4 ms·

To make it "new" or virgin they need to replace the CPU an the baseband, I'm not sure how they manage the secure enclave problem as the touch id is tied to the

To make it "new" or virgin they need to replace the CPU an the baseband, I'm not sure how they manage the secure enclave problem as the touch id is tied to the CPU.

acd 7y ago
If you have a developer iphone there is no secure enclave? https://www.vice.com/en_us/article/gyakgw/the-prototype-dev-fused-iphones-that-hackers-use-to-research-apple-zero-days https://www.vice.com/en_us/article/gyakgw/the-prototype-dev-...
- olliej 7y ago
  Dev iPhones have an SE, the fundamental silicon is the same.
badinker 7y ago
Yeah this is wrong. You would need to replace the CPU, both eeproms, and baseband CPU, along with reprogramming the nand with the matching serial and mac address from the clean components. Its not feasible. Now for an ipad, thats another story. I've done hundreds of unlocks for them, since they either don't have an IMEI or can easily be converted to Wifi only, then you only need to remove the nand and reprogram with clean activation data that can easily and cheaply be found online from old retired ipads that are no longer in use. Sometimes you have to replace the wifi modules, as the drivers are different between wifi only and cellular versions.
dashesyan 7y ago
The article linked to a 34 minute YouTube video which demonstrated one unlock method: they replaced a locked iPhone's CPU, baseband CPU, baseband EPROM, NAND Flash (reprogrammed), and touch ID sensor with ones from a donor iPhone and were able to restore iOS.
- deleted 7y ago
  [deleted]
- rasz 7y ago
  except its cheaper to just fix donor iphone that already has all the listed components working
  - londons_explore 7y ago
    Labour is cheap in Vietnam...
    - knd775 7y ago
      But the parts aren't. It simply does not make sense to go that route.
      - londons_explore 7y ago
        The parts are if you buy water damaged devices. Water tends to kill the PCB (due to corrosion), but all the individual chips will usually survive.

To make it "new" or virgin they need to replace the CPU an the baseband, I'm not sure how they manage the secure enclave problem as the touch id is tied to the CPU.

acd 7y ago

If you have a developer iphone there is no secure enclave? https://www.vice.com/en_us/article/gyakgw/the-prototype-dev-fused-iphones-that-hackers-use-to-research-apple-zero-days https://www.vice.com/en_us/article/gyakgw/the-prototype-dev-...

olliej 7y ago
Dev iPhones have an SE, the fundamental silicon is the same.

badinker 7y ago

Yeah this is wrong. You would need to replace the CPU, both eeproms, and baseband CPU, along with reprogramming the nand with the matching serial and mac address from the clean components. Its not feasible. Now for an ipad, thats another story. I've done hundreds of unlocks for them, since they either don't have an IMEI or can easily be converted to Wifi only, then you only need to remove the nand and reprogram with clean activation data that can easily and cheaply be found online from old retired ipads that are no longer in use. Sometimes you have to replace the wifi modules, as the drivers are different between wifi only and cellular versions.

dashesyan 7y ago

The article linked to a 34 minute YouTube video which demonstrated one unlock method: they replaced a locked iPhone's CPU, baseband CPU, baseband EPROM, NAND Flash (reprogrammed), and touch ID sensor with ones from a donor iPhone and were able to restore iOS.

deleted 7y ago
[deleted]
rasz 7y ago
except its cheaper to just fix donor iphone that already has all the listed components working
- londons_explore 7y ago
  Labour is cheap in Vietnam...
  - knd775 7y ago
    But the parts aren't. It simply does not make sense to go that route.
    - londons_explore 7y ago
      The parts are if you buy water damaged devices. Water tends to kill the PCB (due to corrosion), but all the individual chips will usually survive.