The iPhone Wiki - User contributions [en]

Preventing Baseband Update

2011-01-16T14:31:59Z

Realven000m: /* iTunes Update Method */

==Swap Ramdisks Method==
===Step 1: Swap Ramdisks===
Open the IPSW (with your favorite ZIP utility). Replace the [[Restore Ramdisk]] and the [[Update Ramdisk]] names with each other.

===Step 2: Edit options.plist===
# Unpack custom IPSW
# Decrypt Restore Ramdisk using [[xpwntool]] and mount it
# Navigate to /usr/local/share/restore
# Edit options.plist on the restore ramdisk
'''(Ignore the SystemPartitionSize in your plist file and leave it)'''

<pre>
<key>UpdateBaseband</key>
<false/>
</pre>

<ol start="5">
<li>Reencrypt the restore ramdisk</li>
<li>Repack the IPSW</li>
<li>Prepare device for custom firmware using [[redsn0w]]</li>
<li>Restore IPSW to [[iTunes]] in pwned [[DFU Mode]]</li>
</ol>

You must load a patched [[iBSS]]/[[iBEC]] for this to work. Using an original IPSW will not work, because redsn0w's pwned DFU Mode doesn't patch sigchecks in [[iBSS]].

==[[TinyUmbrella]]/[[Cydia]] Method for iPhone 4==

The [[N90ap|iPhone 4]] requires a AT+NONCE key signature from Apple in order to update the baseband. Pointing the hosts file to [[Cydia Server]] or running [[TinyUmbrella]] will allow this request for signature to be ignored, thus preventing a [[baseband]] update.

*'''This only works if [[Cydia]]/[[TinyUmbrella]] accepts the firmware's SHSH.'''
*'''This method 'works' with [[iOS]] 4.2.1, but in the restore ramdisk there is a baseband version check. If it doesn't match, it will crash before the Apple logo with the loading bar (the 2nd one, not the restore one) appears. It will boot and crash again. The usual 'Kick out of recovery mode' methods or "setenv auto-boot true" won't work, because it's not the problem that the auto-boot is false. So this method is actually not useful for [[iOS]] 4.2.1.'''
# Edit the hosts file and add the line "74.208.10.249 gs.apple.com" without the quotes, or run [[TinyUmbrella]] after saving the firmware's SHSH. If [[Cydia Server]] hasn't got your [[SHSH]], but you have it locally, use TSS Server method in [[TinyUmbrella]].
# Delete the .bbfw file in the firmware. Rename the IPSW to ZIP, open it and then go to the "firmware" folder. There you can see a .bbfw file, which means baseband firmware. The name gives you information about the baseband version and the Baseband BootLoader. Delete the .bbfw file and ZIP the firmware files (ZIP everything in the folder, don't ZIP the folder itself). Then you can restore to this. You will get error 11. This will only work up to iOS 4.1. If you do this on a newer version than iOS 4.1, your iPhone won't boot (see the text above).
# Use the "Restore" button in [[iTunes]] to update. you will get error 1013 on 4.2.1 when trying to restore thought the restore ramdisk
# If downgrading from a later firmware to a firmware that performs baseband checks, you will get error 1015. The only way to bypass this is to either update to the firmware version that matches your baseband version or downgrade (if possible) to an earlier firmware that doesn't perform the baseband version checks.

==[[User:Ih8sn0w|IH8sn0w]] Method==
User [[User:Ih8sn0w|IH8sn0w]] mentioned a new method in [http://twitter.com/iH8sn0w/status/19249886721478656 this tweet] (an upgrade-only option in [[Sn0wbreeze]]). [http://twitter.com/iH8sn0w/status/19453808090288128 He confirmed] that his method is not the same as the above mentioned methods. To get more details, someone would have to compare the generated ipsw content.

==iTunes Update Method==
There's a method ([http://twitter.com/ven000m/status/19526989958356992 that one]) which let's you keep your old baseband while upgrading to a newer firmware. Just SHIFT-click and choose "Update Firmware", but not restore! Apple aren't checking baseband's through this method.

[[Category:Baseband]]

Preventing Baseband Update

2011-01-16T14:28:15Z

Realven000m: /* ven000m Method */

==Swap Ramdisks Method==
===Step 1: Swap Ramdisks===
Open the IPSW (with your favorite ZIP utility). Replace the [[Restore Ramdisk]] and the [[Update Ramdisk]] names with each other.

===Step 2: Edit options.plist===
# Unpack custom IPSW
# Decrypt Restore Ramdisk using [[xpwntool]] and mount it
# Navigate to /usr/local/share/restore
# Edit options.plist on the restore ramdisk
'''(Ignore the SystemPartitionSize in your plist file and leave it)'''

<pre>
<key>UpdateBaseband</key>
<false/>
</pre>

<ol start="5">
<li>Reencrypt the restore ramdisk</li>
<li>Repack the IPSW</li>
<li>Prepare device for custom firmware using [[redsn0w]]</li>
<li>Restore IPSW to [[iTunes]] in pwned [[DFU Mode]]</li>
</ol>

You must load a patched [[iBSS]]/[[iBEC]] for this to work. Using an original IPSW will not work, because redsn0w's pwned DFU Mode doesn't patch sigchecks in [[iBSS]].

==[[TinyUmbrella]]/[[Cydia]] Method for iPhone 4==

The [[N90ap|iPhone 4]] requires a AT+NONCE key signature from Apple in order to update the baseband. Pointing the hosts file to [[Cydia Server]] or running [[TinyUmbrella]] will allow this request for signature to be ignored, thus preventing a [[baseband]] update.

*'''This only works if [[Cydia]]/[[TinyUmbrella]] accepts the firmware's SHSH.'''
*'''This method 'works' with [[iOS]] 4.2.1, but in the restore ramdisk there is a baseband version check. If it doesn't match, it will crash before the Apple logo with the loading bar (the 2nd one, not the restore one) appears. It will boot and crash again. The usual 'Kick out of recovery mode' methods or "setenv auto-boot true" won't work, because it's not the problem that the auto-boot is false. So this method is actually not useful for [[iOS]] 4.2.1.'''
# Edit the hosts file and add the line "74.208.10.249 gs.apple.com" without the quotes, or run [[TinyUmbrella]] after saving the firmware's SHSH. If [[Cydia Server]] hasn't got your [[SHSH]], but you have it locally, use TSS Server method in [[TinyUmbrella]].
# Delete the .bbfw file in the firmware. Rename the IPSW to ZIP, open it and then go to the "firmware" folder. There you can see a .bbfw file, which means baseband firmware. The name gives you information about the baseband version and the Baseband BootLoader. Delete the .bbfw file and ZIP the firmware files (ZIP everything in the folder, don't ZIP the folder itself). Then you can restore to this. You will get error 11. This will only work up to iOS 4.1. If you do this on a newer version than iOS 4.1, your iPhone won't boot (see the text above).
# Use the "Restore" button in [[iTunes]] to update. you will get error 1013 on 4.2.1 when trying to restore thought the restore ramdisk
# If downgrading from a later firmware to a firmware that performs baseband checks, you will get error 1015. The only way to bypass this is to either update to the firmware version that matches your baseband version or downgrade (if possible) to an earlier firmware that doesn't perform the baseband version checks.

==[[User:Ih8sn0w|IH8sn0w]] Method==
User [[User:Ih8sn0w|IH8sn0w]] mentioned a new method in [http://twitter.com/iH8sn0w/status/19249886721478656 this tweet] (an upgrade-only option in [[Sn0wbreeze]]). [http://twitter.com/iH8sn0w/status/19453808090288128 He confirmed] that his method is not the same as the above mentioned methods. To get more details, someone would have to compare the generated ipsw content.

==iTunes Update Method==
There's a method ([http://twitter.com/ven000m/status/19526989958356992 that one]) which let you keep your old baseband while upgrading to a newer firmware. The only difference is, to Shift-click choose "UPDATE FIRMWARE", not restore. Apple does not check the baseband through this method.

[[Category:Baseband]]

Preventing Baseband Update

2011-01-16T14:23:55Z

Realven000m: /* ven000m Method */

==Swap Ramdisks Method==
===Step 1: Swap Ramdisks===
Open the IPSW (with your favorite ZIP utility). Replace the [[Restore Ramdisk]] and the [[Update Ramdisk]] names with each other.

===Step 2: Edit options.plist===
# Unpack custom IPSW
# Decrypt Restore Ramdisk using [[xpwntool]] and mount it
# Navigate to /usr/local/share/restore
# Edit options.plist on the restore ramdisk
'''(Ignore the SystemPartitionSize in your plist file and leave it)'''

<pre>
<key>UpdateBaseband</key>
<false/>
</pre>

<ol start="5">
<li>Reencrypt the restore ramdisk</li>
<li>Repack the IPSW</li>
<li>Prepare device for custom firmware using [[redsn0w]]</li>
<li>Restore IPSW to [[iTunes]] in pwned [[DFU Mode]]</li>
</ol>

You must load a patched [[iBSS]]/[[iBEC]] for this to work. Using an original IPSW will not work, because redsn0w's pwned DFU Mode doesn't patch sigchecks in [[iBSS]].

==[[TinyUmbrella]]/[[Cydia]] Method for iPhone 4==

The [[N90ap|iPhone 4]] requires a AT+NONCE key signature from Apple in order to update the baseband. Pointing the hosts file to [[Cydia Server]] or running [[TinyUmbrella]] will allow this request for signature to be ignored, thus preventing a [[baseband]] update.

*'''This only works if [[Cydia]]/[[TinyUmbrella]] accepts the firmware's SHSH.'''
*'''This method 'works' with [[iOS]] 4.2.1, but in the restore ramdisk there is a baseband version check. If it doesn't match, it will crash before the Apple logo with the loading bar (the 2nd one, not the restore one) appears. It will boot and crash again. The usual 'Kick out of recovery mode' methods or "setenv auto-boot true" won't work, because it's not the problem that the auto-boot is false. So this method is actually not useful for [[iOS]] 4.2.1.'''
# Edit the hosts file and add the line "74.208.10.249 gs.apple.com" without the quotes, or run [[TinyUmbrella]] after saving the firmware's SHSH. If [[Cydia Server]] hasn't got your [[SHSH]], but you have it locally, use TSS Server method in [[TinyUmbrella]].
# Delete the .bbfw file in the firmware. Rename the IPSW to ZIP, open it and then go to the "firmware" folder. There you can see a .bbfw file, which means baseband firmware. The name gives you information about the baseband version and the Baseband BootLoader. Delete the .bbfw file and ZIP the firmware files (ZIP everything in the folder, don't ZIP the folder itself). Then you can restore to this. You will get error 11. This will only work up to iOS 4.1. If you do this on a newer version than iOS 4.1, your iPhone won't boot (see the text above).
# Use the "Restore" button in [[iTunes]] to update. you will get error 1013 on 4.2.1 when trying to restore thought the restore ramdisk
# If downgrading from a later firmware to a firmware that performs baseband checks, you will get error 1015. The only way to bypass this is to either update to the firmware version that matches your baseband version or downgrade (if possible) to an earlier firmware that doesn't perform the baseband version checks.

==[[User:Ih8sn0w|IH8sn0w]] Method==
User [[User:Ih8sn0w|IH8sn0w]] mentioned a new method in [http://twitter.com/iH8sn0w/status/19249886721478656 this tweet] (an upgrade-only option in [[Sn0wbreeze]]). [http://twitter.com/iH8sn0w/status/19453808090288128 He confirmed] that his method is not the same as the above mentioned methods. To get more details, someone would have to compare the generated ipsw content.

==[[User:realven000m|ven000m]] Method==
There's a method ([http://twitter.com/ven000m/status/19526989958356992 that one]) which let you keep your old baseband while upgrading to a newer firmware. The only difference is, to Shift-click choose "UPDATE FIRMWARE", not restore. Apple does not check the baseband through this method.

[[Category:Baseband]]

Preventing Baseband Update

2011-01-16T14:22:42Z

Realven000m:

==Swap Ramdisks Method==
===Step 1: Swap Ramdisks===
Open the IPSW (with your favorite ZIP utility). Replace the [[Restore Ramdisk]] and the [[Update Ramdisk]] names with each other.

===Step 2: Edit options.plist===
# Unpack custom IPSW
# Decrypt Restore Ramdisk using [[xpwntool]] and mount it
# Navigate to /usr/local/share/restore
# Edit options.plist on the restore ramdisk
'''(Ignore the SystemPartitionSize in your plist file and leave it)'''

<pre>
<key>UpdateBaseband</key>
<false/>
</pre>

<ol start="5">
<li>Reencrypt the restore ramdisk</li>
<li>Repack the IPSW</li>
<li>Prepare device for custom firmware using [[redsn0w]]</li>
<li>Restore IPSW to [[iTunes]] in pwned [[DFU Mode]]</li>
</ol>

You must load a patched [[iBSS]]/[[iBEC]] for this to work. Using an original IPSW will not work, because redsn0w's pwned DFU Mode doesn't patch sigchecks in [[iBSS]].

==[[TinyUmbrella]]/[[Cydia]] Method for iPhone 4==

The [[N90ap|iPhone 4]] requires a AT+NONCE key signature from Apple in order to update the baseband. Pointing the hosts file to [[Cydia Server]] or running [[TinyUmbrella]] will allow this request for signature to be ignored, thus preventing a [[baseband]] update.

*'''This only works if [[Cydia]]/[[TinyUmbrella]] accepts the firmware's SHSH.'''
*'''This method 'works' with [[iOS]] 4.2.1, but in the restore ramdisk there is a baseband version check. If it doesn't match, it will crash before the Apple logo with the loading bar (the 2nd one, not the restore one) appears. It will boot and crash again. The usual 'Kick out of recovery mode' methods or "setenv auto-boot true" won't work, because it's not the problem that the auto-boot is false. So this method is actually not useful for [[iOS]] 4.2.1.'''
# Edit the hosts file and add the line "74.208.10.249 gs.apple.com" without the quotes, or run [[TinyUmbrella]] after saving the firmware's SHSH. If [[Cydia Server]] hasn't got your [[SHSH]], but you have it locally, use TSS Server method in [[TinyUmbrella]].
# Delete the .bbfw file in the firmware. Rename the IPSW to ZIP, open it and then go to the "firmware" folder. There you can see a .bbfw file, which means baseband firmware. The name gives you information about the baseband version and the Baseband BootLoader. Delete the .bbfw file and ZIP the firmware files (ZIP everything in the folder, don't ZIP the folder itself). Then you can restore to this. You will get error 11. This will only work up to iOS 4.1. If you do this on a newer version than iOS 4.1, your iPhone won't boot (see the text above).
# Use the "Restore" button in [[iTunes]] to update. you will get error 1013 on 4.2.1 when trying to restore thought the restore ramdisk
# If downgrading from a later firmware to a firmware that performs baseband checks, you will get error 1015. The only way to bypass this is to either update to the firmware version that matches your baseband version or downgrade (if possible) to an earlier firmware that doesn't perform the baseband version checks.

==[[User:Ih8sn0w|IH8sn0w]] Method==
User [[User:Ih8sn0w|IH8sn0w]] mentioned a new method in [http://twitter.com/iH8sn0w/status/19249886721478656 this tweet] (an upgrade-only option in [[Sn0wbreeze]]). [http://twitter.com/iH8sn0w/status/19453808090288128 He confirmed] that his method is not the same as the above mentioned methods. To get more details, someone would have to compare the generated ipsw content.

==[[User:realven000m|ven000m]] Method==
There's a method [http://twitter.com/ven000m/status/19526989958356992 this one] which let you keep your old baseband while upgrading to a newer firmware. The only difference is, to Shift-click choose "UPDATE FIRMWARE", not restore. Apple does not check the baseband through this method.

[[Category:Baseband]]