futurerestore-help

[timber wigeon]

ok done

[wicked chasm]

Now try again it taked 20 minutes for me

[lilac wren]

congrats!!

[wicked chasm]

Thanks

[lilac wren]

oh wait did you already do that

Oh you were the one with the issue with cynject

did you ever fix it?

[wicked chasm]

Installing apps and other stuff

MacOS version get stuck with this

Tip: Unc0ver Restore-fs step 2 Changes generator value

[timber wigeon]

gotcha, going to try the removal of ireboot

ive been skipping the restore-fs step, guess ill do that step now

[wicked chasm]

Your Generator value should match to SHSH Generator Value

[timber wigeon]

trying to goto 13.5 -> 14.2 as well

im looking at the generator value in textedit and its 0x(15)'s

err 16 1's

[wicked chasm]

can add screenshot ?

[timber wigeon]

of teh ios device or gui?

[wicked chasm]

from gui

[timber wigeon]

lemme try a fresh try, sec

[zealous bridge]

You didnt set generator properly @timber wigeon

[wicked chasm]

.

[timber wigeon]

i feel like theres a second mini reboot that kicks out what im setting

[zealous bridge]

as long as you enter recovery in one go

[timber wigeon]

itll pause after putting into recovery mode then run everything again like i pressed start for the first time

[zealous bridge]

then your generator should stay

what are you using to set generator

[timber wigeon]

sec, phones exiting recovery mode

nonceset143

[zealous bridge]

your generator is 0x1111111111111111

make sure you are putting that in

all 16

[timber wigeon]

right

[zealous bridge]

then as soon as you set it

run futurerestore

no reboots in between

[timber wigeon]

thats what ive been doing

jailbreak

then open nonceset

click setnonce with 0x1111111111111111

[zealous bridge]

try again

pay attention to exactly what happens

[timber wigeon]

phone went blick

task is downloading savage

itunes pops when recover is activated

.......

[zealous bridge]

Now

Just stop futurerestore and run it again

Dont touch your device

[wicked chasm]

Removed? iBoot Driver it causing this

[zealous bridge]

no

its a futurerestore problem

[wicked chasm]

I solved with removing this

Im back to club

[timber wigeon]

ok running restore again

and now its saying my nonce is messed up

on iphone xs

didnt touch my phone, left in recovery mode

[zealous bridge]

iphone xs?

you fucked up saving your blobs

[timber wigeon]

yes xs

<

[zealous bridge]

2735... is iPhone X and below

You shouldve manually specified an apnonce

[timber wigeon]

i was

[zealous bridge]

You did the wrong one

2735 is 0x1111 for A11 and below

For A12 and above its different

[timber wigeon]

i wanna say i did the manual mode with apnonces and then also using system info

[zealous bridge]

you know the nonceset143 tweak

When you set your nonce with that

Send a screenshot of the app

[timber wigeon]

using 0x1.....

[zealous bridge]

yeah theres another number there

a longer one

[timber wigeon]

ok

ive found a different blob from shsh.host

[zealous bridge]

the “Current Apnonce” has to match with the string at the end of your blob

Thats the only way it will work

[timber wigeon]

stupid entanglement

so going forward i suppose, even if i was specifiging ecid and apnonce how would i make sure those blobs stay valid, using tsssaver or shsh.host?

[lilac wren]

if they're valid once they'll stay valid forever so long as you can set your nonce

[green onyx]

^

but u have to save ur blobs correctly first

someone should make a guide on how to save blobs A12+ with nyu's getnonce

[timber wigeon]

i followd a guide about 2 years ago? to pull out a nonce and stuff via command line when i first got my xs

[green onyx]

2 years ago

[timber wigeon]

ya.... then i just saved my shit to a stickynote and just kept copy paste every few months

🙄

[zealous bridge]

like 3 other people did that

that tool has been broken forever

[timber wigeon]

well, lemme ask this, installing the system info tweek has a swipe method for saving blobs, that should keep proper generators no?

[zealous bridge]

not on ios 14 i think

[timber wigeon]

ios13

[zealous bridge]

you should be using the tsssaver app anyway

it does everything for you

and its not broken

[lilac wren]

um

gir wth

:(

[green onyx]

filter go brrrr

put a space inbetween

[lilac wren]

you can't say old gen but instead of old, new

[zealous bridge]

[[TSS Saver]]

[mystic axle]

TSS Saver

An awesome application!

Author

1Conan

Version

2.0.3

Price

Free

Repo

1Conan

Bundle ID

com.1conan.tsssaver

More Info

Click Here

1Conan • Page 2/3 · Mar 29, 2021, 12:38 AM

[green onyx]

what could possible be filtered

lmao

ah i see

why is it filtered

[lilac wren]

anyways system info always failed to derive a newww generator and nonce pair

for me

[timber wigeon]

logging back into icloud

[lilac wren]

I have no clue lol, maybe it's a slur in some language

[green onyx]

maybe

idk

the filter is jank tdy

[timber wigeon]

well, thanks everyone for the help even thought it ended up with me being a super dumbo

[lilac wren]

Ubuntu done, 2 to go

Didn't realize I needed red hat to build rpm, I'm dumb

Will finish tomorrow, I'm going to go to bed

[green onyx]

poggers

[green onyx]

gn

oops

my pings were 30mins late

[lilac wren]

Lol

[rugged rampart]

Done sending NORData
ERROR: Unable to receive message from FDR 000000000411a400 (-2). 0/2 bytes
ERROR: Could not read data (-256). Aborting.``` anyone know what this means from a troubleshooting standpoint (FR v194) ? iphone X

FR git says "Error: unable to receive message from FDR…

• This error can be caused when using an SEP and Baseband that is not compatible with the unsigned firmware you're trying to upgrade, downgrade, or re-restore to.
• Make sure that you know that the SEP and Baseband you use in order to upgrade, downgrade, or re-restore is compatible with your desired unsigned firmware."
  but the guide im following just says to issue --latest-sep --latest-baseband so im not sure what i should do to make sure theyre "compatible"

[valid adder]

hmm you seem to be missing the most important thing in your question

you have all the context except this

[rugged rampart]

im sorry, im on 13.5 iphoneX trying to FR 14.2 (yes, i know not officially supported but ive talked to a few people who it worked fine for)

so im trying to do the manual SEP/BB method that is described in the Git guide, but when i go to the telegram bot and select my device and 14.2 firmware, it says "The specified device doesn't seem to have an SEPOS or BBFW inside its IPSW" .. so i need to figure out a way to get the sep/bb that works with 14.2 for my device

[valid adder]

14.2 either works

or it doesn't

14.3 and later work fine

[rugged rampart]

right i get that. only issue is the people who it worked for, i dont know which approach they used so im just trying to follow the errors and see if i can resolve them. so far it gets halfway there and then i get the error that apparently is caused by sep/bb

[lilac wren]

^ just use --latest, if it doesn't work it's not your fault and you can't do anything to fix it

[rugged rampart]

yeah --latest is first thing i did. you dont think manually specifying sep/bb could work around it?

[lilac wren]

Nope

14.3 works though

[rugged rampart]

right.. well, there's no jb on the horizon for 14.3 correct?

[lilac wren]

Um lol

I'm on unc0ver 14.3 A12 rn?

[rugged rampart]

oh right.. i mean 14.4

14.3 is the only blob i dont have, sadly

[lilac wren]

14.4 also works but no jb

Ah ok

[rugged rampart]

yeah so its either 14.2 (miracle) or 14.4 or later

im on A11

i might just go into the store tomorrow and see if i can find a new i-12 with 14.3 ..

[brisk leaf]

What’s the best way to save blobs now?

Does systeminfo still work?

[zealous bridge]

[[TSS Saver]]

[mystic axle]

TSS Saver

An awesome application!

Author

1Conan

Version

2.0.3

Price

Free

Repo

1Conan

Bundle ID

com.1conan.tsssaver

More Info

Click Here

1Conan • Page 2/3 · Mar 29, 2021, 5:59 AM

[brisk leaf]

What happened

[zealous bridge]

you need [[libkrw]]

[mystic axle]

libkrw

Nice kernel r/w API

Author

Siguza

Version

1.0.0

Price

Free

Repo

Bingner/Elucubratus

Bundle ID

libkrw

More Info

Click Here

Bingner/Elucubratus • Page 1/2 · Mar 29, 2021, 6:05 AM

[zealous bridge]

and unc0ver version above 6.1.0

@brisk leaf

[brisk leaf]

Oh ok it worked

[brisk leaf]

Does that mean I can’t use tsssaver on my iPad?
I’m running unc0ver 6.0.0 bc no other version works on it

[zealous bridge]

which ipad

[brisk leaf]

iPad Pro 2nd gen 11”

[zealous bridge]

a12z?

[brisk leaf]

Yep

[zealous bridge]

yeah

you need a generator/ nonce pair

there are a few other ways to get it i suppose

[brisk leaf]

I didnt need that for a13?

[zealous bridge]

you do?

A12+ has nonce entanglement

[zealous bridge]

meaning you need this

[brisk leaf]

Does tsssaver do it for you or smt?

[zealous bridge]

the app

not the website

[rugged rampart]

you can do i ton website too

you have check the box though i think

[brisk leaf]

So for the iPad is there another tool that’ll do it for me?

[zealous bridge]

not automatically

[rugged rampart]

i use tsssaver on my ipad

[brisk leaf]

Since I can’t use the tsssaver app

I’m on unc0ver 6.0.0

[zealous bridge]

tss saver would be the easiest option

[rugged rampart]

yes you have to check the box, its not automatic

[zealous bridge]

how comes you cant use above 6.0.0+

[brisk leaf]

Bc it won’t jailbreak for some reason

[zealous bridge]

its not about just checking the box

you have to provide the nonces too

[zealous bridge]

are you familiar with python (just using scripts, not developing)

if not

you can try and use unc0vers generator setter

but that is unreliable af

and theres no easy way to check

[brisk leaf]

I have a different generator set in unc0ver from when I futurerestored bc the blobs were saved with that generator

[zealous bridge]

thats fine

[brisk leaf]

0xdc77cc754eccb488

[zealous bridge]

you can change the generator input

[brisk leaf]

Wym?

[zealous bridge]

you can set the generator to 0x111... and then save blobs

but its unreliable

[brisk leaf]

you would set it to 0x111... bc the nonce pair is known already?

Wym by unreliable?
Would there be a possibility for the blobs to be invalid?

[zealous bridge]

no because thats easiest and most blobsavers set it as default

[zealous bridge]

thats exactly what i mean

and theres no easy way to check without futurerestoring

[brisk leaf]

Validity?

[zealous bridge]

not validity

you see if the generator doesnt set properly you would save with the wrong APNonce (which is generated from the generator, meaning that if one changes the other will too)

and because nonce entanglement, you cant find out the generator which generated that APNonce, which is why we set the generator in the first place

if we dont find out the generator we can’t use the blob

[brisk leaf]

Ahh I see

so what’s a more reliable way to set the generator?

[zealous bridge]

TSS Saver...

all the reliable ones use something called dimentio

which requires libkrw

[brisk leaf]

Hmm

Ok

Wait so for the phone tho should I set my generator back to 0x111...?

[zealous bridge]

you dont have to but you should

makes life easier

[brisk leaf]

I set it with tss saver but how come it doesn’t reflect in unc0ver?

[zealous bridge]

because unc0ver doesnt read generator (unless you set it with u0 first)

[brisk leaf]

Alright

But it was best to set it in tsssaver right?

[zealous bridge]

yes

[brisk leaf]

The tsssaver site has all my blobs stored there right?

[zealous bridge]

yes you can look it up on the tss saver website

[rugged rampart]

**UPDATE ** (for anyone whos interested):
Trying to work around the FDR error, I downloaded all ios13 IPSWs for my device and 13.5 (what i was FR-ing from).. I then extracted all of them, located the SEP, BaseBand, and BuildManifest.plist files for each one. There was an update to the SEP/BB recently, and the latest SEP/BB in 14.4+ is not compatible with earlier ios14 builds (i.e. using the --latest.. command line arguments will cause the Unable to receive message from FDR... error.

The "Common Errors" page on TheRealKeto Github says "caused when using an SEP and Baseband that is not compatible with the unsigned firmware you're" going to. Then on his Futurerestore Guide, the prep steps listed say to use "(Optional) The specific SEP, Baseband and BuildManifest from the IPSW that are compatible with the version you're trying to upgrade, downgrade, or re-restore to"

So, if you extract these files from the IPSW (of whatever firmware you're going to), then manually feed them into the FR command line, you will get an error saying that the SEP and/or BB is not currently signed, meaning they cant be used either.

In summary: On one hand, using the latest SEP/BB (i.e. --latest-sep --latest-baseband), these files are not compatible. The workaround listed on the Git is to get the files that are compatible and manually assign them with the FR command. This however leads to "this SEP/BB is not currently signed". So the real issue seems to be there is (currently) no way for FR to work around the SEP and BB signing check.

This is what my hours of research and testing have uncovered.. maybe someone here will find it useful

Sources: Manual use of SEP/BB files: http://bit.ly/manualSEPBB ; Documentation of most common errors: http://bit.ly/commonFRerrors ; Futurerestore's Common Errors: https://therealketo.github.io/futurerestore-guide/error-codes

[valid adder]

if they aren't compatible, explain why some devices can restore to it using the same files

this only affects a11 and later anyway

I already diagnosed the issue

[vivid nova]

Imagine a doctor re-examining an illness when its on Google

[valid adder]

#futurerestore-help message

@rugged rampart

https://cdn.discordapp.com/attachments/809648240663724032/816861654842343444/unknown.png
https://cdn.discordapp.com/attachments/627601934463008796/818637882641612840/unknown.png

[rugged rampart]

just trying to help out

[valid adder]

yes

thank you

I gave you more info

[rugged rampart]

doesnt really matter now im on 14.4.1

[valid adder]

it does matter

[rugged rampart]

in what way?

[valid adder]

you can still set nonce

[rugged rampart]

but afaik nonce was just something to consider for FR on A12+

[valid adder]

huh?

Im saying you can still test 14.2 restores

because X can set nonce on 14.x

[rugged rampart]

well all the guides i read only made a point about apnonce for a12+ devices

[valid adder]

im talking about setting the nonce generator

for restores

to use blobs

[rugged rampart]

not sure what you mean completely. i thought i exhausted all my options

[valid adder]

im saying you can still test from 14.4.1

[rugged rampart]

like in the future if somehow theres a workaround i could drop back to 14.2?

[valid adder]

yes and im also saying you can look for workarounds from 14.4.1

help*

[rugged rampart]

ah ok

what should i do?

[vivid nova]

You're talking about a11 as a tester yet you're worried about a12

[rugged rampart]

im not worried about a12

[valid adder]

just do stuff similar to this #futurerestore-help message

[rugged rampart]

just mentioned that all the guides and info i read talked about a12+ in terms of apnonce and apnonce in blobs, etc

[rugged rampart]

ok

[vivid nova]

FTR, it /is/ possible to downgrade to 13.4 using a checkra1n device but it screws up baseband and activation

[valid adder]

I never once mentioned apnonce lol

I was speaking of nonce generator

you set the generator to use the blob

this has nothing to do with a12

this is the iOS restore process

[rugged rampart]

sorry confused. the generator i set in my JB

[valid adder]

yes

Im saying you can do that on 14.4.1

[vivid nova]

Apnonce is different from the generator

[valid adder]

with a11 and lower

[rugged rampart]

yep i understand that part

[vivid nova]

Despite the name similarities

[valid adder]

so you can help test

thats all I was saying

[rugged rampart]

i just thought you were referring to nonce in terms of how i understood it from reading things like "Once you have successfully found the generator your blobs were saved with (or the generator which created the Apnonce your blobs were saved with, for A12+ devices)"

but its moot

[vivid nova]

Wish they'd make an "in a nutshell" explination

[valid adder]

wym

[rugged rampart]

so what exactly needs testing? Ive already tested every SEP/BB from 14.1-14.4.2

[valid adder]

@vivid nova

the issue isn't the restore files, its the restoremode files @rugged rampart

[rugged rampart]

ok

[vivid nova]

Well, it seems most of the guides go in-depth for the average user to skim along and ask Qs later

If they made something concise and "in a nutshell" then we wouldn't get as many support Qs

[rugged rampart]

i found most to be good and detailed.. just that the suggestions didnt pan out for me

[vivid nova]

I find that you just get lost in translation and you feel like asking yourself "... So.. Will it work?"

[rugged rampart]

yeah in my case i was told pretty much to just forget about it, it wasnt gonna work. but, being stubborn, i decided to keep troubleshooting as much as i could. still didnt work but at least i learned some stuff

[faint abyss]

Hi guys, Is there a latest FR guide? I am trying to restore A9 ( iPhone 6s plus) on iOS from 12.2 (jailbroken currently). I have got valid blobs.

[zealous bridge]

https://ios.cfw.guide/restoring-to-14-3

[faint abyss]

Thanks!

[zealous bridge]

try from the shsh.host website itself

when it autocompletes the nonce

change it

then resave

after that you should be able to use system info again

does it autocomplete the same one

even on the website?

rip

might have to wait for a system info update

for now just save with tss saver

[faint abyss]

Hi there! I am restoring my iPhone6sp to ios 14.3. I see two blobs. Which one I choose? Thanks.

[zealous bridge]

are you getting them from tss saver?

[faint abyss]

Yes

[zealous bridge]

download both, open them and ctrl + f search for "generator" in both of them, whichever one you see has the 0x1111111111111111 value, thats the one you use

[faint abyss]

Ah, great. Let me check. ....

Great Tanbeer! I found one that contains the generator. The other one is without any generator. Thank you for saving my jb! 🙂

Sorry, the other one has a different generator. So I will be using the one with default ( 0x11... ) generator.

[zealous bridge]

the other one should be 0xbd34....

its normal

you can use both but the 0x1111 is easier

[faint abyss]

yes.

You are right. BTW do you know who and why 0xbd34... requested?

Just curious.

[zealous bridge]

its the default generator for the odyssey/electra/chimera jailbreak

0x1111... is unc0ver's default

[faint abyss]

I thought it was 0x11... = default....?

Yes, I use electra in the past.

[zealous bridge]

it doesnt matter what jailbreak you use, its more to do with those on A12+ who need a jailbreak to save blobs

[faint abyss]

Forensics in operation! ... :Devil:

[zealous bridge]

lmao

[faint abyss]

Yeah, I see why you mean. I just wanted to practice FR. Checkm8 is always available anyways.

[zealous bridge]

true

[faint abyss]

I will try the FR tonight ( uk time). Let me see how it goes.

[zealous bridge]

wow someone else from the uk never thought id see the day

[faint abyss]

Yeah, jailbreakers are such a minority. I never saw anyone in flesh.

[valid adder]

I somehow have

[faint abyss]

Lucky boy!

[celest basalt]

wow 😮

[valid adder]

been jailbreaking for a decade tho

[celest basalt]

sadly cant convince my friends to do it 🥲

[faint abyss]

I started jbing in 2013

[celest basalt]

@valid adder apparently onboard blobs with a generator dumped from /dev/disk1 work for restores on A9, the "Device can't enter to restore mode" error is only on A10+... any idea if this is fixable?

[valid adder]

they are update blobs only

[celest basalt]

futurerestore says they're erase blobs

[valid adder]

unless you restored

[celest basalt]

if I use -u it says "APTicket can't be used for this restore"

[valid adder]

they are single type

either or

what dd command

[celest basalt]

I used https://github.com/Merculous/SHSHDump and System Info, both produced the exact same file

[valid adder]

use deverser

command

for dd

[celest basalt]

apparently shshdump does:

dd if=/dev/disk1 of=/tmp/shsh_dump.bin
img4tool -s .tmp/blob.shsh2 --convert .tmp/shsh_dump.bin

[celest basalt]

macOS

[valid adder]

I said the command

[celest basalt]

actually don't see a reason it shouldn't work on Linux with img4tool installed

cat /dev/rdisk1 | dd of=dump.raw bs=256 count=$((0x4000))

got it

let me try

[valid adder]

yes

this is the proper way

[celest basalt]

@valid adder dumped successfully but same error

Received SHSH blobs
Waiting for device to enter restore mode...
irecv_event_cb: device [redacted] (udid: N/A) connected in Recovery mode
Cleaning up...
[exception]:
what=Device can't enter to restore mode
code=67698705
line=1033
file=futurerestore.cpp
commit count=194:
commit sha  =0ab9df3209ee599f581532d05d331e6abe0f53f3:
Done: restoring failed!

[valid adder]

linux?

[celest basalt]

yes

[valid adder]

idk

are they valid

send me the raw file

and the iOS version/device

[celest basalt]

iPhone X GSM (iPhone10,6) 14.3 (18C66)

[valid adder]

the raw

[celest basalt]

oh

[valid adder]

and you set 0xd286d5567e1dca42 ? in dimentio?

[celest basalt]

yes

maybe I should try using checkra1n instead of u0

idk if that makes a difference

[valid adder]

@celest basalt are you sure its 18C66

[celest basalt]

yes

[valid adder]

idk what it is

still says invalid

[celest basalt]

what command did you use

says valid for me

[valid adder]

for the raw

its valid

invalid after convert

[celest basalt]

oh yeah

[IMG4TOOL] checking hash for "RestoreRamDisk"          BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreSEP"              OK (found "rsep" with matching hash)
[IMG4TOOL] checking hash for "RestoreTrustCache"       BAD! (hash not found in im4m)

https://github.com/tihmstar/img4tool/pull/25

tihmstar reverted this for some reason

https://github.com/tihmstar/img4tool/commit/04bc71266d1e51215bd020e36f66999287c1f58c

yeah, the same verification error happens with FR but then

Failed to get exact match for build identity, using fallback to ignore certain values

so it tries to proceed anyway but fails

the raw dump says valid because

[IMG4TOOL] checking hash for "RestoreRamDisk"          IGN (hash not found in im4m, but ignoring since we only care about 'illb')
[IMG4TOOL] checking hash for "RestoreSEP"              OK (found "rsep" with matching hash)
[IMG4TOOL] checking hash for "RestoreTrustCache"       IGN (hash not found in im4m, but ignoring since we only care about 'illb')

[proper bison]

anyone tried windows 8.1?

or should i just boot ubuntu

[celest basalt]

this

[celest basalt]

might work with fixes in the pins but Ubuntu will probably be easier

Cryptic's fix #futurerestore-help message
BUT I also had to do this #futurerestore-help message

that was Win10

but 8.1 probably similar

[proper bison]

ok ill use win 8.1

they are the same

[faint abyss]

Hi, My FR log window says : Done : restoring succeeded

But phone still showing apple logo and progress slider

Is that normal?

[lilac wren]

Congrats!!

[faint abyss]

Thanks

[lilac wren]

And yes, after the second progress bar it will boot

[faint abyss]

Thanks. Ye, it booted. I am into setup.

[proper bison]

poggers

[zealous bridge]

filter go brr

[warm glen]

Can someone help me, please?

I've just futurerestored to iOS 14.3 my iPhone 8, from iOS 13.6 (checkra1n), using the GUI.

Everything worked like a charm, according to the logs:

Sending BasebandData now... Done sending BasebandData Updating baseband (19) Updating baseband (19) Cleaning up... Done: restoring succeeded! FutureRestore process ended.

But my device is still in recovery mode. I've used —exit-recovery but nothing. I've also tried some tools, but I got no luck. Is there something I can do?

[zealous bridge]

can you send a log

a full one

if you used the GUI it will be in the [homedirectory]/FutureRestore GUI folder

[warm glen]

Can I send it privately? I suppose there are sensible information about the device, in the log

[zealous bridge]

sure

[proper bison]

What does choose build manifest mean

[zealous bridge]

dw about it

if you're using latest

[proper bison]

ok

i wont choose it then

Also, what does the debug option mean

[zealous bridge]

gives you more output in the log

helpful if you come across an error

[proper bison]

ill turn it on

[lilac wren]

redhat is the stupidest thing ever

you need a subscription to fetch from default repos...

luckily they have free subscriptions for individuals but like it took 30m to get the vm registered

i mean finally

Lol and I can't even test FR because precompiled doesn't work on red hat

vmware fusion is being really nice :) no need to download from sketch website, I can literally just drag and drop the installer. it just created the image and it just works

[celest basalt]

pog

[warm glen]

I want to thank @zealous bridge publicly. He was so kind, he helped me patiently, explaining what's wrong in my futurerestore process. Now I'm finally on iOS 14.3. Thank you Tanbeer!

[green onyx]

pog

taurine ipa got leaked

[lilac wren]

no way

[green onyx]

some ppl have it

[lilac wren]

dont use it if you get it lol

[zealous bridge]

wha-

[lilac wren]

probably buggy ah

[green onyx]

nah

nobody knows who leaked it

[lilac wren]

plot twist cs did as a "public beta"

[green onyx]

[lilac wren]

Lol jk

[zealous bridge]

plot twist: https://twitter.com/Adams___family/status/1376561967465431042?s=20

Kantra Coulybaly (@Adams___family)

You want a piece of taurine ? Head to discord @SilzeeJailbreak @iOSNJB @TryIgnition

Twitter · Mar 29, 2021, 3:48 PM

found the leaker

[lilac wren]

Lmho

i feel like if it was real they would have removed it

folky r u trolling

[green onyx]

WAIT WHAT

IM FAMOUS

uk thats the odyssey jb rebranded

[lilac wren]

lol 1 like

[zealous bridge]

not rly

[lilac wren]

lol

[green onyx]

the real leaker is someone else

[zealous bridge]

still like a lot of impressions tho i bet

[green onyx]

the ones i uploaded are odyssey and u0 rebrands

[zealous bridge]

this is what i call famous

[green onyx]

true

[lilac wren]

lol eh

[green onyx]

froggy with the clout

[zealous bridge]

^^^

[lilac wren]

in other news I got vmware tools working on mac, resolution changes to whatever you want which is where virtualbox failed horribly

retina on retina

[zealous bridge]

lol

[lilac wren]

mojave :)

oh it seems to be having issues with network

oh because I'm a dummy and forgot to implement the windows fix in mac

awesome working

[unreal isle]

Is the FDR error fixed for the A11 devices or not yet ?

[zealous bridge]

to which version

[unreal isle]

14.4

TO 14.2 OR 14.1

[zealous bridge]

no

14.3 works fine though

[unreal isle]

14.3 SHSH BLOBS I FORGOT TO DON'T REGISTER

[faint abyss]

Mee too! Got help from him. Nice guy. 🙂

[lilac wren]

true fame right here

[zealous bridge]

😊

[faint abyss]

Looks interesting. Which image you are referring to? I wish to try on my VirtualBox. Thanks.

[lilac wren]

Mac App Store > MacOS Mojave. Literally only had to drag the "Install MacOS Mojave.app" into VMWare Fusion and it did it all for me

[faint abyss]

Well. My windows machine is slow. Can't afford to run osX.

[lilac wren]

ah lol

[faint abyss]

Thanks for the info. But I can try a virtual hard disk on my sd card. That one is pretty fast.

[lilac wren]

how much space is on the SD?

[faint abyss]

Let me see how it goes. Thanks!

230 GB. Big one.

[lilac wren]

ah ok

good luck!

[faint abyss]

It's Class 10 or something like that. SDXC card.

[faint abyss]

Thank you!

[lilac wren]

Probably forgot something but
https://github.com/CoocooFroggy/FutureRestore-GUI/releases/tag/v1.70

[green onyx]

poggers

new update

[zealous bridge]

can confirm this native file picker pogness

[green onyx]

i would like to see an update checker

[zealous bridge]

for?

[green onyx]

and to update without uninstall frgui first

[green onyx]

frgui

[zealous bridge]

u mean this?

[green onyx]

yes

oh wait

its already there

im dumb oops

[zealous bridge]

..lmao

[lilac wren]

new installer will automatically uninstall old

[green onyx]

ah

also, is it possible to reuse the old download for futurerestore when restarting the gui

because i have to download it everytime frgui restarts

[lilac wren]

smart i can add that

[green onyx]

or does that get cleared when closed frgui

ah

[lilac wren]

nah it stays

[green onyx]

rip

time to clear it

i probably have like 8 futurerestore.exes there

actually, somehow it has one

[lilac wren]

it overwrites

[zealous bridge]

because overwrites

[green onyx]

ah

hopefully the guy who leaked taurine gives it to me

so i can run fr

[celest basalt]

Hi I'm having trouble upgrading my iPhone X from 13.6 to 14.2. It keeps failing in the FDR stage. I've read on here that others have had the same issue. Is there not a fix yet? Thanks

[green onyx]

no fix

[celest basalt]

Forsure. Thanks for letting me know. Do you think it is something that can be fixed? Or something with the A11

[green onyx]

nope

[celest basalt]

Can i use FutureRestore without SHSH blobs?

[zealous bridge]

no

[green onyx]

bruh

[celest basalt]

oh

[zealous bridge]

whole point of futurerestore is saving signatures which can be reused

lmao

[celest basalt]

But i can save my SHSH blobs on https://shsh.host

it asks for an APnonce

how do i get that?

[zealous bridge]

yes you can save blobs for the currently signed versions

[celest basalt]

yeah

[zealous bridge]

use [TSS Saver]]

[celest basalt]

ok

[zealous bridge]

[[TSS Saver]]

[mystic axle]

TSS Saver

An awesome application!

Author

1Conan

Version

2.0.3

Price

Free

Repo

1Conan

Bundle ID

com.1conan.tsssaver

More Info

Click Here

1Conan • Page 2/3 · Mar 29, 2021, 7:22 PM

[zealous bridge]

this app ^

[celest basalt]

Im not Jailbroken

[zealous bridge]

what device are you on

[celest basalt]

Iphone 11

[zealous bridge]

can't save blobs without a jailbreak

[celest basalt]

oh

[zealous bridge]

for now at least

[celest basalt]

ok then

[zealous bridge]

if you have experience with python

you can try https://github.com/nyuszika7h/getnonce

[celest basalt]

Could i use it with Python Launcher?

[zealous bridge]

Python Launcher?

the one that lets you choose between multiple python versions?

[celest basalt]

i dont know

[zealous bridge]

..

[celest basalt]

i just know it can execute python scripts

[zealous bridge]

if it can do that then yeah

all you need is to execute it and install dependencies if it has any

[celest basalt]

ok

how do i install this xmltodict

[zealous bridge]

pip install xmltodict?

[lilac wren]

can't you just do like python getnonce.py or does it not work like that

[zealous bridge]

yeah

pip install xmltodict

[zealous bridge]

ur forgetting about dependencies

[green onyx]

nyu or someone should make a tutorial

but ye

[green onyx]

oh ye

theres that

https://github.com/libimobiledevice-win32/imobiledevice-net

u need this

i think

or is it smthn else

[zealous bridge]

imma try it now acc

doesnt work with jb but lemme see if i can get it running

when you run wget but it saves html

lmao

[lilac wren]

lol

[celest basalt]

I know how

now

U can get it with itunes

[green onyx]

?

[zealous bridge]

do you really need to compile libimobiledevice

ffs

[celest basalt]

u can get your ApNonce with itunes by backing up your device. Now open the path on your computer. There will be a lot of folders there. In all of the folders, there will be a .plist file. On if the plist file contains your APnonce

[green onyx]

[green onyx]

apnonce != generator

[zealous bridge]

no it doesnt

lol

[green onyx]

and u need both apnonce and generator

damn wth

how do u get idevicediagnostics

[zealous bridge]

im doing it now i'll share a list of commands when im done

i think i know how

[green onyx]

alright

[zealous bridge]

but its c

so

idk

[green onyx]

pog

i got it to work

easy

i was just dumb enough to miss the file lol

https://github.com/libimobiledevice-win32/imobiledevice-net

go here

download latest release and extract

and place the idevicediagnostic.exe inside the getnonce dir

and run

[zealous bridge]

why no linux version

[green onyx]

im pretty sure u can get it from a repo but ye

i kinda want to try it with my mother's 12

but prob not lol

[zealous bridge]

linux has to compile libimobiledevice

[green onyx]

lmaooooooooo

[zealous bridge]

only way i think

lol

[green onyx]

just reboot

[zealous bridge]

or wait

[green onyx]

and go to windows to try

[zealous bridge]

i was using wsl anyways

[green onyx]

[zealous bridge]

or

they could just compile that

[lilac wren]

There's a PPA you can use, https://launchpad.net/~quamotion/+archive/ubuntu/ppa, which provides compiled versions of libimobiledevice for Ubuntu 14.04, 16.04 and 18.04. Most Linux distributions also include a libimobiledevice package, but that may be outdated - be aware.
https://stackoverflow.com/questions/52231301/is-there-a-precompiled-version-of-libimobiledevice-that-i-can-distribute-with-my

[zealous bridge]

what you sent

libimobiledevice-dev

yeah

but i dont like it

used it before and its kinda iffy

got the apnonce fine

[+] Rebooting device
[*] Waiting for USB device (make sure the device is unlocked)

yh its gonna be locked during a reboot ikr

[lilac wren]

Lol

[zealous bridge]

uh

tf

got the apnonce but didnt get the generator

[green onyx]

[zealous bridge]

wow my apnonce changes every single reboot

mad

lol tf

[celest basalt]

What's a Baseband

[zealous bridge]

firmware component

[celest basalt]

How do i get that

How to i get it?

[zealous bridge]

wdym

[celest basalt]

FutureRestore asks for it

[green onyx]

just use --latest

use latest flags

[zealous bridge]

use latest baseband

[green onyx]

send screenshot

[lilac wren]

download extra ram + baseband from appel.ocm

[green onyx]

[zealous bridge]

oh shite

omg

imagine if that worked

[green onyx]

bruh

*imagine

[zealous bridge]

it got a pair

now time to see if its valid

[celest basalt]

Does any of this works?

[green onyx]

pair, like generator and apnonce?

[celest basalt]

https://github.com/search?q=APnonce

[zealous bridge]

yes

[green onyx]

no

[green onyx]

pog

@celest basalt what version are u futurerestoring from and to?

[zealous bridge]

bruh unc0ver wtf

[green onyx]

?

use dimentio to set generator

[zealous bridge]

got stuck on 27 and refuses to open now

[green onyx]

and check if apnonce matches

[zealous bridge]

no

ik that

[green onyx]

reboot

and try again

[zealous bridge]

phone aint even turning on now

[green onyx]

[zealous bridge]

tf

[green onyx]

is it in recovery?

[zealous bridge]

lol imagine if it got unsigned

no its fine now

[green onyx]

aight

[zealous bridge]

try again

finally

[green onyx]

pog

[zealous bridge]

Note: This is not intended to be used on jailbroken devices, as it will make the device set a new random generator instead of using the existing one.

hm

idk

it probably wont work

[green onyx]

restoring root fs should do fine

[zealous bridge]

i aint boutta install all my tweaks one by one again

[green onyx]

bruh

uh trying someone else's phone

[zealous bridge]

fingers crossed

trying now

[green onyx]

pog

[zealous bridge]

rip

apnonces are completely different

[green onyx]

wtf

[zealous bridge]

uh is restoring rootfs worth it for this

[green onyx]

try someone else's phone

[zealous bridge]

dont have any other a12+

[green onyx]

damn

[celest basalt]

Could you downgrade to unsigned ios without SHSH blobs?

[zealous bridge]

yes

no

[celest basalt]

how?

?

How?

[zealous bridge]

you didnt say unsigned first

[green onyx]

no

[celest basalt]

oh

ok

Is Taigone a scam?

[zealous bridge]

what

[green onyx]

what?

[celest basalt]

is this a scam

[green onyx]

stop using weirdass shit

[celest basalt]

https://taigone.com/

[green onyx]

yes

its a scam

[celest basalt]

ok

[zealous bridge]

999999%

[celest basalt]

when will taurine be out?

[green onyx]

when it comes out, it wont support 14.4+

[zealous bridge]

im dying lmao

[celest basalt]

oh

[zealous bridge]

lemme try one more pair

still doesnt work then maybe i will sacrifice four hours to test

filtered

so

100% a scam

[celest basalt]

ok

Then how can i jailbreak my Iphone 11 on IOS 14.4

[zealous bridge]

you can't

[celest basalt]

aw man

[celest basalt]

i just found coolstar's offiial website

[zealous bridge]

@green onyx

look at that lmao

[celest basalt]

wow

[green onyx]

wait wtf

[zealous bridge]

detected different apnonce but same boot nonce

[green onyx]

why is the apnonce different

ye

[celest basalt]

yeah why

[zealous bridge]

worst thing is

none of them are right

haha

[green onyx]

@celest basalt

[zealous bridge]

no dont ping

[green onyx]

whats wrong lol

[zealous bridge]

its not meant for jb

[green onyx]

oops

[zealous bridge]

lemme try rootfs

[green onyx]

wait, u didnt restore root fs?

[zealous bridge]

no

i said

i'll try one more

lol

[green onyx]

ah

[celest basalt]

If there is two ApNonce the Tool generated, wich one do i use?

[celest basalt]

yeah I mean it should still work but it will set a completely random generator

that's weird how the BootNonce stayed the same there though 🤔

is that A13?

[green onyx]

ye

[zealous bridge]

wdym a random generator?

one that doesnt match the apnonce?

[celest basalt]

no, I mean it disregards whatever you set like 0x1^16 and makes it set a new one

[zealous bridge]

oh

why are none of them right then

weird

the second time i didnt have my phone unlocked...

could that impact it?

[lilac wren]

tried to research if anything already existed and literally my own irrelevant post came up -_-

[celest basalt]

I might push the new version I've been working on which does some validation by double checking the nonce in recovery as well so you can test that

[zealous bridge]

havent restored rootfs yet, maybe trying again from an unjailbroken state will do something

[celest basalt]

shouldn't affect it, it only needs to be unlocked manually after the device reboots

[zealous bridge]

yeah i noticed that

[celest basalt]

if the device was already unlocked once since reboot and it's already paired then no issue

[zealous bridge]

ok i got a new pair

[celest basalt]

that won't help, what could help is manually clearing the generator but I don't think you can do that with u0 on iOS 14 atm

[lilac wren]

@vivid nova Took over a week but finally added your file picker

[zealous bridge]

i rebooted which cleared it apparently

[vivid nova]

Ooh?

[celest basalt]

I had to checkra1n my device to do sudo nvram -d com.apple.System.boot-nonce

which clears it

[zealous bridge]

different apnonce means its cleared right?

[celest basalt]

dimentio uses libkrw so it's all good on u0 but the nvram conmand doesn't

[zealous bridge]

BRO

YOU ARE A LEGEND

NO WAY

[celest basalt]

depends, if you reboot and request nonce again in normal mode it will change the generator

you should test it in recovery - if two subsequent recovery checks return the same nonce you have a generator set, if they're different you don't have one set

(you can just do noncestatistics -t 2)

[zealous bridge]

why was the boot nonce a char short tho

lmao

[lilac wren]

lol 15 digit generator

[green onyx]

poggers

[zealous bridge]

that was completely random tho

[celest basalt]

oh interesting

[green onyx]

nyu, publish it

[celest basalt]

I should probably pad it but seems like dimentio did it automatically

[green onyx]

happy that it worked, was confusing af at the beginning

[celest basalt]

it's already a public repo, but it will probably be integrated into blobsaver rather than me making a separate GUI tool which I'm too lazy for atm

[green onyx]

ah

blobsaver v3

[vivid nova]

I wish blobsaver had unlimited presets

[celest basalt]

my code can also help for jailbroken users if you just skip the "get apnonce in normal mode part"

[vivid nova]

Restored to using a script now..

[lilac wren]

who has unlimited devices

[celest basalt]

like it can verify that your generator was set correctly

[green onyx]

who has more than 10 devices

[vivid nova]

A TV saving for multiple users whom easily forget

[lilac wren]

oh haha

[celest basalt]

bc if the nonce keeps changing in recovery then the generator wasn't set

[green onyx]

ur saving blobs for ppl?

[vivid nova]

Indeed

[green onyx]

wtf

[vivid nova]

Giving people every chance they get to downgrade when updates screw them over

[celest basalt]

scripting it is better anyway, you can put tsschecker in a daily cronjob

[lilac wren]

Since when were ios updates released daily though lol

Even that's overkill

[celest basalt]

weekly maybe but that's cutting the signing window close

well

actually nvm

a new version will be signed for long enough to catch it

new (not yet published) version of my getnonce script works like:

• Are you jailbroken? (y/n)

[skip if jailbroken] get apnonce in normal mode
reboot to recovery
get apnonce in recovery mode - error if mismatch
send reset command in recovery
get apnonce in recovery mode again - error if mismatch
reboot to normal mode
get generator

[lilac wren]

I feel like good timing would be if @swift elm does something to check and save blobs every app resign

[green onyx]

whos @swift elm

[zealous bridge]

wrong tag?

[zealous bridge]

some people dont set generator before saving blobs, maybe you could add something that ensures they’re valid

(When jailbroken)

[celest basalt]

yeah this makes sure the generator was set

could also add an img4tool verify step though

[lilac wren]

we had a conversation on reddit which moved to discord which moved to him developing a PR for altserver to save blobs

#futurerestore-help message

[celest basalt]

but that would be in blobsaver not this getnonce script that doesn't save any blobs itself

[green onyx]

altserver?

[lilac wren]

yes the signing app

[green onyx]

hm

[celest basalt]

actually I wonder if you can get apnonce and generator from a sandboxed app

[zealous bridge]

While jailbroken yes

[lilac wren]

don't know if I ever got back to you but he made it

https://github.com/joshblah555/JoshTV/blob/master/SEPChecker.json

[celest basalt]

no I mean something like MGCopyAnswer(@"ApNonce") and MGCopyAnswer(@"BootNonce")

like idk if the info you can query from MobileGestalt over USB is more than what an app can get

[lilac wren]

I was going to say, you were talking to me about that Pythonista thing haha, that;s the first thing I thought of

[celest basalt]

I should try there actually yeah

[frozen dove]

#futurerestore-help message

which writeup was he talking abt?

[lilac wren]

one sec

[zealous bridge]

https://www.reddit.com/r/jailbreak/comments/m3744k/tutorial_shsh_generatorbootnonce_apnonce_nonce/

[lilac wren]

haha ty

that one ^

[frozen dove]

woa

im def reading this

[zealous bridge]

underrated post tbh

[lilac wren]

if you have any questions, feel free to ask here :)

[zealous bridge]

k summary of what we can and cannot do.

Cannot save ≥A12 blobs if you haven't ever been jailbroken: We can only save useless blobs at any time for any phone. We can get the nonce but not the generator, so we cannot recreate our blob's state on our phone.

badum tsh

[frozen dove]

yeah ofc thank you !

[lilac wren]

ok ok ill edit

[zealous bridge]

Maybe you should wait until the new release

[lilac wren]

I'll update if nyu releases something else

[zealous bridge]

yeah

[celest basalt]

this just crashes the app 🤔

ignore the filename

I reused another script for it

[lilac wren]

can you use flex for logs or something to see why it crashed?

[celest basalt]

I'll check if syslog says anything

[green onyx]

@lilac wren is it possible for frgui to localssh and set generator?

[lilac wren]

yeah I was planning on usbmuxd

since it would be plugged in for FR really

[green onyx]

ah i see

pog

[zealous bridge]

wasnt that part of your “super ap nonce mismatch fixer” idea you had a while back lmao

[lilac wren]

yep haha

waiting on conan's api >:(

@green onyx

[green onyx]

ah i see

poggers

or make ur own api

but probably a lot of work

[lilac wren]

I was gonna scrape lol but he said no

bc ad revenue

[green onyx]

oh ye i remember

[celest basalt]

how do you get ad revenue from an API

[lilac wren]

misunderstanding, Conan doesn't have an API bc he would lose ad revenue

[celest basalt]

just make it paid after X requests

[green onyx]

nah, dont make it twitter v2

twitter api is paid iirc

[celest basalt]

only certain endpoints like premium search

[lilac wren]

Lol you think a user of some tool is going to sign up for a 1conan api access and even pay

[celest basalt]

no the idea would be that you pay and hardcode the token in the app, though if it was usage-based pricing someone could abuse your token to spam requests I guess

[lilac wren]

so... the dev who's making free software... pays

at that point I'd say get your own blobs from conan, shsh host has got you covered

[zealous bridge]

or we make another entire blob saving website

[faint abyss]

Very informative writeup. Thanks. ( Checked the sha-384s and sha-1s, you've got correct ones! 🙂 ).

[lilac wren]

good to hear :)

[zealous bridge]

i never got to turn my generator to an apnonce simply from hashing alone

I think i did something wrong with the aes keys

[lilac wren]

@red sleet if you want, feel free to update the guide. Java isn't necessary anymore, Mac is the same.
For windows, it's not an .exe anymore, it's an installer.
Linux has a few options now.

Check this out for more info
https://github.com/CoocooFroggy/FutureRestore-GUI/blob/master/README.md#installation

[red sleet]

aight

why is windows now an installer?

[lilac wren]

bc Windows is dumb and can't pack any files into an Exe

so it has to link the JRE which has to be installed somewhere on the system

[red sleet]

oh true

[lilac wren]

Mac and Linux, the JRE is just inside the .app

[red sleet]

smort

[lilac wren]

going to try and build a 32 bit deb rn

[zealous bridge]

why does this zip get bigger every time i try to open it

[lilac wren]

I actually removed like 3 dependencies and added 1

[lilac wren]

oh

wow that's weird

reminds me of that zip bomb thing I saw on youtube

[zealous bridge]

Is it cause i had a zip inside of a zip

lmao

Thing keeps getting bigger lol

I packed this myself as well

[lilac wren]

lol

[zealous bridge]

weird it was around ~ 4GB

Lemme keep opening it

[valid adder]

use tigisoft repo

[zealous bridge]

it is

[valid adder]

do you have all the deps

and 64bit version

[zealous bridge]

lol it crashed everything lol

it extracted tho

[celest basalt]

interesting

zero padding

need to take care of that there too, not just for the generator

[lilac wren]

ah

[celest basalt]

are apnonces always the same length or does it vary

[zealous bridge]

no its always substringed i believe

on A12+ anyway

[zealous bridge]

is this a user error

[lilac wren]

hashes are always the same length anyways right

[celest basalt]

it's my fault

actually, A10- uses SHA1 (40 chars) and A11+ uses SHA384 truncated to 64 chars afaik

[zealous bridge]

Yep

[celest basalt]

I could just check if the lower 24 bytes are all zero after padding I guess

[zealous bridge]

Except that A11 encrypts the unencrypted generator and A12 encrypts the encrypted generator

Both 64 chars tho

[lilac wren]

yeah but it's always the same length

[zealous bridge]

40 and 64 is not the same length..

[lilac wren]

ah I misread the original question

[lilac wren]

can't find a 32 bit java 14 or later

or jpackage at all

[zealous bridge]

Does futurerestore even work with 32-bit

[lilac wren]

Lol good question

[zealous bridge]

‘32-bit Windows is not supported’

[lilac wren]

it's for linux anyways

but yeah probably not then

[green onyx]

lmao

fr doesnt work with 32bit?

i mean

isnt 32bit eol

[edgy whale]

yes

32 bit old shit

at least on pc

[tight locust]

does I need to be jailbroken to use futurerestore ?

[green onyx]

yes

[zealous bridge]

Yes

[lilac wren]

heLLO GUYS!! halp me now. I have no shsh blubbles. i am on 14.5 beta 5 iPhone 12 pro max mini. can I futurerestore to iOS 11???

ugh so slow

will ping all geniuses

@Geniuses™

@Administrators

[red sleet]

true

!warn @lilac wren 50 unnecessary ping

[lilac wren]

:(

[red sleet]

lmao

[lilac wren]

lol

[zealous bridge]

No but you can download from appol.com to futurerestore to iPhone 14 from iPhone 7+

[lilac wren]

LMHO

[zealous bridge]

iPhone 13 broken rn

[lilac wren]

ok where do I download a faster processor

I wanted M1 on my phone