mercurious

Update: This method now deprecated in favor of new AppSnapp technique

See the Instant One-Touch Jailbreak Method as a simple alternative to what’s described in detail below. It takes advantage of the TIFF Exploit in Mobile Safari to jailbreak simply by visiting a site. It then patches this scary loophole after installing the Nullriver AppTapp into your Springboard.

Original Post

We threatened to write this tutorial, and our own experimentation with AppTapp 3 beta on the latest firmware and the ensuing customizations like SummerBoard and Customize on iPhone 1.1.1 forced us to become very familiar with all the nuances of compatibility and the absurd downgrade-to-upgrade process. We’ve published our meticulous notes as a PDF guide where you too can install native third-party apps and customizations without using the command-line, as long as you comply with the following requirements:

• AT&T customer. No SIM unlocks.
• Mac. Intel or PowerPC. No Windows, but the iNdependence tool can be substituted for the PC equivalent.
• OS X 10.4.10 — Leopard support untested.
• iTunes 7.4.2
• iPhone 1.1.1 and 1.0.2 firmwares
• Novices, beginners, newbies welcome — patience required
• Experience modders may adapt this guide for other platforms, scenarios

Download the PDF guide which includes download links to the required tools, including iNdependence 1.2.4 (.dmg), the iPhone 1.0.2 firmware files (.ipsw) and the Nullriver AppTapp installer (.zip). Folks may groan about the PDF document as opposed to universal HTML formatting, but be assured that the PDF contains screen shots of crucial dialogs and is as detail-oriented as they come. It’s probably the best step-by-step tutorial out there at the moment. In the spirit of full disclosure though, it’s fifty steps long, but does not require any command-line. We’re not sure if this is step forward or backward, but it’s a reliable, well-tested method, either way.

Important notes that deserve republishing outside of the PDF guide:

1. Do not install both Trip1PogoStick and SummerBoard on 1.1.1 — you’ll get startup freeze (stuck on Apple logo), especially if you’ve used previous 1.1.1. upgrade methods, including iNdepenence 1.2.2. and/or Trip1Prepz. We made this mistake and that’s what inspired us to start fresh and document every step for you. Use iTunes to restore to a fresh 1.1.1 state if this occurs.
2. Do not install the 1.1.1 tweaks with SummerBoard. They are not compatible SummerBoard and Customize and will screw up your Springboard forcing to to restore to 1.1.1 and then start the 50 step process all over again. We attempted this and ended up with a blank Springboard, no icons, and no phone functionality. This is the closest we’ve come to a brick, yet, in all our of hacking tests.
3. Do not follow any of these steps and discard this document immediately if you are not prepared to void your warranty and any obligation of Apple or AT&T to support you in these endeavors. They have clearly stated that these modifications are in violation of their use agreements. In fact, it is not yet easy to even truly make a factory fresh iPhone, without any trace of third-party modifications, in the event that you might want to return your device. Although using third-party applications is far less risky than unlocking your firmware to run on other networks beyond AT&T, it’s still considered an unauthorized activity. No warranties are implied by these instructions. You follow these steps at your own risk as assume all liabilities herein. If you have any reservations about these activities, delete this document and forget about iPhone modding. We have no responsibility for your actions and provide this information for academic research purposes only.

Once installed, you’ll enjoy SummerBoard and its themes and customizations as well as the Customize program, albeit buggy on 1.1.1, does allow icon ordering. Anal Retentive iPhone Hackers rejoice! Note that the vertical flicking of SummerBoard on 1.0.2 is replaced with the horizontal paging that you may have already experienced on early versions of 1.1.1 exploits.