Original iPhone hackster extraordinaire Nate True has used some undisclosed means to peek into firmware 1.1.3 and discovered essential file system structural changes that will allow Official SDK based third-party applications to run and install easily. Notably…

1. SpringBoard appears to display whatever is in the /Applications directory. Earlier firmwares used a .plist XML configuration file. Then, at 1.1.1, Apple dropped the editable text file in favor of a locked SpringBoard, which, in turn, was quickly hacked with SummerBoard and other unofficial apps for re-ordering and adding. Perhaps, the SpringBoard home screen is even more efficient at 1.1.3 in that it simply renders the contents of the /Applications directory.
2. Applications run as the user “mobile” instead of as “root” which clearly sandboxes official apps and resolves numerous security concerns with opening up the platform for third-party development.
3. Preference files are stored in the “mobile” user directory (/var/mobile) instead of the “root” user directory (/var/root), a natural extension of implementation #2.

Via Nate True at cre.ations.net

Further consideration yields the basic assumption that Apple can release the SDK, and even launch titles from third-parties that will effortlessly install into iPhone 1.1.3 without additional updates required. The iPod Touch update purchased via iTunes is probably the essence of what’s to come.

The burning question remains, however. Will the jailbreak scene still thrive after officialization commences? What about the magnificent Nullriver AppTapp Installer? And the further exploits of his majesty Nate True?

It was a fun ride, and we certainly garnered a small portion of the incredible Google search term traffic related to iPhone hype in 2006. I’m afraid we’ll be waiting out the dark period until February 2008, when the official SDK is released and a new generation of extensibility emerges for Touch applications. We also anticipate a significant iPhone firmware update at MacWorld 2008 in January to tide us over. Not to mention all the brouhaha that will sound out when the 3G version hits the streets.

In short, the jailbreak process became too arduous and the reliability of some common applications became dubious. Naturally, this is no surprise, given the fact that Apple had no reasons to support these endeavors. Indeed, the post-SDK era will involve mediation through digital signatures, and the indy iPhone developer market will writhe in pain. But, if it means that applications will be sturdy, well designed, and accountable to performance and efficiency standards, we have to admit that it’s probably worth it, having learned the hard way. When it comes to a mobile phone, the basic functions are more crucial than on a desktop or laptop computer. Things like basic communications capabilities really do, just have to work.

With an 1.1.3 update rumored to be hitting the servers this week sporting voice recording and disk mode storage, the jailbreak process promises only to get more arcane.

It’s never been easier to install custom applications

You can now jailbreak your iPhone or iPod touch to install third-party applications with extraordinary ease. Visit the URL pictured above with your Mobile Safari and in an instant your device’s file system will be opened and the AppTapp Installer will appear on your Springboard after a restart.

Via Erica Sadun at TUAW — Instant Jailbreak for iPhone and iPod Touch

If you’re new to all of this, check out Erica’s advice for where to go from here.

This method supersedes all previous methods, including our own process← that we document in meticulous detail, now deprecated in favor of using AppSnapp. Interestingly, this method uses the TIFF Exploit of Mobile Safari to open up the lockdown of the system, and then does Apple the favor of patching the security hole!

Furthermore, it is recommended that AppTapp 3.0 beta run on iPhone firmware 1.1.1, so if you’re a 1.0.2 hold-out, you’ll need to consider taking the plunge. If you’ve already upgraded to 1.1.1 and have not yet jailbroken and installed AppTapp, methods are readily available via search and usual enthusiast sites. In the meantime, we are considering working on We’ve written [and have since, deprecated!] a detailed tutorial that guides someone through that process while we wait for Nullriver to release the Installer installer for AppTapp 3.0 for iPhone 1.1.1, and any comments urging us to spend the effort would be most appreciated.

It’s going to be very interesting to see how Nullriver’s efforts fare in light of Apple’s recent revelation that a Touch SDK (iPhone and iPod touch) will be released to developers in February 2008. Either Apple will characteristically buy them out and perhaps absorb AppTapp into the official native distribution system (à la CoverFlow), deploy their own superior version of an iPhone installer system, or let AppTapp live and let live. Only time will tell. But we do applaud Nullriver’s fierce achievements in setting the bar high for pre-SDK native iPhone development and UI design.

For those who cannot wait for an AppTapp 1.1.1 Update

See our Install AppTapp 3.0 beta in iPhone 1.1.1 without Command Line tutorial←

Certainly, at this moment, we can only assume that Nullriver is busy updating their AppTapp installer to integrate the revised jailbreak and install procedure required with the iPhone 1.1.1 software update. Only in the past few days have the new symlink technique tools been released in beta. Ironically, you use AppTapp in the process of preparing your iPhone 1.0.2 to update to 1.1.1 and then apply another third-party hack to get around the recent lockdown of the SpringBoard, which no longer uses the DisplayOrder.plist file to determine the visibility and ordering of icons on the main menu, rendering SummerBoard obsolete in favor of another hack which allows horizontal-style scrolling to add more icons.

What you’ll lose with 1.1.1

By gaining the 1.1.1 features such as the WiFi Music Store, Home button double-click shortcuts, and space-bar double-tap for a period feature, among other minor tweaks, you will lose certain things you might have enjoyed under 1.0.2 and under, with the third-party applications and enhancements. This includes losing the ability to order the icons in the SpringBoard with rSBT, applying SummerBoard themes, and perhaps most critically for some, the ability to create custom ringtones. iPhone 1.1.1 requires a strange ring tone file format (.m4r) and tools to create these files don’t seem to be available, yet. This is especially disappointing as it effectively eliminates your ability to create sound effect ringtones, or install the brilliant Cellphone sound that’s found deep the iLife sound library. Why does Apple think we only want musical ringtones? What if customers find them dreadfully annoying, and would prefer a simple ring that sounds like a cellphone, such as the one featured on the original iPhone TV commercials!

Update requirements

Once a step-by-step procedure was published by iPhoneAlley, we decided we would take the plunge and see if it works, rather than wait it out for Nullriver to release their elegant “next-next” wizard that handles the process easily and command-line free in a single fool-proof method that minimizes opportunities for error. We can confirm with amusement that, indeed, the 1.1.1 software update does allow third-party programs to be installed. Although the process is different, it’s not really any more or less scary than the original manual method we used before AppTapp was released with its novice-ready installation. In fact, the tools and methods have actually evolved since, and someone who fits the following profile could consider doing this also:

1. Have a Macintel (no PowerPC or Windows support at this time)
2. Have an AT&T account (no unlocked SIMs; free/open source unlocking tools aren’t ready yet)
3. Have about 30 minutes of patience to follow directions very carefully
4. Have some experience with AppTapp, Terminal, SSH and SFTP
5. Don’t mind potentially voiding your Apple warranty

Disclaimer, Warning, Caution

If you don’t qualify with all of the above conditions, you should definitely either wait for Nullriver to update AppTapp for 1.1.x, or think again about your inclinations to modify your iPhone.

Otherwise, all the usual warnings and disclaimers apply: Do this at your own risk. We assume no liability. Future updates from Apple are almost certain to close whatever loopholes were discovered at this point. Third-party applications make modifications to your iPhone, such as write preference files, that an Apple support technician might be able to detect, even after performing a Restore.

Further clarification

We followed iPhoneAlley’s step-by-step instructions, which are adequate for those of us that fit somewhere between a command-line hacker and a novice. The process takes about 30 minutes and seems to be reversible with the described downgrade feature. It’s important to make the clear distinction between “unlocking” and “jailbreaking,” the former is a far more risky endeavor where you modify the deep innards of the device to allow SIM cards and service providers other than AT&T. Inoperable bricked phones have been reported with the 1.1.1 in this case. Jailbreaking is simply opening up the iPhone’s file system to allow read and write access to allow the installation of third-party software and other customizations. Unlocking and 1.1.1 upgrades is probably still too risky at this point, while jailbreaking seems to be fairly safe.

Lean Machine

It’s worth noting that there are only two third-party applications that we ended up installing on our newly upgraded 1.1.1 system: NES and Chat. All the other programs are basically proof-of-concepts, raw experimentations, non-essential and easily forgettable. However, retrogaming and a genuine IM client, two things that might never be officialized by Apple (via AT&T) are considered indispensable additions to sorely lacking features of the factory feature set: games and IM.

UPDATE October 20, 2007

It turns out that the release of iNdepenence 1.2.2 was probably premature, as a later, greater version (1.2.4) emerged on October 18 that resolves some key issues with 1.2.2, that include how the Springboard is handled. Anyone who used 1.2.2 (us!) could have either used some patches released to resolve issues, or end up starting the whole restore, downgrade, exploit, upgrade, re-install process all over again. We’re compiling a tutorial and notes as we go through it. Stay tune for a posting on the subject.

UPDATE October 15, 2007

A new version of iNdependence was release today (v1.2.2) on Google code which supports Jailbreak on 1.1.1 firmware. It includes a special UI to perform and prepare for the 1.1.1 update which is not indicated in the iPhoneAlley step-by-step guide that we followed. Any users that have not yet updated form 1.0.2 to 1.1.1 should read the included Help documentation to learn the best method of preparing for 1.1.1 and then using their post 1.1.1 upgrade procedures available in the Firmware tab of this program. If you updated to 1.1.1 from 1.0.2 before this was released, you may need to downgrade with it, and then re-update to allow the ability to perform jailbreaks in the future. In the procedure outlined by iPhoneAlley, you really only get a one-shot-deal to jailbreak, so this new method is clearly preferred. We’ll comment on our experience preforming the downgrade and then re-upgrade using the new version of iNdependence.

UPDATE October 16, 2007

Some experiences in using iNdependence 1.2.2 to manage the migration to iPhone 1.1.1 while preserving AppTapp and jailbreak access (not SIM unlocking) follow. The built-in Help provides the step-by-step directions, however, it still needs some work, as it confusingly refers to itself in a circular fashion. We would still recommend waiting for Nullriver to release AppTapp for 1.1.1 if you’re at all weary of needing to carefully follow an arcane set of instructions or avoid using the command-line altogether. This update to iNependence achieves jailbreaking capabilities on the new firmware, but that’s about it.

Helpful Hints

Things to watch out for, not well documented in the built-in Help, when working with iNdependence 1.2.2 and the 1.0.2 to 1.1.1 upgrade process with jailbreak:

• The built-in Help documentation does not cover how to install AppTapp. However, you can use iNdependence or an SFTP client like CyberDuck to copy the Installer.app file found within the AppTapp installer package. Once copied, you can SSH into your 1.1.1 iPhone and trigger launching it via the command-line. Then you can enter the conceited software beta installer link into your MobileSafari, adding the required Trip1PogoStick hack, to allow the 1.1.1. SpringBoard to display programs, including Installer. Refer to the iPhoneAlley tutorial steps that cover these aspects, and ignore the steps that are covered by the new iNdependence method, which precludes the need to preform the installation of the Trip1Prep step. That seems to be the symlink trick that allows the 1.1.1 upgrade, but iNdependence handles that during its Pre-1.1.1 and Post-1.1.1 steps. On the iPhoneAlley tutorial, they say not to use iNdependence or use the traditional AppTapp installation. Although true in the case of the AppTapp installation, this tutorial needs to be updated to account for the reality that iNdependence has since been updated, and can be used to update to 1.1.1, in fact, offers a preferred method which retains the jailbreak. By following the iPhoneAlley method, you lose the jailbreak after completing the upgrade. It’s gotten very confusing, indeed. Apple is doing an excellent job of altering the infrastructure just enough to disrupt our efforts significantly.
• Be sure to kill the iTunes Helper process using Activity Monitor. Otherwise, iTunes will launch during many of the required reboots, and could interfere with the crucial timing of the re-activation.
• Temporarily deactivate your media syncing in iTunes, especially if you have downgrade. This will save you lots of time as the iPhone gets “erases” and re-built. Re-check the boxes for your songs, photos, videos, etc. after the process has been completed and sync up.
• We discovered the hard way, that you really want to let iTunes perform the Activation, rather than use iNdependence. It appears that if you use iNdependence to activate the phone and then deactivate it, iTunes does not appear to successfully re-activate, and thus you become dependent on iNdepedence. Yikes!
• Although the built-in Help claims that your YouTube will be fine during this process, we found that it did not work after the process. Fortunately, we easily found this reference, where you can download the appropriate security key files and upload them to the correct place on your iPhone file system (/var/root/Library/Lockdown/), and this seems to restore YouTube functionality.
• You’ll need to re-sync one additional time after the process is complete to get your Apple iTunes Music Store account properly associated with your WiFi Music Store in order to purchase music on the iPhone.
• Don’t forget to change your SSH passwords from the defaults, to help prevent getting truly hacked by a malicious user on some WiFi network. iNdependence does make it easy to change these passwords in the SSH tab.

Indeed, we could work on a write-up that combines the best of what’s offered on iPhoneAlley and the iNdepenence built-in Help, but by the time we finish that, Nullriver might have their brilliant AppTapp Installer updated, and then, like before, it’ll be a waste of time, thankfully. It’s very likely that some other passionate modder has beat us to the punch, by now.

Hyperbole Essay Muses a Protestant Split Over Jesus Phone

Release a breakthrough product, ready the defenses. Slash prices within 60 days of its release. Pre-test an elaborate consumer store credit program. Maintain control of user experience, revenue streams, and product integrity. Expedite firmware drops to shore up security against an unpredictably vigorous, yet independent, and ingenious rogue software design movement. Monitor ensuing online chatter and surveil the field, ready to deploy assets.

Such is the life of Applists, at the brink of factioning off into a ruthless, fringe element, no longer allegiant to Pope Jobs. These followers protest, disillusioned with the rejection of their effusive prayers and deeds in the name of the product’s church. Emblems of the faith, splendid exemplars of user interface mantras led by installers as elegant as “undocumented features,” spreading customizations and innovations of every whim as if Gnostic Gospel. Each passionate shortcoming of the breakthrough product, much hyped, yet still maligned beyond nitpick, had been redeemed, by painstaking devoted minds, dedicated to unlocking the mysteries of the revolutionary creation, without manual, in disobedience to advice and guidance.

Today the mark is 1.1.1 vs. 1.0.2 — those who have crossed over towards Applist orthodoxy and those resistant, not yet yielding, making due without holy sanctions, verified creed. Perhaps it’s the attraction of a more personal relationship with the Godhead, the sacred code, Kabalah’s sublime intertextual numerology, the open principles of touch-based human interface guidelines and their applications, Gnostic texts canonized by Memex. This divine intimacy of the populace is too much for the orthodoxy to stomach, unmediated transgressors. Only deep within the Vaticanal campus of Cupertino, could the details of iPhone be realized and celebrated through masses. Or could they? The orthodoxy obediently applies edicts from axis mundi, replete with sharia, releasing newly inscribed sacraments of commerce, and trivial revisions to interface ritual, all as sacrifices to the Godhead in the name of stablity, security, and eschatology. The reformists resist the superficialities of bug fixes, feature tweaks, and new revenue streams in favor of purist pursuits of homebrewed exchange and unmediated gadgeteering.

Watch the iPhoneDev splinter group, the prophets Erica Sadun, and her followers, all Digging, the global audience, Natetrue and Nervegas and Nightwatch, all the great disciples of the tripartite theory of Jobs, Ives, and Schiller; now splintering off into a Protestant reformation, rejecting the hegemonies, the hierarchies, the corporate religiosity that puts shareholder before stakeholder, priest before parishoner, mission before congregation, partner before customer, policy before press, business before pleasure.

Other churches reap followers by addressing the misgivings of these loud voices, the difficult choice of switching allegiances, and selecting new identities could be the most drastic reaction to the Applist inquisition. Once dedicated followers, so-called fanboys, mavens, influencers, the variously labeled, occasionally ridiculed, persecuted acolytes of American design purity, objects painstakingly assembled by Chinese workers, clothed in their consumer best, they are lovingly delivered to lavishly spoiled consumers, whose lives change instantly, noticeably, invisibly, despite clear markings and insignia.

Needless to say, we aren’t the only ones jolted into a state of doubt, of second-guessing, a crisis of faith. Our iPhones remain 1.0.2, our AppTap apps continue to dance upon our SummerBoard with a flick, semi-useless, yet somehow indispensable reminders of cherishing the essentials of open, of freedom, of flexibility. We remember not to take for granted the simple joys of the original Applist congregation, enabled to seek more personal relationships with what the breakthrough product enables, beyond expansion and customization: retrogaming, instant messaging, operating systemics, electronic literature, voice recordings, recreation, media redistribution, virtualization, and location-based positioning.

The factionalization inevitably reflects the disconnect between the hierarchy and its Diocese. Cupertino must enforce and enrich its control and influence over the essential elements of its worldview, the device software. There are specific fiduciary duties towards contractual partners and shareholders that assess profound regard in refocusing the consumers attention towards revenue streams and away from endeavors that distract from ongoing tithing. Yet the followers, in their humanistic zeal for coming to know the the device software more intimately, more greatly, more intrinsically, unlocked an interconnection that may not have even been intended for mere mortals. This Pandora’s box exemplifies the detachment of the Tripartite from its congregation. Such a clearly precedented trait of Applists was forgotten, and now fracturing ensues.

Will devotees of Apple fracture into subservient and subversive sects, now prompted to select allegiances?

Nullriver Software releases full GUI iPhone Installer

iPhone enthusiasts and novices rejoice as the first native application installation software is released allowing you to install and maintain 3rd party iPhone applications in a user-friendly, graphical interface. Multi-step command-line hacking is no longer required to get programs installed into your iPhone. A natural Mac installer automates the process of getting the installer set up on your iPhone. Enjoy the beta before it goes shareware, as widely anticipated. This makes our own step-by-step guide← and countless others somewhat obsolete!

Download AppTapp Beta →