Just like the first hardware unlock, it is now possible to downgrade to bootloader 3.9 and unlock.

First of all, HUGE thanks to TA_Mobile and IMTH for getting us the secpack from 1.1.3 Also, thanks to psp_sully for giving me a 1.1.2 OTB phone to play with. Without them there would be no unlock, and no blog post.
YOU VERY WELL MAY BRICK YOUR PHONE WITH THIS. Be careful. I have done it sucessfully on two phones, and have never bricked an iPhone in my life.
So lets get down to business. It is a hardware method to downgrade the bootloader, and I am assuming you are familiar with the old hardware method, so I won't repeat steps. You need to have a 1.1.2 4.6 phone for this to work. If you upgraded to 1.1.3, have fun waiting for 1.1.4!

http://iphonejtag.blogspot.com/2008/...-unlocked.html


EDIT: FAQ

o Do you have a link to the 3.9 NOR dump?
Yep. Here. This is first 0x20000 bytes of the old nor dump. So you don't need to do any hex editing.

o Where can I get the rest of the files?
They are linked in geo's blog post.

o Was the secpack for 1.1.3 extracted?
Yep.

o Is this a software method?
No. This method is a hardware-based unlock that requires you to open the iPhone. If you are a n00b, then don't do it.

o Got a tutorial?
You bet.

o Is there a software-only method?
No. For now. Stop asking for it on this thread, it will be out when it is out.

o What does this news mean to owners of 3.9BL iPhones?
It means good stuff. Now that we have the 113 secpack, any accidental update to 113 can be completely reversed.

o Who did it?
The usual suspects; gray, dinopio, ta_mobile, imth, geo, psp_sully, devteam, and probably others.


FINAL WORDS OF CAUTION
There is a high probability in bricking/scratching/damaging/ruining your $400+ iPhone if you don't know what you are doing.

People are reporting success using this method, but there are not a few reports of losing Wifi during the downgrade. Make sure you INSTALL A TERMINAL ON THE IPHONE BEFORE YOU START in case something goes wrong.

Whatever problems you run into during the bootloader downgrade process NEVER EVER RESTORE/UPGRADE TO 1.1.3 IF YOU ARE STILL RUNNING ON THE 4.6 BOOTLOADER.

Just a quick question, does this method involve physically disassembling the phone? I'm asking because it is a hardware method.

@duyvan82: yes you have to disassemble and solder.

French traduction for one who wants!


http://www.neurocratie.fr/index.php?cat=&scat=&art=67

Originally Posted by scoundrel_ae

Where can we get the instructions of the first harware unlock?

It's not on GEOHOTS blog?

Thanks

Yeah it is on his blog, look at the December 2007 area about 1/4 the way down are the instructions for the hardware part.

From what I understand a software unlock should be out fairly soon as the method posted by GeoHot downgrades the bl to 3.9. So AnySim should work when modified to have the new secpack and be able to downgrade the bl.

The bad news is to upgrade to 1.1.3 we have to wait till 1.1.4 to be released to get the secpack.. which may take few months.

since u downgraded to 3.9 then u'll be able to update to 1.1.3 normally and no need to wait for 1.1.4 secpack

Originally Posted by s!lencer

From what I understand a software unlock should be out fairly soon as the method posted by GeoHot downgrades the bl to 3.9. So AnySim should work when modified to have the new secpack and be able to downgrade the bl.

The bad news is to upgrade to 1.1.3 we have to wait till 1.1.4 to be released to get the secpack.. which may take few months.

No. you don't. The trick is to downgrade the bootloader BEFORE upgrading to 1.1.3. This "waiting" for 1.1.4 is only valid for those who have bootloader 4.6 AND 1.1.3.


So once again let me remind everyone here specially those with OTB 1.1.2 iPhones to NOT UPGRADE TO 1.1.3 until you have downgraded your bootloader.


EDIT: beaten by tatesman.

Originally Posted by s!lencer

The bad news is to upgrade to 1.1.3 we have to wait till 1.1.4 to be released to get the secpack.. which may take few months.

Maybe not. With a 3.9 bootloader, you should be able to modify the 1.1.3 baseband with a 1.1.3 secpack to unlock it. You need to downgrade the bootloader on OTB 1.1.2 FIRST or you will have to wait for 1.1.4. Remember, bootloader 4.06 will only allow a baseband erase with a secpack from a newer firmware. Correct me if I'm wrong, but that is my understanding with all the info I read about 3.9bl and 4.06bl

Originally Posted by SLIPLOCK

@leximus
mate read carrefully, this method downgrade the bl from 4.6 to 3.9.
after that you can do all that you want with the old tools...

And what the point? Old tools? And what? hxxp://steve-jobs.com/iphone/iphone-...er-method.html read this and tell me - what old tools needed? I didn't find any old tools? Just a dump of loader and rewrite several bytes with sim validation. And this definitely do not need any old tools. And as you see it is [26 august].

Event if it goes down to 3.9 why you need this? This tutorial shows that you do not need it at all.... So this news is not actual.

And one more note: be careful when opening main part of iPhone back (gray one) you can damage ##00 phillips stuff. (unfortunately I did one)


Correcting my self: didn't notices in this method - this is for 1.0.2 FW,

So my excuse for that!