development

[tepid olive]

Nah

Objc is weird

[slim bramble]

Life or death question

One will make others bully you

[tepid olive]

Too bad :P

[sacred orbit]

how do you hook a specific uiimageview?

[torn cloud]

how

god no

bro has fallen to the dark side

[sacred orbit]

@acoustic imp how did u do it?

[hasty ruin]

If possible, it’s best to hook either a view controller or at least a parent view with a unique class name

[sacred orbit]

no i dont think i can do that

theres pbuiposterlockviewcontroller

and there are two subviews

PBUISnapshotReplicaView and UIImageView

and the UIImageView is what i need

[tepid olive]

I have a good reason

objc IDE support on non-macos is really bad

swift's IDE support is much better

[hasty ruin]

you don’t need an ide

🥱

[tepid olive]

I'm sure you use one

in fact I know you use one

[hasty ruin]

do i?

[tepid olive]

yes

you sent a screenshot with you using an IDE once

[hasty ruin]

[young meteor]

icraze only uses the github web editor on his phone

[hasty ruin]

I don’t like ides

[tepid olive]

that's something rustaceans say

secret rustacean???

what is everyone's problem with swift anyways 😭

[sacred orbit]

@hasty ruin what if theres an UIView with the name "PBUIPosterWallpaperViewController" and it has the image can i hook that

[torn cloud]

this is why you get a mac

[hasty ruin]

Depends what you wanna do

What are you tryna do

[torn cloud]

has no pointers

[tepid olive]

it does

[torn cloud]

huh

[tepid olive]

https://developer.apple.com/documentation/swift/unsaferawpointer

[torn cloud]

still doesn't make it any better

[tepid olive]

that's like saying

Rust has no pointers

[sacred orbit]

i want to yoink the image (uiimage i guess) from that uiview and set it to a uiimage var

[tepid olive]

too expensive for one that's suitable for development lol

[torn cloud]

intel macs existing:

[tepid olive]

and I can't hackintosh well because amd

[hasty ruin]

Then you can probably just go from vc -> image view -> image

[tepid olive]

would you rather me use Zig?

[torn cloud]

tf is that

[tepid olive]

C but it's more like rust

https://ziglang.org/

yes

I'm using zig

[native orbit]

zig is goated

[tepid olive]

because at least I won't be bullied for using it, and it's an opportunity to learn a langauge I've been wanting to learn for a while

https://github.com/mitchellh/zig-objc

I can defo use it for tweaks

[native orbit]

this works quite well

[torn cloud]

looks alright

[tepid olive]

great! it's decided then

[native orbit]

working with objc stuff in zig is not bad at all

[tepid olive]

I'm also gonna add functionality to the tweak to recognize your facial expression when you unlock your phone

to give specific

welcomes

[torn cloud]

probably needs a truedepth sensor to work

[tepid olive]

nope

[torn cloud]

huh

[tepid olive]

https://github.com/TadasBaltrusaitis/OpenFace

[sonic totem]

@elder scaffold can I steal borrow your stage1 ROP generator from palera1n's openra1n fork for Achilles?

Repo is unlicensed

[torn cloud]

written in MATLAB

intresting

[tepid olive]

I can use this for face recognition as well

@native orbit what IDE do you use for Zig?

[native orbit]

none

i just use vscode or nano

[sonic totem]

staturnz wrote a neofetch alternative in assembly 🔥

[tepid olive]

fair enough

[tepid olive]

nano

hm

I mean

I prefer using an IDE because it's faster

but like

[native orbit]

@sonic totem

[sonic totem]

Wanted to see if it would paste the colours lol

[tepid olive]

now I probably can't use theos with zig

so I'll have to pack everything myself

[native orbit]

makefiles 🔥

[tepid olive]

no

makefile language bad

[native orbit]

its annoying to use but effective

[tepid olive]

https://taskfile.dev/

this better

[sonic totem]

https://github.com/opa334/ChOma/blob/main/Makefile

When opa wrote this I was lost

[tepid olive]

lol

[native orbit]

u should see the one i wrote for a project that was for mac, windows, linux, bsd, ios, and android 💀

[tepid olive]

oh no

[sonic totem]

Please don't burn my eyes

[native orbit]

asm was easier to read lmao

[tepid olive]

I imagine

lol

[acoustic imp]

What are you trying to do

[tepid olive]

what should I call my tweak y'all

[hasty ruin]

balls 2

[tepid olive]

no

[hasty ruin]

L

[tepid olive]

it's a face id for ipad and older iphone tweak

that name makes no sense

[hasty ruin]

[tepid olive]

I'll call it

meniscus

[torn cloud]

@tepid olive this is a good name

[hasty ruin]

fr

[torn cloud]

just make it based on [[ball]]

[faint lion]

Ball

my ball

Author

frcoal

Version

0.0.6

Price

Free

Repo

frcoal

Bundle ID

cfd.frcoal.ball

Powered by Canister · Mar 1, 2024, 7:46 PM

[placid kraken]

self.subviews[1]

or you can PBUISnapshotReplicaView self.superview.subviews[1]

im assuming you would do that in layoutSubviews or something

idk how it works if youre in swift but yea

[acoustic imp]

why do you need it ???

[placid kraken]

oh and ofc you need to check [subview isKindOfClass:[UIImageView class]]

[sacred orbit]

get an uiimageview

[acoustic imp]

like get the image from it ?

[sacred orbit]

for uhh

[sacred orbit]

yes i want to get the wallpaper

on ios 16

[acoustic imp]

oh

you can just ceate a like UIImageView var and the UIImage for the UIImageView is just (the UIImageView).image = (UIImage)

[sacred orbit]

well how do i hook a specific uiimage?

[acoustic imp]

you dont need to

hook the VC above it

and it will probly have a property to get a referance to the UIImageView

whast the name of the VC ?

[sacred orbit]

arent there multiple PBUISnapshotReplaceViews

[acoustic imp]

that fine, you can do some trolling then

[sacred orbit]

PBUISnapshotReplaceView

[acoustic imp]

how many though?

[sacred orbit]

PBUISnapshotReplicaView*

[acoustic imp]

@sacred orbit

jus search PBUISnapshotReplaceView in flex

how many of them are there

[sacred orbit]

3, two on same level, one is hidden an in a lower subview

[acoustic imp]

ok

you can just hook it

now

does the one you want have a super View with a different class that the other PBUISnapshotReplaceView superview's classes ?

(do you understand that? ^)

[sacred orbit]

uhh not sure how to check that

[acoustic imp]

ok so in flex got to the PBUISnapshotReplicaView you want

[acoustic imp]

and click the "superView" button

[acoustic imp]

oh you can probably just hook the viewcontroller

this

[sacred orbit]

which one

oh

k

and if i hook it what do i do

[acoustic imp]

are there anymore of, on SB ?

[sacred orbit]

like this?

[sacred orbit]

nope

just this

single

[acoustic imp]

ok

so go to it

and send a SS of its property's

[sacred orbit]

there are 234 properties

[acoustic imp]

actully nvm i can do it

[sacred orbit]

it has UIView superview and NSArray subviews

[acoustic imp]

hm

then ig just hook the PBUISnapshotReplicaView

and do a check to see if that instance of PBUISnapshotReplicaView's superView's class is PBUIPosterLockViewController

one sec i can wrtite it

%hook PBUISnapshotReplicaView
- (void)didMoveToWindow {
    if ([[[self _viewControllerForAncestor] parentViewController] isKindOfClass: %c(PBUIPosterLockViewController)]) {
        //your code goes here 
    }
}
%end```

now to get the image view

PBUISnapshotReplicaView has a UIImageView property so that makes it easy

for PBUISnapshotReplicaView, can you scroll to the bottom in flex so i can see like what its super class is

@sacred orbit

[sacred orbit]

ty, lemme try it

[indigo peak]

blud thinks hes a developer

[acoustic imp]

but ik how to do what he wants to do

so

50%

[torn cloud]

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that a host key has just been changed. The fingerprint for the RSA key sent by the remote host is SHA256:mi60K77Tk1eE/OAoZkdfiXfAKiVfm0pNtky2X7lGuKQ. Please contact your system administrator. Add correct host key in /Users/rayyankhnz/.ssh/known_hosts to get rid of this message. Offending RSA key in /Users/rayyankhnz/.ssh/known_hosts:1 Password authentication is disabled to avoid man-in-the-middle attacks. Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks. UpdateHostkeys is disabled because the host key is not trusted. root@localhost: Permission denied (publickey,password). [-] An error occurred

am i gettting hacked

i can't exit this fucking ramdisk smh

[acoustic imp]

nah ur device chnaged that was on that ip

its like .ssh/known hosts

[torn cloud]

how do i exit the ramdisk though

[acoustic imp]

delete the entry for the device/IP ur trying to ssh into

[torn cloud]

ok

[acoustic imp]

uhh idk, iv never used ramdisk

[frail cedar]

no, just delete known hosts

[sacred orbit]

i guess it compiled

let me check now

[acoustic imp]

@torn cloud /Users/rayyankhnz/.ssh/known_hosts <- here

[acoustic imp]

no

[torn cloud]

k

[frail cedar]

ssh and reboot or just force reboot

[torn cloud]

yeah this worked

cheers

[frail cedar]

it's not like it matters that much for a localhost device

i rigged it up to store localhost keys at /dev/null

too annoying

[torn cloud]

just trying to dump blobs istg

time to use derverser

[acoustic imp]

@faint stag your time to shine

[sacred orbit]

@acoustic imp and uhh how do i get the uiimageview

:3

[torn cloud]

i'm on rootful so it's fine

[acoustic imp]

right, send me a SS of the PBUISnapshotReplicaView's like super class thing (its the thing at the bottom of flex)

[frail cedar]

use sshrd_scripts in built feature to do so

./sshrd.sh dumpblobs

[acoustic imp]

they made an bash script to do it

[torn cloud]

ik

[acoustic imp]

@sacred orbit ?

[sacred orbit]

oh wait i got it

there is a uiimageview *_ImageView ivar

[acoustic imp]

yep

[torn cloud]

derverser is easier to use imo

i'm on a11 and it's a pain to enter DFU

[acoustic imp]

@sacred orbit do this instead of MSHookIvar -> #development message

[slim bramble]

use ideviceenterrecovery + any dfu helper

[torn cloud]

yeah i'll do that in future

now, how do i verbose boot without checkra1n

hmm

?

[slim bramble]

checkra1n -e VERBOSE=1

[torn cloud]

checkra1n isn't supported on my device though

iphone X 14.4

[slim bramble]

it is

[torn cloud]

well it's telling me otherwise

[slim bramble]

checkra1n is iOS 11.0-14.8.1

[torn cloud]

12.0

[slim bramble]

mb

but it still supports iOS 14.4

[torn cloud]

what does this say then

[slim bramble]

you have to use checkra1n 1337

[torn cloud]

the cli?

[slim bramble]

https://checkra.in/1337

[torn cloud]

ah ok

[slim bramble]

you can also go to options and enable verbose boot

as well as allow untested iOS version

[torn cloud]

still doesn't work

[slim bramble]

L

[torn cloud]

[slim bramble]

idk it's a skill based issue I have never had such issues

[torn cloud]

wait actually i need to make the launchd haxx before i verbose boot with checkra1n

[torn cloud]

false

[frail cedar]

it literally is deverser

[torn cloud]

?

[frail cedar]

it's deverser it just runs over ssh exposed via sshrd

[torn cloud]

derverser doesn't need to boot into dfu mode though

[frail cedar]

deverser is mode agnostic

[torn cloud]

and i don't want to press buttons because i cba

[frail cedar]

all it needs is access to /dev/rdisk1 or /dev/rdisk2 over ssh

[torn cloud]

uhhh

i've ran make

[slim bramble]

????????

[torn cloud]

how do i haxx

hmm

[tepid olive]

you don't

jkjk

[torn cloud]

wait this might be a dumb cxdxn1 moment

[frail cedar]

what are you Doing

[torn cloud]

like a really dumb one

[torn cloud]

https://github.com/cxdxn1/haxx/blob/master/launchd.c

i'm doing this

[frail cedar]

why???

[torn cloud]

because i'm testing something?

why else?

[frail cedar]

ok it was just an abrupt shift from blob dump

[torn cloud]

yes

[torn cloud]

i was dumping blobs just in case this fucks up my device and i have to restore

but on second thoughts, sep wouldn't be compatible

anyway it's checkm8 so i can just reverse changes with ramdisk

[faint stag]

i mean deverser 2 just works

lol

[faint stag]

v2 does implement a check for rootful/rootless
but in the event someone's using a ramdisk they should use rootful mode

[torn cloud]

wait @slim bramble i got checkra1n to work

i had to check skip A11 BPR check

[faint stag]

yeah you're on a11

[frail cedar]

.....

[faint stag]

on ios 14

BPR is gonna prevent you from booting with a passcode lmao

well

[torn cloud]

i checked allow untested ios versions and thought that would be enough 💀

[faint stag]

well that option prevents checkra1n from warning

[frail cedar]

about versions

[torn cloud]

@sonic totem would i have to compile launchd.c into a binary, compile it into an executable, then transfer it on my device?

[faint stag]

yes

it's going to replace the existing launchd

[torn cloud]

ah ok

now how do i create a ARM binary

[faint stag]

i mean step 1 is using a mac or linux with a toolchain

[torn cloud]

i'm on mac yeah

[steady nest]

you run make and it builds it for arm64

[faint stag]

also yeah i'd assume there's a makefile

[torn cloud]

that's it?

[steady nest]

https://github.com/cxdxn1/haxx/blob/c03169e8a376442d853bb76331cea51fdd643c74/Makefile#L7

[torn cloud]

yeah i did that

but it didn't give a output

[steady nest]

define output

it gives you a file

in the same folder

[torn cloud]

wait i ran it again and now it gave me a binary

[sonic totem]

Yes

[torn cloud]

but won't this just replace fileproviderctl?

not launchd itself?

[faint stag]

the instructions are in the readme

[torn cloud]

i'm not trying to replace fileproviderctl

these instructions replace fileproviderctl that's it

[frail cedar]

replacing launchd is different

[torn cloud]

yeah i have to compile a ARM binary i think

[faint stag]

rename /sbin/launchd to /sbin/launchd.real
and then copy the launchd binary you built as /sbin/launchd

[frail cedar]

export CFLAGS="-isysroot $(xcrun --sdk iphoneos --show-sdk-path) -mios-version-min=14.0 -arch arm64"

repeat for ldflags

[torn cloud]

k

thanks

[torn cloud]

i'll try this if the other method doesn't work

[faint stag]

also don't forget to make sure you chmod +x the new one

lol

[torn cloud]

yh

[frail cedar]

i used this to compile shells

combined with CPPFLAGS/CXXFLAGS/CCFLAGS where necessary

Go was different

[faint stag]

the existing makefile has this in it

[frail cedar]

lol nice

[faint stag]

just make launchd
though you might need to set your sysroot to an older one

since xcode (15) is gonna be latest sdk

[frail cedar]

true

get like

xcode 12 or 13

[torn cloud]

cc -Os -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS16.2.sdk -miphoneos-version-min=14.0 -arch arm64 -framework CoreFoundation -framework IOKit launchd.c -o launchd launchd.c:76:27: error: use of undeclared identifier 'FILE_TO_WRITE' int fd = open(FILE_TO_WRITE, O_CREAT | O_WRONLY, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH); ^ 1 error generated. make: *** [launchd] Error 1

[frail cedar]

i think 12 has the 14 sdk

[faint stag]

see

i mean if you have theos sdks

[frail cedar]

yea get older sdk i think

[faint stag]

just use theos ones

[frail cedar]

that has 14.5

not 14.7

[faint stag]

damn

[frail cedar]

prob want the 14.7 one

[faint stag]

technically shouldn't be an issue?

[frail cedar]

15.x would probably work fine though

[frail cedar]

yea but when you're compiling launchd...

[faint stag]

it's not the real launchd tho

this will exec the real one

[frail cedar]

oh will probably be fine then

[torn cloud]

so i rename this launchd to launchd.real yh?

[faint stag]

yes

[frail cedar]

iOS has NFS support?

why

[faint stag]

third step is to copy the haxx binary to /sbin/haxx

[torn cloud]

yeah i'm doing that rn

[torn cloud]

wait do i have to make a folder called haxx

in sbin

[frail cedar]

no it's a binary

[torn cloud]

oh

i glitched

https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads

this toolchain looks good

[faint stag]

you're on macos?

[torn cloud]

yh

[faint stag]

you already have one with xcode

[torn cloud]

i don't think i have it installed

wait nvm i do

[torn cloud]

so i just do gcc -o launchd launchd.c

[faint stag]

no

use clang

[torn cloud]

ok

[faint stag]

also you need all the cflags

[sacred orbit]

finally converted this function to swift myself :3
no cancel pls

    func didMoveToWindow() {
        if let ancestorViewController = target._viewControllerForAncestor() as? PBUIPosterLockViewController {
            //LunarClass().respring()
        }
    }
}```

[torn cloud]

there's more?

what

[cloud yacht]

https://cdn.discordapp.com/attachments/688124600269144162/1189761389858930878/banned2.png?ex=65f26524&is=65dff024&hm=9ca58de9f8934f1c6cb275d7d3cc8cc16f47046b397e244513eccc5be8a8f413&

[slim bramble]

W

[sacred orbit]

why yall have swift so much

i dont get it

[faint stag]

ok
get the ios 14 sdk from apple

[torn cloud]

k

[faint stag]

then you need to edit the makefile to have the target sysroot be that path

[torn cloud]

alright

shouldn't be too hard

[faint stag]

then just make all

but this also assumes you have procursus ldid so that's another thing

[torn cloud]

i have ldid

[faint stag]

from procursus

that matters

[torn cloud]

yeah i do

@faint stag it only shows xcode downloads when i search for the sdk on apple's developer downloads page

[topaz yew]

that reminds me i wanted to try procursus earlier on my mac

i have some time now

[torn cloud]

launchd.c:76:27: error: use of undeclared identifier 'FILE_TO_WRITE' int fd = open(FILE_TO_WRITE, O_CREAT | O_WRONLY, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH); where do i even define FILE_TO_WRITE

[timid furnace]

[sonic totem]

#define FILE_TO_WRITE "/path/to/file"

[torn cloud]

yeah i did something wrong didn't i

[timid furnace]

const char* FILE_TO_WRITE = "/tmp/apple/car/full/free/hd/no/scam/no/survey";

[torn cloud]

the path would just be /sbin/haxx right?

[sonic totem]

Idk

What is that open() call meant to do

No you’re opening the log file

[torn cloud]

attempts to open or create a file specified by FILE_TO_WRITE, if the file does not exist, it will be created

[sonic totem]

I would recommend learning the basics of C before you start doing this

If you have bad code it could screw up your device

[torn cloud]

uh

i learnt the basics of C almost 6 months ago now

is my code really that bad lol

[sonic totem]

No it’s just if you don’t understand this error then you may need more practice

[torn cloud]

ok

[sacred orbit]

@acoustic imp I DID IT

LETS GO FINALLY

[acoustic imp]

cool

[frail cedar]

untethered ????

[torn cloud]

shit my device is bootlooping

[timid furnace]

need pro edition

[torn cloud]

renaming launchd did something

[frail cedar]

damn how much

[frail cedar]

....yes now it can't find launchd lol

[timid furnace]

1 exploit

[torn cloud]

uh it's a checkm8 device

can i fix it

[frail cedar]

I got a BFU bypass once

but i can't reproduce it

[torn cloud]

like can i boot into a ramdisk and rename it back

[frail cedar]

ssh ramdisk and rename it back

[torn cloud]

k

[timid furnace]

pray to tim apple and he will give you iboot exploit

[torn cloud]

eta wen

[frail cedar]

buy apple vision pro and enter code TIMAPPLE to have the Tim Cook app preloaded

from there you can offer prayers to Tim which he may or many not grant

[torn cloud]

wait how do i go into dfu mode from here

nvm i did it

[frail cedar]

just... normally

[torn cloud]

yeah

do i mount filesystem

[frail cedar]

yes

[torn cloud]

k

[frail cedar]

cd /mnt1/sbin

mv launchd.real launchd

[torn cloud]

thanks

it's doing that thing again smh

where even is .ssh

[torn cloud]

thanks it's fixed now

[sonic totem]

@torn cloud /sbin/launchd must exist

[torn cloud]

@faint stag told me to rename it 💀

[sonic totem]

Yes but you can’t have launchd.real without having normal launchd

Otherwise how will the kernel know what to execute

[torn cloud]

on second thoughts that makes sense

[faint stag]

man

[torn cloud]

lol

[granite frigate]

[vivid dew]

[lime pivot]

hmmmm it would have to be to one of these I think https://github.com/gardenfence/blocklist?tab=readme-ov-file#reference-servers

[tepid olive]

I guess I’m installing macOS anyways

It seems zig-objc needs macOS frameworks lol

[tough shadow]

It’s working!

[acoustic imp]

@placid kraken u cheated

smh

[acoustic imp]

wait nvm ur making a completly new slider

[tepid olive]

Ok now that I’m going to macOS

The options for swift and objc are there but I really wanna learn zig so

[acoustic imp]

@placid kraken

[hasty ruin]

[acoustic imp]

@radiant idol would you be able to tell if a tweak hookfs C functions from the dylib ?

[radiant idol]

yeah look for MSHookFunction in ida

[acoustic imp]

i dont have ida, but maybe with ur experience with like dylibs(str_patcher) you could make sm to look in a tweak to check

[radiant idol]

maybe

I guess you could also look in the symbol list to see if MSHookFunction is referenced anywhere

but then some tweaks might not have symbols

idk

basically MSHookFunction is the equivalent of %hookf

and

[acoustic imp]

👍

[radiant idol]

MSHookMessageEx is the equivalent of %hook

[acoustic imp]

and you woul see these int he dylib ?

like you could cntrl + f and see ?

[radiant idol]

well

no

you need to disassemble it

[acoustic imp]

anyones, how would i like fix this, i tried going off flora prefs but that didnt work, so i just tried adding the property manually or what ever and now i get this

        [slider setValue:sliderNum animated:YES];
         ^~~~~~
         _slider
./CustomCells.h:30:40: note: '_slider' declared here
@property(nonatomic, strong) UISlider *slider;
                                       ^
fatal error: too many errors emitted, stopping now [-ferror-limit=]
```(theres more...)

.h @interface SixteenSliderCell : PSTableCell @property(nonatomic, assign) NSUserDefaults *preferences; @property(nonatomic, assign) PSSpecifier *specifier; @property(nonatomic, strong) UISlider *slider; @property(nonatomic, strong) UITextField *numLabel; @end

[native orbit]

just wrote an arm64 C function hooking library in arm64 asm 🗿

[radiant idol]

why

[native orbit]

speed

[radiant idol]

peak staturnz vibes

rewriting code just because

[tepid olive]

@native orbit I spent like 3 hours trying to figure out zig’s package manager lmao

Tbf, it’s really new so

[twilit jungle]

#development message

[indigo peak]

https://media.discordapp.net/attachments/688121419980341282/1139608104447791256/capt.gif

[radiant idol]

LMAO

[tepid olive]

Oh no not again

[native orbit]

yea it still aint the best yet

[radiant idol]

when arm64e hooking library with arm64e assembly

[native orbit]

it does that to

[radiant idol]

oh nice

[native orbit]

method hooking next

[radiant idol]

when function hooking without spinlocks

[indigo peak]

you ruined it

not funny anymore

[acoustic imp]

mb

Hello world

[radiant idol]

what am I loooking at

[acoustic imp]

springboard

[radiant idol]

what are you saying

[acoustic imp]

idk, springboard says hi

[radiant idol]

you sound like mudsplasher

[acoustic imp]

#jailbreak message

(i was inspired)

[acoustic imp]

@placid kraken did u ever get this error ? or one like it ?

ohhhhhhhhhhh im stupid

sry fo ping

[twilit jungle]

[tough shadow]

Stop copying me

[tough shadow]

You stole it

[indigo peak]

you have sent a total of 16,856 messages in #development
755 contain meaning 4.5% of dgh0st's messages were a fr

[acoustic imp]

@indigo peak i need prefs help, what the like propery to no show the sliders value

[acoustic imp]

in plist its showValue

[acoustic imp]

no like if i make a UISlider

like slider.what = NO;

i couldnt fild anything in headers

[frail cedar]

by default it does not

iirc

[acoustic imp]

it is tho

wait

[frail cedar]

i did it by having a separate UILabel with the value though that's probably a horrible way to do it

[acoustic imp]

its a text cell and its the text

stupid me

[frail cedar]

.

[acoustic imp]

thats how im doing it although its a UITextField, so its there for two purposes

can i do PSTableCell instead of like a text or button one ?

[indigo peak]

what

[acoustic imp]

one sec im https://tryitands.ee ing

yes

but its little broken

and the text is still there 😡

[acoustic imp]

for PSStaticTextCells is there a property to eddit the actuall text ?

also wheres the header for it

[indigo peak]

so none of these cells are actual classes

[acoustic imp]

oh

[indigo peak]

theyre all types of PSTableCell

or smth like that

[acoustic imp]

nothing in headers it seems

[indigo peak]

so theres

@interface PSTableCell : UITableViewCell
@property (nonatomic) NSInteger type;
@end

which holds the type

[acoustic imp]

ah

[indigo peak]

typedef NS_ENUM(NSInteger, PSCellType) {
    PSGroupCell,
    PSLinkCell,
    PSLinkListCell,
    PSListItemCell,
    PSTitleValueCell,
    PSSliderCell,
    PSSwitchCell,
    PSStaticTextCell,
    PSEditTextCell,
    PSSegmentCell,
    PSGiantIconCell,
    PSGiantCell,
    PSSecureEditTextCell,
    PSButtonCell,
    PSEditTextViewCell
};

and thats the enum defining which cell is which

[acoustic imp]

surprisingly i actully knew that

(bibi taught me)

[indigo peak]

which is why you manually create a switch like this:

PSSpecifier *someSwitchCell = [PSSpecifier preferenceSpecifierNamed:@"Enabled" target:self set:@selector(setPreferenceValue:specifier:) get:@selector(readPreferenceValue:) detail:nil cell:PSSwitchCell edit:nil];

you dont do like

PSSwitchCell *switchCell = [[PSSwitchCell alloc] initWithTitle:@"Enabled"];

[acoustic imp]

i did ``` slider = [[UISlider alloc] initWithFrame:CGRectZero];

but ik what the num is behind it

[indigo peak]

where are you adding the switch cell

[acoustic imp]

no switchcell

one sec

[indigo peak]

@hasty ruin save this man

[acoustic imp]

also how would i set the sliders X to be like not in never never land

[indigo peak]

send him BBRSliderCell.m inshallah

[twilit jungle]

[indigo peak]

Fuck now I gotta edit the stats 😪

[twilit jungle]

#development message

[sonic totem]

@indigo peak why are you still awake

[primal perch]

@indigo peak why are you still awake

[faint lion]

@sonic totem's timezone is Europe/London 🇬🇧
It is currently 08:32 AM GMT

[kind herald]

british

good morning

[sonic totem]

🇬🇧🫶

[olive peak]

Does anyone know what might be causing substrate to not work?

==> Compiling fishhook.c (arm64)…
==> Compiling mach_excServer.c (arm64)…
==> Compiling hook.c (arm64)…
==> Preprocessing Tweak.xm…
==> Compiling Tweak.xm (arm64)…
In file included from Tweak.xm:8:
/Users/bruh/theos/vendor/include/substrate.h:45:1: error: import of C++ module 'MachO.nlist' appears within extern "C" language linkage specification [-Wmodule-import-in-extern-c]
#include <mach-o/nlist.h>
^
/Users/bruh/theos/vendor/include/substrate.h:43:1: note: extern "C" language linkage specification begins here
extern "C" {
^
1 error generated.

[tepid olive]

yes this is a thing

[primal perch]

try another sdk idk

[olive peak]

Where do i get the sdk? Also do you think it might be an issue of the tweak? Because i didnt have it before, so another sdk makes no sense to me.

[faint timber]

its obvious

another sdk makes perfect sense

because this is an sdk issue

[orchid fulcrum]

How can i enable mute cc toggle ? I copied the default bundle from /system/..../ControlCenter and pasted it to /var/jb/library/ControlCenter but it did not work

I managed to enable it with CCModules tweak but it conflicted with ding tweak. I want it to not activate ding

Which was how it behaved before i needed to factory reset

[sonic totem]

@elder scaffold ?

[slim bramble]

🤨

[sonic totem]

?

[slim bramble]

caught skidding

[sonic totem]

I am never going to figure it out myself lol

[elder scaffold]

meow

I think it's licensed

[sonic totem]

https://github.com/palera1n/openra1n

Not here

Still trying to get the payload generator to work

Somehow missing all the SRAM/VROM addresses

Wait these aren't even those addresses

[slim bramble]

W

[placid kraken]

lmao i actually discovered this yesterday

[elder scaffold]

no it is openra1n

[sonic totem]

So it follows normal palera1n license?

Basically all I need to know is if I can use the stage1 generator in Achilles

[elder scaffold]

i mean, original code is not there

[sonic totem]

https://github.com/mineek/openra1n isn't licensed either

[elder scaffold]

and it is MITed

[sonic totem]

I will assume it is p1

[sonic totem]

Okay good

Thank you

[elder scaffold]

it is also openra1n

[sonic totem]

Yes

[elder scaffold]

.

Since the original is not openra1n, that license does not apply.

[sonic totem]

Oh

[elder scaffold]

I just ported it there

[sonic totem]

Where's original code from?

Ohh is it ra1npoc or something

[elder scaffold]

iirc yes

[sonic totem]

Oh yay it’s MIT

If I ever get it to work in Achilles I’ll be using it but will give credit of course

Yes I see it in ra1npoc now

I’m gonna reset my changes and start again but actually try and figure out how it works

[elder scaffold]

I didn't even remember if I had it public yet because I was still updating it privately lol

[sonic totem]

😅😅

Well the openra1n commit I’m on (an older one) works fine

[elder scaffold]

openra1n is based on gaster

ra1npoc is based on checkra1n

[sonic totem]

Yeah

But I’m talking about the JOP chain generator specifically

[elder scaffold]

If you disassemble checkra1n, you will understand why
checkra1n hardcode only the payload body

I needed to understand the new checkm8 exploit chain

It was handling it a little differently than 0.12.4

[sonic totem]

Yea I was gonna give RE a go

Want to check out the exploit strategy in 1337

No USB resets

[elder scaffold]

I rewrote the A6 checkm8 exploit in the 0.1337 method using ipwndfu checkm8 exploit

[sonic totem]

Yeah I saw actually

a6meowing 🔥🔥

I can use that to learn too

[elder scaffold]

using demote & reset

[sonic totem]

But maybe porting it to Achilles would increase reliability

[sonic totem]

Demote?

[elder scaffold]

after demoting, if you set pc=0 (reset vector) and start over, it will start again from the beginning of the ROM.

[sonic totem]

Oh I thought you meant you demote to exploit

But yeah lol that’s a good plan

I need a ‘special cable’

[elder scaffold]

and enabling force DFU using breakpoint, can track the checkm8 exploit in a demoted state

[sonic totem]

Going back to 0 re-initialises the heap?

[elder scaffold]

I think there is now a clean and legitimate one

[sonic totem]

I have a Tamarin but couldn’t get it to work with LLDB

[elder scaffold]

iirc yes?

[sonic totem]

And no GDB for M1

[elder scaffold]

oh

[sonic totem]

Maybe I should give it another try

[celest star]

Anyone knows how we can setup a repo to serve both rootful and rootless clients at the same time?

[late ridge]

Oi is there an IPC library for rootless I didn’t see any updated

[late ridge]

Checkout the palera1n repo they do just that https://github.com/palera1n/repo

[placid kraken]

does preferences registerDefaults setup the fallback values or does it override the current values?

like if i do

[preferences registerDefaults:@{
    @"floraPrimaryColor": @"#e8a7bfff",
    @"floraSecondaryColor": @"#d795f8ff",
}];
``` will it override the current colors when this code runs

[celest star]

Many thanks

[placid kraken]

even if they already exist

[slim bramble]

@crisp frost for Serotonin to support 17.à do we only need a KRW ?

[sonic totem]

Technically yes

[slim bramble]

But isn't there a 8% rate exploit

[sonic totem]

No

That one wasn't usable

[slim bramble]

oh smh

[granite frigate]

usable or not depends on skill

[olive peak]

ok, where do i get one?

[sonic totem]

Skill your way around zones

[ornate kernel]

bro I need help with my code

can anyone help

#import "ViewController.h"

@interface ViewController ()

@property (nonatomic, strong) UIImageView *airplane;
@property (nonatomic, strong) UIImageView *tower;
@property (nonatomic, strong) NSTimer *timer;
@property (nonatomic) CGPoint direction;
@property (nonatomic) NSInteger speed;
@property (nonatomic) BOOL gameover;

@end

@implementation ViewController

• (void)viewDidLoad {
  [super viewDidLoad];

  self.direction = CGPointMake(1, 0);
  self.speed = 0.5;

  self.airplane = [[UIImageView alloc] initWithFrame:CGRectMake(50, 50, 20, 20)];
  self.airplane.backgroundColor = [UIColor redColor];
  [self.view addSubview:self.airplane];

  self.tower = [[UIImageView alloc] initWithFrame:CGRectMake(200, 200, 20, 20)];
  self.tower.backgroundColor = [UIColor greenColor];
  [self.view addSubview:self.tower];

  self.timer = [NSTimer scheduledTimerWithTimeInterval:0.01
  target:self
  selector:@selector(moveAirplane)
  userInfo:nil
  repeats:YES];
  }

• (void)moveAirplane {
  if (!self.gameover) {
  self.airplane.center = CGPointMake(self.airplane.center.x + self.speed * self.direction.x,
  self.airplane.center.y + self.speed * self.direction.y);

    if (CGRectIntersectsRect(self.airplane.frame, self.tower.frame)) {
        NSLog(@"Game Over");
        self.gameover = YES;
        [self.timer invalidate];
    }
  

  }
  }

• (void)touchesBegan:(NSSet<UITouch *> *)touches withEvent:(UIEvent *)event {
  UITouch *touch = [touches anyObject];
  CGPoint touchLocation = [touch locationInView:self.view];

  if (touchLocation.x > self.airplane.center.x) {
  self.direction = CGPointMake(1, 0);
  } else {
  self.direction = CGPointMake(-1, 0);
  }
  }

@end

[indigo peak]

no ones going to help until you send it as a code block

[ornate kernel]

i have tried everything

[ornate kernel]

k

give me a second

[ornate kernel]

Bro i need to download code blocks

[indigo peak]

wha

bro

send your code like that

[ornate kernel]

oh

[indigo peak]

with ```objc

on the top

[torn cloud]

i actually never knew how to do that

that's cool

[indigo peak]

and ```

[ornate kernel]

just a screen capture then?

[indigo peak]

on the bottom

[indigo peak]

bro

no

[torn cloud]

bruh

springboard keeps crashing anyone know how to fix this

[ornate kernel]

bo what is a code block

[indigo peak]

i told you

you type:

code here...

but all in one message

code here...

[sonic totem]

Okay Fiore

[bleak ore]

Is it true that running binary as TL8/in loaded trust cache is not possible with just a PAC bypass

[ornate kernel]

''' Code here... #import <Foundation/Foundation.h>

int main(int argc, const char * argv[]) {
@autoreleasepool {
// Generate a random number between 1 and 100
int randomNumber = arc4random_uniform(100) + 1;

    int guess = 0;
    int numberOfAttempts = 0;
    
    NSLog(@"Welcome to the Guessing Game! Try to guess the number between 1 and 100.");
    
    while (guess != randomNumber) {
        printf("Enter your guess: ");
        scanf("%d", &guess);
        
        numberOfAttempts++;
        
        if (guess > randomNumber) {
            NSLog(@"Too high! Try again.");
        } else if (guess < randomNumber) {
            NSLog(@"Too low! Try again.");
        } else {
            NSLog(@"Congratulations! You've guessed the correct number in %d attempts.", numberOfAttempts);
        }
    }
}
return 0;

} '''

[indigo peak]

wrong quote

[native dune]

wrong symbol

[indigo peak]

not ' its `

@ornate kernel are you on mobile or computer

[native dune]

balls

[indigo peak]

i never thought id have to send this before

https://www.wikihow.com/Format-Text-as-Code-in-Discord

if you somehow mess up after a wikihow guide you need to go back to 3rd grade

[sonic totem]

Yes

PPL bypass needed

[ornate kernel]

computer

[bleak ore]

Is manually crafting a csblob still possible with just PAC or something in PPL hardened it?

I remembered it was possible to craft your own cs_blob and invoke the PPL tramp to register the blob with PPL pre-iOS 15

[ornate kernel]

sample

[bleak ore]

But PPL gained a lot of functions/checks in iOS 15

[ornate kernel]

oh

i get it now

alr

give me sec

[sonic totem]

Wdym “manually craft a csblob”?

[acoustic imp]

Is there sm file or tweak I can use to make me iOS 16 iPad think it’s an iPhone ?

[slim bramble]

POV hex edit

[bleak ore]

It involved kalloc and filling out a csblobs manually

[sonic totem]

Oh no I believe csblob is PPL-protected

I think

[granite frigate]

:tryitandsee:

[acoustic imp]

@timid furnace ?, I saw sm on someone’s twitter about about this

[sonic totem]

Get me a PAC bypass then

[granite frigate]

ah

true.

uh I don't understand the purpose of adding a csblob to your own thing or why a PAC bypass is needed

[bleak ore]

Chimera used to kcall to register it with PPL but idk if PPL did anything to sanitize/revalidate the blobs you give

[sonic totem]

I doubt that's still possible

But I don't really understand what you mean...

[torn cloud]

i just got banned from legacyjailbreak for scamming people

wtf

[acoustic imp]

@radiant idol do you program in English ?

[young meteor]

legacyjb is weird

it's a blessing really

[bleak ore]

Do you know if it’s possible to run unsigned code exec with PAC but not PPL bypass

[indigo peak]

no, he codes in Hebrew

[bleak ore]

I always assumed trust cache works but seems that PPL got more robust

[torn cloud]

basically the buyer paid me but the money is on hold

so i said i would send the item as soon as i got the money

[sonic totem]

Unsigned? No

[torn cloud]

then i got banned

[sonic totem]

All code has to be ad-hoc signed at least

[torn cloud]

lol

[sonic totem]

Trustcache is protected by PPL

[faint stag]

well it's related to the dock so my best guess is atria

[torn cloud]

alr

[bleak ore]

I mean just invalidly signed

[acoustic imp]

@indigo peak 🎉

[indigo peak]

W

(send code. i need)

[acoustic imp]

It’s basically just floras

[sonic totem]

Oh no it must have a valid code signature

Unless you have a KTRR bypass

[faint stag]

it'll just get killed if the signature is invalid
you'd need to bypass coretrust then

[sonic totem]

Do you mean the code signature is literally invalid, or its not signed with a valid cert?

[placid kraken]

https://github.com/acquitelol/flora/blob/main/Preferences/Cells/FloraSliderCell.m

[indigo peak]

sick

[timid furnace]

uh

trollpad?

[acoustic imp]

Where’s that

GH ?

[placid kraken]

used like

<dict>
    <key>cell</key>
    <string>PSStaticTextCell</string>
    <key>cellClass</key>
    <string>FloraSliderCell</string>
    <key>default</key>
    <real>0.40</real>
    <key>key</key>
    <string>floraSaturationInfluence</string>
    <key>label</key>
    <string>Saturation</string>
</dict>

[bleak ore]

Like adhoc or expired dev certs

[faint stag]

expired is well, expired
would still get killed for codesigning

[timid furnace]

[acoustic imp]

I did, but I need it like the other way around iPad -> iPhone but I can robot mess with it it’s OS

[placid kraken]

other than the text input you can make that with stock specifiers

https://github.com/NightwindDev/Preference-Bundle-Example?tab=readme-ov-file#psslidercell

PSSliderCell

[acoustic imp]

How dumb do you think I am 😭

[acoustic imp]

L

[visual meadow]

does anyone know of a working vnc server for iphone lol

https://github.com/EthanArbuckle/vncforios

[acoustic imp]

Screendump

[visual meadow]

this one is just black screen

[visual meadow]

broken

on 16

[acoustic imp]

oh

Like wdym

[visual meadow]

crash

[sonic totem]

ad-hoc needs trustcahce injection

expired dev cert I don't think you can get away with in 16+

[sonic totem]

Actually Taurine/unc0ver used it

[faint stag]

wait
so you're telling me that ct didn't actually care until later versions

but they have frontboard check expirations lmao

[sonic totem]

No

If CoreTrust verification fails, the binary isn't rejected

It just goes back into kernel code and has its certificate checked iirc

Example: developer certificate

[hexed knot]

XORG ON IPHONE

when are we getting wayland

[acoustic imp]

[slim bramble]

smh

[radiant idol]

????

[hexed knot]

why we got all the brainrot whitenames in development

[kind herald]

no spanish

[harsh junco]

No, Nightwind uses 1C enterprise script

[radiant idol]

ИгорСтр

[kind herald]

what the hell

[harsh junco]

ИтогСтр

[radiant idol]

ой

да

[hexed knot]

Igor

[radiant idol]

я прочитал это как имя Игорь

[slim bramble]

SMH

[restive ether]

crapple

[placid kraken]

inshillah we shall find this bug 🙏

[radiant idol]

rosie moment

go write cursed code again

[slim bramble]

1984

[harsh junco]

OOP

[placid kraken]

show me one instance where my code is cursed

trolley~3

[hasty ruin]

react

[harsh junco]

??????

[acoustic imp]

smh

[harsh junco]

True

[torn cloud]

[placid kraken]

seems like icraze isnt the only 1984 simulation in development

[slim bramble]

I mean that's icraze's code

[young meteor]

true

[torn cloud]

bismillah

[hasty ruin]

I no longer need to do that

mods do it for me

[slim bramble]

Dms are still free

[hasty ruin]

can’t Dm if blocked

[harsh junco]

You can actually mix Russian and English

[placid kraken]

if i dm nightwind something he would delete in development would i get blocked

[young meteor]

bro bribed the mods with nexus codes

[slim bramble]

skill issue

[placid kraken]

shall we test it

[harsh junco]

Yes

[slim bramble]

ETA 30s

[hasty ruin]

Rune source code leak

[kind herald]

about to make rune 2 with that source code leak

[hasty ruin]

(This was the fix to your bug)

[kind herald]

oh

skull

[acoustic imp]

GH mobile app

[harsh junco]

Just disassemble rune

[placid kraken]

can’t, the drm is filler of 90% of the tweak

[slim bramble]

Can't make the same joke about 16Player as it is already OSS

[harsh junco]

Ask icreze for drmless rune

It’s real

[placid kraken]

@hasty ruin ? (i don’t even own rune i lied about decompiling it)

[slim bramble]

He blocked you ?

[young meteor]

dw i will send everyone rune and nexus debs

[placid kraken]

nope

[placid kraken]

i own nexus

i was gifted it

[hexed knot]

If u not on the github app wyd

Cursed c++

[kind herald]

the notes app is better

[hexed knot]

Fuck c++

[placid kraken]

i fucking love the gh mobile app

my only issue with it is startup times

[acoustic imp]

i thought it was jus webviews?

[hexed knot]

This version is alot better

[placid kraken]

no it’s native

[hexed knot]

The old one was so shit

[acoustic imp]

oh they updated??

[slim bramble]

smh

[hexed knot]

In this one u can actually do stuff

[placid kraken]

native

[harsh junco]

[hexed knot]

Im pretty sure its always been native

[placid kraken]

yea except it has react native speeds

everything feels a little slower than it should

[hexed knot]

This is a Next.js project bootstrapped with create-next-app.

Getting Started

First, run the development server:

npm run dev

or

yarn dev

or

pnpm dev

or

bun dev
Open http://localhost:3000 with your browser to see the result.

You can start editing the page by modifying app/page.tsx. The page auto-updates as you edit the file.

This project uses next/font to automatically optimize and load Inter, a custom Google Font.

Learn More

To learn more about Next.js, take a look at the following resources:

Next.js Documentation - learn about Next.js features and API.
Learn Next.js - an interactive Next.js tutorial.
You can check out the Next.js GitHub repository - your feedback and contributions are welcome!

Deploy on Vercel

The easiest way to deploy your Next.js app is to use the Vercel Platform from the creators of Next.js.

Check out our Next.js deployment documentation for more details.

[hexed knot]

Its not bad wdym?

[placid kraken]

sometimes i contemplate to open it in the browser because everything loads faster

[hexed knot]

Yea its def not that bad

[harsh junco]

What happened to this

[placid kraken]

buy nexus refund lunar

me on ios 16:

wait does lunar work on 16???

[harsh junco]

buy nexus refund lunar

[placid kraken]

can’t even fit them all on one page anymore

[radiant idol]

yes

[kind herald]

bigsurcenter spotted

[placid kraken]

i own it but i use jade

[kind herald]

I can't use Jade

[radiant idol]

scroll up so we can see your email and steal it

[kind herald]

I don't have a jailbroken iOS 15+ device

I do have it though

[placid kraken]

yea no

[harsh junco]

… yes

[lyric heron]

bigsur mentioned

[hexed knot]

I only got like 5 tweaks purchased

[lyric heron]

now flipswitch port

[hexed knot]

Only like 1 was actually me buying it

[harsh junco]

I would

[placid kraken]

i think i got gifted maybe 4 of my tweaks

[lyric heron]

do it then

[slim bramble]

fuck off

[lyric heron]

no

never

first port

[harsh junco]

Nightwind I saw you

[slim bramble]

Rick will say hi

[placid kraken]

wait wha

why

[visual meadow]

Spam that image over and over

[acoustic imp]

welcome to the club

[visual meadow]

Thats what I did

[placid kraken]

https://imgur.com/yILdHpZ new flora setup coming soon guys

[visual meadow]

I sent it, icraze deleted it, sent it

Like 20 times

[slim bramble]

now rick mutes for that

[visual meadow]

Oh lol

[placid kraken]

ah ok

[slim bramble]

icraze brainwashed him

😭

[hasty ruin]

[harsh junco]

how do i fix that

[lyric heron]

ping someone smart

[acoustic imp]

real

[slim bramble]

You have to gather the headers on apple's w'ebsite

[harsh junco]

oh REALLY?

[placid kraken]

https://github.com/apple/darwin-xnu/blob/main/bsd/bsm/audit_record.h

[slim bramble]

and I added them inb the project

[placid kraken]

$THEOS/include

[acoustic imp]

what tweak is this

[harsh junco]

THAT HOW IT WORKS???????

[placid kraken]

probably flipswitch

[acoustic imp]

lol

[slim bramble]

I did that for over 20headers

[harsh junco]

oh thx

[harsh junco]

??????????????? why

cant you just download them while installing theos

[slim bramble]

no

and even after that

there is more incomprehensible errors

[lyric heron]

if he fails

can u do it

[slim bramble]

(He will)

[lyric heron]

pretty please

ill buy 5 copies of flora

[slim bramble]

I can look into it as long as you buy 5 copies of 16Player

[lyric heron]

if you get it to work

i'll consider

[slim bramble]

[placid kraken]

is 16player even out yet

[slim bramble]

Tonight perhaps

[placid kraken]

also i have exams for the next few weeks then i need to balance flora and enmity v3 then i have more exams in may then i have from may until september to do whatever the heck i want

[slim bramble]

4 months ?

Damn

[placid kraken]

yea

its the transition from gcses to a-levels

so its like a longer break after 5 years of secondary school

[harsh junco]

QHAR
/theos/include/sys/unistd.h:192:125: error: expected ','
ssize_t freadlink(int, char * __restrict, size_t) __API_AVAILABLE(macos(13.0), ios(16.0), tvos(16.0), watchos(9.0), bridgeos(7.0));
^

[slim bramble]

L

wait till you see deprecation errors

[harsh junco]

warning: 'propertyListFromData:mutabilityOption:format:errorDescription:' is deprecated: first deprecated in iOS 8.0

[slim bramble]

You'll see

[harsh junco]

so what can i do about ,

[placid kraken]

guys i wanna implement a long press popover menu for flora's colors

what do i include? im thinking

• disable color
• copy color name
• copy color type
• reset to default

what else

keep in mind this is for advanced colors

oh and also does anyone have any idea about what could be causing atria's safemodes i wanna fix it eventually

[harsh junco]

copy color code in rgb

[placid kraken]

oh yeah good idea

ill be extending GcColorPickerCell for this

[harsh junco]

@slim bramble any ideas
Undefined symbols for architecture arm64:
"_close$UNIX2003", referenced from:
+[FSSwitchPanel _didReceiveMemoryWarning] in FSSwitchPanel.m.14d6b933.o
"_fchmod$UNIX2003", referenced from:
-[FSSwitchPanel imageOfSwitchState:controlState:scale:forSwitchIdentifier:usingLayerSet:inTemplate:] in FSSwitchPanel.m.14d6b933.o
"_mmap$UNIX2003", referenced from:
-[FSSwitchPanel imageOfSwitchState:controlState:scale:forSwitchIdentifier:usingLayerSet:inTemplate:] in FSSwitchPanel.m.14d6b933.o
"_msync$UNIX2003", referenced from:
-[FSSwitchPanel imageOfSwitchState:controlState:scale:forSwitchIdentifier:usingLayerSet:inTemplate:] in FSSwitchPanel.m.14d6b933.o
"_munmap$UNIX2003", referenced from:
-[FSSwitchPanel imageOfSwitchState:controlState:scale:forSwitchIdentifier:usingLayerSet:inTemplate:] in FSSwitchPanel.m.14d6b933.o
_FlipSwitchMappingCGDataProviderReleaseDataCallback in FSSwitchPanel.m.14d6b933.o
"_open$UNIX2003", referenced from:
-[FSSwitchPanel imageOfSwitchState:controlState:scale:forSwitchIdentifier:usingLayerSet:inTemplate:] in FSSwitchPanel.m.14d6b933.o
"_stat$INODE64", referenced from:
_GetFileModifiedTime in FSSwitchPanel.m.14d6b933.o
"_write$UNIX2003", referenced from:
-[FSSwitchPanel imageOfSwitchState:controlState:scale:forSwitchIdentifier:usingLayerSet:inTemplate:] in FSSwitchPanel.m.14d6b933.o
ld: symbol(s) not found for architecture arm64

[frail cedar]

your linker is set to the wrong sdk probably

that or you forgot to add libraries to the makefile

[harsh junco]

how can i get more verbose output

[frail cedar]

-V

pass to LDFLAGS

[mint leaf]

Which entitlement(s) do I need to add to a given binary to allow it to access /var/mobile? E.g. read files from /var/mobile/mydir, with Dopamine? com.apple.private.security.storage.AppDataContainers doesn't seem to do the trick

[frail cedar]

do you need read or write

[naive kraken]

none