The iPhone Wiki - User contributions [en]

Greenpois0n (jailbreak)

2010-06-27T18:19:09Z

Josso: will be » was

The tool that was released for jailbreaking 3.1 on all devices. Even the iPod touch 3G.

It uses the [[usb_control_msg(0x21, 2) Exploit]].

Here is a video made by Chronic of him proving that the exploit does in fact work on the iPod touch 3G: http://qik.ly/f4M8.

Talk:Disclaimer

2010-05-10T09:46:44Z

Josso: /* Removing part of "Apple eventually releasing dev-kit" */ new section

I have mixed feelings about the DRM thing. I believe that as long as no binary files are posted, and only methods for decrypting applications you already own should be tolerated. Reversers are very interested in the way that some applications work. For example, Remote, the iTunes controller application made by Apple, would be very interesting to disassemble and see how they managed to do something like that within the bounds of their own SDK.

Feel free to reverse remote from a black box standpoint. And if you know how to get at the binary, that's fine. But thats one thing that shouldn't be posted here.

Look, when people download music, the RIAA loses...who cares. When people download movies the MPAA loses... again who cares. But if people pirate apps, the developers lose. And thats bad.

== Removing part of "Apple eventually releasing dev-kit" ==

Shouldn't the part on "we hope that Apple will eventually release a developer kit, or a guide for embedded applications" be deleted? It's 3? years since they released it. [[User:Josso|josso]] 09:46, 10 May 2010 (UTC)

Talk:IRecovery

2010-05-10T09:22:47Z

Josso: What about p0sixninja and GreySyntax versions of iRecovery?

== Including forks of iRecovery? ==
Wouldn't it be an idea to include the various forks of iRecovery? p0sixninja have made one and so has GreySyntax (Jordan). Jordan is even doing an iRecovery++. Westbaer's version haven't been updated since July 2009 whereas the others have been updated just a day or two ago. [[User:Josso|Josso]] 09:22, 10 May 2010 (UTC)

IPSW File Format

2010-05-09T16:08:08Z

Josso:

'''IPSW''' ('''IP'''hone/ '''IP'''od Touch/ '''IP'''ad '''S'''oft'''W'''are) Files have the Magic Number 504B0304 (PK\003\004) and thus are [http://en.wikipedia.org/wiki/ZIP_%28file_format%29 ZIP] Archives. They can be modified with typical zip/unzip tools (i.e. change extension to .zip and double click). An IPSW File is used to deliver the iPod Touch / iPhone [[firmware]] to the end-user.

== IPSW Contents ==

=== root folder ===
*[[Restore Ramdisk]]
*[[Update Ramdisk]] (Firmware 1.0 didn't contain an Update Ramdisk as there is no official firmware to update from)
*[[Disk Image Formats|Filesystem Ramdisk]] (the largest .dmg file)
*[[Kernelcache|kernelcache.release.XXXXXXX file]] (application processor specific i.e [[S5L8900]], [[S5L8920]], [[S5L8720]])
*BuildManifest.plist (first appeared in firmware 3.0, I guess)
*Restore.plist file

*\Firmware (Folder)

=== Firmware Folder ===
*\all_flash\all_flash.XXXXX.production (Folder - hardware specific i.e. [[M68ap]], [[N82ap]], [[N88ap]], [[N45ap]], [[N72ap]])
*\dfu (Folder)

=== all_flash.XXXXX.production Folder ===
*[[IMG2 File Format|img2]]/[[IMG3 File Format|img3]] files
*manifest

=== dfu Folder ===
*iBEC.XXXXX.DFU (hardware specific i.e. [[M68ap]], [[N82ap]], [[N88ap]], [[N45ap]], [[N72ap]])
*iBSS.XXXXX.DFU (hardware specific i.e. [[M68ap]], [[N82ap]], [[N88ap]], [[N45ap]], [[N72ap]])
*WTF.XXXXX.DFU (hardware specific i.e. [[M68ap]], [[N82ap]], [[N45ap]], [[N72ap]] - currently not present in the iPhone 3GS ([[N88ap]]) firmware, because it is mostly used to patch issues with the DFU mode that was burned into the bootrom)

== Example ==
This is a ls -alR of an extracted iPhone 3GS Firmware ipsw.

<pre>total 608400
drwx------@ 11 m staff 374 17 Jun 07:11 .
drwxrwxrwx 5 m staff 170 18 Jul 07:34 ..
-rw-r--r--@ 1 m admin 281214976 22 Mai 17:10 018-5302-002.dmg
-rw-r--r--@ 1 m admin 12769604 22 Mai 16:59 018-5304-002.dmg
-rw-r--r--@ 1 m admin 12777796 22 Mai 16:59 018-5306-002.dmg
-rw-r--r-- 1 m admin 21097 22 Mai 17:29 BuildManifest.plist
drwxr-xr-x@ 5 m staff 170 17 Jun 07:11 Firmware
-rw-r--r-- 1 m admin 1763 22 Mai 17:10 Restore.plist
-rw-r--r--@ 1 m staff 4695492 22 Mai 14:32 kernelcache.release.s5l8920x

./Firmware:
total 16
drwxr-xr-x@ 5 m staff 170 17 Jun 07:11 .
drwx------@ 11 m staff 374 17 Jun 07:11 ..
drwxr-xr-x@ 4 m staff 136 18 Jun 02:10 all_flash
drwxr-xr-x@ 4 m staff 136 22 Mai 13:39 dfu

./Firmware/all_flash:
total 16
drwxr-xr-x@ 4 m staff 136 18 Jun 02:10 .
drwxr-xr-x@ 5 m staff 170 17 Jun 07:11 ..
drwxr-xr-x@ 16 m staff 544 22 Mai 13:43 all_flash.n88ap.production

./Firmware/all_flash/all_flash.n88ap.production:
total 1320
drwxr-xr-x@ 16 m staff 544 22 Mai 13:43 .
drwxr-xr-x@ 4 m staff 136 18 Jun 02:10 ..
-rw-r--r--@ 1 m staff 44996 22 Mai 13:08 DeviceTree.n88ap.img3
-rw-r--r--@ 1 m staff 67908 22 Mai 13:12 LLB.n88ap.RELEASE.img3
-rw-r--r--@ 1 m staff 9604 22 Mai 13:15 applelogo.s5l8920x.img3
-rw-r--r--@ 1 m staff 19716 22 Mai 13:15 batterycharging0.s5l8920x.img3
-rw-r--r--@ 1 m staff 24900 22 Mai 13:16 batterycharging1.s5l8920x.img3
-rw-r--r--@ 1 m staff 76100 22 Mai 13:16 batteryfull.s5l8920x.img3
-rw-r--r--@ 1 m staff 56772 22 Mai 13:16 batterylow0.s5l8920x.img3
-rw-r--r--@ 1 m staff 65348 22 Mai 13:17 batterylow1.s5l8920x.img3
-rw-r--r--@ 1 m staff 20356 22 Mai 13:17 glyphcharging.s5l8920x.img3
-rw-r--r--@ 1 m staff 19332 22 Mai 13:18 glyphplugin.s5l8920x.img3
-rw-r--r--@ 1 m staff 178500 22 Mai 13:21 iBoot.n88ap.RELEASE.img3
-rw-r--r--@ 1 m staff 341 22 Mai 13:43 manifest
-rw-r--r--@ 1 m staff 20484 22 Mai 13:24 needservice.s5l8920x.img3
-rw-r--r--@ 1 m staff 47876 22 Mai 13:24 recoverymode.s5l8920x.img3

./Firmware/dfu:
total 416
drwxr-xr-x@ 4 m staff 136 22 Mai 13:39 .
drwxr-xr-x@ 5 m staff 170 17 Jun 07:11 ..
-rw-r--r--@ 1 m staff 104772 22 Mai 13:30 iBEC.n88ap.RELEASE.dfu
-rw-r--r--@ 1 m staff 104772 22 Mai 13:36 iBSS.n88ap.RELEASE.dfu
</pre>

Cydia Substrate

2009-10-19T12:01:26Z

Josso: /* More Info */ Google link didn't work

== Basic Info ==
Mobile Substrate is [[saurik]]'s [[extension]] for [[SpringBoard]] that allows 3rd party SpringBoard addons to run. Examples are the five-icon dock and [[Winterboard]]. However, possibly one of the most useful is SBSettings that allows many tweaks to the SpringBoard, as well as enabling and disabling SpringBoard/Mobile Substrate extensions

== And with all this extra code......... ==
As allways, even with PCs, extra code means crashing and Mobile Substrate can solve this too. Should the SpringBoard crash for any reason (which us quite common once let loose on [[Cydia]] as there are absolutely loads of SpringBoard extensions) Mobile Substrate will temporarily put the SpringBoard into Safe Mode with SpringBoard extensions such as WinterBoard diabled allowing you to continue using your device until it is convenient to [[respring]]

== More Info ==
[http://www.saurik.com saurik's Web Site]

[http://www.google.com/search?q=Mobile+Substrate Google]

[http://iphonedevwiki.howett.net/index.php?title=MobileSubstrate MobileSubstrate Development Info]

User:Saurik

2009-10-19T11:57:24Z

Josso:

saurik (Jay Freeman) is the creator of [[Cydia]], [[Winterboard]] and [[Mobile Substrate]] as well as various other projects such as creating an [[iPhone 3GS]] downgrade from 3.1.x to 3.0.x

See [http://www.saurik.com his website] for more information and guides.

SkankPod

2009-10-19T11:56:37Z

Josso: Redirecting to SkankPhone

#REDIRECT [[SkankPhone]]

SkankPod

2009-10-19T11:56:18Z

Josso: Redirecting to FOR DELETION: SkankPhone

#REDIRECT [[FOR DELETION: SkankPhone]]

Untethered jailbreak

2009-10-19T11:49:32Z

Josso: iPod Touch 3G isn't untethered yet

An untethered jailbreak is a jailbreak where your device does not require you to reboot with a connection to an external device capable of executing commands on the device. Currently, all [[iPhone]]s and [[iPod touch]] models are jailbreakable in this method and, with the exception of the most recent [[iPhone 3GS]] and [[iPod touch 3G]], the current released devices will always be subject to [[pwnage]]. The only exception is Linux on your device, where it is still in a [[tethered]] form.

Timeline

2009-03-11T18:34:49Z

Josso: /* 2009 */ Added untethered - feel free to correct me. :)

==2009==

===March===
* March 10 -- [[The dev team]] released the untethered jailbreak for iPod Touch 2G to stop NitroKey to earn money for their untethered version.

===January===
* January 31 -- [[The dev team]] released a "lite" version of [[RedSn0w]], a tethered jailbreak for the [[iPod touch 2G]]. It combines the [[ARM7 Go]] exploit with the well-established pwnage flow for other Apple mobile devices. It is bundled in a way that will allow usage on the 2.2.1 firmware.

* January 25 -- [[0wnboot]] is released to chronicdev google code page, thanks to AriX, chronic, CPICH, westbaer, ius, pod2g, the rest of the iPod devel crew on IRC, and to the #iphone-hax lab rats. In effect, within days AriX as well as other independent devs got a ramdisk booting and / or a pwnage bundle created and working.

* January 17 -- [[The dev team]] [http://twitter.com/MuscleNerd/status/1127346766 shows a video demo] of the first jailbroken iPod Touch 2G. This tethered jailbreak is released 2 weeks later.

* January 16 -- [[ARM7 Go]] hole disclosed where else but here on The iPhone Wiki, for developers to poke and prod at

* January 15 -- [[The dev team]] [http://twitter.com/iphone_dev/status/1120595069 tweets the vfdecrypt key] for the [[iPod touch 2G]] 2.2 firmware, demonstrating for the first time that unsigned code can now be run on that device.

* January 1 -- [[The dev team]] released [[yellowsn0w]] 0.9 beta for baseband 02.28.00.

==2008==

===December===
* December 21 -- [[MuscleNerd]], of [[the dev team]] does a live demo of the 3G unlock, dubbed as 'yellowsn0w': http://qik.com/video/729275

===August===
* August 18 -- [[The dev team]] releases [http://wikee.iphwn.org/news:pwnage20announcement QuickPwn], a 2.x [[pwnage]]/ramdisk combination exploit that allows jailbreaking without needing to create custom IPSWs.

===July===
* July 22 -- [[TA_Mobile]] hardware dumps the 3G baseband (bootloader 5.8 & FW 1.45.00) by desoldering the [[NOR]].
* July 19 -- [[The dev team]] releases [[PwnageTool]] 2.0, jailbreaking and unlocking the 2.0 software on the iPhone 2G and jailbreaking the 2.0 software on the iPhone 3G.
* July 11 -- [[iPhone 3G]] is released.

===June===
* June 9 - [[iPhone 3G]] is announced at [[WWDC]] '08.

===April===
* April 3 -- Dev team releases [[PwnageTool]] 1.0, making use of the pmdx exploit (to patch RSA checks out of the [[kernel]], to write unsigned to [[NOR]])

===March===
* March 12 -- Dev team releases dual-boot jailbreak method, only to be silently fixed in 2.0.
* March 4 -- [[User:N000b|George Zhu (n000b)]] releases [[ILiberty / ILiberty%2B]].

===February===
* February 11 -- [[Zibri]] releases [[ZiPhone]], the first all-in-one unlock, activate, jailbreak solution.
* February 8 -- [[User:Geohot|geohot]] releases software unlock for 4.6, Apple states 25% of phones were never activated with AT&T.

===January===
* January 28 -- Dev team releases soft upgrade jailbreak for 1.1.3.
* January 18 -- Geohot and his friends [http://iphonejtag.blogspot.com/2008/01/112-otb-unlocked.html unlocked 1.1.2 OTB 4.6 by test point], the unbeatable version at that time.
* January 18 -- Dev team posts YouTube video of a jailbroken 1.1.3, which was made possible by the dual boot jailbreak from bgm.

== 2007 ==
===November===
* November 15 -- New baseband [[Bootloader 4.6|bootloader (4.6)]] comes out, new iPhones can't be unlocked.
* November 2 -- [[Jailbreakme]] is released, bringing jailbreaking to the mainstream iPhone user.

===October===
* October 23 -- iPhone-Elite Team releases the [[Virginizer]].

===September===
* September 11 -- [[The dev team]] releases [[iUnlock]], first free software unlock.
* September 10 -- [[IPSF]] releases first paid software unlock.

===August===
* August 23 -- [[User:Geohot|geohot]] and team release [[hardware unlock]] method.
* August 21 -- Installer.app is released, first GUI apps are distributed.

===July===
* July 23 -- First phones are used with other carriers by means of [[SIM hacks]].
* July 20 -- nightwatch adapts a [[toolchain]] to the iPhone. The first apps are compiled.
* July 9 -- [[The dev team]] releases a [[jailbreak]] method. The first use of this is ringtones.
* July 3 -- DVD Jon first cracks [[activation]]. People can use the apps on the phone without a subscription.

===June===
* June 29 -- [[iPhone]] is released. World's most hyped consumer product.