MuscleNerd anuncia semi-tethered jailbreak para iPods touch 2G

O membro do iPhone Dev Team, MuscleNerd, anunciou no iPod touch fans forum uma nova função no jailbreak do iPod touch 2G (aka. redsn0w), que funciona com uma configuração “semi-tethered”. Quando você não está plugado no computador, o seu iPod touch 2G continuará dando o boot normalmente, porém sem qualquer funcionalidade dele jailbroken, ou seja, funcionará com os apps oficiais.

A solução pode ser baixada aqui.

Estamos analisando o funcionamento da solução e deveremos ter novidades em breve. Fiquem ligados!

Continue lendo se quiser ver as instruções oficiais, em inglês, do MuscleNerd.

Preparation
1)  Copy the semi/FirmwareBundles and semi/CustomPackages directories into
your PwnageTool.app/Contents/Resources directory.  (These files
differ slightly from the normal redsn0w lite files.)
2)  Create a custom 2.2.1 ipsw with PwnageTool in Advanced mode.  Don’t
enable custom boot logos.
3a) From your custom 2.2.1 ipsw, extract these (patched) files:
iBSS.n72ap.RELEASE.dfu    (name it iBSS221pwn.dfu)
iBoot.n72ap.RELEASE.img3  (name it iBoot221semi.img3)
3b) REPLACE the iBoot.n72ap.RELEASE.img3 in your custom ipsw with
the official one.  THIS IS AN IMPORTANT PART OF THE SEMI-TETHERED
JAILBREAK!!
4)  From the official 2.1.1 ipsw, extract this (unpatched) file:
iBSS.n72ap.RELEASE.dfu    (name it iBSS211.dfu)

Here are some example commands to do steps 3a, 3b, and 4:
unzip semi.ipsw Firmware/dfu/iBSS.n72ap.RELEASE.dfu
mv Firmware/dfu/iBSS.n72ap.RELEASE.dfu iBSS221pwn.dfu
unzip semi.ipsw Firmware/all_flash/all_flash.n72ap.production/iBoot.n72ap.RELEASE.img3
mv Firmware/all_flash/all_flash.n72ap.production/iBoot.n72ap.RELEASE.img3 iBoot221semi.img3
rm -rf Firmware
unzip iPod2,1_2.2.1_5H11a_Restore.ipsw Firmware/all_flash/all_flash.n72ap.production/iBoot.n72ap.RELEASE.img3
zip -m semi.ipsw Firmware/all_flash/all_flash.n72ap.production/iBoot.n72ap.RELEASE.img3
rm -rf Firmware
unzip iPod2,1_2.1.1_5F138_Restore.ipsw Firmware/dfu/iBSS.n72ap.RELEASE.dfu
mv Firmware/dfu/iBSS.n72ap.RELEASE.dfu iBSS211.dfu
rm -rf Firmware

Installing the jailbroken custom ipsw
5) Put your ipt2g into DFU mode using keypresses.  Don’t have iTunes running!
6) Start rslite.  Send the official iBSS from 2.1.1:    !iBSS211.dfu
7) Start rslite again.  Send the redsn0w-lite patch:    #pwn211ibss.txt Send the patched iBSS from 2.2.1:                    !iBSS221pwn.dfu
9) Use iTunes to do a full restore using your custom 2.2.1 ipsw

Tethered boot
After the install, your ipt2g will not be jailbroken without assistance
from a tethered computer.  The method in this README-semi.txt requires you
to go into DFU mode, but you should be able to find (or work out on
your own) other more convenient ways.
10) Repeat steps 5-8
11) Start rslite.  Send the patched iBoot from 2.2.1:   !iBoot221semi.img3
12) Start rslite.  Use the patched kernel for this boot:
setenv boot-path /System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8720p
fsboot

(After this point, ignore any ERRORs from rslite and ^C out of it)
NOTE: do not use “saveenv” after step 12!  The “p” version of the kernel
is patched and won’t be accepted in an untethered boot.  It was put there next to
the normal “x” kernel via your custom ipsw.