iMatrix video recording (on German)

A look at belongings to come...

Finished in software system from 4.6

News: I just bricked a telecommunicate, and when I say bricked, I mean bricked. These bootloader hacks square measure serious. I ready-made a really dullard literal error, and it probably monetary value me a telecommunicate. When I go home, I will look at the phones I have in pieces; maybe here is no access I unnoticed. Maybe this is a sign I should put down the iPhone.

I am excavation on a attender for 4.03.13 that will run and withdraw post bootloader. This is the better way to withdraw 1.1.3

Ok, since I've gotten requests for it, the transfer link to the bootloader downgrader is at the end of this compose. Acknowledgement to the dev team for the WP# discovery. I didn't good person my telecommunicate with this, I bricked my telecommunicate by typewriting 0 instead of 3FA000, but use immoderate caveat. I haven't included a spotted bootloader, hopefully if you square measure victimisation this, you have the skills to patch a bootloader. Here, don't say I didn't order you.

Infineon, we have a question

The 3G bootloader is sig patterned by the bootrom. So even removing the NOR and fixture the bootloader(to remove piping fw sig checks) and piping firmware doesn't work for an withdraw. Big acknowledgement to TA_Mobile for dumping the NOR and confirmatory this. You have no real skills.

The X-Gold 608 is the chip old. The lame "datasheet" infineon gives us shows the implements of war RSA and the secure bootrom. So we have a real question. Even if we find an unsigned encrypt put to work, which wasn't finished for the former deuce bootloaders in software(we remuneration tricks to play with the nor), we still can't unlock.

Even though the bootloader isn't easy for transfer, theres really zero here. This bootloader doesn't be some of the synergistic modality functions, just a stub which is precise like to the old bootrom(but with sig checking). The synergistic attender is tacked on to the end of all fls and eep file, and is soused at 0x86000. BBUpdaterExtreme contains various ramloaders as well, but I disbelieve the one old is from the news file itself. You do not requisite the bootloader to work on the baseband, you just requisite the files off the ramdisk. Also newsworthy to note, the 2 rsa keys the bootloaders use haven't denaturised since 3.9 or 4.6 So you have these too.

Putting to death CommCenter on 2.0 kills the wi-fi, which will make excavation with the baseband a bit harder. Change of location synergistic modality is nowadays finished with a call to the meat to raise an I/O pin before resetting.

The first step to tackling this is dumping the bootrom. We requisite no put to work, I don't care where, to dump discretional storage device. Point we can dump 0x400000, which is the new "secure" bootrom.

Boot agenda finished!

Well, that was quick. See, I can actually get belongings finished beautiful quickly when it doesn't consisting of scrap my head against machine encrypt until it starts component sense. When I actually have the drivers, belongings like this square measure easy.

You can use the Hold button to switch between the agenda items (and the derivative will be highlighted). You can decide the home button to pick out it. The "openiboot comfort" derivative takes you to the command-line surface like to the one I incontestable in the last post (you do have to be obstructed in via USB and victimisation the openiboot case to talk to it). The "iPhone OS" derivative chainloads a copy of iBoot stored in NOR low-level other identifier ('ibot' becomes openiboot and 'ibox' becomes the existent iBoot). I got that set up with a slightly restricted turning of the QuickPwn ramdisk, but in the future an installer ready-made from a restricted turning of LogoMe can be run from userland to instal openiboot. It's also possibility to get openiboot to instal openiboot (little like the way GRUB can do it); I'll probably work on that next.

So if anyone likes living on the hurt edge, they could do that. =P

Least of the hard part was me failing at GIMP golf shot unneurotic the boot agenda artwork. I appealed to you communicate readers for artwork before, but basically no one responded. Nowadays that here is a excavation model of what I take of want, I hope here will be more than of a response.

So, please gratify gratify plan the boot menu for me. And possibly come up with a logo for the project we can stick on here. If you're good at this take of thing, or know person United Nations agency is, gratify put them in touch. This stuff will obviously get a lot of attracter in the future and we requisite nice eye-candy. Acknowledgement!

Cowl 1.0

Presenting a new free tool for your iPhone - coded entirely twenty-four hour period 4-hour interval in past 8 time period. :) The thing is known as Hood, and it will add a quickly comprehensible panel to your iPhone that allows you to switch AirPort, Bluetooth, kill active exercise and monitor the storage device activity in real time.