Jailbreak iPhone, iPod Touch, iPad

Don’t Forget to Save Your iOS 5.1.1 SHSH Blobs to preserve the ability to do iOS 5.1.1 untethered jailbreak in the future. Apple might release updated iOS firmware soon to fix and disable the jailbreak. After next firmware release you will not be able to restore to 5.1.1 any more.

You can find our instructions on how to save your SHSH Blobs using TinyUmbrella here: Windows, Mac.

If you have Cydia installed already, you can check if Cydia have saved your iOS 5.1.1 SHSH keys. Just run Cydia and look at the top of the page:

If you see 5.1.1 – everything is fine, you don’t have to run TinyUmbrella.

iH8Sn0w released Sn0wBreeze 2.9.4 with the ability to perform an untethered jailbreak of A4 devices on iOS 5.1.1. Sn0wbreeze can be used to create a custom firmware with jailbreak and preserve iPhone modem (baseband) version for unlock.

Sn0wbreeze 2.9.4 supports iPhone 3GS, iPhone 4, iPad 1, iPod Touch 3G, iPod Touch 4G and Apple TV 2G. It does not work with A5 devices, like iPad 2, iPad 3 and iPhone 4S.

You can download Sn0wBreeze 2.9.4 from here.

Our step-by-step tutorials for Sn0wBreeze 2.9.5 are available here:

• iPhone 4
• iPhone 3GS

Chronic Dev Team released an update to untethered iOS 5.1.1 jailbreak utility – Absinthe 2.0.1. If you experience problems with previous version – try 2.0.1

You can download Absinthe 2.0.1 here.

Step-by-step tutorials are available here.

Pod2g has announced via Twitter that he successfully made untethered jailbreak of the iPhone 4 on iOS 5.1. Previously, three parties had demonstrated the jailbreak of iOS 5.1: I0n1c, the iPhone Dev-Team, and Chpwn/Phoenixdev. Only I0n1c claimed untethered jailbreak, but made it clear that he will not be releasing his jailbreak to the public.

Thankfully pod2g has announced that he’s also succeeded in untethering the jailbreak.

Heya! My iPhone 4 running iOS 5.1 is now untethered

Obviously, this is an important step towards public release of the iOS 5.1 jailbreak. This past Monday pod2g revealed the discovery of 2 big vulnerabilities. 1 kernel land and 1 root land. It appears that progress is being made!

Pod2g has announced the discovery of 2 new vulnerabilities in his quest to jailbreak the iPhone.

News: a productive week-end. Found 2 big vulnerabilities. 1 kernel land and 1 root land.

Too bad I have to be secret again…

Last week pod2g noted that a jailbreak of iOS 5.1 would take at least a month to complete. We’ll post more information about how these new vulnerabilities will affect that schedule as soon as we hear more.

If the kernel land vulnerability is exploitable this could provide a jailbreak for the device no matter the firmware.

The iPhone Dev-Team has released updated RedSn0w 0.9.10b6b for Mac OS that fixes an issue for those on Mac OS X 10.5.x or earlier.

Update #1b: The OS X version of redsn0w has been updated to fix an issue for those running OS X 10.5.x or earlier.

You can download the latest version of RedSn0w from here.

Our step-by-step tutorials for jailbreak iOS 5.1 using redsn0w 0.9.10b6 are here.

As announced, AT&T has begun unlocking off contract iPhones for customers. TNW details the procedure. If you quality you can contact the company via phone, chat, or in-store.

The only piece of information required by AT&T is the International Mobile Equipment Identity (IMEI) number, which can be found under Settings -> General ->About on your device. Then in 72 hours you will receive email confirmation.

The maximum amount of unlock codes that can be given to an account is 5/year. You can see a copy of the unlock confirmation below.

This week Gareth Wright reported that Facebook’s app for iOS has a security vulnerability through which malicious users can access login credentials saved in a .plist file of the app. With a copy of that .plist file malicious users could automatically log into the affected user’s Facebook account on another device. Reportedly, the vulnerability also exists on Android devices.

Wright describes several different ways in which your login credentials could be obtained by a malicious user, including hidden applications installed on shared PCs, customized apps, or modified speaker dock that could copy your plist.

According to Facebook, the issue only affects jailbroken or lost devices, as it requires physical access or installation of a custom app on the device. But Wright and The Next Web pointed out that simply plugging into any device would be sufficient for malicious users to gather these files.

The Next Web has confirmed that Dropbox for iOS is also vulnerable to this issue. Given that two such high-profile apps as Facebook and Dropbox are vulnerable to credential theft, it is likely that other apps are also affected by the issue.

As many reports note, this method of gathering login credentials is not actively utilized in a malicious manner, and users can protect their data for the time being by not plugging their devices into shared computers and charging stations.

iH8sn0w, developer of sn0wbreeze and iFaith, has found a way to downgrade the firmware on A5 devices – iPhone 4S, iPad 2.

Using saved SHSH blobs, iH8sn0w was able to downgrade his A5 iPad 2 from iOS 5.1 to iOS 5.0.1. He says his method will also work with the A5X processor once firmware updates are released for the new iPad. That means that it’s possible to restore to any firmware you want on A5 devices, as long as you have the SHSH blobs saved.

This is great news for those with the iPhone 4S and newer iPads. As it stands now, if you have to restore for any reason, you will be forced to upgrade to the latest firmware. This could leave you without the ability to jailbreak for some time.

Found a loophole in Apple’s apticket system. Restored my iPad 2 to 5.0.1 from 5.1. Works on all A5 devices.

A5X devices will work too once Apple pushes a new firmware for it.

Hope we will see update to current utilities soon.

Chpwn (Grant Paul) and Phoenixdev (Paul Griffin) have posted photos of an iPad 3 that was jailbroken using a third method!

Jailbroken iPad (3), using a different method by myself and @phoenixdev: http://db.tt/mqIZmw96 http://db.tt/g2UlawxV http://db.tt/V9a3YZRJ

This has truly been an amazing day for jailbreaks. First iPhone Dev-Team posted photos of jailbroken iPad 3, later i0n1c posted a video using unique method. Now it seems that there is a third methid. Wow!!

Most recently I0n1c posted a video to YouTube demonstrating that his jailbreak was untethered.