#futurerestore-help | r/Jailbreak | Page 124

zealous bridge Apr 17, 2021, 9:56 PM

#

not even a sepos environment where all we can use is seputil?

#

Surely we can do that

#

The nature of blackbird should allow us to

#

Even if we cant boot it up

zinc moon Apr 17, 2021, 9:57 PM

#

Do I have to compile anything in this case?

zinc moon Apr 17, 2021, 9:57 PM

#

zealous bridge Even if we cant boot it up

Ios 14.4.2 can always be booted up

low summit Apr 17, 2021, 9:57 PM

#

Can't we manually insert sep

zinc moon Apr 17, 2021, 9:57 PM

#

And I can go back to earlier ios 14 versions if needed

#

You gotta be joking rebel

low summit Apr 17, 2021, 9:57 PM

#

No

zealous bridge Apr 17, 2021, 9:57 PM

#

as long as we can get seputil we can run arbitrary sepos

stiff hazel Apr 17, 2021, 9:57 PM

#

@zinc moon try DFU restore to latest, then jailbreak (prob. w/ checkra1n) use divise to tether downgrade to 14.3, then make a custom profile that allows you to update to 14.4

zealous bridge Apr 17, 2021, 9:57 PM

#

pretty sure

low summit Apr 17, 2021, 9:57 PM

#

Blackbird is a thing

#

And Checkm8

stiff hazel Apr 17, 2021, 9:57 PM

#

@zealous bridge see we can load SEP, we just can't load any SEP

zinc moon Apr 17, 2021, 9:58 PM

#

stiff hazel <@298765872317595648> try DFU restore to latest, then jailbreak (prob. w/ checkr...

No ios 14 version works with divise and I’ve done all the above

#

With iOS 13.7

stiff hazel Apr 17, 2021, 9:58 PM

#

oh

zinc moon Apr 17, 2021, 9:58 PM

#

Or atleast tried to

low summit Apr 17, 2021, 9:58 PM

#

They downgraded bb before why can't we downgrade sep

zinc moon Apr 17, 2021, 9:58 PM

#

If you can locate for me where IPSWs are stored for divise

stiff hazel Apr 17, 2021, 9:58 PM

#

then I guess we try to somehow replicate Succession downgrades?

zinc moon Apr 17, 2021, 9:58 PM

#

I’ll get an iOS 14 one

zealous bridge Apr 17, 2021, 9:58 PM

#

nah im saying if we can pwn a10 sep with blackbird and get seputil to keep clearing the sepnonce we can eventually get an interface with the arbitrary depos

#

at least i think thats how it works

zinc moon Apr 17, 2021, 9:58 PM

#

stiff hazel then I guess we try to somehow replicate Succession downgrades?

This is our first, and most confusing roadblock

zealous bridge Apr 17, 2021, 9:59 PM

#

tbh

stiff hazel Apr 17, 2021, 9:59 PM

#

If we can get this working we can try everything else needed

zinc moon Apr 17, 2021, 9:59 PM

#

do succession downgrades even work and exist?

stiff hazel Apr 17, 2021, 9:59 PM

#

@zinc moon well @sacred estuary did it

zealous bridge Apr 17, 2021, 9:59 PM

#

why dont just wait for futurerestore to update

#

pwndfu

low summit Apr 17, 2021, 9:59 PM

#

If we could somehow downgrade sep with blackbird and Checkm8 everything would be solved

zinc moon Apr 17, 2021, 9:59 PM

#

stiff hazel <@298765872317595648> well <@257068520284618752> did it

Jit tripping

stiff hazel Apr 17, 2021, 9:59 PM

#

zinc moon Jit tripping

huh

zinc moon Apr 17, 2021, 9:59 PM

#

Ok so

zealous bridge Apr 17, 2021, 10:00 PM

#

stiff hazel <@298765872317595648> well <@257068520284618752> did it

what device does sloopie have again

zinc moon Apr 17, 2021, 10:00 PM

#

Do I just insert an IPSW

#

And spoof iOS

stiff hazel Apr 17, 2021, 10:00 PM

#

Think it was A10 or something

#

I can check in Sileo server

zinc moon Apr 17, 2021, 10:00 PM

#

blurry_eyes

low summit Apr 17, 2021, 10:00 PM

#

So iphone 7?

lilac wren Apr 17, 2021, 10:00 PM

#

stiff hazel then I guess we try to somehow replicate Succession downgrades?

why can't we just use divisé like a normal person lol

zealous bridge Apr 17, 2021, 10:00 PM

#

Nah iphone 17

zinc moon Apr 17, 2021, 10:00 PM

#

lilac wren why can't we just use divisé like a normal person lol

We’ll see

zealous bridge Apr 17, 2021, 10:00 PM

#

lilac wren why can't we just use divisé like a normal person lol

Froggy carrying divise just like he carried frgui

zinc moon Apr 17, 2021, 10:00 PM

#

It’s 1am and I really want to sleep

#

But this convo is too interesting

low summit Apr 17, 2021, 10:01 PM

#

We need some proof with this succession shit

zinc moon Apr 17, 2021, 10:01 PM

#

I’m just thinking of how I’d boot the device

zinc moon Apr 17, 2021, 10:01 PM

#

low summit We need some proof with this succession shit

True

low summit Apr 17, 2021, 10:01 PM

#

Or replicate

zinc moon Apr 17, 2021, 10:01 PM

#

Is the location for succession IPSWs /media/succession?

#

Or is that a DMG

zealous bridge Apr 17, 2021, 10:02 PM

#

ipsw i think

zinc moon Apr 17, 2021, 10:02 PM

#

I’ll check with filza

zealous bridge Apr 17, 2021, 10:02 PM

#

lemme check

low summit Apr 17, 2021, 10:02 PM

#

Tanbeer is there no way to downgrade sep even with checkm8 and blackbird?

zealous bridge Apr 17, 2021, 10:02 PM

#

/var/mobile/Media/Succession/ipsw.ipsw @zinc moon

zealous bridge Apr 17, 2021, 10:02 PM

#

low summit Tanbeer is there no way to downgrade sep even with checkm8 and blackbird?

idk, someone needs to test that

zinc moon Apr 17, 2021, 10:02 PM

#

I think divise stores it there, in that case

zealous bridge Apr 17, 2021, 10:03 PM

#

i have a pretty good picture of how it could be done

lilac wren Apr 17, 2021, 10:03 PM

#

Divisé is a fork of succession :P

zealous bridge Apr 17, 2021, 10:03 PM

#

but idk knowing our luck

#

froggy stop carrying divisé

low summit Apr 17, 2021, 10:03 PM

#

What does ipwndfu do? Keeps current sep while downgrade?

zinc moon Apr 17, 2021, 10:03 PM

#

If we get all this bullshit to work

#

What would we prove

stiff hazel Apr 17, 2021, 10:03 PM

#

@low summit you can load arbitrary SEP on A8/A9 w/ blackbird

zealous bridge Apr 17, 2021, 10:03 PM

#

no it exploits dfu with checkm8 so you have arbitrary code execution

low summit Apr 17, 2021, 10:03 PM

#

stiff hazel <@417143696467951616> you can load arbitrary SEP on A8/A9 w/ blackbird

What about a10?

zealous bridge Apr 17, 2021, 10:04 PM

#

i really wanna load pongoos somehow

#

and just pwn that way

zinc moon Apr 17, 2021, 10:04 PM

#

I found the DMG where divise is stored

zealous bridge Apr 17, 2021, 10:04 PM

#

But only A10

stiff hazel Apr 17, 2021, 10:04 PM

#

Fuck gotta go find the message again as I accidentally copy pasted the text of the message and not the message itself

#

zealous bridge Apr 17, 2021, 10:04 PM

#

or t8010

lilac wren Apr 17, 2021, 10:04 PM

#

zealous bridge froggy stop carrying divisé

It's literally succession just made for downgrading, I will keep carrying it bc it's literally what we should be using lol. It's like using a bucket to water plants when we have a watering can

low summit Apr 17, 2021, 10:04 PM

#

Froggy loves divise

zealous bridge Apr 17, 2021, 10:04 PM

#

woah shiver me timbers

low summit Apr 17, 2021, 10:04 PM

#

He's obsessed

zealous bridge Apr 17, 2021, 10:04 PM

#

Someone’s passionate

stiff hazel Apr 17, 2021, 10:04 PM

#

@lilac wren well I mean @zinc moon has issues with Divise

zinc moon Apr 17, 2021, 10:04 PM

#

Sometimes a watering can is what you should try in case of a broken bucket

low summit Apr 17, 2021, 10:04 PM

#

Succession probably is better

#

At least someone got it to boot

zinc moon Apr 17, 2021, 10:05 PM

#

Since I already have the DMG of iOS 13.7 should I try to get it to work with succession

#

Although the laptop isn’t w me

zealous bridge Apr 17, 2021, 10:05 PM

#

@stiff hazel also whos making the exploit for A8/A9 cause that shit aint public yet

#

Only the vuln is

lilac wren Apr 17, 2021, 10:05 PM

#

stiff hazel <@353561670934855681> well I mean <@298765872317595648> has issues with Divise

no he has issues with PyBoot because his cable is broken

stiff hazel Apr 17, 2021, 10:05 PM

#

@zealous bridge isn't blackbird public?

low summit Apr 17, 2021, 10:05 PM

#

@zinc moon what ur 8 on again?

lilac wren Apr 17, 2021, 10:05 PM

#

Divisé does its job perfectly

zealous bridge Apr 17, 2021, 10:05 PM

#

t8010’s exploit is open source in pongoos

zealous bridge Apr 17, 2021, 10:05 PM

#

stiff hazel <@330016421817876490> isn't blackbird public?

the vuln is

#

not the exploit afaik

zinc moon Apr 17, 2021, 10:06 PM

#

low summit <@298765872317595648> what ur 8 on again?

14.4

#

LOL

low summit Apr 17, 2021, 10:06 PM

#

Blackbird supports a10 or no?

zealous bridge Apr 17, 2021, 10:06 PM

#

you can check pongoOS but according to github issues its a10 only

stiff hazel Apr 17, 2021, 10:06 PM

#

@lilac wren his cable is fine probably

zinc moon Apr 17, 2021, 10:06 PM

#

It is

low summit Apr 17, 2021, 10:06 PM

#

His shit is fine

#

It's divise problem

lilac wren Apr 17, 2021, 10:06 PM

#

fine go ahead

#

let me just copy this chat link

low summit Apr 17, 2021, 10:06 PM

#

Lol

zealous bridge Apr 17, 2021, 10:06 PM

#

Guys you’re making froggy cry ):

low summit Apr 17, 2021, 10:06 PM

#

Froggy

stiff hazel Apr 17, 2021, 10:06 PM

#

#554064188243181581 message feel free to scroll 36373822 messages or so I'm not in the mood to go through 2 billion messages

low summit Apr 17, 2021, 10:07 PM

#

Mb

#

Lght fine froggy I'll test divise lol

stiff hazel Apr 17, 2021, 10:07 PM

#

It's a long fucking conversation so like

zinc moon Apr 17, 2021, 10:07 PM

#

I wish the laptop is with me

#

Becuase succession can restore and try it rn

stiff hazel Apr 17, 2021, 10:07 PM

#

@zinc moon didn't your mother or father destroy it?

zinc moon Apr 17, 2021, 10:08 PM

#

Laptop?

low summit Apr 17, 2021, 10:08 PM

#

Nah

zinc moon Apr 17, 2021, 10:08 PM

#

No

stiff hazel Apr 17, 2021, 10:08 PM

#

oh

low summit Apr 17, 2021, 10:08 PM

#

That's his ipad

zinc moon Apr 17, 2021, 10:08 PM

#

My mom never has her stuff touched

#

lol

stiff hazel Apr 17, 2021, 10:08 PM

#

Didn't they also destroy a laptop or were you not the one who sent that image of a broken MBP?

zinc moon Apr 17, 2021, 10:08 PM

#

That old ass Lenovo laptop

#

It was kinda shared

#

Yes they destroyed it

zealous bridge Apr 17, 2021, 10:09 PM

#

#554064188243181581 message

low summit Apr 17, 2021, 10:09 PM

#

I'm scared of ur dad's destructive powers

zealous bridge Apr 17, 2021, 10:09 PM

#

after this they bootlooped and used checkra1n cli

low summit Apr 17, 2021, 10:09 PM

#

Tanbeer still got my rant on Ota not working?

zinc moon Apr 17, 2021, 10:09 PM

#

@lilac wren is anything needed to boot up succession

zinc moon Apr 17, 2021, 10:09 PM

#

zealous bridge after this they bootlooped and used checkra1n cli

skinnerletter

zealous bridge Apr 17, 2021, 10:09 PM

#

which i didnt know could get you out of a bootloop before so maybe that could work

zinc moon Apr 17, 2021, 10:09 PM

#

zealous bridge which i didnt know could get you out of a bootloop before so maybe that could wo...

Go into DFU

#

And restore

#

I’ve done it like 10 times with this 7

zealous bridge Apr 17, 2021, 10:10 PM

#

low summit Tanbeer still got my rant on Ota not working?

lol from: phonerebel666 ota is all you need

lilac wren Apr 17, 2021, 10:10 PM

#

zinc moon <@!353561670934855681> is anything needed to boot up succession

open the app

zinc moon Apr 17, 2021, 10:10 PM

#

Over the past week

zealous bridge Apr 17, 2021, 10:10 PM

#

zinc moon Go into DFU

go into dfu and use checkra1n cli

zinc moon Apr 17, 2021, 10:10 PM

#

lilac wren open the app

I meant like Pyboot or anything

zealous bridge Apr 17, 2021, 10:10 PM

#

thats what you need to do

#

idk why i said successioncli

low summit Apr 17, 2021, 10:10 PM

#

@lilac wren I gotchu with divise lol. I'll test tmr

stiff hazel Apr 17, 2021, 10:10 PM

#

zealous bridge after this they bootlooped and used checkra1n cli

Don't think they bootlooped, think they successfully did it

lilac wren Apr 17, 2021, 10:10 PM

#

zinc moon I meant like Pyboot or anything

anything that bypasses sig checks, checkra1n will jailbreak you but pyboot should just use the exploit to boot

zinc moon Apr 17, 2021, 10:10 PM

#

zealous bridge go into dfu and use checkra1n cli

ok

zealous bridge Apr 17, 2021, 10:10 PM

#

stiff hazel Don't think they bootlooped, think they successfully did it

they did

#

#554064188243181581 message

zinc moon Apr 17, 2021, 10:10 PM

#

It’s doing it rn

zealous bridge Apr 17, 2021, 10:11 PM

#

they got out of the bootloop with checkra1n somehow

zinc moon Apr 17, 2021, 10:11 PM

#

zealous bridge they got out of the bootloop with checkra1n somehow

WHAT

#

skinnerletter

zealous bridge Apr 17, 2021, 10:11 PM

#

zinc moon Apr 17, 2021, 10:11 PM

#

succession is doing it’s thing and the laptop isn’t even w me

stiff hazel Apr 17, 2021, 10:11 PM

#

wouldn't it bootloop if it's tethered or shit?

lilac wren Apr 17, 2021, 10:11 PM

#

zealous bridge

and now using a bulldozer to move a pebble -_-

zinc moon Apr 17, 2021, 10:12 PM

#

stiff hazel wouldn't it bootloop if it's tethered or shit?

It should on the first try

#

But then

#

You boot it up

stiff hazel Apr 17, 2021, 10:12 PM

#

you boot it using checkra1n

zinc moon Apr 17, 2021, 10:12 PM

#

Checkra1n CLI, ramiel, pyboot

stiff hazel Apr 17, 2021, 10:12 PM

#

well they used checkra1n and that worked

zinc moon Apr 17, 2021, 10:12 PM

#

Didn’t for me

#

Sigh

stiff hazel Apr 17, 2021, 10:12 PM

#

well remember you tried divise instead of Succession

zealous bridge Apr 17, 2021, 10:12 PM

#

stiff hazel well they used checkra1n and that worked

nvm it didnt

stiff hazel Apr 17, 2021, 10:13 PM

#

And Succession is pretty shit

zealous bridge Apr 17, 2021, 10:13 PM

#

they still bootlooped after the ota

zinc moon Apr 17, 2021, 10:13 PM

#

truetrue

stiff hazel Apr 17, 2021, 10:13 PM

#

zealous bridge they still bootlooped after the ota

thonk

zinc moon Apr 17, 2021, 10:13 PM

#

zealous bridge they still bootlooped after the ota

LOL

#

Restoring succeeded

#

Rebuilding icon cache

zealous bridge Apr 17, 2021, 10:14 PM

#

@stiff hazel they didnt even succeed in the end lmao

zinc moon Apr 17, 2021, 10:14 PM

#

When I wake up in the morning I’ll restart it

#

And try check CLI

zealous bridge Apr 17, 2021, 10:14 PM

#

They just managed to save usable 14.3 OTA blobs

zinc moon Apr 17, 2021, 10:14 PM

#

zealous bridge They just managed to save usable 14.3 OTA blobs

WHAT

zealous bridge Apr 17, 2021, 10:15 PM

#

Yeah no i can’t find where they were successful and i sifted thru the whole thing

lilac wren Apr 17, 2021, 10:15 PM

#

zealous bridge They just managed to save usable 14.3 OTA blobs

OTA blobs though?

zealous bridge Apr 17, 2021, 10:15 PM

#

The PoC doesnt even exist

zealous bridge Apr 17, 2021, 10:15 PM

#

lilac wren OTA blobs though?

I believe i did say ota blobs

lilac wren Apr 17, 2021, 10:15 PM

#

zealous bridge Yeah no i can’t find where they were successful and i sifted thru the whole thin...

it's signed...

lilac wren Apr 17, 2021, 10:15 PM

#

zealous bridge I believe i did say ota blobs

oh I am blind

zinc moon Apr 17, 2021, 10:15 PM

#

sexmonkeypng

zealous bridge Apr 17, 2021, 10:15 PM

#

lilac wren it's signed...

wdym

zinc moon Apr 17, 2021, 10:15 PM

#

They managed to go to ios 14.3?

zealous bridge Apr 17, 2021, 10:16 PM

#

yeah but they bootlooped after rebooting it onc

#

@lilac wren yeah i know they just saved the tss response

zinc moon Apr 17, 2021, 10:16 PM

#

If they got the OTA blob that’s all that matters

lilac wren Apr 17, 2021, 10:16 PM

#

zealous bridge wdym

meant to reply to Dabezt's "WHAT"

zealous bridge Apr 17, 2021, 10:16 PM

#

and added managed and bcert

#

oh

zinc moon Apr 17, 2021, 10:16 PM

#

lilac wren meant to reply to Dabezt's "WHAT"

Signed?

#

As in, at the time?

lilac wren Apr 17, 2021, 10:17 PM

#

If a version is signed you can save blobs for it, not much of a surprise

zealous bridge Apr 17, 2021, 10:17 PM

#

It’s still signed

#

Lmao

zinc moon Apr 17, 2021, 10:17 PM

#

14.3?

zealous bridge Apr 17, 2021, 10:17 PM

#

yes

lilac wren Apr 17, 2021, 10:17 PM

#

yes lol

zinc moon Apr 17, 2021, 10:17 PM

#

Wdym

lilac wren Apr 17, 2021, 10:17 PM

#

how do you think people are updating there

zinc moon Apr 17, 2021, 10:17 PM

#

It’s signed

#

OH

zealous bridge Apr 17, 2021, 10:17 PM

#

I have 14.3 ota blobs too

zinc moon Apr 17, 2021, 10:18 PM

#

The OTA thing

#

what if I succession into iOS 14.3 then

stiff hazel Apr 17, 2021, 10:18 PM

#

yep I'm legally a dumbass

#

wait they saved ota blobs

zinc moon Apr 17, 2021, 10:18 PM

#

stiff hazel yep I'm legally a dumbass

What did you find out now

royal flint Apr 17, 2021, 10:18 PM

#

what did I miss

zealous bridge Apr 17, 2021, 10:18 PM

#

that sloopie wasnt successful

#

yeah ota blobs

stiff hazel Apr 17, 2021, 10:19 PM

#

@zinc moon that the PoC didn't work but they saved blobs

royal flint Apr 17, 2021, 10:19 PM

#

did we find a solution for going to iOS 16

zealous bridge Apr 17, 2021, 10:19 PM

#

yes

royal flint Apr 17, 2021, 10:19 PM

#

nice

zinc moon Apr 17, 2021, 10:19 PM

#

@zealous bridge I’m confused

zealous bridge Apr 17, 2021, 10:19 PM

#

we hack samsung smart fridge and sniff private key

zinc moon Apr 17, 2021, 10:19 PM

#

You saved ios 14.3 is signed but only under the current situation so

#

said*

#

You meant systeminfo?

stiff hazel Apr 17, 2021, 10:19 PM

#

Well it's still a valid OTA blob

zealous bridge Apr 17, 2021, 10:19 PM

#

what

#

14.3 is only signed OTA

stiff hazel Apr 17, 2021, 10:20 PM

#

So we can use OTA blobs on A10- right?

zealous bridge Apr 17, 2021, 10:20 PM

#

stiff hazel Well it's still a valid OTA blob

gl using it

zinc moon Apr 17, 2021, 10:20 PM

#

zealous bridge 14.3 is only signed OTA

What??

lilac wren Apr 17, 2021, 10:20 PM

#

Didn't Cryptic just try fixing this

zealous bridge Apr 17, 2021, 10:20 PM

#

futurerestore pwndfu is so broken right now

#

try being the key word

stiff hazel Apr 17, 2021, 10:20 PM

#

@zealous bridge what about eta wen fix

zealous bridge Apr 17, 2021, 10:20 PM

#

there was one a couple days ago

#

but fdr has plagued us

#

and dabezt couldnt even send valid ibss and ibec

#

nyu managed to go pretty far tho

stiff hazel Apr 17, 2021, 10:21 PM

#

what about onboard OTA's? Wouldn't work with the theory but it exists

zinc moon Apr 17, 2021, 10:22 PM

#

zealous bridge and dabezt couldnt even send valid ibss and ibec

Cryptic got that error too

zealous bridge Apr 17, 2021, 10:22 PM

#

sure if you’re one the version

stiff hazel Apr 17, 2021, 10:22 PM

#

!t onboardblobs

mystic axleBOT Apr 17, 2021, 10:22 PM

#

stiff hazel !t onboardblobs

onboardblobs

If you are jailbroken, you can save blobs for the version you're currently on, even if it's unsigned. These are called onboard blobs. Note that saving apticket.der is not enough because it doesn't contain a generator. To save them properly, install System Info from https://apt.arx8x.net/, go to Settings -> General -> About, swipe left on the ECID cell and press APTicket. (Other tools to dump onboard blobs include Deverser and SHSHDump).

Note that the type blobs this saves depends on how you got to the current iOS version.

IPSW Restore: These blobs can be used as normal, but you cannot use the -u option in futurerestore.
IPSW Update: These blobs only work with the -u option.
OTA Update: These blobs require --use-pwndfu and are only usable on A11 and lower.

To check what type of blobs you have, use img4tool. Download the IPSW and OTA zip from https://ipsw.me/, extract the BuildManifest.plist from both, then do img4tool -v IPSW_BuildManifest.plist -s blob.shsh2 and img4tool -v OTA_BuildManifest.plist -s blob.shsh2, and check which one says valid.

lilac wren Apr 17, 2021, 10:22 PM

#

stiff hazel what about onboard OTA's? Wouldn't work with the theory but it exists

isn't that what Sloopie saved

zealous bridge Apr 17, 2021, 10:22 PM

#

no

stiff hazel Apr 17, 2021, 10:22 PM

#

@lilac wren sloopie I think saved normal OTA's

lilac wren Apr 17, 2021, 10:22 PM

#

oh they just got tss

zealous bridge Apr 17, 2021, 10:22 PM

#

they saved the tss response

zinc moon Apr 17, 2021, 10:24 PM

#

trolldisappointed

stiff hazel Apr 17, 2021, 10:25 PM

#

@lilac wren @zealous bridge so basically it kinda works if we can get OTA blobs to fucking work

zealous bridge Apr 17, 2021, 10:26 PM

#

Maybe

lilac wren Apr 17, 2021, 10:26 PM

#

why doesn't it boot untethered after OTA

stiff hazel Apr 17, 2021, 10:26 PM

#

great question

lilac wren Apr 17, 2021, 10:27 PM

#

lol

zinc moon Apr 17, 2021, 10:27 PM

#

lilac wren why doesn't it boot untethered after OTA

This right here is a million dollar question

#

If there’s anyone who got a divise downgrade to work here

stiff hazel Apr 17, 2021, 10:27 PM

#

@royal flint might have answers

zinc moon Apr 17, 2021, 10:27 PM

#

Can they OTA

royal flint Apr 17, 2021, 10:27 PM

#

hi

#

what is question

stiff hazel Apr 17, 2021, 10:27 PM

#

@royal flint hi see above

royal flint Apr 17, 2021, 10:28 PM

#

you can't downgrade because SEP too high

stiff hazel Apr 17, 2021, 10:28 PM

#

We're aware

zealous bridge Apr 17, 2021, 10:28 PM

#

lilac wren why doesn't it boot untethered after OTA

because while tether downgrading ig it patched a lot of stuff and ota being ota didnt unpatch it and everything just got fucked

royal flint Apr 17, 2021, 10:28 PM

#

stiff hazel We're aware

sorry link question then

lilac wren Apr 17, 2021, 10:28 PM

#

zealous bridge because while tether downgrading ig it patched a lot of stuff and ota being ota ...

but it's signed now

#

so why wouldn't it boot

stiff hazel Apr 17, 2021, 10:28 PM

#

lilac wren why doesn't it boot untethered after OTA

@royal flint

zealous bridge Apr 17, 2021, 10:28 PM

#

it’s not about whether its signed or not

#

on device some iboot checks were patched

#

and ota naturally doesnt touch that

lilac wren Apr 17, 2021, 10:29 PM

#

but you're not using the patches anymore if you boot without checkm8?

royal flint Apr 17, 2021, 10:29 PM

#

stiff hazel <@218455673581600770>

i have no clue, i have yet to actually do anything with blobs lol

zealous bridge Apr 17, 2021, 10:29 PM

#

yeah

lilac wren Apr 17, 2021, 10:29 PM

#

does OTA not update iBoot?

zealous bridge Apr 17, 2021, 10:29 PM

#

they’re probably tailored to the version it’s booting

zealous bridge Apr 17, 2021, 10:29 PM

#

lilac wren does OTA not update iBoot?

no lol

stiff hazel Apr 17, 2021, 10:29 PM

#

@royal flint tether downgrading doesn't involve blobs so

zealous bridge Apr 17, 2021, 10:30 PM

#

iboot isnt in rom

stiff hazel Apr 17, 2021, 10:30 PM

#

@royal flint what did you say

#

royal flint Apr 17, 2021, 10:30 PM

#

brug

stiff hazel Apr 17, 2021, 10:30 PM

#

just dm me it

zealous bridge Apr 17, 2021, 10:30 PM

#

They said

royal flint Apr 17, 2021, 10:30 PM

#

sure

#

and then iBoot

zealous bridge Apr 17, 2021, 10:30 PM

#

holy shit

royal flint Apr 17, 2021, 10:30 PM

#

Lmfao

zealous bridge Apr 17, 2021, 10:30 PM

#

REI HAHAHAH

#

LMFAOO

zinc moon Apr 17, 2021, 10:30 PM

#

What the fuck

#

Was that

zealous bridge Apr 17, 2021, 10:31 PM

#

thats jokesss

royal flint Apr 17, 2021, 10:31 PM

#

anyways iBoot is on ROM I think

zealous bridge Apr 17, 2021, 10:31 PM

#

it isn’t

#

bootrom and iboot arent the same thing

royal flint Apr 17, 2021, 10:31 PM

#

guess I'm wrong

zealous bridge Apr 17, 2021, 10:31 PM

#

bootrom verifies iboot

lilac wren Apr 17, 2021, 10:31 PM

#

zealous bridge iboot isnt in rom

yes but when downgrading with divise or succession, you're using an unsigned iboot, but you're saying the OTA doesn't update it or sign it like an iTunes / Succession would?

zealous bridge Apr 17, 2021, 10:31 PM

#

but iboot is just the bootloader

royal flint Apr 17, 2021, 10:31 PM

#

essentially second stage of boot then, I see

zealous bridge Apr 17, 2021, 10:31 PM

#

lilac wren yes but when downgrading with divise or succession, you're using an unsigned ibo...

i dont think tether downgrading downgrades iboot either

#

just patches it so it doesnt check the firmware

royal flint Apr 17, 2021, 10:32 PM

#

yea idfk about downgrades lol, my jailbreaking knowledge is pretty limited
i haven't really explored it

zealous bridge Apr 17, 2021, 10:32 PM

#

and after ota the patches remain

stiff hazel Apr 17, 2021, 10:32 PM

#

@red sleet can I ask what message sent got filtered from both @zealous bridge and @royal flint as well as why

zinc moon Apr 17, 2021, 10:32 PM

#

Tanbeer

#

Give us a summary

#

If that’s okay

zealous bridge Apr 17, 2021, 10:32 PM

#

stiff hazel <@275353479701069825> can I ask what message sent got filtered from both <@33001...

Basically

#

We said

lilac wren Apr 17, 2021, 10:32 PM

#

zealous bridge i dont think tether downgrading downgrades iboot either

ah so in a tethered downgrade iBoot refuses to boot the firmware unless checkm8 patches?

zealous bridge Apr 17, 2021, 10:32 PM

#

Well dhinak said

#

And i tried to recreate

#

“I’m pretty certain iBoot is in ROM”

royal flint Apr 17, 2021, 10:33 PM

#

stiff hazel <@275353479701069825> can I ask what message sent got filtered from both <@33001...

if you remove the space between sure and iboot a substring matches one of those junk software stuff

red sleet Apr 17, 2021, 10:33 PM

#

#

this?

zealous bridge Apr 17, 2021, 10:33 PM

#

yes

stiff hazel Apr 17, 2021, 10:33 PM

#

red sleet

HOW

zealous bridge Apr 17, 2021, 10:33 PM

#

the two letters at the end of sure

#

and iboot

#

=

#

banned

zealous bridge Apr 17, 2021, 10:33 PM

#

lilac wren ah so in a tethered downgrade iBoot refuses to boot the firmware unless checkm8 ...

yes

#

Essentially

red sleet Apr 17, 2021, 10:34 PM

#

wait so you can't say "sure iboot"

#

sus

royal flint Apr 17, 2021, 10:34 PM

#

yea

zealous bridge Apr 17, 2021, 10:34 PM

#

Nope

lilac wren Apr 17, 2021, 10:34 PM

#

zealous bridge and after ota the patches remain

checkm8 temporarily patches iboot though? otherwise it wouldn't boot normally when untethered

#

wow

zealous bridge Apr 17, 2021, 10:34 PM

#

Lmfaooo

royal flint Apr 17, 2021, 10:34 PM

#

lmao

zinc moon Apr 17, 2021, 10:34 PM

#

what’s this oppression

red sleet Apr 17, 2021, 10:34 PM

#

lmao what

zinc moon Apr 17, 2021, 10:34 PM

#

Wait

#

iboot

#

ok so that’s not filtered

lilac wren Apr 17, 2021, 10:34 PM

#

guys stop with the hate speech >.>

zealous bridge Apr 17, 2021, 10:35 PM

#

lilac wren checkm8 temporarily patches iboot though? otherwise it wouldn't boot normally wh...

It patches it temporarily yes so you can still load an unpwned kernel

lilac wren Apr 17, 2021, 10:35 PM

#

then wdym the "patches remain"

#

like iBoot is still the patched one?

zealous bridge Apr 17, 2021, 10:35 PM

#

tethered i’m guessing patches it more permanently

stiff hazel Apr 17, 2021, 10:35 PM

#

red sleet lmao what

harass GIR I guess

zealous bridge Apr 17, 2021, 10:35 PM

#

due to the nature of checkm8

red sleet Apr 17, 2021, 10:35 PM

#

i'm checking the filter list

#

KEKW

zealous bridge Apr 17, 2021, 10:36 PM

#

since ota won’t touch iboot while its upgrading iboot will try to verify a genuine os thats installed

#

but remember thats been patched

red sleet Apr 17, 2021, 10:36 PM

#

probably a piracy tool

zealous bridge Apr 17, 2021, 10:37 PM

#

i dont think its piracy but just dogshit

stiff hazel Apr 17, 2021, 10:37 PM

#

Think it's either a piracy tool or a bypass tool

zealous bridge Apr 17, 2021, 10:37 PM

#

lemme check

royal flint Apr 17, 2021, 10:37 PM

#

probably dogshit

zealous bridge Apr 17, 2021, 10:37 PM

#

@low summit

#

woah

#

lmfao

#

you can fix it but at what cost?

stiff hazel Apr 17, 2021, 10:38 PM

#

zealous bridge you can fix it but at what cost?

$9999.99

royal flint Apr 17, 2021, 10:38 PM

#

Shipping and handling not included

red sleet Apr 17, 2021, 10:39 PM

#

KEKW

zealous bridge Apr 17, 2021, 10:40 PM

#

@lilac wren
normal iboot:
bootrom > iboot > userland or whatever
patched iboot: bootrom > patched iboot > custom userland
in a patched iboot, it will refuse to verify anything unless it’s exploited with checkm8 in order to prevent bootloops
because ota does not touch iboot, it still refuses to boot even when a genuine os is installed

lilac wren Apr 17, 2021, 10:40 PM

#

yeah so why is iboot still patched after ota

zealous bridge Apr 17, 2021, 10:40 PM

#

because its not being checkm8ted

lilac wren Apr 17, 2021, 10:40 PM

#

when you force reboot with checkra1n iboot isn't patched permanently

#

so why do you think ota has it still patched

zealous bridge Apr 17, 2021, 10:40 PM

#

tether downgrading and checkra1n is different

#

because iboot is a step above ota

#

or whatever ota updates

lilac wren Apr 17, 2021, 10:41 PM

#

so you're saying succession places a patched iboot there?

zealous bridge Apr 17, 2021, 10:41 PM

#

ig it bypasses some sort of sigcheck

lilac wren Apr 17, 2021, 10:41 PM

#

nah

zealous bridge Apr 17, 2021, 10:42 PM

#

or at least when its booted

lilac wren Apr 17, 2021, 10:42 PM

#

succession is for just cleaning files, does not touch anything to patch it

#

remember it's not even meant for downgrades

zealous bridge Apr 17, 2021, 10:42 PM

#

yeah maybe the os is installed with succession but when it’s booted the patches are applied

#

since you can’t boot it without checkm8

lilac wren Apr 17, 2021, 10:43 PM

#

so if the patches are applied when booted with checkm8 lol how come they don't persist on hard reboot but only on ota update? it doesn't really make sense

zealous bridge Apr 17, 2021, 10:44 PM

#

because checkra1n is just vanilla checkra1n with a temporary patched iboot (tbh it might not even be patched since checkm8 is a tethered exploit anyway)

#

When you boot with ipwndfu (which is checkm8 but with added steps) it’ll add more permanent patches to iboot

#

bypassing sigcheck and whatnot

#

thats not required for a jailbreak

lilac wren Apr 17, 2021, 10:44 PM

#

zealous bridge thats not required for a jailbreak

you do need patched iboot for a jailbreak

dull swallow Apr 17, 2021, 10:45 PM

#

zealous bridge because checkra1n is just vanilla checkra1n with a temporary patched iboot (tbh ...

it is patched

zealous bridge Apr 17, 2021, 10:45 PM

#

sorry i meant bypassed firmware sigchecks*

#

not just userland checks

#

think about it why would you need to bother bypassing TSS for a normal boot to your current version?

lilac wren Apr 17, 2021, 10:46 PM

#

TSS is never contacted on boot

zealous bridge Apr 17, 2021, 10:46 PM

#

exactly

#

So you don’t need to bypass it

molten glacier Apr 17, 2021, 10:46 PM

#

So since i have 12 Pro Max, (A14) i can't downgrade my phone at all? 14.4.2 wanting to go back to 14.3

lilac wren Apr 17, 2021, 10:46 PM

#

you never bypass tss except if you're trying to FutureRestore to an unsigned version

dull swallow Apr 17, 2021, 10:46 PM

#

nfr

zealous bridge Apr 17, 2021, 10:47 PM

#

lilac wren you never bypass tss except if you're trying to FutureRestore to an unsigned ver...

you bypass tss with tethered downgrades too technically

lilac wren Apr 17, 2021, 10:47 PM

#

then you're not really bypassing tss just not touching it

zealous bridge Apr 17, 2021, 10:47 PM

#

Since you’re also loading unsigned firmware

dull swallow Apr 17, 2021, 10:48 PM

#

lilac wren you never bypass tss except if you're trying to FutureRestore to an unsigned ver...

even then that’s technically not a bypass since you still need blobs from the tss server

lilac wren Apr 17, 2021, 10:49 PM

#

zealous bridge you bypass tss with tethered downgrades too technically

I mean sure, you're not really bypassing TSS though if you just choose to not sign it

valid adder Apr 17, 2021, 10:49 PM

#

Saying tss server is redundant

lilac wren Apr 17, 2021, 10:49 PM

#

tatsu signing server server

valid adder Apr 17, 2021, 10:49 PM

#

Lol

#

Exactly

zealous bridge Apr 17, 2021, 10:49 PM

#

lilac wren I mean sure, you're not really bypassing TSS though if you just choose to not si...

Yeah i just meant by definition

dull swallow Apr 17, 2021, 10:50 PM

#

valid adder Saying tss server is redundant

nah real people use Apple Internal signing server

lilac wren Apr 17, 2021, 10:50 PM

#

zealous bridge think about it why would you need to bother bypassing TSS for a normal boot to y...

you don't bypass TSS for an untethered boot either just for installing it ig

zealous bridge Apr 17, 2021, 10:50 PM

#

after a restore you don’t need tss

lilac wren Apr 17, 2021, 10:50 PM

#

exactly

zealous bridge Apr 17, 2021, 10:50 PM

#

iboot will act as the verification tool

#

which is why it needs to be patched

dull swallow Apr 17, 2021, 10:51 PM

#

you do technically still need some sort of blob

lilac wren Apr 17, 2021, 10:51 PM

#

yeah

zealous bridge Apr 17, 2021, 10:51 PM

#

which is also why i said if you bypass iboot you’re also bypassing tss technically 😎

lilac wren Apr 17, 2021, 10:51 PM

#

zealous bridge which is why it needs to be patched

but not permanently, only when you want to boot it

dull swallow Apr 17, 2021, 10:51 PM

#

iBoot verifies the blob

zealous bridge Apr 17, 2021, 10:51 PM

#

lilac wren but not permanently, only when you want to boot it

if it’s the only os installed then yeah every time you boot you have to exploit

#

You only have to patch the first time

#

At least I think

lilac wren Apr 17, 2021, 10:52 PM

#

i feel like that's not how it works though

#

because think about dual boots

#

you can't permanently patch iboot if you want to boot into normal

dull swallow Apr 17, 2021, 10:52 PM

#

you can’t even exploit iBoot anymore if you are even thinking about that

lilac wren Apr 17, 2021, 10:52 PM

#

lol

zealous bridge Apr 17, 2021, 10:53 PM

#

wait

dull swallow Apr 17, 2021, 10:53 PM

#

you’d need a bootROM exploit

molten glacier Apr 17, 2021, 10:53 PM

#

So since i have 12 Pro Max, (A14) i can't downgrade my phone at all? 14.4.2 currently

zealous bridge Apr 17, 2021, 10:53 PM

#

so say if you dualbooted with divise

zealous bridge Apr 17, 2021, 10:53 PM

#

molten glacier So since i have 12 Pro Max, (A14) i can't downgrade my phone at all? 14.4.2 curr...

no

dull swallow Apr 17, 2021, 10:53 PM

#

molten glacier So since i have 12 Pro Max, (A14) i can't downgrade my phone at all? 14.4.2 curr...

you can’t

molten glacier Apr 17, 2021, 10:53 PM

#

okay cool just wanted to make sure

#

now i wait

valid adder Apr 17, 2021, 10:53 PM

#

Component -> img4 -> im4m -> component signature -> decrypted -> verifies hash matches

molten glacier Apr 17, 2021, 10:53 PM

#

woeis

zealous bridge Apr 17, 2021, 10:53 PM

#

and you boot into the dualbooted os with pyboot or whatever

lilac wren Apr 17, 2021, 10:53 PM

#

dull swallow you’d need a bootROM exploit

that is what we're using

zealous bridge Apr 17, 2021, 10:53 PM

#

can you hard reboot

#

and go back to the normal one

lilac wren Apr 17, 2021, 10:53 PM

#

zealous bridge can you hard reboot

yes, it will boot up normal signed one

zealous bridge Apr 17, 2021, 10:53 PM

#

are you sure

lilac wren Apr 17, 2021, 10:54 PM

#

yes

dull swallow Apr 17, 2021, 10:54 PM

#

lilac wren that is what we're using

it’ll only be tethered in the end

lilac wren Apr 17, 2021, 10:55 PM

#

dull swallow it’ll only be tethered in the end

Unless we update to a signed firmware though? That's what we're wondering

zealous bridge Apr 17, 2021, 10:55 PM

#

@lilac wren it uses different partitions

#

so it only needs to be patched for the specific partition maybe

dull swallow Apr 17, 2021, 10:56 PM

#

lilac wren Unless we update to a signed firmware though? That's what we're wondering

if it has some sort of blob that iBoot can verify then it will be untethered

lilac wren Apr 17, 2021, 10:56 PM

#

zealous bridge so it only needs to be patched for the specific partition maybe

Are you saying there's an iboot in each partition

lilac wren Apr 17, 2021, 10:56 PM

#

dull swallow if it has some sort of blob that iBoot can verify then it will be untethered

Unfortunately even though it's present it seems to still bootloop

zealous bridge Apr 17, 2021, 10:56 PM

#

No i’m just saying iboot being a bootloader can deal with different partitions

zealous bridge Apr 17, 2021, 10:57 PM

#

lilac wren Unfortunately even though it's present it seems to still bootloop

If we can remove iboot patches after we upgrade i think we can get it to not bootloop

lilac wren Apr 17, 2021, 10:57 PM

#

So if it gets patched permanently for the specific partition, wouldn't it fail the sig check from bootrom after normal reboot?

zealous bridge Apr 17, 2021, 10:58 PM

#

lilac wren So if it gets patched permanently for the specific partition, wouldn't it fail t...

If it gets patched it’ll only be when booting, so iboot can load up the main os fine

lilac wren Apr 17, 2021, 10:58 PM

#

zealous bridge If it gets patched it’ll only be when booting, so iboot can load up the main os ...

Only when booting through pyboot / Ramiel etc?

zealous bridge Apr 17, 2021, 10:59 PM

#

yeah

lilac wren Apr 17, 2021, 10:59 PM

#

So I'd assume the same for the tethered single

zealous bridge Apr 17, 2021, 10:59 PM

#

aka only when being ipwndfu’d

zealous bridge Apr 17, 2021, 11:00 PM

#

lilac wren So I'd assume the same for the tethered single

oh i see what you’re trying to say

#

yeah in that case idk why its not like that for tethered downgrades like it is for dualboots

lilac wren Apr 17, 2021, 11:00 PM

#

Yes I don't think it would ever be permanently patched

zealous bridge Apr 17, 2021, 11:01 PM

#

but then again the evidence is against you

lilac wren Apr 17, 2021, 11:01 PM

#

True

zealous bridge Apr 17, 2021, 11:01 PM

#

unless you can think of some other theory

lilac wren Apr 17, 2021, 11:01 PM

#

I just feel like it's another issue because this one doesn't make practical sense

zealous bridge Apr 17, 2021, 11:01 PM

#

but what else do tethered downgrades even touch?

lilac wren Apr 17, 2021, 11:01 PM

#

Is there a console for booting lol

zealous bridge Apr 17, 2021, 11:01 PM

#

we know thats the problem

#

pongoOS maybe

dull swallow Apr 17, 2021, 11:02 PM

#

you’d have to make your own pongoOS module

zealous bridge Apr 17, 2021, 11:02 PM

#

it’s open source anyway so not that hard

#

useless ones to us at least

#

do you have any theories as to why it started bootlooping after you ota’ed @sacred estuary

#

1st would be untrue since 14.3 is signed

lilac wren Apr 17, 2021, 11:10 PM

#

For 1, you updated through ota without bypassing anything which means it had to be signed right

zealous bridge Apr 17, 2021, 11:11 PM

#

no i’m talking about after the ota

lilac wren Apr 17, 2021, 11:11 PM

#

Yeah but we mean after the OTA update from tethered

zealous bridge Apr 17, 2021, 11:11 PM

#

that shouldve signed just fine

#

i don’t think it’s 3 since 14.3 sep should work with 14.3

#

I’m like 90% sure it’s smth to do with iBoot

#

Well ofc you can’t

#

succession wouldntve

#

but pyboot wouldve

#

or checkra1n (tethered)

lilac wren Apr 17, 2021, 11:13 PM

#

Do you think iboot is only good for 14.4.2/the version you were on before the downgrade?

#

And is iboot touched in succession or ota restores

zealous bridge Apr 17, 2021, 11:13 PM

#

what are ota restores lmfao

#

#

Here are the different ones

lilac wren Apr 17, 2021, 11:15 PM

#

So if succession doesn't touch iboot then it won't work from iboot to 14.2 right, then after OTA if that doesn't touch iboot you're still on 14.4.2 iboot trying to load 14.3

zealous bridge Apr 17, 2021, 11:16 PM

#

spoofing 14.3rc already works anywya

#

What would that prove

zealous bridge Apr 17, 2021, 11:17 PM

#

lilac wren So if succession doesn't touch iboot then it won't work from iboot to 14.2 right...

Succession definitely doesn’t touch iBoot

#

Actually thinking about it

#

doesn’t OTA have to upgrade iBoot too?

lilac wren Apr 17, 2021, 11:17 PM

#

Exactly

zealous bridge Apr 17, 2021, 11:17 PM

#

there’s so many different ones

celest basalt Apr 17, 2021, 11:17 PM

#

zealous bridge Succession definitely doesn’t touch iBoot

but it does touch your mom

zealous bridge Apr 17, 2021, 11:17 PM

#

oh god not you too

lilac wren Apr 17, 2021, 11:18 PM

#

celest basalt but it does touch your mom

Go away jtv

zealous bridge Apr 17, 2021, 11:18 PM

#

jtv started this cancer

#

blame it all on him

dull swallow Apr 17, 2021, 11:18 PM

#

yor mom

zealous bridge Apr 17, 2021, 11:19 PM

#

Oh hold on

#

Lemme guess

#

It can’t downgrade SEP

#

and it can’t downgrade iBoot either

#

wow

#

how useless is OTA

dull swallow Apr 17, 2021, 11:20 PM

#

probably can’t downgrade baseband either

celest basalt Apr 17, 2021, 11:20 PM

#

well, OTA isn't supposed to let you downgrade at all, but I'm pretty sure during a normal upgrade it does update those components

lilac wren Apr 17, 2021, 11:20 PM

#

Is there a checkm8 thing to just load custom iboot then?

zealous bridge Apr 17, 2021, 11:21 PM

#

you were kinda de facto

#

by patching it it’s not the same anymore

dull swallow Apr 17, 2021, 11:21 PM

#

lilac wren Is there a checkm8 thing to just load custom iboot then?

yeah it’s called PongoOS

zealous bridge Apr 17, 2021, 11:21 PM

#

which is why ota bugs out

dull swallow Apr 17, 2021, 11:21 PM

#

celest basalt Apr 17, 2021, 11:21 PM

#

I'm still annoyed at myself for ruining my perfect 14.3 but I know eventually it will be irrelevant if one of these happens:

FR pwndfu restores are fixed
new exploit is released for 14.4 and Taurine is updated
checkra1n team manages to get the SEP exploit working on A11 (this is the least likely option)

lilac wren Apr 17, 2021, 11:21 PM

#

Then let's just use pongoos to choose 14.2 iboot then ota

zealous bridge Apr 17, 2021, 11:22 PM

#

lilac wren Then let's just use pongoos to choose 14.2 iboot then ota

Still wouldnt work since you have to patch and ota will try and verify

#

and fail

#

Yeah because instead of iBoot iBEC was sent instead

#

wait that still doesnt make any sense

#

how did you even get it to verify then

#

or maybe it doesnt verify but it doesn’t know it can and just bootloops you

#

verify iboot

#

Yeah ig

celest basalt Apr 17, 2021, 11:24 PM

#

I'll probably always update to the highest jailbreakable version anyway (unless the only JB is checkra1n with no SEP)

zealous bridge Apr 17, 2021, 11:24 PM

#

celest basalt I'll probably always update to the highest jailbreakable version anyway (unless ...

How did you even end up restoring anyway? I know you said while trying to test out some theory but never got any exact details

#

Fair enough, but that begs the question

#

Why isn’t SEP checked in the update partition?

celest basalt Apr 17, 2021, 11:25 PM

#

zealous bridge How did you even end up restoring anyway? I know you said while trying to test o...

I just OTA updated from 14.3 to 14.4.2 and then tried spoofing systemversion but the 14.3 update failed to verify no matter what

zealous bridge Apr 17, 2021, 11:25 PM

#

oh wow

#

that was a stupid idea

#

especially on your main

celest basalt Apr 17, 2021, 11:26 PM

#

true but I mean the onboard blobs should work once FR gets fixed

#

like we know they're supposed to work now

#

just pwndfu is broken

zealous bridge Apr 17, 2021, 11:26 PM

#

@sacred estuary and why didn’t the restore error out in the middle once it failed to verify

celest basalt Apr 17, 2021, 11:26 PM

#

pwndfu restore causes SEP panic even with fresh 14.4.2 restore blobs

zealous bridge Apr 17, 2021, 11:27 PM

#

I’ve established that already, the problem was with albert.apple.com and activation servers

celest basalt Apr 17, 2021, 11:27 PM

#

yeah I was on 14.3 (18C66) with 14.3 SEP, and successfully OTA updated to 14.3 twice by spoofing the build to 18C65

zealous bridge Apr 17, 2021, 11:27 PM

#

I also did the same

#

Never did anything rash tho like freakin’ update to 14.4.2

celest basalt Apr 17, 2021, 11:28 PM

#

zealous bridge especially on your main

true but I don't have a second device to test on >_> I only did it bc I knew I'm supposed to be able to go back with FR or just live with no SEP on 14.4 for a bit if all else fails

#

at least this isn't A12 like when I kept updating my XR and missed the JB lol

zealous bridge Apr 17, 2021, 11:29 PM

#

True

celest basalt Apr 17, 2021, 11:32 PM

#

celest basalt pwndfu restore causes SEP panic even with fresh 14.4.2 restore blobs

it's really weird bc it's the same as the checkra1n SEP panic but according to Siguza it shouldn't affect restores

#

https://twitter.com/s1guza/status/1308530897843638272?s=21

Siguza (@s1guza)

@tjkr0wn @Anonymouspriva3 @mattp_12 @qwertyoruiopz @checkra1n So:

SEPOS boot code will examine TRNG state and set BPR
SEPOS kernel will read BPR and disable AES seed bits
sskg/skgs will receive a request to decrypt user data, AES will return an error, SEPOS will panic

The first two also happen during restores, but not the third.

zealous bridge Apr 17, 2021, 11:34 PM

#

3rd one sounds a lot like the dfu mitigation in 14

#

Do you thing it could be a communication error between futurerestore and SEPOS?

#

Or is SEP just always non-receptive

celest basalt Apr 17, 2021, 11:38 PM

#

not sure

#

I think Cryptic used serial to get SEP logs? I may try that tomorrow

zealous bridge Apr 17, 2021, 11:39 PM

#

He did and he posted them

#

FDR was during ramrod_wait_for_sep_load

celest basalt Apr 17, 2021, 11:39 PM

#

bruh I think my X's proximity sensor is kinda fucked

#

it keeps turning off the screen when I'm using it in bed

zealous bridge Apr 17, 2021, 11:40 PM

#

proximity sensor?

celest basalt Apr 17, 2021, 11:40 PM

#

yes

zealous bridge Apr 17, 2021, 11:40 PM

#

Omg my old iP7’s was like that too

#

I didnt even know it was the proximity sensor so whenever it turned black i just hard rebooted it

#

apple designing shit ftw

celest basalt Apr 17, 2021, 11:41 PM

#

lol

zealous bridge Apr 17, 2021, 11:49 PM

#

in a perfect world, this is how it should go:

executing /usr/libexec/seputil --ping. SEP OS is booted```
but for some reason, we get:
```entering ramrod_wait_for_sep_load executing /usr/libexec/seputil --ping 
seputil: ping failed
Warning: Attempt to send message to SEP in non-receptive state executing /usr/libexec/seputil --ping 
seputil: ping failed
Warning: Attempt to send message to SEP in non-receptive state executing /usr/libexec/seputil --ping 
seputil: ping failed
Warning: Attempt to send message to SEP in non-receptive state
ERROR: SEPOS was not booted```

lilac wren Apr 18, 2021, 12:38 AM

#

zealous bridge Still wouldnt work since you have to patch and ota will try and verify

No like you install the 14.2 iboot, unsigned, so you still just tether boot to 14.2. Then if the issue was that the 14.3 ota couldn't downgrade iboot, now it can upgrade it right

valid adder Apr 18, 2021, 1:27 AM

#

joe

lilac wren Apr 18, 2021, 1:34 AM

#

Who's Jeff

valid adder Apr 18, 2021, 1:37 AM

#

jeff name

zealous bridge Apr 18, 2021, 2:43 AM

#

lilac wren No like you install the 14.2 iboot, unsigned, so you still just tether boot to 1...

the fact that you have to patch it to boot means it’ll be changed, and verification would prob fail

lilac wren Apr 18, 2021, 2:44 AM

#

zealous bridge the fact that you have to patch it to boot means it’ll be changed, and verificat...

Then how did sloopie ota update #1, #2 how come you can actually ota update while checkra1n jailbroken if it's "patched"

zealous bridge Apr 18, 2021, 2:46 AM

#

lilac wren Then how did sloopie ota update #1, #2 how come you can actually ota update whil...

no idea how they actually managed to do it, possibly verification is in the update ramdisk itself?

lilac wren Apr 18, 2021, 2:47 AM

#

zealous bridge no idea how they actually managed to do it, possibly verification is in the upda...

When patching iBoot though you're just telling bootrom to load your own iBoot? You're not changing the real iBoot though, so why would it fail verification?

zealous bridge Apr 18, 2021, 2:51 AM

#

lilac wren When patching iBoot though you're just telling bootrom to load your own iBoot? Y...

wha?

#

lol you are changing it

lilac wren Apr 18, 2021, 2:52 AM

#

You never actually permanently modify iboot

#

This is what I was saying

zealous bridge Apr 18, 2021, 2:52 AM

#

Yeah not permanently

lilac wren Apr 18, 2021, 2:52 AM

#

It doesn't make sense to do that

zealous bridge Apr 18, 2021, 2:52 AM

#

Can you even update while checkra1n jailbroken?

#

Are you sure of that

lilac wren Apr 18, 2021, 2:52 AM

#

zealous bridge Yeah not permanently

So what, you're saying when you're done exploiting it changes it back?

lilac wren Apr 18, 2021, 2:53 AM

#

zealous bridge Can you even update while checkra1n jailbroken?

I know it can download update prepare and get a valid blob from tss, even with bcert or whatever

#

While jben

zealous bridge Apr 18, 2021, 2:53 AM

#

the nature of the exploit is that it has to be run every time at boot

#

so whats the point even patching it permanently

#

except for preparing bootloops

lilac wren Apr 18, 2021, 2:54 AM

#

lilac wren So what, you're saying when you're done exploiting it changes it back?

So ^

zealous bridge Apr 18, 2021, 2:56 AM

#

nah i don’t think it does, rather the way it’s patched it’s just exploitable once then the patches are void

#

once a reboot occurs

#

but thats just complete guesswork on my part

#

but it is something similar

#

Ok so yeah i was completely wrong

#

Theres an iBoot in the OTA zip

#

so it definitely does upgrade it

lilac wren Apr 18, 2021, 2:59 AM

#

Ok so that definitely changes things lol

#

Cryptic pls help us

valid adder Apr 18, 2021, 2:59 AM

#

its a kernel thing

#

the 14.2 issue is probably caused by new fs shit so same could be for 14.3 OTA prob

lilac wren Apr 18, 2021, 3:01 AM

#

@valid adder How is iBoot patched without being changed permanently, are we telling bootrom to load our own iBoot, or are we modifying the current iBoot, or just like "hooking" into iBoot's code and changing/disabling some things it does without changing iBoot itself. And if it's the latter, would the iBoot still be considered untouched and the signatures be valid

valid adder Apr 18, 2021, 3:02 AM

#

restoremode has always been remote boot

lilac wren Apr 18, 2021, 3:02 AM

#

What does remote mean in this case

valid adder Apr 18, 2021, 3:05 AM

#

remote boot(restore mode): Bootrom -> (iBSS -> iBEC -> iBoot -> SEP, Kernel) all uploaded and booted externally
local boot(normal boot): Bootrom ->(iBSS -> iBEC(falls back to LLB) -> iBoot -> SEP, Kernel) all loaded and booted from nand

#

when you load each stage, in the main log it says remote boot vs local boot

#

https://twitter.com/Cryptiiiic/status/1343308044239659008

Cryptic (@Cryptiiiic)

Remote boot trash local boot cool.

#

TrollFront

zealous bridge Apr 18, 2021, 3:07 AM

#

oh right

#

so the iboot loaded during restore isnt the same one as the one currently installed

#

doesnt it go through personalisation or some shit

valid adder Apr 18, 2021, 3:08 AM

#

you can boot directly to nand bootchain with ipwndfu given the correct calls, a few runtime values need to be changed and functions need to be called to get from pwned bootrom to local boot

lilac wren Apr 18, 2021, 3:08 AM

#

How is SEP and Kernel also remotely booted

#

Shouldn't that always be an on device thing

zealous bridge Apr 18, 2021, 3:10 AM

#

valid adder you can boot directly to nand bootchain with ipwndfu given the correct calls, a ...

that explains the bootrom, but what about the next step of chain? what actually happens to iboot when checkm8 is run

zealous bridge Apr 18, 2021, 3:10 AM

#

lilac wren How is SEP and Kernel also remotely booted

Probably from the ipsw

lilac wren Apr 18, 2021, 3:10 AM

#

valid adder when you load each stage, in the main log it says remote boot vs local boot

Can we get this log during an OTA update or if it's bootlooping after the update is completed

lilac wren Apr 18, 2021, 3:13 AM

#

zealous bridge Probably from the ipsw

I thought restore mode was just iboot doing its job to restore, when is SEP or kernel every booted here

valid adder Apr 18, 2021, 3:13 AM

#

just verbose via checkra1n unles a12 a13 rip

lilac wren Apr 18, 2021, 3:14 AM

#

valid adder just verbose via checkra1n unles a12 a13 rip

Verbose boot before starting an OTA update? Or after when it's bootlooping

zealous bridge Apr 18, 2021, 3:15 AM

#

lilac wren I thought restore mode was just iboot doing its job to restore, when is SEP or k...

every firmware component is loaded during restoremode afaik, it needs to be personalised then sent to the device

low summit Apr 18, 2021, 3:15 AM

#

zealous bridge <@!417143696467951616>

How

zealous bridge Apr 18, 2021, 3:16 AM

#

Some pirated software shit

#

And with that I shall depart

#

4am

#

👋

low summit Apr 18, 2021, 3:16 AM

#

Gn

valid adder Apr 18, 2021, 3:16 AM

#

bootloop

lilac wren Apr 18, 2021, 3:18 AM

#

Ok ty

lilac wren Apr 18, 2021, 3:19 AM

#

zealous bridge And with that I shall depart

Sleep well!!

valid adder Apr 18, 2021, 3:22 AM

#

zealous bridge every firmware component is loaded during restoremode afaik, it needs to be pers...

nah, iBSS, iBEC, RestoreLogo, RestoreDeviceTree, RestoreTrustCache, RestoreRamdisk, RestoreSEP, and RestoreKernelCache. There is a "loaded by iBoot" thing as well on the X its "ISP"

#

@lilac wren /cc

zealous bridge Apr 18, 2021, 3:26 AM

#

Oh right, SEP and BB are always personalised then sent over USB

lilac wren Apr 18, 2021, 3:27 AM

#

valid adder <@!353561670934855681> /cc

Ty

valid adder Apr 18, 2021, 3:28 AM

#

https://github.com/marijuanARM/idevicerestore/blob/master/src/recovery.c#L148-#L263

#

^

#

@lilac wren @zealous bridge entering restore mode

lilac wren Apr 18, 2021, 3:33 AM

#

Ty ily

valid adder Apr 18, 2021, 3:33 AM

#

the 14.2 fdr sep panic occurs post enter restore

#

when RestoreSEPImageData is sent to NOR

#

most likely a change in 14.3

#

fixable just hard to investigate

lilac wren Apr 18, 2021, 3:35 AM

#

valid adder the 14.2 fdr sep panic occurs post enter restore

Conditions for this to happen? I assume it doesn't happen in any normal restore or update?

valid adder Apr 18, 2021, 3:35 AM

#

a11+ on 14.3+

lilac wren Apr 18, 2021, 3:35 AM

#

And it can just happen in a normal restore?

valid adder Apr 18, 2021, 3:36 AM

#

wym normal restore

lilac wren Apr 18, 2021, 3:36 AM

#

Like literally restoring your device, A11 14.4.2->14.2

#

*edited

valid adder Apr 18, 2021, 3:36 AM

#

idk I don't want to leave 14.3

lilac wren Apr 18, 2021, 3:36 AM

#

Oh lol

valid adder Apr 18, 2021, 3:37 AM

#

because I need passcode

lilac wren Apr 18, 2021, 3:38 AM

#

valid adder because I need passcode

I thought you don't jailbreak?

valid adder Apr 18, 2021, 3:39 AM

#

I didn't jailbreak because I need to remove my passcode to jailbreak

#

but with taurine I don't have too

lilac wren Apr 18, 2021, 3:39 AM

#

Ah ok

valid adder Apr 18, 2021, 3:39 AM

#

I wasn't gonna use unc0ver and checkra1n needs passcode removed

#

so thats why I didn't jailbreak for months

lilac wren Apr 18, 2021, 3:39 AM

#

Yeah I see

craggy pendant Apr 18, 2021, 4:12 AM

#

hi could someone to me please?

#

I'm getting an APNonce doesn't match AP Ticket error

#

I've set my nonce already with checkm8 nonce setter matching the generator in my blob

low summit Apr 18, 2021, 4:15 AM

#

Use dimentio

craggy pendant Apr 18, 2021, 4:15 AM

#

I'm trying to downgrade from 14.4.2 to 14.3 iphone X

#

do i need to jailbreak to use Dimentio?

low summit Apr 18, 2021, 4:15 AM

#

Yes

craggy pendant Apr 18, 2021, 4:16 AM

#

I don't really want to checkra1n as i'll lose faceid?

low summit Apr 18, 2021, 4:16 AM

#

Ur just jbing to get the nonce set

#

With dimentio

craggy pendant Apr 18, 2021, 4:17 AM

#

ok so i can jb using checkra1n set nonce with dimentio then restore rootfs

#

the downgrade

low summit Apr 18, 2021, 4:17 AM

#

Yes

craggy pendant Apr 18, 2021, 4:17 AM

#

then jb with taurine?

#

is that all correct?

low summit Apr 18, 2021, 4:17 AM

#

Once ur on 14.3 correct

craggy pendant Apr 18, 2021, 4:17 AM

#

yup

#

ok I'll try that

#

I've been stuck here for 24 hrs

low summit Apr 18, 2021, 4:18 AM

#

U know how to use dimentio?

#

U need new term or ssh

craggy pendant Apr 18, 2021, 4:19 AM

#

I don't but I can google it

#

I'll jailbreak then install new term

low summit Apr 18, 2021, 4:20 AM

#

U just need terminal yea

#

And then sudo dimentio

#

[[dimentio]]

mystic axleBOT Apr 18, 2021, 4:20 AM

#

dimentio

PoC tool for setting/getting nonce without triggering KPP/KTRR/PAC. (requires tfp0)

Author

0x7ff

Version

2.0.0-1

Price

Free

Repo

1Conan

Bundle ID

com.0x7ff.dimentio

More Info

Click Here

craggy pendant Apr 18, 2021, 4:20 AM

#

ok thanks

#

do you have any idea why checkm8 nonce setter didn't set my nonce?

low summit Apr 18, 2021, 4:21 AM

#

No idea I have always used dimentio

craggy pendant Apr 18, 2021, 4:21 AM

#

and after ive jb with checkra1n downgraded then jb with taurine my faceid will work again ?

low summit Apr 18, 2021, 4:22 AM

#

Yes

craggy pendant Apr 18, 2021, 4:22 AM

#

ok thanks I'll do all that no

#

now*

#

I've opened checkra1n and it says "Sorry, iPhone X (Global) is not supported on iOS 14.4.2 at this point."

#

any idea what i can do here ?

low summit Apr 18, 2021, 4:25 AM

#

Options

#

Enable untested version and skip abr

#

Make sure ur passcode is off too

craggy pendant Apr 18, 2021, 4:25 AM

#

yeah I've turned passcode off already

#

and find my iphone

#

and signed out of cloud

low summit Apr 18, 2021, 4:26 AM

#

U found options?

craggy pendant Apr 18, 2021, 4:26 AM

#

yeah i'll try those options now

#

will report back

low summit Apr 18, 2021, 4:26 AM

#

!t passcodestate

mystic axleBOT Apr 18, 2021, 4:26 AM

#

low summit !t passcodestate

passcodestate

If you see the "Error getting passcode state (parsing error)" message on checkra1n 0.12.2 use 0.12.1.

Windows: Odysseyn1x 2.8, checkn1x 1.1.4
macOS/Linux: checkra1n 0.12.1

craggy pendant Apr 18, 2021, 4:29 AM

#

done using 12.2 I didn't get that error

#

installing cydia now

low summit Apr 18, 2021, 4:31 AM

#

OK nice

craggy pendant Apr 18, 2021, 4:35 AM

#

do you happen to know what repo new term is on?

low summit Apr 18, 2021, 4:38 AM

#

I believe default repo

#

It's new term 2

#

[[newterm 2]]

mystic axleBOT Apr 18, 2021, 4:39 AM

#

NewTerm 2

A powerful terminal app for iOS

Author

HASHBANG Productions

Version

2.5

Price

Free

Repo

Chariz

Bundle ID

ws.hbang.newterm2

More Info

Click Here

craggy pendant Apr 18, 2021, 4:41 AM

#

ok I've run su

#

dimentio (my nonce)

#

it ran some commands and seems to be set

#

last line says set nonce to my number

#

am I good to use checkra1n to rootfs ? or is that not needed?

low summit Apr 18, 2021, 4:43 AM

#

Rootfs yea

craggy pendant Apr 18, 2021, 4:46 AM

#

ok doing that now

#

will fr after this

#

I think its working now I'm extracting filesysten from IPSW now

#

kept getting that error before this step

#

if only I had known to set my nonce before hand -_-

#

I tried updating to 14.3 using the profile but it kicked me into recovery and i couldnt get out unless i updated to 14.4.2

low summit Apr 18, 2021, 4:57 AM

#

Lol

#

Yea use dimentio to set nonce

#

It's better

craggy pendant Apr 18, 2021, 4:58 AM

#

yeah I'll do that on my other devices too

#

thanks so much for your help

#

you're a lifesaver

low summit Apr 18, 2021, 4:59 AM

#

Np

craggy pendant Apr 18, 2021, 4:59 AM

#

I think it's almost complete now

#

Done: restoring succeeded!
FutureRestore process ended.

#

once again, you're a legend thank you

low summit Apr 18, 2021, 5:02 AM

#

Nice nice

#

Np

zinc moon Apr 18, 2021, 5:39 AM

#

low summit Rootfs yea

?????

#

It’s not harmful iirc but if he was just normally FRing what was the need for him to restore rootfs

zinc moon Apr 18, 2021, 5:41 AM

#

craggy pendant do you have any idea why checkm8 nonce setter didn't set my nonce?

It’s broken for whatever reason

low summit Apr 18, 2021, 5:41 AM

#

Nah if you u

#

U need restore fs

zinc moon Apr 18, 2021, 5:41 AM

#

low summit Apr 18, 2021, 5:41 AM

#

Bro it doesn't matter

zinc moon Apr 18, 2021, 5:42 AM

#

I’ve done the process 14 times now and I’ve never had to restore rootfs

#

But yea true it doesn’t matter

low summit Apr 18, 2021, 5:42 AM

#

He already rfs before nonce

#

So he has no tweaks anyways

zinc moon Apr 18, 2021, 5:42 AM

#

Although I was confused as to how nonce stays set

#

Even if you restore roots

low summit Apr 18, 2021, 5:42 AM

#

Checkm8 is just broken

#

U need dimentio

zinc moon Apr 18, 2021, 5:43 AM

#

True

low summit Apr 18, 2021, 5:43 AM

#

It's like Ota. Supervision stays

#

After rfs

zinc moon Apr 18, 2021, 5:43 AM

#

Oh

#

But hey atleast someone needed help, lol

low summit Apr 18, 2021, 5:43 AM

#

Honestly he didn't need to rfs but he was already doing it

zinc moon Apr 18, 2021, 5:44 AM

#

True it doesn’t harm

low summit Apr 18, 2021, 5:44 AM

#

I mean he only really needed help with nonce

#

Other procedures he was pretty savvy

zinc moon Apr 18, 2021, 5:44 AM

#

He did it pretty quick too

low summit Apr 18, 2021, 5:44 AM

#

Think he was on Mac

zinc moon Apr 18, 2021, 5:45 AM

#

Doesn’t matter

#

Except if he used OTAs

#

Which he clearly didn’t bc he needed to set nonce

low summit Apr 18, 2021, 5:45 AM

#

He tried Ota from 14.2 to.3

#

Failed and ended up on 14.4.2

#

Then he fr back to 14.3

zinc moon Apr 18, 2021, 5:46 AM

#

LOL

#

Wait

#

If he had blobs

#

What was the need

low summit Apr 18, 2021, 5:46 AM

#

Idk Ota easier

zinc moon Apr 18, 2021, 5:46 AM

#

For him to OTA

#

respectfully

#

kinda agree

low summit Apr 18, 2021, 5:46 AM

#

No comp too

zinc moon Apr 18, 2021, 5:46 AM

#

But

#

OTA will be slower in fr

#

In any case

low summit Apr 18, 2021, 5:47 AM

#

Fr took like 5 min for him

zinc moon Apr 18, 2021, 5:47 AM

#

lol

#

the actual process

#

On the computer

#

Takes like 5-7 minute

#

What takes longer is for the restore on the phone

#

To actually finish

proper bison Apr 18, 2021, 5:47 AM

#

idk fr took 10 mins iirc

zinc moon Apr 18, 2021, 5:48 AM

#

It took 6 minutes for me

#

One time

low summit Apr 18, 2021, 5:48 AM

#

Glad it worked for him

zinc moon Apr 18, 2021, 5:48 AM

#

Same

#

Too many people come here with invalid blobs

#

Or the fact that they can’t even use those blobs bc SEP and BB

low summit Apr 18, 2021, 5:48 AM

#

Lol he even know what his generator is

zinc moon Apr 18, 2021, 5:49 AM

#

bros smart

low summit Apr 18, 2021, 5:49 AM

#

He knows if it's valid

zinc moon Apr 18, 2021, 5:49 AM

#

I’m just wondering

#

How the fuck

#

was the checkm8

#

Nonce generator broken

low summit Apr 18, 2021, 5:49 AM

#

I mean why not just use dimentio

#

Feels more secure anyways

zinc moon Apr 18, 2021, 5:50 AM

#

True

#

But the checkm8 nonce setter

#

Made FRing without a jailbreak possible

#

You know those old nonce setter apps?

low summit Apr 18, 2021, 5:51 AM

#

Yea those are complete shit tho

#

Might as well use u0 at that

#

Point

zinc moon Apr 18, 2021, 5:51 AM

#

LOL

#

A lot of ppl liked them

#

I wonder where they went

low summit Apr 18, 2021, 5:51 AM

#

Dimentio is dumb ez honestly

zinc moon Apr 18, 2021, 5:51 AM

#

Fr

low summit Apr 18, 2021, 5:52 AM

#

It's perfect with tss saver

#

One stop

zinc moon Apr 18, 2021, 5:53 AM

#

True

#

@low summit I feel like

#

There are 5x more people who save blobs

#

Than people who know that they’re for FR

#

Ppl always told to save blobs but never told why

low summit Apr 18, 2021, 5:54 AM

#

I mean blobs are a thing before fr

zinc moon Apr 18, 2021, 5:54 AM

#

Yea

#

But

#

Do they have any other use

#

Right now?

low summit Apr 18, 2021, 5:55 AM

#

Blobs was always for downgrading lol

zinc moon Apr 18, 2021, 5:56 AM

#

What was used

#

For them

#

Back in the day

#

Like what tool was there to downgrade using them

low summit Apr 18, 2021, 5:56 AM

#

Redsn0w

#

ITunes

zinc moon Apr 18, 2021, 5:56 AM

#

idevicerestore ?

#

Oh

low summit Apr 18, 2021, 5:56 AM

#

There was no sep back then

#

So it was simple

zinc moon Apr 18, 2021, 5:56 AM

#

I think whoever made tiny umbrella then

#

Made it for blobs

zinc moon Apr 18, 2021, 5:57 AM

#

low summit So it was simple

No bb on iPads too lol

low summit Apr 18, 2021, 5:57 AM

#

Blobs died for awhile

#

When Limera1n died

#

Then it came back on checkm8

zinc moon Apr 18, 2021, 5:58 AM

#

roachsaber

low summit Apr 18, 2021, 5:59 AM

#

With cydia server and Limera1n back in the day it was easy to use blobs

#

Now it's hard af

#

Mad errors

zinc moon Apr 18, 2021, 6:02 AM

#

fr

#

well

#

That’s the case only if you’re on A12

#

Sileo needs a menu to show you your ECID

low summit Apr 18, 2021, 6:02 AM

#

Pwn dfu wasn't a hassle

#

It's one click

zinc moon Apr 18, 2021, 6:02 AM

#

@lilac wren could I have used this

#

To boot up the phone

low summit Apr 18, 2021, 6:02 AM

#

Then u could use stitch blobs

zinc moon Apr 18, 2021, 6:03 AM

#

This is an option on fr’s GitHub page

low summit Apr 18, 2021, 6:03 AM

#

Think froggy sleeping

zinc moon Apr 18, 2021, 6:03 AM

#

Oh

low summit Apr 18, 2021, 6:03 AM

#

It's 2 LMAOOO

zinc moon Apr 18, 2021, 6:04 AM

#

hold on

#

Checkm8

#

Works on ALL iOS devices for all pre A12

#

Right?

low summit Apr 18, 2021, 6:04 AM

#

Yes

zinc moon Apr 18, 2021, 6:04 AM

#

So does checkm8 nonce setter

#

Have a min ios

low summit Apr 18, 2021, 6:05 AM

#

I think the min os for Checkra1n

#

Which is 11?

zinc moon Apr 18, 2021, 6:05 AM

#

That’s different

#

Checkra1n’s is 12

low summit Apr 18, 2021, 6:05 AM

#

OK 12

#

Anyone fr from 11 to 14 before?

zinc moon Apr 18, 2021, 6:06 AM

#

A lot

#

If you’re updating SEP and BB don’t need to match

#

OH

#

So when checkm8 nonce setter

#

Gets fixed

low summit Apr 18, 2021, 6:06 AM

#

Downgrade and upgrade

#

This post is missing shit

zinc moon Apr 18, 2021, 6:07 AM

#

It can be used on every single Checkra1n

#

able

#

device

low summit Apr 18, 2021, 6:07 AM

#

Remember when ppl just used u0

#

To set

zinc moon Apr 18, 2021, 6:07 AM

#

It was so garbage that pwn made an app

#

To set noncd

#

Separately

low summit Apr 18, 2021, 6:08 AM

#

Odyssey didn't work with dimentio too

#

That was a pain

#

Or was it tss saver?

zinc moon Apr 18, 2021, 6:10 AM

#

??

#

Wdym

low summit Apr 18, 2021, 6:11 AM

#

It crashed

#

When u hit save blobs

#

Until taurine came out

zinc moon Apr 18, 2021, 6:12 AM

#

Didn’t know that

low summit Apr 18, 2021, 6:13 AM

#

Lght time to sleep bye

zinc moon Apr 18, 2021, 6:15 AM

#

@zealous bridge other than checkm8 nonce setter there were was to set nonce without a jb right?

zinc moon Apr 18, 2021, 6:15 AM

#

low summit Lght time to sleep bye

Goodbye

craggy pendant Apr 18, 2021, 8:24 AM

#

yeah I tried to do OTA because it didn’t require computer.

#

I was on 13.5 so the steps I was going to take was to install reprovision reborn then sign Odyssey and Unc0ver (can’t sign Taurine on 13.5)

Rootfs with Odyssey

Do an OTA to 14.3

Jailbreak with unc0ver (that’s why I signed this earlier)

Install Reprovision Reborn again and sign Taurine, Rootfs and jailbreak

#

all done with no computer

#

I’ve done this on my iPad.

but for some reason on the iPhone X it put me into recovery trying to update OTA

craggy pendant Apr 18, 2021, 8:52 AM

#

luckily I had blobs saved. But even when I got access to a MacBook I ran into a lot of issues

craggy pendant Apr 18, 2021, 9:01 AM

#

low summit I mean why not just use dimentio

I already rootfs and tried to OTA before I knew about the nonce. I thought it was only A12 and up devices that needed to set nonce

zinc moon Apr 18, 2021, 9:09 AM

#

craggy pendant luckily I had blobs saved. But even when I got access to a MacBook I ran into a ...

Which were?

craggy pendant Apr 18, 2021, 9:11 AM

#

Well, first I tried to backup my iPhone and at the end of it I got an error saying it couldn’t be backed up. Kept trying after that with the same error but now it was at the start of the process.

Figured out the laptop didn’t have enough storage. So had to get permission to remove things so I could get enough.

Once I had enough I was still getting an error. Restating both iPhone and Mac fixed this problem

#

then I tried to download and run FutureRestore GUI. (Btw I’ve never used a Mac so had no idea what I’m doing)

#

It wouldn’t run. Was stuck at starting process.

#

downloaded IPSW and blobs plenty of times

#

in the end I found out I needed MacOS to be at least 10.13 and this Mac was 10.10

#

there was an application saying I could update to Mojave. I clicked on that and it was giving me an error saying it couldn’t update.

I saw another application saying I could update to Sierra 10.12 so I clicked that and did that update

#

after that update process completed I tried to Mojave one again and it threw up the same error

#

in the end I deleted that and just downloaded a fresh one which worked

zinc moon Apr 18, 2021, 9:16 AM

#

What mode

#

I’d the laptop

craggy pendant Apr 18, 2021, 9:17 AM

#

It’s a MacBook Air I think about 7 years old ?

#

I was also getting some error trying to run FR about some file not being there lib or something

So I installed Homebrew and was about to follow steps to install all the dependencies for FR

zinc moon Apr 18, 2021, 9:18 AM

#

It doesn’t support Big Sur?

craggy pendant Apr 18, 2021, 9:18 AM

#

I think it does. But it’s not my MacBook and the owner doesn’t want Big Sur

#

don’t ask me why LOL

#

I have no idea

zinc moon Apr 18, 2021, 9:19 AM

#

Strange

#

Big Sur is literally 20x better than 10

craggy pendant Apr 18, 2021, 9:20 AM

#

I’m not sure but it’s not my Mac so could only update to what they allowed

#

after all that. That was when I was running into issues with the nonce

#

it looked like checkm8 worked so I thought I set the nonce properly and couldn’t figure out what I was doing wrong

#

after three attempts with 14.3 and 14.3RC that’s when I came here to ask for some advice

zinc moon Apr 18, 2021, 9:25 AM

#

Lmao

zealous bridge Apr 18, 2021, 9:27 AM

#

craggy pendant I was also getting some error trying to run FR about some file not being there l...

futurerestore is statically compiled, you don’t really need the dependencies except maybe libusbmuxd

zinc moon Apr 18, 2021, 9:28 AM

#

zealous bridge futurerestore is statically compiled, you don’t really need the dependencies exc...

libusbmuxd def needs to be manually installed

craggy pendant Apr 18, 2021, 9:28 AM

#

yeah I didn’t know any of this as I’ve never used FR before

zinc moon Apr 18, 2021, 9:28 AM

#

I don’t know why it doesn’t come packaged

zealous bridge Apr 18, 2021, 9:28 AM

#

alright

#

in a situation like this it’s best to just start from the top again

#

so you can figure out where you’re going wrong

zinc moon Apr 18, 2021, 9:29 AM

#

@zealous bridge wanna see something cool

zealous bridge Apr 18, 2021, 9:29 AM

#

sure

zinc moon Apr 18, 2021, 9:29 AM

#

Look at that burger bro

zealous bridge Apr 18, 2021, 9:29 AM

#

I just saw that lol

#

Lol

zinc moon Apr 18, 2021, 9:30 AM

#

LOOK AT THE FRIES

zealous bridge Apr 18, 2021, 9:30 AM

#

Tbh i just woke up i’m not even hungry

zinc moon Apr 18, 2021, 9:30 AM

#

I’ve been eating rice for the past week of Ramadan

zealous bridge Apr 18, 2021, 9:30 AM

#

I had subway yesterday

zinc moon Apr 18, 2021, 9:30 AM

#

And I want something good

#

Lucky

celest basalt Apr 18, 2021, 9:47 AM

#

zinc moon I don’t know why it doesn’t come packaged

the library does, but the usbmuxd daemon can't really be packaged together with futurerestore

zinc moon Apr 18, 2021, 9:48 AM

#

O

celest basalt Apr 18, 2021, 9:48 AM

#

it's in basically all package managers anyway so

celest basalt Apr 18, 2021, 11:03 AM

#

dead chat

zealous bridge Apr 18, 2021, 11:27 AM

#

@zinc moon

zinc moon Apr 18, 2021, 11:27 AM

#

Yessir

zealous bridge Apr 18, 2021, 11:27 AM

#

video uploading one sec

zinc moon Apr 18, 2021, 11:28 AM

#

What I mainly wanna do rn is like

#

Make it submit

#

To shsh host

zealous bridge Apr 18, 2021, 11:28 AM

#

I can make it install dimentio first

zinc moon Apr 18, 2021, 11:29 AM

#

Legit tripping BRO

zinc moon Apr 18, 2021, 11:29 AM

#

zealous bridge I can make it install dimentio first

Make it do that

#

Tanbeer you’re smart asf

zealous bridge Apr 18, 2021, 11:40 AM

#

ok done

zinc moon Apr 18, 2021, 11:41 AM

#

#

@zealous bridge

#

Am I doing anything wrong here

zinc moon Apr 18, 2021, 11:41 AM

#

zealous bridge ok done

Show

zealous bridge Apr 18, 2021, 11:43 AM

#

Updating sources takes forever dont think i can put it in a screen recording lmfao

acoustic lodge Apr 18, 2021, 11:52 AM

#

@zinc moon

#

zinc moon Apr 18, 2021, 11:52 AM

#

Cute

#

Ok nvm bro went heli

zealous bridge Apr 18, 2021, 11:56 AM

#

@zinc moon

zinc moon Apr 18, 2021, 11:57 AM

#

How are you THIS smart

zinc moon Apr 18, 2021, 11:57 AM

#

zealous bridge <@298765872317595648>

Actually how about we tell beginners to use this

#

When they want to set nonce

zealous bridge Apr 18, 2021, 11:57 AM

#

Lol maybe

#

Need to perfect it first

#

I know but i’m used to the control centre way

#

Old habits die hard

#

Makes a ota delay profile where you can input the delay period

#

It’s @lilac wren ‘s

#

Ok

#

https://www.icloud.com/shortcuts/0bc2a73599ed4e2d86011731c2326db0

zealous bridge Apr 18, 2021, 12:23 PM

#

@zinc moon this is a literal super shortcut now icl

zinc moon Apr 18, 2021, 12:23 PM

#

zealous bridge <@298765872317595648> this is a literal super shortcut now icl

show LOL

zealous bridge Apr 18, 2021, 12:25 PM

#

one sec

#

upload speeds ass

#

@zinc moon and if they didnt have 1conan repo i got them too

zinc moon Apr 18, 2021, 12:30 PM

#

zealous bridge <@298765872317595648> and if they didnt have 1conan repo i got them too

WOW

#

Ngl

#

This is amazing

#

Meanwhile all I’m making is a can I jailbreak

#

How about we actually use that shortcut for whenever a beginner comes