Preventing Baseband Update

From The iPhone Wiki
Revision as of 18:07, 12 December 2010 by Ryccardo (talk | contribs) (Step 2: Edit options.plist: Removed plist header and footer because then it could be misunderstood as "replace whole file with")
Jump to: navigation, search

Step 1: Swap Ramdisks

Open the IPSW (with your favorite ZIP utility). Replace the Restore Ramdisk and the Update Ramdisk names with each other.

Step 2: Edit options.plist

  1. Unpack custom IPSW
  2. Decrypt Restore Ramdisk using xpwntool and mount it
  3. Navigate to /usr/local/share/restore
  4. Edit options.plist on the restore ramdisk

(Ignore the SystemPartitionSize in your plist file and leave it)

  1. Reencrypt the restore ramdisk
  2. Repack the IPSW
  3. Prepare device for custom firmware using redsn0w
  4. Restore IPSW to iTunes in pwned DFU Mode

You must load a patched iBSS/iBEC for this to work. Using an original IPSW will not work, because redsn0w's pwned DFU Mode doesn't patch sigchecks in iBSS.

TinyUmbrella/Cydia Method for iPhone 4 (Doesnt work on iOS 4.2.1)

The iPhone 4 requires a signature from Apple in order to update the baseband. Pointing the hosts file to Cydia Server or running TinyUmbrella will allow this request for signature to be ignored, thus preventing a baseband update.

  • This only works if Cydia/TinyUmbrella accepts the firmware's SHSH.
  • This method also 'works' with iOS 4.2.1, but iOS will check the baseband version when booting and if it doesn't match, it will not boot. The usual 'Kick out of recovery mode' methods won't work, so this method is actually not useful for iOS 4.2.1 or higher.
  1. Edit the hosts file and add the line "" without the quotes, or run TinyUmbrella after saving the firmware's SHSH. If Cydia Server hasn't got your SHSH, but you have it locally, use TSS Server method in TinyUmbrella.
  2. Use the "Restore" button in iTunes to update. you will get error 1013 on 4.2.1 when trying to restore thought the restore ramdisk