Jailbreak iPhone, iPod Touch, iPad

Last week Apple has released its iPhone Os 4.0 beta 4 and redsn0w is finally updated to support this as well as beta 1. New version of jailbreak is 0.9.5.b4 and it can be applied on iPhone 3G only(!).

Redsn0w 0.9.5.b4 is targeted at developers who make jailbroken apps, and will not work if you are already using blacksn0w, ultrasn0w or yellowsn0w.

iPhone Dev-Team warns:

“You should stay clear of this beta software if you rely on a carrier unlock.”

To use the jailbreak, follow the guide below:

1. Download redsn0w 0.9.5.b4 here. (Only Mac OS X version since app are developed on this OS).
2. Make sure you have already activated your iPhone 3G with iTunes and your own developer ID.
3. Launch the jailbreak.
4. Select your stock iPhone1,2_4.0_8A274b_Restore.ipsw (beta4) or iPhone1,2_4.0_8A230m_Restore.ipsw (beta1) file that you used to update your firmware.
5. Choose “Install Cydia” and then click “Next”. Use DFU mode to install the redsn0w.
6. When your iPhone 3G comes back up, you will notice Cydia has a blank white icon. It also has no sources so you should go to the Sources panel and add this repo: http://apt.saurik.com/cydia-3.7 (make sure you are connected to the Internet before). When Cydia restarts, you should see its real logo now, and the standard sources should be ready to use.

Popular TV-channel G4tv had recently aired an episode of “Attack Of The Show” where the jailbreak for iPad is discussed. Looks like jailbreak goes mainstream!

The first release of Spirit had a bug that accidently could delete all of your photos from the device that was jailbroken. If you have a backup which you made before jailbreaking your iPhone/iPod Touch/iPad, here is a quick guide how to recover deleted photos.

1. Open Cydia and search for “OpenSSH” and then install it. Reboot your device.

2. Download and then install iPhone Backup Extractor.

• Windows 32-bit version
• Windows 64-bit version
• Mac OS X version

3. Run iPhone BackUp Extractor. Select your last backup (that was made before jailbreak)

4. Navigate to Media/Media and select DCIM folder. Click “Next” and program will save the files locally.

5. Download and then istall WinSCP for Windows or Cyberduck for Mac . Open it and enter the following data to login to your device.

WinSCP for Windows

• Hostname: The IP address of your device. (Settings –> WiFi –> <Your Network Name>)
• Protocol: SCP
• User name: root
• Password: alpine

Cyberduck for Mac OS X

• Server: The IP address of your device. (Settings –> WiFi –> <Your Network Name>)
• Protocol: SFTP
• Username: root
• Password: alpine

6. Go to /User/Media directory and then copy over the DCIM folder.

7. Reboot your device.

After that you’ll have all your backuped photos back.

iPad USB Camera Connection Kit is much more useful as it seems. Max Sha, an experienced user, was able to access external hard drive with this kit. All you need is a jailbroken iPad, an external drive, a split-USB cable to give the drive some power and a terminal of some sort (f.e. MacBook) to mount the external storage. While it is a little unwieldy, it shows that Terabytes of external storage for iPad is possible.

Here is a complete step-by-step guide from Max Sha:

For starters, you will need to do the following:

1. Have an external hard drive formatted to either HFS or FAT32. NOTE: All data will be erased!

2. Perform the Spirit Jailbreak.

3. In Cydia, install iFile ($4.00 for full version, but there is also a free trial) and OpenSSH (free)

4. As well, install the “Nano” terminal text edit from Cydia.

5. For this particular example Max used GoodReader app for iPad ($0.99).

Now you can begin the process of mounting your hard drive. You will need external power for the drive. If you have an external drive with power (one that has a USB port and an external power supply) you won’t need to worry about this. If you have external drive with just an USB cord you will need a split USB cord.

1. Open “Settings” on your iPad to find your IP address (make sure you’re on the same network as your iPad).

2. Open Terminal, on your Mac (/Applications/Utilities/Terminal.app). On Windows you can use Putty.

3. At the prompt, SSH into your iPad with the IP address you found in the “Settings” app (make sure OpenSSH is installed!), with the following:

ssh root@[iPad IP address]

For you first time users, the password for your root account will be “alpine”. NOTE: Please change your password ASAP. To do this, once you’ve logged in VIA Terminal, type the following into the command prompt:

passwd root

You will then be prompted for a new password. Please do the same for your “mobile” user as well, by doing the following:

passwd mobile

4. Now, type the following, in Terminal:

mkdir /Volumes
mkdir /Volumes/EXT
ln -s /Volumes/EXT /var/mobile/EXT
nano /var/stash/Applications.xxxxxx/iFile.app/Info.plist (“xxxxxx” is a series of numbers after “Applications”. If you type “/var/stash/Applications” and hit the “Tab” key, it will fill in the rest for you).

5. The nano text editor will now open. Please add the following lines below the first “<dict>”, in the document (this makes iFile look much better on the iPad):

<key>UIDeviceFamily</key>
<array>
<integer>1</integer>
<integer>2</integer>
</array>

6. Then hit “Ctrl+x”. Followed by “Y”, and then “Enter”. This will save the changes that you made.

7. Now, reboot your iPad. You will notice that your SSH connection will have closed, in Terminal. Re-open terminal, when the iPad reboots, and follow steps 1-3 (without reseting the passwords again).

8. Open iFile, and go into the settings. It is recommended to have the settings set as shown below. The most important is enabling “Application Names”. Hit “Done”. Close out of iFile by hitting the Home button. Restart iFile.

9. In iFile, navigate to “/Volumes/”. Then, select the “Edit” button, in the top right.

10. Check the circle next to the “EXT” folder you created in “Step 4″.

11. Click the “Box with an arrow”, in the bottom right. In the dialogue box that opens, select “Copy/Link”.

12. In iFile, Navigate to “var/mobile/Applications/”. You should now see the names of applications above the actual folder names. Navigate to the “GoodReader” folder, then the “Documents” folder.

13. Click the “Edit” button again. And then click the “Box with an arrow”, in the bottom right. Click the “Create Link” button. You should now see the “EXT” folder. Hit “Done” in the upper right.

14. Now, connect your iPad Camera Connection Kit.

15. Take your hard drive and plug the secondary port into a power supply (in this case, Macbook Pro). Then, plug the main USB port into the iPad. You may see a message similar to “Insufficient power to mount this drive” error message on the iPad. With an external power supply, it should be much more convenient. NOTE: You MUST plug in the external power supply first, or else the iPad will not mount the drive.

16. Now, lets go back to terminal. Type:

ls /dev

What you’re looking for here is the file “disk1s1″. If that does not show up, try steps 15-16 again. If you see “disk1s1″, proceed to step 17.

17. For a FAT32 formatted drive, type the following, into terminal:

mount -t msdos /dev/disk1s1 /Volumes/EXT

It will take a few seconds, and then return you to the command prompt. For an HFS drive, type the following:

mount -t HFS /dev/disk1s1 /Volumes/EXT

18. You are now good to go! You can now access the files in either iFile, or GoodReader. As an example of how to manipulate the files, watch the video below.

19. To unmount the drive, type the following, in Terminal:

umount /dev/disk1s1

20. That’s all!

Here is a video demonstration:

Many thanks to Max Sha!

Finally the jailbreak for iPad, iPhone and iPod Touch from the Dev Team is available for download. It’s free and untethered and it’s called “Spirit”. The jailbreak supports every iDevice with firmware version 3.1.2, 3.1.3 or 3.2.

If you have iPhone 3GS or an iPad you should backup your SHSH blobs before using the jailbreak. ECID SHSH or SHSH blob is a unique signature given to every Apple mobile device. When you decide to restore the firmware on your iPhone, iPod Touch or iPad, Apple servers checks this signature.

As you know, if a new firmware is released it becomes impossible to restore the older firmware from iTunes. But Cydia creator tuned up a new server and now it mimics Apple’s verification server and saves your older SHSH blobs so that you can restore back your device to the older firmware. Without having your SHSH blobs saved you may accidentally update new firmware and then you not only lose your jailbreak but also won’t be able to restore the older firmware to re-jailbreak your device.

This is also important because there is a big possibility that Apple will soon find out what exploit is used by the jailbreak and then it will be patched in the form of new firmware.

You can save your SHSH blob in three ways. Here is a guide to make it using AutoSHSH.

1. Download AutoSHSH. (Latest version is here).



2. Start AutoSHSH and plug in you iPhone/iPod Touch/iPad in recovery mode (only one device at a time). Recovery mode launches when you turn off your device and hold down the “Home” button when connecting the USB cable. Then you must see “Connect to iTunes” message and logo on your device.



3. In AutoSHSH click on “Grab my SHSH Blobs Automatically”. When the app will grab the signature you must choose whether you want to save it locally or not. Do not forget where you saved the signature. In the end of the procedure AutoSHSH will also upload it to saurik’s server.

If you have some problems with using AutoSHSH to save your blobs, write it in comments or try saurik’s method or Firmware Umbrella instead.

Now, when you saved you SHSH blobs, you can make the jailbreak. It is recommended for you to sync your device with iTunes beforehand. Then use the following guide:

1. Download “Spirit” (link for Windows, link for Mac OS X).
2. Plug in your device (it will be instantly recognized).
3. Hit the “Jailbreak” button.

That’s all!

Additionally here is a video tutorial for jailbreaking:

Please note that Spirit is not a carrier unlock so it won’t allow you to use unauthorized wireless carriers. The jailbreak is also “sort of beta”, so it may be buggy. DevTeam notifies that some apps in Cydia that are NOT designed for iPad may crash your system and require you to restore so be careful.

Wow! Hours after iPad 3G sales launch and it has already been jailbroken! Below is a video of MuscleNerd where jailbroken iPad 3G runs Cydia.

MuscleNerd used the jailbreak called “Spirit”. It’s a tool that makes untethered unlock of iPad, iPod Touch 3G and iPhone 3GS and DevTeam promises it will be available soon. Stay tuned for further instructions how to save your SHSH Blobs and then use Spirit to jailbreak your device.