Musclenerd Talks About iPhone Baseband Unlock On HITB2012AMS
Earlier we mentioned that prominent members of the jailbreak team will be present in HITB2012AMS event organized in Amsterdam. Chronic Dev-Team is also present there and will be releasing the jailbreak tool Absinthe 2.0 tomorrow after their talk on Absinthe and Corona Jailbreak. Muslenerd from iPhone Dev-Team is also present there as a guest speaker and will be speaking on iPhone Baseband unlocks.
iPhone Dev-Team senior member, Musclenerd is speaking on iPhone Baseband unlocks. The presentation title of Musclenerd's talk was Evolution of the iPhone Baseband and unlock. Below is the brief description of the presentation that he'd be giving on iPhone baseband unlock.
Evolution Of iPhone Baseband And Unlock
Since the first iPhone in 2007, the baseband that Apple uses for cellular communications has evolved in terms of both hardware and software. Some of the changes were minor but others were quite drastic and obviously aimed at deterring carrier unlocks. This paper details the most interesting of the changes and what effects they’ve had on both software-based unlocks and hardware-based SIM interposers. In addition to comparing the most recent baseband against its own earlier hardware and software incarnations, we compare it to other current Qualcomm handsets and discuss the ramifications of changes Apple has made to the traditional Qualcomm baseband boot sequence. This presentation will cover:
Activation Tickets: Detailed description of the “activation ticket” Apple uses to authorize use with specific (or all) carriers. How activation tickets interact with the traditional PIN-based NCK codes. Contrasting activation tickets and baseband tickets.
Baseband Tickets: Details on how Apple authenticates software updates to the baseband. Comparison of baseband tickets to “ApTickets” that Apple now uses on the main Application CPU to control software changes. Why baseband tickets provide even strong protection than ApTickets. The role of nonces in both the baseband and main application CPU.
iPhone4S: What we’ve learned so far about the iPhone4S baseband. Overview of changes Apple has made to the original Qualcomm bootrom. How the iPhone4S baseband boot process differs from most other Qualcomm-based handsets. Which features the iPhone4S baseband has in common with other handsets and which have been removed. Description of the current attack surfaces, and comparing iPhone4 vs iPhone4S hardware-based protection mechanisms.
Posted on 5:53 PM / 0 comments /