The iPhone Wiki - User contributions [en]

Limera1n

2010-10-10T08:32:28Z

Pwnage: /* RC1 beta 1 */

This is geohot's [[jailbreak]] utility. It uses his undisclosed exploit, along with comex's userland exploit, to achieve an [[untethered jailbreak]] on newer devices.
* [[N88ap|iPhone 3GS]] (New [[bootrom]] is now working with Beta 3)
* [[N90ap|iPhone 4]]
* [[N72ap|iPod touch 2G]] (support announced, not released)
* [[N18ap|iPod touch 3G]]
* [[N81ap|iPod touch 4G]]
* [[K48ap|iPad]]

It has been demonstrated multiple times by geohot, using blog posts on his now private blog. Geohot [http://1.bp.blogspot.com/_NJ4JFBfr1tY/TDgkAsTQEmI/AAAAAAAAAcw/ZNHDxMNNL4Y/s1600/iphone4.png showed off a high-res picture of Cydia on an iPhone 4]. He [http://www.youtube.com/watch?v=__TR86PLiHw displayed an iPod touch 3G with an untethered jailbreak] that met MuscleNerd's requirements for a good video. In addition, he took a [http://4.bp.blogspot.com/_NJ4JFBfr1tY/S7_OvGMqJMI/AAAAAAAAAcE/R5WLrCizGw0/s1600/ipad_jb.jpg picture of Cydia and blackra1n icons on his iPad's SpringBoard].

limera1n was released on October 9, 2010, delaying the release of [[greenpois0n]]. It only supports Windows at the moment and a large number of devices have issues.

== Credit ==
[[User:geohot|geohot]]

==Changelog==
===RC1 beta 1 (md5: 2f2b09a6ed5c5613d5361d8a9d0696b6)===
First release.

===RC1 beta 2 (md5: a70dccb3dfc0e505687424184dc3d1ce)===
Fixed kernel patching magic. Rerun BETA2+ over BETA1.

===RC1 beta 3 (md5: 81730090f7de1576268ee8c2407c3d35)===
Fixed an issue with [[N88ap|iPhone 3GS]] ([[iBoot-359.3.2|new bootrom]])

===RC1 beta 4 (md5: d901c4b3a544983f095b0d03eb94e4db)===
Uninstall fixed, respring fixed

== Technical Information ==
=== Basics ===
* This does not use [[SHAtter]].
* This uses a [[bootrom]] exploit to achieve the tethered jailbreak and unsigned code execution.
* This uses a userland exploit to make the jailbreak [[Untethered jailbreak|untethered]], which [[User:Geohot|geohot]] obtained under questionable circumstances from [[User:Comex|comex]].

=== Exploits ===
limera1n uses an undisclosed [[bootrom]] exploit.

=== Process ===
The jailbreak appears to execute something like the following (in no particular order):
* In recovery1,
"setenv debug-uarts 1
setenv auto-boot false
saveenv"
* In DFU, it uploads a payload.
* In recovery2, it uploads another payload and its ramdisk.

== Controversy ==
The release of this jailbreak is specifically designed to pressure [[Chronic Dev]] into implementing the exploits in limera1n into [[greenpois0n]]. Now that geohot has released limera1n, [[SHAtter]] can't be released without major negative backlash from other hackers, as this would burn a bootrom exploit.

== External Links ==
* [http://loadingchanges.com/wp-content/uploads/2010/10/limetime.jpg Picture of limera1n in action]
* [http://limera1n.com/ Actual Site]
* [http://theiphonewiki.com/limera1n Mirror Site]
* [http://www.twitlonger.com/show/6d31jr Info from cdevwill]
* [http://www.mediafire.com/?5sovoo41rbcdspw Limera1n RC Beta2 Dump]

Limera1n

2010-10-10T08:31:08Z

Pwnage: /* RC1 beta 2 */

This is geohot's [[jailbreak]] utility. It uses his undisclosed exploit, along with comex's userland exploit, to achieve an [[untethered jailbreak]] on newer devices.
* [[N88ap|iPhone 3GS]] (New [[bootrom]] is now working with Beta 3)
* [[N90ap|iPhone 4]]
* [[N72ap|iPod touch 2G]] (support announced, not released)
* [[N18ap|iPod touch 3G]]
* [[N81ap|iPod touch 4G]]
* [[K48ap|iPad]]

It has been demonstrated multiple times by geohot, using blog posts on his now private blog. Geohot [http://1.bp.blogspot.com/_NJ4JFBfr1tY/TDgkAsTQEmI/AAAAAAAAAcw/ZNHDxMNNL4Y/s1600/iphone4.png showed off a high-res picture of Cydia on an iPhone 4]. He [http://www.youtube.com/watch?v=__TR86PLiHw displayed an iPod touch 3G with an untethered jailbreak] that met MuscleNerd's requirements for a good video. In addition, he took a [http://4.bp.blogspot.com/_NJ4JFBfr1tY/S7_OvGMqJMI/AAAAAAAAAcE/R5WLrCizGw0/s1600/ipad_jb.jpg picture of Cydia and blackra1n icons on his iPad's SpringBoard].

limera1n was released on October 9, 2010, delaying the release of [[greenpois0n]]. It only supports Windows at the moment and a large number of devices have issues.

== Credit ==
[[User:geohot|geohot]]

==Changelog==
===RC1 beta 1===
First release.
===RC1 beta 2 (md5: a70dccb3dfc0e505687424184dc3d1ce)===
Fixed kernel patching magic. Rerun BETA2+ over BETA1.

===RC1 beta 3 (md5: 81730090f7de1576268ee8c2407c3d35)===
Fixed an issue with [[N88ap|iPhone 3GS]] ([[iBoot-359.3.2|new bootrom]])

===RC1 beta 4 (md5: d901c4b3a544983f095b0d03eb94e4db)===
Uninstall fixed, respring fixed

== Technical Information ==
=== Basics ===
* This does not use [[SHAtter]].
* This uses a [[bootrom]] exploit to achieve the tethered jailbreak and unsigned code execution.
* This uses a userland exploit to make the jailbreak [[Untethered jailbreak|untethered]], which [[User:Geohot|geohot]] obtained under questionable circumstances from [[User:Comex|comex]].

=== Exploits ===
limera1n uses an undisclosed [[bootrom]] exploit.

=== Process ===
The jailbreak appears to execute something like the following (in no particular order):
* In recovery1,
"setenv debug-uarts 1
setenv auto-boot false
saveenv"
* In DFU, it uploads a payload.
* In recovery2, it uploads another payload and its ramdisk.

== Controversy ==
The release of this jailbreak is specifically designed to pressure [[Chronic Dev]] into implementing the exploits in limera1n into [[greenpois0n]]. Now that geohot has released limera1n, [[SHAtter]] can't be released without major negative backlash from other hackers, as this would burn a bootrom exploit.

== External Links ==
* [http://loadingchanges.com/wp-content/uploads/2010/10/limetime.jpg Picture of limera1n in action]
* [http://limera1n.com/ Actual Site]
* [http://theiphonewiki.com/limera1n Mirror Site]
* [http://www.twitlonger.com/show/6d31jr Info from cdevwill]
* [http://www.mediafire.com/?5sovoo41rbcdspw Limera1n RC Beta2 Dump]

Limera1n

2010-10-10T08:30:27Z

Pwnage: /* RC1 beta 3 */

This is geohot's [[jailbreak]] utility. It uses his undisclosed exploit, along with comex's userland exploit, to achieve an [[untethered jailbreak]] on newer devices.
* [[N88ap|iPhone 3GS]] (New [[bootrom]] is now working with Beta 3)
* [[N90ap|iPhone 4]]
* [[N72ap|iPod touch 2G]] (support announced, not released)
* [[N18ap|iPod touch 3G]]
* [[N81ap|iPod touch 4G]]
* [[K48ap|iPad]]

It has been demonstrated multiple times by geohot, using blog posts on his now private blog. Geohot [http://1.bp.blogspot.com/_NJ4JFBfr1tY/TDgkAsTQEmI/AAAAAAAAAcw/ZNHDxMNNL4Y/s1600/iphone4.png showed off a high-res picture of Cydia on an iPhone 4]. He [http://www.youtube.com/watch?v=__TR86PLiHw displayed an iPod touch 3G with an untethered jailbreak] that met MuscleNerd's requirements for a good video. In addition, he took a [http://4.bp.blogspot.com/_NJ4JFBfr1tY/S7_OvGMqJMI/AAAAAAAAAcE/R5WLrCizGw0/s1600/ipad_jb.jpg picture of Cydia and blackra1n icons on his iPad's SpringBoard].

limera1n was released on October 9, 2010, delaying the release of [[greenpois0n]]. It only supports Windows at the moment and a large number of devices have issues.

== Credit ==
[[User:geohot|geohot]]

==Changelog==
===RC1 beta 1===
First release.
===RC1 beta 2===
Fixed kernel patching magic. Rerun BETA2+ over BETA1.
===RC1 beta 3 (md5: 81730090f7de1576268ee8c2407c3d35)===
Fixed an issue with [[N88ap|iPhone 3GS]] ([[iBoot-359.3.2|new bootrom]])

===RC1 beta 4 (md5: d901c4b3a544983f095b0d03eb94e4db)===
Uninstall fixed, respring fixed

== Technical Information ==
=== Basics ===
* This does not use [[SHAtter]].
* This uses a [[bootrom]] exploit to achieve the tethered jailbreak and unsigned code execution.
* This uses a userland exploit to make the jailbreak [[Untethered jailbreak|untethered]], which [[User:Geohot|geohot]] obtained under questionable circumstances from [[User:Comex|comex]].

=== Exploits ===
limera1n uses an undisclosed [[bootrom]] exploit.

=== Process ===
The jailbreak appears to execute something like the following (in no particular order):
* In recovery1,
"setenv debug-uarts 1
setenv auto-boot false
saveenv"
* In DFU, it uploads a payload.
* In recovery2, it uploads another payload and its ramdisk.

== Controversy ==
The release of this jailbreak is specifically designed to pressure [[Chronic Dev]] into implementing the exploits in limera1n into [[greenpois0n]]. Now that geohot has released limera1n, [[SHAtter]] can't be released without major negative backlash from other hackers, as this would burn a bootrom exploit.

== External Links ==
* [http://loadingchanges.com/wp-content/uploads/2010/10/limetime.jpg Picture of limera1n in action]
* [http://limera1n.com/ Actual Site]
* [http://theiphonewiki.com/limera1n Mirror Site]
* [http://www.twitlonger.com/show/6d31jr Info from cdevwill]
* [http://www.mediafire.com/?5sovoo41rbcdspw Limera1n RC Beta2 Dump]