#tvos-jailbreaks
1 messages Ā· Page 9 of 1
dd: /var/mobile/root/dump.raw: No such file or directory```
this should be run through ssh on the tv itself, not on my mac, correct?
where is... maybe just /var/root?
I keep thinking ios
i think tvos is just without /mobile/
yes
š
just making sure haha
can't dump blobs on a mac
log logs root tmp```
unless it's t2
dd: /var/root/dump.raw: Read-only file system```
just making sure it wasn't going to do it over usb or something
odd why root isn't writeable, try just of=/
dd: /: Is a directory```
```localhost:~ root# cat /dev/rdisk1 | dd of=/dump.raw bs=256 count=$((0x4000))
dd: /dump.raw: Read-only file system```
are you using a virtual machine?
can I not just use ./sshrd.sh dump-blobs?
you could.. don't know if the script would work as it's tvos and it might be built for ios
it uses the same code: oscheck"/sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p2222 root@localhost "cat /dev/$device" | dd of=dump.raw bs=256 count=$((0x4000))
so you'll get the same error
im in usb bootable kali linux
well it worked for whatever reason, I'm going to use https://tsssaver.1conan.com/check/ to check them in a minute
A tool to save your SHSH2 blobs online without using the CLI.
you could use find . -type f -perm -0222
find which directory it spits out, then adjust of= to said dir
yeah, invalid
on-board on tvos is 99% good
the only time it's bad is when you get 0records in, 0records out
ah alright
sudo apt-get update
sudo apt-get install git -y
that doesn't output anything
localhost:~ root#```
oof
which is odd, mount_filesystems outputs this:
sepi digest (20 bytes): e544cb34c605f08803f3a3481bf6acaec5e0face
sepi nonce (20 bytes): e76c87507ba0407a9a780b2131abdae924e9fe15
rsep digest (20 bytes): 7ae375ec9ae5f7a3e453c2ae25b58b00698e874d
rsep nonce (20 bytes): e76c87507ba0407a9a780b2131abdae924e9fe15```
were you able to convert the file?
i didn't have to convert anything, ./sshrd.sh dump-blobs gave me dumped.shsh
though...does it need to be .shsh2?
done this , and now please ?
no
ok thanks
now I have to figure out why / is read only, and install PersistenceHelper using the Developer app
literally any app will work
yep, i'm just using the Developer app
as long as you've mounted it.. the developer.app method of overwriting will still work
find / -name Developer.app is running right now
there we go, /mnt2/containers/Bundle/Application/6A2A6D06-E3B2-452E-AC6C-A9CA85607F79/Developer.app
alright, booting back up
remove that folder and try again
sudo rm -rf ./SSHRD_Script
hmm, the Developer app immediately just crashes
what command did you use to overwrite?
done ...now ?
redo the git clone command
From my mac, I ran scp -P 2233 /Users/cobre/Downloads/PersistenceHelper_Embedded root@localhost:/mnt2/containers/Bundle/Application/6A2A6D06-E3B2-452E-AC6C-A9CA85607F79/Developer.app/Developer
and that completed successfully
try rerunning sshrd and overwrite again
alright
sometimes the binary doesn't do it
but before shutting down sshrd, use reboot
to close the connections and unmount
yeah, I did
and you're on 16.x?
17.1
this is a different apple tv than the one I plan on using, I'm just messing with it
from 14-17.0
oh duh, I misread
you can downgrade if you have blobs
either way, my main purpose of using this tv while I wait for my 16.4 tv to arrive is to test dumping blobs which appears to have worked
thanks for the help
what blobs do you have for the 17.1?
just 17 and 13?
oof
i-m in the folder
you might nee to upload your fix script here for mek88
because they'll run into the pzb issue
this may or may not work for you
the ipswurl is changed, as well as the ssh port
sorry , now what i have to do ?
download my modified script and place it in the SSHRD folder
click this button
i have downloaded it
you should be replacing a script with the same name
then you can type in sudo mv drag the script in to the terminal window and then type in ./SSHRD_Script/
i have replaced the file ... i have to write sudo mv before all the cript ?
script
if you replaced the file, then sudo mv isn't required
sudo mv just moves the script, but if youāve already moved it then we donāt need to do it again
sorry i dont understend....sorry for my english , im from italy.... now i am in the folder ... what i have to do ?
./sshrd.sh https://updates.cdn-apple.com/2022FCSWinter/fullrestores/071-05901/6C60FB17-938B-4FD6-8E67-1FD2C2F0E3C7/AppleTV5,3_15.4_19L440_Restore.ipsw
donāt do sudo
linux moment
would he need to chmod +x the file maybe?
you could sudo chmod 0755 ./sshrd.sh
whitout sudo it sees me , i havent the permission
then it'll work as-is
i have turned off and retake in dfu ,,, the led is blinking fast , but still unabe to connect to device
you might need to sudo apt-get install libusb
it's because it didn't find it
the computer is not any sound when i connect the usb atv
oof.. i hate kali
i cant use linux and i dont know how to load ...
do you have a usb?
like flash drive?
you can use ethcher to install ubuntu iso on to flash drive
ok , i can do that ... but if i refresh the usb and i put ubuntu on it ... after i lose all i have done since now
it's easy to get back, all the files are here too
just make sure the flash drive doesn't have anything important on it
it will be deleted
yeah, do ubuntu not kali
ok , i format th e usb and put ubuntu , after i call yu back please
make sure to use etcher
don't just copy the iso
@earnest grotto the pinnacle of crapnet.. downloading a bootstrap at 1bps
thatās rough
coming soon to tvos 14
is it a known āissueā that TrollDecrypt ipas only install and work when installed by trollstore?
is that just a limitation of it or is there potential for a fix?
it's a given since you use trollstore to install such with
bummer, ok
seeing as going through the steps to do it manually is difficult
although trolldecrypt should see any other appstore app too
yeah, iām meaning when we dump an appstore app, non-trollstore users apparently canāt open it
i havenāt had a chance to test for myself though
Nice. Will wait for this
any luck getting ubuntu running?
Guys in Italy is a littel bit lateā¦i have created the usb with ubuntu and its working good , i have tryedā¦. But tomorrow i continue, i hope i can complete the mission to install trollStore! Thanks š
no worries!
wow okay i'll try it on my ATV4 HD on tvos 14.7 checkra1n
everytime i try to add this repo to nitotv, the nitotv app crashes back to home page
Yeah, thatās a bug in nitoTV, you can try downgrading nitoTV
Or use this command in SSH: echo ādeb https://zenzeq.github.io/tv ./ā > /private/var/apt/sources.list.d/sources.list
i tried this and it said no such file or directory
Oof, maybe run find / -name sources.list
The directory it spits out would be the one replaced
I think I just forgot where apt was
/private/var/mobile/Library/Caches/com.nito.nitoTV4/sources.list
/Applications/nitoTV.app/sources.list
which should i pick?
The private one
amazing it worked. thank you! One issue: I cannot install persistent helper. I tried TrollHelper and TrollStore. TrollHelper: click on link and no result. TrollStore: click on link and it asks to replace system app, but there is nothing to replace. Only option is Cancel
You donāt need to. Trollhelper installed troll store
okay. I thought I needed persistent helper in case I need to refresh app registrations. i guess not. thanks
i think this is also an explanation for not needing persistence helper installed on tvos 14.x: "On jailbroken iOS 14 when TrollHelper is used for installation, it is located in /Applications and will persist as a "System" app through icon cache reloads, therefore TrollHelper is used as the persistence helper on iOS 14."
Thatās iOS. Tvos works differently
This persistence helper will install trollstore as its own container with permissions
So then it will install other apps with their own containers and permasigned
@ionic copper So I couldnāt install a repo on NitoTV so I deleted all the default repos and killed Nito. However, when I reopen it I only have nito.tv_repo containing zero packages. How can I fix this?
use this command in SSH:
echo ādeb https://zenzeq.github.io/tv ./ā > /private/var/mobile/Library/Caches/com.nito.nitoTV4/sources.list
echo ādeb https://nitosoft.com/checkra1n ./ā > /private/var/mobile/Library/Caches/com.nito.nitoTV4/sources.list
echo ādeb https://nito.tv/repo /ā > /private/var/mobile/Library/Caches/com.nito.nitoTV4/sources.list
apt-get update
that should fix it
I got this
normal. Kevin needs to refresh his SSL certs
not your fault, server-side
I still only have that one repo lolā¦no packages WTF?
what jailbreak are you on?
Checkra1n
and it's an HD?
what version of tvOS?
14.6
okay, you could revert root fs
just go in the checkra1n app
revert the bootstrap, then rejb
Thatās what Iām thinking. Good Call. One other questionā¦Do you know how to get the PID of a specific app thatās not running?
yes ps aux
the PID would be the numbers in the second column
if you're trying to decrypt, it would be wise to run the app
Instead of reverting rootfs couldnāt I also just manually edit the sources.list file? And as to the other thing, I canāt run the app because it crashes on launch
you could via nano
but the issue is, those commands did edit the sources.list
and since there's no packages, it could be an issue with the jailbreak overall
or bad network connection
@ionic copper So I edited the sources.list manually, that resulted in NitoTV crashing on launch. So I reverted rootfs and re-jailbroke. NitoTV still crashing on launch. This is what Iām getting when I try to run apt-get update
If it's not running it won't have a pid
you could just rm -rf /etc/apt/sources.list.d/sources.list
then touch /etc/apt/sources.list.d/sources.list
then apply the echo commands
good morning guys š
morning
you're typing in the commands too quickly
it respond me "curl: not found "
Need to install that
I dont know how to do ⦠in am to bed on Linux
sudo apt-get install curl
USB issue
i have tryed to change the usb cable to another one ...it dont geave me any response,,, but if i use the first one it's write : waiting for device---> getting device info....----> Unable to connect to device
i have tried 3 different cables , it's the same response...unable to connect
Try sudo apt-get install libimobiledevice
"libimobiledevice" not found
sudo apt-get install libusb
the same
sudo add-apt-repository ppa:pmcenery/ppa
sudo apt-get update
sudo apt-get install libimobiledevice
how to disable the firewall from terminal ?
It's your network router
It momentarily would before it crashed right? That same PID couldnāt then identify the same app after its crashed though right?
i can do hotspot whit my phone to change network ?
i have tryed , and is the same ....
maybe im in wrong ... but in the port were i insert the usb cable from the Atv ,.. i have inserted a mouse bluetooth recever and it's working
i mean .. the usb port of the pc is worked
hmm i see you device can not be detected from pc
yes man
what are you trying ?
i need to install trollstore on my atv 16.2
and i need the helper
do you have blobs for 16.2 ?
zenzeq tell me the only way is sshrd
correct
yes if you dont saved blobs thats the only way to get it trollstore
except for kernel_task, every process gets a new pid every time it starts
kernel_task is always pid 0
i dont know what is the blobs
shsh2 file
do you use it in virtuel maschine?
does the linux is installed on your hard drive or do you use a virtuel maschine?
is on the usb bootable
you mean lice cd wighout instaling the os?
somethink is detected because when i insert the usb it respond "getting device info"
yes , whitout
why you not install it completly full
But i mean⦠how is possibile ?
thats why it can not detect the device in live cd you must install it to full get hardware access
Im going to do this in my very old pc⦠i hope its work
yes do it
Just a thought but An apps PID would be printed to syslog when it launches right or a crash log when it crashes. Could you use that PID to identify a particular application if it never restarts and is assigned new PID?
you don't need to
No because once the app crashes that pid is no longer used
it could be assigned again but
i believe pids can be anything from 1-1048576? some power of 2
yoooo im on ubuntu installed now
Now is installed ubuntu š
try another computer
it is
what does ideviceinfo say?
where i found idevice info please ?
sudo apt-get install libimobiledevice-utils
it is respond me , the last version is installed already
then ideviceinfo should work
?
always unable to connec to the device
is an HP laptop
I have turned on the Apple TV and i saw ⦠developer mode disappareā¦. Maybe the problem is this ?
Has nothing to do with it
Developer mode is there when connecting your device to a developer apple ID
Yes is appare when i signed in on my phone
I have tryed again But it respond me the same ⦠unable to connect to device
We'll come out with a different method soon
I wait for it ⦠But i have anather Atv But whitout usb cable
4k atv ā¦. In that , can i install trollStore?
@fading fossil @ionic copper
Iām wondering if your connection problem would be resolved by either installing iTunes or opensource implementation of usbmuxd?
TvOS 16.1
Can you help me to install what you say Please?
Imobiledevice comes included with that
It's basically bare-bones iTunes
Maybe reboot usbmuxd
i'm finishing the installation of itunes whit wine
Maybe somethink goes wrong? The black Window is iTunes
What you're doing is basically rebuilding another car when your check engine light is on..
so you're telling me I should stop trying and wait for a new trollstore installation method?
Well, not stop trying but what you're doing is a bit extreme imho
i have no idea to what i can do for fixing my problem , and im trying to do what the ather guy tell me to do ...
i found the problem
too easy
it need SUDO
and now what i have to do please ?
Now just boot
unplug the power to Atv and turn on ?
No, with sshrd
ALWAYS SUDO
This happens, just cancel, Reboot apple tv and retry
But the Apple TV is blinking and not power on
is blinking
i have to wait ?
@ionic copper can i unplug the power and switch on again now ?
The ramdisk messed up during creation
i have to do boot again ?
I don't think that's a good thing
Give me a few hours, I'll fix it
ok man, here is 23.15 ... if you fix the problem i will try again .... but tomorrow ...maybe tomorro morning .....thankyou so mutch
neither 5.1 nor 5.3 block beta
i have weird behaviour on appleTV 4Ks on tvOS 16.1 - 16.3.2 where the OTA block does block 17.x, but nags after for 16.6 (even tho beta was never enrolled in with the apple ID)
16.6 update will fail tho even if you go thru with it (already tried)
on my 16.5 4Kg3 , i dont get nags for 16.6 at all, and another i have on 16.6 doesnt either (obviously)
I believe it has something to do with tvOS's in that range that i mentioned. Until 16.4 , beta asks if u want tvos 16 or 17. So yeah idk, just sharing my experiences
also, sigh im stuck with this sshrd method
getting error connecting to device, no such file
Have blobs but dont wanna do dg method
ah nvm , just did it thru ssh
nice
no clue why i was getting those iproxy errors tho
hmm, the ipa i made for kodi 20.3 is not working for me on 17.0
TS is just forever Installing . Worked on all my 4Ks tho on 16.x
anyone got kodi working on 17.0 ?
nvm, it worked. HD is just super slow lol
Another ATV ⦠Why in this case dont install trollStore ?
In the meantime, I'll wait for you to let me know about the other one ATV
I did !!! But now ,where i can found the link for the ipa ? Id i have an ipa file on my pc , how can i put in the ATV ?
You need to stick it on a web server or something. I usually use Filzas built-in WebDAV server on my phone and point the install URL there
Like this
Thak you man , now i have to understand what you have says , to translate it and After to compriend how really to do ( in from Italy and my english is to bed)
Maybe a little video can help me better
The IPA files that you can install on your iPhone are the same ones that you can install using TrollStore on Apple TV?
they're the same format, but you can only install ipa files on the device that they were made for
Can you tellme where i can found ipa for atv Please?
which ipa are you trying to install?
Hey, I am trying to jailbreak an Apple TV 3,1 but it requires an Arduino (that I have) and a USB Host Shield (that I dont have) to jailbreak it using Blackb0x. Does anyone know if I can do it with a Raspberry pi pico instead of the USB Host Shield pls ?
Do you know where to download the ipa ?
if you come up with a specific ipa you want, it will be easy to find a link. If you just want ipas in general, no i don't know
speaking of ipas
theres no youtube with ads blocked yet right
like a uyou for tvos or something
Alright, I have my Apple TV HD on 16.4 and have TrollStore installed now. I've installed misaka through trollstore using this ipa: https://github.com/straight-tamago/misaka-tvOS/releases/tag/5.3
but whenever i open it, it immediately crashes. I've tried rebooting, with no luck
@earnest grotto
ive been using these OTA blocks on 16.x on only 4Ks and they work fine
yesterday, i got ahold of a 17.0 HD, 5.3 also crashes for me
let me try 5.1 real quick
5.1 does the same
i see
you can sshrd fine right
yep
when u go to system updates
does it tell u Beta Updates or no
Like this
my account is, yes
its developer acc?
yes
ok, thats what im dealing with rn. Thats why u get beta update option (same as me). The block worked, but isnt blocking beta updates
that shouldn't be an issue though right? Since beta updates are off
Doesnt matter lol
Apple tv is stupid look
So, 17.4b nagging now
Gimme a sec to try someth
@earnest grotto can u sshrd in and provide the 'com.apple.MobileAsset.plist' file from var/root/library/preferences
want to compare it with mine that i have here. Theres no sensitive info in there
sure, just a minute
16.4 yeah
ok
leave it there
we'll test on yours. ill give u a file to add, and itll probably start nagging for 16.6 after to confirm
ok, thats the output on mine as well, but im not sure if thats the right file to overwrite since its my first time experimenting on HDs
lemme think
ok do this
leave that file alone for now
go to var/mobile/Library/Preferences
done
it shouldnt overrwrite (theres no file like that in that dir). then restart and check for updates
its a diff directory tho. u noticed right
yep
kk, restart and check
booting up now
like i said, thats misaka's block. But since ur on beta, ull get 16.6 nags soon (even if u try to update, itll fail so dw)
but, lets confirm the 16.6 nag
yup. leave auto updates OFF, and leave it on for 10-15 mins on springboard
see if u get a nag/ check every 5 or 10 mins
alright
u turned off auto updates right lol
so it nags and doesnt try to auto update
yeah haha i did it right after this
kk
oh, restart again just in case. forgot
yup there u go
so thats the dreaded nag im dealing with atm
even if u update, itll fail because its not signed
yep
yeah it wouldve said 17.3
ok lemme test
your literally the first person ive seen with this issue too. no one else has it
other than me lol
that problem is not exclusive to HD
ah
seems to be a 16.0 - 16.4 problem because
i have a 3rd gen 4k on 16.5 that doesnt beta nag for some reason,
another 4kg1 on 16.6 that doesnt nag (because the update nag is for 16.6 and its already on 16.6)
another 4kg1 on 16.3.2 nagging for 16.6 too
This 17.0 HD nagging for 17.4b
also had another 16.1 gen2 4k that was bugging for 16.6 but someone helped me block it with some MDC hackery
cool
do u wanna try on your end @earnest grotto
i can shortly
just keep a backup of original
Overwrite that in root/Library/Preferences.
then restart
no nags so far for me on 17.0 HD
@earnest grotto report back when u do it. Also i think it takes longer to boot lmao. Might be placebo though since im not used to HD timings
keep backup of original file just in case
No
Asking this is borderline piracy
Sorry
@ionic copper is now worked for the atv pf yesterday?
/var/root/Library/Preferences, right?
yeah
it's been booted for a few minutes and currently says it's up to date, i'll keep checking
just note, its working for me, but it broke VPNs for me on 17.0
but thats a 17.0 problem
no vpns on 16.x
yeah
@ me later today lmk how it goes
ill remove the files since i dont wanna break ppls atvs lol
Would it be theoretically feasible to replace the TV+ app executable with the executable of your choice, so that when you hit the TV button on the remote it opens a custom app?
@heavy patrol seems to still be working
ohhh never thought of that lol
thats a good idea to try
yeah, same for me. Just VPN isnt working so i might remove
but u should be good on that block. Good to know it works
unless there's a better way to repurpose the TV button to open an app
though personally I'm keeping it set as Home Screen
yeah, I was just wondering if there was a better way to have it open a specific app that doesn't involve overwriting the TV+ app
btw have u ever gotten sshrd running on 4k apple tvs?
I haven't tried
I don't have the right cables, nor a 4K on 17.0 or lower (though I know that's not a requirement)
is it not the same way you do it on the HD?
no because theres no firmwares for it
ah true
jailbroken, yes
trollstore, no
figured
it doesn't work OOB because the ramdisk that's included in the OTA isn't an actual ramdisk. It needs to be reconstucted and 13.4.8's IPSW won't work because it's too low
How did you install TrollStore?
Canāt say to much cause Iām uninformed on tvos stuff, but there is a wip guide
Guide to installing TrollStore on an Apple TV
they STILL put "coming soon" š
using SSHRD
I also tried to install Kodi on my Apple TV through Filza with TrollStore, but that doesn't work either."
Nothink is worked
I also have blocked updates with Misaka and have the beta buttons on my Apple TVs but have not yet received a prompt to update
How are you getting these screenshots of your Apple TV?
quicktime + shottr
Ah. That only work on Mac or can I do that on windows?
mac only as far as iām aware
Iām surprised it lets you mirror like that. Can you watch Netflix through that?
Dang
i doubt it, but i donāt have netflix so iām not sure
Why y'all installing piracy?
I tryed MaMe , all type of files, dont work
Doesn't answer the question
Also, you can't install iOS apps. They won't work
What kind of app you have install ed whit trollStore ?
And where to find the apps for tvOS
Thereās really only one thing you would need sideloading on an Apple TV for⦠letās all just enjoy the TrollStore and keep what were using it for to ourselves lmao
Trollstore for the iPhone has the same problem, the IPAs are all over the damn place
Not that Iāve found! Havenāt had a problem yet
@ionic copper did you ever figure out how to lock a directory with Spartan? I updated to the latest build and still donāt have the lock button :/ I want to lock the OTA folder so it doesnāt update. Or is there a way I can do it manually with a terminal or something?
It can be done via SSHRD
I donāt trust the plist OTA blocker I feel like one day itās just going to ignore it
I have 4K 3rd gen with Trollstore
so thatās not an option š
I'll probably make a block ota app for trollstore
That'll provide both the profile, plist and locking
I was thinking of just disabling the damn OTA daemon with xpc, but I donāt want to brick it
Can anyone test this and see if it works on tvOS lol
Yeah no, apple made it to where modifying the daemon will bootloop
The xpc method will brick tvOS? Man thatās some BS
Best thing to do is instead of disabling the daemon, just point the daemon to nothing
Then it'll run, execute nothing and then it'll do nothing
Whatās the difference between tvOS and iOS that this would cause a bootloop?
Iām not sure how tvOS does it security
Many differences, especially when tvOS has enforced updating because that's the only way it can be restored
Besides the awful dpi of that monitor?
Yes, the issue with the pop-up
I've got faith in you, spot the issue
You have to ask that when it says iPhone..
well, other than that, it seems like a normal error. I figured maybe it said iPhone when you were loading it on an Apple TV lol
Nah, but there's a big issue with the prompt. Can you figure it out?
I'll give you 3 guesses
is 1.6.3 compatible with 14.5?
Youre on Tvos 16.5 or higher?
Can you figure out the issue?
Wdym
No, it is iPhone
But what's the issue with the prompt
iirc, last time i did that on older ios, i had to look for an older build of altserver
Wrong.. 1 more guess
I believe you do
Spartan tvos doesnt work at all for me. No write access. Try renaming any file or folder and ull see
I keep looking for some grammar or something spelt wrong, but I havenāt found anything lol
I feel like attempting to rename random files is a bad ideaā¦
Idk zenzeq lol
Okay, I'll reveal the issue:
If you hit cancel it installs anyway?
They're on iOS 14.5.. You don't need altstore
Its been over 3 yrs since i last used altstore fr
ā¦
Yeah, you could just use TrollStore
I thought y'all would've clued in.. Especially with this trollstore talk
I thought u were troubleshooting the issue
Bc ppl still use altstore for those that prefer u0 over taurine
Well, I mean yeah but I figured you were installing it for a reason lol. Thatās obvious.
What tvOS do u have thats not nagging?
Didn't matter whose installing it.. The point is, it's 2024 and we have newer exploits that don't require signing on those firmwares
All mine are on 16.5. I just got one on 16.4.1, but I havenāt taken it out of the box yet.
Yup there u go, called it
oh
This dreaded nag is for 16.4 to 16.0
I made friends with this dude on Facebook marketplace that has the ability to purchase customer returns from Costco for a deep discount. Right now he seems to have like an endless supply of Apple TVs on 16 lol.
16.4.1 im p sure will give u 16.6 nagging too after misaka block. But try it
For all HDs too?
Iāve already purchased 7 from him. Iām going to hack them and resell them
Cause mines on 16.2 and nagging is gone
Probably 
But misaka/mobileasset is a bitch
I might try to get some 4K 3rd gens on 17.0 and hold onto them, until an exploit comes out
I dont think its worth cuz u never know entrypoint. And those dont have usb
Why spend more money.. I think you're reselling them
Yeah, Iām going to sell them on jailbreak swap in a few months when you can no longer find these versions lol
You're not gunna make much
The person i helped block OTA had a 16.4 HD and was nagging
eh itās also fun š¤·āāļø
Zenzeq
Is the apple tv scene the only one with this buy/sell culture
iOS i dont think is like this
Plus, this guy is selling them to me 50% off retail. Even if I just sold them for retail price with TrollStore pre-installed ill make $50 each
people do the same thing with iOS devices on old versions š¤·āāļø
Itās not scalping if I sold them for retail price or a little more either
Its definitely scalping lmao, your earnings do not matter, what matter is youre hoarding/not letting others get ahold of it
But w/e not my war to win
Free world
Wdym
You can buy and sell with any device
Itās called supply and demand. Scalping is literally the whole premise of the stock market lol
Ftr: Spartan can read and write to folders, just not root
The TS patched one that rin provided? I couldnt rename a folder in media
Or create a folder in media/documents
Is it possible to get SSH running on TrollStore on Apple TV like they have on iOS
it is, but not worth it
especially without root access
I was just figuring SSH would be a much easier way of doing stuff. Trying to navigate with Spartan is kind of a pain, thereās no task manager, and thereās no easy way to get files to the Apple TV lol.
Anyone tried this on Apple TV yet
Could actually be useful for tvOS instead of just as a virus for iPhones lol
Iām gonna try injecting it into MisakaTV when I get home and see if I can get a shell
For what reason
SSH
That's not what what's for
Well currently, I donāt know any other way of getting a shell
Why do you need a shell
But you have no read/write access
Canāt you write to /var?
Or does that not work on tvOS either
You can also use it to chown the OTA directory manually and lock it
Not without an exploit
It does
OK, so then what directories can you write to on tvOS without bricking anything if you are unsandboxed?
/var/mobile/library/preferences clearly works if we are able to copy the mobileasset.plist into it
this video shows nothing
trying to create a random file in that dir
also tried to rename photodata
which isn't present
huh
its not there
exactly
it doesnt create anything
indeed. Which i was saying
Oh, I thought that was just spartan being glitchy lol
yeah what i mean is, i cant write with spartan
and im not in root
i also renamed photodata, but it didnt do it
exactly, without an exploit
u said it works everywhere except root..
trollstore perms doesn't mean read/write to
it does, with the exploit
hmm
because the exploit allows you to remount / as read/write
Is this misaka is doing?
Thatās why we can write to/var/mobile/library/preferences ?
misaka exploits
ah ok that makes sense
which is what's used to gain read/write to install trollstore
without sshrd, because sshrd uses checkm8 as exploit for read/write
So if the whole system is read only, how does tvOS itself save its preferences lol
Like when you toggle off install updates automatically itās got to write that somewhere
it saves it via signed binaries that have perms
oh. What a pain in the ass
Do you think iOS will move in this direction eventually. I wonder why itās so different
it's different because of lack of user data
no-one texts on an apple tv
or takes it outside with them to play spotify
I thought remounting / as rw would trip the SSV
there's no ssv in apple tv
So then theoretically, couldnt we create a launchdemon signed with the coretrust exploit, and just modify the system to run it at boot?
you could.. if AMFI is disabled
Then we can program this launchdaemon to spawn a coretrust signed copy of PineBoard with tweak injection and have basically an untethered jailbreak
nah, just unaware
I don't think you know how an untethered jailbreak actually works..
an untether is just getting the unsigned code execution at boot, no?
no
there's more to that
Oh
run games, emulators, airdrop etc
The only thing that matters⦠Does Mr. Jump WORK??!!
No it doesent ššš
š
I dont know Why
Hasnt in years. The devs dropped support. Not sure of the exact issue
The exact issue is the binary doesn't support the frameworks needed to run on the newer OSes. Unlike 10.2.2, you didn't need so much code to operate it but now with newer features, you do.
If they open-source it, it could be updated
Yah, damn. I think it worked up to 12. But yah one of the devs was pretty curt last i asked back in the day hah so doubt they are of the open sourcing kind
@ionic copper could something like this be of any use https://github.com/nitinseshadri/iAppConverter?tab=readme-ov-file
Yah theres in app purchases for the ios app so there goes open sourcing
There is a game that's just like Mr jump, much better too.. Called chameleon run
Cant be better no way but does look cool thanks for the heads up
someone port sonic mania decompilation project to tvOS pleaase thanks
Also thats not free like mr jump. Negative points lol
Oo did this get anywhere?
https://github.com/Deonte/JumpMan/tree/master
I could compile that for tvOS
If you want that would be awesome
Not to supersede this #tvos-jailbreaks message
Can we get a PS remote play on tvOS plz???????
OK can someone explain to me why the fuck Tinder is available for the Apple TV??? Just why is this a thing? So you can sit in your living room with all your friends and swipe while they watch?
Explain to me why Apple put SEP on the apple tv is a better question..
PS remotes already work on tvOS
PS remote play is game streaming
Hey I need help from anyone I have a iPhone XR that says connect to itunes
I have my imes number
I just canāt unlock it
That has nothing to do with jailbreaking
Native app or screen mirror?
Built in
The project works, the issue is, you've only got one level
Scary thought: if/when Kevin decides to call it quits on jailbreaking and retire, his whole network would shutdown. This includes the inability to use nitoTV
Hopefully by then, nitoTV would be OSS
Yes, but most of the apps are with noticeable delay.
?
I also tried to install Kodi on my Apple TV through Filza with TrollStore, but that doesn't work either."
Can someone help me ?
I could not get Kodi working either it throws an error š¤·āāļø
what error?
I just sideloaded it regularly, but I had to change the bundle id of libass
I forgot and Iām not home at the moment ill get a pic a bit later
you.. installed Kodi on your Apple TV through Filza with TrollStore.. in what world does that make any shred of sense?
you do know filza doesn't exist for apple tv?
I have filza in my phone and share the link to download the file from the phone to atv
Anyway, I can't install any applications via TrollStore."
what are you installing and from where?
I have downloaded kodiATV from the kodi website
a deb or ipa?
Ipa
From where
TrollStore
That's why it won't work..
Can somone tel me where i have to download the apps , i Asked Many times
Because what you're asking is piracy

Kodi is piracy ?
Yes and no
The app itself isn't. But what most people do with it, is
the kodi website gives you a .deb though, not an .ipa
unless you followed the guide to make it into an ipa
The same is the knife, you can heat you can kill
Which no one knows how to read
This day and age is all videos
"Do what I do"
where did the .ipa file come from?
Guys ā¦.. i told you , o cant understand english, i am from Italy ā¦.
Xcode.
I love how people who can't understand English are able to type it out
youāre probably going to have to change the bundle ID in kodi.app/Frameworks/libass.framework/Info.plist to org.xbmc.kodi-tvos.framework.libass
i believe thatās what fixed this error for me
Or.. Install version 17
but thatās 3 major versions behindā¦
If it works, it works
Do you know translate ? From Google man
It's still surprising how most folks just don't use translate
I have studied english at school , most of What you write i dont understand, What i think is important i ttanslate , But i cant translate all What you write
that makes no sense lol
After they've already installed it 
so what, the man is asking for kodi and not anything else
he is asking for other things too
Not just kodi
How can i do a vocal to listen to you my english of you dont belive me
It's all good
yea but what do we care what he does afterwards with kodi
kodi in itself is not piracy
Because they'll want support which isn't what we do
And/or isp shutdown
i didn't know checkra1n was this much of a pain in the ass on macOS silicon lmao
couldn't believe I had to disconnect/connect the cable so often
So trollStore can insalata .deb files?
no
You can thank apple for that. First USB c and now making apple silicon like amd
You're thinking jailbreak
Trollstore isn't a jailbreak
Is anyone else having issues using FR to restore apple tv HD
Been at it three days now to no avail
lmao
blackb0x doesn't work on El Capitan for me
I press the jailbreak button and it immediately crashes
is this just because it's El Crapitan
Is there a turorial fort trollstore tvos?
Yeah it has a bunch of problems on older versions of macOS
well I heard this was likely an El Capitan problem
i had the same issue with greenp0sion
it's a different issue but yeah
I think you could try put the atv into dfu mode before pressing jailbreak
i did
didn't change it
or before even launching it
it's when I tried jbing while in DFU that it broke
ah ok
I did see someone fixed this particular problem on another jailbreak
will try fix it in blackb0x when I can
what TV and OS?
Tv4 16.5
oh you made the tool
didn't notice that
yeah
would it work on mavericks? i planned to downgrade it anyway
it won't work at all on mavericks as it is
I added partial support for 10.11+
but it's missing some system stuff still
alright, i was confused because ios.cfw.guide says it works on 10.9+, i'll have to let whitetailani know?
youāll need to use SSHRD and adapt this guide to replace any app with the persistence helper
I'm working on a replacement for the entire installer which should be a lot easier
Thanks
but other things are getting in the way atm
yeah it definitely will only run on 10.11+
i donāt have time to write a complete guide but ping me if you have questions
afaik, I didn't test on anything lower
Okay thanks
Btw i must use a ssh ramdisk even if im on tvos 16 and i dont have blobs?
I think 10.13+ is what you need for it to work properly atm
i believe the exploits may not work on lower than 16.6 but it may on 16.5, not sure
I mean. The ssh ramdisk wont break anything due to ssv ? Thatās my preoccupation
This is fine ? https://github.com/verygenericname/SSHRD_Script
Ok thanks
yep
you may have to try my modified script
Okay thanks, i will try it in a month⦠I thought it was going to be easier and im a bit of a rush
š
But yeah, thanks for all
skill issue
make an IPA from a deb following the instructions from the kodi wiki below. but before you creat the zip from the folder named Payload in step 7, follow the steps in the top comment on the reddit post i linked below. Basically you need to show the contents of the app, go in and remove a folder. then finish following the steps in the kodi wiki. if you follow these two guides you can do it yourself. https://www.reddit.com/r/jailbreak/comments/188nlku/kodi_black_screen_ios_163_trollstore/
on monterey, i press jailbreak and then after it restarts my apple tv 2, (on either 6.1.4 or 7.1.2) it just crashes forever and doesnt actually jb the device. From there it'll just crash forever until i restore the device
the apple tv crashes every restart? or do you mean blackb0x?
yeah blackbox crashes once the atv connects again from the restart
after that, the atv isnt jailbroken, and blackbox crashes everytime it detects the atv
also @cyan veldt question, 7.1.2 cant be untethered yet right for AppleTV2,1? 6.1.4 doesnt load anything anymore, Just Computers and Settings... unusable. Itunes store unavailable. 7.1.2 does load everything but no untether obviously.
I'll have a look on the weekend, haven't tested on atv2 for a while
and no untether yet but it's doable
I don't know why we're dusting off this device when nothing works for it
Hi guys
I have Apple TV 4K 1st gen, should I stay on 13.4.5 with nitoTV or thereās newer version with jb?
do you have any blobs saved
Didnāt touch my Apple TV for at least 3 years so sadly not
if you update youāll lose any jailbreak opportunities
Wait what version of tvOS patched KFD? This is saying below 17.3. I thought it was fixed in 17.0 š¤
Or is it a typo lol
Is this the thing we needed for TS on 17.0
Won't really help with a 4k
true
Unfortunately
But in other news, I've figured out a way to permanently disable OTA on the HD
No profiles needed
Just gotta make the implementation for the 4k
4K only
Which would be ideal at this time seeing as the HD has an sshrd
So this means we could get TrollStore on tvOS 17.0? Interesting. I wonder why it took them so much longer to fix it for tvOS vs iOS
I donāt have any Apple TVs on 17.0 yet. I have been trying to find some.
no itās called nobody actually checked + Apple did this thing called never listing that it got patched
Dang
It can, just need to update it again to include keys
Is it working fine?
Let me know if you're able to pwn and set the apnonce
Seriously? They updated the fucking Developer app now my persistence helper is gone -_-
I guess I should turn off auto app updates on Apple TV...
Ugh now Misaka wont reinstall it either wtf did you do apple š
Ok they definitely did something to the Developer app Misaka cant install Trollstore helper anymore on either of my Apple TVs lmao
you don't need the developer app
Ya I guess once trollstore is installed you dont even need the helper anymore why am I fighting this lol
Let me try testflight
Ok well that didn't work either... it must just be Misaka. idk why this is giving me such trouble now it worked perfectly before
i'm asking the dev if i have perms to modify misaka
'cause i know a way of getting it to work
Ya im just getting this now on both my Apple TVs with Developer and Testflight. No amount of rebooting or uninstalling and reinstalling has helped. Idk what changed that screwed it up so bad lol
ill play with it more tomorrow I'm exhausted
is there any fix in development to make kfd work on the atv4?
yes, make kfd greater
it's not that it doesn't work, it's just too slow
imagine deploying an app to the appstore with trollstore installation url. Upon app launch, you get jump man remake with trollstore added inside in-app purchases screen 
where can i obtain a tvOS version of CydiaSubstrate.framework? I believe that's what's causing these errors when I try to compile a tweak
> Making all for tweak testTweak
==> Preprocessing Tweak.xmā¦
==> Compiling Tweak.xm (arm64)ā¦
==> Linking tweak testTweak (arm64)ā¦
ld: warning: -multiply_defined is obsolete
ld: building for 'tvOS', but linking in dylib (/Users/cobre/theos/vendor/lib/CydiaSubstrate.framework/CydiaSubstrate.tbd) built for 'iOS'
clang: error: linker command failed with exit code 1 (use -v to see invocation)
make[3]: *** [/Users/cobre/theos/makefiles/instance/library.mk:52: /Users/cobre/Downloads/testTweak/.theos/obj/appletv/arm64/testTweak.dylib] Error 1
make[2]: *** [/Users/cobre/theos/makefiles/instance/library.mk:52: /Users/cobre/Downloads/testTweak/.theos/obj/appletv/arm64/testTweak.dylib] Error 2
make[1]: *** [/Users/cobre/theos/makefiles/instance/library.mk:37: internal-library-all_] Error 2
make: *** [/Users/cobre/theos/makefiles/master/rules.mk:146: testTweak.all.tweak.variables] Error 2
The framework is on nitoTV
You can get it on lechiums github
ah, it didnāt come up in my googleing but iāll check it out
What tweak are you making?
just testing an idea i had, probably won't release it though
hmm i'm not seeing it, do you mind sending a link when you have a chance?
I can send it to you via pm if you want, dumped directly from my 14.6 tvOS
Iāve tried one from tvOS that i got from someone (probably you) and it gave a different error, iāll post the error later
is that new tvOS jailbreak still being worked on?
Whatever happened with the Homepods
I was looking forward to see if they could be fixed š
They are fixable, just been busy
What firmware would an Apple TV bought in December come with? Might pick up this guy for only 65$ lol
Oh nice
Well, nice that they can be fixed, not that you have been busy lol
Most likely 17.1 - 17.2
But just because it was bought in December doesn't mean it has 17.1 or higher
After all, these were released a year ago with tvOS 16
Well he also bought it from Apple, which probably makes a difference. I would imagine stuff directly from Apple is kept updated way more than other stores
Too bad you couldn't get them to open it and turn it on
As we both know, it's not brand new
The box is already open, can you tell 16 or 17 just based on the hello screen? I can just ask him to power it up and send a picture of it
I don't know what 17s hello screen looks like
The hello screen on 16 and 17 are similar, would be best to reveal the OS, then just reset all content and settings
Yeah, they probably aren't going to do all that lol. The one guy I got all my Apple TVs from so far was the only one willing to power up the 30ish he had for me and get all their versions lol. Unfortunately he has ran out of them for now š
Inb4 seller hits "reset and update" 
If an Apple TV starts the update process, can you stop it? Like if you catch it quick enough and yank the power will it stop the update or just brick it lmao
There's three stages of updating
Download/extraction, preparation, and application
You can pull it during the second stage
The first stage is on the OTA screen
The second is when the screen goes black and tells you "preparing"
And that one takes the longest
If you fail to unplug by then, then you deserve to get bricked
Good info, thanks. Hopefully I never run into that but good to know.
Usually it happens when the tv is off
So you can't see the update
Then when you turn on the TV, new features suddenly exist
Ya that's what I'm afraid of. I have the OTA blocker install but I don't trust the OS is going to respect the plist file one day and would rather find a way to kill the OTA daemon completely
I have been hoping none of my TVs have already downloaded the update in the background before I did the OTA blocker
People have had that problem on iOS where they install the OTA blocker AFTER the OS has already pre-download the update. They don't delete it from the storage and the system just automatically installs it one night.
The thing with apple tv, the update isn't installed on the system, but via a securely timed intrival via plist that tells the daemon to connect with the brain sever of Apple and verify compatibility
If I were to block OTA, I'd probably change the model number of the Apple TV within to fool OTA in to looking for an update which doesn't exist. But in doing so, wold disallow sideloading/AppStore downloads
Does he have any on 17.0? If ur not interested in those, can u dm me if so
use it as a coaster
real
I found my 14.7 blobs. anyone futurerestore an ATV 4 HD lately?
Yes, everyday
Good device to hide corn
yeaaaa
prolly gonna sell it tho
hope roku can be jailbroken
I have used this site in the past to get an approx manufacture date which I then crosschecked against what OS version was out at that time. However, some have said Apple's SN no longer reflect manufacturing date. When I punch in your SN nothing comes up.
@ionic copper ramiel isnt working for me
What's the issue?

Forgot about the tvOS 16+ part
What about it?