Tethered Downgrade - Revision history

LeoI07: /* Method */

2022-08-20T22:23:40Z

‎Method

Spydar007: Fix link

2017-04-12T10:58:39Z

Fix link

Spydar007 at 10:19, 26 March 2017

2017-03-26T10:19:21Z

GeoSn0wOLD: Fixed grammar

2016-06-04T14:51:12Z

Fixed grammar

Dialexio at 04:22, 14 November 2015

2015-11-14T04:22:16Z

Citrusui: Clean up grammar/spelling whatnot in general. Also, remove GeekGrade 0.1 and "Bluefreeze" as they seem to be extremely buggy.

2015-09-13T07:47:02Z

Clean up grammar/spelling whatnot in general. Also, remove GeekGrade 0.1 and "Bluefreeze" as they seem to be extremely buggy.

IAdam1n: New template with a better name.

2015-08-26T19:07:02Z

New template with a better name.

Dingo: Fixed bluefreeze display fix status and added recovery mode as a thing that can happen if tethered downgraded

2015-04-20T16:26:46Z

Fixed bluefreeze display fix status and added recovery mode as a thing that can happen if tethered downgraded

IAdam1n: No.

2015-04-19T20:15:14Z

No.

IAdam1n: typo fix.

2015-04-19T11:25:13Z

typo fix.

@@ Line 16: / Line 16: @@
 ! [[GeekGrade]]
+|
-* Instead of making the IPSW via sn0wbreeze, it's made via iFaith. The ramdisk is modified to remove iH8sn0w's iFaith logo and to replace it with BlackGeek's logo. It also sets FlashNOR to false in option.plist. This last modification allows the bootchain to stay signed (if it was signed prior to restore). This method fixes the display failure bug. The device is then sent to recovery mode (instead of DFU) because the bootchain is signed but fails to load iOS.
+* Instead of making the IPSW via sn0wbreeze, it's made via iFaith. The ramdisk is modified to remove iH8sn0w's iFaith logo and to replace it with BlackGeek's logo. It also sets FlashNOR to false in <code>/usr/local/share/options.plist</code>. This last modification allows the bootchain to stay signed (if it was signed prior to restore). This method fixes the display failure bug. The device is then sent to recovery mode (instead of DFU) because the bootchain is signed but fails to load iOS.
 |-
 |-
@@ Line 25: / Line 25: @@
 ! [[Sund0wn]]
+|
-* Downgrade utility for Windows written by iSuns9 that allows tether and untether downgrades for all models of the iPhone 3GS, iPhone 4, and iPod touch (4th generation).
+* Downgrade utility for Windows written by iSuns9 that allows tethered and untethered downgrades for all models of the iPhone 3GS, iPhone 4, and iPod touch (4th generation).
 |}

@@ Line 14: / Line 14: @@
 ! Description
 |-
-! [http://geeksn0w.it/GeekGrade/ GeekGrade]
+! [[GeekGrade]]
+|
 * Instead of making the IPSW via sn0wbreeze, it's made via iFaith. The ramdisk is modified to remove iH8sn0w's iFaith logo and to replace it with BlackGeek's logo. It also sets FlashNOR to false in option.plist. This last modification allows the bootchain to stay signed (if it was signed prior to restore). This method fixes the display failure bug. The device is then sent to recovery mode (instead of DFU) because the bootchain is signed but fails to load iOS.

@@ Line 25: / Line 25: @@
 ! [[Sund0wn]]
+|
-* Downgrade utility for Windows written by iSuns9 that allows tether and untether downgrades for all models of the iPhone 3GS, iPhone 4, and iPod touch 4G.
+* Downgrade utility for Windows written by iSuns9 that allows tether and untether downgrades for all models of the iPhone 3GS, iPhone 4, and iPod touch (4th generation).
 |}

@@ Line 4: / Line 4: @@
 == Dead LCD Bug ==
-Locking a device with an unsigned [[bootchain]] (speficially the [[LLB]]) while on battery power causes iOS to disable the LCD. A restore to the latest iOS is needed to fix this.
+Locking a device with an unsigned [[bootchain]] (specifically the [[LLB]]) while on battery power causes iOS to disable the LCD. A restore to the latest iOS is needed to fix this.
 == LCD Incompatibility ==

@@ Line 1: / Line 1: @@
-'''Tethered Downgrades''' are downgrades which flash unsigned iOS versions in a way that meets certain [[iTunes]] requirements to complete a restore. This process is most commonly used on A4 Devices (such as an iPhone 4) since they are vulnerable to [[limera1n]]. It is possible, however, to perform a tethered downgrade on fixed bootrom iPhone 3GS and iPod touch 3G models.
+'''Tethered Downgrades''' are downgrades which flash unsigned iOS versions in a way that meets certain [[iTunes]] requirements to complete a restore. It is possible to perform a tethered downgrade on any device that is vulnerable to the [[limera1n Exploit]].
 Installing a firmware version using this method (without valid SHSH blobs) will result in a '''permanently tethered''' jailbreak. Each time the device boots, the bootrom validates the SHSH blobs for LLB, LLB for [[iBoot]], and so on. Therefore, the image validation function must be patched or bypassed with an appropriate bootrom exploit payload on every boot or the device will be forced into DFU mode or recovery mode depending on the method.
 == Dead LCD Bug ==
 Locking a device with an unsigned [[bootchain]] (speficially the [[LLB]]) while on battery power causes iOS to disable the LCD. A restore to the latest iOS is needed to fix this.
 == LCD Incompatibility ==
 Some [[iOS]] versions (such as iOS 5) cannot boot when the device has a counterfeit display. A workaround is available [http://www.reddit.com/r/LegacyJailbreak/comments/2ohrw5/how_to_boot_ios_5_and_below_on_the_iphone_4_with/ here].

@@ Line 1: / Line 1: @@
-'''Tethered Downgrades''' are downgrades which in someway flash an unsigned iOS Version but require some way to meet [[iTunes]] requirements to do a restore. This process is most commonly used on A4 Devices (such as an iPhone 4) because of the bootrom exploit known as "[[Limera1n]]". If no attempt is done to fix the signature of the LLB, locking will result in a display failure which can only be fixed by restoring to a signed iOS version.
+'''Tethered Downgrades''' are downgrades which flash unsigned iOS versions in a way that meets certain [[iTunes]] requirements to complete a restore. This process is most commonly used on A4 Devices (such as an iPhone 4) since they are vulnerable to [[limera1n]]. It is possible, however, to perform a tethered downgrade on fixed bootrom iPhone 3GS and iPod touch 3G models.
-Installing a firmware version using this method (without valid SHSH blobs) is incompatible with an untethered jailbreak. Each time the device boots, the bootrom validates the SHSH blobs for LLB, LLB for [[iBoot]], and so on. Therefore, the image validation function must be patched or bypassed with an appropriate bootrom exploit payload on every boot or the device will be forced into DFU mode or recovery mode depending on the method.
+Installing a firmware version using this method (without valid SHSH blobs) will result in a '''permanently tethered''' jailbreak. Each time the device boots, the bootrom validates the SHSH blobs for LLB, LLB for [[iBoot]], and so on. Therefore, the image validation function must be patched or bypassed with an appropriate bootrom exploit payload on every boot or the device will be forced into DFU mode or recovery mode depending on the method.
 == Dead LCD Bug ==
@@ Line 9: / Line 9: @@
 == LCD Incompatibility ==
-Some [[iOS]] versions (such as iOS 5) cannot boot when the device has a counterfeit display. A workaround for this has been [http://www.reddit.com/r/LegacyJailbreak/comments/2ohrw5/how_to_boot_ios_5_and_below_on_the_iphone_4_with/ found].
+Some [[iOS]] versions (such as iOS 5) cannot boot when the device has a counterfeit display. A workaround is available [http://www.reddit.com/r/LegacyJailbreak/comments/2ohrw5/how_to_boot_ios_5_and_below_on_the_iphone_4_with/ here].
 == Method ==
 {| class="wikitable"
 ! Name
 ! Description
 |-
+|
 |-
 |-
+|
-* Make an IPSW in iFaith with [https://drive.google.com/open?id=0ByxMOiAf78kITnB2MEVkU3J4aGs&authuser=0 someone else's valid blobs] for your same device and swap that IPSW's ramdisk with the one in geekgrade's IPSWs or make the modified ramdisk yourself.
+* Make an IPSW in iFaith with [https://drive.google.com/open?id=0ByxMOiAf78kITnB2MEVkU3J4aGs&authuser=0 someone else's valid blobs] for your specific device and swap that IPSW's ramdisk with the one in GeekGrade's IPSWs or make the modified ramdisk yourself.
 |-
 ! [[Sund0wn]]
+|
 |}
 == Purpose ==
-With this method you can install a firmware for which you don't have [[SHSH]] saved for some tests, for example if you're a software developer and need to do some tests on a specific version or if you prefer older iOS versions.
+With this method you can install a firmware for which you don't have [[SHSH]] saved for. This is handy in the case that you're a software developer and need to do some tests on a specific version or if you prefer older iOS versions.
 == Alternative ==
@@ Line 62: / Line 43: @@
 # Rename the original asr and add the patched asr.
 # chmod asr to 100755
-# Replace the root file system dmg with the decrypted root file system dmg of the older firmware you want to downgrade to. (take care that the decrypted dmg has the format UDZO!)
+# Replace the root file system dmg with the decrypted root file system dmg of the older firmware you want to downgrade to.
 # Enter pwned [[DFU Mode]].
 # Use an old [[iTunes]] version that allows downgrades on your [[iOS]] device and restore to your patched IPSW.

← Older revision		Revision as of 19:07, 26 August 2015
Line 67:		Line 67:
	# To start up your device you will have to boot tethered (depending on iOS version [[redsn0w]] or [[opensn0w]]).		# To start up your device you will have to boot tethered (depending on iOS version [[redsn0w]] or [[opensn0w]]).

−	[[Category:~~Downgrades~~]]	+	[[Category:Downgrading]]

@@ Line 1: / Line 1: @@
-'''Tethered Downgrades''' are downgrades which in someway flash an unsigned iOS Version but require some way to meet [[iTunes]]' requirements to do a restore. This process is most commonly used on A4 Devices (such as an iPhone 4) because of the bootrom exploit known as "[[Limera1n]]". If no attempt is done to fix the signature of the LLB, locking will result in a display failure which can only be fixed by restoring to a signed iOS version.
+'''Tethered Downgrades''' are downgrades which in someway flash an unsigned iOS Version but require some way to meet [[iTunes]] requirements to do a restore. This process is most commonly used on A4 Devices (such as an iPhone 4) because of the bootrom exploit known as "[[Limera1n]]". If no attempt is done to fix the signature of the LLB, locking will result in a display failure which can only be fixed by restoring to a signed iOS version.
 Installing a firmware version using this method (without valid SHSH blobs) is incompatible with an untethered jailbreak. Each time the device boots, the bootrom validates the SHSH blobs for LLB, LLB for [[iBoot]], and so on. Therefore, the image validation function must be patched or bypassed with an appropriate bootrom exploit payload on every boot or the device will be forced into DFU mode.
@@ Line 30: / Line 30: @@
 | NO
+|
-* Grab someone's blobs and make an IPSW with iFaith. Then restore with it when in PWNDFU. basically what Bluefreeze does. '''Don't do this method or I'll laugh at you.'''
+* Grab someone's blobs and make an IPSW with iFaith. Then restore with it when in PWNED DFU. basically what Bluefreeze does.
 |-
 ! [http://geeksn0w.it/GeekGrade/ GeekGrade 1.0]

← Older revision		Revision as of 11:25, 19 April 2015
Line 1:		Line 1:
−	'''Tethered Downgrades''' are downgrades which in someway flash an unsigned iOS Version but require some way to meet [[iTunes]]' requirements to do a restore. This process is most commonly used on A4 Devices (such as an iPhone 4) because of the bootrom exploit known as "[[Limera1n]]". If no attempt is done to fix the signature of the LLB, locking will result in ~~adisplay~~ failure which can only be fixed by restoring to a signed iOS version.	+	'''Tethered Downgrades''' are downgrades which in someway flash an unsigned iOS Version but require some way to meet [[iTunes]]' requirements to do a restore. This process is most commonly used on A4 Devices (such as an iPhone 4) because of the bootrom exploit known as "[[Limera1n]]". If no attempt is done to fix the signature of the LLB, locking will result in a display failure which can only be fixed by restoring to a signed iOS version.

	Installing a firmware version using this method (without valid SHSH blobs) is incompatible with an untethered jailbreak. Each time the device boots, the bootrom validates the SHSH blobs for LLB, LLB for [[iBoot]], and so on. Therefore, the image validation function must be patched or bypassed with an appropriate bootrom exploit payload on every boot or the device will be forced into DFU mode.		Installing a firmware version using this method (without valid SHSH blobs) is incompatible with an untethered jailbreak. Each time the device boots, the bootrom validates the SHSH blobs for LLB, LLB for [[iBoot]], and so on. Therefore, the image validation function must be patched or bypassed with an appropriate bootrom exploit payload on every boot or the device will be forced into DFU mode.