Skip to main content

Unlocking an iPhone for non-O2 SIMs

So I finally joined the 21st century, boosted my Apple nerd cred, and got a funky phone to boot. An iPhone is now in my posession! So far so good, except for one small problem - I have 12 months left on my Orange contract and I don't really want to pay all that off now just to get an O2 contract. I need a way to get the iPhone to work with my Orange SIM.

Enter ... QuickPWN and PWNTools! These two excellent apps allow you to unlock and jailbreak your iPhone in style and comfort. It's not as straightforward as just following the instructions, though, so allow me to elaborate a bit.

In order to unlock the iPhone, you need to build a custom IPSW package using PWNtools. This is because QuickPWN only builds a firmware to jailbreak the phone, rather than unlock it. For that, you need to replace to boot loader as well as the firmware. Ick. To build an unlocked boot loader, you need to have a copy of bl46.bin from somewhere.

My first experiment in building a custom IPSW with PWNTools went well, right up until I tried to install it. While trying to install the image using iTunes, I got the dreaded "Error 1600". Nobody knows what that actually means, but it's bad. However, there is a solution!

The trick is to use QuickPWN first, following the instructions to get the jailbroken firwmare onto the phone. This will jailbreak the phone, but unless you have an O2 SIM, the actual phone functions will be disabled. However, this makes the phone receptive to unlocked firmware packages. Open iTunes with the phone in normal mode and option-click the Restore button. Pick your custom PWNTools firmware and install it. Works fine, no errors (1600 or otherwise) in sight!

Being a bit of a purist, I didn't really want a jailbroken iPhone, and I would like to have the normal Apple logo back on the boot screen (it gets replaced with a pineapple by QuickPWN). I used QuickPWN and PWNTools with iPhone firmware 2.1 to unlock the phone. The beauty of this is that iTunes automatically installed the 2.2.1 firmware update. The new bootloader, complete with SIM unlock, is still there, but I have a genuine, non-hacked Apple firmware.

Obviously (or maybe not), using the PWNTools results in a phone that's already activated. Once you've got the new firmware on there, all you need is to plug it in and let the phone set up wizard do its thing to link it with your iTMS account so the App store works.

One thing to note is that it's quite easy to get the phone out of the development mode if it gets stuck by holding down the Home and Power buttons for 10 seconds. You can then just power up as normal, although you'll probably be left with a phone that thinks it needs activating. It's basically back to square one, but that's as good a place as any to have another crack at it.

Obviously, I do not advocate the hacking, cracking or generally buggering about with iPhones. If you brick your phone, don't come crying to me. On the other hand, it worked fine for me, and even when I had firmware that made the phone appear bricked, it could always be rescued by flashing a "real" firmware using iTunes.

Comments

Post a Comment

Popular posts from this blog

Another canal walk

The sun has started being a little more present lately, so some mornings are actually quite pleasant. On one such morning I decided to have a wander up the canal.


The clouds made everything look a bit Toy Story, and the low sun gave a lovely light and contrast to everything else.


Of course, it wasn't sunny everywhere. But even in the darker places, such as right underneath Leeds railway station, the sun had a go at peeking in.


Shooting the Enterprise

I was recently asked if I could help out providing an image for a magazine article about stress management. For reasons as yet undiscovered the requested image would be of the USS Enterprise flying through a storm in space. Unfortunately I didn't have a lot of time (just a couple of hours), but I did have a very nice model of the Enterprise D I could use to build the image around.

Thinking fast, I rigged up a rather slapdash rig consisting of a black reflector backdrop, an umbrella and stand from which dangled the model by a thread, and a couple of strobes. One light above, diffused, to provide the key light, and another, reflected and lower power, to fill some of the very dark shadows. It ended up all looking something like this:


Using a fast shutter, f/16 and cunning flash positioning I managed to keep the background black and give the model suitably textured lighting so it didn't have that flat, uniform, shadowless appearance of, well, a model. The narrow aperture obviously…

Leeds Hyperbeastly

It's been five long months since I posted anything to this blog. Including this post here, I have posted no less than three times in 2014. As you can tell, I am nothing if not prolific.
A lot has changed since the last time I posted anything. I sold all my SLR gear, for a start, and switched to micro four-thirds. I got a lovely, lovely little Olympus OM-D E-M10 and a small selection of lenses including the must-have Panasonic 20mm f/1.7 pancake and the stunning Olympus 45mm f/1.8. Marvellous, and the camera, four lenses and spare batteries and SD cards in a bag that wouldn't fit the SLR and a single lens. Cracking stuff, because it's now small enough to carry all the time. In fact the body and pancake lens is barely bigger than my Fuji X10 compact!
Anyway, the point of this post; I've taken several walks through Leeds while I've worked there over the past few years and I've been finding it more and more difficult to find non-boring subjects. Everything is so dr…