Difference between revisions of "AirSwitch"

From The iPhone Wiki
Jump to: navigation, search
(This script displays a recommended migration to a newer binary and not a new application. -Removed)
m (Updated latest known version)
 
(5 intermediate revisions by 3 users not shown)
Line 3: Line 3:
 
| name = AirSwitch
 
| name = AirSwitch
 
| title = AirSwitch
 
| title = AirSwitch
| logo =
+
| logo = [[File:AirSwitch_icon.png|150px]]
 
| screenshot = [[File:AirSwitch1.jpg|300px]]
 
| screenshot = [[File:AirSwitch1.jpg|300px]]
 
| caption = AirSwitch (0.80)(17A400)
 
| caption = AirSwitch (0.80)(17A400)
Line 11: Line 11:
 
| released =
 
| released =
 
| discontinued =
 
| discontinued =
| latest release version = 0.80 (17A400)<br /><small>(latest ''known'' version)</small>
+
| latest release version = 1.012 (19A224)<br /><small>(latest ''known'' version)</small>
 
| latest release date =
 
| latest release date =
 
| latest preview version =
 
| latest preview version =
Line 18: Line 18:
 
| operating system = [[wikipedia:macOS|macOS]]
 
| operating system = [[wikipedia:macOS|macOS]]
 
| platform =
 
| platform =
| size =
+
| size = 3-8 MB
 
| language = [[wikipedia:English language|English]]
 
| language = [[wikipedia:English language|English]]
 
| status =
 
| status =
Line 26: Line 26:
 
}}
 
}}
 
{{float toc|left}}
 
{{float toc|left}}
  +
'''AirSwitch''' (stylized as <code>airswitch</code>) is a modern replacement of the [[iOS Restore Tool]].
'''AirSwitch''' (stylized as <code>airswitch</code>) is a modern replacement of the [[iOS Restore Tool]]. The software requires use of a Kanzi cable to connect to Apple devices and will display an "unauthorized cable" error if the user attempts to use a standard lightning cable. This is an assumed security feature added to the internal software to ensure the software is used only by Apple Employees. AirSwitch does not use the standard IPSW restore bundles to restore devices like [[PurpleRestore]]. It instead uses OTA bundles to upgrade and downgrade devices which can manually downloaded or retrieved from AppleConnect given if the user has access. It also has a demo mode which will simulate connected devices as seen in the picture here on this wiki which will allow one to try the software before being used on actual devices. The software was originally leaked to the public by [https://twitter.com/yrh04e/status/1148243540687953920?s=21 YRH04E] who tweeted a picture of it in July 2019.
 
  +
The software requires use of a Kanzi cable to connect to Apple devices running internal firmware and will display an "unauthorized cable" error (an additionally an "incompatible device" error in v1.012 if used with production firmware) if the user attempts to use a standard lightning cable.
  +
AirSwitch does not use [[IPSW File Format|IPSW]]s to restore devices like [[PurpleRestore]]. Instead, it uses OTA bundles to upgrade and downgrade devices which can be manually downloaded or retrieved from AppleConnect as long as the user has access to the server. It also has a demo mode which will simulate connected devices, as seen in the screenshot to the right, which will allow one to try the software before using it on actual devices. Interestingly, this feature was removed, and as of v1.012 simulation mode is no longer present. The software was originally leaked to the public by [https://twitter.com/yrh04e/status/1148243540687953920 YRH04E] who tweeted a picture of it in {{date|2019|07}}.
  +
  +
It is important to note that unlike PurpleRestore, AirSwitch cannot restore a device that cannot boot. In fact, AirSwitch will tell you to use PurpleRestore (interestingly it's stylized as Purple Restore) to restore the device first. (See [[#Gallery|Gallery]]) This, among with the other device requirements can be found by hovering over "Can I use AirSwitch?", which is not present in versions before v1.012. The content of this popup can be found below, and a screenshot can be found in the [[#Gallery|Gallery]].
  +
  +
''To use AirSwitch please ensure:''
  +
  +
* ''Device is a dev-fused device''
  +
* ''Device has an Apple Internal OS installed''
  +
* ''Device has an active connection to Apple Internal network''
  +
* ''Device is connected to the Mac with a valid Kanzi cable''
  +
* ''Device boots properly''
  +
  +
[[Image:AirSwitch_prod_fuse.png]]
  +
If you connect a device that is production fused rather than development fused, it will be marked with the P icon shown on the left. <br />(This is supported by the fact that this icon is named <code>ProductionFuseIcon.tiff</code> in <code>AirSwitch.app/Content/Resources/</code>)
  +
  +
= Tracking =
  +
When opening AirSwitch's executable in Terminal, the logs show that it attempts to connect to a server with the URL https://hdc-appstat.euro.apple.com:9001/applications/AirSwitch/sessions (inaccessible without AppleConnect VPN Access), and sends the following information about the computer:
  +
* AppleConect username
  +
* Country code and name
  +
* Timezone
  +
* Disk info (output of <code>[[wikipedia:df (Unix)|df]] -l -H</code>)
  +
* Host name
  +
* Process Name ("AirSwitch")
  +
* Geolocation (Country name and timezone)
  +
* Model Identifier
  +
* OS version and build number
  +
* Screen size
  +
* Username
  +
= Gallery =
  +
<gallery>
  +
File:AirSwitch_connect_device.png|The main screen shown when no device is connected
  +
File:AirSwitch_can_i_use.png|A message showing the requirements for using AirSwitch
  +
File:AirSwitch_unsupported_state.png|The message shown for a device connected in DFU mode
  +
File:AirSwitch_no_SSH.png|The message shown when a device not running internal firmware is connected
  +
</gallery>
   
 
[[Category:Software]]
 
[[Category:Software]]
{{stub|software}}
 

Latest revision as of 01:00, 29 June 2022

This article discusses software internally used by Apple.

Acquiring a copy without Apple's consent is illegal and may result in being scammed.
Engaging in illegal activity is not condoned. This information is provided for educational purposes only.

AirSwitch
AirSwitch icon.png
AirSwitch1.jpg
AirSwitch (0.80)(17A400)
Original author(s) Apple Inc.
Developer(s) Adham Hurani, Yaron Abramovich, Andrey Greenfield
Stable release 1.012 (19A224)
(latest known version)
Operating system macOS
Size 3-8 MB
Available in English
Type Firmware flasher
License Closed source

AirSwitch (stylized as airswitch) is a modern replacement of the iOS Restore Tool. The software requires use of a Kanzi cable to connect to Apple devices running internal firmware and will display an "unauthorized cable" error (an additionally an "incompatible device" error in v1.012 if used with production firmware) if the user attempts to use a standard lightning cable. AirSwitch does not use IPSWs to restore devices like PurpleRestore. Instead, it uses OTA bundles to upgrade and downgrade devices which can be manually downloaded or retrieved from AppleConnect as long as the user has access to the server. It also has a demo mode which will simulate connected devices, as seen in the screenshot to the right, which will allow one to try the software before using it on actual devices. Interestingly, this feature was removed, and as of v1.012 simulation mode is no longer present. The software was originally leaked to the public by YRH04E who tweeted a picture of it in July 2019.

It is important to note that unlike PurpleRestore, AirSwitch cannot restore a device that cannot boot. In fact, AirSwitch will tell you to use PurpleRestore (interestingly it's stylized as Purple Restore) to restore the device first. (See Gallery) This, among with the other device requirements can be found by hovering over "Can I use AirSwitch?", which is not present in versions before v1.012. The content of this popup can be found below, and a screenshot can be found in the Gallery.

To use AirSwitch please ensure:

  • Device is a dev-fused device
  • Device has an Apple Internal OS installed
  • Device has an active connection to Apple Internal network
  • Device is connected to the Mac with a valid Kanzi cable
  • Device boots properly

AirSwitch prod fuse.png If you connect a device that is production fused rather than development fused, it will be marked with the P icon shown on the left.
(This is supported by the fact that this icon is named ProductionFuseIcon.tiff in AirSwitch.app/Content/Resources/)

Tracking

When opening AirSwitch's executable in Terminal, the logs show that it attempts to connect to a server with the URL https://hdc-appstat.euro.apple.com:9001/applications/AirSwitch/sessions (inaccessible without AppleConnect VPN Access), and sends the following information about the computer:

  • AppleConect username
  • Country code and name
  • Timezone
  • Disk info (output of df -l -H)
  • Host name
  • Process Name ("AirSwitch")
  • Geolocation (Country name and timezone)
  • Model Identifier
  • OS version and build number
  • Screen size
  • Username

Gallery