{"id":266,"date":"2010-12-03T22:13:10","date_gmt":"2010-12-03T13:13:10","guid":{"rendered":"http:\/\/blog.macchky.net\/?p=266"},"modified":"2018-11-07T23:01:22","modified_gmt":"2018-11-07T14:01:22","slug":"dev-teamblogultra-%e3%83%aa%e3%82%b5%e3%82%a4%e3%82%af%e3%83%ab-update1","status":"publish","type":"post","link":"https:\/\/blog.macchky.net\/2010\/12\/p266\/","title":{"rendered":"[Dev-TeamBlog]Ultra-\u30ea\u30b5\u30a4\u30af\u30eb update1"},"content":{"rendered":"

<\/p>\n

Dev-Team\u304b\u3089iPhone 3G\/3GS<\/strong>\u306e\u30ad\u30e3\u30ea\u30a2\u30a2\u30f3\u30ed\u30c3\u30af\u306b\u3064\u3044\u3066\u767a\u8868\u304c\u3042\u308a\u307e\u3057\u305f
\n
\nDev-Team Blog – Ultra-recycle<\/strong><\/a><\/p>\n

<\/p>\n

Today we\u2019re pleased to announce our free carrier unlock for iPhone3G\/3GS owners with a baseband later than 05.13.04. The unlock for that baseband exploited the AT+XAPP command, thanks to a crash initially discovered by @sherif_hashim (@Oranav also found this crash). So what hole are we exploiting today, since Apple closed that AT+XAPP hole? Well, we\u2019re exploiting the exact same hole!<\/strong><\/i>
\n\u4eca\u65e5\u30d9\u30fc\u30b9\u30d0\u30f3\u30c9\u304c05.13.04\u4ee5\u964d\u306eiPhone3G\/3GS\u6240\u6709\u8005\u306e\u305f\u3081\u306b\u30d5\u30ea\u30fc\u30ad\u30e3\u30ea\u30a2\u30a2\u30f3\u30ed\u30c3\u30af\u3092
\n\u767a\u8868\u51fa\u6765\u308b\u3053\u3068\u3092\u5b09\u3057\u304f\u601d\u3046
\nAT+XAPP\u30b3\u30de\u30f3\u30c9\u3092\u5229\u7528\u3057\u305f\u30d9\u30fc\u30b9\u30d0\u30f3\u30c9\u306e\u30a2\u30f3\u30ed\u30c3\u30af\u306f@sherif_hashim\u3068@Oranav\u306b\u3088\u3063\u3066
\n\u521d\u671f\u306b\u767a\u898b\u3055\u308c\u305f\u30af\u30e9\u30c3\u30b7\u30e5\u306e\u304a\u304b\u3052\u3067\u3042\u308b
\n\u3067\u306fApple\u304cAT+XAPP\u306e\u7a74\u3092\u585e\u3044\u3067\u3057\u307e\u3063\u305f\u306e\u306b\u6211\u3005\u306f\u4eca\u65e5\u3069\u306e\u7a74\u3092\u5229\u7528\u3057\u305f\u306e\u304b\uff1f
\n\u305d\u3046\u5168\u304f\u540c\u3058\u7a74\u3060\uff01<\/p>\n<\/blockquote>\n

\n

It turns out that the very first iPad firmware 3.2.2 has baseband version 06.15.00 still vulnerable to AT+XAPP. The iPad baseband is built for the exact same baseband chip as the iPhone3G\/3GS \u2015 they\u2019re fully compatible!<\/strong><\/i>
\n\u3068\u3066\u3082\u65e9\u304f\u306biPad\u306eiOS3.2.2\u306b\u542b\u307e\u308c\u308b\u30d9\u30fc\u30b9\u30d0\u30f3\u30c906.15.00\u304c\u307e\u3060AT+XAPP\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3053\u3068\u304c\u5224\u660e\u3057
\n\u304b\u3064iPad\u306e\u30d9\u30fc\u30b9\u30d0\u30f3\u30c9\u306fiPhone3G\/3GS\u3068\u5168\u304f\u540c\u3058\u30d9\u30fc\u30b9\u30d0\u30f3\u30c9\u30c1\u30c3\u30d7\u7528\u306b\u4f5c\u3089\u308c\u3066\u3044\u308b
\n\u3068\u3046\u3044\u3046\u3053\u3068\u306f\u5b8c\u5168\u306a\u4e92\u63db\u6027\u304c\u3042\u308b\u3068\u3044\u3046\u3060\uff01\n<\/p>\n<\/blockquote>\n

\uff0a\u8b66\u544a
\n\u30d9\u30fc\u30b9\u30d0\u30f3\u30c9\u309206.15\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3059\u308b\u3068\u4fdd\u8a3c\u304c\u306a\u304f\u306a\u308aiOS\u304c4.2.1\u306e\u72b6\u614b\u3067\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3059\u308b\u3068
\n\u30ed\u30fc\u30ab\u30eb\u30d5\u30a1\u30a4\u30eb\u3067\u306e\u5fa9\u5143\u304c\u51fa\u6765\u306a\u304f\u306a\u308a\u30ab\u30b9\u30bf\u30e0\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2\u3067\u3057\u304b\u5fa9\u5143\u3067\u304d\u306a\u304f\u306a\u308a\u307e\u3059\uff01
\n\uff0a\u8ffd\u8a18
\nGPS\u304c\u4f7f\u3048\u306a\u304f\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059<\/span><\/strong><\/span><\/p>\n

Ultrasn0w\u306fCydia\u3067http:\/\/repo666.ultrasn0w.com \u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u8ffd\u52a0\u3059\u308c\u3070\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u51fa\u6765\u307e\u3059<\/p>\n

\u30d9\u30fc\u30b9\u30d0\u30f3\u30c9\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u5bfe\u5fdc\u3057\u305fredsn0w 0.9.6beta5\u304c\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u307e\u3057\u305f<\/s>
\nSAM\u5bfe\u5fdc\u7248redsn0w 0.9.6beta6\u306b\u5909\u66f4
\nWin\u7248\u30df\u30e9\u30fc
\n<\/a><\/p>\n

Mac\u7248\u306f\u5143\u8a18\u4e8b\u304b\u3089\u304a\u9858\u3044\u3057\u307e\u3059(Update #2\u306e\u3068\u3053\u308d\u306b\u3042\u308a\u307e\u3059)
\nredsn0w\u306e\u57fa\u672c\u7684\u306a\u4f7f\u3044\u65b9\u306f\u2193
\nredsn0w 0.9.6b1\u3067iOS4.1\u8131\u7344<\/strong><\/a><\/p>\n

Windows 7 Vista\u306e\u30e6\u30fc\u30b6\u30fc\u306fredsn0w\u3092XP\u4e92\u63db\u30e2\u30fc\u30c9\uff0b\u7ba1\u7406\u8005\u6a29\u9650\u3067\u5b9f\u884c\u3057\u3066\u304f\u3060\u3055\u3044<\/strong>
\nredsn0w 0.9.6beta5\u3067\u306f\u30aa\u30d7\u30b7\u30e7\u30f3\u9078\u629e\u753b\u9762\u3067\u201cInstall iPad baseband<\/strong>\u201d
\n\u9805\u76ee\u304c\u3042\u308b\u306e\u3067\u305d\u308c\u3092\u30c1\u30a7\u30c3\u30af\u3059\u308c\u3070\u826f\u3044\u3088\u3046\u3067\u3059<\/p>\n

\uff0a\u8ffd\u8a18<\/span><\/strong><\/p>\n

Update #6: Developer @sbingner (author of TetherMe) has made some excellent progress devising a new hactivation method that kills two birds with one stone for all you ultrasn0w unlockers. His tool, \u201cSubscriber Artificial Module (SAM)\u201d tricks your iPhone and iTunes into creating legitimate activation tickets even though you\u2019re unlocked with ultrasn0w. This means you get the full benefit of push applications, and your battery life increases substantially. If you\u2019d like to try it out, check out http:\/\/www.bingner.com\/SAM.html<\/a><\/strong><\/i>
\n\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8#6: TetherMe\u306e\u958b\u767a\u8005\u3067\u3042\u308b@sbingner\u304c\u3059\u3079\u3066\u306eultrasn0w\u30a2\u30f3\u30ed\u30c3\u30ab\u30fc\u306b\u3068\u3063\u3066\u4e00\u77f3\u4e8c\u9ce5\u306a
\n\u3068\u3066\u3082\u5148\u9032\u7684\u306a\u65b0\u3057\u3044\u30cf\u30af\u30c1\u30d9\u30fc\u30b7\u30e7\u30f3\u65b9\u6cd5\u3092\u5b8c\u6210\u3055\u305b\u305f\u3002
\n\u5f7c\u306e\u30c4\u30fc\u30eb\u201cSubscriber Artificial Module (SAM)\u201d\u306f\u3042\u306a\u305f\u306eiPhone\u3068iTunes\u3092\u9a19\u3057
\n\u305f\u3068\u3048ultrasn0w\u3067\u30a2\u30f3\u30ed\u30c3\u30af\u3057\u3066\u3044\u3066\u3082\u9069\u5207\u306a\u30a2\u30af\u30c1\u30d9\u30fc\u30b7\u30e7\u30f3\u30c1\u30b1\u30c3\u30c8\u3092\u4f5c\u308a\u51fa\u3059\u3002
\n\u3053\u308c\u304c\u610f\u5473\u3059\u308b\u3053\u3068\u306f\u30d7\u30c3\u30b7\u30e5\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3068\u30d0\u30c3\u30c6\u30ea\u30fc\u306e\u6301\u3061\u306e\u5b8c\u5168\u306a\u6069\u6075\u88ab\u308c\u308b\u3068\u3044\u3046\u3053\u3068\u3060
\n\u3082\u3057\u8a66\u3057\u3066\u307f\u305f\u304b\u3063\u305f\u3089\u3001\u3053\u3053\u3092\u30c1\u30a7\u30c3\u30af\u3060http:\/\/www.bingner.com\/SAM.html<\/a><\/p>\n<\/blockquote>\n

\n\u3088\u3046\u3059\u308b\u306b\u30bd\u30d5\u30c8\u30d0\u30f3\u30af\u306eSIM\u3067\u306a\u304f\u3066\u3082iTunes\u3067\u30a2\u30af\u30c1\u30d9\u30fc\u30b7\u30e7\u30f3\u51fa\u6765\u308b\u6a5f\u80fd\u3092\u958b\u767a\u3057\u305f\u3068\u3044\u3046\u308f\u3051\u3067\u3059
\n\u305f\u3060\u3057redsn0w\u306f\u4eca\u306e\u3068\u3053\u308diPhone 3G\/3GS\u30674.0\u4ee5\u964d\u5bfe\u8c61\u3067\u3059<\/strong>
\nredsn0w 0.9.6beta6\u306e\u201cDeactivate\u201d\u30aa\u30d7\u30b7\u30e7\u30f3\u306b\u30c1\u30a7\u30c3\u30af\u3092\u4ed8\u3051\u308c\u3070SAM\u304c\u5165\u308a\u307e\u3059
\nWin\u7248\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u306f\u4e0a\u304b\u5143\u8a18\u4e8b\u304b\u3089<\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","footnotes":""},"categories":[21],"tags":[324],"class_list":["post-266","post","type-post","status-publish","format-standard","hentry","category-iphonetouch","tag-dev-team"],"_links":{"self":[{"href":"https:\/\/blog.macchky.net\/wp-json\/wp\/v2\/posts\/266","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.macchky.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.macchky.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.macchky.net\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.macchky.net\/wp-json\/wp\/v2\/comments?post=266"}],"version-history":[{"count":1,"href":"https:\/\/blog.macchky.net\/wp-json\/wp\/v2\/posts\/266\/revisions"}],"predecessor-version":[{"id":3012,"href":"https:\/\/blog.macchky.net\/wp-json\/wp\/v2\/posts\/266\/revisions\/3012"}],"wp:attachment":[{"href":"https:\/\/blog.macchky.net\/wp-json\/wp\/v2\/media?parent=266"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.macchky.net\/wp-json\/wp\/v2\/categories?post=266"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.macchky.net\/wp-json\/wp\/v2\/tags?post=266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}