|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Fakeblank"
ChronicDev (talk | contribs) |
|||
| Line 9: | Line 9: | ||
==Other links== |
==Other links== |
||
[http://wikee.iphwn.org/sgold_bootrom:fakeblank dev team description of fakeblank] |
[http://wikee.iphwn.org/sgold_bootrom:fakeblank dev team description of fakeblank] |
||
| + | |||
| + | [[Category:Baseband Exploits]] |
||
Revision as of 21:06, 7 March 2009
This exploit is in the Baseband Bootrom. There are hardware (testpoint) and software variations of this.
Credit
gray, iProof, geohot, dinopio, lazyc0der, and an anonymous contributor
Description
If 0xA0000030 0xA000A5A0 0xA0015C58 0xA0017370 read as 0xFFFFFFFF on startup, the Baseband Bootrom Protocol can be used to download and run unsigned code. In the initial hardware unlock, an address line was pulled high to OR in hardware those addresses with 0x40000.
