Jailbreak iPhone, iPod Touch, iPad

These are instructions on how to jailbreak your iPhone 3GS (all bootroms) and iPhone 4 using Limera1n for Windows. Limera1n supports iOS 4.0, iOS 4.0.1, iOS 4.0.2 and iOS 4.1.

Remember: Do not update to iOS 4.1 if you need the unlock. Ultrasn0w does not support that baseband yet.

Step 1
Download LimeRa1n here. If you have problems downloading go directly to www.limera1n.com and use link at the bottom of the screen.

When prompted save the download to your desktop

Step 2
Double click the limera1n.exe file from the desktop to launch the application

Step 3
Click the large make it ra1n button

Step 4
You iPhone will now be placed in recovery mode.

Follow instructions:

Press both the power and the home buttons.

When Limera1n asks you to, release the power button.

Your phone will now be in DFU mode

As limera1n performs its exploit you will see the image of a lime raindrop on your iPhone.

Limera1n will let you know when it is complete.

Step 5
After you power back on your iPhone you will see a new icon on the SpringBoard entitled limera1n. Press it to continue.

Step 6
Once Limera1n opens select Cydia then press the Install button at the top right of the screen.

Step 7
Once the Cydia installation has completed you must reboot your iPhone.

Step 8
When your iPhone has restarted you can run Cydia. Let it do all the necessary updates

NOTE*: To remove the limera1n icon from your desktop you can install CyDelete from Cydia then use it to delete the application as you delete regular AppStore apps.

UPdate: To have access to the root file system of your iPhone (via file managers like iFunBox) install application called afc2add in Cydia.

Are you looking forward to add a very popular HDR feature to your old iPhone? Do not worry! If you have a jailbroken (or ready to jailbreak) iPhone 3GS or 3G that runs on iOS 4.1, you can enable HDR photos. Here is a quick tutorial:

• Make certain that you’ve installed OpenSSH via Cydia. When the application is installed, you’ll see SSH on your iPhone 3GS or 3G (it is recommended to use the «passwd» command to change your password from the standard «alpine»)
• If you have an iPhone 3G, save the file, which is in / System/Library/CoreServices/SpringBoard.app/N82AP.plist
• If you have an iPhone 3GS, save the file located at /System/Library/CoreServices/SpringBoard.app/N88AP.plist
• Add a key «hdr-image-capture» with the “true” value
• Save the file and use SSH to change a copy on your device with the modified version
• Restart the SpringBoard or reboot your device. Now you’ve got access to the HDR settings in the application of your camera.

via

Have you ever wanted to display something on your iPad to external big screen? Here’s a quick video tutorial how to do that:

I’d use jailbreakme.com instead of Spirit to jailbreak the iPad.

Can not wait for the official release? Do you want to get CineXPlayer for iPad on your iPhone and iPod touch right now? For those of you who do not know, CineXPlayer is an iPad application that allows you to download Xvid AVI files using iTunes, so you can easily reproduce the format that Apple won’t. Because the developer has not invented version of the application for the iPhone, the hacker decided to do everything by himself.

It is a complete step by step tutorial on how to install it on your iPhone or iPod touch available here. You just need to jailbreak these devices, because the process involves SSH (SSH program for secure file sharing on the network) to access the iPhone, but it’s worth it if you want to get it right now!

CNet specialists will show how to jailbreak using jailbreakme.com and how to turn on FaceTime over 3G (out tutorial is available here):

iPad USB Camera Connection Kit is much more useful as it seems. Max Sha, an experienced user, was able to access external hard drive with this kit. All you need is a jailbroken iPad, an external drive, a split-USB cable to give the drive some power and a terminal of some sort (f.e. MacBook) to mount the external storage. While it is a little unwieldy, it shows that Terabytes of external storage for iPad is possible.

Here is a complete step-by-step guide from Max Sha:

For starters, you will need to do the following:

1. Have an external hard drive formatted to either HFS or FAT32. NOTE: All data will be erased!

2. Perform the Spirit Jailbreak.

3. In Cydia, install iFile ($4.00 for full version, but there is also a free trial) and OpenSSH (free)

4. As well, install the “Nano” terminal text edit from Cydia.

5. For this particular example Max used GoodReader app for iPad ($0.99).

Now you can begin the process of mounting your hard drive. You will need external power for the drive. If you have an external drive with power (one that has a USB port and an external power supply) you won’t need to worry about this. If you have external drive with just an USB cord you will need a split USB cord.

1. Open “Settings” on your iPad to find your IP address (make sure you’re on the same network as your iPad).

2. Open Terminal, on your Mac (/Applications/Utilities/Terminal.app). On Windows you can use Putty.

3. At the prompt, SSH into your iPad with the IP address you found in the “Settings” app (make sure OpenSSH is installed!), with the following:

ssh root@[iPad IP address]

For you first time users, the password for your root account will be “alpine”. NOTE: Please change your password ASAP. To do this, once you’ve logged in VIA Terminal, type the following into the command prompt:

passwd root

You will then be prompted for a new password. Please do the same for your “mobile” user as well, by doing the following:

passwd mobile

4. Now, type the following, in Terminal:

mkdir /Volumes
mkdir /Volumes/EXT
ln -s /Volumes/EXT /var/mobile/EXT
nano /var/stash/Applications.xxxxxx/iFile.app/Info.plist (“xxxxxx” is a series of numbers after “Applications”. If you type “/var/stash/Applications” and hit the “Tab” key, it will fill in the rest for you).

5. The nano text editor will now open. Please add the following lines below the first “<dict>”, in the document (this makes iFile look much better on the iPad):

<key>UIDeviceFamily</key>
<array>
<integer>1</integer>
<integer>2</integer>
</array>

6. Then hit “Ctrl+x”. Followed by “Y”, and then “Enter”. This will save the changes that you made.

7. Now, reboot your iPad. You will notice that your SSH connection will have closed, in Terminal. Re-open terminal, when the iPad reboots, and follow steps 1-3 (without reseting the passwords again).

8. Open iFile, and go into the settings. It is recommended to have the settings set as shown below. The most important is enabling “Application Names”. Hit “Done”. Close out of iFile by hitting the Home button. Restart iFile.

9. In iFile, navigate to “/Volumes/”. Then, select the “Edit” button, in the top right.

10. Check the circle next to the “EXT” folder you created in “Step 4″.

11. Click the “Box with an arrow”, in the bottom right. In the dialogue box that opens, select “Copy/Link”.

12. In iFile, Navigate to “var/mobile/Applications/”. You should now see the names of applications above the actual folder names. Navigate to the “GoodReader” folder, then the “Documents” folder.

13. Click the “Edit” button again. And then click the “Box with an arrow”, in the bottom right. Click the “Create Link” button. You should now see the “EXT” folder. Hit “Done” in the upper right.

14. Now, connect your iPad Camera Connection Kit.

15. Take your hard drive and plug the secondary port into a power supply (in this case, Macbook Pro). Then, plug the main USB port into the iPad. You may see a message similar to “Insufficient power to mount this drive” error message on the iPad. With an external power supply, it should be much more convenient. NOTE: You MUST plug in the external power supply first, or else the iPad will not mount the drive.

16. Now, lets go back to terminal. Type:

ls /dev

What you’re looking for here is the file “disk1s1″. If that does not show up, try steps 15-16 again. If you see “disk1s1″, proceed to step 17.

17. For a FAT32 formatted drive, type the following, into terminal:

mount -t msdos /dev/disk1s1 /Volumes/EXT

It will take a few seconds, and then return you to the command prompt. For an HFS drive, type the following:

mount -t HFS /dev/disk1s1 /Volumes/EXT

18. You are now good to go! You can now access the files in either iFile, or GoodReader. As an example of how to manipulate the files, watch the video below.

19. To unmount the drive, type the following, in Terminal:

umount /dev/disk1s1

20. That’s all!

Here is a video demonstration:

Many thanks to Max Sha!

Finally the jailbreak for iPad, iPhone and iPod Touch from the Dev Team is available for download. It’s free and untethered and it’s called “Spirit”. The jailbreak supports every iDevice with firmware version 3.1.2, 3.1.3 or 3.2.

If you have iPhone 3GS or an iPad you should backup your SHSH blobs before using the jailbreak. ECID SHSH or SHSH blob is a unique signature given to every Apple mobile device. When you decide to restore the firmware on your iPhone, iPod Touch or iPad, Apple servers checks this signature.

As you know, if a new firmware is released it becomes impossible to restore the older firmware from iTunes. But Cydia creator tuned up a new server and now it mimics Apple’s verification server and saves your older SHSH blobs so that you can restore back your device to the older firmware. Without having your SHSH blobs saved you may accidentally update new firmware and then you not only lose your jailbreak but also won’t be able to restore the older firmware to re-jailbreak your device.

This is also important because there is a big possibility that Apple will soon find out what exploit is used by the jailbreak and then it will be patched in the form of new firmware.

You can save your SHSH blob in three ways. Here is a guide to make it using AutoSHSH.

1. Download AutoSHSH. (Latest version is here).



2. Start AutoSHSH and plug in you iPhone/iPod Touch/iPad in recovery mode (only one device at a time). Recovery mode launches when you turn off your device and hold down the “Home” button when connecting the USB cable. Then you must see “Connect to iTunes” message and logo on your device.



3. In AutoSHSH click on “Grab my SHSH Blobs Automatically”. When the app will grab the signature you must choose whether you want to save it locally or not. Do not forget where you saved the signature. In the end of the procedure AutoSHSH will also upload it to saurik’s server.

If you have some problems with using AutoSHSH to save your blobs, write it in comments or try saurik’s method or Firmware Umbrella instead.

Now, when you saved you SHSH blobs, you can make the jailbreak. It is recommended for you to sync your device with iTunes beforehand. Then use the following guide:

1. Download “Spirit” (link for Windows, link for Mac OS X).
2. Plug in your device (it will be instantly recognized).
3. Hit the “Jailbreak” button.

That’s all!

Additionally here is a video tutorial for jailbreaking:

Please note that Spirit is not a carrier unlock so it won’t allow you to use unauthorized wireless carriers. The jailbreak is also “sort of beta”, so it may be buggy. DevTeam notifies that some apps in Cydia that are NOT designed for iPad may crash your system and require you to restore so be careful.

A second iPhone worm virus has been found by security company F-Secure. It is specifically targeting people in the Netherlands who are using their iPhones for internet banking with Dutch online bank ING.

It redirects the bank’s customers to a site with a log-in screen (phishing). The worm attacks “jailbroken” phones – a modification which enables the user to run non-Apple approved software on their handset. Only handsets with installed SSH (secure shell) are at risk. SSH is a file-transfer program that enables users to remotely connect to their phones. It comes with a default password, ‘alpine’ which should be changed.

Here is a tutorial how to change the default SSH password and minimize the risk.

This is quite simple. If you did a jailbreak on your iPhone you need to change the default password. Why? Because hackers can access your phone, read your mail, sms, download other data. The second reason is because there are already several viruses (worms) that use these default passwords.

Here’s a quick step-by-step tutorial.

1. If you don’t have MobileTerminal application installed: run Cydia, search for MobileTerminal and install.
2. Run MobileTerminal.
3. Type passwd and press return.
4. Enter the default user password alpine and press return.
5. Enter a new password and press return.
6. Enter a new password again and press return.
7. Congratulations, you changed it for default mobile user. Let’s do the same for root user.
8. Login as root user: type su root and press return.
9. Type passwd and press return.
10. Enter the default root user password alpine and press return.
11. Enter a new password and press return.
12. Enter a new password again and press return.
13. That’s it!

The passwords are now changed, and your jailbroken iPhone or iPod Touch is now a bit more secure than it was before and less vulnerable to the worm detected recently.

Geohot has released his BlackSn0w utility. BlackSn0w is an unlock for the iPhone 3G and iPhone 3GS. It supports the latest firmware 3.1 and 3.1.2 with baseband 05.11.07 and enables official tethering. Available for both Windows and Mac.

Here is a quick tutorial:
If you havn’t done the jailbreak: go to blackra1n.com, download blackra1n, run it, follow the instructions (it is really simple) to perform the jailbreak. Run balckra1n app on iPhone and install BlackSnow.
If your device is already jailbroken – run Cydia, add repository blackra1n.com and install blacksn0w. That’s it!

The latest version of blackra1n is RC3. It now has hacktivation support, 15 second speed improvement, Tiger+PPC support.

PS: If you just bought a new iPhone 3GS or have one that was made recently (approximately after 40th week after iPhone 3GS release): your device has a new BootROM. Unfortunately it is impossible to run regular jailbreak with this new BootROM. There is a sloution – tethered jailbreak. Everything including unlock will work fine. However every time you restart your iPhone, you need to plug it to a computer with blackra1n installed.