IPHONE 4g testpoint ??? - GSM-Forum

Simlok · 12-16-2011, 00:01

EEOL_2010JUN28_EMS_STOR_STECH_RFD_NP_01a.jpg

EEOL_2010JUN28_EMS_STOR_STECH_RFD_NP_01b.jpg

mayby possible hard atack pin gold to GND with restore in itunes write prepare firmware 5.0.1 with modem 1.59 ???

ask-unlock · 12-16-2011, 00:37

Hmmm,forget from iTunes to restore because from iTunes work via Apple server or Saurik Server (Cydia) via SHSH Blobs,but we need EEPROM to dump from good iPhone 4 with 01.59 Modem Firmware,if some Box like ORT-JTAG,RIFF if can share Pinout in the future will be good for us.

B.R

rogerboogie · 12-16-2011, 09:46

there is no test point on the iphone 4 , boot cannot be patched cause it used RSA signature on it

the only way is using jtag to avoid ( bypass) the bootloader auth, so we can use a jtag ( maybe ) to reflash baseband and maybe ECID on phone

here is the begining , anyone interested and with knowledge about using jtag interface can test and post ideas

http://forum.gsmhosting.com/vbb/7926184-post19.html

ask-unlock · 12-16-2011, 14:07

Yes but what tool to use to reflash? and for ECID it's big problem because he is writed by Hot Eletronic Injection method and its very hard.

rogerboogie · 12-17-2011, 04:12

maybe riff box can do it but the first thing to found is the jtag pins on the board , on the posted photo i show where are the pins but needs to define trst, nrts, tdi, tdo signals and so on

then we can try to read/write baseband on flash chip

lihua · 12-17-2011, 04:51

GOOD I waiting ........

ask-unlock · 12-17-2011, 15:36

Quote:

Originally Posted by rogerboogie

maybe riff box can do it but the first thing to found is the jtag pins on the board , on the posted photo i show where are the pins but needs to define trst, nrts, tdi, tdo signals and so on

then we can try to read/write baseband on flash chip

Agree,i have some iPhone 4 with no imei,no wi-fi,no bluetooth to try in it,but i don't have riff box only ort-jtag.

B.R

Simlok · 12-17-2011, 22:14

maybe possible logging transmition RX TX from conector usb and reading what itunes sending , command to iphone in time restoring software

procedure step by step

1 itunes check ecid
2 reading sign software latest version
3 restoring

maybe possible making emulator and virtual server with info for itunes sending info with ecid factory unlocked and making path firmware change in editor 4.3.3 with modem 1.59 to change sing 4.3.3 to 5.0.1 and modem 1.59 to modem 4.11 itunes reading all ok and send firmware to restore

mymiela0419 · 12-17-2011, 22:54

It might be possible if ALL JTAG TEAM and DEV-TEAM will join FORCES to make a solutions on hardware since it is possible for JTAG solutions BUT the problem is that we do not know where is the connection for it and the software to be develop is needed

SO GO GO GO ALL JTAG TEAM and DEV-TEAM to Finish this CAT and MOUSE game, that Apple Company played for so many years!

taleb_amine8 · 12-18-2011, 00:38

it will be greatful for all if some team come with solution. ihope they can "all the best"

lihua · 12-18-2011, 01:00

iphone 4 JTAG, JTAG Team look!!!!!!!!!!

12-16-2011, 00:01	#1 (permalink)
Simlok Freak Poster Join Date: Jun 2004 Location: POLAND & BELGIUM Age: 42 Posts: 170 Member: 67785 Status: Offline Thanks Meter: 20	IPHONE 4g testpoint ??? EEOL_2010JUN28_EMS_STOR_STECH_RFD_NP_01a.jpg EEOL_2010JUN28_EMS_STOR_STECH_RFD_NP_01b.jpg mayby possible hard atack pin gold to GND with restore in itunes write prepare firmware 5.0.1 with modem 1.59 ???

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
L7089 testpoint	Lead	Motorola Old Legacy (EMMI)	2	03-27-2002 22:14
sagem ff3.4g ok, fw4.1m I CANT, help.	dollyb	Infineon C16X M51 & ARM7 M52 BASED	2	02-01-2002 11:04
sagem Mw930 from Vodafone soft ver FF3.4G	dollyb	Infineon C16X M51 & ARM7 M52 BASED	0	12-02-2001 11:57
sagem MW930 FF3,4G	rios	Infineon C16X M51 & ARM7 M52 BASED	2	11-23-2001 22:59
Testpoint in Timeport ??	Drs	Motorola Old Legacy (EMMI)	3	10-03-2001 01:16

12-16-2011, 00:37	#2 (permalink)
ask-unlock No Life Poster Join Date: Mar 2010 Location: tirana Posts: 841 Member: 1254195 Status: Offline Sonork: 5454 Thanks Meter: 119	Hmmm,forget from iTunes to restore because from iTunes work via Apple server or Saurik Server (Cydia) via SHSH Blobs,but we need EEPROM to dump from good iPhone 4 with 01.59 Modem Firmware,if some Box like ORT-JTAG,RIFF if can share Pinout in the future will be good for us. B.R

12-16-2011, 09:46	#3 (permalink)
rogerboogie No Life Poster Join Date: Jan 2005 Location: the earth Age: 41 Posts: 1,037 Member: 103024 Status: Offline Thanks Meter: 616	there is no test point on the iphone 4 , boot cannot be patched cause it used RSA signature on it the only way is using jtag to avoid ( bypass) the bootloader auth, so we can use a jtag ( maybe ) to reflash baseband and maybe ECID on phone here is the begining , anyone interested and with knowledge about using jtag interface can test and post ideas http://forum.gsmhosting.com/vbb/7926184-post19.html

12-16-2011, 14:07	#4 (permalink)
ask-unlock No Life Poster Join Date: Mar 2010 Location: tirana Posts: 841 Member: 1254195 Status: Offline Sonork: 5454 Thanks Meter: 119	Yes but what tool to use to reflash? and for ECID it's big problem because he is writed by Hot Eletronic Injection method and its very hard.

12-17-2011, 04:12	#5 (permalink)
rogerboogie No Life Poster Join Date: Jan 2005 Location: the earth Age: 41 Posts: 1,037 Member: 103024 Status: Offline Thanks Meter: 616	maybe riff box can do it but the first thing to found is the jtag pins on the board , on the posted photo i show where are the pins but needs to define trst, nrts, tdi, tdo signals and so on then we can try to read/write baseband on flash chip

12-17-2011, 04:51	#6 (permalink)
lihua No Life Poster Join Date: Nov 2006 Location: GOOD Posts: 1,235 Member: 388862 Status: Offline Thanks Meter: 107	GOOD I waiting ........

12-17-2011, 22:14	#8 (permalink)
Simlok Freak Poster Join Date: Jun 2004 Location: POLAND & BELGIUM Age: 42 Posts: 170 Member: 67785 Status: Offline Thanks Meter: 20	maybe possible logging transmition RX TX from conector usb and reading what itunes sending , command to iphone in time restoring software procedure step by step 1 itunes check ecid 2 reading sign software latest version 3 restoring maybe possible making emulator and virtual server with info for itunes sending info with ecid factory unlocked and making path firmware change in editor 4.3.3 with modem 1.59 to change sing 4.3.3 to 5.0.1 and modem 1.59 to modem 4.11 itunes reading all ok and send firmware to restore

12-17-2011, 22:54	#9 (permalink)
mymiela0419 No Life Poster Join Date: Oct 2007 Location: places I repair phones Posts: 2,029 Member: 621698 Status: Offline Thanks Meter: 405	It might be possible if ALL JTAG TEAM and DEV-TEAM will join FORCES to make a solutions on hardware since it is possible for JTAG solutions BUT the problem is that we do not know where is the connection for it and the software to be develop is needed SO GO GO GO ALL JTAG TEAM and DEV-TEAM to Finish this CAT and MOUSE game, that Apple Company played for so many years!

12-18-2011, 00:38	#10 (permalink)
taleb_amine8 Freak Poster Join Date: Jan 2006 Age: 41 Posts: 415 Member: 223552 Status: Offline Thanks Meter: 63	it will be greatful for all if some team come with solution. ihope they can "all the best"