|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Unsolved problems"
m (→Exploits Needed: Um there is limera1n……..) |
m (update) |
||
| (2 intermediate revisions by one other user not shown) | |||
| Line 3: | Line 3: | ||
* [[Baseband Bootrom|X-Gold 608 Baseband Bootrom]] - breaking the chain of trust |
* [[Baseband Bootrom|X-Gold 608 Baseband Bootrom]] - breaking the chain of trust |
||
* [[Baseband Bootrom|X-Gold 618 Baseband Bootrom]] - breaking the chain of trust |
* [[Baseband Bootrom|X-Gold 618 Baseband Bootrom]] - breaking the chain of trust |
||
| − | * [[ |
+ | * [[T8020|A12 Bootrom]] ([[Bootrom 3865.0.0.4.7]]) and newer - breaking the chain of trust |
| + | * Find a bootrom exploit that allows unsigned code execution (preferrably on startup) on newer devices ([[A12]]+). |
||
| − | * [[S5L8942|A5 Rev A Bootrom]] (Bootrom ?) - breaking the chain of trust |
||
| − | * [[S5L8945|A5X Bootrom]] ([[Bootrom 1062.2]]) - breaking the chain of trust |
||
| − | * [[S5L8950|A6 Bootrom]] ([[Bootrom 1145.3]]) - breaking the chain of trust |
||
| − | * [[S5L8955|A6X Bootrom]] ([[Bootrom 1145.3.3]]) - breaking the chain of trust |
||
== Work to be done == |
== Work to be done == |
||
| Line 14: | Line 11: | ||
* Getting NMEA output from the GPS |
* Getting NMEA output from the GPS |
||
* IPFW kernel extension |
* IPFW kernel extension |
||
| + | * Get kernel extensions working on 2.x+ |
||
== Investigation == |
== Investigation == |
||
* [[Research: Pwnage Patches]] |
* [[Research: Pwnage Patches]] |
||
* [[Research: Re-allowing unsigned ramdisks and boot-args with the 2.* iBoot]] |
* [[Research: Re-allowing unsigned ramdisks and boot-args with the 2.* iBoot]] |
||
| + | |||
| + | '''See Also: ''[[Timeline]]''''' |
||
Latest revision as of 03:15, 21 January 2022
Exploits Needed
- X-Gold 608 Baseband unlock - Partly done (ultrasn0w uses AT+XAPP Vulnerability which is available in all versions up to 05.13.04)
- X-Gold 608 Baseband Bootrom - breaking the chain of trust
- X-Gold 618 Baseband Bootrom - breaking the chain of trust
- A12 Bootrom (Bootrom 3865.0.0.4.7) and newer - breaking the chain of trust
- Find a bootrom exploit that allows unsigned code execution (preferrably on startup) on newer devices (A12+).
Work to be done
- Increased Bluetooth Profile Support
- IP over iTunes
- Getting NMEA output from the GPS
- IPFW kernel extension
- Get kernel extensions working on 2.x+
Investigation
See Also: Timeline
