Reports that were circulating on the internet that new iPhone 3GS in unjailbreakable due to an update on the Bootrom but it turns out that only with a small modification, the new iPhone’s are still hackable according to iPhone hackers.

It’s not going to be impossible to jailbreak even if the exploit we used is gone.

That is what Eric McDonald, a member of the Dev team said relating to the new iPhone 3GS.

As the new bootrom ruins the 24kpwn exploit, the only actual problem is starting up the device after turning it off but as off now, users will have the possibility of a tethered jailbreak (means the device needs to be connected to the computer) until an untethered one is created.

Eric claims that this is only a momentary inconvenience as he believes the Dev Team will soon find a new exploit.

Geohot released a Windows jailbreak called “blackra1n” which is similar to redsn0w in that it covers multiple devices (and it covers beyond just firmware 3.0.1 where redsn0w currently stops).  blackra1n is not a carrier unlock.  You must always avoid updating your baseband to maintain your unlockability.  If you use blackra1n to jailbreak 3.1 or 3.1.2, the steps you take before running blackra1n will prevent the unlock from working on your iPhone for potentially a very long time. By the way, we haven’t yet tested whether a blackra1n’d device can accept a custom IPSW without tweaks, but if it doesn’t then it should only require a minor change.

Not only that but Chronic Dev team have also claimed that the exploit was found by them.

This completely enraged GeoHot whos immediate reaction was to stop working on the jailbreak for the iPhone and iPod Touch.

But apparently he has now cooled off and has edited his post on his website.

And prepare to meet the program that will jailbreak them all.
Minor setback today, when Chronic revealed the exploit that this will use. For apparently no purpose except to save face in front of their donators. Future reference, never donate until you have a product in hand and working. Look, as much as I fight with the dev team, they always have the community’s interests at heart, maybe even more so than me. But chronic just stomped all over what the community wants. Who can actually do something with the info they released? Well, you know, Apple.

So it seem like GeoHot will continue working on his jailbreak tool. The race is on between Chronic dev team and GeoHot about who can release the tool quickest and claim the jailbreak!

GeoHot has released a new articles on his website with the above photo and an exciting message. The title of the articles is ‘Meet the Family’ and the message was:

And prepare to meet the program that will jailbreak them all.

So it seems GeoHot has found an exploit that works on EVERY iPod Touch and iPhone out there including the new iPhone 3GS and iPod Touch 3rd generation.

Another comment he made on in comments on the articles is:

No affiliation to greenpois0n. and it’s in some ways the complete opposite of purplera1n. but still 10 seconds. and may work for every version of software *ever*, based on the prettiness of the exploit

So the jailbreak is not related the the Greenpois0n jailbreak made by the Chronic Dev Team.

]]> http://blog.alltechrelated.com/2009/10/06/geohot-meet-the-family/feed/ 0 http://blog.alltechrelated.com/2009/10/05/sn0wybreeze-porting-pwnagetool-for-windows/ http://blog.alltechrelated.com/2009/10/05/sn0wybreeze-porting-pwnagetool-for-windows/#comments Mon, 05 Oct 2009 14:18:02 +0000 psp2468 http://blog.alltechrelated.com/?p=6266 The creators of iReb, iH8sn0w, have announced that they are launching a new project called Sn0wybreeze. Until recently this remained a mystery as to what this meant or was. However, new information has come to light and iH8Sn0w are working on porting the OS 3.1 PwnageTool currently only for Mac to Windows!

New WinPwn here we come!

The Sn0wybreeze program will therefore allow you to make custom IPSW files on Windows.

Rumor has it that the program will NOT be compatible with the iPhone 3GS but will be for the iPod Touch 2nd generation.

There estimated time of release is October 12. Beta testers will be needed once they have madea stable built.

We will keep you guys posted as more info is released!

The DevTeam have finally managed to crack the 3.1 jailbreak on the iPhone 3GS and the iPod Touch 2nd Generation! The jailbreak is using the PwnageTool tool created by the Dev Team.

I’m afraid the jailbreak is yet again only for Macs. However, for Windows users I shall try and find some custom IPSW so you can install it straight away.

Also, for the jailbreak to work, you need to have pwned (with Pwnage Tool or Redsn0w) your iPhone, iPod Touch on 3.0 or 3.0.1 before hand.

The iPhone 3GS is now supported in PwnageTool 3.1.3, assuming the phone was pwned at 3.0 or 3.0.1 – PwnageTool does not support the 3GS out of the box. If your iPhone 3GS has 3.1 preinstalled and is not Pwned then there is no tested jailbreak solution at the moment.

The iPod 2G is now supported in PwnageTool 3.1.3, assuming the iPod 2G was pwned at 3.0 or 3.0.1 – PwnageTool does not support the iPod 2G with 3.1 software out of the box.

If you are currently on 3.1 with your iPhone and have not saved your SHSH using Cydia, you will not be able to jailbreak using this tool.

Click to download: PwnageTool 3.1.3 (575)

Here is a guide taken from DigitalMarketingTalk on how to do this jailbreak. The guide is done using an iPhone 3GS on a Mac. However it is the same principle for the other devices.

1) Create a folder named Pwnage on your desktop. In that folder download the following files

i) Pwnage 3.1.3: Download it from here: PwnageTool 3.1.3 (575)
ii) iPhone 3GS 3.1 firmware: Download it from here – Link

(Please use firefox instead of safari if not it will be downloaded as a zip file)

2) Mount PwnageTool 3.1 by double clicking PwnageTool_3.1.dmg and drag the PwnageTool icon that opens up, into the Pwnage folder.Then from the Pwnage folder double-click PwnageTool application.

3) Select “Expert Mode” from the top menu bar.

4) Select your iPhone (In this case iPhone 3GS) and click the blue button to continue.

5) Now browse for the IPSW file. Remember you downloaded it in Pwnage folder. (In some cases it may automatically be found).
Click on the IPSW file, if you do it right, a green check mark will appear next to it. Now click the blue button to continue.

6) On the following screen you will see 7 different options.

Inside General settings DO NOT CHECK ‘Activate the phone’ option. Repeat: Since you are using an iPhone 3GS, irrespective of whether you are on an official carrier or not, you always need to make sure that the option is UNCHECKED.
Increase the size of the root partition slightly. To about 695 MB. Then click blue button.

Skip the Bootneuter settings by just clicking the blue button.

You will then be taken to Cydia settings where you can create custom packages so you don’t have to manually install them later.

Select the Download packages tab. Then click the Refresh button to display all the available packages. Double click the package that you want to download in order to make it available in the Select Packages list.

In the Select Packages tab, check the packages you want and click the blue arrow button.

On the following Custom Packages Settings screen. Leave all the settings as it is and click the blue arrow button.

You will then reach the boot logo settings. Just skip this step and click the blue button.

7) On the following screen click the “build” button to start the pwnage process (i.e build your own IPSW file).

8 ) Save the custom firmware(IPSW file) in Pwnage folder on the desktop (which you created in step 1) and wait for about 15 mins for it to be built.

9) Enter your administrator password.

10) Whether or not your iPhone has been pwned before just select NO on the next screen.

11) Keep your iPhone connected to your mac and switch it off, when indicated.

12) Now the part where you have to pay rapt attention and follow directions to enter DFU mode.

i) Hold the home and power buttons for 10 seconds.

ii)Release the power button and hold the home button for 10 seconds.

On doing this you will get a notification that reads successfully entered DFU (recovery) mode.

13) In iTunes, hold the Alt/Option key and click restore simultaneously. A new window will open where you can select the CUSTOM firmware that you built in step 7.

14) Browse to the Pwnage folder on your desktop.Select iPhone2,1_3.1_7C144_Custom_Restore.ipsw file and click the choose button. (REMEMBER: you have to choose CUSTOM IPSW in this step)

15) iTunes will then restore your iPhone 3GS using the custom firmware in about 15 minutes.

16) You will then get the option of setting up your iPhone either as a new phone or restoring from backup.

17) Now just restart your iPhone and you will find cydia on your springboard.

That’s right! Finally some good news for the iPhone 3GS users! The Dev Team have finally managed to jailbreak the iPhone 3GS on firmware OS 3.1.

However it has not been released yet. They still have some kinks to be smoothed out however the wait shall not be too long.

This means that the exploit works on the iPhone 3GS and the PwnTool will soon be compatible with the iPhone 3GS!

The tweet was done by the Dev Team member called Cpich3g on Twitter:

3gs 3.0 pwned->3.1 pwned. Props to Musclenerd, Wizdaz and thanks Bumble-Bee & ToddJG for testing. tinyurl.com/y8sr4p3 tinyurl.com/y8z277l

Well know, the group have released a new video hoping to silence all the haters out there and to show off a bit more of their custom firmware.

www.youtube.com/watch?v=svhi22E4d9I

Do you guys think it is real?

They stress that if you want to do future iPhone 3GS jailbreaks, you need to add a bypass to a certain file to to ensure that you will be able to jailbreak. This bypass will use a certain file from Saurik’s servers rather than Apple’s servers.

If there’s one thing we’ve been stressing the last few weeks, it’s that if you want to keep the jailbreak or unlock on your 3GS, you should resist all urges to install Apple’s official firmware updates without knowing if a jailbreak exists for that version yet.  Unless another (different) bootrom exploit is found for the 3GS that doesn’t require a “foot in the door” with a signed official iBoot, then accepting official updates willy-nilly may cause you to be cutoff from the jailbreak.  And it will definitely cause you to be cutoff from the carrier unlock.

Now, there are ways to ensure that even after taking an official 3GS update (which you really shouldn’t do!), that you’ll nonetheless be able to revert to a jailbreakable 3GS (this is NOT true for the unlock, see NOTE #1 below).  We’ve been explaining these methods (like the iTunes /tmp technique) over the last few weeks, and there’s been some great discussion and feedback for the methods in the comments.

Having said all that, we realize that some of you updated your 3GS to 3.1 anyway.  If you want to come back to the world of the jailbreak (but NOT the sim unlock, sorry!) then saurik’s new “on file” server may be able to help.  He’s got all the details in a new article so do check it out.

Even if you did not update your 3GS to official 3.1 (good job!  You really shouldn’t do that!), then you should still read the article and make those changes today.  We fully recommend redirecting your iTunes signing process through saurik’s “on file” server to future-proof your 3GS jailbreak through all future updates.

NOTE #1: the carrier sim unlock is a different story.  Jailbreaking and unlocking have two different security mechanisms, and if you update your 3GS (or 3G) to 3.1, you will lose your carrier unlock, possibly forever.  Even if you downgrade from 3.1 to 3.0, you will have lost your carrier unlock.  So if you think you’ll ever want to carrier unlock your 3G or 3GS (or maybe give it away or resell it later as an unlockable iPhone), then please stay clear of all official Apple IPSWs.  You’ll soon be able to create custom 3.1 IPSWs using PwnageTool that let you pre-hack your 3.1 update in a way that preserves the carrier unlock.

NOTE #2: The custom IPSW flow using PwnageTool also ensures that even if Apple fixes all the iBoot holes, you’ll still be able to retain your jailbreak through later updates.  That’s because a jailbroken iPhone will happily accept a custom (pre-jailbroken) firmware update even though it’s not blessed with Apples signatures.  This is the “once jailbroken, always jailbroken” approach.  It’s very powerful, but it requires you to only update to pre-hacked IPSWs.

NOTE #3: None of this applies if you have an iPhone 2G, iPod touch 1G, or iPod touch 2G.  The iPhone 3G is also unaffected by Apple’s signing process for the jailbreak, but it is susceptible to permanent loss of the carrier unlock as mentioned in note #1.

Again, if you have already updated to OS 3.1 , Saurik has posted a guide showing how to downgrade back to OS 3.0.

The Dev Team have posted an interesting article on their website discussion that iPhone users may be being tracked as Palm Pre users are. They have clearly taken some time away from jailbroken and looking around for security holes and such.

Here is a copy of the original article:

Last week, Joey Hess revealed that the Palm Pre running on WebOS uploads very specific information about your location and application usage to Palm on a daily basis.  Although it’s allowed by the EULA that you must accept to use the Palm Pre, it still seems a little…creepy, especially if used for the wrong reasons.  The only “bright” side to this story is that it was for the Palm Pre, not for the iPhone.  Apple has been in the news a lot lately for its AppStore shenanigans, but at least they don’t go so far as to track your location.  Right?

Well, sort of.  Although we have yet to find an application by Apple that tracks your location, there are certainly a number of “free” applications in the official AppStore that are designed to do just that.  Case in point:  there’s this rather cute/gimicky app that lets you determine the tip for your waiter or waitress by tilting your phone as you pass it around the restaurant table.  But if you dig a little deeper (like bushing did) you’ll find it uses a library by Pinch Media that is specifically designed to track your geographical location through time, then upload that data to Pinch Media.  (Oh and it also show you an ad, as an extra bonus).

Being an approved app, it must first ask you for permission to use your location.  If you tap “Don’t Allow”, it will ask you again in about a minute, the next time its ad changes.  So you either stop using this app (because it pesters you so much about the location question), or you finally submit and tap “OK”.  From that point on, your location and path info (your actual physical path through your area each time you launch the app) belongs to Pinch Media, Inc. We think that’s a Pinch too much.

Update: A commenter named fusen pointed out this post by 0th3lo. who details Pinch Media’s SQL info (it includes your gender and birthday, when possible) and goes so far as to say “no doubt, ANY pinchmedia iPhone application is spyware”.  Maybe it’s time to pressure Apple to boot Pinch Media apps from the AppStore?

Scary stuff!

Worms

Worms is definitely one of, if not the biggest AppStore release this month. It is a port of the Classic Worms game done by Team 17. The port is done expertly and excellently making it a fun, addictive game on the AppStore.

The game offers hours of fun with its 6 different environments and infinity amount of random battlefields meaning no two games will ever be in the same place.  The environments include a lava land, snow land, on an iceberg plus 3 more.

All the weapons.

1. Quick Game: The name says it all. If you have a spare 5 minutes, this is the choice to go with. It launches you straight into a 1 team vs. 1 team scenario. There is a time limit which seems to vary each turn. It also gives you three different difficulties for you to choose from (easy, medium & hard).
2. Practise Mode: This is a mode, as Team 17 say it, where you can hone your skills with various weapons and utilities. In this mode there are enemies but they don’t attack you. There is Unlimited time so you can test things without having to hurry. I have played around with this learning all the different weapons and utilities the game has to offer. I would definitely recommend playing this mode before starting the actual game (especially if you don’t really have much experience with ‘Worm’ games like me).
3. Challenges: This is where you can try and beat 50 different challenges. These can vary from 4 to 3 team games. In this mode you can unlock different weapons and utilities. In these challenges, it gives a ‘mood’ to each one of the teams, for example some are ‘Cocky’ or ‘Reckless’ or ‘Vengeful’. The objective is simply to destroy all the other teams worms.
4. Multiplayer: This game does not come with any adhoc or online multiplayer which is a bit of a disappointment however Team 17 have announced on their Facebook page that ‘Bluetooth & Online multiplayer coming in future updates.’ The multiplayer means you can play on the one device.  You can add both ‘human’ teams and ‘computer’ teams. You can play with up to 4 different teams and play on 10 different game styles including ‘Melee’ & ‘Gun Show’ & ‘Sudden Death’.

You can also make your own teams where you can edit the name, the speech that the worms have (Drill Sargent, Irish, Rasta, Swedish, English, US Sports plus more) and you can edit the gravestone of the dead worms. You can also play your own music at the same time as playing the game which is good.

Editing teams.

They also have a tutorial section which is very helpful for first time ‘Wormers’ like me. From there I learnt:

• Tapping the worm makes it jump – Double tapping makes it do a backflip.
• By putting two fingers on the screen you can move the camera.
• Pinch the screen to zoom in/out of the arena.

I have read quite a few people complaining that the game is VERY slow on the iPhone 3G and original iPhone.

I currently find the game frustratingly hard to play due to slowdown..

Enjoying it, but the performance needs a lot more tweaking. Especially on us 1G users.

Runs great on 3GS

As the last quote says, there are no problems for me on my iPhone 3GS but clearly, there are some performance problems with the older iPhones.

I do find this game quiet hard to grasp being a first time player of Worms and the controls of the game can be quite difficult. As Gizmodo put it, this game is all about precision and the touchscreen, and sometimes the accelerometer, make it hard to be as accurate as you would like to be.

That sucks a bit of the fun out of the game but I still think it is great game and can be quite addictive.  Since installing the app on my iPhone a few days ago, I have played it everyday.

If I were to give the app a rating it would probably get a 4/5. It has great potential and with some tweaks to the controls, it would be a must have to all iPhone/iPod Touch owners.

The game costs $4.99 [iTunes Link] and is created by Team 17.

One of the tutorial pages.

Menu screen.

One of the tips the game gives at the start of each game.

There is no readme included but the installation is pretty simple.

Just stick the gpSP_Mod folder in your PSP/Game/ folder and launch it.

Click to download: gpSP Mod ChickHEN (256)

The Dev Team, the creators of most of the well known jailbreaking tools such as Quickpwn have released a post explaining that the iPhone OS 3.0 is still jailbreakable. However, they shall now release a jailbreak for  it because Apple keep releasing news beta but when the final version is released, they shall release a program to jaibreak it.

The Dev-Team may not be releasing jailbreaks for the OS 3.0 but Russian hackers have released their own ‘unofficial’ Quickpwns to jailbreak beta 3 and beta 4.

Here is a copy of the original post:

Apple just released the fifth beta of their 3.0 OS.  Back when 2.0 was still in beta, they released about nine beta firmwares, so it’s reasonable to assume we’re about half way through the 3.0 beta process.

As should be expected, the modern devteam jailbreak process is still valid.   The picture below is 3.0beta5 jailbroken on an iPhone 3G.   As we’ve said in previous posts, nothing other than a hardware respin can prevent our jailbreak from working on all exisiting iPhone and iPod Touches.  They’ve chased our jailbreak so far down in the chain of trust, the only way they can fix it is in hardware.

Because there are so many beta releases, we couldn’t possible refine, test, and release both PwnageTool and QuickPwn for each of them.  That’s why we’re waiting until the final release.  You may have seen other “hijacked” versions of QuickPwn out there, but all of them are buggy, none of them work on OSX, and almost everyone who uses them reverts back to 2.2.1 (because none of the useful jailbroken apps (Qik, Cycorder, and others) work on 3.0 yet).

But this is a good time to remind everyone.  If you care about the yellowsn0w unlock, don’t go anywhere near the beta releases. You will lose your unlock, possibly forever.

From Dev-Team

Version 2 has been released! Version 2 actually plays homebrew unlike this version.
Here is the details that Davee released with the HEN:

What does the ChickHEN do?

ChickHEN as a Homebrew Enabler that allows the execution of homebrew via the PSP XMB. Running via a vulnerability in the lib TIFF the launcher takes advantage of the system by performing a kernel exploit and rebooting into a homebrew enabled enviroment. The ChickHEN remains active until the PSP is fully reset in which case official firmware loads from the flash. ChickHEN unlike other HEN’s doesn’t touch the flash0 and resides completely in memory. The h.bin supplied in this download consists of a loader and systemex, which is a inversed order of systemctrl and rebootex

What ChickHEN does NOT do?

• Run ISO, CSO or any other form of UMD backup.
• Run PSX Games
• Touch The Flash of your beloved PSP
• Magically allow the use of Custom Firmware
• Load plugins

Make sure you read the readme included in the download for instructions on how to install etc.

Click to download: ChickHEN for PSP-3000 (135)