok at least you got it for that much
sacred orbit
does anybody know how to get the weather temperature of current location?
faint stag
does anybody know how to get the weather temperature of current location?
well there's libpddokdo for getting weather data from the weather app
but you don't really have to use the lib if you implement it in the tweak directly lol
sacred orbit
well there's libpddokdo for getting weather data from the weather app
oh yes thats what i need
lean ermine
is there a way to launch bundle ids from shortcuts
faint stag
is there a way to launch bundle ids from shortcuts
i mean, you can ssh with shortcuts and do it that way
restive ether
uiopen from shortcuts
lean ermine
what ab nonjb
faint stag
you can have a shortcut with the app field being an app that's not cached/installed
but editing the shortcut would break that
and shortcuts would probably fail to open it regardless (i remember this happening with posterboard on 16 betas)
lean ermine
you can have a shortcut with the app field being an app that's not cached/instal...
trying to see if there is a way to ppen spotlight from shortcuts
faint stag
spotlight has an .app but it's still through springboard
so i don't think that's gonna happen
like if you actually unhide the spotlight app and open it, it's not going to launch spotlight
lean ermine
i believe it will if you actually unhide it
because i tried to do this on palerain a while ago lol
sacred orbit
i followed this to install libpddokdo as well as repacked it for rootless and also inserted Lunar_LIBRARIES = MobileGestalt pddokdo but it says here:
ld: warning: ignoring duplicate libraries: '-lc++'
ld: library 'pddokdo' not found```
same with libpddokdoand if i dont add it to LIBRARIES at all its just
ld: warning: ignoring duplicate libraries: '-lc++'
ld: Undefined symbols:
_OBJC_CLASS_$_PDDokdo, referenced from:
in Tweak.m.ed215d3b.o
clang: error: linker command failed with exit code 1 (use -v to see invocation```readme is outdated
sacred orbit
i think im stupid
faint stag
no it's not your fault
sacred orbit
readme is outdated
what should i do then?
faint stag
oh you used my instructions? then those should've worked wtf
sacred orbit
oh you used my instructions? then those should've worked wtf
do i need to import it into Lunar_LIBRARIES?
faint stag
do i need to import it into Lunar_LIBRARIES?
well yes but you have that error because you don't have the dylib
sacred orbit
ok let me try something
faint stag
make sure you ran make not make stage or some other target for libpddokdo
after editing the makefile
because after-all only runs after the all target which make defaults to
sacred orbit
make sure you ran `make` not `make stage` or some other target for libpddokdo
cp: /Users/haxi0/tweaks/libpddokdo/.theos/_/usr/lib/libpddokdo.dylib: No such file or directory
make: *** [after-all] Error 1```make package then make all
and see if that works
sacred orbit
make package then make all
should i try changing TARGET and adding THEOS_PACKAGE_SCHEME=rootless?
faint stag
you can do that by just adding the var after make in the cmdline
and the package scheme already changes the target for you
faint stag
should i try changing TARGET and adding THEOS_PACKAGE_SCHEME=rootless?
okay this was an error on my part
sacred orbit
you can do that by just adding the var after `make` in the cmdline
and the packa...
it was in /Users/haxi0/tweaks/libpddokdo/.theos/obj/debug/libpddokdo.dylib
faint stag
the file should exist after-stage
theos cleans up staging before all is done
sacred orbit
the file should exist after-stage
theos cleans up staging before all is done
uhh i still have no change
ld: warning: ignoring duplicate libraries: '-lc++'
ld: library 'pddokdo' not found
clang: error: linker command failed with exit code 1 (use -v to see invocation)
make[3]: *** [/Users/haxi0/tweaks/lunarswift/.theos/obj/arm64/Lunar.dylib] Error 1
make[2]: *** [/Users/haxi0/tweaks/lunarswift/.theos/obj/arm64/Lunar.dylib] Error 2
make[1]: *** [internal-library-all_] Error 2
make: *** [Lunar.all.tweak.variables] Error 2```ARCHS = arm64 arm64e
INSTALL_TARGET_PROCESSES = SpringBoard
THEOS_PACKAGE_SCHEME=rootless
include $(THEOS)/makefiles/common.mk
TWEAK_NAME = Lunar
Lunar_LIBRARIES += MobileGestalt pddokdo
Lunar_PRIVATE_FRAMEWORKS = SpringBoard SpringBoardServices SpringBoardFoundation SpringBoardUI
Lunar_FILES = $(shell find Sources/Lunar -name '*.swift') $(shell find Sources/LunarC -name '*.m' -o -name '*.c' -o -name '*.mm' -o -name '*.cpp')
Lunar_SWIFTFLAGS = -ISources/LunarC/include
Lunar_CFLAGS = -fobjc-arc -ISources/LunarC/include
include $(THEOS_MAKE_PATH)/tweak.mk
SUBPROJECTS += lunarprefs
include $(THEOS_MAKE_PATH)/aggregate.mk```the steps were for rootful
i'd need to make a condition for rootless
just copy it to $THEOS/vendor/lib/iphone/rootless
sacred orbit
just copy it to `$THEOS/vendor/lib/iphone/rootless`
yess less goo it worked!
thanks
faint stag
yeah this should be the proper one lol
after-stage::
ifeq ($(THEOS_PACKAGE_SCHEME),rootless)
mkdir -p $(THEOS)/vendor/lib/iphone/rootless
cp $(THEOS_STAGING_DIR)$(THEOS_INSTALL_PREFIX)/usr/lib/libpddokdo.dylib $(THEOS)/vendor/lib/iphone/rootless/libpddokdo.dylib
else
cp $(THEOS_STAGING_DIR)$(THEOS_INSTALL_PREFIX)/usr/lib/libpddokdo.dylib $(THEOS)/lib/libpddokdo.dylib
endif
mkdir -p $(THEOS)/include/libpddokdo
cp public/libpddokdo.h $(THEOS)/include/libpddokdo/libpddokdo.h
wtf my tweak stops working after i import the library
sacred orbit
and this is just after linking alone or did you actually make calls in the tweak
only adding the library
in LIBRARIES
im recompiling for rootless
faint stag
sure
it's a simple lib and there's no usage of paths or anything so its strange that it broke
sacred orbit
TARGET = iphone:clang:latest:16.5
THEOS_PACKAGE_SCHEME=rootless
include $(THEOS)/makefiles/common.mk
LIBRARY_NAME = libpddokdo
libpddokdo_FILES = libpddokdo.m
libpddokdo_CFLAGS = -fobjc-arc
include $(THEOS_MAKE_PATH)/library.mk
after-install::
install.exec "killall -9 SpringBoard"
after-stage::
ifeq ($(THEOS_PACKAGE_SCHEME),rootless)
mkdir -p $(THEOS)/vendor/lib/iphone/rootless
cp $(THEOS_STAGING_DIR)$(THEOS_INSTALL_PREFIX)/usr/lib/libpddokdo.dylib $(THEOS)/vendor/lib/iphone/rootless/libpddokdo.dylib
else
cp $(THEOS_STAGING_DIR)$(THEOS_INSTALL_PREFIX)/usr/lib/libpddokdo.dylib $(THEOS)/lib/libpddokdo.dylib
endif
mkdir -p $(THEOS)/include/libpddokdo
cp public/libpddokdo.h $(THEOS)/include/libpddokdo/libpddokdo.h
my makefile
sacred orbit
it's a simple lib and there's no usage of paths or anything so its strange that ...
ye it just breaks
serene hawk
wtf my tweak stops working after i import the library
i had the same happen today for another library i was compiling, uhmm... how do i put this, i fixed it but idk how tbh lol
maybe try instead of compiling the library, compiling libpddokdo.m etc inside your Lunar project
serene hawk
what was the fix?
lean ermine
so i don't think that's gonna happen
my device is on 17.0, just realized i could use roothide bootstrap, does ssh and the open package work on roothide?
sacred orbit
what was the fix?
instead of just doing make i did make do which compiled the project, installed on my device, and copied the dylib to the folder
i just did make
sacred orbit
```ARCHS = arm64 arm64e
TARGET = iphone:clang:latest:16.5
THEOS_PACKAGE_SCHEME=r...
also this was my makefile
acoustic imp
is there a way i can make the volume HUD alway show?
faint stag
is there a way i can make the volume HUD alway show?
of course
dunno how do it programmatically
its just a view so you can definitely make it not hide
acoustic imp
🥲
acoustic imp
try hooking the right method
it returns 0 but doesnt show the hud, thanks
placid kraken
ofc, thx
i think improving your spelling skills might directly correlate to a significant improvement in your programming skills
you should consider taking a break from programming at one point and try to improve your spellings
im serious, it might actually help
acoustic imp
k, idk where to like study tho
indigo peak
@acoustic imp is english your first language
acoustic imp
yea
indigo peak
acoustic imp
😭
sacred orbit
@faint stag it works! thanks
placid kraken
k, idk where to like study tho
the internet is a big place
acoustic imp
and im a little person
placid kraken
i found https://spellquiz.com within a few mins
timid garden
lean ermine
didn't say uiopen wouldn't work
is there a terminal package that lets you run keyboard shortcuts
because then this could be done elegantly lol
faint stag
that would probably end up being a tweak and not just a command line tool
don't think it exists tho
indigo peak
@acoustic imp does 16player have detection for when the user opens the artwork into full screen
acoustic imp
<@755485349060280351> does 16player have detection for when the user opens the a...
wdym, theres a bool for if it large or not
acoustic imp
why? i can post a notifaction
indigo peak
wdym, theres a bool for if it large or not
actually, the bool should be good enough I think
how do you access the bool
indigo peak
(crazy I’m asking teslaman for help)
acoustic imp
(crazy I’m asking teslaman for help)
for what
placid kraken
Detect when it changes
ofc, you can make an NSUserDefaults key observer
acoustic imp
How do I check if the music player is large
like 16Player my tweak?
placid kraken
if thats what you mean
acoustic imp
or are you talking ab ios 16 ?
indigo peak
like 16Player my tweak?
I meant. In your tweak. Does it have a way to detect when it changes.
wait
I’m dumb I forgot your tweak doesn’t support iOS 16
placid kraken
..it doesnt?
indigo peak
ok so lemme rephrase
faint stag
I’m dumb I forgot your tweak doesn’t support iOS 16
yeah it's the 16 player for ios 14+
indigo peak
does anyone know how to detect when the album artwork is big or not on the lock screen
faint stag
does anyone know how to detect when the album artwork is big or not on the lock ...
there's gotta be an open source ls tweak somewhere
placid kraken
lemme look quickly
wtf
how is the flex in the music player
and how are there 2
lean ermine
that goes hard
tough shadow
Hello
indigo peak
there's gotta be an open source ls tweak somewhere
I could prob just hook the music player and check the pos/size or smth of the album artwork since when it’s big it’s not on the actual player
faint stag
you could
slim bramble
@hasty ruin do you know the name of the volume hud header ?
indigo peak
<@883412614699446283> do you know the name of the volume hud header ?
Idk how outdated this is:
slim bramble
Thanks
radiant idol
the reason for this is that the icon is now only in the assets.car file
if ([fileManager fileExistsAtPath:@"/usr/lib/systemhook.dylib"] && [fileManager fileExistsAtPath:@"/var/jb/basebin/basebin.tc"]) {
if ([fileManager fileExistsAtPath:@"/var/jb/.installed_fugu15max"]) {
jailbreakImage = appIconForBundleID(@"de.pinauten.Fugu15");
} else if ([fileManager fileExistsAtPath:@"/var/jb/.installed_dopamine"]) {
jailbreakImage = appIconForBundleID(@"com.opa334.Dopamine");
}
}
This is what I have currently. It works for Dopamine 1.X. The way I get the image via appIconForBundleID is by looping over all the LSApplicationProxy bundles in [[%c(LSApplicationWorkspace) defaultWorkspace] allInstalledApplications], checking if any of them contain the bundle name (this is to account for sideloaded apps which may have a randomized bundle id), and then cache it.
Honestly at this point I could probably get rid of the Fugu15 Max one
I don't know of anyone who uses it at this point
naive kraken
```objc
if ([fileManager fileExistsAtPath:@"/usr/lib/systemhook.dylib"] && [file...
what why would you loop over those, you can just initialize an instance of LSApplicationProxy, much faster
basebin.tc does not exist anymore
radiant idol
I swear that's how Sileo used to check it, that's why
naive kraken
Yeah that's also why Sileo thinks Dopamine 2.0 is palera1n
radiant idol
what why would you loop over those, you can just initialize an instance of LSApp...
My thought was that some jailbreaks are installed via AltStore for example, and it randomizes the bundle id
well
it adds a random string at the end
placid kraken
i love being on palera1n rootless on my a14 iphone
naive kraken
My thought was that some jailbreaks are installed via AltStore for example, and ...
hm
yeah ig that's a reason to do it like this
placid kraken
My thought was that some jailbreaks are installed via AltStore for example, and ...
can we just take a moment to appreciate how bad altstore is compared to competitors
radiant idol
yeah ig that's a reason to do it like this
Yeah I mean I only do that once and then cache it
So it's not a major impact on performance
ok well thanks
that was quite helpful
I'll keep that in mind
drifting heron
can we just take a moment to appreciate how bad altstore is compared to competit...
I need sideloadly on Linux
placid kraken
you can always run a macos vm
and ever since trolleystore i haven't even used sideloadly lol
i just airdrop my tipas and open in ts
radiant idol
TS is amazing
slender glade
@restive ether lol this is named over an island that the korean gov has a site to prove that it's not japanese
restive ether
<@272812398308622336> lol this is named over an island that the korean gov has a...
population: 34
slender glade
population: 34
hahhaha
kind herald
can we just take a moment to appreciate how bad altstore is compared to competit...
how is it bad
I use AltStore and it works fine
idle haven
I NEED 16PLAYER NOWOWWW
sonic totem
@granite frigate rewritten the parser in one afternoon 🔥
lean ermine
I NEED 16PLAYER NOWOWWW
update
hasty ruin
<@413331641109446656> rewritten the parser in one afternoon 🔥
rewrote*
sonic totem
It was actually “(I’ve) rewritten” because I was speaking in the present perfect
Nice try bud
hasty ruin
blazing warren
acoustic imp
@hasty ruin nuxus crashed my ipad
acoustic imp
good you dont wanto bc its malware
night rover
<@883412614699446283> nuxus crashed my ipad
nuxus 1.3 with ntwarkdrm
wooden yarrow
<@413331641109446656> rewritten the parser in one afternoon 🔥
o wtf new image3 tool??
oldimgtool
@granite frigate where this tool at
granite frigate
<@413331641109446656> rewritten the parser in one afternoon 🔥
pog
acoustic imp
@radiant idol remember how i was asking you about why your respring blur thing didn't disapear for bolders reborn, why didn't you use a like timeout to make it disapear?
was there a reason or you jus didnt think to
radiant idol
<@799410351207612426> remember how i was asking you about why your respring blur...
Doesn’t work like that
Ig you could kill the settings app after and that would remove it as well
acoustic imp
Doesn’t work like that
It does…
radiant idol
Uh huh
acoustic imp
No blur on prefs 👍
radiant idol
Cool
fiery monolith
On Dopamine 2, is it expected behavior to not be able to read directories and subdirectories under /var/mobile/Containers/Data? It’s owed by root, which I suppose explains why I can’t as mobile user, but this is something I can do on Dopamine 1 / palera1n so wanted to confirm
Actually I lied: I cannot do this on Dopamine 1.x either. Palera1n must do something different
uncut cairn
Hello guys, can I jailbreak my iPhone 7 15.7.1 with Dopamine 2 ??
visual meadow
On Dopamine 2, is it expected behavior to not be able to read directories and su...
you need an entitlement
<key>com.apple.private.security.storage.AppDataContainers</key>
<true/>```
naive sedge
OK, so if I got kernel read/write in Swift Playgrounds by porting the Landa exploit from libkfd to pure Swift, what do I do next?
my end goal is to install something like Dopamine
I assume to get there I need TrollStore
(the goal here is to do this entirely without using sideloading)
naive sedge
I assume to get there I need TrollStore
the TrollStar installer is based on libkfd and works for this version of iOS
but it's complex and seems to include a lot of unnecessary stuff?
so what path exactly needs to be taken? is there any kind of writeup on this? so I don't end up porting unnecessary stuff
as far as I can tell the end goal is the createFolderAndRedirectR in TrollStar, which redirects folders so that it can read arbitrary folders
then it uses kfdOverwrite on one of those redirected folders to write the trollstore app
so to get there from libkfd:
get kern proc
turn kern proc into arbitrary pid proc by reading next to it
get own proc using own pid
change own directory to directory we want
get vnode of directory we want by reading vnode of our current directory near our proc
do same to get other vnode
do some kreds and writes around vnodes to redirect them
use that to redirect folders
so I shouldn't need any of the other stuff in trollstar right?
faint stag
On Dopamine 2, is it expected behavior to not be able to read directories and su...
that's just normal sandbox behavior which is why you need the entitlement
willow lance
so to get there from libkfd:
get kern proc
turn kern proc into arbitrary pid pro...
Unsandboxing with physrw is better than that
naive sedge
Unsandboxing with physrw is better than that
what do you mean?
willow lance
With physrw, you can escalate to root. Then, you can read/write every file under /var
naive sedge
how hard is that? and is the place we want to put the TrollStore persistance helper under /var?
uncut cairn
yes, https://ios.cfw.guide/installing-dopamine/
Thank you, I did it and it’s working perfect 👍
There’s Any good repo for Sileo , to install tweaks ??
granite frigate
how hard is that? and is the place we want to put the TrollStore persistance hel...
yes
granite frigate
is it like a shitposting website or formal
slender glade
is it like a shitposting website or formal
formal
granite frigate
that's fire
slender glade
the favicon can be anything it's fine
granite frigate
damn wtf 🔥
slender glade
:) I was worried it looked ugly
granite frigate
why not your coreserena pfp
slender glade
why not your coreserena pfp
cause it looks like aigis edging
granite frigate
exactly!!!!!!!!!
frosty gale
yoooo, that's fire
slender glade
exactly!!!!!!!!!
☠️
slender glade
yoooo, that's fire
thanks 🫡
granite frigate
yoooo, that's fire
gojo spotted 🔥
wooden yarrow
what do i choose
use one of your pfps or find a new pfp for the website
its ur website i think it should have your own pfp as it's favicon
primal perch
gorn
slender glade
its ur website i think it should have your own pfp as it's favicon
Trying to device
Decide
shrewd smelt
<@557572475429453834> <@413331641109446656> need a favicon for my site
use this 
drifting heron
what’s the best cocoatop alternative or where can I get cocoatop from some official source?
fiery monolith
that's just normal sandbox behavior which is why you need the entitlement
Is there a way to get that via a SSH session?
fiery monolith
you need an entitlement
Is there a way to get that via a SSH session?
astral hound
does anyone know if there is a formatter for swift in vscode on linux?
slim bramble
@silver rampart 🙏 hey, can you fix that please ?
frosty gale
Unsure as to why I'm getting this error
checked TS, and other projects that uses a RootHelper and haven't seen anything that is different from what I’m doing
frosty gale
Anyone may have a clue?
granite frigate
tepid olive
noticed by sacro
sacred orbit
<@805312666830372894> 🙏 hey, can you fix that please ?
yes pls
grim sparrow
Unsure as to why I'm getting this error
you're asking Theos to link a framework called SpringBoardServices but it can't find it in the SDK you're using
sacred orbit
does anybody know how to launch an app in the background?
frosty gale
you're asking Theos to link a framework called `SpringBoardServices` but it can'...
Ahhhh, I see
grim sparrow
Your options are to either not link in SpringBoardServices at compile time and find it at runtime, or find an SDK you can use
https://github.com/theos/sdks good starting place
granite frigate
iirc roothelper doesn't need SpringBoardServices
grim sparrow
yeah idk why it would
frosty gale
iirc roothelper doesn't need SpringBoardServices
Well, I was following what TrollStore’s RootHelper has
granite frigate
trollstore's roothelper does a bunch of stuff
frosty gale
Serotonin also has Springboard Services in its roothelper
granite frigate
ah
I forgot why I needed that
uh try removing it
i think? it was needed for uicache
frosty gale
That would make sense
granite frigate
what SDK are you using?
frosty gale
Uhhh, I haven’t even checked tbh, and I’m not near my Mac rn
Has to be an ios 15 one though iirc
granite frigate
yeah True
frosty gale
I’ll check in a bit and get back to you guys
faint stag
With physrw, you can escalate to root. Then, you can read/write every file unde...
i thought that would be protected by PPL cause of ucred
at least to escalate your own process
torn cloud
dumb question but how do I use timebomb? I’ve installed it but it’s neither in settings nor as a app, do I have to trigger it manually or something?
faint stag
dumb question but how do I use timebomb? I’ve installed it but it’s neither in s...
you don't even have to do anything
it's just a tweak
torn cloud
you don't even have to do anything
what, so it’ll automatically spin lock whenever it feels like it ?
faint stag
what, so it’ll automatically spin lock whenever it feels like it ?
i mean yeah
it's not predictable
faint stag
my battery shows 0%
not related to spinlocks tho
that can happen without a jb
lol
the percentage isn't gonna be related to the battery voltage,
ios will shut down when it reaches a threshold
granite frigate
has anyone gotten a spinlock on palera1n using timebomb?
torn cloud
the percentage isn't gonna be related to the battery voltage,
ios will shut down...
I thought it was a bug or something
Or my battery life is really bad
torn cloud
alright
torn cloud
has anyone gotten a spinlock on palera1n using timebomb?
shouldn't it work for any jailbreak?
since all it does is fill up pages
or am i wrong
torn cloud
true
my battery life isn't great with dopamine 2
is anyone else having this problem?
naive sedge
So, I'm trying to get sem info in pure swift, for libkfd.
This is what I have
func sem_info(_ sem: Semaphore) -> psem_fdinfo {
let syscall_ptr = dlsym(dlopen(nil, RTLD_NOW), "syscall")
let syscall_sem_info = unsafeBitCast(syscall_ptr, to: (@convention(c)(Int32, Int32, Int32, UInt32, UInt64, UInt64, Int32) -> Int64).self)
let sem_info_size = MemoryLayout<psem_fdinfo>.size + 1024
print(sem_info_size)
let sem_info_buf = UnsafeMutableRawPointer.allocate(byteCount: sem_info_size, alignment: 1)
let sret = syscall_sem_info(SYS_proc_info, Int32(PROC_INFO_CALL_PIDFDINFO), getpid(), UInt32(PROC_PIDFDSEMINFO), UInt64(UInt(bitPattern: sem)), UInt64(UInt(bitPattern: sem_info_buf)), Int32(sem_info_size))
assert (sret == Int64(sem_info_size))
let sem_info = sem_info_buf.load(as: psem_fdinfo.self)
return sem_info
}
but for some reason it sets errno 22
any ideas?
torn cloud
swift 
faint stag
swift <:uhh:696449618539708548>
it's for swift playgrounds
so yeah swift
it would be funny to be able to elevate privs from an app store app
torn cloud
it's for swift playgrounds
ah the comfort of coding from a iPad
naive sedge
I mean luckily you can write code on macOS and just transfer the final playground
otherwise this would be very painful
faint stag
yeah cause playgrounds is there for apple silicon
faint stag
So, I'm trying to get sem info in pure swift, for libkfd.
This is what I have
`...
errno 22 is usually invalid argument EINVAL from what i've seen
torn cloud
but what argument is invalid
sem_info is using the wrong system call for retrieving semaphore information
use SYS_semaphore_info instead of SYS_proc_info
naive kraken
has anyone gotten a spinlock on palera1n using timebomb?
spinlock panics only affect arm64e 15.x
torn cloud
spinlock panics only affect arm64e 15.x
16.x+ arm64e isn't affected?
naive kraken
no
torn cloud
cool
torn cloud
no
have you had any reports of fast battery drainage on arm64 devices with Dopamine 2?
i've had some issues
naive sedge
`sem_info` is using the wrong system call for retrieving semaphore information
libkfd does it this way
naive kraken
i've had some issues
check if anything is crash looping
torn cloud
alright
naive kraken
there seem to be some arm64 issues still
torn cloud
libkfd does it this way
elaborate please
faint stag
libkfd does it this way
well looking at the writeup it says:
we use the
proc_info()syscall to retrieve the name of the posix semaphore, which should now be shifted by 4 characters when we hit the right file descriptor.
Overwrite thepinfofield, which is a pointer to apseminfostructure.
Get an 8-byte kernel read primitive frompinfo->psem_uidandpinfo->psem_gidwith theproc_info()syscall for thePROC_INFO_CALL_PIDFDINFOcallnum, which is not denied by the WebContent sandbox.
that was more for @torn cloud actually ^
faint stag
So, I'm trying to get sem info in pure swift, for libkfd.
This is what I have
`...
i mean sret looks to be correct, comparing it to kread_sem_open.h
my suggestion would be to start printing args before they get used ig
torn cloud
@naive sedge have you defined SYS_proc_info and PROC_INFO_CALL_PIDFDINFO correctly?
faint stag
well sys_proc_info is a syscall that should be in basic headers already
just an int with value 336
so idk
and PROC_INFO_CALL_PIDFDINFO is also in sys headers (private) but kfd has it defined in static_info.h as well for that reason i'd assume
sonic totem
has anyone gotten a spinlock on palera1n using timebomb?
It’s a PPL-related bug afaik
Maybe I’m wrong
elder scaffold
naive sedge
er so I tried to do this in normal objective c as a sanity test
I can't even open a semaphore??
sem_open is returning EPERM
apparently some kind of sandbox thing, turned off app sandbox and it's fine now
naive sedge
yeah so I think the issue is the way swift is calling it
yep yep yep
figured it out
swift is passing arguments as registers
just debugged what objective c is doing, it puts it all on the stack since it's varadic
how tf do I tell swift to do that
native dune
are u the pypush guy
visual meadow
yeah i think so
native dune
oh yea i thought i recognized him
naive sedge
ok, so I feel like this would be very hack, but what if I just told swift that syscall had a ton of arguments
the first bunch would be bogus to fill up all the registers
and then it would put the ones I actually cared about on the stack
naive sedge
let syscall_sem_info = unsafeBitCast(syscall_ptr, to: (@convention(c)(
Int32, // syscall #
UInt64, UInt64, UInt64, UInt64, UInt64, UInt64, UInt64, // filler for x1-x7
UInt64, // call #
UInt64, // pid
UInt64, // flavor
UInt64, // arg (semaphore)
UInt64, // buffer
UInt64 // buffer_size
) -> Int32).self)
can anybody help with icloud wipe. i am bootlooping
the device is offline how would that even work i am confused
trying to get the 2 factor code rn i will try when i get it
torn cloud
```swift
let syscall_sem_info = unsafeBitCast(syscall_ptr, to: (@convention(c)(
...
you're using unsafeBitCast to cast a function pointer to a specific function type right?
naive sedge
yes
got the function pointer from dlsym
(it works now, I can get the name of the semaphore in pure Swift)
orchid fulcrum
can anybody help with icloud wipe. i am bootlooping
seems to be an iconcache bootloop. does anybody know if running the battery out and then recharging will fix this
tepid olive
can anybody help with icloud wipe. i am bootlooping
doesn't idevicerestore --wipe work or would that need to be paired with --latest if you can have it recognized by a pc
lean ermine
seems to be an iconcache bootloop. does anybody know if running the battery out ...
it can, is the device able to be online?
why is it offline
orchid fulcrum
its bootlooping
orchid fulcrum
it asks for 2fa and i cant get it as the device is not opening. i will try to get it from my iphone 4s tomorrow. my mom couldnt manage to open it it has battery issues :/
lean ermine
i have heard that dying can fix it
but icon cache bootloop should be able to connect to internet and restore
if you can get the 2fa from another device
how did it happen/are u sure its icon cache
naive sedge
Hey, so does anyone know why my macOS kernel keeps panicing while developing this exploit?
Part C: From KRKW to Cleanup
This exploit does not corrupt the kernel state such that it needs to be cleaned up post-KRKW in order to prevent a kernel panic.
Landa shouldn't cause a panic I thought?
sonic totem
What’s the panic log?
naive sedge
panic(cpu 4 caller 0xfffffe00241b05d4): pmap_mark_page_as_ppl_page_internal: page still has mappings,
ah, so it looks like PPL just happens to try and use it later?
and catches onto the fact that the mappings were never cleaned up?
steady nest
Yes
sonic totem
Oh that’s talked about in the writeup. It’s because you don’t grab enough free pages and so there’s a higher chance that PPL will try to use one of the freed pages
orchid fulcrum
how did it happen/are u sure its icon cache
opa said its probably iconcache. it happened after trying to update dopamine to 2.0.6 while being jailbroken in 2.0.5
naive sedge
Oh that’s talked about in the writeup. It’s because you don’t grab enough free p...
wdym
lean ermine
opa said its probably iconcache. it happened after trying to update dopamine to ...
interesting
sonic totem
But because you’re running through simulator (presumably) your Mac will have more RAM and you’ll need to grab more free pages
orchid fulcrum
opa said its probably iconcache. it happened after trying to update dopamine to ...
device tried to reboot normally and then this happened
lean ermine
let me see if i bootloop rq
orchid fulcrum
let me see if i bootloop rq
nah nobody else is looping as far as i see. this also strenghtens iconcache theory
sonic totem
@naive sedge https://github.com/felix-pb/kfd/blob/main/writeups/exploiting-puafs.md#what-to-do-before-a-puaf-exploit
naive sedge
But because you’re running through simulator (presumably) your Mac will have mor...
ahh, right puaf_helper_give_ppl_pages, I forgot about that 💀
sonic totem
Read that section
sonic totem
ahh, right puaf_helper_give_ppl_pages, I forgot about that 💀
That’s the one
lean ermine
nah nobody else is looping as far as i see. this also strenghtens iconcache theo...
i did not bootloop, nice boost of adrenaline tho
lean ermine
hopefully ur other phone can do the 2fa
orchid fulcrum
i hope so. its an iphone 4 so i am really stressed xd
i can get into recovery mode now btw. you had to do it while itunes is on. still seems offline in find my though
lean ermine
i can get into recovery mode now btw. you had to do it while itunes is on. still...
it can only connect while in the bootloop, not in recovery
but i wouldnt be too worried i have seen some long wait times fix those bootloops
orchid fulcrum
yeah weird. it doesnt
lean ermine
im not sure if the idevice thing dlveol said works or not but mayb that does lol
orchid fulcrum
but i wouldnt be too worried i have seen some long wait times fix those bootloop...
biggest hope is battery strategy rn. really counting on it
orchid fulcrum
im not sure if the idevice thing dlveol said works or not but mayb that does lol
idk about that
idevicerestore ?
lean ermine
i dont think it will work anyway
some ppl say putting it in dfu and kicking it out can fix some bootloops
if u get bored try that
lol
orchid fulcrum
not sure how to kick it out. i have been hesitant to try dfu as u stands for update
orchid fulcrum
okay trying it then
didnt work but atleast its now confirmed that i can go into both dfu and recovery modes
tepid olive
idevicerestore doesn't work?
tepid olive
im not sure if the idevice thing dlveol said works or not but mayb that does lol
and im STILL blocked..
i dont see why you can't run idevicerestore --wipe when in dfu
orchid fulcrum
trying to retain ios version
tepid olive
erase sorry
timid furnace
???
tepid olive
?
timid furnace
i hope so. its an iphone 4 so i am really stressed xd
i'm going to assume you meant iPhone 14
orchid fulcrum
the 2nd device for 2fa is a iphone 4
orchid fulcrum
14 pro max
orchid fulcrum
*** Device is passcode protected, enter passcode on the device to continue ***
orchid fulcrum
what is it
timid furnace
Apple Configurator 2
orchid fulcrum
no i dont (i think)
timid furnace
are you on a Mac
orchid fulcrum
windows/wsl
timid furnace
woe
orchid fulcrum
will just wait for the battery. i hope it gets fixed
timid furnace
you can try pymobiledevice3 backup2 erase-device but idk if that will work BFU
orchid fulcrum
bfu ?
timid furnace
before first unlock
orchid fulcrum
something similiar on imazing didn't. probably this wont too
but i can try if current methods dont work
1 waiting the battery 2 icloud wipe
for 2 my phone seems offline in find my that the issue
idk why
timid furnace
icloud erase won't work without a SIM card in
connecting to wifi doesn't happen until after first unlock
orchid fulcrum
icloud erase won't work without a SIM card in
why cant it use my simcard
the one i normally use
timid furnace
huh?
i'm saying it won't work if it's wifi-only
if you have a SIM card in then it may work
orchid fulcrum
its an iphone i have a sim card
timid furnace
then maybe
orchid fulcrum
still offline though
timid furnace
no clue if the system is up enough for that to process
orchid fulcrum
maybe it just looks offline but it still works https://github.com/opa334/Dopamine/issues/279 i cant access github because off 2fa too. can somebody ask the guy if it said offline for him too 😭
slim bramble
What you could do it tether the phone using an Ethernet adapter
That would work I think
timid furnace
maybe it just looks offline but it still works https://github.com/opa334/Dopamin...
just open it in incognito
i cant even erase my iphone from icloud site
erased successfully after putting Sim card with cellular data internet enabled
timid furnace
What you could do it tether the phone using an Ethernet adapter
yea this is a valid strat although the likelihood that they have this on hand is pretty low
and again, assuming the system is up enough for the icloud reset to come through
which it may not be
slim bramble
Oh wait you should also remove the SIM card pin
slim bramble
yea this is a valid strat although the likelihood that they have this on hand is...
I need to buy one for me 🙏
orchid fulcrum
What you could do it tether the phone using an Ethernet adapter
rj45-lightning right ?
slim bramble
Yes
orchid fulcrum
probably the best bet
slim bramble
Have you tried removing your sim’s code
orchid fulcrum
Have you tried removing your sim’s code
how ? get it out to another phone disable and re enter it to my phone ?
slim bramble
how ? get it out to another phone disable and re enter it to my phone ?
Yes
naive sedge
But because you’re running through simulator (presumably) your Mac will have mor...
I'm currently grabbing 100k pages, still not helping...
timid furnace
do you have a SIM pin?
orchid fulcrum
yes
timid furnace
oh
bruh
put it into a different device and disable it
it's per SIM, not per device
slim bramble
i think it disables it per device
No it disable it on the sim
timid furnace
otherwise i could just steal your SIM lmao
orchid fulcrum
oh lol
orchid fulcrum
otherwise i could just steal your SIM lmao
well you have to steal the phone to get the sim so xd
naive sedge
uhhh
so
why is sysctlbyname("kern.maxfilesperproc", &max_files_per_process, nil, nil, 0) returning errno 12 (ENOMEM)
NVM, passing nil is a mistake
orchid fulcrum
my 14 doesnt even have a sim slot
oof
lean ermine
i have a plethora of adapters tho its fine
slim bramble
@orchid fulcrum let us know !
timid furnace
^^^
orchid fulcrum
sure. i will have to do it tomorrow evening though because of many reasons
slim bramble
hope u dont have to update
There is another option which is rj45 adapter
lean ermine
ye
slim bramble
And if he saved his blobs he can FR to 16.6
orchid fulcrum
no blobs unfortunately. i thought they were useless on newer phones
lean ermine
apparently not
slim bramble
I might update my phone lol
naive sedge
I'm currently grabbing 100k pages, still not helping...
Upped it to 1million, still eventually panics, am I doing this wrong
slim bramble
unless ur on ios 15
I’m on 14 lol
slim bramble
12
lean ermine
yea id update
orchid fulcrum
apparently not
is this a new event ?
slim bramble
I need to get that jb chart
lean ermine
is this a new event ?
its something to do with the cryptex on the latest ios 16 version matching the 16.6 one
slim bramble
you can use serotonin
Half broken jb
velvet path
what are you even trying to do
lean ermine
Half broken jb
it's not bad at all
slim bramble
what are you even trying to do
Fix dopamine bootloop
lean ermine
only minor differences
velvet path
what device and iOS
lean ermine
14 plus on 16 something
slim bramble
what device and iOS
Idrk we told him to remove his sim passcode and iCloud erase
lean ermine
@orchid fulcrum
orchid fulcrum
16.5 14pm
velvet path
Idrk we told him to remove his sim passcode and iCloud erase
that should work if it gets that far, provided that they had FMI enabled in the first place
slim bramble
it's not bad at all
Is there a proper sb injection ?
lean ermine
Is there a proper sb injection ?
yep
slim bramble
that should work if it gets that far, provided that they had FMI enabled in the ...
They do
orchid fulcrum
i will try battery emptying first and tomorrow evening i will try removing pin from sim card and try icloud wipe
lean ermine
Oh yeah but packages have to be roothide
yeah, thats the only downside really
lean ermine
lol
its not spyware but it is a hassle
but should be some rootless stuff coming out for it
slim bramble
Mike while you are there
What do you think that iPhone 12s on iOS 14 should do
I’m tempted to update using the FR method lol
velvet path
you’re not able to go to 16.x
slim bramble
you’re not able to go to 16.x
Even with blobs ?
velvet path
correct
slim bramble
Why not ?
velvet path
cryptex
slim bramble
Yeah but isn’t latest cryptex compatible with iOS 16.6
lean ermine
now that i think of it the requirement is that u are on an ios 16 version above 16.6
right
velvet path
latest for devices that ended on 16 is
velvet path
now that i think of it the requirement is that u are on an ios 16 version above ...
no?
timid furnace
also SEP is incompatible anyway
velvet path
also SEP is incompatible anyway
did 17 make SEP incompatible with 16?
velvet path
sheet is based on cryptex
slim bramble
Oh so I am fucked on my old ass iOS version with no cryptex blobs smh
velvet path
more than likely 17.3.1 cryptex is compatible to at the absolute lowest 17.2 (and that’s a guess)
orchid fulcrum
battery at 11% but i have to sleep. fingers crossed for the morning
slim bramble
Good luck
lean ermine
how tf u know its 11
orchid fulcrum
have a nice day everyone
lean ermine
good luck
orchid fulcrum
imazing
lean ermine
ah
slim bramble
Ok so I need to save the cryptex blobs now
💀
Maybe one day I’ll get to update lol
naive sedge
So, I'm having no luck getting a semaphore onto one of my PUAF pages
I allocated 2000 PUAF pages, thought that would be enough
like I'm not even seeing anything that looks like a pointer, it's all < PAC_MASK
(that is another question I have... if the pinfo pointer has PAC (it's checked to be > PAC_MASK) then how come we can just shift it by 4? would that not break the signature?)
err
what is going on
Swift runtime failure: arithmetic overflow
when trying to increment and decrement the pinfo pointer
naive sedge
I feel like I’m doing something wrong since this still isn’t working
when I try it on a real device I get panic shared_region_pager_data_return should never get called
on my mac it panics regularly because of the PPL thing despite giving PPL many pages
wicked summit
@import is so cursed
cunning path
Anyone knows how Audiorecorder TS is able to detect incoming call and the moment when call is connected without hooking into system daemons?
naive sedge
So, I actually got it to work on my mac, however, when I try on the real device it is only able to give PPL 83 pages, and thus it panics pretty much instantly
(like it panics before it even attempts krkw, just performing the exploit is enough)
guess i can turn down the requested puaf pages
hasty ruin
maturing is realizing `#import` is better than `@import`
Yeah real
naive kraken
when I try it on a real device I get panic shared_region_pager_data_return shoul...
if you figure out why that happens let us know, seems to be a landa issue. sometimes this panic can happen 30+ minutes after exploitation
naive sedge
No idea, but I just got it working in Playgrounds! https://infosec.exchange/@jjtech/111972970271328598
young meteor
that’s pretty cool tbh
radiant idol
No idea, but I just got it working in Playgrounds! https://infosec.exchange/@jjt...
please tell me you at least use a physical keyboard for typing the code
tepid olive
Jailbreaking swift playgrounds be like
naive sedge
please tell me you at least use a physical keyboard for typing the code
I develop it in Xcode lol, then send a copy over to the iPad every once in awhile
indigo peak
@radiant idol test the tweak :D
radiant idol
my ios 16 device is not charged
indigo peak
radiant idol
make it work for ios 15
indigo peak
i dont have my 15 device w me
id have to go home
(im not going home for another 2 weeks)
kind herald
use the new find my teleportation feature
bleak ore
Dropping a concise summary of the KTRR functioning and possible ideas to exploit the DMA bug. I couldn't really test any of the ideas as I don't have a vulnerable device, but I feel like it is achievable at least in some form: https://gist.github.com/litmuskien/9c3e55c44b07836478f120a6bf4b118a
granite frigate
Dropping a concise summary of the KTRR functioning and possible ideas to exploit...
this is a lot
damn nice writeup
🙏🙏🙏
willow lance
Dropping a concise summary of the KTRR functioning and possible ideas to exploit...
nice work!
tepid olive
Dropping a concise summary of the KTRR functioning and possible ideas to exploit...
Apple also has a register to disable L2 cache flush
bleak ore
Apple also has a register to disable L2 cache flush
Have you tried enabling that
frosty gale
separate roothelper didn't fix the issue
idek why Bootstrap is so difficult to work with
granite frigate
random whitenames dropping something out of the blue:
they’re coding instead of talking on discord
😭
primal perch
fr
frosty gale
is the roothelper able to create folders lol
granite frigate
yes
frosty gale
strange. it still can't create one for me
entilements are correct, code looks fine
the roothelper can be built fine
but no folder is created
orchid fulcrum
battery at 11% but i have to sleep. fingers crossed for the morning
battery trick didn't work. After removing sim pin from another phone i can now see my iphone in find my icloud(good news). it still asks for 2fa though and i only have an iphone4s that has battery issues idk how that will go.
native orbit
there a public api for it?
timid furnace
SecCodeCopySigningInformation
it gives you hella information as well
but if you just want entitlements you just do dictionary[kSecCodeInfoEntitlementsDict]
timid furnace
it's on iOS as well
native orbit
need ppc support
timid furnace
ah
native orbit
i stick to manual methods
timid furnace
https://nsantoine.dev/posts/constructing-our-own-console-app
skimmed this and it looks useful tho
nice
in other news
how do i hook c++ lmao
frosty gale
yeah, I've been looking at this Bootstrap code for like an hour now
timid furnace
i am breaking something when i call orig
frosty gale
Still can't see anything that points to why this junk doesn't want to work
timid furnace
well
cant i just hook the mangled name with MSHookFunction
there's no subclass stuff i have to deal with
also this isn't a virtual function
native orbit
prolly yeah
timid furnace
i just dont get why its either crashing or being fed the wrong parameters
but let me make my hook only call orig
and see if it still dies
native orbit
what exc code u getting
frosty gale
sandbox issue?
timid furnace
yea for some reason if i log from the hook it breaks???
native orbit
taurine kfd flashbacks