The iPhone Wiki - User contributions [en]

List of GSC bits

2013-02-08T21:29:35Z

Ryccardo: Values found on iPhone 4S 6.1.Pffft

{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
! width="200" | GSC bit
! width="60" | Sourced from [[model definition file]]
! width="400" | Description
|-
| 720p
| {{yes}}
|
|-
| [[accelerometer]]
| {{yes}}
| iPhone OS 1.0+
|-
| accessibility
| {{yes}}
| Settings>General>Accessibility. iPhone OS 3.0+
|-
| additional-text-tones
| {{yes}}
| New SMS sounds originally only for the iPhone 4. iOS >=4.2.1. Backported to the 3GS since iOS 5b3.
|-
| all-features
| {{yes}}
|
|-
| any-telephony
| {{yes}}
| Cellular radio
|-
| apple-internal-install
| {{partial|Yes?}}
| Used in internal firmwares, displays a watermark with Apple contact info on device lockscreen, retail firmwares just show a "INTERNAL_INSTALL_LEGAL_DECLARATION" string
|-
| applicationInstallation
| {{yes}}
| Can install apps?? used in demo units??
|-
| armv6
| {{yes}}
| CPU can execute ARM6 instructions
|-
| armv7
| {{yes}}
| CPU can execute ARM7 instructions
|-
| assistant
| {{yes}}
| Siri. iOS ≥5.0
|-
| auto-focus-camera
| {{yes}}
| Camera is not focus free. iPhone OS 3.0+
|-
| [[bluetooth]]
| {{yes}}
|
|-
| bluetooth-le
| {{yes}}
| Found on iPhone 4S. iOS ≥5
|-
| camera-flash
| {{yes}}
| LED flash, iOS 4.0+
|-
| cameraRestriction
| {{no}}
| Camera disabled via on-device or externally imposed Restrictions
|-
| cellular-data
| {{no}}
| Wireless modem
|-
| contains-cellular-radio
|
|
|-
| data-plan
| {{no|Unlikely}}
|
|-
| delay-sleep-for-headset-click
| {{yes}}
|
|-
| device-name-localized
|
| Unknown
|-
| device-name
| {{yes}}
| Device class, e.g. "iPhone"
|-
| dictation
| {{yes}}
| Microphone key on on-screen keyboard
|-
| display-mirroring
| {{yes}}
| AirPlay whole screen streaming
|-
| displayport
|
|
|-
| encrypted-data-partition
| {{yes}}
| Hardware encryption for 3GS and newer devices. iPhone OS 3.0+
|-
| encode-aac
| {{yes}}
|
|-
| enforce-googlemail
| {{no}}
| (Shows Google Mail logo instead of Gmail in the UK)
|-
| enforce-shutter-click
| {{no}}
| Forces camera click even in silent mode in Japan and another country I don't remember -- look in Regional*.plist files under Celestial framework
|-
| explicitContentRestriction
| {{no}}
| "Explicit" songs and podcasts disabled in Settings/General/Restrictions
|-
| fcc-logos-via-software
| {{yes}}
| Enables PNG viewer in Settings/General/About/[Legal]/Regulatory
|-
| front-facing-camera
| {{yes}}
| iOS 4.0+
|-
| full-6
| {{yes}}
| Found on an iPhone 4 S 6.1
|-
| gamekit
| {{yes}}
| Game Center
|-
| gas-gauge-battery
| {{yes}}
| Precise battery measurement, enables Settings>General>Usage>Battery Percentage. iPhone OS 3.0+
|-
| [[wikipedia:Global Positioning System|gps]]
| {{yes}}
| iPhone OS 2.0+
|-
| green-tea
| {{no}}
| (turned on in iPhones sold in China)
|-
| not-green-tea
| {{no}}
|
|-
| [[gyroscope]]
| {{yes}}
| iOS 4.0+
|-
| h264-encoder
| {{yes}}
| Can encode audio?video? iPhone OS 3.0+
|-
| hall-effect-sensor
| {{yes}}
| (Very likely the magnetic sleep switch on iPad 2)
|-
| hardware-keyboard
| {{yes}}
|
|-
| hd-video-capture
| {{yes}}
|
|-
| hdr-image-capture
| {{yes}}
| HDR, iOS 4.1+. Seems to depend on camera-flash on 4.3+
|-
| hearingaid-audio-equalization
| {{yes}}
|
|-
| hearingaid-low-energy-audio
| {{yes}}
|
|-
| hearingaid-power-reduction
| {{yes}}
|
|-
| hiccough-interval
| {{yes}}
| (Unknown)
|-
| hide-non-default-apps
| {{yes}}
| ??
|-
| hidpi
| {{yes}}
| Retina display
|-
| homescreen-wallpaper
| {{yes}}
| Also controls grill vs. reflective dock. iOS ≥4
|-
| hw-encode-snapshots
| {{yes}}
| ??
|-
| hw-snapshots-need-purplegfx
| {{yes}}
| ??
|-
| international-settings
| {{yes}}
| (Settings/General/International, wildly used in iPhone OS 1.1+)
|-
| io-surface-backed-images
| {{yes}}
| ??
|-
| ipad
| {{yes}}
| (Is iPad. used to be "wildcat".)
|-
| launch-mode
| {{no}}
| iPad SpringBoard orientation??
|-
| load-thumbnails-while-scrolling
| {{yes}}
| ??
|-
| [[location-services]]
| {{yes}}
|
|-
| location-reminders
| {{yes}}
| Geofence support?
|-
| [[magnetometer]]
| {{yes}}
| iPhone OS 3.0+
|-
| main-screen-height
| {{no}}
|
|-
| main-screen-width
| {{no}}
|
|-
| main-screen-orientation
| {{no}}
|
|-
| main-screen-scale
| {{no}}
|
|-
| MapKitAvailable
| {{no}}
|
|-
| MapKitAvailableGreenTea
| {{no}}
|
|-
| MapKitUserShiftingGreenTea
| {{no}}
|
|-
| MapKitUserShiftingNonGreenTea
| {{no}}
|
|-
| MapsUserShiftingGreenTea
| {{no}}
|
|-
| MapsUserShiftingNonGreenTea
| {{no}}
|
|-
| MapsVisible
| {{no}}
| (not sure whether it is a GSC bit)
|-
| MapsVisibleGreenTea
| {{no}}
| (not sure whether it is a GSC bit, also green tea = for chinese market)
|-
| marketing-name
| {{yes}}
| Brand name of your device e.g. "iPhone 3GS"
|-
| mars-volta
|
| spotted in iOS 5.0.1b2 4S
|-
| microphone
| {{yes}}
|
|-
| mms
| {{yes}}
|
|-
| multitasking
| {{yes}}
|
|-
| multitasking-gestures
| {{yes}}
| The infamous iPad swipe-to-cycle-apps and open multitasking 4- or 5-fingered actions
|-
| nike-ipod
| {{yes}}
| Nike+iPod internal (or external with hacked drivers) receiver, iPhone OS 2.?+
|-
| opengles-1
| {{yes}}
| Supports OpenGL 1
|-
| opengles-2
| {{yes}}
| Supports OpenGL 2
|-
| peer-peer
| {{yes}}
| Bluetooth "gaming" extensions, iPhone OS 3.0+
|-
| personal-hotspot
| {{yes}}
|
|-
| photo-adjustments
| {{yes}}
| Rotate/auto exposure/redeye correct/crop in the Photos app
|-
| photo-stream
| {{no}}
|
|-
| piezo-clicker
| {{yes}}
| Integrated non-speaker in iPod touch 1G
|-
| post-animate
| {{no}}
| ??
|-
| pre-animate
| {{no}}
| ??
|-
| proximity-sensor
| {{yes}}
| iPhone OS 1.0+
|-
| ptp-large-files
| {{yes}}
| PTP is the standard camera interface protocol used to access the Camera Roll from generic PC software
|-
| ringer-switch
| {{yes}}
| Mute switch
|-
| screen-dimensions
| {{no}}
| ??
|-
| sensitive-ui
| {{no}}
| ??
|-
| serial
| {{no}}
| ??
|-
| shoebox
| {{yes}}
| [[Passbook]]
|-
| siri-gesture
| {{yes}}
| Settings/General/Siri/Raise-to-speak
|-
| sms
| {{yes}}
| Can send text messages. iPhone OS 1.0+
|-
| software-dimming-alpha
| {{yes}}
| ??
|-
| stand-alone-contacts
| {{yes}}
| ??
|-
| still-camera
| {{yes}}
| Can take photos. iPhone OS 1.0 or 2.0+
|-
| telephony
| {{yes}}
| Can make phone calls. iPhone OS 1.0+
|-
| telephony-maximum-generation
| {{yes}}
| (Modem type. 2.5 = EDGE 3 = 3G 3.5 = HSDPA)
|-
| tv-out-crossfade
| {{yes}}
| ([[:/Applications/MobileSlideShow.app|Photos app]] slideshow transitions enabled)
|-
| tv-out-settings
| {{no}}
| (not sure whether it is a GSC bit, sounds like a SpringBoard property)
|-
| unified-ipod
| {{yes}}
| Joins Music and Videos into iPod on iOS <5. Still enabled on latest iPhones where it won't matter…
|-
| venice
| {{yes}}
| FaceTime
|-
| 3Gvenice
| {{yes}}
| FaceTime over 3G
|-
| video-camera
| {{yes}}
| Can record videos. iPhone OS 3.0+
|-
| voice-control
| {{yes}}
| Voice control available. iPhone OS 3.0+
|-
| voip
| {{yes}}
| VoIP multitasking??
|-
| volume-buttons
| {{yes}}
|
|-
| wapi
|
| ??
|-
| wifi
| {{yes}}
| Contains Wi-Fi radio.
|-
| youtube
| {{yes}}
| YouTube app accessible, iOS <6b4
|-
| youtubePlugin
|
|
|}

List of GSC bits

2013-02-08T21:16:53Z

Ryccardo: THIS GAVE ME A HEADACHE.

{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
! width="200" | GSC bit
! width="60" | Sourced from [[model definition file]]
! width="400" | Description
|-
| 720p
| {{yes}}
|
|-
| [[accelerometer]]
| {{yes}}
| iPhone OS 1.0+
|-
| accessibility
| {{yes}}
| Settings>General>Accessibility. iPhone OS 3.0+
|-
| additional-text-tones
| {{yes}}
| New SMS sounds originally only for the iPhone 4. iOS >=4.2.1. Backported to the 3GS since iOS 5b3.
|-
| all-features
| {{yes}}
|
|-
| any-telephony
| {{yes}}
| Cellular radio
|-
| apple-internal-install
| {{partial|Yes?}}
| Used in internal firmwares, displays a watermark with Apple contact info on device lockscreen, retail firmwares just show a "INTERNAL_INSTALL_LEGAL_DECLARATION" string
|-
| armv6
| {{yes}}
| CPU can execute ARM6 instructions
|-
| armv7
| {{yes}}
| CPU can execute ARM7 instructions
|-
| assistant
| {{yes}}
| Siri. iOS ≥5.0
|-
| auto-focus-camera
| {{yes}}
| Camera is not focus free. iPhone OS 3.0+
|-
| [[bluetooth]]
| {{yes}}
|
|-
| bluetooth-le
| {{yes}}
| Found on iPhone 4S. iOS ≥5
|-
| camera-flash
| {{yes}}
| LED flash, iOS 4.0+
|-
| cameraRestriction
| {{no}}
| Camera disabled via on-device or externally imposed Restrictions
|-
| cellular-data
| {{no}}
| Wireless modem
|-
| contains-cellular-radio
|
|
|-
| data-plan
| {{no|Unlikely}}
|
|-
| delay-sleep-for-headset-click
| {{yes}}
|
|-
| device-name-localized
|
| Unknown
|-
| device-name
| {{yes}}
| Device class, e.g. "iPhone"
|-
| dictation
| {{yes}}
| Microphone key on on-screen keyboard
|-
| display-mirroring
| {{yes}}
| AirPlay whole screen streaming
|-
| displayport
|
|
|-
| encrypted-data-partition
| {{yes}}
| Hardware encryption for 3GS and newer devices. iPhone OS 3.0+
|-
| encode-aac
| {{yes}}
|
|-
| enforce-googlemail
| {{no}}
| (Shows Google Mail logo instead of Gmail in the UK)
|-
| enforce-shutter-click
| {{no}}
| Forces camera click even in silent mode in Japan and another country I don't remember -- look in Regional*.plist files under Celestial framework
|-
| explicitContentRestriction
| {{no}}
| "Explicit" songs and podcasts disabled in Settings/General/Restrictions
|-
| fcc-logos-via-software
| {{yes}}
| Enables PNG viewer in Settings/General/About/[Legal]/Regulatory
|-
| front-facing-camera
| {{yes}}
| iOS 4.0+
|-
| gamekit
| {{yes}}
| Game Center
|-
| gas-gauge-battery
| {{yes}}
| Precise battery measurement, enables Settings>General>Usage>Battery Percentage. iPhone OS 3.0+
|-
| [[wikipedia:Global Positioning System|gps]]
| {{yes}}
| iPhone OS 2.0+
|-
| green-tea
| {{no}}
| (turned on in iPhones sold in China)
|-
| not-green-tea
| {{no}}
|
|-
| [[gyroscope]]
| {{yes}}
| iOS 4.0+
|-
| h264-encoder
| {{yes}}
| Can encode audio?video? iPhone OS 3.0+
|-
| hall-effect-sensor
| {{yes}}
| (Very likely the magnetic sleep switch on iPad 2)
|-
| hardware-keyboard
| {{yes}}
|
|-
| hd-video-capture
| {{yes}}
|
|-
| hdr-image-capture
| {{yes}}
| HDR, iOS 4.1+. Seems to depend on camera-flash on 4.3+
|-
| hiccough-interval
| {{yes}}
| (Unknown)
|-
| hide-non-default-apps
| {{yes}}
|
|-
| hidpi
| {{yes}}
| Retina display
|-
| hw-encode-snapshots
| {{yes}}
|
|-
| hw-snapshots-need-purplegfx
| {{yes}}
|
|-
| international-settings
| {{yes}}
| (Settings/General/International, wildly used in iPhone OS 1.1+)
|-
| io-surface-backed-images
|
|
|-
| ipad
| {{yes}}
| (Is iPad. used to be "wildcat".)
|-
| launch-mode
|
| iPad SpringBoard orientation??
|-
| load-thumbnails-while-scrolling
| {{yes}}
|
|-
| [[location-services]]
| {{yes}}
|
|-
| [[magnetometer]]
| {{yes}}
| iPhone OS 3.0+
|-
| main-screen-height
| {{no}}
|
|-
| main-screen-width
| {{no}}
|
|-
| main-screen-orientation
| {{no}}
|
|-
| main-screen-scale
| {{no}}
|
|-
| MapKitAvailable
| {{no}}
|
|-
| MapKitAvailableGreenTea
| {{no}}
|
|-
| MapKitUserShiftingGreenTea
| {{no}}
|
|-
| MapKitUserShiftingNonGreenTea
| {{no}}
|
|-
| MapsUserShiftingGreenTea
| {{no}}
|
|-
| MapsUserShiftingNonGreenTea
| {{no}}
|
|-
| MapsVisible
| {{no}}
| (not sure whether it is a GSC bit)
|-
| MapsVisibleGreenTea
| {{no}}
| (not sure whether it is a GSC bit, also green tea = for chinese market)
|-
| marketing-name
| {{yes}}
| Brand name of your device e.g. "iPhone 3GS"
|-
| mars-volta
|
| (not sure whether it is a GSC bit - spotted in iOS 5.0.1b2 4S)
|-
| microphone
| {{yes}}
|
|-
| mms
| {{yes}}
|
|-
| multitasking
| {{yes}}
|
|-
| multitasking-gestures
| {{yes}}
| The infamous iPad swipe-to-cycle-apps and open multitasking 4- or 5-fingered actions
|-
| nike-ipod
| {{yes}}
| Nike+iPod internal (or external with hacked drivers) receiver, iPhone OS 2.?+
|-
| opengles-1
| {{yes}}
| Supports OpenGL 1
|-
| opengles-2
| {{yes}}
| Supports OpenGL 2
|-
| peer-peer
| {{yes}}
| Bluetooth "gaming" extensions, iPhone OS 3.0+
|-
| photo-stream
|
|
|-
| piezo-clicker
| {{yes}}
| Integrated non-speaker in iPod touch 1G
|-
| post-animate
| {{no}}
|
|-
| pre-animate
| {{no}}
|
|-
| proximity-sensor
| {{yes}}
| iPhone OS 1.0+
|-
| ringer-switch
| {{yes}}
| Mute switch
|-
| screen-dimensions
| {{no}}
|
|-
| sensitive-ui
| {{no}}
|
|-
| serial
| {{no}}
|
|-
| sms
| {{yes}}
| Can send text messages. iPhone OS 1.0+
|-
| stand-alone-contacts
| {{yes}}
|
|-
| still-camera
| {{yes}}
| Can take photos. iPhone OS 1.0 or 2.0+
|-
| telephony
| {{yes}}
| Can make phone calls. iPhone OS 1.0+
|-
| telephony-maximum-generation
| {{yes}}
| (Modem type. 2.5 = EDGE 3 = 3G 3.5 = HSDPA)
|-
| tv-out-crossfade
| {{yes}}
| ([[:/Applications/MobileSlideShow.app|Photos app]] slideshow transitions enabled)
|-
| tv-out-settings
| {{no}}
| (not sure whether it is a GSC bit, sounds like a SpringBoard property)
|-
| unified-ipod
| {{yes}}
| Joins Music and Videos into iPod on iOS <5. Still enabled on latest iPhones where it won't matter…
|-
| venice
| {{yes}}
| FaceTime
|-
| 3Gvenice
| {{yes}}
| FaceTime over 3G
|-
| video-camera
| {{yes}}
| Can record videos. iPhone OS 3.0+
|-
| voice-control
| {{yes}}
| Voice control available. iPhone OS 3.0+
|-
| voip
| {{yes}}
| VoIP multitasking?
|-
| volume-buttons
| {{yes}}
|
|-
| wapi
|
|
|-
| wifi
| {{yes}}
| Contains Wi-Fi radio.
|-
| youtube
| {{yes}}
| YouTube app accessible, iOS <6b4
|-
| youtubePlugin
|
|
|}

Restore Mode

2013-02-08T20:12:39Z

Ryccardo: /* Restore Procedure */ correct terminology

[[File:Small_iphone_restore.JPG|thumb|150px|iPhone during iTunes restore.]]
'''Restore Mode''' is the mode that an [[iDevice]] enters to run a [[ramdisk]].

== Restore Procedure ==
{{see also|iPhone Restore Procedure}}
# "Preparing (iDevice type) for the restore." (Get the device [[Recovery Mode|from userland to iBoot]] or from [[DFU Mode]] to [[iBSS]])
# "[[SHSH Protocol|Verifying (iDevice type) restore]] with Apple" (or [[Cydia Server|Cydia]] or [[TinyUmbrella]]).
# Preparing the firmware for the restore.
# "Preparing <iDevice type> for the restore."
# "Restoring <iDevice type> software." ([[ASR]] RESTORE)
# "Verifying <iDevice type> software." ([[ASR]] VERIFY)
# "Restoring <iDevice type> firmware." (The rest of the restore process isn't reported to the host computer in real-time. This includes the restore of the [[NOR]]/[[NAND|boot partition]] image, the installation of the baseband firmware, ...)

== Files used ==
{{see also|IPSW File Format}}
The [[/|firmware]] is the biggest [[DMG File Format|Disk Image]] file in the IPSW and contains all files for the root partition. The [[ramdisk]]s are the smaller Disk Images, and in the case of the [[m68ap|iPhone 2G]], [[n82ap|iPhone 3G]], [[n88ap|iPhone 3GS]], and [[k66ap|iPad 1G]], the [[Baseband Firmware|baseband]] also. The firmware images are stored in the <code>./firmware/all_flash</code> path (relative to the root of the IPSW) and are eventually sent to the device after [[PROD|device-specific customization]], if applicable.

== Exploits ==
The original jailbreaks were done by booting the phone into restore mode and copying an [[/private/etc/fstab|fstab]][<nowiki/>[[wikipedia:fstab|WP]]<nowiki/>] and [[/System/Library/Lockdown/Services.plist|afcd plist]] from the [[/private/var/root|user partition]] to the [[/|root partition]]. This was done by using the [[cp (iBoot command)|<code>cp</code> iBoot command]], a command which had access to the whole filesystem.

== See Also ==
* [[MobileDevice Library]] (<code>iTunesMobileDevice.dll</code>)
* [[DFU Mode]]
* [[/private/etc/fstab]]
* [[Ramdisk]]

== External Links ==
* [http://lpahome.com/geohot/gshell.rar gshell]
* Wikipedia on [[wikipedia:fstab|fstab]]

[[Category:Jailbreaks]]
[[Category:Protocols (S5L)]]

AT+XNONCE

2011-09-26T13:54:00Z

Ryccardo: Dead link. It went AT+XNONCE=? and returned random.

The AT+NONCE command returns a random string that was generated at boot time. This string is used together with some other device specific identifiers as a base to let Apple generate a certificate, similar to [[SHSH]], to allow installation of [[Baseband Firmware|baseband firmware]]. The baseband checks the certificate and allows or denies installation of its firmware.

This string can be obtained by using the [[MobileDevice Library]] to call for AMDeviceCopyValue on "BasebandNonce".

===References / More infos===
*<del>[http://iphwn.org/nonce.txt example command]</del>
*[[Talk:XMM_6180#Downgrade|discussion]]
*[[User:MuscleNerd|MuscleNerd]] says [http://twitter.com/MuscleNerd/status/18667056119 "baseband is stricter signed"].

{{stub|firmware}}

Bluetooth

2011-09-19T20:19:51Z

Ryccardo: /* Profiles available with unofficial software */ :)

Bluetooth is a short-range wireless technology. Bluetooth hardware is provided on all iPhone platforms and the second generation iPod Touch platform. Apple has severely restricted the functions of Bluetooth to the end-user, for seemingly no reason , as the hardware supplied is capable of most if not all current bluetooth 2.0/2.1 functions.

With iPhoneOS 3.0, support for 3G internet bridging (PAN) or 'tethering' and A2DP over Bluetooth has been added, however the file sharing OBEX protocol is notably still missing.

== Hardware==
===[[iPad]]===
* [[K48ap|iPad]] - [[BCM4329]] - Bluetooth (r) 2.1 + EDR
* [[iPad 2]] - [[BCM4329]] - Bluetooth (r) 2.1 + EDR

===[[iPhone]]===
* [[m68ap|iPhone]] - [[BlueCore 4]] - Bluetooth (r) 2.0 + EDR
* [[N82ap|iPhone 3G]] - [[BlueCore 6]] - Bluetooth (r) 2.0 + EDR
* [[N88ap|iPhone 3GS]] - [[BCM4325]] - Bluetooth (r) 2.1 + EDR
* [[N90ap|iPhone 4]] - [[BCM4329]] - Bluetooth (r) 2.1 + EDR

===[[iPod touch]]===
* [[N45ap|iPod touch]] - No Bluetooth Hardware
* [[N72ap|iPod touch 2G]] - [[BCM4325]] - Bluetooth (r) 2.1 + EDR
* [[N18ap|iPod touch 3G]] - [[BCM4329]] - Bluetooth (r) 2.1 + EDR
* [[n81ap|iPod touch 4G]] - [[BCM4329]] - Bluetooth (r) 2.1 + EDR

==Software==
=== Access ===

Developers have been able to successfully access and interface the Bluetooth hardware to achieve basic L2CAP, RCOMM and OBEX. Besides individual closed-apps that contain a patched version of the lwBT Bluetooth Stack (e.g. roqyGPS for SPP plus iBluetooth and iBlueNova for OBEX), the open-source BTstack project at http://btstack.googlecode.com provides general Bluetooth support for multiple applications. Examples available in Cydia: BTstack Keyboard, BTstack Mouse, WiiMote OpenGL Demo and some of ZodTTD's emulators.

The [[/dev|device nodes]] of relevance here, are
* [[/dev/uart.bluetooth|uart.bluetooth]]
* [[/dev/cu.bluetooth|cu.bluetooth]]
* [[/dev/tty.bluetooth|tty.bluetooth]]
* [[/dev/btreset|btreset]]
* [[/dev/btwake|btwake]]

===Officially Supported Profiles ===
*HFP - Hands-Free Profile
*HSP - Headset Profile
*??? - Peer-to-peer connectivity (iPhone OS 3.0 and above; iPhone 3G and newer)
*AD2P - Stereo audio streaming (iPhone OS 3.0 and above; iPhone 3G and newer)
*PAN - Tethering (iPhone OS 3.0 and above; iPhone 3G and newer)
*AVRCP - Media controls (Partial support since iPhone OS 3.0, improved in iOS 4.1; iPhone 3G and newer)
*SPP - Serial Port Profile for Braille terminals (iOS 4.? and above)

More info: [http://en.wikipedia.org/wiki/Bluetooth_profile Bluetooth Profiles]

===Profiles available with unofficial software===
*OBEX - OBject EXchange ([[iBluetooth]] on iPhone OS 2.x; [[iBlueNova]] on 3.x; [[Celeste]] on iOS 4.x; No equivalent on iOS 5.x)
*DUN - Dial-up Networking Profile ()
*SPP - Serial Port Profile for GPS receivers ([[roqyBT]])
*ADP - Mono audio streaming ([[Bluetooth Mono SBSettings]] on iPhone OS 3.x)

===Bluetooth Stack===

[[Image:Bluetoothstack.gif]]
The chip implements up to the HCI in the Bluetooth Stack. The profiles seem to be implemented in software.

===BTServer===
The iPhone has a Bluetooth daemon called BTServer that serves the little the iPhone currently does. It is launched by the /sbin/launchd process. On killing the BTServer process, launchd restart it almost instantly. It is possible to catch BTServer itself launches the BlueTool utility by rapidly displaying processes right after killing BTServer. If bluetooth was set inactive in the control panel, BTServer call /usr/sbin/BlueTool -f /etc/bluetool/iPhone1,1.deepsleep.script. On the other hand, If bluetooth was set active in the control panel, BTServer calls the /etc/bluetool/iPhone1,1.init.script.

====Disabling BTServer====
In order to fool around with bluetooth it seems necessary to prevent the BTServer from being loaded. The System/Library/LaunchDaemons/com.apple.BTServer.plist file can be edited. There is a 'disabled' key set to false by default. Setting it true will prevent BTServer from being started. With BTServer completely deactivated, the control panel bluetooth item should say 'inactive' and the toggle switch grayed out.

'''Update''': It is not necessary to disable the BTserver. It's enough to keep Bluetooth turned off in the control panel.

====Enabling Bluetooth Logs[http://code.google.com/p/iphone-elite/wiki/BTServerLogs]====
mkdir -p /var/logs/BTServer
touch /var/logs/BTServer/stderr
touch /var/logs/BTServer/stdout

(As of firmware 2.0, the above mentioned snippet does not seem to work anymore)

'''Update''' For firmware 2.0, you also need to change the ownership of the log directory:
chown -R mobile /var/logs/BTServer

===BlueTool===
This is a low level utility, used by the BTServer daemon to configure the iPhone Bluetooth module through the /etc/bluetool/iPhone1,1.init.script file.

This effectively 'turns on' bluetooth (sets it to discoverable) but it should be noted that the kernel doesnt know it (there is no bt icon in the status bar).

to do this your self:

#bluetool
Welcome to bluetool... (etc)

bluetool> device -d /dev/cu.bluetooth # select the device

*this makes bluetool call a function from CoreTelephony which has been reverse engineered already called _CTServerConnectionCreate(CFAllocatorRef, void *, int *)

bluetool will then tell you (if successful) that it has opened /dev/cu.bluetooth @ 115200 baud

bluetool> power on

*again, a CT function is called, however no-one (to the extent of my knowledge) has reversed it. _CTServerConnectionSetBluetoothPower(???) however you can bet that the first argument is going to be a connection reference made from calling ConnectionCreate -> ie connRef = _CTServerConnectionCreate();

bluetool> autobaud

*from here on bluetool only deals with posix functions (yay!!) and it basically sends ioctl() requests to the bluetooth driver in the coveted HCI.

knowing the ioctl() numbers for each HCI command can only be found out by reverse engineering or porting/using strace, dtrace, ktrace, sc_usage or truss.

====Note with bluetool====

it may not be that easy becuase on reverse engineer of a pre 2.0 bluetool, calls functions from IOKit, which is obviously not posix. The 2.0 bluetool still links against IOKit.

to 'unlock' the iphones bluetooth capabilities, which I believe are there (in the driver, the chip can DEFINITELY do it) one would need to be able to send the driver raw HCI, which this program demonstrates it can do.

Output of the BlueTool console on an iPhone 2G:

bluetool-> hci info

Radio Manufacturer: CSR
Bluetooth HCI Specification: Version 2.0

Bluetooth Address: 00:02:5b:00:a5:a5

bluetool-> csr -V

CSR BlueCore Version 0x0003, Revision 0x0030, Build: A06

From CSR' BlueCore BCCMD Commands Document (bcore-sp-005Pe)

ChipVer = 0x03, BlueCore3-Multimedia, BlueCore3-ROM, BlueCore3-FLASH, BlueCore4-External, BlueCore4-ROM

ChipRev = 0x30, BlueCore4-ROM

ChipAnaVer = A06 (???)

SHA-1 Image Segment Overflow

2011-09-19T20:16:10Z

Ryccardo: + Compatibility

SHAtter was an exploit that allowed unsigned code execution from a flaw in the bootrom. It was never used in a public jailbreak due to the exploit used in [[limera1n]] being released first.

== Compatibility ==
All [[A4]] devices:
*[[K48AP|iPad 1G]]
*[[N90AP|iPhone 4]]
*[[K66AP|Apple TV 2G]]

== Credit ==
*[[pod2g]]

== Vulnerability ==
Explaination by [[p0sixninja]] at [[MyGreatFest]]:

It tricked the bootrom to think the size of the image uploading was larger then what it actually was.Then when it would try to load the image, it would see that it was wrong. Then it would try to wipe out the entire image with all 0s and go past it and start wiping out bootrom.

Exploitation was done by overwriting sha1 registers to zeros so then when it went to check images it would copy part of image into 0x0. (where the bootrom is) It would take the image uploaded and copy it over top of the bootrom. (which turns out to be writable over the data portion)

[[Category:Bootrom Exploits]]

Talk:Main Page

2011-09-13T20:21:27Z

Ryccardo: /* Firmware folder structure */ reply

{{Talk Archive|2010|2011}}

Mediawiki has been upgraded to 1.17, post here if there are any problems. Thanks everyone for continuing to support this wiki, and thanks Dialexio and http for their excellent moderation(also props on the new table) --[[User:Geohot|geohot]] 22:46, 15 July 2011 (MDT)
:The one on the right is a thing with mediawiki, it does the styles all on its own. --[[User:Balloonhead66|Balloonhead66]] 22:47, 15 July 2011 (MDT)
A couple of things in general, I would really like to see higher quality content here, I wish http://iphonedevwiki.net/ would merge with us to get a good dev side of things. Also http://www.idroidproject.org/ could move here. This is a fairly reliable website that's been around since 2008. Tons of stuff should be filled out that isn't, stuff about all the sandboxing crap added to kernel...etc. If you know someone able to fill it out, poke and prod them to get them to do it. --[[User:Geohot|geohot]] 23:01, 15 July 2011 (MDT)
:And little side matter, anyone feel like coming up with a better image than the iphone 2g in the upper left corner? --[[User:Geohot|geohot]] 23:06, 15 July 2011 (MDT)
[[File:NewLogo.png|thumb|135px|Proposed change]]
::I kindof did, here it is: [[:File:NewLogo.png]] I can create a new one with the iPhone wiki, but I think that is already there. As for the apple favico, could we use [[:File:Apple-logo.png]]? Convertico.com will create an ico file for you from a png--[[User:Balloonhead66|Balloonhead66]] 23:29, 15 July 2011 (MDT)

== Table ==
Can we change it to a <code>class="wikitable"</code>? It looks MUCH nicer that way. --[[User:Balloonhead66|Balloonhead66]] 22:50, 15 July 2011 (MDT)

== [[iPhone Tracker]] ==

[[iPhone Tracker]]? --[[User:Balloonhead66|Balloonhead66]] 11:34, 9 September 2011 (MDT)

== Firmware folder structure ==

Does it make sense to recreate the iOS folder structure and list every file and subfolder of every iDevice ? I think it's allot of effort to maintain and with iOS 5 upcoming I also forsee numerous changes. Having different firmwares for the devices (2g 3.X, 3G 4.X, 3GS 5.X, ...) makes it even harder I think.
Just a thought.--[[User:M2m|M2m]] 21:00, 10 September 2011 (MDT)
:I'll second that (though I haven't seen iOS 5's guts yet). Some notable files (e.g.- [[:/private/etc/fstab]]) are all right though. --[[User:Dialexio|Dialexio]] 22:30, 10 September 2011 (MDT)
:I agree. I also find it very annoying that many Apps' pages got moved to some strange page name, just to match some file structure. I would prefer to have the Apps under their original name. If a page for some file structure infos is really needed, then this might get added additionally to either the App's page or a separate page. And if all agree to this change, how should we do this transition in detail? Maybe a page [[File Structure]] with all aggregated infos or something like this? --[[User:Http|http]] 10:35, 11 September 2011 (MDT)
:I second that. Maybe just model it after ONE firmware: [[iOS]] 5.0 for the iPhone 5 when it comes out... --[[User:Balloonhead66|Balloonhead66]] 13:34, 11 September 2011 (MDT)
:I would keep the filesystem structure (mixing contents from every version) but link to "file pages" with their canonical name: this way one can easily look up the purpose of a file/folder. (example: remove "iOS4+" from [[/private/var]]/Keybags, the power user working on a 3.x system won't find it on their device but will know that that folder has a specific purpose in "other" versions.) IMHO, the attempt to accurately describe the filesystem has historical and practical value for this wiki. --[[User:Ryccardo|Ryccardo]] 14:21, 13 September 2011 (MDT)

Talk:IRecovery

2011-08-22T15:00:05Z

Ryccardo: reply

== Including forks of iRecovery? ==
Wouldn't it be an idea to include the various forks of iRecovery? p0sixninja have made one and so has GreySyntax (Jordan). Jordan is even doing an iRecovery++. Westbaer's version haven't been updated since July 2009 whereas the others have been updated just a day or two ago. [[User:Josso|Josso]] 09:22, 10 May 2010 (UTC)
:I definitely agree, along with binaries for the 3 major platforms. --[[User:Ryccardo|Ryccardo]] 09:00, 22 August 2011 (MDT)

== Supported Raw Commands ==

A list of raw commands supported by each firmware and short description i think would be great. Most likely in table format if big enough, maybe a page for them if there is too many for this page.
--[[User:Markcoker|Blue Skies]] 15:31, 18 August 2011 (MDT)
:This kind of list belongs to iBoot page IMO. iRecovery is just an interface that sends everything you type to the device and doesn't contain any commands by itself. Also, Apple doesn't include any useful commands besides reboot, setenv and some others in RELEASE-type iBoots from 4.x onwards, so it could only serve historic purpose, I guess --pjakuszew 16:32, 18 August 2011 (MDT)
::Ok great can we add this to iboot page then, with a discription then. I agree it doesn't belong here (Not that it hurts maybe should still have a link to this info though) some examples ive found(below). are they all still working.. what are they used for, are there more (im sure there is) i think alot of people want to know about this information.--[[User:Markcoker|Blue Skies]] 05:14, 19 August 2011 (MDT)

setenv boot-device nand0
setenv boot-partition 0
setenv boot-path /System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8900xrb
setenv boot-file nand0:0,/System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8900xrb
setenv boot-command fsboot
setenv display-color-space RGB888
setenv display-timing opt
setenv config_board m68ap
setenv boot delay
setenv auto-boot true
saveenv

:These are actually environment variables, not commands by itself. They are stored in NVRAM, think of it as a very simplified version of Windows registry. <code>boot-device</code>, <code>boot-partition</code> and <code>boot-path</code> are used for locating the kernel cache file. <code>boot-command</code> is the default command to execute if boot countdown is not interrupted. <code>boot-delay</code> is the delay for executing the boot-command. <code>auto-boot</code> is the variable that can be used to enable and disable automatic booting. If you set it to false, your device won't boot into iOS, but instead go into recovery mode. --pjakuszew 05:50, 19 August 2011 (MDT) 

::Thanks for formatting :D, great information. Is there a way to display environment variables, or is there information on the defaults used and other parameters you can set. --[[User:Markcoker|Blue Skies]] 07:19, 22 August 2011 (MDT)

Talk:IRecovery

2011-08-22T14:59:54Z

Ryccardo: reply

== Including forks of iRecovery? ==
Wouldn't it be an idea to include the various forks of iRecovery? p0sixninja have made one and so has GreySyntax (Jordan). Jordan is even doing an iRecovery++. Westbaer's version haven't been updated since July 2009 whereas the others have been updated just a day or two ago. [[User:Josso|Josso]] 09:22, 10 May 2010 (UTC)
:I definitely agree, along with binaries for the 3 major platforms.

== Supported Raw Commands ==

A list of raw commands supported by each firmware and short description i think would be great. Most likely in table format if big enough, maybe a page for them if there is too many for this page.
--[[User:Markcoker|Blue Skies]] 15:31, 18 August 2011 (MDT)
:This kind of list belongs to iBoot page IMO. iRecovery is just an interface that sends everything you type to the device and doesn't contain any commands by itself. Also, Apple doesn't include any useful commands besides reboot, setenv and some others in RELEASE-type iBoots from 4.x onwards, so it could only serve historic purpose, I guess --pjakuszew 16:32, 18 August 2011 (MDT)
::Ok great can we add this to iboot page then, with a discription then. I agree it doesn't belong here (Not that it hurts maybe should still have a link to this info though) some examples ive found(below). are they all still working.. what are they used for, are there more (im sure there is) i think alot of people want to know about this information.--[[User:Markcoker|Blue Skies]] 05:14, 19 August 2011 (MDT)

setenv boot-device nand0
setenv boot-partition 0
setenv boot-path /System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8900xrb
setenv boot-file nand0:0,/System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8900xrb
setenv boot-command fsboot
setenv display-color-space RGB888
setenv display-timing opt
setenv config_board m68ap
setenv boot delay
setenv auto-boot true
saveenv

:These are actually environment variables, not commands by itself. They are stored in NVRAM, think of it as a very simplified version of Windows registry. <code>boot-device</code>, <code>boot-partition</code> and <code>boot-path</code> are used for locating the kernel cache file. <code>boot-command</code> is the default command to execute if boot countdown is not interrupted. <code>boot-delay</code> is the delay for executing the boot-command. <code>auto-boot</code> is the variable that can be used to enable and disable automatic booting. If you set it to false, your device won't boot into iOS, but instead go into recovery mode. --pjakuszew 05:50, 19 August 2011 (MDT) 

::Thanks for formatting :D, great information. Is there a way to display environment variables, or is there information on the defaults used and other parameters you can set. --[[User:Markcoker|Blue Skies]] 07:19, 22 August 2011 (MDT)

Talk:Baseband Commands

2011-08-18T22:50:26Z

Ryccardo: /* Working on the iPhone 4? */

i bought an iphone from 2weeks with baseband 02.30.03 and bootlooder 6.2 and i need to unlock it to work with vodafone sim card need you'r help plz find me a sulution to unlock or downgrade my baseband so i can use yellowsn0w {{unsigned|Na7la|15:57, April 16, 2009 (UTC)}}

I am having trouble figuring out how to run these commands on my iPhone 4. I mean minicom does not work. I saved and all but it wont let me see what command im typing and it says "offline" in the bottom. {{unsigned|Grisolp|22:25, April 5, 2011 (UTC)}}
:You have to remember, minicom hasn't been updated in a while. It's probably not going to work very well with iOS 4+, and pretty much any device after the iPhone 3G... also, sign your talk page comments :) --[[User:Rdqronos|rdqronos]] 06:22, 23 July 2011 (MDT)

== Working on the iPhone 4? ==

Well, I tried tty.debug, dlci.baseband.blablabla... amd it didn't seem to work very well. Are there new releases of minicom? Or the source of it? --[[User:XiiiX|XiiiX]] 17:09, 14 August 2011 (MDT)
:Minicom is an open source project: [http://alioth.debian.org/projects/minicom/] --pjakuszew 12:45, 15 August 2011 (MDT)
::The days of <code>tty.baseband</code> are gone (1.x?). <code>tty.debug</code> does not require CommCenter to be shut down, but you have to spam AT[enter] until you get a reply and then issue your command hoping the connection doesn't fail as CommCenter is using the BB pretty much all the time making you unable to connect. Also, the OFFLINE message is normal. --[[User:Ryccardo|Ryccardo]] 05:37, 16 August 2011 (MDT)
:Would shutting down CommCenter help though? Like honestly, if it's that much of an issue, I'll run the command to kill it... Also, if I did kill CC, would I have to spam AT or would one typing of AT do it? --[[User:Rdqronos|rdqronos]] 17:00, 16 August 2011 (MDT)
::According to my experience in 3.x, shutting down CommCenter ''barely'' helps yet it's pretty much a requirement. Remember that shutting it down remover Wi-Fi until a reboot, so you have to permanently disable it (<code>launchctl unload -w /System…</code>), reboot until you can't get signal as per the status bar + get the non-visual voicemail indicator (empty badge over Phone icon), try your luck then enable CCenter with <code>launchctl load -w /System…</code>. --[[User:Ryccardo|Ryccardo]] 16:50, 18 August 2011 (MDT)

Talk:Baseband Commands

2011-08-16T11:37:16Z

Ryccardo: /* Working on the iPhone 4? */ Notes

List of GSC bits

2011-08-12T18:03:53Z

Ryccardo: more info from the holidays :)

*device-name-localized (not sure whether it is a GSC bit)
*device-name (not sure whether it is a GSC bit)
*still-camera (Can take photos. iPhone OS 1.0 or 2.0+)
*cameraRestriction (not sure whether it is a GSC bit)
*cellular-data (Wireless modem)
*any-telephony (Cellular radio)
*telephony (Can make phone calls. iPhone OS 1.0+)
*sms (Can send text messages. iPhone OS 1.0+)
*video-camera (Can records videos. iPhone OS 3.0+)
*auto-focus-camera (Camera is not focus free. iPhone OS 3.0+)
*h264-encoder (Can encode audio?video? iPhone OS 3.0+)
*wifi
*[[accelerometer]] (iPhone OS 1.0+)
*[[magnetometer]] (iPhone OS 3.0+)
*[[gps]] (iPhone OS 2.0+)
*location-services
*microphone
*peer-peer (Bluetooth "gaming" extensions, iPhone OS 3.0+)
*opengles-1 (Supports OpenGL 1)
*opengles-2 (Supports OpenGL 2)
*armv6 (CPU can execute ARM6 instructions)
*armv7 (CPU can execute ARM7 instructions)
*displayport
*hidpi (Retina display)
*front-facing-camera (iOS 4.0+)
*camera-flash (LED flash, iOS 4.0+)
*[[gyroscope]] (iOS 4.0+)
*contains-cellular-radio
*volume-buttons ()
*ringer-switch (Mute button)
*piezo-clicker (Integrated non-speaker in iPod touch 1G.)
*[[bluetooth]]
*unified-ipod (joined Music and Videos into iPod)
*youtube
*youtubePlugin
*green-tea (turned on in iPhones sold in China)
*not-green-tea
*wapi
*international-settings (Settings/General/International, wildly used in iPhone OS 1.1+)
*stand-alone-contacts
*delay-sleep-for-headset-click
*load-thumbnails-while-scrolling
*sensitive-ui
*apple-internal-install (Used in internal firmwares, displays a watermark with Apple contact info on device lockscreen, retail firmwares just show a "INTERNAL_INSTALL_LEGAL_DECLARATION" string)
*all-features
*nike-ipod (Nike+iPod internal (or external with hacked drivers) receiver, iPhone OS 2.?+)
*voice-control (Voice control available. iPhone OS 3.0+)
*proximity-sensor (self explanatory. iPhone OS 1.0+)
*gas-gauge-battery (Precise battery measurement, enables Settings>General>Usage>Battery Percentage. iPhone OS 3.0+)
*accessibility (Settings>General>Accessibility. iPhone OS 3.0+)
*mms
*encrypted-data-partition (Hardware encryption for 3GS and newer devices. iPhone OS 3.0+)
*encode-aac
*720p
*fcc-logos-via-software (Enable PNG viewer in Settings/General/Regulatory)
*hide-non-default-apps
*ipad (Is iPad. used to be "wildcat".)
*data-plan
*multitasking (self explanatory)
*venice (FaceTime)
*voip (VoIP multitasking??)
*io-surface-backed-images
*tv-out-crossfade ([[MobileSlideShow.app|Photos app]] slideshow transitions enabled)
*hd-video-capture
*hdr-image-capture (HDR, iOS 4.1+. Seems to depend on camera-flash on 4.3+)
*hw-encode-snapshots
*hw-snapshots-need-purplegfx
*gamekit (Game Center)
*additional-text-tones (New SMS sounds officially only for the iPhone 4 (except on iOS5 betas??). iOS 4.2.1+)
*hardware-keyboard
*hall-effect-sensor (Very likely the magnetic sleep switch on iPad 2)
*photo-stream
*multitasking-gestures
*display-mirroring
*telephony-maximum-generation (Modem type. 2.5 = EDGE 3 = 3G 3.5 = HSDPA)
*hiccough-interval (Unknown)
*marketing-name (Brand name of your device e.g. "iPhone 3GS")
*launch-mode (iPad SpringBoard orientation??)
*application-display-identifiers
*tv-out-settings (not sure whether it is a GSC bit, sounds like a SpringBoard property)
*screen-dimensions
*main-screen-width
*main-screen-height
*main-screen-scale
*main-screen-orientation
*explicitContentRestriction
*enforce-shutter-click (Forces camera click even in silent mode in Japan and another country I don't remember -- look in Regional*.plist files under Celestial fmwk)
*enforce-googlemail (Shows Google Mail logo instead of Gmail in the UK)
*serial
*post-animate
*pre-animate

*MapKitUserShiftingNonGreenTea (not sure whether it is a GSC bit, also green tea = for chinese market)
*MapKitUserShiftingGreenTea (not sure whether it is a GSC bit)
*MapsUserShiftingNonGreenTea (not sure whether it is a GSC bit)
*MapsUserShiftingGreenTea (not sure whether it is a GSC bit)
*MapKitAvailable (not sure whether it is a GSC bit)
*MapKitAvailableGreenTea (not sure whether it is a GSC bit)
*MapsVisibleGreenTea (not sure whether it is a GSC bit)
*MapsVisible (not sure whether it is a GSC bit)

Talk:/System/Library/Frameworks/UIKit.framework/shared.artwork

2011-08-11T17:42:30Z

Ryccardo: reply

What Java software will extract this? --[[User:Balloonhead66|Balloonhead66]] 12:18, 10 August 2011 (MDT)
:"iPhoneShop" will do it on 1.1.1 and 3.x… Not sure about other firmwares. --11:42, 11 August 2011 (MDT)

Model definition file

2011-08-10T10:15:38Z

Ryccardo: Created page with "== Summary == Property lists named after the model number of the device they should apply to, divided in 2 or 3 sections: *<code>capabilities</code> for dev..."

== Summary ==
[[PList_File_Format|Property lists]] named after the model number of the device they should apply to, divided in 2 or 3 sections:
*<code>capabilities</code> for device names and [[GSC bit|available hardware & features]];
*<code>???</code> for the default application sorting (Settings>General>Reset>Reset Home Screen Layout) while the rest are sorted alphabetically, making it possible to make some applications "sticky";
*<code>???</code> for importing another [[model definition file]] as a template; this applies recursively.

== File names ==
*M68AP.plist
*N82AP.plist
*N88AP.plist
*N90AP.plist
*N92AP.plist
*N45AP.plist
*N72AP.plist
*N18AP.plist
*N81AP.plist
*K48AP.plist
*K93AP.plist
*K94AP.plist
*K95AP.plist
*K66AP.plist

== Parents ==
[[/|Root]]/[[/System|System]]/[[/System/Library|Library]]/[[/System/Library/CoreServices|CoreServices]]/[[/System/Library/CoreServices/SpringBoard.app|SpringBoard.app]]

/System/Library/CoreServices/SpringBoard.app

2011-08-10T10:15:29Z

Ryccardo: /* Children */

[[Image:iOS4.jpg|right|thumb|360px|SpringBoard on an unmodified [[n90ap|iPhone 4]] running [[iOS]] 4.0]]
__NOTOC__
== Summary ==
SpringBoard.app is essentially iOS's graphical user interface (much the same as GNOME is to Linux, Explorer is to Microsoft Windows, and Finder is to Mac OS) and manages graphical services ranging from icon badges, the dock, multitasking, and folders (among others). When it is launched, it registers PurpleSystemEventPort, essentially making it the main application.

=== Primary Functions===
* SpringBoard acts a stacking window manager, rendering the child applications
* SpringBoard acts as a GS event pump, providing system events
* SpringBoard activates/deactivates and manages memory of the UIKit applications it launches
* SpringBoard is responsible for most of the interactions with CoreTelephony

=== MobileSubstrate Extensions ===
After jailbreaking the device, SpringBoard.app can be extended with 3rd party extensions injected by [[Mobile Substrate]].
=== Alternatives ===
Apple developers and service center employees use SpringBoard's alternative called [[SwitchBoard.app]]. A simple launcher for other developer utilities, such as [[SkankPhone]] (SkankPod if on iPod device) and [[BurnIn]].

==Main Application Ports==
* com.apple.SpringBoard
* com.apple.SpringBoard.UIKit.migserver
* PurpleSystemEventPort
* CARenderServer

== Children ==
=== Folders ===
*Translations
=== Files ===
*[[Model definition file|Model definition file(s)]]
*Related artwork
*ring.m4r (Marimba)

== Parents ==
[[:/|Root]]/[[/System|System]]/[[/System/Library|Library]]/[[/System/Library/CoreServices|CoreServices]]

Ringtones

2011-08-10T09:58:51Z

Ryccardo: iOS 5 breaking news

A '''ringtone''' is an AAC audio file under 40 seconds with an extension of <code>.m4r</code>.

Official and package-distributed ringtones are stored in the [[/var/stash/Ringtones.*****|/Library/Ringtones]] folder, while ringtones synced from iTunes are located at [[/private/var/mobile/Media/iTunes_Control/Ringtones|~/Media/iTunes_Control/Ringtones]].

The "Marimba" ringtone is an exception: it is always located in the [[/System/Library/CoreServices/SpringBoard.app|SpringBoard application bundle]] as <code>/System/Library/CoreServices/SpringBoard.app/ring.m4r</code>.

Ringtones can be used as the alert sound for incoming phone calls, alarms or the countdown timer.
Since iOS 5 beta 4 it is possible to use them as alert sounds, thereby providing a semi-official way to customize the sound of Voicemail, SMS/MMS, Mail, Calendar and Reminders alerts.

GSC bit

2011-08-10T07:34:01Z

Ryccardo: Created page with "'''G'''raphic'''S'''ervices '''C'''apability. A number of virtual packages made by Cydia on boot to make it easier to represent hardware and system software support for various f..."

'''G'''raphic'''S'''ervices '''C'''apability.
A number of virtual packages made by Cydia on boot to make it easier to represent hardware and system software support for various features.

Mainly derived from the <code>capabilities</code> in the [[model definition file]]; a true boolean capability will create the package, while numeric capabilities will have its value stored as the package's version number.

See also "List of GSC bits".
{{:List of GSC bits}}

List of GSC bits

2011-08-10T07:33:33Z

Ryccardo: ⅜ of the work done, feel free to continue as I'll be busy for more than a few hours.

*device-name-localized (not sure whether it is a GSC bit)
*device-name (not sure whether it is a GSC bit)
*still-camera (Can take photos. iPhone OS 1.0 or 2.0+)
*cameraRestriction (not sure whether it is a GSC bit)
*cellular-data (Wireless modem)
*any-telephony (Cellular radio)
*telephony (Can make phone calls. iPhone OS 1.0+)
*sms (Can send text messages. iPhone OS 1.0+)
*video-camera (Can records videos. iPhone OS 3.0+)
*auto-focus-camera (Camera is not focus free. iPhone OS 3.0+)
*h264-encoder (Can encode audio?video? iPhone OS 3.0+)
*wifi
*[[accelerometer]] (iPhone OS 1.0+)
*[[magnetometer]] (iPhone OS 3.0+)
*[[gps]] (iPhone OS 2.0+)
*location-services
*microphone
*peer-peer (Bluetooth "gaming" extensions, iPhone OS 3.0+)
*opengles-1 (Supports OpenGL 1)
*opengles-2 (Supports OpenGL 2)
*armv6 (CPU can execute ARM6 instructions)
*armv7 (CPU can execute ARM7 instructions)
*displayport
*hidpi (Retina display)
*front-facing-camera (iOS 4.0+)
*camera-flash (LED flash, iOS 4.0+)
*[[gyroscope]] (iOS 4.0+)
*contains-cellular-radio
*volume-buttons ()
*ringer-switch (Mute button)
*piezo-clicker (Integrated non-speaker in iPod touch 1G.)
*[[bluetooth]]
*unified-ipod (joined Music and Videos into iPod)
*youtube
*youtubePlugin
*green-tea
*not-green-tea
*wapi
*international-settings (Settings/General/International, wildly used in iPhone OS 1.1+)
*stand-alone-contacts
*delay-sleep-for-headset-click
*load-thumbnails-while-scrolling
*sensitive-ui
*apple-internal-install
*all-features
*nike-ipod
*voice-control
*proximity-sensor
*gas-gauge-battery
*accessibility
*mms
*encrypted-data-partition (Hardware encryption for 3GS and newer devices. iPhone OS 3.0+)
*encode-aac
*720p
*fcc-logos-via-software (Enable PNG viewer in Settings/General/Regulatory)
*hide-non-default-apps
*ipad (Is iPad. used to be "wildcat".)
*data-plan
*multitasking
*venice (FaceTime)
*voip (VoIP multitasking??)
*io-surface-backed-images
*tv-out-crossfade ([[MobileSlideShow.app|Photos app]] slideshow transitions enabled)
*hd-video-capture
*hdr-image-capture (HDR)
*hw-encode-snapshots
*hw-snapshots-need-purplegfx
*gamekit (Game Center)
*additional-text-tones (New SMS sounds officially only for the iPhone 4 (except on iOS5 betas??). iOS 4.2.1+)
*hardware-keyboard
*hall-effect-sensor (Very likely the magnetic sleep switch on iPad 2)
*photo-stream
*multitasking-gestures
*display-mirroring
*telephony-maximum-generation (Modem type. 2.5 = EDGE 3 = 3G 3.5 = HSDPA)
*hiccough-interval (Unknown)
*marketing-name (Brand name of your device e.g. "iPhone 3GS")
*launch-mode
*application-display-identifiers
*tv-out-settings
*screen-dimensions
*main-screen-width
*main-screen-height
*main-screen-scale
*main-screen-orientation
*explicitContentRestriction
*enforce-shutter-click (Forces camera click even in silent mode in Japan and another country I don't remember -- look in Regional*.plist files under Celestial fmwk)
*enforce-googlemail (Shows Google Mail logo instead of Gmail in the UK)
*serial
*post-animate
*pre-animate

*MapKitUserShiftingNonGreenTea (not sure whether it is a GSC bit, also green tea = for chinese market)
*MapKitUserShiftingGreenTea (not sure whether it is a GSC bit)
*MapsUserShiftingNonGreenTea (not sure whether it is a GSC bit)
*MapsUserShiftingGreenTea (not sure whether it is a GSC bit)
*MapKitAvailable (not sure whether it is a GSC bit)
*MapKitAvailableGreenTea (not sure whether it is a GSC bit)
*MapsVisibleGreenTea (not sure whether it is a GSC bit)
*MapsVisible (not sure whether it is a GSC bit)

/System/Library/Frameworks/UIKit.framework/shared.artwork

2011-08-10T06:56:26Z

Ryccardo: Created page with "{{stub|software}} == Summary == An archive containing image UI resources. It can be extracted e.g. with dedicated Java software. == Children == Its contents vary among different..."

{{stub|software}}
== Summary ==
An archive containing image UI resources. It can be extracted e.g. with dedicated Java software.

== Children ==
Its contents vary among different iOS versions.

===Files (iOS ?.?)===
*AssistNext.png
*AssistPrevious.png
*Black_0_Bars.png
*Black_0_WifiBars.png
*Black_1_Bars.png
*Black_1_WifiBars.png
*Black_2_Bars.png
*Black_2_WifiBars.png
*Black_3_Bars.png
*Black_3_WifiBars.png
*Black_4_Bars.png
*Black_5_Bars.png
*Black_Airplane.png
*Black_Alarm.png
*Black_Base.png
*Black_BatteryCharged.png
*Black_BatteryCharging.png
*Black_BatteryDrainingBG.png
*Black_BatteryDrainingInsides.png
*Black_BatteryDrainingInsidesLow.png
*Black_Bluetooth.png
*Black_BluetoothConnected.png
*Black_CARRIER_IPOD.png
*Black_CallForward.png
*Black_DataTypeEDGE.png
*Black_DataTypeGPRS.png
*Black_DataTypeUMTS.png
*Black_DataTypeiOSHotspot.png
*Black_HeadsetBatteryBG.png
*Black_Location.png
*Black_Lock.png
*Black_PercentLow_%.png
*Black_PercentLow_0.png
*Black_PercentLow_1.png
*Black_PercentLow_2.png
*Black_PercentLow_3.png
*Black_PercentLow_4.png
*Black_PercentLow_5.png
*Black_PercentLow_6.png
*Black_PercentLow_7.png
*Black_PercentLow_8.png
*Black_PercentLow_9.png
*Black_Percent_%.png
*Black_Percent_0.png
*Black_Percent_1.png
*Black_Percent_2.png
*Black_Percent_3.png
*Black_Percent_4.png
*Black_Percent_5.png
*Black_Percent_6.png
*Black_Percent_7.png
*Black_Percent_8.png
*Black_Percent_9.png
*Black_Play.png
*Black_Plus.png
*Black_RotationLock.png
*Black_TTY.png
*Black_VPN.png
*Corners_Black.png
*Error_Base.png
*InCall_Base.png
*InCall_Glow.png
*InVideoConference_Base.png
*InVideoConference_Glow.png
*ProgressBarInnerLeft_Gray.png
*ProgressBarInnerLeft_White.png
*ProgressBarInnerRight_Gray.png
*ProgressBarInnerRight_White.png
*ProgressBarInner_Bar.png
*ProgressBarInner_Default.png
*ProgressBarOuterLeft_Gray.png
*ProgressBarOuterLeft_White.png
*ProgressBarOuterRight_Gray.png
*ProgressBarOuterRight_White.png
*ProgressBarOuter_Bar.png
*ProgressBarOuter_Default.png
*ProgressGear10_Gray.png
*ProgressGear10_Gray_small.png
*ProgressGear10_White.png
*ProgressGear10_White_large.png
*ProgressGear10_White_small.png
*ProgressGear11_Gray.png
*ProgressGear11_Gray_small.png
*ProgressGear11_White.png
*ProgressGear11_White_large.png
*ProgressGear11_White_small.png
*ProgressGear12_Gray.png
*ProgressGear12_Gray_small.png
*ProgressGear12_White.png
*ProgressGear12_White_large.png
*ProgressGear12_White_small.png
*ProgressGear13_Gray_small.png
*ProgressGear13_White_small.png
*ProgressGear14_Gray_small.png
*ProgressGear14_White_small.png
*ProgressGear15_Gray_small.png
*ProgressGear15_White_small.png
*ProgressGear16_Gray_small.png
*ProgressGear16_White_small.png
*ProgressGear1_Gray.png
*ProgressGear1_Gray_small.png
*ProgressGear1_White.png
*ProgressGear1_White_large.png
*ProgressGear1_White_small.png
*ProgressGear2_Gray.png
*ProgressGear2_Gray_small.png
*ProgressGear2_White.png
*ProgressGear2_White_large.png
*ProgressGear2_White_small.png
*ProgressGear3_Gray.png
*ProgressGear3_Gray_small.png
*ProgressGear3_White.png
*ProgressGear3_White_large.png
*ProgressGear3_White_small.png
*ProgressGear4_Gray.png
*ProgressGear4_Gray_small.png
*ProgressGear4_White.png
*ProgressGear4_White_large.png
*ProgressGear4_White_small.png
*ProgressGear5_Gray.png
*ProgressGear5_Gray_small.png
*ProgressGear5_White.png
*ProgressGear5_White_large.png
*ProgressGear5_White_small.png
*ProgressGear6_Gray.png
*ProgressGear6_Gray_small.png
*ProgressGear6_White.png
*ProgressGear6_White_large.png
*ProgressGear6_White_small.png
*ProgressGear7_Gray.png
*ProgressGear7_Gray_small.png
*ProgressGear7_White.png
*ProgressGear7_White_large.png
*ProgressGear7_White_small.png
*ProgressGear8_Gray.png
*ProgressGear8_Gray_small.png
*ProgressGear8_White.png
*ProgressGear8_White_large.png
*ProgressGear8_White_small.png
*ProgressGear9_Gray.png
*ProgressGear9_Gray_small.png
*ProgressGear9_White.png
*ProgressGear9_White_large.png
*ProgressGear9_White_small.png
*Recording_Base.png
*Recording_Glow.png
*Silver_0_Bars.png
*Silver_0_WifiBars.png
*Silver_1_Bars.png
*Silver_1_WifiBars.png
*Silver_2_Bars.png
*Silver_2_WifiBars.png
*Silver_3_Bars.png
*Silver_3_WifiBars.png
*Silver_4_Bars.png
*Silver_5_Bars.png
*Silver_Airplane.png
*Silver_Alarm.png
*Silver_Base.png
*Silver_BatteryCharged.png
*Silver_BatteryCharging.png
*Silver_BatteryDrainingBG.png
*Silver_BatteryDrainingInsides.png
*Silver_BatteryDrainingInsidesLow.png
*Silver_Bluetooth.png
*Silver_BluetoothConnected.png
*Silver_CARRIER_IPOD.png
*Silver_CallForward.png
*Silver_DataTypeEDGE.png
*Silver_DataTypeGPRS.png
*Silver_DataTypeUMTS.png
*Silver_DataTypeiOSHotspot.png
*Silver_HeadsetBatteryBG.png
*Silver_HeadsetBatteryFill.png
*Silver_HeadsetLowBatteryFill.png
*Silver_Location.png
*Silver_PercentLow_%.png
*Silver_PercentLow_0.png
*Silver_PercentLow_1.png
*Silver_PercentLow_2.png
*Silver_PercentLow_3.png
*Silver_PercentLow_4.png
*Silver_PercentLow_5.png
*Silver_PercentLow_6.png
*Silver_PercentLow_7.png
*Silver_PercentLow_8.png
*Silver_PercentLow_9.png
*Silver_Percent_%.png
*Silver_Percent_0.png
*Silver_Percent_1.png
*Silver_Percent_2.png
*Silver_Percent_3.png
*Silver_Percent_4.png
*Silver_Percent_5.png
*Silver_Percent_6.png
*Silver_Percent_7.png
*Silver_Percent_8.png
*Silver_Percent_9.png
*Silver_Play.png
*Silver_Plus.png
*Silver_RotationLock.png
*Silver_TTY.png
*Silver_VPN.png
*TetheringSingle_Base.png
*Tethering_Base.png
*Tethering_Glow.png
*Translucent_Base.png
*UIActionSheetButtonTableMask.png
*UIActionSheetButtonTableShadow.png
*UIActionSheetTableDecoration.png
*UIAlertSheetBlackButton.png
*UIAlertSheetBlackButtonPressed.png
*UIAlertSheetBlackCancelButton.png
*UIAlertSheetBlackDestroyButton.png
*UIAlertSheetBlackDestroyButtonPressed.png
*UIAlertSheetBlackTransDestroyButton.png
*UIAlertSheetBlackTransDestroyButtonPressed.png
*UIAlertSheetDefaultBackground.png
*UIAlertSheetDefaultButton.png
*UIAlertSheetDefaultButtonPressed.png
*UIAlertSheetDefaultCancelButton.png
*UIAlertSheetDefaultDestroyButton.png
*UIAlertSheetDefaultDestroyButtonPressed.png
*UIAlertSheetSeparatorLine.png
*UIAlertSheetTextFieldGroupedBackground.png
*UIAlertViewTableDecoration.png
*UIButtonBarGarbageClose1.png
*UIButtonBarGarbageClose10.png
*UIButtonBarGarbageClose11.png
*UIButtonBarGarbageClose12.png
*UIButtonBarGarbageClose13.png
*UIButtonBarGarbageClose14.png
*UIButtonBarGarbageClose15.png
*UIButtonBarGarbageClose16.png
*UIButtonBarGarbageClose2.png
*UIButtonBarGarbageClose3.png
*UIButtonBarGarbageClose4.png
*UIButtonBarGarbageClose5.png
*UIButtonBarGarbageClose6.png
*UIButtonBarGarbageClose7.png
*UIButtonBarGarbageClose8.png
*UIButtonBarGarbageClose9.png
*UIButtonBarGarbageCloseSmall1.png
*UIButtonBarGarbageCloseSmall10.png
*UIButtonBarGarbageCloseSmall11.png
*UIButtonBarGarbageCloseSmall12.png
*UIButtonBarGarbageCloseSmall13.png
*UIButtonBarGarbageCloseSmall14.png
*UIButtonBarGarbageCloseSmall15.png
*UIButtonBarGarbageCloseSmall16.png
*UIButtonBarGarbageCloseSmall2.png
*UIButtonBarGarbageCloseSmall3.png
*UIButtonBarGarbageCloseSmall4.png
*UIButtonBarGarbageCloseSmall5.png
*UIButtonBarGarbageCloseSmall6.png
*UIButtonBarGarbageCloseSmall7.png
*UIButtonBarGarbageCloseSmall8.png
*UIButtonBarGarbageCloseSmall9.png
*UIButtonBarGarbageOpen1.png
*UIButtonBarGarbageOpen10.png
*UIButtonBarGarbageOpen11.png
*UIButtonBarGarbageOpen12.png
*UIButtonBarGarbageOpen13.png
*UIButtonBarGarbageOpen14.png
*UIButtonBarGarbageOpen15.png
*UIButtonBarGarbageOpen2.png
*UIButtonBarGarbageOpen3.png
*UIButtonBarGarbageOpen4.png
*UIButtonBarGarbageOpen5.png
*UIButtonBarGarbageOpen6.png
*UIButtonBarGarbageOpen7.png
*UIButtonBarGarbageOpen8.png
*UIButtonBarGarbageOpen9.png
*UIButtonBarGarbageOpenSmall1.png
*UIButtonBarGarbageOpenSmall10.png
*UIButtonBarGarbageOpenSmall11.png
*UIButtonBarGarbageOpenSmall12.png
*UIButtonBarGarbageOpenSmall13.png
*UIButtonBarGarbageOpenSmall14.png
*UIButtonBarGarbageOpenSmall15.png
*UIButtonBarGarbageOpenSmall2.png
*UIButtonBarGarbageOpenSmall3.png
*UIButtonBarGarbageOpenSmall4.png
*UIButtonBarGarbageOpenSmall5.png
*UIButtonBarGarbageOpenSmall6.png
*UIButtonBarGarbageOpenSmall7.png
*UIButtonBarGarbageOpenSmall8.png
*UIButtonBarGarbageOpenSmall9.png
*UIButtonBarMore.png
*UIButtonBarMoreSelected.png
*UIButtonBarPrint.png
*UINavigationBarMiniRemoveButton.png
*UINavigationBarMiniRemoveButtonPressed.png
*UINavigationBarRemoveButton.png
*UINavigationBarRemoveButtonPressed.png
*UIPickerViewBackground-162.png
*UIPickerViewBackground-180.png
*UIPickerViewBackground.png
*UIPickerViewFrameLeft-162-Bar.png
*UIPickerViewFrameLeft-162.png
*UIPickerViewFrameLeft-180-Bar.png
*UIPickerViewFrameLeft-180.png
*UIPickerViewFrameLeft-Bar.png
*UIPickerViewFrameLeft.png
*UIPickerViewFrameMiddle-162.png
*UIPickerViewFrameMiddle-180.png
*UIPickerViewFrameMiddle.png
*UIPickerViewFrameRight-162-Bar.png
*UIPickerViewFrameRight-162.png
*UIPickerViewFrameRight-180-Bar.png
*UIPickerViewFrameRight-180.png
*UIPickerViewFrameRight-Bar.png
*UIPickerViewFrameRight.png
*UIPickerViewSelectionBar.png
*UIPickerViewSelectionBarAboveDivider.png
*UIPickerViewShadowsAboveWheel-162.png
*UIPickerViewShadowsAboveWheel-180.png
*UIPickerViewShadowsAboveWheel.png
*UIPickerViewWheelBackground-162.png
*UIPickerViewWheelBackground-180.png
*UIPickerViewWheelBackground.png
*UIPlacardButtonBkgnd-short.png
*UIPlacardButtonBkgnd.png
*UIPlacardButtonPressedBkgnd-short.png
*UIPlacardButtonPressedBkgnd.png
*UIPopupAlertListShadow.png
*UIPopupAlertListShadowMask.png
*UIPopupAlertSheetBackground
*(UNDO).png
*UIPopupAlertSheetBackground.png
*UIPopupAlertSheetButton.png
*UIPopupAlertSheetButtonPress.png
*UIPopupAlertSheetDefaultButton.png
*UIPreferencesGreenCheck.png
*UIPrintStatusGenericThumbnail.png
*UIPrinterLock.png
*UIPrinterLockSelected.png
*UIPrinterNoJobIcon.png
*UIPrinterUnlock.png
*UIPrinterUnlockSelected.png
*UIRoundedTextFieldLeftInactive.png
*UIRoundedTextFieldLeftProgress.png
*UIRoundedTextFieldMiddle.png
*UIRoundedTextFieldMiddleInactive.png
*UIRoundedTextFieldMiddleProgress.png
*UIRoundedTextFieldRight.png
*UIRoundedTextFieldRightInactive.png
*UIRoundedTextFieldRightProgress.png
*UISearchFieldLeft.png
*UISearchFieldLeftInactive.png
*UISearchFieldLeftProgress.png
*UISearchFieldMiddle.png
*UISearchFieldMiddleInactive.png
*UISearchFieldMiddleProgress.png
*UISearchFieldRight.png
*UISearchFieldRightInactive.png
*UISearchFieldRightProgress.png
*UIStepperLeft.png
*UIStepperLeftPressed.png
*UIStepperMiddle.png
*UIStepperMinus.png
*UIStepperPlus.png
*UIStepperRight.png
*UIStepperRightPressed.png
*UISwitchLeftCapOrange.png
*UITimerPickerBackground.png
*UITimerPickerFrameLeft-Bar.png
*UITimerPickerFrameMiddle.png
*UITimerPickerFrameRight-Bar.png
*UITimerPickerSelectionBar.png
*UITimerPickerSelectionBarAboveDivider.png
*UITimerPickerSelectionBarAboveWheel.png
*UITimerPickerViewShadowsAboveWheel.png
*UITimerPickerWheelBackground.png
*kb-autocorrection-cancel-blue.png
*kb-autocorrection-cancel-hi.png
*kb-autocorrection-cancel-notes.png
*kb-candidate-list-expand.png
*kb-popup-114-36-center.png
*kb-popup-114-36-left.png
*kb-popup-114-36-right.png
*kb-popup-114-36-straight.png
*kb-popup-114-42-center.png
*kb-popup-114-42-left.png
*kb-popup-114-42-right.png
*kb-popup-114-42-straight.png
*Black_CARRIER_IPAD.png
*Corners_Green.png
*Corners_Red.png
*FaceTime-iPad_Base.png
*FaceTime-iPad_Glow.png
*ProgressBarInner_Bar_Popover.png
*ProgressBarInner_Bar_Silver.png
*ProgressBarOuter_Bar_Popover.png
*ProgressBarOuter_Bar_Silver.png
*ProgressGear10_Blue_small.png
*ProgressGear11_Blue_small.png
*ProgressGear12_Blue_small.png
*ProgressGear13_Blue_small.png
*ProgressGear14_Blue_small.png
*ProgressGear15_Blue_small.png
*ProgressGear16_Blue_small.png
*ProgressGear1_Blue_small.png
*ProgressGear2_Blue_small.png
*ProgressGear3_Blue_small.png
*ProgressGear4_Blue_small.png
*ProgressGear5_Blue_small.png
*ProgressGear6_Blue_small.png
*ProgressGear7_Blue_small.png
*ProgressGear8_Blue_small.png
*ProgressGear9_Blue_small.png
*Recording-iPad_Base.png
*Recording-iPad_Glow.png
*UIAlertSheetPopoverBackground.png
*UIAlertSheetPopoverBlackCancelButton.png
*UIAlertSheetPopoverCancelButton.png
*UIAlertSheetPopoverDefaultButton.png
*UIAlertSheetPopoverDefaultButtonPressed.png
*UIAlertSheetPopoverDestroyButton.png
*UIAlertSheetPopoverDestroyButtonPressed.png
*UIAlertSheetTextFieldBackground.png
*UIButtonBarBlueMiniButton.png
*UIButtonBarGarbageSilver1.png
*UIButtonBarGarbageSilver10.png
*UIButtonBarGarbageSilver11.png
*UIButtonBarGarbageSilver12.png
*UIButtonBarGarbageSilver13.png
*UIButtonBarGarbageSilver14.png
*UIButtonBarGarbageSilver15.png
*UIButtonBarGarbageSilver16.png
*UIButtonBarGarbageSilver17.png
*UIButtonBarGarbageSilver18.png
*UIButtonBarGarbageSilver19.png
*UIButtonBarGarbageSilver2.png
*UIButtonBarGarbageSilver20.png
*UIButtonBarGarbageSilver21.png
*UIButtonBarGarbageSilver22.png
*UIButtonBarGarbageSilver23.png
*UIButtonBarGarbageSilver24.png
*UIButtonBarGarbageSilver25.png
*UIButtonBarGarbageSilver26.png
*UIButtonBarGarbageSilver27.png
*UIButtonBarGarbageSilver28.png
*UIButtonBarGarbageSilver29.png
*UIButtonBarGarbageSilver3.png
*UIButtonBarGarbageSilver30.png
*UIButtonBarGarbageSilver31.png
*UIButtonBarGarbageSilver32.png
*UIButtonBarGarbageSilver33.png
*UIButtonBarGarbageSilver34.png
*UIButtonBarGarbageSilver35.png
*UIButtonBarGarbageSilver36.png
*UIButtonBarGarbageSilver37.png
*UIButtonBarGarbageSilver38.png
*UIButtonBarGarbageSilver39.png
*UIButtonBarGarbageSilver4.png
*UIButtonBarGarbageSilver40.png
*UIButtonBarGarbageSilver41.png
*UIButtonBarGarbageSilver42.png
*UIButtonBarGarbageSilver43.png
*UIButtonBarGarbageSilver44.png
*UIButtonBarGarbageSilver45.png
*UIButtonBarGarbageSilver46.png
*UIButtonBarGarbageSilver5.png
*UIButtonBarGarbageSilver6.png
*UIButtonBarGarbageSilver7.png
*UIButtonBarGarbageSilver8.png
*UIButtonBarGarbageSilver9.png
*UIButtonBarGarbageWhite1.png
*UIButtonBarGarbageWhite10.png
*UIButtonBarGarbageWhite11.png
*UIButtonBarGarbageWhite12.png
*UIButtonBarGarbageWhite13.png
*UIButtonBarGarbageWhite14.png
*UIButtonBarGarbageWhite15.png
*UIButtonBarGarbageWhite16.png
*UIButtonBarGarbageWhite17.png
*UIButtonBarGarbageWhite18.png
*UIButtonBarGarbageWhite19.png
*UIButtonBarGarbageWhite2.png
*UIButtonBarGarbageWhite20.png
*UIButtonBarGarbageWhite21.png
*UIButtonBarGarbageWhite22.png
*UIButtonBarGarbageWhite23.png
*UIButtonBarGarbageWhite24.png
*UIButtonBarGarbageWhite25.png
*UIButtonBarGarbageWhite26.png
*UIButtonBarGarbageWhite27.png
*UIButtonBarGarbageWhite28.png
*UIButtonBarGarbageWhite29.png
*UIButtonBarGarbageWhite3.png
*UIButtonBarGarbageWhite30.png
*UIButtonBarGarbageWhite31.png
*UIButtonBarGarbageWhite32.png
*UIButtonBarGarbageWhite33.png
*UIButtonBarGarbageWhite34.png
*UIButtonBarGarbageWhite35.png
*UIButtonBarGarbageWhite36.png
*UIButtonBarGarbageWhite37.png
*UIButtonBarGarbageWhite38.png
*UIButtonBarGarbageWhite39.png
*UIButtonBarGarbageWhite4.png
*UIButtonBarGarbageWhite40.png
*UIButtonBarGarbageWhite41.png
*UIButtonBarGarbageWhite42.png
*UIButtonBarGarbageWhite43.png
*UIButtonBarGarbageWhite44.png
*UIButtonBarGarbageWhite45.png
*UIButtonBarGarbageWhite46.png
*UIButtonBarGarbageWhite5.png
*UIButtonBarGarbageWhite6.png
*UIButtonBarGarbageWhite7.png
*UIButtonBarGarbageWhite8.png
*UIButtonBarGarbageWhite9.png
*UIClassicZoom1TimesDown.png
*UIClassicZoom2TimesDown.png
*UIEditBarGradient.png
*UIPickerViewFrameLeft-162-Bar-Popover.png
*UIPickerViewFrameLeft-Bar-Popover.png
*UIPickerViewFrameLeft-Popover.png
*UIPickerViewFrameMiddle-162-Popover.png
*UIPickerViewFrameMiddle-Popover.png
*UIPickerViewFrameRight-162-Bar-Popover.png
*UIPickerViewFrameRight-Bar-Popover.png
*UIPickerViewFrameRight-Popover.png
*UIPickerViewSelectionBarAboveWheel-Popover-162.png
*UIPopoverViewBlackBackgroundArrowDown.png
*UIPopoverViewBlackBackgroundArrowDownRight.png
*UIPopoverViewBlackBackgroundArrowSide.png
*UIPopoverViewBlackBackgroundArrowSideBottom.png
*UIPopoverViewBlackBackgroundArrowSideTop.png
*UIPopoverViewBlackBackgroundArrowUp.png
*UIPopoverViewBlackBackgroundArrowUpRight.png
*UIPopoverViewBlueBackgroundArrowDown.png
*UIPopoverViewBlueBackgroundArrowDownRight.png
*UIPopoverViewBlueBackgroundArrowSide.png
*UIPopoverViewBlueBackgroundArrowSideBottom.png
*UIPopoverViewBlueBackgroundArrowSideTop.png
*UIPopoverViewBlueBackgroundArrowUp.png
*UIPopoverViewBlueBackgroundArrowUpRight.png
*UIPopoverViewClearBackgroundArrowDown.png
*UIPopoverViewClearBackgroundArrowDownRight.png
*UIPopoverViewClearBackgroundArrowSide.png
*UIPopoverViewClearBackgroundArrowSideBottom.png
*UIPopoverViewClearBackgroundArrowSideTop.png
*UIPopoverViewClearBackgroundArrowUp.png
*UIPopoverViewClearBackgroundArrowUpRight.png
*UIPopoverViewCreamBackgroundArrowDown.png
*UIPopoverViewCreamBackgroundArrowDownRight.png
*UIPopoverViewCreamBackgroundArrowSide.png
*UIPopoverViewCreamBackgroundArrowSideBottom.png
*UIPopoverViewCreamBackgroundArrowSideTop.png
*UIPopoverViewCreamBackgroundArrowUp.png
*UIPopoverViewCreamBackgroundArrowUpRight.png
*UIPopoverViewShortBlackBackgroundArrowDown.png
*UIPopoverViewShortBlackBackgroundArrowDownRight.png
*UIPopoverViewShortBlackBackgroundArrowSide.png
*UIPopoverViewShortBlackBackgroundArrowUp.png
*UIPopoverViewShortBlackBackgroundArrowUpRight.png
*UIPopoverViewShortBlueBackgroundArrowDown.png
*UIPopoverViewShortBlueBackgroundArrowDownRight.png
*UIPopoverViewShortBlueBackgroundArrowSide.png
*UIPopoverViewShortBlueBackgroundArrowUp.png
*UIPopoverViewShortBlueBackgroundArrowUpRight.png
*UIPopoverViewShortClearBackgroundArrowDown.png
*UIPopoverViewShortClearBackgroundArrowDownRight.png
*UIPopoverViewShortClearBackgroundArrowSide.png
*UIPopoverViewShortClearBackgroundArrowUp.png
*UIPopoverViewShortClearBackgroundArrowUpRight.png
*UIPopoverViewShortCreamBackgroundArrowDown.png
*UIPopoverViewShortCreamBackgroundArrowDownRight.png
*UIPopoverViewShortCreamBackgroundArrowSide.png
*UIPopoverViewShortCreamBackgroundArrowUp.png
*UIPopoverViewShortCreamBackgroundArrowUpRight.png
*UIRoundedTextFieldLeftInactiveSharp.png
*UIRoundedTextFieldLeftSharp.png
*UIRoundedTextFieldMiddleInactiveSharp.png
*UIRoundedTextFieldMiddleSharp.png
*UIRoundedTextFieldRightInactiveSharp.png
*UIRoundedTextFieldRightSharp.png
*UISearchFieldLeftInactiveSharp.png
*UISearchFieldLeftSharp.png
*UISearchFieldMiddleInactiveSharp.png
*UISearchFieldMiddleSharp.png
*UISearchFieldRightInactiveSharp.png
*UISearchFieldRightSharp.png
*UISheetButtonBlack.png
*UISheetButtonBlue.png
*UISheetButtonPressed.png
*UISheetButtonWhite.png
*UITabBarBookmarks.png
*UITabBarBookmarksSelected.png
*UITabBarContacts.png
*UITabBarContactsSelected.png
*UITabBarDownloads.png
*UITabBarDownloadsSelected.png
*UITabBarFavorites.png
*UITabBarFavoritesSelected.png
*UITabBarHistory.png
*UITabBarHistorySelected.png
*UITabBarMostRecent.png
*UITabBarMostRecentSelected.png
*UITabBarMostViewed.png
*UITabBarMostViewedSelected.png
*UITabBarSearch.png
*UITabBarSearchSelected.png
*kb-candidate-portrait-button-left-steel-blue-dark-enabled.png
*kb-candidate-portrait-button-left-steel-blue-dark-pressed.png
*kb-candidate-portrait-button-middle-steel-blue-dark-enabled.png
*kb-candidate-portrait-button-middle-steel-blue-dark-pressed.png
*kb-candidate-portrait-button-right-steel-blue-dark-enabled.png
*kb-candidate-portrait-button-right-steel-blue-dark-pressed.png
*kb-hand.png
*kb-key-landscape-return-gray-dark-enabled.png
*kb-key-landscape-return-royal-blue-alert-enabled.png
*kb-key-landscape-return-royal-blue-enabled.png
*kb-key-landscape-return-short-royal-blue-enabled.png
*kb-key-landscape-return-short-steel-blue-dark-enabled.png
*kb-key-landscape-return-short-steel-blue-dark-pressed.png
*kb-key-landscape-space-gray-indicator.png
*kb-key-landscape-space-gray-light-enabled.png
*kb-key-landscape-space-gray-light-pressed.png
*kb-key-landscape-space-small-gray-light-enabled.png
*kb-key-landscape-space-small-gray-light-pressed.png
*kb-key-landscape-space-small-steel-blue-light-enabled.png
*kb-key-landscape-space-small-steel-blue-light-pressed.png
*kb-key-landscape-space-steel-blue-light-enabled.png
*kb-key-landscape-space-steel-blue-light-pressed.png
*kb-key-portrait-return-gray-dark-enabled.png
*kb-key-portrait-return-gray-dark-pressed.png
*kb-key-portrait-return-royal-blue-alert-enabled.png
*kb-key-portrait-return-royal-blue-alert-pressed.png
*kb-key-portrait-return-royal-blue-enabled.png
*kb-key-portrait-return-short-royal-blue-enabled.png
*kb-key-portrait-return-short-steel-blue-dark-enabled.png
*kb-key-portrait-return-short-steel-blue-dark-pressed.png
*kb-key-portrait-space-gray-indicator.png
*kb-key-portrait-space-gray-light-enabled.png
*kb-key-portrait-space-gray-light-pressed.png
*kb-key-portrait-space-small-gray-light-enabled.png
*kb-key-portrait-space-small-gray-light-pressed.png
*kb-key-portrait-space-small-steel-blue-light-enabled.png
*kb-key-portrait-space-small-steel-blue-light-pressed.png
*kb-key-portrait-space-steel-blue-light-enabled.png
*kb-key-portrait-space-steel-blue-light-pressed.png
*kb-split-background-edge.png
*kb-split-center-view-mask.png
*kb-split-transition-ipad-keycap-strip.png
*kb-split-transition-ipad-keycap.png
*kb-split-transition-iphone-alert-duotone-keycap.png
*kb-split-transition-iphone-alert-keycap.png
*kb-split-transition-iphone-duotone-keycap.png
*kb-split-transition-iphone-keycap.png
*kb-split-transition-iphone-wildcat-keycap.png
*kb-split-transition-overlay.png
*kb-std-active-bg-pop-center-wide.png
*kb-std-active-bg-pop-center_old.png

== Parents ==

Talk:Smart Sign

2011-08-09T17:05:15Z

Ryccardo: reply

Anyone can confirm the guesture (5-finger pinch) ?--[[User:M2m|M2m]] 17:29, 8 August 2011 (MDT)

:No idea, but rebooting will do it.
:Ironically, this app is probably against Apple policies for using hardware buttons :) --[[User:Ryccardo|Ryccardo]] 11:05, 9 August 2011 (MDT)

MobileInstallation

2011-08-06T12:53:29Z

Ryccardo: /* Signature Check */ Rewritten. "unsigned applications (and consequently, pirated applications)" sounds like assuming everyone is doing this for warez

This is the framework that takes care of installing AppStore applications.

== Signature Check ==
There is a check in place to make sure that only applications signed by Apple '''can even be put on the device''', let alone run (the kernel decides whether the application can run or not). Over different iOS releases (since 2.2.1?), various hackers have patched out the signature verification so that unsigned applications can be put on the device.

The difference between [[MobileInstallation]] and [[kernel]] patches is that the former will allow unsigned [[IPAs|IPA]] to be installed through iTunes, the later will allow the application to actually execute.
''(Please note that piracy-related discussions are not allowed at The iPhone Wiki.)''

== 3GS 3.0 patch to build and go ==
0x4562 -- 02 46 -> 00 20
0x856E -- 05 46 -> 00 20

=== Disassembly of patch ===
__text:33244E70 loc_33244E70 ; CODE XREF: _MobileInstallationInstall+C84�j
__text:33244E70 00 10 A0 E3 MOV R1, #0 ; Rd = Op2
__text:33244E74 D1 26 01 EB BL _MISValidateSignature ; Branch with Link
__text:33244E78 00 20 50 E2 SUBS R2, R0, #0 ; Rd = Op1 - Op2
__text:33244E7C 02 40 A0 01 MOVEQ R4, R2 ; Rd = Op2
__text:33244E80 05 00 00 0A BEQ loc_33244E9C ; Signature is valid :D
__text:33244E80 ; Let us go on our merry way!
__text:33244E84 F0 04 9F E5 LDR R0, =(___FUNCTION__.14568 - 0x33244E94) ; Load from Memory
__text:33244E88 F0 14 9F E5 LDR R1, =(aCouldNotValida - 0x33244E98) ; Load from Memory
__text:33244E8C 00 00 8F E0 ADD R0, PC, R0 ; "verify_executable"
__text:33244E90 01 10 8F E0 ADD R1, PC, R1 ; "Could not validate signature: %x"
__text:33244E94 34 E6 FF EB BL _installlog ; Branch with Link
__text:33244E98 00 40 E0 E3 MVN R4, #0 ; Uh oh. This will put -1 in R4.
__text:33244E98 ; This will surely impact us later on.
__text:33244E98 ;
__text:33244E98 ; As a side note, you can easily make R4 = 0.
__text:33244E98 ; Simply change this MVN to MOV!
__text:33244E98 ;
__text:33244E98 ; Patch in hex:
__text:33244E98 ; 00 40 E0 E3 (Before)
__text:33244E98 ; - changed to -
__text:33244E98 ; 00 40 EA E3 (After)
__text:33244E98 ;
__text:33244E98 ; So basically, this is what we now have:
__text:33244E98 ; Valid signature - R4=0
__text:33244E98 ; Invalid signature - R4=-1
__text:33244E98 ; Invalid signature w/ MOV patch - R4=0
__text:33244E9C
__text:33244E9C loc_33244E9C ; CODE XREF: _MobileInstallationInstall+D44�j
__text:33244E9C 05 00 A0 E1 MOV R0, R5 ; Rd = Op2
__text:33244EA0 6E 26 01 EB BL _CFRelease ; Branch with Link
__text:33244EA4 00 00 54 E3 CMP R4, #0 ; ohai. is R4 = 0?
__text:33244EA4 ; If the sig is valid, then it should be.
__text:33244EA4 ; If it is invalid, then it should not.
__text:33244EA4 ; If the above MVN is patched to MOV, then it should be
__text:33244EA8 1B 04 00 0A BEQ loc_33245F1C ; Is the signature valid?
__text:33244EA8 ; Or to make more sense in our case:
__text:33244EA8 ; Is R4 really = 0?
__text:33244EA8 ;
__text:33244EA8 ; If the MVN > MOV patch is done,
__text:33244EA8 ; R4 will be equal to 0.
__text:33244EA8 ;
__text:33244EA8 ; So basically, what we just patched made it pass the test,
__text:33244EA8 ; even though the signature is not valid :P

ITunes Errors

2011-08-06T12:46:45Z

Ryccardo: /* Error 13019 */

{{lowercase}}
__NOTOC__
Most of the errors can be found at Apple's [http://support.apple.com/kb/ts1275 Knowledge Base].

Here is a list of [[iTunes]] errors that could appear during a restore or a USB connection via iTunes:

=Negative -98xx=
{{:iTunes Errors/-98xx}}

=Negative -32xx=
{{:iTunes Errors/-32xx}}

=Negative -1 ... -100=
==Error -50==
Delete Storm Video, QuickTime, iTunes, then reinstall iTunes. See also [http://support.apple.com/kb/TS1583?viewlocale=en_US Apple's KB article].

==Error -35==
Error when downloading songs purchased on iTunes. Also see [http://support.apple.com/kb/TS1475?viewlocale=en_US Apple's KB article].

==Error -1==
Error occurs when one uses the "last ditch" method for preventing baseband updates on the iPhone 4. The baseband does not get updated using this method. Simply use TinyUmbrella to kick it out of recovery mode.

=Below 100=
{{:iTunes Errors/Below 100}}

=Errors 10xx=
==Error 1002==
Error when restoring.

==Error 1004==
This is caused by a failure to match the [[AT+XNONCE|Baseband Nonce]] currently in memory to the [[AT+XNONCE|nonce]] returned in the [[Baseband Firmware]] [[SHSH]] blob. This happens if you edited the [[wikipedia:Hosts (file)|hosts file]] ([[Cydia Server|Saurik's Server]]) or you are using [[TinyUmbrella]]. Use [[TinyUmbrella]] and "Kick Device Out Of Recovery" to boot. 1

==Error 1011==
This is caused by recovery mode being in userland (1.1.1 firmware). The file iTunesMobileDevice.dll is damaged or updated.

==Error 1013==
'''iPhone 4'''

This means that the baseband did not get updated. Either remove the gs.apple.com entry from your hosts file and let the baseband upgrade or if you want to preserve the baseband just jailbreak at this point to boot it up.

'''Other Devices'''

Restart computer; change computer; reinstall system, if iPhone is always in restoring mode: XP users can jump from restoring mode with ibus; MAC users can use iNdependence. (usually on the iPhone with 1.0.2 firmware downgraded from 1.1.1)

==Error 1014==
This occurs when you try to downgrade your phone's baseband.

==Error 1015==
This error is common when downgrading [[iPhone]]s and 3G-enabled [[iPad]]s. The problem occurs when the device's [[Baseband Firmware|baseband]] has a higher version number than the baseband in the firmware you restored to. Just set auto-boot true in [[iRecovery]] or use [[iREB]]/[[TinyUmbrella]]/[[RecBoot]].1

=Errors 13xx=
==Error 1394==
When Spirit2Pwn flashes parts of the boot chain on [[iOS]] 4, the device may crash into [[DFU Mode]]. [http://ih8sn0wforums.com/viewtopic.php?f=8&t=3407]

=Errors 14xx=
==Error 1413==
Restart computer; change USB port; reinstall system. See also [http://support.apple.com/kb/TS1927?viewlocale=en_US Apple's KB article].

==Error 1415==
Restart computer; change USB port; reinstall system.

==Error 1417==
Restart computer; change USB port; reinstall system.

==Error 1418==
Restart computer; change USB port; reinstall system.

==Error 1428==
Restart computer; change USB port; reinstall system. (downgrade from www.iphonebus.com)

==Error 1050==
Bad response from gs.apple.com OR need iReb for preparing iPhone for restoring to custom ipsw

=Errors 16xx=
==Error 1600==
Custom firmware can't be restored on a device with [[DFU Mode]]. The software of the iPhone isn't patched. Using iREB, Sn0wbreeze, Redsn0w or Pwnage Tool, you need to enter a pwned DFU-Mode. During that process the software gets patched and the custom firmware should run without any problems.

==Error 1601==
See also this [http://support.apple.com/kb/TA38633 old KB article from Apple].

==Error 1602==
Restart computer; change computer; reinstall system.

If this error occured during an Apple TV restore, then unplug the Apple TV from the power cable, after you entered the recovery or DFU mode, and then try it again.

==Error 1603==
False [[kernelcache]] patch. Known on damaged bundles from unofficial [[PwnageTool]] distributions or bundles. See also [http://support.apple.com/kb/TA38603?viewlocale=en_US Apple KB article]

==Error 1604==
Device was not pwned (signature checks were not blocked). Custom firmware can't be restored. Can also happen when there's a problem with the ipsw.

==Error 1611==
[[iTunes]] tried to enter the [[Restore Mode]], but the device turned back to the [[Recovery Mode]].

==Error 1618==
Missing system files or corrupt data in iTunes installation. Try to uninstall iTunes, restart computer, install again.

==Error 1619 ==
[[iTunes]] is too old and couldn't read the iPhone in Recovery or DFU Mode. Please update iTunes and try it again.

==Error 1644==
[[IPSW File Format|IPSW]] was moved during prepare with [[iTunes]]. Try it again and don't move the IPSW.

=Errors 20xx=
==Error 2001==
The Mac OS X kernel extension "IOUSBFamily" that was bundled with late 2008 / early 2009 MacBooks, as well as the 10.5.6 update, has a bug where it fails to properly recognize an iDevice in [[DFU Mode]]. It can be resolved by updating to 10.5.7 (or later), or using a USB hub.

Also if you have [[Limera1n]] opened during you try to restore the iOS device.

==Error 2002==
[[iTunes]] can't connect because another program is using it or it's disconnected during the Apple Server check.

==Error 2003==
Connection problem; change USB cable and check USB port.
Sn0wbreeze IPSW failure to restore; unplug and plug iDevice and try again

==Error 2005==
Problem connecting. Probably a hardware failure.

=Errors 30xx=
==Error 3002==
*Update to an older firmware isn't working, because Apple is no longer handing out [[SHSH]]s for the device/firmware combination.
*Or a timeout checking Apple server - retry later.
*This error also happens if you try to ''Update'' with a local TSS server ([[TinyUmbrella|TinyUmbrella tool]]) and probably also when connecting to [[Cydia Server]]. Use ''Restore'' instead.

==Error 3004==
No internet connection during the firmware restore.
[[iTunes]] can't connect to gs.apple.com. Maybe Port 80 and Port 443 is blocked. Open it on your router.

==Error 3014==
False edited hosts. The SHSH request couldn't be completed. No connection to the Apple Server, Sauriks Server or localhost.
[[iTunes]] can't connect to gs.apple.com. Maybe Port 80 and Port 443 is blocked. Open it on your router.

=Errors 31xx=
==Error 3123==
Something dealing with movie rentals.

==Error 3191==
QuickTime corrupted must reinstall before iTunes will work or Turn off Compatibility Mode for QuickTime.

1. Right-click on the QuickTimePlayer application (located in C:Program FilesQuickTime) and choose Properties from the shortcut menu.

2. In the Properties window, click on the Compatibility tab Deselect the checkbox labeled “Run this program in compatibility mode for.”

3. Click Apply.

4. Close the Properties window

==Error 3194==
Occurs when trying to install an old firmware and Apple's server disallows the installation. The only solution is to have [[SHSH]] backup and modify the hosts file to point to [[Saurik]]'s [[Cydia Server]] where they are backed up (or localhost if you have it yourself).

==Error 3195==
"An internal error occurred." Missing SHSH for the firmware. Maybe the same as "This device isn't eligible for the request build." but with an cache error.

=Higher Errors=
==Error 11222==
A security software you have installed may be conflicting with iTunes.

==Error 13019==
Seems to be an issue with syncing media to the device... I've found that it only seems to happen on jailbroken devices.
Create new user, try syncing with new user's library. If that fails, restore. If it doesn't fail, then something on YOUR itunes library is causing the error.

In iPhone OS 3.0~3.1.0 this was a known bug related to the sync process accessing iTunes-renamed Voice Memos.

==Error 20000==
Is caused by a custom theme pack on your Windows. Use default Theme.

This error can also be caused by the iDevice rebooting during the "Extracting Firmware" stage of restore.

==Error 20008==
?

This happened on a Mac with TinyUmbrella running before resotring a firmware to the Apple TV.

=Hex codes=
==0xE800001==
Device was suddenly unplugged. [[iTunes]] couldn't connect with the device. Try it again

==0xE8000022==
Error in your firmware files. Restore.

==0xE800003D==
False permissions in the Carrier Bundle folder. Restore, update or fix the permissions from the carrier bundle to update the carrier settings via iTunes.

==0xE800006B==
Device was suddenly unplugged. [[iTunes]] couldn't connect with the device. Try it again.

==0xE8000065==
[[sn0wbreeze]] custom firmware error on USB connection. Unplug the device, reboot it, and plug it in again.

==0xE8008001==
'''''See also: [[MobileInstallation]]'''''

''"The following app(s) were not installed {...}. An unknown error occurred. (0xE8008001)"''

IPA signature verification failed. (We do not allow illegal help on this wiki)

=Error texts=
==This device isn't eligible for the requested build==
Apple doesn't sign the firmware anymore. See [[SHSH]].

==The iPhone "xxx" could not be restored because the firmware file is not compatible.==
You downloaded the wrong firmware file (or it is corrupt). Download the correct firmware file that matches your device. Here's an overview of file names (beginning) and devices:
*AppleTV2,1_ [[K66ap|Apple TV 2G]]
*iPad1,1_ [[K48ap|iPad (or 1G or first generation)]]
*iPad2,1_ [[K93ap|iPad 2 Wi-Fi model]]
*iPad2,2_ [[K94ap|iPad 2 GSM model]]
*iPad2,3_ [[K95ap|iPad 2 CDMA model]]
*iPhone1,1_ [[M68ap|iPhone (or 2G or first generation)]]
*iPhone1,2_ [[N82ap|iPhone 3G]]
*iPhone2,1_ [[N88ap|iPhone 3GS]]
*iPhone3,1_ [[N90ap|iPhone 4 GSM model]]
*iPhone3,3_ [[N92ap|iPhone 4 CDMA model]]
*iPod1,1_ [[N45ap|iPod touch (or 1G or first generation)]]
*iPod2,1_ [[N72ap|iPod touch 2G]]
*iPod3,1_ [[N18ap|iPod touch 3G]]
*iPod4,1_ [[N81ap|iPod touch 4G]]

==The iPhone "xxx" cannot be restored at this time because the iPhone software update server could not be contacted or is temporarily unavailable.==
If you want to upgrade or downgrade the baseband, make sure you didn't change the hosts file. The Cydia server cannot handle the requests for the baseband certificates.

== There was a problem downloading the software for the iPhone “XXXXXXX” the network connection was reset, make sure your network settings are correct and your network connection is active, or try again later.==
You need to disable both your antivirus ''and'' your windows/security firewall in order for the update/restore to go through.

----

1 Use [[TinyUmbrella]] (Kick Device out of Recovery), [[iRecovery]] or [[redsn0w Lite]] and enter "setenv auto-boot true", "saveenv", "reboot" to boot.

2 Device isn't bootable, but a custom firmware can be restored if it has a jailbreak and the requirements.

List of iPhones

2011-06-13T19:38:29Z

Ryccardo: 5.0 Beta 1

{{DISPLAYTITLE:iPhone}}
There are many iterations of the iPhone.

== Differences between iPhone Models ==
{| class="wikitable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
! Phone (<code>marketing-name</code>)
! [[M68ap|iPhone 2G]]
! [[N82ap|iPhone 3G]]
! [[N88ap|iPhone 3GS]]
! [[N90ap|iPhone 4 (GSM model)]]
! [[N92ap|iPhone 4 (CDMA model)]]
|-
! Image
| [[Image:iPhone1G.png|160px|frameless]]
| [[Image:iPhone3G.png|163px|frameless]]
| [[Image:iPhone3GS.png|163px|frameless]]
| [[Image:iPhone4.png|154px|frameless]]
| [[Image:iPhone 4 CDMA.png|156px|frameless]]
|-
! Case Material
| Aluminum
|colspan="2"| Plastic
|colspan="2"| Glass/Steel
|-
! Colors
| Aluminum
|colspan="2"| Black/White
|colspan="2"| Black/White
|-
! Dimensions
| 4.5x2.4x0.46 in.
|colspan="2"| 4.5x2.4x0.48 in.
|colspan="2"| 4.5x2.31x0.37 in.
|-
! Weight
| 4.8 oz
| 4.7 oz.
| 4.8 oz.
|colspan="2"| 4.8 oz.
|-
! Capacity (GB)
| 4/8/16
| 8/16
| 8/16/32
|colspan="2"| 16/32
|-
! CPU Speed (MHz)
| 412 (initially 400)
| 412
| 620
|colspan="2"| 1024
|-
! RAM (MB)
| 128
| 128
| 256
|colspan="2"| 512
|-
! Cellular Radio (<code>telephony-maximum-generation</code>)
| EDGE (2.5G)
|colspan="2"| HSDPA (3.5G)
| HSDPA + HSUPA (3.5G)
| CDMA EV-DO Rev. A (3G)
|-
! Rated Battery Life (Standby)(hrs.)
| 250
| 300
| 300
|colspan="2"| 300
|-
! Rated Battery Life (2G talk)(hrs.)
| 8
| 10
| 12
| 14
| N/A
|-
! Rated Battery Life (3G talk and data)(hrs.)
| N/A
| 5
| 5
|colspan="2"| 6 (data)
7 (talk)
|-
! Rated Battery Life (Wi-Fi data)(hrs.)
| 6
| 6
| 9
|colspan="2"| 10
|-
! Rated Battery Life (Music playback)(hrs.)
| 24
| 24
| 30
|colspan="2"| 40
|-
! Rated Battery Life (Video playback)(hrs.)
| 7
| 7
| 10
|colspan="2"| 10
|-
! Internal Name
| iPhone1,1
| iPhone1,2
| iPhone2,1
| iPhone3,1
| iPhone3,3
|-
! Initial Firmware
|[[Heavenly 1A543a (iPhone)|1.0 (1A543a)]]
|[[Big Bear 5A345 (iPhone 3G)|2.0 (5A345)]]
|[[Kirkwood 7A341 (iPhone 3GS)|3.0 (7A341)]]
|[[Apex 8A293 (iPhone 4)|4.0 (8A293)]]
|[[Phoenix 8E128 (iPhone 4 CDMA)|4.2.5 (8E128)]]/[[Phoenix 8E200 (iPhone 4 CDMA)|4.2.6 (8E200)]]
|-
! Latest publicly available firmware
|[[SUNorthstarTwo 7E18 (iPhone)|3.1.3 (7E18)]]
|[[Jasper 8C148 (iPhone 3G)|4.2.1 (8C148)]]
|[[Durango 8J2 (iPhone 3GS)|4.3.3 (8J2)]]
|[[Durango 8J2 (iPhone 4)|4.3.3 (8J2)]]
|[[Phoenix 8E401 (iPhone 4 CDMA)|4.2.8 (8E401)]]
|-
! Latest firmware
|[[SUNorthstarTwo 7E18 (iPhone)|3.1.3 (7E18)]]
|[[Jasper 8C148 (iPhone 3G)|4.2.1 (8C148)]]
|[[TellurideVail 9A5220p (iPhone 3GS)|5.0 beta 1 (9A5220p)]]
|[[TellurideVail 9A5220p (iPhone 4)|5.0 beta 1 (9A5220p)]]
|[[TellurideVail 9A5220p (iPhone 4 CDMA)|5.0 beta 1 (9A5220p)]]
|-
! [[Bluetooth]] (<code>bluetooth</code>)
| [[BlueCore 4|2.0 EDR]]
| [[BlueCore 6|2.0 EDR]]
| [[BCM4325|2.1 EDR]]
|colspan="2"| [[BCM4329|2.1 EDR]]
|-
! Camera (MP) (<code>still-camera</code>)
| 2
| 2
| 3.2
|colspan="2"| 5
|-
! Video recording (<code>video-camera</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! Auto-Focus (<code>auto-focus-camera</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! LED Flash (<code>camera-flash</code>)
| colspan="3" {{no}}
| colspan="2" {{yes}}
|-
! HDR (<code>hdr-image-capture</code>)
| colspan="3" {{no}}
| colspan="2" {{yes}}
|-
! Voice Controls (<code>voice-control</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! Nike+iPod (<code>victoria</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! Hardware encryption (<code>encrypted-data-partition</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! GPS (<code>gps</code>)
| colspan="1" {{no}}
| colspan="4" {{yes}}
|-
! [[Magnetometer|Digital Compass]] (<code>magnetometer</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! Gyroscope
| colspan="3" {{no}}
| colspan="2" {{yes}}
|-
! Video Calls (<code>venice</code>)
| colspan="3" {{no}}
| colspan="2" {{yes}}
|}

Redsn0w

2011-06-11T14:57:05Z

Ryccardo: /* 0.9.8 series */ Windows version planned

{{DISPLAYTITLE:redsn0w}}
[[Image:Redsn0w.png|thumb|redsn0w on Mac OS X]]
redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.

Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.

Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.

Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.

redsn0w [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] can jailbreak iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.

== Credit ==
[[iPhone Dev Team]]

== Versions ==
===Initial Release and updates until 0.8===
{| class="wikitable" width="100%" style="font-size:smaller;border-collapse:collapse;" border="1"
! style="background-color:#E9E9E9;text-align:center;width:150px;" | Version
! style="background-color:#E9E9E9;text-align:center;width:175px;" | Release date
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9;text-align:center;" | Changes
|-
! 0.1
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{yes}}
|
* Jailbreak for the [[n72ap|iPod touch 2G]].
|-
|-
! 0.7
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{yes}}
|-
! 0.8
| style="white-space: nowrap;" | July 2009
| {{yes}}
| {{yes}}
|
* Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3GS]] only.
|-
|}
===First 0.9.x releases===
{| class="wikitable" width="100%" style="font-size:smaller;border-collapse:collapse;" border="1"
! style="background-color:#E9E9E9;text-align:center;width:150px;" | Version
! style="background-color:#E9E9E9;text-align:center;width:175px;" | Release date
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9;text-align:center;" | Changes
|-
! 0.9.2
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{yes}}
|
* Supports 3.0-3.1.2 on all iPhones and iPod touches ([[tethered jailbreak|tethered]] for newer devices with [[0x24000 Segment Overflow]] closed)
|-
! 0.9.3
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{yes}}
|
* Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
|-
! 0.9.4
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{yes}}
|
* Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])
|-
|}
===0.9.5 series===
{| class="wikitable" width="100%" style="font-size:smaller;border-collapse:collapse;" border="1"
! style="background-color:#E9E9E9;text-align:center;width:150px;" | Version
! style="background-color:#E9E9E9;text-align:center;width:175px;" | Release date
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9;text-align:center;" | Changes
|-
! 0.9.5 beta 3
| style="white-space: nowrap;" | June 21, 2010
| {{yes}}
| {{no}}
|
* Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])
|-
! 0.9.5 beta 4
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{no}}
|
* Resolved a problem with iBooks.
|-
! 0.9.5 beta 5
| style="white-space: nowrap;" | Unknown
| {{yes}}
| {{no}}
|
* Supposed to fix any APN or MMS issues that users were seeing.
|-
|}

===0.9.6 series===
{| class="wikitable" width="100%" style="font-size:smaller;border-collapse:collapse;" border="1"
! style="background-color:#E9E9E9;text-align:center;width:150px;" | Version
! style="background-color:#E9E9E9;text-align:center;width:175px;" | Release date
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9;text-align:center;" | Changes
|-
! 0.9.6 beta 1
| style="white-space: nowrap;" | September 21, 2010
| {{yes}}
| {{yes}}
|
* Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])
|-
! 0.9.6 beta 2
| style="white-space: nowrap;" | October 31, 2010
| {{yes}}
| {{yes}}
|
* Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72ap|iPod touch 2G]] with [[iBoot-240.5.1|new bootrom]]) .
** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.
|-
! 0.9.6 beta 3
| style="white-space: nowrap;" | November 2010
| {{yes}}
| {{yes}}
|
* Supports the installation of custom bundles
|-
! 0.9.6 beta 4
| style="white-space: nowrap;" | November 23, 2010
| {{yes}}
| {{yes}}
|
* Jailbreaks iOS 4.1-4.2.1 on all compatible devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
|-
! 0.9.6 beta 5
| style="white-space: nowrap;" | November 28, 2010
| {{yes}}
| {{yes}}
|
* Jailbreaks iOS 4.1-4.2.1 on all compatible devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
|-
! 0.9.6 beta 6
| style="white-space: nowrap;" | December 1, 2010
| {{yes}}
| {{yes}}
|
* Allows you to "deactivate" a hacktivated phone, so sbinger's [http://www.bingner.com/SAM.html Subscriber Artificial Module] (SAM) can trick your iPhone and [[iTunes]] into creating legitimate activation tickets.
|-
! 0.9.6 release candidate 7
| style="white-space: nowrap;" | January 2, 2011
| {{yes}}
| {{yes}}
|
* Introduced command-line arguments to bypass some screens.
** -b <filename> to specify your own boot logo PNG
** -i <filename> to specify your reference IPSW
** -j to ask redsn0w to “Just boot now tethered for now”
** -o for [[N88ap|iPhone 3GS]] and [[N72ap|iPod touch 2G]] units vulnerable to [[0x24000 Segment Overflow]].
|-
! 0.9.6 release candidate 8
| style="white-space: nowrap;" | January 5, 2011
| {{yes}}
| {{yes}}
|
* Informs users if a boot logo PNG is invalid, and why.
* Introduced the "-a" command-line argument to eliminate clicking.
|-
! 0.9.6 release candidate 9
| style="white-space: nowrap;" | April 3, 2011
| {{yes}}
| {{yes}}
|
* Jailbreaks iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[k66ap|Apple TV 2]].
* New command line parameters k and d [http://twitpic.com/4gg8n1]:
** -k --kernelcache=<str> use specified kernelcache (advanced)
** -d --devicetree=<str> use specified devicetree (advanced)
|-
! 0.9.6 release candidate 10
| style="white-space: nowrap;" | April 7, 2011
| {{yes}}
| {{yes}}
|
* Added boot animations
* Removed misleading Settings
|-
! 0.9.6 release candidate 11
| style="white-space: nowrap;" | April 7, 2011
| {{yes}}
| {{yes}}
|
* Makes the boot animation a bit more robust
|-
! 0.9.6 release candidate 12
| style="white-space: nowrap;" | April 8, 2011
| {{yes}}
| {{yes}}
|
* Fix any lingering issues with the boot animation
|-
! 0.9.6 release candidate 13
| style="white-space: nowrap;" | April 19, 2011
| {{yes}}
| {{yes}}
|
* Jailbreaks iOS 4.3.2 on all compatible devices except the [[iPad 2]] and [[N90ap|iPhone 4 (GSM)]].
|-
! 0.9.6 release candidate 14
| style="white-space: nowrap;" | April 19, 2011
| {{yes}}
| {{yes}}
|
* Jailbreaks iOS 4.3.2 on all compatible devices except the [[iPad 2]].
|-
! 0.9.6 release candidate 15
| style="white-space: nowrap;" | May 06, 2011
| {{yes}}
| {{yes}}
|
* Jailbreaks iOS 4.3.3 on all compatible devices except the [[iPad 2]].
|-
! 0.9.6 release candidate 16
| style="white-space: nowrap;" | May 16, 2011
| {{yes}}
| {{yes}}
|
* Redsn0w has been updated to include a fix for the iPhone3GS / iPhone 4 side switch vibration issue (only for 4.3.3).
|-
! 0.9.6 release candidate 17
| style="white-space: nowrap;" | May 20, 2011
| {{yes}}
| {{yes}}
|
* Adds advanced command line options for kernel hackers.
|}

===0.9.7 series===
{| class="wikitable" width="100%" style="font-size:smaller;border-collapse:collapse;" border="1"
! style="background-color:#E9E9E9;text-align:center;width:150px;" | Version
! style="background-color:#E9E9E9;text-align:center;width:175px;" | Release date
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9;text-align:center;" | Changes
|-
! 0.9.7 beta 1
| style="white-space: nowrap;" | December 26, 2010
| {{yes}}
| {{no}}
|
* Jailbreaks iOS 4.1-4.2.1 on all compatible devices.
** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 [[IPSW File Format|IPSW]].
*** This version of "Jailbreak Monte" has quite a number of bugs, particularly app switcher crashes and disabled [[Bluetooth]].
|-
! 0.9.7 beta 2
| style="white-space: nowrap;" | December 26, 2010
| {{yes}}
| {{no}}
|
* Fixes crashing bugs on GUI apps.
|-
! 0.9.7 beta 3
| style="white-space: nowrap;" | December 27, 2010
| {{yes}}
| {{no}}
|
* Fixes crashing bugs completely.
|-
! 0.9.7 beta 4
| style="white-space: nowrap;" | December 31, 2010
| {{yes}}
| {{no}}
|
* ubsmuxd integrated.
|-
! 0.9.7 beta 5
| style="white-space: nowrap;" | January 8, 2011
| {{yes}}
| {{no}}
|
* Issues related to [[Bluetooth]] and the sandbox are resolved.
|-
! 0.9.7 beta 6
| style="white-space: nowrap;" | January 10, 2011
| {{yes}}
| {{no}}
|
* fixes Skype
|}

===0.9.8 series===
{| class="wikitable" width="100%" style="font-size:smaller;border-collapse:collapse;" border="1"
! style="background-color:#E9E9E9;text-align:center;width:150px;" | Version
! style="background-color:#E9E9E9;text-align:center;width:175px;" | Release date
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Mac OS X-compatible?
! style="background-color:#E9E9E9;text-align:center;width:75px;" | Windows-compatible?
! style="background-color:#E9E9E9;text-align:center;" | Changes
|-
! 0.9.8 beta 1
| style="white-space: nowrap;" | June 10, 2011
| {{yes}}
| {{no|Not currently [https://twitter.com/#!/MuscleNerd/status/79118523619749888]}}
|
* Performs a [[tethered jailbreak]] of iOS 5.0b1 on all compatible devices except the [[iPad 2]].
|}

== Exploits used ==
For [[M68ap|iPhone]], [[N45ap|iPod touch]], and [[N82ap|iPhone 3G]], see:
*[[Pwnage]]
*[[Pwnage 2.0]]

For [[N72ap|iPod touch 2G]], see:
*[[0x24000 Segment Overflow]]
*[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.
*[[usb_control_msg(0xA1, 1) Exploit]] - used (in redsn0w 0.9.6 beta 1) to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow, as well as a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].

For [[N88ap|iPhone 3GS]], see:
*[[0x24000 Segment Overflow]]
*[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

For [[N18ap|iPod touch 3G]]
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]
*limera1n exploit

[[Category:Hacking Software]]

List of iPhones

2011-05-30T13:25:57Z

Ryccardo: More N*ap.plist names

{{DISPLAYTITLE:iPhone}}
There are many iterations of the iPhone.

== Differences between iPhone Models ==
{| class="wikitable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
! Phone (<code>marketing-name</code>)
! [[M68ap|iPhone 2G]]
! [[N82ap|iPhone 3G]]
! [[N88ap|iPhone 3GS]]
! [[N90ap|iPhone 4 (GSM model)]]
! [[N92ap|iPhone 4 (CDMA model)]]
|-
! Image
| [[Image:iPhone1G.png|160px|frameless]]
| [[Image:iPhone3G.png|163px|frameless]]
| [[Image:iPhone3GS.png|163px|frameless]]
| [[Image:iPhone4.png|154px|frameless]]
| [[Image:iPhone 4 CDMA.png|156px|frameless]]
|-
! Case Material
| Aluminum
|colspan="2"| Plastic
|colspan="2"| Glass/Steel
|-
! Colors
| Aluminum
|colspan="2"| Black/White
|colspan="2"| Black/White
|-
! Dimensions
| 4.5x2.4x0.46 in.
|colspan="2"| 4.5x2.4x0.48 in.
|colspan="2"| 4.5x2.31x0.37 in.
|-
! Weight
| 4.8 oz
| 4.7 oz.
| 4.8 oz.
|colspan="2"| 4.8 oz.
|-
! Capacity (GB)
| 4/8/16
| 8/16
| 8/16/32
|colspan="2"| 16/32
|-
! CPU Speed (MHz)
| 412 (initially 400)
| 412
| 620
|colspan="2"| 1024
|-
! RAM (MB)
| 128
| 128
| 256
|colspan="2"| 512
|-
! Cellular Radio (<code>telephony-maximum-generation</code>)
| EDGE (2.5G)
|colspan="2"| HSDPA (3.5G)
| HSDPA + HSUPA (3.5G)
| CDMA EV-DO Rev. A (3G)
|-
! Rated Battery Life (Standby)(hrs.)
| 250
| 300
| 300
|colspan="2"| 300
|-
! Rated Battery Life (2G talk)(hrs.)
| 8
| 10
| 12
| 14
| N/A
|-
! Rated Battery Life (3G talk and data)(hrs.)
| N/A
| 5
| 5
|colspan="2"| 6 (data)
7 (talk)
|-
! Rated Battery Life (Wi-Fi data)(hrs.)
| 6
| 6
| 9
|colspan="2"| 10
|-
! Rated Battery Life (Music playback)(hrs.)
| 24
| 24
| 30
|colspan="2"| 40
|-
! Rated Battery Life (Video playback)(hrs.)
| 7
| 7
| 10
|colspan="2"| 10
|-
! Internal Name
| iPhone1,1
| iPhone1,2
| iPhone2,1
| iPhone3,1
| iPhone3,3
|-
! Initial Firmware
|[[Heavenly 1A543a (iPhone)|1.0 (1A543a)]]
|[[Big Bear 5A345 (iPhone 3G)|2.0 (5A345)]]
|[[Kirkwood 7A341 (iPhone 3GS)|3.0 (7A341)]]
|[[Apex 8A293 (iPhone 4)|4.0 (8A293)]]
|[[Phoenix 8E128 (iPhone 4 CDMA)|4.2.5 (8E128)]]/[[Phoenix 8E200 (iPhone 4 CDMA)|4.2.6 (8E200)]]
|-
! Latest (publicly available) firmware
|[[SUNorthstarTwo 7E18 (iPhone)|3.1.3 (7E18)]]
|[[Jasper 8C148 (iPhone 3G)|4.2.1 (8C148)]]
|[[Durango 8J2 (iPhone 3GS)|4.3.3 (8J2)]]
|[[Durango 8J2 (iPhone 4)|4.3.3 (8J2)]]
|[[Phoenix 8E401 (iPhone 4 CDMA)|4.2.8 (8E401)]]
|-
! Latest firmware
|[[SUNorthstarTwo 7E18 (iPhone)|3.1.3 (7E18)]]
|[[Jasper 8C148 (iPhone 3G)|4.2.1 (8C148)]]
|[[Durango 8J2 (iPhone 3GS)|4.3.3 (8J2)]]
|[[Durango 8J2 (iPhone 4)|4.3.3 (8J2)]]
|[[Phoenix 8E401 (iPhone 4 CDMA)|4.2.8 (8E401)]]
|-
! [[Bluetooth]] (<code>bluetooth</code>)
| [[BlueCore 4|2.0 EDR]]
| [[BlueCore 6|2.0 EDR]]
| [[BCM4325|2.1 EDR]]
|colspan="2"| [[BCM4329|2.1 EDR]]
|-
! Camera (MP) (<code>still-camera</code>)
| 2
| 2
| 3.2
|colspan="2"| 5
|-
! Video recording (<code>video-camera</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! Auto-Focus (<code>auto-focus-camera</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! LED Flash (<code>camera-flash</code>)
| colspan="3" {{no}}
| colspan="2" {{yes}}
|-
! HDR (<code>hdr-image-capture</code>)
| colspan="3" {{no}}
| colspan="2" {{yes}}
|-
! Voice Controls (<code>voice-control</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! Nike+iPod (<code>victoria</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! Hardware encryption (<code>encrypted-data-partition</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! GPS (<code>gps</code>)
| colspan="1" {{no}}
| colspan="4" {{yes}}
|-
! [[Magnetometer|Digital Compass]] (<code>magnetometer</code>)
| colspan="2" {{no}}
| colspan="3" {{yes}}
|-
! Gyroscope
| colspan="3" {{no}}
| colspan="2" {{yes}}
|-
! Video Calls (<code>venice</code>)
| colspan="3" {{no}}
| colspan="2" {{yes}}
|}

ICE2

2011-05-30T13:12:26Z

Ryccardo: Internal name

#REDIRECT [[X-Gold 608]]

/private/var/root/Library/Caches/locationd

2011-05-23T17:27:46Z

Ryccardo: /private/var/mobile/Library/Caches/locationd moved to /private/var/root/Library/Caches/locationd: New (4.3.3) path to prevent backing up

== Summary ==
Data files for Location Services. Location and contents changed over iOS versions.

== Children (4.3.3) ==

=== Folders ===
*{{ipfw|Ephemeris}}
=== Files ===
*{{ipfw|cache.db}}
*{{ipfw|cache.plist}}
*{{ipfw|clients.plist}} (Authorized applications, user-advertised purpose...)
*{{ipfw|consolidated.db}}
*{{ipfw|Ito2.dst}}
*{{ipfw|significant.plist}} (Applications registered with the Significant Location Change Notifications system)
*{{ipfw|stats.plist}} (Date and time of the last GPS connection, number of connected satellites)
*{{ipfw|WMM.dat}}

== Parents ==
*iOS 4.x: [[/|(Root)]]/[[/private|private]]/[[/var|var]]/[[/private/var/mobile|mobile]]/[[/private/var/mobile/Library|Library]]/[[/private/var/mobile/Library/Caches|Caches]]

*iOS 4.3.3: [[/|(Root)]]/[[/private|private]]/[[/var|var]]/[[/private/var/root|root]]/[[/private/var/root/Library|Library]]/[[/private/var/root/Library/Caches|Caches]]

/private/var/root/Library/Caches/locationd

2011-05-23T17:27:04Z

Ryccardo: (old path)

Timeline

2011-05-12T18:00:55Z

Ryccardo: typo

{| border="0" style="float:right"
|-
||__TOC__
|}
==2011==
===May===
*May 6 -- [[PwnageTool]], [[redsn0w]], and [[sn0wbreeze]] are updated for iOS 4.3.3 support (and in the case of sn0wbreeze, iOS 4.2.8 support as well).
*May 3 -- Apple releases iOS 4.2.8 and 4.3.3 to address the location-tracking controversy. Once more, current untethering vulnerabilities remained unpatched.

===April===
*April 24 -- [[PwnageTool]], [[redsn0w]], and [[sn0wbreeze]] are updated for iOS 4.3.2 support (and in the case of sn0wbreeze, iOS 4.2.7 support as well).
*April 14 -- Apple releases iOS 4.2.7 and 4.3.2 to fix security issues and connection issues for [[K95ap|iPad 2 CDMA model]], but leaves untethering vulnerabilities unpatched.
*April 3 -- All major jailbreak tools ([[redsn0w]], [[PwnageTool]], [[sn0wbreeze]]) get updated to includes [[i0n1c]]'s untether code to jailbreak devices compatible with iOS 4.3.1 except the [[iPad 2]].

===March===
*March 25 -- Apple releases iOS 4.3.1, properly blocking [[User:comex|comex]]'s [[IOSurface Kernel Exploit|exploit]].
*March 13 -- [[User:Comex|comex]] shows a remotely jailbroken [[K95ap|iPad 2 CDMA]].
*March 11 -- Release of the [[iPad 2]] in the USA. The exploits for [[limera1n]] ([[User:Geohot|geohot]]), [[SHAtter]] ([[User:posixninja|p0sixninja]]), and the [[comex kernel exploit]] ([[User:comex|comex]]) were closed by Apple.
*March 9 -- Apple releases iOS 4.3, fixing the [[HFS Legacy Volume Name Stack Buffer Overflow]] vulnerability.

===February===
*February 15 -- New version of both [[PwnageTool]] and [[sn0wbreeze]] were released to support 4.2.1 and untethered using the [[feedface]] exploit.
*February 7 -- The [[Chronic Dev (team)|Chronic Dev Team]] release a version of [[greenpois0n (jailbreak)|greenpois0n]] to jailbreak the [[N92ap|iPhone 4 CDMA model]] using the [[HFS Legacy Volume Name Stack Buffer Overflow]].
*February 3 -- [[User:Jaywalker|Jaywalker]] of the [[Chronic Dev (team)|Chronic Dev Team]] posts [http://www.youtube.com/watch?v=T3NYPVT13xw a video] of custom boot using a soon to be released version of [[Greenpois0n (jailbreak)|Greenpois0n]].

===January===
*January 12 -- Apple discontinues iOS support for [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] since today's beta release of iOS 4.3. Also first time a beta iOS for [[K66ap|Apple TV 2G]] is released.
*January 11 -- Verizon announces [[N92ap|CDMA version of iPhone 4]].

==2010==
===November===
*November 28 -- [[ultrasn0w]] 1.2 is released by the [[iPhone Dev Team]] to unlock [[N82ap|iPhone 3G]] and [[N88ap|iPhone 3GS]] on baseband 6.15.00
*November 22 -- Apple releases iOS 4.2.1 (respectively 4.2 for [[K66ap|Apple TV 2G]])

===October===
*October 31 -- The [[iPhone Dev Team|Dev Team]] releases [[redsn0w]] 0.9.6b2 which jailbreaks iOS 4.1, 4.2 and 3.2.2 on every device available at the time of release (except for iPT 2G MC). It also includes "DFU" button allowing to flash custom [[IPSW]] from Windows [http://blog.iphone-dev.org/post/1452044444/redsn0w-limera1n-fun (see blog post)].
*October 20 -- The [[iPhone Dev Team|Dev Team]] releases [[PwnageTool]] 4.1 which jailbreaks iOS 4.1 and 3.2.2 on every device available at the time of release. [http://blog.iphone-dev.org/post/1359246784/20102010-event (see blog post)]
*October 18 -- [[Chronic Dev (team)|Chronic Dev Team]] releases [[Greenpois0n (jailbreak)|greenpois0n]] RC4 which added support for iPod touch 2G (MC and MB) for an untethered jailbreak using [[User:comex|comex]]'s kernel exploit and the [[usb_control_msg(0xA1, 1) Exploit]].
*October 12 -- [[Chronic Dev (team)|Chronic Dev Team]] releases [[Greenpois0n (jailbreak)|greenpois0n]] after switching its exploit from SHAtter to the exploit [[limera1n]] uses. By doing this, SHAtter remains undisclosed, meaning there is a chance that the 5th generation devices are vulnerable. (The exploit [[limera1n]] uses appears to be fixed in the [[iBoot (Bootloader)|iBoot]] revision found in iOS 4.2 beta 2, which means Apple probably knows about the vulnerability and the next [[bootrom]] revision may have it patched.)
*October 10 -- Following the first [[limera1n]] beta release, [[User:geohot|geohot]] released multiple versions, each fixing bugs affecting previous releases. [[Chronic Dev (team)|Chronic Dev Team]] officialy anounces that, in order to keep SHAtter undisclosed and possibly preserve it for 5th generation devices, [[Greenpois0n (jailbreak)|greenpois0n]] would be delayed in order to incorporate this new exploit [[limera1n]] uses.
*October 9 -- In order to push [[Chronic Dev (team)|Chronic Dev Team]] to change the exploit used on [[Greenpois0n (jailbreak)|greenpois0n]], [[User:geohot|geohot]] rushed out a beta version of [[limera1n]].
*October 8 -- [[User:Geohot|Geohot]] comes back to the scene with a new [[bootrom]] exploit believed to work on all devices, as shown on the resurrected [http://www.limera1n.com limera1n web site]. He prompts [[Chronic_Dev_(team)|Chronic Dev Team]] to use his exploit instead of SHAtter, but, since [[Greenpois0n (jailbreak)|greenpois0n]] is already scheduled to October 10, it may be not possible. [[User:Geohot|Geohot]] ETA'd his [[limera1n]] release to October 11, if [[Greenpois0n (jailbreak)|greenpois0n]] can't be changed to use this new exploit. This decision, however, would burn 2 [[bootrom]] exploits: SHAtter itself and the one used by [[limera1n]], which is unpatchable by firmware updates.
*October 6 -- Chronic Dev Team issues expected ETA of [[Greenpois0n (jailbreak)|greenpois0n]] as October 10, featuring the new SHAtter exploit for devices with the [[S5L8930]].

===September===
*September 30 -- [[User:MuscleNerd|MuscleNerd]] of the [[iPhone Dev Team]] posts [http://www.youtube.com/watch?v=adVp-IxcDHI the first video] of an [[K66ap|Apple TV 2G]] jailbroken via SHAtter.
*September 27 -- [[User:MuscleNerd|MuscleNerd]] of the [[iPhone Dev Team]] posts [http://www.youtube.com/watch?v=aoX1Q8ym2J8 the first video] of an [[N81ap|iPod touch 4G]] jailbroken via SHAtter.
*September 20 -- [[User:pod2g|pod2g]] discloses details about the [[usb_control_msg(0xA1, 1) Exploit‎]] here at The iPhone Wiki. It was used in [[redsn0w]] the following day.
*September 9 -- The existence of SHAtter is revealed. Further details were not released, however.
*September 8 -- Apple releases the [[N81ap|iPod touch 4G]], and iOS 4.1, closing the [[AT+XAPP Vulnerability]].
*September 1 -- Apple event. They announced the new [[N81ap|iPod touch 4G]], [[K66ap|Apple TV 2G]], iOS 4.1, and [[iTunes]] 10.

===August===
*August 12 -- [[Saurik]] releases the first version of PDF Patcher, which installs Apple's patch for the FreeType vulnerability (used in conjunction with other exploits by [[Star]]). It works on firmwares as far back as 2.x, and renders iOS 3.2.2 and 4.0.2 useless for jailbreakers. Jailbreaking and installing this patch is currently the only way for users of first generation iPod touches and iPhones to protect themselves against malicious use of the exploit.
*August 11 -- Apple releases iOS 4.0.2 for [[iPhone]]/[[iPod touch]] and iOS 3.2.2 for [[K48ap|iPad]] as a hotfix for [[Star]]'s exploits. [[Ultrasn0w]]'s exploit remains, since there's no [[Baseband Firmware|baseband]] update on those versions.
*August 3 -- Just before midnight in [[User:planetbeing|planetbeing]]'s timezone [[ultrasn0w]] has been released by the [[iPhone Dev Team]] to [[unlock]] the [[N90ap|iPhone 4]].
*August 1 -- [[User:Comex|comex]] releases [[Star]], a [[jailbreak]] for all iDevices with iOS 3.1.2 through 4.0.1.

===July===
*July 30 -- [[N90ap|iPhone 4]] is released in major countries (second wave).
*July 26 -- Jailbreaking is now officially legal in the U.S.A.: [http://www.eff.org/press/archives/2010/07/26 EFF Wins New Legal Protections for Cell Phone Jailbreakers and Unlockers]
*July 15 -- Apple releases iOS 3.2.1 and 4.0.1.

===June===
*June 24 -- [[N90ap|iPhone 4]] is launched.
*June 22 -- [[iPhone Dev Team]] releases [[PwnageTool]] 4.0 and later 4.0.1 for all devices on 4.0 except those with newer bootroms (some [[N72ap|iPod touch 2G]] and [[N88ap|iPhone 3GS]] devices, and all [[N18ap|iPod touch 3G]] and newer devices).
*June 21 -- [[iPhone Dev Team]] releases [[redsn0w]] 0.9.5 to jailbreak 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPhone touch 2G]] ([[iBoot-240.4|old bootrom]]).
*June 21 -- [[iPhone Dev Team]] releases [[ultrasn0w]] 0.93, an unlock for baseband firmwares [[4.26.08]], [[5.11.07]], [[5.12.01]], and [[5.13.04]].
*June 21 -- Apple releases iOS 4.0
*June 19 -- [[User:Geohot|geohot]] holds a speech at the [[Nuit du hack 2010|Nuit du Hack]]

===May===
*May 3 -- Windows version of [[Spirit]] has been updated to not require Windows 98 compatibility mode to run and fixed a photo deletion issue.
*May 2 -- [[User:Comex|comex]] releases [[Spirit]], an [[untethered jailbreak]] for all iDevices with iOS 3.1.2 through 3.2.

===April===
*April 3 -- Apple releases the [[K48ap|iPad]].

===Feb===
*Feb 12 -- [[User:sherif hashim|sherif_hashim]] discovers [[AT+XAPP Vulnerability]] and passes it to [[User:MuscleNerd|MuscleNerd]], an elite member of the [[iPhone Dev Team]]
*Feb 2 -- Apple releases iOS 3.1.3, closing [[usb_control_msg(0x21, 2) Exploit|usb_control_msg(0x21, 2)]] vulnerability used by [[blackra1n]], [[redsn0w]], et. al.

==2009==
===November===
*November 3 -- [[User:Geohot|geohot]] releases [[blackra1n]] RC3, a software jailbreak for all devices. Includes a new unlock for baseband [[5.11.07]] called [[blacksn0w]] and is also noticeably faster than previous versions.

===October===
*October 11 -- [[User:Geohot|geohot]] releases [[blackra1n]] RC1, a 30 second software jailbreak for all devices, including a [[tethered jailbreak]] for the [[N18ap|iPod touch 3G]], and [[N88ap|iPhone 3GS]] and [[N72ap|iPod touch 2G]] units with newer bootrom revisions.

===September===
* September 24 -- [[User:iH8sn0w|iH8sn0w]] discovers the [[AT+XEMN Heap Overflow|AT+XEMN]] crash independently.
* September 9 -- The [[N18ap|iPod touch 3G]] with [[S5L8922]] processor is released. [[N72ap|iPod touch 2G]] units continue shipping, but with [[iBoot-240.5.1|a new bootrom]]. [[N88ap|iPhone 3GS]] units also begin shipping with [[iBoot-359.3.2|a new bootrom]]. These are no longer vulnerable to the [[0x24000 Segment Overflow]].
* Apple releases iOS 3.1/3.1.1 (7C144/7C145), closing the [[iBoot Environment Variable Overflow]] and [[AT+XLOG Vulnerability|AT+XLOG]] + [[AT+FNS]] Baseband Exploits.

===July===
* July 14 -- [[User:Geohot|geohot]] releases [[purplesn0w]], a software unlock for the [[X-Gold 608]] using [[AT+XLOG Vulnerability|the same exploit as ultrasn0w]], but handled differently. Minutes later, an explanation and source code was posted.
* July 7 -- The [[iPhone Dev Team]] updates [[redsn0w]] and [[ultrasn0w]] to version 0.8, now with [[N88ap|iPhone 3GS]] support. Saurik also updates [[WinterBoard]] to support the [[N88ap|iPhone 3GS]].
* July 3 -- [[User:Geohot|geohot]] releases [[purplera1n]], a software jailbreak for the [[N88ap|iPhone 3GS]].

===June===
* June 28 -- [[User:Geohot|geohot]] posts pictures on his blog of the first fully jailbroken [[N88ap|iPhone 3GS]].
* June 25 -- It's discovered that [[N88ap|iPhone 3GS]] is vulnerable to the [[0x24000 Segment Overflow]].
* June 24 -- The [[iPhone Dev Team]] releases [[ultrasn0w]], an [[unlock]] for [[X-Gold 608]] thanks to [[AT+XLOG Vulnerability|a new exploit]] discovered by [[User:Oranav|Oranav]].
* June 23 -- [[User:Geohot|geohot]] announces he's found a new exploit in [[iBoot (Bootloader)|iBoot]] he calls [[purplera1n]].
* June 19 -- Release of [[N88ap|iPhone 3GS]] to the public and the release of [[PwnageTool]] 3.0 and [[redsn0w]] for jailbreaking devices running iOS 3.0
* June 17 -- Apple releases iOS 3.0.
* June 8 -- Apple announces the [[N88ap|iPhone 3GS]].

===March===
* March 10 -- Information about the [[0x24000 Segment Overflow]] exploit used for the [[N72ap|iPod touch 2G]] [[untethered jailbreak]] is released thanks to the combined work of [[chronic]], [[CPICH]], [[User:Posixninja|posixninja]], [[User:Pod2g|pod2g]], [[ius]], [[planetbeing]], [[User:MuscleNerd|MuscleNerd]], and co. after being leaked and sold by [[NitroKey]]. To prevent users wasting their money on a stolen exploit, the Hybrid DevTeam decided to release it immediately.

===January===
* January 31 -- The [[iPhone Dev Team]] released [[redsn0w Lite]], a [[tethered jailbreak|tethered]] [[N72ap|iPod touch 2G]] [[jailbreak]]. It combines the [[ARM7 Go]] vulnerability with the well-established [[pwnage]] flow for other Apple mobile devices. It was bundled in a way that allowed usage on iOS 2.2.1 by uploading [[iBoot (Bootloader)|iBoot]] from iOS 2.1.1, which is vulnerable to [[ARM7 Go]], to the device while in [[DFU Mode]].
* January 29 -- Apple releases iOS 2.2.1, closing the [[AT+stkprof]] exploit.
* January 25 -- [[0wnboot]] is released to [http://code.google.com/p/chronicdev/ chronicdev google code page], thanks to [[AriX]], [[User:ChronicDev|chronic]], [[CPICH]], [[westbaer]], [[ius]], [[User:Pod2g|pod2g]], the rest of the iPod devel crew on IRC, and to the #iphone-hax lab rats. Within days, [[AriX]] and the [[Chronic Dev (team)|Chronic Dev Team]] got a ramdisk booting for a [[tethered jailbreak]].
* January 17 -- [[User:MuscleNerd|MuscleNerd]] of the [[iPhone Dev Team]] [https://twitter.com/MuscleNerd/status/1127346766 shows a video demo] of the first jailbroken [[N72ap|iPod touch 2G]].
* January 16 -- [[ARM7 Go]] vulnerability disclosed where else but here on The iPhone Wiki, for developers to poke and prod at.
* January 15 -- The [[iPhone Dev Team]] [https://twitter.com/iphone_dev/status/1120595069 tweets the VFDecrypt key] for iOS 2.2 on [[N72ap|iPod touch 2G]], demonstrating for the first time that unsigned code can now be run on that device.
* January 1 -- The [[iPhone Dev Team]] releases [[yellowsn0w]] 0.9 beta for baseband [[2.28.00]].

==2008==
===December===
* December 27 -- [[25C3 presentation "Hacking the iPhone"]]
* December 21 -- [[User:MuscleNerd|MuscleNerd]], of the [[iPhone Dev Team]] does a live demo of the 3G unlock, dubbed as [[yellowsn0w]]: http://qik.com/video/729275

===November===
* November 21 -- Apple releases iOS 2.2.

===September===
* September 9 -- Apple releases iOS 2.1. [[N72ap|iPod touch 2G]], which no longer had the [[Pwnage 2.0]] exploit, is revealed.

===August===
* August 18 -- Apple releases 2.0.2 fimware. [[iPhone Dev Team]] releases [http://wikee.iphwn.org/news:pwnage20announcement QuickPwn], a 2.x [[pwnage]]/ramdisk combination exploit that allows jailbreaking without needing to create custom IPSWs.
* August 4 -- Apple releases 2.0.1 fimware

===July===
* July 22 -- [[TA_Mobile]] hardware dumps the 3G baseband (bootloader 5.8 & FW 1.45.00) by desoldering the [[NOR]].
* July 19 -- [[iPhone Dev Team]] releases [[PwnageTool]] 2.0, jailbreaking and unlocking the 2.0 software on the [[M68ap|iPhone 2G]] and jailbreaking iOS 2.0 on the [[N82ap|iPhone 3G]] and [[N45ap|iPod touch]].
* July 15 -- Apple releases iOS 1.1.5, the last of the 1.x firmwares
* July 11 -- [[N82ap|iPhone 3G]] is released. Apple releases iOS 2.0 and MobileMe on the same date, resulting in server issues.

===June===
* June 9 - [[N82ap|iPhone 3G]] is announced at [[WWDC]] '08.

===April===
* April 3 -- [[iPhone Dev Team]] releases [[PwnageTool]] 1.0, making use of the [[pmdx exploit]] (to patch RSA checks out of the [[kernel]], to write unsigned to [[NOR]])

===March===
* March 12 -- [[iPhone Dev Team|Dev team]] releases dual-boot jailbreak method, only to be silently fixed in 2.0.
* March 4 -- [[User:N000b|George Zhu (n000b)]] releases [[iLiberty / iLiberty+]].

===February===
* February 28 -- [[Cydia Application|Cydia]] is released as an open-source alternative to [[Installer.app]], and prepares to take over the jailbreak application scene upon 2.0's release.
* February 26 -- Apple releases iOS 1.1.4.
* February 11 -- [[User:Zibri|Zibri]] leaks the [[Ramdisk Hack]] in [[ZiPhone]], the first all-in-one unlock, activate, jailbreak solution.
* February 8 -- [[User:Geohot|geohot]] releases software unlock for 4.6. Apple states 25% of phones were never activated with AT&T.

===January===
* January 28 -- [[iPhone Dev Team]] releases [[Soft Upgrade]] jailbreak for 1.1.3.
* January 24 -- [[Nate True]] releases a version of [[iBrickr]] that used the [[Soft Upgrade]] method to jailbreak 1.1.3 for [[M68ap|iPhones]].
* January 18 -- [[User:Geohot|Geohot]] and his friends [http://iphonejtag.blogspot.com/2008/01/112-otb-unlocked.html unlocked 1.1.2 OTB 4.6 by test point], the unbeatable version at that time.
* January 18 -- [[iPhone Dev Team]] posts YouTube video of a jailbroken 1.1.3, which was made possible by the dual boot jailbreak from [[bgm]].
* January 15 -- Apple releases iOS 1.1.3, closing the [[Mknod]] exploit. In addition, everything now runs as "mobile" instead of "root."

== 2007 ==
===November===
* November 15 -- [[Baseband Bootloader|Baseband bootloader]] 4.6 is found on new [[M68ap|iPhone]]s, which initially had no [[unlock]].
* November 12 -- Apple releases iOS 1.1.2, closing the [[LibTiff]] and [[Symlinks]] exploits.
* November 2 -- [[JailbreakMe|AppSnapp]] is released, bringing jailbreaking to the mainstream iPhone user.

===October===
* October 23 -- iPhone-Elite Team releases the [[Virginizer]].
* October 14 -- [[User:AriX|AriX]] releases iJailBreak, the first automated [[n45ap|iPod touch]] jailbreak for the Mac.
* October 12 -- [[User:planetbeing|planetbeing]] releases touchFree, the first automated [[N45ap|iPod touch]] jailbreak.
* October 10 -- niacin, [[cmw]], and dre release the LibTiff exploit to jailbreak the [[N45ap|iPod touch]], which is later adapted for use in [[JailbreakMe|AppSnapp]].

===September===
* September 27 -- Apple releases iOS 1.1.1.
* September 11 -- [[iPhone Dev Team]] releases [[iUnlock]], first free software unlock.
* September 10 -- [[IPSF]] releases first paid software unlock.
* September 9 -- Apple announces the [[N45ap|iPod touch]] at a media event.

===August===
* August 23 -- [[User:Geohot|geohot]] and team release [[hardware unlock]] method.
* August 21 -- [[Installer.app]] is released by Nullriver, first GUI apps are distributed.

===July===
* July 23 -- First phones are used with other carriers by means of [[SIM hacks]].
* July 20 -- nightwatch adapts a [[toolchain]] to the iPhone. The first apps are compiled.
* July 9 -- [[iPhone Dev Team]] releases a [[jailbreak]] method. The first use of this is ringtones.
* July 3 -- DVD Jon first cracks [[activation]]. People can use the apps on the phone without a subscription.

===June===
* June 29 -- [[M68ap|iPhone]] is released. World's most hyped consumer product.
* June 26 -- The [[iPhone Dev Team]] was formed.

ITunes Errors

2011-05-12T17:58:23Z

Ryccardo: /* 0xE8008001 */ More neutral description.

{{lowercase}}
__NOTOC__
Most of the errors can be found [http://support.apple.com/kb/ts1275 here] or [http://raptortalks-tech.blogspot.com/2010/07/itunes-error-codes.html here].

Here is a list of [[iTunes]] errors that could appear during a restore or a USB connection via iTunes:

=Negative -98xx=
{{:iTunes Errors/-98xx}}

=Negative -1 ... -100=
==Error -50==
Delete Storm Video, QuickTime, iTunes, then reinstall iTunes. See also [http://support.apple.com/kb/TS1583?viewlocale=en_US Apple's KB article].

==Error -35==
Error when downloading songs purchased on iTunes. Also see [http://support.apple.com/kb/TS1475?viewlocale=en_US Apple's KB article].

==Error -1==
Error occurs when one uses the "last ditch" method for preventing baseband updates on the iPhone 4. The baseband does not get updated using this method. Simply use TinyUmbrella to kick it out of recovery mode.

=Below 100=
{{:iTunes Errors/Below 100}}

=Errors 10xx=
==Error 1002==
Error when restoring.

==Error 1004==
This is caused by a failure to match the [[AT+XNONCE|Baseband Nonce]] currently in memory to the [[AT+XNONCE|nonce]] returned in the [[Baseband Firmware]] [[SHSH]] blob. This happens if you edited the [[wikipedia:Hosts (file)|hosts file]] ([[Cydia Server|Saurik's Server]]) or you are using [[TinyUmbrella]]. Use [[TinyUmbrella]] and "Kick Device Out Of Recovery" to boot. 1

==Error 1011==
This is caused by recovery mode being in userland (1.1.1 firmware). The file iTunesMobileDevice.dll is damaged or updated.

==Error 1013==
'''iPhone 4'''

This means that the baseband did not get updated. Either remove the gs.apple.com entry from your hosts file and let the baseband upgrade or if you want to preserve the baseband just jailbreak at this point to boot it up.

'''Other Devices'''

Restart computer; change computer; reinstall system, if iPhone is always in restoring mode: XP users can jump from restoring mode with ibus; MAC users can use iNdependence. (usually on the iPhone with 1.0.2 firmware downgraded from 1.1.1)

==Error 1014==
This occurs when you try to downgrade your phone's baseband.

==Error 1015==
This error is common when downgrading [[iPhone]]s and 3G-enabled [[iPad]]s. The problem occurs when the device's [[Baseband Firmware|baseband]] has a higher version number than the baseband in the firmware you restored to. Just set auto-boot true in [[iRecovery]] or use [[iREB]]/[[TinyUmbrella]]/[[RecBoot]].1

=Errors 13xx=
==Error 1394==
When Spirit2Pwn flashes parts of the boot chain on [[iOS]] 4, the device may crash into [[DFU Mode]]. [http://ih8sn0wforums.com/viewtopic.php?f=8&t=3407]

=Errors 14xx=
==Error 1413==
Restart computer; change USB port; reinstall system. See also [http://support.apple.com/kb/TS1927?viewlocale=en_US Apple's KB article].

==Error 1415==
Restart computer; change USB port; reinstall system.

==Error 1417==
Restart computer; change USB port; reinstall system.

==Error 1418==
Restart computer; change USB port; reinstall system.

==Error 1428==
Restart computer; change USB port; reinstall system. (downgrade from www.iphonebus.com)

==Error 1050==
Bad response from gs.apple.com OR need iReb for preparing iPhone for restoring to custom ipsw

=Errors 16xx=
==Error 1600==
Custom firmware can't be restored on a device with [[DFU Mode]]. The software of the iPhone isn't patched. Go into Recovery Mode (Pwnage Tool up to 4.0.1) or start Pwnage Tool and click "DFU" at the top and go with this tutorial into the DFU mode. During that process the software gets patched and the custom firmware should run without any problems.

==Error 1601==
See also this [http://support.apple.com/kb/TA38633 old KB article from Apple].

==Error 1602==
Restart computer; change computer; reinstall system.

If this error occured during an Apple TV restore, then unplug the Apple TV from the power cable, after you entered the recovery or DFU mode, and then try it again.

==Error 1603==
False [[kernelcache]] patch. Known on damaged bundles from unofficial [[PwnageTool]] distributions or bundles. See also [http://support.apple.com/kb/TA38603?viewlocale=en_US Apple KB article]

==Error 1604==
Device was not pwned (signature checks were not blocked). Custom firmware can't be restored. Can also happen when there's a problem with the ipsw.

==Error 1611==
[[iTunes]] tried to enter the [[Restore Mode]], but the device turned back to the [[Recovery Mode]].

==Error 1618==
Missing system files or corrupt data in iTunes installation. Try to uninstall iTunes, restart computer, install again.

==Error 1619 ==
[[iTunes]] is too old and couldn't read the iPhone in Recovery or DFU Mode. Please update iTunes and try it again.

==Error 1644==
[[IPSW File Format|IPSW]] was moved during prepare with [[iTunes]]. Try it again and don't move the IPSW.

=Errors 20xx=
==Error 2001==
The Mac OS X kernel extension "IOUSBFamily" that was bundled with late 2008 / early 2009 MacBooks, as well as the 10.5.6 update, has a bug where it fails to properly recognize an iDevice in [[DFU Mode]]. It can be resolved by updating to 10.5.7 (or later), or using a USB hub.

Also if you have [[Limera1n]] opened during you try to restore the iOS device.

==Error 2002==
[[iTunes]] can't connect because another program is using it or it's disconnected during the Apple Server check.

==Error 2003==
Connection problem; change USB cable and check USB port.

==Error 2005==
Problem connecting. Probably a hardware failure.

=Errors 30xx=
==Error 3002==
*Update to an older firmware isn't working, because Apple is no longer handing out [[SHSH]]s for the device/firmware combination.
*Or a timeout checking Apple server - retry later.
*This error also happens if you try to ''Update'' with a local TSS server ([[TinyUmbrella|TinyUmbrella tool]]) and probably also when connecting to [[Cydia Server]]. Use ''Restore'' instead.

==Error 3004==
No internet connection during the firmware restore.
[[iTunes]] can't connect to gs.apple.com. Maybe Port 80 and Port 443 is blocked. Open it on your router.

==Error 3014==
False edited hosts. The SHSH request couldn't be completed. No connection to the Apple Server, Sauriks Server or localhost.
[[iTunes]] can't connect to gs.apple.com. Maybe Port 80 and Port 443 is blocked. Open it on your router.

=Errors 31xx=
==Error 3123==
Something dealing with movie rentals.

==Error 3191==
QuickTime corrupted must reinstall before iTunes will work or Turn off Compatibility Mode for QuickTime.

1. Right-click on the QuickTimePlayer application (located in C:Program FilesQuickTime) and choose Properties from the shortcut menu.

2. In the Properties window, click on the Compatibility tab Deselect the checkbox labeled “Run this program in compatibility mode for.”

3. Click Apply.

4. Close the Properties window

==Error 3194==
Occurs when trying to install an old firmware and Apple's server disallows the installation. The only solution is to have [[SHSH]] backup and modify the hosts file to point to [[Saurik]]'s [[Cydia Server]] where they are backed up (or localhost if you have it yourself).

==Error 3195==
"An internal error occurred." Missing SHSH for the firmware. Maybe the same as "This device isn't eligible for the request build." but with an cache error.

=Higher Errors=
==Error 11222==
A security software you have installed may be conflicting with iTunes.

==Error 13019==
?

==Error 20000==
Is caused by a custom theme pack on your Windows. Use default Theme.

This error can also be caused by the iDevice rebooting during the "Extracting Firmware" stage of restore.

==Error 20008==
?

This happened on a Mac with TinyUmbrella running before resotring a firmware to the Apple TV.

=Hex codes=
==0xE800001==
Device was suddenly unplugged. [[iTunes]] couldn't connect with the device. Try it again

==0xE8000022==
Error in your firmware files. Restore.

==0xE800003D==
False permissions in the Carrier Bundle folder. Restore, update or fix the permissions from the carrier bundle to update the carrier settings via iTunes.

==0xE800006B==
Device was suddenly unplugged. [[iTunes]] couldn't connect with the device. Try it again.

==0xE8000065==
[[sn0wbreeze]] custom firmware error on USB connection. Unplug the device, reboot it, and plug it in again.

==0xE8008001==
'''''See also: [[MobileInstallation]]'''''

''"The following app(s) were not installed {...}. An unknown error occurred. (0xE8008001)"''

IPA signature verification failed.

=Error texts=
==This device isn't eligible for the requested build==
Apple doesn't sign the firmware anymore. See [[SHSH]].

==The iPhone "xxx" could not be restored because the firmware file is not compatible.==
You downloaded the wrong firmware file (or it is corrupt). Download the correct firmware file that matches your device. Here's an overview of file names (beginning) and devices:
*AppleTV2,1_ [[K66ap|Apple TV 2G]]
*iPad1,1_ [[K48ap|iPad (or 1G or first generation)]]
*iPad2,1_ [[K93ap|iPad 2 Wi-Fi model]]
*iPad2,2_ [[K94ap|iPad 2 GSM model]]
*iPad2,3_ [[K95ap|iPad 2 CDMA model]]
*iPhone1,1_ [[M68ap|iPhone (or 2G or first generation)]]
*iPhone1,2_ [[N82ap|iPhone 3G]]
*iPhone2,1_ [[N88ap|iPhone 3GS]]
*iPhone3,1_ [[N90ap|iPhone 4 GSM model]]
*iPhone3,3_ [[N92ap|iPhone 4 CDMA model]]
*iPod1,1_ [[N45ap|iPod touch (or 1G or first generation)]]
*iPod2,1_ [[N72ap|iPod touch 2G]]
*iPod3,1_ [[N18ap|iPod touch 3G]]
*iPod4,1_ [[N81ap|iPod touch 4G]]

==The iPhone "xxx" cannot be restored at this time because the iPhone software update server could not be contacted or is temporarily unavailable.==
If you want to upgrade or downgrade the baseband, make sure you didn't change the hosts file. The Cydia server cannot handle the requests for the baseband certificates.

== There was a problem downloading the software for the iPhone “XXXXXXX” the network connection was reset, make sure your network settings are correct and your network connection is active, or try again later.==
You need to disable both your antivirus ''and'' your windows/security firewall in order for the update/restore to go through.

----

1 Use [[TinyUmbrella]] (Kick Device out of Recovery), [[iRecovery]] or [[redsn0w Lite]] and enter "setenv auto-boot true", "saveenv", "reboot" to boot.

2 Device isn't bootable, but a custom firmware can be restored if it has a jailbreak and the requirements.

Gevey SIM

2011-05-10T17:16:58Z

Ryccardo:

A new generation [[SIM hacks|passthrough card]].

Currently the only way to connect to a cellular network on an iPhone 4 not on the unlockable [[1.59.00|1.59.00 baseband]].
It is a "tethered" unlock, [http://twitter.com/#!/MuscleNerd/status/51943620844060672 requiring an emergency call] to connect after every baseband reboot.

===References===
*[http://twitter.com/#!/MuscleNerd/status/48252929693593600 Musclenerd tweet with link], links to [http://laforeta.blogspot.com/2011/03/unofficial-review-of-gevey-iphone-4-sim.html this write-up]
*[https://twitter.com/#!/MuscleNerd/status/51943620844060672 Musclenerd says it's illegal in most countries]

{{stub|hardware}}

IPSW File Format

2011-05-09T13:56:34Z

Ryccardo:

'''IPSW''' ('''iP'''od¹ '''S'''oft'''W'''are) Files have the Magic Number 504B0304 (PK\003\004) and thus are [http://en.wikipedia.org/wiki/ZIP_%28file_format%29 ZIP] Archives. They can be modified with typical zip/unzip tools (i.e. change extension to .zip and double click). An IPSW File is used to deliver the iPod Touch / iPhone [[firmware]] to the end-user.

¹The IPSW files are used starting from the iPod 1G, even though they have [http://www.freemyipod.org/wiki/Firmware a different format than] iOS-based devices.
== IPSW Contents ==

=== root folder ===
*[[Restore Ramdisk]]
*[[Update Ramdisk]] (Firmware 1.0 didn't contain an Update Ramdisk as there is no official firmware to update from)
*[[Disk Image Formats|Filesystem Ramdisk]] (the largest .dmg file)
*[[Kernelcache|kernelcache.release.XXXXXXX file]] (application processor specific i.e [[S5L8900]], [[S5L8920]], [[S5L8720]], [[S5L8922]], [[S5L8930]])
*BuildManifest.plist (first appeared in firmware 3.0, I guess)
*Restore.plist file

*\Firmware (Folder)

=== Firmware Folder ===
*\all_flash\all_flash.XXXXX.production (Folder - hardware specific i.e. [[M68ap]], [[N82ap]], [[N88ap]], [[N45ap]], [[N72ap]], [[N18ap]], [[K48ap]])
*\dfu (Folder)
*ICE3_XX.XX.XX_BOOT_02.06.Release.bbfw (Contains the baseband and the bootloader. X stands for a number. This is the baseband version. 02.06 ist the booloader. Only in the iPhone 4 firmware.)

=== all_flash.XXXXX.production Folder ===
*[[S5L File Formats#IMG2|IMG2]]/[[IMG3 File Format|IMG3]] files
*manifest

=== dfu Folder ===
*[[iBEC]].XXXXX.DFU (hardware specific i.e. [[M68ap]], [[N82ap]], [[N88ap]], [[N45ap]], [[N72ap]], [[N18ap]], [[K48ap]])
*[[iBSS]].XXXXX.DFU (hardware specific i.e. [[M68ap]], [[N82ap]], [[N88ap]], [[N45ap]], [[N72ap]], [[N18ap]], [[K48ap]])
*[[WTF]].XXXXX.DFU (hardware specific i.e. [[M68ap]], [[N82ap]], [[N45ap]], [[N72ap]] - currently not present in firmwares for the [[N88ap|iPhone 3GS]] and later, because it is mostly used to patch issues with the DFU mode that was burned into the bootrom)

== Example ==
This is a ls -alR of an extracted iPhone 3GS 3.0 Firmware IPSW.

<pre>total 608400
drwx------@ 11 m staff 374 17 Jun 07:11 .
drwxrwxrwx 5 m staff 170 18 Jul 07:34 ..
-rw-r--r--@ 1 m admin 281214976 22 Mai 17:10 018-5302-002.dmg
-rw-r--r--@ 1 m admin 12769604 22 Mai 16:59 018-5304-002.dmg
-rw-r--r--@ 1 m admin 12777796 22 Mai 16:59 018-5306-002.dmg
-rw-r--r-- 1 m admin 21097 22 Mai 17:29 BuildManifest.plist
drwxr-xr-x@ 5 m staff 170 17 Jun 07:11 Firmware
-rw-r--r-- 1 m admin 1763 22 Mai 17:10 Restore.plist
-rw-r--r--@ 1 m staff 4695492 22 Mai 14:32 kernelcache.release.s5l8920x

./Firmware:
total 16
drwxr-xr-x@ 5 m staff 170 17 Jun 07:11 .
drwx------@ 11 m staff 374 17 Jun 07:11 ..
drwxr-xr-x@ 4 m staff 136 18 Jun 02:10 all_flash
drwxr-xr-x@ 4 m staff 136 22 Mai 13:39 dfu

./Firmware/all_flash:
total 16
drwxr-xr-x@ 4 m staff 136 18 Jun 02:10 .
drwxr-xr-x@ 5 m staff 170 17 Jun 07:11 ..
drwxr-xr-x@ 16 m staff 544 22 Mai 13:43 all_flash.n88ap.production

./Firmware/all_flash/all_flash.n88ap.production:
total 1320
drwxr-xr-x@ 16 m staff 544 22 Mai 13:43 .
drwxr-xr-x@ 4 m staff 136 18 Jun 02:10 ..
-rw-r--r--@ 1 m staff 44996 22 Mai 13:08 DeviceTree.n88ap.img3
-rw-r--r--@ 1 m staff 67908 22 Mai 13:12 LLB.n88ap.RELEASE.img3
-rw-r--r--@ 1 m staff 9604 22 Mai 13:15 applelogo.s5l8920x.img3
-rw-r--r--@ 1 m staff 19716 22 Mai 13:15 batterycharging0.s5l8920x.img3
-rw-r--r--@ 1 m staff 24900 22 Mai 13:16 batterycharging1.s5l8920x.img3
-rw-r--r--@ 1 m staff 76100 22 Mai 13:16 batteryfull.s5l8920x.img3
-rw-r--r--@ 1 m staff 56772 22 Mai 13:16 batterylow0.s5l8920x.img3
-rw-r--r--@ 1 m staff 65348 22 Mai 13:17 batterylow1.s5l8920x.img3
-rw-r--r--@ 1 m staff 20356 22 Mai 13:17 glyphcharging.s5l8920x.img3
-rw-r--r--@ 1 m staff 19332 22 Mai 13:18 glyphplugin.s5l8920x.img3
-rw-r--r--@ 1 m staff 178500 22 Mai 13:21 iBoot.n88ap.RELEASE.img3
-rw-r--r--@ 1 m staff 341 22 Mai 13:43 manifest
-rw-r--r--@ 1 m staff 20484 22 Mai 13:24 needservice.s5l8920x.img3
-rw-r--r--@ 1 m staff 47876 22 Mai 13:24 recoverymode.s5l8920x.img3

./Firmware/dfu:
total 416
drwxr-xr-x@ 4 m staff 136 22 Mai 13:39 .
drwxr-xr-x@ 5 m staff 170 17 Jun 07:11 ..
-rw-r--r--@ 1 m staff 104772 22 Mai 13:30 iBEC.n88ap.RELEASE.dfu
-rw-r--r--@ 1 m staff 104772 22 Mai 13:36 iBSS.n88ap.RELEASE.dfu
</pre>

Plutil

2011-05-02T21:57:07Z

Ryccardo: /* Erica's plutil */ Latest (but not new) beta 17

plutil is a program that can convert [[wikipedia:Property list|.plist]] files between a binary version and an XML version. Currently, there are two versions of this utility.
==Apple's plutil==
'''''See also:'' [http://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man1/plutil.1.html plutil's man page]'''
plutil: [command_option] [other_options] file...
The file '-' means stdin
Command options are (-lint is the default):
-help show this message and exit
-lint check the property list files for syntax errors
-convert fmt rewrite property list files in format
fmt is one of: xml1 binary1

There are some additional optional arguments:
-s be silent on success
-o path specify alternate file path name for result;
the -o option is used with -convert, and is only
useful with one file argument (last file overwrites);
the path '-' means stdout
-e extension specify alternate extension for converted files
-- specifies that all further arguments are file names

==Erica's plutil==
===Unknown version===
plutil: [command_option] [other_options] file...
-h show this message and exit
-l output a list of the properties (default)
-k list the top level property list keys
-t create new property list(s) and exit
-c fmt rewrite the property list in format
fmt is one of xml1 binary1
Setting and accessing (writes to XML):
-v key retrieve the value for key
-s key set the value for key with the option given in -v
-i key set int value for the key with the option given in -v
-f key set float value for the key with the option given in -v
-0 key set the key to the boolean value false
-1 key set the key to the boolean value true
-r key remove the key/value pair for key
===beta 17===
<code>Help
-full Print this message
-help Print usage message

Show Files
-verbose -v Show verbose output
-useDebug Show useDebug output
-dump Dump property list file to stdout
-show Show property list data
-showjson Show property list data as JSON
-keys List top level dictionary keys

Create and Convert Files
-create Create a new empty property list
-convert format Convert each property list file to selected format.
Formats are xml1 and binary1 and json. Note that json
files are saved to filename.json
-xml Equivalent to -convert xml1
-binary Equivalent to -convert binary1
-json Equivalent to -convert json. NOT used for typecasting
-backup Create a plist backup. (File extension must be .plist)

Create Keypaths
-key keyname Recover value for key. Multiple uses builds path
-set keyname Recover value for key. (Synonym for key)
-rmkey keyname Specifies a one-item keypath or adds itself as the
last item of the keychain. (Toggles removal on.)
-(unrecognized) Unrecognized flags are used to build keypaths

Setting Values
-setvalue value Set value for keypath
-value value Set value for keypath (Synonym for setvalue)
-remove Remove value at keypath. (Toggles removal on.)
-1 -yes -true Set keypath value to Boolean true
-0 -no -false Set keypath value to Boolean false
-int value Use integer type. (Synonym: -integer)
-float value Use float type. (Synonym: -real -double)
-string value Use string type
-data filepath Set keypath value to the NSData read from filepath
-now Set keypath value to the current NSDate
-fromnow delta Set keypath value to current date off by delta seconds
-beforenow delta Set keypath value to current date off by delta seconds
-array Create a new array and set it as value for keypath
-dict -dictionary Create a new dictionary, set it as value for keypath

Type Casting
-type typeid Type to use while setting key. Valid types are
string (default), int, integer, float, real,
double, bool, boolean, data, and date. Dates use
natural language conversion. Data converts value string
to NSData. Use json to define arrays and dictionaries.

Working with Arrays
-arrayadd Add value to array at keypath
</code>

To edit nested elements (e.g. a capability bit inside the NxxAP.plist file) run
plutil -key {1st level container} -key {n-level container} -key {oblect name} -{value to be set}

Preventing Baseband Update

2011-04-06T15:00:58Z

Ryccardo: /* TinyUmbrella/Cydia Server Method (iPhone 4) */

===Edit options.plist===
# Unpack custom IPSW
# Decrypt Restore Ramdisk using [[xpwntool]] and mount it
# Navigate to /usr/local/share/restore
# Edit options.plist on the restore ramdisk
(Ignore any other settings specified in the plist, don't edit them)
<pre>
<key>UpdateBaseband</key>
<false/>
</pre>
<ol start="5">
<li>Reencrypt the restore ramdisk</li>
<li>Repack the IPSW</li>
<li>Prepare device for custom firmware using [[redsn0w]]</li>
<li>Restore IPSW to [[iTunes]] in pwned [[DFU Mode]] using the appropriate method(Look at Restoring The Modified IPSW Section)</li>
</ol>

You must load a patched [[iBSS]]/[[iBEC]] for this to work. Using an original IPSW will not work, because redsn0w's pwned DFU Mode doesn't patch sigchecks in [[iBSS]] (which is loaded from the IPSW).

==Restoring The Modified IPSW==
Firmwares like 4.2.1 and above have baseband checks on the [[Restore Ramdisk]].If the modified IPSW is restored, iTunes will give a Error 1015 and iPhone will be in a recovery mode loop which cannot be exited by TinyUmbrella or the 'setenv auto-boot true' command 
Fortunately, the [[Update Ramdisk]] does not contain that baseband check so if the Update Method is used which is mentioned below,iTunes will give error 1013 and it can be exited by TinyUmbrella and the irecovery command.
===Update Method===
*Windows Users, Open iTunes. hold the Shift button and click Update then select the modified IPSW
*Mac Users, Open iTunes, hold the Alt button and click Update then select the modified IPSW
===Restore Method===
*Windows Users, Open iTunes. hold the Shift button and click Restore then select the modified IPSW
*Mac Users, Open iTunes, hold the Alt button and click Restore then select the modified IPSW

==[[TinyUmbrella]]/[[Cydia Server]] Method (iPhone 4)==

The [[N90ap|iPhone 4]] requires a [[AT+XNONCE]] key signature from Apple in order to update the baseband. Pointing the hosts file to [[Cydia Server]] or running [[TinyUmbrella]] will allow this request for signature to be ignored, thus preventing a [[baseband]] update.

*'''This only works if [[Cydia Server]]/[[TinyUmbrella]] accepts the firmware's SHSH.'''
*'''This method 'works' with [[iOS]] 4.2.1, but in the restore ramdisk there is a baseband version check. If it doesn't match, it will crash before the Apple logo with the loading bar (the 2nd, first-boot one, not the restore one) appears. <del>It will boot and crash again. The usual 'Kick out of recovery mode' methods or "setenv auto-boot true" won't work, because it's not the problem that the auto-boot is false. So this method is actually not useful for [[iOS]] 4.2.1+.'''</del>
*'''greenpois0n RC6 will fix this as part of the jailbreaking process. The latest version of TinyUmbrella also features a new Fix Recovery function.'''
# Edit the hosts file and add the line "74.208.10.249 gs.apple.com" without the quotes, or run [[TinyUmbrella]] after saving the firmware's SHSH. If [[Cydia Server]] hasn't got your [[SHSH]], but you have it locally, use TSS Server method in [[TinyUmbrella]].
# Use the "Restore" button in [[iTunes]] to update if your firmware version is below 4.2 else use the "Update" button in [[iTunes]] to update.
# You will get Error 1013 and it can be easily bypassed by using the Exit Recovery Mode button in [[TinyUmbrella]] or typing 'setenv auto-boot true' and 'saveenv' in [[iRecovery]]

==[[User:Ih8sn0w|iH8Sn0w]]'s Method==
[[Sn0wbreeze]] has a "Baseband Preservation Mode" since version 2.2. User [[User:Ih8sn0w|IH8sn0w]] [http://twitter.com/iH8sn0w/status/19453808090288128 confirmed] that his method is not the same as the above mentioned methods.

This method can also be used on the iPhone 3GS and the iPhone 4 to downgrade from the 4.3 betas back to 4.2.1, as long as the device can be restored (and activated) to iOS 4.1 or an earlier version.

To get some more details about what [[sn0wbreeze]] with the option "Baseband Preservation Mode" does, here a short analysis - a comparison of the generated ipsw for iOS 4.3 (iPhone 4):
===root filesystem 038-0688-006.dmg===
I couldn't get vfdecrypt to run, so I cannot list the details. It is much smaller (360MB instead of 615MB), probably just without the baseband. (Details to be added.)
===restore ramdisk 038-0715-006.dmg===
====options.plist====
The file options.plist in the folder \ramdisk\usr\local\share\restore is changed. These are the changes:
*first entry added: CreateFilesystemPartitions = true
*changed value: SystemPartitionSize 1024 changed to 1050
*added last entry: UpdateBaseband = false
====asr====
In the folder \ramdisk\usr\sbin\ the file asr has been renamed to asr_orig and a patched file of size 180832 bytes added. The patches are:

0001321A: DF F8
0001321A: FD E7

0002BFC6: ED B7 6C AA D3 AF A0 B4 90 08 6D 63 51 46 17 0B 8A 40 8D C4
0002BFC6: 6E DB 54 D3 DB 60 A8 FB 74 47 28 EB 02 33 EA FA 20 B6 7E B5

0002C1BA: FA DE 0C 01
0002C1BA: F6 B6 D0 8F

====images====
Two files were changed from the Apple logo to the iH8sn0w logo. Both are called applelogo.png and they are located in \ramdisk\usr\share\progressui\images-1x\ and in \ramdisk\usr\share\progressui\images-2x\.
===patches in [[iBSS]]===
There are several patches in [[iBSS]] (first line is original, second line is the patched version):
000000FC: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000FC: 03 A2 13 68 1B B1 50 68 C8 50 08 32 F9 E7 70 47 E0 A9 8C 00 30 E0 00 20 A4 AC 92 00 06 9B 0B B1 A8 AC 92 00 00 23 04 D0 D8 D3 71 00 EA D1 01 20 E4 A9 8C 00 00 20 2D E0 5C DB 27 00 01

00012C26: FF F7 73 FE
00012C26: 00 20 00 20

00012C4C: FF F7 60 FE
00012C4C: 00 20 00 20

00012C70: FF F7 B6 FE
00012C70: 00 20 00 20

00012C98: FF F7 3A FE
00012C98: 00 20 00 20

00012CBA: FF F7 29 00
00012CBA: 00 20 00 20

00012CDE: FF F7 17 FE
00012CDE: 00 20 00 20

00012D02: FF F7 05 FE
00012D02: 00 20 00 20

00012D20: FF F7 F6 FD
00012D20: 00 20 00 20

00012D44: FF F7 E4 FD
00012D44: 00 20 00 20

0001345A: 08 F0 0D
0001345A: EC F7 4F

0001AD38: 4F F0 FF 30
0001AD38: 00 20 00 20

[[Category:Baseband]]

The iPhone Wiki:Spam

2011-04-06T14:54:57Z

Ryccardo: My opinion on IP bans

How do we combat this recent spamming of this wiki? I suggest a possible invite system or similar? --[[User:Srts|Srts]] 02:24, 9 November 2009 (UTC)
:I have already blocked account signup, they must have had this account for a while. --[[User:Geohot|geohot]] 02:29, 9 November 2009 (UTC)
::Well if they don't stop, we can't have account creation disabled forever, defeats the purpose of the wiki. People like him are sad. Great work to all the sysops et all. keeping disruption to a minimal :D --[[User:Srts|Srts]] 02:34, 9 November 2009 (UTC)
:::Yea thanks a lot guys for putting up with this. We'll give a bit of time, and if they continue, we'll figure something out. This kid keep trying to reset my password for hosting and the wiki. Too bad he doesn't have a life. --[[User:Geohot|geohot]] 03:10, 9 November 2009 (UTC)
:::An invite system might not be a bad idea actually [[User:ChronicDev|Will Strafach]] 03:16, 9 November 2009 (UTC)
::::feel free to post their IP addresses, lol --[[User:Posixninja|posixninja]] 04:08, 9 November 2009 (UTC)
::::Well, if you need an extra admin to block them (and delete spam pages), I volunteer. --[[User:Dranfi|Dranfi]]
:::::Congrats, you're an admin --[[User:Geohot|geohot]] 13:22, 9 November 2009 (UTC)

----

How many different IPs are we dealing with? Is it within a specific range? For the time being, it may be possible to blacklist an entire subnet if they are all coming from the same place. But if a botnet is doing this, may be more difficult. Is it possible for MediaWiki to require admin approval of an edit prior to it being commited? Not well versed with MediaWiki administration, just thossing out some ideas. --[[User:Tsuehpsyde|tsuehpsyde]] 17:29, 9 November 2009 (UTC)
:It is not within a specific range. On my wiki, people post almost the exact same stuff as IP's and I get from 64.*.*.* al the way to 96.*.*.* I think it is a botnet --[[User:Balloonhead66|Balloonhead66]] 23:13, 16 March 2011 (UTC)
:We could figure out where they come rom and do the same to them. Secondly, we could create a filter that unless your part of a specific group you cannot do more than this many edits in this amount of time. We could try making a period where the admins have to approve the users. Lastly, we could make it so that in the first 12 hours of a user account that user could not edit pages so it would give time for the sysops to ban the users. [[User:Revolution|Revolution]] 00:02, 10 November 2009 (UTC)
::That might not be a good idea as we could get ou butts sued. --[[User:Balloonhead66|Balloonhead66]]
:::Why don't we just do this apple-style and have a group of moderators approve of every comment, page edit or revision? I would love to be a part of such group.
::::The extension for mediawiki [[mediawikiwiki:Extension:FlaggedRevs|FlaggedRevs]] is 1.14 and above. This wiki is running 1.12 :( --[[User:Balloonhead66|Balloonhead66]] 23:13, 16 March 2011 (UTC)

----

If the ones you refer to as 'they' are the [http://code.google.com/p/pois0nhack pois0nhack] group then 'they' don't really seem to pose much of a threat in my opinion. I agree that for the time being we could impose some kind of 12/24 hr posting limitation (maybe no more than +-300 char changes?), but no more than that since this is, after all, a public wiki. Sorry if I'm intruding on some kind of admin/mod meeting, just figured I should have my say. --[[User:Rekoil|adriaaan]] 00:27, 10 November 2009 (UTC)
:I am in favor of a 12hr limit for new users, but since it's a public wiki, during this time, contributions would have to be approved by sysops. --Untagged
::Personally I think it would be good to have it so that all edits by new users a thrown into a moderation pool, then once a good amount of worthwhile contributions, that user can be "whitelisted".
::Maybe we could extend the Twitter-Service to display more information (i.e. "Main Page (-2,439) http://u.nu/5x2t3 " instead of "Main Page - http://u.nu/5x2t3"). That could allow fast detection (and reversal) of vandalism attempts because large edits by "unknown" would be easy to spot. May also add the username and/or the commit message, but then we'd have to check for anything Twitter might interpret or block. --[[User:CleanAir|CleanAir]] 13:58, 12 November 2009 (UTC)

----

Can we add a Captchure to the logon process? I don't think all these recent spam pages are done manually. --[[User:Http|http]] 06:29, 15 March 2011 (UTC)
:Good idea [[User:Http|http]], add a Captcha to the logon process and the sign up process for some time --[[User:Whiteshinyapple|Whiteshinyapple]] 09:53, 16 March 2011 (UTC).
:Uhm better idea [[User:Http|http]], add a Captcha when making new pages. Having to fill in a captcha at every login seems to be a pain in the ass :/ the only thing the spam is doing is making new pages, (at least as far as i see.) --[[User:IMaximusX|IMaximusX]]
::What I meant was for the registration process (new user), not for every login. Only [[User:Geohot|geohot]] could implement that. --[[User:Http|http]] 17:37, 16 March 2011 (UTC)
::[http://recaptcha.net Recaptcha] might work. I requires 1.8+, but only works on the sign in, edits with a new external link (anon only), and passwork cracking. --[[User:Balloonhead66|Balloonhead66]] 23:13, 16 March 2011 (UTC)
::[[User:http|http]] im pretty sure they already have accounts, :p --[[User:IMaximusX|IMaximusX]]

Does this wiki currently take advantage of IP banning capability or would that just be subverted anyways? --[[User:Iemit737|Iemit737]] 03:48, 6 April 2011 (UTC)
:The wiki does indeed employ IP banning. The spambots are getting around it, though. --[[User:Dialexio|Dialexio]] 04:13, 6 April 2011 (UTC)
::IP bans are largely useless anyways as -Most Internet users have dynamic IP's and they could simply use a proxy anyways (It's relatively easy to create a VPN once you know where the option is in your OS). They'll also probably block innocent users. --[[User:Ryccardo|Ryccardo]] 14:54, 6 April 2011 (UTC)

Talk:MobileTerminal

2011-02-25T21:25:02Z

Ryccardo:

icon? --[[User:JacobVengeance|JakeAnthraX]] 20:41, 25 February 2011 (UTC)
:done --[[User:Ryccardo|Ryccardo]] 21:25, 25 February 2011 (UTC)

MobileTerminal

2011-02-25T21:24:46Z

Ryccardo: Icon

[[Image:MobileTerminal.png|thumb]]
== Summary ==
Application used to execute shell commands in iPhone OS. Some of it's features are still missing in 2.x.x firmwares.

There are two main forks currently available: '''MobileTerminal''', written with Apple's SDK, and '''Terminal+''', which supports more features. Saurik's ''Telesphoreo'' repo hosts, under the "MobileTerminal" name, an iPhone OS 3.1.3 and older compatible version of Terminal+.

== Controls ==
The Control key is mapped to the "bullet" key (black circle on the second page of symbols of the on screen keyboard).

To run some software you must have <code>root</code> privileges. Run the <code>su</code> command and enter the password for the root account. (<code>alpine</code> by default, you may change it with the <code>passwd</code> command).
Root access is shown by default as a prompt ending in <code>#</code> as opposed to <code>$</code> (non-privileged user).

=== Controls (MobileTerminal) ===

MobileTerminal features a shortcut menu (blue upwards arrow icon) which can be customized from the settings ("i" icon) page.
It is also possible to map certain actions to gestures (none are set by default).
Bluetooth keyboards are supported.

=== Controls (Terminal+)===
You can send a control-C by pressing the "bullet" key (First press ".?123", then "#+=", then the circle on the middle right), then press the C key. This can be useful when you want to escape out of a long running program such as ping. Control-C can also be accessed with a short Up-Right and Control is a short Down-Right swipe, after which the cursor will turn highlight red, from here press any character q, x, c, A to complete or the delete button to exit Control mode.

Escape is control-[ or a short Up-Left swip, which may come in handy with vi. Tab is control-I or a short Down-Left swip (yay tab completion).

All this keyboard-to-gesture mappings can be reassigned via Preferences dialog. To invoke it, tap and hold on screen, then move finger to "misc" and then to "config".

== Links ==

*[http://code.google.com/p/mobileterminal/ Homepage]
*[http://code.google.com/p/mobileterminal/downloads/list iOS 4-compatible versions]
*[http://code.google.com/p/mobileterminal/wiki/Installation Installation guide for beginners]
*[http://code.google.com/p/mobileterminal/wiki/TipsAndTricks User guide]

File:MobileTerminal.png

2011-02-25T21:23:42Z

Ryccardo: HD Retina icon for MobileTerminal.

HD Retina icon for [[MobileTerminal]].

MobileTerminal

2011-02-25T21:18:21Z

Ryccardo: iOS 4 versions

== Summary ==
Application used to execute shell commands in iPhone OS. Some of it's features are still missing in 2.x.x firmwares.

There are two main forks currently available: '''MobileTerminal''', written with Apple's SDK, and '''Terminal+''', which supports more features. Saurik's ''Telesphoreo'' repo hosts, under the "MobileTerminal" name, an iPhone OS 3.1.3 and older compatible version of Terminal+.

== Controls ==
The Control key is mapped to the "bullet" key (black circle on the second page of symbols of the on screen keyboard).

To run some software you must have <code>root</code> privileges. Run the <code>su</code> command and enter the password for the root account. (<code>alpine</code> by default, you may change it with the <code>passwd</code> command).
Root access is shown by default as a prompt ending in <code>#</code> as opposed to <code>$</code> (non-privileged user).

=== Controls (MobileTerminal) ===

MobileTerminal features a shortcut menu (blue upwards arrow icon) which can be customized from the settings ("i" icon) page.
It is also possible to map certain actions to gestures (none are set by default).
Bluetooth keyboards are supported.

=== Controls (Terminal+)===
You can send a control-C by pressing the "bullet" key (First press ".?123", then "#+=", then the circle on the middle right), then press the C key. This can be useful when you want to escape out of a long running program such as ping. Control-C can also be accessed with a short Up-Right and Control is a short Down-Right swipe, after which the cursor will turn highlight red, from here press any character q, x, c, A to complete or the delete button to exit Control mode.

Escape is control-[ or a short Up-Left swip, which may come in handy with vi. Tab is control-I or a short Down-Left swip (yay tab completion).

All this keyboard-to-gesture mappings can be reassigned via Preferences dialog. To invoke it, tap and hold on screen, then move finger to "misc" and then to "config".

== Links ==

*[http://code.google.com/p/mobileterminal/ Homepage]
*[http://code.google.com/p/mobileterminal/downloads/list iOS 4-compatible versions]
*[http://code.google.com/p/mobileterminal/wiki/Installation Installation guide for beginners]
*[http://code.google.com/p/mobileterminal/wiki/TipsAndTricks User guide]

Phone.app codes

2011-02-25T14:42:15Z

Ryccardo: Some codes from Tutorial:Re-Provisioning iPhone 4 using file system (Incomplete)

Like many other GSM phones, iPhone supports special codes that can be entered via keypad.

(The codes must be confirmed using the "[[Image:Phone.png]] call" button.)

==Standard GSM codes==
{|border="1" style="border-collapse:collapse"
!Code!!Description
|-
|<nowiki>*#06#</nowiki>||Display IMEI
|}



==iPhone proprietary, GSM models==

{|border="1" style="border-collapse:collapse;border-color:#ccc"
!Code!!Description
|-
|<nowiki>*3001#12345#*</nowiki>||Start the [[/var/stash/Applications.*****/FieldTest.app|Field Test]] app (on iOS <> 4.0.x)
|}

The following codes support (some of) the standard GSM code prefixes:
'''*#''' - inquiry/check status
'''**''' - set value and activate
'''*''' - reactivate
'''#''' - "temporarily" deactivate
'''##''' - deactivate and clear settings

{|border="1" style="border-collapse:collapse;border-color:#ccc"
!Code!!Description
|-
|<nowiki>5005*'''VM'''#</nowiki>||Voicemail number (if not specified by the [[Carrier.plist|carrier bundle]])
|-
|<nowiki>5005*'''SMSC'''#</nowiki>||SMS Center number (stored on SIM card)
|-
|<nowiki>5005*'''LANG'''#</nowiki>||set language(?)(not related to the interface language)(a prompt pops up asking for an [http://en.wikipedia.org/wiki/List_of_ISO_639-1_codes ISO 639-1 language code])
|-
|<nowiki>5005*'''CB'''#</nowiki>||enable [http://en.wikipedia.org/wiki/Cell_Broadcast cell broadcast messages]
|-
|<nowiki>5005*'''2267'''#</nowiki>||?
|-
|<nowiki>5005*'''PHONE'''#</nowiki>||display/set own number (if stored on SIM). Available in GUI form from Settings/Phone.
|
|-
|5005*4433#||spinning wheel for about a second ???
|-
|5005*ART#||"Artemis?"
|-
|5005*CORE#||CoreDump status (disabled by default)
|-
|5005*MA#||MobileAnalyzer status (disabled by default)
|-
|5005*MA255#||MobileAnalyzer (FullTrace?) status (disabled by default)
|-
|5005*STATE#||Dump baseband logs ("Please add a description for this capture")
|-
|5005*TRACE#||tracing?
|}

This code is carrier and/or device specific, but it's listed here for being of historical relevance as a part of a procedure capable of bypassing the Activation screen on iPhone OS 1.1.1: '''<nowiki>#301#</nowiki> through <nowiki>*#309#</nowiki>''' Generates fake incoming call; the phone will become kind of messed up, thinking that it's on a call until you restart. Can be used to stream music to Bluetooth headset.

==iPhone proprietary, CDMA models==

The following codes support (some of) the standard GSM code prefixes:
'''*#''' - inquiry/check status
'''**''' - set value and activate
'''*''' - reactivate
'''#''' - "temporarily" deactivate
'''##''' - deactivate and clear settings

{|border="1" style="border-collapse:collapse;border-color:#ccc"
!Code!!Description
|-
|<nowiki>5005*4357#</nowiki>||Display PRL and PRI version
|-
|<nowiki>5005*'''2267'''#</nowiki>||?
|-
|<nowiki>5005*'''PHONE'''#</nowiki>||display (set?) MDN.
|
|-
|<nowiki>##AKEY</nowiki>||Password: zeros -- Sets AKey
|-
|5005*STATE#||Dump baseband logs ("Please add a description for this capture")
|}

Phone.app codes

2011-02-25T14:33:42Z

Ryccardo: Table format, simplified

Like many other GSM phones, iPhone supports special codes that can be entered via keypad.

(The codes must be confirmed using the "[[Image:Phone.png]] call" button.)

==Standard GSM codes==
{|border="1" style="border-collapse:collapse"
!Code!!Description
|-
|<nowiki>*#06#</nowiki>||Display IMEI
|}



==iPhone proprietary==

{|border="1" style="border-collapse:collapse;border-color:#ccc"
!Code!!Description
|-
|<nowiki>*3001#12345#*</nowiki>||Start the [[/var/stash/Applications.*****/FieldTest.app|Field Test]] app (on iOS <> 4.0.x)
|}

The following codes support (some of) the standard GSM code prefixes:
'''*#''' - inquiry/check status
'''**''' - set value and activate
'''*''' - reactivate
'''#''' - "temporarily" deactivate
'''##''' - deactivate and clear settings

{|border="1" style="border-collapse:collapse;border-color:#ccc"
!Code!!Description
|-
|<nowiki>5005*'''VM'''#</nowiki>||Voicemail number (if not specified by the [[Carrier.plist|carrier bundle]])
|-
|<nowiki>5005*'''SMSC'''#</nowiki>||SMS Center number (stored on SIM card)
|-
|<nowiki>5005*'''LANG'''#</nowiki>||set language(?)(not related to the interface language)(a prompt pops up asking for an [http://en.wikipedia.org/wiki/List_of_ISO_639-1_codes ISO 639-1 language code])
|-
|<nowiki>5005*'''CB'''#</nowiki>||enable [http://en.wikipedia.org/wiki/Cell_Broadcast cell broadcast messages]
|-
|<nowiki>5005*'''2267'''#</nowiki>||?
|-
|<nowiki>5005*'''PHONE'''#</nowiki>||display/set own number (if stored on SIM). Available in GUI form from Settings/Phone.
|
|-
|5005*4433#||spinning wheel for about a second ???
|-
|5005*ART#||"Artemis?"
|-
|5005*CORE#||CoreDump status (disabled by default)
|-
|5005*MA#||MobileAnalyzer status (disabled by default)
|-
|5005*MA255#||MobileAnalyzer (FullTrace?) status (disabled by default)
|-
|5005*STATE#||Dump baseband logs ("Please add a description for this capture")
|-
|5005*TRACE#||tracing?
|}

This code is carrier and/or device specific, but it's listed here for being of historical relevance as a part of a procedure capable of bypassing the Activation screen on iPhone OS 1.1.1: '''<nowiki>#301#</nowiki> through <nowiki>*#309#</nowiki>''' Generates fake incoming call; the phone will become kind of messed up, thinking that it's on a call until you restart. Can be used to stream music to Bluetooth headset.

Talk:Main Page

2011-02-24T20:34:32Z

Ryccardo: Reminder to admins

{{Talk Archive|2010|2011}}

== iPod touch 4(G) and iPhone 4 CDMA ==
the iPod touch 4G is incorrect. It is iPod touch 4. Also, can we add <tt><nowiki>[[n92ap|iPhone 4]] (CDMA)</nowiki></tt>. --[[User:Balloonhead66|Balloonhead66]] 04:10, 11 February 2011 (UTC)
:I agree with adding the iPhone 4 (CDMA model), but I don't see how "iPod touch 4G" is incorrect. It ''is'' the fourth generation iPod touch, and Apple has never referred to it as "iPod touch 4." The 2nd generation was called "iPod touch 2G," and the 3rd generation was called "iPod touch 3G." --[[User:Dialexio|Dialexio]] 04:18, 11 February 2011 (UTC)
::My brother said they dropped the G as to aviod people thinking it worked with the 4G network, but he might have only meant the iPhone... --[[User:Balloonhead66|Balloonhead66]] 04:19, 11 February 2011 (UTC)
:::Possibly. I should note that to my knowledge, Apple never actually used the "iPod touch 2G" and "iPod touch 3G" monikers, but the iPod community has used such names for a long time. --[[User:Dialexio|Dialexio]] 04:24, 11 February 2011 (UTC)
::::Yah... --[[User:Balloonhead66|Balloonhead66]] 04:27, 11 February 2011 (UTC)
:::::Please add the [[n92ap|iPhone 4 CDMA]] :) --[[User:Ryccardo|Ryccardo]] 20:34, 24 February 2011 (UTC)

/private/var/run

2011-02-11T16:33:09Z

Ryccardo: Description

== Summary ==
"Files used by running processes."
== Children ==
=== Folders ===
*{{ipfw|lockdown}}
=== Files ===
*{{ipfw|asl_input}}
*{{ipfw|configd.pid}}
*{{ipfw|lockbot}}
*{{ipfw|lockdown.sock}}
*{{ipfw|mDNSResponder}}
*{{ipfw|pppconfd}}
*{{ipfw|printd}}
*{{ipfw|syslog}}
*{{ipfw|syslog.pid}}
*{{ipfw|utmpx}}
*{{ipfw|vpncontrol.sock}}

== Parents ==
[[:/|(Root)]]/[[/private|private]]/[[/var|var]]

/private/var/MobileDevice/ProvisioningProfiles

2011-02-11T16:20:58Z

Ryccardo: Contents

== Summary ==
Contains the installed '''.mobileprovision''' licenses.

== Children ==
=== Folders ===
(none)
=== Files ===
(None by default, see notes)

== Parents ==
[[:/|(Root)]]/[[/private|private]]/[[/var|var]]/[[/private/var/MobileDevice|MobileDevice]]

Animate

2011-02-09T21:53:04Z

Ryccardo: Package name

{{lowercase}}
'''animate''' (Package name: '''''BootLogo''''', Package ID: <code>org.chronic-dev.animate</code>) is a software bundled in [[greenpois0n (jailbreak)|greenpois0n RC5]] that enables users to display (a sequence of) PNG images on boot.

This approach has the advantage of being usable on all devices, regardless of their ability of [[0x24000 Segment Overflow|accepting custom firmware]], and supporting animated boot logos.

[[Applelogo|The original boot logo]] will always show first.

== Notes for logo designers ==
The animation currently runs at about 5 frames per second.

A picture of the Apple logo is available at http://yfrog.com/gzqigp

Animations must be stored in png format in [[/Library]]/BootLogos/(animationName)/ and be listed in order, from 0.png to x.png.

Packages containing (animated) logos should depend on <code>org.chronic-dev.animate</code>.

== Installation ==
The '''animate''' tweak has been released on Cydia but it is invisible for some reason. To install it, search and install a package named ''Apple boot logo'' ('''animate''' is a dependency). After the installation, a new tab will appear in the [[:/var/stash/Applications.*****/Preferences.app|Settings app]] named ''BootLogos''. Anyone having trouble keeping settings should be sure that /Library/BootLogos/ is chown mobile:mobile. Sometime uninstalling all boot animation packages and reinstalling fixes this issue.

== Conflicts ==
'''animate''' conflicts with the package '''ImageMagick''' (Package ID: <code>imagemagick</code>). It has to be removed in order to successfully install '''animate'''.

== Dependencies ==
'''animate''' uses [[PreferenceLoader]] to add a new page to the Settings app.

== References ==
[[User:Jaywalker|Jaywalker's]] [http://www.twitlonger.com/show/8lepqg notes]

User talk:Ryccardo

2011-02-09T20:47:25Z

Ryccardo: Note to self

<code>telshow telemergency tellock</code>

GlyphPlugin

2011-02-08T19:42:26Z

Ryccardo: New page: '''GlyphPlugin''' is located at <code>/Firmware/all_flash/all_flash.(MODEL-NAME).production/(GLYPHPLUGIN-IMG3-FILE-NAME).img3</code> in the IPSW and flashed to NOR...

'''GlyphPlugin''' is located at <code>/Firmware/all_flash/all_flash.(MODEL-NAME).production/(GLYPHPLUGIN-IMG3-FILE-NAME).img3</code> in the [[IPSW File Format|IPSW]] and flashed to [[NOR]] (or [[NAND|a functionally equivalent partition]]). It is displayed when the battery is too low for the device to boot up (under 5%)and external power is not connected.

It probably is a PNG picture packed into an [[IMG3 File Format|IMG3]] archive. No (user-friendly) method of replacing this icon is known.

RecoveryMode

2011-02-08T19:39:19Z

Ryccardo: New page, like AppleLogo

The '''RecoveryMode''' is located at <code>/Firmware/all_flash/all_flash.(MODEL-NAME).production/(RECOVERYMODE-IMG3-FILE-NAME).img3</code> in the [[IPSW File Format|IPSW]], the RecoveryMode logo is flashed to [[NOR]] (or [[NAND|a functionally equivalent partition]]) and displayed when the device is in [[Recovery Mode]].

It is a PNG picture with an alpha channel packed into an [[IMG3 File Format|IMG3]] archive.

Due to limited firmware storage space, any custom recovery mode logo must be exactly 320x4801 and under 100 kB.

1: Custom boot logos are not supported on devices not vulnerable to [[0x24000 Segment Overflow|24kpwn]] or [[Pwnage 2.0]].

GlyphCharging

2011-02-08T19:39:14Z

Ryccardo: New page

'''GlyphCharging''' is located at <code>/Firmware/all_flash/all_flash.(MODEL-NAME).production/(GLYPHCHARGING-IMG3-FILE-NAME).img3</code> in the [[IPSW File Format|IPSW]] and flashed to [[NOR]] (or [[NAND|a functionally equivalent partition]]). It is displayed when the battery is too low for the device to boot up (under 5%)and external power is connected and charging the battery.

It probably is a PNG picture packed into an [[IMG3 File Format|IMG3]] archive. No (user-friendly) method of replacing this icon is known.

Template:Keys

2011-02-08T19:35:46Z

Ryccardo: Links to "newly documented" IMG3's

<noinclude>This is the accepted standard for Key/IV .imgX decryption page. In the event of a new firmware, one should:

<ol style="list-style-type:upper-alpha;">
<li>Create a new page with a title that is like the current accepted standard;</li>
<li>Copy and paste the following template into said page;</li>
<li>From BuildManifest.plist, one should discover which "XXX-XXXX-XXX.dmg" is which and list them, replacing the X's;</li>
<li>Add in the appropriate keys for the corresponding fields;</li>
<li>(Optional) Write a brief description of the purpose of the firmware.</li>
</ol>

'''''NB''' The order of importance when finding keys is ALWAYS system files first (e.g. ramdisks, filesystem, LLB, iBoot, iBSS, iBEC, DeviceTree, etc...), then the iBoot images (e.g. GlyphCharging, etc...).''

'''''NB''' Also, the things linked to in the below template ARE LINKED TO FOR A REASON. If it's not linked to, it doesn't exist. So don't make a bunch of red links, please.''
<pre>
== Decryption Keys ==
=== [[/|Root Filesystem]] (XXX-XXXX-XXX.dmg) ===
*'''[[VFDecrypt]] Key''':

=== [[Update Ramdisk]] (XXX-XXXX-XXX.dmg) ===
* '''IV''':
* '''Key''':

=== [[Restore Ramdisk]] (XXX-XXXX-XXX.dmg) ===
* '''IV''':
* '''Key''':

=== [[AppleLogo]] ===
* '''IV''':
* '''Key''':

=== BatteryCharging0 ===
* '''IV''':
* '''Key''':

=== BatteryCharging1 ===
* '''IV''':
* '''Key''':

=== BatteryFull ===
* '''IV''':
* '''Key''':

=== BatteryLow0 ===
* '''IV''':
* '''Key''':

=== BatteryLow1 ===
* '''IV''':
* '''Key''':

=== DeviceTree ===
* '''IV''':
* '''Key''':

=== [[GlyphCharging]] ===
* '''IV''':
* '''Key''':

=== [[GlyphPlugin]] ===
* '''IV''':
* '''Key''':

=== [[iBEC]] ===
* '''IV''':
* '''Key''':

=== [[iBoot (Bootloader)|iBoot]] ===
* '''IV''':
* '''Key''':

=== [[iBSS]] ===
* '''IV''':
* '''Key''':

=== [[Kernelcache]] ===
* '''IV''':
* '''Key''':

=== [[LLB]] ===
* '''IV''':
* '''Key''':

=== [[RecoveryMode]] ===
* '''IV''':
* '''Key''':
</pre>
</noinclude>
<includeonly>This is not a traditional MediaWiki template. Rather, it is one that should be copied and pasted as a template for creating encryption key pages. Please change the page markup accordingly.</includeonly>