This is a far out idea and I'm gonna dream big here.
That way my.plexapp.com/bag.plist would be the url to point to.
This is just an alternative, if we can discover how to get addsite running once again we should be able to get this to work on non jb devices as well. This is just a lesson for everyone save your .shsh. Getting apps on the atv is not as easy as you think via ssh. You need your app developed or you need a deb to install it for free like plex client or xbmc. Only problem is you have to wait for atv flash black to release an app typically and buy atv flash black to install it in some instances. What the nice thing is about this alternative is that it becomes a little more open source just like plexconnect. Anyone can develop an app and if you are jailbroken you can install it for free. Dont get me wrong atv flash black is awsome but why havent they put plexconnect in the list of apps? I think it should be on there so we can install it that way, heck im sure a lot of people would get atv flash balck if it was easy to install plexconnect as a native app, or lets just develop a deb so we can install it on the atv that way. There is alternatives to still run plexconnect on nonjb devices but it takes time to get it to work as well. I feel bad for everyone with a nonjb atv but everyone can thank apple for being closed source and not allowing us to install alternative 3rd party apps natively. I guess it makes sense for them. Now that this door has been opened I cant wait to see what alternative 3rd party apps we can get going on the atv. Im sick of waiting for an app store, this device needs more apps then what they give us via software update, not everyone wants to rent a movie or pay for a streaming service, this is a video streaming device thats held back by apple, now for atv’s that are jailbroken we can have whatever we want and give this device some real apps that will give us non paid streaming services that it should of had all along. We will continue to develop new apps with this alternative and when things get jb or addsite gets back on hopefully everyone can enjoy what a few of us are just starting to experince with these new apps. I belive once this goes mainstream people will get very interested and it will get opened up hopefully for all. But until then at least some good progress has been made and it will continue to gain new apps over time. This is a step forward, im sure its frustrating for non jb users to see these apps but one day you will hopefully have access and by that time a lot more apps will be available to everyone. This is not an android device we can just put any app on, being that case start by getting into the jb scene so you can have alternatives or deal without, this is a choice for everyone, apple can and probably will release a software update to lock out trailers eventually, everyone should be looking for alternatives before they reach this point or just let apple do whatever they want. Your choice.
In the original PlexConnect a DNS server is used to intercept and hijack the trailed app. Do you think is there any chance to use a similar method to intercept the bag.plist sent by apple to temporarily enable the AddSite? You say yourself that once an up is on the ATV it can only be removed by an update. So this should be a one time only hack. Unless https is involved?
That might be possible, sure, but it would be a pain. It depends on how carefully the device checks SSL certs. I know it does some checking (because my MITM proxy efforts have failed for that part of the connection), but I haven't looked into it deep enough to determine whether it's looking for a particular cert (serial number, etc.) or just something that says "apple" on it.
Do you know the path to the top level plist (on apples side)?
ax.init.itunes.apple.com/bag.xml?os=6&ix=2&locale=en_US
Or close to it. Might change with differnet aTV firmware versions.
It gives something like the following (DELETED A LOT at [...]) - a plist with encrypted payload.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
signatureaaRXgvc/gSled3zqag0bagDK8LHCZGovcCu5hklEBwM8I9LejcOeGYOufpag6aylKg8UZzKOfRnfnxBZcZTuaTtg6LIhj7I6kpv59lnrbHXdTsNYEJCZ5EpveTsHFkG1+DhZqQGkzAqu/zpXheHsFdyOWvDcGfoR3W6hHOnqvmc=
certs
MIIDRjCCAi6gAwIBAgIBBDANBg[...]
Can someone post all urls to bag.plist of new apps added recently to Apple TV (sky news, mls, Disney ect.)?! I managed to add vevo and hbo go, and my app that is in progress. Tnx in advance
Can someone post all urls to bag.plist of new apps added recently to Apple TV (sky news, mls, Disney ect.)?! I managed to add vevo and hbo go, and my app that is in progress. Tnx in advance
Maybe i missed something, but that method stopped working, read about that in previous posts ..
The method is working, just the other way and you need to be jailbrokan
The method is working, just the other way and you need to be jailbreakan
Yea, you're right. Sorry about that ..
ax.init.itunes.apple.com/bag.xml?os=6&ix=2&locale=en_US
Or close to it. Might change with differnet aTV firmware versions.
It gives something like the following (DELETED A LOT at [...]) - a plist with encrypted payload.
It is not really encrypted, it is base64 encoded. Probably to use certain character in the xml more easily.
You can try using http://www.base64decode.org/ for example to decode it
That might be possible, sure, but it would be a pain. It depends on how carefully the device checks SSL certs. I know it does some checking (because my MITM proxy efforts have failed for that part of the connection), but I haven't looked into it deep enough to determine whether it's looking for a particular cert (serial number, etc.) or just something that says "apple" on it.
Have you tried using a fake root certificate. Seems my appletv accept those when converted to PEM. Once installed you can pretty much use this to sign every ssl certificate needed.
It is not really encrypted, it is base64 encoded. Probably to use certain character in the xml more easily.
You can try using http://www.base64decode.org/ for example to decode it
Edit: Anyone willing to explain how I can intercept the ax.init.itunes.apple.com/bag.xml?os=6&ix=2&locale=en_US returned to the apple TV.
I think that if I just run it from my mac the result is not the same. But I see it contains three sections and the bag data can be nicely translated using base64.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
signature
[…]
certs
[…]
bag
[…]
@nicochi
Maybe try contacting The developer of tinyumbrella to see how the TSS server works for using saved blobs to restore iOS devices.
If we could inject the right file or payload, maybe we could get ‘add site’ ability back.
nicochi... I modified the DNS/WebServer to do a investigation. Drop me a PM if you are interested in that code. I might need to rework some edges, but in general have been able to harvest a couple of files. :-)
nicochi... I modified the DNS/WebServer to do a investigation. Drop me a PM if you are interested in that code. I might need to rework some edges, but in general have been able to harvest a couple of files. :-)
nicochi... I modified the DNS/WebServer to do a investigation. Drop me a PM if you are interested in that code. I might need to rework some edges, but in general have been able to harvest a couple of files. :-)
It is not really encrypted, it is base64 encoded. Probably to use certain character in the xml more easily.
You can try using http://www.base64decode.org/ for example to decode it
Yes... you are right. When translating the "larger" data part gets another plist. I had seen this one before, it doesn't seem to configure the main screen...
Can someone post all urls to bag.plist of new apps added recently to Apple TV (sky news, mls, Disney ect.)?! I managed to add vevo and hbo go, and my app that is in progress. Tnx in advance
So far I was able to add Qello, Vevo and HBO Go to my ExtraInternetCategories.plist using hints from dschuetz slides and tmm1 comments on github. (5.2 JB AppleTV)
I would also be interested by this list (especially for Sky News), or maybe a hint on how to be able to see what apple is sending back to the ATV when it's booting and adding these channels. :)
As promised plexconnect on the go, a nice my plex alternative for the time being until its released, enjoy 
http://forums.plexapp.com/index.php/topic/82687-plexconnect-on-the-go-using-ddns-ios-5x-and-jailbreak-required/
Again, this is only for a jailbroken ATV 2. I think it is important to make this clear every time, as most people come to Plexconnect because they have an ATV 3 and cannot jailbreak their device
