|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "N88AP"
m (fix link) |
m (→iBoot) |
||
| (17 intermediate revisions by 8 users not shown) | |||
| Line 1: | Line 1: | ||
[[Image:IPhone3GS.png|right|thumb|iPhone 3GS]] |
[[Image:IPhone3GS.png|right|thumb|iPhone 3GS]] |
||
| − | This is the iPhone 3GS. It was released on |
+ | This is the iPhone 3GS. It was released on {{date|2009|06|19}} with a price tag of $199 for the 16GB model and $299 for the 32GB model, in the U.S., Canada and major European countries. Prices vary depending on the mobile operator. It features the same exterior design as the [[N82AP|iPhone 3G]], but has new internal features such as video recording, voice control, digital compass, faster CPU, increased RAM, Nike+ support, etc. The name used in firmware is iPhone2,1. |
== GPS == |
== GPS == |
||
| − | The iPhone 3GS uses the [[Infineon PMB2525|Infineon Hammerhead II PMB2525]], like the iPhone 3G. |
+ | The iPhone 3GS uses the [[Infineon PMB2525|Infineon Hammerhead II PMB2525]], like the [[N82AP|iPhone 3G]]. |
== Baseband == |
== Baseband == |
||
| Line 14: | Line 14: | ||
==Known Exploits== |
==Known Exploits== |
||
===Bootrom=== |
===Bootrom=== |
||
| − | *[[0x24000 Segment Overflow]] - An exploit that allows loading an unsigned [[LLB]] on devices that have [[Bootrom 359.3]] |
+ | *[[0x24000 Segment Overflow]] - An untethered exploit that allows loading an unsigned [[LLB]] on devices that have [[Bootrom 359.3]] Units produced after 2009 week 40 have [[Bootrom 359.3.2]] and are not vulnerable to the [[0x24000 Segment Overflow]]. |
| − | *[[ |
+ | *[[alloc8 Exploit]] - An untethered exploit available for both of the bootroms, both [[Bootrom 359.3.2|new]] and [[Bootrom 359.3|old]]. |
| + | *[[Limera1n Exploit]]- A tethered exploit that allows executing unsigned code over USB |
||
| + | |||
===[[iBoot]]=== |
===[[iBoot]]=== |
||
| − | *[[iBoot Environment Variable Overflow]]- An exploit that allows executing unsigned code over USB; fixed in |
+ | *[[iBoot Environment Variable Overflow]]- An exploit that allows executing unsigned code over USB; fixed in iPhone OS 3.1 beta 3. |
| − | *[[Usb control msg(0x21, 2) Exploit]]- An exploit that allows executing unsigned code over USB; fixed in |
+ | *[[Usb control msg(0x21, 2) Exploit]]- An exploit that allows executing unsigned code over USB; fixed in iPhone OS 3.1.3. |
| − | *[[Limera1n Exploit]]- The iBoot incarnation of the bootrom exploit; fixed in |
+ | *[[Limera1n Exploit]]- The iBoot incarnation of the bootrom exploit; fixed in iPhone OS 3.1.3. |
*[[SHA-1 Image Segment Overflow|SHAtter]]- The iBoot incarnation of the bootrom exploit; fixed in ? |
*[[SHA-1 Image Segment Overflow|SHAtter]]- The iBoot incarnation of the bootrom exploit; fixed in ? |
||
| + | |||
== Bluetooth & Wi-Fi Chip == |
== Bluetooth & Wi-Fi Chip == |
||
The 3GS uses the Broadcom [[BCM4325]] single-chip Bluetooth/FM/WLAN device. |
The 3GS uses the Broadcom [[BCM4325]] single-chip Bluetooth/FM/WLAN device. |
||
| Line 28: | Line 31: | ||
== Specifications == |
== Specifications == |
||
| + | * '''Size''': 4.5 inches (115.5 mm) (height) × 2.4 inches (62.1 mm) (width) × 0.48 inches (12.3 mm) (depth) |
||
| − | * '''Color''': Black or white |
||
| + | * '''Color''': Black or White |
||
| − | * '''Size''': 4.5 inches (115.5 mm) (h) × 2.4 inches (62.1 mm) (w) × 0.48 inch (12.3 mm) (d) |
||
| + | * '''Battery''': Up to 12 hours of 2G talk, 5 hours of 3G talk, 5 (3G) or 9 (Wi-Fi) hours of Internet use, 10 hours of video playback, and up to 30 hours of audio playback, lasting over 300 hours on standby |
||
* '''Weight''': 135 g (4.8 oz) |
* '''Weight''': 135 g (4.8 oz) |
||
| − | * '''Battery''': Up to 12 hours of 2G talk, 5 hours of 3G talk, 5 (3G) or 9 (Wi-Fi) hours of Internet use, 10 hours of video playback, and up to 30 hours of audio playback, lasting over 300 hours on standby. |
||
* '''3G''': Broadband data speeds, supporting 7.2Mbps HSDPA |
* '''3G''': Broadband data speeds, supporting 7.2Mbps HSDPA |
||
| − | * ''' |
+ | * '''Rear camera''': 3.15 MP with Autofocus and manual focus (''Tap to focus''), supporting VGA video recording at 30 FPS |
| + | * '''Connector:''' 30-pin |
||
More specifications available in [http://www.gsmarena.com/apple_iphone_3g_s-2826.php GSMArena]. |
More specifications available in [http://www.gsmarena.com/apple_iphone_3g_s-2826.php GSMArena]. |
||
| Line 40: | Line 44: | ||
* [[Jailbreak (S5L8920+)]] |
* [[Jailbreak (S5L8920+)]] |
||
* [[X-Gold 608 Unlock]] |
* [[X-Gold 608 Unlock]] |
||
| − | * [[N88AP |
+ | * [[N88AP/Device Tree]] |
==External Links== |
==External Links== |
||
* [http://www.anandtech.com/gadgets/showdoc.aspx?i=3579 AnandTech: The iPhone 3GS Hardware Exposed & Analyzed] |
* [http://www.anandtech.com/gadgets/showdoc.aspx?i=3579 AnandTech: The iPhone 3GS Hardware Exposed & Analyzed] |
||
| + | |||
| + | [[Category:Devices]] |
||
Latest revision as of 15:08, 2 March 2022
This is the iPhone 3GS. It was released on 19 June 2009 with a price tag of $199 for the 16GB model and $299 for the 32GB model, in the U.S., Canada and major European countries. Prices vary depending on the mobile operator. It features the same exterior design as the iPhone 3G, but has new internal features such as video recording, voice control, digital compass, faster CPU, increased RAM, Nike+ support, etc. The name used in firmware is iPhone2,1.
Contents
GPS
The iPhone 3GS uses the Infineon Hammerhead II PMB2525, like the iPhone 3G.
Baseband
The iPhone 3GS uses the X-Gold 608 baseband chip, same as in the iPhone 3G.
Application Processor
It makes use of the S5L8920 application processor.
Known Exploits
Bootrom
- 0x24000 Segment Overflow - An untethered exploit that allows loading an unsigned LLB on devices that have Bootrom 359.3 Units produced after 2009 week 40 have Bootrom 359.3.2 and are not vulnerable to the 0x24000 Segment Overflow.
- alloc8 Exploit - An untethered exploit available for both of the bootroms, both new and old.
- Limera1n Exploit- A tethered exploit that allows executing unsigned code over USB
iBoot
- iBoot Environment Variable Overflow- An exploit that allows executing unsigned code over USB; fixed in iPhone OS 3.1 beta 3.
- Usb control msg(0x21, 2) Exploit- An exploit that allows executing unsigned code over USB; fixed in iPhone OS 3.1.3.
- Limera1n Exploit- The iBoot incarnation of the bootrom exploit; fixed in iPhone OS 3.1.3.
- SHAtter- The iBoot incarnation of the bootrom exploit; fixed in ?
Bluetooth & Wi-Fi Chip
The 3GS uses the Broadcom BCM4325 single-chip Bluetooth/FM/WLAN device.
Compass
The 3GS comes with a digital compass. By rumors this is the Asahi Kasei – AK8973 Chip.
Specifications
- Size: 4.5 inches (115.5 mm) (height) × 2.4 inches (62.1 mm) (width) × 0.48 inches (12.3 mm) (depth)
- Color: Black or White
- Battery: Up to 12 hours of 2G talk, 5 hours of 3G talk, 5 (3G) or 9 (Wi-Fi) hours of Internet use, 10 hours of video playback, and up to 30 hours of audio playback, lasting over 300 hours on standby
- Weight: 135 g (4.8 oz)
- 3G: Broadband data speeds, supporting 7.2Mbps HSDPA
- Rear camera: 3.15 MP with Autofocus and manual focus (Tap to focus), supporting VGA video recording at 30 FPS
- Connector: 30-pin
More specifications available in GSMArena.
