The iPhone Wiki - User contributions [en]

User:I1029ai

2010-08-30T16:55:52Z

I1029ai: New page: * [http://twitter.com/i1029ai i1029ai on Twitter] == Project == * iDecrypt (OSX) [http://idecrypt.hack2learn.org/ Download] / [http://vimeo.com/12262861 Video]

* [http://twitter.com/i1029ai i1029ai on Twitter]

== Project ==

* iDecrypt (OSX) [http://idecrypt.hack2learn.org/ Download] / [http://vimeo.com/12262861 Video]

Talk:IDecrypt

2010-08-24T09:00:35Z

I1029ai:

Hi, i (i1029ai) work for some time also on a similar tool

Currently it only runs on the console.
The whole is in beta and is available for x86 for disposal. It consists of the basic tools of xpwn.

Video: http://vimeo.com/12262861
Download: http://idecrypt.hack2learn.org/

Talk:IDecrypt

2010-08-24T08:59:59Z

I1029ai: New page: Hi, i work for some time also on a similar tool Currently it only runs on the console. The whole is in beta and is available for x86 for disposal. It consists of the basic tools of xpwn. ...

Hi, i work for some time also on a similar tool

Currently it only runs on the console.
The whole is in beta and is available for x86 for disposal. It consists of the basic tools of xpwn.

Video: http://vimeo.com/12262861
Download: http://idecrypt.hack2learn.org/

N45AP

2010-03-30T01:08:21Z

I1029ai:

[[Image:Ipod-touch.jpg|thumb|right|iPod touch 1G]]
This is the '''iPod Touch''' (trademarked as iPod touch) it is a portable media player with a Wi-Fi platform designed by [[Apple Inc]]. The product was launched on September 5, 2007 at an Apple hosted event called ''the beat goes on''. The iPod touch is the first iPod to introduce a multi-touch graphical interface to the iPod generations. It is availible with 8, 16, or 32GB of flash memory. It also includes Apple's popular browser [[Safari]]. With a software update introduced by Apple, users were granted access to the [[App Store]]. However, this update costed $9.95.
==Internals==
See: [[N45ap (Internals)]]

== Application Processor ==
It makes use of the [[S5L8900]] application processor. At this time, the [[iPhone]], [[iPhone 3G]], and [[iPod Touch]] all use this same processor.

== Jailbreaking Process ==
You can use either [[redsn0w]] or [[PwnageTool]] to safely jailbreak the latest firmware.

N82AP

2010-03-30T01:07:42Z

I1029ai:

[[Image:Iphone-3g.jpg|right|thumb|iPhone 3G, back and front.]]

This is the iPhone 3G. It was released on July 11, 2008 with a price tag of $199 for the 8GB model and $299 for the 16GB model, in the US market. Price varies depending on the operator selling it. Features the inclusion of 3G networking and GPS, along with a tapered plastic back in black and white colors (8 GB model not available in white).

==Internals==
See: [[N82ap (Internals)]]

== GPS ==
Unlike the previous model, [[iPhone]], [[iPhone 3G]] has GPS capabilities, powered by the [[Infineon PMB2525]] GPS chip

== Baseband ==
The [[iPhone 3G]] uses the [[X-Gold 608]] baseband chip

== Application Processor ==
It makes use of the [[S5L8900]] application processor. At the time, the [[iPhone]], [[iPhone 3G]], and [[iPod Touch]] all use this same processor.

== Bluetooth Chip ==
The iPhone 3G uses a different chip than the iPhone 2G. The chip supports [[Bluetooth]] 2.1+EDR and all available profiles. The iPhone OS only supports Bluetooth 2.0 and limited profiles for this device. The chip is the CSR BlueCore6-ROM.

== Specifications ==
'''Color''': Black (8 GB or 16 GB) or white (16 GB) 
'''Size''': 4.5 inches (115.5 mm) (h) × 2.4 inches (62.1 mm) (w) × 0.48 inch (12.3 mm) (d) 
'''Weight''': 133 g (4.7 oz) 
Headphone jack (non-recessed) 
'''Battery''' has up to 10 hours of 2G talk, 5 hours of 3G talk, 5 (3G) or 6 (Wi-Fi) hours of Internet use, 7 hours of video playback, and up to 24 hours of audio playback, lasting over 300 hours on standby.[8] 
'''3G''' for broadband data speeds (Tri band UMTS / HSDPA: UMTS 850 / 1900 / 2100) 
Assisted GPS, with preference to location based on Wi-Fi or cell towers 
Digital SAR Rating: 1.38 W/kg 

== See also ==
* [[X-Gold 608 Unlock]]

S5L8930

2010-03-30T01:06:56Z

I1029ai: /* Links */

An SoC developed by Apple in-house chip design department. It is currently used in [[k48ap|iPad]].

== Exploits ==
=== Bootrom ===

=== iBoot / Kernel ===

=== Userland ===

== Specifications ==
* '''CPU''': ARM Cortex-A9 MPCore
* '''GPU''': PowerVR SGX 545
* '''A/V Playback''': PowerVR VXD

== Links ==
* http://www.apple.com/ipad/specs/
* http://www.brightsideofnews.com/news/2010/1/27/apple-a4-soc-unveiled---its-an-arm-cpu-and-the-gpu!.aspx
* [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0407e/DDI0407E_cortex_a9_mpcore_r2p0_trm.pdf Technical Reference Manual: Cortex A9]

S5L8922

2010-03-30T01:05:24Z

I1029ai:

This is the processor used in the [[N18ap|iPod Touch 3G]].

== Exploits ==
=== [[iBoot]] / [[Kernel]] ===
* [[usb_control_msg(0x21, 2) Exploit]] - 3.1.2 and below.

=== [[S5L8922 (Bootrom)|Bootrom]] ===
* Unreleased exploit (demonstrated by Geohot)

==Information==

The load address is at 0x41000000 (same as the S5l8920).

== Boot Chain ==
[[S5L8922 (Bootrom)|Bootrom]]->[[LLB]]->[[iBoot]]->[[Kernel]]->[[System|System Software]]

The entire boot chain (except the bootrom) resides on the NAND flash (instead of part of it on NOR flash as in earlier devices).

== See also ==
* [[S5L8922 (Bootrom)]]
* [[S5L8922 (Hardware)]]

==External Links==
* [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0301h/DDI0301H_arm1176jzfs_r0p7_trm.pdf Technical Reference Manual: ARM1176JZF-S]

S5L8920

2010-03-30T01:04:03Z

I1029ai:

This is the processor used in the [[iPhone 3GS]].

S5L8920 using [http://www.arm.com/products/CPUs/archi-thumb2.html THUMB-2] instruction set as much as ARM and THUMB ones. So the compiled binaries are not compatible with older CPUs.

== Exploits ==
=== [[iBoot]] / [[Kernel]] ===
* [[iBoot Environment Variable Overflow]] - Firmware 3.1b3 and below (Note: [[iBoot]] on the S5L8920 can be downgraded allowing the exploit to be used on future firmwares, but ''only if'' a backup of the device-specific Apple-signed 3.0 iBSS with unique [[ECID]] was made.)
* [[usb_control_msg(0x21, 2) Exploit]] - 3.1.2 and below.

=== [[S5L8920 (Bootrom)|Bootrom]] ===
* [[0x24000 Segment Overflow]]

== Boot Chain ==
[[S5L8920 (Bootrom)|Bootrom]]->[[LLB]]->[[iBoot]]->[[Kernel]]->[[System|System Software]]

== See also ==
* [[S5L8920 (Bootrom)]]
* [[S5L8920 (Hardware)]]
* [[S5L8920 (Hardware - Quick Notes)]]

==External Links==
* [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0344j/DDI0344J_cortex_a8_r3p2_trm.pdf Technical Reference Manual: Cortex A8]

N88AP

2010-03-30T01:03:03Z

I1029ai: /* External Links */

[[Image:IPhone3GS.jpg|right|thumb|iPhone 3GS, back and front.]]

This is the iPhone 3GS. It was released on June 19, 2009 with a price tag of $199 for the 16GB model and $299 for the 32GB model, in the U.S., Canada and major European countries. Prices vary depending on the mobile operator. It features the same exterior design as the [[iPhone 3G]], but has new internal features such as video recording, voice control, digital compass, faster CPU, increased RAM etc.

== Baseband ==
The iPhone 3GS uses the [[X-Gold 608]] baseband chip, same as in the iPhone 3G.

== Application Processor ==
It makes use of the [[S5L8920]] application processor.

== Specifications ==
'''Color''': Black or white 
'''Size''': 4.5 inches (115.5 mm) (h) × 2.4 inches (62.1 mm) (w) × 0.48 inch (12.3 mm) (d) 
'''Weight''': 135 g (4.8 oz) 
'''Battery''': Up to 12 hours of 2G talk, 5 hours of 3G talk, 5 (3G) or 9 (Wi-Fi) hours of Internet use, 10 hours of video playback, and up to 30 hours of audio playback, lasting over 300 hours on standby. 
'''3G''': Broadband data speeds, supporting 7.2Mbps HSDPA 
'''Camera''': 3.15MP with Autofocus and manual focus (''Tap to focus''), supporting VGA video recording @ 30FPS

More specifications available in [http://www.gsmarena.com/apple_iphone_3g_s-2826.php GSMArena].

== See also ==
* [[Jailbreak iPhone2,1]]
* [[X-Gold 608 Unlock]]
* [[N88AP Device Tree]]

==External Links==
* [http://www.anandtech.com/gadgets/showdoc.aspx?i=3579 AnandTech: The iPhone 3GS Hardware Exposed & Analyzed]

S5L8720

2010-03-30T01:02:19Z

I1029ai:

This is the Application Processor used on the [[n72ap|iPod Touch 2G]].

==Exploits==
===[[iBoot]] / [[Kernel]] Level===
'''Note''': [[iBoot]] on the S5L8720 can be downgraded, allowing any of these exploits to be used on future firmwares

* [[ARM7 Go]] - Firmware v2.1.1
* [[iBoot Environment Variable Overflow]] - 3.1 beta 3 and below
* [[usb_control_msg(0x21, 2) Exploit]] - 3.1.2 and below

===[[VROM (S5L8720)|Bootrom]]===
* [[0x24000 Segment Overflow]]

==Boot Chain==
[[VROM (S5L8720)|VROM]]->[[LLB]]->[[iBoot]]->[[Kernel]]->[[System|System Software]]

It is definitely worthy to note that the [[Pwnage]] exploit is fixed because the images are now flashed to the [[NOR]] in their encrypted [[IMG3]] containers, and the [[S5L8720 Bootrom|bootrom]] can properly sigcheck [[LLB]]. That being said, unsigned images can still be run using the [[0x24000 Segment Overflow]].

==See Also==
* [[S5L8720 (Hardware)]]
* [[S5L File Formats]]

==External Links==
* [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0301h/DDI0301H_arm1176jzfs_r0p7_trm.pdf Technical Reference Manual: ARM1176JZF-S]

S5L8900

2010-03-30T01:00:51Z

I1029ai:

This is the Application Processor shared between the [[M68ap|iPhone]], [[N45ap|iPod touch]], and the [[N82ap|iPhone 3G]]. Not much is known about it through official sources. This processor is not used in any of the newest devices, being replaced by the [[S5L8720]] and [[S5L8920]].

==[[S5L File Formats|Firmware File Formats]]==

==Exploits==
===[[System|Userland]]===
* [[Restore Mode]] - Firmware v1.0.2 and below
* [[Symlinks]] - Firmware v1.1.1 and below
* [[LibTiff|LibTIFF]] - Firmware v1.1.1 and below
* [[Mknod]] - Firmware v1.1.2 and below
* [[Dual Boot Exploit]] - Firmware 1.1.4 / v2.0b3 and below

===[[iBoot]] / [[Kernel]]===
* [[Ramdisk Hack]] - 1.1.4 / 2.0 beta 3 and below
* [[diags|Diags Exploit]] - 1.1.4 / v2.0 beta 5 and below
* [[iBoot Environment Variable Overflow]] - 3.1 beta 1 and below
* [[usb_control_msg(0x21, 2) Exploit]] - 3.1.2 and below

===[[VROM (S5L8900)|Bootrom]]===
* [[pwnage|Pwnage 1.0 (Ramdisk + AppleImage2NORAccess)]]
* [[Pwnage 2.0|Pwnage 2.0 (DFU + Malformed Certificate)]]

==Boot Chain==
[[VROM]]->[[LLB]]->[[iBoot]]->[[Kernel]]->[[System|System Software]]

One of the [[iPhoneLinux]] goals are to replace that Boot Chain after iBoot: 
[[VROM]]->OpeniBoot->Linux Kernel->X Server->Window Manager

==Upgrade Process==

=== [[Restore Mode]] ===
The common upgrade process chain is [[VROM]]->[[DFU]]->[[WTF]]->[[iBoot]]->[[Kernel]]->[[Ramdisk]]->[[Restore Mode]].

=== [[DFU|DFU Mode]] ===
To flash an older version of the iPhone software you have to let your phone reside in [[DFU]]. In iTunes you have to press the option key (Mac) or the shift key (Windows) when pressing 'Restore' to be able to manually chose an [[IPSW File Format|IPSW]].

==== Boot Chain ====
[[VROM]]->[[DFU]]

==External Links==
* [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0301h/DDI0301H_arm1176jzfs_r0p7_trm.pdf Technical Reference Manual: ARM1176JZF-S]

M68AP

2010-03-30T00:59:35Z

I1029ai: /* External Links */

[[Image:Jailbroken.PNG|right|thumb|Homescreen of a jailbroken iPhone 3G. Note that when it comes to the [[iPhone]] and [[iPhone 3G]], the OS remains exactly the same, as does the home screen. However, this does not apply to the [[iPod Touch]]|300px]]

This is the original [[iPhone]]. It was released on June 29, 2007, it is an internet-connected multimedia smartphone designed and manufactered by Apple Inc, with a multi-touch screen. It does not have a physical keyboard, so a virtual keyboard is rendered onto the multi-touch screen. The iPhone functions as a camera phone, a media player and an internet client. The first generation includes Quad-Band GSM with EDGE, unlike the later versions with more advanced UMTS and HSDPA.
==Internals==
See: [[M68ap (Internals)]][http://maltiel-consulting.com/iPhone_Chip_Components_maltiel_semiconductor.htm]

== Baseband ==
The [[iPhone]] uses the [[S-Gold 2]] baseband chip

== Application Processor ==
It makes use of the [[S5L8900]] application processor. At the time, the [[iPhone]], [[iPhone 3G]], and [[iPod Touch]] all use this same processor.

== [[Bluetooth]] ==

Uses the CSR BlueCore4 Chip (BC41B41)

== Differences between iPhone 2G and 3G ==
* '''2G''': Aluminum Back Case
* '''3G''': Plastic Back Case

* '''2G''': Memory - 4/8 GB (later 8/16 GB)
* '''3G''': Memory - 8/16 GB

* '''2G''': EDGE Network
* '''3G''': 3G Network

* '''2G''': Colors - Standard Aluminum
* '''3G''': Colors - Black / White

* '''2G''': No GPS Antenna
* '''3G''': Integrated GPS Antenna

* '''2G''': 4mm headphone minijack
* '''3G''': 3.55mm headphone minijack

* '''2G''': Bit thinner body then 3G
* '''3G''': Bit larger body than 2G

* '''2G''': Worse colors in the display than 3G
* '''3G''': Better colors in the display than 2G

* '''2G''': More powerful Wi-Fi antenna
* '''3G''': Less powerful Wi-Fi antenna

More informations at: http://ivitto.wordpress.com/

== Jailbreak/Unlock Status ==
Naturally, as the iPhone 2G was a first generation device, it is one of the more hack-friendly iDevices. It is susceptible to [[Pwnage 2.0]] for an [[untethered jailbreak]], and will remain that way since it is a hardware-based exploit. The iPhone 2G [[unlock]] was also defeated. The [[iPhone Dev Team]] created [[BootNeuter]] which can remove restrictions the [[Baseband Bootloader]] imposes and unlock the iPhone 2G no matter what.

==External Links==
*[http://maltiel-consulting.com/iPhone_Chip_Components_maltiel_semiconductor.htm iPhone semiconductor components]
*[http://www.eetasia.com/ART_8800470713_499488_NT_d06c93ea.HTM Analysts crack open the iPhone, reveal chip suppliers]
*[http://www.anandtech.com/mac/showdoc.aspx?i=3026&p=1 Apple's iPhone Dissected: We did it, so you don't have to]
*[http://www.hardwarebook.info/IPhone Hwb iPhone]
*[http://ivitto.wordpress.com/ iVitto's Blog]

N45AP

2010-03-30T00:55:55Z

I1029ai:

M68AP

2010-03-30T00:52:51Z

I1029ai:

N88AP

2010-03-30T00:48:26Z

I1029ai: /* External Links */

N82AP

2010-03-30T00:47:31Z

I1029ai:

N88AP

2010-03-30T00:41:21Z

I1029ai: /* External Links */

A4

2010-02-13T14:31:51Z

I1029ai: /* Links */

A4 is a SoC designed by Apple in-house chip design department. It is used in [[k48ap|iPad]].

== Specifications ==
CPU: ARM Cortex-A9 MPCore

GPU: PowerVR SGX 545

Video and audio playback: PowerVR VXD

== Links ==
[http://www.apple.com/ipad/specs/ http://www.apple.com/ipad/specs/]

http://www.brightsideofnews.com/news/2010/1/27/apple-a4-soc-unveiled---its-an-arm-cpu-and-the-gpu!.aspx
http://www.brightsideofnews.com/news/2010/1/27/apple-a4-soc-unveiled---its-an-arm-cpu-and-the-gpu!.aspx
http://infocenter.arm.com/help/topic/com.arm.doc.ddi0407e/DDI0407E_cortex_a9_mpcore_r2p0_trm.pdf

A4

2010-02-13T14:29:53Z

I1029ai: /* Links */

A4 is a SoC designed by Apple in-house chip design department. It is used in [[k48ap|iPad]].

== Specifications ==
CPU: ARM Cortex-A9 MPCore

GPU: PowerVR SGX 545

Video and audio playback: PowerVR VXD

== Links ==
[http://www.apple.com/ipad/specs/ http://www.apple.com/ipad/specs/]

[http://www.brightsideofnews.com/news/2010/1/27/apple-a4-soc-unveiled---its-an-arm-cpu-and-the-gpu!.aspx http://www.brightsideofnews.com/news/2010/1/27/apple-a4-soc-unveiled---its-an-arm-cpu-and-the-gpu!.aspx
http://infocenter.arm.com/help/topic/com.arm.doc.ddi0407e/DDI0407E_cortex_a9_mpcore_r2p0_trm.pdf]

A4

2010-02-13T14:29:23Z

I1029ai: /* Links */

A4 is a SoC designed by Apple in-house chip design department. It is used in [[k48ap|iPad]].

== Specifications ==
CPU: ARM Cortex-A9 MPCore

GPU: PowerVR SGX 545

Video and audio playback: PowerVR VXD

== Links ==
[http://www.apple.com/ipad/specs/ http://www.apple.com/ipad/specs/]

[http://www.brightsideofnews.com/news/2010/1/27/apple-a4-soc-unveiled---its-an-arm-cpu-and-the-gpu!.aspx http://www.brightsideofnews.com/news/2010/1/27/apple-a4-soc-unveiled---its-an-arm-cpu-and-the-gpu!.aspx http://infocenter.arm.com/help/topic/com.arm.doc.ddi0407e/DDI0407E_cortex_a9_mpcore_r2p0_trm.pdf]

A4

2010-02-13T14:28:24Z

I1029ai: /* Links */

A4 is a SoC designed by Apple in-house chip design department. It is used in [[k48ap|iPad]].

== Specifications ==
CPU: ARM Cortex-A9 MPCore

GPU: PowerVR SGX 545

Video and audio playback: PowerVR VXD

== Links ==
[http://www.apple.com/ipad/specs/ http://www.apple.com/ipad/specs/]

[http://www.brightsideofnews.com/news/2010/1/27/apple-a4-soc-unveiled---its-an-arm-cpu-and-the-gpu!.aspx http://www.brightsideofnews.com/news/2010/1/27/apple-a4-soc-unveiled---its-an-arm-cpu-and-the-gpu!.aspx
http://infocenter.arm.com/help/topic/com.arm.doc.ddi0407e/DDI0407E_cortex_a9_mpcore_r2p0_trm.pdf]