I got some iPhone Prototypes

[Brooklyn8]

I don't post on here(yet) however I though some of you guys might think these are cool. I also hope maybe you can give me some advice on how to get one of them to power up. :D

I picked up 2 iPhone prototypes on the bay. The seller didn't know what they were, and just listed them as as-is parts units. Neither units say "iPhone" on them anywhere, or list the storage capacity. I did some research on the serial numbers, it appears they were both manufactured about 6 months before the release of the iPhone.

Phone #1:
-Doesn't turn on (tried leaving on charger for awhile, along with various reset procedures)
-Glass screen
-Serial number YM650xxxxxx which corresponds to a factory in China, manufactured week 50 of the year 2006. (The iPhone was announced on Jan 6 2007 and release June 29 2007.)

Phone #2:
-Powers on OK
-Plastic screen
-Serial number YM649xxxxxx which corresponds to a factory in China, manufactured week 49 of the year 2006.
-Runs iPhone OS 03.06.01_G (iPhone Launch OS 1.0 was version 03.11.02_G)

The phone that works is pretty neat to use. It does make calls(with my ATT sim), and I can surf the net. However when I did get to web pages they were the mobile versions, not the regular versions. I can receive SMS but not compose my own, other than 5 included test messages. It doesn't sync to itunes. Camera seems to work. It has tons of testing options. I included some pictures for you all, cause if I don't have pics it didn't happen ;)

Also, the working phone has several subtitles that alternate on the screens including:

[Skank is the new black]
[Nine parts perspiration]
[Say hello to the Newton MessagePad 3000]
[Skankphone]

Two prototypes side to side: http://img119.imageshack.us/my.php?image=iphone1dw1.jpg

Back side of both models: http://img75.imageshack.us/my.php?image=iphone7pj1.jpg

Home screen of phone #2: http://img399.imageshack.us/my.php?image=iphone2go0.jpg

Dialing screen phone #2: http://img83.imageshack.us/my.php?image=iphone3bd3.jpg

Network band selection screen (quad band): http://img383.imageshack.us/my.php?image=iphone4ox2.jpg

Screen that shows the operation of various phone features: http://img352.imageshack.us/my.php?image=iphone5zz3.jpg

Browser(no page loaded): http://img383.imageshack.us/my.php?image=iphone6zd6.jpg

[The General]

Probably just need to restore with 2.2 and they will be fully functional. I vaguely remember someone getting an iPod Touch with that weird software on it. A DFU restore fixed it. It was fully functional afterwards.

[zap2]

wow!

those shots of #2 are cool!

how much they phone cost you?(if you don't mind me asking)

[ppc750fx]

Probably just need to restore with 2.2 and they will be fully functional. I vaguely remember someone getting an iPod Touch with that weird software on it. A DFU restore fixed it. It was fully functional afterwards.

!!!!!

Don't do that! You'll lose a copy of the beta (alpha?) software. It's exceedingly rare, and there's no reason to destroy something like that.

I'd recommend getting in touch with some skilled embedded hackers and seeing if they can dump the flash of the units. Might find some interesting gems there... ;-)

[QuarterSwede]

This is truly a great find! It also seems to show you that the hardware team had no idea what the software team was working on as the buttons are all just place holders. My guess is that the software team had no idea what the hardware team had worked on either.

"Skank is the new black" Wow, that's one heck of an inside joke.

[Brooklyn8]

Yea, if there was a way to dump the firmware I would do it. Don't worry, I don't plan to wipe the working phone. Its possible that the current software wouldn't work anyway, as the hardware in this phone might not be the same as the hardware in the release version. I did try hooking the phone up to the computer in recovery mode to see if it would be detected ok, and I got a driver error message, even though I have the latest itunes.

[Chris Bangle]

That is an awesome ebay buy!!! Homescreens quite comical, (playground)

[MST]

Very interesting, that's a piece [or 2 pieces as it were] of iPhone history right there, thanks for sharing :)

[veeco3110]

when i read the title, i thought "oh god another douche with a painted back iphone claiming to be the new 4g or osmething' but this is pretty bad ass...deff dont erase that. send a message to the dev team and see if they can do something for you.

[MST]

^ I second veeco3110's comments regarding contacting the dev team, would be interesting to see what they have to say, though I fear that because these are 2Gs they will be of little interest, still would be good to see if they could get the 1 working though.

[iParis]

OMG..
That my friend, is a great find.
Tell us, how much was that?

Just as a joke, you should take it into the Apple Store and see what they can do.:D

[iParis]

^ I second veeco3110's comments regarding contacting the dev team, would be interesting to see what they have to say, though I fear that because these are 2Gs they will be of little interest, still would be good to see if they could get the 1 working though.

Actually, this is a 1G.
Due to the fact that it's a prototype, I would call it a .5G.

[MST]

^ 0.5G, I like it :p

[svndmvn]

Actually, this is a 1G.
Due to the fact that it's a prototype, I would call it a .5G.

how do you know these phones aren't EDGE=2G?

[acfusion29]

I like the UI ;)

I'm curious... can you take a pic of SMS? I'd like to see how that looks! Thanks

[iParis]

how do you know these phones aren't EDGE=2G?

How do you know they are?:p

[Brooklyn8]

OK, here are some more quick pics-

Comparison picture of plastic screen vs. glass screen: http://img383.imageshack.us/my.php?image=iphoneaan3.jpg

SMS menu screen(when I press compose message, the software crashes back to the main menu): http://img383.imageshack.us/my.php?image=iphonebgk4.jpg

WiFi screen: http://img386.imageshack.us/my.php?image=iphonecxr0.jpg

Text Entry screen: http://img220.imageshack.us/my.php?image=iphonedxb6.jpg

[Airforcekid]

!!!!!

Don't do that! You'll lose a copy of the beta (alpha?) software. It's exceedingly rare, and there's no reason to destroy something like that.

I'd recommend getting in touch with some skilled embedded hackers and seeing if they can dump the flash of the units. Might find some interesting gems there... ;-)

:apple:I would try to get in contact with the iPhone Dev team they may buy them from you or at least copy the firmware.:apple: DONT SYNC IN ITUNES ANYMORE!

[paulandre]

OOOoooooo nice! http://**************/img/1858/y08m1110mhmd/2.gif

[Lucbert]

How cool is that??
One question: You said the iphones were manufactures 6 month before the release.
Jobs announced the iPhone exactly 6 month before it's release and when he did that it was already running the OSX Software.
How comes that the working iPhone is still running the dummy software?

[kinkster]

So, what do you plan to do with these?

I think we should all pitch in a little over paypal and give it as a gift to the dev team. they deserve it, right?

[Brooklyn8]

Well, the iPhone was announced on Jan 6 2007 and released June 29 2007. These were manufactured the first and second weeks of December 2006, which is still about a month before the announcement.

Also, I don't know what I'm going to do with these yet. I don't plan on using either one as a phone.

[acfusion29]

It'd be cool if he could somehow SSH into it and then extract the entire system.

[Warbrain]

How cool is that??
One question: You said the iphones were manufactures 6 month before the release.
Jobs announced the iPhone exactly 6 month before it's release and when he did that it was already running the OSX Software.
How comes that the working iPhone is still running the dummy software?

Get hardware bug-proof first before software. Then focus on the software.

[Warbrain]

OK, here are some more quick pics-

Comparison picture of plastic screen vs. glass screen: http://img383.imageshack.us/my.php?image=iphoneaan3.jpg

SMS menu screen(when I press compose message, the software crashes back to the main menu): http://img383.imageshack.us/my.php?image=iphonebgk4.jpg

WiFi screen: http://img386.imageshack.us/my.php?image=iphonecxr0.jpg

Text Entry screen: http://img220.imageshack.us/my.php?image=iphonedxb6.jpg

To be honest...I like the plastic screen. Looks nice.

[Brooklyn8]

The plastic screen makes the front of the phone look a little hazy, but when the screen is on you can't really tell. Fingerprints show up easier on the glass, and your finger doesn't move as smoothly on the glass as opposed to the plastic. However the glass is probably more scratch resistant. (However out of the 2 the glass model has more scratches than the plastic one)

[Warbrain]

The plastic screen makes the front of the phone look a little hazy, but when the screen is on you can't really tell. Fingerprints show up easier on the glass, and your finger doesn't move as smoothly on the glass as opposed to the plastic. However the glass is probably more scratch resistant. (However out of the 2 the glass model has more scratches than the plastic one)

They went with glass for the ability to stand up to more damage. But I keep an anti-glare screen protector on my iPhone and that's how the plastic screen iPhone prototype looks.

[jav6454]

Nice pieces of history there. How on Earth did they manage to get past Cupertino's hands I don't quite get it. Well if a MBA prototype did go out, why not an iPhone?

That aside, I recall in the keynote of the iPhone that Steve had two separate teams working on the iPhone. One team dedicated to software with bogus hardware and another team working on hardware with bogus software. I recall this was to prevent the whole iPhone thing from going public (just like the Al MacBooks). It also meant very but very few people ever saw the whole device all together. I recall Steve saying only him, AT&T CEO and 8 other people had seen it.

In any case, I brought all that up because what you have on your hands is the hardware portion of the iPhone's development. The software is alpha software at best, however, I am surprised since even this alpha software can do the majority of the functions our official released 1st Gen iPhones can.

I imagine Apple made at least 1000 of these to test out, since no factory in China would make only a couple (60 or 40 to say). I may be wrong on this bit. It would be interesting to see the software developing stage of the iPhone, but I am sure we will never see that.

Oh and by the way, I concur with a previous poster who warned against updating it to 2.2.0. The hardware might be different and there may be problems. So its best no to touch the software. It will be interesting to dump the whole firmware. Since its alpha software, maybe all the Apple security is not there for developing reasons. The iPhone Dev Team can have a look at unencrypted files that can help out in unlocking the iPhone in the 3G version in the future once current exploits run out.

Edit - This thread should be in iPhone section for all to read.

[KyPosey]

very cool find!

[Nyxx]

What an amazing find! Thanks for sharing. Those are very interesting photos and insight into early iPhone development. (Skank is the new black. -lol) I agree that as little should be done to them as possible, especially not upgrading to another firmware version (probably wouldn't run anyway).

I think it's a great idea to contact the iPhone Dev-Team, the people who provided us with the all the jailbreaks and unlocks for free, the last being Pwnage and Yellowsn0w. They might be able to find useful tidbits for their work by dumping files from the early phones. The best way to contact them is probably Twitter because it's quick and they don't have to wade through the 1000s of comments on their blog to hear you.

DevTeam contacts
Members on Twitter: MuscleNerd, planetbeing, Pumpkin, pytey
Email: blog@iphone-dev.org
Blog: blog.iphone-dev.org

[Brooklyn8]

Ok, if an admin wants to move this to the regular iPhone forum that is fine. I went on the iphone-dev irc and someone told me to email a guy named "saurik" so I did. Maybe he will have an idea on how to dump the firmware.

I agree, this must be a hardware prototype. There various hardware tests and tweaks you can access. I read the Wired article about the development of the iPhone, and they they did talk about how the software and hardware guys were seperate.

[jaw04005]

You know I wonder if these are the phones that were sent to AT&T to test? I remember reading reports that AT&T had "test phones" that were software incomplete.

They were used to test network functionality nationally months before the actual release date.

Great find, nevertheless.

[Brooklyn8]

That would make sense as well, possible reason for how they were leaked.

[SuperMacMan]

Ok, if an admin wants to move this to the regular iPhone forum that is fine. I went on the iphone-dev irc and someone told me to email a guy named "saurik" so I did. Maybe he will have an idea on how to dump the firmware.

I agree, this must be a hardware prototype. There various hardware tests and tweaks you can access. I read the Wired article about the development of the iPhone, and they they did talk about how the software and hardware guys were seperate.

Saurik = Cydia Developer

Anyways, this is a REALLY NICE FIND!!!! CONGRATULATIONS!!!! WOW!!!

Don't try putting 2.2 on them or anything.

I like the software (basic but cool). "Skark is the new black"

I think this was the Hardware Devs phone - with the proper hardware but bogus software, while the Software Devs were given bogus hardware but the software to work on. Certainly not Apple style.

Anyway, absolutely awesome!!

[svndmvn]

kind of off topic: Is it possible the glass screen is better for capacitive qualities? The Nokia 5800 has plastic screen and I think it's a bit rubbish. There has to be a reason why the new Macbooks have glass trackpads. They should also be more resistant in time.

[Brooklyn8]

Thanks for your help so far guys, I have gotten in contact with the dev team too. They say the software should be helpful to them so that is good news.

[macfearless]

OK, here are some more quick pics-

Comparison picture of plastic screen vs. glass screen: http://img383.imageshack.us/my.php?image=iphoneaan3.jpg

SMS menu screen(when I press compose message, the software crashes back to the main menu): http://img383.imageshack.us/my.php?image=iphonebgk4.jpg

WiFi screen: http://img386.imageshack.us/my.php?image=iphonecxr0.jpg

Text Entry screen: http://img220.imageshack.us/my.php?image=iphonedxb6.jpg

I'm surprised that no one has freaked about the landscape text keyboard in that last picture... Very good find.

[MST]

Has anything like this ever been seen before?

[iParis]

Has anything like this ever been seen before?

Not that I know of.
I know that some people have gotten their iPod touch shipped only with the diagnosis setting but no OS.

[QuarterSwede]

Not that I know of.
I know that some people have gotten their iPod touch shipped only with the diagnosis setting but no OS.
As far as I know, the closest thing is a prototype MacBook Air someone scored a few months ago. It was pretty neat but nothing that had the fake software on it. Very cool.

[MacbookAlum1536]

That is so awesome and how much did you pay for them

[Fonzijr1964]

This is very very cool to see how the phone developed. Very rudimentary os



Your sig hurts me and makes me cry.

[Brooklyn8]

Some new pictures of the prototype's built in browser:

eBay: http://img117.imageshack.us/my.php?image=iphoneebayuw5.jpg

Digg: http://img291.imageshack.us/my.php?image=iphonediggyf9.jpg

[jav6454]

quite a impressive site to see those pics

[iCantwait]

HOW MUCH WERE THEY?? can we see the ebay lot??:confused::confused::confused::):):D:p

But sweet find, and its cool that you had the option for turning data off (cool for me anyway with my 500mb cap)

and the lack of 'iPhone' on the back, well, bitches be crazy

and how many GB?

[powaking]

Thanks for your help so far guys, I have gotten in contact with the dev team too. They say the software should be helpful to them so that is good news.

PLEASE keep us all informed on what Saurik and the Phone Dev have to say and what they find as a result of this. We are ALL intrigued and anxious to know what else they are able to find.

[vista.john]

So sweet! :D

[Brooklyn8]

I got them for $300 via [buy it now]. I have no idea how much flash memory either model has... Also, it looks like I may be sending at least the working model to a dev-team member to have the firmware dumped so it can be used for iphone development. I suppose when they get the firmware dumped they will know how useful it will be :apple:

[Lucbert]

I don't think that it's usefull, the 2G is already hacked and unlocked.

[Tallest Skil]

I don't think that it's usefull, the 2G is already hacked and unlocked.

Yeah, because that's all that we can do with the iPhone hardware...:rolleyes:

There is SO much beyond unlocking a phone...

[Sijmen]

Get hardware bug-proof first before software. Then focus on the software.

I read or heard that they had given the software engineers 'fake' (as in, not the real deal) hardware, and the hardware engineers fake software. Not sure though.

[Slowstick]

To be honest...I like the plastic screen. Looks nice.

I know... you got yourself a nifty steal.

[WPeterson]

seriously cool for the rare iphone.

maybe we can develop such prototype-style iphone theme to emulate this.
:cool::cool::cool:

[Sandman1969]

I'm surprised that no one has freaked about the landscape text keyboard in that last picture... Very good find.

That is what I am talking about! I would so love that feature! More and bigger keys.

[jav6454]

I don't think that it's usefull, the 2G is already hacked and unlocked.

I read or heard that they had given the software engineers 'fake' (as in, not the real deal) hardware, and the hardware engineers fake software. Not sure though.

Both this posts point out truths.

However...

1st Poster, there is much more you can learn from a alpha/beta iPhone even if it has been hacked to the lowest level. Remember, the same software (minus baseband firmware) runs on the iPhone 3G and 1st Gen. So, learning from that software is crucial to see what holes their are, some important files that might not be encrypted. Etc, etc... lots of useful data can be pulled from this to perform future unlocks on the 3G.

2nd poster. Yes, that is true. Steve Jobs mentioned it. Still, the software has the some capacities that mirror current one (like mobile safari). Its useful to even see crap software as it can lend a hand.

[Mr. Giver '94]

The "Cereal Number" with a pic of a Cheerios box made me LOL!!!

Really cool!!

[spring]

Nice find. How do you zoom-in/out in the browser, if you can? Does it already support pinching?

[Lucbert]

Yea the Text keyboard is great. I have no idea why there is no widescreen keyboard for email and text anyways. Thats just nonsense!

[Fonzijr1964]

Yea the Text keyboard is great. I have no idea why there is no widescreen keyboard for email and text anyways. Thats just nonsense!

Yeah i mean i really makes no sense and neither does y they still have not added it considering its not like they dont have the image or the code because they use it for safari.

[giddeldan]

Hello!

I need some help, i got an iphone prototype too, but... now it doesnt boot =(

i was cheking out the SO, i found an option like "boot for media", up to that option was another that says "boot system"; something like that....

So... i pressed "boot for media", iphone reboots and now it stuck at apple logo... i can get it into DFU and recovery, but i dont want to erease that pretty SO...

Please help!!!


PD: sorry for my english :o

[giddeldan]

damn.... no replys...

im gonna load 2.2...

need some luck...

[DPA]

damn.... no replys...

im gonna load 2.2...

need some luck...

how do you know it's a prototype? And where did you get it?

David

PS - I would really like one of those giant iPhone's in the Apple store storefront windows. I think they have them at some authorized retailers and AT&T stores as well. I don't think I'll see one of those in my room anytime soon though.

[ppc750fx]

damn.... no replys...

im gonna load 2.2...

need some luck...

Don't load a new firmware.

It almost certainly won't work, and you'll lose one of the things that makes the device unique.

[sananda]

those are so cool and a lovely bit of history. i wouldn't let them out of my sight.

[gacxx]

WOW that's a beautiful piece of history you have in your hands! Congrats! :D

[Brooklyn8]

Thanks all, I actually lent the working phone to planetbeing, he is pulling the firmware, bootloader, etc. I figured it would be a good idea to have an available copy of this beta software out there since no one seems to have it.

giddeldan- I never had that message on my phone so I am not sure what you need to do...assuming you already tried a hard reset.

[iObama]

Jobs announced the iPhone exactly 6 month before it's release and when he did that it was already running the OSX Software. How comes that the working iPhone is still running the dummy software?

Obviously he's a big fat liar.

[nickslivestri]

this is so cool!
i really like the matte screen too

[Darlyn]

Obviously he's a big fat liar.
I don't know if you're serious, but the phones could just be field testing units. AT&T was sent prototypes for this purpose and somehow two of these phones ended up being sold. Steve was probably one of the few who had the release software on his iphone at the time.
Let me just quote:
That aside, I recall in the keynote of the iPhone that Steve had two separate teams working on the iPhone. One team dedicated to software with bogus hardware and another team working on hardware with bogus software. I recall this was to prevent the whole iPhone thing from going public (just like the Al MacBooks). It also meant very but very few people ever saw the whole device all together. I recall Steve saying only him, AT&T CEO and 8 other people had seen it.

[s1k0]

man your so lucky..

[seand1111]

I see you are selling them now....http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=170308425742&viewitem=&salenotsupported :apple:

Ok, not listed any longer....what happened? :confused:

[Brooklyn8]

As many people predicted, Apple has contacted eBay to have the auction closed, and youtube to have the video removed. However the video has be reposted on youtube as well as other sites, so you can probably still find it to check it out.

[GnatGoSplat]

Wow, cool stuff, you're internet famous now!
So the firmware has been dumped? Was anything interesting discovered in the firmware? Has anyone tried it in a production iPhone?

The fact that Apple had the auction pulled and the video removed tells me that they may have originally been stolen. I'm no lawyer, but I've read that stolen property is stolen property no matter how many hands it has passed through. I'd be afraid Apple might try to get them back!

[andyhargreaves]

These are so cool.

Now, what would be even better would be to see the fake hardware used by the software devs. Must be fake in form factor, with (more or less) complete functionality.....

[dmmcintyre3]

Did you ever get the firmware dumped?

[mkpoto]

just curious did apple get a hold of you? and are you still selling them

[benflick]

just curious did apple get a hold of you? and are you still selling them

Apple didn't get ahold of the OP, just removed his/her video off of Youtube for a Copyright issue. Apple also deleted the eBay ad. Had you read the thread, you would know this already.

[mkpoto]

Apple didn't get ahold of the OP, just removed his/her video off of Youtube for a Copyright issue. Apple also deleted the eBay ad. Had you read the thread, you would know this already.

i know they did that but i was wondering if apple is going to try to get it back from him and if he is still trying to sell it

[benflick]

i know they did that but i was wondering if apple is going to try to get it back from him and if he is still trying to sell it

As of now, we do not know. We will have to wait and see.

[Brooklyn8]

I have not heard anything from Apple, and I doubt I will. The guy who listed the prototype iPod was in a similar situation to me, and he was never contacted by Apple. I think the ebay privacy policy prevents them from sharing my information with Apple anyway.

PS. The firmware is coming...:cool:

[benflick]

Way to go OP! Keep us informed! How did you first come across them?

[tylertech]

Way to go OP! Keep us informed! How did you first come across them?

Um... read the first post?

[benflick]

Um... read the first post?

Yeah, eBay I know. What I meant was like just a random guy or maybe a developer who got his hands on them? Do you know the whole story behind these?

[Brooklyn8]

They were a bulk electronics reseller out of Texas. They bought a lot of iphones and these two were mixed in. Not sure of their origins beyond that.

[Brooklyn8]

Well in the name of open source, here is the firmware and NOR dump: http://rapidshare.com/files/207764160/iphoneproto.zip

Get it while you can, I have no idea how many downloads I get with this rapidshare thing, I have never used it before.

Also, I wanted to give major props to planetbeing for making this possible.

[Modrak]

awesome, thanks for the time you took to get the NOR dump

downloading it as we speak, if the link goes down, PM me :]

I really like the simple UI, it's a pure functionality..

[ajl917]

I have not heard anything from Apple, and I doubt I will. The guy who listed the prototype iPod was in a similar situation to me, and he was never contacted by Apple. I think the ebay privacy policy prevents them from sharing my information with Apple anyway.

PS. The firmware is coming...:cool:

Prototype iPod? Where was that?

[mkpoto]

so are you going to try to resell it?

[ajl917]

Has anyone put this on either of the iPhones? I think it would be cool to be able to downgrade without permanently messing up your iPhone...

[Modrak]

I'm trying to get the SkankPhone app run on my 2.2 phone right now - anyone has idea how to wrap this back up and turn into .ipsw that could be restored into an 2G iPhone (albeit pwned)

I have a spare one around for testing...

Looking at the dates in the fake-sync playback files, it's from 2006-09-06 - I have no idea if that's June or September :)

SkankPhone doesn't show up on springboard and when trying to run it manually as root, it crashes and leaves just "Killed" as output.

[MattPro]

Anyone see the 3 images in the /private/var/root/Images/ directory? They're dated to 2000.
http://www.mccreations.us/dump/old_iphone/1.jpg
http://www.mccreations.us/dump/old_iphone/2.jpg
http://www.mccreations.us/dump/old_iphone/3.jpg

Pretty weird :confused:

And check out the dates in the SkankPhone crash logs:
/private/var/logs/CrashReporter/SkankPhone

<string>Process: SkankPhone [15]
Path: /AppleInternal/Applications/SkankPhone.app/SkankPhone
Version: N/A (N/A)
Code Type: 0000000C (Native)
Effective UID: 0
Parent Process: launchd [1]

Date/Time: 1999-12-31 16:09:14.710 -0800
OS Version: OS X 1.0 (1A420)
Report Version: 6


Some are from 1999. I think the date must have been screwed up on here.

EDIT:
It appears SkankPhone was the early springboard. If you check out the SkankBoard App files in:
AppleInternal/Applications/SkankPhone.app

You'll see the icons for the other apps. And if you check it's logs it monitors WiFi and stuff.

[Brooklyn8]

Ohhh, that last picture I took back in January, thats my brother lol. I don't know about the other 2 pictures though.

[MattPro]

Ohhh, that last picture I took back in January, thats my brother lol. I don't know about the other 2 pictures though.

Haha nevermind then. :p I guess when you first got it the dates must have been messed up since the pics are supposedly from 2000. Hopefully someone who really knows what they're doing will find something useful in there. It's fun to look around at the stuff though, there's some weird things to be found inside the filesystem.

[mkpoto]

thats bad ass.. someone keep digging

[MattPro]

Got a date :P


#!/usr/bin/perl

#
# $Id: filetest.pl,v 1.2 2006/12/04 02:04:36 bcaridad Exp $
#
# Copyright (c) 2001-2002 Apple Computer, Inc. All rights reserved.
#

/AppleInternal/Diags/Tests/filetest.pl

[upsguy27]

Looks like Apple was working on the iPhone a long time before it was introduced...

<string>2006-09-08 11:59:00 -0700</string>


EDIT: My date is earlier MattPro :P

EDIT 2: Library/Application Support/SyncAgent/ContactsPlayback.001

[MattPro]

Looks like Apple was working on the iPhone a long time before it was introduced...



EDIT: My date is earlier MattPro :P

EDIT 2: Library/Application Support/SyncAgent/ContactsPlayback.001


Wow nice! Haha I like how we're trying to find the earliest dates as like a contest. Check this date out:

#!/bin/sh
##############################################################################
# Filename: burnin_cleanup.sh
# Objective: Archive burnin logs and remove state files.
#
# $Id: burnin_cleanup.sh 16699 2007-02-16 01:13:12Z bcaridad $
# Version: 0.4.0
##############################################################################


That's pretty recent. I wonder when this was actually used.

[upsguy27]

Wow nice! Haha I like how we're trying to find the earliest dates as like a contest. Check this date out:


That's pretty recent. I wonder when this was actually used.

Yeah, that's pretty recent. Found an older one :D

<string>2006-09-06 22:40:34 -0700</string>


By two days :P

Library/Application Support/SyncAgent/BkmkPlayback.001

[MattPro]

Yeah, that's pretty recent. Found an older one :D



By two days :P

Library/Application Support/SyncAgent/BkmkPlayback.001



Wow Apple really covered their butt here:

<plist version="1.0">
<dict>
<key>ProductBuildVersion</key>
<string>1A420</string>
<key>ProductCopyright</key>
<string>1983-2007 Apple Inc.</string>
<key>ProductName</key>
<string>OS X</string>
<key>ProductVersion</key>
<string>1.0</string>
</dict>
</plist>

I'm sure this was used in 1983 :P

[upsguy27]

Wow Apple really covered there butt here:

<plist version="1.0">
<dict>
<key>ProductBuildVersion</key>
<string>1A420</string>
<key>ProductCopyright</key>
<string>1983-2007 Apple Inc.</string>
<key>ProductName</key>
<string>OS X</string>
<key>ProductVersion</key>
<string>1.0</string>
</dict>
</plist>

I'm sure this was used in 1983 :P

Haha, looking through the bookmarks is fun:

http://macupdate.com/info.php/id/6490
http://www.drunkenblog.com/drunkenblog-archives/000555.html

Are among the bookmarks. Still going through.

[brendan09]

Has anyone tried getting this software to load in the iPhone simulator with the development kit? surely thats a little easier than trying to troubleshoot it and restore it onto a real phone... and then everyone can download it and play around with it.

[brendan09]

I got skankphone.app to appear on the homescreen as an icon. It launches, and shows a full size picture of its icon...quite an interesting photo... and then exits back to the homescreen. I'm working on posting photos. This is an iPhone 3G btw.

EDIT: Here are the links to the photos. If anyone has any suggestions, im opening to trying more.

http://img22.imageshack.us/my.php?image=photovfu.jpg (home screen icon)
http://img21.imageshack.us/my.php?image=photo2r.jpg (launched application)


What I've tried:
-Copying Skankphone.app to Application directory
-Copying entire AppleInternals Folder onto root of device
-Putting the skankphone and purpltstr launchdaemons in the launchdaemon folder

Thoughts:
-possibly a date lock?
-hardware ID / firmware check?
-#1 thought...It can't run on top of springboard. it has to be started instead, i dont know how to do this and im not sure how to try without risking the phone. But i did get the skankphone application on the springboard and successfully launched it to an icon screen. Im thinking that the screen that opens is only there to demonstrate that the app tried to open on springboard. I believe it closes purposefully, not crashes. Based on what I've been watching. Email me if you have any suggestions or thoughts. Brendan09 -at- gmail

[MattGTO]

Alright guys, I am so damn curious about these things lol. This is such an amazing opportunity to dig into what apple does in the background.

I have a couple questions for the OP (or anyone who can answer them), sorry if they have been covered already.

Does it support multi-touch, in any form, in any "app"?

Can it hold music? If so, what are the music options and interface for the music player? (Forward, Back, etc)

[brendan09]

in the video, it does have a media icon, however it is not explored in the video. The OS includes h.264 video codecs, so i presume it can playback something. One of the test apps is demo-ed in the video and it supports multitouch, it highlights each finger that is touching it with a greencircle and a crosshair. Now that you mention it, im curious as to how early they started interfacing itunes with the software and media app, they have mentioned that itunes won't recognize it yet.

[Brooklyn8]

:eek: @ the pic...keep it classy apple lol

@MattGTO Yes it had multi touch support I believe. There was a music option but I never got it to work.

[MattGTO]

@MattGTO Yes it had multi touch support I believe. There was a music option but I never got it to work.


Thanks :apple:


Oh lord I really wish we had the prototype that the software guys had, it would be interesting to put the two together.

[koollectablz]

Many thanks for taking the trouble to post up the firmware!

I take it everyone who has downloaded it is now thinking the same thing...

Must. Make. Iphone. Prototype. Theme.

[ajl917]

I got skankphone.app to appear on the homescreen as an icon. It launches, and shows a full size picture of its icon...quite an interesting photo... and then exits back to the homescreen. I'm working on posting photos. This is an iPhone 3G btw.

EDIT: Here are the links to the photos. If anyone has any suggestions, im opening to trying more.

http://img22.imageshack.us/my.php?image=photovfu.jpg (home screen icon)
http://img21.imageshack.us/my.php?image=photo2r.jpg (launched application)


What I've tried:
-Copying Skankphone.app to Application directory
-Copying entire AppleInternals Folder onto root of device
-Putting the skankphone and purpltstr launchdaemons in the launchdaemon folder

Thoughts:
-possibly a date lock?
-hardware ID / firmware check?
-#1 thought...It can't run on top of springboard. it has to be started instead, i dont know how to do this and im not sure how to try without risking the phone. But i did get the skankphone application on the springboard and successfully launched it to an icon screen. Im thinking that the screen that opens is only there to demonstrate that the app tried to open on springboard. I believe it closes purposefully, not crashes. Based on what I've been watching. Email me if you have any suggestions or thoughts. Brendan09 -at- gmail

So is that what you did to get the app to launch? I really want to get it to launch myself...

Also, is anyone else getting an error when they try to unpack the firmware? Ive tried it on 2 diff computers and I get the same result...

[brendan09]

yea thats what i did to get it too launch, it still crashes after it opens and shows that screen.

-I placed those files where i mentioned in my previous post,
-resprung the springboard
-put in the launch daemon files
-resprung
-restarted phone

After all that, it had an icon on the home screen. Still havent gotten to open the actual skankphone interface though.

[t0mat0]

Cue Apple legal in 5.4.3.2.1?

[sp4rkbr]

Actually you can find references to the name "iPhone" in a lot of files, such as:

private\var\root\Library\Lockdown\data_ark.plist
System\Library\ApplePTP\PTPDeviceInfoDataset.plist
System\Library\Extensions\IOUSBDeviceFamily.kext\Info.plist
System\Library\LaunchDaemons\com.apple.usbptpd.plist

Check my attached .txt for a full list

[Consultant]

yea thats what i did to get it too launch, it still crashes after it opens and shows that screen.

-I placed those files where i mentioned in my previous post,
-resprung the springboard
-put in the launch daemon files
-resprung
-restarted phone

After all that, it had an icon on the home screen. Still havent gotten to open the actual skankphone interface though.

Probably not possible due to different iphone OS versions. For example, Installer apps have to be rewritten for iPhone firmware 2

[Vanilla Cocoa]

I'm trying to get the SkankPhone app run on my 2.2 phone right now - anyone has idea how to wrap this back up and turn into .ipsw that could be restored into an 2G iPhone (albeit pwned)

I have a spare one around for testing...

Looking at the dates in the fake-sync playback files, it's from 2006-09-06 - I have no idea if that's June or September :)

SkankPhone doesn't show up on springboard and when trying to run it manually as root, it crashes and leaves just "Killed" as output.

You're not going to get SkankPhone running on 2.x; don't bother trying. The frameworks and all were changed considerably. Your best bet would be trying with a 2G iPhone that can run 1.0.x (this would be one of the launch iPhones, as the newer 2G iPhones weren't able to run 1.0.x).

[ppc750fx]

Has anyone tried getting this software to load in the iPhone simulator with the development kit? surely thats a little easier than trying to troubleshoot it and restore it onto a real phone... and then everyone can download it and play around with it.

That definitely won't work -- the simulator's not an emulator.

[ppc750fx]

BTW, the tarball seems to be screwed.

[ppc750fx]

Dump of the SMS database:

BEGIN TRANSACTION;
CREATE TABLE _SqliteDatabaseProperties (key TEXT, value TEXT, UNIQUE(key));
INSERT INTO "_SqliteDatabaseProperties" VALUES('_ClientVersion','2');
CREATE TABLE message (ROWID INTEGER PRIMARY KEY AUTOINCREMENT, address TEXT, date INTEGER, text TEXT, flags INTEGER, replace INTEGER, svc_center TEXT);
INSERT INTO "message" VALUES(1,'16302175872',1231024001,'Hey',2,0,NULL);
INSERT INTO "message" VALUES(2,'16302175872',1231024076,'Reply: Hey',3,0,NULL);
INSERT INTO "message" VALUES(3,'16302175872',1231024111,'Third message tests how punctuation impacts the parsing of a message with a phone number 5123725891, URL wap.yahoo.com, and email bill.rosenberg@cingular.com.',3,0,NULL);
INSERT INTO "message" VALUES(4,'16302175872',1231024151,'This is a GSM SMS message with embedded phone numbers (512)372-5891 and a URL http://wap.yahoo.com with +15126741000 too.',3,0,NULL);
INSERT INTO "message" VALUES(5,'16302175872',1231024946,'Second test with some LF characters added before the number
5123725891 and after the URL wap.google.com
with +1(512)674-1000 and wap.yahoo.com also',3,0,NULL);
INSERT INTO "message" VALUES(6,'16302175872',1231024951,'Fourth is another punctuation test with an embedded phone number (5126741000), URL <http://wap.yahoo.com>, and email <bill.rosenberg@cingular.com> again.',3,0,NULL);
INSERT INTO "message" VALUES(7,'16302175872',1231024954,'Apple was founded on April 1, 1976 by Steve Jobs, Steve Wozniak and Ronald Wayne to sell the Apple I personal computer. They were hand-built in the garage of Jobs'' parents, and the Apple I was first shown to the public at the Homebrew Computer Club. The Apple I was sold as a motherboard, not what is today considered a complete personal compute. The user was required to provide two different AC input voltages (the manual recommended specific transformers), wire an ASCII keyboard (not provided with the computer) to a DIP connector (providing logic inverter and alpha lock chips in some cases), and to wire the video output pins to a monitor or to an RF modulator if a TV set was used. Their website is www.apple.com. Random email address: abc123@abc123.com.',3,0,NULL);
DELETE FROM sqlite_sequence;
INSERT INTO "sqlite_sequence" VALUES('message',7);
COMMIT;

[sp4rkbr]

Dump of the SMS database:

BEGIN TRANSACTION;
CREATE TABLE _SqliteDatabaseProperties (key TEXT, value TEXT, UNIQUE(key));
INSERT INTO "_SqliteDatabaseProperties" VALUES('_ClientVersion','2');
CREATE TABLE message (ROWID INTEGER PRIMARY KEY AUTOINCREMENT, address TEXT, date INTEGER, text TEXT, flags INTEGER, replace INTEGER, svc_center TEXT);
INSERT INTO "message" VALUES(1,'16302175872',1231024001,'Hey',2,0,NULL);
INSERT INTO "message" VALUES(2,'16302175872',1231024076,'Reply: Hey',3,0,NULL);
INSERT INTO "message" VALUES(3,'16302175872',1231024111,'Third message tests how punctuation impacts the parsing of a message with a phone number 5123725891, URL wap.yahoo.com, and email bill.rosenberg@cingular.com.',3,0,NULL);
INSERT INTO "message" VALUES(4,'16302175872',1231024151,'This is a GSM SMS message with embedded phone numbers (512)372-5891 and a URL http://wap.yahoo.com with +15126741000 too.',3,0,NULL);
INSERT INTO "message" VALUES(5,'16302175872',1231024946,'Second test with some LF characters added before the number
5123725891 and after the URL wap.google.com
with +1(512)674-1000 and wap.yahoo.com also',3,0,NULL);
INSERT INTO "message" VALUES(6,'16302175872',1231024951,'Fourth is another punctuation test with an embedded phone number (5126741000), URL <http://wap.yahoo.com>, and email <bill.rosenberg@cingular.com> again.',3,0,NULL);
INSERT INTO "message" VALUES(7,'16302175872',1231024954,'Apple was founded on April 1, 1976 by Steve Jobs, Steve Wozniak and Ronald Wayne to sell the Apple I personal computer. They were hand-built in the garage of Jobs'' parents, and the Apple I was first shown to the public at the Homebrew Computer Club. The Apple I was sold as a motherboard, not what is today considered a complete personal compute. The user was required to provide two different AC input voltages (the manual recommended specific transformers), wire an ASCII keyboard (not provided with the computer) to a DIP connector (providing logic inverter and alpha lock chips in some cases), and to wire the video output pins to a monitor or to an RF modulator if a TV set was used. Their website is www.apple.com. Random email address: abc123@abc123.com.',3,0,NULL);
DELETE FROM sqlite_sequence;
INSERT INTO "sqlite_sequence" VALUES('message',7);
COMMIT;

wow haha someone call him!

[retrovm]

wow haha someone call him!

the 630 number is an illinois-based AT&T number..

[sp4rkbr]

the 6302175872 number is an illinois-based AT&T number..

That's interesting.

[retrovm]

That's interesting.




and (512)372-5891 is based out of texas.
backtracking, that's actually a landline. apparently it links to SBC.

[Brooklyn8]

The 630 number is my brothers number, please don't call him. In fact if you could edit out the number please do. When I was trying out the phone I texted him the test messages.

The Texas number I don't know. I also wouldn't call or harass this guy either.:)

[retrovm]

The 630 number is my brothers number, please don't call him. In fact if you could edit out the number please do. When I was trying out the phone I texted him the test messages.

The Texas number I don't know. I also wouldn't call or harass this guy either.:)


haha, fear not, i didn't call him at least. i edited it out of my original reply. i used a relay service to call the texas number and it's a fax line i think, came back with modem craziness.

[ajl917]

and (512)372-5891 is based out of texas.
backtracking, that's actually a landline. apparently it links to SBC.

If I recall correctly, the phones came from a Texas electronics store, so they probably tried it out...

[retrovm]

If I recall correctly, the phones came from a Texas electronics store, so they probably tried it out...

makes sense!
this is still so bizarre. haha

[MattPro]

makes sense!
this is still so bizarre. haha

I know this is awesome :)

I keep looking for more but most files are binary or compiled. I wish the developers left something behind ;)

I wonder what purple skank is...

[retrovm]

I know this is awesome :)

I keep looking for more but most files are encoded or compiled. I wish the developers left something behind ;)

I wonder what purple skank is...

yeah, i saw that too. must be some inside joke.

[MattPro]

yeah, i saw that too. must be some inside joke.

That's what I guessed too, there's not much it could mean...

And I wonder who bcaridad is. He did revisions on the code so he must be some developer of the iphone or one of the testers.

$Id: burnin_cleanup.sh 16699 2007-02-16 01:13:12Z bcaridad $

Edit 2:

Also, anyone know what numbers these are? If they're someone's I'll remove them. Found the in:
/usr/local/etc/ql.plist
(654) 798-0123
(321) 456-7890

[retrovm]

anyone know what numbers these are? If they're someone's I'll remove them. Found the in:
/usr/local/etc/ql.plist
(654) 798-0123
(321) 456-7890[/QUOTE]

well the first number isn't real, and the second traces to rockledge, FL. it's a landline.



actually if you just look at the second number, it just looks like a fake number! haha. but it is indeed a number that traces to florida. the developers might have just been testing random numbers.

[MattPro]

anyone know what numbers these are? If they're someone's I'll remove them. Found the in:
/usr/local/etc/ql.plist
(654) 798-0123
(321) 456-7890

well the first number isn't real, and the second traces to rockledge, FL. it's a landline.



actually if you just look at the second number, it just looks like a fake number! haha. but it is indeed a number that traces to florida. the developers might have just been testing random numbers.

Edit: Sorry, it seems to be a fake contact info on the site... :(

That's weird, it does look fake. Well google shows a hit on this page:
http://209.85.173.132/search?q=cache:44tF2QC2BI4J:www.hrvillage.com/hrMarketsource/pdf/info_order_form.pdf+(321)+456-7890&cd=1&hl=en&ct=clnk&gl=us&client=firefox-a
Contact for some company... Hmm. Might just be random. But why use 321 and not 123 then?

[retrovm]

Edit: Sorry, it seems to be a fake contact info on the site... :(

haha it's all good! :D

[crimsonredmk]

Extracting now, that .wav file looks curious. No way they'd just put in sounds.

[fireshot91]

What is the TestMusic1-4?


Edit: Also, I'm going to assume these pictures were taken by you?

[MattPro]

What is the TestMusic1-4?


Edit: Also, I'm going to assume these pictures were taken by you?

The one with the person in it is. Haha we already found those. :)

[fireshot91]

Oh, don't I feel late :/

[Brooklyn8]

Actually it looks the the second one is probably mine as well. The first one is unknown to me, I don't have an HP computer.

[M2M]

Just had a look through the files and found

usr\sbin\BTServer

Looks very interesting if you check the strings of this file:


+MBAN: Copyright 2000-2002 Motorola, Inc.
=================Didn't get a recognized command=================OUTTA MEM!
CLEANING!Got %d command bytes: %sATManager::processVendorCommand()/SourceCache/MobileBluetooth/MobileBluetooth-29/Server/phonebook/PhoneBookGatewayManager.cpp

PhoneBookGatewayManager::notifySyncTransportFailure
PhoneBookGatewayManager::deviceConnected()
PhoneBookGatewayManager::deviceDisconnected()
PhoneBookGatewayManager::addressBookChanged
PhonebookService
PhoneBookGatewayManager::registerSyncDevice()

UNKOWN
AT

Obex Sync
Obex OPP

PBAP

Timeout occured, any change?

Obex pushing to fix problem

/SourceCache/MobileBluetooth/MobileBluetooth-29/Server/models/AddressBookManager.cpp

starting AddressBookManager

shutting down AddressBookManager
AddressBookManager model started
AddressBookManager model stopped

/SourceCache/MobileBluetooth/MobileBluetooth-29/Server/models/InputSimulator.cpp
Keycode %d
Down


also the file

\usr\local\bin\BlueTool

Some ssh these files to the according dirs on the iPhone and plays with them.

Maybe this Firmware supports bluetooth filetransfer via OBEX to transfer Contacts? :):confused:

[MattGTO]

Has anyone considered that posibility that those pictures (not the ones taken by the OP) could have been taken by the eBay seller, or by a previous owner after if left the hands of apple?

[Brooklyn8]

FYI: I was the ebay seller...the only pic in question would be the first one. Could have just been someone who had the phone b/4 me.

[TBRO]

In the picture showing the back of the iPhones I noticed a difference in the text, it appears to be written more on the LEFT one? What does it say?? ;)

Also, I found an early date in

\System\Library\Extensions\IOSerialFamily.kext\Contents\Info.plist

<string>Apple Computer, Inc 2005-01-12 IOKit Serial Port Family</string> :)

[iHarri]

someone has the firmware on the iphone to run?

[ppc750fx]

someone has the firmware on the iphone to run?

Not to my knowledge. It might be possible to replace some of the 1.0 binaries with their prototype counterparts, but it would probably take an extraordinary amount of hacking to get it actually working... and given that the prototype firmware doesn't offer anything special (at least not for most users), there's not much of a reason to do that.

[tpmtn]

yeah, i saw that too. must be some inside joke.

Skank is maybe "Skunk Works", the team in Locheed Martin which have built many secret aircrafts, like U-2, F-117, SR-71, or F-22.
Also, original iPhone is known to be codenamed "Purple 2".

http://en.wikipedia.org/wiki/Skunk_works
http://www.wired.com/gadgets/wireless/magazine/16-02/ff_iphone?currentPage=all

[pj225]

Can you post the output of "nvram -p" command from that proto-iPhone? I'm trying to boot the firmware dump that you posted and I was curious if there are any special boot-args specified.

[kazakoff]

can someone provide information about how to run it on iphone? plz...i cant wait =)

sorry for my english.

[MattGTO]

can someone provide information about how to run it on iphone? plz...i cant wait =)

sorry for my english.


If you had read even the last 10 posts before yours you would have realized this is -probably- not going to happen.


FYI: I was the ebay seller...the only pic in question would be the first one. Could have just been someone who had the phone b/4 me.

Yeah, I meant the seller you bought them from could've taken the picture with the HP keyboard. There is no reason to believe that that was taken by an original prototype builder (as some thought in earlier posts)

[kazakoff]

MattGTO, i had!
u r right - "this is -probably- not going to happen", but not impossible!
if we got damp, that means that we have a way to put it back to iphone, am i wrong??:cool:

[rw3]

The Texas number is the fax number for Matthew Stafford, Principal Member of Technical Staff, Cingular Wireless aka AT&T.

http://archive.humbug.org.au/ietf-wg-enum/2005-03/msg00039.html

[tmisker]

The guy from the app (the springboard app or whatever) is also in this commercial from Apple.
http://movies.apple.com/movies/us/apple/getamac/betterresults_640x496.mov
Notice how, after you see that guy, the fat pc guy says: work in progress.

[SkankPhwn]

Can you post the output of "nvram -p" command from that proto-iPhone? I'm trying to boot the firmware dump that you posted and I was curious if there are any special boot-args specified.

look at the end of the NOR dump my friend

[MattGTO]

The guy from the app (the springboard app or whatever) is also in this commercial from Apple.
http://movies.apple.com/movies/us/apple/getamac/betterresults_640x496.mov
Notice how, after you see that guy, the fat pc guy says: work in progress.

So of course! It WAS the aliens!

[upsguy27]

Looks like Apple might have tried to put a higher resolution screen in the iPhone originally...


<key>RenderWidth</key>
<integer>640</integer>
<key>RenderHeight</key>
<integer>480</integer>


/Private/var/root/Media/CheckpointData.xml

EDIT: Nevermind, that's just the resolution pictures are taken at.

EDIT 2: Also interesting, the serial number JQ548TEZTXL in the same file above is tied to an iPod Video...

[MattGTO]

EDIT 2: Also interesting, the serial number JQ548TEZTXL in the same file above is tied to an iPod Video...


JQ548TEZTXL = Purple 1 original prototype modded iPod Video? <--- Very interesting possibility. For those who don't know iPhone was codenamed Purple 2. Purple 1 was the first "iPod Phone" attempt, which, I believe, was a clickwheel device.

[upsguy27]

Purple 1 original prototype modded iPod Video? <--- Very interesting possibility. For those who don't know iPhone was codenamed Purple 2. Purple 1 was the first "iPod Phone" attempt, which, I believe, was a clickwheel device.

Yeah, I read that in the wired article. Interesting stuff.

[pj225]

look at the end of the NOR dump my friend

Oh. I didn't noticed that :P

Now, I have created third partition and trying to boot the dump using kernel cache from 1.1.4. Kernel loads normally, but after few seconds, screen goes to maximum brightness level - I think it's that SkankPhone app trying to launch... When I press the sleep/wake button, the brightness decreases to minimal. Kernel caches from the dump doesn't load - iBoot spits out an "Memory image not valid" error. I will try to pack the kernel cache into 8900 container using mk8900image utility from OpeniBoot.

EDIT: IT WORKS! :)

By restoring 1.0.0 firmware and copying PrivateFrameworks from dump, I have managed to launch the SkankPhone app. Not all options in menus works, but it's probably caused by missing utilities in root filesystem - I haven't copied all utils in from FW dump's usr/bin etc.
http://img95.imageshack.us/img95/3280/stp80078.th.jpg (http://img95.imageshack.us/my.php?image=stp80078.jpg)

It seems that the S\N displayed at the bottom is hardcoded into SkankPhone app, the S/N of my iPhone is different...

Edit #2: It works fine on 1.1.4, too :P Just copy the frameworks and programs from the dump that doesn't exist in iPhone's /System/Library/PrivateFrameworks and /usr, and better do not copy lockdownd and USB communication programs from the dump - very nasty things can happen that might require a restore.

[retrovm]

Yeah, I read that in the wired article. Interesting stuff.


can you link the article please? i'd dig reading it. thanks!
and how did you guys find out info with that serial number?

[pj225]

can you link the article please? i'd dig reading it. thanks!
and how did you guys find out info with that serial number?

http://www.wired.com/gadgets/wireless/magazine/16-02/ff_iphone?currentPage=all

https://selfsolve.apple.com/GetWarranty.do

[iHarri]

@pj225
can you please post a step by step tutorial how to put the firmware on the iphone.....

[pj225]

@pj225
can you please post a step by step tutorial how to put the firmware on the iphone.....

There is no need to use the entire prototype FW - restore to 1.1.4 is enough, but remember to backup important data.

1. Restore to 1.1.4 - It must be jailbroken. You can use whatever you like to jailbreak it, but better do not use ZiPhone - it doesn't install afc2 service.
Once you have restored and jailbroken the 1.1.4, install OpenSSH.

2. If you have Windows, use iPhoneBrowser to copy entire AppleInternal folder onto root folder of your iPhone. If you have a Mac, use DiskAid.

3. Copy the following frameworks from firmware dump System/Library/PrivateFrameworks: ARMDisassembler.framework, CHUD.framework, Coach.framework, DiskImages.framework, diStorm.framework, iPodCalendars.framework, iPodContacts.framework, MediaKit.framework, NDISASM.framework, PerfTool.framework, PHTesting.framework, PPCDisasm.framework, Symbolication.framework

to iPhone's /System/Library/PrivateFrameworks

4. Connect to iPhone using SSH and login as root

5. Enter commands:

ln -s /AppleInternal/Applications/SkankPhone.app /Applications/SkankPhone.app

chmod +rwx /AppleInternal/Applications/SkankPhone.app/SkankPhone

Reboot/Respring and you should have a new "interesting" icon on SpringBoard.

Note that some options inside SkankPhone doesn't work unless you copy some contents of FW dump's /usr directory to iPhone. I just copied my iPhone's usr/ onto FW dump and copied it back to iPhone.

If you want SkankPhone to run at every boot, copy com.apple.SkankPhone.plist file from FW dump's /System/Library/LaunchDaemons to iPhone's LaunchDaemons directory.

---

Notes:

S\N isn't hardcoded into app, I was wrong :P I just tried to flash the NOR dump onto my iPhone and it overwritten my serial number with the proto's S/N.

SkankPhone can co-exist with SpringBoard - When SkankPhone is started, it kills SpringBoard.

There are various interesting tools in /usr - go figure :)

I don't know why the hell Apple would need PPCDisasm.framework on mobile ARM OS.

[maokh]

Whats a good way to make a flash dump without actually installing anything on the device?

[pj225]

Whats a good way to make a flash dump without actually installing anything on the device?

You mean entire NAND and NOR chip content dump, or only NAND filesystem (OS files)?

I don't have any knowledge about chip dumping, but you can read the contents of NOR using OpeniBoot.

If it comes to root FS dumping, well, I don't know much about it, too. :P If you don't want to install anything onto device, maybe try making a ramdisk that launches "mount_hfs /dev/disk0s1 /mnt1 && mount_hfs /dev/disk0s2 /mnt2 && tar -cf /mnt1/ --preserve /mnt2/mobile/Media/rootfs.tar" and then transfer it to computer using DiskAid/iPhoneBrowser.

[maokh]

You mean entire NAND and NOR chip content dump, or only NAND filesystem (OS files)?


Im mainly interested in a NAND dump on a virgin phone. Infact, id like to do exactly what was done to pull the software off the beta iphone.

Thanks for the tips

[pj225]

Im mainly interested in a NAND dump on a virgin phone. Infact, id like to do exactly what was done to pull the software off the beta iphone.

Thanks for the tips

Try asking planetbeing from Dev Team how you can do it, he helped Brooklyn8 dump the FW.

[retrovm]

http://www.wired.com/gadgets/wireless/magazine/16-02/ff_iphone?currentPage=all

https://selfsolve.apple.com/GetWarranty.do




hey, thank you!

[iCantwait]

bit of a bump in this thread, i just bought a prototype off ebay :P

when i get it i'll try and get it working, then i'll sell it - for heaps.

[hchung]

So I fix iPhones on the side to make a little extra cash sometimes and a guy approached me with two phones with cracked screens.

Turns out they both have blank backs and boot up to a menu that let you run Skankphone.

While I would have said they're prototypes, the serial numbers appear to be late 2007, and Skankphone has a slightly different menu with a screen that tells you the OS version. They're running OS 1.1.3.

Since that's well after the release of the iPhone, what are these? Why are they blank? And why does one of them have white button/switch plastic instead of black?

[kAoTiX]

Do you have any pictures of these to show us? Including screenshots from the device itself. I would be interested to see these.

[hchung]

Here: http://img192.imageshack.us/gal.php?g=dscf1613w.jpg
Let me know what you think. From the outside, it looked just like a normal phone except no etching on the back. Just noticed I forgot to ask for a picture of one with the white buttons.

Do you have any pictures of these to show us? Including screenshots from the device itself. I would be interested to see these.

[SkankPhwn]

Here: http://img192.imageshack.us/gal.php?g=dscf1613w.jpg
Let me know what you think. From the outside, it looked just like a normal phone except no etching on the back. Just noticed I forgot to ask for a picture of one with the white buttons.

PM me if you would like the firmware of on of these dumped for ppl + you to check out. It is not prototype firmware, but rather factory debug firmware, which is still really cool :)

[hchung]

I tried to PM you but it seems you're not allowing PMs.
Anyhow, I'd be interested in learning how to do the dump.

I don't have access to them at the moment, but given instructions, I can try to figure a time to get to them and do it.

PM me if you would like the firmware of on of these dumped for ppl + you to check out. It is not prototype firmware, but rather factory debug firmware, which is still really cool :)

[trajen]

I'm running an iPhone 2G OS 3.0 unlocked & jailbroken on T-Mobile...

I'm good at directions, can someone walk me thru downgrading the OS and putting the prototype software on my iPhone? Would it be possible to keep the unlock and run the proto software for awhile?

:confused:

[war eagle]

I'm running an iPhone 2G OS 3.0 unlocked & jailbroken on T-Mobile...

I'm good at directions, can someone walk me thru downgrading the OS and putting the prototype software on my iPhone? Would it be possible to keep the unlock and run the proto software for awhile?

:confused:

Why would you want to?

[trajen]

Why would you want to?


For ***** and giggles! :cool:

[magicshortbus]

Lol, those are clones. Some guy tried to sell me one, the homescreen looked legit but when I opened Phone the dialing screen looked just like that.

[benflick]

Lol, those are clones. Some guy tried to sell me one, the homescreen looked legit but when I opened Phone the dialing screen looked just like that.

The ones in this thread aren't clones.

[williamtcforsyt]

I don't post on here(yet) however I though some of you guys might think these are cool. I also hope maybe you can give me some advice on how to get one of them to power up. :D

I picked up 2 iPhone prototypes on the bay. The seller didn't know what they were, and just listed them as as-is parts units. Neither units say "iPhone" on them anywhere, or list the storage capacity. I did some research on the serial numbers, it appears they were both manufactured about 6 months before the release of the iPhone.

Phone #1:
-Doesn't turn on (tried leaving on charger for awhile, along with various reset procedures)
-Glass screen
-Serial number YM650xxxxxx which corresponds to a factory in China, manufactured week 50 of the year 2006. (The iPhone was announced on Jan 6 2007 and release June 29 2007.)

Phone #2:
-Powers on OK
-Plastic screen
-Serial number YM649xxxxxx which corresponds to a factory in China, manufactured week 49 of the year 2006.
-Runs iPhone OS 03.06.01_G (iPhone Launch OS 1.0 was version 03.11.02_G)

The phone that works is pretty neat to use. It does make calls(with my ATT sim), and I can surf the net. However when I did get to web pages they were the mobile versions, not the regular versions. I can receive SMS but not compose my own, other than 5 included test messages. It doesn't sync to itunes. Camera seems to work. It has tons of testing options. I included some pictures for you all, cause if I don't have pics it didn't happen ;)

Also, the working phone has several subtitles that alternate on the screens including:

[Skank is the new black]
[Nine parts perspiration]
[Say hello to the Newton MessagePad 3000]
[Skankphone]

Two prototypes side to side: http://img119.imageshack.us/my.php?image=iphone1dw1.jpg

Back side of both models: http://img75.imageshack.us/my.php?image=iphone7pj1.jpg

Home screen of phone #2: http://img399.imageshack.us/my.php?image=iphone2go0.jpg

Dialing screen phone #2: http://img83.imageshack.us/my.php?image=iphone3bd3.jpg

Network band selection screen (quad band): http://img383.imageshack.us/my.php?image=iphone4ox2.jpg

Screen that shows the operation of various phone features: http://img352.imageshack.us/my.php?image=iphone5zz3.jpg

Browser(no page loaded): http://img383.imageshack.us/my.php?image=iphone6zd6.jpg

PM me if you ever decide to sell these

[hchung]

Haven't gotten any info back on extracting from them, but it sounds like it'd probably work. Just probably be a bit frustrating cuz most features arn't implemented. Just enough to test stuff out.

I'm running an iPhone 2G OS 3.0 unlocked & jailbroken on T-Mobile...

I'm good at directions, can someone walk me thru downgrading the OS and putting the prototype software on my iPhone? Would it be possible to keep the unlock and run the proto software for awhile?

:confused:

[pj225]

Here: http://img192.imageshack.us/gal.php?g=dscf1613w.jpg
Let me know what you think. From the outside, it looked just like a normal phone except no etching on the back. Just noticed I forgot to ask for a picture of one with the white buttons.

It got a SwitchBoard.app :eek: With entire suite of Prototype Fruity Goodness tools! ;)
The dump posted earlier contains only SkankPhone.app (I knew that something was missing in this dump :P ).

The firmware that you got on your device seems to be a diagnostic one that is sended to service centers - remember that 3G with BurnIn on hackintosh forum? Owner got the 3G back from service with diagnostic IPSW restored on it.

I cannot explain why you have a back without an etching... Maybe it was used by a Apple developer?

Contact someone from iPhone Dev Team, they will surely help you with dumping the firmware from your iPhone.

[SkankPhwn]

I tried to PM you but it seems you're not allowing PMs.
Anyhow, I'd be interested in learning how to do the dump.

I don't have access to them at the moment, but given instructions, I can try to figure a time to get to them and do it.

Sorry, I fail and cannot seem to find the option to turn on PM. I enabled getting email from other users though.

[flurffmeister]

Sorry, I fail and cannot seem to find the option to turn on PM. I enabled getting email from other users though.

Unless there is a restriction to new users turning it on, it should be in the Messaging section of your Edit Options page.

Private Messaging
This forum features a private messaging system, which allows members to send messages to one another privately.

If you do not want to send or receive private messages, you may disable the private messaging system.
[ ] Enable Private Messaging

You may limit the receipt of private messages to just moderators and those on your buddy list. Other members who attempt to send messages to you will be told that you have disabled private messaging.
[ ] Receive Private Messages only from Buddies and Moderators

The forum can send a message to your email address to inform you when someone sends you a private message.
[ ] Receive Email Notification of New Private Messages

If you are browsing the forums when you receive a new private message, the system can pop-up a notification box informing you of the new message.
[ ] Show New Private Message Notification Pop-up

[SkankPhwn]

Unless there is a restriction to new users turning it on, it should be in the Messaging section of your Edit Options page.

Private Messaging
This forum features a private messaging system, which allows members to send messages to one another privately.

If you do not want to send or receive private messages, you may disable the private messaging system.
[ ] Enable Private Messaging

You may limit the receipt of private messages to just moderators and those on your buddy list. Other members who attempt to send messages to you will be told that you have disabled private messaging.
[ ] Receive Private Messages only from Buddies and Moderators

The forum can send a message to your email address to inform you when someone sends you a private message.
[ ] Receive Email Notification of New Private Messages

If you are browsing the forums when you receive a new private message, the system can pop-up a notification box informing you of the new message.
[ ] Show New Private Message Notification Pop-up

no dice man, not there for me :/

[hchung]

I tried contacting the dev team via IRC but never got an answer.

My guess is that there was some testing for a revision of iphone boards, so they spun a set of prototypes.

Anyhow, if Skankphwn or anybody else have ideas how to dump the data from it, feel free to post here or PM me.

I spoke with the guy and although he's inclined to keep them as a collector's item, he'd entertain offers. I tried offering my 3G, but he said he'd at least want a factory unlocked 3GS. Too much for me. :P On the upside, he'll still cool letting me do any dumping. (if I knew how)


The firmware that you got on your device seems to be a diagnostic one that is sended to service centers - remember that 3G with BurnIn on hackintosh forum? Owner got the 3G back from service with diagnostic IPSW restored on it.

I cannot explain why you have a back without an etching... Maybe it was used by a Apple developer?

Contact someone from iPhone Dev Team, they will surely help you with dumping the firmware from your iPhone.

[M2M]

Possibly you can contact planetbeing. Reading from the Thread he was also helping to dump the prototypes firmware

http://twitter.com/Planetbeing

[kerby2000]

Any updates on this topic?

Have you managed to dump the firmware?

[hchung]

Any updates on this topic?

Have you managed to dump the firmware?

We dumped the NOR. It didn't seem all that interesting. There wasn't any easy way mentioned to dump the NAND, so I returned it.

[FaDaWay]

I have a repair company of iPhone in France yesterday I found in my stock
A very strange motherboard and comm board , different than all other motherboard I have seen before, This motherboard come from an iPhone EDGE with the year 2006 on it, all other one are from 2007.
And it's trully a prototype, I don't know if it's the one with the plastic screen.
On the motherboard there are some number of Apple parts but , nothing for the Serial / Number.

The motherboard is broken I think, But I'm not sure.
I will try to repair it tommorow but I have already try to change the battery i and the phone doen't work with the new battery , only the original one work but only 3.3volts and I can't charge.

When the phone work one time for 40 times , There are a very strange screen
You can use the volume button to navigate and the home button to select.

If you want some picture I can send it.

[QuarterSwede]

If you want some picture I can send it.
Yes please.

[wad11656]

Sorry, didn't wanna read thew whole thread, so not much valuable input here...

But HOLY COW!!! Those pics are AWESOME!! It's so cool seeing these amazing developed systems in such a rudimentary form! ...It had to start SOMEWHERE, right?? ha ha...

It would also be hilarious if someone made an iPhone theme based on these beta/alpha versions of the OS--or whatever the firmware is!! ha ha

Also, my roommate had a protector covering on his iPod Touch [3G?] that had the EXACT same-looking texture as the plastic screen iPhone, and it feels freaking AWESOME. So smooth and silky, where as with the glass they use, sure...more clean & glossy and futuristic-y I guess, but you can smear and smudge...if you get a new model iPhone in the future, one option to look at for a screen protector is a plastic one with that silky smooth texture I'm talking about...[/pointless rant that wasted your valuable time]

[FaDaWay]

I don't have backlight and the picture is upsidedown
So I take theses pictures with photobooth

[FaDaWay]

In the menu you can see a date => September 7th 2006
it's the born of the iPhone ?

[FaDaWay]

I think I can enter there because of the low battery
but i'm not sure...

[hchung]

Wow, those are interesting!

Can you take a close up picture of both sides of both boards?

A nice digital camera, using macro settings and no flash would help.

What kind of stuff does it say in the menus?

[FaDaWay]

For the Menu:

Sep 7 2006 16.06.44 <= it's always the same time I think it's the birth of this iPhone.

NOR CHKSUM 3846

Firewire Charge
USBSuspend
USBShutDown
USBCharge 100
USBCharge 500
RD_NAND_ID
Sdram_Quickscan
Flash_Chksum
ASD for BATT (I Think Apple Service Diag)
BB_Command
BB_BATT

That's All

[pj225]

I wonder if there is any operating system installed in it... Try connecting it to computer via USB cable, and selecting the USBCharge 100 option to charge it. Also, try turning it on with different button combinations.

EDIT:

That screen is so ugly because, as its name suggests, it's stored in NOR. They don't have much space in there. 1 MB, to be exact. I find it funny that HTC diagnostic programs from ~2005 phones are looking similiar to this. :P

The date that you are pointing out is probably the build date of NOR CHKSUM. Hardware may be older.

[PCrew0000]

@pj225 Have you got a build of SwitchBoard.app?

@FaDaWay Your device is definitely an engineering prototype. You've probably got an FPGA unit, and what you're seeing is a low level diagnostics tool (or as it seems).

[SonnyDickson]

Hello Everyone,

Good News, I Downgrade my other iPhone 2G to 1.1.1, So now i'm running the Diagnostics on my iPhone

FaDaWay & hchung - Do you still have that Logic Board? If so i could help you Dump the Firmware off it

[FaDaWay]

I still have this card is being repaired in China
Wait and see

[hchung]

Sorry, don't have it, sent it back to the guy last year. :(

Hey Guys,

Good News, I'm now running SkankPhone.app on my iPhone 2G with iOS 1.1.4,
If anyone need any help to Dump the Firmware let me no

Thank You :)

P.S. FaDaWay/hchung, Do you still have that iPhone? As i can help you Dump the Firmware off it. Thank You

[AnonMac50]

So what's happened by now? Any progress? Which reminds me. Would SkankPhone work on an iPod touch 1G do you think?

[SonnyDickson]

I still have this card is being repaired in China
Wait and see

Thank You for getting back to me. Let me no how it goes with the Logic Board.

[SonnyDickson]

Sorry, don't have it, sent it back to the guy last year. :(

Thank You anyway.

[SonnyDickson]

Hello Everyone,

Today i picked up an iPod Touch 3rd Prototype the iPod the iPod was running "Inferna" But now it has SwitchBoard, See Photo

https://p.twimg.com/Aj5ro3xCMAAvhz3.jpg

Thank You