[討論] 使用已備份shsh,藉由TinyTTS 成功降級

Monday, February 22, 2010

Looking Ahead...



As many of you have noticed, the new shsh files contain a new key named APTicket. I still need to do a more thorough investigation of this key but my gut tells me that it is an indication that Apple intends to try to stop us from bypassing their TSS server for local restores.

My guess is that in future versions of iTunes, Apple will probably handle the TSS request/response and later this year implement the code to process the response in the actual bootrom of the device. Here's what I mean:

• The newer iTunes versions will send a certificate request in the TSS request by adding a new key to the TSS request.
• Their TSS server will create a new certificate with an effective date attached to it. (Making it invalid if used after that date)
• Until the new bootrom rolls out, iTunes will handle the decrypting of the response blobs using the nifty new signed certificate response ala APTicket.
• Once Apple ships new devices with the bootrom capable of validating the new APTicket (or whatever they call it in the future) they can add logic to check the bootrom of the device and conditionally process the response from the TSS server(for old bootroms) or allow the device to process it(for new bootroms).

Looking at the above, it's a fairly bullet-proof means of stopping local restores. Since the APTicket will be signed and likely shsh'ed I wouldnt be surprised if they load APTicket or something like unto it BEFORE the LLB is loaded. This way they can not only control what VERSION of the firmware you install, they can also control WHEN you can install it by a means with far longer and sharper teeth.

If they implement the above, the only means of restoring will be via jailbroken device.

Tuesday, February 9, 2010

iPhone 3GS, iPod Touch 2G/3G 3.1.3 Support



I've updated Umbrella / TinyTSS to now support 3.1.3. If you haven't downloaded v221 yet please do so as there were a couple of cosmetic bugs that I've fixed as well as a potential issue with iPod Touch 3g/2g support for 3.1.3.

As always stay away from official updates if you value your jailbreak and/or unlock.

文章轉載：http://thefirmwareumbrella.blogspot....&max-results=5

下載：http://www.mediafire.com/file/0zblnijwiyj/fw-umbrella-semaphore-221.zip


請問一下這部落格是不是在說明,使用有備份3.1.2(含)以前shsh前提下,無需借助蘋果公司驗證伺服器及Cydia驗證伺服器完全恢復降級方法？






先用 usbview 工具取得自己3GS的 ECID 碼和 ChipID碼，然後利用umbrella.exe 工具產生驗證資料（可以指定ECID 、ChipID(3GS是8920)和固件版本），利用TinyTTS 工具搭建本地驗證伺服器，然後在hosts檔中加入“gs.apple.com 127.0.0.1”將iphone驗證伺服器位址指向自己的電腦，這樣就可以通過itunes來完成降級動作