Unlock - Revision history

IAdam1n at 18:42, 16 September 2021

2021-09-16T18:42:01Z

IAdam1n: Updating page link.

2015-11-14T10:59:44Z

Updating page link.

IAdam1n: Updating

2015-10-12T08:43:40Z

Updating

IAdam1n: Adding Category:Unlocking Methods

2015-06-19T12:05:40Z

Adding Category:Unlocking Methods

Linko: /* External Links */

2014-09-19T20:13:27Z

‎External Links

Staycool72: /* Ultrasn0w */

2013-09-17T03:21:42Z

‎Ultrasn0w

Staycool72: /* IPSF */

2013-09-17T03:19:48Z

‎IPSF

Britta: correcting introduction - the article covers non-software unlocks as well as software unlocks, and the note about legality was incorrect

2013-09-16T23:38:25Z

correcting introduction - the article covers non-software unlocks as well as software unlocks, and the note about legality was incorrect

IAdam1n: Added basebands and tools for software unlock from Firmware.

2013-08-04T17:59:43Z

Added basebands and tools for software unlock from Firmware.

Dialexio: Generalized the legal status blurb a bit, and played around with the "Hardware unlock" section.

2013-02-10T19:57:26Z

Generalized the legal status blurb a bit, and played around with the "Hardware unlock" section.

@@ Line 3: / Line 3: @@
 A software unlock is the process by which the iPhone is modified such that the baseband will accept the [[wikipedia:Subscriber Identity Module|SIM]] card of any GSM carrier. This is entirely different than a [[jailbreak]]; jailbreaking one's iPhone does not unlock it. A jailbreak is, however, required for all currently public, unofficial software unlocks.
-The legality of software unlocking varies in each country; for example, in the US, there is a DMCA exemption for unofficial software unlocking, but the exemption is limited to devices purchased before January 26, 2013 (so software unlocks for newer devices are in a legal grey area). See [http://www.copyright.gov/fedreg/2012/2012-26308_PI.pdf pages 16-20 of the copyright office's 2012 DMCA rulings] for details.
+The legality of software unlocking varies in each country; for example, in the US, there is a DMCA exemption for unofficial software unlocking, but the exemption is limited to devices purchased before {{date|2013|01|26}} (so software unlocks for newer devices are in a legal grey area). See [http://www.copyright.gov/fedreg/2012/2012-26308_PI.pdf pages 16-20 of the copyright office's 2012 DMCA rulings] for details.
 ==Official unlocks==

← Older revision		Revision as of 10:59, 14 November 2015
Line 1:		Line 1:
−	'''Unlocking''' an [[iPhone]] means taking an iPhone that is locked to a specific carrier and making it usable on other carriers.	+	'''Unlocking''' an [[List of iPhones\|iPhone]] means taking an iPhone that is locked to a specific carrier and making it usable on other carriers.

	A software unlock is the process by which the iPhone is modified such that the baseband will accept the [[wikipedia:Subscriber Identity Module\|SIM]] card of any GSM carrier. This is entirely different than a [[jailbreak]]; jailbreaking one's iPhone does not unlock it. A jailbreak is, however, required for all currently public, unofficial software unlocks.		A software unlock is the process by which the iPhone is modified such that the baseband will accept the [[wikipedia:Subscriber Identity Module\|SIM]] card of any GSM carrier. This is entirely different than a [[jailbreak]]; jailbreaking one's iPhone does not unlock it. A jailbreak is, however, required for all currently public, unofficial software unlocks.

@@ Line 34: / Line 34: @@
 ==[[Hardware unlock]]==
-The first iPhone unlocking method (for the [[m68ap|original iPhone]]) actually required opening up your phone.
+The first iPhone unlocking method (for the [[M68AP|original iPhone]]) actually required opening up your phone.
 Currently, it isn't possible to hardware unlock current devices; the closest thing would be [[SIM hacks]], which function as interposers, not a hardware modification.

← Older revision		Revision as of 12:05, 19 June 2015
Line 63:		Line 63:
	*[http://www.slideshare.net/slides_luis/baseband-playground-10652487 "Baseband Playground" a presentation by Luis Miras about all current unlocks]		*[http://www.slideshare.net/slides_luis/baseband-playground-10652487 "Baseband Playground" a presentation by Luis Miras about all current unlocks]
	*[http://conference.hitb.org/hitbsecconf2012ams/materials/D1T2%20-%20MuscleNerd%20-%20Evolution%20of%20iPhone%20Baseband%20and%20Unlocks.pdf Evolution of the iPhone Baseband and unlocks by MuscleNerd]		*[http://conference.hitb.org/hitbsecconf2012ams/materials/D1T2%20-%20MuscleNerd%20-%20Evolution%20of%20iPhone%20Baseband%20and%20Unlocks.pdf Evolution of the iPhone Baseband and unlocks by MuscleNerd]
		+
		+	[[Category:Unlocking Methods]]

@@ Line 59: / Line 59: @@
 == External Links ==
 *[http://caniunlock.com/ English Website from chpwn with overview of unlock status]
 *[http://www.slideshare.net/slides_luis/baseband-playground-10652487 "Baseband Playground" a presentation by Luis Miras about all current unlocks]
 *[http://conference.hitb.org/hitbsecconf2012ams/materials/D1T2%20-%20MuscleNerd%20-%20Evolution%20of%20iPhone%20Baseband%20and%20Unlocks.pdf Evolution of the iPhone Baseband and unlocks by MuscleNerd]

@@ Line 56: / Line 56: @@
 ==Ultrasn0w==
-After the S-Gold 2 days, user land exploits are used to unlock the current devices and basebands, which are usually exploit with [[ultrasn0w]], [[yellowsn0w]], [[PurpleSn0w]] or [[Blacksn0w]]. Those Softwares exploited several injunction vectors, such as [[AT+XAPP]], [[AT+XLOG]] or [[AT+XEMN]]
+After the S-Gold 2 days, user land exploits are used to unlock the current devices and basebands, which are usually exploited with [[ultrasn0w]], [[yellowsn0w]], [[PurpleSn0w]] or [[Blacksn0w]]. Those Softwares exploited several injunction vectors, such as [[AT+XAPP]], [[AT+XLOG]] or [[AT+XEMN]]
 == External Links ==

@@ Line 47: / Line 47: @@
 ==[[IPSF]]==
-This exploit changed the lockstate table in the [[seczone]] to read unlocked and created a spoofed RSA token that was seen as valid by [[Baseband Bootloader|bootloader]] 3.9 (4.6 was ''not'' vulnerable to IPSF). It overwrote your previous token, which means the phone could nor longer be officially unlocked, unless a restore of the token was performed from a previously made backup. Since the token isn't modified in a baseband flash, this unlock survived a baseband downgrade or upgrade. Apple attempted to combat this by requiring AT+CLCK command to be sent every startup. In a officially unlocked iPhones, lockdownd does this. In a late version IPSF phone, signal.app does this.
+This exploit changed the lockstate table in the [[seczone]] to read unlocked and created a spoofed RSA token that was seen as valid by [[Baseband Bootloader|bootloader]] 3.9 (4.6 was ''not'' vulnerable to IPSF). It overwrote your previous token, which means the phone could no longer be officially unlocked, unless a restore of the token was performed from a previously made backup. Since the token isn't modified in a baseband flash, this unlock survived a baseband downgrade or upgrade. Apple attempted to combat this by requiring AT+CLCK command to be sent every startup. In a officially unlocked iPhones, lockdownd does this. In a late version IPSF phone, signal.app does this.
 == Cloning Officially Unlocked Phones ==

@@ Line 1: / Line 1: @@
 [[Image:iTunesUnlock.png|thumb|Unlock in iTunes]]
 At +0x400 in the [[seczone]], a token is stored encrypted with (NCK + NORID + HWID). Apple, knowing the [[NCK]], sends it using an [[activation token]] over iTunes. The phone receives an AT+CLCK="PN",0,"......NCK......" It decrypts the token with the generated [[Baseband_TEA_Keys|key]]. If that decryption, after deRSAing with Key 2, is a valid token for the phone, it is stored back to that flash with the token TEA, but not RSA decrypted. On startup, if the lockstate table says the phone is unlocked, it validates that RSA token.
@@ Line 7: / Line 11: @@
 This type of unlock does not require a jailbreak and is permanent, even surviving a restore (unless Apple or your carrier decides to re-lock the phone, something that has rarely happened [https://discussions.apple.com/thread/2779471]).
-==Software Unlocks==
+==Software unlocks==
 This is a way to unlock your iPhone for free with a package from Cydia, however, it only works on selected basebands. The unlock-able basebands and tools are listed below.
 ===[[yellowsn0w]]===

← Older revision		Revision as of 17:59, 4 August 2013
Line 6:		Line 6:

	This type of unlock does not require a jailbreak and is permanent, even surviving a restore (unless Apple or your carrier decides to re-lock the phone, something that has rarely happened [https://discussions.apple.com/thread/2779471]).		This type of unlock does not require a jailbreak and is permanent, even surviving a restore (unless Apple or your carrier decides to re-lock the phone, something that has rarely happened [https://discussions.apple.com/thread/2779471]).
		+
		+	==Software Unlocks==
		+	This is a way to unlock your iPhone for free with a package from Cydia, however, it only works on selected basebands. The unlock-able basebands and tools are listed below.
		+	===[[yellowsn0w]]===
		+	* 02.28.00
		+
		+	===[[Ultrasn0w]]===
		+
		+	====iPhone 3G/3GS====
		+	* 04.26.08
		+	* 05.11.07
		+	* 05.12.01
		+	* 05.13.04
		+	* 06.15.00
		+	====iPhone 4====
		+	* 01.59.00
		+
		+	===[[BootNeuter]]===
		+	* 04.05.04_G
		+
		+	===[[blacksn0w]]===
		+	* 05.11.07

	==[[Hardware unlock]]==		==[[Hardware unlock]]==