You are Unregistered, please register to gain Full access.    

Go Back   SiNfuL iPhone > News > Front Page Important News

Notices

Front Page Important News Important News that appears on the Front Page of the forum
Only Admin & Mods can post in here

Reply
 
Thread Tools

 Apple TV 4 Jailbreak for tvOS 10
Old 03-03-2017, 02:02 AM   #1
ddub420

 
ddub420's Avatar
 
ddub420 is offline
Join Date: Feb 2010
Device: iPhone 6S +
iOS Version: 9.0
iTunes Version: iTunes 12
Carrier: Other
OS: Hackintosh
Location: Always on the left
Posts: 2,475
Thanks: 1,156
Thanked 2,696 Times in 856 Posts
Apple TV 4 Jailbreak for tvOS 10


Thanks to the combined effort of Jonathan Levin, Marco Grassi and Luca Todesco we now have a semi tethered tvOS 10 jailbreak for the Apple TV 4.


PLEASE NOTE THIS WILL NOT WORK WITH TVOS 10.1.1 or HIGHER.
So far its only been tested on 10.1 and 10.0.1 with possible lower firmware compatibility in the future. (ex tvOS 9.1 - 10) If you are on any firmware besides these two in the green I strongly recommend you wait till they are tested, you were warned

Taken from the FAQ page from Jonathan Levin's website...

Quote:
Ok. So now that it's made public, @nitotv (10.1) ,@KeithMLeonard (10.0.1) and myself (10.1) tested it, here is a collection of FAQs so I don't get bugged on Twitter:

Is 10.1.1 JBable? NO. This JB, when eventually released will be for all versions of TvOS up to and including 10.1, but NOT FOR 10.1.1.

What, also version 9.1??

YES. (albeit through a different bug) BUT NOT 10.1.1

Why is 10.1.1 NOT JBable? Because the bug used, CVE-2017-2370, has been patched.

How do I install it? Using Cydia Impactor.

What, every seven days?!?! Hell no. Only if you reboot. How often do you restart your TV STB? 'nuff said.

Is it fool proof? That depends on how foolish the fools are. Basically, it should exploit successfully every time, but KPP is presently at roughly 1/4. That means you might panic, but then all you need - if you don't succeed at first - try, try again. Once it works, it works, period, and you will not need to run it again unless you reboot.[/b]

Why is the GUI so poor? Because I'm a kernel hacker, not a GUI developer. Sorry. It's no small miracle I suffered through Xcode and objective-C long enough to create a functional GUI.

What does the JB provide? A full set of kernel patches which allows running unsigned code and injecting arbitrary libraries into any TvOS process.

And Cydia? No Cydia.

Where's Cydia? Ask Saurik, not me. I personally don't like it much as I use my own binaries. And that's not the purpose of this JB.

So wait, if there's no Cydia, is it a jailbreak? YES. Because it gives you a full shell and you can do whatever you want - side load apps, etc. And in theory a Cydia like App (or even Cydia itself) could easily be created for TvOS. And me, all I wanted is to have an open tvOS so I can document its inner workings for Vol I of *OS Internals.

Now that you mention it, how's that coming along?? Super, thank you. Lots of details I'm adding now. Hoping for a release around May.

So back to tvOS -- Will MobileSubstrate run on TvOS? No reason why the 64-bit version won't. But I did not include it.

How is TvOS different from iOS? Many very small ways. Most important, it does not run any 32-bit code. Also normal iOS IPAs won't work here. Sorry. But CLI binaries work just fine.

So what's in the IPA? A modified 64-bit only bootstrap.tar, containing /bin/sh -> /bin/bash, Some of my tools (in /usr/local/bin), dropbear (a free standing ssh daemon, with its keys in /etc/dropbear), and a few select binaries. Dropbear has been modified to run from /tmp, and the entire tar opens up in /tmp as well, so as to negate any remote chance of bricking.[/b]

How do I add more? Two options: Either extract bootstrap.tar to some directory, add whatever you want, and repackage into .tar and into the ipa, or - once you are in the JB:

cd /tmp

and then /tmp/bin/ls your way around, followed by /tmp/bin/mv ... files to their usual locations, taking care not to overwrite any system binaries.

Why like that? Because it's an intentional PoC meant for developers and researchers, not for the general public - and provides 100% the functionality that target audience needs, with minimal disruption of the filesystem. And, because I made the mistake of overwriting a stupid binary (/usr/sbin/nvram), which effectively bricked my older TvOS. I had to fork another $149 to get another ATV box, and - once bitten, twice shy.

Why would overwriting built-in binaries be dangerous? because this is a semi-tethered JB. meaning when your ATV reboots, it's not JB anymore. And that means any binaries you introduced have no code signature, and will be slain by that despicable AMFI. So EXERCISE CAUTION WITH WHAT YOU ADD, AND DON'T OVERWRITE ANY EXISTING BINARIES (I have my tar invocation with -k for that)

Why doesn't it work every time? Because even though the bug is exploited very reliably (95% , thanks to tweaks), KPP bypassing has some.. issues which I still need to iron out (due to more RAM in TV than there is in your average phone). So expect at least three panics for every successful run. If you get a warning about "this will likely fail", try it anyway. Most of the time liberTV can detect its inevitable demise, but sometimes it's wrong..

What does the Jailbreak report if "Increment J's counter" is selected? Absolutely nothing identifying - just the Vendor UDID, and the jailbreak flow, so I can figure out the success rate, and the slides. You want to leave this on if I am to improve the KPP reliability.

What are suggested steps once I'm in?


The jailbreak will automatically do this:
- chmod 000 /var/MobileAsset/Assets/com_apple_MobileAsset_SoftwareUpdate - to shut up that $%#%$# software updated daemon so it doesn't nag you if reincarnated (i.e. when you reboot)

which in my experience has shut up autoupdates. But you might also want to make sure:
- Disable auto-updates from GUI
- launchctl unload /System/Library/LaunchDaemons/com.apple.mobile.softwareupdated.plist - to make sure the daemon is dead, dead, DEAD

- make a copy of /System/Library/Caches/apticket.der and save it somewhere SAFE.

- create a /var/root/.ssh/authorized_keys and put an SSH key from your host there. AND CHANGE THE DEFAULT PASSWORD FROM alpine.

- exercise extreme caution. I AM NOT RESPONSIBLE IF YOU BRICK YOUR TV, AND IF YOU DO, APPLE'S #@$#@$#@ DRACONIAN TYRANNICAL WHIM IS TO FORCE YOU TO UPGRADE TO 10.1.1, WHICH IS NOT JAILBREAKABLE
SOURCE: NEWOSXBOOK.COM


DOWNLOAD LINK FOR JAILBREAK IPA
http://NewOSXBook.com/libertv/libertv.ipa

DOWNLOAD LINK FOR CYDIA IMPACTOR TO SIDELOAD THE IPA
Cydia Impactor


A word from NitoTV...


You heard the man, dont try it

A updated version of NitoTV for tvOS 10 is in the works.

UPDATE #1 https://sciencography.tumblr.com/pos...otv-101-update

UPDATE #2




https://twitter.com/nitoTV

Are you wanting to buy an ATV4 with a Jailbreakable tvOS version? - SiNfuL iPhone


Last edited by ddub420; 03-30-2017 at 10:25 AM. Reason: added
  Reply With Quote
The Following 8 Users Say Thank You to ddub420 For This Useful Post:
c t e (03-03-2017), Cezar998 (03-03-2017), Gmcmoz (03-09-2017), Moonwolf (03-06-2017), mumma66 (03-05-2017), outragis (03-06-2017), Radeon30 (03-03-2017), XiC (03-06-2017)

 
Old 03-03-2017, 02:42 AM   #2
c t e
Obsessive iPhone Disorder
 
c t e is offline
Join Date: Jan 2012
Device: iPhone 6
iOS Version: 9.0
iTunes Version: iTunes 11
Carrier: Other
OS: Windows XP
Location: england
Posts: 239
Thanks: 95
Thanked 27 Times in 23 Posts
I will try this over the weekend. Thanks.
iPhone 6 - 9.0.2 jb
iPad mini 4 - 9.0.2 jb
Apple TV 4 - 10.1 jb
  Reply With Quote

 
Old 03-03-2017, 03:37 AM   #3
lesallen
Jailbroken
 
lesallen's Avatar
 
lesallen is offline
Join Date: Aug 2010
Device: iPad
iOS Version: 4.2
iTunes Version: iTunes 10
Carrier: Other
OS: macOS
Location: spain
Posts: 69
Thanks: 47
Thanked 10 Times in 7 Posts
Magic i just need nito or cydia to get things working. is that correct?
  Reply With Quote

 
Old 03-03-2017, 04:15 AM   #4
c t e
Obsessive iPhone Disorder
 
c t e is offline
Join Date: Jan 2012
Device: iPhone 6
iOS Version: 9.0
iTunes Version: iTunes 11
Carrier: Other
OS: Windows XP
Location: england
Posts: 239
Thanks: 95
Thanked 27 Times in 23 Posts
There is no cydia for it. Nito is being updated for it now (do not install at the moment).
iPhone 6 - 9.0.2 jb
iPad mini 4 - 9.0.2 jb
Apple TV 4 - 10.1 jb
  Reply With Quote
The Following User Says Thank You to c t e For This Useful Post:
ddub420 (03-03-2017)

 
Old 03-03-2017, 09:50 AM   #5
yungning
n00b
 
yungning is offline
Join Date: Sep 2010
Device: iPhone 4
iOS Version: 4.1
iTunes Version: iTunes 10
Carrier: AT&T
OS: Windows XP
Location: texas
Posts: 24
Thanks: 3
Thanked 5 Times in 4 Posts
what's the benefit of jailbreaking an Apple TV? can it download/install app from 25pp or iphonecake?
  Reply With Quote

 
Old 03-03-2017, 10:16 AM   #6
ddub420

 
ddub420's Avatar
 
ddub420 is offline
Join Date: Feb 2010
Device: iPhone 6S +
iOS Version: 9.0
iTunes Version: iTunes 12
Carrier: Other
OS: Hackintosh
Location: Always on the left
Posts: 2,475
Thanks: 1,156
Thanked 2,696 Times in 856 Posts
Quote:
Originally Posted by yungning View Post
what's the benefit of jailbreaking an Apple TV? can it download/install app from 25pp or iphonecake?
Sideload apps without the seven day restriction and customize.

If 25pp or iphonecake made a tvOS installer app, its possible.


---------- EDIT ----------

Quote:
Originally Posted by lesallen View Post
Magic i just need nito or cydia to get things working. is that correct?
Wait for Nitotv for tvOS 10 to be released.

NitoTV for the new tvOS 10 Jailbreak - SiNfuL iPhone
  Reply With Quote

 
Old 03-03-2017, 10:54 AM   #7
yungning
n00b
 
yungning is offline
Join Date: Sep 2010
Device: iPhone 4
iOS Version: 4.1
iTunes Version: iTunes 10
Carrier: AT&T
OS: Windows XP
Location: texas
Posts: 24
Thanks: 3
Thanked 5 Times in 4 Posts
Does "Sideload" mean via cydiaimpactor?
  Reply With Quote
The Following User Says Thank You to yungning For This Useful Post:
komlos_kh (03-03-2017)

 
Old 03-03-2017, 11:13 AM   #8
ddub420

 
ddub420's Avatar
 
ddub420 is offline
Join Date: Feb 2010
Device: iPhone 6S +
iOS Version: 9.0
iTunes Version: iTunes 12
Carrier: Other
OS: Hackintosh
Location: Always on the left
Posts: 2,475
Thanks: 1,156
Thanked 2,696 Times in 856 Posts
Quote:
Originally Posted by yungning View Post
Does "Sideload" mean via cydiaimpactor?
Sideload means installing 3rd party .ipas (not in appstore) onto your ATV4. There are multiple ways to do it, Cydia Impactor is the easiest. Currently there is no working mobile substrate and Appsync for tvOS 10 yet, you are restricted to either a 7 day (free dev account) or a 1 year (paid dev account $100) to codesign any 3rd Party apps you want to install. After the Apps time limit is reached the apps fail to load.

When NitoTV for tvOS 10 is released, Mobile Substrate and Appsync will be able to install eventually through it, allowing you to bypass these codesign restrictions as long as you dont reboot your ATV4. Just like apps on a semi untethered Jailbroken iPhone

Last edited by ddub420; 03-04-2017 at 11:15 PM. Reason: typo
  Reply With Quote
The Following User Says Thank You to ddub420 For This Useful Post:
yungning (03-03-2017)

 
Old 03-03-2017, 11:39 AM   #9
tazzcom
Jailbroken
 
tazzcom's Avatar
 
tazzcom is offline
Join Date: Jan 2012
Device: Other
iOS Version: 11.x
iTunes Version: iTunes 12
Carrier: Other
OS: Windows 10 64-bit
Location: canada
Posts: 81
Thanks: 29
Thanked 28 Times in 14 Posts
I'm not to keen when it comes to ssh stuff but now that I've jailbreak on 10.1 what to do? I have side loaded all the apps I have from here 1st and then ran liberty.... everything seems to be working like it should. So what is dropbear and what can I do with it? Might be better to just wait for update to nito?
  Reply With Quote

 
Old 03-03-2017, 01:06 PM   #10
Waylon123
Slitter wizard
 
Waylon123's Avatar
 
Waylon123 is offline
Join Date: Jan 2010
Device: iPhone 6S +
iOS Version: 9.x
iTunes Version: iTunes 12
Carrier: Other
OS: Windows 10 32-bit
Location: Tennessee
Posts: 95
Thanks: 221
Thanked 17 Times in 14 Posts
Drop bear is 5o ssh into it with winscp I believe to copy files to and trom the device
  Reply With Quote

 
Old 03-03-2017, 05:08 PM   #11
closter
Obsessive iPhone Disorder
 
closter is offline
Join Date: Aug 2014
Device: iPhone 6
iOS Version: 9.x
iTunes Version: iTunes 12
Carrier: AT&T
OS: Windows 7 64-bit
Location: wa
Posts: 277
Thanks: 73
Thanked 67 Times in 47 Posts
Super stoked on this, just going to wait until nitotv is ready!
  Reply With Quote

 
Old 03-04-2017, 03:28 AM   #12
Gigabit
Jailbroken
 
Gigabit's Avatar
 
Gigabit is offline
Join Date: Jul 2010
Device: iPhone 6
iOS Version: 10.x
iTunes Version: iTunes 10
Carrier: Other
OS: Hackintosh
Location: canada
Posts: 56
Thanks: 9
Thanked 4 Times in 4 Posts
Cant wait to see that comes up with this
  Reply With Quote

 
Old 03-04-2017, 10:08 AM   #13
1blackzilla
iPhoneaholic
 
1blackzilla's Avatar
 
1blackzilla is offline
Join Date: Oct 2009
Device: iPhone 4
iOS Version: 8.1.x
iTunes Version: iTunes 10
Carrier: Other
OS: Other
Location: Ok
Posts: 170
Thanks: 53
Thanked 67 Times in 30 Posts
Quote:
Originally Posted by yungning View Post
what's the benefit of jailbreaking an Apple TV? can it download/install app from 25pp or iphonecake?
You can add repositories that will completely give you access to Movies, Sporting Events, Live TV and much much more for the price of water at a water fountain.
  Reply With Quote

 
Old 03-04-2017, 10:49 AM   #14
closter
Obsessive iPhone Disorder
 
closter is offline
Join Date: Aug 2014
Device: iPhone 6
iOS Version: 9.x
iTunes Version: iTunes 12
Carrier: AT&T
OS: Windows 7 64-bit
Location: wa
Posts: 277
Thanks: 73
Thanked 67 Times in 47 Posts
wonder if @nitotv is serious... hope not!
“im going to avoid the possibility of making the AppleTV awesome cuz ‘ma feelings’” and

"[Release] LiberTV — Jailbreak for tvOS 10.0 - 10.1 - jailbreak lol @ this comment. fucks given? 0."
  Reply With Quote

 
Old 03-04-2017, 10:11 PM   #15
Gmcmoz
Apple 🍎 Guy
 
Gmcmoz's Avatar
 
Gmcmoz is offline
Join Date: Aug 2010
Device: iPhone 7
iOS Version: 10.x
iTunes Version: iTunes 12
Carrier: T-Mobile
OS: macOS
Location: California
Posts: 237
Thanks: 327
Thanked 22 Times in 14 Posts
I just want to know if this will allow me to side load Kodi after ? like side load the jb app , then side load Kodi from the impactor. I can wait on everything else, I just hate that I have to airplay mirror my Kodi from my iPad or iPod. and if I do the side load process without jb, it expires in a week. will this jb help me or should I just wait?
  Reply With Quote

 
Old 03-04-2017, 10:56 PM   #16
ddub420

 
ddub420's Avatar
 
ddub420 is offline
Join Date: Feb 2010
Device: iPhone 6S +
iOS Version: 9.0
iTunes Version: iTunes 12
Carrier: Other
OS: Hackintosh
Location: Always on the left
Posts: 2,475
Thanks: 1,156
Thanked 2,696 Times in 856 Posts
Quote:
Originally Posted by Gmcmoz View Post
I just want to know if this will allow me to side load Kodi after ? like side load the jb app , then side load Kodi from the impactor. I can wait on everything else, I just hate that I have to airplay mirror my Kodi from my iPad or iPod. and if I do the side load process without jb, it expires in a week. will this jb help me or should I just wait?
Read this
SiNfuL iPhone - View Single Post - Apple TV 4 Jailbreak for tvOS 10

Wait for Nitotv to be released
  Reply With Quote

 
Old 03-05-2017, 12:32 AM   #17
Gmcmoz
Apple 🍎 Guy
 
Gmcmoz's Avatar
 
Gmcmoz is offline
Join Date: Aug 2010
Device: iPhone 7
iOS Version: 10.x
iTunes Version: iTunes 12
Carrier: T-Mobile
OS: macOS
Location: California
Posts: 237
Thanks: 327
Thanked 22 Times in 14 Posts
Quote:
Originally Posted by ddub420 View Post
Ok idk why nitotv is really I had it on my roku back in the day. But yea thank you for clearing this up. So i should just hold off completely until then.
  Reply With Quote

 
Old 03-05-2017, 03:17 AM   #18
Corsasri
iPhoneaholic
 
Corsasri is offline
Join Date: Jan 2013
Device: iPhone 7
iOS Version: 10.x
iTunes Version: iTunes 12
Carrier: Other
OS: Windows 8 64-bit
Location: England
Posts: 123
Thanks: 4
Thanked 31 Times in 15 Posts
I'm gutted I went to jailbrek after yesterday seeing I was on 10.1. Only to see today it's updated to 10.1.1 as auto updates had been turned on.
  Reply With Quote

 
Old 03-05-2017, 03:20 AM   #19
Amuffbluffa
Veteran
 
Amuffbluffa is offline
Join Date: Jan 2010
Device: iPhone 5S
iOS Version: 7.0
iTunes Version: iTunes 11
Carrier: Other
OS: macOS
Location: Nsw
Posts: 14
Thanks: 38
Thanked 0 Times in 0 Posts
  Reply With Quote

 thanks
Old 03-05-2017, 07:31 AM   #20
Lucky52
Jailbroken
 
Lucky52 is offline
Join Date: Jun 2010
Device: iPhone 4
iOS Version: 4.3
iTunes Version: iTunes 10
Carrier: AT&T
OS: Windows 7
Location: Ca
Posts: 28
Thanks: 33
Thanked 3 Times in 3 Posts
thanks

thank u
  Reply With Quote
The Following User Says Thank You to Lucky52 For This Useful Post:
closter (03-09-2017)
Reply

Tags
apple tv 4, jailbreak, tvos

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On




All times are GMT -8. The time now is 04:35 PM.

Copyright 2009 - 2017 (SiNfulSS)- Shot Caller @ SiNfuL iPhone