Jailbreaking the Apple TV 3rd gen with NO REMOTE CONTROL

[leandrof]

Lets say you're torturing yourself with an Apple TV of the third generation that randomly appeared in your room, and you think "HMMMM I really need an ancient version of Kodi on this" so you look at ios.cfw.guide if there is anything and you find a guide but it says you really need an remote so you look through your room just to see that you don't have one?
That's how I felt recently when I found myself in that exact situation.

Here is how we made it work:

What you need
- a phone with IR-Blaster (preferably a Galaxy S5 running stock 4.4 on a T-Mobile Deutschland branding)
- a remote-less Apple TV of the 3rd generation
- patience
- at least an ISDN-Uplink
- a Macintosh computer
- a Micro-USB Cable
- a Apple TV 3rd gen Remote
- https://f-droid.org/packages/us.spotco.ir_remote/

What to do:
Start by install the APK on phone
Create 2 buttons, one is "Down + Menu", one is "Menu + Play"

Put the following Codes:

Down + Menu:

Code: Select all

0000 006C 0022 0002 015B 00AD 0016 0016 0016 0041 0016 0041 0016 0041 0016 0016 0016 0041 0016 0041 0016 0041 0016 0041 0016 0041 0016 0041 0016 0016 0016 0016 0016 0016 0016 0016 0016 0041 0016 0041 0016 0016 0016 0016 0016 0041 0016 0041 0016 0016 0016 0016 0016 0016 0016 0016 0016 0041 0016 0041 0016 0016 0016 0016 0016 0041 0016 0041 0016 0016 0016 05CB 015B 0057 0016 0E6C

Menu + Play:

Code: Select all

0000 006C 0022 0002 015B 00AD 0016 0016 0016 0041 0016 0041 0016 0041 0016 0016 0016 0041 0016 0041 0016 0041 0016 0041 0016 0041 0016 0041 0016 0016 0016 0016 0016 0016 0016 0016 0016 0041 0016 0041 0016 0016 0016 0016 0016 0016 0016 0016 0016 0041 0016 0041 0016 0016 0016 0016 0016 0041 0016 0041 0016 0016 0016 0016 0016 0041 0016 0041 0016 0016 0016 05CB 015B 0057 0016 0E6C 

But wait, how did we get these without having a remote?

First of, the problem is that certain key combos send separate codes, especially the ones we need for entering DFU mode from Recovery mode

This means that most remote apps (like for example irplus), which have presets for these generations of remote, tend to not have these special codes

It took a lot of Internetting, but we stumbled upon a r*ddit post of an internetter who was facing the same struggle, but owns an Fl*pper zero and someone else with both a fapper zero and the remote recorded the codes for that guy and published it in the comments.

Now, I already see you screaming at your Trinitron going "but Lindro, the fapper doesn't speak pronto!!!1!1!!11elf!!1!111!" and you're right, it doesn't, BUT, there's funny tools that help us turn this mess into Pronto codes, further described here