Unsolved problems

Exploits Needed

• X-Gold 608 Baseband unlock - Partly done (ultrasn0w uses AT+XAPP Vulnerability which is available in all versions up to 05.13.04)
• X-Gold 608 Baseband Bootrom - breaking the chain of trust
• X-Gold 618 Baseband Bootrom - breaking the chain of trust
• iPhone 3GS Bootrom - breaking the chain of trust or finding a way to write LLB without using an iBoot exploit
• A5 Bootrom (Bootrom 838.3) - breaking the chain of trust
• A5 Rev A Bootrom (Bootrom ?) - breaking the chain of trust
• A5X Bootrom (Bootrom 1062.2) - breaking the chain of trust
• A6 Bootrom (Bootrom 1145.3) - breaking the chain of trust
• A6X Bootrom (Bootrom 1145.3.3) - breaking the chain of trust

Work to be done

• Port Linux to the iPhone [1]
  • Port (Google's mobile OS) to the iPhone Android Link
• Increased Bluetooth Profile Support
• IP over iTunes
• Getting NMEA output from the GPS
• IPFW kernel extension
• Find out how to activate the Broad-comm radio/wireless N chip

Investigation

• Research: Pwnage Patches
• Research: Re-allowing unsigned ramdisks and boot-args with the 2.* iBoot
• 2.0 and 1.1.4 dual boot