futurerestore-help

[zealous bridge]

but he said it wasnt code changes

[valid adder]

no

like the top bar

code, pull requests

etc

tab added

[vivid nova]

always man-buns fault

[green onyx]

either im a dumb fuck

or im blind

[vivid nova]

both

😛

[valid adder]

what is there now

[green onyx]

[valid adder]

that wasnt

[fair lark]

I was trying to save my blobs on A12 for 14.4 using system info and get this. Don’t remember running into this when I saved my blobs for 14.3

[sharp tangle]

System info is broken on 14 atm

[zealous bridge]

System Info is broken

on 14

[fair lark]

Oh ok. Thought it was me

[valid adder]

@green onyx @zealous bridge so what we enabled was the issues tab lol

[zealous bridge]

that wasn’t enabled?

lmao what

[green onyx]

^

[zealous bridge]

didnt even notice

[green onyx]

wait

isnt it set to be on

by default

[valid adder]

not for forks

[green onyx]

damn fr

ngl, i never knew that

[zealous bridge]

fixes look good

[green onyx]

guess im a dumb fuck now lmao

lol

[valid adder]

https://github.com/marijuanARM/futurerestore/issues/10

[zealous bridge]

“Fix the notorious SEP panic FDR error when restoring to 14.2 or lower sometimes” thats possible?

i thought you said it was a lost cause

[valid adder]

thats just the issues with v194

[sinful spade]

do we still not know for sure if sep is compat

[valid adder]

and its a checklist

not everything is easilly fixed

[zealous bridge]

yeah i was guessing that would be the case

Just some people will get the wrong idea if they saw that

[fair lark]

Is there something else I should use to save 14.4 blobs while on a12 14.3?

[valid adder]

some people cant read a checklist

its unchecked

@fair lark just save with the proper apnonce

[green onyx]

also, wheres ibec issue fix

or is that just apple's drivers being shit

[valid adder]

@green onyx thats not fixable without 200$ drivers

[green onyx]

ah i see

[valid adder]

theres no way we are gonna force people to enable unsigned driver mode

[green onyx]

true

checkra1n is signing theirs tho

when checkra1n for windows comes into fruition

[fair lark]

Can you point me in the right direction? I’m a tutorial kinda guy

[valid adder]

you need new term, dimentio, and libkrw

[fair lark]

Oh ok so if I manually set nonce it should work?

[ember ridge]

I'm curious, are you already JB'd

[fair lark]

Yep on 14.3

[valid adder]

@fair lark once u have these things ill tell u how

[lost stone]

Since upgrading seems to break setting my apnonce. Is there a fix?

[valid adder]

no

thats part of iOS

[lost stone]

Oh. So is future restore dead now once you hit iOS 14?

[green onyx]

no

wtf

[lost stone]

Don’t I need to set my apnonce to use it?

[green onyx]

every time u reboot, the apnonce and generator changes

yes

and to set it, u need a jailbreak

[lost stone]

Right. So now that I’m at 14. I can set my apnonce in unc0ver

Can’t

And TSS Saver says error reading generator

[green onyx]

get libkrw

and dimentio

[lost stone]

I have dimentio. It’s a dependency for TSS Saver

[green onyx]

then get libkrw

[lost stone]

That fixed it

[lost stone]

Thanks

[fair lark]

Ok so I downloaded libkrw but tss saver still says error reading generator for me

[valid adder]

hence why I said to use the dimentio way

login as root in newterm

[fair lark]

Alright I’m there

[valid adder]

dimentio

then screenshot

[valid adder]

show me that librw is installed

and also show where dimention and libkrw are installed from

[shut quail]

I know my generator stuff but apnonce how do i figure this ?

[fair lark]

Oh I may have the wrong dimentio. Should it be from Conan repo? Mine is procursus

[valid adder]

procursus will be updated eventually

[valid adder]

try conan for now

[fair lark]

Alright switched

[shut quail]

I have iphone xr

[fair lark]

TSS saver seems to work now. Can I rely on the blobs it produces for a12?

[valid adder]

yes and no

I would use dimentio

screenshot

[valid adder]

ok

save with tsssaver

then send me your tsssaver link

wait for it to queue

blobs still saving

[fair lark]

Oh oops

[valid adder]

?

[sturdy portal]

Guys, is it possible to downgrade an iphone 7 from ios 14.4 to 14.2 with ios 14.2 shsh blobs saved? Thank you

Pls somebody help me 😦

[valid adder]

yes u need checkra1n

[sturdy portal]

I already jailbroken it

@valid adder what should I do now? thanks for your time

[valid adder]

install dimentio from conan repo

[ember ridge]

What are my actual odds of hitting a nonce match w/ -w ? Could be forever/never sort of thing yeah? (aka do you all think it's a fruitless endeavor?)

[valid adder]

yah not feasible

a7 has dfu nonce collisions

recovery collisions were patched all the way back in 10.2.1

[ember ridge]

ahh gotcha. oooh shoot. I can JB my 13.7 and then do some manual nonce setting stuff right? I'll dig into that

[valid adder]

yes

[wraith harbor]

Hi, so I’m new to this FutureRestore so I’m going to use the GUI to help me out so I don’t mess anything up. The one thing that I’m slightly confused about is the “Arguments” section, if I’m trying (and I really just want to give it a try, I saw that fails aren’t fatal or much to worry about, unless it fails half way through) to go from 13.5 to 14.2, would I want to use the Update argument, or keep it at Debug?

Another question, blobs that were saved with System Info correctly, those would be valid to use, correct?

[lilac wren]

Heya, the "Wait" argument is basically irrelevant now and doesn't work with modern devices. The "Debug" argument supposedly prints extra logs, no harm in having it turned on. And the "Update" argument basically acts as a normal update, preserving data on the phone (including jailbreak files) through the restore. You should only use this argument if you see the "updateinstall" key in your blob. Use a text editor to search for it

[wraith harbor]

Okay thank you! I see my generator key and the “updateInstall” that you were talking about 🙂 I’m gonna give this a shot, but I have to be sure, so sorry for bugging, but if it fails trying to go from iOS 13.5 to 14.2, it would fail before anything serious starts to happen, right? I just like to be completely sure with things like this 😂

[dusty coral]

yeah you just have to force exit out of recovery mode if anything goes wrong

[wraith harbor]

Okay thanks for the help!

[dry lodge]

OMG

FINALLY! Restored to 14.2 from 13.5 on an iPhone 11 Pro Max using FS 😄

FR*

thank you so much guys! FR is insane

[valid adder]

any one have bugs to report

[green onyx]

nope

[ember ridge]

Awesome Tex! That's almost exactly my setup and i'm trying to do the same. Did you start from a JB 13.5 and manually set a nonce ? (or did you just not have any ApNonce issues w/ your blob & device when doing futurerestore?). Thanks!

[dry lodge]

@ember ridge I did not set a nonce, all I did was use odyssey jailbreak with 0x1111** generator, because when I saved 14.2 blobs I was jailbroken on unc0ver

am I allowed to share a reddit post link here? because that's the guide i followed to a tee

[celest basalt]

Whats the warning about

[trim cargo]

i think its fine, open shsh.host and look at them

[celest basalt]

It says valid

[trim cargo]

you should be good

[celest basalt]

Aight

[ember ridge]

ahh interesting, thanks! would you mind DM'ing me that guide ?

[valid adder]

why dm

[ember ridge]

ah word right on, wasn't sure if posting that was allowed or not

[dry lodge]

i wasn't sure either that's why i asked

https://www.reddit.com/r/jailbreak/comments/m26sc1/tip_futurerestored_my_11pro_to_142_from_135/

i got the exact same errors as him and followed the fixes he posted

[wraith harbor]

One more question, is it okay to be jailbroken when trying to Futurerestore? Or should I do a Restore RootFS first and set the ApNonce in Unc0ver?

[dry lodge]

@wraith harbor isn't that how you set the generator? by tapping jailbreak?

[wraith harbor]

That’s how I usually do it, but not entirely sure

[dry lodge]

i ran a restoreFS first and then jailbroke to set generator 0x111.. then FR

[lilac wren]

it's ok to be jailbroken if you restore. if you update, then I'd rootfs

[dry lodge]

im assuming the log file from FR from 13.5 to 14.2 wouldn't help in any way, would it? lol

[wraith harbor]

Gotcha! Thank you. The nonce was set before I jailbroke again, but I didn’t know which way is better to go forward

[mystic hazel]

Is there a baseband on iPads?

[lilac wren]

if your ipad supports cellular, yes

[mystic hazel]

I cannot find it in the build Manifest

No, wifi ipad

[lilac wren]

then use --no-baseband

[mystic hazel]

Ok

Thx 😊

[lilac wren]

np

[dry lodge]

itunes restore takes forever 😭

[wraith harbor]

This does mean that it’s set, right? Excuse me for all the questions 😭

That’s from inside of Unc0ver

[lilac wren]

are you trying to set it to 0x66a4...?

[wraith harbor]

Yea, it says that after I did a Restore RootFS, and it’s my correct nonce

I even saved it to my notes in case and it’s all correct

[lilac wren]

ok then I think you're good

[wraith harbor]

Okay cool thank you! Gonna try this out now 😅

[fair lark]

Ok so it’s been a while since I’ve used TSS Saver but shouldn’t the link to open URL eventually become active once the blobs have been processed?

I’m still getting 404 not found hours later

Can ECID be used for anything nefarious? Is it ok to send in chat?

I couldn’t DM you

[mystic hazel]

It didnt work

Unable to find device

[green onyx]

check pinned

[mystic hazel]

Okay so irecovery

Ok, i'll try it again 😆

[green onyx]

no

read pinned

[mystic hazel]

Thanks, its working now

[green onyx]

np

[valid adder]

[jaunty raft]

Ok for some reason im still getting that iBEC error

[valid adder]

#futurerestore-help message

[celest basalt]

how did u set ur nonce

[valid adder]

@topaz solar u look at my blobs or havent gotten around yet

aight

im hitting my head against the wall

14.2 loads pwned restore mode fine

but 14.4.x doesn't

[celest basalt]

does this work on 14.3? a12?

[valid adder]

from conan repo it does

[celest basalt]

okay and from there i use tsssaver right?

im trying to save on-device blobs

[valid adder]

please dont call it that

@celest basalt

on-device blobs are a separate thing

^

[wraith harbor]

Thank you for everyone helping!! I successfully updated from 13.5 to 14.2 on iPhone 11 using FutureRestore GUI 🥰

[celest basalt]

well its because i didnt save blobs before, and i am told you can retrieve them from your current version on the device

[cinder flume]

is 14.2 still a gamble

[valid adder]

wym accessible

[wraith harbor]

I got my nonce from System Info and set it in Unc0ver

[cinder flume]

like for blind ppl

[valid adder]

whats screen reader

oh

[celest basalt]

before i continue, is this even possible? save me the tine if not

[jaunty raft]

so if I wanna use a friend of mine mac will I be able to use gui if I put all the files on an external hdd

[valid adder]

not usable on a12-a14

PoC?

for what

[celest basalt]

ah okay. and succession doesnt work on a12 for me so i guess am fucked lol

[valid adder]

well u are the smart person who didn't save blobs /s

im4m doesnt have generator @topaz solar

ondevice is im4m

[celest basalt]

i got my phone just as the 14.3 signing window closed

[valid adder]

oof

[tall siren]

hello

uh

i do not recall

[valid adder]

no generator

only BNCH

oh wait

im4r

has generator

but tihm removed im4r parsing

it doesnt give generator

[celest basalt]

one can dream

[valid adder]

BNCN is the genertor @topaz solar

BNCH is the apnonce

N stands for nonce H stands for hash

[fair lark]

@topaz solar

[jaunty raft]

aite fingers crossed that it boots into 14.3

[fair lark]

Guess I tried a few too many times

If it was saved shouldn’t the link work?

[jaunty raft]

Damn it worked Im officially on 14.3

Now its time to restore from backup and Ill be good

So do I update itunes now so that my phone can connect

im getting an error saying that itunes cannot connect to my iphone

[prime minnow]

h

[valid adder]

@topaz solar except I haven't seen one blob with a bncn

[jaunty raft]

hey @valid adder should I update my itunes because everything is fine im on 14.3 but itunes cannot connect to my phone so I can restore my backup

[valid adder]

why is your itunes outdated in the first place

[jaunty raft]

well its not outdated as I just used future restore but I keep getting an error message when I plug my phone up to itunes

its saying itunes cannot connect to this iphone An unknonwn error occurred (0xE800000A)

[wraith harbor]

14.2 is still a gamble, but I was also able to get to 14.2 with no problems on iPhone 11 using the GUI. So it still can be a huge gamble, since some people are still having issues.

[fair lark]

Indeed. Now it does! Lol

[lilac wren]

@valid adder I'm trying to understand it, is this right

Encrypt: Key is UID Key + 0x568241656551e0cdf56ff84cc11a79ef = AES Key 0x8A3

Encrypt Using AES 128: Key is AES Key 0x8A3 + Generator = Entangled Generator

Hash Using SHA 384: Entangled Generator = AP Nonce

Ok one sec

0x1111111111111111 and 0x095BA1068912E511FC57FA6CDEDE6DDD

That's not my nonce lol

Correct

Oh lol

[fair lark]

https://stor.tsssaver.1conan.com/tsssaver/shsh/6196650004512814/

[lilac wren]

May I ask how you did it so fast? Do you have a tool or just like "encrypt aes 128 online" "hash SHA 384 online"

@topaz solar

Ah ok

Do you really think people would know their 0x8A3 key but not nonce or something lol

Oh ok lol

So could you brute force a nonce with this

I did some calculations

Only a few million centuries I think it was if you do 50 a second

#futurerestore-help message

#futurerestore-help message

Lol

[sage grove]

Hey, I’ve got an old SE on 14.2, and I want to get it onto 14.3. It’s a test device mostly, and I want to use it as my guinea pig . I’ve future-restored before, so I’m not new to this. When I try to restore on Windows using manually specified SEP&BB, I get the same error whether I’m using the assets from 14.4 or 14.4.1

I just get several of:
[TSSR] Checking BuildIdentity 0
[TSSR] Selected BuildIdentity For Request

and then a “Failed to open output file download/Firmwares.ipsw Read error: Unknown error

anybody have any thoughts? The GUI was nice, but it just sat there doing nothing. So I did the advice from the command line

[lilac wren]

It's only possible to read ap nonce from recovery mode?

[lilac wren]

Like you can't read anything before the hash like entangled generator?

Isn't it just 16^16

Bc base 16, 16 digits

Lol

Very true

@topaz solar what about getting every single device's *AP nonce for 0x1111? We wouldn't need to break a hash—only create a UID key, encrypt, entangle, hash, boom ap nonce. Then do the next uid key. and that way, theoretically A12+ blobs can be saved for every device regardless if they're jailbroken.

I assume you can't get a UID key without being jailbroken?

Otherwise obviously we would already know nonces without needing to jailbreak

Dang

But the sha brute forcing only gets the generator for one device

This method would get nonces for everyone

UID key is unrelated to UDID?

Wait we're saved

I have a raspberry pi

It will brute force for us

Too ez apple

[jaunty raft]

Crap I’m still getting that error message with iTunes I need to restore my backup

[valid adder]

@topaz solar how did u get entangled

[ember tulip]

So, I pulled my A12 on-device SHSH blobs via img4tool//dev/rdisk1. What (if anything) are these blobs useful for (and is there a way i can validate them)?

[valid adder]

they need to have BNCN to be used @ember tulip

@topaz solar /cc

[mystic hazel]

Is the 14.4.1 sep and baseband the Same as 14.4, so i can use latest baseband and sep command?

[ember tulip]

So if my blob has the <key>generator</key> line, I should be okay?

[valid adder]

those blobs are valid but to use them your device has to reproduce the the BNCH apnonce hash which is generated from the BNCN nonce generator

probably ok

idk tho

not sure how img4tool converts it

[cunning arch]

yo so I need some help on finding my generator

i already set it as 0x1111111111111111, but im not sure thats the same one i used when i saved my blobs

or even when i jailbroke with checkra1n last year

i dont remember ever changing it or even setting it

[ember tulip]

https://github.com/tihmstar/img4tool/blob/master/img4tool/img4tool.cpp#L500 appears to be what it does

[valid adder]

oh so it does do it

cool

[ember tulip]

for my own curiosity, is the IMG4 format/layout documented anywhere?

[valid adder]

never noticed that

well the underlying blob is asn1 der

img4, im4p, im4m, im4r are the headers

they just tell the device what info the image is

beat me

lmao

its pretty cool that each component has the verification for every single device component

yeh why is bncn private

[cunning arch]

can one of u guys help me?

[midnight stream]

what is your problem ??

Open your *.shsh with notepad, notepad++, text...

Ctrl + F find "Generator"

[cunning arch]

i did and nothing came up

[midnight stream]

So your shsh is broken

or incorrect

[cunning arch]

i validated it tho and it said it was valid

[valid adder]

@midnight stream no its not

a12-a13 use noapnonce

[midnight stream]

i think it always have

[cunning arch]

im ipx

[valid adder]

they are still usable

tsssaver crashed during saving

only saved noapnonce

where did u save

[cunning arch]

tsssaver

[valid adder]

tell me the name of the blob

[cunning arch]

18A8395_15400076bc4c35a7c8caefdcae5bda69c140a11bce870548f0862aac28c194cc.shsh2

[valid adder]

0xbd34a880be0b53f3

there is the generator

[cunning arch]

damn howd u find that

[valid adder]

for future reference you could have checked pins

#futurerestore-help message

[cunning arch]

oh shit i didnt even see that thank you bro

so i just set my generator as that in dimentio?

[valid adder]

yep

as root

[cunning arch]

alright sick

[valid adder]

with conan dimentio

[cunning arch]

yeah

[valid adder]

conan repo cuz the other one is outdated

[cunning arch]

yeah i will thank you

[ember tulip]

following up, prob a bit off-topic, but yep, there it is:

[valid adder]

openssl?

[ember tulip]

indeed

[valid adder]

also can use lapto.js

[ember tulip]

openssl is more fun 🙃

[valid adder]

not when he saved

still not dead for a7 dfu

[cunning arch]

im using the futurerestore gui, and im stuck on "waiting for message from FDR"

should i just abort and try again?

@valid adder

@midnight stream

[valid adder]

screenshot

[cunning arch]

i waited 20+ min and nothing happened

i tried a second time and it did the same

[cunning arch]

@valid adder

lol where i didnt even see it

whats the problem if someone sees my udid

oh alright

[mystic hazel]

Yaaaas, it worked on my mac finally

[valid adder]

Joemama

[valid adder]

@turbid shadow u were helping someone with Hebrew username right and it failed?

[sleek elbow]

14.2 on A11 Status?

[valid adder]

There is no eta for doing research

It is an unknown mystery

Research and reversing takes time

[green onyx]

it works if u go from ios 13

[neat solstice]

I have blobs for 14.3. Can I go there from 14.4.1?

[green onyx]

what device

[neat solstice]

@green onyx iPad 5 (WiFi)

[green onyx]

what chip is that

[turbid shadow]

huhhhh? no

[neat solstice]

A9

[green onyx]

then yes u can

u can use checkra1n to set generator

and then use fr to downgrade

[turbid shadow]

to downgrade

[sinful spade]

true

[celest basalt]

hey, so i have two blobs saved for 14.3, one where the gen is 0x11111 and so on and one where its different. Im using unc0ver, so i can just use the one with 0x111 and dont have to set any other nonce in u0 since its the default right?

hope that all made sense lol

[green onyx]

just use either

[celest basalt]

doesnt matter?

[lilac wren]

I'd pick the 0x1111 bc it's easier

[celest basalt]

okay thank you

guess ill try the tutorial pinned in here on weekend then thanks

[green onyx]

@celest basalt try the gui lol

its easier

[lilac wren]

I love you azure... 32kb/s

[jaunty raft]

What does waiting on message from FDR mean when using future restore GUI

[green onyx]

dw about it

its normal

[celest basalt]

gui uhmmm, could u give me a link?

[green onyx]

what is that? the server for logs?

[green onyx]

https://github.com/JohnnnnyKlayy/FutureRestore-GUI

[celest basalt]

thank you 😄

[lilac wren]

yes it's where logs will be sent

[jaunty raft]

Ahhh ok so it was fine to close the program out

[green onyx]

no

why did u stop fr

[green onyx]

poggers, how much does hosting cost

[lilac wren]

$0.0052 an hour for the VM, but storage is always what costs me ~$5 a month

so the vm is around $3 a month

+5 for storage

$8 a month total

[green onyx]

mhm kinda expensive ngl

[lilac wren]

eh I have $80 student credit that expires in like a month so I'm fine for now

[green onyx]

nice

[sharp tangle]

As System info is broken rn, how do i save blobs for 14.4.1 for example ?

[jaunty raft]

I thought since my phone rebooted to 14.3 and I was going through the process of setting my phone up like it was brand new it was a good idea

[lilac wren]

can you find a server that's cheaper tho

[green onyx]

self hosting?

idk

[lilac wren]

and it has to be a server bc it accepts requests

can't just be any vps I don't think

[green onyx]

ah i see

[lilac wren]

yeah you gotta be able to open a port

in my case

port 6969

[green onyx]

nice

[lilac wren]

nice indeed

[sleek elbow]

@green onyx im in 1.4 now. I have blobs for every Ios 13 version. Is it possible to downgrade to Ios 13 from 14.4?
@sacred estuary did you update grom ios 13 or downgrade from ios 14? and did you use the MacOS or windows build? MacOS didnt worked for me

[green onyx]

no

u cannot

and why are u on ios 14.4

[sleek elbow]

because it was initially said that you can downgrade from 14.4 to 14.2. So I updated

[green onyx]

no u cant

wtf

where did it say

if its a yt tutorial, its fake

[sleek elbow]

it was pinned in the discord
10 days ago

[shut quail]

APTicket-APNonce mismatch, error can somebody explain what i need to do for me to pass this point am struggling i have an xr on 13.3 and want to go to 14.3 i have blobs which are valid ?

[covert lily]

Are the blobs for iPadOS 14.4 valid for 14.4.1? I don't see any blobs for 14.4.1 listed in the 1conan TSSSaver web page... (My blobs are all save din https://stor.tsssaver.1conan.com/shsh/5921145076851238/)

[covert lily]

[sharp tangle]

How do i know for sure that my blobs saved with it are going to work ?

[green flower]

Hi, everyone ✌️ I’m having this error in Future restore GUI apnonce does not match apticket nonce please any Help 🙏

[green onyx]

set generator

use [[dimentio]]

[mystic axle]

dimentio

PoC tool for setting/getting nonce without triggering KPP/KTRR/PAC. (requires tfp0)

Author

0x7ff

Version

2.0.0-1

Price

Free

Repo

1Conan

Bundle ID

com.0x7ff.dimentio

More Info

Click Here

1Conan • Page 1/5 · Mar 11, 2021, 5:48 PM

[sharp tangle]

okay, good. my 14.4.1 seem to be okay

14.4.1 blobs*

[green onyx]

i have 3 storage of blobs

so poggers

[sharp tangle]

all of mine are either on shsh.host or desktop in a jb folder

[mystic axle]

TSS Saver (iOS 11 and below)

An awesome application!

Author

1Conan

Version

2.0.0

Price

Free

Repo

1Conan

Bundle ID

com.1conan.tsssaver.olddevices

More Info

Click Here

1Conan • Page 3/3 · Mar 11, 2021, 5:51 PM

[green flower]

I’m trying to upgrade from 13.5 to 14.3 blobs unc0ver bu t I’m getting that error 😭

[green onyx]

i have it on shsh.host, @topaz solar 's server and adam's bot

@topaz solar how much is hosting rn

[shut quail]

http://tsssaver.1conan.com/check

[green onyx]

like $ per month

and how much storage is used up rn

[shut quail]

Ive just checked mine and its invalid damn bro now i know why it failed

[sharp tangle]

oh, i got them on adams bot too

[covert lily]

I resaved and not working

Actually I didn’t need to resave for when 14.3 came out, or when 14.4 came out.

Then how?

Weird that it just worked for me

¯_(ツ)_/¯

[green onyx]

holy fuck

[hidden marten]

Will future restore work for 14.2?

[covert lily]

Depending on device

[hidden marten]

iPhone X

[green flower]

I verified my blobs and match correct I have save in shshhost

[green onyx]

[hidden marten]

@covert lily iPhone X

[covert lily]

Should work then......

[green flower]

I did set generator in uncover but however I’m getting that error

[green onyx]

dont use unc0ver

i just said

use dimentio

[celest basalt]

Going to use FR to update my iPX from 13.5 to 14.3
Can I use lastest sep and latest baseband
or do I need to specify them

[hidden marten]

Did they update it recently? I’m on 14.4 with 14.2 blobs. It messed up when I tried the first time on 13.2

[green flower]

I have Xs Max will that works?

[green onyx]

yes

[hidden marten]

When I used the terminal for the command it put the device into restore mode and stopped working. I had to force a hard reboot

[green onyx]

use latest

[hidden marten]

My b

[celest basalt]

I have 2 blobs which should I use?

[green onyx]

either is fine

[celest basalt]

What is the difference? And how do I know the correct generator I used for that blob?

[green onyx]

there is no difference

upload the blob to https://verify.shsh.host

to figure out the generator

also open the blob with notepad

ctrl+f

and search updateInstall

can u find updateInstall

[celest basalt]

Yes found it, It is the same as the one in TssSaver atm

I'm using checkra1n

[green onyx]

alright

@celest basalt macos, linux or windows

[celest basalt]

Oh sorry it is a difference one from the one in tsssaver

windows

[green onyx]

https://github.com/JohnnnnyKlayy/FutureRestore-GUI/releases/tag/v1.51

download that

[green onyx]

screenshot pls

true but im not using to typing that

admin access to ur server

ios 14.4 blob

bruh

@topaz solar wrong blob i think

[zealous bridge]

Rip ECID leaked

[green onyx]

so ur generator is 0xbd34a880be0b53f3

[zealous bridge]

can confirm

lol my generator is actually 0x4206942069420699

[green onyx]

[celest basalt]

How to set my device to that before I futurerestore?

[green onyx]

lmao what

oh

@celest basalt use dimentio

[zealous bridge]

update unc0ver too

[green onyx]

[[dimentio]]

[mystic axle]

dimentio

PoC tool for setting/getting nonce without triggering KPP/KTRR/PAC. (requires tfp0)

Author

0x7ff

Version

2.0.0-1

Price

Free

Repo

1Conan

Bundle ID

com.0x7ff.dimentio

More Info

Click Here

1Conan • Page 1/5 · Mar 11, 2021, 6:15 PM

[green onyx]

hes using checkra1n

[celest basalt]

I'm using dimentio already on checkra1n

[green onyx]

use newterm

[zealous bridge]

use a terminal app

[green onyx]

and su

alpine

dimentio 0xbd34a880be0b53f3

i use ssh keys

and alpine easy af for me

mhm true

ill set it to be the same

as my passphrase

where

[celest basalt]

Am I good to go now on that blob?

[green onyx]

good

yes

where lmao

i did submit a blob

hol up

found it

why

kinda cool imo

and why are there captchas

bruh

shsh.host doesnt have it

12k

mhm true

i dont abuse tho

lmao what

oh

i meant for saving blobs

wait

they have it now

lmao

ye i just realized lol

true

[celest basalt]

question. before using futurerestore should i turn off passcode? i keep getting Unable to place device into recovery mode from Normal mode

[green onyx]

no its fine

[celest basalt]

when itunes pops up when fr puts my device in recovery mode, should i close it?

or just leave it

Am I good to go?

[valid adder]

you can even check -u

[celest basalt]

What does it do?

I thought that I cannot update while I’m jailbroken

[valid adder]

nah Ive used it on my X

and the X can be jailbroken on 14.4.1

so not like restore failed is a bad thing

ive done -u at least 20 times

[celest basalt]

But I have to lose the FaceID

[green onyx]

ur blob has updateInstall

u can use -u

[valid adder]

how does -u have anything to do with face id

[green onyx]

no u dont

it flashes sep i think

[celest basalt]

I mean jailbreaking 14.4.1 would break it

[valid adder]

bruh

im saying u jailbreak 14.4.1 to set nonce

[weary ibex]

It’s here an bypass for this unknown request personalized data recevied futurerestore

[valid adder]

to downgrade to 14.3

[celest basalt]

Ohh, got you

[green onyx]

?

[valid adder]

there is no scenario here where u lose face id

[green onyx]

wait

dont use -u

ur downgrading

its risky

[weary ibex]

Yes

[celest basalt]

Great, didn’t think of that before

[green onyx]

-u is only when upgrading

[valid adder]

nah

works both ways

[weary ibex]

Ohhhh @green onyx

[valid adder]

hes upgrading right?

[weary ibex]

I know thanks

[green onyx]

damn fr

[valid adder]

hes on X so it doesn't matter

[celest basalt]

Im upgrading right now yeah

[green onyx]

true

[celest basalt]

I’m good no matter what happens

[valid adder]

it works both ways but I wouldn't risk arm64e

[green onyx]

this is true

[celest basalt]

Going to update my friend’s iP11 tomorrow so I’m testing it first on my iPX first today without using -u

ooh it should be good now right?

[valid adder]

@celest basalt as soon as it says done: restore succeeded your phone doesn't have to be plugged in

its succeeded

it does its loading thing

ondevice now

[celest basalt]

@valid adder should I use lastest sep and baseband or manually specify it?
I remember opa334 saying latest breaks it

Or that was fixed on latest version

[valid adder]

you haven't needed to manually specify in weeks lol

opa fixed it weeks ago

[celest basalt]

Good to hear, thanks.

[real star]

Since I don't have 14.3 blobs on my X, is it possible to do a blobless upgrade using pwndfu and removing sigchecks? I looked at inferius but it seems it's not updated for ios 14.

[valid adder]

@real star what version are u on

[real star]

13.5

[valid adder]

do u have 13.5 blobs

you can't get to 14.3 im just curious

you can only boot it tethered

blobless required untethered bootchain exploit

checkm8 is semi-tethered

[real star]

I do have 13.5 blobs

[green onyx]

oh shit

ngl why is ur queue in the thousands tho

[valid adder]

@real star u can only go to 14.4.x

[green onyx]

how many ppl are saving blobs

tf

bruh

[valid adder]

can I upload my blobs

[real star]

I'm fine with booting tethered

[valid adder]

then just use Divise

@real star

@topaz solar because me an 1000 other people dont have 13.5 blobs but I dumped onboard

[real star]

Thanks I hadn't heard of that, will check it out!

[valid adder]

looking now

what about v2 -> patreon transfer

copy*

aight

@topaz solar fix cron job for patreon subdomain as well

tired of doing this lol:

oh shit now patreon just doesnt work at all

nvm I just didnt reboot browser

what is the origin of acme

seems like a legacy name they kept

I use letsencrypt and nginx

or I used to

cant ssh anymore

also doesn't look like 14.4.1 is queuing

cool

ooooof

my 13.5 blobs only have upgrade install

wtf

apple

this is onboard

let me try reconverting dump

yah blob.dump does that

sad

[celest basalt]

What should I do?

[lilac wren]

Hit cancel on itunes

[lilac wren]

open link and do what it says

[valid adder]

why did you not

click

the

link

its

there

so

you

dont

annoy

us

[lilac wren]

it's literally like spelled out for him lol

but it's not annoying if you just ignore it

or let someone else help

[covert lily]

I was pinged twice here

Welp

[celest basalt]

I'm sorry guys

Trying that fix rn

[lilac wren]

No you're fine, it's ok to be nervous haha

[valid adder]

@covert lily

[celest basalt]

Tried that fix but didn't work for me, going to try the iTunes version opa mentioned it

[valid adder]

@celest basalt alright

try mine

#futurerestore-help message

[covert lily]

I'm on phone, I don't have it

[sinful spade]

wait inbox exists on desktop

[valid adder]

@covert lily next to your name then, its the @ symbol

bottom left

[lilac wren]

lmho why would they put a feature on mobile but not desktop

[valid adder]

@sinful spade when has it not??

[sinful spade]

it has

im just too dumb to look in the corner

[covert lily]

Thanks

[lilac wren]

fyi ghost pings don't appear in mentions

I wish it would at least say (Deleted Message) or something

[valid adder]

[lilac wren]

:(

[covert lily]

Yeah it was 1Conan asking me to retry saving blobs. Queue is at 12k items

[valid adder]

yes

my 14.4.1 havent saved yet

and im on patreon saver

so be patient

[lilac wren]

imagine not saving 14.4.1 as soon as it came out

[covert lily]

Neither have mine but yeah I'm solidly on 14.3 w blobs for 14.2

And 14.4

[green flower]

I set generator with dimentio like u said but however still saying apnonce does not match apticket I’m using uncover version 5.3.1 Xs Max on 13.5 😭

[valid adder]

you can dump 14.3

onboard

@covert lily

[celest basalt]

yep, use System Info (ECID -> APTicket) or SHSHDump

don't just copy apticket.der bc that has no generator

[valid adder]

!t ibec

[mystic axle]

ibec

Fix for error code 3, 8, and 10 aka the iBEC error in futurerestore

1. Uninstall all apple drivers via device manager.
2. Uninstall all apple products including itunes and apple device support stuff via control panel uninstall a program. MAKE SURE TO CHECK UNINSTALL DRIVER WHEN UNINSTALLING
3. Unplug and replug device.
4. Check device manager for more apple stuff and uninstall if so with same driver checkbox.
5. Disconnect device.
6. Install itunes64 exe from apple.com itself, no windows store bullshit. (It will be labeled windows 7, 8 but install it on windows 10, it works fine)
7. Plug in device in recovery.
8. iboot (recovery) driver should show up under usb in device manager. Uninstall it and check the with software box.
9. Run futurerestore.
10. Unplug and replug your device.
11. Run futurerestore again

Added by Cryptic#6293 | Used 1 times · Mar 11, 2021, 7:50 PM

[valid adder]

!t ibec

[mystic axle]

ibec

Fix for error code 3, 8, and 10 aka the iBEC error in futurerestore

1. Uninstall all apple drivers via device manager.
2. Uninstall all apple products including itunes and apple device support stuff via control panel uninstall a program. MAKE SURE TO CHECK UNINSTALL DRIVER WHEN UNINSTALLING
3. Unplug and replug device.
4. Check device manager for more apple stuff and uninstall if so with same driver checkbox.
5. Disconnect device.
6. Install itunes64 exe from apple.com itself, no windows store bullshit. (It will be labeled windows 7, 8 but install it on windows 10, it works fine)
7. Plug in device in recovery.
8. iboot (recovery) driver should show up under usb in device manager. Uninstall it and check the with software box.
9. Run futurerestore.
10. Unplug and replug your device.
11. Run futurerestore again

Added by Cryptic#6293 | Used 3 times · Mar 11, 2021, 7:50 PM

[valid adder]

capt

what

the

fuck

ah

[zinc moon]

so it put my phone in recovery mode but it says thus now

========================>]
[TSSC] opening /tmp/futurerestore/basebandManifest.plist
[TSSR] User specified to request only a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Found device in Normal mode
Entering recovery mode...
ERROR: Failed to place device in recovery mode
futurerestore: failed with exception:
[exception]:
what=Unable to place device into recovery mode from Normal mode

code=8978449
line=137
file=futurerestore.cpp
commit count=29:
commit sha =2994651a10d8176a298b31e7706b4b6af97975d1:
airalkhasbraeda-3:~ raedaniroukh$ £

the phone itself is in recovery mode tho

what should i do

should i retry

[valid adder]

just

retry

you should have retried before posting here

[green flower]

run everything again

[zinc moon]

should i exit recovery before retrying?

[green flower]

no

[zinc moon]

ok

[valid adder]

@green flower why say what I already said

@zinc moon no lol entering recovery is the issue, so exiting would just break it over and over again

I already fixed this for the next release

[zinc moon]

I tried again and

ERROR: Unable to connect to device?!
ERROR: Unable to get FirmwarePreflightInfo
[WARNING] failed to read BasebandGoldCertID from device! Is it already in recovery?
[WARNING] using tsschecker's fallback to get BasebandGoldCertID. This might result in invalid baseband signing status information
[TSSC] opening /tmp/futurerestore/basebandManifest.plist
[TSSR] User specified to request only a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Found device in Recovery mode
Device already in recovery mode
Found device in Recovery mode
Identified device as d101ap, iPhone9,3
Extracting BuildManifest from iPSW
Product version: 14.0.1
Product build: 18A393 Major: 18
Device supports Image4: true
Got ApNonce from device: 27 32 5c 82 58 be 46 e6 9d 9e e5 7f a9 a8 fb c2 8b 87 3d f4 34 e5 e7 02 a8 b2 79 99 55 11 38 ae
checking APTicket to be valid for this restore...
[Error] ECID inside APTicket does not match device ECID
APTicket is valid for 3763146000429502740 (dec) but device is 3439615971885114 (dec)
Cleaning up...
[exception]:
what=APTicket can't be used for restoring this device

code=46858257
line=715
file=futurerestore.cpp
commit count=29:
commit sha =2994651a10d8176a298b31e7706b4b6af97975d1:
Done: restoring failed!

[green onyx]

ecid doesnt match

[valid adder]

please dont post text

screenshot

but full log

[zinc moon]

Alright

[zinc moon]

I take a screenshot of everything?

[valid adder]

nah

for next time

but

[green flower]

im getting a similar error but appnonce does not match apticket

[valid adder]

can you screenshot itunes ecid

thats not related to his error @green flower

[zinc moon]

im on mac let me see if it gives me the ecid

[valid adder]

then finder

if not

irecovery

[zinc moon]

i cant get the ECID

[valid adder]

one sec

@zinc moon

chmod 0755

then run it

irecovery -q

[zinc moon]

chmod 0755

?

[valid adder]

the

file

chmod 0755 ~/Downloads/irecovery
~/Downloads/irecovery -q

this ^

[zinc moon]

oh ok

[valid adder]

@green flower that issue is caused by nonce not being set correctly

u use dimentio?

[zinc moon]

permission denied

[valid adder]

@zinc moon screenshot

[zinc moon]

ok nvm it showed something else this time

[green flower]

80C313C28002E

[valid adder]

not u lol

[valid adder]

copy paste ecid

[zinc moon]

0x000c3850002b003a

[green flower]

yes

[zinc moon]

so, what do i do with the ECID

[valid adder]

holdup

tf

where did you get this build from

we are are on 194

not 29

also

why are you using bash on bigsur

[sinful spade]

[valid adder]

https://github.com/marijuanARM/futurerestore/releases

@zinc moon

@green flower dimentio from conan repo run as root?

[zinc moon]

do i use that just like the normal futurerestore?

[green flower]

yes i downloaded from that repo

[valid adder]

@zinc moon extract it

[zinc moon]

i di

did

[valid adder]

@green flower make sure libkrw is also installed

@zinc moon then just rename the command to -v194

show me command

[zinc moon]

i dont understand

[valid adder]

show me the command u ran

futurerestore

[zinc moon]

the failed result?

[valid adder]

no

the command

[zinc moon]

or how i wrote it

[valid adder]

yes

[lilac wren]

How are onboard blobs created/saved—does the phone cache Apple's signed SHSH for the version you have installed, and you simply dump it? or does the phone generate a signature (which I don't think is possible)? Do you need to build it, or does it just exist and you need to fetch it?

[zinc moon]

ok just a sec

[valid adder]

they work because of the fundamental concept of how iOS secure bootchain works

starting in iOS 7 64bit with img4

all components have embedded im4m blobs

we dump iboot im4m from disk1

that is onboard

contains all components in the im4m

[lilac wren]

ah I see, so iOS refuses to run if the firmware that's on the phone is not signed?

it needs to always have a signature to boot?

[valid adder]

now replace futurerestore in that folder with my v194

@zinc moon

[zinc moon]

ok

[valid adder]

@lilac wren yes, but can be bypassed with one patch(2 instructions)

patch img4interposercallback to return 0

[lilac wren]

but I assume you can't just do this with a jailbreak like unc0ver

[valid adder]

instead of running the original code

this is how im getting verbose serial logs

because I load a patched iBEC with custom bootargs

nah

need checkm8

[lilac wren]

thought so

ok that's cool! good luck on your research, and thank you for the knowledge

[valid adder]

divise may be able to do it tho

idk what the requirements are for divise are

[zinc moon]

failed

[valid adder]

yep

@zinc moon screenshot

[valid adder]

very odd indeed

[lilac wren]

ah ok, so changes you make to booting are reverted on reboot?

[zinc moon]

so..should i exit recovery>

[valid adder]

@lilac wren yes there is no untethered bootchain exploit

not since de rubus

iOS 7

[lilac wren]

ah ok

[valid adder]

I plan to make a wiki on all my iOS knowledge

[lilac wren]

please

[valid adder]

its 5 years worth of experience

[lilac wren]

or contribute to iPhone wiki?

[valid adder]

yeh I do occasionally

so there as well

[lilac wren]

you need to put your knowledge somewhere haha

[valid adder]

just posted 14.4.1 X keys lol

[lilac wren]

otherwise you'll get asked the same questions like 1000x

[zinc moon]

im gonna try again

[valid adder]

it wont work

[zinc moon]

at all>

?

[celest basalt]

Think I'm gonna fr to 14.3 now I can still use 14.4 sep right as it's signed or should I use 14.4.1's sep+bb

[lilac wren]

think how many people won't have to ask you how getting onboard blobs works if you had a wiki page on them

[lilac wren]

it looks like you saved blobs for a different device so it probably won't work on the device you're trying to restore rn

[zinc moon]

this is the device

i have no other iphones

[valid adder]

can you send me the apticket you have downloaded

the one from the site is valid

but maybe your download corrupted

[zinc moon]

AP ticket?

how do i get tht

[valid adder]

this file

[zinc moon]

i send the file itslf?

[valid adder]

uh oh

bad blob?

let me check something else

[zinc moon]

maybe? what do i do in that situtation

[sacred inlet]

Can I use futurerestore to go from ios13.5 to 14.1 on iphone XR? I know I have blobs saved

[valid adder]

I know what happend I think

[zinc moon]

what happened?

[valid adder]

will have to ask conan

he asleep now tho

wait

im dumbb

the blob is valid

[zinc moon]

man im confused

whats the problem then?

ok you might need to know this

but sometimes the laptop randomly disconnects

[valid adder]

seems like a bug in futurerestore

[zinc moon]

from the phone

[valid adder]

theres a lot of reconnecting during futurerestore

unless you mean other cases of disconnect

[zinc moon]

what can i do in the meanwhile?

[valid adder]

try a different computer

[zinc moon]

would a VM work

[valid adder]

yes

or ubuntu

or windows

[zinc moon]

is there a way for me to get back the phone

while i download the vm tommoro

[lilac wren]

fr --exit-recovery

[valid adder]

futureresore --exit-recovery

[zinc moon]

doesnt work

[valid adder]

like froggy said

what about it didnt work

[zinc moon]

let me screenshot

[valid adder]

wrong futurerestore

please delete 180

you have to use 194

[zinc moon]

alright

it just shows me that big ass list of stiff i could do

[valid adder]

because

you made a typo

[zinc moon]

oh

[valid adder]

--

[zinc moon]

--exit-recovery or --exit--recovery?

[wintry wind]

Bad experience with future restore on iphone 11 pro max from 13.6.1 to 14.3 with shsh blob made to update it to 14.4 any way to down grade it to 14.3

[valid adder]

looks to me like one dash

[lilac wren]

think you can just do -e

[valid adder]

@wintry wind no

[lilac wren]

or -n

i forgot which

[sinful spade]

IT'S -e

[lilac wren]

ty

[wintry wind]

😢

[valid adder]

@wintry wind send the log or we cant fix it for future users

[zinc moon]

ok its doing it

[sinful spade]

inb4 restored because of recovery loop

[zinc moon]

its out of recovery mode

[sinful spade]

i meant the other guy

[valid adder]

@wintry wind I sware if you did that

[zinc moon]

can i move a file inside a vm or do i have to download it again

[lilac wren]

you can move it in, what software

[zinc moon]

virtualbox

[lilac wren]

hit settings

first tab general hit advanced

drag'n'drop switch to host to guest

or bidirectional

[valid adder]

@green flower screenshot dimentio

[lilac wren]

hey @valid adder sorry to bother you again, do you know what UniqueBuildID is in a blob? I can't find info on it. Is it just the build ID for the version like 18D65 or whatever

*not a blob, in the request to Apple for a blob

[valid adder]

just a unique identifier for specific device iOS version

[lilac wren]

in the example it's fqzW0B++Zdrs+PRwohkwU6prjbk=

do you have to decode this

or is that literally the ID

[valid adder]

every data section is base64

lol

[lilac wren]

oh

[valid adder]

thats just how plist saves it

[lilac wren]

erm it decodes to something weird though

[valid adder]

so no corruption happens

[lilac wren]

~ep0Sk

[valid adder]

its binary @lilac wren

thats why

[lilac wren]

oh :P

tysm

[valid adder]

hexdump -C UniqueBuildID.bin

[green flower]

i didnt have that installed but i installed and retry again and still saying appnonce does not match apticket but i verify the file wich i have save in shshhost and is valid ithink i give up keep trying

[valid adder]

dont give up

just screenshot terminal

ill help

[green flower]

what part u want me too screenshot

[valid adder]

the bottom

[lilac wren]

wiki says you can get this value from the buildmanifest, what does it look like in there

[valid adder]

same way

[lilac wren]

in b64?