Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

darricksailo

macrumors 601
Original poster
Dec 18, 2012
4,353
113
http://www.saurik.com/id/15

Saurik mentioned how to do this in his article but it was not super clear. This is how I interpreted the fix. It seems like it could work but I don't know if that soft dfu mode will prove to be an obstacle with this method.

This only works for the iPhone 3GS, 4, and iPod Touch 4th gen and you need to have the "useless" shsh blob for the iOS firmware.

I will be using iOS 6.1.2 as an example

1. download the invalid 6.1.2 blob from cydia using either TinyUmbrella or iFaith.

2. download the 6.1.2 ipsw firmware for your respective device and stitch the shsh blob to it using redsn0w or sn0wbreeze (iFaith won't allow you to create the custom firmware with invalid blobs)

3. put your device into pwned dfu mode

4. restore your device using that custom firmware and upon reboot (I believe), you'll be stuck in a soft dfu mode and you can just use redsn0w's "just boot" to boot out of it

5. once you are loaded into the springboard, run iFaith or redsn0w and choose "dump shsh blobs" (for iFaith) and "extras->shsh blobs->fetch" (for redsn0w

6. it'll ask you to put your device into dfu mode and it'll do its thing to create a "useful" blob for you

7. after it is done creating, it should ask you to save to a location on your computer
saurik said:
Note: I have been told by MuscleNerd that there is a minor issue in the current version of redsn0w that will cause blobs retrieved from the device to not be uploaded to Cydia's servers. He had intended to get a new version out by the time he had to leave for HITBSecConf2013 (an international security conference at which evad3rs is giving a presentation about evasi0n), but schedules did not permit this. I had then hoped that this new version of redsn0w could be released before this article, but due to the longer delay I have decided that this information needed to be released sooner.

Using the currently released version of redsn0w will still (as far as I understand) copy the active TSS data from your device and store them locally on your computer. It is then my understanding that redsn0w will be able to upload this information at a later time from your computer. Alternatively, there is a program called iFaith, developed by iH8sn0w, that can be used to immediately upload your TSS information; however, this program is only available for Windows (so users of OS X will definitely have to wait until the new version of redsn0w is available).

8. using that 6.1.2 blob created by redsn0w or ifaith, stitch it into a clean 6.1.2 ipsw firmware and put into pwned dfu mode and restore with that custom firmware

9. if all this goes smoothly, you should have your iPhone 3GS/4, iTouch 4th gen at iOS 6.1.2 without being stuck in soft dfu mode upon reboot

Alternatively, you can use this method to get proper blobs from the invalid blobs assuming this method does work
 
Last edited:
I will be giving this a try right now using iPhone 4 CDMA currently running 6.1.3 with a locally saved 6.1.2 blob file. I was able to downgrade to 5.1.1 before using a remote blob. Will let you know the results.
 
I will be giving this a try right now using iPhone 4 CDMA currently running 6.1.3 with a locally saved 6.1.2 blob file. I was able to downgrade to 5.1.1 before using a remote blob. Will let you know the results.

Upon further feedback from a while back, I don't believe this will work because you're still missing the boot sequence code thingy so dumping the blobs will still end up the same

However, you're free to try it if you would like and if it doesn't work, I guess you can just restore to a proper firmware version. Thanks for the results though!
 
Question: if I am reading this right, I can downgrade my new iphone4 from 6.1.3 to 6.1.2 despite the fact that I have no 6.1.2 blobs (as I have only had the phone for a week). Is this correct?
 
Last edited:
Question: if I am reading this right, I can downgrade my new iphone4 from 6.1.3 to 6.1.2 despite the fact that I have no 6.1.2 blobs (as I have only had the phone for a week). Is this correct?

Whether this method works or not, you still need 6.1.2 blobs to downgrade
 
Well it sure looks like you download the invalid blob in step one to get far enough that is step 5 you can generate a legitimate blob and stitch it in. This guide doesn't seem to require having had a backed up 6.1.2 blob, which is why I asked.
 
'1. download the invalid 6.1.2 blob from cydia using either TinyUmbrella or iFaith.'

That means blobs for 6.1.2...
 
Well it sure looks like you download the invalid blob in step one to get far enough that is step 5 you can generate a legitimate blob and stitch it in. This guide doesn't seem to require having had a backed up 6.1.2 blob, which is why I asked.

Blobs are unique to each device so even if I gave you my iPhone's 6.1.2 SHSH blob, it wouldn't work
 
Ok, that's what I needed to know. It was my assumption, being unfamiliar with the subject, that the invalid blob came from another phone or some such tomfoolery.

Is there any way for me to downgrade this phone at this time?
 
How to get to iOS 6.0-6.1.2 without going into soft dfu mode on A4 devices

Not without blobs no

Why not jailbreak anyway with redsn0w?
 
Safari, your cydia tweaks, etc

Phone and txt work

----------

What apps would I lose on a semi-tether reboot?

----------



Any news on when we might get iOS 7? And will this phone actually get it?

It looks like the have most of it ready for iOS 7, best guess october/november

Yes
 
Run SemiTether and you won't even loose Safari on a reboot. Only Cydia plus Cydia tweaks/apps are a no go until you can reboot with your host computer.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.