Difference between revisions of "AirSwitch"

From The iPhone Wiki
Jump to: navigation, search
m (Small grammatical changes to make it nicer to read)
m (Tracking section and other minor edits)
Line 26: Line 26:
 
}}
 
}}
 
{{float toc|left}}
 
{{float toc|left}}
  +
'''AirSwitch''' (stylized as <code>airswitch</code>) is a modern replacement of the [[iOS Restore Tool]].
'''AirSwitch''' (stylized as <code>airswitch</code>) is a modern replacement of the [[iOS Restore Tool]]. The software requires use of a Kanzi cable to connect to Apple devices running internal firmware and will display an "unauthorized cable" error (an additionally an "incompatible device" error in v1.012 if used with production firmware) if the user attempts to use a standard lightning cable. This is an assumed security feature added to the internal software to ensure the software is used only by Apple Employees. AirSwitch does not use the standard IPSW restore bundles to restore devices like [[PurpleRestore]]. Instead, it uses OTA bundles to upgrade and downgrade devices which can be manually downloaded or retrieved from AppleConnect as long as the user has access. It also has a demo mode which will simulate connected devices, as seen in the screenshot to the right, which will allow one to try the software before using it on actual devices. Interestingly, this feature was removed and as of v1.012 simulation mode is no longer present. The software was originally leaked to the public by [https://twitter.com/yrh04e/status/1148243540687953920?s=21 YRH04E] who tweeted a picture of it in {{date|2019|07}}.
 
  +
The software requires use of a Kanzi cable to connect to Apple devices running internal firmware and will display an "unauthorized cable" error (an additionally an "incompatible device" error in v1.012 if used with production firmware) if the user attempts to use a standard lightning cable.
  +
AirSwitch does not use [[IPSW File Format|IPSW]]s to restore devices like [[PurpleRestore]]. Instead, it uses OTA bundles to upgrade and downgrade devices which can be manually downloaded or retrieved from AppleConnect as long as the user has access to the server. It also has a demo mode which will simulate connected devices, as seen in the screenshot to the right, which will allow one to try the software before using it on actual devices. Interestingly, this feature was removed, and as of v1.012 simulation mode is no longer present. The software was originally leaked to the public by [https://twitter.com/yrh04e/status/1148243540687953920 YRH04E] who tweeted a picture of it in {{date|2019|07}}.
   
 
It is important to note that unlike PurpleRestore, AirSwitch cannot restore a device that cannot boot. In fact, AirSwitch will tell you to use PurpleRestore (interestingly it's stylized as Purple Restore) to restore the device first. (See [[#Gallery|Gallery]]) This, among with the other device requirements can be found by hovering over "Can I use AirSwitch?", which is not present in versions before v1.012. The content of this popup can be found below, and a screenshot can be found in the [[#Gallery|Gallery]].
 
It is important to note that unlike PurpleRestore, AirSwitch cannot restore a device that cannot boot. In fact, AirSwitch will tell you to use PurpleRestore (interestingly it's stylized as Purple Restore) to restore the device first. (See [[#Gallery|Gallery]]) This, among with the other device requirements can be found by hovering over "Can I use AirSwitch?", which is not present in versions before v1.012. The content of this popup can be found below, and a screenshot can be found in the [[#Gallery|Gallery]].
Line 39: Line 41:
   
 
[[Image:AirSwitch_prod_fuse.png]]
 
[[Image:AirSwitch_prod_fuse.png]]
  +
If you connect a device that is production fused rather than development fused, it will be marked with the P icon shown on the left. <br />(This is supported by the fact that this icon is named <code>ProductionFuseIcon.tiff</code> in <code>AirSwitch.app/Content/Resources/</code>)
   
  +
= Tracking =
If you connect a device that is production fused rather than development fused, it will be marked with the P icon shown above. (This is supported by the fact that this icon is named <code>ProductionFuseIcon.tiff</code> in <code>AirSwitch/Content/Resources/</code>)
 
  +
When opening AirSwitch's executable in Terminal, the logs show that it attempts to connect to a server with the URL https://hdc-appstat.euro.apple.com:9001/applications/AirSwitch/sessions (inaccessible without AppleConnect VPN Access), and sends the following information about the computer:
 
  +
* AppleConect username
== Gallery ==
 
  +
* Country code and name
  +
* Timezone
  +
* Disk info (output of <code>[[wikipedia:df (Unix)|df]] -l -H</code>)
  +
* Host name
  +
* Process Name ("AirSwitch")
  +
* Geolocation (Country name and timezone)
  +
* Model Identifier
  +
* OS version and build number
  +
* Screen size
  +
* Username
  +
= Gallery =
 
<gallery>
 
<gallery>
 
File:AirSwitch_connect_device.png|The main screen shown when no device is connected
 
File:AirSwitch_connect_device.png|The main screen shown when no device is connected

Revision as of 12:53, 30 October 2021

This article discusses software internally used by Apple.

Acquiring a copy without Apple's consent is illegal and may result in being scammed.
Engaging in illegal activity is not condoned. This information is provided for educational purposes only.

AirSwitch
AirSwitch icon.png
AirSwitch1.jpg
AirSwitch (0.80)(17A400)
Original author(s) Apple Inc.
Developer(s) Adham Hurani, Yaron Abramovich, Andrey Greenfield
Stable release 1.012 (18B86)
(latest known version)
Operating system macOS
Size 3-8 MB
Available in English
Type Firmware flasher
License Closed source

AirSwitch (stylized as airswitch) is a modern replacement of the iOS Restore Tool. The software requires use of a Kanzi cable to connect to Apple devices running internal firmware and will display an "unauthorized cable" error (an additionally an "incompatible device" error in v1.012 if used with production firmware) if the user attempts to use a standard lightning cable. AirSwitch does not use IPSWs to restore devices like PurpleRestore. Instead, it uses OTA bundles to upgrade and downgrade devices which can be manually downloaded or retrieved from AppleConnect as long as the user has access to the server. It also has a demo mode which will simulate connected devices, as seen in the screenshot to the right, which will allow one to try the software before using it on actual devices. Interestingly, this feature was removed, and as of v1.012 simulation mode is no longer present. The software was originally leaked to the public by YRH04E who tweeted a picture of it in July 2019.

It is important to note that unlike PurpleRestore, AirSwitch cannot restore a device that cannot boot. In fact, AirSwitch will tell you to use PurpleRestore (interestingly it's stylized as Purple Restore) to restore the device first. (See Gallery) This, among with the other device requirements can be found by hovering over "Can I use AirSwitch?", which is not present in versions before v1.012. The content of this popup can be found below, and a screenshot can be found in the Gallery.

To use AirSwitch please ensure:

  • Device is a dev-fused device
  • Device has an Apple Internal OS installed
  • Device has an active connection to Apple Internal network
  • Device is connected to the Mac with a valid Kanzi cable
  • Device boots properly

AirSwitch prod fuse.png If you connect a device that is production fused rather than development fused, it will be marked with the P icon shown on the left.
(This is supported by the fact that this icon is named ProductionFuseIcon.tiff in AirSwitch.app/Content/Resources/)

Tracking

When opening AirSwitch's executable in Terminal, the logs show that it attempts to connect to a server with the URL https://hdc-appstat.euro.apple.com:9001/applications/AirSwitch/sessions (inaccessible without AppleConnect VPN Access), and sends the following information about the computer:

  • AppleConect username
  • Country code and name
  • Timezone
  • Disk info (output of df -l -H)
  • Host name
  • Process Name ("AirSwitch")
  • Geolocation (Country name and timezone)
  • Model Identifier
  • OS version and build number
  • Screen size
  • Username

Gallery