Baseband 05.12.01 Exploit Discovered by GeoHot, No ETA for release

20 February 2010 by Vinay 49 Comments

Finally another good news for those iPhone unlockers who updated their iPhone to stock firmware 3.1.3 knowingly or unknowingly. GeoHot discovered a working exploit in baseband 05.12.01, GeoHot already posted the hash of his BB exploit for safekeeping check his tweet here. Here GeoHot tweeted the hash tag of his BB crash.

_____________________________________________________________________________________

Update : Geohot is not going to release his unlock this weekend. We were confused with Motorama this weekend part, actually GeoHot was talking about Motorama event where he is going to showcase his green robot [Check Here] So no unlock this weekend and possibly we may have a release after OS 3.2 this march with iPad launch or may be with after iPhone 4G/ OS 4.0 in June/July event.

_____________________________________________________________________________________

As you know Sheriff Hashim founds a crash for latest baseband [check the story here] and he handed the exploit to iPhone Dev team. Musclenerd also confirmed that the crash is very promising. Musclenerd didn’t promised any ETA for the Ultrasn0w update, may be dev team is looking forward to save the exploit for OS 3.2 or may be for next gen iPhone and OS 4.0

iHackintosh fan Visnet tipped us the IRC conversation between him, GeoHot and Musclenerd. The following conversation clarifies that both GeoHot and Musclenerd now have a working exploit for latest baseband. Both hackers are unsure if they have same or different crashes under their hood.

<visnet_> What does geohot tweet mean?
<%geohot> its my bb exploit for safekeeping
<%Par4doX> geohot: did you turn that over to the dev team or are you doing something with it?
<%geohot> my days of turning things over are done
<%geohot> i hope its different from the one they have
<%geohot> but they prob already have it
<%geohot> its the one i orig wanted to release blacksn0w with
<%Par4doX> it’s still there in the new bb
<%geohot> yep, just checked
<%geohot> but then opted to use xemn since it was public
<Evan> Oo, it carries over from 05.11 to 05.12?
<%geohot> why wouldn’t it, apple doesn’t fix things proactivly
<@MuscleNerd> geohot we prob should figure out a way to know if we have same exploit double blind, otherwise we may release 2 different ones at same time
<%geohot> any suggestions?
<@MuscleNerd> not sure how to do that without making it easy to brute force though
<%geohot> yea, i salted the hash
<@MuscleNerd> yeah
<@MuscleNerd> hmm maybe if we both hash the stack dump
<@Confucious> Can you two take this out of public sight?
<@MuscleNerd> the stack itself, not the header before it or the registers after it
<Her> muscle: any notice about the exploits are the same ?
<%geohot> we are working on it
<%geohot> cryptography, perfect for people who don’t trust each other

Stay tuned with us for your daily dose of iPhone news, you can follow us on twitter via @ihackinjosh You can

also subscribe to our daily free e-mail news letter and keep your self updated with the latest of iPhone

community.

Random Posts

49 Comments »

be3n said:

I hope they resolve this. we don’t want to see exploits waisted. they will hopefully wait until 3.2 (expected end of march with iPad release).

(probably same exploit)

# 20 February 2010 at 5:54 pm

ihateapple said:

so if this is the second one to be discovered when will it be released? I got a brand new iphone 3gs and my friend unlocked it for me, forgot to tell me not to update the OS with apple and i did, to 3.1.3… i was so pissed and i cant use my phone, i live in germany so its totally impossible without a jailbreak/unlock…. but since this happened ive spent so much time tryin to figure all this out that i have learned alot about basebands and all that other shit… and i have learned that apple sucks ass and i will never buy a product from them again!

# 20 February 2010 at 8:16 pm

neFos said:

Great news…

# 20 February 2010 at 9:53 pm

Name?WhatIsThat? said:

Hm… unlock, and what’s about a Jailbreak?

# 20 February 2010 at 11:45 pm

st3ven said:

how is it good news we still aint any further than last week i just hope george can sort this as imminent as they say

# 20 February 2010 at 11:49 pm

raghav dania said:

hey ihateapple
the same thing happend with me. there is only one way to jailbreak your iphone that is by downgrading your iphone

link – http://www.youtube.com/watch?v=hpmXw5BTg1w

# 21 February 2010 at 12:29 am

MuscleNerd said:

LOL at the “Release is imminent” statement. Which parts of the tweets or IRC clipping come close to implying that

# 21 February 2010 at 2:49 am

robbo said:

Fantastic news congrats to sherif hashim and george hotz you two are genius men.

# 21 February 2010 at 6:40 am

としよん said:

わーいこれでロック海上到来だyo

# 21 February 2010 at 9:26 am

Vinay (author) said:

@Musclenerd Thanks for the comment i was confused with “motorama this weekend” updated the post.

# 21 February 2010 at 10:55 am

Azza said:

If nobody has released a unlock for baseband 3.1.3 then surely apple won’t bring out next o.s 3.2????

# 21 February 2010 at 1:52 pm

ihateapple said:

i cant downgrade, i have the MC model…

# 21 February 2010 at 2:20 pm

Fatal said:

Hmmm… I see the title changed, from Imminent to no-ETA

I just wana wake up on morning, load my Browser homepage (ihackintosh.com), and see the title saying, “Dev-team and Geohot, decided to work together “again” and bring us this final Jailbreak for Firmware 3.1.3, Baseband 05.12.01 before 3.2/4.0 iphone OS”….

# 21 February 2010 at 3:09 pm

MuscleNerd said:

Oh hah yeah, motorama has a battlebot contest http://www.motoramaevents.com/robotconflict

# 21 February 2010 at 4:00 pm

Vinay (author) said:

@Azza 3.2 will be available with iPad launch.

@Fatal Sorry for that it was never imminent, check the update above.

@Musclenerd Thanks

# 21 February 2010 at 4:11 pm

Timur said:

wow so fast. Why it took so long for cracking previous baseband?

# 21 February 2010 at 4:40 pm

ihateapple said:

so if they have 2 different ones will they release one soon or wait longer???
i hope one is released within the next week.
got a brand new iphone that i cant even use yet…
it sucks

# 21 February 2010 at 11:54 pm

ligur said:

aaargh! just want jailbreak, no need for unlock. Any ideas?

# 22 February 2010 at 3:37 pm

Thrasos said:

The point is when they are going to release them not that they have found a solution. So when are you going to give as the jailbreak and unlock for the 3GS 3.1.3 with 5.12.01 baseband??????????

# 22 February 2010 at 9:59 pm

Mike_o|ive said:

If you have 3gs 3.1.3 (newbootrom) could you not just put your iPhone in DFU mode then connect it to a different pc or mac with iTunes installed that hasn’t upgraded to the new OS 3.1.3 hence downgrading your iPhone? Will this work or is it not possible pls let me know ???

# 24 February 2010 at 7:52 pm

Fonzie said:

When you “accidentally” upgrade to firmware 3.1.3, do itune automatically upgrade to 05.12.01, as well bootloader to 5.9 as well? If i have 3.1.3, with 05.12.01 baseband and 5.9 bootloader, will it ever be unlockable??

I know there’s a way to downgrade 3.1.3 back to 3.1.2, using fuzzyband, but my phone is still “virgin”, is there a way to bypass that step? also I have 5.9 bootloader.

# 25 February 2010 at 7:26 am

Mr Max said:

Whatever. SO they found an exploit, big deal. Make a jailbreak already, or maybe you cant

That exploit could be fixed in 3.2 then what will you so, nothing.

Just release the jailbreak, who cares about the unlock.

Prove to us that you are still all that powerful.

# 25 February 2010 at 8:59 pm

Mike_o|ive said:

@Mr Max, no need 2 get pushy about this new jailbreak these guys are genius and have released some great hacks so why not just be patient and let them work there magic because I have faith that they will help us all out

# 25 February 2010 at 9:58 pm

hakunamatata said:

I have a iphone with OS 3.1.3 baseband 5.12.1 and bootloader 5.9.I uesd fuzzyband to downgrade to older baseband but it said “not support”.Please help!!!!!!!!

# 26 February 2010 at 6:39 am

Gary Benna said:

I got a new ipod touch 3g running 3.1.3 so there is no way for me to downgrade. I got it so I could use it with orangegadgets gps receiver, but it must be jailbroken to use. I’m confused, in one instance it is said that Apple never goes back and fixes old crashes and yet you are thinking of waiting for the next release so they don’t fix it to subvert the jailbreak. Also you’ve already said you have found a crash maybe two so why won’t apple look for them and fix them in the next release. Seems to me use what you have now because it may not be there next time. Anyway, do what you gotta to do and I’ll wait. Thanks

# 27 February 2010 at 1:29 am

Sico138 said:

Hey I just did a jailbreak on my 3g 3.1.3 at new bb from emac2299 on YouTube an it worked how come everywhere u read they say no jailbreak 4 this

# 27 February 2010 at 11:10 am

Mike_o|ive said:

Sico138 are you sure it’s a 3GS wiv NEW BOOTROM and is the 4th & 5th number of your serial no. LATER than 50? write back and lete know much appreciated

# 28 February 2010 at 2:25 am

RamPc said:

Do we still dont have an ETA for this?

# 1 March 2010 at 6:56 pm

RamPc said:

Hello people, do anyone know if we have an ETA for the release

Thanks!

# 3 March 2010 at 9:38 pm

Aj said:

Cracks me up all these posters wanting a release now!!! Can’t you people think further ahead in the game than your own ipod/iphone?

What’s the use of wasting any valuable exploit on this useless 3.1.3 firmware?

OS 3.2 OR 4.0 is the way forward…

# 4 March 2010 at 1:03 am

Milo said:

exactly!

I hope the wait to publish it until Appel release V4.

# 5 March 2010 at 9:30 pm

george said:

they should only release the firmware 3.1.3 with baseband 5.12 when its ready to use, apple sucks. i am using iphone since its launched and every time i upgrade i have to wait for the tool to release. now i cant use it since i upgraded the baseband to 5.12. s phone is for our daily use, its not that we have to wait for the exploit to release to use the phone or buy a temporary phone until it releases. Apple is really shitting me.

# 7 March 2010 at 3:11 pm

x said:

If nobody has released a unlock for baseband 3.1.3 then surely apple won’t bring out next o.s 3.2????
please take it out

# 8 March 2010 at 8:20 pm

Mohsen Mehrvarz said:

IS APPLE WIN THIS MATCH? (APPLE VS iPhone HACKERS)

# 15 March 2010 at 2:37 pm

Sico138 said:

Mike_o|Ive ya it is new bb an 6th an 7th # r 50 did u look 4 the video idk why it work when everybody says no jb unless it’s cuz I have older iPhone sorry took so long to respond

# 16 March 2010 at 10:20 am

Pranav said:

Hi i have also made the mistake of upgrading the software on my iphone to 3.1.3 which upgraded the base name to 5.1.2.. now i am stuck and although downgraded the3.1.2 i cant use my iphone as a phone…. praying for the upgrade to be released soon…

# 23 March 2010 at 9:00 am

Renan said:

Here in Brazil we HOPE this solution doesn’t take too long……

Iphone 3gs 3.1.3 bb 5.12.01..

PLEASE SAVE US!!!!!

# 24 March 2010 at 2:56 am

DDESIGNS said:

MY IPHONE HAD A ASSIDENT AND I TOOK IT TO APPLE TO FIX IT AND THEY GAVE ME A BRAND NEW IPHONE BUT NOW IM STUCK ON 3.1.3 WITH BB 05.12.01 AND I USE TMOBILE IM PI….. AT LEASE IT WORKS LIKE A PAPER HOLDER.
LOL

# 27 March 2010 at 2:49 pm

Slicker said:

Arg! iphone stuck on baseband 5.12.01!!!

Sucks sooo bad… beacuse its my wifes! Since I accidentally updated it to 3.1.3 (had a crash and had no other option) she blames me everyday until I can unlock it again for her…

haha damnit!

Cant wait for this unlock!

# 29 March 2010 at 4:16 pm

amit said:

hi please help me i have an iphone 3gs 3.1.3 baseband 05.12.01 if anyone knows how to unlock it let me know you can contact me on +919828508088 or amit_3663@yahoo.com

# 9 April 2010 at 11:07 pm

FRUSTATO said:

do we finally have the unlock for baseband 05’12’01or not???

# 15 April 2010 at 4:13 am

Eddie C said:

So What’s up with the new JB? I thought when Apple releases their 3.2 and 4.0 firmware, the JB will be out. Everywhere I read, it says that Geohot and the Dev Team is waiting for Apple to release the new firmware…well, its been out. Does anyone knows if that program Thunderst0rm from the Swiss students is fake or real??

# 17 April 2010 at 4:54 pm

wtf said:

wtf, its april 19, and there is not a new software/program to unlock the iphone 3g baseband 05.12.01
please help me, i cant use mi iphone simcard

# 20 April 2010 at 12:32 am

Andre said:

I got my iPhone 3GS 32Gb locked after updating it to 3.1.2 (7D11) firmware (05.12.01).

Now i could Jailbreak it by using blackra1n and could install Cydia. I tried to Unlock it by installing sn0w from the icon that blackra1n creates in the phone but was unsuccessful.

Does anyone knows if is there anything i can do to Unlock my phone? Maybe downgrading my firmware to (05.11.07) “if possible”.

cheers

# 26 April 2010 at 10:27 pm

Jamie said:

Who gives a f*** about the unlock…

It’s the Jailbreak we want…

Where is it?

Hurry up and stop pi**ing around, 3.2 and 4.0 has been out for a while now.

# 27 April 2010 at 1:53 am

JJM said:

Even though I am quite pissed off, it is funny situation here in Brazil …. here all the operators have to officially and legally unlock your iPhone if you ask them to do so (if you bought your iPhone here of course) … new law, locked phone are illegal now …. I have the f***ing 3.1.3 new bb but not even the operators, after discussing 2 days directly with Apple Brazil, can unlock this version … putting them into illegal situation …. think about to suit them )) do they wait for geohot or DevTeam ?? ))

Geohot, please make all these people happy, including me, praying for your limera1n, and release it soon !!!!! PLEEEEESSSSEEEEE

# 29 April 2010 at 2:28 am

Tommy said:

Sico138 said:

Hey I just did a jailbreak on my 3g 3.1.3 at new bb from emac2299 on YouTube an it worked how come everywhere u read they say no jailbreak 4 this

@ Sico138 i can Jailbreak my 3g 3.1.3. baseband 05.12.01 but can not unlock it if you know how to unlock it please let me know thank 10+

# 16 May 2010 at 10:41 pm

Davin said:

Any word on the iphone 3g 3.1.3, bb 5.12.01, bootloader 05.9 UNLOCK? Its already jailbroken. I tried pretty much everything to try to unlock it, i jailbroke it first then tried unlocking it with ultrasn0w 0.92. Rebooted the device and of course still doesnt work. Please post any help….

# 13 June 2010 at 7:36 am