Another Possible Unlock Source for the iPhone 05.12.01 Baseband iPhone, Baseband

MuscleNerd just re-found a crashing command the yellowsn0w iPhone unlock was originally going use.

Ha just re-found crashing command yellowsn0w was originally going to use before +stkprof. Apple fixed it *accidentally* in 02.28.00.

some commands have come and gone. some command holes have come and gone. this command has come and gone but not the hole

it still seems accidental though there are no overt signs that they've closed the hole, but the byte alignment kills it

Earlier this month Sherif Hashim also found a baseband crash that might be exploited to bring a real unlock.

MuscleNerd also mentions a "bizzare apple rogue interpreter" that is letting him poke any values into BB memory.

Hopefully these findings will bring about an unlock in the near future.


Source : Iclarified

Baseband 05.12.01 Exploit Discovered by GeoHot, No ETA for release

We have good news for anyone who accidentally updated to iPhone OS 3.1.3, which in turn updated the baseband on the device. GeoHot, iPhone Hacking expert and creator of popular unlocking and jailbreaking tools, such as Blackra1n and Blacksn0w, has discovered a working exploit for baseband 05.12.01.
Geohot has tweeted the hash tag of the baseband crash “for safekeeping”:
d8b50dc95d7906e3ff6155331a534b55d0f6cac1=good.

In addition, iHackintosh has also published the conversation between Visnet (iHackintosh reader), Geohot and MuscleNerd:
<visnet_> What does geohot tweet mean?
<geohot> its my bb exploit for safekeeping
<Par4doX> geohot: did you turn that over to the dev team or are you doing something with it?
<geohot> my days of turning things over are done
<geohot> i hope its different from the one they have
<geohot> but they prob already have it
<geohot> its the one i orig wanted to release blacksn0w with
<Par4doX> it’s still there in the new bb
<geohot> yep, just checked
<geohot> but then opted to use xemn since it was public
<Evan> Oo, it carries over from 05.11 to 05.12?
<geohot> why wouldn’t it, apple doesn’t fix things proactivly
<MuscleNerd> geohot we prob should figure out a way to know if we have same exploit double blind, otherwise we may release 2 different ones at same time
<geohot> any suggestions?
<MuscleNerd> not sure how to do that without making it easy to brute force though
<geohot> yea, i salted the hash
<MuscleNerd> yeah
<MuscleNerd> hmm maybe if we both hash the stack dump
<Confucious> Can you two take this out of public sight?
<MuscleNerd> the stack itself, not the header before it or the registers after it
<Her> muscle: any notice about the exploits are the same ?
<geohot> we are working on it
<geohot> cryptography, perfect for people who don’t trust each other

The conversation indicates that both the iPhone Dev Team and Geohot have a working exploit for the latest baseband and could release tools to jailbreak and unlock iPhone OS 3.1.3.
Stay tuned!
- source: ihackintosh.com