1. Close up some PDF exploites

2. Disable Jailbreakme.com from working

Of course, I am most concerned with the latter but the former also poses some problems.

The problem, apple’s release only helps out the newer devices and leaves the older models out in the sun. Fortunately, the dev team is very considerate and has released a patch that removes the exploit for all users.

The fix is installable via Cydia itself now (search for “PDF Patch”).  To test that it’s working properly, visit jailbreakme.com again.  After you slide to jailbreak, you should no longer see a dialog box pop up (you’ll just see the star background).  That means you’re no longer vulnerable!

We love you dev team!

So, do this:

DO NOT INSTALL iOS 4.0.2 -> unless, of course, you want to lose your jailbreakme

INSTALL the PDF Patch in Cydia

Rejoice!

rooster

What is not supported. . . yet!

• iPhone 2G
• iPod Touch 1G
• iPod Touch 3G

Supported Devices:

• iPhone 3Gs

Summary: Currently, PwnageTool only works on previously jailbroken 3GS devices with the old bootrom.

• If you have a Jailbroken iPhone 3GS with the OLD BOOTROM and you DID NOT use Spirit to jailbreak then you can create the ipsw with PwnageTool 4.0 and restore with your jailbroken recovery mode.
• If you have an iPhone 3GS with the NEW BOOTROM this is NOT supported by PwnageTool 4.01

• iPhone 3G

Summary: Currently, PwnageTool only works on previously jailbroken 3GS devices with the old bootrom.

• If you have a Jailbroken iPhone 3G at 3.1.2 (but not jailbroken with Spirit) then you should create the ipsw with PwnageTool 4.01 and restore from recovery mode or DFU mode.
• If you have an out of the box iPhone 3G you should restore using a PwnageTool 4.01 ipsw using DFU mode.
• If you have a Jailbroken 3.1.3 iPhone 3G it is very possible that this can fail from recovery mode, if this failure happens you will need to restore using DFU mode.
• As an alternative to PwnageTool, you can use redsn0w on iPhone 3G (on both Windows and Mac) as mentioned in our last post.

*Remember: whenever entering DFU mode, use PwnageTool

• iPod Touch 2G

• If you have an iPod touch 2G (non-MC model) that is jailbroken (but not with Spirit) then you can restore using recovery mode.
• As an alternative to PwnageTool, you can use redsn0w on non-MC iPod Touch 2G (on both Windows and Mac) as mentioned in our last post.

DOWNLOAD ME!

rooster

DISCLAIMER: Do this at your own risk

Downloads

Here’s a bunch of stuff that you’ll need before you start:

1. IMPORTANT! Jailbroken iPhone 2G only!!!!
2. VirtualBox Get the right version Windows/Mac
3. VirtualBox Ubuntu Image.  Download number 10, Ubuntu Linux 9.10 codename Karmic Koalax86
4. iPhone Explorer.
5. Android images and sources
6. Patched images.

Preparation

Let’s get some of the basics out of the way:

1. Open Task Manager
2. Kill the iTunes Helper process
3. Install iPhone Explorer
4. Connect your iPhone to your Mac/PC
5. Run iPhone Explorer
6. Click the Change Root button
7. Select “/” Real iPhone Root Directory
8. Browse to private/var
9. Copy ramdisk.img, userdata.img, cache.img and zImage from Downloads#5 (Android images and sources) to that var directory
10. Copy system.img and android.img.gz from Downloads#6 (patched images) to the that var directory
11. That’s all the Android files on your iPhone, now to make them run!

Setting Up Virtual Box

1. Install VirtualBox
2. Open VirtualBox
3. Go on File > Virtual Media Manager
4. Make sure Hard Disks is selected
5. Click Add
6. Locate the ubuntu-9.10.vdi file (download#3) and select it
7. Close Virtual Media Manager
8. Go on Machine > New
9. Click Next
10. Under Name enter “Ubuntu”
11. Select Linux Operating System
12. Select Ubuntu Version
13. Click Next
14. Set an amount of RAM, the default should be fine
15. Click Next
16. Select “Use existing hard disk”
17. Select the ubuntu-9.10.vdi
18. Click Next
19. Click Finish
20. Select that new machine to start up Ubuntu
21. The password to login is: reverse

Setting Up Ubuntu

Almost there – if this feels a bit long, just consider how short and simple each step is!

1. Click System (top bar) > Administration > Synaptic Package Manager
2. Enter the password: reverse
3. In the quicksearch box, type libusb-1.0, click the Check Box next to libusb-1.0-0 and select Mark for installation
4. In the quicksearch box, type libreadline, click the Check Box next to libreadline5 and select Mark for installtion
5. Click Apply
6. When it’s all installed close the Package Manager
7. Open Firefox (in Ubuntu)
8. Download openiboot installer from here
9. Click Places (top bar) > Downloads
10. Right-click openiboot.zip and click Extract Here
11. Click Applications (top bar) > Accessories > Terminal
12. Without the quotes, type ‘cd Downloads/openiboot’
13. Restart your iPhone in Recovery Mode (power off, hold down Home button, connect to USB cable)

Getting Android Working!

Well done on getting this far! This is where the fun beings (credits to WinX Blog for these instructions –link)

1. In VirtualBox, the Ubuntu Window, go on Devices > USB Devices and select iPhone (Recovery Mode)
2. In the terminal type (without quotes): ’sudo su’
3. Enter the password: reverse
4. In the terminal type ./loadibec openiboot.img3
5. You’ll see the OpeniBoot screen appear on your iPhone
6. Hold down the power button a couple of seconds (iPhone)
7. The bottom option, openiboot console, will become selected
8. Press Home (iPhone).  You’ll see a bunch of text appear and stop at “Welcome to openiboot”
9. In VirtualBox, the Ubuntu Window, go on Devices > USB Devices and select iPhone (OpeniBoot Mode)
10. In terminal type su ./oibc
11. Enter the password: reverse
12. If this doesn’t work just type: ./oibc
13. You’ll see the same text from the iPhone in the Terminal
14. Type (without quotes) ‘nor_read 0×09000000 0×0 1048576? and press Enter
15. Wait for it to say Done
16. Type (without quotes) ‘~norbackup.dump:1048576?
17. This creates a backup of your NOR memory – save a copy on USB stick, or email it to yourself or something
18. Type install, press Enter.  When this is done you’ve got openiboot installed on your iPhone.  You’re done!

Finishing Off

What you’ve achieved up til now is Android files on your iPhone, and then installing openiboot so that you have an option to start iPhone OS or Android when you turn on your phone.  Openiboot was necessary because that’s the only way right now that you can boot into Android.  Here’s how to finish off and get into Android:

1. If you still have Terminal open with the oibc still running, just type ‘reboot’, press Enter and skip to step 3
2. If you don’t have Terminal open, disconnect your phone, turn it off and back on
3. When openiboot appears press Power button to switch to openiboot console (bottom option)
4. Hold down the Home button
5. Android will start to boot, but it might take a while

Thanks to:
planetbeing – the man who did all the hard work!
WinXBlog – guide for getting openiboot running
Geekoid – for the system images
and a huge thanks to Superhero

rooster

On the better side of things, sherif hashim has found a seemingly promising crash in the new baseband and is working hard on exploiting it for the upcoming jailbreak. Unfortunately, there is no way to tell if this crash will be good enough; the dev team promises nothing but hard work and is unable to give an ETA yet.

rooster

The Dev-team gives the details:

iPhone 3G and 3GS unlockers should always be very wary to update their firmware.  This is no exception.  If you make a mistake along the way you may find yourself updating to official 3.1.3 in which case you will lose your unlock, possibly forever.

iPhone 3GS users (regardless of unlock) should stay away from this and all 3.1.3 jailbreak tools unless you know you have your “SHSH hashes” backed up via Cydia.  That’s because if you make a mistake you may find yourself stuck at official 3.1.3 with no way to jailbreak or come back down to 3.1.2 to jailbreak.

If you really truly feel that you need to update, this version creates a custom 3.1.3 IPSW for you to restore to on your iPhone 2G, iPhone 3G, iPhone 3GS with early bootrom, iPod touch 1G, and iPod touch 2G with early bootrom.  If you don’t know if you have an early bootrom or not, please avoid updating until you learn more.

Here is the torrent link and here are further instructions. . .

Have fun but be careful.

rooster

iPod Touch Fans continues. . .

It also contains a new baseband that has not been hacked and so if you need to unlock your iPhone 3G you should avoid upgrading.

Blacksn0w has not been updated and does not work with 3.1.3 but the ever industrious Dev-Team have made a few tweaks to their recently released redsn0w 0.9 tool so that it will jailbreak OS 3.1.3 on iPod touch 1G, older models of the iPod touch 2G, iPhone 2G and contract (no unlock required) iPhone 3G.

If you’re a 3GS owner then you need to make sure you have backed up your ECID/SHSH signatures through Cydia or Rock to ensure that when Apple stop signing the 3.1.2 firmware you can restore or downgrade to 3.1.2 if required.

Sorry for the bad news, updates to come!

rooster

Big, Ugly Bezel
Have you seen the bezel on this thing?! It’s huge! I know you don’t want to accidentally input a command when your thumb is holding it, but come on.

No Multitasking
This is a backbreaker. If this is supposed to be a replacement for netbooks, how can it possibly not have multitasking? Are you saying I can’t listen to Pandora while writing a document? I can’t have my Twitter app open at the same time as my browser? I can’t have AIM open at the same time as my email? Are you kidding me? This alone guarantees that I will not buy this product.

No Cameras
No front facing camera is one thing. But no back facing camera either? Why the hell not? I can’t imagine what the downside was for including at least one camera. Could this thing not handle video iChat?

Touch Keyboard
So much for Apple revolutionizing tablet inputs; this is the same big, ugly touchscreen keyboard we’ve seen on other tablets, and unless you’re lying on the couch with your knees propping it up, it’ll be awkward to use.

No HDMI Out
Want to watch those nice HD videos you downloaded from iTunes on your TV? Too damned bad! If you were truly loyal, you’d just buy an AppleTV already.

The Name iPad
Get ready for Maxi pad jokes, and lots of ‘em!

No Flash
No Flash is annoying but not a dealbreaker on the iPhone and iPod Touch. On something that’s supposed to be closer to a netbook or laptop? It will leave huge, gaping holes in websites. I hope you don’t care about streaming video! God knows not many casual internet users do. Oh wait, nevermind, they all do.

Adapters, Adapters, Adapters
So much for those smooth lines. If you want to plug anything into this, such as a digital camera, you need all sorts of ugly adapters. You need an adapter for USB for god’s sake.

It’s Not Widescreen

Widescreen movies look lousy on this thing thanks to its 4:3 screen, according to Blam, who checked out some of Star Trek on one. It’s like owning a 4:3 TV all over again!

Doesn’t Support T-Mobile 3G
Sure, it’s “unlocked.” But it won’t work on T-Mobile, and it uses microSIMs that literally no one else uses.

A Closed App Ecosystem
The iPad only runs apps from the App Store. The same App Store that is notorious for banning apps for no real reason, such as Google Voice. Sure, netbooks might not have touchscreens, but you can install whatever software you’d like on them. Want to run a different browser on your iPad? Too bad!

As I have mentioned before, I can’t wait for the Dev Team to start hacking!

rooster

Geoshot has done a wonderful job of making this hack easy and simple to use.

Here it is!

Instructions and tips:

• Clean firmware 3.1.2 and baseband 05.11.07 are recommended.
• Blacksn0w is also available on Cydia, add blackra1n.com as repo (requires firmware >= 3.1 and baseband 05.11.07)
• Windows Tutorial
• Mac Tutorial

Known Issues and fixes:

• There is currently an issue with “push” and “youtube” but the dev-team will release a fix shortly.
• Some WiFi issues have also come up. Merely reset your “Network Settings” to fix this.

rooster

iPhone 3G

Use PwnageTool to do the magic and then restore with iTunes using your newly created .ipsw

iPhone 3G(S)

Use PwnageTool to do the magic and then restore with iTunes using your newly created .ipsw

iPhone 2G (1st Generation)

Use PwnageTool to do the magic and then restore with iTunes using your newly created .ipsw ‘nuff said, you don’t need to worry about anything, the baseband will be unlocked, the phone jailbroken.

iPod Touch 1G (Original iPod Touch)

Use PwnageTool to create a firmware image and restore with that .ipsw using iTunes.

iPod Touch 2G

Use PwnageTool to create a firmware image and restore with that .ipsw to your already jailbroken device using iTunes.

iPod Touch 3G

At this time PwnageTool does not support this device.

* the above applies to devices that HAVE BEEN PREVIOUSLY JAILBROKEN. There is no current program that will jailbreak iPod Touches who have not jailbroken before, but the dev team said they will make one if demand peaks.

* PwnageTool will create your .ipsw. Then go into iTunes and hold down shift will clicking restore to locate the .ipsw.

HERE IS PwnageTool 3.1.4

Have Fun,

Rooster

rooster