development

[wooden yarrow]

i love encapsulation !! (left is old right is new)

[gentle grove]

ffi moment?

[wooden yarrow]

it does have a wrapper so other langs can access yes

[slender glade]

enums?

[wooden yarrow]

but it does not use ffi itself

[slender glade]

Style.old

Style.new

[wooden yarrow]

where should i be using enums

[slender glade]

to replace _new and _old functions

[gentle grove]

these are functions to be accessed by other non-rust programs?

or what are these functions

[wooden yarrow]

not rn but yes in the future it will be

[gentle grove]

oh because i was gonna say you cant use stuff like references or box-es

but i guess you know that

[wooden yarrow]

yeah

will change the api when it's ffi time

[slender glade]

nah this is like his 2nd time writing rust

be nice to him he's new

[gentle grove]

i was

how was i not being nice

[slender glade]

shut up

[gentle grove]

??????

what did i do to you

[wooden yarrow]

also is this supposed to be like impls on enums?

which would be called uhh methods on objects in like c++

ig

[slender glade]

ye

remove _old and _new and just add a

[wooden yarrow]

ah

[slender glade]

ImplementationStyle

enum

.old

.new

i did this a lot in Swift

it helped with moving stuff later and changing based on impl

[wooden yarrow]

idk what the official style is in rust tbh

but sure i can try that

[gentle grove]

yeah when it's ffi time you just make separate functions which are c-compatible which call the rust code inside themselves

[slender glade]

@frail cedar are you a void *malloc(size_t) call? Because I've been searching all over memory for u

[gentle grove]

i think thats missing an article

[slender glade]

what

that's not missing anything

[frail cedar]

this crashed my discord

[slender glade]

LMFAO MB

[gentle grove]

whitetail called the malloc

[frail cedar]

211 things

[wooden yarrow]

are you a %s format specifier? because you make me feel unsa-

[slender glade]

what's unsafe about %s i haven't written much code since like the start of the year

[slender glade]

211?

[wooden yarrow]

buffer overflow with a single missing null byte

🔥

[gentle grove]

just c string operations in general

[frail cedar]

discord 211

[slender glade]

oh yeah

[slender glade]

211 pings?

[slender glade]

they call me a string cause i have a -1 with my grade

[wooden yarrow]

i think u would cause this

[frail cedar]

you ain't dm me that much while i sleep

[slender glade]

YES I DID

[frail cedar]

nop

[gentle grove]

actually i think its an overrun technically

wait no overread

[wooden yarrow]

hm

true

[frail cedar]

i don't get enough sleep for that to be true

[wooden yarrow]

wow does that mean u left her on read

[frail cedar]

no i wake up

she doesn't have enough time to flood my dms while i sleep

[wooden yarrow]

but did u reply

[frail cedar]

yes

[wooden yarrow]

oh

[frail cedar]

four hours of sleep

[faint timber]

C when you don’t calloc size + 1:
You will overflow now

[wooden yarrow]

C when you do anything:

[frail cedar]

(yes)

[wooden yarrow]

i know what you are

:3

[frail cedar]

that fuckass dog

[faint timber]

[frail cedar]

BRUH

i'm getting eaten by sandbox

[wooden yarrow]

oh

[frail cedar]

connection to service invalidated

sandbox restriction

do you need an entitlement for xpc

no you just need no sandbox i think

ok now it can't find the xpc process

wonderful

[slender glade]

registered in a plist?

[frail cedar]

I thought you were going to sleep

[frail cedar]

yea shows in launchctl list

[slender glade]

I FAILED

[slender glade]

wtf

[frail cedar]

- 0 com.whitetailani.RelocateMe.Reborn.AutomationExtension.XPC

[slender glade]

ugh setting up xpc services on iOS sucks so much

[frail cedar]

ignore that the bundle id is so long

[wooden yarrow]

damn u 2 are too gay for each other fr

[frail cedar]

you have no idea

[slender glade]

@frail cedar I think you could use mach bootstrap functions for ur case tho

[frail cedar]

do i have to do C

[slender glade]

nah

[frail cedar]

THANK GOD

[slender glade]

🥹

it's some dispatch stuff

and mach

lemme try to find the code but gimme like 5 mins

[frail cedar]

ok english is over in like 5 minutes so i can work on it again in

like 2 hours

[slender glade]

@frail cedar in your separate process (spawn with posix_spawn), put:

 let kr = bootstrap_check_in(bootstrap_port, "com.whitetailani.RelocateMe.Reborn.AutomationExtension.XPC", &checkinMachPort)
 let source = DispatchSource.makeMachReceiveSource(port: checkinMachPort, queue: .main)

 source.setEventHandler {
  let lMachPort = source.handle
  didReceiveMessage(fromPort: lMachPort)
}

func didReceiveMessage(fromPort port: mach_port_t) {
  var message: xpc_object_t? = nil
  xpc_pipe_receive(port, &message)

  // message is now an xpc_dictionary, do what u want with it
}

In the client, use:

func servicePort() -> mach_port_t { 
  var out_port = -1
  bootstrap_look_up(bootstrap_port, "com.whitetailani.RelocateMe.Reborn.AutomationExtension.XPC", &out_port)
  return out_port
}

func sendServiceMessage(dict: xpc_object_t) {
  let pipe = xpc_pipe_create_from_port(servicePort(), 0)
  let ret = xpc_pipe_routine(pipe, dict, nil)
  if (ret != 0) { // handle xpc error with xpc_strerror }
}

[frail cedar]

and so the background process basically just always lives

like a daemon?

[slender glade]

Yes but you need to put xpc_main() as the last line in the process for that

[frail cedar]

alright

launchdaemon plist?

[slender glade]

otherwise it'll just exit immediately

no need iirc

[frail cedar]

i need a way to have it always be ready in the background

im trying to get an Intents handler to do privileged actions

[slender glade]

yeah just spawn it once and then keep it alive with xpc_main

[frail cedar]

alright

thanks

[austere crown]

Shoulda used rust

[wooden yarrow]

lmao the convo loops back to rust

[austere crown]

HAHAHHAHA I just scrolled up mored

No but really I am blown away by some tests I did. I wrote some irrelevant library in Rust and the same thing in C. I used snyk to test them for vulnerabilities etc. rust returned 0!!

[gentle grove]

just don't write bad code in c

[placid kraken]

yeah write worse code in rust

Blazingly fast 🔥🔥🔥 memory vulnerabilities 🤭 in pure Rust 🦀🚀

[wooden yarrow]

Why choose cve-rs?

🩸 Bleeding edge technology
🕹️ Paradigm-changing (no more unsafe code!)
🔥 Blazingly fast
💡 Easy to use
🏆 Featuring way 👋 too 2️⃣ many 🤯 emojis in the 📖 readme 🔥 🦀 💨
🦀 Built in 100% memory-safe Rust

[slim bramble]

https://tenor.com/view/1984-skander-big-brother-gif-21303304

[gentle grove]

100% memory-safe Rust
has unsafe code

i mean i guess it has to have unsafe otherwise youd never be able to cause the errors it does

[wooden yarrow]

well yeah

#development message

[gentle grove]

where

what bug

all i saw was them just straight up using unsafe to cause the segfaults, when i looked at ht ecoed

[shrewd moth]

How does he know what to fix?

[feral mirage]

RE

[hasty ruin]

swiftui causes global warming

[ashen birch]

swiftui caused zefram to exist

[native orbit]

zefram but in swift

[wooden yarrow]

https://github.com/Speykious/cve-rs/blob/main/src%2Flifetime_expansion.rs#L1-L18
https://github.com/rust-lang/rust/issues/25860

[torn oriole]

(swift jumpscare)

[ashen birch]

Eminem would not say this !

[torn oriole]

calling all nerds

Who knows how com.apple.System.rtc-offset works

[slim bramble]

What is bro goofing

[torn oriole]

Yearning to actually set the time properly

[gentle grove]

i despise stale bots

generates so many junk mails for everyone subscribed to the thread, and you close important issues

[hasty ruin]

real

[cloud yacht]

So true

[slim bramble]

for real

[cloud yacht]

Also encouraged garbage "bump" or "this is still an issue" messgass

[reef trail]

only thing worse are the ones which make you star the project to make an issue

[hasty ruin]

what.

[cloud yacht]

I've never seen those

[gentle grove]

what in tarnation

ive never heard of that

[hasty ruin]

Fr

Though he’s a swift dev so makes sense that’s smth they’d do

[native orbit]

prolly a swift repo

[slim bramble]

https://tenor.com/view/1984-skander-big-brother-gif-21303304

[hasty ruin]

[native orbit]

fr

[hasty ruin]

Lmao

[reef trail]

what the sigma

[slim bramble]

ok swift user

[hasty ruin]

infected by @radiant idol

[reef trail]

[[brainrot]]

[faint lion]

BrainRot

An awesome Orion tweak!

Author

rugmj

Version

0.0.1

Price

Free

Repo

Rugmj's Repo

Bundle ID

dev.rugmj.brainrot

Powered by Canister · May 11, 2024, 5:23 PM

[cloud yacht]

Me when I am learning the Greek alphabet.

[slim bramble]

Okay swift user

[cloud yacht]

I should just leave the description of my next tweak as "An awesome mobile substrate tweak"

[native orbit]

"An awesome mobile substrate malware"

[slim bramble]

based

[fading shell]

This is an awesome tweak

[cloud yacht]

Awesome tweak
orion
Yeah right

[slim bramble]

[hasty ruin]

🔥

[harsh junco]

How do i get ellekit logs please

[cloud yacht]

Probably the Oslog

[frail cedar]

[[antoine]] can show that

[faint lion]

Antoine

An Application to view System Logs, commonly known as syslog or OSLog, in real time

Author

Serena

Version

1.3

Price

Free

Repo

Chariz

Bundle ID

com.serena.antoine

Powered by Canister · May 11, 2024, 8:01 PM

[pine holly]

i just spent like 3 minutes staring at this and got it to change directions

[torn oriole]

nobody answered

[pine holly]

you proly know more than me on that one 😭

[reef trail]

i read the message but idk what those fancy words mean

[pine holly]

its an entitlement isnt it?

[torn oriole]

its an nvram variable

[pine holly]

ahh

[reef trail]

isnt rtc the time thing

or am i misremembering

[pine holly]

im assuming it offsets in unix then?

just as an int

[torn oriole]

it takex a hexadecimal input though

e.g

0x2ed0a103a1b5

im just thinking what i should make of it

because my "funnies" lets just say, have a habit of when you set the time via date or smth

the time will revert to some bizarre time zone after a few minutes

[pine holly]

Yeah call me dumb but why is it taking hexadecimal

"51473589445045"

means nothing

[torn oriole]

exactly my thoughts

[pine holly]

if thats the default arg

[torn oriole]

it varies

[pine holly]

??

[torn oriole]

and without the arg it will still revert to something too

its both annoying and confusing

[pine holly]

Ohhh

have you looked up what rtc is lol

its just the offset from this time

hence why it goes crazy, its not really an arg for any offset

its prob calculated into the time, so it most likely wont be +1 or -1 stuff

[torn oriole]

my idea was adjusting that arg if i had any idea what the input meant

[torn oriole]

yeah i figured

but a few devices ive had have different hexadecimal inputs too

[pine holly]

are they different on restart?

[torn oriole]

no, its static

[pine holly]

the offset may be static then? that wouldnt make seense tho

????

ok

let me look some stuff up and make sense of it

[torn oriole]

least confusing apple moment

[pine holly]

Swift is easier ATP

[torn oriole]

unfortunately yes

[pine holly]

do you have any other values?

like the one you provided earlier

i wanna see the diff between them

[torn oriole]

Not on hand sadly

But it was differing enough to make me think it’s along the lines if say, date inputs

Where much of it varies

[slim bramble]

What are you trying to do

@torn oriole

[torn oriole]

I lie, I’ve found more @pine holly

0x2e11453c966a

0x2e11a3648000

[slim bramble]

I know the term "funnies" is smth you say a lot (same for me) but in this case it doesn’t mean shit

[torn oriole]

I believe if I add watches to the conversation you’ll get the idea

[slim bramble]

Oh god not your watches again

[pine holly]

did you get either of these devices around late January of 2020?

or any of the devices

😭

[slim bramble]

That would make sense

[torn oriole]

These offsets are stolen online from a 2018 MacBook Pro’s (T2 reference)

[pine holly]

nvm then im yapping

i was seeing if they were using a constant and that how they got offset

but i was wrong

idk then

😭

[torn oriole]

Sadge

[pine holly]

my only thought is that they synced the RTC with UNIX time? Found a thread online of someones being off and maybe that never desyncs.?

idk

[slim bramble]

RTC uses crystal oscillators

I fg how that shit work

[pine holly]

Yeah but UNIX can desync from RTC

not the other way

so maybe they have an offset from device activation of realigning UNIX?

but like... i dont think thats even needed

idk why else rtc-offset would be needed

[slim bramble]

For me RTC offset would be some sort of time elapsed since the RTC circuit was manufactured

[pine holly]

the RTC circuit cannot be modified 😭

this is an nvram boot arg

[torn oriole]

Wait

I’m realising a similarity now

[pine holly]

no boot arg is specifying stuff like that

[torn oriole]

With T2 and These watches

[pine holly]

boot args too high level

[torn oriole]

They specifically have no access to an NTP server

To sync time

[slim bramble]

That’s not the point

The RTC circuit has 16 pads out

That number doesn’t surprise me

Or maybe yes

A Crystal oscillators ticks exactly 2^15 times a second

💀

[primal perch]

guau

[slim bramble]

guau

[gentle grove]

who made you hispanic

[trail venture]

can someone explain what kpf is in palera1n?
i know it means kernel patchfinder but nothing else

[ashen birch]

it analyzes the kernel and finds the exact places it needs to patch stuff at

[tepid olive]

when your writing an exploit for anything, usually you need offsets

you can get them manually by analysing a certain thing in ghidra/binja/ida though its tedious and kind of a pain in the ass to do for every single device

so a kernel patch finder js finds the offsets for the device its being run on instead of having them hardcoded into the exploit code

[acoustic imp]

Thoughts ?

[wooden yarrow]

make it fade in faster

trol

[placid kraken]

yeah double the speed

or half the time taken

[acoustic imp]

How’s this, also made some apple esk animation, ik it’s not the same but idc

[wooden yarrow]

hm

looks cool

[acoustic imp]

Thx

if u wana try https://5501.mthhelp.top

im making a like audio book thing for a book we r reading in class

kinda silly but sm to work on

[wooden yarrow]

why does that look so much like a scam domain 😭😭

i feel like i'm going to get malware immediately after clicking that

[acoustic imp]

bc i use it to host games

like html games for at school

[polar marsh]

Anyone have limera1n working in ipwndfu for Windows + libusbK? I've gotten past the USBError exception, however after that, I'm not sure what's not working.

[placid kraken]

easing on the forward and rewind buttons is bad

[wooden yarrow]

why not ipwnder32

[polar marsh]

Well I need it to work for 3GS. I did convert Dora’s code back to using libusb. I just haven’t used it for 3GS though.

[wheat grotto]

Anyone familiar with mysql databases and normalforms ? DM me pls

i have a question but i dont want to just post my schema here

[tender imp]

any python people alive

i would liek to unalive and would like a hanf

[reef trail]

smelly language

[gentle grove]

yes

[gentle grove]

swift
objective c

[frail cedar]

they aren't scripted

[gentle grove]

so they have to be good languages

[frail cedar]

being not scripted is already a bonus

it doesn't make them good

[gentle grove]

i'm not gonna debate what languages are good or bad because at the end of the day, they are all bad

but saying python is a smelly language and trying to discourage people from using it is just stupid

[reef trail]

not discouraging, it’s my option

it feels clunky if that makes sense

[fading shell]

IMO python tries to act as a scripting language but is then overly strict about types

Like who cares if what I’m trying to print is a number, just convert it

[hasty ruin]

Uh you can

do you mean when concatenating with +

[marble perch]

Use swift for scripting instead

[hasty ruin]

.

[marble perch]

Cross platform, easy syntax, extensible, compilable if you want

[slim bramble]

stop yapping and send glance 14

[hasty ruin]

That one wasn’t even me

[fading shell]

Could be idk, I only remember having some issues when wanting to treat numbers as strings

[gentle grove]

i dont remember any situation where that's an issue

calling python overly strict with types is insane

it's too lenient

[reef trail]

yeah i was ab to say

[slim bramble]

TS mfs :

[gentle grove]

typescript users arent even using strict typing half the time because it's just : any

[fading shell]

I just miss having the ability to slap on an as any and calling it a day

If I’m already using an interpreted language

[reef trail]

fuck

[fading shell]

https://tenor.com/view/discord-mod-mod-gif-6343165295058974380

[torn oriole]

AHA

its bibi

[slim bramble]

fuck off

[torn oriole]

shouldnt have deleted my shit

[reef trail]

banned

[torn oriole]

nerd

[harsh junco]

always the fr#nch

[gentle grove]

you can if you dont set noimplicitany in the typescript settings

[harsh junco]

/j.

[slim bramble]

Buy 16Player refund Pinnacle

[slim bramble]

I didn't delete your message about swift

[fading shell]

I was referring to python

[gentle grove]

...what

python doesn't have any strict typing at all

the most it even has is a dev-time compile checker you can run that i forget the name of

[fading shell]

Idk that was months if not years ago

I don’t remember

[gentle grove]

it was probably some misunderstanding lol

[fading shell]

I only remember that it upset me in some way lmao

[fading shell]

Maybe

[gentle grove]

python is so lenient on types

you can practically do anything, just it's not too lenient to the point of doing senseless things like javascript

[fading shell]

Maybe it was the tradeoff between type safety and strict types

As in not being worth it

Because you can practically do anything in JavaScript

But also have no type safety

While the type safety in python may just have not been worth it for my feeling

[visual meadow]

i have successfully hung my openwrt router

[hasty ruin]

nathanware ☕️

[visual meadow]

i was trying to use pppwn on my router man

[gentle grove]

the type safety in python is strong enough for the language to be sound (rather than unsafe like c) but weak enough given that there's so many conversions that can be implicit that it doesn't get in the way of anything you could reasonably expect for the language to let you do

[harsh junco]

unzip

128 mb of ram

[gentle grove]

maybe I define type safety differently than an official definition but by my definition, JavaScript also has type safety

[gentle grove]

if you get an error, that's called type safety

[fading shell]

I’d call it an exception

[gentle grove]

that's what I call an error

[fading shell]

Because it fails without warning

It doesn’t warn you beforehand, it just fails

[gentle grove]

error is just generic term

not specifically compile time errors

[fading shell]

Yeah but in what way is it safe when it errors only when shit already happens

[gentle grove]

It's safe because it prevents the program from becoming unsound/undefined

if you get any runtime exception or compile time error, then the program did some checking and validation to prevent bad things from happening

[fading shell]

Hmm maybe you’re right

[steady nest]

what in the openwrt

[gentle grove]

otherwise you get like C where you could throw in an int where a pointer is accepted (although usually you'll get a warning in this case with the right -W flags), and it'll just do it

or you can cast between pointers to different structs and there's no validation

But that's probably besides the point of what was happening earlier because in both cases there's type safety, but different levels of what they let you (implicitly usually) convert between, in the safe world

that case is more strict vs (lenient? Idk the word) typing

dynamic typing

[fading shell]

Yeah no you’re right

What I meant was something else that I’m too tired to type out rn lol

But it boils down to js let’s you do more insane shit

[gentle grove]

Yes that is true

I don't think it's a good thing

It can be subjective

[fading shell]

Basically this

[gentle grove]

you can't slap on any in python because everything is already "any"

but you still can't liberate yourself from types being different at runtime because that would make the program unsafe

[fading shell]

The variable is, the actual data isn’t obviously

But I get what you mean

[gentle grove]

Even in JavaScript you have typing on all variables during the runtime machine, but it has lots of rules to implicitly cast between them giving the impression that there's no such thing as typing

[fading shell]

Yeah

[silver rampart]

wuh?? they did a politics channel again??

sobbing

[torn oriole]

again

[frail cedar]

you don't remember the first time?

[torn oriole]

No

[frail cedar]

i remember the first one

it died in a few weeks

i was a bit confused when it came back

[young meteor]

this means #politics can return again

[hasty ruin]

#1189739986707288154

[pearl sail]

I also have your mother

[polar marsh]

I don't understand why people shit on Python so much. Yes it can be slow, but at the end of the day, if you're still being productive (and especially if you're absolutely garbage in C but can make pretty much every project you want), then I don't really see Python as a useless language.

If speed is not a priority and Python is more of a hobby language like for me, then I could care less whether I was using Python or any other language.

Yes I've been working with Python for 4 or so years, but I can say with 100% certainty, that I've finally made a lot of projects I've dreamed about making, especially being "self-taught".

So if you're just shitting on Python because of speed (indentation is wacky most times but if you can make it readable, then that's great), I really don't see the point.

My opinion, if you're someone like me who is really struggling with C-like languages, but at least is messing with disassembly and can understand most of the code flow, then that's at least a good start.

And yes, I completely understand that you're not understanding how the computer works, but at the end of the day, I seriously don't care how the computer works. I just want to be able to make whatever I want, regardless of how much more powerful stuff I'm missing (I don't mean concepts and rather languages themselves, like C and etc).

Just take this with a grain of salt as I literally can only code in Python and haven't found a more lower level language that I can actually make cool things with.

[wooden yarrow]

it's a nice scripting language

for anything you actually need speed on and have concrete types and shit just use other lower level langs

🔥

[reef trail]

i don’t get your self taught argument, im also self taught and haven’t had any issue learning lower lands. The speed it’s not the issue, syntax is. The language feels clunky to write. It’s trying to be this simple easy to understand thing and at the same time has some wacky shorthand syntax for doing uncommon things that don’t need shorthands. Indentation as you said is finicky and as the formatter doesn’t know where you’re trying to put code it can’t fix it for you

i’ve used the language for tiny scripts, like downloading things in batch etc but i’d never use it for a project

[granite frigate]

what's the easiest way to get battery cycles on macOS in C? i tried using IOKit but it only returns me the current battery% and other irrelevant stuff

[wooden yarrow]

system_profiler SPPowerDataType | grep "Cycle Count" | awk '{print $3}' except in C

idk

[reef trail]

could just run that as a child process

[torn oriole]

Certified IOKit moment

[granite frigate]

i found that but iun wanna run a bash command for it

[slim bramble]

IOKit

[reef trail]

without the grep and awk obvs

[torn oriole]

Time to go use IOkit in peardb

[wooden yarrow]

surely it's possible to query SPPowerDataType or sumn

in C

[granite frigate]

maybe

[slim bramble]

Yes

[granite frigate]

[slim bramble]

Sending everything to our server

🔥

[granite frigate]

i found a solution but it's a library written in objc

maybe i'll go copy what i need

[ashen birch]

does anyone know what licenses APSL is compatible with i wanna steal apple code

[granite frigate]

alr i got it

int get_cycle_count() {
    io_service_t powerSource = IOServiceGetMatchingService(kIOMasterPortDefault, IOServiceMatching("IOPMPowerSource"));
    CFMutableDictionaryRef batteryProperties = NULL;
    IORegistryEntryCreateCFProperties(powerSource, &batteryProperties, NULL, 0);
    // printf("Battery Properties:\n");
    // CFDictionaryApplyFunction(batteryProperties, printDictionaryEntry, NULL);
    int cycleCount = -1;
    CFNumberRef cycleCountValue = (CFNumberRef)CFDictionaryGetValue(batteryProperties, CFSTR("CycleCount"));
    if (cycleCountValue != NULL) {
        CFNumberGetValue(cycleCountValue, kCFNumberIntType, &cycleCount);
    }
    if (batteryProperties != NULL) {
        CFRelease(batteryProperties);
    }
    IOObjectRelease(powerSource);
    return cycleCount;
}

if anyone needs it idk

[ashen birch]

me when i say i could've done it in python

https://tenor.com/view/rick-and-morty-the-ghost-train-guy-reaction-hey-everybody-gif-15590677

[gentle grove]

python "not having" concrete types is a weak argument anyways

practically the only distinction is whether stuff is happening compile time or runtime

it's a weird thing to think of

[wooden yarrow]

aint python's types basically just annotations

instead of strict requirements

[gentle grove]

at compile time yes

[wooden yarrow]

it enforces at runtime?

[gentle grove]

it has to

[wooden yarrow]

i mean python isn't even really a compile time lang

[gentle grove]

otherwise you get C

[wooden yarrow]

so

[gentle grove]

there's a pretty clear class/object system

if you subtract a number from a string, you get an error

not undefined behavior

[wooden yarrow]

hm but if it's enforced at runtime wouldn't u need to run it to catch errors instead of say at the time of writing through intellj or whatev

meaning you write a bunch of code only to get hit with errors after running?

[gentle grove]

yes

idek if theres a clear definition of concrete typing but to me it's completely separate from the argument of runtime vs compile time typing

i thought "concrete type" was to refer to actual types (rather than polymorphisms), not a language paradigm

[faint stag]

i mean something like intellij/pycharm is supposed to catch those things for you
but ofc if you don't declare a type it becomes a runtime thing

[restive ether]

@graceful gate i saw you updated classic video quality it doesn’t seem you included that new header on your youtube headers git, i’d add it myself but i don’t even know where to start with that

[graceful gate]

Oops, I will push a new commit now

[restive ether]

thank you!

[graceful gate]

Done

[restive ether]

appreciate it

[slender glade]

bro is being respectful and polite and shit 😭

[restive ether]

i gotta update my youtube tweaks dog

i’m a very serious person you know

[wooden yarrow]

joe

[wooden yarrow]

lmao it was just a 4 line header file

fire

[restive ether]

major trolling

[acoustic imp]

how do i fix this UI, yes ik ugly i havnt done anything with color yet

like should i increase spacing between media controls (top/bottom) ?

to be equal to the title?

[brazen timber]

Dear Martin

[hasty ruin]

Dear Martin

[acoustic imp]

its a book

that better

How about this ?

[trail venture]

i think i did something wrong chat

i dont know what

but something looks off

[native dune]

Raaaaahhhh

[trail venture]

my version of trying to find what line it failed on (didnt help me at all

[native dune]

That’s why you do print 1 2 3 4 whatever

Not the same text

[native orbit]

use lldb frfr

[trail venture]

no did do different text, those were just in a loop

[native dune]

Oh

[trail venture]

i have used a debugger like once
i am not a frequent programmer lmao

uhh

[blazing warren]

Dear Martin

[elder scaffold]

meow issue

[trail venture]

tbf idk if the code i took worked in the first place, i know gaster worked and still does tho

[torn oriole]

Simply use peardb

Obligatory

DETAIL

Reference

[trail venture]

found ra1npoc is exactly what i was looking to make
my research clearly wasnt deep enough lmao

[visual meadow]

The curse of the .DS_Store lies in the Discord.app

@torn oriole

[torn oriole]

Skull

[frail cedar]

nodsstore

[blazing warren]

nudestore

[kind herald]

?

[faint timber]

Ida graph will tell you the exact reason this code is reached

[trail venture]

Noted

[trail venture]

Do I need pro for that?

[faint timber]

Nah

[trail venture]

Sweet

[harsh junco]

DETAIL

[proud geyser]

what info does apple ask for when making dev account

[torn oriole]

Legal name, address, the signing of several agreements and $150 (New Zealand dollars)

[proud geyser]

i wonder if they ask for id and shit here in usa

[primal perch]

ida 8.4 crack

[proud geyser]

i thought yall don’t fw piracy what is this behavior

[primal perch]

i fw piracy

the mods are obligated to say they don’t

[crisp frost]

( but they do )

[torn oriole]

Only if it isn’t adobe piracy

[slim bramble]

Ain’t windows piracy allowed too ?

[torn oriole]

Idk

[slim bramble]

I love MAS

[primal perch]

based

[steady nest]

why isn’t the crack in my dms already

[wooden yarrow]

which crack

[slim bramble]

Yeah same

[frail cedar]

they do

[proud geyser]

ahh shiitt

[frail cedar]

mine didn't get activated until i contacted support and asked "hey what's goin on it's been a week" and they said "send us picture of id"

[proud geyser]

just id or ssn n stuff?

[frail cedar]

it got activated next day

[frail cedar]

i sent a picture of my drivers license

which showed my birthday proving i was >18

[proud geyser]

oof i’ll wait i guess for dev account

[wooden yarrow]

wtf ur 18

damn

[proud geyser]

thoughts on udidregisteration

[wooden yarrow]

people seem to recommend it

[proud geyser]

i just got fucked over by this other signing service

i cant say their name here

support is so ass

i got revoked n nobody replied in discord they busy playing fortnite

[native dune]

maplesign good

[proud geyser]

damn and you msg didnt get deleted

so must be lemme see

looks good

imma wait full 24 hours to see if i get a response or not if not imma get maple or udidreg

[primal perch]

works fine for me

[proud geyser]

i thought almost every dev here got apple dev account

why yall need signing services

[wooden yarrow]

I think only the devs who make app store apps or sumn would have them

I surely dont

with jailbreaks you don't need a dev account necessarily

[proud geyser]

is there any 6 months plans for signing services

cuz imma move to apple dev account once my app is near finish stage

🙂

[primal perch]

ya same

i just want ad free yt for cheap

[proud geyser]

ion get it on one side yall be talking shit about privacy on other side yall do piracy aswell 💀

[wooden yarrow]

do as I say not as I do

[native dune]

i love piracy

[young meteor]

server rules aren’t necessarily the opinions of the members

just ask any orange name how much they paid for IDA Pro

[proud geyser]

but if i ask questions about something that has to do with piracy yall same dudes be on my ass

[primal perch]

i dont be shitting on piracy

contrary to what people believe this server isnt one mind

in:#general microsoft-activation-scripts half of it is me and nebula

[proud geyser]

you could literally ask for chat gpt to gift you windows activation code

[native dune]

i love mas

[native dune]

those are generic keys and im pretty sure they stop working after some time

[brazen timber]

wait it dropped?

misinformation :/

[wooden yarrow]

technically not

just not to you

(yet)

[faint stag]

i mean, oem keys and stuff are littered over the internet
they may have a usage limit but not an expiration

lol

one time i've used an oem key from a laptop i've owned for like 5 other installs on other machines minimum

[primal perch]

[tepid olive]

https://github.com/R00tkitSMM/CVE-2024-27804/tree/main

ok so

it seems to rely on being able to hook methods

@slim bramble it seems like you need to be able to hook methods for it to be used

[slim bramble]

Not really

[tepid olive]

  void *replacement;
  void *original;
} interpose_t;

__attribute__((used)) static const interpose_t interposers[]
    __attribute__((section("__DATA, __interpose"))) = 
    {
        {
          .replacement = (void *)fake_IOConnectCallMethod,
          .original = (void *)IOConnectCallMethod
        }
    };

[slim bramble]

Oh

have not looked at flip.c yet

[tepid olive]

  if (!len)
    return;
  size_t offset = rand() % len;

  ((int *)buf)[offset] = 0x41414141;
}

kern_return_t fake_IOConnectCallMethod(mach_port_t connection,
                                       uint32_t selector, uint64_t *input,
                                       uint32_t inputCnt, void *inputStruct,
                                       size_t inputStructCnt, uint64_t *output,
                                       uint32_t *outputCnt, void *outputStruct,
                                       size_t *outputStructCntP) {

  flip_bit(inputStruct, inputStructCnt);

  return IOConnectCallMethod(connection, selector, input, inputCnt, inputStruct,
                             inputStructCnt, output, outputCnt, outputStruct,
                             outputStructCntP);
}

yeah so you need to be able to hook IOConnectCallMethod so you can modify one of it's arguments

[slim bramble]

I'm gonna try and see if it works on iOS 14

Oh ofc I got to sign the binary

[tepid olive]

@faint stag don't you need entitlements to cal IOConnectCallMethod

@visual meadow too

[visual meadow]

Oh

What ents

I can check syslog 1s

[slim bramble]

smh

[tepid olive]

I might be wrong

yeah I thought so

[slim bramble]

What app ?

[tepid olive]

time to find another CoreTrust bypass!

lol

[faint stag]

hey it'll work on 17.0 then

[tepid olive]

true

[visual meadow]

Its only like that with platform-application

It mightbwork still

[primal perch]

yea iosurfaceroot is allowed from sandbox

[tepid olive]

o

[visual meadow]

Also its still not panicking with that on

[faint stag]

Since the user client is what provides most of the functionality to userspace, this is the step that is subject to a sandbox check, ensuring that the app is allowed to open the requested type of user client. Once the app has a handle to a user client for the driver, the app can interact with the user client by calling functions like IOConnectCallMethod() on the user client handle, specifying the "selector" (index) of the method the app wants to invoke. In the kernel, IOConnectCallMethod() will use the selector to index a table of methods provided by the user client, invoking the one requested.

bazad messed around with this method before

[slim bramble]

Wtf is wrong with my phone

[visual meadow]

Entitlements

[tepid olive]

hmm

[visual meadow]

Its fine though probably add as rpath in app

[faint stag]

i'm gonna try it on 17.3.1

[tepid olive]

ye

[visual meadow]

Make sure you change framework path

[tepid olive]

How are you guys running sh scripts on jailed iPhones 😭

maybe it was introduced in 17?

[visual meadow]

In vtdecode

[slim bramble]

Oh yeah forgot about that

[faint stag]

jailbroken for me at least

[slim bramble]

lemme see if it exists

[slim bramble]

Same

@faint stag how can I check if a file is in DSC without having to download it ?

[visual meadow]

Its in the dsc

It will tell you if not

[slim bramble]

It's telling me it isn't

[visual meadow]

Show

[faint stag]

i mean if it's cached you can exec if it's a binary lol

[slim bramble]

Error loading binary

[visual meadow]

Thats

Entitlements

[visual meadow]

You need no-container and stuff

[slim bramble]

Oh

[visual meadow]

Change that path too

[tepid olive]

Nathan are you jailbroken on the test device? I don’t see how I can even run this script on a jailed 17.0

[slim bramble]

What to ?

[visual meadow]

Remove Versions/A/

[slim bramble]

Oh ok thanks

[faint stag]

well you wouldn't run it as a script, you'd need a sideloaded app version of the POC

lol

[visual meadow]

I should make a poc app

Like i did a few years ago for the other exploits

Lol

[tepid olive]

Can I just Throw the code in Xcode compile it then sideload

[slim bramble]

I remember the MCBC one

[proud geyser]

what tweak is that

[tepid olive]

any progress y'all?

[slim bramble]

Stuck at the stupid

[tepid olive]

lol

[faint stag]

clang is unable to make a temporary file wha

i'm not gonna run sudo clang

[slim bramble]

[visual meadow]

Yeah what ios

Are you usinf

Probably too old

[tepid olive]

is dyld interposing supported on iOS?

[slim bramble]

14

lol

Defo too old

[opal ridge]

I can’t make it work on Apple TV HD

17.4

[tepid olive]

^

[slim bramble]

iOS & macOS

[visual meadow]

Does it do nothing

Whats it do

[opal ridge]

It does nothing

[visual meadow]

Same

On ios 16.6.1

[tepid olive]

I think I know why

[opal ridge]

and i made sure it can access the userclient

[tepid olive]

try hooking IOConnectCallMethod a different way

[faint stag]

oh i didn't consider that

[tepid olive]

I don't think dyld on iOS accounts for the interpose section

[slim bramble]

lol

[tepid olive]

YUP

[slim bramble]

You panicked ?

[tepid olive]

no

I can't test rn

but I did confirm that dyld on iOS ignores the interpose section

which causes dyld to disable library interposing (some more information on this mechanism is available here)

found

Unfortunately, the iOS process is subject to further restrictions, likely part of the “hardened runtime” suite, which causes dyld to disable library interposing (some more information on this mechanism is available here). This policy is also implemented by amfi, in AppleMobileFileIntegrity.kext (the kernel component of amfi):

__int64 __fastcall macos_dyld_policy_library_interposing(proc *a1, int *a2)

{

  int v3; // w8

  v3 = *a2;

  ...

  if ( (v3 & 0x10400) == 0x10000 )   // flag is set for iOS binaries

  {

    logDyldPolicyRejection(a1, "library interposing", "Denying library interposing for iOS app\n");

    return 0LL;

  }

  return 64LL;

}

[opal ridge]

add get-task-allow

and it will work

[tepid olive]

it will?

[opal ridge]

for interposing

[slim bramble]

on the dylib ?

[opal ridge]

on the executable

[slim bramble]

Oh fr

[tepid olive]

ohh is that what that flag is?

ok but either way

we should implement another way to hook so it will work in an environment where entitlements can't be modified

[steady nest]

You're always able to use get-task-allow

[slim bramble]

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>platform-application</key>
    <true/>
    <key>com.apple.private.security.container-required</key>
    <false/>
    <key>com.apple.security.iokit-user-client-class</key>
    <true/>
    <key>com.apple.private.security.no-container</key>
    <true/>
    <key>com.apple.private.security.no-sandbox</key>
    <true/>
    <key>com.apple.private.persona-mgmt</key>
    <true/>
    <key>com.apple.private.skip-library-validation</key>
    <true/>
    <key>com.apple.security.get-task-allow</key>
    <true/>
</dict>
</plist>```

[tepid olive]

oh

[slim bramble]

I missed something ?

[tepid olive]

looks good to me

[opal ridge]

com.apple.security.iokit-user-client-class

should be an array

of strings

[steady nest]

for iOS, it's just get-task-allow?

[slim bramble]

no that's for macos

[steady nest]

or did they change stuff in recent versions

[slim bramble]

Or idk

[opal ridge]

this could also just be unaligned atomic op

[tepid olive]

ye

[steady nest]

it's just setting a random offset in the inputstruct to 0x41414141 and that results in a panic

I don't know if the file even matters

[tepid olive]

it might

it looks specially crafted ngl

I wonder if it has an offset in it

I'm gonna check rq

[opal ridge]

it's actually not random

rand() is completely deterministic

but then

why use rand() at all ????

[slim bramble]

Still stuck on that stupidity 😭

[opal ridge]

run it outside of var

[tepid olive]

wot

[slim bramble]

am I supposed to run in in / 💀

[opal ridge]

run in var containers bundle if in doubt

[tepid olive]

the video file must have a purpose

[faint stag]

i mean, /var/jb also works

[steady nest]

deadass, it's going to be a stock video

[slim bramble]

iOS 14 moment

[faint stag]

then either containers or outside of var

lol

[tepid olive]

wtf is this

[slim bramble]

Oh yeah ran it inside of /var/containers/Bundle

and it works

[steady nest]

and this doesn't seem useful anyway unfortunately

[hasty ruin]

the video is ntwerk

[tepid olive]

is it a fragmented mp4

[faint stag]

i mean i got it to run with just the iouserclient ent
but doesn't do anything lol

[slim bramble]

Error finding VTApplyRestrictions symbol

ig no iOS 14

[tepid olive]

maybe we should try asking the guy?

[opal ridge]

guy doesn't know what hes doing

[slim bramble]

Why do you say that lol

[faint stag]

the decode certainly happens tho

[steady nest]

maybe it's ignoring dyld_insert_libraries ;P

[tepid olive]

^^

have any of y'all tried it on macOS

[opal ridge]

yes

[slim bramble]

I could

[steady nest]

have you seen the code

[opal ridge]

instant panic

[slim bramble]

works?

oh

good

[opal ridge]

But if you just want to crash I have better code

than that

[slim bramble]

it's skidded

[steady nest]

can you throw the panic log here nick

[tepid olive]

wait so

[steady nest]

it's useless anyway but just curious

thanks

[tepid olive]

wait how much you wanna bet that isn't the dude who discovered the CVE...

or that this code is related at all

[steady nest]

mate, let's not throw conspiracy theories

[hasty ruin]

And where do you get that idea from

[tepid olive]

idk it kinda looks like it does a whole bunch of nothing but idk

[steady nest]

yeah nothing

[opal ridge]

unaligned atomic op

[slim bramble]

Useless ?

[opal ridge]

not 100% sure but like

that's what it suggests

[tepid olive]

nah it was reported by this guy

Impact: An app may be able to execute arbitrary code with kernel privileges

Description: The issue was addressed with improved memory handling.

CVE-2024-27804: Meysam Firouzi (@R00tkitSMM)

[steady nest]

what are you guys even on about

[tepid olive]

idk

[steady nest]

do you know what a fuzzer is

[slim bramble]

I do

[tepid olive]

Versions prior to macOS Sonoma 14.5
Versions prior to macOS Ventura 13.6.7
Versions prior to macOS Monterey 12.7.5
Versions prior to watchOS 10.5
Versions prior to tvOS 17.5
Versions prior to iOS 16.7.8 and iPadOS 16.7.8
Versions prior to iOS 17.5 and iPadOS 17.5

[opal ridge]

i do

[steady nest]

i know you do 😭

[opal ridge]

trying random things until the target explodes

that's what a fuzzer is

[steady nest]

that's why nick said the guy didn't even know what he's doing

it was found fuzzing

[opal ridge]

#if defined(_WIN32)

[tepid olive]

Ah

[opal ridge]

😭

[slim bramble]

I saw that too

[tepid olive]

yeah I thought that was kinda funky

but like

where did the video come from lol

[tepid olive]

that whole line is so weird

wtf

#if defined(WIN32) | defined(_WIN32) | defined(__WIN32)

act like there's two OR symbols where those ORs are

[faint stag]

i thought logical OR was ||

[reef trail]

it is

[tepid olive]

^

[reef trail]

| is a bitwise operator

[tepid olive]

I can't put || in an enclosed place because the spoiler filter

😭

[slim bramble]

fr

[faint stag]

codeblocks don't format?

[tepid olive]

the spoiler filter checks for the text not the spoiler

I think it uses a regex pattern, I know all of this because I did analysis on GIR's code before

[faint stag]

oh yeah

[slim bramble]

|| test ||

No

[tepid olive]

you're a developer

[reef trail]

we're devs

we bypass filter here

[tepid olive]

yah

:(

still waiting for my developer role

[slim bramble]

Wait do we actually bypass it here ? 💀

[reef trail]

yeah

try it

[tepid olive]

like seriously wen orange sora

[slim bramble]

See

We don't bypass it

[reef trail]

wait what

[tepid olive]

is this not enough? https://github.com/jonahnm/Telescope

I've told the story of this many times

[reef trail]

i think we used to? #development message

[tepid olive]

yeah the filter applies to me

oh

wait

maybe filters don't apply to you guys in codeblocks?

[reef trail]

oh yeah

[slim bramble]

No

[tepid olive]

guys if I ping aaron

[reef trail]

weird

[slim bramble]

yeah ?

[tepid olive]

asking for orange role for all this work

will I get banned

[slim bramble]

Just ping rick

or send to modmail

rick is online

lurking

[timid furnace]

modmail

not rick

[tepid olive]

how do I send something to modmail

[slim bramble]

@hollow scaffold

Dm it

[tepid olive]

done

[slim bramble]

Bro pinged @ here

[tepid olive]

?

[slim bramble]

Modmail pings @ here

[tepid olive]

oh lmao

[steady nest]

no one knows what that does

[tepid olive]

it was a WIP jailbreak from before dopamine 2

I almost finished but then dopamine 2 released and I lost motivation

I put hours into that

took a little break and whaddya know, dopamine 2 released

[steady nest]

if it's arm64 only why does it have coresight stuff

[tepid olive]

it's arm64 + arm64e

where did you see arm64 only lol

it actually worked too

I had trustcache injected, and everything

it just doesn't actually bootstrap

and the daemon wasn't finished

[steady nest]

no product, no dev

[tepid olive]

but I put alot of work into it

[steady nest]

understood, but

[tepid olive]

I mean It thought about finishing it and using libhooker

[steady nest]

if it's almost finished and you want the role...

[tepid olive]

But like I don't have an arm64e device anymore lol

[steady nest]

or just release a tweak

[slim bramble]

Yeah lol

easy

I mean you can still try

[opal ridge]

It all comes down to the admin’s flavours

[steady nest]

(I'd also tidy up the jb repo, but that's besides the point)

[slim bramble]

yeah

[opal ridge]

There are other people that accomplished technically much more impressive feats

yet gets completely mocked by rjb

such as cleanly switching rootfs from userland

[slim bramble]

hi

[opal ridge]

hi

[tepid olive]

Lol

Fair enough

See, thing is I don't got any good tweak ideas

[slim bramble]

I do have some but they are for Aaron and Kirb

[tepid olive]

Lol

[reef trail]

make @lyric heron happy and make a version of [[eva]] for rootless

[faint lion]

Eva Lite

Beautiful parallax wallpapers and more

Author

ren7995

Version

1.0.2

Price

Free

Repo

ren7995 Repo

Bundle ID

me.lau.evalite

Powered by Canister · May 14, 2024, 4:07 PM

[slim bramble]

Is Dings back to begging ?

[reef trail]

indeed

[slim bramble]

Smh

pro beggar

[lyric heron]

im not

but rug promised

[slim bramble]

lies

[lyric heron]

he'll do it

[slim bramble]

@lyric heron I'm making the guy's shit

Dutch bros

[lyric heron]

congrats

[slim bramble]

🧌

[lyric heron]

meanwhile i make easier money

[slim bramble]

k

[lyric heron]

[granite frigate]

rip hhls

but when src

catjb gonna be as open source as checkra1n 🔥

[tepid olive]

I mean it'll probably only take an hour or 2

Just slap a widescreen image as background and make it scroll when you change pages

[reef trail]

polished it’ll take longer but yeah

[tepid olive]

ez

[reef trail]

pretty much

[faint stag]

kernbypass, fugu15 rootful
what else

[opal ridge]

Dopamine rootful (no uicache bug) (palera1n fakefs like setup)

[velvet path]

palera1n rootful still can break SSV seal randomly

plus what you're referring to still has even more heaps of jank that are at least related to what you're doing

now whether those heaps of jank get fixed? god knows (I bet some of it will remain though)

[visual meadow]

@unkempt magnet hi

It still crashes

I built from source if it matters

[unkempt magnet]

Does it add this code in main.mm?
https://gitlab.com/alias20/screendump/-/commit/f8e5a87f60455fc7a938e480bfa19437a69d8027#cf19ef04212fb2e21f2ac49c9765d35f542a6b7f_107_111

if(screenSurface == NULL) IOMobileFramebufferCopyLayerDisplayedSurface(framebufferConnection, 0, &screenSurface);

Please give me dm if not resolved

[visual meadow]

Yes thats the commit i used

[unkempt magnet]

did you use branch fron 'rootless'?

[visual meadow]

Shoot

Okay I have to change the preferences

Tweak settinfs doesnt like it being a plist

[faint stag]

this is so dumb but i did it anyway

[reef trail]

lol

actually might do that it’s kinda cool

[faint stag]

basically
https://tanuki.page/gh/deverser -> https://github.com/joshuah345/deverser

so whenever it 404s it checks the current url to see if it has /gh/ in it
and redirects if it does, else it goes back to the root

i have yet to finish the main page but
i randomly decided to figure this out as fast as possible because i was typing out a github url earlier

but this is also live on
https://joshuah345.github.io
so technically i can also do
https://joshuah345.github.io/gh/joshuah345.github.io

using an alternate domain requires committing a cname to the repo
so the original url will redirect to the domain set

double redirect

i also have yet to figure out how to get embeds to work properly
hmm

i might have an idea

[snow python]

Don’t use let if you aren’t mutating the data

[faint stag]

i'm not though?

i would've used var if i expected to mutate it

[snow python]

Trimurl and newUrl should both be const. Let is scoped var

[visual meadow]

@unkempt magnet the launch daemon isn't working

i can see it trying to spawn it then it dies

its crashing

oh its getting killed by jetsam very cool

[faint stag]

oh, thanks

[visual meadow]

isnt there a daemon key to extend the jetsam limit,,,, what is it

[unkempt magnet]

https://github.com/coolstar/electra/blob/master/basebinaries/jailbreakd/main.m#L43

[unkempt magnet]

Idk if it works because it's too old, but try if you can

[visual meadow]

theos is being annoying asf

any idea anyone

its literally in libsystem

[unkempt magnet]

How about append with extern ?

[unkempt magnet]

extern "C" int memorystatus_control(uint32_t command, pid_t pid, uint32_t flags, void *buffer, size_t buffersize);

[visual meadow]

airdrop is being shit

hello

.

[faint stag]

win

[odd mason]

Gm guys, while doing a favor for Dhinak I had issues with ATV USB Creator not showing any drives on OS X El Cap, so I patched it to show drives properly.
https://files.thatstel.la/apple/jbapps/atvusb-creator-1.0.b13b-ThatStella7922-DeviceEnumerationFix.zip

Leaving this here in case it is useful for others

[visual meadow]

I'm messing with fonts with flex but I'm curious

How would you hook this in theos?