simulating the reconnection wont work
#futurerestore-help
green onyx
green onyx
alright
lilac wren
stiff hazel
I mean userspace reboots are a disaster it’s appearing
Weren’t Hayden’s and CS’s from userspace rebooting?
@zinc moon well do you want to update the guide with 1.0.4 instead
Because if 1.0.5 is causing massive issues we shouldn’t recommend the version imo
lilac wren
I am getting Unhandled status code 162
Use the pinned version of FutureRestore
Latest Linux build or Mac 2.0.0
stiff hazel
For?
I’ve personally seen a lot of issues with 1.0.5 when checking Sileo server and #taurine
arctic valve
Use the pinned version of FutureRestore
I was using one with GUI, I am trying again with terminal this time let's see how it goes.
stiff hazel
Just indefinite BSOD, Consistent BSOD despite no tweaks being present, and the rare bootloop after userspace reboot.
arctic valve
[TSSC] opening /tmp/futurerestore/basebandManifest.plist
[TSSR] Checking BuildIdentity 0
[TSSR] Selected BuildIdentity for request
[TSSR] User specified to request only a Baseband ticket.
[TSSR] Found undocumented baseband
Request URL set to https://gs.apple.com/TSS/controller?action=2
TSS server returned: STATUS=162&MESSAGE=An internal error occurred.
ERROR: tss_send_request: Unhandled status code 162
Sending TSS request attempt 1... Request URL set to https://17.171.36.30/TSS/controller?action=2
Is it happening because I have a virtual sim as well?
arctic valve
Latest Linux build or Mac 2.0.0
I don't have big sur
stiff hazel
@arctic valve did your bootloop by chance happen after the userspace reboot by the way?
arctic valve
<@741367788588892164> did your bootloop by chance happen after the userspace reb...
Yes
stiff hazel
I don't have big sur
That’s Sierra through Big Sur
arctic valve
had this
then taurine boot screen
and it kept repeating
I tried hard reboot then got into boot loop
was able to get into DFU then tried getting out thinking that it would fix it but had to restore my device eventually now I am on 14.6 trying to downgrade to 14.5 so if webkit jb is released I'll still have some hope.
lilac wren
I don't have big sur
You can live boot linux and use the GUI with the pinned FutureRestore
lilac wren
My nonce is set I'm risking 1.0.5
arctic valve
I'm new to all this
Do I have to be jailbroken to downgrade?
cause I have my original nonce
and the one I set after watching a video on youtube
so after restoring I believe my nonce has been set back to what it was or will it still be 0x1111111111
lilac wren
Yeah you just need to have your generator set to the one in your blob
You might need to jailbreak to set it if you haven't yet
arctic valve
When I was jailbroken I did set my nonce but my system was corrupted and had to restore now I am on iOS 14.6 and I have blobs since 14.4.2
and I am trying to go back
to 14.4.2 or 14.5
yes
arctic valve
I have my original nonce
stiff hazel
Your nonce has changed though
arctic valve
I saved it before changing it
Ohh it regenerates
fml
so there's literally nothing I can do?
stiff hazel
@zinc moon has a similar issue of userspace reboot killing devices on 14 been found occurring at all on u0 that is not the result of an outside factor
Userspace rebooting in general while using that jailbreak
arctic valve
just to make sure, am I totally screwed?
stiff hazel
Cause what I’m wondering is if it’s somehow the way userspace rebooting in Taurine works that is fucking with /var occasionally
We know it’s a /var corruption of some type (likely more) and we know that springboard and backboardd also refuse to start again if something like this happens so
lilac wren
just to make sure, am I totally screwed?
What device
green onyx
did u ever delete /var/tmp?
arctic valve
What device
12 pro max
stiff hazel
no, but we know CS had it happen and was able to get logs which said the springboard stuff mentioned above
lilac wren
12 pro max
Nonce retention works on A11 and lower but we haven't tested on A12+, you should try FutureRestore to see if the nonce stayed set
green onyx
@arctic valve do u have ios 14.3 blobs?
stiff hazel
And dfu updating alone didn’t even revive it for CS I’m pretty sure
stiff hazel
<@!741367788588892164> do u have ios 14.3 blobs?
They’re a 12pm
green onyx
yes
stiff hazel
They can’t even do it.
arctic valve
It's giving me ```[TSSR] Checking BuildIdentity 0
[TSSR] Selected BuildIdentity for request
[TSSR] User specified to request only a Baseband ticket.
[TSSR] Found undocumented baseband
Request URL set to https://gs.apple.com/TSS/controller?action=2
TSS server returned: STATUS=162&MESSAGE=An internal error occurred.
ERROR: tss_send_request: Unhandled status code 162
They’re on 14.6 now
green onyx
They can’t even do it.
nonce could be set
green onyx
It's giving me ```[TSSR] Checking BuildIdentity 0
[TSSR] Selected BuildIdentity ...
specify bb and sep
stiff hazel
nonce could be set
They already dfu restored
green onyx
They’re on 14.6 now
oh rip
stiff hazel
green onyx
nvm
lilac wren
It's giving me ```[TSSR] Checking BuildIdentity 0
[TSSR] Selected BuildIdentity ...
You need to used pinned FR, "Latest Linux build" that has fixed for A14
arctic valve
I used that one
I used this command
future restore -t shshblob --latest-sep --latest-baseband IPSW
lilac wren
``` /Users/Documents/futurerestore-v2_0_0-test -t /Users/Documents/6800307959234...
Try this one
#futurerestore-help message
arctic valve
Okay
[TSSR] Selected BuildIdentity for request
[TSSR] User specified to request only a Baseband ticket.
[TSSR] Found undocumented baseband
Request URL set to https://gs.apple.com/TSS/controller?action=2
TSS server returned: STATUS=162&MESSAGE=An internal error occurred.
ERROR: tss_send_request: Unhandled status code 162
got this error
lilac wren
got this error
Ok you could try specifying SEP and Baseband manually for 14.6
arctic valve
Don't take away that hope from me 
arctic valve
Ok you could try specifying SEP and Baseband manually for 14.6
How can I do that?
yes
And how can I know that?
lilac wren
How can I do that?
Download ipsw for 14.6, unzip it, look in BuildManifest.plist for your device's boardconfig for erase restore, then find SEP and Baseband firmware paths
@arctic valve before you do this
arctic valve
Okay
lilac wren
Go into recovery and do irecovery -q, reboot, do it again and see if the nonce changed
Tanbeer DFU restored and nonce didn't change
Actually I think it was recovery restore
Yeah
arctic valve
I am in recovery mode
tss saver
sire
site*
I have hexadecimal and all that
I did set it to 0x111111111
I am in recovery, how do I check now?
On it
lilac wren
arctic valve
This is not it lol
Yes I am on mac
brew install libirecovery?
zsh: command not found: brew
Okay, I feel as dumb as a rock 😂
done
it is installing
While it is installing I would like to say thank you for helping me out with this I really appreciate it 🙂
Downloading Command Line Tools for Xcode
ofc
@lilac wren Thank you very much for helping me out with this I had totally given up but tanbeer was able to do it
and I hope so can I
lilac wren
Oh lol
arctic valve
it is still on Downloading Command Line Tools for Xcode
that's an interesting experiment
I'll go get something noodles made me a bit hungry brb
stiff hazel
@zinc moon by the way I asked CS about how their bootloop exactly went just now
so we’ll see how that goes
Cause if it’s a 101% match then yeah I think we got a link
arctic valve
I am back
Tapping homebrew/core
yes
done
I'm doing irecovery -q
NONC: 7caf9b682c0373cb5fb81ff7af9dd70c171ef399799207625459feb0d32956a1
different nonce I guess
stiff hazel
@zinc moon I assume this means nonce reset?
lilac wren
If you reboot then go back into recovery and read nonce again is it different though
@arctic valve
arctic valve
If you reboot then go back into recovery and read nonce again is it different th...
Okay let me try
arctic valve
If you reboot then go back into recovery and read nonce again is it different th...
hard reboot or regular?
lilac wren
If you're already in normal mode just go into revovery
If you're in recovery then hard reboot to get out or "irecovery -n"
arctic valve
It changed
lilac wren
Dang
arctic valve
NONC: d81148a3c5ee7464691c7f860d974023b1ea63423b92dfa5a74053863a1ed95b
stiff hazel
!t blobs I’d just use this
mystic axleBOT
!t blobs I’d just use this
stiff hazel
!t yt
arctic valve
SeemsGood
I got a generator value
can't I use that with my old blob?
But it reset my nonce so I cannot right
lilac wren
No you can't use your old blobs until a jailbreak to set your generator to 0x1111111111111111
arctic valve
got it thank you
willow bear
No you can't use your old blobs until a jailbreak to set your generator to 0x111...
about that, with dcsd cable and magicfg tool can you set this nonce, or must be jailbroken too?!
lilac wren
about that, with dcsd cable and magicfg tool can you set this nonce, or must be ...
No clue what magicfg does but it's just an nvram variable
willow bear
No clue what magicfg does but it's just an nvram variable
He use nvram stuff this why i asked about that 😅, but im not sure if need jailbreak first to do that or you can do it on purple mode
lilac wren
If you can unlock kernel only NVRAM vars and set custom nvram vars then maybe you could do it with that program?
willow bear
If you can unlock kernel only NVRAM vars and set custom nvram vars then maybe yo...
never tried before even i dont have dcsd cable
lilac wren
never tried before even i dont have dcsd cable
There's already checkm8 nonce setter I think
arctic valve
@zinc moon When I was in DFU in jailbroken state when my system was corrupted was it possible then to use future restore with saved blobs to install an unsigned os?
lilac wren
<@!298765872317595648> When I was in DFU in jailbroken state when my system was ...
You would need to be able to go to recovery mode
arctic valve
Yes I was in recovery mode
arctic valve
and ur nonce must still be set
it was set
green onyx
yes but nonce can change inbetween reboots
at the point,
u shouldve tried futurerestore if u had ios 14.3 blobs
arctic valve
I didn't have 14.3 blobs I had blobs from 14.4.2
lilac wren
You probably should have done it then
DFU restore is probably only smart if you need the device immediately or it's checkm8able
arctic valve
Okay
valid adder
Gm
rustic blaze
Gm
zealous bridge
hello everyone 👋
lilac wren
Gm
zealous bridge
Tanbeer DFU restored and nonce didn't change
Recovery*
zealous bridge
DFU shouldn’t work because seperate nonces
Does getnonce work on 15?
@lilac wren apparently you need a mac to restore to 15.0 beta 1
valid adder
Idevicerestore should work
lilac wren
DFU shouldn’t work because seperate nonces
Yeah but we're seeing if it messes with the nvram var right
zealous bridge
#jailbreak message probably should add that here then
full osprey
Gonna just add it to common issues
But you don’t need a Mac to update afaik. Worked for me on windows
But idk if that’s because I have Dev
Idevicerestore failed to update on Linux
Wasn’t one really. It just got to “sending PersonalizedData” and never went pass. My iPad crashed and I was in recovery
zealous bridge
Old idevicerestore
mystic axleBOT
!t libimobiledevice
zealous bridge
Idk if it has the DFU fix
celest basalt
Wasn’t one really. It just got to “sending PersonalizedData” and never went pas...
yeah, if you try to install from Ubuntu 21.04 apt you'll get that with 14.5+ at least
full osprey
TIL, ty
vivid nova
imagine updating to a beta and wondering why sh!ts broken...
zealous bridge
where are you downgrading/upgrading from
full osprey
14.6 to 14.3
full osprey
yep
lilac wren
Something is unsigned?
lilac wren
Not gonna change the outcome
lilac wren
^ just select that one and click start again
zealous bridge
or v2.0.0 as its now being called
lilac wren
I think he's linux
full osprey
So the one pinned or no
full osprey
So im basically just pointing the gui to the bin?
zealous bridge
yeah
valid adder
yes
valid adder
whats weird about it
full osprey
If I didnt reboot do I have to restore or can I just continue
well I guess I cant reboot
valid adder
dude
full osprey
but you know what I mean
valid adder
its literally the commit count
zealous bridge
number of commits
valid adder
thats why I switched to versioning because even you got confused
@zealous bridge you posted a message earlier and then deleted it why
lilac wren
Wow
zealous bridge
saw someone saying ios 15 got pulled and asked about it here but apparently it was a joke
lilac wren
Illegal
zealous bridge
ikr
valid adder
Unfortunately all the seps are encrypted
lilac wren
Probably said '3u is best for downloading ipsw's'
valid adder
Apple didn’t goof
lilac wren
Reverse
lilac wren
Nice
valid adder
It was severely cringe that it was closed source
Because coolstar is a clown sometimes
zealous bridge
oh lol
shy magnet
and yeah it being libhooker only is stupid
zealous bridge
Personalizing IMG4 component iBSS...
Sending iBSS (261883 bytes)...
ERROR: Unable to send iBSS component: Unable to upload data to device
ERROR: Unable to send iBSS to device
ERROR: Unable to place device into recovery mode from DFU mode
why is this still a thing
how have they not fixed it
valid adder
Because lib irecovery is dogshit
shy magnet
valid adder
It’s so fucking difficult to fix Mac, Linux, 32bit, and 64bit all in the same code
Help please lol @shy magnet
No
valid adder
I’m 32bit mf
shy magnet
Help please lol <@!728035061781495878>
uhhh wyn
zealous bridge
bruh
shy magnet
its python 2
zealous bridge
why does usbmuxd break with manually compiled libirecovery
shy magnet
and there's some shit that isn't necessary at all
zealous bridge
this is so ass
valid adder
Sending iBSS iBEC in pwn recovery is super inconsistent and if you fix it on one host it breaks the other and if you fix one device it breaks the other @shy magnet
zealous bridge
how do i even do a dfu restore now :/
shy magnet
whats the current process of dfu -> pwnrecovery rn?
valid adder
This is all caused by lib irecovery being terrible
valid adder
@shy magnet pwn brom, send pwned images
valid adder
Let’s incorporate a fix then
No
It’s not soc specific
And that’s not the issue
Pwn recovery assumes the user pwned dfu properly
Meaning images are already reset
And it still fails
Because lib irecovery is dodo
@shy magnet
valid adder
Try it I guarantee if it works for 64bit it will break 32bit and if it works for Linux it will break mac
shy magnet
monka
shy magnet
windows is just shit
valid adder
It’s lib irecovery because iTunes uses the drivers just fine
valid adder
void futurerestore::enterPwnRecovery(plist_t build_identity, string bootargs){
it can't use normal irecovery stuff because it sends the patched files via byte buffer, not directly extracted from ipsw
shy magnet
ah
valid adder
@zinc moon it shouldn't take long hence why we should switch to rust
zealous bridge
Why don’t we just make futurerestore in Python /s
valid adder
@zinc moon a5
yes I've had it since launch
@shy magnet enterPwnRecovery works on mac for 64bit, but breaks on mac for 32bit but if we fix 32bit it will break 64bit
so we need a fixall solution
valid adder
no idea
valid adder
u stupid fuck
quit complaining about 194 issues
@zinc moon but do look for other strings in 212 that are legacy or redundant or have typos
pins
first pin
shy magnet
must've been something here? https://github.com/tihmstar/futurerestore/commit/292fca0e0260dac8d5a590c06c288c25fc69f793#diff-53f14ca144abb7c3ab898177f891e9ea4253a6c68fb469c5477ff98077d91a03
but the irecv_send_buffer() call was never changed
idk
zealous bridge
Not even southwes?
shy magnet
the only ones i know of that were at least relevant were mine'
southwes's
and encounter's
green onyx
and encounter's
whats special about encounter''s fork?
i wasnt in the jb scene back then
green onyx
damn
shy magnet
@valid adder tbh not sure where the issue is
valid adder
@shy magnet its iBEC
green onyx
LOL
valid adder
because of how shit libirecovery is
green onyx
fork it 
valid adder
why would you link a fork with no commits
zealous bridge
@lilac wren idevicesetnonce works on 15
lilac wren
but does nonce stay after restore
green onyx
thats for every project
lilac wren
nyu's mobilegestalt thing
zealous bridge
what
ideviceinfo -k ApNonce, booting to recovery, restoring, keeps the same nonce
even post-restore
green onyx
pog
valid adder
@shy magnet the problem with 32bit, ibec sends fine but fails to reconnect
zealous bridge
on ios 15?
yes
valid adder
shy magnet
have iboot32patcher patches changed at all in the past like 2 years?
valid adder
at least kloader works almost everytime
zealous bridge
again, fixed
shy magnet
https://github.com/tihmstar/futurerestore/blob/4a8cabbe556d264df17379372f01f0523ba8d6c4/futurerestore/futurerestore.cpp#L460 mb sth inbetween there to the end of the function works for 32bit?
@valid adder
lilac wren
^
lilac wren
oh
zealous bridge
jb
shy magnet
you can run tweaks in the shim
lilac wren
tweaks
zealous bridge
by itself
shy magnet
https://github.com/tihmstar/futurerestore/blob/4a8cabbe556d264df17379372f01f0523...
on >iOS 8 it resets the connection after sending ibss
maybe thats it?
have you tried a 9.x pwn restore @valid adder
green onyx
yep
shy magnet
yea
green onyx
because of the backlash
soft turtle
ideviceinfo -k ApNonce, booting to recovery, restoring, keeps the same nonce
isn't it supposed to be mobilegestalt?
zealous bridge
isn't it supposed to be mobilegestalt?
its the same thing
ideviceinfo will call it
zealous bridge
its either
idevicediagnostics mobilegestalt ApNonce
or
ideviceinfo -k ApNonce
only difference is the former has it in a plist, while the latter only prints out the b64 by itself @soft turtle
soft turtle
its either
`idevicediagnostics mobilegestalt ApNonce`
or
`ideviceinfo -k ApNon...
what so i didn't need to write all that extra JNA code???
dang i wasted so much time
zealous bridge
<@!330016421817876490> look for legacy strings
if only i could fucking get into pwndfu consistently, fucking ryzen
valid adder
@shy magnet found the bug, in futurerestore main, build version is correct: 8 but in futurerestore it reports 12 lol
zealous bridge
what so i didn't need to write all that extra JNA code???
rip
soft turtle
omg i just looked at code and it's a simple lockdownd_get_value
zealous bridge
yup
valid adder
somehow futurerestore thinks my device is on iOS 12
zealous bridge
<@!330016421817876490> works consitently with serial + kanzi
still probably wouldnt work on linux
shy magnet
<@!728035061781495878> found the bug, in futurerestore main, build version is co...
o lol
zealous bridge
lemme see
zealous bridge
people overuse the word bricked
full osprey
If im building from scratch on linux where is everything updated at I need?
valid adder
I've had a migraine for 3 days straight
zealous bridge
without a valid sep you’re gonna get bootlooped yes
touchid relies on sep to encrypt biometric data
Also
Why are you digging out posts from 3y ago
valid adder
basically you body decides you are in a bad condition ahead of time and will delay the headache by a few days, the headache can last multiple days
valid adder
not that it matters, u should use 2.0.0 212
full osprey
where is this for linux
valid adder
building soon
valid adder
yeh ill try
full osprey
valid adder
after 32bit is fixed
full osprey
how tf imma use it then my guy lol
zealous bridge
alr
valid adder
208 is new enough afaik @full osprey
full osprey
bet
valid adder
@shy magnet im dumb 12 means build 12 iOS 8 is 12
stiff hazel
@zealous bridge your discord is fucked and I have no idea why
zealous bridge
you sure you guys didn’t just… merge
stiff hazel
no?
green onyx
mike is dabezt?
zealous bridge
def
stiff hazel
zealous bridge
stop hiding it
lilac wren
stiff hazel
green onyx
LOL
lilac wren
they are the same
valid adder
wait mf ain't using light mode something is wrong here
zealous bridge
wait mf ain't using light mode something is wrong here
omg ur right
valid adder
F
valid adder
just rewrote the entire enterpwnrecovery
green onyx
my eyes ...
lilac wren
green onyx
lilac wren
they're swapping
valid adder
zealous bridge
@zinc moon wen eta changing ur cringe pfp
lilac wren
the guy with glasses
lilac wren
YAY
celest basalt
code=13762568
line=210
file=main.cpp
commit count=194:
commit sha =0ab9df3209ee599f581532d05d331e6abe0f53f3:
ERROR: Device is in an invalid state
FutureRestore process ended.
help
zealous bridge
code=13762568
line=210
file=main.cpp
commit count=194:
commit sha =0ab9df3209ee...
Get it out of DFU mode
It’s not gonna work in DFU
If auto-boot is false
celest basalt
how to fix it my fone keeps on rebooting
zealous bridge
Bootloop?
lilac wren
try to get to recovery mode
zealous bridge
or recovery mode loop
lilac wren
does checkm8 nonce setter work in recovery
zealous bridge
so you can set it in DFU
It goes from DFU to pwnrecovery
lilac wren
and sets it in recovery?
zealous bridge
yep
lilac wren
ok
zealous bridge
yes because boot-nonce isn’t blacklisted
zealous bridge
Yep
lilac wren
you can just go to latest anyways
zealous bridge
Yeah lol
lilac wren
unless you bootlooped on iOS 13 on A11
zealous bridge
Checkm8 users got all the protection in the world
lilac wren
in which you'd need to stay on iOS 13 to go to 14.2
zealous bridge
in which you'd need to stay on iOS 13 to go to 14.2
this is why you save 14.3 blobs
celest basalt
link please
lilac wren
@celest basalt https://support.apple.com/en-us/HT201263#sections
zealous bridge
or is there a linux version?
it does but you have to remove a lot of things
zealous bridge
device checks, macos specific binaries, strings
lilac wren
oh i thought you changed it lol
zealous bridge
great minds think alike
lilac wren
:|
lilac wren
did you change it back lol
green onyx
LOL
celest basalt
thanks
lilac wren
bruh checkm8 nonce setter literally includes igetnonce just to get boardconfig
zealous bridge
IKR
zealous bridge
ITS SO STUPID
green onyx
u could rewrite it for linux 
zealous bridge
i have one that works for linux
green onyx
wut
zealous bridge
But it’s modified a lot that suits my own need
lilac wren
I think it might be Mac only because of igetnonce or something
or irecovery
that is literally just committed in some folder there
green onyx
But it’s modified a lot that suits my own need
but does it work?
i dont understand what u mean by that statement
green onyx
are u not suppose to do that?
celest basalt
it doesn't work with official Apple USB-C cables
zealous bridge
i dont understand what u mean by that statement
obv it works
its just pwndfu is shit for me
so I adjusted some things to make it less shit
zealous bridge
green onyx
bruh
celest basalt
I legit just entered DFU with USB-C 3 times in a row
zealous bridge
your usb descriptors are back omg
zealous bridge
I legit just entered DFU with USB-C 3 times in a row
they could’ve fixed the accessory ID in tristar ig, i think they can do that with an ios update
celest basalt
checkm8-nonce-setter-linux eta son
celest basalt
they could’ve fixed the accessory ID in tristar ig, i think they can do that wit...
can they? I thought the hardware fully takes over if you hold the buttons long enough
zealous bridge
not for dfu i don’t think, you literally can’t enter dfu if there’s no power coming into the device
celest basalt
only issue is, DFU times out in like 1 minute
lilac wren
I thought DFU can be entered with just power?
celest basalt
not even pwndfu
lilac wren
I did it on XR with a non apple cable connected to a lamp with usb
celest basalt
just regular DFU
lilac wren
oh
celest basalt
but continuing to hold the volume down button seems to prevent it from timing out
zealous bridge
only issue is, DFU times out in like 1 minute
weird
green onyx
I'm afraid to unplug the cable in case it never works again <:fr:712506651520925...
are u on ios 15?
celest basalt
yes
green onyx
checkm8-nonce-setter-linux eta son
POG I NEED THAT
zealous bridge
I did it on XR with a non apple cable connected to a lamp with usb
It should work with just power
lilac wren
POG I NEED THAT
can you just replace the irecovery and igetnonce with your built ones / static and see if it works
green onyx
can you just replace the irecovery and igetnonce with your built ones / static a...
my ap exam is tmr
celest basalt
that's what I'm doing except I replaced igetnonce with ideviceinfo
zealous bridge
echo that your device is supported anyway
celest basalt
echo that your device is supported anyway
that was what I did first yeah
zealous bridge
@celest basalt did you have to adjust the timings for the script
celest basalt
nah
only timing that's wrong is printing new nonce
but that's non-essential
works without that
zealous bridge
for me after it set nonce and reset recovery it took wayyy too long to connect back to print new nonce
i changed sleep 7 to sleep 10 and it worked
celest basalt
for me after it set nonce and reset recovery it took wayyy too long to connect b...
sometimes it takes forever for me if the USB stack shits itself
rebooting the computer usually helps
zealous bridge
lol nah it was kinda consistent for me
anyways it’s not gonna harm anyone if it waits 3 extra seconds
valid adder
@celest basalt for some reason detecting device disconnect doesn't work at all
zealous bridge
not like recoverys gonna time out by then
celest basalt
lol nah it was kinda consistent for me
I think one time I had that thing where every step was sluggish as hell and checkm8-nonce-setter just never worked, only thing that solved it was idevicerestore in DFU mode
but usually rebooting the computer is enough
zealous bridge
Nah it only took to long to echo the new nonce back to terminal, other than that the timings were perfect
just the last sleep 7 after reset was the problem
lilac wren
where are the patched ibec/ibss from
zealous bridge
it’s probably uploaded somewhere, you can decrypt them easily with fw keys
iphonewiki?
lilac wren
yeah but who made them and how did they remove the blacklist on boot-nonce
valid adder
those days they burned so many iBoot exploits lol
celest basalt
zealous bridge
@lilac wren i think the iBSS is patched out of every single signature check, not just boot-nonce
valid adder
img4 signature check can fully work on a demoted device with 3 patches 1 patch is needed for non demoted
zealous bridge
FreshNonce
celest basalt
lilac wren
lol
celest basalt
<https://github.com/nyuszika7h/checkm8-nonce-setter-linux>
lilac wren
the signature patch allows the boot-nonce to be set
are you sure
zealous bridge
Yeah that FreshNonce patch is a signature patch, allows setting generator
yes it’s in pwndfu futurerestore
zealous bridge
it freezes tf out
celest basalt
first time freshnonce patch, device doesn't reconnect after sending the pwned iBEC that sets generator
but then I pwndfu and start it again, sees the nonce is fine, so it proceeds to start the restore
valid adder
@celest basalt lets just rewrite the function properly
green onyx
<https://github.com/nyuszika7h/checkm8-nonce-setter-linux>
pog
zealous bridge
i love how non-cross-platform cross-platform some parts of fr is
green onyx
i love how non-cross-platform cross-platform some parts of fr is
lol true
celest basalt
@lilac wren petiton to make futurerestore gui's logo
lilac wren
Yeah that FreshNonce patch is a signature patch, allows setting generator
Yeah I'm looking at libipatcher and I don't think it's a signature patch but rather it directly changes the whitelist/blacklist
zealous bridge
Yeah I'm looking at libipatcher and I don't think it's a signature patch but rat...
It should still patch out the signature check when it’s loaded
zealous bridge
otherwise it won’t run cause it’s not signed
lilac wren
It should still patch out the signature check when it’s loaded
:| duh
lilac wren
LOL you actually did it
stiff hazel
LOL you actually did it
genuis abuse
valid adder
sigpatch isn't the problem why do you keep mentioning it
zealous bridge
it’s not a problem lol
valid adder
why do you keep speaking about it
valid adder
I use one patch
I return 0 for image4_validate_property_callback_interposer
it is called for each property
zealous bridge
istg this CPU hates me
it lets me enter pwndfu like once a month
otherwise it just claims interface and sits on it
zealous bridge
i should probably do a stress test and get it to 70 C
@valid adder i don’t get why axi0mx implementation of checkm8 is so shit compared to the checkra1n teams version
valid adder
checkra1n uses system usb
ipwndfu uses libusb
libusb is put in the backseat when it comes to system usb
for some reason system usb claims interface when it really shouldn't
its a ryzen issue
zealous bridge
how hard would it be to rewrite ipwndfu with system usb
valid adder
@zealous bridge not worth the effort just write your own exploit
green onyx
how's this guys
oh, put our pfps as icons
like froggy can be in the face time one (top left)
lilac wren
oh, put our pfps as icons
Hey that'd be cool
valid adder
Forrealstore
lilac wren
@zinc moon decide on a pfp
green onyx
Hey that'd be cool
i always have good ideas 😎
lilac wren
LOL the parrot bot got verified
valid adder
@celest basalt lol typical
I guess you actually need to send iBSS to reset usb even on 32bit
valid adder
joe
shy magnet
lol what
@solid basin get ur geniuses in check bro
i bet i know who it was too
if a genius was doing something after being told multiple times not to
then that genius should be removed
ezpz
oh
i was wrong then
toxic lotus
“babe”
willow bear
why no checkm8 nonce setter for windows 🥲
but there is trick to do it i think, more coding sure 😅
the tweak of conan dimentio
no im not talking direct from checkm8
there is a trick to automate dimentio tweak
jailbreak with checkra1n to get ssh access first(usb live) all in windows, iproxy to device, mount rw, upload dimentio exec and dylib, then set generator all from fr gui 😅, the dev will hate me @lilac wren , i think always for windows user 🤪
i think this part can be automate too if no licence issue about the tweak of conan
im talking on windows future restore gui 😅, user jailbreak on windows with usb linux live, then go back to windows
this part on windows can be automate for checkra1n user(on windows), but more code for dev of fr gui 😅
green onyx
this part on windows can be automate for checkra1n user(on windows), but more co...
there are no usb drivers for checkra1n as of this moment
because checkra1n needs custom usb drivers
stiff hazel
@green onyx I sincerely doubt checkra1n on windows will ever happen anyways
I mean I’m pretty sure someone technically got it working but it was like absolutely garbage success rate
tough crater
suppose I saved blobs for ios 14.5.1 while jailbroken on ios 14.0, and update to ios 14.6 or 15 beta, will it be possible to futurestore to 14.5.1 when jailbreak drops?
celest basalt
suppose I saved blobs for ios 14.5.1 while jailbroken on ios 14.0, and update to...
only on iPhone X or below (A11)
you need to jailbreak to downgrade with blobs
tough crater
means you must be jailbroken to use futurestore?
celest basalt
yes
tough crater
you need to jailbreak to downgrade with blobs
okay understand thanks
celest basalt
well, if a generator isn't set at all, then every reboot randomizes it, otherwise anything that leads to ApNonce being requested in normal mode:
- manual request with ideviceinfo/etc.
- checking for OTA updates
- iTunes/Finder checking for updates
willow bear
because checkra1n needs custom usb drivers
i didnt say use checkra1n on windows to set nonce, i asked for checkra1n devices on windows side(live usb), if my device is jailbroken with checkra1n first, need nonce setter tweak(dimentio conan), i talked about make this tweak install auto over ssh to set this nonce automatically(user dont need cydia, add source, install dimentio, install terminal), can be one click but more code here(iproxy shit and others), this thought only for windows who dont have vm mac or hackintosh or real mac/linux to use checkm8 nonce setter on dfu, so for windows user there is alternative option but not like linux/mac, even checkra1n dont support windows yet, but need much more code 😅
pseudo stump
yo how do i use ipwndfu on linux
i get this error when trying to run it
bash: ./ipwndfu: /usr/bin/python: bad interpreter: No such file or directory
i have python tho
balmy osprey
anyone around to have a look at my shsh file , saved it with tsssaver on 14.2 , cant find the generator in the file to set my device up to it , tried 0x1111111111111111, but says not correct ??
celest basalt
I think so, that's what people said, but I haven't tested it actually
balmy osprey
im on ipone x
downgrade to 14.2
13.5. 14.1, 14.2,14.6
noooooo
why got the 14.3, blob, check rain to set the nonce, surely it will , the error im getting is it says the nonce dont match ?
no
14.2
pseudo stump
does ra1nsn0w work with devise? or only ramiel, pyboot?
yeah problem is
id have to use this crappy hackintosh which has an amd ryzen + b450 board
plus trash usb
i got ipwndfu to work on my linux intel laptop
but idk if i can use ipwndfu on my laptop and then continue with like ramiel or pyboot
celest basalt
well yes dynamic bins are even more problematic of course
if you're referring to my build the filename has "static" in it
celest basalt
lilac wren
pseudo stump
well i booted to my hackintosh and ipwndfu works great on my linux laptop but when i try to boot the device i keep getting errors like "failed to patch iBSS -1" or "failed to dump device SHSH"
im trying to dualboot with ramiel rn
yeah idfk it gives errors
prolly cause im on a trash amd hackintosh
with poor usb support
theres legit nothing for linux which sucks
7
yeah i did
but when i have to like
select boot device
i select the ipsw
and then it gives me errors
like failed to patch iBSS
or failed to dump SHSH
or sum
wdym
tf
i dont have to do that shit?
well it didnt do smth before
maybe i need to wait a lil more?
yeah mac sucks hard without web drivers rn
ill update mac first so i can install the drivers
7mb vram
i wish i could hackintosh my laptop but unsupported gpu ig
pseudo stump
@zinc moon ok so u just put the number in and wait till it boots up?
cause i did that rn and nothings happening
and my ipad needs to be in pwndfu
right
well i placed it in pwndfu and connected it to the hackintosh
put the number in and ticked apply AMFI patches
now im waiting ig
soft turtle
Uses lockdownd_enter_recovery
I try to use the native library instead of calling executables as much as possible
lilac wren
@zealous bridge look it's basically you
zealous bridge
<@330016421817876490> look it's basically you
> https://reddit.com/r/jailbreak/...
Since when do I rm -rf 
zealous bridge
i did rm -rf /var/root/../tmp/*
mystic axleBOT
!t fr
futurerestore allows you to upgrade/downgrade/restore to unsigned iOS versions if you meet certain requirements.
lilac wren
!t futurerestore
mystic axleBOT
!t futurerestore
lilac wren
if you meet certain requirements
Requirements:
Blobs saved for the version you want to restore to
A jailbroken iDevice
A computer with at least 8 gigabytes of available space (not including the ipsw)
:|
we should rewrite that
bc fr needs to extract the ipsw
nah if they've bootlooped themselves on checkra1n they should know how to DFU
lilac wren
?
shy magnet
~4-5gb IPSW
extracting rootfs dmg from it too
exactly
so why remove it
don't underestimate how stupid users are
zealous bridge
Probably, but you need fw bundles
No point, they can restore to latest and downgrade anyway
zealous bridge
Dont think he understood what you meant by that
lilac wren
yeah
zealous bridge
They’re still fucking doing it @lilac wren
foggy crane
I can't dawnload anything in appstore can someone help me
zealous bridge
I got Stephen
lilac wren
lilac wren
I got Stephen
ah jamf vs vmware
zealous bridge
How long has it been tho
lilac wren
- Scott
should I be honest with him
and say we're jb'ers and this is the best tool for delayed ota
im gonna text him back then
here's the transcript of his last voicemail
Hey John, Scott Benson over at VMware. Hope all is well. Hey, following up in regards to the free trial request you submitted late last week for workspace one. It's all your name and come up a couple of times. I'm assuming you're having issues or challenges get access in there. So give me a call when you can. I'm your dedicated resource here. Love to get your hands on 470-247-6204. It's got over at VMware 470-247-6204.
what do I say lol
oh lol I thought he was mad that I made a second trial
"your name and come up a couple of times. I'm assuming you're having issues or challenges get access in there"
"YO WHY DO YOU HAVE TWO ACCOUNTS HM??"
lilac wren
John Klay is best name
that was my fortnite name as well
one of my random teammates said "johnny klay is a clay" over and over idk why
is this with FR version 2.0.0
maybe the .'s are making it mad
zealous bridge
looks like latest pongo still doesnt have full ios 15 support
sadge
ik
but i wanted to try anyway
zealous bridge
pog
lilac wren
salad is best player
zealous bridge
but wait does he say soccer or football
lilac wren
futbal or soccer
zealous bridge
ew
lilac wren
wow racist i see /s
zealous bridge
buenos dias juegos
lilac wren
goooooooooooooolasso
i swear he has a liverpool shirt for every day
bet he's wearing one today
no joke
zealous bridge
yes but my dad took me to liverpool games when he was younger
if i didnt grow up with it i probably would support a london team
stiff hazel
There’s news about the guide by the way
zealous bridge
There’s news about the guide by the way
what news
stiff hazel
what news
- odysseyra1n may be integrated into A11 main charts
- Emma is looking into sponsorships for the guide, which would eliminate tracking ads and make the ads not rarely collide over/under objects, but in the process they would make it to where ads could not be (easily) blocked
zealous bridge
cool
lilac wren
lol one of the first things I did on this server was bully capt with nyu
zealous bridge
it’s not that obtrusive anyway
zealous bridge
lol one of the first things I did on this server was bully capt with nyu
From Capt to JTV… why do you have such a grudge against geniuses
lilac wren
I only bully back
zealous bridge
actually don’t answer that… i think i know the answer
lilac wren
self defense
zealous bridge
denial
lilac wren
guess who the only genius who said FRGUI was useless was
zealous bridge
stiff hazel
fr though why do you have giant icons
zealous bridge
https://discord.com/channels/349243932447604736/688122301975363591/7396214752246...
This is embarrassing
restore
zealous bridge
literally
stiff hazel
JTV confuses me imo