K66AP

This is the second generation Apple TV. It sports a smaller, black design, and now runs iOS.

Application Processor

It uses the S5L8930 applications processor.

Wireless

The Apple TV uses the dual-band BCM4329 for Wi-Fi communications; it supports 802.11 a/b/g/n on both frequencies (2.4 GHz and 5 GHz).

Other Hardware

• Samsung K9LCG08U1M 8GB NAND Flash chip
• 256 MB RAM
• Apple 343S0479 1005 005BB
• M430 F2350 TI E03K C0GP G4
• SMSC 8710A-EZK B1023-A2 (10/100 Ethernet Transceiver)
• TXC MUGT 27.000
• TXCPCUM3 50.000
• Apple 338S0891

Packaged iOS Software

Lowtide is the application running on the AppleTV. It is essentially an updated "FrontRow" system that handles all user interaction, video playback, streaming, etc. It has been shown to run on other iOS hardware such as the iPod Touch.

Dock Connector

The AppleTV 2 has a predetermined spot on the logic board for an Apple Dock Connector. This is most probably here for Apple's in-house developer units.

The default Apple TV hardware does not allow you to use the HDMI port and the micro-USB port at the same time. Adding an iPod dock to the side of the enclosure will bypass this hardware restriction, allowing both hacking and viewing.

An image of the dock connector spot can be seen in a teardown by iFixit:

• Dock Connector Location

Here is a link to some female dock connector parts:

• Dock Female

Soldering to the dock terminals on pins 2 and 3 failed to get analog audio out. It is not know if this is because of a hardware or software limitation. Sound was able to be produced out of the HDMI port but no sound came out of the dock pins corresponding to audio out on other iOS devices.

Specifications

Size: 23 mm (0.9 inches) (h), 98 mm (3.9 inches) (w), 98 mm (3.9 inches) (d)
Weight: 0.6 pounds
I/O: HDMI, Optical audio, 10/100 Mbps Ethernet, IR receiver, Micro-USB port
Storage Capacity: 8 Gigabytes (Not directly usable)

How to DFU Mode

Step 1: Plugin your Apple TV to computer with microUSB (Power cable connected).

Step 2: Hold menu + down button together for 6 secs to reboot.

Step 3: Once your Apple TV reboots immediately hold menu + play together until a message appears in iTunes telling you an Apple TV in recovery mode has been detected.

Useful Links

• Complete Proper Headers for OS 4.1
• Sample frappliance template
• Dustin Howett's beigelist
• iFixit Teardown
• How to save SHSH blob
• dyldcache listing

Jailbreak Status

PwnageTool 4.1 uses the Limera1n exploit to jailbreak and auto-install SSH and afc2. It also installs parts of Cydia (like apt-get), but a Cydia GUI remains to be developed and deployed. The assumption is that your home network is secure, but it is recommended that you change your root password anyways, which is "alpine" by default. About all you can do now is command line operations via ssh, until developers enable methods to use remotes.

Greenp0ison leverages limera1n exploit and RC5 is being prepared to have AppleTV support. Preview screenshots have been posted by the Chronic Dev Team showing altered menus and a software injector. Preview

Older Developments:

• SHAtter Exploit: pod2g's SHAtter exploit has been showcased by MuscleNerd and posixninja as capable of jailbreaking the AppleTV, but this exploit will be with held for a while due to the release of limera1n's exploit, it is mentioned here mainly for posterity.

• Limera1n: geohot has released the limera1n exploit which is capable of jailbreaking the AppleTV, but as of right now it doesn't install afc2 or ssh so it is of little practical use for any average AppleTV user, or even most AppleTV seasoned hackers. It never mounts or installs anything, ostensibly not making any changes at all to the AppleTV filesystem.
  

We will do our best to keep this page neutral because of the controversy surrounding limera1n and the various development teams, please if you add to this page, do the same.

3rd Party Apple TV iOS Software

• Fire Core, a software development group who have released software for the Apple TV (1st Gen), is actively working on a product aTV Flash black and a corresponding SDK.

Source: wiki.awkwardtv.org