The iPhone Wiki - User contributions [en]

MemoryMuncher

2018-01-22T12:36:08Z

Q3hardcore: nicer

{{internal software}}

MemoryMuncher is an internal-use app that is used to test a device's RAM. It loads a specific amount of MB/sec. into the memory until it causes the device to crash. It works on iPhone, iPad and iPod touch from iOS 2.0 up to 9.0.

[[Image:Mm.PNG|thumb|Screenshot from a production iPhone 3G[s] (due to not being able to take screenshots on [[Prototypes|prototype devices]] without the use of [[ScreenShotr]])]]

{{stub|software}}
[[Category:Apple Internal Apps]]

Installer (Internal App)

2018-01-22T12:25:47Z

Q3hardcore: diverge from fiction

== Summary ==
[[Image:AppleInstaller_Icon.png|thumb|Installer icon]]
[[Image:AppleInstaller02.jpg|thumb|Installer on Smart Sign iPad]]
[[Image:AppleInstaller03.jpg|thumb|Installer opened]]
'''Installer''' was found on the "Smart Sign" iPads inside Apple Stores. One would login with [[AppleConnect_(SSO)|AppleConnect]] credentials to use. It was a web application used to install Smart Sign. Smart Sign is discontinued, however its infrastructure was re-purposed and is now used to distribute other apps, such as Pricing.

== Links ==
[http://sscontent.apple.com/ Add Installer to Home Screen] (Click Bookmarks, then Click Add to Home Screen)

Note: link no longer works.

[[Category:Apple Internal Apps]]

Apple Internal Apps

2017-11-29T14:49:37Z

Q3hardcore: /* Apps known to be used by Apple Employees */ remove link to obselete page

These are apps that are used for testing. These vary from internal testing apps for the next iPhone to Apple Store Employee apps.
In general, these apps are launchable from [[SpringBoard]], but some are not, such as when there is no Springboard. In that case, look at the non-gui testing apps at [[SwitchBoard: /usr/local/bin]].

== Internal diagnostic apps known from beta firmwares and prototypes ==
* [[Ad Tester]]
* [[APSTester]]
* [[AProxMeter]]
* [[AirPlayTester]]
* [[AirPrint Utility]]
* [[AppleNetworkDiagnostics]]
* [[BattleJack]]
* [[BonFire]]
* [[CompareDrawImage]]
* [[CompareTableView-Compatibility]]
* [[CompareTableView-Modal]]
* [[CompareTableView-PageSheet]]
* [[CompareTableView]]
* [[CooLtool]]
* [[CoreMotionToolbox]]
* [[Developer app]]
* [[DuetViewer]]
* [[E911Tester]]
* [[EABasic]]
* [[EAPerf]]
* [[FieldScout]]
* [[FigCam]]
* [[FigCamAV]]
* [[FillRateTester]]
* [[Firebolt]]
* [[Flytrap]]
* [[GameStore]]
* [[GKRoster]]
* [[GKTalk]]
* [[GKTank]]
* [[GKTankHD]]
* [[GLReplayer]]
* [[GameKitTester]]
* [[GeoFence]]
* [[GeoFencer]]
* [[GSSTestApp]]
* [[HESTest]]
* [[IAPViewer]]
* [[iDTracer]]
* [[Inferno (utility)|Inferno]]
* [[IORegViewer]]
* [[Key Recorder]]
* [[KeyboardTester]]
* [[Link Keys]]
* [[MALogger]]
* [[MAZER]]
* [[MIDINetSetup]]
* [[MTLocTester]]
* [[MULe]]
* [[Magneto]]
* [[MesaUtility]]
* [[MesaDemo]]
* [[MemoryMuncher]]
* [[MoviePlayerTester]]
* [[MobileOracle]]
* [[MobileRadar]]
* [[MoPED]]
* [[NetGauge]]
* [[NotificationGenerator]]
* [[Notifications]]
* [[Null]]
* [[Onword]]
* [[PrintFont]]
* [[PrintPhoto]]
* [[PrintStressTest]]
* [[PSTest]]
* [[PurpleConsole]]
* [[QRCode]]
* [[Radar]]
* [[RemoteUITest]]
* [[SWU Tester]]
* [[Sally]]
* [[SalesCall]]
* [[ScreenShotr]]
* [[Screening Tool]]
* [[Scouting]]
* [[Scrapple]]
* [[SearchPerfTest]]
* [[SecurityTests]]
* [[SiriDataCollector]]
* [[SimpleApp]]
* [[SpinningiPhoneApp]]
* [[SportsSpeaker]]
* [[TPSReports]]
* [[TVOutTester]]
* [[Texterciser HD]]
* [[Texterciser]]
* [[TouchFighter]]
* [[TouchFighter 2]]
* [[TwitterTesterInternal]]
* [[Typology]]
* [[WiFi Survey]]
* [[WiForReal]]
* [[ZoomPan]]
* [[iTester]]
* [[jcam]]

== SwitchBoard Apps ==
* [[ATCommand]]
* [[BatterySet]]
* [[BurnIn]]
* [[BillBoard.app]]
* [[CameraFA]]
* [[GrapeCal]]
* [[Internal Apps]]
* [[LcdUTest]]
* [[Operator]]
* [[Reliability]]
* [[Rumble]]
* [[Soundwave]]
* [[SkankPhone]]
* [[SwitchBoard.app]] - launches other apps, similiar to [[SpringBoard]]
* [[ThermalDOE]]
* [[WiPASmini]]
* [[MesaCal]]
* [[Ninten]]
* [[NonUIConsoleViewer]]
* [[dtxCaliente]]
* [[SkankBarcodeDisplay]]
* [[LCDMura]]
* [[LCMFlicker]]
* [[Ness]]
* [[Pyro]]
* [[Sightglass]]
* [[Spelunx]]
* [[USBHost]]

== Command Line Tools ==
* [[SwitchBoard: /usr/local/bin]]
* [[BasebandStressTests]]

== Preference bundles ==
* [[ABLE]]
* [[AirPlayInternalSettings]]
* [[AirTrafficInternalSettings]]
* [[ApplePTPdInternalSettings]]
* [[AssistantInternalSettings]]
* [[BTInternal]]
* [[Carrier Settings]]
* [[ConferenceInternalSettings]]
* [[CoreAudioInternalSettings]]
* [[CoreMediaInternalSettings]]
* [[Cypress Settings]]
* [[DAInternalSettings]]
* [[DuetPanel]]
* [[FreezeInternalSettings]]
* [[GameKitInternalSettings]]
* [[Internal Settings]]
* [[MadridInternalSettings]]
* [[Mesa Settings]]
* [[MesaInternalSettings]]
* [[MobileBackupInternalSettings]]
* [[MobileSafariInternalSettings]]
* [[MobileSlideShowInternalSettings]]
* [[MobileSoftwareUpdateInternalSettings]]
* [[NFInternalSettings]]
* [[NikeInternalSettings]]
* [[PrintKitInternalSettings]]
* [[PurpleBuddyInternalSettings]]
* [[ScoutingSettings]]
* [[ThermalMonitorInternalSettings]]
* [[ViceroyTraceInternalSettings]]
* [[VoiceMemosInternalSettings]]
* [[WiFiInternalSettings]]
* [[WRMSettings]]
* [[iAdInternalSettings]]
* [[iPodInternalSettings]]
* [[iPodOutInternalSettings]]
* [[iTunesStoreInternalSettings]]

== Location bundles ==
* [[FenceTester]]
* [[LocationMonitor]]
* [[CoreAutomationDevice]]
* [[WirelessStressLocation]]

== Carrier Settings ==
* [[CoreAudioCarrierSettings]]
* [[WRMSettingsForCarriers]]

== Apps known to be used by Apple Employees ==
[[File:Apple Internal Apps.png|thumb|some internal Apple apps]]
* [[AppleConnect (Application)|AppleConnect]]
* [[Chatterbox]]
* [[Concierge]]
* [[Conference App]]
* [[Daily Download]]
* [[Apple Employee Directory|Directory]] - Apple's employee directory
* [[EasyPay]]
* [[Espresso]]
* [[Enroll iPad]]
* [[Installer (Internal App)|Installer]]
* [[iOS Diagnostics (Internal App)|iOS Diagnostics]]
* [[iRepair]]
* [[MobileGenius]]
* [[Pickup]]
* [[RNNmobile]]
* [[Radar]]
* [[Re-Enroll]]
* [[RetailMe]]
* [[Red Zone Mobile|RZM]]
* [[Receipts]]
* [[Switchboard (App Store)|Switchboard]] - functions as an internal App Store for Apple employees
* [[Scout]]
* [[Self Service]]
* [[SSP]]
* [[Smart Sign]]
* [[Touch ID.app|Touch ID]]
* [[UniBox]]

== Miscellaneous ==
* [[image3maker (Internal Tool)|image3maker]]

[[Category:Apple Internal Apps]]

UniBox

2017-11-29T14:31:25Z

Q3hardcore: update gallery link

[[Image:UniBox_app.png‎|thumb|UniBox Icon]]
== Summary ==
The UniBox app was first seen on [https://bgr.com/gallery/apple-iphone-4-t-mobile/ screens from a development iPhone 4] for the US T-Mobile 3G Network. It is a communication tool with corporate voicemail and serves as a centralized notification Inbox. Unibox allows notifications to be received from a variety of systems, including eApproval, Merlin, Espresso, JV Workflow, iCas, iProject, Pathfinder, AC PO Approval and Corporate Voicemail. Users only receive notifications for applications that they are granted access to. UniBox is also available for OS X.

[[Category:Apple Internal Apps]]

== Version History ==
* 2.0
* 2.0.2 (released 26 May 2011): Amazing new features
* 2.0.3 (released 24 June 2011): amazing features
* 2.2.1
* 2.4
* 2.5.1.8 (current 'production' version)
* 2.5.2 (current 'pre-release' version)

== Gallery ==
<gallery widths="175px" heights="175px" perrow="4">
Image:UniBox 01.png|Inside UniBox
Image:unibox_7.png|UniBox Settings
Image:UniBox_usg.png|UniBox Usage Info
Image:UniBox_prov.png|UniBox Provisioning Profile
Image:UniBox.jpg|UniBox
Image:UniBoxOpen.jpg|UniBox opened
Image:UniBoxOptions.jpg|UniBox Options
</gallery>

Self Service

2017-11-29T14:19:54Z

Q3hardcore: fix stub

== Summary ==
[[Image:SelfService01.png|thumb|Self Service icon]]
'''Self Service''' is an app installed on the [[Smart Sign]] iPad displays at Apple Stores. Smart Sign iPads show product specs in Apple Stores. Self Service is from JAMF Software. It's part of the Casper Suite of applications. Basically, an administrator maintains apps, settings, policies, etc. on a server, sets them as "Self Service" and they'll show up in the app and then the end-user can install/reinstall them whenever they want without having to have admin privileges - this is beneficial for corporate use.

== External Links ==
* [http://www.jamfsoftware.com/products/casper-suite Official Site]

{{stub|software}}
[[Category:Apple Internal Apps]]

Enroll iPad

2017-11-29T14:18:00Z

Q3hardcore: clarify

== Summary ==
[[Image:EnrollIpad01.png|thumb|Enroll iPad]]
[[File:EnrollIPad01.jpg|thumb|left|Enroll iPad]]
'''Enroll iPad''' is a Safari bookmark used by Apple Store employees. Tapping on it takes you to Safari and opens https://daw.apple.com/cgi-bin/WebObjects/DSAuthWeb.woa/wa (AppleConnect webpage) with an unknown query string.
[[Category:Apple Internal Apps]]
{{stub|software}}

File:Concierge icon@2x.png

2017-11-29T14:14:05Z

Q3hardcore: Q3hardcore uploaded a new version of File:Concierge icon@2x.png

IOSUpdater.app

2017-11-29T14:01:49Z

Q3hardcore: fix?

{{lowercase}}
#REDIRECT [[Trampoline]]

IOSUpdater.app

2017-11-29T14:00:54Z

Q3hardcore: create redirect

#REDIRECT [[Trampoline]]
{{lowercase}}

NonUI builds

2017-11-27T13:56:07Z

Q3hardcore: add iPad Air

{{see also|Beta Firmware}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
[[File:newsblogo.png|thumb|125px|right|"Skankwerk" logo on 7.x and up]]
[[File:oldswblogo.png|thumb|125px|left|"Skankwerk" logo on 6.x and below]]
[[File:newswblogo.jpg|thumb|125px|right|Prototype showing Skankwerk logo during boot]]
[[File:oldswblogodevice.jpg|thumb|125px|left|Prototype showing Skankwerk logo during boot]]
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* Contain DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Contain DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Contain Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Have the /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed both IPSWs and "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).
== Some interesting facts about factory firmwares ==

* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one.
Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and most likely others. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on [https://en.wikipedia.org/wiki/Skunkworks_project Wikipedia].

== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="3" | Alpine
| 03.06.01_G<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| 04.02.13_G
| -
|-
| rowspan="1" | 1.1.2
| [[Alpine 3B48|3B48]]
| 04.02.13_G
| -
|-
| rowspan="2" | 1.1.3
| [[Alpine 4A102a|4A102a]]
| Alpine
| 04.04.05_G
| -
|-
|}

== [[N82AP|iPhone 3G]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 05.16.05
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 05.16.06
| -
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 4.0
| [[Apex 8A133|8A133]]
| Apex?
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 04.12.01
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 04.12.02
| -
|-
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 1.0.10
| -
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
| SundanceNanshan
| 2.0.0.2
| -
|}

== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A23941s|10A23941s]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A316|10A316]]
| Sundance
| 1.7.00
| -
|-
|}
== [[iPhone 5c]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0
| [[Innsbruck 11A93840l|11A93840l]]
| Innsbruck?
| ?
| -
|}
== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| 1.00.05
| -
|-
| [[InnsbruckNanshan 11A24581c|11A24581c]]
| InnsbruckNanshan
| ?
| -
|-
| [[Innsbruck 11A93840f|11A93840f]]
| Innsbruck?
| ?
| Originally found on a [https://forums.macrumors.com/threads/unusual-iphone-possible-engineering-sample-os.1885755/ Macrumors] post.
|-
|}

== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 8.0
| [[Okemo 12A22121a|12A22121a]]
| Okemo?
| ?
| -
|-
| [[Okemo 12A93311h|12A93311h]]
| Okemo?
| 1.00.01
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| 1.00.05
| This build is pretty obscure, but it is in the wild.
|-
| [[OkemoAni 12A93651a|12A93651a]]
| OkemoAni
| 1.00.05
| -
|-
| [[OkemoAni 12A93651b|12A93651b]]
| OkemoAni
| 1.00.05
| -
|-
|}

== [[iPhone 6s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 9.0
| [[Monarch 13A22120w|13A22120w]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93051l|13A93051l]]
| Monarch?
| 0.37.08
| -
|-
| [[Monarch 13A93420d|13A93420d]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93420m|13A93420m]]
| Monarch?
| 1.00.05
| -
|-
|}

== [[D10AP|iPhone 7]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 10.0
| [[Whitetail 14A22580n|14A22580n]]
| Whitetail?
| ?
| -
|-
| [[Whitetail 14A22881a|14A22881a]]
| Whitetail?
| ?
| -
|-
| [[Whitetail 14A92340t|14A92340t]]
| Whitetail?
| ?
| -
|-
| [[WhitetailAni 14A93012r|14A93012r]]
| WhitetailAni
| ?
| -
|-
| [[WhitetailAni 14A93013a|14A93013a]]
| WhitetailAni
| ?
| -
|-
|}

== [[D20AP|iPhone 8]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 11.0
| [[TigrisAni 15A93261h|15A93261h]]
| TigrisAni
| ?
| -
|}

== [[K48AP|iPad]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.2
| [[Wildcat 7B3341e|7B3341e]]
| Wildcat?
| ?
| -
|-
| [[Wildcat 7B5286a|7B5286a]]
| Wildcat?
| ?
| Found by SonnyDickson, documented on [https://9to5mac.com/2017/05/15/ipad-1-prototype/ 9to5mac]
|-
|}

== [[K93AP|iPad 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.3
| [[Durango 8F3178a|8F3178a]]
| Durango?
| ?
| -
|-
| [[Durango 8F3191d|8F3191d]]
| Durango?
| ?
| -
|-
|}

== [[P106AP|iPad mini]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 6.0
| [[SundanceTaosTianshan 10A63970v|10A63970v]]
| SundanceTaosTianshan
| ?
| -
|-
| [[SundanceTaosTianshan 10A63971b|10A63971b]]
| SundanceTaosTianshan
| ?
| -
|-
|}

== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| ?
| -
|}

== [[J96AP|iPad mini 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 8.4
| [[Donner 12H60160o|12H60160o]]
| Donner?
| ?
| -
|-
| 9.0
| [[Monarch 13A62950o|13A62950o]]
| Monarch?
| ?
| -
|-
|}

== [[J71AP|iPad Air]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.1
| [[Innsbruck 11B34640l|11B34640l]]
| Innsbruck?
| ?
| -
|}

== [[N18AP|iPod touch (3rd generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 3.1
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| ?
| -
|-
| [[Inferno 7C1095a|7C1095a]]
| Inferno?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
|}

== [[N81AP|iPod touch (4th generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|}

[[Category:Firmware]]

NonUI builds

2017-11-26T12:08:28Z

Q3hardcore: add logo

{{see also|Beta Firmware}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* Contain DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Contain DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Contain Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Have the /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed both IPSWs and "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).
[[File:oldswblogo.png|thumb|125px|right|SwitchBoard logo on 6.x and below]]
[[File:newsblogo.png|thumb|125px|right|SwitchBoard logo on 7.x and up]]
[[File:newswblogo.jpg|thumb|125px|right|photo showing SwitchBoard logo during boot]]
== Some interesting facts about factory firmwares ==

* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one.
Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and probably some other. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on [https://en.wikipedia.org/wiki/Skunkworks_project Wikipedia].

== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="3" | Alpine
| 03.06.01_G<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| 04.02.13_G
| -
|-
| rowspan="1" | 1.1.2
| [[Alpine 3B48|3B48]]
| 04.02.13_G
| -
|-
| rowspan="2" | 1.1.3
| [[Alpine 4A102a|4A102a]]
| Alpine
| 04.04.05_G
| -
|-
|}

== [[N82AP|iPhone 3G]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 05.16.05
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 05.16.06
| -
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 4.0
| [[Apex 8A133|8A133]]
| Apex?
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 04.12.01
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 04.12.02
| -
|-
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 1.0.10
| -
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
| SundanceNanshan
| 2.0.0.2
| -
|}

== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A23941s|10A23941s]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A316|10A316]]
| Sundance
| 1.7.00
| -
|-
|}
== [[iPhone 5c]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0
| [[Innsbruck 11A93840l|11A93840l]]
| Innsbruck?
| ?
| -
|}
== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| 1.00.05
| -
|-
| [[InnsbruckNanshan 11A24581c|11A24581c]]
| InnsbruckNanshan
| ?
| -
|-
| [[Innsbruck 11A93840f|11A93840f]]
| Innsbruck?
| ?
| Originally found on a [https://forums.macrumors.com/threads/unusual-iphone-possible-engineering-sample-os.1885755/ Macrumors] post.
|-
|}

== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 8.0
| [[Okemo 12A22121a|12A22121a]]
| Okemo?
| ?
| -
|-
| [[Okemo 12A93311h|12A93311h]]
| Okemo?
| 1.00.01
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| 1.00.05
| This build is pretty obscure, but it is in the wild.
|-
| [[OkemoAni 12A93651a|12A93651a]]
| OkemoAni
| 1.00.05
| -
|-
| [[OkemoAni 12A93651b|12A93651b]]
| OkemoAni
| 1.00.05
| -
|-
|}

== [[iPhone 6s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 9.0
| [[Monarch 13A22120w|13A22120w]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93051l|13A93051l]]
| Monarch?
| 0.37.08
| -
|-
| [[Monarch 13A93420d|13A93420d]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93420m|13A93420m]]
| Monarch?
| 1.00.05
| -
|-
|}

== [[D10AP|iPhone 7]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 10.0
| [[Whitetail 14A22580n|14A22580n]]
| Whitetail?
| ?
| -
|-
| [[Whitetail 14A22881a|14A22881a]]
| Whitetail?
| ?
| -
|-
| [[Whitetail 14A92340t|14A92340t]]
| Whitetail?
| ?
| -
|-
| [[WhitetailAni 14A93012r|14A93012r]]
| WhitetailAni
| ?
| -
|-
| [[WhitetailAni 14A93013a|14A93013a]]
| WhitetailAni
| ?
| -
|-
|}

== [[D20AP|iPhone 8]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 11.0
| [[TigrisAni 15A93261h|15A93261h]]
| TigrisAni
| ?
| -
|}

== [[K48AP|iPad]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.2
| [[Wildcat 7B3341e|7B3341e]]
| Wildcat?
| ?
| -
|-
| [[Wildcat 7B5286a|7B5286a]]
| Wildcat?
| ?
| Found by SonnyDickson, documented on [https://9to5mac.com/2017/05/15/ipad-1-prototype/ 9to5mac]
|-
|}

== [[K93AP|iPad 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.3
| [[Durango 8F3178a|8F3178a]]
| Durango?
| ?
| -
|-
| [[Durango 8F3191d|8F3191d]]
| Durango?
| ?
| -
|-
|}

== [[P106AP|iPad mini]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 6.0
| [[SundanceTaosTianshan 10A63970v|10A63970v]]
| SundanceTaosTianshan
| ?
| -
|-
| [[SundanceTaosTianshan 10A63971b|10A63971b]]
| SundanceTaosTianshan
| ?
| -
|-
|}

== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| ?
| -
|}

== [[J96AP|iPad mini 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 8.4
| [[Donner 12H60160o|12H60160o]]
| Donner?
| ?
| -
|-
| 9.0
| [[Monarch 13A62950o|13A62950o]]
| Monarch?
| ?
| -
|-
|}

== [[N18AP|iPod touch (3rd generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 3.1
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| ?
| -
|-
| [[Inferno 7C1095a|7C1095a]]
| Inferno?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
|}

== [[N81AP|iPod touch (4th generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|}

[[Category:Firmware]]

File:Newsblogo.png

2017-11-26T12:07:06Z

Q3hardcore: skankwerklogo v2

skankwerklogo v2

Sightglass

2017-11-25T17:23:00Z

Q3hardcore: add old icon

[[File:Sightglass_icon.png|200px|right|thumb|New Sightglass icon]]
[[File:Sightglass-old.png|200px|right|thumb|Old Sightglass icon]]

Sightglass is an application in SwitchBoard that has shown up on newer prototype devices, including an iPhone 6. It is known to be used for launching diagnostics-related scripts. The icon of the app was the logo of a coffee shop in San Francisco called Sightglass Coffee, however it has since been changed to a 3x3 grid of colored dots on a brown background.

On watchOS, SwitchBoard is not present and apps are launched from Sightglass. It retains the ability to run scripts, and can also be used to power off or restart the device, as well as setting whether the display should be kept on or not.

==Contents of the App: (iPhone)==
*ChicagoFLF.ttf
*_CodeSignature
*Info.plist
*_internal_apps.png
*PkgInfo
*_internal_get_pedometer.png
*ResourceRules.plist
*_internal_help.png
*Sightglass
*_internal_reset_pedometer.png
*Sightglass-Apps.plist
*_internal_scripts.png
*Sightglass-BootTasks.plist
*_internal_sightglass.png
*Sightglass-Help.plist
*com.apple.osdiags.Sightglass.plist

==External Links==
[https://www.macrumors.com/2014/10/06/iphone-6-prototype-ebay/ Article about iPhone 6 prototype on MacRumors]

[https://twitter.com/Jin_Store/status/811889261767077888 Main screen and app list on watchOS]

[https://twitter.com/Sightglass Sightglass Coffee]

[[Category:Apple Internal Apps‏]]

File:Sightglass-old.png

2017-11-25T17:22:49Z

Q3hardcore: old Sightglass icon

old Sightglass icon

Sightglass

2017-11-25T10:59:46Z

Q3hardcore: add info about icon

[[File:Sightglass_icon.png|200px|right|thumb|The SightGlass icon]]

Sightglass is an application in SwitchBoard that has shown up on newer prototype devices, including an iPhone 6. It is known to be used for launching diagnostics-related scripts. The icon of the app was the logo of a coffee shop in San Francisco called Sightglass Coffee, however it has since been changed to a 3x3 grid of colored dots on a brown background.

On watchOS, SwitchBoard is not present and apps are launched from Sightglass. It retains the ability to run scripts, and can also be used to power off or restart the device, as well as setting whether the display should be kept on or not.

==Contents of the App: (iPhone)==
*ChicagoFLF.ttf
*_CodeSignature
*Info.plist
*_internal_apps.png
*PkgInfo
*_internal_get_pedometer.png
*ResourceRules.plist
*_internal_help.png
*Sightglass
*_internal_reset_pedometer.png
*Sightglass-Apps.plist
*_internal_scripts.png
*Sightglass-BootTasks.plist
*_internal_sightglass.png
*Sightglass-Help.plist
*com.apple.osdiags.Sightglass.plist

==External Links==
[https://www.macrumors.com/2014/10/06/iphone-6-prototype-ebay/ Article about iPhone 6 prototype on MacRumors]

[https://twitter.com/Jin_Store/status/811889261767077888 Main screen and app list on watchOS]

[https://twitter.com/Sightglass Sightglass Coffee]

[[Category:Apple Internal Apps‏]]

File:Sightglass icon.png

2017-11-25T10:59:27Z

Q3hardcore: Q3hardcore uploaded a new version of File:Sightglass icon.png

Sightglass

2017-11-25T10:44:52Z

Q3hardcore: improved factuality and informativeness

[[File:Sightglass_icon.png|200px|right|thumb|The SightGlass icon]]

Sightglass is an application in SwitchBoard that has shown up on newer prototype devices, including an iPhone 6. It is known to be used for launching diagnostics-related scripts.

On watchOS, SwitchBoard is not present and apps are launched from Sightglass. It retains the ability to run scripts, and can also be used to power off or restart the device, as well as setting whether the display should be kept on or not.

==Contents of the App: (iPhone)==
*ChicagoFLF.ttf
*_CodeSignature
*Info.plist
*_internal_apps.png
*PkgInfo
*_internal_get_pedometer.png
*ResourceRules.plist
*_internal_help.png
*Sightglass
*_internal_reset_pedometer.png
*Sightglass-Apps.plist
*_internal_scripts.png
*Sightglass-BootTasks.plist
*_internal_sightglass.png
*Sightglass-Help.plist
*com.apple.osdiags.Sightglass.plist

==External Links==
[https://www.macrumors.com/2014/10/06/iphone-6-prototype-ebay/ Article about iPhone 6 prototype on MacRumors]

[https://twitter.com/Jin_Store/status/811889261767077888 Main screen and app list on watchOS]

[[Category:Apple Internal Apps‏]]

TigrisAni 15A93261h

2017-11-19T14:43:11Z

Q3hardcore: basic description

== Background ==
This is a rather large build - a dump of its filesystem was around 9.1 GB.
[[File:Iph8_15A93261h.jpg|thumb|right|iPhone 8 running 15A93261h]]
== Applications ==
This firmware contains many applications launchable from [[SwitchBoard.app]], however roughly half of them are hidden by default:
* [[Alto]]
* [[CoexBlender]] (hidden)
* [[Console]]
* [[ExtendedOQC]]
* [[GrapeCal]]
* [[GrapeCal_Lite]]
* [[LCDMura]] (hidden)
* [[LcdUTest]] (hidden)
* [[MMI]]
* [[MesaCal]]
* [[Ness]] (hidden)
* [[NonUIQRCode]] (hidden)
* [[Operator]] (hidden)
* [[OrbCal]]
* [[Pippi]] (hidden)
* [[Reliability]]
* [[Reliability]] (again) (hidden)
* [[Sequencer]]
* [[Stencil]]
* [[USBHost]]
* [[WiPASmini]]
* [[ThermalDOE]] (hidden)

File:Iph8 15A93261h.jpg

2017-11-19T14:41:35Z

Q3hardcore: image from @laobaiTD on Twitter

image from @laobaiTD on Twitter

NonUI builds

2017-11-19T14:14:06Z

Q3hardcore: correct train

{{see also|Beta Firmware}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* Contain DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Contain DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Contain Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Have the /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed in "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).
[[File:oldswblogo.png|thumb|125px|right|SwitchBoard logo on 6.x and below]]
[[File:newswblogo.jpg|thumb|125px|right|SwitchBoard logo on 7.x and up]]
== Some interesting facts about factory firmwares ==

* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one.
Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is likely a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and probably some other. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on [https://en.wikipedia.org/wiki/Skunkworks_project Wikipedia].
== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="3" | Alpine
| 03.06.01_G<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| 04.02.13_G
| -
|-
| rowspan="1" | 1.1.2
| [[Alpine 3B48|3B48]]
| 04.02.13_G
| -
|-
| rowspan="2" | 1.1.3
| [[Alpine 4A102a|4A102a]]
| Alpine
| 04.04.05_G
| -
|-
|}

== [[N82AP|iPhone 3G]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 05.16.05
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 05.16.06
| -
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 4.0
| [[Apex 8A133|8A133]]
| Apex?
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 04.12.01
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 04.12.02
| -
|-
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 1.0.10
| -
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
| SundanceNanshan
| 2.0.0.2
| -
|}

== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A23941s|10A23941s]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A316|10A316]]
| Sundance
| 1.7.00
| -
|-
|}

== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| 1.00.05
| -
|-
| [[InnsbruckNanshan 11A24581c|11A24581c]]
| InnsbruckNanshan
| ?
| -
|-
| [[Innsbruck 11A93840f|11A93840f]]
| Innsbruck?
| ?
| Originally found on a [https://forums.macrumors.com/threads/unusual-iphone-possible-engineering-sample-os.1885755/ Macrumors] post.
|-
|}

== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 8.0
| [[Okemo 12A22121a|12A22121a]]
| Okemo?
| ?
| -
|-
| [[Okemo 12A93311h|12A93311h]]
| Okemo?
| 1.00.01
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| 1.00.05
| This build is pretty obscure, but it is in the wild.
|-
| [[OkemoAni 12A93651a|12A93651a]]
| OkemoAni
| 1.00.05
| -
|-
| [[OkemoAni 12A93651b|12A93651b]]
| OkemoAni
| 1.00.05
| -
|-
|}

== [[iPhone 6s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 9.0
| [[Monarch 13A93051l|13A93051l]]
| Monarch?
| 0.37.08
| -
|-
| [[Monarch 13A93420d|13A93420d]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93420m|13A93420m]]
| Monarch?
| 1.00.05
| -
|-
|}

== [[D10AP|iPhone 7]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 10.0
| [[Whitetail 14A92340t|14A92340t]]
| Whitetail?
| ?
| -
|-
| [[WhitetailAni 14A93012r|14A93012r]]
| WhitetailAni
| ?
| -
|-
| [[WhitetailAni 14A93013a|14A93013a]]
| WhitetailAni
| ?
| -
|-
|}

== [[D20AP|iPhone 8]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 11.0
| [[TigrisAni 15A93261h|15A93261h]]
| TigrisAni
| ?
| -
|}

== [[K48AP|iPad]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.2
| [[Wildcat 7B3341e|7B3341e]]
| Wildcat?
| ?
| -
|-
| [[Wildcat 7B5286a|7B5286a]]
| Wildcat?
| ?
| Found by SonnyDickson, documented on [https://9to5mac.com/2017/05/15/ipad-1-prototype/ 9to5mac]
|-
|}

== [[K93AP|iPad 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.3
| [[Durango 8F3178a|8F3178a]]
| Durango?
| ?
| -
|-
| [[Durango 8F3191d|8F3191d]]
| Durango?
| ?
| -
|-
|}

== [[P106AP|iPad mini]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 6.0
| [[SundanceTaosTianshan 10A63970v|10A63970v]]
| SundanceTaosTianshan
| ?
| -
|-
| [[Sundance 10A63971b|10A63971b]]
| Sundance?
| ?
| -
|-
|}

== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| ?
| -
|}

== [[J96AP|iPad mini 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 8.0
| [[Okemo 12H60160o|12H60160o]]
| Okemo?
| ?
| -
|}

== [[N18AP|iPod touch (3rd generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 3.1
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| ?
| -
|-
| [[Inferno 7C1095a|7C1095a]]
| Inferno?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
|}

== [[N81AP|iPod touch (4th generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|}

[[Category:Firmware]]

Durango 8F3191d

2017-11-19T14:08:56Z

Q3hardcore: initial page

== Background ==
A dump of this build's root filesystem is known to exist and is almost 2.0 GB in size. It came from a [[K93AP]].
== Applications ==
This build seemingly has the same set of apps as [[Durango 8F3178a]]. Strangely, the regular iOS Camera app is included, although it likely cannot be launched.

The following is a complete list of [[SwitchBoard.app|SwitchBoard]] apps present in this build:
*[[ATCommand]]
*[[BatterySet]] (hidden)
*[[BurnIn]]
*[[CameraFA]]
*[[GrapeCal]]
*[[LcdUTest]]
*[[Operator]]
*[[Reliability]]
*[[Rumble]]
*[[SkankPhone]]
*[[Soundwave]]
*[[ThermalDOE]]
*[[XInternalApps]]

NonUI builds

2017-11-19T13:54:52Z

Q3hardcore: known train

{{see also|Beta Firmware}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* Contain DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Contain DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Contain Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Have the /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed in "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).
[[File:oldswblogo.png|thumb|125px|right|SwitchBoard logo on 6.x and below]]
[[File:newswblogo.jpg|thumb|125px|right|SwitchBoard logo on 7.x and up]]
== Some interesting facts about factory firmwares ==

* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one.
Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is likely a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and probably some other. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on [https://en.wikipedia.org/wiki/Skunkworks_project Wikipedia].
== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="3" | Alpine
| 03.06.01_G<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| 04.02.13_G
| -
|-
| rowspan="1" | 1.1.2
| [[Alpine 3B48|3B48]]
| 04.02.13_G
| -
|-
| rowspan="2" | 1.1.3
| [[Alpine 4A102a|4A102a]]
| Alpine
| 04.04.05_G
| -
|-
|}

== [[N82AP|iPhone 3G]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 05.16.05
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 05.16.06
| -
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 4.0
| [[Apex 8A133|8A133]]
| Apex?
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 04.12.01
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 04.12.02
| -
|-
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 1.0.10
| -
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
| SundanceNanshan
| 2.0.0.2
| -
|}

== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A23941s|10A23941s]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A316|10A316]]
| Sundance
| 1.7.00
| -
|-
|}

== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| 1.00.05
| -
|-
| [[InnsbruckNanshan 11A24581c|11A24581c]]
| InnsbruckNanshan
| ?
| -
|-
| [[Innsbruck 11A93840f|11A93840f]]
| Innsbruck?
| ?
| Originally found on a [https://forums.macrumors.com/threads/unusual-iphone-possible-engineering-sample-os.1885755/ Macrumors] post.
|-
|}

== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 8.0
| [[Okemo 12A22121a|12A22121a]]
| Okemo?
| ?
| -
|-
| [[Okemo 12A93311h|12A93311h]]
| Okemo?
| 1.00.01
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| 1.00.05
| This build is pretty obscure, but it is in the wild.
|-
| [[OkemoAni 12A93651a|12A93651a]]
| OkemoAni
| 1.00.05
| -
|-
| [[OkemoAni 12A93651b|12A93651b]]
| OkemoAni
| 1.00.05
| -
|-
|}

== [[iPhone 6s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 9.0
| [[Monarch 13A93051l|13A93051l]]
| Monarch?
| 0.37.08
| -
|-
| [[Monarch 13A93420d|13A93420d]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93420m|13A93420m]]
| Monarch?
| 1.00.05
| -
|-
|}

== [[D10AP|iPhone 7]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 10.0
| [[Whitetail 14A92340t|14A92340t]]
| Whitetail?
| ?
| -
|-
| [[WhitetailAni 14A93012r|14A93012r]]
| WhitetailAni
| ?
| -
|-
| [[WhitetailAni 14A93013a|14A93013a]]
| WhitetailAni
| ?
| -
|-
|}

== [[D20AP|iPhone 8]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 11.0
| [[Tigris 15A93261h|15A93261h]]
| Tigris?
| ?
| -
|}

== [[K48AP|iPad]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.2
| [[Wildcat 7B3341e|7B3341e]]
| Wildcat?
| ?
| -
|-
| [[Wildcat 7B5286a|7B5286a]]
| Wildcat?
| ?
| Found by SonnyDickson, documented on [https://9to5mac.com/2017/05/15/ipad-1-prototype/ 9to5mac]
|-
|}

== [[K93AP|iPad 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.3
| [[Durango 8F3178a|8F3178a]]
| Durango?
| ?
| -
|-
| [[Durango 8F3191d|8F3191d]]
| Durango?
| ?
| -
|-
|}

== [[P106AP|iPad mini]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 6.0
| [[SundanceTaosTianshan 10A63970v|10A63970v]]
| SundanceTaosTianshan
| ?
| -
|-
| [[Sundance 10A63971b|10A63971b]]
| Sundance?
| ?
| -
|-
|}

== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| ?
| -
|}

== [[J96AP|iPad mini 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 8.0
| [[Okemo 12H60160o|12H60160o]]
| Okemo?
| ?
| -
|}

== [[N18AP|iPod touch (3rd generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 3.1
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| ?
| -
|-
| [[Inferno 7C1095a|7C1095a]]
| Inferno?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
|}

== [[N81AP|iPod touch (4th generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|}

[[Category:Firmware]]

Apex 8A133

2017-11-19T13:51:20Z

Q3hardcore: /* Background */ further info

== Background ==
This is an early build of iOS 4.0 that was on the famous Deathstar iPhone prototype.
It can be seen in action [https://www.imore.com/rare-apple-iphone-4-prototype-appears-ebay-complete-strange-logo-back-panel here], with a custom backplate and running this firmware, 8A133. Notably, it contains files referencing an unreleased device - N89. It also has a variety of diagnostic images, including one for the iPod touch (3rd generation).
[[File:deathstar8a133.jpg|thumb|600px|right|Deathstar Prototype running 8A133]]

== Applications ==
Upon booting up, [[SwitchBoard.app]] lets you choose from the following:
*[[ATCommand]]
*[[BurnIn]]
*[[CameraFA]]
*[[GrapeCal]]
*[[LcdUTest]]
*[[Operator]]
*[[Rumble]]
*[[SkankPhone]]
*[[Soundwave]]

SundanceTaosTianshan 10A63970v

2017-11-19T13:38:44Z

Q3hardcore: note dump size

== Background ==
The following build is a factory firmware which is based off of an internal version of iOS 6.0. First discovered on an [[iPad mini]] prototype device, this firmware seems to be a slightly earlier version of [[Sundance 10A63971b]]. A complete root filesystem dump was around 4.7 GB.
[[File:ipadmini10a63970v.jpg|thumb|right|iPad mini prototype running 10A63970v]]
== Applications ==
Upon booting into this firmware, [[SwitchBoard.app]] will let you boot into the following applications:
*[[BatterySet]] (hidden)
*[[dtxCaliente]]
*[[GrapeCal]]
*[[LCDMura]]
*[[LCMFlicker]]
*[[LcdUTest]]
*[[Operator]]
*[[QRCode]]
*[[Reliability]]
*[[ThermalDOE]]
*[[WiPASmini]]

SundanceTaosTianshan 10A63971b

2017-11-19T13:30:22Z

Q3hardcore: note dump issue

== Background ==

This is a 6.0-based factory firmware, discovered on an [[iPad mini]] prototype unit. It is very similar to other factory versions of 6.0 (such as [[Sundance 10A63970v]]). An incomplete root filesystem dump exists and is around 2.3 GB.

It contains kernels for Apple A6X, A6, A5x, A5, A4 processors as well as the iPod touch (3rd generation), iPhone 3GS. Interestingly, there is also a kernel file relating to an unused processor type - s5l8740x.
[[File:ipadm110a63971b.jpg|thumb|right|iPad Mini running 10A63971b]]

== Applications ==
After booting up, [[SwitchBoard.app]] lets you choose from a slew of apps. It's worth mentioning that this SwitchBoard build does not feature the [[BurnIn]] app. The applications available are:
*[[BatterySet]] (hidden)
*[[dtxCaliente]]
*[[GrapeCal]]
*[[LCDMura]]
*[[LcdUTest]]
*[[LCMFlicker]]
*[[Operator]]
*[[QRCode]]
*[[WiPASmini]]
*[[ThermalDOE]]
*[[Reliability]]

NonUI builds

2017-11-19T13:28:01Z

Q3hardcore: /* iPad mini */ correct train

{{see also|Beta Firmware}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* Contain DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Contain DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Contain Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Have the /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed in "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).
[[File:oldswblogo.png|thumb|125px|right|SwitchBoard logo on 6.x and below]]
[[File:newswblogo.jpg|thumb|125px|right|SwitchBoard logo on 7.x and up]]
== Some interesting facts about factory firmwares ==

* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one.
Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is likely a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and probably some other. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on [https://en.wikipedia.org/wiki/Skunkworks_project Wikipedia].
== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="3" | Alpine
| 03.06.01_G<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| 04.02.13_G
| -
|-
| rowspan="1" | 1.1.2
| [[Alpine 3B48|3B48]]
| 04.02.13_G
| -
|-
| rowspan="2" | 1.1.3
| [[Alpine 4A102a|4A102a]]
| Alpine
| 04.04.05_G
| -
|-
|}

== [[N82AP|iPhone 3G]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 05.16.05
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance?
| 05.16.06
| -
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 4.0
| [[Apex 8A133|8A133]]
| Apex?
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 04.12.01
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance?
| 04.12.02
| -
|-
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 1.0.10
| -
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
| SundanceNanshan
| 2.0.0.2
| -
|}

== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A23941s|10A23941s]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A316|10A316]]
| Sundance?
| 1.7.00
| -
|-
|}

== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| 1.00.05
| -
|-
| [[InnsbruckNanshan 11A24581c|11A24581c]]
| InnsbruckNanshan
| ?
| -
|-
| [[Innsbruck 11A93840f|11A93840f]]
| Innsbruck?
| ?
| Originally found on a [https://forums.macrumors.com/threads/unusual-iphone-possible-engineering-sample-os.1885755/ Macrumors] post.
|-
|}

== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 8.0
| [[Okemo 12A22121a|12A22121a]]
| Okemo?
| ?
| -
|-
| [[Okemo 12A93311h|12A93311h]]
| Okemo?
| 1.00.01
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| 1.00.05
| This build is pretty obscure, but it is in the wild.
|-
| [[OkemoAni 12A93651a|12A93651a]]
| OkemoAni
| 1.00.05
| -
|-
| [[OkemoAni 12A93651b|12A93651b]]
| OkemoAni
| 1.00.05
| -
|-
|}

== [[iPhone 6s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 9.0
| [[Monarch 13A93051l|13A93051l]]
| Monarch?
| 0.37.08
| -
|-
| [[Monarch 13A93420d|13A93420d]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93420m|13A93420m]]
| Monarch?
| 1.00.05
| -
|-
|}

== [[D10AP|iPhone 7]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 10.0
| [[Whitetail 14A92340t|14A92340t]]
| Whitetail?
| ?
| -
|-
| [[WhitetailAni 14A93012r|14A93012r]]
| WhitetailAni
| ?
| -
|-
| [[WhitetailAni 14A93013a|14A93013a]]
| WhitetailAni
| ?
| -
|-
|}

== [[D20AP|iPhone 8]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 11.0
| [[Tigris 15A93261h|15A93261h]]
| Tigris?
| ?
| -
|}

== [[K48AP|iPad]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.2
| [[Wildcat 7B3341e|7B3341e]]
| Wildcat?
| ?
| -
|-
| [[Wildcat 7B5286a|7B5286a]]
| Wildcat?
| ?
| Found by SonnyDickson, documented on [https://9to5mac.com/2017/05/15/ipad-1-prototype/ 9to5mac]
|-
|}

== [[K93AP|iPad 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.3
| [[Durango 8F3178a|8F3178a]]
| Durango?
| ?
| -
|-
| [[Durango 8F3191d|8F3191d]]
| Durango?
| ?
| -
|-
|}

== [[P106AP|iPad mini]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 6.0
| [[SundanceTaosTianshan 10A63970v|10A63970v]]
| SundanceTaosTianshan
| ?
| -
|-
| [[Sundance 10A63971b|10A63971b]]
| Sundance?
| ?
| -
|-
|}

== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| ?
| -
|}

== [[J96AP|iPad mini 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 8.0
| [[Okemo 12H60160o|12H60160o]]
| Okemo?
| ?
| -
|}

== [[N18AP|iPod touch (3rd generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 3.1
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| ?
| -
|-
| [[Inferno 7C1095a|7C1095a]]
| Inferno?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
|}

== [[N81AP|iPod touch (4th generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|}

[[Category:Firmware]]

SundanceTaosTianshan 10A63970v

2017-11-19T13:27:45Z

Q3hardcore: Q3hardcore moved page Sundance 10A63970v to SundanceTaosTianshan 10A63970v: correct train

== Background ==
The following build is a factory firmware which is based off of an internal version of iOS 6.0. First discovered on an [[iPad mini]] prototype device, this firmware seems to be a slightly earlier version of [[Sundance 10A63971b]].
[[File:ipadmini10a63970v.jpg|thumb|right|iPad mini prototype running 10A63970v]]
== Applications ==
Upon booting into this firmware, [[SwitchBoard.app]] will let you boot into the following applications:
*[[BatterySet]] (hidden)
*[[dtxCaliente]]
*[[GrapeCal]]
*[[LCDMura]]
*[[LCMFlicker]]
*[[LcdUTest]]
*[[Operator]]
*[[QRCode]]
*[[Reliability]]
*[[ThermalDOE]]
*[[WiPASmini]]

Sundance 10A63970v

2017-11-19T13:27:45Z

Q3hardcore: Q3hardcore moved page Sundance 10A63970v to SundanceTaosTianshan 10A63970v: correct train

#REDIRECT [[SundanceTaosTianshan 10A63970v]]

PurpleRestore

2017-11-18T00:23:03Z

Q3hardcore: attempt to address inaccuracies

{{internal software}}
{{Infobox software
| name = PurpleRestore
| title = PurpleRestore
| logo = [[File:PurpleRestore3_logo.png|150px]]
| screenshot = [[File:PurpleRestore3.png|300px]]
| caption = PurpleRestore 3.0 (313.1.5.1.1)(14A83432a)
| collapsible =
| author = Apple Inc.
| developer = Apple Inc.
| released =
| discontinued =
| latest release version = 3.0 (313.1.5.1.1) (14A83432a)<br /><small>(latest ''known'' version)</small>
| latest release date =
| latest preview version =
| latest preview date =
| programming language =
| operating system = [[wikipedia:macOS|macOS]]
| platform =
| size =
| language = [[wikipedia:English language|English]]
| status =
| genre = Firmware flasher
| license = [[wikipedia:Proprietary software|Closed source]]
| website =
}}
{{float toc|left}}
'''PurpleRestore''' is a tool made by Apple and is used for flashing [[iDevice]]s. It provides far more customization than [[iTunes]], and is known to be used to flash internal firmware to [[prototypes]]. Little is currently known about which versions it "supports" for restoring as such. PurpleRestore is installed by [[RestoreTools.pkg]] or Home Diagnostics. A CLI version of PurpleRestore is included.

This tool can (and is meant to) handle multiple restores. When performing restores, PurpleRestore color coordinates the device in the table and when the device is about to receive the AppleLogo it will turn the background color of the screen to the color assigned to the device. Like [[iTunes]], PurpleRestore communicates with devices using a [[usbmux]] connection.

== Restore Bundles ==
PurpleRestore uses "Restore Bundles" which can be obtained from a server specific to versions of iOS, such as <code>afp://fieldgoal.apple.com/RestoreImages/</code> and <code>afp://endzone.apple.com/OldRestoreImages/</code> (among many others) . Unfortunately, these <code>afp</code> servers can only be accessed through Apple's internal VPN. PurpleRestore is essentially useless to the general public, because it can only install currently signed iOS versions without having Apple VPN access.

You can create your own bundles by extracting an IPSW into a folder, and restore them if they are being signed; or if you have SHSH blobs saved for an A4 device (and below) then you can either stitch or use [[TinyUmbrella]] to assist in a downgrade without the need for iTunes; you will still need to put your device into pwned DFU Mode. This will not give you any internal debugging abilities nor jailbreak your device.

As of PurpleRestore 3, an IPSW may be used in place of a restore bundle.

== Restore Components ==
Restore Components has several options:
* '''Restore Bundle''': Specify the bundle to use in restoring
* '''Firmware Directory''': Specify the folder where the [[LLB]], [[iBoot (Bootloader)|iBoot]], etc. [[IMG3 File Format|IMG3]]/[[IMG4 File Format|IMG4]] files are located.
* '''Ramdisk Image''': Specify a [[ramdisk]] to be used (i.e. [[Restore Ramdisk|restore]] or [[Update Ramdisk|update]] ramdisk)
* '''DFU''': Specify what tools to upload based on a selection of "Debug", "Development", or "Release". A specific file can also be selected.

== Restore Operations ==
[[File:IPhoneDuringPurpleRestore.jpeg|250px|thumb|right|iPhone 5 undergoing a PurpleRestore]]
Restore Operations contains the most options to configure. These may also be the most useful ones.

* '''Hardware Readiness'''
** '''Minimum Battery Charge (mV)''': This value controls the minimum charge level at which the restore will be allowed to continue. Below this threshold, we either wait to charge (if we're charging) or fail (if we're not charging). If this option is not specified, a default value is used (currently 3.8 V). Setting this option to 0 bypasses all battery level checks.
** '''Wait for Minimum Charge''': If the current voltage is below the minimum level, then the default behavior is to let the device charge and then continue. This option overrides that behavior when false.
** '''Wait for Storage Device''': Controls whether the restore waits for the storage device /dev/disk0 to be available before the restore is initiated.
** '''Allow Untethered Restore''': Permit the restore to run untethered (not connected to a host). The result of specifying this option when the restore needs data from the host (for instance, when flashing NOR) is undefined (but probably bad). If this option is specified and the device remains tethered, things should proceed as usual.
* '''Storage Media'''
** '''Use LwVM''': Controls whether the device is formatted for LwVM (if supported).
** '''Repartition''': Controls whether a new partition map is created on the device.
** '''System Partition Size (MiB)''': Specifies the size (in mebibytes) that is desired for the system partition. Because the partition size can only be changed when creating a new partition map, this option is only relevant when used in conjunction with repartition. A size of 0 indicates that the restore library should choose a suitable size for you, based on the specific restore bundle and image being used if possible.
** '''Content Protection Type''': Controls the type of data protection used on the device.
** '''Low-Level Erase''': Do a low level erase (wipe with null or random data) of the entire storage device prior to restoring.
* '''Restore System Partition'''
** '''System Image''': Determines which type of system image to restore, or which file to use for the system image.
** '''Kernel Cache Type''': This option controls the kernel cache that gets installed on the device.
* '''Baseband'''
** '''Update Baseband''': Controls whether the [[baseband]] and baseband bootloader are updated as part of the restore.
** '''Force Update''': The baseband update is skipped when the existing firmware matches the available firmware. In some cases, it is desirable to force the firmware update to occur, regardless of what is currently on there. This option, when set to true, forces the update to be attempted.

== Restore OS ==
Restore OS options allow you to specify the following:
* '''Restore Boot-Args''': Boot-Args used when the Restore OS is loaded. By default those arguments are used: "debug=0x14e serial=3 rd=md0 nand-enable-reformat=1 -progress"
* '''Firmware Type:''' Specify the firmware which should be flashed when restoring. This can either be "Debug", "Factory FA", "Factory SA", "Firmware Development" or "Production".
* '''Boot Image Type:''' Can be "Internal", "User or Internal", "User" or "Update".
* '''Boot Kernel Cache:''' Specify whether the "Production" or "Development" kernel cache should be used.

== Personalization Settings ==
As with iTunes, PurpleRestore can personalize builds for iOS devices (since recent Bootroms expect a valid APTicket). The tooltip for the "Personalized Restore" checkbox reads "Your ticket to the Orwellian cloud." This may suggest that Apple developed TSS in part to control access to internal build variants (i.e. prevent leaks of "interesting" builds of iOS), in addition to preventing production users from downgrading.
* '''Variants''': "A predefined combination of restore pieces." The options are: "Customer Install", "Internal Debug", "Internal Development", "Internal Install", "Internal Qualification", and "Vendor install."
* '''AppleConnect''': Used to authenticate all restores for personalization. Interestingly, AppleConnect will allow members of the iOS Developer Program (including non-employees) to install public builds of iOS (latest current and beta). It's likely AppleConnect is also used to authenticate signing of internal builds using the public TSS server, should the device be on the whitelist.

== Restore Settings ==
[[File:PurpleRestoreOptions.png|250px|thumb|right|PurpleRestore configuration screen]]
By default, PurpleRestore comes with two pre-made restore settings. "Erase Install" and "Update Install". Those restore settings are [[wikipedia:property list|property list]]s that define the options PurpleRestore will use when restoring a device.
* '''Erase Install''': Repartition the media and erase all data before restoring. Includes all internal development tools and updates flash and the baseband by default.
* '''Update Install''': Includes all internal development tools and updates flash and the baseband by default.
{{clear}}

== PurpleRestore 3 ==
PurpleRestore 3 is the latest known version of PurpleRestore. It was initially leaked on Twitter in October 2016. The update sports a redesigned user interface and icon, support for IPSW files, and revealed the existence of an internal PurpleRestore wiki, which most likely requires access to Apple's internal VPN. The boot screen on the device doesn't turn purple when restoring with the tool without a debug UART cable, unlike previous versions of the tool. PurpleRestore 3 also has full macOS Sierra support, which was broken in most of the previous builds.

The updated utility also allows you to flash a custom boot logo, but it likely requires it to be decrypted. It is currently believed that it makes a new IMG3 container for the image, and discards the old one before flashing to the correct place in NAND/NOR.

== Problems ==
There are some problems with the leaked versions, because they may not support current devices or iOS versions.

[[File:IBECStuck.png|250px|thumb|right|Stuck on Executing iBEC]]
One problem (common) is getting stuck at "Executing iBEC to bootstrap update". This is likely a signing error; the device may have rejected the iBEC image due to an invalid or missing APTicket, trying to use AppleConnect, the TSS server is no longer accepting signatures for the version you are installing, or the nonce has been mismatched.

Another problem can be encountered when a device is in [[DFU Mode]]; the tool will send the DFU image, and the iDevice will repeatedly disconnect and reconnect.

If you check "Allow baseband roll-backs", disable "Allow AppleConnect", and uncheck using of LwVM under Editor, selecting Personalized IPSW will cause PurpleRestore to freeze on "Waiting for device" and creates another session with "IDLE" status. If you then try to select that new session and try the same settings, it starts the restore process and successfully restore the IPSW to device.

Versions older than PurpleRestore 3 do not support A7+ devices, due to many changes in newer architectures, BootROM, etc.

PurpleRestore 3 also is supposed to have icons for each device plugged in, but many devices (including iPhones) don't have icons; they are replaced with a grey question mark.

== See Also ==
* [[iTunes]]
* [https://www.youtube.com/watch?v=jaZ2JPUv-AU Video of process]

[[Category:Software]]

File:PurpleRestore3.png

2017-11-18T00:10:38Z

Q3hardcore: Q3hardcore uploaded a new version of File:PurpleRestore3.png

Sundance 10A316

2017-11-13T00:07:02Z

Q3hardcore: /* Background */ fact over fiction

== Background ==
This is an internal build of iOS 6.0 which runs [[SwitchBoard.app|SwitchBoard]]. A dump of its file system weighed in at around 4.1 gigabytes. This build contains internal firmware for [[Haywire]].

Kernels for Apple's A6X, A6, A5X, A5 and A4 processors, as well as the iPod Touch 3G and iPhone 3GS, are included. Interestingly, there is also a kernel file for an unused processor type - s5l8740x.

== Haywire Firmware Findings ==
In /var/mobile/Library/Assets, you will find a folder containing the name haywire. Inside, you'll find multiple folders seemingly used for restoring. When looking in these folders, you'll find the codenames B137 and B135, with encrypted development components for each, as well as an encrypted ramdisk, with no known keys. They also have iBSS, DeviceTree, and Kernelcaches, but nothing more. Upon further exploration, the heavy lifting is done by a modified version of PurpleRestore built into /System/Library/AccessoryUpdaterBundles/Haywire.bundle. A form of this bundle can also be found in certain production firmwares in the same directory.
[[File:iphone510a316.png|thumb|right|iPhone 5 running 10A316]]
== Applications ==
After booting up, [[SwitchBoard.app]] lets you choose from a slew of apps. They are:
*[[BatterySet]] (hidden)
*[[BurnIn]] (hidden)
*[[GrapeCal]]
*[[LCDMura]]
*[[LcdUTest]]
*[[LCMFlicker]]
*[[Operator]]
*[[QRCode]]
*[[WiPASmini]]
*[[ThermalDOE]]
*[[Reliability]]

User:Q3hardcore

2017-10-25T11:59:11Z

Q3hardcore: Created page with "My Twitter: https://twitter.com/q3hardcore/"

My Twitter: https://twitter.com/q3hardcore/

ApexNanshan 8A2180g

2017-10-25T11:56:39Z

Q3hardcore: altered grammar and removed untrue statement

This is an iOS 4.0 internal firmware. It contains kernels for A4 and A5 devices as well as earlier iPhones such as the 3GS and 3G. It suffers from minor visual glitches and performance issues.

== Background ==

Originally leaked in the form of a restore bundle. The root filesystem key was obtained, and a decrypted rootfs started making its way around. IPSWs of this build were later created for the iPhone 3GS and iPhone 4 and can be restored using bootrom exploits.

== Odd Behaviors ==
This firmware can be ported to the 3G. However, upon booting, the app icons will be missing, SwitchBoard will be rapidly flickering, and the device will most likely be hardware damaged.

[https://mobile.twitter.com/Sn0wFX_/status/802145331576262656 3G with ApexNanshan installed]

== SwitchBoard Applications ==

This build contains the following applications which can be launched through [[SwitchBoard.app]]:

* [[ATCommand]]
* [[BurnIn]]
* [[CameraFA]]
* [[GrapeCal]]
* [[LcdUTest]]
* [[Operator]]
* [[Rumble]]
* [[SkankPhone]]
* [[Soundwave]]