Beta Firmware

2011-02-01T19:07:29Z

Liamchat: added 8F5166d

This is a documented list of beta firmwares Apple has provided to developers or were used for testing.

==[[Apple TV]]==
===[[K66ap|Apple TV (2nd generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="350"| Comments
|-
| 4.3b1
| [[DurangoVail 8F5148b (Apple TV 2G)|DurangoVail 8F5148b]]
|
|-
| 4.3b2
| [[DurangoVail 8F5153d (Apple TV 2G)|DurangoVail 8F5153d]]
|
|}

==[[iPad]]==
===[[K48ap|iPad (1st generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="40"| [[Baseband Firmware|Baseband]]
!width="168"| Build
!width="350"| Comments
|-
| 4.2b1
| [[7.08.00]]
| [[JasperVail 8C5091e (iPad)|JasperVail 8C5091e]]
|
|-
| 4.2b2
| [[7.09.00]]
| [[JasperVail 8C5101 (iPad)|JasperVail 8C5101]]
|
|-
| 4.2b3
| [[7.10.00]]
| [[JasperVail 8C5115c (iPad)|JasperVail 8C5115c]]
|
|-
| 4.2GM
| [[7.10.00]]
| [[JasperVail 8C134 (iPad)|JasperVail 8C134]]
|
|-
| 4.2GM2
| [[7.10.00]]
| [[JasperVail 8C134b (iPad)|JasperVail 8C134b]]
| Update due to WiFi problems
|-
| 4.2.1GM
| [[7.10.00]]
| [[JasperVail 8C148 (iPad)|JasperVail 8C148]]
| Update due to issues with VoIP APIs
|-
| 4.3 8F5132f
| [[7.11.00]]
| DurangoVail 8F5132f
| Not released to public, but mentioned in changelog
|-
| 4.3b1
| [[7.11.00]]
| [[DurangoVail 8F5148b (iPad)|DurangoVail 8F5148b]]
|
|-
| 4.3b2
| ?
| [[DurangoVail 8F5153d (iPad)|DurangoVail 8F5153d]]
|
|-
| 4.3b3
| ?
| [[DurangoVail 8F5166d (iPad)|DurangoVail 8F5166d]]
|
|}

==[[iPhone]]==
===[[M68ap|iPhone]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="40"| [[Baseband Firmware|Baseband]]
!width="168"| Build
!width="350"| Comments
|-
| 1.2b1
| ?
| [[Big Bear 5A147p (iPhone)|Big Bear 5A147p]]
|
|-
| 2.0b2
| ?
| [[Big Bear 5A225c (iPhone)|Big Bear 5A225c]]
|
|-
| 2.0b3
| ?
| [[Big Bear 5A240d (iPhone)|Big Bear 5A240d]]
|
|-
| 2.0b4
| ?
| [[Big Bear 5A258f (iPhone)|Big Bear 5A258f]]
|
|-
| 2.0b5
| ?
| [[Big Bear 5A274d (iPhone)|Big Bear 5A274d]]
|
|-
| 2.0b6PR
| ?
| [[Big Bear 5A292g (iPhone)|Big Bear 5A292g]]
| Beta 6 Pre-Releaase
|-
| 2.0b6F
| ?
| [[Big Bear 5A308 (iPhone)|Big Bear 5A308]]
| Beta 6 Final
|-
| 2.0b7
| ?
| [[Big Bear 5A331 (iPhone)|Big Bear 5A331]]
|
|-
| 2.0b8 (GM)
|rowspan="9"| 04.05.04_G
| [[Big Bear 5A345 (iPhone)|Big Bear 5A345]]
|
|-
| 2.1b1
| [[Sugar Bowl 5F90 (iPhone)|Sugar Bowl 5F90]]
|
|-
| 3.0b1
| [[KirkVail 7A238j (iPhone)|KirkVail 7A238j]]
|
|-
| 3.0b2
| [[KirkVail 7A259g (iPhone)|KirkVail 7A259g]]
|
|-
| 3.0b3
| [[KirkVail 7A280f (iPhone)|KirkVail 7A280f]]
|
|-
| 3.0b4
| [[KirkVail 7A300g (iPhone)|KirkVail 7A300g]]
|
|-
| 3.0b5
| [[KirkVail 7A312g (iPhone)|KirkVail 7A312g]]
|
|-
| 3.1b1
| [[NorthVail 7C97d (iPhone)|NorthVail 7C97d]]
|
|-
| 3.1b2
| [[NorthVail 7C106c (iPhone)|NorthVail 7C106c]]
|
|}

===[[N72ap|iPhone 3G]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="40"| [[Baseband Firmware|Baseband]]
!width="168"| Build
!width="350"| Comments
|-
| 3.0b1
| ?
| [[KirkVail 7A238j (iPhone 3G)|KirkVail 7A238j]]
|
|-
| 3.0b2
| ?
| [[KirkVail 7A259g (iPhone 3G)|KirkVail 7A259g]]
|
|-
| 3.0b3
| ?
| [[KirkVail 7A280f (iPhone 3G)|KirkVail 7A280f]]
|
|-
| 3.0b4
| ?
| [[KirkVail 7A300g (iPhone 3G)|KirkVail 7A300g]]
|
|-
| 3.0b5
| ?
| [[KirkVail 7A312g (iPhone 3G)|KirkVail 7A312g]]
|
|-
| 3.1b1
| [[5.08.01]]
| [[NorthVail 7C97d (iPhone 3G)|NorthVail 7C97d]]
|
|-
| 3.1b2
| [[5.10.01]]
| [[NorthVail 7C106c (iPhone 3G)|NorthVail 7C106c]]
|
|-
| 3.1b3
| [[5.11.04]]
| [[NorthVail 7C116a (iPhone 3G)|NorthVail 7C116a]]
|
|-
| 4.0b1
| [[5.13.03]]
| [[ApexVail 8A230m (iPhone 3G)|ApexVail 8A230m]]
|
|-
| 4.0b2
| [[5.13.03]]
| [[ApexVail 8A248c (iPhone 3G)|ApexVail 8A248c]]
|
|-
| 4.0b3
| [[5.13.04]]
| [[ApexVail 8A260b (iPhone 3G)|ApexVail 8A260b]]
|
|-
| 4.0b4
| [[5.13.04]]
| [[ApexVail 8A274b (iPhone 3G)|ApexVail 8A274b]]
|
|-
| 4.0GM
| [[5.13.04]]
| [[Apex 8A293 (iPhone 3G)|Apex 8A293]]
|
|-
| 4.1b1
| ?
| [[BakerVail 8B5080c (iPhone 3G)|BakerVail 8B5080c]]
|
|-
| 4.1b2
| [[5.14.01]]
| [[BakerVail 8B5091b (iPhone 3G)|BakerVail 8B5091b]]
|
|-
| 4.2b3
| [[5.15.04]]
| [[JasperVail 8C5115c (iPhone 3G)|JasperVail 8C5115c]]
|
|-
| 4.2GM
| [[5.15.04]]
| [[JasperVail 8C134 (iPhone 3G)|JasperVail 8C134]]
|
|-
| 4.2.1GM
| [[5.15.04]]
| [[JasperVail 8C148 (iPhone 3G)|JasperVail 8C148]]
|
|}

===[[N88ap|iPhone 3GS]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="40"| [[Baseband Firmware|Baseband]]
!width="168"| Build
!width="350"| Comments
|-
| 3.1b
| ?
| [[Sierra 7C108b]]
| Used for testing.
|-
| 3.1b1
| [[5.08.01]]
| [[NorthVail 7C97d (iPhone 3GS)|NorthVail 7C97d]]
|
|-
| 3.1b2
| [[5.10.01]]
| [[NorthVail 7C106c (iPhone 3GS)|NorthVail 7C106c]]
|
|-
| 3.1b3
| [[5.11.04]]
| [[NorthVail 7C116a (iPhone 3GS)|NorthVail 7C116a]]
|
|-
| 4.0b1
| [[5.13.03]]
| [[ApexVail 8A230m (iPhone 3GS)|ApexVail 8A230m]]
|
|-
| 4.0b2
| [[5.13.03]]
| [[ApexVail 8A248c (iPhone 3GS)|ApexVail 8A248c]]
|
|-
| 4.0b3
| [[5.13.04]]
| [[ApexVail 8A260b (iPhone 3GS)|ApexVail 8A260b]]
|
|-
| 4.0b4
| [[5.13.04]]
| [[ApexVail 8A274b (iPhone 3GS)|ApexVail 8A274b]]
|
|-
| 4.0GM
| [[5.13.04]]
| [[Apex 8A293 (iPhone 3GS)|Apex 8A293]]
| The GM version included Game Center; the public version did not.
|-
| 4.1b1
| ?
| [[BakerVail 8B5080c (iPhone 3GS)|BakerVail 8B5080c]]
|
|-
| 4.1b2
| [[5.14.01]]
| [[BakerVail 8B5091b (iPhone 3GS)|BakerVail 8B5091b]]
|
|-
| 4.2b3
| [[5.15.04]]
| [[JasperVail 8C5115c (iPhone 3GS)|JasperVail 8C5115c]]
|
|-
| 4.2GM
| [[5.15.04]]
| [[JasperVail 8C134 (iPhone 3GS)|JasperVail 8C134]]
|
|-
| 4.2.1GM
| [[5.15.04]]
| [[JasperVail 8C148 (iPhone 3GS)|JasperVail 8C148]]
|
|-
| 4.3b1
| [[5.16.00]]
| [[DurangoVail 8F5148b (iPhone 3GS)|DurangoVail 8F5148b]]
|
|-
| 4.3b2
| [[5.16.00]]
| [[DurangoVail 8F5153d (iPhone 3GS)|DurangoVail 8F5153d]]
|
|-
| 4.3b3
| [[]]
| [[DurangoVail 8F5166d (iPhone 3GS)|DurangoVail 8F5166d]]
|
|}

===[[N90ap|iPhone 4]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="40"| [[Baseband Firmware|Baseband]]
!width="168"| Build
!width="350"| Comments
|-
| Inf1
| ?
| [[Inferno 8A2062a]]
| Used for testing.
|-
| 4.1b1
| [[2.07.01]]
| [[BakerVail 8B5080c (iPhone 4)|BakerVail 8B5080c]]
|
|-
| 4.2b1
| [[3.08.00]]
| [[JasperVail 8C5091e (iPhone 4)|JasperVail 8C5091e]]
|
|-
| 4.2b2
| [[3.09.00]]
| [[JasperVail 8C5101c (iPhone 4)|JasperVail 8C5101c]]
|
|-
| 4.2b3
| [[3.10.01]]
| [[JasperVail 8C5115c (iPhone 4)|JasperVail 8C5115c]]
|
|-
| 4.2GM
| [[3.10.01]]
| [[JasperVail 8C134 (iPhone 4)|JasperVail 8C134]]
|
|-
| 4.2.1GM
| [[3.10.01]]
| [[JasperVail 8C148 (iPhone 4)|JasperVail 8C148]]
|
|-
| 4.3 8F5132f
| [[4.08.00]]
| DurangoVail 8F5132f
| Not released to public, but mentioned in changelog
|-
| 4.3b1
| [[4.08.00]]
| [[DurangoVail 8F5148b (iPhone 4)|DurangoVail 8F5148b]]
|
|-
| 4.3b2
| [[4.09.00]]
| [[DurangoVail 8F5153d (iPhone 4)|DurangoVail 8F5153d]]
|
|-
| 4.3b3
| [[]]
| [[DurangoVail 8F5166d (iPhone 4)|DurangoVail 8F5166d]]
|
|}

==[[iPod touch]]==
===[[N45ap|iPod touch (1st generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="350"| Comments
|-
| 3.0b1
| [[KirkVail 7A238j (iPod touch)|KirkVail 7A238j]]
|
|-
| 3.0b2
| [[KirkVail 7A259g (iPod touch)|KirkVail 7A259g]]
|
|-
| 3.0b3
| [[KirkVail 7A280f (iPod touch)|KirkVail 7A280f]]
|
|-
| 3.0b4
| [[KirkVail 7A300g (iPod touch)|KirkVail 7A300g]]
|
|-
| 3.0b5
| [[KirkVail 7A312g (iPod touch)|KirkVail 7A312g]]
|
|-
| 3.1b1
| [[NorthVail 7C97d (iPod touch)|NorthVail 7C97d]]
|
|}

===[[N72ap|iPod touch (2nd generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="350"| Comments
|-
| 3.0b1
| [[KirkVail 7A238j (iPod touch 2G)|KirkVail 7A238j]]
|
|-
| 3.0b2
| [[KirkVail 7A259g (iPod touch 2G)|KirkVail 7A259g]]
|
|-
| 3.0b3
| [[KirkVail 7A280f (iPod touch 2G)|KirkVail 7A280f]]
|
|-
| 3.0b4
| [[KirkVail 7A300g (iPod touch 2G)|KirkVail 7A300g]]
|
|-
| 3.0b5
| [[KirkVail 7A312g (iPod touch 2G)|KirkVail 7A312g]]
|
|-
| 3.1b1
| [[NorthVail 7C97d (iPod touch 2G)|NorthVail 7C97d]]
|
|-
| 4.0b1
| [[ApexVail 8A230m (iPod touch 2G)|ApexVail 8A230m]]
|
|-
| 4.0b2
| [[ApexVail 8A248c (iPod touch 2G)|ApexVail 8A248c]]
|
|-
| 4.0b3
| [[ApexVail 8A260b (iPod touch 2G)|ApexVail 8A260b]]
|
|-
| 4.0b4
| [[ApexVail 8A274b (iPod touch 2G)|ApexVail 8A274b]]
|
|-
| 4.0GM
| [[Apex 8A293 (iPod touch 2G)|Apex 8A293]]
| The GM version included Game Center; the public version did not.
|-
| 4.1b1
| [[BakerVail 8B5080 (iPod touch 2G)|BakerVail 8B5080]]
|
|-
| 4.2b2
| [[JasperVail 8C5101c (iPod touch 2G)|JasperVail 8C5101c]]
|
|-
| 4.2b3
| [[JasperVail 8C5115c (iPod touch 2G)|JasperVail 8C5115c]]
|
|-
| 4.2GM
| [[JasperVail 8C134 (iPod touch 2G)|JasperVail 8C134]]
|
|-
| 4.2.1GM
| [[JasperVail 8C148 (iPod touch 2G)|JasperVail 8C148]]
|
|}

===[[N18ap|iPod touch (3rd generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="350"| Comments
|-
| 4.0b1
| [[ApexVail 8A230m (iPod touch 3G)|ApexVail 8A230m]]
|
|-
| 4.0b2
| [[ApexVail 8A248c (iPod touch 3G)|ApexVail 8A248c]]
|
|-
| 4.0b3
| [[ApexVail 8A260b (iPod touch 3G)|ApexVail 8A260b]]
|
|-
| 4.0b4
| [[ApexVail 8A274b (iPod touch 3G)|ApexVail 8A274b]]
|
|-
| 4.0GM
| [[Apex 8A293 (iPod touch 3G)|Apex 8A293]]
| The GM version included Game Center; the public version did not.
|-
| 4.1b1
| [[BakerVail 8B5080c (iPod touch 3G)|BakerVail 8B5080c]]
|
|-
| 4.1b2
| [[BakerVail 8B5091b (iPod touch 3G)|BakerVail 8B5091b]]
|
|-
| 4.2b1
| [[JasperVail 8C5091e (iPod touch 3G)|JasperVail 8C5091e]]
|
|-
| 4.2b2
| [[JasperVail 8C5101c (iPod touch 3G)|JasperVail 8C5101c]]
|
|-
| 4.2b3
| [[JasperVail 8C5115c (iPod touch 3G)|JasperVail 8C5115c]]
|
|-
| 4.2GM
| [[JasperVail 8C134 (iPod touch 3G)|JasperVail 8C134]]
|
|-
| 4.2.1GM
| [[JasperVail 8C148 (iPod touch 3G)|JasperVail 8C148]]
|
|-
| 4.3b1
| [[DurangoVail 8F5148b (iPod touch 3G)|DurangoVail 8F5148b]]
|
|-
| 4.3b2
| [[DurangoVail 8F5153d (iPod touch 3G)|DurangoVail 8F5153d]]
|
|-
| 4.3b2
| [[DurangoVail 8F5166d (iPod touch 3G)|DurangoVail 8F5166d]]
|
|}

===[[N81ap|iPod touch (4th generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="350"| Comments
|-
| 4.2b1
| [[JasperVail 8B5080c (iPod touch 4G)|JasperVail 8B5080c]]
|
|-
| 4.2b2
| [[JasperVail 8C5101c (iPod touch 4G)|JasperVail 8C5101c]]
|
|-
| 4.2b3
| [[JasperVail 8C5115c (iPod touch 4G)|JasperVail 8C5115c]]
|
|-
| 4.2GM
| [[JasperVail 8C134 (iPod touch 4G)|JasperVail 8C134]]
|
|-
| 4.2.1GM
| [[JasperVail 8C148 (iPod touch 4G)|JasperVail 8C148]]
|
|-
| 4.3b1
| [[DurangoVail 8F5148b (iPod touch 4G)|DurangoVail 8F5148b]]
|
|-
| 4.3b2
| [[DurangoVail 8F5153d (iPod touch 4G)|DurangoVail 8F5153d]]
|
|-
| 4.3b2
| [[DurangoVail 8F5166d (iPod touch 4G)|DurangoVail 8F5166d]]
|
|}

DurangoVail 8F5153d (iPad1,1)

2011-01-20T16:10:04Z

Liamchat: /* Kernelcache */

== Decryption Keys ==
=== Root Filesystem (038-0501-006.dmg) ===
*'''[[VFDecrypt]] Key''': 3c9787acfa79fea382ec4f4d00c0f8c59f241df42cf36ab647be085476173e5625cc687a

=== [[Update Ramdisk]] (038-0485-006.dmg) ===
* '''IV''': 1f60f65020b5a7aae2a4e0402d60c636
* '''Key''': 72b03a9df54d9ae95587aab7117926602b1dc356535bfda5aa9a66417acc346f

=== [[Restore Ramdisk]] (038-0490-007.dmg) ===
* '''IV''': 96339f7efcf9441ff3080c0ad760cd34
* '''Key''': d6520597eadc519032c66123e3aaf50841a151b1b4e1caa30c55b1f6293a7a25

=== applelogo ===
* '''IV''': f74ef7745549c6445ac87e7bd333be30
* '''Key''': 8cea19b64418b2a9204631bc567b72955174509a292545ced6f763b94211b794

=== batterycharging0 ===
* '''IV''': 4fca24116389c4a1b5a3303d17deb0fe
* '''Key''': fbbfa503c860c82cc481e71987ae4d5f4d8fb3656ef3eeaa1cc64ed27536f29b

=== batterycharging1 ===
* '''IV''': 98778cd2cb45677d45641ef73c9971e9
* '''Key''': 895cabc153a75d6c803c8cb34ab9988f5ffd6efa78c1db58c91831ea56eee44b

=== batteryfull ===
* '''IV''': 7a83cd1a50b169843ae4e2826141ed37
* '''Key''': 39f351f56b7f81ee76834790b6d35255b938fef70b8153a1cc326b234bdcc5bc

=== batterylow0 ===
* '''IV''': 4ee60e82f02fcfaa68a637a8f51be96a
* '''Key''': 57987b9bf70afa4fd0c68e94a6d4a798237b078eae6dba32f399c6d3254acef0

=== batterylow1 ===
* '''IV''': f42113337766334771e63c7142caee1c
* '''Key''': 5f62515fb9f7677fbbdf7f45a0a92b6b451db3ae0537afa2ad090a1716d128ca

=== DeviceTree ===
* '''IV''': 6a1d78a69231b54ecff91313038505e5
* '''Key''': 3bc55dc92d969a7b2ed42434a4cc0137563173dc264670895dd08c88efef2ed7

=== GlyphCharging ===
* '''IV''': 1f7cd87d252f41376c222ef5e0cb6d4e
* '''Key''': fd4b2ff773537626295155fe8644c216805dd72082bb20aef4332b43af86f34c

=== GlyphPlugin ===
* '''IV''': 0d063fcf7ab00457b7e02a60f7c06406
* '''Key''': c716cd4601697f87b533877132de2f9d7534f4df1b72c606867a4b7032dac070

=== [[iBEC]] ===
* '''IV''': ff7ec895ac80948074bcf0cdd1557129
* '''Key''': 09ed6b39dcacbed54db3a7f36b3db7a844a4c3abc76dcbae567116162dd5ec2b

=== [[iBoot (Bootloader)|iBoot]] ===
* '''IV''': 121bc839c4de034010cb176e7f93291e
* '''Key''': 293117072e368a670d1b2e1a24d2040ab41984ca27779b1232b0b3f073a839a9

=== [[iBSS]] ===
* '''IV''': f5b87688aec614a247ed2017bff3dee5
* '''Key''': 00249e25c036309cef7eff6a68fa5804d1227135a36936e4ef9c3e1054bc4150

=== [[Kernelcache]] ===
* '''IV''': 72c0eec1b5f04ee710e3f10035a25542
* '''Key''': 6594aca8123bd671af838aa1f00e5754d867e7da8ffd724b43280d

=== [[LLB]] ===
* '''IV''': 3fbe49ea3b516d61158353f452d1f1d4
* '''Key''': 7702a98560552e2aaf4f64172df2c9a5b55d9e599aaa337836de196b479d3a93

=== RecoveryMode ===
* '''IV''': b1e7f31071b13ef0559ec3bede94ffd8
* '''Key''': dc48352a13a41bf11af6f2daf870ab1b88b8a506c5268e8325425f9de46f3123

DurangoVail 8F5153d (iPhone3,1)

2011-01-20T16:05:55Z

Liamchat: /* Kernelcache */

== Decryption Keys ==
=== Root Filesystem (038-0503-006.dmg)===
*'''[[VFDecrypt Keys|VFDecrypt]] Key''': da556a06a2695098f7222557ffb0ecab976995b6ca9032996eed0311fb2841c1fc59f7da

=== [[Update Ramdisk]] (038-0485-006.dmg) ===
* '''IV''': 1f60f65020b5a7aae2a4e0402d60c636
* '''Key''': 72b03a9df54d9ae95587aab7117926602b1dc356535bfda5aa9a66417acc346f

=== [[Restore Ramdisk]] (038-0490-007.dmg) ===
* '''IV''': 96339f7efcf9441ff3080c0ad760cd34
* '''Key''': d6520597eadc519032c66123e3aaf50841a151b1b4e1caa30c55b1f6293a7a25

=== applelogo ===
* '''IV''': 810328c8f3d72277a60c859450b40fa4
* '''Key''': d0037025331b760a3b072e810d19787d292a2e4c076b91293663379c71f0b667

=== batterycharging0 ===
* '''IV''': 468c5a9f3566a98ef06fa85ae3dd4583
* '''Key''': 837cff7f3dbba4696647da2181bd4490d76c9b537c70593497900ed3d325c0b6

=== batterycharging1 ===
* '''IV''': 740c7cf9ea1ae2daf20d221781761f71
* '''Key''': 6f831b595d718bb27470876c73f729f7fecd7138f029e4aecabded7267e948dd

=== batteryfull ===
* '''IV''': 1b54279a18a5ab772218c7d8dfb0fc60
* '''Key''': 2ec35de6c1d2294dfef76fe16577775b21a391619e38124f4c0d517bbf11a060

=== batterylow0 ===
* '''IV''': 9e7fc9eb7d99e550c1364ff91070cc71
* '''Key''': 48341837bbf3fdb308985e0df1535075c684ef344d95b2a3b19d0a8bff3e25fc

=== batterylow1 ===
* '''IV''': ab61ce1c4fb92f8f18a55be612560f09
* '''Key''': 401b899e577ac0496ebd7f4b1f67054ccfcbb58a44958c1bfda0089f08acf174

=== DeviceTree ===
* '''IV''': d32e4ad9795371cc423fccd876970daf
* '''Key''': 1e83617249bb550bd3757e185b50151fd72b51c379d4de13b924ae8966ff58bc

=== GlyphCharging ===
* '''IV''': 49164406886a60235e113053152b571c
* '''Key''': 6ca8aeee744575ed58eb07274400b60b126dddcd079552e280cf1c7ea6b24c8c

=== GlyphPlugin ===
* '''IV''': 085a56a25d2347334a146b5c1e30f522
* '''Key''': b6afaee78230dd6e5da7634793c6f39e548bf4cbd585e367c97353e193bf3eb3

=== [[iBEC]] ===
* '''IV''': c754ed62f8119e923a99f4acf7c08372
* '''Key''': 80af620b10c90176bc207b4ba55c8257642d1d895a0a3a036067d086fae6b537

=== [[iBoot (Bootloader)|iBoot]] ===
* '''IV''': 998119b7e8e83fda3b18589fc995d356
* '''Key''': 1d770141f0fd064c34fc4d3603b3c54b59b2fd4a293ed333dfe938bc3015d90b

=== [[iBSS]] ===
* '''IV''': 5a5e1735a7abfd021646afe6cf77da6f
* '''Key''': 6baae50181670fecfc3403dea9969ed8de3df6598c2a8133595cbe3e0de9b8f8

=== [[Kernelcache]] ===
* '''IV''': 8cb4d282c2734aaea3d220075469ade4
* '''Key''': 5048992389f47c0b455afdb10f2a27cf77db3a710ad5081acbcf12d157f7d284

=== [[LLB]] ===
* '''IV''': 6abb6290f80d0216a8a9e9adba0853be
* '''Key''': 127c1c144804311fcb49081bce179ccfee02d2fb6427401bb844c8394f4a9c42

=== RecoveryMode ===
* '''IV''': bdaa15f43005fb3b0fbe80fabf847ab2
* '''Key''': 16e17a3e3a9f212c5e3be85e39b57732e8b8e21fb7583da5864c9ffa68f07cdd

DurangoVail 8F5153d (iPhone3,1)

2011-01-19T23:42:59Z

Liamchat: keys grabbed by me will ida them tomorrow and on line 554: 25016 Segmentation fault "$xpwntool" "$line1" "$newname" $line2 >&/dev/null

== Decryption Keys ==
=== Root Filesystem (038-0503-006.dmg)===
*'''[[VFDecrypt Keys|VFDecrypt]] Key''': da556a06a2695098f7222557ffb0ecab976995b6ca9032996eed0311fb2841c1fc59f7da

=== [[Update Ramdisk]] (038-0485-006.dmg) ===
* '''IV''': 1f60f65020b5a7aae2a4e0402d60c636
* '''Key''': 72b03a9df54d9ae95587aab7117926602b1dc356535bfda5aa9a66417acc346f

=== [[Restore Ramdisk]] (038-0490-007.dmg) ===
* '''IV''': 96339f7efcf9441ff3080c0ad760cd34
* '''Key''': d6520597eadc519032c66123e3aaf50841a151b1b4e1caa30c55b1f6293a7a25

=== applelogo ===
* '''IV''': 810328c8f3d72277a60c859450b40fa4
* '''Key''': d0037025331b760a3b072e810d19787d292a2e4c076b91293663379c71f0b667

=== batterycharging0 ===
* '''IV''': 468c5a9f3566a98ef06fa85ae3dd4583
* '''Key''': 837cff7f3dbba4696647da2181bd4490d76c9b537c70593497900ed3d325c0b6

=== batterycharging1 ===
* '''IV''': 740c7cf9ea1ae2daf20d221781761f71
* '''Key''': 6f831b595d718bb27470876c73f729f7fecd7138f029e4aecabded7267e948dd

=== batteryfull ===
* '''IV''': 1b54279a18a5ab772218c7d8dfb0fc60
* '''Key''': 2ec35de6c1d2294dfef76fe16577775b21a391619e38124f4c0d517bbf11a060

=== batterylow0 ===
* '''IV''': 9e7fc9eb7d99e550c1364ff91070cc71
* '''Key''': 48341837bbf3fdb308985e0df1535075c684ef344d95b2a3b19d0a8bff3e25fc

=== batterylow1 ===
* '''IV''': ab61ce1c4fb92f8f18a55be612560f09
* '''Key''': 401b899e577ac0496ebd7f4b1f67054ccfcbb58a44958c1bfda0089f08acf174

=== DeviceTree ===
* '''IV''': d32e4ad9795371cc423fccd876970daf
* '''Key''': 1e83617249bb550bd3757e185b50151fd72b51c379d4de13b924ae8966ff58bc

=== GlyphCharging ===
* '''IV''': 49164406886a60235e113053152b571c
* '''Key''': 6ca8aeee744575ed58eb07274400b60b126dddcd079552e280cf1c7ea6b24c8c

=== GlyphPlugin ===
* '''IV''': 085a56a25d2347334a146b5c1e30f522
* '''Key''': b6afaee78230dd6e5da7634793c6f39e548bf4cbd585e367c97353e193bf3eb3

=== [[iBEC]] ===
* '''IV''': c754ed62f8119e923a99f4acf7c08372
* '''Key''': 80af620b10c90176bc207b4ba55c8257642d1d895a0a3a036067d086fae6b537

=== [[iBoot (Bootloader)|iBoot]] ===
* '''IV''': 998119b7e8e83fda3b18589fc995d356
* '''Key''': 1d770141f0fd064c34fc4d3603b3c54b59b2fd4a293ed333dfe938bc3015d90b

=== [[iBSS]] ===
* '''IV''': 5a5e1735a7abfd021646afe6cf77da6f
* '''Key''': 6baae50181670fecfc3403dea9969ed8de3df6598c2a8133595cbe3e0de9b8f8

=== [[Kernelcache]] ===
* '''IV''': 875369f42c1fec9a638c5751e18c55b1
* '''Key''': 0ad650ee53fabcae71c354addf9bf43875c038eaa367738820392877f3acd989

=== [[LLB]] ===
* '''IV''': 6abb6290f80d0216a8a9e9adba0853be
* '''Key''': 127c1c144804311fcb49081bce179ccfee02d2fb6427401bb844c8394f4a9c42

=== RecoveryMode ===
* '''IV''': bdaa15f43005fb3b0fbe80fabf847ab2
* '''Key''': 16e17a3e3a9f212c5e3be85e39b57732e8b8e21fb7583da5864c9ffa68f07cdd

DurangoVail 8F5153d (iPad1,1)

2011-01-19T23:26:45Z

Liamchat: keyed by me

== Decryption Keys ==
=== Root Filesystem (038-0501-006.dmg) ===
*'''[[VFDecrypt]] Key''': 3c9787acfa79fea382ec4f4d00c0f8c59f241df42cf36ab647be085476173e5625cc687a

=== [[Update Ramdisk]] (038-0485-006.dmg) ===
* '''IV''': 1f60f65020b5a7aae2a4e0402d60c636
* '''Key''': 72b03a9df54d9ae95587aab7117926602b1dc356535bfda5aa9a66417acc346f

=== [[Restore Ramdisk]] (038-0490-007.dmg) ===
* '''IV''': 96339f7efcf9441ff3080c0ad760cd34
* '''Key''': d6520597eadc519032c66123e3aaf50841a151b1b4e1caa30c55b1f6293a7a25

=== applelogo ===
* '''IV''': f74ef7745549c6445ac87e7bd333be30
* '''Key''': 8cea19b64418b2a9204631bc567b72955174509a292545ced6f763b94211b794

=== batterycharging0 ===
* '''IV''': 4fca24116389c4a1b5a3303d17deb0fe
* '''Key''': fbbfa503c860c82cc481e71987ae4d5f4d8fb3656ef3eeaa1cc64ed27536f29b

=== batterycharging1 ===
* '''IV''': 98778cd2cb45677d45641ef73c9971e9
* '''Key''': 895cabc153a75d6c803c8cb34ab9988f5ffd6efa78c1db58c91831ea56eee44b

=== batteryfull ===
* '''IV''': 7a83cd1a50b169843ae4e2826141ed37
* '''Key''': 39f351f56b7f81ee76834790b6d35255b938fef70b8153a1cc326b234bdcc5bc

=== batterylow0 ===
* '''IV''': 4ee60e82f02fcfaa68a637a8f51be96a
* '''Key''': 57987b9bf70afa4fd0c68e94a6d4a798237b078eae6dba32f399c6d3254acef0

=== batterylow1 ===
* '''IV''': f42113337766334771e63c7142caee1c
* '''Key''': 5f62515fb9f7677fbbdf7f45a0a92b6b451db3ae0537afa2ad090a1716d128ca

=== DeviceTree ===
* '''IV''': 6a1d78a69231b54ecff91313038505e5
* '''Key''': 3bc55dc92d969a7b2ed42434a4cc0137563173dc264670895dd08c88efef2ed7

=== GlyphCharging ===
* '''IV''': 1f7cd87d252f41376c222ef5e0cb6d4e
* '''Key''': fd4b2ff773537626295155fe8644c216805dd72082bb20aef4332b43af86f34c

=== GlyphPlugin ===
* '''IV''': 0d063fcf7ab00457b7e02a60f7c06406
* '''Key''': c716cd4601697f87b533877132de2f9d7534f4df1b72c606867a4b7032dac070

=== [[iBEC]] ===
* '''IV''': ff7ec895ac80948074bcf0cdd1557129
* '''Key''': 09ed6b39dcacbed54db3a7f36b3db7a844a4c3abc76dcbae567116162dd5ec2b

=== [[iBoot (Bootloader)|iBoot]] ===
* '''IV''': 121bc839c4de034010cb176e7f93291e
* '''Key''': 293117072e368a670d1b2e1a24d2040ab41984ca27779b1232b0b3f073a839a9

=== [[iBSS]] ===
* '''IV''': f5b87688aec614a247ed2017bff3dee5
* '''Key''': 00249e25c036309cef7eff6a68fa5804d1227135a36936e4ef9c3e1054bc4150

=== [[Kernelcache]] ===
* '''IV''': 875369f42c1fec9a638c5751e18c55b1
* '''Key''': 0ad650ee53fabcae71c354addf9bf43875c038eaa367738820392877f3acd989

=== [[LLB]] ===
* '''IV''': 3fbe49ea3b516d61158353f452d1f1d4
* '''Key''': 7702a98560552e2aaf4f64172df2c9a5b55d9e599aaa337836de196b479d3a93

=== RecoveryMode ===
* '''IV''': b1e7f31071b13ef0559ec3bede94ffd8
* '''Key''': dc48352a13a41bf11af6f2daf870ab1b88b8a506c5268e8325425f9de46f3123

DurangoVail 8F5153d (AppleTV2,1)

2011-01-19T22:59:29Z

Liamchat: keyed

== Decryption Keys ==
=== Root Filesystem (038-0504-006.dmg) ===
*'''[[VFDecrypt]] Key''': 85ba2b2d95c89df504f54869b98d0eb26a63f269570e8882cb323b1b753f4f41446a1f0a

=== [[Update Ramdisk]] (038-0485-006.dmg) ===
* '''IV''': 1f60f65020b5a7aae2a4e0402d60c636
* '''Key''': 72b03a9df54d9ae95587aab7117926602b1dc356535bfda5aa9a66417acc346f

=== [[Restore Ramdisk]] (038-0490-007.dmg) ===
* '''IV''': 96339f7efcf9441ff3080c0ad760cd34
* '''Key''': d6520597eadc519032c66123e3aaf50841a151b1b4e1caa30c55b1f6293a7a25

=== AppleLogo ===
* '''IV''': e70a7006b9c7755a1d8ec2a70e2fab3e
* '''Key''': 62f8ab8776c5884fec8a23febc3aa08d4dd719b8a7d3cb2a6e390af7af57ed69

=== BatteryCharging0 ===
* '''IV''': 4fca24116389c4a1b5a3303d17deb0fe
* '''Key''': fbbfa503c860c82cc481e71987ae4d5f4d8fb3656ef3eeaa1cc64ed27536f29b

=== BatteryCharging1 ===
* '''IV''': 98778cd2cb45677d45641ef73c9971e9
* '''Key''': 895cabc153a75d6c803c8cb34ab9988f5ffd6efa78c1db58c91831ea56eee44b

=== BatteryFull ===
* '''IV''': 7a83cd1a50b169843ae4e2826141ed37
* '''Key''': 39f351f56b7f81ee76834790b6d35255b938fef70b8153a1cc326b234bdcc5bc

=== BatteryLow0 ===
* '''IV''': 4ee60e82f02fcfaa68a637a8f51be96a
* '''Key''': 57987b9bf70afa4fd0c68e94a6d4a798237b078eae6dba32f399c6d3254acef0

=== BatteryLow1 ===
* '''IV''': f42113337766334771e63c7142caee1c
* '''Key''': 5f62515fb9f7677fbbdf7f45a0a92b6b451db3ae0537afa2ad090a1716d128ca

=== DeviceTree ===
* '''IV''': 1ea79f6a921725ae5756216c5bdf735a
* '''Key''': 1145fdaabafc16fd72a673886104588d882aeaefc1d5f9fd0c9ff5ed721e073b

=== GlyphCharging ===
* '''IV''': 1f7cd87d252f41376c222ef5e0cb6d4e
* '''Key''': fd4b2ff773537626295155fe8644c216805dd72082bb20aef4332b43af86f34c

=== GlyphPlugin ===
* '''IV''': 0d063fcf7ab00457b7e02a60f7c06406
* '''Key''': c716cd4601697f87b533877132de2f9d7534f4df1b72c606867a4b7032dac070

=== [[iBEC]] ===
* '''IV''': bfcb7f1b10690629107ef08235d2e975
* '''Key''': a714e5e90c304587e40dcdeafd7d2f69f3f8cd867ec8c3764e61f22b4389c595

=== [[iBoot (Bootloader)|iBoot]] ===
* '''IV''': 5f54c415588382192883b7a87da1cdfa
* '''Key''': bd92046662bd82bdbf4d1d787913f0bc8ce2db3ce32ebd881b71995d74fa072c

=== [[iBSS]] ===
* '''IV''': 459a0dd0b995477aa3e17d1d07cbf979
* '''Key''': 27b53399604839a30f4be9365d53d08e189030af80ee597a867377ae1756e6b5

=== [[Kernelcache]] ===
* '''IV''': 37e698671747dfc9312aa4a7088dfe65
* '''Key''': e72c103fe0541f1a4f9a4db4b3e10fcf950bccf072582c3556213c3d2de0b5c8

=== [[LLB]] ===
* '''IV''': d49b9094797413173dc34b798a3c6aaf
* '''Key''': ba6a6b364c708ed527b8a73d97c35e6b3b50dc0c201b2b03a763d5ebd35c56e2

=== RecoveryMode ===
* '''IV''': 6905670c7bb4ffcc8a380854215f87cd
* '''Key''': 31e3a2b685bdbc87ae6514ac10e92d74890b73ef795e45cc22e110da4d1a4267

DurangoVail 8F5153d (iPhone2,1)

2011-01-19T22:00:00Z

Liamchat: New page: == Decryption Keys == === Root Filesystem (.dmg) === *'''VFDecrypt Key''': === Update Ramdisk (.dmg) === * '''IV''': * '''Key''': === Restore Ramdisk (.dmg) === * '''IV'''...

== Decryption Keys ==
=== Root Filesystem (.dmg) ===
*'''[[VFDecrypt]] Key''':

=== [[Update Ramdisk]] (.dmg) ===
* '''IV''':
* '''Key''':

=== [[Restore Ramdisk]] (.dmg) ===
* '''IV''':
* '''Key''':

=== AppleLogo ===
* '''IV''':
* '''Key''':

=== BatteryCharging0 ===
* '''IV''':
* '''Key''':

=== BatteryCharging1 ===
* '''IV''':
* '''Key''':

=== BatteryFull ===
* '''IV''':
* '''Key''':

=== BatteryLow0 ===
* '''IV''':
* '''Key''':

=== BatteryLow1 ===
* '''IV''':
* '''Key''':

=== DeviceTree ===
* '''IV''':
* '''Key''':

=== GlyphCharging ===
* '''IV''':
* '''Key''':

=== GlyphPlugin ===
* '''IV''':
* '''Key''':

=== [[iBEC]] ===
* '''IV''':
* '''Key''':

=== [[iBoot (Bootloader)|iBoot]] ===
* '''IV''':
* '''Key''':

=== [[iBSS]] ===
* '''IV''':
* '''Key''':

=== [[Kernelcache]] ===
* '''IV''':
* '''Key''':

=== [[LLB]] ===
* '''IV''':
* '''Key''':

=== RecoveryMode ===
* '''IV''':
* '''Key''':

DurangoVail 8F5153d (iPhone3,1)

2011-01-19T21:59:42Z

Liamchat: New page: == Decryption Keys == === Root Filesystem (.dmg) === *'''VFDecrypt Key''': === Update Ramdisk (.dmg) === * '''IV''': * '''Key''': === Restore Ramdisk (.dmg) === * '''IV'''...

DurangoVail 8F5153d (iPad1,1)

2011-01-19T21:58:53Z

Liamchat: New page: == Decryption Keys == === Root Filesystem (.dmg) === *'''VFDecrypt Key''': === Update Ramdisk (.dmg) === * '''IV''': * '''Key''': === Restore Ramdisk (.dmg) === * '''IV'''...

DurangoVail 8F5153d (AppleTV2,1)

2011-01-19T21:57:54Z

Liamchat: templated the download is slow

Preventing Baseband Update

2011-01-16T15:54:22Z

Liamchat:

==official apple way==

inside the [[ramdisk]] there is a plist read by [[restored]] defining the things that are updated during a restore or update.

===Edit options.plist===
# Unpack custom IPSW
# Decrypt Restore Ramdisk using [[xpwntool]] and mount it
# Navigate to /usr/local/share/restore
# Edit options.plist on the restore ramdisk
(Ignore any other settings specified in the plist, don't edit them)
<pre>
<key>UpdateBaseband</key>
<false/>
</pre>
<ol start="5">
<li>Reencrypt the restore ramdisk</li>
<li>Repack the IPSW</li>
<li>Prepare device for custom firmware using [[redsn0w]]</li>
<li>Restore IPSW to [[iTunes]] in pwned [[DFU Mode]]</li>
</ol>

You must load a patched [[iBSS]]/[[iBEC]] for this to work. Using an original IPSW will not work, because redsn0w's pwned DFU Mode doesn't patch sigchecks in [[iBSS]] (which is loaded from the IPSW).

this process has being automated into some of the unofficial bundles out there.

==[[TinyUmbrella]]/[[Cydia]] Method (iPhone 4)==

The [[N90ap|iPhone 4]] requires a AT+NONCE key signature from Apple in order to update the baseband. Pointing the hosts file to [[Cydia Server]] or running [[TinyUmbrella]] will allow this request for signature to be ignored, thus preventing a [[baseband]] update.

*'''This only works if [[Cydia]]/[[TinyUmbrella]] accepts the firmware's SHSH.'''
*'''This method 'works' with [[iOS]] 4.2.1, but in the restore ramdisk there is a baseband version check. If it doesn't match, it will crash before the Apple logo with the loading bar (the 2nd one, not the restore one) appears. It will boot and crash again. The usual 'Kick out of recovery mode' methods or "setenv auto-boot true" won't work, because it's not the problem that the auto-boot is false. So this method is actually not useful for [[iOS]] 4.2.1.'''
# Edit the hosts file and add the line "74.208.10.249 gs.apple.com" without the quotes, or run [[TinyUmbrella]] after saving the firmware's SHSH. If [[Cydia Server]] hasn't got your [[SHSH]], but you have it locally, use TSS Server method in [[TinyUmbrella]].
# Delete the .bbfw file in the firmware. Rename the IPSW to ZIP, open it and then go to the "firmware" folder. There you can see a .bbfw file, which means baseband firmware. The name gives you information about the baseband version and the Baseband BootLoader. Delete the .bbfw file and ZIP the firmware files (ZIP everything in the folder, don't ZIP the folder itself). Then you can restore to this. You will get error 11. This will only work up to iOS 4.1. If you do this on a newer version than iOS 4.1, your iPhone won't boot (see the text above).
# Use the "Restore" button in [[iTunes]] to update. you will get error 1013 on 4.2.1 when trying to restore thought the restore ramdisk
# If downgrading from a later firmware to a firmware that performs baseband checks, you will get error 1015. The only way to bypass this is to either update to the firmware version that matches your baseband version or downgrade (if possible) to an earlier firmware that doesn't perform the baseband version checks.

==[[User:Ih8sn0w|iH8Sn0w]]'s Method==
User [[User:Ih8sn0w|IH8sn0w]] mentioned a new method in [http://twitter.com/iH8sn0w/status/19249886721478656 this tweet] (an upgrade-only option in [[Sn0wbreeze]]). [http://twitter.com/iH8sn0w/status/19453808090288128 He confirmed] that his method is not the same as the above mentioned methods. To get more details, someone would have to compare the generated ipsw content.

==iTunes Update Method (iPhone 4)==
A variant of the TinyUmbrella method which exploits the lack of baseband version checks on the update ramdisk. [http://twitter.com/ven000m/status/19526989958356992]
Just shift+click (Windows) or Option+click (Mac) the !Update! button in iTunes after switching to a non-Apple TSS server and exit recovery mode after the update fails

[[Category:Baseband]]

Talk:Preventing Baseband Update

2011-01-16T15:47:37Z

Liamchat: /* iTunes Method */

==No success==
I tried this and it didn't work. I used an iPhone 4 with firmware 4.1 and baseband 1.59.00, trying to upgrade it to stock firmware 4.2.1, preserving the baseband.

One thing that was unclear is the plist edit. There was another entry SystemPartitionSyize=1024(integer) (<nowiki><key>SystemPartitionSize</key><integer>1024</integer></nowiki>). It was not clear if this should be removed or not. I tried both.

To reencrypt, it used the command
xpwntool 038-0032-002_modified.dmg 038-0032-002_reencrypted.dmg -t 038-0032-002_original.dmg -k 06849aead2e9a6ca8a82c3929bad5c2368942e3681a3d5751720d2aacf0694c0 -iv 9b20ae16bebf4cf1b9101374c3ab0095
With key and iv [[Jasper 8C148 (iPhone 4)|from here]] (must be correct, otherwise decryption wouldn't have worked).
Then rename 038-0032-002_reencrypted.dmg to original name and back into the ipsw.

To prepare for custom firmware flashing, I used redsn0w 0.9.6b4, reading initial 4.1 firmware.

Without the SystemPartitionSize, I received an iTunes unknown error 46 when it started to flash. With the SystemPartitionSize it went a few seconds longer and I got iTunes error 14.

Anything I am doing wrong? Did anybody else complete this successfully? Or was this just a joke?
--[[User:Http|http]] 03:14, 29 November 2010 (UTC)
:well what ipsw did you restore to because [[restored]] will signature check the root filesystem after [[ASR]] but the SystemPartitionSize should be replaced with <nowiki> <key>SystemImage</key> <false/> </nowiki> if you dont want to update the root partition --[[User:Liamchat|liamchat]] 16:06, 29 November 2010 (UTC)
::ipsw: 4.2.1 as I said. Why should I not update the root partition? The goal is to upgrade firmware from 4.1 to 4.2.1, without updating the baseband. Did you do this and were successful? --[[User:Http|http]] 19:40, 29 November 2010 (UTC)
:::why are you using the original file as a template --[[User:Liamchat|liamchat]] 23:02, 29 November 2010 (UTC)
::::Because [[xpwntool]] says so. Is that wrong? --[[User:Http|http]] 23:17, 29 November 2010 (UTC)
:::::it is optional if you want to the code just says create an abstract copy of template if has key --[[User:Liamchat|liamchat]] 23:30, 29 November 2010 (UTC)
::::::Are you guessing? Did you ever try all this? If yes: Did it work for you? If no: no guessing please and better no answer in that case. Thanks. --[[User:Http|http]] 00:48, 30 November 2010 (UTC)
:::::::when you used xpwn did it output
img3.c:createAbstractFileFromImg3:645: d65fdeb907a78562210697cf5e57bcaefde672d1a64fda4ec7d1da9df9c6502d23cd01d17ccb0f60b3bdcce154216af8
img3.c:createAbstractFileFromImg3:645: d65fdeb907a78562210697cf5e57bcaefde672d1a64fda4ec7d1da9df9c6502d23cd01d17ccb0f60b3bdcce154216af8
:::::::--[[User:Liamchat|liamchat]] 10:45, 30 November 2010 (UTC)

:I don't have MUCH experience with this, but I assume that since you've got yourself a modded ramdisk, you have to pwn the bootstrapper iBEC and the other fw parts, as in pwnagetool. --[[User:Dra1nerdrake|dra1nerdrake]] 01:24, 30 November 2010 (UTC)
::well no because if he see's the apple logo and the empty bar that is in the ramdisk --[[User:Liamchat|liamchat]] 08:29, 30 November 2010 (UTC)

::Step 7 should take care of that. I used redsn0w to prepare. --[[User:Http|http]] 08:49, 30 November 2010 (UTC)

It works. [[restored]] checks the plist and skips BB update if the option is set to false. Now are you saying that your hand-made ipsw failed the restore process or that your BB was in fact updated?
--[[User:Msft.guy|Msft.guy]] 03:59, 7 December 2010 (UTC)

Just to confirm: all those that are claiming it doesn't work are patching the correct ramdisk right? Some people are talking about the restore ramdisk then mentioning updates?? Surely if you want to prevent update when updating software you need to patch the update ramdisk and in the same way for restores patch the restore ramdisk? I'm sure this isn't happening but I thought it right to check to rule it out as a possibility -- [[User:Windows Helpdesk|blackthund3r]] 06:20, 7 December 2010 (UTC)

:I never said it cannot work. For me it just didn't restore (as mentioned). But even if it would restore: how do you get around the new baseband version check? Nothing mentioned about that. --[[User:Http|http]] 07:52, 7 December 2010 (UTC)
::i thought the check was in the restore ramdisk not the [[kernelcache]] i checked the [[kernal]]'s memory and saw no running process that can check the [[baseband]] version --[[User:Liamchat|liamchat]] 19:22, 7 December 2010 (UTC)
:::[http://twitter.com/MuscleNerd/status/16210881088069632 confirmed] there is no check on ios it is in the ramdisk --[[User:Liamchat|liamchat]] 22:26, 18 December 2010 (UTC)

==Way to bypass recovery mode problem==
Is there currently any way to bypass the check? or is it done by setting UpdateBaseband to false? iPad 3Gs cannot downgrade from 4.3 to 4.2.1 and get stuck in a recovery loop even after being kicked out of recovery mode. --[[User:LIV2|LIV2]] 11:23, 16 January 2011 (UTC)
:what error did you get when you restored --[[User:Liamchat|liamchat]] 12:09, 16 January 2011 (UTC)
::I'm in the same situation; I've decided to stick with 4.3 for now, can't go back to 3.x after living with multitasking! I get error 1015. Have tried all the usual suspects, can't kick it out of recovery mode, etc. Even tried downgrading to iOS 3.2.2 and then 'upgrading' instead of restoring to 4.2.1 without any success.--[[User:Beau|Beau]] 12:34, 16 January 2011 (UTC)
:::Error code is the usual 1015 error, but iOS 4.2.1 must be doing a BB Version check somewhere because there is no way to stop it going back to recovery. basically when you kick it out of recovery it goes to the apple logo for a while, then reboots and goes into recovery. other reports of this issue are found here:http://forums.macrumors.com/showthread.php?t=1079811 also to note, 3.2.x will restore just fine, 4.2.1 and 4.2.1B3 will not work though --[[User:LIV2|LIV2]] 13:15, 16 January 2011 (UTC)
:As there is no check in the firmware ([http://twitter.com/MuscleNerd/status/16210881088069632 MuscleNerd's Tweet]), there are ways to bypass the problem. Although neither [[sn0wbreeze]] nor [[PwnageTool]] support 4.2.1, you can still use [[PwnageTool]] with an inofficial bundle to install 4.2.1 without changing the baseband. It will automatically bypass this check (not sure how). Also, [[User:IH8sn0w|IH8sn0w]] has another way than this (see [http://twitter.com/iH8sn0w/status/19453808090288128 Tweet]) to bypass this check in his upcoming [[sn0wbreeze]] (will have an option to just perserve baseband, see [http://twitter.com/iH8sn0w/status/19249886721478656 this Tweet] or [http://twitpic.com/3k3mt6 image]. --[[User:Http|http]] 14:39, 16 January 2011 (UTC)

== merge all ipsw modifications ==

Shuld all pages that describe how to make changes to the restore process be merged into one page --[[User:Liamchat|liamchat]] 23:02, 29 November 2010 (UTC)

== deletion request ==

there are 2 point's i am going to make
*1. if this is wrong then how does [[PwnageTool]] and [[sn0wbreeze]] work
*2. if this is wrong then the [[NOR-only_ipsw]] is also wrong ( also being outdated ) --[[User:Liamchat|liamchat]] 13:30, 6 December 2010 (UTC)
*3. if this is wrong then my ipsw patch will not work [http://filebin.ca/ngqkhx/iPhone31_4.2.1_8C148.bundle.zip iPhone31_4.2.1_8C148.bundle] --[[User:Liamchat|liamchat]] 15:41, 6 December 2010 (UTC)

:The ONLY thing you should do to skip a BB update is to set UpdateBaseband to false, don't change anything else. To just flash NOR you have do disable baseband and rootfs, I don't really know the proper way to disable it but there's more than what's listed on the nor-only page. --[[User:Ryccardo|Ryccardo]] 21:33, 6 December 2010 (UTC)
::i actually would patch [[restored]] ( the files are checked before they are flashed and [[SHSH]]ed ) or replace it with [https://github.com/Gojohnnyboi/restored_pwn restored_pwn] but that is the way apple does it with the recovery ipsw for the [[S5L8900]] --[[User:Liamchat|liamchat]] 19:22, 7 December 2010 (UTC)

== Errors :( ==
There were some errors in this article. Sorry! I edited it and there should be no problems now.[[PwnageTool]] & [[sn0wbreeze]] use this method. --[[User:Whiteshinyapple|Whiteshinyapple]]
:Thanks for updating. But actually I cannot see any difference to your original article, except that you mention to not change existing values in the plist. My open questions are:
:*Any idea what I should have made wrong from my description above?
:*Did you or anybody else ever tried this successfully? I always hear that it "should work", but nobody confirmed it by doing so.
:*As far as I know do [[PwnageTool]] & [[sn0wbreeze]] not support iOS 4.2.1 yet.
:*I can see that by this method the baseband won't get updated. But you can achieve this also by pointing your hosts file to [[Cydia Server]]. But how would this solve the problem to boot the device as of the new bb check?
:--[[User:http|http]] 12:02, 7 December 2010 (UTC)

BTW, this still won't work with original IPSW. Pwned DFU mode doesn't patch sigchecks in iBSS, so the ramdisk won't load. You need to load patched iBSS/iBEC for this to work.
--[[User:Msft.guy|Msft.guy]] 14:11, 7 December 2010 (UTC)
:also i added the swap ramdisk because that was confirmed to work this [[baseband]] check is only in the restore ramdisk and there are no differences between the update and restore ramdisk and strangely the ramdisk mounts and the progress bar appears --[[User:Liamchat|liamchat]] 19:22, 7 December 2010 (UTC)

:TinyUmbrella uses a different method to prevent baseband update afaik.And could someone add on how to swap ramdisks. --[[User:Whiteshinyapple|Whiteshinyapple]]
:: i added how to use TinyUmbrella but it will not work untill someone start's to save update [[SHSH]] so until this is fixed i will teach people how to swap ramdisk's --[[User:Liamchat|liamchat]] 16:11, 8 December 2010 (UTC)
:::[http://twitter.com/notcom/status/9273579120099328] the check is only on the restore ramdisk --[[User:Liamchat|liamchat]] 17:22, 9 December 2010 (UTC)

== iTunes Method ==

I already tried this (without reading it here first), because of the mentioned ramdisk swap method. But it didn't work for me. I installed stock 4.1 and then clicked Update in iTunes. Actually with the Shift-Click you can avoid installing 4.1 first, but it's the same. Did this work for anyone? --[[User:Http|http]] 14:49, 16 January 2011 (UTC)

And actually it is the same as the TinyUmbrella method, because the hosts entry prevents the baseband update here. --[[User:Http|http]] 14:52, 16 January 2011 (UTC)

:I don't know if this applies to the baseband (it should only if you use a non-Apple server and manually set auto-boot after restoring), but it's definitely useful in hacktivating betas :) --[[User:Ryccardo|Ryccardo]] 15:18, 16 January 2011 (UTC)

::this was said a while ago http://twitter.com/notcom/status/9273579120099328 and swapping [[ramdisk]]'s does not work [[itunes]] cant connect to [[restored]] --[[User:Liamchat|liamchat]] 15:47, 16 January 2011 (UTC)

== bbfw deletion ==

[[User:Christoph|Christoph]] added the bbfw removal to the TinyUmbrella method. I think this is not correct. To install 4.1 you don't have to change the ipsw file at all. What is this for? I didn't remove it right away, because maybe it helps to get out of the recovery loop with the 4.2.1 update? But in this case more clarifications are needed. --[[User:Http|http]] 14:55, 16 January 2011 (UTC)
:iTunes now checks for the bbfw and makes the restore fail if it doesn't exist. Same if the baseband signature can't be generated, but this condition can't be checked in advance, so just redefine gs.apple.com --[[User:Ryccardo|Ryccardo]] 15:18, 16 January 2011 (UTC)

Talk:Preventing Baseband Update

2011-01-16T12:09:31Z

Liamchat: /* No success */

==No success==
I tried this and it didn't work. I used an iPhone 4 with firmware 4.1 and baseband 1.59.00, trying to upgrade it to stock firmware 4.2.1, preserving the baseband.

One thing that was unclear is the plist edit. There was another entry SystemPartitionSyize=1024(integer) (<nowiki><key>SystemPartitionSize</key><integer>1024</integer></nowiki>). It was not clear if this should be removed or not. I tried both.

To reencrypt, it used the command
xpwntool 038-0032-002_modified.dmg 038-0032-002_reencrypted.dmg -t 038-0032-002_original.dmg -k 06849aead2e9a6ca8a82c3929bad5c2368942e3681a3d5751720d2aacf0694c0 -iv 9b20ae16bebf4cf1b9101374c3ab0095
With key and iv [[Jasper 8C148 (iPhone 4)|from here]] (must be correct, otherwise decryption wouldn't have worked).
Then rename 038-0032-002_reencrypted.dmg to original name and back into the ipsw.

To prepare for custom firmware flashing, I used redsn0w 0.9.6b4, reading initial 4.1 firmware.

Without the SystemPartitionSize, I received an iTunes unknown error 46 when it started to flash. With the SystemPartitionSize it went a few seconds longer and I got iTunes error 14.

Anything I am doing wrong? Did anybody else complete this successfully? Or was this just a joke?
--[[User:Http|http]] 03:14, 29 November 2010 (UTC)
:well what ipsw did you restore to because [[restored]] will signature check the root filesystem after [[ASR]] but the SystemPartitionSize should be replaced with <nowiki> <key>SystemImage</key> <false/> </nowiki> if you dont want to update the root partition --[[User:Liamchat|liamchat]] 16:06, 29 November 2010 (UTC)
::ipsw: 4.2.1 as I said. Why should I not update the root partition? The goal is to upgrade firmware from 4.1 to 4.2.1, without updating the baseband. Did you do this and were successful? --[[User:Http|http]] 19:40, 29 November 2010 (UTC)
:::why are you using the original file as a template --[[User:Liamchat|liamchat]] 23:02, 29 November 2010 (UTC)
::::Because [[xpwntool]] says so. Is that wrong? --[[User:Http|http]] 23:17, 29 November 2010 (UTC)
:::::it is optional if you want to the code just says create an abstract copy of template if has key --[[User:Liamchat|liamchat]] 23:30, 29 November 2010 (UTC)
::::::Are you guessing? Did you ever try all this? If yes: Did it work for you? If no: no guessing please and better no answer in that case. Thanks. --[[User:Http|http]] 00:48, 30 November 2010 (UTC)
:::::::when you used xpwn did it output
img3.c:createAbstractFileFromImg3:645: d65fdeb907a78562210697cf5e57bcaefde672d1a64fda4ec7d1da9df9c6502d23cd01d17ccb0f60b3bdcce154216af8
img3.c:createAbstractFileFromImg3:645: d65fdeb907a78562210697cf5e57bcaefde672d1a64fda4ec7d1da9df9c6502d23cd01d17ccb0f60b3bdcce154216af8
:::::::--[[User:Liamchat|liamchat]] 10:45, 30 November 2010 (UTC)

:I don't have MUCH experience with this, but I assume that since you've got yourself a modded ramdisk, you have to pwn the bootstrapper iBEC and the other fw parts, as in pwnagetool. --[[User:Dra1nerdrake|dra1nerdrake]] 01:24, 30 November 2010 (UTC)
::well no because if he see's the apple logo and the empty bar that is in the ramdisk --[[User:Liamchat|liamchat]] 08:29, 30 November 2010 (UTC)

::Step 7 should take care of that. I used redsn0w to prepare. --[[User:Http|http]] 08:49, 30 November 2010 (UTC)

It works. [[restored]] checks the plist and skips BB update if the option is set to false. Now are you saying that your hand-made ipsw failed the restore process or that your BB was in fact updated?
--[[User:Msft.guy|Msft.guy]] 03:59, 7 December 2010 (UTC)

Just to confirm: all those that are claiming it doesn't work are patching the correct ramdisk right? Some people are talking about the restore ramdisk then mentioning updates?? Surely if you want to prevent update when updating software you need to patch the update ramdisk and in the same way for restores patch the restore ramdisk? I'm sure this isn't happening but I thought it right to check to rule it out as a possibility -- [[User:Windows Helpdesk|blackthund3r]] 06:20, 7 December 2010 (UTC)

:I never said it cannot work. For me it just didn't restore (as mentioned). But even if it would restore: how do you get around the new baseband version check? Nothing mentioned about that. --[[User:Http|http]] 07:52, 7 December 2010 (UTC)
::i thought the check was in the restore ramdisk not the [[kernelcache]] i checked the [[kernal]]'s memory and saw no running process that can check the [[baseband]] version --[[User:Liamchat|liamchat]] 19:22, 7 December 2010 (UTC)
:::[http://twitter.com/MuscleNerd/status/16210881088069632 confirmed] there is no check on ios it is in the ramdisk --[[User:Liamchat|liamchat]] 22:26, 18 December 2010 (UTC)
::::Is there currently any way to bypass the check? or is it done by setting UpdateBaseband to false? iPad 3Gs cannot downgrade from 4.3 to 4.2.1 and get stuck in a recovery loop even after being kicked out of recovery mode. [[User:LIV2|LIV2]] 11:23, 16 January 2011 (UTC)
:::::what error did you get when you restored --[[User:Liamchat|liamchat]] 12:09, 16 January 2011 (UTC)

== merge all ipsw modifications ==

Shuld all pages that describe how to make changes to the restore process be merged into one page --[[User:Liamchat|liamchat]] 23:02, 29 November 2010 (UTC)

== deletion request ==

there are 2 point's i am going to make
*1. if this is wrong then how does [[PwnageTool]] and [[sn0wbreeze]] work
*2. if this is wrong then the [[NOR-only_ipsw]] is also wrong ( also being outdated ) --[[User:Liamchat|liamchat]] 13:30, 6 December 2010 (UTC)
*3. if this is wrong then my ipsw patch will not work [http://filebin.ca/ngqkhx/iPhone31_4.2.1_8C148.bundle.zip iPhone31_4.2.1_8C148.bundle] --[[User:Liamchat|liamchat]] 15:41, 6 December 2010 (UTC)

:The ONLY thing you should do to skip a BB update is to set UpdateBaseband to false, don't change anything else. To just flash NOR you have do disable baseband and rootfs, I don't really know the proper way to disable it but there's more than what's listed on the nor-only page. --[[User:Ryccardo|Ryccardo]] 21:33, 6 December 2010 (UTC)
::i actually would patch [[restored]] ( the files are checked before they are flashed and [[SHSH]]ed ) or replace it with [https://github.com/Gojohnnyboi/restored_pwn restored_pwn] but that is the way apple does it with the recovery ipsw for the [[S5L8900]] --[[User:Liamchat|liamchat]] 19:22, 7 December 2010 (UTC)

== Errors :( ==
There were some errors in this article. Sorry! I edited it and there should be no problems now.[[PwnageTool]] & [[sn0wbreeze]] use this method. --[[User:Whiteshinyapple|Whiteshinyapple]]
:Thanks for updating. But actually I cannot see any difference to your original article, except that you mention to not change existing values in the plist. My open questions are:
:*Any idea what I should have made wrong from my description above?
:*Did you or anybody else ever tried this successfully? I always hear that it "should work", but nobody confirmed it by doing so.
:*As far as I know do [[PwnageTool]] & [[sn0wbreeze]] not support iOS 4.2.1 yet.
:*I can see that by this method the baseband won't get updated. But you can achieve this also by pointing your hosts file to [[Cydia Server]]. But how would this solve the problem to boot the device as of the new bb check?

BTW, this still won't work with original IPSW. Pwned DFU mode doesn't patch sigchecks in iBSS, so the ramdisk won't load. You need to load patched iBSS/iBEC for this to work.
--[[User:Msft.guy|Msft.guy]] 14:11, 7 December 2010 (UTC)
:also i added the swap ramdisk because that was confirmed to work this [[baseband]] check is only in the restore ramdisk and there are no differences between the update and restore ramdisk and strangely the ramdisk mounts and the progress bar appears --[[User:Liamchat|liamchat]] 19:22, 7 December 2010 (UTC)

:TinyUmbrella uses a different method to prevent baseband update afaik.And could someone add on how to swap ramdisks. --[[User:Whiteshinyapple|Whiteshinyapple]]
:: i added how to use TinyUmbrella but it will not work untill someone start's to save update [[SHSH]] so until this is fixed i will teach people how to swap ramdisk's --[[User:Liamchat|liamchat]] 16:11, 8 December 2010 (UTC)
:::[http://twitter.com/notcom/status/9273579120099328] the check is only on the restore ramdisk --[[User:Liamchat|liamchat]] 17:22, 9 December 2010 (UTC)

User talk:Liamchat

2011-01-11T08:05:47Z

Liamchat: /* No need for beta information */

{{DISPLAYTITLE:User talk:liamchat}}
{{Talk Archive|Start to November 1, 2010|November 2, 2010 to present}}
== [[:/|Firmware]] ==
Please follow the standard format for folders:
<pre>
== Summary ==
A short summary of this folder

== Children ==
=== Folders ===
a list of folders using the ipfw template
=== Files ===
a list of files using the ipfw template

== Parents ==
List of parents... Example: [[/|Root]]/[[/var|var]]/[[/var/stash|stash]]/[[/var/stash/Applications.*****|Applications.*****]]
</pre>
and the fomat for files:
<pre>
== Summary ==
a short summary

== File Contents ==
says it all

== Parents ==
same as above
</pre>
--[[User:Balloonhead66|Balloonhead66]] 16:23, 5 December 2010 (UTC)

== Recent edit to [[redsn0w]] ==
you use <includeonly>dsdhfjsdhfl</includeonly> --[[User:Balloonhead66|Balloonhead66]] 20:55, 27 December 2010 (UTC)

==No need for beta information==
This wiki is for the public and it would just be cleaner to not inlcude beta firmwares on those pages. Please think about this before editing things. --[[User:JacobVengeance|JakeAnthraX]] 22:32, 10 January 2011 (UTC)
:I was thinking of adding when apple patched the exploit --[[User:Liamchat|liamchat]] 08:05, 11 January 2011 (UTC)

S5L8900

2011-01-10T22:27:44Z

Liamchat: 4.2 b3 also has this exploit

This is the Application Processor shared between the [[M68ap|iPhone]], [[N45ap|iPod touch]], and the [[N82ap|iPhone 3G]]. Not much is known about it through official sources. This processor is not used in any of the newest devices, being replaced by the [[S5L8720]], [[S5L8920]], [[S5L8922]] and [[S5L8930]].

==[[S5L File Formats|Firmware File Formats]]==

== Exploits ==
===[[iBoot (Bootloader)|iBoot]]===
* [[Restore Mode]] - Works up to [[iOS]] 1.0.2
* [[Ramdisk Hack]] - Works up to [[iOS]] 2.0 beta 3
* [[diags]] - Works up to [[iOS]] 2.0 beta 5
* [[iBoot Environment Variable Overflow]] - Works up to [[iOS]] 3.1 beta 3
* [[usb_control_msg(0x21, 2) Exploit]] - Works up to [[iOS]] 3.1.2

===[[VROM (S5L8900)|Bootrom]]===
* [[pwnage|Pwnage 1.0 (Ramdisk + AppleImage2NORAccess)]]
* [[Pwnage 2.0|Pwnage 2.0 (DFU + Malformed Certificate)]]

=== [[Kernel]] ===
* [[BPF STX Kernel Write Exploit]] - Works up to [[iOS]] 3.1.3
* [[IOSurface Kernel Exploit]] - Works up to [[iOS]] 4.0.1
* [[Packet Filter Kernel Exploit]] - Works up to [[iOS]] 4.1 ( in public [[firmware]] ) and [[iOS]] 4.2 b3 ( in developer firmware )

=== [[Userland]] ===
* [[Symlinks]] - Works up to [[iOS]] 1.1.1
* [[LibTiff]] - Works up to [[iOS]] 1.1.1
* [[Mknod]] - Works up to [[iOS]] 1.1.2
* [[Dual Boot Exploit]] - Works up to [[iOS]] 2.0 beta 3
* [[MobileBackup Copy Exploit]] - Works up to [[iOS]] 3.1.3
* [[Malformed CFF Vulnerability]] - Works up to [[iOS]] 4.0.1

==Boot Chain==
[[VROM (S5L8900)]]->[[LLB]]->[[iBoot (Bootloader)|iBoot]]->[[Kernel]]->[[Firmware|System Software]]

One of the [[iPhoneLinux]] goals are to replace that Boot Chain after iBoot:

[[VROM (S5L8900)]]->OpeniBoot->Linux Kernel->X Server->Window Manager

==Upgrade Process==

=== [[Restore Mode]] ===
The common upgrade process chain is [[VROM]]->[[DFU Mode]]->[[WTF]]->[[iBoot (Bootloader)|iBoot]]->[[Kernel]]->[[Ramdisk]]->[[Restore Mode]].

=== [[DFU Mode]] ===
To flash an older version of the iPhone software you have to let your phone reside in [[DFU Mode]]. In iTunes you have to press the option key (Mac) or the shift key (Windows) when pressing 'Restore' to be able to manually chose an [[IPSW File Format|IPSW]].

==== Boot Chain ====
[[VROM]]->[[DFU Mode]]

==External Links==
* [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0301h/DDI0301H_arm1176jzfs_r0p7_trm.pdf Technical Reference Manual: ARM1176JZF-S]

Redsn0w

2011-01-09T10:23:12Z

Liamchat: /* Versions */

{{DISPLAYTITLE:redsn0w}}
[[Image:Redsn0w.png|thumb|redsn0w on Mac OS X]]
redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.

Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.

Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.

Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.

redsn0w [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] can jailbreak iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.

== Credit ==
[[iPhone Dev Team]]

== Versions ==
{| class="wikitable" width="100%" style="font-size: 90%"
|-
! style="background-color:#E9E9E9; text-align:center; width:150px;" | Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" | Release date
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9; text-align:center;" | Changes
|-
! style="white-space: nowrap;" |

==== 0.1 ====
| style="white-space: nowrap;" | Unknown
| {{yes}}
| ?
|
* Jailbreak for the [[n72ap|iPod touch 2G]].
|-
|-
! style="white-space: nowrap;" |

==== 0.7 ====
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{yes}}
|

|-
! style="white-space: nowrap;" |

==== 0.8 ====
| style="white-space: nowrap;" | July 2009
| {{yes}}
| {{yes}}
|
* Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3GS]] only.
|-
! style="background-color:#E9E9E9; text-align:center; width:150px;" | Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" | Release date
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9; text-align:center;" | Changes

|-
! style="white-space: nowrap;" |

==== 0.9.2 ====
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{yes}}
|
* Supports 3.0-3.1.2 on all iPhones and iPod touches ([[tethered jailbreak|tethered]] for newer devices with [[0x24000 Segment Overflow]] closed)
|-
! style="white-space: nowrap;" |

==== 0.9.3 beta ====
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{yes}}
|
* Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
|-
! style="white-space: nowrap;" |

==== 0.9.4 ====
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{yes}}
|
* Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])
|-
! style="background-color:#E9E9E9; text-align:center; width:150px;" | Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" | Release date
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9; text-align:center;" | Changes
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 3 ====
| style="white-space: nowrap;" | June 21, 2010
| {{yes}}
| {{no}}
|
* Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 4 ====
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{no}}
|
* Resolved a problem with iBooks.
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5 ====
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{no}}
|
* Supposed to fix any APN or MMS issues that users were seeing.
|-
! style="background-color:#E9E9E9; text-align:center; width:150px;" | Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" | Release date
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9; text-align:center;" | Changes
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 1 ====
| style="white-space: nowrap;" | September 21, 2010
| {{yes}}
| {{yes}}
|
* Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 2 ====
| style="white-space: nowrap;" | October 31, 2010
| {{yes}}
| {{yes}}
|
* Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72ap|iPod touch 2G]] with [[iBoot-240.5.1|new bootrom]]) .
** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 3 ====
| style="white-space: nowrap;" | November 2010
| {{yes}}
| {{yes}}
|
* Supports the installation of custom bundles
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 4 ====
| style="white-space: nowrap;" | November 23, 2010
| {{yes}}
| {{yes}}
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 5 ====
| style="white-space: nowrap;" | November 28, 2010
| {{yes}}
| {{yes}}
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 6 ====
| style="white-space: nowrap;" | December 1, 2010
| {{yes}}
| {{yes}}
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
* Allows you to "deactivate" a hacktivated phone, so sbinger's [http://www.bingner.com/SAM.html Subscriber Artificial Module] (SAM) can trick your iPhone and [[iTunes]] into creating legitimate activation tickets.
|-
! style="background-color:#E9E9E9; text-align:center; width:150px;" | Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" | Release date
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9; text-align:center;" | Changes
|-
! style="white-space: nowrap;" |

==== 0.9.7 beta 1 ====
| style="white-space: nowrap;" | December 26, 2010
| {{yes}}
| {{no}}
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 [[IPSW File Format|IPSW]].
*** This version of "Jailbreak Monte" has quite a number of bugs, particularly app switcher crashes and disabled [[Bluetooth]].
|-
! style="white-space: nowrap;" |

==== 0.9.7 beta 2 ====
| style="white-space: nowrap;" | December 26, 2010
| {{yes}}
| {{no}}
|
* Fixes crashing bugs on GUI apps from redsn0w 0.9.7b1.
* [[Bluetooth]] is non-functional due to a [[sandbox]] issue.
|-
! style="white-space: nowrap;" |

==== 0.9.7 beta 3 ====
| style="white-space: nowrap;" | December 27, 2010
| {{yes}}
| {{no}}
|
* Fixes crashing bugs completely from redsn0w 0.9.7b2.
* [[Bluetooth]] is non-functional due to a [[sandbox]] issue.
|-
! style="white-space: nowrap;" |

==== 0.9.7 beta 4 ====
| style="white-space: nowrap;" | December 31, 2010
| {{yes}}
| {{no}}
|
* ubsmuxd integrated.
* [[Bluetooth]] is non-functional due to a [[sandbox]] issue.
|-
! style="white-space: nowrap;" |

==== 0.9.7 beta 5 ====
| style="white-space: nowrap;" | january 8, 2011
| {{yes}}
| {{no}}
|
* ubsmuxd integrated.
* [[Bluetooth]] is functional
* there is a windows copy of this beta but is very slow
|-
! style="background-color:#E9E9E9; text-align:center; width:150px;" | Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" | Release date
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9; text-align:center; width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9; text-align:center;" | Changes
|}

== Exploits used ==
For [[N45ap|iPod touch]], [[M68ap|iPhone]] and [[N82ap|iPhone 3G]], see:
*[[Pwnage]]
*[[Pwnage 2.0]]

For [[N72ap|iPod touch 2G]], see:
*[[0x24000 Segment Overflow]]
*[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.
*[[usb_control_msg(0xA1, 1) Exploit]] - used (in redsn0w 0.9.6 beta 1) to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow, as well as a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].

For [[N88ap|iPhone 3GS]], see:
*[[0x24000 Segment Overflow]]
*[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

For [[N18ap|iPod touch 3G]]
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]
*limera1n exploit

[[Category:Hacking Software]]

Talk:/usr/libexec/gamed

2011-01-05T23:43:33Z

Liamchat: http://sandbox.gc.apple.com/WebObjects/GKInit.woa/wa/getBag?ix=1

What is this exactly? I just got a crash report for it and have no idea what it is. [http://pastie.org/private/vyx72snsg6kuahhtcihzka crash report] --[[User:JacobVengeance|JakeAnthraX]] 04:48, 5 January 2011 (UTC)
:I opened it to have look and at the bottom of the file in text edit is a plist and some URL's --[[User:Liamchat|liamchat]] 23:43, 5 January 2011 (UTC)

Talk:/usr/libexec/gamed

2011-01-05T23:40:45Z

Liamchat: Just some URL's

Talk:Bootrom Dumper Utility

2010-12-29T10:56:30Z

Liamchat:

Cydia Substrate

2010-12-29T10:29:42Z

Liamchat: touch /var/mobile/Library/Preferences/com.saurik.mobilesubstrate.dat a developer's secret

== Basic Info ==
Mobile Substrate is [[saurik]]'s extension for [[SpringBoard]] that allows 3rd party SpringBoard addons to run. Examples include the Five Icon Dock and [[WinterBoard]].

== And with all this extra code... ==
As always, even with [[iPhone]]s, [[iPod touch]]s, and the [[iPad]], extra code means crashing and Mobile Substrate can solve this too. Should the SpringBoard crash for any reason (which is quite common once let loose on [[Cydia Application|Cydia]] as there are a large number of SpringBoard extensions) Mobile Substrate will temporarily put the SpringBoard into Safe Mode with SpringBoard extensions disabled, so you can troubleshoot the problem.

If one is trying to troubleshoot a problem that isn't causing Springboard crashes but is suspected of being caused by a Mobile Substrate-using extension, Safe Mode can manually be entered using the SBSettings application available in Cydia by hitting its "Power" button and choosing the "Safe Mode" option.

if you find that your device wont boot you can use this safety feature from a ramdisk or ssh by typing

touch /var/mobile/Library/Preferences/com.saurik.mobilesubstrate.dat

== More Info ==
[http://www.saurik.com saurik's Web Site]

[http://www.iphonedevwiki.net/index.php/MobileSubstrate MobileSubstrate Development Info]

Redsn0w

2010-12-27T20:46:56Z

Liamchat: i know 0.9.7 beta 4 is not out yet but to save time how do you make it invisible

[[Image:Redsn0w.png|thumb|redsn0w 0.9.5-b5 on Mac OS X]]
redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.

Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.

Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.

Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.

redsn0w [http://blog.iphone-dev.org/post/1452044444 0.9.6b2] can jailbreak iOS 3.2.2, and 4.0 through 4.1 on every device that supports those versions, on Windows and Mac OS X.

== Credit ==
[[iPhone Dev Team]]

== Versions ==
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9; text-align:center; width:150px;" |Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" |Release date
! style="background-color:#E9E9E9; text-align:center;" |Changes
|-
! style="white-space: nowrap;" |

==== 0.7 ====
| style="white-space: nowrap;" | Unknown
|
*
|-
! style="white-space: nowrap;" |

==== 0.8 ====
| style="white-space: nowrap;" | July 2009
|
* Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3GS]] only.
|-
! style="white-space: nowrap;" |

==== 0.9.2 ====
| style="white-space: nowrap;" | Unknown
|
* Supports 3.0-3.1.2 on all iPhones and iPod touches (still a tethered-only JB for late-model devices though)
|-
! style="white-space: nowrap;" |

==== 0.9.3 beta ====
| style="white-space: nowrap;" | Unknown
|
* Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
|-
! style="white-space: nowrap;" |

==== 0.9.4 ====
| style="white-space: nowrap;" | Unknown
|
* Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-3 ====
| style="white-space: nowrap;" | June 21, 2010
|
* Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-4 ====
| style="white-space: nowrap;" | Unknown
|
* Resolved a problem with iBooks.
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-5 ====
| style="white-space: nowrap;" | Unknown
|
* Supposed to fix any APN or MMS issues that users were seeing.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 1 ====
| style="white-space: nowrap;" | September 21, 2010
|
* Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 2 ====
| style="white-space: nowrap;" | October 31, 2010
|
* Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except iPod touch 2G MC) .
** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 3 ====
| style="white-space: nowrap;" | November 2010
|
* Supports the installation of custom bundles
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 4 ====
| style="white-space: nowrap;" | November 23, 2010
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 5 ====
| style="white-space: nowrap;" | November 28, 2010
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 6 ====
| style="white-space: nowrap;" | December 1, 2010
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
* Allows you to "deactivate" a hacktivated phone, so sbinger's [http://www.bingner.com/SAM.html Subscriber Artificial Module] (SAM) can trick your iPhone and [[iTunes]] into creating legitimate activation tickets.
|-
! style="white-space: nowrap;" |

==== 0.9.7 beta 1 ====
| style="white-space: nowrap;" | December 26, 2010
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 IPSW.
*** Bugs abound, particularly app switcher crashes and disabled Bluetooth.
|-
! style="white-space: nowrap;" |

==== 0.9.7 beta 2 ====
| style="white-space: nowrap;" | December 26, 2010
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 IPSW.
*** Fixes crashing bugs on app's from redsn0w 0.9.7b1, but still has Bluetooth disabled.
|-
! style="white-space: nowrap;" |

==== 0.9.7 beta 3 ====
| style="white-space: nowrap;" | December 27, 2010
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 IPSW.
*** Fixes crashing bugs completely from redsn0w 0.9.7b2, but still has Bluetooth disabled.
|-
! style="white-space: nowrap;" |

==== 0.9.7 beta 4 ====
| style="white-space: nowrap;" | December 28, 2010
|
* Jailbreaks iOS 4.1-4.2.1 on all supported devices.
** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 IPSW.
*** integrates ubsmux
|-
! style="white-space: nowrap;" |
|}

== Exploits used ==
For [[N45ap|iPod touch]], [[M68ap|iPhone]] and [[N82ap|iPhone 3G]], see:
*[[Pwnage]]
*[[Pwnage 2.0]]

For [[N72ap|iPod touch 2G]], see:
*[[0x24000 Segment Overflow]]
*[[ARM7 Go]] - was used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.
*[[usb_control_msg(0xA1, 1) Exploit]] - used to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow. It is also used for a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].

For [[N88ap|iPhone 3GS]], see:
*[[0x24000 Segment Overflow]]
*[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

For [[N18ap|iPod touch 3G]]
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]
*limera1n exploit

[[Category:Hacking Software]]

Redsn0w

2010-12-27T02:24:50Z

Liamchat: /* Versions */

[[Image:Redsn0w.png|thumb|redsn0w 0.9.5-b5 on Mac OS X 10.?]]
redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.

Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.

Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.

Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.

redsn0w [http://blog.iphone-dev.org/post/1452044444 0.9.6b2] can jailbreak iOS 3.2.2, and 4.0 through 4.1 on every device that supports those versions, on Windows and Mac OS X.

== Credit ==
[[iPhone Dev Team]]

== Versions ==
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9; text-align:center; width:150px;" |Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" |Release date
! style="background-color:#E9E9E9; text-align:center;" |Changes
|-
! style="white-space: nowrap;" |

==== 0.7 ====
| style="white-space: nowrap;" | Unknown
|
*
|-
! style="white-space: nowrap;" |

==== 0.8 ====
| style="white-space: nowrap;" | July 2009
|
* Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3GS]] only.
|-
! style="white-space: nowrap;" |

==== 0.9.2 ====
| style="white-space: nowrap;" | Unknown
|
* Supports 3.0-3.1.2 on all iPhones and iPod touches (still a tethered-only JB for late-model devices though)
|-
! style="white-space: nowrap;" |

==== 0.9.3 beta ====
| style="white-space: nowrap;" | Unknown
|
* Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
|-
! style="white-space: nowrap;" |

==== 0.9.4 ====
| style="white-space: nowrap;" | Unknown
|
* Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-3 ====
| style="white-space: nowrap;" | June 21, 2010
|
* Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-4 ====
| style="white-space: nowrap;" | Unknown
|
* Resolved a problem with iBooks.
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-5 ====
| style="white-space: nowrap;" | Unknown
|
* Supposed to fix any APN or MMS issues that users were seeing.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 1 ====
| style="white-space: nowrap;" | September 21, 2010
|
* Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 2 ====
| style="white-space: nowrap;" | October 31, 2010
|
* Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except iPod touch 2G MC) .
** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 3 ====
| style="white-space: nowrap;" | November 2010
|
* Supports the installation of custom bundles
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 4 ====
| style="white-space: nowrap;" | November 23, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 5 ====
| style="white-space: nowrap;" | November 28, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 6 ====
| style="white-space: nowrap;" | December 1, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
* Allows you to "deactivate" a hacktivated phone, so sbinger's [http://www.bingner.com/SAM.html Subscriber Artificial Module] (SAM) can trick your iPhone and [[iTunes]] into creating legitimate activation tickets.
|}

==== 0.9.7 beta 1 ====
| style="white-space: nowrap;" | December 26, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[unTethered jailbreak]] on devices that have 4.2 b3 [[SHSH]] and have access to The beta ipsw mac only edition
*** the untetherd jailbreak does not work with the instal cydia option and after installing the jailbreak Bluetooth will be disabled and multitasking will not work
|}

== Exploits used ==
For [[N45ap|iPod touch]], [[M68ap|iPhone]] and [[N82ap|iPhone 3G]], see:
*[[Pwnage]]
*[[Pwnage 2.0]]

For [[N72ap|iPod touch 2G]], see:
*[[0x24000 Segment Overflow]]
*[[ARM7 Go]] - was used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.
*[[usb_control_msg(0xA1, 1) Exploit]] - used to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow. It is also used for a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].

For [[N88ap|iPhone 3GS]], see:
*[[0x24000 Segment Overflow]]
*[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

For [[N18ap|iPod touch 3G]]
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]
*limera1n exploit

[[Category:Hacking Software]]

Talk:Bootrom Dumper Utility

2010-12-24T19:13:25Z

Liamchat: Undo revision 14289 by ComingWinter (Talk) don't remove my comment

Talk:Bootrom Dumper Utility

2010-12-24T16:27:08Z

Liamchat:

ITunes

2010-12-19T23:20:35Z

Liamchat:

{{DISPLAYTITLE:iTunes}} [[Image:ITunes10icon.jpg|right|thumb|150px|The iTunes 10 icon.]]
iTunes is Apple's music and video management software. It also serves as a desktop client for the [[iTunes Store]] and handles [[iOS]] device synchronization.

It consists of 3 major components: iTunes itself, QuickTime and [[MobileDevice Library|Apple Mobile Device Support (AMDS)]].
QuickTime is used for audio/video playback and encoding, while AMDS is the component responsible for synchronizing with iOS devices.

Starting with version 9, iTunes on Windows includes a component called Apple Application Support, which is essentially WebKit. It is used to display the updated iTunes Store as well as iTunes LPs and iTunes Extras.
<div style="clear:both;"></div>
== Mac OS X versions ==
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
!iTunes version
!AMDS version
!Download URL
!SHA-1 hash
!File size
!Comments
|-
|7.3.0.54
|0.8.8.0 (?)
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-3018.20070629.60NoI/iTunes.dmg iTunes.dmg]
|266a60d260eb82ce9d489b64713af61012d98d31
|35,425,508
|The first public release with [[M68ap|iPhone]] support.
|-
|7.3.1.3
|0.8.8.0 (?)
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-3550.20070711.B72nt/iTunes.dmg iTunes.dmg]
|cd29af8373fc21424558cd302f806ddb57d9b169
|35,443,737
|
|-
|7.3.2.6
|0.8.8.0 (?)
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-3608.20070802.im8t3/iTunes7.3.2.dmg iTunes7.3.2.dmg]
|bce60930813741667c6db59f6f41bc0cf6691b0b
|35,429,400
|
|-
|7.4.0.26
|0.9.8.0 (?)
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-3602.20070905.mUy57/iTunes7.4.dmg iTunes7.4.dmg]
|4422396fee3323cceab7d0ae83f47f7bedb21033
|40,133,960
|The first public release with [[N45ap|iPod touch support]].
|-
|7.4.1.2
|0.9.8.0 (?)
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-3889-20070907.ItU741/iTunes7.4.1.dmg iTunes7.4.1.dmg]
|24e11dbc7498ef5d51b629e3caa202c0633b75ac
|40,133,147
|Just a shoddy attempt at blocking a free ringtone trick.
|-
|7.4.2.4
|0.9.8.0 (?)
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-3873.20070917.Rg7Vw/iTunes7.4.2.dmg iTunes7.4.2.dmg]
|b0471389ab987bc98d5f6ae1122a4f780048d930
|40,144,654
|
|-
|7.5.0.19
|1.1.1.1
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-3899.20071105.Vg7Tg/iTunes7.5.dmg iTunes7.5.dmg]
|b7057a5d13d4ff5b1bb0faa5af5d9e203db4cca9
|43,108,871
|Permitted activation wherever the [[M68ap|iPhone]] was internationally sold (UK, Germany, France)
|-
|7.6.0.29
|1.1.9.2
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-3983.20080115.i7gnh/iTunes.dmg iTunes.dmg]
|f3d68cd00043933a5d1192a39113d21b89e43842
|47,208,945
|
|-
|7.6.1.9
|1.1.9.2
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-4265.20080221.MscTs/iTunes.dmg iTunes.dmg]
|74844cfb88003535e396fa0437e2df285c909614
|47,208,945
|
|-
|[http://support.apple.com/downloads/iTunes_7_6_2 7.6.2.9]
|1.1.9.2
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-4474.20080402.1Swef/iTunes.dmg iTunes.dmg]
|d01c28611f6e23b277b338ee8a594b1d8955aa25
|48,099,123
|
|-
|7.7.0.43
|1.7.4.1
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-5099.20080710.frt56/iTunes.dmg iTunes.dmg]
|f37043528c43b94451ce53c676647d0a441486a8
|50,664,930
|The first public release with [[N82ap|iPhone 3G]] and [[iOS]] 2.0 support.
|-
|[http://support.apple.com/downloads/iTunes_7_7_1 7.7.1.11]
|1.7.6.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Mac/061-5123.20080730.fr4Ym/iTunes.dmg iTunes.dmg]
|3fdaf990a103799255112dccb0e0c01f28d64937
|50,702,145
|Last version to include Panther support.
|-
|8.0.0.35
|1.8.5.2
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-4744.20080909.5Ty6li/iTunes8.dmg iTunes8.dmg]
|af54727e4b2e0e6bb0c367b34ae5075f36096aef
|58,621,179
|The first public release with [[N72ap|iPod touch 2G]] support.
|-
|8.0.1.?
|???
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5553.20081002.kjy65/iTunes801.dmg iTunes801.dmg]
|722f5603bd12808d895cf822f3c4267febc56b74
|???
|This was deleted by Apple swiftly. SHA-256 hash is c3d93f1f15ed70418398989ab5d7573daf127a53894235c9950ca53b88520e27.
|-
|8.0.1.11
|1.8.5.7
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5633.20081003.Njki0/iTunes801.dmg iTunes801.dmg]
|ab5604e2b7492d3f0cf4e2d06520553ed5153039
|58,725,504
|
|-
|8.0.1.12
|1.8.5.7
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5649.20081008.hji9O/iTunes801.dmg iTunes801.dmg]
|35c736471228e0b47a0fb54a52447ec8ff11681f
|58,696,603
|
|-
|[http://support.apple.com/downloads/iTunes_8_0_2_for_Mac 8.0.2.20]
|1.8.5.13
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5810.20081120.wm3n4/iTunes802.dmg iTunes802.dmg]
|ad1d027ec850af8c70a3af39eb3c47e1192067df
|60,559,358
|
|-
|8.1.0.50
|2.0.5.7
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5641.20090311.Cfe4r/iTunes81.dmg iTunes81.dmg]
|6c9ee64741158c9f45417b965b38b01ea3b51af1
|66,440,133
|
|-
|8.1.1.10
|2.0.5.7
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6171.20090406.i98u7/iTunes811.dmg iTunes811.dmg]
|447933eee85feca7b8a2335e441202794c19b966
|69,231,745
|
|-
|8.2.0.23
|2.3.8.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6183.20090601.Pldj3/iTunes8.2.dmg iTunes8.2.dmg]
|a07c4fb0dfd94ba238024cf8d448165da24e5be5
|81,038,040
|The first public release with [[N88ap|iPhone 3GS]] and [[iOS]] 3.0 support.
|-
|[http://support.apple.com/kb/DL857 8.2.1.6]
|2.3.8.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6715.20090715.cfR54/iTunes8.2.1.dmg iTunes8.2.1.dmg]
|f6d1e5453b7c2ae9a85fe61a7d0eaf972e4d7266
|81,050,406
|
|-
|9.0.0.70
|2.5.1.6
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-6350.20090909.tnzs2/iTunes9.dmg iTunes9.dmg]
|eb436fbe738bfa9682805d7ea76bd03c72736e89
|86,820,031
|The first public release with [[N18ap|iPod touch 3G]] and [[iOS]] 3.1 support.
|-
|9.0.1.8
|2.5.1.6
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7191.20090922.P6uhj/iTunes9.0.1.dmg iTunes9.0.1.dmg]
|eea9dbc34e395a44bfa821501827ea3c5b4c24a9
|86,981,129
|
|-
|9.0.2.25
|2.5.1.6
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7197.20091029.tnz9f/iTunes9.0.2.dmg iTunes9.0.2.dmg]
|9ea11cc2ffb54a3779f3d6042756a48f945d2594
|86,992,611
|
|-
|9.0.3.15
|2.5.1.6
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7752.20100201.Tz39N/iTunes9.0.3.dmg iTunes9.0.3.dmg]
|980568d7429b1093eff092e8fe68115151c2bb22
|95,235,128
|
|-
|9.1.0.79
|3.1.9.14
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7203.20100330.XswP8/iTunes9.1.dmg iTunes9.1.dmg]
|cbfe7da9ccc2934395e27ee99ab400c3fdea0595
|98,151,588
|The first public release with [[K48ap|iPad]] support.
|-
|9.1.1.11
|3.1.9.14
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-8084.2010.04.27.6lQSu/iTunes9.1.1.dmg iTunes9.1.1.dmg]
|d240d0326941592b21b0303a65c8a266092c6faa
|98,181,420
|
|-
|[http://support.apple.com/kb/DL1036 9.1.1.12]
|3.1.9.14
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-8202.20100427.5vfkH/iTunes9.1.1.dmg iTunes9.1.1.dmg]
|4d766a400590fa0e11fc28827d4cbc1e8e5802f7
|98,180,859
|
|-
|9.2.0.61
|3.9.2.8
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-8440.20100616.Tnzs2/iTunes9.2.dmg iTunes9.2.dmg]
|fc0cd72f63ce2a39ae24ccc6cdd00c921a8a542e
|106,944,273
|The first public release with [[N90ap|iPhone 4]] and [[iOS]] 4.0 support. Breaks [[Spirit]] compatibility. [https://twitter.com/iphone_dev/status/16335715713]
|-
|9.2.1.4
|3.9.2.8
|[http://appldnld.apple.com/iTunes9/061-8601.20100719.nhy5R/iTunes9.2.1.dmg iTunes9.2.1.dmg]
|96b8d985867f7bdeb440db81303d151d5b94d1d0
|106,762,845
|
|-
|[http://support.apple.com/kb/DL1056 9.2.1.5]
|3.9.2.8
|[http://appldnld.apple.com/iTunes9/061-8725.20100722.Bhnyt/iTunes9.2.1.dmg iTunes9.2.1.dmg]
|adc7ca871aace3361575dd78e0f69bcbeca186c8
|106,754,220
|Last version to include Tiger support.
|-
|10.0.0.67
|3.9.6.7
|[http://appldnld.apple.com/iTunes10/061-8247.20100901.Ktjyt/iTunes10.dmg iTunes10.dmg]
|936a24a8897d024bddaeab1ef771d8b6e678f1f9
|86,284,593
|The first public release with [[N81ap|iPod touch 4G]] and [[iOS]] 4.1 support.
|-
|10.0.0.67
|3.9.6.7
|[http://appldnld.apple.com/iTunes10/061-9183.20100902.X2ndX/iTunes10.dmg iTunes10.dmg]
|a21838677e073c3888bad217dc375b6989f881cd
|86,958,681
|Added DMG background image, no binary differences
|-
|10.0.1.22
|3.9.6.7
|[http://appldnld.apple.com/iTunes10/061-9207.20100924.Nzse2/iTunes10.0.1.dmg iTunes10.0.1.dmg]
|4c12b51e2a2b08a93687fdee0a79390c192117eb
|88,104,237
|
|-
|10.0.1.22
|3.9.6.7
|[http://appldnld.apple.com/iTunes10/061-9447.20100929.Bhny5/iTunes10.0.1.dmg iTunes10.0.1.dmg]
|328ba2970062902e54147082c1c2722ce1d0ab9d
|88,104,591
|CoreFP update
|-
|10.1.0.54
|4.1.6.0
|[http://appldnld.apple.com/iTunes10/061-9530.20101112.MSakc/iTunes10.1.dmg iTunes10.1.dmg]
|e8fec05f2bf414585fdcebf52163c8c189779a6f
|95,028,260
|The first public release with AirPlay and [[iOS]] 4.2 support.
|-
|[http://support.apple.com/kb/DL1103 10.1.1.4]
|4.1.6.0
|[http://appldnld.apple.com/iTunes10/041-0027.20101215.AzsL3/iTunes10.1.1.dmg iTunes10.1.1.dmg]
|69f1f89455c5550e4e6c78dc041ede2242bd7e06
|94,899,621
| stops [[redns0w]] from working [http://twitter.com/#!/chronic/status/16624587940823040]
|}

== Windows versions (32-bit) ==
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
!iTunes version
!QT version
!AMDS version
!AAS version
!Download URL
!SHA-1 hash
!File size
!Comments
|-
|7.3.0.54
|7.1.6.200
|1.0.0.86
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-3312.20070629.Mu8Bv/iTunesSetup.exe iTunesSetup.exe]
|333be2547b5eb9fe3ddf65115b14756a7f72690a
|49,673,528
|The first public release with [[M68ap|iPhone]] support.
|-
|7.3.1.3
|7.2.0.240
|1.0.1.2
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-3552.20070711.RxT4b/iTunesSetup.exe iTunesSetup.exe]
|77144b39b768143cb4882b7b6f463724f87fcbd8
|49,943,864
|
|-
|7.3.2.6
|7.2.0.240
|1.0.2.12
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-3610.20070802.x4r9j/iTunesSetup.exe iTunesSetup.exe]
|7a2f987fe25e98db6017942e772300adc32be751
|50,005,304
|
|-
|7.4.0.26
|7.2.0.240
|1.1.0.21
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-3604.20070905.Cyi94/iTunesSetup.exe iTunesSetup.exe]
|fefe391446a8d8010d0a26e9819e893a76319da6
|51,414,328
|The first public release with [[N45ap|iPod touch]] support.
|-
|7.4.1.2
|7.2.0.240
|1.1.1.1
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-3885-20070907.sk2j7/iTunesSetup.exe iTunesSetup.exe]
|2c57aa25db4085569368e8485b97002705dbefb1
|51,418,424
|Just a shoddy attempt at blocking a free ringtone trick.
|-
|7.4.2.4
|7.2.0.240
|1.1.1.1
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-3874.20070917.pQ2cG/iTunes742Setup.exe iTunes742Setup.exe]
|828bb0dfa6727d05f80cf338538dba5a9e90c0d9
|51,422,520
|
|-
|7.4.3.1
|7.2.0.240
|1.1.1.1
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-3945.20070927.9I8un/iTunes743Setup.exe iTunes743Setup.exe]
|908ccbb1544799825d80df899e2e9f1eabfa8899
|51,422,520
|
|-
|7.5.0.20
|7.3.0.70
|1.1.2.23
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-3902.20071105.G6edS/iTunes75Setup.exe iTunes75Setup.exe]
|b38005b53e608dcd2b4fe18b44cc419fefbc9411
|54,326,568
|Permitted activation wherever the [[M68ap|iPhone]] was internationally sold (UK, Germany, France)
|-
|7.5.0.20
|7.3.1.70
|1.1.2.23
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-4183.20071213.FNXDz/iTunesSetup.exe iTunesSetup.exe]
|e0f384fbf385f98fce3431f084b474bd092312a3
|54,330,664
|
|-
|7.6.0.29
|7.4.0.91
|1.1.3.26
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-3986.20080115.mBvyG/iTunesSetup.exe iTunesSetup.exe]
|eec2aa5c7b502d7fcd959317508ed7b1c6fca207
|58,619,176
|Added Bonjour for Windows
|-
|7.6.0.29
|7.4.1.14
|1.1.3.26
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-4287.20080206.Wntz2/iTunesSetup.exe iTunesSetup.exe]
|9c1c0cdc2a1375af71f6423277a41cc2ce6273d1
|59,196,712
|
|-
|7.6.1.9
|7.4.1.14
|1.1.4.7
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-4268.20080221.Tnz76/iTunesSetup.exe iTunesSetup.exe]
|598282bd4cb48a06a38a87645fedfe9ab26e8d57
|59,163,944
|
|-
|[http://support.apple.com/downloads/iTunes_7_6_for_Windows 7.6.2.9]
|7.4.5.67
|1.1.4.7
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-4476.200402.tGbhu/iTunesSetup.exe iTunesSetup.exe]
|ff2a3c234d164f30f8b1d05297a49a55f3f4e8c0
|59,782,440
|
|-
|7.7.0.43
|7.50.61.0
|2.0.0.32
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-5102.20080710.bgty8/iTunesSetup.exe iTunesSetup.exe]
|eb2fa90ed5a99519184a5443b0ae4228100d0d46
|63,481,128
|The first public release with [[N82ap|iPhone 3G]] and [[iOS]] 2.0 support.
|-
|7.7.1.11
|7.50.61.0
|2.0.1.5
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-5126.20080730.vft5r/iTunesSetup.exe iTunesSetup.exe]
|23f34be26870bb2b46472551c6965909cb4548ec
|63,530,280
|
|-
|8.0.0.35
|7.55.90.70
|2.1.0.25
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-4746.20080909.Detnz/iTunes8Setup.exe iTunes8Setup.exe]
|5d4ff8ffbe9feeaed67deb317797c1d71a03c359
|67,822,888
|The first public release with [[N72ap|iPod touch 2G]] support.
|-
|8.0.0.35
|7.55.90.70
|2.1.0.25
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5525.20080911.bnj78/iTunes8Setup.exe iTunes8Setup.exe]
|09bd8dd0b055f1b63205d5c9c9a00e4d42e38a3e
|67,110,184
|This version was released only 2 days after the official 8.0 release, supposedly to fix blue screen errors. Also removed device icons for iPhones and iPods.
|-
|8.0.1.11
|7.55.90.70
|2.1.1.13
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5555.20081002.5Kij7/iTunes801Setup.exe iTunes801Setup.exe]
|7342c1aa7c458db14c67e8635ee475adcc1d38be
|67,167,528
|
|-
|8.0.2.20
|7.55.90.70
|2.1.2.7
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5812.20081120.3mv63/iTunesSetup.exe iTunesSetup.exe]
|96113274f450dfe2893805353663b2436161b15a
|68,756,776
|CoreFP library was moved from the QuickTime installer into iTunes
|-
|[http://support.apple.com/downloads/iTunes_8_0_2_for_Windows 8.0.2.20]
|7.60.92.0
|2.1.2.7
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5856.20090121.fvgtr/iTunesSetup.exe iTunesSetup.exe]
|50c0e31eda9ab0a5902d2242ba2fd74ef5be7c99
|69,076,264
|
|-
|8.1.0.51
|7.60.92.0
|2.4.0.27
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6166.20090311.znt32/iTunesSetup.exe iTunesSetup.exe]
|562bcc78760c4055f84d53730089a62dfa9c3fcf
|73,336,104
|Brought back device icons.
|-
|8.1.0.52
|7.60.92.0
|2.4.0.27
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6190.20090313.Cf9iK/iTunesSetup.exe iTunesSetup.exe]
|00bd8842cf0f2026cc4590ef434f6846eeca7fa4
|73,332,008
|
|-
|[http://support.apple.com/kb/DL811 8.1.1.10]
|7.60.92.0
|2.4.1.7
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6172.20090406.Xdcfr/iTunesSetup.exe iTunesSetup.exe]
|cad92e6882b5fb49d710d342f315d7d6293e2b0a
|74,302,760
|
|-
|8.2.0.23
|7.62.14.0
|2.5.0.31
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6184.20090601.Bhyit/iTunesSetup.exe iTunesSetup.exe]
|16f5b1e787b36aece842ea5ae80bfc6bf2b32b19
|77,690,152
|The first public release with [[N88ap|iPhone 3GS]] and [[iOS]] 3.0 support.
|-
|8.2.0.23
|7.62.14.0
|2.5.1.3
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6664.20090608.dfrtg/iTunesSetup.exe iTunesSetup.exe]
|b1fbcba068c32c25d8987b81ce60cc660b90ccd8
|77,690,152
|
|-
|[http://support.apple.com/kb/DL928 8.2.1.6]
|7.62.14.0
|2.5.2.2
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6717.20090715.XsE4R/iTunesSetup.exe iTunesSetup.exe]
|797da9711caf87d114e2a5b88523fa825753b530
|77,976,864
|
|-
|9.0.0.70
|7.64.17.73
|2.6.0.32
|1.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-6351.20090909.Tza9j/iTunesSetup.exe iTunesSetup.exe]
|68c84dd8d910ce6cc1508f41cb86d20de839f2e3
|93,107,496
|The first public release with [[N18ap|iPod touch 3G]] and [[iOS]] 3.1 support.
|-
|9.0.1.8
|7.64.17.73
|2.6.0.32
|1.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7192.20090922.Mju88/iTunesSetup.exe iTunesSetup.exe]
|25d04ff5a63a808ca56875cdf9a9474b9b845f1d
|93,074,728
|
|-
|9.0.2.25
|7.64.17.73
|2.6.0.32
|1.0.1
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7198.20091029.4Ptrf/iTunesSetup.exe iTunesSetup.exe]
|0e1ad1c48ce9354f18efc6b1d02b70c8e7435cfb
|93,266,280
|
|-
|9.0.2.25
|7.65.17.80
|2.6.0.32
|1.1.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7528.20091118.Ktxz3/iTunesSetup.exe iTunesSetup.exe]
|cc999b74d5b9c4727c458fda78a7646906baed21
|93,234,472
|
|-
|9.0.3.15
|7.65.17.80
|2.6.0.32
|1.1.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7753.20100201.Jcv4r/iTunesSetup.exe iTunesSetup.exe]
|bfedc440ed45f8ddb3377445df46c8ee8ddb22a0
|98,180,904
|
|-
|[http://support.apple.com/kb/DL1024 9.0.3.15]
|7.65.17.80
|2.6.0.32
|1.1.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7894.20100219.Kgbhy/iTunesSetup.exe iTunesSetup.exe]
|13b1cde538ffd6b89bb876da537e08c8bdcd09fe
|98,181,416
|
|-
|9.1.0.79
|7.66.71.0
|3.0.0.102
|1.2.1
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7204.20100330.Cdr4T/iTunesSetup.exe iTunesSetup.exe]
|80e64f3222703e5da2d613541170bcd6c300e801
|97,525,032
|The first public release with [[K48ap|iPad]] support. Breaks [[blackra1n]] compatibility.
|-
|9.1.1.11
|7.66.71.0
|3.0.1.3
|1.2.1
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-8085.2010.04.27.g8Z5E/iTunesSetup.exe iTunesSetup.exe]
|ad740fb89cef03743e698dba0dd6370b8c4bb677
|97,543,464
|
|-
|[http://support.apple.com/kb/DL1037 9.1.1.12]
|7.66.71.0
|3.0.1.3
|1.2.1
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-8203.20100427.1J2kd/iTunesSetup.exe iTunesSetup.exe]
|408a0ecc56b3bedda41c10582eab19b9c10f4119
|97,547,048
|
|-
|9.2.0.61
|7.66.73.0
|3.1.0.62
|1.3.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7656.20100616.ZTns2/iTunesSetup.exe iTunesSetup.exe]
|36b0bab6592437bb90d3bf0c8e2475d9f707f20b
|96,768,824
|The first public release with [[N90ap|iPhone 4]] and [[iOS]] 4.0 support. Breaks [[Spirit]] compatibility. [https://twitter.com/iphone_dev/status/16335715713]
|-
|9.2.1.4
|7.66.73.0
|3.1.0.62
|1.3.0
|[http://appldnld.apple.com/iTunes9/061-8602.20100719.Tnz92/iTunesSetup.exe iTunesSetup.exe]
|0cf297f0fea951f7eab22d1bd5c34699e5cf756b
|96,972,800
|
|-
|[http://support.apple.com/kb/DL1056 9.2.1.5]
|7.66.73.0
|3.1.0.62
|1.3.0
|[http://appldnld.apple.com/iTunes9/061-8726.20100722.Vbgth/iTunesSetup.exe iTunesSetup.exe]
|fd86e82bc52dd5a22d922aedf2a6063c224ca48c
|96,962,344
|
|-
|10.0.0.68
|7.67.75.0
|3.2.0.47
|1.3.2
|[http://appldnld.apple.com/iTunes10/061-8246.20100901.Zxsew3/iTunesSetup.exe iTunesSetup.exe]
|9bae2670a66e04beb87de7d7a645c9abff2f5b0b
|74,840,872
|The first public release with [[N81ap|iPod touch 4G]] and [[iOS]] 4.1 support.
|-
|10.0.1.22
|7.68.75.0
|3.2.0.47
|1.3.2
|[http://appldnld.apple.com/iTunes10/061-9186.20100924.nbght/iTunesSetup.exe iTunesSetup.exe]
|8c2441a65bfd46d68d3ffebb89af49afd6af7894
|75,019,048
|
|-
|10.1.0.54
|7.68.75.0
|3.3.0.69
|1.4.0
|[http://appldnld.apple.com/iTunes10/061-9531.20101112.Vxes2/iTunesSetup.exe iTunesSetup.exe]
|96b50376ecd8c02eeb5dfb55ab7a25902325d12f
|81,893,672
|The first public release with AirPlay and [[iOS]] 4.2 support.
|-
|10.1.0.56
|7.68.75.0
|3.3.0.69
|1.4.1
|[http://appldnld.apple.com/iTunes10/061-9842.20101118.Bgyt6/iTunesSetup.exe iTunesSetup.exe]
|3392bfd179d53d86262c848e2f0ab1e465115ed9
|81,898,280
|
|-
|[http://support.apple.com/kb/DL1103 10.1.1.4]
|7.69.80.9
|3.3.0.69
|1.4.1
|[http://appldnld.apple.com/iTunes10/061-9926.20101215.XdsP6/iTunesSetup.exe iTunesSetup.exe]
|c03925830c2f686917f0bfe89ea13a27f6f1135d
|81,876,264
| stops [[redns0w]] from working [http://twitter.com/#!/chronic/status/16624587940823040]
|}

== Windows versions (64-bit) ==
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
!iTunes version
!QT version
!AMDS version
!AAS version
!Download URL
!SHA-1 hash
!File size
!Comments
|-
|7.6.0.29
|7.4.0.91
|1.1.3.26
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-3987.20080115.3D5gF/iTunes64Setup.exe iTunes64Setup.exe]
|f26dd0dbd3f4811f13db178d02ac3afadbb9b49f
|59,094,312
|
|-
|7.6.0.29
|7.4.1.14
|1.1.3.26
|—
|iTunes64Setup.exe
|???
|???
|
|-
|7.6.1.9
|7.4.1.14
|1.1.4.7
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-4269.20080221.Wdwtn/iTunes64Setup.exe iTunes64Setup.exe]
|81cfba903a08ab94600c454763c4f75541ded6ad
|59,645,224
|
|-
|7.6.2.9
|7.4.5.67
|1.1.4.7
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-4479.20080402.BgbhY/iTunes64Setup.exe iTunes64Setup.exe]
|b4ffec02d07329ab0053d1aa20626c6007824a97
|60,368,680
|
|-
|7.7.0.43
|7.50.61.0
|2.0.0.32
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-5103.20080710.vfg43/iTunes64Setup.exe iTunes64Setup.exe]
|49a02b3f7971b5f988ed4228a11baa04a3e239dd
|64,049,960
|The first public release with [[N82ap|iPhone 3G]] and [[iOS]] 2.0 support.
|-
|7.7.1.11
|7.50.61.0
|2.0.1.5
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes7/Win/061-5127.20080731Mlo9i/iTunes64Setup.exe iTunes64Setup.exe]
|e951f4f3e49b24aee27993f46a2162c98333a41c
|64,093,480
|
|-
|8.0.0.35
|7.55.90.70
|2.1.0.25
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-4747.20080909.Crkr2/iTunes864Setup.exe iTunes864Setup.exe]
|86df5d9899a8dad82b893309dc18672e3d2cccd0
|68,391,720
|The first public release with [[N72ap|iPod touch 2G]] support.
|-
|8.0.0.35
|7.55.90.70
|2.1.0.25
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5526.20080911.gtre4/iTunes864Setup.exe iTunes864Setup.exe]
|c321ee8bd0bb7b26bf9ac67aa59b01935cae83a8
|67,672,360
|This version was released only 2 days after the official 8.0 release, supposedly to fix blue screen errors. Also removed device icons for iPhones and iPods.
|-
|8.0.1.11
|7.55.90.70
|2.1.1.13
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5556.20081002.Aw234/iTunes80164Setup.exe iTunes80164Setup.exe]
|55c48f0dd8f694fc1716390435255dc7a2b82f0f
|67,731,752
|
|-
|8.0.2.20
|7.55.90.70
|2.1.2.7
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5813.20081120.v8d4k/iTunes64Setup.exe iTunes64Setup.exe]
|3c0de1135a6f7324ff691e99a8fefa385219bb0a
|69,323,048
|CoreFP library was moved from the QuickTime installer into iTunes
|-
|[http://support.apple.com/kb/DL726 8.0.2.20]
|7.60.92.0
|2.1.2.7
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-5857.20090121.P6yuj/iTunes64Setup.exe iTunes64Setup.exe]
|b7a5b654877ddd2d2db8c6fa201000221398bdd9
|69,641,000
|
|-
|8.1.0.51
|7.60.92.0
|2.4.0.27
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6167.20090311.tnz64/iTunes64Setup.exe iTunes64Setup.exe]
|fb07309a0196b424ed434be1143f9e8bcd978d62
|73,855,272
|Brought back device icons.
|-
|8.1.0.52
|7.60.92.0
|2.4.0.27
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6191.20090313.Lce45/iTunes64Setup.exe iTunes64Setup.exe]
|cd61ef5e5a6fd350d2ac4366a31de5d110defdff
|73,852,200
|
|-
|[http://support.apple.com/kb/DL812 8.1.1.10]
|7.60.92.0
|2.4.1.7
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6173.20090406.Aidol/iTunes64Setup.exe iTunes64Setup.exe]
|40a82ba08885bd8797f70b8199df5526f3f2d409
|74,820,904
|
|-
|8.2.0.23
|7.62.14.0
|2.5.0.31
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6185.20060601.Fkje9g/iTunes64Setup.exe iTunes64Setup.exe]
|b8739f847f2b66835f4f4b542b3308de96d418ed
|78,721,320
|The first public release with [[N88ap|iPhone 3GS]] and [[iOS]] 3.0 support.
|-
|8.2.0.23
|7.62.14.0
|2.5.1.3
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6665.20090608.VblP0/iTunes64Setup.exe iTunes64Setup.exe]
|48b31f6a24a44637f37c042e8ba225d12733b495
|78,715,176
|
|-
|[http://support.apple.com/kb/DL858 8.2.1.6]
|7.62.14.0
|2.5.2.2
|—
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes8/061-6718.20090715.MJwE3/iTunes64Setup.exe iTunes64Setup.exe]
|8985afce9ab6d4483c43308cf34e6217e903000a
|78,999,840
|
|-
|9.0.0.70
|7.64.17.73
|2.6.0.32
|1.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-6352.20090909.Zqaw4/iTunes64Setup.exe iTunes64Setup.exe]
|9a492dadc7f396bd92bdfc7cb0ff4de15db1b2c2
|94,196,008
|The first public release with [[N18ap|iPod touch 3G]] and [[iOS]] 3.1 support.
|-
|9.0.1.8
|7.64.17.73
|2.6.0.32
|1.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7193.20090922.3456y/iTunes64Setup.exe iTunes64Setup.exe]
|85f8c516cb45024292cde1f48e88fd392e25626f
|94,164,264
|
|-
|9.0.2.25
|7.64.17.73
|2.6.0.32
|1.0.1
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7199.20091029.Zsxw3/iTunes64Setup.exe iTunes64Setup.exe]
|8eb6d82638167542a89c3d64a8c7023019137996
|94,316,840
|
|-
|9.0.2.25
|7.65.17.80
|2.6.0.32
|1.1.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7529.20091118.Xdswe/iTunes64Setup.exe iTunes64Setup.exe]
|242a25d9edb37f0ed52a6bf4fbffaef3294baa44
|94,333,224
|
|-
|9.0.3.15
|7.65.17.80
|2.6.0.32
|1.1.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7754.20100201.Kft54/iTunes64Setup.exe iTunes64Setup.exe]
|9696c68639b320758a56dc8a79d2883e2e2f3df8
|99,237,160
|
|-
|[http://support.apple.com/kb/DL1024 9.0.3.15]
|7.65.17.80
|2.6.0.32
|1.1.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7895.20100219.Vpthy/iTunes64Setup.exe iTunes64Setup.exe]
|e9735896f80c0dbb5274829b51d6157d14ec48a5
|99,239,720
|
|-
|9.1.0.79
|7.66.71.0
|3.0.0.102
|1.2.1
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7205.20100330,Zxs9p/iTunes64Setup.exe iTunes64Setup.exe]
|e6b5ddd1e6f21ddcf7117adec72e47701633b1cb
|98,400,552
|The first public release with [[K48ap|iPad]] support. Breaks [[blackra1n]] compatibility.
|-
|9.1.1.11
|7.66.71.0
|3.0.1.3
|1.2.1
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-8086.2010.04.27.BVFx2/iTunes64Setup.exe iTunes64Setup.exe]
|f33c2ab507844cec611b02202110f50f2baae302
|98,431,784
|
|-
|[http://support.apple.com/kb/DL1037 9.1.1.12]
|7.66.71.0
|3.0.1.3
|1.2.1
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-8204.20100427.AEueJ/iTunes64Setup.exe iTunes64Setup.exe]
|4037b2ca19af90641a1cde7ae9d4d698be94fe4c
|98,435,368
|
|-
|9.2.0.61
|7.66.73.0
|3.1.0.62
|1.3.0
|[http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iTunes9/061-7657.20100616.92msz/iTunes64Setup.exe iTunes64Setup.exe]
|fee32b82f0f9afbedfe37231b78b65083ca7c024
|97,512,248
|The first public release with [[N90ap|iPhone 4]] and [[iOS]] 4.0 support. Breaks [[Spirit]] compatibility. [https://twitter.com/iphone_dev/status/16335715713]
|-
|9.2.1.4
|7.66.73.0
|3.1.0.62
|1.3.0
|[http://appldnld.apple.com/iTunes9/061-8603.20100719.Dcfe4/iTunes64Setup.exe iTunes64Setup.exe]
|183f3ce3a543bd3ecba99e4a22a443a6c37f4729
|97,710,080
|
|-
|9.2.1.5
|7.66.73.0
|3.1.0.62
|1.3.0
|[http://appldnld.apple.com/iTunes9/061-8727.20100722.Cde32/iTunes64Setup.exe iTunes64Setup.exe]
|461d9cb0053d74f8b8d1804be3d4c50176a6036d
|97,713,960
|
|-
|10.0.0.68
|7.67.75.0
|3.2.0.47
|1.3.2
|[http://appldnld.apple.com/iTunes10/061-8245.20100901.Pr4rg/iTunes64Setup.exe iTunes64Setup.exe]
|8103e9a3da41789f57adcce7ef973e9812c02e6f
|75,743,528
|The first public release with [[N81ap|iPod touch 4G]] and [[iOS]] 4.1 support.
|-
|10.0.1.22
|7.68.75.0
|3.2.0.47
|1.3.2
|[http://appldnld.apple.com/iTunes10/061-9187.20100924.Bnhju/iTunes64Setup.exe iTunes64Setup.exe]
|274420f8131e5e99742092afcb3b89aff88367b6
|75,930,920
|
|-
|10.1.0.54
|7.68.75.0
|3.3.0.69
|1.4.0
|[http://appldnld.apple.com/iTunes10/061-9532.20101112.S3tpr/iTunes64Setup.exe iTunes64Setup.exe]
|441e061b5d74194cadd8fd7e9f79790f05d6b103
|82,821,416
|The first public release with AirPlay and [[iOS]] 4.2 support.
|-
|10.1.0.56
|7.68.75.0
|3.3.0.69
|1.4.1
|[http://appldnld.apple.com/iTunes10/061-9843.20101118.Txdse/iTunes64Setup.exe iTunes64Setup.exe]
|48f3f327a9654d1b54e958e1a335e1f591382181
|82,815,784
|
|-
|[http://support.apple.com/kb/DL1047 10.1.1.4]
|7.69.80.9
|3.3.0.69
|1.4.1
|[http://appldnld.apple.com/iTunes10/061-9927.20101215.Txsde/iTunes64Setup.exe iTunes64Setup.exe]
|c1eccffc393baefab6962e47a625cc1156c703b9
|82,812,200
| stops [[redns0w]] from working [http://twitter.com/#!/chronic/status/16624587940823040]
|}

Talk:SHSH Protocol

2010-12-19T14:59:32Z

Liamchat: /* Rewrite */

== Naming ==
Or should I better have named this '''TSS Protocol''' instead? -- [[User:Http|http]] 21:23, 15 August 2010 (UTC)

I think the current title is easier to tell it relates to shsh. I can't recall what tss stands for, and I think it would also be easier to find. [[User:Iemit737|Iemit737]] 21:36, 15 August 2010 (UTC)

== Implementation ==

How can I implement this on a Linux-based system? I have the request, but the 'telnet' and 'POST' commands don't work. --[[User:Dra1nerdrake|dra1nerdrake]] 22:40, 15 August 2010 (UTC)

Telnet should work. Just enter
telnet gs.apple.com 80
Then you get a HTTP connection. Then send the request and terminate with two CR/LF and you get the response. You can try with any other web page first, that should work the same way:
telnet www.google.com 80
Then:
GET / HTTP/1.0

And didn't [[User:Semaphore|semaphore]] release a unix version with some source code of [[TinyUmbrella]]? -- [[User:Http|http]] 23:49, 15 August 2010 (UTC)

Great, thanks, forgot the port number. He released unix TinyUmbrella, but it segfaults and I can't code in Java. --[[User:Dra1nerdrake|dra1nerdrake]] 04:18, 16 August 2010 (UTC)

EDIT: I can't seem to get it to work. I do:
telnet cydia.saurik.com 80
Then I do
POST /TSS/controller?action=2 HTTP/1.1
Accept: */*
Cache-Control: no-cache
Content-type: text/xml; charset="utf-8"
User-Agent: InetURL/1.0
Content-Length: 411
Host: gs.apple.com

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>@HostIpAddress</key>
<string>192.168.0.1</string>
<key>@HostPlatformInfo</key>
<string>darwin</string>
<key>@VersionInfo</key>
<string>3.8</string>
<key>@Locality</key>
<string>en_US</string>
<key>ApProductionMode</key>
<true/>
<key>ApECID</key>
<string>1430661561679</string>
<key>ApChipID</key>
<integer>35106</integer>
<key>ApBoardID</key>
<integer>2</integer>
<key>ApSecurityDomain</key>
<integer>1</integer>
<key>UniqueBuildID</key>
<data>
uvWKIop3L16LfQymS8IyiDZXXw0=
</data>
<key>AppleLogo</key>
<dict>
<key>Digest</key>
<data>
kK7SLPJWvaq+GAn9Dm/sG6aJjXg=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/applelogo.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAAHgdAADDPQY07wMJ1z2qVSjKuM4iqjhFKw==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>BatteryCharging</key>
<dict>
<key>Digest</key>
<data>
lvxtYniO/PKy46ZZV0YIe9ZeNt0=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/glyphcharging.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAAHhHAADPFoOCbp1jZBqTtFlCT3XE/qYkKw==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>BatteryCharging0</key>
<dict>
<key>Digest</key>
<data>
+o+lH7zqvh90+/cRCjNeSmTsNvU=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/batterycharging0.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAAPhEAADGKdYO2peJTZrXjeitEdUEMiC8hw==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>BatteryCharging1</key>
<dict>
<key>Digest</key>
<data>
u7NDP6MdWuEGT5Q4Qsm/OrsGTuE=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/batterycharging1.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAADhZAAAWwQq0Y75xTjOyQ9gxMVNrczF01g==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>BatteryFull</key>
<dict>
<key>Digest</key>
<data>
fTK7DLd3XJTHX9ywLJy97+VeUN0=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/batteryfull.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAADghAQDNQ9aqlsb/szaE/5Xh9OJF1WIhxw==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>BatteryLow0</key>
<dict>
<key>Digest</key>
<data>
rdMyyO2tICLCLzvxY05lirfWrzQ=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/batterylow0.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAALjVAAB7wuaDZva7tC1CGWUl4ATOZ7aUbA==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>BatteryLow1</key>
<dict>
<key>Digest</key>
<data>
ecfArQo2Cxly0h6D7iYT9TLKSSE=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/batterylow1.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAAPj2AAABqpmcEB9sOeTSulytXfC8KWZU9g==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>BatteryPlugin</key>
<dict>
<key>Digest</key>
<data>
MtXc08RsYs+6BMhD4kY0quNr/AU=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/glyphplugin.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAAHhDAABQJN3XJEBkNhnJqv6Ra2zBYJeuoQ==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>DeviceTree</key>
<dict>
<key>Digest</key>
<data>
ngiLrFM16Bg/BkPkmqf59h3H90c=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/DeviceTree.n18ap.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAALiDAABl290rfckYS+L3TjGRA7j8avdgDg==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>KernelCache</key>
<dict>
<key>Digest</key>
<data>
F978uz3zV6USmE34FMmm6xeQDwU=
</data>
<key>Info</key>
<dict>
<key>Path</key>
<string>kernelcache.release.s5l8922x</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAALhxPQDOpPhRPAe/mVP5J89iIhtaQEmJgg==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>LLB</key>
<dict>
<key>BuildString</key>
<string>iBoot-636.66~5</string>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/LLB.n18ap.RELEASE.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAADgxAQDkevEFsIGKqarjmv9T7avG8oGXhg==
</data>
</dict>
<key>NeedService</key>
<dict>
<key>Digest</key>
<data>
klkKn9XNikUb9bdtVU7b2yv9OYc=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/needservice.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAALhHAACO1eYCz8W9YsCQ5OT1T0CFHk+aHQ==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>OS</key>
<dict>
<key>Info</key>
<dict>
<key>Path</key>
<string>018-6152-014.dmg</string>
</dict>
</dict>
<key>RecoveryMode</key>
<dict>
<key>Digest</key>
<data>
DjD6JMIq4Qnnsay14L3jL+AdxPs=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/recoverymode.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAAPiyAABju7ZnxiRutww2vcmjIIlXG4KSAA==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>RestoreDeviceTree</key>
<dict>
<key>Digest</key>
<data>
ngiLrFM16Bg/BkPkmqf59h3H90c=
</data>
<key>Info</key>
<dict>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/DeviceTree.n18ap.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAALiDAABl290rfckYS+L3TjGRA7j8avdgDg==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>RestoreKernelCache</key>
<dict>
<key>Digest</key>
<data>
F978uz3zV6USmE34FMmm6xeQDwU=
</data>
<key>Info</key>
<dict>
<key>Path</key>
<string>kernelcache.release.s5l8922x</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAALhxPQDOpPhRPAe/mVP5J89iIhtaQEmJgg==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>RestoreLogo</key>
<dict>
<key>Digest</key>
<data>
kK7SLPJWvaq+GAn9Dm/sG6aJjXg=
</data>
<key>Info</key>
<dict>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/applelogo.s5l8922x.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAAHgdAADDPQY07wMJ1z2qVSjKuM4iqjhFKw==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>RestoreRamDisk</key>
<dict>
<key>Digest</key>
<data>
20tqZkEp1wApx1tz+ZCP38axvHE=
</data>
<key>Info</key>
<dict>
<key>Path</key>
<string>018-6145-014.dmg</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAAPjQuwAyMjwJWKpL0b8bUzYKajbbPEVuPA==
</data>
<key>Trusted</key>
<true/>
</dict>
<key>iBEC</key>
<dict>
<key>BuildString</key>
<string>iBoot-636.66~5</string>
<key>Info</key>
<dict>
<key>Path</key>
<string>Firmware/dfu/iBEC.n18ap.RELEASE.dfu</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAADjRAQDQA4xYDDo21pS9j57YWeGp6l/TvA==
</data>
</dict>
<key>iBSS</key>
<dict>
<key>BuildString</key>
<string>iBoot-636.66~5</string>
<key>Info</key>
<dict>
<key>Path</key>
<string>Firmware/dfu/iBSS.n18ap.RELEASE.dfu</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAADjRAQA2J3DDdRv+TmjaGodpeT634g/Haw==
</data>
</dict>
<key>iBoot</key>
<dict>
<key>Digest</key>
<data>
soCT6YL1cig/OKRvbam3igRcvaQ=
</data>
<key>Info</key>
<dict>
<key>IsFirmwarePayload</key>
<true/>
<key>Path</key>
<string>Firmware/all_flash/all_flash.n18ap.production/iBoot.n18ap.RELEASE.img3</string>
</dict>
<key>PartialDigest</key>
<data>
QAAAADihAgB46rf/axQHtuftGLR8SDpdOuOywA==
</data>
<key>Trusted</key>
<true/>
</dict>
</dict>
</plist>
<CR><LF>
<CR><LF>
But no dice. --[[User:Dra1nerdrake|dra1nerdrake]] 18:33, 16 August 2010 (UTC)
----
*I think your main problem is that your content is more than the 411 bytes that you specified.
*Where do you have the digest etc. values from?
*In my article I didn't write about the Info key you added. What is that?
-- [[User:Http|http]] 20:45, 16 August 2010 (UTC)

I copied the entire plist from a plist generated by [[idevicerestore]]. Digest values are from the buildmanifest.plist, at the root directory of the firmware. I ran it in debug mode (-d). What should I put in place of 411? --[[User:Dra1nerdrake|dra1nerdrake]] 02:12, 17 August 2010 (UTC)

It should be the size of the data you transfer. The data seems to be much longer than 411 bytes, I didn't count though. See section 14.13 [http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html here (RFC2616)]. --[[User:Http|http]] 03:56, 17 August 2010 (UTC)

Did it finally work for you? Also: Do you know how [[idevicerestore]] creates these Digest values? If you find that out, maybe you can update the article. -- [[User:Http|http]] 22:42, 24 August 2010 (UTC)

Curl is more suitable for LL HTTP, try something like:
<pre>
$ curl -v "http://cydia.saurik.com/TSS/controller?action=2" -X POST -d @1.plist -H "Host: gs.apple.com" -H "Content-type: text/xml; charset=utf8"
* About to connect() to cydia.saurik.com port 80 (#0)
* Trying 74.208.10.249... connected
* Connected to cydia.saurik.com (74.208.10.249) port 80 (#0)
> POST /TSS/controller?action=2 HTTP/1.1
> User-Agent: curl/7.19.7 (universal-apple-darwin10.0) libcurl/7.19.7 OpenSSL/0.9.8l zlib/1.2.3
> Accept: */*
> Host: gs.apple.com
> Content-type: text/xml; charset=utf8
> Content-Length: 8222
> Expect: 100-continue
>
< HTTP/1.1 100 Continue
< HTTP/1.1 200 OK
< Server: nginx/0.7.64
< Date: Thu, 26 Aug 2010 09:27:56 GMT
< Content-Type: text/plain
< Transfer-Encoding: chunked
< Connection: keep-alive
< Cache-Control: private, proxy-revalidate
<
STATUS=94&MESSAGE=This device isn't eligible for the requested build.
* Connection #0 to host cydia.saurik.com left intact
* Closing connection #0
</pre>
where 1.plist is a file with your plist
--[[User:Vasfed|Vasfed]] 09:41, 26 August 2010 (UTC)

== Request? ==
I'm still not understanding the telnet part of this. I can connect fine, but what exactly is the request that I have to send in order to get back a plist file with the SHSH blobs? --[[User:Cool name|Cool name]] 04:08, 16 August 2010 (UTC)
== Rewrite ==
Somebody should rewrite this article as it is partially wrong and the iPhone 4 needs more values but i cant seem to figure out all of them.--[[User:sn0wra1n|sn0wra1n]]
: it is not that different [http://pastebin.com/r8XNaVFY iphone 4 build manifest] and [http://pastebin.com/f2wv9y2m iphone 3gs build manifest] the only difference is

<key>BbChipID</key>
<string>0x50</string>
<key>BbSkeyId</key>
<data>
l6s0rAaT9bA7+3JtTiwlTxTicKE=
</data>
<key>EBL-Digest</key>
<data>B/rJD65edrIfdautbDNZaJuUfOU=</data>
<key>FlashPSI-PartialDigest</key>
<data>QAQAAMB6AACo7NXgZ2muHRNmX3gIXFDTaxOfUA==</data>
<key>FlashPSI-SecPackDigest</key>
<data>aV7n5VUpvSbMWA4ImMj4R0vfpmk=</data>
<key>FlashPSI-Version</key>
<string>0x00020008</string>
<key>Info</key>
<dict>
<key>Path</key>
<string>Firmware/ICE3_03.10.01_BOOT_02.08.Release.bbfw</string>
</dict>
<key>ModemStack-Digest</key>
<data>Bf9WSgSASGLSpQqRYdAFIt6Nce8=</data>
<key>ModemStack-Length</key>
<string>0x006f0934</string>
<key>ModemStack-SecPackDigest</key>
<data>sjmc0PFoajjg5fJLcLztnN27YVM=</data>
<key>RamPSI-PartialDigest</key>
<data>QAQAAMD5AACPnk/ZFyWqznQdTlQX95aC8NXjqQ==</data>
<key>RamPSI-Version</key>
<string>0x00020008</string>
</dict>
</plist>
--[[User:Liamchat|liamchat]] 13:12, 19 December 2010 (UTC)
:So if i want to create a SHSH request, i just copy the BuildManifest.plist and add the ECID value only? If no, is there any sample SHSH Request plist with the entire thing? --[[User:sn0wra1n|sn0wra1n]]
::yes but the baseband will also give its nonce key ( witch is required to validate the shsh of the baseband ) so you could cash the baseband shsh's but the nonce is what makes them work --[[User:Liamchat|liamchat]] 14:59, 19 December 2010 (UTC)

Talk:SHSH Protocol

2010-12-19T13:12:54Z

Liamchat: /* Rewrite */

2010-12-12T19:49:39Z

Liamchat: /* Basic discussion */

{{DISPLAYTITLE:User talk:liamchat}}
{{Talk Archive|Start to November 1, 2010|November 2, 2010 to present}}
== "Vandalism" ==
That isn't vandalism, it's just your iPhone that knew me. http://cl.ly/3YQy --[[User:Qwertyoruiop|Qwertyoruiop]] 19:04, 8 December 2010 (UTC)

== [[:/|Firmware]] ==
Please follow the standard format for folders:
<pre>
== Summary ==
A short summary of this folder

== Children ==
=== Folders ===
a list of folders using the ipfw template
=== Files ===
a list of files using the ipfw template

== Parents ==
List of parents... Example: [[/|Root]]/[[/var|var]]/[[/var/stash|stash]]/[[/var/stash/Applications.*****|Applications.*****]]
</pre>
and the fomat for files:
<pre>
== Summary ==
a short summary

== File Contents ==
says it all

== Parents ==
same as above
</pre>
--[[User:Balloonhead66|Balloonhead66]] 16:23, 5 December 2010 (UTC)

== Ban liamchat request ==
=== Basic discussion ===
There is a petition going on to ban liamchat from this wiki. I'm not sure how serious it is and nobody can vote for him there. So please comment here, pro and contra, preferrably with arguments. I think five users more against him with serious arguments would be enough. --[[User:Http|http]] 22:05, 17 November 2010 (UTC)
:??? Why would you ban him? I havn't seen anything wrong he has done... Please give more info... --[[User:Balloonhead66|Balloonhead66]] 22:15, 17 November 2010 (UTC)
::I don't understand it ether but I do help by filling in the missing keys and check the Current ones --[[User:Liamchat|liamchat]] 22:45, 17 November 2010 (UTC)
:::Just to make it clear: Nobody will be banned just because others don't like someone. For a ban we need a clear majority of people with good arguments. --[[User:Http|http]] 22:52, 17 November 2010 (UTC)
::::I'm really sorry for bringing this topic back up, anyways: http://www.ipetitions.com/petition/banliamchat/signatures?page=1. That's just a few people who want him banned, I'm sure there's more. {{unsigned|fike|17:59, 12 December 2010 (UTC)}}
:::::Fike, maybe we kicked that fag off the iphone world. In fact, on IRC, I did a rm -rf / to his Mac (lol), and then screwed up his kernel. Also, I think that after my discussion, he will never join any IRC channel anymore. --[[User:Qwertyoruiop|Qwertyoruiop]] 18:19, 12 December 2010 (UTC)
::::::whait if that was the case then why did i manage to rejoin irc after it crashed also rm -rf /* is the way to do real damage as for the iphone damage it was nice of you to waste you time making an app that no one else want's or will ever use, but what hurt the most was [http://yfrog.com/0iqss0p lying] and [http://yfrog.com/5dor7p spamming] --[[User:Liamchat|liamchat]] 18:39, 12 December 2010 (UTC)
:::::::Liam, as iH8sn0w pointed out, the iOS (note: iOS, not OSX) kernel blocks rm -rf / but not rm -rf /*. On MacOSX this doesn't happen. And for the "spam" i'm LOLLING, as you copy/paste pages like [[Seczone]] on IRC, and I remember when you pasted EVERY bb command of the 1.59.00 BasebandFirmwarre on IRC. GTFO, bye.--[[User:Qwertyoruiop|Qwertyoruiop]] 19:27, 12 December 2010 (UTC)
::::::::Also for the "lies", that is called "Social Engineering", and i'm laughing @ the fact that you installed a MOBILESUBSTRATE DYLIB thinking that it was a jailbreak. {{unsigned|Qwertyoruiop|19:29, 12 December 2010 (UTC)}}
:::::::::how am i suppose to know if a .deb has dependancies and where did i get the 1.15.00 baseband command list because that is not evan on the wiki --[[User:Liamchat|liamchat]] 19:49, 12 December 2010 (UTC)
:::Please give evidence of deleting / filling in wrong data. Single mistakes can happen. And his problems on IRC are unrelated to this wiki. --[[User:Http|http]] 21:55, 18 November 2010 (UTC)
:I'm someone who wants him banned. My name is Fike here on the net. He constantly spams IRC networks with all types of shit... I had quite a job getting rid of him from Sauriks server, but I did it. He alsdo takes other peoples nicks, for instance "cj"'s nick was taken on sauriks server. cj couldn't ghost it, because services weren't online. And I've heard from numerous people he adds inaccurate information here on the wiki. My 2 cents. --[[User:Fike|Fike]] 20:59, 20 November 2010 (UTC)
::Lets not forget that you spammed my [http://cole.freehostingcloud.com/wiki/Cole_Stuff wiki]... --[[User:Balloonhead66|Balloonhead66]] 23:28, 20 November 2010 (UTC)
:::Yes, indeed I did. And I am sorry for that, really. Liam keeps going on about "you spnmed balloonheads wiki" and that pisses me off. If you could talk to him, I'd appreciate it. That's an awesome wiki you have there too, well kept ;). Better than my hosting providers wiki, where I am sysop. {{unsigned|fike|17:59, 12 December 2010 (UTC)}}

User talk:Liamchat

2010-12-12T18:39:24Z

Liamchat: why did you evan make that