These manual square measure deprecated - it's little easier to transfer iBrickr and just use the Ringtones interface.

I worked my persuasion spread over twenty-four hour period 4-hour interval crawl done activity to help ziel port his Escape program to Windows, and twenty-four hour period 4-hour interval we can declare that we have succeeded! No the iPhone users running Windows can nowadays put trade ringtones and sounds onto their iPhones.

IMPORTANT NEWS: The iPhone software system news 1.0.1 makes these manual sufferer. You STILL requisite to acquire the old 1.0.0 software system bundle for Escape to still work. Edible fruit will surely have stopped up distributing the bundle by nowadays so I will see what I can do to get Escape excavation on the new bundle. Watch for updates!

If you have a Macintosh, check out the Macintosh manual concluded at Hack the iPhone.

These manual work...

Read the rest of this post

Note (9/12): here is an exercise in the iBrickr PXL confidant known as 'Balls' which links course to this page. I have zero to do with that app; it was created by Grudgnor concluded at the MacRumors forum.

Those United Nations agency have followed this communicate will know that I like to like to play with odd stimulant methods (see my earliest posts on , ambient light sensors, and the SmackBook).

As it turns out, the iPhone has a built-in LIS302DL, a petite 3-neck bone measuring device. Spell some have unsuccessful to use it from within the Campaign spectator (the Tilt game detects changes to the dimension of the spectator page; it is basically old as a 1-bit stimulant tactical manoeuvre), its possibility is still somewhat untapped.

After a rather prolonged binge of reverse-engineering (I had barely moved ARM construction before this), I finally figured out how to access the raw collection from the measuring device itself, as can be seen in the video recording preceding. Source encrypt will be posted as soon as possible is posted here. (update: no, it is possibility to access the measuring device directly done UIKit without this hack -- however, you'll be secured to the alternative illustration rate, which is too slow for no of the witticism stuff)

Straw poll: What would you like to see on the iPhone?

I don't see it event anytime soon.

The old exploits aren't here anymore. The hope would be finding an put to work in the new baseband encrypt itself to run a large large indefinite amount of encrypt. But I think the bootloader is beautiful well secured down.

First of no, downgrading the bootloader from software system is out of the question. The bootrom put to work runs before the electric current bootloader, so it can access the bootloader. But when the bootloader boots, it locks down its sections of flash. So aft the bootloader runs, the bootloader can't be touched.

Secondly, the lone secpack that validates on 4.6 is >= 1.1.3 They ready-made a change to the divide of the secpack so the elderly ones don't invalidate. So if we looked for an put to work in the baseband itself, it would have to be on post 1.1.2

Firmware is spoken as it is uploaded, and this is what IPSF and AnySim take point of. The old bootloader just relied on ready and waiting for the sig to test before activity the first 0x400 bytes, which be the start straight line. The new bootloader also needs the "secpack" in 0x3c0000 to not test. So we would have to find an put to work which can write the first 0x400 and kill 0x3c0000.

The IPSF withdraw itself uses an RSA hack in bootloader 3.9 This has been thoroughly spotted in 4.6

Also even if we remuneration a way to inhumane force the NCK's in sane time, we can't get the aggregation to do the inhumane force off 4.6 The lone hope Hera is to find the Edible fruit algorithmic rule old to give the NCK. I don't think this is possibility, unless we have a enquire in Edible fruit :)

I hope I am wrong, and no ingenious somebody will come along with a software system withdraw.

The IPSF put to work still deeds in the 1.1.3 baseband, and nowadays that we know Edible fruit doesn't news the bootloader it appears to be safe to use. IPSF deeds victimisation the RSA artifact hack in bootloader 3.9, so as long as the bootloader is 3.9, I can't see it breaking. Here is reference encrypt I wrote to do the IPSF withdraw a spell agone. With a small indefinite quantity youth subculture, upper crust can turn their virginizer into an IPSF unlocker. I wouldn't bother with the AnySim patches anymore, they square measure lost aft all regenerate, and requisite to be restricted for each turning of the baseband. Be warned though, back up your seczone before IPSF unlocking. IPSF erases your NCK token.
Also I was action around with activity UNIX drivers, and I figured I'd start one for the iPhone. Here is what I have so right, it lone deeds in recuperation modality. You can reflection iBoot commands to /proc/iphone/cmd

These manual square measure deprecated - it's little easier to transfer iBrickr and just use the Ringtones interface.

I worked my persuasion spread over twenty-four hour period 4-hour interval crawl done activity to help ziel port his Escape program to Windows, and twenty-four hour period 4-hour interval we can declare that we have succeeded! No the iPhone users running Windows can nowadays put trade ringtones and sounds onto their iPhones.

IMPORTANT NEWS: The iPhone software system news 1.0.1 makes these manual sufferer. You STILL requisite to acquire the old 1.0.0 software system bundle for Escape to still work. Edible fruit will surely have stopped up distributing the bundle by nowadays so I will see what I can do to get Escape excavation on the new bundle. Watch for updates!

If you have a Macintosh, check out the Macintosh manual concluded at Hack the iPhone.

These manual work...

Read the rest of this post