The latest version of redsn0w now supports building custom iOS 5.1.1 firmware to preserve your baseband. Here’s how to build your own custom iOS 5.1.1 firmware.

Let’s get straight to business:

1. Download the latest version of redsn0w from Dev Team’s blog.

2. Download original iOS 5.1.1 IPSW for iPhone 4 (GSM) or iPhone 3GS directly from Apple.

3. Launch redsn0w and go to Extras > Custom IPSW.

4. Point to the IPSW you just downloaded in Step 2. If you have a 3GS, you will be prompted whether you have a 3GS with old or new bootrom. Select appropriately.

5. Redsn0w will start building custom iOS 5.1.1 while disposing the files that will update your baseband. Once completed, you will find this file on the same file path as the original IPSW with the prefix “NO_BB…” followed by the file name.

6. Be sure to pawn DFU your iPhone with redsn0w by going to Extras > Pwned DFU. Simply follow the on-screen instructions.

7. Once your iPhone is in DFU, launch iTunes and press Shift+Restore (Windows) or Option+Restore (Mac). Be careful not to select the wrong IPSW during restore! If you get error 3194, you need to edit your hosts file. See here.

8. Wait for it to finish. Your iPhone will attempt to reboot and may stuck on the Apple logo with empty progress bar due to tethered jailbreak.

9. Launch redsn0w again > Extras > Just Boot. Follow on screen instructions.

10 .Your iPhone will boot up normally and follow the instructions here to unlock with ultrasn0w.

That’s it! If you encounter any issue, leave your comments below.

If you find this post useful, please do us a small favor by clicking ‘LIKE’ or ‘Recommend on Google+’ below.

This is probably the best redsn0w version yet as it allows you to downgrade iOS on iPhone 4S or iPad 2/3 without using iTunes.

By downgrading your iOS to an earlier version such as iOS 5.0.1, you can enjoy an untethered jailbreak on your iPhone or iPad once more!

Release notes by MuscleNerd and some warnings:

• The new feature is at Extras->Even More->Restore

• You cannot downgrade without the personalized SHSH blobs for your device at that lower firmware.  You need to have fetched those blobs while the signing window was open, using either Cydia’s built-in TSS@Home feature, or with TinyUmbrella.  The new Restore screen of redsn0w lets you choose either the remote blobs or local ones (for the earlier firmware).  If you don’t know where TinyUmbrella put your blobs, TinyUmbrella has a button that will show you (copy them out of that folder and feed them to redsn0w).

• The A5 downgrade method actually updates to the latest firmware before downgrading to the earlier one.This process updates your baseband to whatever is newest.  DO NOT USE THIS METHOD IF YOU RELY ON UNOFFICIAL UNLOCKS of your iPhone4S.  Those who used the temporary SAM technique to unlock their iPhones to specific SIMs shouldn’t be affected by this baseband update.

This latest version of redsn0w is available for Mac and Windows.

iOS Downgrading Steps for iPhone 4S, iPad 2 or the new iPad (future):

Steps:

1. Start the new redsn0w 0.9.11b1 (Windows or Mac)

2. Connect your device and close iTunes if it launched itself automatically.

3. Go to Extras.

4. Click on Even More.

5. Click on Restore.

6. You will see IPSW, Local and Remote. Click on IPSW, and point redsn0w to the firmware file to which you want to downgrade to e.g. iOS 5.0.1. Redsn0w will now ask you for the stock iOS 5.1.1 firmware.

7. If you have your SHSH blobs saved:

• Locally on your computer – click Local and find the .plist file that has the SHSH blobs for your device. Click Next.

• Remotely on Cydia – redsn0w should automatically put your device into Recovery mode to fetch the files from Cydia server.

8. redsn0w will automatically stitch the SHSH blobs to the IPSW firmware file which you selected, and then it will automatically restore your device without having to launch iTunes.

Do note that this first release may contain some bugs so only use it if you’re desperate.

Share your experience and thoughts about this new tool by leaving your comments below!

Do you plan to update to iOS 5.1.1 but need to unlock your iPhone 4 or 3GS? Here’s the ultrasn0w fixer for iOS 5.1.1. Read below on how to install it.

Important Notes:

1. Your iPhone 4 or iPhone 3GS running on iOS 5.1.1 must already be jailbroken with its baseband preserved. You can jailbreak it with the latest redsn0w (download it from the Dev Team’s blog) or build a custom firmware using the same tool.

2. Supported basebands are listed below. Everything else is NOT supported.

• 01.59.00 (iPhone 4)
• 04.26.08 (iPhone 3GS)
• 05.11.07 (iPhone 3GS)
• 05.12.01 (iPhone 3GS)
• 05.13.04 (iPhone 3GS)
• 06.15.00 (iPhone 3GS)

Installation Steps:

1. Download i-FunBox for Windows or DiskAid for Mac.

2. Launch i-FunBox or DiskAid and go to /private/var/root/Media.

3. Inside Media folder create a folder called Cydia.

4. Now inside Cydia folder create an AutoInstall folder. Note: The folder name is case-sensitive so be sure to name it accurately. It should look like the following:

/private/var/root/Media/Cydia/AutoInstall

5. Now copy ultrasnow.deb [ultrasn0w_1.2.5.deb] file, MobileSubstrate [mobilesubstrate_0.9.3997_iphoneos-arm.deb] file and ultrasn0w fixer patch into the AutoInstall folder.

6. Reboot iPhone (remember it’s currently boot tethered! So start redsn0w > Extras > Just Boot).

What a surprise from Apple (as always) on a Monday! They’ve just released iOS 5.1.1 firmware for iPhone, iPad and iPod touch.

Here are the change logs – iOS 5.1.1 improvements and bug fixes:

• Improves the reliability of using HDR option for photos taken using the Lock Screen shortcut.
• Addresses bugs that could prevent the new iPad from switching between 2G and 3G networks.
• Fixes bugs that affected AirPlay video playback in some circumstances.
• Improved reliability for syncing Safari bookmarks and Reading List.
• Fixes an issue where ‘Unable to purchase’ alert could be displayed even after a successful purchase.
• Patches important URL spoofing vulnerability in Safari
• Baseband version for iPhone 4S (2.0.12), iPhone 4 (4.12.01), iPhone 3GS (5.16.05)

You should never install any new update if you rely on an unlock or untethered jailbreak, well not until proper tools or methods are available to unlock or jailbreak your iPhone.

MuscleNerd specifically warned A5 and A5x devices owners about updating to iOS 5.1.1, although hacker ion1c has already tweeted that the new iPad (3) has been successfully jailbroken.

Remember to save your SHSH as always!

Let’s hope the untethered jailbreak for iOS 5.1 and iOS 5.1.1 will be released soon!

Are you still trying to unlock your AT&T iPhone? AT&T has just updated their unlocking requirements and policy, probably due to serious abuse.

AT&T announced early last month that they can provide free unlock subject to eligibility. They seemed to have revised their policies a few times and it becomes apparent that they now have become stricter. Thankfully, I managed to unlock mine without any hassle within 48 hours.

The following email was shared by one of our readers after his request was denied by AT&T:

AT&T will unlock an iPhone under the following circumstances:

• The person requesting the unlock is a current AT&T customer or a former AT&T customer who can provide the phone number or account number for their account.

• The iPhone was designed for use on AT&T’s network; all contract obligations, including any term commitment, associated with the device to be unlocked have been fully satisfied

• The iPhone has not been reported lost or stolen.

Also, current customer accounts must be in good standing with no past-due amount or unpaid balance and has been active for at least sixty (60) days. Former customer account may be eligible for unlocking so long as they owe AT&T no Early Termination Fee or other unpaid balance.

**AT&T will unlock an iPhone for an active and deployed member of the military who is a current AT&T customer in good standing and is able to provide AT&T with deployment verification; and for a person who purchased the iPhone from an authorized location at the ‘no commitment’ price and can provide proof of purchase.

Here’s another generic email reply by AT&T also shared by our readers:

Issue Tracking Number: CM20120418_xxxxxxxx

Dear Customer:

Thank you for your recent inquiry regarding your AT&T service. We apologize for any inconvenience this may have caused you. The issue has been resolved.

Should you have any further needs regarding this issue, please do not hesitate to call us at 1 800 331-0500 and reference the tracking number shown above.

Sincerely,
AT&T

Surprisingly, some of our readers are lucky enough and managed to get their iPhone fully unlocked even after receiving similar emails above.

If you currently have a baseband that can be unlocked with ultrasn0w or Gevey SIM, it’s still worth trying whether they actually did the unlock for you or not.

In this instance, you can test it by deactivating your iPhone and let Apple re-issue you a new activation ticket. Alternatively , you can also do a full restore but you must preserve your baseband just in case it was never unlocked by AT&T. You can do this by creating a custom firmware either with sn0wbreeze or redsn0w.

However, assuming that your iPhone is already jailbroken, you might want to avoid doing a full restore.

Follow the steps below:

1. Download the latest redsn0w from Dev Team’s blog.

2. Connect your iPhone to your computer and launch redsn0w.

3. Click on “Jailbreak” and you will see that your iPhone is connected in a “Normal” state but you need to put your iPhone in DFU mode.

4. Redsn0w will now detect build version of your iPhone.

5. After successful detection of your build, check “Deactivate” and uncheck all other  options (also uncheck Install Cydia).

6. Your iPhone will be deactivated. Remove your SIM and reboot your iPhone.

7. Connect it with iTunes and insert your SIM card. If all goes well you will see the following message on iTunes. Try with another SIM card to double check.

“CONGRATULATIONS, YOUR IPHONE HAS BEEN UNLOCKED!”

If it doesn’t activate, that means it’s still locked and you can try your luck again with AT&T. Repeat the steps above to re-activate your iPhone.

Share your experience with us and other fellow readers.

If you find this post useful, please do us a small favor by Twitting, clicking ‘LIKE’ or ‘Recommend on Google+’ below.

Many iPhone users have recently unlocked their iPhones using loktar_sun’s SAM unlock method. The unlock was done via Apple’s “activation ticket.” What is this activation ticket anyway? Read on…

Activation is basically a process by which a new or recently restored iPhone can get by the “Emergency Call Screen” and it also enables your iPhone to connect to a cellular network.

The code or “ticket” that allows activation resides in the iOS lockdownd folder.

When you connect your iPhone after a full restore, iTunes generates an Activation Token and sends it to Apple’s activation server. Once the Activation Token is validated, the server will generate a WildcardTicket and signs it with Apple’s private key.

The WildcardTicket is then used for activating your iPhone’s baseband. It is stored in the file “/var/root/Library/Lockdown/activation_records/wildcard_record.plist”. It has all the information about SIM or network unlocks. Factory-unlocked iPhones receive a WildcardTicket that permits any SIM card.

Apple’s “Albert” servers handle all iDevice related activations which was recently patched by Apple to discontinue any “fake” activations via loktar_sun’s SAM unlock method.

The iPhone needs a cellular data connection for the first time, after the activation in iTunes. You can make calls if an alert says “iPhone is activated”.

Each ticket is unique to each SIM card and iPhone so this is the reason why you’re not able to use your saved activation ticket on multiple devices.

I hope that wasn’t too technical… but that’s basically how your iPhone gets unlocked. This ticket is valid for 3 years so it’s vital that you save it in case you need to do a full restore on your iPhone.

If you find this post useful, please do us a small favor by clicking ‘LIKE’ or ‘Recommend on Google+’ below.

via iPhonewiki and image courtesy 365daysofdesign.org

This is the news that nobody wants to hear after a week of exciting new “unlock” breakthroughs.

About a week ago Chinese hacker loktar_sun’s unlock method was released and it took the world by storm because it was easy to do, the method is software-based, it can unlock any iOS or baseband particularly 4.11.08 and 4.12.01 and best of all it’s free.

The following day Applenberry and R-SIM developers announced their SIM interposers are also capable of unlocking any baseband. Applenberry introduced Gevey Ultra 5.1 and put a price tag of $49 while R-SIM IV was sold for $25.

While everyone was busy unlocking their iPhones, our gut feeling was telling us that Applenberry is actually using loktar_sun’s free method and selling it! How can they come up with an unlock after being silent for 6 months and then suddenly they have a solution after loktar_sun announced his method?

Another thing that got me suspicious was how it supposed to operate.

Under the product description page:

Insert your GEVEY™ Ultra 5.1 with your chosen SIM card to activate your iPhone 4 through iTunes. This may require several re-launches of iTunes. More instructions forthcoming.

Wait a minute, doesn’t that sound like loktar_sun’s SAM unlock method?

How about R-SIM IV? Well it was pretty obvious when they published the instructions on their website. I actually took the time to re-write them and there was loktar_sun’s method written all over the place.

We all know by now that Apple had patched all their activation servers around the world. That means any unlock method that relies on ICCID exploit will no longer work, including Gevey Ultra 5.1 and R-SIM IV.

Applenberry has made an official apology to their customers for recalling Gevey Ultra 5.1.

Those who have successfully unlocked their iPhones, congratulations. Meanwhile, don’t forget to backup your activation ticket. Those who missed the boat, keep on hoping that another genius will find a new exploit. If yours is locked to AT&T, you can contact AT&T to see if your device is eligible.

Last but not least, we’re not trying to promote our services, but we want you to be aware that the only real solution for now can be found here.

Have a great long weekend!

If you find this post useful, please do us a small favor by clicking ‘LIKE’ or ‘Recommend on Google+’ below.

Did you manage to unlock your iPhone in time using the SAM unlock method (which no longer works)? Good. Saved your activation ticket? Excellent. Here’s how to re-use or restore it in case you had to do a full restore our your iPhone.

Method 1: Using iFile

I’ll begin this tutorial with the assumption that you have NOT saved everything inside your iPhone’s  /var/root/Library/Lockdown directory where the activation ticket files are. To simplify things we will do everything on your iPhone without the need to use iFunBox etc.

1. Install iFile from Cydia which is free.

2. Once installed, launch iFile and go to /var/root/Library/.

3. Tap the ‘Edit‘ button on the top right hand corner then select the Lockdown folder.

4. Tap the zip button to create a compressed file of the Lockdown folder. This file is your BACKUP activation ticket. Protect it with your life. Give it a file name that you can easily distinguish e.g. my-iphone-activation-ticket. If you don’t feel safe just by having one backup, make another backup using the same step.

5. Scroll down to the bottom and double check that you have the backup zip file created. Upload this to your DropBox, iCloud or send this to your own email (click on the mail icon).

You can choose to stop at this point because you already saved your activation ticket to a cloud storage or emailed it yourself. If you decide to test this (with the risk losing your unlock if you mess it up although this won’t happen) then proceed!

6. Now, delete the Lockdown folder. Open the backup zip file using iFile app select the ‘Unarchiver‘ option. This backup file needs to reside at the same folder as it was before which is under /var/root/Library/.

7. It will re-create the Lockdown folder and restore everything inside it. You have now restored your activation ticket.

8. If you have the SAM installed, navigate to /User/Library/Preferences and search for SAM. Delete the com.bingner.sam.plist file. This will prevent any issue when attempting to unlock your iPhone.

9. Reboot your iPhone and it should be unlocked again. If you ever need to restore your iPhone, repeat the steps above to get regain your unlock.

Method 2: Jailbreak App Cookies

You can also try using a jailbreak app called Cookie available on Cydia. It will help backup and restore your activation ticket by just a single tap.

Cookie will send the activation ticket to Weiphone’s (China’s biggest iPhone forum) server here in China, attaching your UDID (Unique Device Identifier) and IMSI (International Mobile Subscriber Identity).

If your UDID and IMSI match as the same ones you uploaded, Cookie will retrieve them for you.

Some may be a bit paranoid but technically there are no evident security risks (still, do this at your own risks!). Otherwise just do the manual method as mentioned above.

Cookie is available in Cydia for free, under the Big Boss repo.

Can you still save your ticket? Yes, so do it now before something goes wrong with your iPhone!

If you find this post useful, please do us a small favor by clicking ‘LIKE’ or ‘Recommend on Google+’ below.

Trying to unlock your iPhone with the SAM unlock method? If it’s not working for you, it may be that Apple had patched all their activation servers.

This is not very surprising at all because that’s how Apple works. As long as there’s a new unlocking method, Apple will find a way to stop it. While this is usually done through software and baseband update, Apple might also do drastic measures such as replacing the hardware. A good example would be replacing the chip on the new iPhone 3GS so that it won’t take baseband 6.15.00.

MuscleNerd (as usual) would tweet anything that has something to do with unlocking iPhones:

“Looks like Apple’s currently fixing their activation servers. But the good news is that previous tickets gotten via SAM trick still work.“

If you’ve successfully unlocked your iPhone and backup your activation ticket, you will not be affected. If you’re only trying to do this or with a different SIM card, you may get the following error in SAM:

Activation Info rejected. You must select original carrier SIMID of your phone

This is relatively easy for Apple because they only have to do majority of the work on their servers instead of rolling out a new iOS update.

MuscleNerd continued to elaborate:

Although many people have reported that this unlock method is no longer working, you should still try it before it’s too late. Remember to save your activation tickets too!

It’s very unfortunate that this free unlocking dream was short-lived. If you missed the boat, we’re now selling the unlock for iPhone 4 and 4S on all basebands.

If you find this post useful, please do us a small favor by clicking on ‘LIKE’ or ‘Recommend on Google+’ below.

R-SIM IV for unlocking iPhone 4 baseband 4.11.08 and 4.12.01 is finally released amidst the time when Chinese hacker loktar_sun released his free SAM unlock method.

UPDATE: SAM unlock is no longer working. Consider unlocking your iPhone using Gevey SIM which works so much better than this.

I have to admit that I haven’t personally tested this product, but based on the instructions on their website, R-SIM IV is another immature product which bound to fail, unless if they improve it soon.

I noticed that it seems to be using the same ICCID and iTunes activation exploits on the method discovered by loktar_sun. The instructions below will let you understand why I made this statement. My analogy would be:

“Imagine you need to go across a small and shallow river (unlocking your iPhone): You can either jump into the river and swim (using loktar_sun’s SAM method) or buy a boat and row across the river (buying an R-SIM IV). Both methods will take you across but why use the hard way?”

Anyway, here’s the proof-read version of the instructions for jailbroken and non-jailbroken iPhone.

R-SIM IV Step-by-Step Instructions

Before you begin, you need to know to which network your iPhone is locked to. R-SIM IV is set to AT&T USA by default. To change this, insert R-SIM IV and your current SIM card. Go to Settings > Phone > SIM Applications and select the carrier which your iPhone is locked to.

There are 26 preset carriers. You can manually select other carriers by using Edit IMSI function.

• USA AT&T
• JAPAN Softbank
• JAPAN AU kddi
• USA SPRINT
• CANADA Bell
• CANADA Telus
• CANADA Rogers
• CANADA Fido
• UK Orange
• UK O2
• UK Vodafone
• UK 3
• FRANCE Orange
• FRANCE Bouygu
• FRANCE SFR
• GEMERY T-Mobile
• SPAIN Movistar
• AUSTRALIA 3
• AUSTRALIA Optus
• AUSTRALIA Vodafone
• PHILIPPINES Smart
• PHILIPPINES Globe
• PHILIPPINES Sun Cellular
• USA Verizon

A. Jailbroken iPhone

1. Be sure your iPhone 4 is switched off. Insert the R-SIM IV together with your SIM card into the SIM slot. Switch on your iPhone.

2. Connect your iPhone to your computer. Use iTools or iFunBox and go to var/root/library/lockdown/ and delete all files inside this folder. Switch off your iPhone (this step deletes the activation information).

3. Switch on your iPhone and you are asked activate it. Launch iTunes and it will be activated.

4. Use iTools or iFunBox and go to var/root/library/lockdown/ and delete all files inside this folder. Switch off your iPhone.

5. Take out the R-SIM IV and insert your SIM card only.

6. Switch on your iPhone and you are asked to activate it again. Launch iTunes and it will give an error message. Disconnect iPhone and close iTunes.

7. Launch iTunes and connect your iPhone again. This time it will be activated and you will see the mobile signal. That’s it!

B. Non-Jailbroken iPhone

1. Backup your iPhone (you’ll see why this is necessary in the next step).

2. Insert the R-SIM IV together with your SIM card into the SIM slot. Go to Settings > Reset > Erase All Content and Settings. Your iPhone will reboot and is asking you to activate.

3. Connect to iTunes to activate it. Once activated, switch off your iPhone.

4. Take out the R-SIM IV and insert your SIM card only. Switch on your iPhone and go to Settings > Reset > Erase All Content and Settings. Your iPhone will reboot and is asking you to activate.

5. Switch on your iPhone and you are asked to activate it again. Launch iTunes and it will give an error message. Disconnect iPhone and close iTunes.

6. Launch iTunes and connect your iPhone again. This time it will be activated and you will see the mobile signal. That’s it!

If you notice the steps above, it’s essentially the SAM unlock method. “De-activate iPhone” in SAM has the same effect as deleting the contents inside var/root/library/lockdown/ or erasing your iPhone’s contents.

Will you be getting the R-SIM IV still? I’m not sure if you would…

UPDATE: SAM unlock is no longer working. Consider unlocking your iPhone using Gevey SIM.

If you find this post useful, do us a small favor by clicking on LIKE or Recommend on Google+ below.