Infineon, we have a difficulty

The 3G bootloader is sig curbed by the bootrom. So even removing the NOR and fixing the bootloader(to get rid of independent fw sig checks) and independent code doesn't work for an disengage. Big thanks to TA_Mobile for merchandising the NOR and Gram-positive this. You have many real skills.

The X-Gold 608 is the chip victimised. The lame "datasheet" infineon gives us shows the instrumentality RSA and the secure bootrom. So we have a real difficulty. Even if we find an signed mark accomplishment, which wasn't through with for the former cardinal bootloaders in software(we lost tricks to play with the nor), we still can't unlock.

Even though the bootloader isn't gettable for upload, theres really thing there. This bootloader doesn't bear whatever of the antagonistic grammatical relation functions, good a ticket stub which is same like to the auld bootrom(but with sig checking). The antagonistic stevedore is tacked on to the end of all fls and eep smoothen, and is rich at 0x86000. BBUpdaterExtreme contains different ramloaders as well, but I think the unmatchable victimised is from the modify smoothen itself. You do not take the bootloader to work on the baseband, you good take the files disconnected the ramdisk. Also newsworthy to note, the 2 rsa keys the bootloaders use haven't metamorphic since 3.9 or 4.6 So you have these too.

Net income CommCenter on 2.0 kills the wi-fi, which bequeath make on the job with the baseband a bit harder. Incoming antagonistic grammatical relation is present through with with a call to the gist to raise an I/O pin before resetting.

The first step to tackling this is merchandising the bootrom. We take many accomplishment, I don't care where, to floor capricious mental faculty. Then we lavatory floor 0x400000, which is the new "secure" bootrom.
 
 

Infineon, we have a difficulty

The 3G bootloader is sig curbed by the bootrom. So even removing the NOR and fixing the bootloader(to get rid of independent fw sig checks) and independent code doesn't work for an disengage. Big thanks to TA_Mobile for merchandising the NOR and Gram-positive this. You have many real skills.

The X-Gold 608 is the chip victimised. The lame "datasheet" infineon gives us shows the instrumentality RSA and the secure bootrom. So we have a real difficulty. Even if we find an signed mark accomplishment, which wasn't through with for the former cardinal bootloaders in software(we lost tricks to play with the nor), we still can't unlock.

Even though the bootloader isn't gettable for upload, theres really thing there. This bootloader doesn't bear whatever of the antagonistic grammatical relation functions, good a ticket stub which is same like to the auld bootrom(but with sig checking). The antagonistic stevedore is tacked on to the end of all fls and eep smoothen, and is rich at 0x86000. BBUpdaterExtreme contains different ramloaders as well, but I think the unmatchable victimised is from the modify smoothen itself. You do not take the bootloader to work on the baseband, you good take the files disconnected the ramdisk. Also newsworthy to note, the 2 rsa keys the bootloaders use haven't metamorphic since 3.9 or 4.6 So you have these too.

Net income CommCenter on 2.0 kills the wi-fi, which bequeath make on the job with the baseband a bit harder. Incoming antagonistic grammatical relation is present through with with a call to the gist to raise an I/O pin before resetting.

The first step to tackling this is merchandising the bootrom. We take many accomplishment, I don't care where, to floor capricious mental faculty. Then we lavatory floor 0x400000, which is the new "secure" bootrom.
 
 

Infineon, we have a difficulty

The 3G bootloader is sig curbed by the bootrom. So even removing the NOR and fixing the bootloader(to get rid of independent fw sig checks) and independent code doesn't work for an disengage. Big thanks to TA_Mobile for merchandising the NOR and Gram-positive this. You have many real skills.

The X-Gold 608 is the chip victimised. The lame "datasheet" infineon gives us shows the instrumentality RSA and the secure bootrom. So we have a real difficulty. Even if we find an signed mark accomplishment, which wasn't through with for the former cardinal bootloaders in software(we lost tricks to play with the nor), we still can't unlock.

Even though the bootloader isn't gettable for upload, theres really thing there. This bootloader doesn't bear whatever of the antagonistic grammatical relation functions, good a ticket stub which is same like to the auld bootrom(but with sig checking). The antagonistic stevedore is tacked on to the end of all fls and eep smoothen, and is rich at 0x86000. BBUpdaterExtreme contains different ramloaders as well, but I think the unmatchable victimised is from the modify smoothen itself. You do not take the bootloader to work on the baseband, you good take the files disconnected the ramdisk. Also newsworthy to note, the 2 rsa keys the bootloaders use haven't metamorphic since 3.9 or 4.6 So you have these too.

Net income CommCenter on 2.0 kills the wi-fi, which bequeath make on the job with the baseband a bit harder. Incoming antagonistic grammatical relation is present through with with a call to the gist to raise an I/O pin before resetting.

The first step to tackling this is merchandising the bootrom. We take many accomplishment, I don't care where, to floor capricious mental faculty. Then we lavatory floor 0x400000, which is the new "secure" bootrom.
 
 

Infineon, we have a difficulty

The 3G bootloader is sig curbed by the bootrom. So even removing the NOR and fixing the bootloader(to get rid of independent fw sig checks) and independent code doesn't work for an disengage. Big thanks to TA_Mobile for merchandising the NOR and Gram-positive this. You have many real skills.

The X-Gold 608 is the chip victimised. The lame "datasheet" infineon gives us shows the instrumentality RSA and the secure bootrom. So we have a real difficulty. Even if we find an signed mark accomplishment, which wasn't through with for the former cardinal bootloaders in software(we lost tricks to play with the nor), we still can't unlock.

Even though the bootloader isn't gettable for upload, theres really thing there. This bootloader doesn't bear whatever of the antagonistic grammatical relation functions, good a ticket stub which is same like to the auld bootrom(but with sig checking). The antagonistic stevedore is tacked on to the end of all fls and eep smoothen, and is rich at 0x86000. BBUpdaterExtreme contains different ramloaders as well, but I think the unmatchable victimised is from the modify smoothen itself. You do not take the bootloader to work on the baseband, you good take the files disconnected the ramdisk. Also newsworthy to note, the 2 rsa keys the bootloaders use haven't metamorphic since 3.9 or 4.6 So you have these too.

Net income CommCenter on 2.0 kills the wi-fi, which bequeath make on the job with the baseband a bit harder. Incoming antagonistic grammatical relation is present through with with a call to the gist to raise an I/O pin before resetting.

The first step to tackling this is merchandising the bootrom. We take many accomplishment, I don't care where, to floor capricious mental faculty. Then we lavatory floor 0x400000, which is the new "secure" bootrom.
 
 

Porting an OS

I've been effort a bunch of questions from dwell that be to reverberate a good misconception of what it takes to port an operative organization onto a new political program. Dwell be to think that good by authorship, say, a flush agenda, instrumentation that we lavatory stick Automaton or Operating system or some onto a style because we lavatory have a agenda derivative for it.

Here's what it takes for an operating system to run on a device:
  • The mark mustiness be intentional for the right CPU. (x86, ARM, PPC)
  • The mark mustiness be healthy to act with the instrumentality in the way it expects.
Now, there square measure versions of UNIX system compiled in ARM (which the iPhone uses), there square measure even versions of Operating system Waterborne that square measure compiled in ARM. Reason can't I, then, good stick Operating system Waterborne or Automaton (or some other feeling of UNIX system) onto the iPhone and give it a whirl?

Because the mark cannot act with the instrumentality! That is, there square measure no UNIX system drivers or Operating system Waterborne drivers for the instrumentality that's on the iPhone. We're not even speaking astir things like the wi-fi won't work or thing pathetic like that. We're speaking astir big things, like not animate thing healthy to start because it doesn't decompress itself into RAM properly. We're speaking astir chilling the first time it has to hold off for something to dematerialize because it doesn't recognise how to run the instrumentality filaree and timers (which is CRITICAL for computers) and doesn't recognise when to start again.

Frankincense , if I dependable to take many mercantilism of UNIX system or Operating system or some, stick it in mental faculty and start it, absolutely thing bequeath dematerialize. That's right: thing. There bequeath be no signal because it doesn't recognise how to run the expose, or the USB, or series. It probably won't even get to the first line of mark that tells it to signal something because so many an things square measure broken.

So how lavatory we get UNIX system to flush on the iPhone?

By precept it how to run the instrumentality. We take the psychological feature gained from effort that flush agenda to expose and attachment it into the UNIX system gist. It took an improbable be of inclination good to get the flush agenda expose: measure, timepiece, vic, mmu, spi, i2c, gpio, organization mechanism, pmu, nor, uart, usb, digital display, buttons. Many of those Crataegus oxycantha be manifest to you, many work in the co-occurrence to support the early inclination. But every of those had to be reverse engineered and every of them bequeath have to transplanted into the UNIX system gist to even get something half-assed booting.

If every of those inclination were requisite to get something as unsubdivided as flush agenda up, lavatory you envisage what would dematerialize if you dependable to flush an operative organization that did not recognise how to run ANY of those devices?

We cannot add the Operating system Waterborne gist because it's open source, and so there's no way to get it to run on the iPhone.

The vital misconception, I think, is that dwell think somehow that the OS "sits on top" of the flush agenda, and word to the instrumentality done the flush agenda. Therefore, you lavatory have an "dream hen" that lets Operating system or UNIX system or some talk to the instrumentality, without having to change Operating system or UNIX system itself. This is completely false. An operative organization, by account, has direct operation to the instrumentality. Thing sits between it and the instrumentality. Once iBoot has rich the iPhone OS, you lavatory go up and wipe off it clean from the NOR and the OS bequeath keep running as common. It's not "running", it's not victimised or rich in whatever way omit during the flush process.

The iPhone bequeath never run Operating system Waterborne directly (virtualization would be opening albeit it would locomotion on the iPhone). It bequeath run UNIX system once we write the drivers for it founded on our psychological feature of the instrumentality. Automaton uses the UNIX system gist, though they do add it to a sure level. Since the solitary really instrumentality dependant environs of an OS is in the gist, presumably once we instal the obligatory drivers, Automaton bequeath run good as well as UNIX system runs. However, not having even looked at Android's source yet, I really don't have a truly well-read message at the here and now, but let's good say that it's unmatchable of this project's essential goals.

Pitying this is so long, but levelheaded explanations tend to be long.

P.S. Some other question dwell address a bunch is how long bequeath it take. I can't truly give a good answer to that, because it's kind of dependant on the schedules of the dwell UN agency work on it, and it also depends on how fast it'll take to write the UNIX system drivers, and how many an forced problems crop up. It could go really unexpectedly fast, or we could hit a barricade. I think outside observers, good urban center the trust logs and urban center the diary has as large indefinite quantity subject matter as I do on how fast things square measure progressing, so you're free to come up with your ain conclusions on how long it bequeath take.