Nate True's Weblog: Posts tagged with firmware


Looks like the iPhone 1.1.1 update is reversible after all (kinda)

Posted by natetrue 39 weeks ago

Alright! Congrats to Kmac1985 from the Hackint0sh forums who discovered this little doozy of a method. Make sure to read the issues below (it's not COMPLETELY reversible). On a phone that has 1.1.1 installed:

- Start by downloading the 1.0.2 firmware here. Get it while it's still hot. That's an Apple download link so it's subject to change.

- Try to sit under a good light source. You need to see the screen clearly when it's not backlit.

- Make sure the phone is on and running normally (if activated, at the Home screen, if not, just at the "Activate iphone" screen). The phone must also be docked or plugged in to your USB cable.

- Press and hold the Power and Home buttons on the phone until the screen shuts off.

- Release the Power button immediately. Keep pressing the Home button.

- You should see a number of horizontal lines invade the now-off screen, and it will be slightly disturbing. If you just see just flat blackness turn your phone back on and try again.

- Your computer will recognize an "Apple Restore (DFU) Device". Open iTunes and it will complain about needing to restore.

- Hold Shift if on Windows, or Option/Alt if on Mac, and click Restore in iTunes. Select the 1.0.2 firmware file you downloaded.

- Let it restore. It will error out but the phone will have been upgraded.

- Restart your phone with the power + home buttons and you have a 1.0.2 phone again! Activate and use according to your preference.

Issues with this method

On my phone the phone won't boot unless I directly issue an "fsboot" command to the bootloader. I don't think this happens to everyone, and it's fixable with a few tweaks to NVRAM (details to come).

Also my phone was unlocked (needle method) and so the radio is corrupt, giving me the "Mismatched IMEI" state that I don't understand very well. Apparently non-unlocked phones suffer this issue after downgrading as well.

If your iPhone just boots to "Please connect to iTunes" all the time

This is an issue that I had. What you need to do depends on your operating system.

Windows:
- Download iBrickr and extract it somewhere.
- Open a command line and cd to the folder you extracted iBrickr to.
- Run iphoneinterface from the command line.
- You should see an r_recovery prompt.
- Type "setenv auto-boot true" and hit enter.
- Type "saveenv" and hit enter.
- Type "fsboot" and hit enter.
- Your phone will boot properly.

Mac:
- Download iPHUC and run it.
- You should get a recovery mode prompt.
- Type "cmd setenv auto-boot true" and hit enter.
- Type "cmd saveenv" and hit enter.
- Type "cmd fsboot" and hit enter.
- Your phone will boot properly.

Tags: downgrade, firmware, iphone

Permalink | 37 Comments | 48 Linkbacks


iPhone 1.1.1 restore mode verbose boot captured on video

Posted by natetrue 40 weeks ago

Hey guys,

This won't mean jack squat to most of you but I've managed (with the help of the iPod Touch dev team) to boot the iPhone in restore verbose mode which will hopefully give us some insight into what we can do to crack the new firmware.

I trained my trusty Canon XH A1 HD videocamera at it with a high shutter speed to make sense of the quickly passing images. Check out the video and stills below.

I'll go through and translate it by hand to make things clearer.

Tags: boot, firmware, hacking, iphone, verbose

Permalink | 23 Comments | 8 Linkbacks


New iPhone 1.1.1 firmware out, we're trying to get into it

Posted by natetrue 40 weeks ago

Yo guys, the latest iPhone firmware just came out. I can confirm that it is encrypted like the iPod Touch firmware, and so far no one has cracked it open to view the files. We're working our hardest on this.

My recommendation is not to upgrade, if you have a modded phone (ringtones, fake activation, ANYTHING third-party), until we have more information. If you want to upgrade, restore your phone first with the old firmware by holding Shift while clicking Restore in iTunes (Command key if you're on Mac) and choosing the 1.0.2 firmware first, then upgrading once the restore has completed.

DO NOT UPGRADE IF YOUR PHONE IS UNLOCKED.

Let me say this too: The iPhone firmware version 1.1.1 invalidates ALL iPhone software hacks.

We will bring you more news as it develops.

Tags: encrypted, firmware, iphone, saladpants

Permalink | 24 Comments | 7 Linkbacks


iPhone firmware 1.0.2 released and analyzed, hopes for new features dashed

Posted by natetrue 45 weeks ago

Alright, here's the skinny on what's changed in the new iPhone firmware (1.0.2):

- /private/var/db/localtime has been changed from a file to a symlink, looks like a fix related to time zones.

- The kernel caches in /System/Library/Caches/com.apple.kernelcaches/ have been changed. So a few changes in the kernel. The new kernels are actually smaller by about 6 kilobytes.

- The Info.plist for the Multitouch driver in /System/Library/Extensions/AppleMultitouchSPI.kext has been changed. This corresponds with what appears to be reprogrammed multitouch firmware, possibly fixing some multitouch issues for some.

- A few files have been rearranged, for the IOKit, MultitouchSupport, OfficeImport, and System frameworks (/System/Library/Frameworks). Looks like they've replaced some static folders with symlinks into the Versions folder of each framework. Possibly a backward compatibility move? I'm just thinking out loud here. Might just be a "prettiness" upgrade for the iPhone devs at Apple.

- dtmf-#.aif and dtmf-*.aif in the TelephonyUI framework have both been changed. I have no idea why; the sound files that play when you hit * and # on the phone keypad are in /System/Library/Audio/UISounds, not with the TelephonyUI framework. New files are about 4kb smaller.

- /usr/libexec/lockdownd has been changed, now it's 8 bytes longer. I'll infer that there was only one bug fixed in the Lockdown daemon, possibly addressing some synchronization or activation issues.

What does all this mean?

- No new application features, and no new applications.
- A few bug fixes but nothing major.

All in all a disappointing update. Let's hope the next one brings us some more finger candy to chew on.

Lastly, I have updated iBrickr to work with the new firmware. Check it out if you have Windows and want an easy way to install ringtones and apps.

For those interested, here's the raw output from my comparison program:
43 -> 1067 ./private/etc/resolv.conf
1017 -> 1067 ./private/var/db/localtime
-> 128 ./sizes.pl
3262608 -> 3261992 ./System/Library/Caches/com.apple.kernelcaches/kernelcache.release.s5l8900xrb
3262608 -> 3261992 ./System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8900xrb
67707 -> 67315 ./System/Library/Extensions/AppleMultitouchSPI.kext/Info.plist
0 -> 1067 ./System/Library/Frameworks/IOKit.framework/Resources
0 -> 1067 ./System/Library/Frameworks/IOKit.framework/Versions/Current
0 -> 1067 ./System/Library/Frameworks/MultitouchSupport.framework/Resources
0 -> 1067 ./System/Library/Frameworks/MultitouchSupport.framework/Versions/Current
0 -> 1067 ./System/Library/Frameworks/OfficeImport.framework/Resources
0 -> 1067 ./System/Library/Frameworks/OfficeImport.framework/Versions/Current
0 -> 1067 ./System/Library/Frameworks/System.framework/Resources
1407008 -> 1067 ./System/Library/Frameworks/System.framework/System
1407008 -> 1067 ./System/Library/Frameworks/System.framework/Versions/B/System
0 -> 1067 ./System/Library/Frameworks/System.framework/Versions/Current
12238 -> 8772 ./System/Library/Frameworks/TelephonyUI.framework/dtmf-#.aif
751480 -> 751488 ./usr/libexec/lockdownd

Tags: 1.0.2, analysis, beephone, firmware, iphone

Permalink | 8 Comments | 15 Linkbacks


You are not logged in.
Log inRegister now!