News tagged ‘Unlock & Jailbreak’

Geohot, the famous iPhone hacker and the creator of different jailbreak and unlock utilities (purplera1n, blackra1n and blacksn0w), is now working on a new jailbreak utility. It will support untethered jailbreak for all devices with the latest bootrom and the latest firmware. This includes iPhone 3GS and iPod Touch 3G.

Here is what Geohot writes in his blog:

The jailbreak is all software based, and is as simple to use as blackra1n. It is completely untethered, works on all current tethered models(ipt2, 3gs, ipt3), and will probably work on iPad too.

Don't ask about a release date. You won't make it happen any sooner.

It is still unclear if he used one of the recent iPhone Safari hacks to gain control of the device or if this is something else.

Here is a teaser video:

Recently MuscleNerd, the member of DevTeam, reported the presence of an interesting security bug in Safari for the iPhone. It will probably allow a quick remote jailbreak of iPhone or iPod Touch simply by connecting the device to an external website created for this purpose.

The bug was discovered by two hackers Ralph Phillip and Vincenzo Iozzo, who won the prize of $15 000 during CanSecWest. Their initial idea was to use a web portal to do the exploit of the SMS database and retrieve it's content.

A shop in Istanbul, Turkey has posted a video demonstration of how they perform a 'hardware unlock' on the iPhone 3G with firmware 3.1.3 and new baseband. The video shows ElektroPower performing a hardware teardown to reflash the Baseband to 04.26. Nice!

Today Apple began selling iPhones without AT&T plan. Apple's new policy is that anyone can walk into an Apple Store and pick up an iPhone 8GB for $499, 16GB for $599 and 32GB for $699. They allow one unit per customer per day, up to 10 iPhones.

The iPhones are still locked to AT&T's network. Of course, these devices will be sold with the latest baseband which is not yet unlockable; however, you can use RedSn0w to perform a tethered jailbreak.

The BlackSn0w Unlock utility by Geohot has been updated by MSFTGuy and PushFix to work with the latest firmware 3.1.3. However it works only with baseband 05.11.07 (!!!).

This modified version of BlackSn0w works for iPhones upgraded with PwnageTool or Sn0wbreeze, preserving the baseband version 05.11.07. Users who have updated to OS 3.1.3 by any other method have the 05.12.01 baseband so BlackSn0w and UltraSn0w will not work.

This new version of BlackSn0w will be very useful for iPhone 3GS OS 3.1.3 / Baseband 05.11.07 users who can’t downgrade to earlier versions but still need unlock.

According to iHackintosh, this new version also fixes a small bug making WiFi much more stable.

Blacksn0w RC2 will be available on ModMyi repo soon. If you don't want to wait just add the source http://cydia.pushfix.info/ to Cydia and install it now.

Important: Blacksn0w for 3.1.3 is still in RC stage and there may be some issues or bugs. This is not an official update performed by Geohot, who has clearly indicated that he will not be updating any tools for the 3.1.3 firmware.

Yesterday morning began with shocking news about lawsuit that was filed by Apple against HTC. As it turned out, Cupertino's company is accusing smartphone manufacturer of infringing 20 Apple patents tied to the iPhone. Google Nexus One, Droid Eris, T-Mobile G1, Touch Pro2, Touch Diamond and the Imagio are listed as exhibits in the litigation.

Copies of the suit can be read here and here. Short list of patents at issue is under the cut.

Read the rest of this entry »

A few days ago in an IRC channel the DevTeam and GeoHot discussed and summarized the state of the exploits found in the new baseband 05.12.01 in firmware 3.1.3. GeoHot explains that an exploit that had previously discovered and used in blacksn0w is still present in the new firmware released by Apple. It appears that both he and MuscleNerd are working on the same exploit, and if this were true, it would be a really good start to team up and release a new unlock tool.

Here is their discussion:

< visnet_ > What does geohot tweet mean?
< %geohot > its my bb exploit for safekeeping
< %Par4doX > geohot: did you turn that over to the dev team or are you doing something with it?
< %geohot > my days of turning things over are done
< %geohot > i hope its different from the one they have
< %geohot > but they prob already have it
< %geohot > its the one i orig wanted to release blacksn0w with
< %Par4doX > it’s still there in the new bb
< %geohot > yep, just checked
< %geohot > but then opted to use xemn since it was public
< Evan > Oo, it carries over from 05.11 to 05.12?
< %geohot > why wouldn’t it, apple doesn’t fix things proactivly
< @MuscleNerd > geohot we prob should figure out a way to know if we have same exploit double blind, otherwise we may release 2 different ones at same time
< %geohot > any suggestions?
< @MuscleNerd > not sure how to do that without making it easy to brute force tho
< %geohot > yea, i salted the hash
< @MuscleNerd > yeah
< @MuscleNerd > hmm maybe if we both hash the stack dump
< @Confucious > Can you two take this out of public sight?
< @MuscleNerd > the stack itself, not the header before it or the registers after it
< Her > muscle: any notice about the exploits are the same ?
< %geohot > we are working on it
< %geohot > cryptography, perfect for people who don’t trust each other

We should not expect much for the firmware 3.1.3 since the rumors predict the firmware 3.2 for mid-March. However these news are really good for owners of locked devices.

ScreenDimmer is a new app that provides longer battery lifetime for your iPhone by either dimming the device’s screen or switching off the backlight.

Auto-lock setting can be an alternative method of saving the battery, but it is not convenient to lock and unlock the device while you are waiting for something. It also provides power save by backlight reduction if not to use the phone for a time predefined by the user.

In whole ScreenDimmer is a convenient and easy in operation application for your iPhone. You can download it in Cydia Store via BigBoss repo, and its cost is only $.99.

As expected iH8sn0w released f0recast, the application that allows us to know a lot of useful information about all we can do with our iPhone.

Just connect the iPhone with the cable to see what is version of the baseband or iBoot. The utility will also give valuable information if we can perform a jailbreak (tethered or untethered). It will also tell if the Phone is unlockable and will give a suggestion what unlock software can be used.

You can download it directly from here. Unfortunately there is no Mac version for now.

MuscleNerd just posted interesting comment on Twitter, saying that the application is inaccurate regarding to the iPhone 3GS. There might be a new update soon. For all other devices the application works just fine.

Read the rest of this entry »

It looks like Apple has started banning iPhone hackers from the iTunes App Store.

A few day ago Sherif Hashim, the iPhone developer and hacker, tweeted that he had found an exploit in the latest iPhone OS 3.1.3, which could enable the unlock on 05.12.01 baseband for iPhone 3GS and iPhone 3G. Yesterday he has been banned by Apple for the so called "security reasons". It seems that Apple is quite angry! Here is what Sherif gets when he tries to access App Store from his iPhone:

Sherif Hashim’s Tweets:

"Your Apple ID was banned for security reasons", that's what i get when i try to go to the app store, they must be really angry ))))

and guess what my apple ID was, "sherif_hashim@yahoo.com", what a fool was me not to notice )), can't help laughing, they are babies ))

Another iPhone hacker named iH8sn0w, the developer of Sn0wbreeze (PwnageTool alternative for Windows), tweeted saying he was also banned by Apple right after he released an exploit known as XEMN:

@sherif_hashim lol, they did that to my ih8sn0wyday[@t]googmail.com too. (right after I posted XEMN)…

For now Apple isn’t banning Jailbreakers - they’re banning people who actively work to find exploits in the iPhone software to create Jailbreaks for the rest of us.

Fuzzyband is an application that can downgrade the baseband for iPhone 3G. Recently it has been updated to include the support for firmware 3.1.3 baseband 05.12.01. It works only with bootloader 05.08 (early iPhone 3G).

Why do users need to downgrade the baseband? The answer is simple: if they accidentally upgraded the new firmware and need to run unlock software (blacksn0w and ultrasn0w). Unlocked iPhones do not need Fuzzyband. iPhone 3GS users cannot downgrade baseband with Fuzzyband.

Fuzzyband is available for jailbreaked iPhones in Cydia (repository BigBoss, category "System" ).

Sherif Hashim has discovered an exploit which may allow unlock of the latest iPhone OS 3.1.3 baseband 05.12.01. Such unlock utilities for previous baseband versions were called blacksn0w, ultrasn0w и and yellowsn0w. MuscleNerd, the member of DevTeam, has already confirmed it is working. So the timing of the unlcok release is totally up to them right now.

Here is an official update from DevTeam:

"We’ve started to look at his crash but it’s a long road between any given crash and a fully working unlock, and we couldn’t put an ETA on it even if we wanted to. It’s not even guaranteed that an working unlock will come from this particular crash — it’s just too early to tell."

The iPhone Dev-Team has released PwnageTool 3.1.5 for Mac OS X. It allows iPhone and iPod Touch users to safely upgrade to firmware 3.1.3. With PwnageTool you can preserve jailbreak and ultrasn0w unlock. But if you’re using the blacksn0w unlock with baseband 05.11.07 you will need to stay at firmware 3.1.2.

PwnageTool 3.1.5 creates a custom 3.1.3 IPSW for the following devices:

• iPhone 2G
• iPhone 3G
• iPhone 3GS with early bootrom
• iPod touch 1G
• iPod touch 2G with early bootrom

Warning! Don't try to use this tool if you have  iPhone 3GS with firmware 3.1.3 - it just won't work. If you have iPod Touch 1G, iPhone 2G or factory unlocked iPhone 3G , try to use redsn0w - is would be much easier.

You can download PwnageTool 3.1.5. here.

Redsn0w is a cross-platform jailbreaking tool for iPhone and iPod Touch. New version redsn0w 0.9.2 supports the latest firmware 3.1.2.

redsn0w 0.9.2 supports:

• All iPhones and iPod touches
• Windows and Mac OSX (x86)
• Apple firmwares 3.0 and 3.1.2

We expect to see Linux version quite soon.

If you need a carrier unlock, redsn0w will handle iPhone 2G by itself (by installing the BootNeuter utility). For the iPhone 3G and iPhone 3GS use Cydia after you're jailbroken to install ultrasn0w (baseband 04.26) or blacksn0w (baseband 05.11).

If you have a late-model iPhone 3GS, or if you have an iPod touch 2G whose serial number begins with “MC” (newer than week 40 of last year), or any iPod touch 3G, you can use redsn0w to jailbreak but you are currently restricted to “tethered” rebooting. That means you need to connect your device to a computer each time you boot it - so just try no to reboot.

You can download redsn0w 0.9.2 here.

Redsn0w is a cross-platform jailbreaking, unlocking, and customizing tool for iPhone and iPod Touch. New version redsn0w 0.9b3 supports the latest firmware 3.1.2. The most recent release before this one was redsn0w 0.8, which targeted Apple firmware 3.0/3.0.1.

redsn0w 0.9 beta3 supports:

• All iPhones and iPod touches except the iPod touch 3G
• Windows and Mac OSX (x86)
• Apple firmwares 3.0-3.1.2

When it's out of beta, it will support the iPod touch 3G, PPC OSX, and Linux.

If you need a carrier unlock, redsn0w will handle iPhone 2G by itself (by installing the BootNeuter utility). For the iPhone 3G and iPhone 3GS use Cydia after you're jailbroken to install ultrasn0w (baseband 04.26) or blacksn0w (baseband 05.11).

If you have a late-model iPhone 3GS, or if you have an iPod touch 2G whose serial number begins with “MC” (newer than week 40 of last year), you can use redsn0w to jailbreak but you are currently restricted to “tethered” rebooting. That means you need to connect your device to a computer each time you boot it - so just try no to reboot.

You can download redsn0w 0.9b3 here.