futurerestore-help

[zealous bridge]

if yes then reboot

then try again

[wheat basalt]

okok

thank you, btw

I mean it

sorry for asking so many questions and being annoying

[zealous bridge]

its not annoying, asking for help is good

[green onyx]

^

[low summit]

new bb should work on old ios tho

[green onyx]

!t asktoask

[mystic axle]

asktoask

Don't ask to ask, just ask. For example, don't do:
u1: Hi, can I ask a question?
u2: Yes.
u1: <asks question>
u2: <provides answer>
Instead, do:
u1: <asks question>
u2: <provides answer>

Added by stkc#8018 | Used 7 times · Apr 3, 2021, 12:00 AM

[low summit]

like back in older ios it works

[green onyx]

never ask to ask

just ask lol

[wheat basalt]

I guess yeah but I've had lots of negative experiences in here where people would cuss you out for not knowing things and asking so yeah, it's really refreshing to have people who wanna help and not ridicule you

[low summit]

i know lol hate that. be like i have a question

ok whats the question

[zealous bridge]

ur not asking the right people then haha

[low summit]

and ppl saying taurine is better than u0

even tho no one cares

[wheat basalt]

wasn't even asking specific people, they just were there and made fun of you while only half-answering or not answering at all XD

[zealous bridge]

most people tend to think this is false

so thats probably why

[wheat basalt]

right so I rebooted, did restore rootfs, it rebooted again

[zealous bridge]

alright

you should be ready to futurerestore now

[wheat basalt]

okay fingers crossed

[zealous bridge]

best of luck

[low summit]

Update or restore?

[zealous bridge]

update

[low summit]

Rootfs?

[zealous bridge]

yes

[low summit]

Well it's 10 again in the UK LMAOOO

[zealous bridge]

living in the uk, i can confirm this

[wheat basalt]

I got the mismatch error again

[low summit]

Wrong nonce?

[zealous bridge]

omg i told you lol

it does reset after a reboot

not you btw @wheat basalt

literally everyone else who tried telling me that it stays

[vivid nova]

if you turn off auto-boot.. it stays

[zealous bridge]

i don’t think you’re gonna be able to use -u

make a backup

and use futurerestore without -u

[low summit]

Lol

Mad work

[wheat basalt]

oh yeah I've got a backup

[zealous bridge]

my point still stands, its not default

although nvram syncing might help it

[wheat basalt]

so re-jailbreak, set nonce and then futurerestore without -u?

[low summit]

Nonce resets after reboot?

[vivid nova]

setting the nonce should disable auto-boot

[zealous bridge]

yeah, and dont reboot after setting nonce

[vivid nova]

that's common practice

[zealous bridge]

i think its enabled again when restoring rootfs @vivid nova

[vivid nova]

why would you restore root fs

just set the nonce, disable auto-reboot then reboot

[zealous bridge]

to stop fr from messing up the snapshot

nah theres some jank shit going on with -u

while jailbroken

[vivid nova]

you don't need -u

backup, then restore from it

[low summit]

-u is lazier

[zealous bridge]

true, but it does make it easier

[lilac wren]

Auto boot is that nvram arg to boot into recovery?

[vivid nova]

yes

then it doesn't clear the nonce

[zealous bridge]

makes sense

[wheat basalt]

okay.. so what is my best bet now

[vivid nova]

it's literally nvram auto-boot=false

[zealous bridge]

jailbreak, set nonce, and use futurerestore without -u

after fr just restore from your backup

[vivid nova]

turn off auto-boot

[zealous bridge]

it wont reboot

[vivid nova]

it should

[zealous bridge]

next time it boots it’ll be in recovery

so it’s fine

[low summit]

Fr is so finicky

[zealous bridge]

that doesnt clear the nonce

pretty sure fr will automatically do something to enable that too

yeah it does

looking at the logs

[lilac wren]

I assume you can't do this on the phone itself? Heard something about nvram is locked

[vivid nova]

checkra1n has it unlocked

as for u0, dunno?

chimera? nah

[zealous bridge]

u0/taurine dont have it

[lilac wren]

How do you do it without jailbreak to make phone enter recovery

[zealous bridge]

but it is possible to set auto boot from an ext. device

[zealous bridge]

ext. device

[vivid nova]

upload ibec/ibss with irecovery, then set env

[zealous bridge]

it can set auto boot

[lilac wren]

So the computer

[zealous bridge]

yeah

[lilac wren]

How come computer can't set generator then

[vivid nova]

computer can

[zealous bridge]

without jb

he means

[vivid nova]

depends on the state of the device

you can set gen without jb

[lilac wren]

I messed around with irecovery today and got into the shell or something but got stuck there lol, all commands just returned some weird string

[low summit]

how

[lilac wren]

At what stage

And with your own generator?

[vivid nova]

the same as setting nvram

ibec/ibss allows irecovery with nvram

just set gen there

[wheat basalt]

ugh it won't rejailbreak ffs

[lilac wren]

That can't be true, otherwise we'd be FutureRestoreing from A12+ on latest?

[low summit]

prob could

[vivid nova]

kinda, need keys though

and that requires bootrom expl

[low summit]

lol so u cant after all

[lilac wren]

So to edit nvram, we need what keys

[zealous bridge]

ibec and ibss can be uploaded via dfu can’t it?

[vivid nova]

you can set generator on checkm8 devices without a jailbreak

[wheat basalt]

wait I'm an idiot lmao

[vivid nova]

ibec/ibss IV keys

[wheat basalt]

restore rootfs gets rid of all tweaks

[low summit]

yes

[wheat basalt]

brain fart

[zealous bridge]

ohh so like when redsn0w got ibec to bootsrap ibss and execute something

[vivid nova]

redsn0w worked differently

[wheat basalt]

I have a theme installed so whenever I do not see the theme my brain goes "not jailbroken"

[vivid nova]

it patched the ipsw

[low summit]

U just need sileo

[zealous bridge]

it was patched out of signature checks

[vivid nova]

so then you could use it with itunes and redsn0w itself

without the checks

[lilac wren]

These keys are specific to each individual device?

[zealous bridge]

this happened in the restore ramdisk?

iirc

or was that what was executed

[vivid nova]

it literally unzips the ipsw, decrypts ibec/ibss and ramdisk etc then re-zips it

[zealous bridge]

i cant remember exactly

oh ye

[low summit]

Can they revive something like redsn0w for Checkm8?

[zealous bridge]

ibss executed the ramdisk

not without a lot of work i assume

[low summit]

Redsn0w had some restore function

[vivid nova]

when ibss was sent, it allows any ramdisk to be used

[low summit]

Pretty easy to work

[vivid nova]

that then, was when the exploit took over

[zealous bridge]

because the device wasnt verifying the signatures of the ibss

so it just was allowed to do its own thing

makes sense

but really something like that could def be possible for checkm8

[wheat basalt]

we got the next error

[vivid nova]

back then itunes did a device compat check, signing check, then used ibss/ibec from the ipsw to restore

[zealous bridge]

ibec

[wheat basalt]

I feel like I'm collecting them like pokémon

unable to place device into recovery mode

[low summit]

We need Checkm8 redsn0w

[zealous bridge]

run fr again

[vivid nova]

nowadays it goes through whitehouse security

[zealous bridge]

from recovery mode

[wheat basalt]

exit first?

[zealous bridge]

no

from recovery mode

[lilac wren]

Is that how untethered jb's work? Basically replace iboot with our own to allow CFW?

[wheat basalt]

ok

[vivid nova]

much more complex than that

[lilac wren]

Oh lol

[zealous bridge]

either the llb is patched or the kernel is patched

[vivid nova]

cfw is not always used.. the last untether adds a daemon into the fs that launches on reboot

that then lunches jailbreakd

[zealous bridge]

it patches the llb the firmware isnt checked at boot

[low summit]

Can exploits be combined with Checkm8 to make untether? @vivid nova

[vivid nova]

possibly, but the untether exploits are worth millions

[low summit]

So they all private?

[vivid nova]

indeed.

[low summit]

Fking pangu lmao

[zealous bridge]

the kernel patch happens when the kernel tries to check the signature of the kernel itself, but the exploit is within that process so it can be manipulated and stopped

those are the interesting ones

[vivid nova]

not for selling.. but for further research

[zealous bridge]

the llb would have more functionality

like custom bootlogo

but the kernel patch would work much better

[low summit]

Imagine they could get a bootrom untether exploit like for the 3g

[wheat basalt]

now

[zealous bridge]

!t ibec

[mystic axle]

ibec

Fix for error code 3, 8, and 10 aka the iBEC error in futurerestore

1. Uninstall all apple drivers via device manager.
2. Uninstall all apple products including itunes and apple device support stuff via control panel uninstall a program. MAKE SURE TO CHECK UNINSTALL DRIVER WHEN UNINSTALLING
3. Unplug and replug device.
4. Check device manager for more apple stuff and uninstall if so with same driver checkbox.
5. Disconnect device.
6. Install itunes64 exe from apple.com itself, no windows store bullshit. This is the best version: https://support.apple.com/kb/DL1816?locale=en_US (It will be labeled windows 7, 8 but install it on windows 10, it works fine)
7. Plug in device in recovery.
8. iboot (recovery) driver should show up under usb in device manager. Uninstall it and check the with software box.
9. Run futurerestore.
10. Unplug and replug your device.
11. Run futurerestore again

Added by Cryptic#6293 | Used 34 times · Mar 11, 2021, 7:50 PM

[wheat basalt]

the tutorial made it seem so easy lol

[vivid nova]

they do. greenposi0n

[low summit]

Limera1n or greenpois0n?

[vivid nova]

both

[green onyx]

which?

cfw?

cfw is a good resource for jb

[vivid nova]

they work hand-in-hand with 3g/s

[low summit]

Limera1n was also tethered tho

[vivid nova]

as is checkm8

[lilac wren]

Wouldn't iboot "check" kernel though

[zealous bridge]

sorry yeah

i meant that

iboot checks the kernel

[low summit]

So they can't make it untether for ever it's just a firmware by firmware basis

[zealous bridge]

but that process is exploited

[wheat basalt]

https://ios.cfw.guide/restoring-to-14-3

[zealous bridge]

so iboot signature checks are useless

[green onyx]

yep, cfw is a good resource

[vivid nova]

cfw was always soo sus

came with weird crap and ran the battery down

[low summit]

Lol for a sec I tho cfw was custom firmware

[vivid nova]

it is

[zealous bridge]

lmao

[vivid nova]

[lilac wren]

ngl 5 years ago literally I thought "why don't people just replace the ios downloaded OTA to whatever jailbroken iOS they want"

[low summit]

So cfw are still a thing?

[vivid nova]

yes

[lilac wren]

Actually that was like 7 years ago

[low summit]

Is there still pwn dfu?

[zealous bridge]

for the older devices

[zealous bridge]

yes

[low summit]

I mean for checkm8 devices

[vivid nova]

especially with icloud bypassing people whom wish to get cellular on their forgotten password devices

[zealous bridge]

yes

i know

it is

[low summit]

That's sus not gonna lie

[lilac wren]

SIM Activation and iCloud Activation are different

[zealous bridge]

@vivid nova you mentioned IV keys, is that for aes encryption?

[lilac wren]

ICloud activation you can't use the phone at all, not just cellular

[vivid nova]

yes

[low summit]

Using Checkm8 for icloud is stealing od

[zealous bridge]

icloud bypass disables cellular functionality afaik

[lilac wren]

Not if you own the phone

[vivid nova]

what in the world are you talking about...

[low summit]

If u own the phone go to Apple lol

[zealous bridge]

when the device is locked, not bypassed

[lilac wren]

If you're not activated to iCloud you literally cannot use the phone

[zealous bridge]

i think

[lilac wren]

Unless you use checkm8 to do hacky things

[vivid nova]

yes you can, there's DNS methods

[lilac wren]

...

[zealous bridge]

looool

[low summit]

U just can't use apps without icloud

[zealous bridge]

those jank things

[vivid nova]

ngl, not the best

but better than a flashlight

[lilac wren]

DNS methods to do what? Go to Google.com?

[low summit]

Dns bypass is sus lol

[zealous bridge]

click on the i in the wifi network get access to the whole phone

[lilac wren]

Make it a little web browser?

$1000 is now a web browser

[zealous bridge]

some next website which allows basic basic functionality

[vivid nova]

nah, they have setups for web browsing, youtube, utility apps, small stuff

[low summit]

Checkm8 can make use of sus things like bypass

[lilac wren]

You can't even call or take a picture...

Lol

[zealous bridge]

ofc not

[vivid nova]

you can place an internet call

[low summit]

Dns is pretty cool for thiefs

Lol

[lilac wren]

Actually you might be able to take a pic if you need to "upload" on a website

[vivid nova]

if you've got google.. you've got functionality

you just need the hardware

[low summit]

If u got web browser u got functionality

[vivid nova]

that's google

[low summit]

Didn't they use to have games too?

Like flappy bird

[lilac wren]

If you have a bricked phone you have functionality too

It's now a paperweight

[low summit]

Sell parts lol

[zealous bridge]

yeah a brick which you can smack your neighbour with

[low summit]

Functionality

[vivid nova]

the only time i've ever seen a bricked phone was when someone erased the iboot partition

[wheat basalt]

really trying to follow the IBEC tutorial but when it tells me to delete the iBoot driver again afterwards it says "can't init, no device found" and if I unplug and replug it gives me the IBEC error again

[lilac wren]

Can't you just DFU

[vivid nova]

nah

[low summit]

Nope partition gone

[lilac wren]

Why not

[vivid nova]

dfu uses iboot

[lilac wren]

Dfu is in read only bootrom right?

[zealous bridge]

reinstall itunes

[vivid nova]

no

[wheat basalt]

I uninstalled the one I had and installed the one in the tutorial, but I can reinstall

[zealous bridge]

you can

[lilac wren]

DFU is part of the SecureROM which is burned into the hardware, so it cannot be removed.

It's in Bootrom

[vivid nova]

you can't DFU if iboot is gone

[zealous bridge]

You can

[lilac wren]

This will wipe the iBoot Partition, along with the firmware. This is recoverable by restoring the device, as the device will be in DFU mode

[vivid nova]

where'd you read that from? wikipedia?

[wheat basalt]

@zealous bridge I slowly understand the FUCK IBEC in your name

[zealous bridge]

theiphonewiki

[lilac wren]

JTV for ungenius

[zealous bridge]

which is reputable

[zealous bridge]

true

/j

[vivid nova]

that is soo old

prolly for iphone 4 and lower

[zealous bridge]

its part of the securerom still

[low summit]

Lol

[vivid nova]

bruh.. devices have changed

it's not all the same

hence why different jailbreaks

[zealous bridge]

Talks about a7+

so it was updated

[vivid nova]

a7

[wheat basalt]

is that important

[zealous bridge]

a7+*

[lilac wren]

You think apple moved DFU to iboot lol

[zealous bridge]

dont need to open itunes

just close it

[lilac wren]

It's probably still in bootrom

[wheat basalt]

yeah I thought so

[zealous bridge]

It is

[wheat basalt]

but idk it won't find my device or it'll give me the IBEC error

[zealous bridge]

start the steps again

[vivid nova]

here's how it works.. iboot uses recover mode

if no iboot, no recovery

DFU.. uses recovery mode

[zealous bridge]

but dfu

???

no

lol

[vivid nova]

yes

when you dfu.. what does the screen say?

it goes black

then...? connect to itunes

[zealous bridge]

it’s a failsafe in iboot

not burned into anything

[vivid nova]

bruh

[zealous bridge]

you lose iboot you lose recovery

[lilac wren]

Ur dumb

[vivid nova]

*you're

[lilac wren]

Dfu and recovery are two separate things

[vivid nova]

i know that

🙄

you don't know the process of restore

[lilac wren]

LOL

guess where I got this from

Apple.com

https://support.apple.com/guide/security/boot-process-for-ios-and-ipados-devices-secb3000f149/web

[vivid nova]

DFU uses recovery

[zealous bridge]

checkm8

see

if bootrom cant load llb

[lilac wren]

^

[zealous bridge]

which is 1. iboot

then it loads dfu

[vivid nova]

think about it.. you can't load the software directly into bootrom without something to process it

[zealous bridge]

just admit defeat lol

stop

[lilac wren]

JTV for ungenius, sign here

[vivid nova]

guys need to go back to school

[zealous bridge]

lmaoooo

[green onyx]

lol

[zealous bridge]

🧂

[lilac wren]

Lmho skipped out on iOS bootchain class

[green onyx]

i mean

JTV is an apple tv expert

not really an ios/iphone expert

[vivid nova]

@green onyx you do realize they're the same process right

[zealous bridge]

should really recognise that before he tries to give us advice then

[low summit]

Jtv trying to prove himself stand his ground lol

[lilac wren]

Poor jtv

[green onyx]

mhm, true

[lilac wren]

First iRestore got ripped off now this

[wheat basalt]

when trying to do step 9 it can't find my device and when I plug in again the iboot driver is installed again

[green onyx]

tthis

wait

isnt JTV the only apple tv tweak dev out there?

[vivid nova]

wow.. throwing sand. I see

[green onyx]

froggy and tanbeer is probably sorry

JTV, come back

[lilac wren]

Lol let's go back to being compassionate, JTV just learned something new today that's all

[zealous bridge]

true

[low summit]

Jtv is pretty smart lol

Why he dip LMAOOO

[lilac wren]

Bc he got proven wrong

[zealous bridge]

i wasnt the one who called him dumb tho

Lol

[lilac wren]

Lol

[green onyx]

guys

settle down

JTV is probably sad rn, just stop

[wheat basalt]

:x

[zealous bridge]

You did not make anything better by saying that

[green onyx]

[zealous bridge]

best way to make someone cry is to make them believe they are crying

fax or no

[lilac wren]

Lol the psychologist

[green onyx]

hm true

[zealous bridge]

lol

teacher taught me that

bruh

just went to drink water and swallowed a bunch of foam

how does that hapen

[lilac wren]

Bubbles are yummy

[low summit]

So dfu fixes iboot?

What was the conclusion

[zealous bridge]

not fixes iboot

dfu can exist without iboot

thats the conclusion

[lilac wren]

DFU is in bootrom, wiping iboot makes no difference

What Tb said ^

[zealous bridge]

or what froggy said ^

[low summit]

So does it fix the loop tho

[zealous bridge]

loop?

[low summit]

The brick I mean

Jtv said it bricked

[green onyx]

ngl, just stop the convo

[lilac wren]

You can really only brick through hardware

[zealous bridge]

wiping iboot technically doesnt brick

[green onyx]

its probably better that way

[zealous bridge]

since it can be restored

[low summit]

So u can restore via dfu

[zealous bridge]

no-one’s trash talking anymkre

[low summit]

Then the guy got fked lol

[zealous bridge]

correct

[wheat basalt]

welp I can't get past the IBEC error

[green onyx]

lol

thats an L

[zealous bridge]

different computer

[green onyx]

use linux

[low summit]

Ibec fk that

[zealous bridge]

or os

now you understand mine and folkys names

[green onyx]

^

true

[fathom fox]

i cant get past this error

[lilac wren]

Lol

[green onyx]

LOL

which

screenshot

[fathom fox]

device apnonce

[green onyx]

not enough info

[zealous bridge]

set your generator

[green onyx]

screenshot

[low summit]

Where was the simple fix u told me @zealous bridge

[green onyx]

apnonce is probably mismatch

but ye

[green onyx]

!t fwjson

[mystic axle]

fwjson

download this file from a browser: https://api.ipsw.me/v2.1/firmwares.json/condensed (right-click, Save as), rename it from "condensed.json" to "firmwares.json", then put It in C:/Users/username/AppData/Local/ Temp
By: Tanbeer#4750

Added by Cryptic#6293 | Used 13 times · Apr 2, 2021, 5:11 AM

[zealous bridge]

for?

[green onyx]

was it that?

[low summit]

Ibec

[green onyx]

oh

!t ibec

[mystic axle]

ibec

Fix for error code 3, 8, and 10 aka the iBEC error in futurerestore

1. Uninstall all apple drivers via device manager.
2. Uninstall all apple products including itunes and apple device support stuff via control panel uninstall a program. MAKE SURE TO CHECK UNINSTALL DRIVER WHEN UNINSTALLING
3. Unplug and replug device.
4. Check device manager for more apple stuff and uninstall if so with same driver checkbox.
5. Disconnect device.
6. Install itunes64 exe from apple.com itself, no windows store bullshit. This is the best version: https://support.apple.com/kb/DL1816?locale=en_US (It will be labeled windows 7, 8 but install it on windows 10, it works fine)
7. Plug in device in recovery.
8. iboot (recovery) driver should show up under usb in device manager. Uninstall it and check the with software box.
9. Run futurerestore.
10. Unplug and replug your device.
11. Run futurerestore again

Added by Cryptic#6293 | Used 35 times · Mar 11, 2021, 7:50 PM

[fathom fox]

device apnonce does not match apt

tahts the error

[zealous bridge]

uh lemme get it for you

[fathom fox]

im on a12 14.4

[green onyx]

[zealous bridge]

youre not getting past that error

[green onyx]

^

[zealous bridge]

need jailbreak to fr

[green onyx]

u need to jb to set generator

[fathom fox]

fuck

[low summit]

Lol u can't even set

[fathom fox]

my generator is valid

[low summit]

Do you even have blobs?

[fathom fox]

yes

[zealous bridge]

https://www.google.co.uk/amp/s/amp.reddit.com/r/jailbreak/comments/aqbey5/tip_fix_errors_8_and_10_while_using_futurerestore/

[fathom fox]

i have 14.3 blobd

[low summit]

But u can't set lol

[fathom fox]

signed blobs

[green onyx]

so?

[low summit]

So u can't fr

[green onyx]

u cant set generator = u cant use ur blobs

[fathom fox]

fuuuuuuuuuuck

my generator is working

[green onyx]

but u cant set it

[fathom fox]

it worked on first try

but then i pressed cancel

[zealous bridge]

@low summit https://www.reddit.com/r/jailbreak/comments/aqbey5/tip_fix_errors_8_and_10_while_using_futurerestore/

[fathom fox]

also checkra1n stuck on booting

jk

[zealous bridge]

Lmaooo

Checkra1n on a12

[fathom fox]

if that was true

[green onyx]

eta wen portless iphone lol

[zealous bridge]

^

this

[lilac wren]

What's iBEC? Included in the iPSW firmware or is it something on the phone? iPhoneWiki not too helpful

[zealous bridge]

its iboot

but for restores

its small enough so that it can fit on an ipsw

[low summit]

Big L when u try to fr with a12

[fathom fox]

what about if i modify 14.4.2

[zealous bridge]

semi untether exists

[zealous bridge]

stop trying

[green onyx]

^

[fathom fox]

pwnage again

[low summit]

I mean on 14.4 lmao

[fathom fox]

we need another pwnage

[low summit]

Oops

[lilac wren]

So it's on the IPSW, if you wipe iBoot on the phone then DFU restore will still send iBEC right?

[low summit]

Then u don't even need to fr

Because jb available

[zealous bridge]

yes

[fathom fox]

can i use dfu to use futurerestore

[wheat basalt]

I can try on laptop but if it doesn't work there what then

[zealous bridge]

iboot is a .im4p file do not quote me on that

[low summit]

No

U can't do it lol

[fathom fox]

why cant i use dfu for futurerestore

[zealous bridge]

it should be in /Firmware or /Firmware/all_flash

[zealous bridge]

because

[lilac wren]

iboot is a .im4p file

• Tanbeer 2021

[low summit]

Lol u serious?

[zealous bridge]

custom apticket

[lilac wren]

Idk if it's true lol

[zealous bridge]

probably not

[fathom fox]

my apticket is valid

[zealous bridge]

tbh

[fathom fox]

and my generator also valid

[zealous bridge]

ok? but apple doesnt know that

[low summit]

Can't set generator without a jb that's the end of that

[zealous bridge]

no its not

[fathom fox]

its 0x111 and that shit

[zealous bridge]

no it’s not

its a random value

because you havent set it

[fathom fox]

well here's my generator

0x3bee341e92f420cf

[zealous bridge]

did you get that from your blob?

[fathom fox]

yes

[zealous bridge]

well thats not your generator

[fathom fox]

and from ios recovery

[zealous bridge]

Thats not your generator

Your generator is a random 16 digit hex value

Which you don’t know because apple randomizes it every reboot

[fathom fox]

futurerestore worked on first try but then i pressed cancel

[zealous bridge]

well then loss

[fathom fox]

it knew the generator was valid

[zealous bridge]

ok then

what do you want me to do

tell off futurerestore?

[lilac wren]

Bad boy FutureRestore

Or girl

We can ask tihmstar

[zealous bridge]

FutureRestoria

[lilac wren]

I love Cryptic

[low summit]

Imagine ur value is randomly the same as the blob?

[zealous bridge]

froggy was theorizing about bruteforcing the apnonce a while ago, i’d imagine the changes are about the same

1 in 16^16

1 in 18446744073709551616

[low summit]

Brute forcing meaning reboot till it matches?

[zealous bridge]

setting generator until it matches

[low summit]

Have fun with that lmao

[zealous bridge]

so like from 0x000000000001

0x00000000000002

like that

[low summit]

If u could make a program that does that then it's rad

[zealous bridge]

thats only if the generator is unknown in the blob

[low summit]

Lol

[zealous bridge]

it would take several billion lifetimes

probably more than the life expectancy of the earth

[low summit]

Fk that lol. Finding a bootrom exploit is probably easier

[zealous bridge]

it is

[lilac wren]

https://www.reddit.com/r/jailbreak/comments/m3744k/comment/gqnt33p

[low summit]

I want that proc software to be fixed

[zealous bridge]

you roasted me in that thread

[lilac wren]

Wait how

Oh I remember

[zealous bridge]

😭

[lilac wren]

Lol jokingly :')

[zealous bridge]

lol

didnt see that

pog

[wheat basalt]

I don't wanna jinx it but I think I fixed it

[zealous bridge]

yay

how?

[wheat basalt]

meaning the tutorial steps are wrong, at least in my case

[lilac wren]

We're all learning, at least you learned (ahem jay cough tea ahem vee)

[wheat basalt]

keep the phone plugged in when you reinstall iTunes

[zealous bridge]

ok i didnt make it that obvious

lol

[wheat basalt]

and instead of making a universal serial bus DEVICE it will put it under universal serial bus CONTROLLERS

and then you try fr

[zealous bridge]

should be both

does it only say usb devices?

[zealous bridge]

correct way is to remove usb controllers and devices

where does it say only devices

[wheat basalt]

I removed everything

but instead of unplugging, installing iTunes, plugging it back in

I left it plugged in

[lilac wren]

Help I use a USB keyboard and mouse and accidentally deleted its drivers, now I can't use my computer

[wheat basalt]

and then it would put "apple mobile device USB driver" under controllers, instead of those three drivers under devices

[zealous bridge]

Keyboard not found!
Press F2 to reboot.

[lilac wren]

/s lol

[wheat basalt]

I noticed that in a video this guy had the driver in controllers, not devices, and I remembered having seen it there as well without the other three, so I repeated the steps until it looked the same

might be a fix for those who have this issue, idk

[zealous bridge]

well judging by the amount of times !t ibec has been used it’s probably just you lol, however i’m glad that you managed to figure it out

Will keep your points in mind

[wheat basalt]

credits to the Turkish guy whose video I just watched lol

although I think he also did it a bit differently

maybe I was just lucky

well I ain't saying no to a little bit of luck

[zealous bridge]

true

[lilac wren]

Hey logs haven't frozen and it's been 36 hours I think

Don't wanna jinx it

[zealous bridge]

Microsoft get their game together orrr?

[wheat basalt]

omg it worked

[lilac wren]

No me I wasn't closing all connections so memory leak

[zealous bridge]

@lilac wren i don’t get this part, why does the bootrom have to be recovered? whats wrong with it?

[zealous bridge]

congrats!

[zealous bridge]

ohh

[wheat basalt]

thank you, and thank you to everyone who helped

[lilac wren]

I think it means the code in the bootrom is waiting to recover the device

[wheat basalt]

idk if it'll help someone else but basically I did everything until 4, I skipped 5 meaning I left my phone connected, installed iTunes, and instead of showing up under devices the driver would show up as "Apple Mobile Device USB Driver" under controllers, and then I just hit start FutureRestore

[zealous bridge]

@low summit this is why baseband is so hard, it has it’s own processor

idk if that can be manipulated via a bootrom exploit

but damn that shit is tight

[zealous bridge]

shit grammar then

it sounds like the boot rom code is the one being recovered

lol

[lilac wren]

Lol it's read-only so

[zealous bridge]

exactly

[haughty holly]

how would i get a valid blob

i want to upgrade from ios 13.5 jailbreak to ios 14.3 (and keep my jailbreak)

[zealous bridge]

You cant anymore

[haughty holly]

.......................................

why not?

im on a jailbroken state help

😭

why can i just update

pain

[zealous bridge]

You can only get blobs when that version is signed

[haughty holly]

fuck apple

[zealous bridge]

and 14.3 is no longer signed

[lilac wren]

when the 😭 emojis come out

[haughty holly]

PAIN

[zealous bridge]

pain

[haughty holly]

I LEGIT HATE 13.5

I JUST WANNA UPGRADEE

😭

[lilac wren]

Upgrade then

[haughty holly]

i cant.

i dont want to loose my jailbreak

its useful

[lilac wren]

Then don't upgrade

[haughty holly]

no.

i refuse

there has to be a way

😠

(but the s is silent)

[lilac wren]

There is a way actually

[haughty holly]

oh?

[lilac wren]

You have to develop your own bootrom exploit

[haughty holly]

oh that sounds so easy

brb

let me do it

[lilac wren]

And then you can tether *downgrade

Awesome have fun

[haughty holly]

thanks :D

why didnt anyone thin kof this before

🙄

so easy

ugh

[zealous bridge]

glhf moment

[haughty holly]

k in all seriousness is there not a bootrom exploit for downgrading....

[lilac wren]

What device are you

[haughty holly]

ipad pro 2018

[lilac wren]

What generation / chipset

Oh I think that's A12

[low summit]

So no baseband exploit is gonna fix fr?

[zealous bridge]

A12Z

[haughty holly]

does the z mean i cant downgrade.

[lilac wren]

Ok you have to develop the bootrom exploit because the known ones are for A11 and below

[zealous bridge]

among other things

[haughty holly]

spain

[lilac wren]

Name it frogm8 after me ok? Bye have fun

[haughty holly]

but the s is silent

OK

[zealous bridge]

no idea

[low summit]

Frogm8

Fire exploit

[zealous bridge]

antonm8

[haughty holly]

lmao what-

this bot is tripping 💀

[zealous bridge]

what did you send

[haughty holly]

i didnt send anything

wth

[zealous bridge]

lol

my tutorial url

[lilac wren]

When you go ballet dancing, u wear a twotoo

[haughty holly]

tutorial?

[zealous bridge]

twotwo

[lilac wren]

Oh it thinks it's the pirate app

[zealous bridge]

i refuse to call that shit an app

it’s a scam

thats what it is

[lilac wren]

it used to be an enterprise app now it's a webclip I think bc apple revoked everything

[zealous bridge]

doesnt deserve to be called an app

how do you develop my name into a cool name for an exploit

[lilac wren]

Beerm8

[haughty holly]

wait

[zealous bridge]

beer8

like

[haughty holly]

does taurine work on 13.5?

[zealous bridge]

berate

[haughty holly]

👀

[zealous bridge]

lol

[haughty holly]

😏

[lilac wren]

lol

[low summit]

Beerm8 sounds super British

[zealous bridge]

odyssey does

[haughty holly]

ah

[lilac wren]

Odyssey lol

[haughty holly]

perfect

thank you

[zealous bridge]

true

[low summit]

Cheersm8

[lilac wren]

LOL

[green onyx]

nah not trippin

[haughty holly]

what'd i say?

at 11:16?

[green onyx]

ngl, ur name reminds me of ian beer

lol

[zealous bridge]

lol great guy

enabled a lot of jailbreaks for us

[lilac wren]

Tanbeer wen explot

[zealous bridge]

p.s. i am ian beer maybe

[lilac wren]

Impersonation wow, reported

[green onyx]

tanbeer bootrom exploit

tanra1n

lol

[zealous bridge]

tanr8

or tanb8

ew bait

[green onyx]

?

oh

[zealous bridge]

folkl8

[lilac wren]

Lol

[zealous bridge]

come early next time

[green onyx]

[sinful spade]

how do i dfu on 14.5

[zealous bridge]

what device

[sinful spade]

xr

[zealous bridge]

Connect the device to a computer using a USB cable.
Quick-press the Volume Up button
Quick-press the Volume Down button
Hold down the Side button until the screen goes black, then hold down both the Side button and Volume Down button.
After 5 seconds, release the Side button while continuing to hold down the Volume Down button.
If the Apple logo appears, the Side button was held down for too long.

[lilac wren]

Why dfu for futurerestore

[zealous bridge]

dont think its for fr

[low summit]

@zealous bridge updating to taurine 1.0.2?

[zealous bridge]

100%

rn actually

[low summit]

Nice

Imagine somehow 14.4 is supported by taurine

Randomly

[lilac wren]

Use my shortcut it took me 40 min to make 😶

https://www.icloud.com/shortcuts/06a3abaef64c43fca1d1c903bc56ffba

[zealous bridge]

damn that was a long boot

[green onyx]

what does it do?

ah

taurine downloader

https://showcuts.app/share/view/06a3abaef64c43fca1d1c903bc56ffba

ngl seems very complicated, probably bc of the random text

[lilac wren]

Yeah I generated that with another shortcut lol, it's just the menu

[low summit]

Ngl but cs jb success rates are so trash

Odyssey takes forever to rejb

[green onyx]

odyssey on ios 12.4?

what

also

why arent u using circuta

on odyssey

[low summit]

No 13.6

On my xs

Tf is circuta?

[lilac wren]

The name of the exploit

[zealous bridge]

its the name of the 11.0-14.3 exploit

[low summit]

Oh yea I wonder lmao

Idk because I used the first one already

Can you even switch?

[celest basalt]

Anyone have a new 12 Pro and downgraded at all? I heard about the taurine jb and wanted to try it out but the phone came with 14.4.2.

[zealous bridge]

you can’t

[lilac wren]

am I dumb, why can't I save blobs for XR but I can for XS max

[zealous bridge]

?

whats wrong

[lilac wren]

this ^ idk why

[zealous bridge]

ph

oh

[lilac wren]

it works for iphone 11,6 but not 11,8

[zealous bridge]

ipsw.me is fucking around

[lilac wren]

is it really :/

darn

so i can't use tsschecker until ipsw me fixes lol

[lilac wren]

is that wrong

[zealous bridge]

different ipsw names

[lilac wren]

tsschecker -B N841AP --buildid 18D70 -e [ECID HERE] -g 0x1111111111111111 --apnonce 62CEB6DE875024475274F101C8A4BFBEB6C04ED2950362254EA417F7C79D3761 -s -u

this is my command, should I include 12,1's board config or something then

[zealous bridge]

use -l instead of —buildid

thats l for lima

latest ios version(s)

[lilac wren]

ok ill try

same error

also tried without -u

[zealous bridge]

specify device identifier instead of boardconfig

[lilac wren]

even without -s

[lilac wren]

also tried that

./tsschecker -d iPhone11,8 -l -e [ECID] -g 0x1111111111111111 --apnonce 62CEB6DE875024475274F101C8A4BFBEB6C04ED2950362254EA417F7C79D3761

same error

[zealous bridge]

is there an option for manual buildmanifest

?

[lilac wren]

11,6 works lol

yes

[zealous bridge]

there was ikrc

ye download the ipsw and extract the BuildManifest

[lilac wren]

do I have to download the entire 14.4.2 ipsw...

[zealous bridge]

then manually speciy

[lilac wren]

Lol

[zealous bridge]

...

Ye

if only libfragmentzip had a cli

[lilac wren]

wasn't there an API to just get BuildManifest, maybe I can do that?

[zealous bridge]

oh wait you know C right

[lilac wren]

let's say I do

[zealous bridge]

it wasnt an api

it was code to get specific files from a remote zip archive

[lilac wren]

oh

[zealous bridge]

you can make your own program

but no cli interface so noobs like me cant use it

https://github.com/tihmstar/libfragmentzip

[lilac wren]

that's mean

ok I'll try lol

C IDE is Xcode?

oh that's obj c

[zealous bridge]

its actually a dependencie for futurerestore

ye

[lilac wren]

CLion downloading now

[green onyx]

u have clion?

doesnt that cost $$$

[lilac wren]

idk my school gives it to me

[green onyx]

bruh

[lilac wren]

all jetbrains

Lol

[green onyx]

ur school rich

[zealous bridge]

also if you figure out a noob way to do it could you teach me @lilac wren

[lilac wren]

lol also the azure $100 credit

[zealous bridge]

i kinda need it too lmao

[lilac wren]

sure maybe I'll make a CLI for you

[zealous bridge]

cba to download entire ipsws

[green onyx]

need what?

[zealous bridge]

wow thanks

[zealous bridge]

cli of lfzp

[green onyx]

ah

[zealous bridge]

lol

tihmstarrrr

[green onyx]

lol

[zealous bridge]

literally just need an option for url and what file

[green onyx]

just realized froggy is almost lvl 30, hes lvl 26 lol

[zealous bridge]

hopefully thats not too hard

yeah lol

what lvl u on

[green onyx]

me?

[zealous bridge]

ye

[green onyx]

uh hol up

39

[zealous bridge]

oh

[green onyx]

when is mem edition?

[zealous bridge]

damn i thought u were right behind me

50

[green onyx]

ah

what lvl r u?

[zealous bridge]

47

or i should be

[green onyx]

oh damn

[zealous bridge]

i was like 100 xp away

[green onyx]

ur 46

600 xp left

lol

[zealous bridge]

oh

1 zero away

close enough

[lilac wren]

how do I use this lol

[green onyx]

wait use what?

[zealous bridge]

look at fr source code

[green onyx]

lfzip?

[lilac wren]

fr source code only mentions it in dependencies it seems lol

[zealous bridge]

nah i saw it somewhere else as well in vsc

hold up

oh im stupid

not fr

tsschecker

[lilac wren]

oh

ok

[zealous bridge]

sorry

[lilac wren]

nw nw

[zealous bridge]

ye found it

does that make any sense to you?

[lilac wren]

I literally have never written a line of C code yet so we'll see lol

[zealous bridge]

idk even know the basics

[lilac wren]

what file is this? i dont see it

[zealous bridge]

tsschecker.c

[lilac wren]

oh

[zealous bridge]

https://github.com/DanTheMann15/tsschecker/blob/master/tsschecker/tsschecker.c

use this fork

its updated

[lilac wren]

ty

[zealous bridge]

oh if you werent using this fork before then try save blobs with it

maybe it’ll fix ur error

[lilac wren]

oh yeah

sure

[lilac wren]

ok gave up on libfragmentzip will try developing my own way of extracting remote zip

[lilac wren]

Progress update I might be able to do something but it's not looking too easy at all

[valid adder]

@lilac wren Its easier than you think

u should try it

you are doing stuff wrong

[lilac wren]

Make my own or use libfragmentzip

[valid adder]

no

make sure you have pkg config

and purge out out libgeneral

[lilac wren]

Ty, I'll have to continue tomorrow bc I'm heading to bed

[celest basalt]

Do I need to stay jailbroken in order to update with futurerestore? I used Restore RootFS from unc0ver

[sage briar]

you need to set generator

[celest basalt]

Yeah I did with unc0ver I think

[celest basalt]

Do I need to do anything more than type it into unc0ver?

[sage briar]

follow this https://ios.cfw.guide/restoring-to-14-3

[celest basalt]

Thanks but that doesn’t work for me

[sage briar]

do you have valid blobs?

[celest basalt]

I keep getting an error saying “Unable to run FutureRestore. Ensure you selected the correct FutureRestore executable.”

[sage briar]

https://github.com/marijuanARM/futurerestore/releases

use this

[celest basalt]

I do. The furthest I got was with iRestore but got that annoying IBEC error

[sage briar]

did you try to uninstall apple recovery driver from device manager?

[celest basalt]

Yep. Now in the middle of reinstalling iTunes

@sage briar Tried it again, same issue. 😡

[sage briar]

did you uninstall Apple Recovery (iBoot) USB Driver?

[celest basalt]

yes. when I keep it plugged in then try again it doesn't detect the iPhone, when i plug it out an in again the driver reinstalls

[sage briar]

do you run futurerestore again after uninstalling it?

and also you must tick that option while uninstalling it

dont know what is there exactly stated but you must tick it

[celest basalt]

I'm doing all of that, it's not fixing it

[lilac wren]

Just dual or live boot ubuntu and FutureRestore there if you cant fix ibec

That way you can also use http://frgui.cf

[celest basalt]

Future Restore GUI doesn’t work for me

[sage briar]

then try cli

[lilac wren]

You might not be selecting the right file, also if you do ubuntu it probably will work bc there's no iBEC error

[celest basalt]

I think I got it working now, it was timing. I had to uninstall the driver, quickly plug out, plug in, and press restore straight away Windows had time to fully reinstall the iBoot driver.

super weird

[lilac wren]

An ok

[celest basalt]

well

it's been stuck halfway for a minute now

[celest basalt]

Is there anyway to set a nonce while in DFU?

[lilac wren]

Maybe? I think nvram can be changed in recovery, dfu, and normal mode

But there's no tools to do it in DFU I think if that's what you mean

[celest basalt]

well it's too late I got stuck in a dfu loop and need my phone for work so had to restore it to the latest iOS

[valid adder]

nope

u didn't have to

dfu is black screen'

so you can't tell if its looping

[celest basalt]

naah it wouldn't let me exit

ffs

gonna be along bloody wait until the next jailbreak

[valid adder]

well you wouldn't have restored

you didn't have too most likely

[lilac wren]

Cryptic did you see the guy who just restored to 14.3 OTA no blobs with an MDM profile

[valid adder]

Makes no sense

[lilac wren]

Ik but still cool

[valid adder]

Huh?

[lilac wren]

That was my same reaction

[valid adder]

wot

[lilac wren]

#jailbreak message

[zinc moon]

@celest basalt here

ill explain it

so

basically

you know supervised iphones?

[celest basalt]

yeah I've done it before

[zinc moon]

ones from companies and schools

[celest basalt]

as in supervision

[zealous bridge]

it ignores tss @celest basalt

like bypasses it entirely

apple designed it that way

[zinc moon]

it ignores the normal apple servers

yup

[celest basalt]

that's very weird, is there some separate signing for these?

[zinc moon]

still dont know why it worked for rebel

@celest basalt seems like it

[zealous bridge]

prob not

[zinc moon]

o

[zealous bridge]

its just if the deferral is over then let them install

if it's not then no

[celest basalt]

I wonder if you can trick it into downgrading bc some dude on youtube downgraded from 14.0 beta to 13.6 beta OTA

[kindred oar]

Is there a way to set up your own tss server and make your phone believe it’s actually Apple’s?

[zealous bridge]

might be possible

[zealous bridge]

not without a lot of private keys

[zinc moon]

lmfaooo

if only

[kindred oar]

😦

[celest basalt]

I think Cydia used to do that before apnonces were a thing

[zinc moon]

if we could have there wouldve been a tool to do tht

[celest basalt]

or something like that

[zinc moon]

god im hungry asf