The iPhone Wiki - User contributions [en]

NAND

2010-03-13T21:32:40Z

Catboy756: Updating flash capacities

Normally refers to the NAND flash chip used in the phone. This is where all the storage capacity comes from. The capacity of this is 4GB, 8GB, 16GB, 32GB, or 64GB. It has two partitions, the system partition and the user partition. The system partition contains the mini Mac OS X operating system and the native Apple applications. This is mounted read only by /etc/fstab, and [[jailbreak|jailbreaks]] mount this read write. The user partition contains installed Applications, Music, Movies, etc... and is mounted read write.

Starting w/ the [[iPod touch 3G]], firmware files are stored on NAND flash.

02.28.00

2010-02-10T22:17:00Z

Catboy756:

Baseband that comes with iPhone OS 2.2 on the iPhone 3G. Is vulnerable to the [[at+stkprof]] exploit, which is used to inject [[yellowsn0w]]

S5L8922 (Bootrom)

2009-10-29T20:27:31Z

Catboy756:

Same version as the [[S5L8920 (Bootrom)]]. Vulnerable to [[24kPwn]], although it can't be used because it boots from [[NAND]] instead of [[NOR]], which 24kpwn only works with a NOR boot.

Main Page

2009-09-18T22:25:47Z

Catboy756:

<center>[[Image:Iptwiki.jpg‎]]</center>

{{:Main Page/Welcome}}
<table border="1" width="100%"><tr>
<td style="background-color:orange; text-align:center; width:25%;"><b>[[Jailbreak iPhone2,1|Find bootrom exploit allowing unsigned code exec via USB (S5L8920)]]</b></td>
<td style="background-color:orange; text-align:center; width:25%;"><b>[[Unlock 2.0|Break Chain of Trust (X-Gold 608)]]</b></td>
</tr>
<tr>
<td colspan="4">
<center>[[Disclaimer]]</center>
</td>
</tr>
</table><br />
==Software==
* [[/|Filesystem]]
* [[Firmware]]
* [[Keys]]
* [[Protocols]]
* [[System Log]]

==Hardware==
=== iPhone ===
* [[m68ap|iPhone (m68ap)]]
* [[n82ap|iPhone 3G (n82ap)]]
* [[N88AP|iPhone 3GS (n88ap)]]

=== iPod touch ===
* [[n45ap|iPod touch (n45ap)]]
* [[n72ap|iPod touch 2nd Generation (n72ap)]]
* [[N18ap|iPod touch 3rd Generation (n18ap)]]

==App Processor ([[Jailbreak]])==
The [[iPhone]], [[iPod touch]], and [[iPhone 3G]] makes use of the [[S5L8900]] platform as application processor. Current models, such as the [[iPod touch 2G]] and the [[N88AP|iPhone 3GS]], use newer processors. The [[S5L8720]] and [[S5L8920]] are used, respectively. The [[N18ap|iPod Touch 3G]] operates using the [[S5L8922]] application processor. Here is where the [[Jailbreak|jailbreak]] applies.

==Baseband ([[Unlock]])==
The [[Baseband Device]] is where the [[unlock]] applies.

==Application Development==
* [[Toolchain]] (Includes tutorials)
* [[Toolchain 2.0]] (Includes tutorials)
* [[Frameworks]]
* [[MobileDevice Library]]
* [[Apple Certification Process]]
* [[Bypassing iPhone Code Signatures]]
* [[Distribution Methods]]

==Application Copy Protection==
* [[Copy Protection Overview]]
* [[Application Structure and Signatures]]
* [[Mach-O Loading Process]]
* [[Bugging Debuggers]]

==Definitions==
* [[Jailbreak]]
* [[Activation]]
* [[Unlock]]
* [[Baseband Device|Baseband]]
* [[Baseband Bootloader|Bootloader]]
* [[DFU]]
* [[iBoot]]
* [[iBEC]]
* [[iBSS]]
* [[NORID]]
* [[CHIPID]]

==Other==
* [[Bluetooth]]
* [[Glossary]]
* [[Tutorials]]
* [[Useful Links]]

Main Page

2009-09-18T22:25:32Z

Catboy756:

<center>[[Image:Iptwiki.jpg‎]]</center>

{{:Main Page/Welcome}}
<table border="1" width="100%"><tr>
<td style="background-color:orange; text-align:center; width:25%;"><b>[[Jailbreak iPhone2,1|Find bootrom exploit allowing unsigned code exec via USB (S5L8920)]]</b></td>
<td style="background-color:orange; text-align:center; width:25%;"><b>[[Unlock 2.0|Break Chain of Trust (X-Gold 608)]]</b></td>
</tr>
<tr>
<td colspan="4">
<center>[[Disclaimer]]</center>
</td>
</tr>
</table><br />
==Software==
* [[/|Filesystem]]
* [[Firmware]]
* [[Keys]]
* [[Protocols]]
* [[System Log]]

==Hardware==
=== iPhone ===
* [[m68ap|iPhone (m68ap)]]
* [[n82ap|iPhone 3G (n82ap)]]
* [[N88AP|iPhone 3GS (n88ap)]]

=== iPod touch ===
* [[n45ap|iPod touch (n45ap)]]
* [[n72ap|iPod touch 2nd Generation (n72ap)]]
* [[N18ap|iPod touch 3rd Generation (n18ap)]]

==App Processor ([[Jailbreak]])==
The [[iPhone]], [[iPod touch]], and [[iPhone 3G]] makes use of the [[S5L8900]] platform as application processor. Current models, such as the [[iPod touch 2G]] and the [[N88AP|iPhone 3GS]], use newer processors. The [[S5L8720]] and [[S5L8920]] are used, respectively. The [[N18apiPod Touch 3G]] operates using the [[S5L8922]] application processor. Here is where the [[Jailbreak|jailbreak]] applies.

==Baseband ([[Unlock]])==
The [[Baseband Device]] is where the [[unlock]] applies.

==Application Development==
* [[Toolchain]] (Includes tutorials)
* [[Toolchain 2.0]] (Includes tutorials)
* [[Frameworks]]
* [[MobileDevice Library]]
* [[Apple Certification Process]]
* [[Bypassing iPhone Code Signatures]]
* [[Distribution Methods]]

==Application Copy Protection==
* [[Copy Protection Overview]]
* [[Application Structure and Signatures]]
* [[Mach-O Loading Process]]
* [[Bugging Debuggers]]

==Definitions==
* [[Jailbreak]]
* [[Activation]]
* [[Unlock]]
* [[Baseband Device|Baseband]]
* [[Baseband Bootloader|Bootloader]]
* [[DFU]]
* [[iBoot]]
* [[iBEC]]
* [[iBSS]]
* [[NORID]]
* [[CHIPID]]

==Other==
* [[Bluetooth]]
* [[Glossary]]
* [[Tutorials]]
* [[Useful Links]]

List of iPod touches

2009-09-18T22:20:58Z

Catboy756:

{{DISPLAYTITLE:iPod touch}}
There are three iPod touch generations at the time of writing.

The first generation is the [[N45ap]]. This model of the iPod touch is the earliest version.
<br>
The second generation is the [[N72ap]]. This is the second, re-designed model of the iPod touch with additional features.
<br>
The third generation is the [[N18ap]]. This is the third model of the iPod touch with an upgraded processor and more memory.

For a full comparison, vist [[Comparison of iPod touch models]].

List of iPod touches

2009-09-18T22:20:42Z

Catboy756:

{{DISPLAYTITLE:iPod touch}}
There are three iPod touch generations at the time of writing.

The first generation is the [[N45ap]]. This model of the iPod touch is the earliest version.
<br>
The second generation is the [[N72ap]]. This is the second, re-designed model of the iPod touch with additional features.
<br>
The third generation is the [[N18ap]]. This is the third model of the iPod touch with an upgraded processor and more Memory.

For a full comparison, vist [[Comparison of iPod touch models]].

List of iPod touches

2009-09-18T22:19:54Z

Catboy756:

{{DISPLAYTITLE:iPod touch}}
There are three iPod touch generations at the time of writing.

The first generation is the [[N45ap]]. This model of the iPod touch is the earliest version.
<br>
The second generation is the [[N72ap]]. This is the second, re-designed model of the iPod touch with additional features.
<br>
The third generation is the [[N18ap]]. This is the third model of the iPod touch with an upgraded processor and more Memory.

For a full comparison, vist [[Comparison of iPod touch 1G and 2G]].

IBEC

2009-08-26T20:53:38Z

Catboy756:

A stripped down version of iBoot, Is used for a restore from DFU.

IBEC

2009-08-26T20:53:29Z

Catboy756: New page: A stripped down version of iBoot, Is used for a restore from DFU

A stripped down version of iBoot, Is used for a restore from DFU

Baseband Device

2009-07-13T19:35:48Z

Catboy756:

This is the device in the iPhone that manages all the functions which require an antenna. The baseband processor has its own RAM and firmware in NOR flash, separate from the ARM core resources. The baseband is a resource to the OS. The Wi-Fi and bluetooth are managed by the main CPU, although the baseband stores their MAC addresses in it's NVRAM.

The [[iPhone]]'s baseband processor is the [[S-Gold 2]].
The [[iPhone 3G]] and the [[iPhone 3GS]] make use of the [[X-Gold 608]] chip for this purpose.

You can check some [[Baseband Commands]] too (by pH and EvilPenguin)

==Seczone==
This is the area in the baseband where the lock state is stored.

===Layout===
0x400--NCK token
0xB00--IMEI
0xB10--IMEI signature
0xC00--Locks table

===Encryption===
Many of the sections are encrypted using TEA based off the CHIPID and NORID. See [[NCK Brute Force]] for more info.

==Exploits==
* [[SIM hacks]]
* [[Fakeblank|Hardware Fakeblank]]
* [[IPSF]]
* [[Minus 0x400]]
* [[Jerrysim]]
* [[Minus 0x20000 with Back Extend Erase]]
* [[At+stkprof]]
* [[AT+XLOG Vulnerability]]

==Theoretical Attacks==
* [[NCK Brute Force]]
* [[Baseband JTAG]]

==Boot Chain==
[[Baseband Bootrom|bootrom]]->[[Baseband Bootloader|bootloader]]->[[Baseband Firmware|firmware]]

[[Category:Baseband]]