The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "NonUI builds"
(Added 10A63970v) |
Unknownz21 (talk | contribs) |
||
(41 intermediate revisions by 6 users not shown) | |||
Line 1: | Line 1: | ||
+ | {{internal software}} |
||
− | {{see also|Beta Firmware}} |
||
+ | {{see also|Beta Firmware|Internal OTA Updates}} |
||
<div class="toclimit-3">{{float toc|left}}</div> |
<div class="toclimit-3">{{float toc|left}}</div> |
||
− | This |
+ | This is a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}} |
+ | [[File:newsblogo.png|thumb|125px|right|"Skankwerk" logo on 7.x and up]] |
||
− | They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences : |
||
+ | [[File:oldswblogo.png|thumb|125px|left|"Skankwerk" logo on 6.x and below]] |
||
− | * Contain DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\. |
||
+ | [[File:newswblogo.jpg|thumb|125px|right|Prototype showing Skankwerk logo during boot]] |
||
− | * Contain DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions |
||
+ | [[File:oldswblogodevice.jpg|thumb|125px|left|Prototype showing Skankwerk logo during boot]] |
||
− | * Contain Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\. |
||
+ | They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences: |
||
− | * Have the /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /. |
||
+ | * DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\. |
||
+ | * DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions |
||
+ | * Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\. |
||
+ | * /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /. |
||
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead. |
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead. |
||
* /usr and subfolders contain many UNIX command line utilities. |
* /usr and subfolders contain many UNIX command line utilities. |
||
Line 13: | Line 18: | ||
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities. |
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities. |
||
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer. |
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer. |
||
− | Unlike regular iOS Firmwares, factory ones are distributed in "restore bundles". Those are unzipped IPSW files which can be restored on devices using |
+ | Unlike regular iOS Firmwares, factory ones are distributed in both IPSWs and "restore bundles". Those are unzipped IPSW files which can be restored on devices using internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem). |
+ | {{clear}} |
||
− | [[File:oldswblogo.png|thumb|125px|right|SwitchBoard logo on 6.x and below]] |
||
+ | = Some interesting facts about factory firmwares = |
||
− | [[File:newswblogo.jpg|thumb|125px|right|SwitchBoard logo on 7.x and up]] |
||
− | == Some interesting facts about factory firmwares == |
||
− | |||
* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one. |
* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one. |
||
− | Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is |
+ | Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design. |
− | * '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and |
+ | * '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and most likely others. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on [https://en.wikipedia.org/wiki/Skunkworks_project Wikipedia]. |
+ | |||
== [[M68AP|iPhone]] == |
== [[M68AP|iPhone]] == |
||
{| class="wikitable" |
{| class="wikitable" |
||
Line 33: | Line 37: | ||
| [[Alpine 1A420|1A420]] |
| [[Alpine 1A420|1A420]] |
||
| rowspan="3" | Alpine |
| rowspan="3" | Alpine |
||
− | | |
+ | | 03.06.01_G<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup><!-- http://img399.imageshack.us/i/iphone2go0.jpg/ --> |
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down. |
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down. |
||
|- |
|- |
||
| [[Alpine 4A57|4A57]] |
| [[Alpine 4A57|4A57]] |
||
− | | |
+ | | 04.02.13_G |
| - |
| - |
||
|- |
|- |
||
Line 124: | Line 128: | ||
| 6.0 |
| 6.0 |
||
| [[Sundance 10A316|10A316]] |
| [[Sundance 10A316|10A316]] |
||
− | | Sundance |
+ | | Sundance |
| 05.16.06 |
| 05.16.06 |
||
| - |
| - |
||
Line 177: | Line 181: | ||
| 6.0 |
| 6.0 |
||
| [[Sundance 10A316|10A316]] |
| [[Sundance 10A316|10A316]] |
||
− | | Sundance |
+ | | Sundance |
| 04.12.02 |
| 04.12.02 |
||
| - |
| - |
||
Line 236: | Line 240: | ||
|- |
|- |
||
| [[Sundance 10A316|10A316]] |
| [[Sundance 10A316|10A316]] |
||
− | | Sundance |
+ | | Sundance |
| 1.7.00 |
| 1.7.00 |
||
| - |
| - |
||
|- |
|- |
||
+ | |} |
||
+ | == [[iPhone 5c]] == |
||
+ | {| class="wikitable" |
||
+ | |- |
||
+ | ! Version |
||
+ | ! Build |
||
+ | ! Codename |
||
+ | ! Baseband |
||
+ | ! Comments |
||
+ | |- |
||
+ | | 7.0 |
||
+ | | [[Sochi 11A93840l|11A93840l]] |
||
+ | | Sochi? |
||
+ | | ? |
||
+ | | - |
||
+ | |- |
||
+ | | 7.1 |
||
+ | | [[Sochi 11D31620l|11D31620l]] |
||
+ | | Sochi? |
||
+ | | ? |
||
+ | | - |
||
|} |
|} |
||
Line 315: | Line 340: | ||
! Comments |
! Comments |
||
|- |
|- |
||
− | | rowspan=" |
+ | | rowspan="4" | 9.0 |
− | | [[Monarch |
+ | | [[Monarch 13A22120w|13A22120w]] |
| Monarch? |
| Monarch? |
||
− | | |
+ | | ? |
+ | | - |
||
+ | |- |
||
+ | | [[MonarchAni 13A93051l|13A93051l]] |
||
+ | | MonarchAni |
||
+ | | 0.37.08_DEBUG |
||
| - |
| - |
||
|- |
|- |
||
Line 342: | Line 372: | ||
! Comments |
! Comments |
||
|- |
|- |
||
− | | rowspan=" |
+ | | rowspan="5" | 10.0 |
+ | | [[Whitetail 14A22580n|14A22580n]] |
||
+ | | Whitetail? |
||
+ | | ? |
||
+ | | - |
||
+ | |- |
||
+ | | [[Whitetail 14A22881a|14A22881a]] |
||
+ | | Whitetail? |
||
+ | | ? |
||
+ | | - |
||
+ | |- |
||
| [[Whitetail 14A92340t|14A92340t]] |
| [[Whitetail 14A92340t|14A92340t]] |
||
| Whitetail? |
| Whitetail? |
||
Line 370: | Line 410: | ||
|- |
|- |
||
| 11.0 |
| 11.0 |
||
− | | [[ |
+ | | [[TigrisAni 15A93261h|15A93261h]] |
+ | | TigrisAni |
||
− | | Tigris? |
||
+ | | 00.34.09-DEBUG |
||
+ | | - |
||
+ | |} |
||
+ | |||
+ | == [[D21AP|iPhone X]] == |
||
+ | {| class="wikitable" |
||
+ | |- |
||
+ | | Version |
||
+ | | Build |
||
+ | | Codename |
||
+ | | Baseband |
||
+ | | Comments |
||
+ | |- |
||
+ | | 11.0 |
||
+ | | [[TigrisAni 15A783601y|15A783601y]] |
||
+ | | TigrisAni? |
||
| ? |
| ? |
||
| - |
| - |
||
Line 385: | Line 441: | ||
! Comments |
! Comments |
||
|- |
|- |
||
− | | 3.2 |
+ | | rowspan="2" | 3.2 |
− | | [[7B3341e|7B3341e]] |
+ | | [[Wildcat 7B3341e|7B3341e]] |
− | | ? |
+ | | Wildcat? |
| ? |
| ? |
||
| - |
| - |
||
+ | |- |
||
+ | | [[Wildcat 7B5286a|7B5286a]] |
||
+ | | Wildcat? |
||
+ | | ? |
||
+ | | Found by SonnyDickson, documented on [https://9to5mac.com/2017/05/15/ipad-1-prototype/ 9to5mac] |
||
+ | |- |
||
|} |
|} |
||
Line 401: | Line 463: | ||
! Comments |
! Comments |
||
|- |
|- |
||
− | | rowspan="2"|4.3 |
+ | | rowspan="2" | 4.3 |
| [[Durango 8F3178a|8F3178a]] |
| [[Durango 8F3178a|8F3178a]] |
||
| Durango? |
| Durango? |
||
Line 423: | Line 485: | ||
! Comments |
! Comments |
||
|- |
|- |
||
− | | rowspan=" |
+ | | rowspan="3" | 6.0 |
+ | | [[SundanceTaosTianshan 10A63970m|10A63970m]] |
||
− | | [[Sundance 10A63970v|10A63970v]] |
||
+ | | SundanceTaosTianshan |
||
− | | Sundance? |
||
| ? |
| ? |
||
| - |
| - |
||
|- |
|- |
||
+ | | [[SundanceTaosTianshan 10A63970v|10A63970v]] |
||
− | | [[Sundance 10A63971b|10A63971b]] |
||
+ | | SundanceTaosTianshan |
||
− | | Sundance? |
||
+ | | ? |
||
+ | | - |
||
+ | |- |
||
+ | | [[SundanceTaosTianshan 10A63971b|10A63971b]] |
||
+ | | SundanceTaosTianshan |
||
| ? |
| ? |
||
| - |
| - |
||
Line 461: | Line 528: | ||
! Comments |
! Comments |
||
|- |
|- |
||
− | | 8. |
+ | | 8.4 |
− | | [[ |
+ | | [[Donner 12H60160o|12H60160o]] |
− | | |
+ | | Donner? |
+ | | ? |
||
+ | | - |
||
+ | |- |
||
+ | | 9.0 |
||
+ | | [[Monarch 13A62950o|13A62950o]] |
||
+ | | Monarch? |
||
+ | | ? |
||
+ | | - |
||
+ | |- |
||
+ | |} |
||
+ | |||
+ | == [[J71AP|iPad Air]] == |
||
+ | {| class="wikitable" |
||
+ | |- |
||
+ | ! Version |
||
+ | ! Build |
||
+ | ! Codename |
||
+ | ! Baseband |
||
+ | ! Comments |
||
+ | |- |
||
+ | | 7.0.1 |
||
+ | | [[Innsbruck 11B34640l|11B34640l]] |
||
+ | | Innsbruck? |
||
| ? |
| ? |
||
| - |
| - |
Revision as of 13:52, 8 June 2018
This article discusses software internally used by Apple. Acquiring a copy without Apple's consent is illegal and may result in being scammed. |
This is a documented list of known factory firmwares, used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging.
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences:
- DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
- DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
- Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
- /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
- No SpringBoard, requires the use of daemons to launch SwitchBoard.app as a multi-app launcher instead.
- /usr and subfolders contain many UNIX command line utilities.
- SSH daemon is pre-installed - as dropbear
- Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
- It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
- Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed in both IPSWs and "restore bundles". Those are unzipped IPSW files which can be restored on devices using internal restore software such as PurpleRestore. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).
Some interesting facts about factory firmwares
- Design: Apple seems to use the same GUI design from the production firmware to the factory one.
Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in Operator). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
- Other: The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and most likely others. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on Wikipedia.
iPhone
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
1.0 | 1A420 | Alpine | 03.06.01_G[1] | Originally available here, but was soon taken down. |
4A57 | 04.02.13_G | - | ||
1.1.2 | 3B48 | 04.02.13_G | - | |
1.1.3 | 4A102a | Alpine | 04.04.05_G | - |
iPhone 3G
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
4.0 | 8A2130h | ApexNanshan | ? | - |
8A2180g | ApexNanshan | 05.12.01 | - |
iPhone 3GS
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
3.1b | 7C108b | Sierra? | ? | - |
7C144 | Northstar? | ? | - | |
4.0 | 8A2130h | ApexNanshan | ? | - |
8A2180g | ApexNanshan | 05.12.01 | - | |
5.1 | 9B3145a | HoodooYabuli | ? | - |
9B3176b | HoodooYabuli | ? | - | |
9B3176n | HoodooYabuli | 05.16.05 | - | |
6.0 | 10A316 | Sundance | 05.16.06 | - |
iPhone 4
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
4.0 | 8A133 | Apex? | 01.32.01 | - |
8A2062a | Apex? | ? | - | |
8A2130h | ApexNanshan | ? | - | |
8A2180g | ApexNanshan | 01.42.01 | - | |
5.1 | 9B3145a | HoodooYabuli | ? | - |
9B3176b | HoodooYabuli | ? | - | |
9B3176n | HoodooYabuli | 04.12.01 | - | |
6.0 | 10A316 | Sundance | 04.12.02 | - |
iPhone 4S
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
5.1 | 9B3145a | HoodooYabuli | ? | - |
9B3176b | HoodooYabuli | ? | - | |
9B3176n | HoodooYabuli | 1.0.10 | - | |
6.0 | 10A23941a | SundanceNanshan | 2.0.0.2 | - |
iPhone 5
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
6.0 | 10A23110z | Sundance? | ? | - |
10A23941s | Sundance? | ? | - | |
10A316 | Sundance | 1.7.00 | - |
iPhone 5c
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
7.0 | 11A93840l | Sochi? | ? | - |
7.1 | 11D31620l | Sochi? | ? | - |
iPhone 5s
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
7.0 | 11A24580o | InnsbruckNanshan | 1.00.05 | - |
11A24581c | InnsbruckNanshan | ? | - | |
11A93840f | Innsbruck? | ? | Originally found on a Macrumors post. |
iPhone 6
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
8.0 | 12A22121a | Okemo? | ? | - |
12A93311h | Okemo? | 1.00.01 | - | |
12A93650o | OkemoAni | 1.00.05 | This build is pretty obscure, but it is in the wild. | |
12A93651a | OkemoAni | 1.00.05 | - | |
12A93651b | OkemoAni | 1.00.05 | - |
iPhone 6s
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
9.0 | 13A22120w | Monarch? | ? | - |
13A93051l | MonarchAni | 0.37.08_DEBUG | - | |
13A93420d | Monarch? | ? | - | |
13A93420m | Monarch? | 1.00.05 | - |
iPhone 7
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
10.0 | 14A22580n | Whitetail? | ? | - |
14A22881a | Whitetail? | ? | - | |
14A92340t | Whitetail? | ? | - | |
14A93012r | WhitetailAni | ? | - | |
14A93013a | WhitetailAni | ? | - |
iPhone 8
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
11.0 | 15A93261h | TigrisAni | 00.34.09-DEBUG | - |
iPhone X
Version | Build | Codename | Baseband | Comments |
11.0 | 15A783601y | TigrisAni? | ? | - |
iPad
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
3.2 | 7B3341e | Wildcat? | ? | - |
7B5286a | Wildcat? | ? | Found by SonnyDickson, documented on 9to5mac |
iPad 2
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
4.3 | 8F3178a | Durango? | ? | - |
8F3191d | Durango? | ? | - |
iPad mini
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
6.0 | 10A63970m | SundanceTaosTianshan | ? | - |
10A63970v | SundanceTaosTianshan | ? | - | |
10A63971b | SundanceTaosTianshan | ? | - |
iPad mini 2
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
7.0.3 | 11B64940j | InnsbruckTaos? | ? | - |
iPad mini 4
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
8.4 | 12H60160o | Donner? | ? | - |
9.0 | 13A62950o | Monarch? | ? | - |
iPad Air
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
7.0.1 | 11B34640l | Innsbruck? | ? | - |
iPod touch (3rd generation)
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
3.1 | 7C1023e | Inferno? | ? | - |
7C1095a | Inferno? | ? | - | |
7C144 | Northstar? | ? | - |
iPod touch (4th generation)
Version | Build | Codename | Baseband | Comments |
---|---|---|---|---|
5.1 | 9B3145a | HoodooYabuli | ? | - |
9B3176b | HoodooYabuli | ? | - | |
9B3176n | HoodooYabuli | ? | - |