This is the protocol used to talk to the old, and probably the new baseband, at the bootrom level. The old bootrom didn't have an sig checking, the new one does.

==Protocol==
AT
0x30
2 byte length
n byte data
2 byte checksum
sends A5 on success, 5A on failure

===3G===
Correct me if I am wrong, but on the [[iPhone 3G]] bootrom, the "protocol" section is pretty much identical, besides the last line, which is instead this:
sends 01 on success, FF on failure

==Implementations==
[http://lpahome.com/geohot/gbootloader.rar bootrom.h in gbootloader]

[[Category:Protocols (Baseband)]]

The iPhone Wiki:Spam

2009-11-10T20:21:10Z

ChronicDev:

How do we combat this recent spamming of this wiki? I suggest a possible invite system or similar? --[[User:Srts|Srts]] 02:24, 9 November 2009 (UTC)

I have already blocked account signup, they must have had this account for a while. --[[User:Geohot|geohot]] 02:29, 9 November 2009 (UTC)

Well if they don't stop, we can't have account creation disabled forever, defeats the purpose of the wiki. People like him are sad. Great work to all the sysops et all. keeping disruption to a minimal :D --[[User:Srts|Srts]] 02:34, 9 November 2009 (UTC)

Yea thanks a lot guys for putting up with this. We'll give a bit of time, and if they continue, we'll figure something out. This kid keep trying to reset my password for hosting and the wiki. Too bad he doesn't have a life. --[[User:Geohot|geohot]] 03:10, 9 November 2009 (UTC)

An invite system might not be a bad idea actually [[User:ChronicDev|Will Strafach]] 03:16, 9 November 2009 (UTC)

feel free to post their IP addresses, lol --[[User:Posixninja|posixninja]] 04:08, 9 November 2009 (UTC)

Well, if you need an extra admin to block them (and delete spam pages), I volunteer. --[[User:Dranfi|Dranfi]] Congrats, you're an admin --[[User:Geohot|geohot]] 13:22, 9 November 2009 (UTC)

How many different IPs are we dealing with? Is it within a specific range? For the time being, it may be possible to blacklist an entire subnet if they are all coming from the same place. But if a botnet is doing this, may be more difficult. Is it possible for MediaWiki to require admin approval of an edit prior to it being commited? Not well versed with MediaWiki administration, just thossing out some ideas. --[[User:Tsuehpsyde|tsuehpsyde]] 17:29, 9 November 2009 (UTC)

We could figure out where they come rom and do the same to them. Secondly, we could create a filter that unless your part of a specific group you cannot do more than this many edits in this amount of time. We could try making a period where the admins have to approve the users. Lastly, we could make it so that in the first 12 hours of a user account that user could not edit pages so it would give time for the sysops to ban the users. [[User:Revolution|Revolution]] 00:02, 10 November 2009 (UTC)

If the ones you refer to as 'they' are the [http://code.google.com/p/pois0nhack pois0nhack] group then 'they' don't really seem to pose much of a threat in my opinion. I agree that for the time being we could impose some kind of 12/24 hr posting limitation (maybe no more than +-300 char changes?), but no more than that since this is, after all, a public wiki. Sorry if I'm intruding on some kind of admin/mod meeting, just figured I should have my say. --[[User:Rekoil|adriaaan]] 00:27, 10 November 2009 (UTC)

I am in favor of a 12hr limit for new users, but since it's a public wiki, during this time, contributions would have to be approved by sysops. --Untagged

Personally I think it would be good to have it so that all edits by new users a thrown into a moderation pool, then once a good amount of worthwhile contributions, that user can be "whitelisted".

2009-10-16T03:05:29Z

ChronicDev:

2009-10-13T00:47:54Z

ChronicDev: /* iBoot / Kernel Level */

This is the Application Processor used on the [[n72ap|iPod Touch 2G]].

==Exploits==
===[[iBoot]] / [[Kernel]] Level===
'''Note''': [[iBoot]] on the S5l8720 can be downgraded, allowing either exploit to be used on future firmwares

* [[ARM7 Go]] - Firmware v2.1.1
* [[iBoot Environment Variable Overflow]] - 3.1 beta 3 and below
* [[usb_control_msg(0x21, 2) Exploit]] - 3.1.2 and below

===[[VROM (S5L8720)|Bootrom]]===
* [[0x24000 Segment Overflow]]

==Boot Chain==
[[VROM (S5L8720)|VROM]]->[[LLB]]->[[iBoot]]->[[Kernel]]->[[System|System Software]]

It is definitely worthy to note that the [[Pwnage]] exploit is fixed because the images are now flashed to the [[NOR]] in their encrypted [[IMG3]] containers, and the [[S5L8720 Bootrom|bootrom]] can properly sigcheck [[LLB]]. That being said, unsigned images can still be run using the [[0x24000 Segment Overflow]].

==See Also==
* [[S5L8720 (Hardware)]]
* [[S5L File Formats]]

S5L8920

2009-10-13T00:46:26Z

ChronicDev: /* iBoot / Kernel */

This is the processor used in the [[iPhone 3GS]].

S5L8920 using [http://www.arm.com/products/CPUs/archi-thumb2.html THUMB-2] instruction set as much as ARM and THUMB ones. So the compiled binaries are not compatible with older CPUs.

== Exploits ==
=== [[iBoot]] / [[Kernel]] ===
* [[iBoot Environment Variable Overflow]] - Firmware 3.1b3 and below (Note: [[iBoot]] on the S5L8920 can be downgraded allowing the exploit to be used on future firmwares, but ''only if'' a backup of the device-specific Apple-signed 3.0 iBSS with unique [[ECID]] was made.)
* [[usb_control_msg(0x21, 2) Exploit]] - 3.1.2 and below.

=== [[S5L8920 (Bootrom)|Bootrom]] ===
* [[0x24000 Segment Overflow]]

== Boot Chain ==
[[S5L8920 (Bootrom)|Bootrom]]->[[LLB]]->[[iBoot]]->[[Kernel]]->[[System|System Software]]

== See also ==
* [[S5L8920 (Bootrom)]]
* [[S5L8920 (Hardware)]]
* [[S5L8920 (Hardware - Quick Notes)]]

S5L8922

2009-10-13T00:46:06Z

ChronicDev: /* Exploits */

This is the processor used in the [[N18ap|iPod Touch 3G]].

== Exploits ==
=== [[iBoot]] / [[Kernel]] ===
* [[usb_control_msg(0x21, 2) Exploit]] - 3.1.2 and below.

=== [[S5L8922 (Bootrom)|Bootrom]] ===

== Boot Chain ==
[[S5L8922 (Bootrom)|Bootrom]]->[[LLB]]->[[iBoot]]->[[Kernel]]->[[System|System Software]]

== See also ==
* [[S5L8922 (Bootrom)]]
* [[S5L8922 (Hardware)]]