#futurerestore-help
1 messages · Page 109 of 1
before he became genius
🤓
shut up you frog
:(
/j
do you look like your pfp irl
Lil Cryptic
i am not a chinatown gang manager who's blind, no
bro looks like a crackhead
@cinder flume helped me
Lol
oh he died
in my first fr
i noticed a trend
people who help you with your first fr
arent that active
yeah
idk
nyu is rly active lmao
I need to keep talking and be active ig so I can change nickname
oh
im so close to mem edition istg
what level is that
50
ooh yes that'll be so cool
im on 48 and a 1/2
keep it halal bro
haram
didn't you say you were like 17 tb
16
United Kingdom moment
lol
age of consent is 16 here
i love this channel
same
just saying ive been here before any of you
thats what i like
so stfu noob /s
when did you join
wow
uhh
I got here like March
oh
i joined in June 2020 wtf
and already have send almost half of TB's messages in this channel
TB?
tanbeer
ive only been active for as long as you have
how do you have 20k messages here then lol
oh
from when i joined to u0 6’s release date i didnt say anything
well hardly anything
oh fr?
i used to havw 25k messages before my current ones
jailbreaking was dead
I spoke once in like u0 5 release
but they were all cleared
Wait did i leave the server
i was always scared of this discord
as you should
everyone was so much more hostile
noob
back then
well #futurerestore-help is cozy
its so much friendlier now
true
compassion #1
haha yeah
im just happy a certain mod isnt spamming our asses with "take it to general"
oops
didnt mean to put that
this lol, there's nobody here so
true
and the fact that this channel is perfect without moderation
yeah
who will be here to help them
^ this
yeah probably
im just happy eta kids are keeping them bussy
i think mods know about the off topic nature that happens here
I hope so
they do
LMAOO NO WAY
literally this is the only place I stay
whats the %
94.2%
i have 16k messages and 2,690 are here
pls
ill do it
im guessing 75%
63%
wow
i need to step up my percentages
wow
I’m not that active ig
thats a lot man
63% vs 94% ok god damn
or you're extra active in this server in other channels as well?
There was a period where you like disappeared from here tb lol
i remember that girl called shady
i have twelve hour school so i cant be active ever
you what???
ye
no way
TB this is you total vs #futurerestore-help, #genius-bar, and #genius-bar-2
like 66%
not much different
and #jailbreak?
yeah
9,822 from tb in #jailbreak
?
for a bot
i dont know exactly what happened tbh
its looooong
someone needs to explain to me cause im curious af
@lilac wren a retired admin called alexk wanted to add a bot, basically, aaron and other admins said no,
thats when the incident happened ig
he started to tamper with shit
when that happened
they took his perms away
however
through a backdoor
wow petty
he deleted this server
a bot probably
seems like he had an alt
I've made a backdoor in another server ngl
simple, I react with a specific emoji to the bot from a specified alt and it gives me moderator perms
the bot has manage server perms so it can delete all channels
oof
also manage roles deletes all roles
bro turned to the wrong jailbreak
you can also ban all members
he didnt delete the server, but delete the channels
think about GIR right, it has manage roles and manage members for sure. it can ban people with like ?ban and also gives muted role + member pro, etc
imagine if that happened to the subreddit
lol
lol never give a bot besides automod any perms in a subreddit
fucking alexk man
he did all that for a bot
the server had around 1.5m messages
before all this happened
#jailbreak alone now has 3.57M messages now
oh wow
otherwise how would the backdoor exist
he had perms to change the bot
if he has manage servers perms, other bots usually let those people use their commands
so he had perms to change other bots maybe
whos that directed at?
Ultra the genius
i remember the day
3/13/2020
bro when it happened
the shock
i have a photo
of a message
from alex
k
wait why is the quality like that
Aaron got warned lol
lmfaoo
lol
im on ios 14.3 with my xr
could i save blobs, update ios 14.4.2 and futurerestore my device later back to ios 14.3?
as long as sep is compatible yes
only if a jailbreak comes out for 14.4.2
^ and that
and sep and bb must be compatible
so right now no
and the blobs for 14.3 have to be good
not onboards
oh shit i forgot that
wdym good?
ios 14.3 is unsigned now
so unless you saved blobs before
cant save them now
@lilac wren onboards arent bad
shit
but for them to work with fr you needed to have ipsw updated to the version you’re saving onboards for
If you ota’ed then it’ll save ota blobs
Which are useless for A12+
omg
ok so nervermind then
@zealous bridge you ever used onboard blobs?
Not successfully
what device did you try
whats onboard blobs
Actually
@slim grove nothing
sheeesh
I used onboards for A9 successfully
jk onboard blobs are like
blobs you get from the version
if youre on it
even if its unsigned
and that worked because i ipsw updated
@zealous bridge do they have a high success rate for a10
@slim grove do you remember how you updated to 14.3
its not chip specific
@zinc moon @zealous bridge did y’all here about what sloopie did in Sileo server or no
the superviosor profil thing
no
untether downgrade?
yes, which would technically work for A8/A9
HUH
wtf i understand nothing
Involves tether downgrading once, blackbird, the fact A8/A9 uses arbitrary sep, and something I’m forgetting
Tested in concept with A10 via succession tether downgrade to 14.2 (which meant 14.2 with 14.3 sep) then updating using the OTA method to untethered 14.3 which worked
what
but
it didnt work for me
oh i frd
thats why
if only i never frd to 14.4.1
makes sense
but doesnt change much
we always knew it was
method
is there a tool for tethered downgrade with checkm8
@zealous bridge my dad might give me his iphone 8 when i travel to him tommorow, if hes on 14.4, can i downgrade?
divise works, idk what succession tether is tho
no
sad
This would technically allow A10 but the issue is SEP isn’t arbitrary on A10 so you would need sep blobs... and the tsschecker that is normally used is bugged and doesn’t save sep blobs so yeah
A11 might work under same conditions as A10 in the future if they somehow can get blackbird to work, A12+ is never gonna work with this method
sep exploit
wtf
blackbird is the same of the sep exploit
A11?
Is it PyBoot @stiff hazel
A11 partially patched it by I think sep being 64-bit or something
A12 full patched it
nah
u need a bootrom exploit to see if its patched
nobody knows if A12 patches it
eh true
ye
what does exploiting sep do exactly
thats why theres a workaround for A10 for sep
So a11 sep fix is possible?
change it?
A11 is full patched
We’re talking blackbird
theres a reason why checkra1n didnt work on A10 for a long time
blackbird worked partial on A10
they needed a sep exploit
but checkra1n team worked on workaround
And to implement it
be right back finding info on blackbird
oh yeah remember A9 worked but A10 didnt
^
then they fixed it later
A10 is partial
true
Lets sep run arbitrary code
This is from the pdf attached here https://twitter.com/windknown/status/1291308058493116416?s=20 so I’m doubtful
So I’m confused what you’re referring to @green onyx unless I missed something
A8/A9 never even needed the sep exploit for checkra1n, only A10 (and still technically A11) needed it for checkra1n
I stg why does libMRYIPC want to reboot every update... I almost always click it
That was checkra1n indeed for 0.11.0 yes
@stiff hazel what are the results of sloopie's expirement?
For the concept it worked
and in practice?
no example currently but everything should work unless there is something else we’re missing
so would this work to downgrade to 13.7 and upgrade to 14.2 with blobs? to try again at fdr
- I don’t know
- It can’t unless you have sep blobs saved for <14.4 which you likely won’t even if you have saved blobs because the common tsschecker is bugged
There’s a tsschecker fork which fixes the bug and saves them
The main one needs to have that be merged into it
I don’t know? Maybe on Wifi iPad’s and iPod’s?
Think they use the main (bug) version
Think anyone can help me I upgraded my libmryipc and it completely broke all my tweaks and I’m having to load my jailbreak without tweaks to even type this out or else I’ll be in a infinite apple logo loop
@celest basalt was there when this was being looked through so you can ask them about it exactly
shouldve pinged me smh
also from the same pdf
what tool do you use to patch sep with blackbird
same
the issue is simple: we don’t have a (known) tool yet.
what we’re thinking is, pongoOS should be able to handle what we want to do with blackbird
again, this whole thing relies on us assuming nothing else is preventing the entire thing that we’re not thinking about
problem is, pongo only pwns SEP on A10 right now
Tether downgrading doesnt touch SEP right
Succession downgrading doesn’t
Downgrading with futurerestore likely would I think
how do we “use an arbitrary sep”
blackbird can load arbitrary sepos since they don’t at all rely on sep blobs and shit
not necessarily to my knowledge but eh maybe
this discussion from here appears relevant I think? #554064188243181581 message
ah yes
im wrong
sorry about that
@stiff hazel is right
A11 is partial
and A10 works
@stiff hazel sorry for the late replies, i was in class lol
ok well i can try this on a9 tomorrow if i can get all the tools required
you’re fine lmao
this is what sloopie thinks
apparently, this doesnt require blobs
SEP on A8/A9 is arbitrary
hm
doesn’t require sep blobs
ah yes
yes but for A9 and A8
maybe we just need to find a way to get ota to downgrade sep
not possible afaik
and for a10?
that has sep blobs and tsschecker sucks so you likely don’t have them saved
well anything is possible
that’s like saying checkra1n A13 is technically possible
Been bugged and doesn’t save sep blobs
well it is, in maybe 10 years?
my question is if ipsw can downgrade sep why cant ota
it must be possible
Is MITM really possible? Tried a bit and kept getting blocked, found
Apple services will fail any connection that uses HTTPS Interception (SSL Inspection). If the HTTPS traffic traverses a web proxy, disable HTTPS Interception for the hosts listed in this article.
true, full otas have bb and sep
i have saved ota blobs
so go figure
via MITM
That's MITM?
did u dump ota blobs from the ota?
I thought you just used tss checker or dump onboards
it was in a .ips iirc
u didnt actually request it from tatsu
no actually
^ Your phone didn't request it from tatsu and you didn't MITM the request
Or you actually did?
TSS request is sent in cleartext
@zealous bridge if i frd to 14.0.1 and put 14.0.1 bb and sep instead of latest
its in device logs too
would it work
14.0.1 sep isnt signed
yes but if you want to save usable blobs you need to MITM the request
oh right sep and bb need to be signed aswell
isnt it the response
14.4 bb is exactly the same as 14.0 bb
in the logs, you have a full response but those blobs have an unknown generator
which are the blobs
The big issue is sep
the request is truncated and you need the full BCert to replay it
BCert only needs to match against ApChipID, ApECID, ProductMarketingVersion and SepNonce
doesnt that only apply to A14
so you can replay and save blobs with an arbitrary apnonce
oh right
no
OTA blobs are useless on A12+ anyway
I meant to reply no to this
that was a different thing
for A14 TSS refuses with error 94 even with a proper managed request
with MITM it
probably not, it randomizes the generator before requesting the APTicket
what the hell is you two saying
although maybe if one is already set it wouldn't? idk
MITM is literally not hard anyway, just disable SSL decryption
but like you said you can save them to use with arbitrary apnonces
TSS request is in cleartext so
yep
mitm sep shit
so
what was the conclusion
of the big boy words they said
becuase i did not understand shit
and its not even a proper request
and even if u did, its useless on A12+ anyways
is it even possible to mitm?
yes
how
how do I MITM without updating then lol, force reboot right after i get the request
^
any proxy
huh
mitmproxy works iirc
you could have the proxy modify the response
send an invalid TSS response to the device
ah true
I used Fiddler yeah
lol
that ^
finger = fiddler
trust me
Fiddler AutoResponder should work, though I can't test it anymore since I updated to 14.4.2 and failed with the downgrade
but I just let the 14.3->14.3 update go through yesterday and it went fine
@celest basalt can we do something like this currently?
https://www.reddit.com/r/jailbreak/comments/gxgboo/discussion_how_to_update_appletv_hd_4k_to_1345/
53 votes and 31 comments so far on Reddit
yeah should be possible technically
but again, thats lower firmware to a higher firmware
not for me on 14.5 bc no downgrades, can't even JB it with checkra1n atm
ok ill try stuff with that
you have to supervise the Apple TV
nah for phones
no tweak exists for tvOS so just edit the plist manually
isnt bcert tied to a specific version tho
oh
yeah but I meant the same method we used to update iPhones
no MITM trickery just let it update
doesnt that include modifying the response to a lower firmware? how would that work if bcert was tied to a specific version
i’m guessing what they’re wanting is versions below 14.3
no, that was a different method
don't need to modify the response in this case
just use the same delayed update thing
Couldn’t delayed updates also work on tvOS and audioOS and shit
These options are available in iOS and iPadOS 11.3 or later, macOS 10.15.6 or later, and tvOS 12.2 or later.
tvOS yes, good luck with audioOS or watchOS though 
schools and meeting rooms for airplay and whatnot
Yes
ok
both
Sep and baseband both
👍🏻
true
damn
after the ota thing
nobody needs help with fr now
@vivid nova crazy sister check
just rename this channel to #ota-help
too much use from your mom i see...
She threw it at me once
aight whats new
haha 😅 true
regardless of a broken remote, you can still use your phone @zinc moon
what sloopie did, potentially mitm’ing 14.3 shit, that’s about it
just keep it on vibration for her
nothing rly, just explaining the concept of mitm the tss requests to these guys
Sloopie is trying untethered downgrades on A8/9
ah ok
BRO???
lol
depending on the age... would make no difference
When I try to downgrade with FutureRestore from 14.4.2 -> 14.3, I get errors.
cool
She’s 8 bro
JTV out of line
what errors
8 year olds watch TV
yea
which?
YouTube
true
sus alt
true


how would that make sense if there's no bloodline relation with TVs
she’s not a tv
its called electric fluid
The vibration will be unlocked when she’s 16
this is getting into some weirdass shit
how to jb a sister lol
and you say I'm out of line...
Before this turns into another #jailbreak
someone’s getting a bit too frisky to be talking in #futurerestore-help right now...
#futurerestore-help more like #general-2 
get her in trouble with the law, then hook up the bars to a tank
#

how do i untether jb a sister
i need untether !!!!!
aight
we should really stop
@digital cobalt u good?
@green onyx he also asked in two different GitHub issues...
literally says that as he’s continuing the weirdness
ban him pls
Asked him to get muted here two
demote capt pls
why
for making batch
hm
batchomatic is good
ban

stfu
@lilac wren u do know that batch breaks dpkg right?
not even breaks
ok time to rootfs
Froggy actually uses light mode
yes lol
just fucking shits on it
how do i extract debian files on windows
Admins are inactive rn
only people whom use light mode, go to stores without a mask use batchomatic
too lazy to boot in kubuntu
Wait for cam to come online, instaban
froggy:
loves ibec
uses discord light mode
think batch is good
#CancelFroggy #CancelCulture #DramaAlert
im pretty sure froggy wears a mask
doubt
iBEC gang
he got vaccinated tdy
u like ibec?
Lol wow
I’m getting my second dose on Sunday
I injected your mom
im not wearing one rn
i heard its suppose to hurt
Good thing I’m not working
damn does anyone know how to convert a juice theme into a fufu theme?
this is #jailbreak right

Mike moment

Rip


i can convert your mom from innocent to naughty
!t noTAG4u
!t joshyouaren’tfunny
lool
please
yes
No

“i can return your mom to normal”

I thought you was josh
this
josh moment
josh is the simplest most predictable molecule
who tf is josh?
On the planet
^ this
@vivid nova clearly me
tell your mom i said hi
I'll tell his mom tv said hi
ok zoomer
Ok who
Lol I actually use zoom fk
@vivid nova tell apple I said hi
tell @split torrent yourself
Imma call apple
Do it
not before I call your mom
@split torrent @zinc moon 's mom said hi
Tim cook ain't ready for some kid
LOL
one
Apple let me Ota update thx
<@&430363671722590209>
Who’s this role for
@zealous bridge elaborate on the whole not a virgin thing
i refuse
what?
<@&430363671722590209>
your mom
ur acc shit
Since iOS 10.. I've never seen this until today..
Jtv the apple employee
There has been an influx of calls today. Please wait, as a representative will be with you shortly.
I'll call up your mom and be with her shortly
Apple let me downgrade without blobs
Lol this is fire in General vc
why does it sound like BTD6 music
apple is playing piano wow
WTF
bruhhh
i muted that person
i dipped
The same way I'm good with their mom
The Apple TV?
Tanbeer your audio is flickering in and out
Adjust your sleep timing
I think noise suppression?
What in the hell is a sleep timing
o
i have a feeling @split torrent is a bot
I’ll see it tom
JTV u work for apple
@split torrent does your mom love you
You don't have anyone named "mom" in your contacts.
I can’t hear him
You gotta be a hot
i can but kinda laggy
its probably bc his cousin's wifi sucks ass
but its fine lol
yeah tanbeer has noise suppression or bad wifi
@split torrent tell me a joke
What if it’s a selfbot
charge ur phone lol
Yh rip
Have you heard the joke about yoga?
Never mind, it's a bit of a stretch.
-_-
@split torrent fuck me
@split torrent what is 0 divided by 0
@split torrent can u remove app store for certain devices?
guys this is too much
ill fk ur mom
I’ll do you one better
I’ll make a bundle deal to fuck you AND your mom
Ok I feel like I’m ruining this channel
this is #futurerestore-help ...
Let’s go back to normal

Imagine that you have 0 cookies and you split them evenly among 0 friends. How many cookies does each person get? See? It doesn’t make sense. Tanbeer doesn't have friends.
true
LMFAO
Apple the philosopher
@zealous bridge how do custom IPSWs work
Since whatever you’re using to restore has to reach out to the Apple servers
ask @split torrent
Doesn’t that mean it’ll invalidate the custom IPSW?
once the firmware is on device, the filesystem is verified by iboot, which can be compromised with a bootrom exploit
can u preserve bb and sep with that?
cfw used to preserve bb
yeah exploits exist
they dont do that anymore?
no
What does FR need to reach out to the Apple server, then?
since you need bootrom exploit + sep exploit + bb exploit nowadays
an internet connection? lmao
oh
they not the same shit anymore
its not hard to ping the apple servers
icloud is also in apple servers?
one of them
so they have multiple servers for different things?
All major companies do
one for sep one for bb?
because they need to verify signatures
The device won’t restore without it
So technically, we can use Custom IPSWs with a checkm8?
?
tethered probably
does android need to validate signatures?
never used android before
to move from firmware to firmware?
dont know jack shit abt it
lol
Is there a way to spoof apples response? If the say no, can it be spoofed as yes?
id assume its different for each vendor
not that simple
encryption exists
so what was the point of cydia server back in the day?
No except for huawei and xiami
Ah
of course otherwise u could break icloud ez
guess things were simpler before
could someone help me determine for sure whether or not I can FR
Since onboard blobs exist, do onboard SEP and BB blobs exist?
What’s your current version, I assume 14.1?
think its the same
judging by your name i’d say yes if you have valid blobs and if it’s 14.3+
no
It turns out there are SEP blobs
that yes
not that i know of
Hm
and bb too?
See #genius-bar for more details but basically my device is pswd locked. I have blobs but not really sure if I check the boxes and i can't really do anything on my phone atm lol
bb blobs have always been saved
kind of a last resort before I restore my device
you need ssh access to the device @pastel bluff
@pastel bluff is it in recovery mode
and some way to get the phone trusted
@pastel bluff did you set nonce on it
I had this morning but then I put it in DFU and it restarted :((((
If you set nonce you could’ve good to go
well you need to
No I didn't mess with any settings on Taurine. idk how to
no other way
okay
You’re fucked
ig I'll update then
Restore it
sucks but no other choice
@zealous bridge if only he set nonce lol
idk what you're supposed to put for nonce and such which is why I'd never done it
It’s simple honestly
and I had SSH installed but I had barely any service to do any real work
You forgot the device’s password right?
yea
essentially I succesison'd last night while I was high and by the time I woke up I forgot the password I put on it


yea
never again
oh well now I just have to sit back and wait for a new exploit
once again
or a downgrade method
I guess you learned the hard way
I mean I've been jailbreaking since iOS 7 so this has happened to me plenty of times
most notably on ios 10.3 or somewhere where I got a bootloop
dude the worst part is that it took me 3 hrs to get succession working cause I didn't realize I didn't have enough storage to download the ipsw
so after 3 hours I was exhausted and happy I finally got a fresh install
then the next morning password lock
and I can't even keep trying I'm completely locked out
What's taurine's default nonce?
I mean I didn't really do anything wrong
I just forgot
lolol
ig the response was bad but like I said I've never used FR so idk anything about it
Don't feel bad, it's happened to me twice


