The iPodTouchMaster Cydia Repository is NOW LIVE!! More Info

GeoHot Posts Entire Source Code for iPhone 3GS Unlock

Uncategorized | Tuesday July 14 2009 1:01 am | Comments (0) Tags: , , , , ,

GeoHot has posted information on how he executed the iPhone 3GS unlock and also posted the entire source code for PurpleSn0w.

—–
About a year ago today, I found the at+stkprof exploit. Back then, I struggled for 3 days to write a payload. No luck, I just wasn’t a good enough reverser. So I stashed the exploit away until December, when I gave it to dev for use in yellowsn0w.

Now a year later, I wrote a payload and delivery system in a day. And it’s an awesome payload. Ideally we’d like to patch the lock out of flash, but with the apparently proper sig checks, that isn’t going to happen. So purplesn0w is the next best thing. I copy the page I want to patch to an unused region of memory. In memory I patch it. Then, using the MMU, I map the flash page out and remap the patched memory page in it’s place.

No new iPhones are really unlocked, activation creates a ticket allowing the baseband to be used with that sim. The lockstate of the phone really lies on apples servers. Unlocked is auth all sims. Locked is auth AT&T sims only. Fortunately this ticket system provides an easy way to deliver the payload and reexecute the patched code all in one. And since the ticket is already delivered on baseband resets, theres no need to write another daemon to hog battery. I use the daemon already designed for this, lockdownd. A patch to commcenter gets it to run the payload on ticket delivery. And a patch to your activation record contains the payload. So using existing machinery, I unlock when needed.

In retrospect, I should’ve just patched commcenter to send the payload. Then hacktivation would work no problem. Oh well, tomorrow is another day.

Here is the source. And I mean all of it.
—-

Read More


Related posts:

  1. iPhone Dev-Team Updates UltraSn0w Unlock, Discusses PurpleSn0w
  2. GeoHot Announces RC2 of His PurpleSn0w Unlock
  3. GeoHot Explains How the PurpleRa1n Jailbreak Works
  4. How to Unlock the iPhone 3GS Using PurpleSn0w
  5. UltraSn0w iPhone Unlock to Support PIN-Locked SIMs

Related posts brought to you by Yet Another Related Posts Plugin.

No Comments »

No comments yet.

RSS feed.

Leave a comment