#development
1 messages · Page 216 of 1
My mbp screen gets really dirty when I close and open the lid constantly
And I don’t use it with dirty ass hands
my matte framework still gets this
semi-glossy is the way
u cant tell me that glossy oleds are unusable
maybe with a strong light source reflecting on it but in the right environment a glossy display is gorgeous and i will die on this hill
it would require you to backup all of your data onto icloud or locally onto a mac or windows computer
and then dfu restore
and then reinstall your icloud data
<@&355177530061357057> does anyone know if it's the same button combination
as the 15PM?
it should not have ever changed
there's literally even a tag for this
DFU (Device Firmware Upgrade) mode is a mode which allows a device in any condition to be restored to a fresh version of iOS (not to be confused with Recovery Mode). You cannot keep data when restoring via DFU and you can only restore to a signed version.
To restore via DFU:
- Enter DFU Mode
- Once you enter DFU, the device should show a black screen.
- Connect the device to a Mac/PC and open Finder/iTunes.
- On the prompt that says "A device has been connected in recovery mode and needs to be restored" press "Restore iPhone" then "Restore and Update.”
that's crazy
idk fs now with that series including the new restore method
if you're going to dfu restore from linux you could also just use idevicerestore and it should automatically allow you to choose which signed firmware you'd like to restore to
but if not you download it from ipsw.me
in this case you would download this:
https://ipsw.me/download/iPhone17,2/22B83
Download iOS 18.1 (22B83) for iPhone 16 Pro Max
i mean it is download from apple's servers lol
if you look at the website that the button links to
if you're on mac, download Apple Configurator 2 from the Mac App Store
https://apps.apple.com/us/app/apple-configurator/id1037126344?mt=12
Apple Configurator makes it easy to deploy iPad, iPhone, iPod touch, and Apple TV devices in your school or business.
Use Apple Configurator to quickly configure large numbers of devices connected to your Mac via USB with the settings, apps, and data you specify for your students, employees, or cus…
and then when it has a square that shows "dfu" in the center, drag the *.ipsw file into it
idk man
ig but it won't really increase the chances
since nothings even come out for 17 publicly
so I actually dockerized a home assistant and setup icloud3 to see if I could just check the location of her dad but I actually need her icloud account to be in a family plan with her dad's icloud account and their devices need to be shared with each other which isn't the case. Only the location of her dad is avaiable to me through find my. So I am not sure how well this Icloud3 thing would work. Also even if I did have access to her dad's device it would notify the device similar to the apple feature already built into find my. For the record I have not looked at the source code of Icloud3 so maybe there is a way to access her dad's location without the use of his device, although I am not confident that code is in the repository.
critical alerts are a thing
A home assistant thing?
well an ios thing but yeah you can do it from ha
Critical alerts
Hmm
Well I just explained why I think I can’t use that home assistant thing anyways
The mobileapp notify platform accepts the standard title, message and target parameters used by the notify platform. The mobile\app notify platform supports targets as services. As long as you granted notifications permissions during setup, you will find all your devices listed as targets for the notify action with names prefixed notify.mobilea...
i'm not following the thread, just saw ha and "loud sound"
I see
what is it you're trying to do?
This explains why I can’t use icloud3 with home assistant
I am trying to uhm one second
Here read this
So I have access to his location through find my (gf’s iCloud account)
how old are you and your gf
So I’d like to create a tweak or app that checks location every 20 seconds and if it’s within a zone and it’ll notify me
Both 18
book a hotel
The level of effort to not "get caught" is nuts
I come over to see her and spend time with her in the morning
Nah he’s weird
so overprotective means you shouldn't be dating at all
This wouldn’t be a problem if he was a normal dad
“You shouldn’t date any guys until you’re 25” quote from her dad
“Also you should have 10 kids”
Let’s just say he has his beliefs
home assistant can do what you want
Primal bloodline protecting urge ahh
Fr bro
Oh that sounds good, would I be connecting the iCloud integration or is there another integration that can allow me to do that? Like I said I tried the iCloud3 integration
just login to the icloud3 integration with your gf's icloud. setup an automation which triggers a critical notification when the dad is heading towards home and is less than x km away
So I tried that earlier today
Explained what happened here
I couldn’t select his location
Only from a list of devices
And his devices aren’t in the list because they both aren’t in a family thing
And when you select to track a device it notifies the device btw
no?
How would I do it then?
whatever api icloud3 is using should also have access to the find my friends stuff
they probably just don't use it because it's not normally useful
i've got to get ready for school
So could I in theory run a python script that requests location every so often?
Okay thanks for the insight
I’ll dig through the code
I gotta sleep 💀
i'd imagine so, i'm not familiar with the api though
a tweak probably wouldn't give you anything extra
unless the find my friends stuff isn't available on the api at all, then a tweak would be necessary
or you'd have to reverse engineer apple's internal api
Is it that hard to use google
yes
What is google
a monopoly
Monopoly? I like that board game

Untapped market anyone
?
I'm just curious: does anyone know why sideloaded apps don't work with their URL schemes? For example, Apollo refuses to open using its default extension; nothing happens when trying to open it from the browser. Similarly, when I use an older version of the YouTube app sideloaded with a developer certificate, it also doesn't open YouTube.com links within the app. The URL scheme seems to partially work, but not for YouTube.com links. When you visit some youtube:// link, it prompts, Open this page in "YouTube"? but that's not the expected behavior for me. I know there are workarounds, like using Opener or Shortcuts, but why are these necessary? Did I do something wrong with the certificate entitlements, or is there just simply no way to make it work directly?
like normal youtube will just pretty much instantly open a link if i click on it anywhere in the system, be it iMessage, Safari or a Discord embed and specifically clicking the title in it
@cedar stag who did you pay to create the LeetDown icon on macOS?
I made it myself
I'll also release a version that works with legacy firmwares (mountain lion and later) and designed a new icon for that too
kinda like this but I'll change it a bit probably
The server is resposible for telling it which apps it can use. When you sideload your bundle id changes, so it doesn't match. This is also why it still works fine on trollstore. https://www.youtube.com/.well-known/apple-app-site-association
It doesn't change, though? I'm pretty sure at least
I'm not sideloading through AltStore, I use another app
Not too familar with sideloading
(which i'm not sure if it's filtered here, it has to do with g's and boxes)
bundle id seems to just be com.google.ios.youtube
i'm not jailbroken so im not sure how to see if it is indeed that
seems it also has the Application Identifier Prefix which could be different
Hmm that does seem more likely
is it the phone that checks with the .well-known file or is it apple who then send some magic file that declares what opens where?
the app has associations in it and then the phone checks the well known file ocassionaly to make sure it matches
iMessage Pro
I just bought a kvm switch and it was the hardest decision Ive ever made
anyone know how to enter 1tr on a apple silicon mac that does not have a screen
nvm
Ohh, ur in eu
Screenshot is Im not
you just say yes 
mate for tweaks just install WSL on windows or linux
all you need is vscode and theos
and headers
and a jb phone
ok that’s quite a bit
just follow the docs tbh
i kind of winged it
i think you mean buy a 6700xt and install macos
it doesn’t fuckin matter
for most people it doesn't matter
just Do It
just do ubuntu if you don't have a preference
i recommend gentoo linux
lot of ppl using gentoo recently

arch better
@gentle grove
lmfao
https://github.com/auchenberg/volkswagen lmao its real
How does one remove the app Xcode previews on iOS
Or am I cooked
On iOS 15 for me it would just go away after a little bit
Ahhhh, iOS 18 here
I’d assume it’s the same but I haven’t seen it at all for me on iOS 18
Ahhh. I must’ve built it wrong
I’m planning on making an iCloud backup now (with the app on my home screen) and doing a factory reset. Reckon it’ll come back after restoring to this backup?
what 16 player uses
❓
why do you need it to be removed
I don’t really plan on using Xcode previews on my phone
Rather use the simulator imo
instead of resetting your phone why not just remove the app from the home screen
Oh yeah true
But I’m just surprised that you can’t ‘delete’ it
cuz itll disappear on its own eventually
Ahhhhh
its from the mounted developer.dmg
that wouldnt change it
Fairs faira
Going back to this tho, any clue? @native dune
itll probably disappear until you connect it to xcode on a mac again
Mmhmmm

Cannot uninstall XCode Previews App iOS 15 https://developer.apple.com/forums/thread/690445?answerId=727311022#727311022
Pretty funny copypasta
Uhh wtf
chat how do i fix EXC_BAD_ACCESS (SIGKILL (Code Signature Invalid))
i am trying to use [redacted] professional 9.0 arm and it keeps crashing
and apparently it doesn't like the linker ad-hoc signature?
Not sure but have you tried running codesign on the whole app bundle
I hope icraze gets hit by a moving vehicle at 90 mph
wtf mods rule 1
yeah i just removed the signature from every .dylib, .so and .framework
nothing has sigs anymore i checked with apparency
i dont get the crash now, it just refuses to start
"nothing has signatures" this isn't a good thing though
just disable code signing 👍
i would resign it and disable amfi tbh 
the version that works doesnt have signatures either
which is why im confused
goodbye sip
while its the topic, when sip is disabled OS doesn't decrypt the FairPlay drm on the ios apps downloaded from appstore so you cant use them at all, does anybody have a solution for this
install the app with sideloadly or playcover
yeah but you have to decrypt it beforehand with that method. I am now trying to setup a vm just for this so i can decrypt there and install on the host
why not enable SIP, decrypt, then disable SIP and sideload
2 reboots per app, yikes
heres my method
-v -arm64e_preview_abi amfi_get_out_of_my_way=1 ipc_control_port_options=0 thid_should_crash=0 tss_should_crash=0 intcoproc_unrestricted=1 cs_enforcement_disable=1 PE_i_can_has_debugger=1```
then patch kernel:
rootfs rw patch, everything in trustcache patch, ios binaries anywhere
I think the trustcache patch brought back the permission popups lol
how do you do the patches ?
i manually did the trustcache patch and the ios one
the rootfs rw one was from kplooshfinder
you can look in palera1n kpf src and see how the trustcache one is done
the ios one i had to figure out myself
open source ?
its not really open source i just put the kernel into a dissasembler and hex edited lol
also what does it do, "ios binaries anywhere" is a bit ambiquous
and its pretty broken
basically run ios bianries in terminal
but it cant init sandbox
i also did some dyld patches
these patches are in the form of kexts right
ah i see
kmutil configure-boot -c /Volumes/Data/path/to/kernel -v /Volumes/YourmacOSVolume
in 1tr
the exact thing you put into the disassembler is not the "kernelcache" right, there is also kernels binary itself which is what you were talking about
thanks these were pretty helpful
Unironically yeah
everything is stripped in release builds though, are you running a debug kernel ?
no
It would be very ironic if @hasty ruin mysteriously passed away in 3 days at 8:37 PM UK time.
?
?
It would be very ironic if @hasty ruin mysteriously passed away in 3 days at 8:37 PM UK time.
Mods threats
fr
It would be very ironic if @hasty ruin mysteriously passed away in 3 days at 8:37 PM UK time.
It would be very ironic if @hasty ruin mysteriously passed away in 3 days at 8:37 PM UK time.
cross post
It would be very ironic if @hasty ruin mysteriously passed away in 3 days at 8:37 PM UK time.
It would be very ironic if @hasty ruin mysteriously passed away in 3 days at 8:37 PM UK time.
anyone here know of any hooking toolkit that isnt shit
i want to hook dlopen without interposing
dopamines way of hooking dlopen is slow
replace pointer for _dyld_dlopen in struct dyld_funcs from dyld and then replace the cached pointer in __DATA_DIRTY,__bss of libdyld.dylib
@weary heath @reef trail
So I’ve dug through iCloud3 and found that they use pyicloud for the requests to Apple iCloud. I dug through the requests and found the api endpoints for fmip(find my iPhone) and fmly(find my family). I was trying to see if there was one for people/friends, after some googling I found out that fmf(find my friends) has been removed from being requested from a non-Apple device and after checking the logs of icloud3, I actually see that there was a issue created on GitHub talking about the fmf endpoint not returning any data anymore.
In short, I cannot use HA or a python script running on my PC. I have to use an iPhone to request the locational data of other people in find my. Gotta go the tweak route!!!
that sucks it sounded like a cool project, gl with the tweak route
wonder why fmf was removed but not fmly
if you can find a function in find my that calls the fmf api and provides the response you could call that every x seconds then do some basic math on the response coordinates
Yes, although I have no clue where I would start to try and do that. The tutorial for the tweak I was following with hooked into the springboard
Thanks for wishing me luck though, I’m gonna need it
it's the exact same
you just change the bundle id to whatever you're looking for
I'm just judging by posterboard load speed but with dopamines dlopen hook the background takes a long time to load but with like interpose it loads instantly probably a dumb metric though
that makes no sense
Hi, i am a student and learn software development. Can anyone help me in C?
I have to calculate a rectangular area with the values 180m length and 105 m width where each tree has a distance of 15 m. Question: how many trees do you need?
so it's more of a general algorithm / maths question
are the trees supposed to make up the border of this area
like every 15m there's a tree surrounding the area
Yes and with a distance to the border (10m)
i don't follow
I’m a beginner What is the best way to implement this in the code?
you said "yes [the trees make up the border]" but said with a distance to the border
solve the basic maths problem first
The distance between the trees are 15 m. The distance to the border is 10 m
Mfw width*length

I'm not going to say the answer but it's easier than that
it's something minus something*2 divided by something
and you do that for both somethings
That
and then multiply results
but this is simple maths and I don't think anyone should be feeding the answer
Yes that’s not the issue. how can I calculate this, If I have to include the values between the trees and the distance
share your ideas on how to do it
no one is feeding you the answer
but we'll help you out
feeding answers = death
I know the answer. Its 38. But I have problems to include that into code
start by figuring out why it's 38
@faint timber
[-]: krw_get_kbase: Failed get kernel base!
[-]: get_slide: Kernel slide is zero!
could just hardcode it for corellium ig
(it's not 38)
oh this not ono lol
ohno
did you use the last tar
also wrong channel?
yes and yes
oh nap oklahoma
Yes, I got it sorry😅
Fiore without developer role is crazy
Fiore without developer role is crazy
That’s like saying it was never The Berenstein Bears
explain this good sir
wtf this is fake
or maybe someone with dev role renamed himself to fiore
who have deletioned my message
i didn't
Fiore fs had developer role
He did
no
In 2022
ask him yourself
see
This is some mandela effect shit
real
fiore never had dev role what r u all on about
Is this the wrong place if I have questions in C# and I am doing an apprenticeship as an IT specialist for application development (student)
Some people here might have knowledge with that programming language
But it’s not guaranteed since this server is focused on jailbreaking
this is a trolling channel
But ask anyways idk
it's not but if you're talking about your earlier question, that's not a programming language question primarily
please do not ask questions here
Fornite hairy ballsack 2018
de que que sabes idk wtf tāo is portuguese is cringe hablando ahi
Ok, If that is not desired, I respect that of course
erm... no hablo espanol
If I must get a console output with the right value? It that not a Programming language question?
that is programming related
of what do you know speaking here? i think is what it says?
Yes, and I ask, how I can calculate this with a console output and the right values
do you know how to solve this problem manually
without a computer (except a calculator)
I haven't seen proof
Yes but not with a border distance of 10 m 😬
how old are u
and geometry
- that's primarily an algorithm / maths question
- can you explain what exactly is asked
i nearly flunked my math class cuz my teachers for those years sucked at teaching
First I define the values as an Integer. A*B; 15 * 15; and (A * B)/(15 * 15)
the second one was a bitch
who should get fired
still passed all my math classes with a B tho
¯_(ツ)_/¯
How much Trees you can plant into a field with a = 180 and b = 105 with a border distance of 10 m and between the trees a distance of 15 m
That’s the question
Usually I must calculate the new border sizes (a * b); and use this as the new field size. Or not
Is this right?
Sorry for my bad Drawing skills 😂
uhh, i'll check tomorrow if nobody replied by then, i'll head to sleep now
where did you get 25m from? it's 10m from the border and 15m to the next tree
Its a example. The value is not decisive.
ok but like
are there actual values
or are they any values
the only rule is 10m to the border and 15m between trees
I created this with the same value (border distance = 15 m; distance trees = 15 m). Did I get that right?
border distance is not 10m here
it's 15m
yeah but the same trees will fit
yeah prob
It was easier to use the same distance values for this example 😅
Change the bundle id to the find my app but from there I have no clue on how to look through the app data structure to find the location of people or the function to the api that is called to Apple services for fmf locations. Are there tools that can help me with this? I’ve heard of things like FLEX but I’ve installed them and they don’t really seem to work on my phone
I found this on apple internals
FindMy: location sharing by explicitly querying devices remotely or collateral beacon detection using Search Party; FMCore.framework, FMF.framework; launchd service: com.apple.icloud.fmfd (find my friends)
Apple internals? 😳
wdym flex doesn't work
Check pins
I installed the right version for my phone and followed instructions on how to activate it (hold the status bar) and nothing happened
O
where did you get flexing
Should be fine for iOS 16.4.1a on an a11 device?
It’s a flipboard explorer but I’m not even sure if it would help solve my issue
1.5.0 isn't even the latest version
Hold the screen with three fingers
That may work
I already tried that
Also didn’t work it usually just edits the home screen
the home screen? i thought you were hooking find my?
Yeah but it should work on the Home Screen, it’s the spring board right? I was just testing it there and it doesn’t work
hold the status bar for springboard, tap 3 fingers for apps
or do what i do and use [[volumeflex]]
thank you that worked perfectly!!!
so I found the endpoint request for the people's locations on the find my app
https://p107-fmfmobile.icloud.com/fmipservice/friends/***/*******/minCallback/refreshClient
The response contains the location in longtitude and latitude so that's perfect
Thanks….

Thanks…
Now the question is how do I go about making this tweak?
also what are you blurring from that blur
by writing it smh
I have no clue what those numbers mean but I am assuming data relating to me
yeah
probably
how would u retrieve the data
Should I mimic the request and headers of the endpoint? That seems difficult
or is there a way where I can have the app constantly running so the built in loop can auto request for the locations and I can just hook into the response body and check the location myself?
or is there a better way?
i can maybe try figure it out what it is
mimic the request and headers of the endpoint should be that hard
alr
{
"modelVersion" : "1",
"fetchStatus" : "200",
"dataContext" : {
"9" : "HFHIU#@HF(*NVNWQ#(*TH(@#HR@#R",
"2" : 2304887671,
"21" : 0,
"10" : 126873453578385,
"11" : 0,
"22" : 1369821342678,
"12" : 0,
"5" : 0,
"6" : 33,
"13" : 0,
"18" : 11,
"0" : 34648935623452,
"8" : 124243764683456,
"20" : 4,
"1" : 125587363,
"19" : 1
},
"locateInProgress" : [
{
"id" : "*****",
"status" : "none"
},
{
"id" : "*****",
"status" : "none"
},
{
"id" : "*****",
"status" : "none"
},
{
"id" : "*****",
"status" : "none"
},
{
"id" : "*****",
"status" : "none"
}
],
"locations": [
"*****",
],
"serverContext" : {
"res" : null,
"reverseGeocodingThrottleDistance" : 100,
"clientId" : "*********",
"authToken" : "*******************",
"liveTimeoutThreshold" : 30.001000000000001,
"callbackTimeoutIntervalInMS" : 0,
"notificationToken" : null,
"heartbeatIntervalInSec" : 543600,
"inaccuracyRadiusThreshold" : 200,
"prsId" : 1684525367,
"iterationNumber" : 8,
"showAirDropImportViewOniCloudAlert" : true,
"fallbackToLegacyIntervalInSec" : 10.000999999999999,
"transientDataContext" : {
"3" : 1,
"1" : 0,
"4" : 1234566213627,
"2" : 1,
"0" : 1789253787
},
"maxCallbackIntervalInMS" : 15000,
"sendMyLocation" : true,
"reverseGeocodingThrottle" : 30.001000000000001,
"liveAnimationInterval" : 2.0009999999999999,
"minCallbackIntervalInMS" : 5000
}
}
this is the RESPONSE
{
"dataContext" : {
"9" : "HFHIU#@HF(*NVNWQ#(*TH(@#HR@#R",
"2" : 2304887671,
"21" : 0,
"10" : 126873453578385,
"11" : 0,
"22" : 1369821342678,
"12" : 0,
"5" : 0,
"6" : 33,
"13" : 0,
"18" : 11,
"0" : 34648935623452,
"8" : 124243764683456,
"20" : 4,
"1" : 125587363,
"19" : 1
},
"tapContext" : [
],
"clientContext" : {
"productType" : "iPhone10,1",
"deviceSKU" : "LL",
"regionCode" : "US",
"osVersion" : "16.4.1",
"countryCode" : "US",
"appPushModeAllowed" : true,
"deviceUDID" : "*****",
"limitedPrecision" : false,
"apsToken" : "****",
"deviceClass" : "iPhone",
"currentTime" : 754207852623.93103,
"liveSessionStatistics" : {
},
"osBuild" : "**",
"legacyFallbackData" : {
},
"appVersion" : "7.0",
"pushMode" : true,
"userInactivityTimeInMS" : 5000
},
"serverContext" : {
"liveTimeoutThreshold" : 30.001000000000001,
"reverseGeocodingThrottleDistance" : 100,
"clientId" : "***********",
"authToken" : "*****************************",
"callbackTimeoutIntervalInMS" : 0,
"heartbeatIntervalInSec" : 543600,
"prsId" : 16976206345,
"inaccuracyRadiusThreshold" : 200,
"iterationNumber" : 7,
"showAirDropImportViewOniCloudAlert" : true,
"fallbackToLegacyIntervalInSec" : 10.000999999999999,
"sendMyLocation" : true,
"maxCallbackIntervalInMS" : 15000,
"transientDataContext" : {
"3" : 1,
"1" : 0,
"4" : 123463473457,
"2" : 1,
"0" : 12584576364589
},
"reverseGeocodingThrottle" : 30.001000000000001,
"liveAnimationInterval" : 2.0009999999999999,
"minCallbackIntervalInMS" : 5000
}
}
that is the request
@pallid totem
seems normal
also im pretty sure you’d get funding from apple for actually reversing from 😭
find my callback
what is transientDataContext???
wdym
find my uses client <-> server connection (obviously)
of course
but I believe some of that information is found throughout the phone
ClientContext I can figure out on my own
also wtf is dataContext
looks like dataContext is static?
let me check if thats true across responses
capture multiple requests, see how it changes
yes exacctly
interesting project btw
thank you!
alright so
dataContext has some things that stay the same but namely "10" changes
and same with serverContext["transientDataContext"] where "4" changes
have u moved
or is ur phone in the same location
it may be encrypted in apple’s very top secret super cool encryption
after checking multiple responses it increases over time, "10" is a number that increases
@gentle grove do u know what encryption method dataContext["9"] is
not at all, I am currently running locsim that should return the EXACT same coords all the time
unix time?
so I blured out "9"
what
oh
what is this
but I don't think it will be sensitive data, let me send the real one
oh u just scrambled it
this is what "9" is in the real request FCF6496BF8BF4F3207F27D2BD652D234
HFHIU#@HF(*NVNWQ#(*TH(@#HR@#R
is this fake (censored)
because what you just sent looks like it could be some sort of hash
this is the real "10" request 1732515047549 and this is some time later 1732516205971
maybe it's device id hash? hmmm
it stays the same across multiple requests
i dont know what is going on
ok so NOT unix time
this is just unix time in ms
I am getting mixed signals from those 2 messages 😭
I am also looking into the responses of "device locations" right before a request for friends location to see if the server maybe provides the information for the next request
the 173 at the start definitely sounds like unix time
i would trust triangle
is it really LMAO
this is from the findMy application network logs
these requests and responses are for people's location shared to me
tbh it might be
oh it really is LMFAO
it is
ones in seconds ones in milliseconds!
hold up what?
are you saying one of these are mili seconds and the other is just in seconds?
or are you saying transientDataContext "4" is seconds / miliseconds?
no, the “10” value is unix timestamp in milliseconds
this is weird cuz it’s Mon, 24 Jul 2023 14:50:05 GMT
here is the real request
"dataContext" : {
"19" : 1,
"2" : 1724818704367,
"21" : 0,
"10" : 1732515047549,
"11" : 0,
"22" : 1728885158317,
"5" : 0,
"12" : 0,
"6" : 33,
"13" : 0,
"18" : 11,
"0" : 1732453452178,
"8" : 1731979881195,
"20" : 4,
"1" : 1729395598135,
"9" : "FCF6496BF8BF4F3207F27D2BD652D234"
},
...
}
that's completely wrong, it got the day right, it is the 24th
true
this is so weird
time is completely wrong
yeha
month is wrong year is wrong
except the day
yeah
I think that's a coincidence
could you send me the site where you are checking these?
I believe all of these other ones are also unix
“9” is a hexadecimal
3.362442491352964E+38
LOL
HEY GLORIA IS GREAT!
(the song you're listening too)
awesome stuff anyways wtf does all of this mean 😔
its encoded someway
lol thanks
what
it seems to be the same across each request
uh how would I check that
no
<t:1732515047:R>
<t:1732516205:R>
yeah that seems about right
so it's definitely unix
is that wrong?
the two timestamps in my message correspond to the two timestamps in your message
yes
no wrong!
> date --date=@1732515047.549
Mon Nov 25 12:10:47 AM CST 2024
what is this even for
now what does 2, 22, 6, 0, 8 and 1 mean???
@timid furnace
oh
so the other ones are varying times in the past
as little as 18 hours and as far out as 3 months
this project is a little complicated
since it’s actually well maintained
and can’t exploit easily
find my bootrom exploit!?!!?? 🔥
yeah :/ that's why I was a little bit concerned about trying to replicate the request body
my other idea is to have the app "constantly" run somehow
and to listen to the responses
and do stuff from there
but I also do not know how to do those 2 things yet
hooking makes sense I think I might be able to figure that out
but Idk if it's possible to have the find my services "constantly" running
not in the background
so with the app open?
yes
that's risky...
it will get killed by iOS
unless you get some very cool apple entitlements
which is only possible with trollstore i think
I do want to create this tweak using trollstore
but Idunno xcode
I prefer if it wasn't a tweak lol, more like geranium that has a built in locsim
oh so basically an app
yeah
so looking through runtime browser i found FMF.FMFSessionDataManager that has a NSSet called locations and a method called locations
no clue
but I found something better
FMF.FMFSessionDataManager inside of runtime browser and looking at live instances
allows me to access the data set for the up to date location of the people
only annoying thing is that I think I will have to have the application open 24/7 to have these values update
I don't want the device accidentally turning off or the find my app to stop working for some reason
so I found the thing that is requesting for the locational data
it's called FMFRefreshController
make sense since the request is titled refreshData
but the ivars on the runtime browser is all unknown size and has no type information
so the find my app is somehow hiding that
which is under FMFCore
looks like things also talk to FMFCore.FMFManager
also there are "secure" locations
which seem to not be in this data set
only a handful of people show up in the easy to access set
so maybe the missing people are inside of "secure" location set for some reason?
holy fuck i figured it out
when the application first opens it sends a POST without a request body and it returns information that you THERE AFTER use in all the remaining requests and for every request you make, the response has the information you need to make the next request for it to be valid
it's just chaining
now how tf do I make a post request mimicing the headers?
also there are 2 callbacks, one called max and one called min, the min has the location and the max never returns the location but it almost looks identical to the min call back, also the min callback determines the next unix code to send out whilst the max always sends and returns the same unix
checkm8 2 ? 
no
what are the headers
then what he working on
find my
dms
I blurred stuff out
here
In order
Well response headers don’t matter
Well I guess how do I do the basic authentication header
It’s just a huge encoding of some sorrt
what are you gonna do with it?
it stays consistent when I reset the application and across all requests
so maybe it's re-generated every so often OR it's used globally?
let me check another application
probably regenerated every so often
can you help me identify the encoding by telling me characteristics or a tool that lets me figure that out?
maybe
is it b64 encoded
is it aes encrypted
sorry for the late response, I am gonna go to sleep!
i've been working on this for like 2 hours now and it is late
it is base64
ok gn
so i decoded it
and I got a coherent looking encryption type of key?
oh wait
that's just
the device id
with the auth code
hold up
🤨
that needs validation tho right
stuff that is blurred out here
and I am pretty sure this stuff stays the same
nope
it's quite literarlly just base64 encoded prsId and authtoken
and all the requests have stayed the same with the prsId and authtoken
idk what the fuck a prsId is
I think it means persistent Identitification
alright yeah I am done here for now BUT it looks really promising on what I can do later on!
not sure when I can revisit this as I will be VERY busy for the next week (thanks giving!!!) but we will see :)
exciting stuff
Wait if I have all of the headers replicated can’t I run these requests on another device let’s say my computer sitting at home? And I won’t have to worry about creating a tweak….?
wait what would be the user agent tho? would you know? @pallid totem
I just had a curious thought that I need to test out 😂
FindMyApp 2.0
or something
whatever find my app sets the ua to
huh?
then theres probably none lol
never mind I actually do need a requesting body
{
"clientContext" : {
"push" : true,
"deviceListVersion" : 1,
"productType" : "iPhone10,1",
"fmly" : true,
"osVersion" : "16.4.1",
"inactiveTime" : 0,
"deviceUDID" : "*****",
"apsToken" : "*************",
"selectedDevice" : "all",
"osBuild" : "20E252",
"appVersion" : "7.0",
"clientTimestamp" : 754218777253.1969,
"notificationAuthStatus" : 0
},
"serverContext" : {
"cloudUser" : true,
"showSllNow" : false,
"minCallbackIntervalInMS" : 5000,
"itemLearnMoreURL" : "https://support.apple.com/kb/HT211331?viewlocale=en_US",
"deviceLoadStatus" : "200",
"prefsUpdateTime" : 1672194236660,
"sessionLifespan" : 900000,
"itemsTabEnabled" : true,
"enable2FAFamilyActions" : false,
"deviceImageVersion" : "33",
"maxCallbackIntervalInMS" : 30000,
"isHSA" : true,
"useAuthWidget" : true,
"callbackIntervalInMS" : 10000,
"validRegion" : true,
"imageBaseUrl" : "https://statici.icloud.com",
"info" : "*****************",
"classicUser" : false,
"trackInfoCacheDurationInSecs" : 86400,
"macCount" : 0,
"serverTimestamp" : 1732525973508,
"authToken" : "******************************",
"enableMapStats" : true,
"prsId" : 16976206345,
"preferredLanguage" : "en-us",
"minTrackLocThresholdInMts" : 100,
"clientId" : "****",
"maxDeviceLoadTime" : 60000,
"inaccuracyRadiusThreshold" : 200,
"enable2FAErase" : false,
"enable2FAFamilyRemove" : false,
"maxLocatingTime" : 90000,
"timezone" : {
"previousOffset" : -25200000,
"tzCurrentName" : "Pacific Standard Time",
"previousTransition" : 1730624399999,
"currentOffset" : -28800000,
"tzName" : "US/Pacific"
},
"pendingRemoveGracePeriodInDays" : 30
},
"tapContext" : [
]
}
this is the basic information needed to start the loop cycle
so it seems like it stores the last response it got and uses that information for the next session to start it as a verification ? i've checked multiple times and that's what keeps happening
ok I am very tired time to actually sleep
does anyone have some more fun guides on how to build neural networks and train classifiers etc?
any specific language?
i’d recommend karpathy’s guide for neural networks https://youtube.com/playlist?list=PLAqhIrjkxbuWI23v9cThsA9GvCAUhRvKZ&si=fYrHe3MxtyUHnwb_
for classifiers not too sure
i have never hated gnu software more than today when i tried to build a cross compiler toolchain
specifically sh3eb-elf-gcc + sh3eb-elf-binutils + libgcc + fxlibc + fxsdk + gint
😭
the makefile and cmakefile hell here is actually genuinely miserable
theres makefiles that generate other makefiles that build the building makefile
like omg
i guess this is less of a gcc problem and more of a problem with cmake
and the french (this toolchain is made by french people because casio is french)
i think building on macos is also kinda an issue
i got a very basic program to run but i need gint for rendering images and that depends on fxsdk
hell.
ive had to build 3 fucking binutils versions for this
2.43 is too new and segfaults, 2.34 is too old, its missing warning omit flags, and finally 2.42 seems to work
git bisect to compile a program

Anyone can help me fix a crashing game when speed hack is enable?
I'm not sure if this is the right place to post
Sorry in advance
Here is what the crash log showing
Incident Identifier: 890279E8-A9E0-4758-AA8A-CC065B5923D1
CrashReporter Key: 27876022e7a228bb404ff3a1c274741491ac37af
Hardware Model: iPhone14,3
Process: EF5iOS [1214]
Path: /private/var/containers/Bundle/Application/F6481796-9B17-484E-95A0-C14981DFAF2B/EF5iOS.app/EF5iOS
Identifier: com.oneworld.ef5.x
Version: 2.9.6 (2024.10.15.1141)
AppStoreTools: 16A242d
AppVariant: 1:iPhone14,3:15
Code Type: ARM-64 (Native)
Role: Foreground
Parent Process: launchd [1]
Coalition: com.oneworld.ef5.x [500]
Date/Time: 2024-11-25 17:36:06.3813 +0100
Launch Time: 2024-11-25 17:35:48.6135 +0100
OS Version: iPhone OS 15.1 (19B74)
Release Type: User
Baseband Version: 1.15.02
Report Version: 104
Exception Type: EXC_BAD_ACCESS (SIGSEGV)
Exception Subtype: KERN_INVALID_ADDRESS at 0x0000000000000000
Exception Codes: 0x0000000000000001, 0x0000000000000000
VM Region Info: 0 is not in any region. Bytes before following region: 4340400128
REGION TYPE START - END [ VSIZE] PRT/MAX SHRMOD REGION DETAIL
UNUSED SPACE AT START
--->
__TEXT 102b54000-102b58000 [ 16K] r-x/r-x SM=COW ...OS.app/EF5iOS
Exception Note: EXC_CORPSE_NOTIFY
Termination Reason: SIGNAL 11 Segmentation fault: 11
Terminating Process: exc handler [1214]
Triggered by Thread: 0
Application Specific Information:
Thread 0 name: Dispatch queue: com.apple.main-thread
Thread 0 Crashed:
0 libsystem_platform.dylib 0x1f1eedfc4 _platform_strlen + 4
1 UnityFramework 0x10b93604c 0x10a9bc000 + 16228428
2 UnityFramework 0x10b04702c 0x10a9bc000 + 6860844
3 AccDemo.dylib 0x10511a5d4 0x105114000 + 26068
4 UIKitCore 0x18395a42c -[UIGestureRecognizerTarget _sendActionWithGestureRecognizer:] + 56
Couldn't post any longer than 2000 letters, I can inbox if need
We can’t fix this
mainly started in python, thanks for the video!
i did it i got a fucking image to render on the calculator
the names in this library are honestly worse than c stdlib and thats saying something
Bfile_StrToName_ncpy
funny artifacts from earlier
Anime characters are built crazy bro
now watch this be not even close to ios


no no I think that is iOS
just doesnt have the proper configurations
e.g. correct resolution
kinda wana try i jus dk hwo to use
is it tho 
yes
the icons have that square behavior whenever something is misconfigured
for example if you change the resolution to something unsupported, issues start happening
including those squared off icons'
most likely side effect of not having GPU acceleration
yeah
TIL Duy has dc
i didnt know Duy has discord
what wrong with this?
he has talked here a lot 😭
not rly
eh
does this reall deserve an over the top trailer?
but otherwise cool
how slow is that though
probably no slower than iOS simulator on my 2011 macbook pro
Slow, watch the video
why is the trailer so cinematic lmao
anyway, swapped the slots the ram are in and hoping for the best this time around
that was pretty fast
my other macbook air:
i think an entire memory controller is borked in that thing
so like half or atleast a quarter of the memory is unusable 💀
i think i hate gcc more and more by the day
$(TMP)/mizu5.out: $(TMP)/data.h $(SRCS)
sh3eb-elf-gcc -o $@ $(SRCS) -Isrc -Itmp -lc -lfxcg -lgcc -nostdlib -O3 -ffunction-sections -fdata-sections -Wl,--gc-sections -flto -ffat-lto-objects -mb -m4a-nofpu -mhitachi -Wall -Wextra -Wpedantic -L$(FXCG)/lib -I$(FXCG)/include -T$(FXCG)/toolchain/prizm.x
think how much it hates you
how many errors he’s had to put up with
oh he totally hates me
i tried to put a static array of bytes in rodata but i dont think thats how you do it on sh3eb-elf
Warning: setting incorrect section attributes for .rodata
S
;
whar
what is this about
loop (in)variants
what even is P {S} Q
then the loop keeps going until the condition that J the invariant, which is always true, and NOT of B, the guard matches, which should imply that the loop makes Q, the post condition, true
and since correct loops should always terminate, vf must always decrease (or increase) in every step
what is vf
the variant function, something that changes with each iteration of the loop
its my first semester
comp eng though not sci
its not really

uhh i had logic, (program correctness and imperative programming merged into one class) and some memorization ahh intro cs class
lots of software related in my case
ok i do the eepy
it is now 1am
gn
gn
it doesnt even run
it dont
mizu5
what's the non-database interpretation of "primary keys"
indices
what if i wrote a JIT compiler for rust
what
I was saying the non database and just closest general computer term
"what is needed for a good relationship" (with people)
so then what would the answer mean in context of relationships with people
Someone’s SSN so you don’t fall in love with a different person with the same name
you said primary keys that's why I was confused
just like what are the characteristics of a good relationship
yes the answer is primary keys but is there any meaning outside of the context of databases
The joke answer is primary keys
It’s a database meme 😭😭
Its a joke
you're in #development you expect people here to understand people stuff?
No
damn i thought there would be double meaning for the answer
Oh you were expecting too much
but it's just one singular answer in the context of databases
well the double meaning is that primary keys are needed for a relationship in a db
actually, foreign keys work too but ignore that
that's the same meaning
so just 1 meaning
.
what
No, because in relational databases like SQL you need primary keys to establish a relationship between 2 or more entities
And there’s a question everyone asks “what’s the key to a good relationship” (meaning real life)
So the joke was a primary key
that's the joke answer I mean
don't foreign keys fit the bill too
yes i got that part instantly
but just needed to know if there was an second meaning to the answer
Not really, you don’t need foreign keys
(in the context of relationships with people)
The joke is they're asking whats needed for a good human relationship but responding for a database relationship
I mean you could
The joke was they didn’t say anything about people
you don't need a primary key to have a relationship because it could be a foreign key
There needs to be some form of primary key
oh right i didn't even catch that part as something that could be considered a joke
mb .
so you could have the primary key as a foreign key
(I think it’s just your sense of humor that’s shallow)
oh wait foreign key can only target a primary key right
just got destroyed by a mem ed it's over
A foreign key is a set of attributes in a table that refers to the primary key of another table, linking these two tables
anybody have the =====RAGE OVER===== pic
===== RAGE OVER =====
never gets old
Wrathful, unbridled rage
do you have any other pwn messages?
nah he ain't the original source
I know but im curious if anyone else has screenshots of pwn's messages
bruhaps
no I had to go find that one
hi so
i want to implement a dark mode on my calculator
i can run arbitrary C code and the calculator has no kernel so all code runs in ring 0
i have access to the vram but thats not enough
my idea is to patch the Bdisp_PutDisp_DD syscall which swaps the back display to the front display
this syscall is ran whenever the screen is repainted
the syscall handler addr is 0x80020070 and the syscall itself is 0x025F
but im not quite sure how to patch it
i tried to do this
typedef void (*syscall_func_t)(void);
syscall_func_t original_Bdisp_PutDisp_DD;
void patched_Bdisp_PutDisp_DD() {
Print_OS("hello world", 0, 0);
original_Bdisp_PutDisp_DD();
}
int main() {
syscall_func_t *syscall_table = (syscall_func_t *)0x80020070;
original_Bdisp_PutDisp_DD = syscall_table[0x025F];
syscall_table[0x025F] = patched_Bdisp_PutDisp_DD;
return 0;
}
nothing happened
why does c function pointer syntax suck so much man
that took me a solid 20 seconds to realize no its not defining a function that returns syscall_func_t
Hello, maybe someone can help me here. I use an App called Moises for rehearsals and it automatically hides a play/pause button alongside some other settings when music has been playing for a few seconds. This view returns when you tap the screen but I would like to disable the auto hide functionality completely.
I got access to a jailbroken iPhone X with Flex installed and identified the name of the view I want to modify, but unsure how to go from here. Any suggestions are greatly appreciated!
lmao real
Not sure if this would work (too simple of a strategy). But if the view in question has its unique class (for example MoisesPlayPauseView) (i think) you can hook that class' setHidden and setAlpha methods to %orig(NO) and %orig(1.0) respectively
I will screen record what I want to modify. I also thought about those variables you mentioned but I don’t those are used.
there you go
first I tap to bring it back and second time I swipe
gets kinda annoying when you do that 6 times per minute
I would check the methods of the nearest viewController of that view, for something like hide music controls, would help to check what it is called with flex, whats the app btw (just realised you already wrote it sorry lol)?
World's #1 vocal remover for musicians. Use AI to extract or remove vocals & instruments from any song and play your favorite music in any key, and at any speed. The best stem player for creating guitar, drums, piano, vocals and bass backing tracks.
Master your audio’s chords and stems with pitch-p…
newest version requires 16+ but it can be bypassed without any features having issues
Moises.MixerControlsView
is probably what i need to stay open
got to the nearest view controller but atleast I can’t find anything mentioning hiding the bloody thing
There is a very little chance its this maybe (on the mixerControlsView)
But sad news is the app is made with swift, which makes figuring this out and hooking itself harder
bummer
Btw idk if this helps but it doesnt happen when you disable lyrics from what i can see
Would it be possible to find the value for the timer that decides to hide the view? My janky solution would be to just extends those few seconds like 600sec and be done with it.
Probably needle in haystack to find that
Yes I am aware, sadly that doesn't really help because I need to read them for more complex titles.
Yeah hooking swift is a nightmare
I though straight up byte patching that but I thought there would be a slightly simpler solution
I mean i can't even find where to byte patch, but i say go for it if you can
I think they have a web player, I will check that first. Making a userscript is 10x easier than this stuff here
Respect though for you folks who do it, would really like to sink my teeth in that stuff if time would allow for it
Looks like a ton of stuff to learn, very interesting. Will look into it, thank you!
it's also a work in progress so if you find out anything interesting let us know
for example, currently, using self isn't really supported in hooked methods
It seems the views are using "view model"s. I am not too familiar with this coding style but i think it means that most of the views data are held by these models. Here is some interesting ones in lyrics view model. Thought maybe this would help if you continue to tackle this
There is also DefaultMixerControlsViewModel
isInteractingWithMixerControls looks interesting. Could imagine that the timer is linked to that
This is still part of that annoying to hook stuff, right?
mixerControlsActive also looks promising
if that is just what mkaes them visible hooking it to force true should work
Yes, indeed.
There are also mentions of timers in mixers model
Now that the part I got no clue about hahaha
CountIn, is a feature. Like when you gotta start playing, ticks a few times so its easier to get in
The other three look like what should be displayed under the progress bar i guess
Oh you are right
You can type Moises.*model in FLEX's runtime browser to check them out
What would be the simplest way to test if 'mixerControlsActive' is indeed what i need to patch permanently?
Funfact: I wrote feedback to their dev team via the TestFlight build. Excited to see what comes first: me patching it in some redneck way or them actually adding an option
Not sure for swift but I know flex can modify values
pretty handy for testing what things do
Yeah for swift vars it seems like it cant
currently got libFlex, I don't know if that changes anything
and OS is 14.3
atleast on the old phone. Would like to inject the tweak in an ipa and sideload it to iPad running 18 beta
i am also not sure. I think the best way to check would be by hooking it and trying. I am %55 sure MSHookIvar works with swift ivars too, however idk how to access the Ivar in order to hook
I am afraid you need to dumb down that response a bit for me
And there is a difference between ivars in C and Swift, which could be the issue. Correct?
If you got another guide that tells me how to put that to the test i'll try
Tbh i have no idea, its a possibility.
I thought it was possible to hook them but can't find anything about it now. If i find something i will let you know though
Alright, thank you very much!
I play around a bit more and wait for the devs to reach out, if they do.
Charge ur phone
What computer is this
it's a hp elitebook
Interestimg
also not the stock ram anyway
swapped it out for 2x16 i bought but i guess they were defective
i only got them in July lol
hey friends, we're looking for a dev who's good at macOS and .NET/C# for a 1 month short term contract (with potential for renewal depending how things go) https://www.seraphsecure.com/careers/macos-developer-nov-24
Anti-scam software developed by Kitboga that blocks scam websites, remote control access and phishing attempts. Keep your family safe with real time alerts and device monitoring.
tweak devs should be a good fit by the way, because we're working with some stuff that's technically public API, but poorly documented (big surprise for Apple huh)
If only i had the appropriate level of nerd knowledge
chat is it possible to hook / change finder ui
why woudln't it ?
okay but how !!!
wouldn't normal dylib injection into finder.app work
hear me out: gnustep for ios
if only i still used .net/C# (I used to make a ton of stuff but then I realized how ass c# is)
you'll change your mind on C# being ass by using it professionally, honestly
beats the hell out of Swift that's for sure
oh yeah 10000%
I hate Swift and JavaScript now because I've been mostly writing C#
I’m writing a react webapp for a company rn
I have a love hate relationship with JS atm
I tried doing swift but it just sucks
Old news
use flex's alternative
on macos
I forgot how it's called
swift is actually good but y'all aren't ready for it
your objc glazing is crazy
Objc superior
give me one reason that isn't personal preference
just one
bibi failed so far
battery drain
crashes
Animations, reading it decompiled(I think), hooking/tweaking, less furrys know it

i wanna rice finder
animations are the same in uikit, decompilation is not a reason for not writing swift, same reason as before, idk what to say abt that
and yes, they would happen in objc if you weren't familiar with the language





