Oct 11, 2009
A Timely Warning - ipt3g
It seems the exploit that we were hoping would work (untethered) for ipt3g does not work as apple had implemented an unexpected fix.
That said, it is imperative that if you (or anyone you know) have an ipod touch 3g please please please get the shsh file from apple before they stop signing 3.1.1. Now that the jb is out, I think we can count the time apple will sign that fw version with days rather than weeks.
Repositories and applications that allow a user to obtain their SHSH files for future use cannot be more important to ipt3g users than right now. Cydia and my application are the two best ways to protect yourself against the firmware version restore lockout.
Pass it along, tell a friend, tweet. Do whatever you can for your ipt3g friends to help them.
Oct 9, 2009
Coming soon...
UPDATE: I've started working on the module that will intercept https requests from itunes to their activation server (albert). I'm adding a much-needed GUI to TinyTSS along with an option for soft/local activation. Soft Activation will (as of now) probably require some SIM information from your friend-with-an-official-carrier's SIM. Until/Unless I find a way to activate using an unofficial imei/imsi, this may be required.
UPDATE: I've been able to capture an activation request/response session. I'm looking at what would be required to turn this to an offline feature. After looking at it, this solution may soft activate unlocked phones as well. This means it would no longer be necessary to switch sim cards with a friend on an official carrier to activate your unofficial sim. I'll keep you all posted with more developments.
To make TinyTSS a bit more useful, I've decided to take a crack at implementing offline activation. Currently, TinyTSS will spoof the real TSS service but it still requires a net connection because of the activation request that is sent to albert.apple.com. I'm currently working on adding that functionality to TinyTSS and maybe (if possible) adding the activation response grabber to Umbrella. My hopes are that this will allow complete and total offline firmware restoration.
As this is quite a bit more difficult to implement, it will take me some time to implement. My motivation is luke-warm for the feature but I'm curious how many of you would be interested in this functionality. Vote with your comments (heh or your donations :) )
On Donations-
I've always sworn that Umbrella and TinyTSS will never have a donate button marring their UI. I don't believe in shamelessly begging folks for cash. So, because I have received quite a few emails asking how I can be reached for donations, I've decided to put a donate button on the sidebar. It's small and fairly tasteful.
Note that I appreciate anything you feel like donating. But remember that donations are completely voluntary. (Although big donations are a great way to get someone's ear). I never expect anything but I greatly appreciate what you do give.
Oct 8, 2009
Support for 3.1.2 + SHSH parsing
Umbrella and TinyTSS have been updated to provide support for 3.1.2. I've also made a couple cosmetic modifications (an about menu option).
TinyTSS now also reconstitutes the shsh response from the binary restore files thanks to information I got from theheadfl. TinyTSS will detect the version of the restore files based on the .dmg files and recreate a file that can be used with TinyTSS to perform restores; just like the file Umbrella produces. TinyTSS also pulls the ECID out from the shshs for the naming of the file.
And, because someone complained I've added a build number to the archive file. I know it's not full versioning but tbh I don't get paid for this so I really don't care enough to do more.
207: Changed the AWFUL logging format for TinyTSS.
213: Fixed an egregious error with 3.0.1 - Wrong plist in the distro - somehow I was using the iPhone 1g 3.0.1 ipsw buildmanifest - Thanks CleanAir75
215: Added full partial digest checking for detection of shsh version.
216: Added ipt3g/2g 3.1.2 shsh support! Removed unnecessary class(es)
217: Fixed a stupid bug concerning SAX parsers and xml entity resolvers... ugh.
218: Added 3.1.3 support - Not that I can think of any real reason to restore to 3.1.3
Enjoy
Download
fw-umbrella-semaphore-218.zip md5: a0e5082be5aa480539a3444dcd0bf920
fw-umbrella-semaphore-218.zip sha1: b48159004a82714b316029ade808ac5810d92b6c
umbrella.exe md5: 6a964cb8f507748244358115c6639387
umbrella.exe sha1: 9dcda837bcd2881b3d44c0a36bccad809a7a3766
tinytss.exe md5: 16ed36f69d7b918524f70695cbe592ca
tinytss.exe sha1: 600b6d0c3a7c9d2fa45d5b61f2c7f92d3159deb0
umbrella64.exe md5: 1b722a485d03e19fca9d299ba2f790d8
umbrella64.exe sha1: a2d7daa57f7790121d8071371d2e7156cca9db11
tinytss64.exe md5: a6eca19690a53f3963d7aed3e1c68d4d
tinytss64.exe sha1: a43448a271093b9ee454744a38d75949cd729747
Umbrella.dmg md5: 04d7654cee890a61e5cf471a0c183995
Umbrella.dmg sha1: 6616c86ee997cfc5837b6705d6ae6c3eaa41757c
TinyTSS now also reconstitutes the shsh response from the binary restore files thanks to information I got from theheadfl. TinyTSS will detect the version of the restore files based on the .dmg files and recreate a file that can be used with TinyTSS to perform restores; just like the file Umbrella produces. TinyTSS also pulls the ECID out from the shshs for the naming of the file.
And, because someone complained I've added a build number to the archive file. I know it's not full versioning but tbh I don't get paid for this so I really don't care enough to do more.
207: Changed the AWFUL logging format for TinyTSS.
213: Fixed an egregious error with 3.0.1 - Wrong plist in the distro - somehow I was using the iPhone 1g 3.0.1 ipsw buildmanifest - Thanks CleanAir75
215: Added full partial digest checking for detection of shsh version.
216: Added ipt3g/2g 3.1.2 shsh support! Removed unnecessary class(es)
217: Fixed a stupid bug concerning SAX parsers and xml entity resolvers... ugh.
218: Added 3.1.3 support - Not that I can think of any real reason to restore to 3.1.3
Enjoy
Download
fw-umbrella-semaphore-218.zip md5: a0e5082be5aa480539a3444dcd0bf920
fw-umbrella-semaphore-218.zip sha1: b48159004a82714b316029ade808ac5810d92b6c
umbrella.exe md5: 6a964cb8f507748244358115c6639387
umbrella.exe sha1: 9dcda837bcd2881b3d44c0a36bccad809a7a3766
tinytss.exe md5: 16ed36f69d7b918524f70695cbe592ca
tinytss.exe sha1: 600b6d0c3a7c9d2fa45d5b61f2c7f92d3159deb0
umbrella64.exe md5: 1b722a485d03e19fca9d299ba2f790d8
umbrella64.exe sha1: a2d7daa57f7790121d8071371d2e7156cca9db11
tinytss64.exe md5: a6eca19690a53f3963d7aed3e1c68d4d
tinytss64.exe sha1: a43448a271093b9ee454744a38d75949cd729747
Umbrella.dmg md5: 04d7654cee890a61e5cf471a0c183995
Umbrella.dmg sha1: 6616c86ee997cfc5837b6705d6ae6c3eaa41757c
Oct 2, 2009
Umbrella & TinyTSS - iPod Touch 3g support
I've decided the changes I've made to Umbrella warrent a brand new post. What you'll find in the latest version of Umbrella is:
-.shsh. If that file already exists, the app will ask you for a new name for the file or if you just want to overwrite the file hit cancel. If you leave the name blank the file will be discarded.
That's pretty much it. Oh. Incidentally. The readme is a bit out-dated. :) I really don't care enough to fix it.
UPDATE: If you have a Mac and happen to be using the .dmg be sure you copy the Umbrella application to your desktop or some other location OUTSIDE of the .dmg as the application won't be able to save your .shsh file unless the application is running OUTSIDE of the .dmg file. Sorry for the inconvenience.
UPDATE: I've worked out with Saurik the server to point to on his side to ensure your shsh files are saved on his machine as well as on your machine. The default repo is still 'Apple' but if you select 'Saurik - Cydia' then the request will be sent to his server and forwarded to Apple. Then the file will come back to you and you will have the file locally and Saurik will have it on his server(s).
UPDATE: I've added 3.1.2 support as well as parsing the temporary directories you may have saved for a 3.0 or 3.0.1 restore... (actually it will detect any restore files from 3.0 up for iphone and 3.1.1 for ipt 2g/3g). TinyTSS will recreate your shsh file if you pass the PARENT directory of the TMP directories that you saved. For example, if you saved Per123.tmp AND Per321.tmp and put them in a directory named /tmp you would run tinytss with:
java -jar tinytss.jar -f /tmp
And tinytss will try looking inside of tmp and the first level subdirectories for device restore files.
Keep in mind, if you don't have all of the image files you need, you will not be able to create your shsh file. Period.
Thanks to theheadfl for info on parsing the apple image files!
Download it above.
If you need an md5 checker I like: Nirsoft's MD5 Checker
- Native Mac OS X Application
- Built - in GUI
- The .exe files now are console-less.
- The saved shsh files are in the format {ecid}-{version}.shsh
- Various code-cleanup under-the-hood.
Labels:
3.0,
3.0.1,
3.1,
3gs,
ecid,
ecid shsh grabber,
iphone,
ipod touch,
restore firmware,
shsh grabber
Subscribe to:
Posts (Atom)