The iPhone Dev Team has found another exploit to unlock iPhone OS 3.1.3 baseband – MuscleNerd of the iPhone Dev Team has tweeted that just re-discovered a crashing command that yellowsn0w, the iPhone unlocking software was originally going to use.

What does that mean? It means he has found another working exploit for the baseband bundled in iPhone OS 3.1.3, which should help them figure out a way to jailbreak and unlock the latest iPhone OS.

The iPhone hacking community has already discovered two working exploits for the baseband 05.12.01 that is bundled in iPhone OS 3.1.3.

MuscleNerd announced on his Twitter page:

Ha just re-found crashing command yellowsn0w was originally going to use before +stkprof. Apple fixed it *accidentally* in 02.28.00.
some commands have come and gone. some command holes have come and gone. this command has come and gone but not the hole:)
it still seems accidental though :) there are no overt signs that they’ve closed the hole, but the byte alignment kills it

Apple has built in this bizzare intepreter into their baseband.

Why is it in production units? Fun!

It is still not clear whether hey’re talking about the same exploit or a different one.

In any case, the iPhone Dev Team and Geohot have at least one working exploit for the 05.12.01 baseband, unlocking iPhone OS 3.1.3 could soon become a reality rather than a dream!

Stay tuned!

- source: iclarified.com

We have good news for anyone who accidentally updated to iPhone OS 3.1.3, which in turn updated the baseband on the device. GeoHot, iPhone Hacking expert and creator of popular unlocking and jailbreaking tools, such as Blackra1n and Blacksn0w, has discovered a working exploit for baseband 05.12.01.

Geohot has tweeted the hash tag of the baseband crash “for safekeeping”:

d8b50dc95d7906e3ff6155331a534b55d0f6cac1=good.

In addition, iHackintosh has also published the conversation between Visnet (iHackintosh reader), Geohot and MuscleNerd:

<visnet_> What does geohot tweet mean?
<geohot> its my bb exploit for safekeeping
<Par4doX> geohot: did you turn that over to the dev team or are you doing something with it?
<geohot> my days of turning things over are done
<geohot> i hope its different from the one they have
<geohot> but they prob already have it
<geohot> its the one i orig wanted to release blacksn0w with
<Par4doX> it’s still there in the new bb
<geohot> yep, just checked
<geohot> but then opted to use xemn since it was public
<Evan> Oo, it carries over from 05.11 to 05.12?
<geohot> why wouldn’t it, apple doesn’t fix things proactivly
<MuscleNerd> geohot we prob should figure out a way to know if we have same exploit double blind, otherwise we may release 2 different ones at same time
<geohot> any suggestions?
<MuscleNerd> not sure how to do that without making it easy to brute force though
<geohot> yea, i salted the hash
<MuscleNerd> yeah
<MuscleNerd> hmm maybe if we both hash the stack dump
<Confucious> Can you two take this out of public sight?
<MuscleNerd> the stack itself, not the header before it or the registers after it
<Her> muscle: any notice about the exploits are the same ?
<geohot> we are working on it
<geohot> cryptography, perfect for people who don’t trust each other

The conversation indicates that both the iPhone Dev Team and Geohot have a working exploit for the latest baseband and could release tools to jailbreak and unlock iPhone OS 3.1.3.

Stay tuned!

- source: ihackintosh.com

The iH8sn0w Dev Team have released sn0wbreeze version 1.5.1 to jailbreak and unlock Apple’s recently released iPhone OS 3.1.3. Sn0wbreeze allows users to upgrade from a jailbroken iPhone OS 3.1.2 or lower to iPhone OS 3.1.3. We encourage you to carefully read below before attempting to use this application.

sn0wbreeze is a tool for Windows that will jailbreak your iPods and iPhones, setup custom boot logos, activate your iPhone, root partition size, build custom IPSW, and more!

Alright, so it all seems fine and dandy so far but here’s the catch: Your iPhone or iPod MUST BE iPhone OS 3.1.2 or lower and it must be jailbroken or pwned prior to using sn0wbreeze. Sn0wbreeze will NOT work if you have already upgraded to iPhone OS 3.1.3. It allows users to upgrade their jailbroken iPhone runing iPhone OS 3.1.2 or lower to jailbroken iPhone OS 3.1.3.

Sn0wbreeze will work with the following devices:

• iPhone 3GS (OLD BOOTROM ONLY. If the 4th/5th digits of the serial # are before 40 then you should have the old bootrom. If your current jailbreak is tethered DO NOT try this.)
• iPhone 3G
• iPhone 2G
• iPod Touch 2G (OLD BOOTROM ONLY. If your current jailbreak is tethered you have the new bootrom so stay away and/or If your model # starts with MC you have the new bootrom so stay away!)
• iPod Touch 1G

In addition, sn0wbreeze can unlock these following devices:

• All iPhone 2G
• iPhones with 04.26.08 Baseband
• iPhones with 05.11.07 Baseband

Note: You can find your baseband/firmware via the Settings app (General->About->Modem Firmware

You can download Sn0wbreeze 1.5.1 for Windows below.
Sn0wbreeze 1.5.1 for Windows Download

- source: ih8sn0w.com

O2 has started unlocking the iPhone in the UK for users who want to switch from the O2 network to Orange UK, the newest carrier to get the iPhone in the area. Users who signed up to have their devices unlocked have begun receiving text messages instructing them to replace the O2 SIM card with that of a different carrier (In this case, Orange), and connect the device to iTunes. It’s as simple as 1, 2, 3.

It’s pretty great news for those who want to switch, however, there’s always a catch, those who switch are still obligated to complete their contracts with O2. You can sign up to have O2 unlock your iPhone from their network by filling out the unlock form on O2’s website at the source link below.

Unlocking your iPhone
From 10 November, the iPhone can be unlocked for O2 customers in the UK.

Pay Monthly customers
Your iPhone can be unlocked at anytime free of charge. If you unlock your handset and place a non-O2 sim into it, you will still have to honour the remainder of the minimum term on your contract.

iPhone Pay & Go customers
For iPhone on Pay & Go, unlocking can take place 12 months after you’ve bought your iPhone for a one-off £14.69 fee which will be deducted from your airtime balance.

What do I need to do?
Firstly, complete the unlocking form – it will take up to 14 days for the iPhone to be unlocked and we’ll text you to confirm the unlock request. Then place a non-O2 sim into the iPhone and connect to iTunes via a USB cable. iTunes will confirm that the iPhone has been successfully unlocked.

- source: o2.co.uk

Haven’t seen much from the iPhone Dev Team lately but they released an update to their ultrasn0w product that fixes an issue for those running firmware 3.1.x with the 04.26 baseband. Apparently, that specific combination resulted in a missing carrier name in the upper left hand corner of your home screen (Springboard).

Ultrasn0w update from 0.91 to 0.92 fixes that problem, which was important for roaming on your iPhone. You should see that update live now if you have http://repo666.ultrasn0w.com as a Cydia source. If not and you want/need this update then you should definitely add it by going to Cydia -> Manage -> Sources -> Edit -> Add and input the above URL.

- source: blog.iphone-dev.org

GeoHot has released a free unlock for the iPhone 3G and iPhone 3GS called blacksn0w. You can install blacksn0w from the blackra1n application installed on your iPhone when jailbreaking with blackra1n. You can also install blacksn0w from Cydia by adding blackra1n.com to the Cydia source list.

blacksn0w is a free unlock for the latest iPhone 3G and 3GS

blacksn0w is also available on Cydia, add blackra1n.com as repo
requires firmware >= 3.1 and baseband 05.11.07

If you happen to use blacksn0w and run into Wi-Fi issues, GeoHot suggests you try to Reset Network Settings in Settings -> General -> Reset -> Reset Network Settings.

- source: iphonejtag.blogspot.com

GeoHot beat the iPhone Dev Team on this one, but no worries – It’s all good. You can create your own custom pre-jailbroken IPSW and restore it on your iPhone, iPhone 3G, iPhone 3GS, iPod Touch 1G, iPod Touch 2G but sadly, no iPod Touch 3G support, you’ll have to use GeoHot’s Blackra1n to jailbreak.

SUMMARY:

• The iPhone 3GS is now supported out of the box in PwnageTool 3.1.4 (or if you have upgraded to 3.1.x in iTunes)
• The iPod 2G is still supported in PwnageTool 3.1.4 but you must already be jailbroken (we’ll update this if there’s a big demand from non-jailbroken ipt2G owners)
• The iPod touch 3G is NOT supported

DETAILS:

• GOLDEN RULE: If you are using a iPhone 3G or iPhone 3G(S) with ultrasn0w and rely on ultrasn0w to obtain cellular service then you should only update your device with an .ipsw that is made with the new PwnageTool. There are no second chances with this. You need to remember that PwnageTool will provide an upgrade path to newer versions of the iPhone software in the future.
• Please read all parts of this post before downloading and using these tools.
• Read items 1, 2 and 3 again and again.
• PwnageTool will work for the iPhone 3GS
• PwnageTool will work for the iPod touch 2G
• PwnageTool WILL work for Original iPhone (1st Generation), the iPhone 3G and iPhone 3G(S) and the iPod touch (1st Generation and 2nd Generation) but NOT the iPod touch 3rd generation.
• For 3G and 3G(S) users who are Pwned, PwnageTool is your key to updating in the future, just remember to never install an update directly from Apple, always use an .ipsw that has been created with PwnageTool.
• There is no Windows version of PwnageTool it is a Mac OS X tool only, we are not developing a Windows version of PwnageTool.

Download:
PwnageTool 3.1.4 Download for Mac OS X

IPSW Downloads:
iPhone 3GS 3.1.2 ipsw Download
iPhone 2G EDGE 3.1.2 ipsw Download
iPhone 3G 3.1.2 ipsw Download

- source: blog.iphone-dev.org

Once again, iPhone Dev Team comes to the rescue with PwnageTool version 3.1 to jailbreak Apple’s recently released firmware 3.1. Unfortunately, this does NOT work with the iPhone 3GS, iPod Touch 2G/3G (2nd/3rd generation) this ONLY works with the 2G iPhone and 3G iPhone and 1G iPod Touch. redsn0w for Mac OS X and Windows will be released when the iPhone Dev Team is ready to release it.

• GOLDEN RULE: If you are using a 3G iPhone with ultrasn0w and rely on ultrasn0w to obtain cellular service, then you should only upgrade to 3.1 with a PwnageTool created .ipsw.
• If you have an original iPhone (1st generation) then 3.1 unlock works with this PwnageTool release. iPhone 3G users upgrading to 3.1 will need to continue using ultrasn0w with a PwnageTool created 3.1 .ipsw
• Please read all parts of this post before downloading and using these tools.
• Read items 1, 2 and 3 again and again.
• This app is suitable for the recent 3.1 release.
• This version of PwnageTool will NOT work for the iPhone 3GS.
• PwnageTool WILL work for Original iPhone (1st Generation), Original iPod touch (1st Generation) and the iPhone 3G.

PwnageTool is available for Mac OS X only. You may download PwnageTool 3.1 here
3.1 IPSW download:
iPhone 2G EDGE 3.1 ipsw Download
iPhone 3G 3.1 ipsw Download
iPhone 3GS 3.1 ipsw Download

- source: blog.iphone-dev.org

The iPhone Dev Team has pushed out a great update for their IPhone 3G and 3GS unlocking tool, ultrasn0w. This update fixes a bunch of little bugs here and there.

Features:

• Works on both 3G and 3GS
• Works on hacktivated devices
• Works regardless of how you jailbroke your device
• Doesn’t patch any mach-o binary whatsoever. (Doesn’t require a separate patch as each new firmware comes out).
• Doesn’t install any additional daemon
• Has no race conditions, no popups about “Missing SIM”, no network issues
• Is almost 7000 times smaller than its nearest competition :)
• Is available now via Cydia. Source repo is http://repo666.ultrasn0w.com (that’s ultrasn0w with a zero!)

If you haven’t yet updated to ultrasn0w 0.9 then we highly suggest you do! So fire up cydia and update that puppy!

- source: blog,iphone-dev.org

Yep, The iPhone Dev Team have done it again! They have successfully unlocked and jailbroken the iPhone 3G S. But, unfortunately, they do not have an announced release date but will most likely be released after iPhone OS 3.1 is released by Apple.

From iPhone Dev Team’s blog:

Our ultrasn0w program uses the at+xlog crash as an injection vector of our unlocking payload — and it does so on the 3GS in exactly the same way as on the 3G! But this injection vector will be lost if you update to 3.1 using the official Apple IPSW, which updates the baseband. So stay away from official 3.1 IPSWs until we release the tools that let you update the firmware without updating the baseband.

The iPhone Dev Team urge you not to update to iPhone OS 3.1 if you want to be able to unlock your iPhone 3G S. You have been warned!

- source: blog.iphone-dev.org