4 ms·
Afaik your second statement is sadly impossible. The system needs a blob "shsh" signed with an 1024 bits rsa key by Apple's server to install an upgrade or a do
by G4E 7y ago
Afaik your second statement is sadly impossible. The system needs a blob "shsh" signed with an 1024 bits rsa key by Apple's server to install an upgrade or a downgrade.
If this key is in the bootrom, you can't override it ?
- basch 7y agobut the iOS you install doesnt even need to be signed anymore. Im not an expert on this, but I would suspect you can delete the entire authorization step, wholesale.
- kirb 7y agoThis is true, so long as you accept that you need to use a PC to re-run the bootrom exploit every time you boot up the phone. The signature checks remain intact and the system will refuse to boot (goes to recovery mode with a “restore with iTunes” graphic) without the exploit patching out the checks.
- basch 7y agoIt just needs something to boot it, not necessarily a computer. I could see a market for something that looks like this. https://www.amazon.com/dp/B07GWLF4GR https://www.amazon.com/dp/B07GWLF4GR that fits in nearly flush.
- topranks 7y agoThe entire point of this exploit is to be able to bypass that and load any OS, signed by Apple or not. It should very much allow you to upgrade/downgrade iOS to your hearts content.