Linus Henze

Happy Halloween! 👻 Fugu15 is now available on GitHub: github.com/pinauten/Fugu15

Slides from @nullcon Goa 2023 with @LinusHenze github.com/tihmstar/slide…

Applications for the 2024 Security Research Device Program are now open! This year’s program features an exclusive iPhone 14 Pro and new custom tools for to research iOS 17 security features — apply today! 🔐📲 security.apple.com/blog/security-…

libirecovery with KIS support github.com/pinauten/libir…

current status with @LinusHenze

wen eta Vision Pro jailbreak???

Me and @LinusHenze playing with HomePod :D

@LinusHenze It’s somewhat like this …i think

What’s it like setting a timer on HomePod?

@tihmstar Sure! cc -Wno-all -xc -<<<‘main(f){fcntl(f=open(&f,513),48,1);write(f,0xFFFFFC000,1<<14);}’;./a.out

Does anyone know how to quickly reboot macos from the commandline without password?

CVE-2023-28206 PoC: gist.github.com/LinusHenze/728…

Helo Apple I can haz IOSurfaceAccelerator bug pls?

Today’s lunch: Baked iPhone 13 Mini

My tweak compatibility mode for Fugu15 works pretty well, it even supports arm64 code in arm64e processes now. Before and after:

I think I’ve messed up my language settings 🤔

I’ve been saying “fiveIconDock” nonstop for half a year and finally @LinusHenze made my wish come true :D

There’s a special place in hell for people who use fork on iOS

@zhuowei I have no idea why that was changed. I might look into it though

@LinusHenze I'm really sorry to bother you, but: macOS 13.3 beta 2 has some PAC (set_saved_state_pc/pmap_sign_user_ptr_internal) and DriverKit (IODMACommand) changes. I know you've done a lot of research on these areas in the past: are these also your discoveries, by any chance?

@moski_dev Try to reconnect your device to the Tamarin Cable after entering JTAG mode (keep the Tamarin Cable itself plugged in)

@LinusHenze Is there anything else I should be doing to get JTAG working besides pwning/demoting the device, entering JTAG mode on the cable, then connecting with openocd? I tried your fork today, since main doesn't work for me, and everything but JTAG seems to be functioning as expected.

I've decided to take a look at the Tamarin Cable today and noticed that it wouldn't work most of the time so I've created a fork of it's firmware that actually works! Supports UART/DCSD, Reset and Reset to DFU (no JTAG right now). github.com/pinauten/tamar…