Jailbreak iPhone, iPod Touch, iPad

Engadget published a howto video of LimeRa1n – iOS 4.0-4.1 jailbreak utility for iPhone, iPod Touch and iPad:

Famous hacker Geohot is back and today he released the latest iOS 4.1 jailbreak. It is called LimeRa1n and supports iPhone 3GS, iPod Touch 3G, iPad, iPhone 4, iPod Touch 4G with iOS firmwares 4.0-4.1 and beyond. It can also hacktivate your device, so there is no need in phone SIM-cards and other tricks.

This software is still in beta and was updated 3 times in last several hours. So use with caution.

There is Windows version only for now. Geohot plans to release LimeRa1n for Mac and Linux soon. You can Download it here.

Some users report that they have jailbroken their iOS 3.2.2 iPads successfully with limera1n, while others report that they tried, but failed.

Do not forget to backup.

For many users of iPhone 3GS and iPhone 4 with iOS 4.0.2 now there is a hope to perform jailbreak using LimeRa1n and unlock using ultrasn0w. We recommend NOT to do it if you have not saved your SHSH keys. You can try, but if something goes wrong without SHSH keys you’ll have to restore to iOS 4.1, and there is no unlock for iOS 4.1 (possibly forever). Just wait for PwnageTool utility.

DevTeam reported that Limera1n uses a different exploit than SHAtter, so they will not release SHAtter utility, they don’t want let Apple fix both security holes. However they plan to release PwnageTool using the same exploit.

Known bugs:

• some people must reboot to see Cydia
• beta iOS versions aren’t supported
• iPod Touch 2G support coming soon
• for iPhone 3G use redsn0w 0.9.6 b1

Here’s a quick changelog of recent beta releases:

• BETA1 – first release
• BETA2 – fixed kernel patching magic, rerun BETA2+ over BETA1
• BETA3 – fixed new bootrom 3GS
• BETA4 – uninstall fixed, respring fixedish

RedSn0w 0.9.6 b1 for Mac OS X was released a while ago. Today DevTeam created a version for Windows users. RedSn0w 0.9.6 b1 can jailbreak iOS 4.1 and iOS 4.1 running on iPhone 3G or iPod touch 2G.

You can download it here.

Redsn0w is easy to use:

1. Download firmware here.
2. Launch redsn0w 0.9.6 b1
3. Select your stock 4.1 or 4.0 ipsw (you’ve already used this to update your device to 4.1 or 4.0)
4. Select “Install Cydia” and any of the other options shown above, then click “Next”. Use DFU mode to install the jailbreak.

This is still beta, so there might be some problems:

Any Windows users seeing “Waiting for reboot” for too long (more than 20 seconds or so), please try “shaking” the JB process by unplugging then replugging your USB cable (while letting redsn0w continue to run). Also, try using a USB port “closer” to your computer (as opposed to on your monitor or behind another hub).

As usual DevTeam reminds us:

IF YOU USE THE ULTRASN0W UNLOCK, PLEASE WAIT FOR PWNAGETOOL TO SUPPORT 4.1. DO NOT USE REDSN0W

That’s because to use redsn0w at 4.1, you need to already have updated to official 4.1 from Apple. If you do that, you lose the ultrasn0w unlock (possibly forever).

Chronic Dev-Team member Joshua Hill has just confirmed that the new Greenpois0n jailbreak, which will allow you to jailbreak Apple’s latest iOS 4.1 software, is expected to be released this Sunday. To make the event more special, Dev-Team has decided to launch the tool at 10 past 10 AM on October 10th 2010. They will be releasing multiple tools, some of which will help you update to 4.1 without losing the possibility of unlocking your baseband for other carriers.

Twitter user with nickname StealthBravo recently confirmed that the new Apple TV can be restored in iTunes as well as any iOS device, easing the way for jailbreakers to bring new functionality to the set-top box. This means that the hackers soon be able to offer us tools, as they currently do for other iOS devices, to save SHSH blobs, jailbreak the Apple TV, and install 3rd party software.

Moreover, Apple TV offers a Micro-USB port for connectivity, but the port also offers a means for users to physically connect the device to computers to employ the techniques required for jailbreak of operating system.

The new exploit is called SHAtter. It was developed by hacker pod2g a few months after hacker p0sixninja from the Chronic Dev Team discovered the crash. The same exploit can be used to jailbreak iPhone 4 and iPad with new firmwares. So iOS 4.1 and maybe even iOS 4.2 is not a problem any more. Soon we will see the utilities from DevTeam to perform the jailbreak.

The DevTeam published a video if a jailbroken iPod Touch 4G. Take a look:

DevTeam recently released new version of redsn0w to jailbreak iOS 4.1. New RedSn0w 0.9.6 b1 supports iOS 4.0 and iOS 4.1 running on iPhone 3G or iPod touch 2G.

There is only Mac OS X x86 version, that you can download here.

Redsn0w is easy to use:

1. Download firmware here.
2. Launch redsn0w 0.9.6 b1
3. Select your stock 4.1 or 4.0 ipsw (you’ve already used this to update your device to 4.1 or  4.0)
4. Select “Install Cydia” and any of the other options shown above, then click “Next”.  Use DFU mode to install the jailbreak.

As usual DevTeam reminds us:

IF YOU USE THE ULTRASN0W UNLOCK, PLEASE WAIT FOR PWNAGETOOL TO SUPPORT 4.1.  DO NOT USE REDSN0W

That’s because to use redsn0w at 4.1, you need to already have updated to official 4.1 from Apple.  If you do that, you lose the ultrasn0w unlock (possibly forever).

You cannot use JailBreakMe method to jailbreak and unlock iOS 4.0.2 on iPhone 3G. However you can still jailbreak and unlock iPhone 3G using redsn0w. Here are the instructions:

• Download the latest RedSn0w 0.9.5-b5 in our utilities page here.
• Download firmware images for iOS 4.0 here.
• Run RedSn0w and point it at the 4.0 IPSW. (Yes – point it at the 4.0 IPSW even though you’re at 4.0.2). This will also hacktivate your iPhone3G at 4.0.1 if you haven’t already been activated by iTunes.
• If you need a carrier unlock – install ultrasn0w in Cydia (add repository http://repo666.ultrasn0w.com). For T-Mobile in the USA remember to turn off 3G mode in Settings→General→Network.

Only a few days passed since Dev Team has confirmed that Comex will try to jailbreak iOS 4.1, using other exploit. However, according to the response received on Twitter, it became known that Comex may not take part in the new iOS 4.x jailbreak.

Comex replied to the message on Twitter in such a way: “ariif, the next jailbreak might not be from me ”.

Of course, it does not mean that Comex leaves the scene and would not take part in jailbreaking as Geohot, most likely it is only this version he isn’t planning to jailbreak. Nevertheless the smile in his reply certainly means something good…

According to the latest tweets from different hackers (MuscleNerd, pod2g and others) the exploit for iOS 4.1 has been already discovered:

Works on 4.1 (!) iBSS iv=c2c5416472e5a0d6f0a25a123d5a2b1c key=1fbc7dcafaec21a150a51eb0eb99367550e24a077b128831b28c065e61f894a0

I just successfully updated to 4.1 without a baseband update. PLEASE wait for 4.1.0 TinyUmbrella!!!

Crazy timing that @pod2g got latest exploit just as 4.1 went public (lots of work left…keep away from 4.1 for now!)

congrats to @pod2g for the latest exploit and also @p0sixninja who have been trying for months.

This means that the jailbreak and unlock for iPhone and iPod Touch is possible. However please be patient and wait for the utilities.