-
SHSHs and 4.3
Hello guys
To make a long story short, I recieved a new iphone 4 with iOS 4.2.1 yesterday. Previously, i had saved my SHSH for my old i4 (had to exchange it for hardware failure), but, of course, those are not compatible with my newer i4.
My question is, now that apple has stopped signing 4.2.1, will I be able to retrieve my SHSHs for 4.2.1 or, once I upgrade to 4.3, i'll be stuck on that version (and newer ones)? Just a reminder: now I am on 4.2.1, so I want to know if having the FW in the phone enables me to get those "old" SHSHs; since TinyUmbrella was only able to get my 4.3 SHSHs.
Hope you understood my question.
Thank you in advance,
F
PS: I pressed "make my life easier" in Cydia yesterday, and it still says that a request to the TSS server is pending. Has this anything to do?
-
In theory, it is possible to retrieve a partial shsh from the NOR images actually stored on the phone.
Ih8sn0w has said that he has started working on a tool to do this, but has said nothing since.
If this tool is ever released, it will only save 4.2.1 shsh while 4.2.1 is the OS loaded on the device. As soon as you load 4.3 onto your device you destroy any chance of saving a 4.2.1 SHSH
Aside from this "possible future tool" you have no way of getting a 4.2.1 SHSH.
Now Apple has stopped signing 4.2.1, cydia, iSHSHit and TinyUmbrella will only be able to get a 4.3 SHSH for your device.
-
Olethros, thank you for your answer. I still
Have a doubt, though. What does a "partial SHSH" mean? I hope that Ih8sn0w releases that tool soon, but it seems they aren't as fast as other dev teams (for instance, the mac version of iREB is "almost complete" since months ago).
Thank you for your answer
F
-
there are about 20 blobs included in a full SHSH, these include blobs for NOR images (LLB, iBoot etc) as well as for the upgrade and restore ramdisks.
Only the blobs that are used in the boot (and recovery mode) chain are saved to the device, other blobs (like the blobs for the restore and upgrade ramdisks) are not saved.
This tool is only able to extract the SHSH blobs that are saved on the device (which is why I refer to it as a partial SHSH)
Without the complete SHSH, you will need to rely on an exploit like limera1n plus specially patched ramdisks (custom IPSW) to help write back the partial SHSH to the device.
If you had the whole SHSH saved, then you could restore original 4.2.1 IPSW and "replay" the saved SHSH during restore using TinyUmbrella's TSS server for example.
-
Thank you very much! Now I'm aware of my situation. You helped me a lot. Bad news though haha.
I have a problem with bluetooth (it's not finding ANY devices to pair with). Do I open a new thread or just rename this one? I don't want to mess the forum. Thanks
-