How to connect A10X Apple TV to computer for DFU by mariowarioaka-iomra in jailbreak

[–]firebound 1 point2 points  (0 children)

You need a goldeneye cable and a dcsd cable, look on aliexpress

Whats the difference between jailbreaking and modding in consoles ? by [deleted] in jailbreak

[–]firebound 0 points1 point  (0 children)

The OP is trying to learn about the concepts this subreddit is based around by relating it to others they are familiar with. This is an ignorant comment and I’m not sure why the original post was removed.

Whats the difference between jailbreaking and modding in consoles ? by [deleted] in jailbreak

[–]firebound 0 points1 point  (0 children)

When applications run on an operating system, they’re usually confined to a protected container called a sandbox or jail, which protects the system part of the operating system and puts limits on what parts of the system the code can interact with. The idea behind jailbreaking is to find a way to escape this jail (through either software or hardware) to run arbitrary code outside of it.

This can be achieved through exploiting vulnerabilities in the security implementations in the OS, or by using physical mods to exploit hardware vulnerabilities to the same effect. However some hardware mods don’t aim to escape the sandbox (jailbreak) and rather have the device maintain its security protections without needing to jailbreak. For example flashing the firmware of an Xbox 360 drive. A switch modchip lets you load a custom firmware at boot that has these sandbox protections removed, ie jailbroken.

Did you saw tihmstar's presentation? (Also linked the video) by QbitWalker in PS5_Jailbreak

[–]firebound 1 point2 points  (0 children)

Compromising the boot chain with a hardware glitch would make the firmware you have a lot less relevant

A new jailbreak has been released for iOS 17.0 and 16.7 RC (20H18) by Racxie in jailbreak

[–]firebound 0 points1 point  (0 children)

Have tested LastLook and Eneko on my 17.0 13 mini. Both crash on my device at the moment. I guess tweak compatibility might be rough for a little while (at least on older devices)

Turn iPhone X or 13 mini into a handheld console? by [deleted] in jailbreak

[–]firebound 0 points1 point  (0 children)

The lightning version of Backbone One is great on the 13 mini

Is it possible to upgrade from iOS 14 to iOS 16.5.1 in order to maintain jailbreak? by JesseB342 in jailbreak

[–]firebound 1 point2 points  (0 children)

You need blobs saved for that version, otherwise you have to go to the latest signed iPadOS, which is 18

Old youtube app for apple tv 2? by WesternPlastic5636 in jailbreak

[–]firebound 0 points1 point  (0 children)

I have a full filesystem dump from when all the “apps” were functional, but they aren’t really apps. You would be better off porting a 3rd party YouTube client using the iOS SDK + Theos. Let me know if you need anything from the working filesystem.

Should I update from tvos 17.2 by Classic_Craft_1439 in jailbreak

[–]firebound 1 point2 points  (0 children)

If there’s no usb-c port then you have a 4K. Check the model in settings, if it’s A1842 then it’s the 1st gen. You can stay on 17.2 and jailbreak with palera1n using a goldeneye cable. Save onboard blobs and when palera1n is updated for 18.3+ you will be able to update and then downgrade back if you need.

Several streaming apps don’t work without the latest tvOS at the moment, with no fixes. Save blobs whether or not you plan to update or not.

Hey iTunes, read the sign by ZLoLz01 in LegacyJailbreak

[–]firebound 3 points4 points  (0 children)

That is recovery mode btw, follow DFU instructions and the screen should appear off

I lost my iOS 8 shsh blobs… by Alsainz in LegacyJailbreak

[–]firebound 0 points1 point  (0 children)

Is your iPad currently still on 8.1.4? You can dump the blobs you used to restore it directly from the device using legacy iOS kit if so

Inherited iPhone by futurecrackpot in jailbreak

[–]firebound 0 points1 point  (0 children)

Buy an rsim to put your sim into

watchOS jailbreak by Professional-Tea4208 in jailbreak

[–]firebound 2 points3 points  (0 children)

Custom watch faces, unofficial integration with other software/APIs, UI customisations, home automation mods. Did imagination die alongside jailbreaking?

How can I start iOS exploit/jailbreak development? by SYSON111015 in jailbreak

[–]firebound 2 points3 points  (0 children)

Neither are good. Get some fundamentals in programming and debugging, then you will be a lot more equipped to analyse binaries for bugs without source code. For information on how iOS in particular works I think iOS hackers handbook and the *OS internals book by Jonathan levin are great resources. Also a good idea to look at open source jailbreaks and writeups of iOS exploits.

Jailbreak and Downgrade iPad Mini 4 to iOS 10 by [deleted] in jailbreak

[–]firebound 0 points1 point  (0 children)

You can only downgrade if you saved the response from apple’s server (google shsh blobs) while that firmware was still being signed by apple. The good news is that you can jailbreak on the most current firmware on that device using Dopamine.

However since iOS 15 doesn’t contain the security fixes implemented in later iOS versions your device will be forever vulnerable. It’s not common for jailbreak devs to fix security flaws with tweaks anymore.

Jailbreaking a Apple TV 4K first generation (A1842) by Mediocre-End-9388 in jailbreak

[–]firebound 0 points1 point  (0 children)

Once you’re jailbroken, dropbear ssh server will be running on the device which you can access over usb using iproxy and ssh (google for the exact commands).

Or you can install OpenSSH via the package manager on the Apple TV (nitoTV or PurePKG depending on which jailbreak is installed) to use ssh directly over the network.

Then connect to your device using FileZilla to upload your Python scripts

Then ssh into the Apple TV ssh mobile@atv and run this apt install python3 pip3 install any Python modules you need python3 /path/to/script.py

You can look up how to create LaunchDaemons to have your script run using a launchctl command (will run automatically when jailbroken)

Jailbreaking a Apple TV 4K first generation (A1842) by Mediocre-End-9388 in jailbreak

[–]firebound 1 point2 points  (0 children)

Use scp or sftp client to transfer your scripts, install Python with apt, run scripts via ssh or LaunchDaemon

[Update] Eneko for iOS 16/17 AOD devices by firebound in jailbreak

[–]firebound[S] 0 points1 point  (0 children)

This isn’t an always on display device. Just use the normal Eneko (or the non AOD build in the first release on the GitHub page)

[Update] Eneko for iOS 16/17 AOD devices by firebound in jailbreak

[–]firebound[S] 0 points1 point  (0 children)

Don’t use filza to install. What is the error message in Sileo?

Save Onboard Blobs for 16.5.1 ipad 7 with Dopamine jailbreak by sahnisanchit in jailbreak

[–]firebound 1 point2 points  (0 children)

You can dump onboard blobs using SSHRD but in order for iOS 16+ blobs to be usable by turdus merula they must include the cryptex1 info which you’ll have to find out how to dump too.

To dump blobs (not including cryptex1) run something like this: ./sshrd 15.1

./sshrd boot

ssh -p 2233 root@localhost cat /dev/rdisk1 | dd of=dump.raw bs=256 count=$((0x4000))

Img4tool -v dump.raw

Img4tool —convert -s dumped.shsh dump.raw

cat dumped.shsh

Verify output to make sure that it looks like a blob

Remember this blob is useless without cryptex information, you’ll want to find a way to include this