MuscleNerd has post his presentation slides at the Hack in the Box security conference via twitter today. His presentation at Hack in the Box is mostly about the iPhone’s baseband, the various unlock mechanisms developed by the community, and Apple’s technological response to their tampering.
At one point in the presentation, MuscleNerd mentions Apple’s recognition of the unlock community. Starting with the iPhone 4, Apple programmed the baseband to look for message tampering (the method used for iPhone 3GS carrier unlocks). Amusingly MuscleNerd notes that the debug log Apple left in the baseband contains typos referring to “tambering.” In order to combat tambering, the iPhone 4 contains a DEP mechanism dubbed “crossbar.” MuscleNerd and Planetbeing developed a workaround which they implemented in UltraSn0w, the details of which are in the iOS Hacker’s Handbook.
A particularly useful bit of info included in the talk is the chart on Baseband brickability near the end. To ‘brick’ a device is to render it inoperable, or ‘about as useful as brick.’ Although in the case of baseband bricking “only” means that WiFi, data, and bluetooth are inoperable.
Fortunately, newer phones like the iPhone 4 and 4S have basebands which are not brickable with erased or tampered bootloaders, making baseband unlocks on current hardware as safe as jailbreaking. The iPhone 3G and 3GS basebands are only brickable if one of the two bootloader pages are empty, and the original iPhone’s baseband can be bricked if the bootloader image crashed due to bad code. What this shows is that while Apple has made it harder to unlock the baseband, they’ve functionally made it impossible to absolutely break it through tampering.
Here's how you can prepare for the new untethered jailbreak solution for iOS 5.1.1
If you did not perform a jailbreak to your device then the situation is very simple because you just have to make a backup with iTunes / iCloud and information from your terminal will be saved. After making a backup you can use the Update button in iTunes, Backup option in iCloud, or OTA Update from your device (Settings>General>Software Update) for updating without deleting data from your terminal. Important to remember is that if you restore, NOT update, will delete all from the device, and the backup does not save all the pictures, messages or any applications installed from other accounts.
If you did make a jailbreak to your device and not interested to save all the applications or tweak’s downloaded through Cydia, then you can follow all the instructions above.
If want to save the applications from Cydia then you can use applications such as xBackup or PKGBackup to save and restore after reinstalling the packages. Pirated applications cannot be saved and reinstalled automatically after restore, so do not expect it. All pirated applications will be deleted during the update or restore process.
After making the iOS 5.1.1 update and have everything reinstalled just wait for Absinthe 2.0 and that's all.
Absinthe 2.0, first will work on all the Apple devices if they have installed iOS 5.1.1, excluding only Apple TV 3rd generation. Absinthe 2.0 will be also compatible with iOS 5.1, however, iPad 2, iPad 3 and iPhone 4S must be updated to iOS 5.1.1.
Here’s the list of compatible devices with Absinthe 2.0
Terminals compatible with Absinthe 2.0 running iOS 5.1:
- iPhone 3GS;
- iPhone 4;
- iPod Touch 3G;
- iPod Touch 4G;
- iPad 1.;
Terminals compatible with Absinthe 2.0 running iOS 5.1.1:
- iPhone 3GS;
- iPhone 4;
- iPhone 4S;
- iPod Touch 3G;
- iPod Touch 4G;
- iPad 1;
- iPad 2 Wi-Fi;
- iPad 2 3G;
- iPad 2 2012;
- iPad 3 Wi-Fi;
- iPad 3 Wi-Fi + 4G;
0 comentarii:
Trimiteți un comentariu