Jailbreak iPhone, iPod Touch, iPad

iPad USB Camera Connection Kit is much more useful as it seems. Max Sha, an experienced user, was able to access external hard drive with this kit. All you need is a jailbroken iPad, an external drive, a split-USB cable to give the drive some power and a terminal of some sort (f.e. MacBook) to mount the external storage. While it is a little unwieldy, it shows that Terabytes of external storage for iPad is possible.

Here is a complete step-by-step guide from Max Sha:

For starters, you will need to do the following:

1. Have an external hard drive formatted to either HFS or FAT32. NOTE: All data will be erased!

2. Perform the Spirit Jailbreak.

3. In Cydia, install iFile ($4.00 for full version, but there is also a free trial) and OpenSSH (free)

4. As well, install the “Nano” terminal text edit from Cydia.

5. For this particular example Max used GoodReader app for iPad ($0.99).

Now you can begin the process of mounting your hard drive. You will need external power for the drive. If you have an external drive with power (one that has a USB port and an external power supply) you won’t need to worry about this. If you have external drive with just an USB cord you will need a split USB cord.

1. Open “Settings” on your iPad to find your IP address (make sure you’re on the same network as your iPad).

2. Open Terminal, on your Mac (/Applications/Utilities/Terminal.app). On Windows you can use Putty.

3. At the prompt, SSH into your iPad with the IP address you found in the “Settings” app (make sure OpenSSH is installed!), with the following:

ssh root@[iPad IP address]

For you first time users, the password for your root account will be “alpine”. NOTE: Please change your password ASAP. To do this, once you’ve logged in VIA Terminal, type the following into the command prompt:

passwd root

You will then be prompted for a new password. Please do the same for your “mobile” user as well, by doing the following:

passwd mobile

4. Now, type the following, in Terminal:

mkdir /Volumes
mkdir /Volumes/EXT
ln -s /Volumes/EXT /var/mobile/EXT
nano /var/stash/Applications.xxxxxx/iFile.app/Info.plist (“xxxxxx” is a series of numbers after “Applications”. If you type “/var/stash/Applications” and hit the “Tab” key, it will fill in the rest for you).

5. The nano text editor will now open. Please add the following lines below the first “<dict>”, in the document (this makes iFile look much better on the iPad):

<key>UIDeviceFamily</key>
<array>
<integer>1</integer>
<integer>2</integer>
</array>

6. Then hit “Ctrl+x”. Followed by “Y”, and then “Enter”. This will save the changes that you made.

7. Now, reboot your iPad. You will notice that your SSH connection will have closed, in Terminal. Re-open terminal, when the iPad reboots, and follow steps 1-3 (without reseting the passwords again).

8. Open iFile, and go into the settings. It is recommended to have the settings set as shown below. The most important is enabling “Application Names”. Hit “Done”. Close out of iFile by hitting the Home button. Restart iFile.

9. In iFile, navigate to “/Volumes/”. Then, select the “Edit” button, in the top right.

10. Check the circle next to the “EXT” folder you created in “Step 4″.

11. Click the “Box with an arrow”, in the bottom right. In the dialogue box that opens, select “Copy/Link”.

12. In iFile, Navigate to “var/mobile/Applications/”. You should now see the names of applications above the actual folder names. Navigate to the “GoodReader” folder, then the “Documents” folder.

13. Click the “Edit” button again. And then click the “Box with an arrow”, in the bottom right. Click the “Create Link” button. You should now see the “EXT” folder. Hit “Done” in the upper right.

14. Now, connect your iPad Camera Connection Kit.

15. Take your hard drive and plug the secondary port into a power supply (in this case, Macbook Pro). Then, plug the main USB port into the iPad. You may see a message similar to “Insufficient power to mount this drive” error message on the iPad. With an external power supply, it should be much more convenient. NOTE: You MUST plug in the external power supply first, or else the iPad will not mount the drive.

16. Now, lets go back to terminal. Type:

ls /dev

What you’re looking for here is the file “disk1s1″. If that does not show up, try steps 15-16 again. If you see “disk1s1″, proceed to step 17.

17. For a FAT32 formatted drive, type the following, into terminal:

mount -t msdos /dev/disk1s1 /Volumes/EXT

It will take a few seconds, and then return you to the command prompt. For an HFS drive, type the following:

mount -t HFS /dev/disk1s1 /Volumes/EXT

18. You are now good to go! You can now access the files in either iFile, or GoodReader. As an example of how to manipulate the files, watch the video below.

19. To unmount the drive, type the following, in Terminal:

umount /dev/disk1s1

20. That’s all!

Here is a video demonstration:

Many thanks to Max Sha!

Finally the jailbreak for iPad, iPhone and iPod Touch from the Dev Team is available for download. It’s free and untethered and it’s called “Spirit”. The jailbreak supports every iDevice with firmware version 3.1.2, 3.1.3 or 3.2.

If you have iPhone 3GS or an iPad you should backup your SHSH blobs before using the jailbreak. ECID SHSH or SHSH blob is a unique signature given to every Apple mobile device. When you decide to restore the firmware on your iPhone, iPod Touch or iPad, Apple servers checks this signature.

As you know, if a new firmware is released it becomes impossible to restore the older firmware from iTunes. But Cydia creator tuned up a new server and now it mimics Apple’s verification server and saves your older SHSH blobs so that you can restore back your device to the older firmware. Without having your SHSH blobs saved you may accidentally update new firmware and then you not only lose your jailbreak but also won’t be able to restore the older firmware to re-jailbreak your device.

This is also important because there is a big possibility that Apple will soon find out what exploit is used by the jailbreak and then it will be patched in the form of new firmware.

You can save your SHSH blob in three ways. Here is a guide to make it using AutoSHSH.

1. Download AutoSHSH. (Latest version is here).



2. Start AutoSHSH and plug in you iPhone/iPod Touch/iPad in recovery mode (only one device at a time). Recovery mode launches when you turn off your device and hold down the “Home” button when connecting the USB cable. Then you must see “Connect to iTunes” message and logo on your device.



3. In AutoSHSH click on “Grab my SHSH Blobs Automatically”. When the app will grab the signature you must choose whether you want to save it locally or not. Do not forget where you saved the signature. In the end of the procedure AutoSHSH will also upload it to saurik’s server.

If you have some problems with using AutoSHSH to save your blobs, write it in comments or try saurik’s method or Firmware Umbrella instead.

Now, when you saved you SHSH blobs, you can make the jailbreak. It is recommended for you to sync your device with iTunes beforehand. Then use the following guide:

1. Download “Spirit” (link for Windows, link for Mac OS X).
2. Plug in your device (it will be instantly recognized).
3. Hit the “Jailbreak” button.

That’s all!

Additionally here is a video tutorial for jailbreaking:

Please note that Spirit is not a carrier unlock so it won’t allow you to use unauthorized wireless carriers. The jailbreak is also “sort of beta”, so it may be buggy. DevTeam notifies that some apps in Cydia that are NOT designed for iPad may crash your system and require you to restore so be careful.

Wow! Hours after iPad 3G sales launch and it has already been jailbroken! Below is a video of MuscleNerd where jailbroken iPad 3G runs Cydia.

MuscleNerd used the jailbreak called “Spirit”. It’s a tool that makes untethered unlock of iPad, iPod Touch 3G and iPhone 3GS and DevTeam promises it will be available soon. Stay tuned for further instructions how to save your SHSH Blobs and then use Spirit to jailbreak your device.

Here is a video posted by hacker cdevwill. We can see the Voice Control app used on the jailbreaked (hacked) iPad. Take a look:

MuscleNerd just released redsn0w 0.9.5 beta – the first public jailbreak of iPhone OS 4. This utility is only for developers of jailbroken apps, so they can update apps for firmware 4.0. The jailbreak only supports the iPhone 3G and runs on MAC OS X. There is no carrier unlock right now.

You can download RedSn0w 0.9.5 and get more info here.

A few hours ago iH8sn0w posted a tweet that he is able to run jailbreak on the new firmware 4.0 beta 1. DarkMalloc, another developer who worked on the project, has just released new video that shows firmware 4.0 jailbreak on iPhone 3G:

The interesting thing, besides the presence of Cydia and MobileTerminal, is the possibility to have multiple applications open at once. That means that multitasking on iPhone 3G can be enabled. Officially Apple doesn’t want to activate this functionality on iPhone 3G, just iPhone 3GS and later devices.

That didn’t take long. In less than 24 hours hackers managed to jailbreak Apple iPad, to get a root access to a file system. The first video of a jailbreaked iPad was recently published by Musclenerd, famous hacker from DevTeam. This was a team work of Musclenerd, chronicdevteam, comex and chpwn.

Watch the video:

Yesterday iTunes update was found to have issues with those of iPod Touches and iPhones that were tethered jailbroken with blackRa1n. If you have one of these, you will be unable to rejailbreak your device after rebooting it with blackra1n. The problem is being experienced only by Windows users. iH8Sn0w has an explanation:

“Blackra1n hooks to the dll that has different offsets of what it is actually looking for”.

To solve the problem iH8Sn0w released a blackra1n fix for a new version of iTunes. It’s named BlackBreeze and it supports 32bit + 64bit Windows versions and can be downloaded here.  Please note that this fix is not an official update from Geohot. You can also try to replace new iTunes dll-files with the old ones or install  iTunes 9.0.3. The latter is available here (don’t forget to uninstall the current version and reboot before the installing of another one).

Redsn0w reportedly works fine with the new iTunes 9.1. MuscleNerd twitted:

Geohot, the famous iPhone hacker and the creator of different jailbreak and unlock utilities (purplera1n, blackra1n and blacksn0w), is now working on a new jailbreak utility. It will support untethered jailbreak for all devices with the latest bootrom and the latest firmware. This includes iPhone 3GS and iPod Touch 3G.

Here is what Geohot writes in his blog:

The jailbreak is all software based, and is as simple to use as blackra1n. It is completely untethered, works on all current tethered models(ipt2, 3gs, ipt3), and will probably work on iPad too.

Don’t ask about a release date. You won’t make it happen any sooner.

It is still unclear if he used one of the recent iPhone Safari hacks to gain control of the device or if this is something else.

Here is a teaser video:

Today Apple began selling iPhones without AT&T plan. Apple’s new policy is that anyone can walk into an Apple Store and pick up an iPhone 8GB for $499, 16GB for $599 and 32GB for $699. They allow one unit per customer per day, up to 10 iPhones.

The iPhones are still locked to AT&T’s network. Of course, these devices will be sold with the latest baseband which is not yet unlockable; however, you can use RedSn0w to perform a tethered jailbreak.