|
|||||||
| Register | Members List | New Posts | Mark Forums Read |
![]() |
|
|
Thread Tools | Display Modes |
|
|
#1 |
|
Kasper's Automated Slave
Join Date: Nov 1997
Posts: 6,166
|
Group successfully details hardware-based iPhone unlocking
A determined group of hobbyists has documented breaking the iPhone's ties to AT&T through a mixture of hardware and software, proving that the Apple handset can be hacked to permanently function with other cellular carriers.
Calling their project Finding JTAG after the Joint Test Action Group standard used to test access ports on circuit boards, the hobbyists claim to have refined a surefire but dangerous ten-step process that allows the iPhone to use an unmodified SIM card from T-Mobile or other GSM cellular networks. The technique requires an iPhone that has already been "jailbroken," or derestricted to allow third-party programs, as well as soldering tools and wiring. Similar to the process for unlocking a Siemens phone from Europe, the process involves forcing the read-only boot memory on the iPhone to accept unsigned code on the phone's built-in NOR flash storage that controls some of the most essential functions. This permits the code to change the iPhone's default behavior, which normally bars all but specially approved SIM cards from placing and receiving calls. "Once the code is on the NOR [memory] we can do whatever we want," said Finding JTAG's public representative, George Hotz. "So patch out the [carrier] lock; voila, unlocked iPhone." While the summary appears straightforward, however, the actual process is potentially complicated -- and also potentially fatal to the phone for novice hackers. In addition to removing the back cover of the phone and exposing the circuit board, the procedure requires cleaning and then resoldering a single trace on the board to a power line and an unlock switch; a failure could render the whole phone unusable. "You only get one chance to do this right," Hotz warned. Once this is accomplished, a reset of the phone's baseband frequencies and then selectively erasing and reloading firmware with special software that lets users send the needed code and a final instruction that removes the carrier lock, permanently unlocking calling service and allowing the phone to receive new code more easily in the future. Despite of the team's success, the experiment would not immediately result in an easily reproduced means of derestricting the iPhone, Hotz added. Although it was apparent that a hardware modification would work, the goal was still to develop a completely software-driven equivalent, which he and Finding JTAG believed was possible but still relatively distant and would likely demand superior reverse engineering skills. "If anyone finds a way to erase the [Apple-made] bootloader from software, this becomes a software unlock," according to Hotz. "I'm sorry about how hard [the instructions] are to follow, but someone will get them to work, and simplify them, and simplify them more. Hopefully a software unlock will be found in the near future." |
|
|
|
|
|
#2 |
|
Registered User
Join Date: Mar 2007
Posts: 730
|
Ok, hats off. Really clever, really entertaining, if you're in the .001% of owners who might want to attack their $600 device with a soldering iron and warranty breaking escapades.
But I really want to know. Are these the same folks who are the going to try to ream Apple a new one once their iPhone is compromised with the new 'feature' of accepting unsigned code from god-knows-where? Have fun... ![]() |
|
|
|
|
|
#3 |
|
Registered User
Join Date: Dec 2004
Posts: 373
|
Awesome. I wonder:
1. Is legal for Apple to block the iPhone to prevent use with other company than AT&T or whatever they want? 2. Is legal for people to break it and distribute the tool? Thanks. |
|
|
|
|
|
#4 | |
|
Registered User
Join Date: May 2006
Posts: 20
|
Quote:
2. I'm not sure on that one, but my guess is no. ![]() |
|
|
|
|
|
|
#5 |
|
Registered User
Join Date: Apr 2005
Posts: 262
|
I wouldn't want to lose visual voicemail.
Oh also, I wouldn't want to crack this baby open and go to town with a soldering iron! I hope it's just a big joke and people end up breaking their phones. |
|
|
|
|
|
#6 |
|
Registered User
Join Date: Apr 2006
Location: Paradise
Posts: 403
|
Too lazy to try myself, but when you put a "foreign" SIM into the iPhone, are you given an opportunity to enter an unlock code? Just wondering, since the 90-day post-purchase window after which you can request the unlock code from Cingular is approaching. Does anybody know if they are legally required to provide the unlock codes after the 90-day window expires?
|
|
|
|
|
|
#7 |
|
Registered User
Join Date: Apr 2006
Location: The Ansible
Posts: 11,888
|
In the US T-Mobile is the only other GSM provider, but don't they use a spectrum that is outside the range of the iPhone?
edit: T-Mobile US uses the 850MHz and 1900MHz bands for calls (well within the iPhone quad-band spectrum) but also uses 1700MHZ and 2100MHz frequencies. I assume these are mainly for 3G coverage. I'm assuming EDGE will work within the 850 and 1900MHz range. Last edited by solipsism; 08-23-2007 at 10:26 PM.. |
|
|
|
|
|
#8 |
|
Registered User
Join Date: Jan 2005
Posts: 262
|
My son and his buddies, when younger, were always trying to modify their Nintendo, Playstation, Xbox with a bootleg chip that supposedly allowed you to run copied/pirated games. I don't have to tell you what the outcome of their tinkering almost always resulted in, do I?
The really funny nonsense coming from these hackmeisters is that their work will result in millions of additional iPhones being purchased by like minded individuals who wish to throw off the bonds of Apple and the evil entity known as at&t (the new company is lower case by the way). Utter nonsense. Just look at how retail sales of OS X took off after it was hacked to be able to be run on standard PC hardware. Yeah, right. Unless and until Apple officially unlocks, frees up, or whatever, the iPhone this useless trick will remain an oddity known only to nerds who live in their parent's basements. And of course there's the little matter of iPhone updates. |
|
|
|
|
|
#9 | |
|
Registered User
Join Date: Aug 2007
Posts: 4
|
Quote:
That's a bit harsh! ![]() I managed to chip my original xbox without any dramas from following a similar guide and this iPhone hack seems pretty simple if you have any basic soldering skills - no doubt thou that skill isn't something possessed by all and this probably isn't a good place to start learning. According this hack you can still update your iPhone, it just gets relocked and requires you to re-run the software part of the process to unlock it again. Personally, i'm waiting on the 3G version of the iPhone (being in Oz) before i get the credit card out and hopefully by then Apple either let them be unlocked or it can be done via software. Hopefully this encourages Apple to start offering unlock options in the near future so when they launch locked phones in new countries they aren't compeating with cheap eBay auctions for hacked phones that work with any sim. |
|
|
|
|
|
|
#10 | |
|
Registered User
Join Date: Apr 2006
Location: The Ansible
Posts: 11,888
|
Quote:
But there certainly seemed to be a surge in Apple sales since Apple has officially allowed a simple partitioning and installation tool for Windows on Macs. Do in (at least) part to the EFI bootloader being hacked to allow Windows to run on Mac hardware. |
|
|
|
|
|
|
#11 | |
|
Global Moderator
Join Date: Jun 2004
Location: .US
Posts: 9,127
|
Quote:
Anyway, I think it's a curiousity, but if I owned an iPhone, I wouldn't consider this either unless I got _really_ screwed by AT&T, but there's only one other carrier with GSM. There's a chance that this sort of thing will get successively easier over time, but now is not the time to try it except for the very adept. The only thing I've ever chipped was a Panasonic DVD player. It works fine, though I don't need it often. It was best for removing the Macrovision signal because it causes distortions on the screen. I also had a projector that really flipped out when fed 480p with Macrovision. Last edited by JeffDM; 08-24-2007 at 12:00 AM.. |
|
|
|
|
|
|
#12 | |
|
Global Moderator
Join Date: Jun 2004
Location: .US
Posts: 9,127
|
Quote:
For the moment, Apple and AT&T probably won't get a judgment in their favor in terms of bypassing copy protection. The US Register of Copyrights has given a three year (and possibly extensible) reprieve for those that unlock cell phones. I don't know if there's issue with the FCC though. The best that can be done by Apple is bully people and hope they just give up because litigation is expensive and takes a lot of time. |
|
|
|
|
|
|
#13 | |
|
Registered User
Join Date: Feb 2007
Posts: 3,706
|
Most definitely. I predicted within 3 months of iPhone launch. I was right! w00t
Quote:
1. It is probably not legal to attempt such reverse engineering/hacking 2. It is very likely to be not legal to distribute/publish such information 3. It is definitely illegal to distribute any software that assists in such hacking 4. It is 110% illegal to sell the hard-unlocked/soldered/etc iPhone on eBay ![]() http://cgi.ebay.com/ws/eBayISAPI.dll...m=230164884672 |
|
|
|
|
|
|
#14 | |
|
Registered User
Join Date: Nov 2001
Location: Hong Kong
Posts: 8,383
|
Quote:
This buyer is so desperate he's stupid. In a week you'll be able to get unlocked iPhones for no more than $50 or $100 premium over the onriginal MSRP.
Episode One: A New Hope.
|
|
|
|
|
|
|
#15 | |
|
Registered User
Join Date: May 2007
Posts: 293
|
Quote:
And actually in the USA it is now legal to unlock a mobile phone, so you can by all accounts unlock an iphone legally!! - Okay i am not a lawyer, any lawyers here?? In some countries in it is even illegal to sell a locked phone. I will stick my neck out here and make a bold prediction... The iPhone when it goes in sale in Europe will be subsidised by the network operators and sold on a two year contract and wil probably cost a 1/4 of what it costs to buy in the US or actually even given away for nothing if the contract payments were high enough. From what i know of the regulations (and again i am no lawyer) i think this would be the only way that Apple's business plan will work because by law they will have to unlock iphones if asked, at least if the contract is subsidised they could force people to see out their agreed contract term with the network. Last edited by murphyweb; 08-24-2007 at 04:57 AM.. |
|
|
|
|
|
|
#16 | |
|
Registered User
Join Date: May 2007
Posts: 293
|
http://www.copyright.gov/fedreg/2006/71fr68472.pdf
LIBRARY OF CONGRESS Copyright Office 37 CFR Part 201 [Docket No. RM 2005–11] Exemption to Prohibition on Circumvention of Copyright Protection Systems for Access Control Technologies circumvention of technological measures employed by or on behalf of copyright owners to protect their works (hereinafter ‘‘access controls’’). ----- 5. Computer programs in the form of firmware that enable wireless telephone handsets to connect to a wireless telephone communication network, when circumvention is accomplished for the sole purpose of lawfully connecting to a wireless telephone communication network. Quote:
|
|
|
|
|
|
|
#17 | |
|
Registered User
Join Date: Jan 2006
Posts: 75
|
Quote:
|
|
|
|
|
|
|
#18 | |
|
Registered User
Join Date: Jan 2007
Location: Ireland
Posts: 322
|
Quote:
|
|
|
|
|
|
|
#19 |
|
Registered User
Join Date: May 2007
Posts: 293
|
You are so right, just like those nerds Steve Jobs and Bill Gates eh? dear oh dear, whatever became of those little dweebs i wonder?
|
|
|
|
|
|
#20 |
|
Registered User
Join Date: Jan 2007
Location: Ireland
Posts: 322
|
|
|
|
|
|
|
#21 | |
|
Rev B, Bug Free
Join Date: Dec 2003
Posts: 4,166
|
Quote:
This sort of stuff is what Europe does and they dont have many of the cell problems that we have
You can't quantify how much I don't care -- Bob Kevoian of the Bob and Tom Show.
|
|
|
|
|
|
|
#22 | |||
|
Registered User
Join Date: Feb 2007
Posts: 3,706
|
Quote:
Quote:
Quote:
...Yeah this nerd might be Steve Jobs & Wozniak combined. Okay, maybe right now 10% of SJ and Woz combined. But he's got the business sense, the phone will probably sell in excess of $3k -- there's still SIX bloody days to go! And he's already making back 300% of his investment. Additionally, let's just say right now several covert arms of big telco companies are contacting him with many offers he can't refuse... ![]() |
|||
|
|
|
|
|
#23 | |
|
Registered User
Join Date: Apr 2006
Location: The Ansible
Posts: 11,888
|
Quote:
|
|
|
|
|
|
|
#24 |
|
Registered User
Join Date: Jul 2007
Posts: 246
|
The nerd that did this is in HIGH SCHOOL!!! Or just entering college. He's off to school so he said on his blog he'll be too busy to keep doing these. i think he did this just to do it, not to make it into a business. Definately bright future after he graduates, whatever he decides.
|
|
|
|
|
|
#25 | |
|
Registered User
Join Date: Jan 2007
Location: Ireland
Posts: 322
|
Worldwide
Quote:
But I think the joke will be on them because I suspect the phone that will be sold outside the US will be 3G and not the same model at all. Given how desperate many Canadians seem to be, it might be purchased by one of them, but my bet is they will all be outbid by some drug dealer in Naples with so much hot money he doesn't know what to do with it all but could use some bling.The signature is a great idea, it gives it historical value and authenticity. |
|
|
|
|
|
|
#26 | |
|
Registered User
Join Date: Aug 2006
Posts: 664
|
Quote:
I see no problem with the present arrangement. -Clive |
|
|
|
|
|
|
#27 | |
|
Global Moderator
Join Date: Jun 2004
Location: .US
Posts: 9,127
|
Quote:
|
|
|
|
|
|
|
#28 | |
|
Registered User
Join Date: Sep 2005
Posts: 395
|
Quote:
The Library of Congress, as the arbiter of all Copyright issues in the USA, has the power to set up specific exemptions to the DMCA. And one of the exemptions that it has currently enacted is a requirement that firmware modifications which are undertaken with the sole intent of allowing a cellular telephone to operate in another carrier's network, are NOT violations. Now, since this modification requires a soldering iron, I suppose that it might not be protected by the LoC exemption. But macrumors is reporting a firmware-only hack is apparently available too. [edit] But then again, once the hack is finished, the hardware will end up in exactly the same state that it was in before the hack. Only the contents of Flash will have changed, and in my understanding that means that the only tangible thing different between a locked iPhone and an unlocked iPhone is firmware. Last edited by lfmorrison; 08-24-2007 at 03:05 PM.. |
|
|
|
|
|
|
#29 | |
|
Registered User
Join Date: Aug 2007
Posts: 3
|
Quote:
This is a great step forward in making the iPhone a truly potent contender in the marketplace worldwide. Think AutoCAD back in the 90's, or Microsoft in China right now. |
|
|
|
|
|
|
#30 | |
|
Registered User
Join Date: Aug 2007
Posts: 3
|
Quote:
Even now, there are services available to unlock your Motorola, Nokia, Sony phones, for a fee. You're a fool if you think this market is not ready to explode. Do you own at&t stock by any chance? |
|
|
|
|
|
|
#31 | |
|
Global Moderator
Join Date: Jun 2004
Location: .US
Posts: 9,127
|
Quote:
|
|
|
|
|
|
|
#32 |
|
Registered User
Join Date: Nov 2001
Location: Southern CA
Posts: 1,265
|
So on these hacked iPhones, what does that mean for the iPod part of it? I know that with un-hacked iPhones, once you end your at&t service, the iPod stops working which sucks as your are left with an expensive (but nice looking) brick.
If this hack frees up the iPod part of it so it'll work forever without service from at&t, this might be a useful hack. And I bet many people in a few years will be looking to get the iPod part of their iPhones working. |
|
|
|
|
|
#33 |
|
Registered User
Join Date: Aug 2007
Posts: 1
|
software unlocking hack
No need to hardware crack your iphone, no need to buy a unlocked iphone from ebay, there is a software hack available : http://www.engadget.com/2007/08/24/i...ugust-24-2007/
iPhone video |
|
|
|
|
|
#34 | |
|
Registered User
Join Date: Apr 2003
Location: united mexican states
Posts: 1,326
|
Quote:
2. hobbyists do it because of the challenge, just to prove it is possible or just for fun. just to see if they can. they don't do it to spur sales. 3. those nerds who live on their parents basements are making a pretty penny on ebay as we speak. |
|
|
|
|
|
|
#35 | |
|
Registered User
Join Date: Jun 2006
Posts: 62
|
Quote:
The bid you see on eBay is a fake. The seller has lost all hope of selling it because the buyer will never pay that much. Same thing happened to me when I sold my PSP online. It got bit up to $1000 very quickly and then the buyer never contacted me. I had to request a final value fee reimbursement after three weeks of waiting. eBay is NOT the place to sell expensive electronics like this. Their system is not secure enough. Anyone can create an account there with the sole intent of ruining auctions this way and there's nothing that eBay can do to stop it before it's too late. Craigslist works pretty well from my experience. And if you choose to sell locally, then you usually don't even have to pay for shipping. Just meet up and exchange merchandise for cash. |
|
|
|
|
|
|
#36 | |
|
Registered User
Join Date: Jan 2007
Location: Ireland
Posts: 322
|
Quote:
I think the usual translation for that is someone made me a ridiculously high offer to end the auction now. The problem with ebay is not the lack of protection for sellers - they get plenty - but the lack of protection for buyers. |
|
|
|
|
|
|
#37 |
|
Registered User
Join Date: Jan 2005
Posts: 262
|
Anyone care to speculate what recourse the owner of one of these hacked iPhones has in the event of failure. Oh, let's say the home button stops functioning. Can the owner, who theoretically paid over $600 for the device, take it to an Apple store for repair under warranty? Can they get it repaired by the hacker they purchased it from? Can they just kiss their $600+ goodbye?
I'll tell you what they CAN do. They can get on a forum and start bashing Apple for refusing to stand behind their products. They can claim they didn't know their iPhone had been modified and continue bashing Apple for not making an exception in their case. They can do a whole lot of things to make Apple look bad and they don't even have to admit they have a modified device. "Those S.O.B's at Apple told me they wouldn't fix my iPhone. They said it had been modified and I was out of luck. Don't do business with those crooks at Apple. They don't stand behind their crappy products!" I can read it now. It is shear foolishness to think this will become mainstream and widespread. Complete nonsense. |
|
|
|
|
|
#38 | |
|
Registered User
Join Date: Mar 2006
Location: Arcadia CA.
Posts: 23
|
Quote:
AFAIC, I'm not willing to either buy the phone or modify it because I hate ATT and I'm not lucky with mods so that's that. Now if someone did the mod and provided me the working phone with my sims card that i could see work I may take a chance but only then. I would still be afraid Apple would somehow change software to eliminate the open architecture though so I wouldn't pay much for it anyway. I agree we need to hear from Apple to see what they want to do about this before any of us get too excited.
G
Last edited by Timeline; 08-27-2007 at 03:32 PM.. |
|
|
|
|
|
|
#39 |
|
Registered User
Join Date: Nov 2001
Location: Hong Kong
Posts: 8,383
|
Great Business Week article:
"Why Apple Can't Stop iPhone Hackers" It also seems to imply that the incredible eBay bids were genuine, with a catch that the kid would also sign an employment contract.
Episode One: A New Hope.
|
|
|
|
|
|
#40 | |
|
Registered User
Join Date: Nov 2001
Location: England
Posts: 1,085
|
Quote:
If a software unlock comes out, then independent phone shops will start unlocking iPhone. I know a fair few people who've said they won't buy an iPhone unless it can be unlocked (often for travelling over Europe, or simply for preference of a certain network operator). These people wouldn't do an unlock themselves, but would utilise the service of such shops. Of course, this all depends on a software unlock. I don't think the shops would touch a hardware one. At least, not for the £20 they usually ask for ![]() Amorya |
|
|
|
|
![]() |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| Display Modes | |
|
|