Sep 19, 2009

TinyTSS -- All your iphone restores are belong to you

TinyTSS is a small java app that acts as your very own signature service. When iTunes verifies your restore for your 3gs phone, it 'phones home' to see if you are allowed to restore to the version you are requesting. With TinyTSS + the shsh blob file(s) you obtained with Umbrella, you will be able to restore to the version of those shsh files forever! People may wonder why I did this when Saurik is already doing the same thing. I'll explain my philosophy. I admire Saurik for what he has done and I thank him for pointing me in this direction. I simply think that I would rather have my shsh blobs on my personal machine AND on his server for safe keeping. This way if something happens to cydia, I can still restore my phone to the version I want to restore to. Plus I have the peace of mind knowing that my files are safely in my possession. I don't have to worry that some catastrophic event could render my downgrades impossible. So use cydia's shsh storage feature! But use Umbrella and TinyTSS if you are a power user that wants control over your own ecid shsh files and want to be able to use your own machine for restores. I've fixed a bug that I introduced accidentally. I had forgotten to add a library or two to the Manifest so it wasn't able to run from the jar. UPDATE: I've revamped the readme file. It should be a bit more informative. Also removed an error on JRE 1.5 on Leopard UPDATE: You can follow me on twitter: notcom Download Umbrella and TinyTSS together: If you need an md5 checker I like: Nirsoft's MD5 Checker I've gotten quite a few questions about donations. I'll accept donations but I want it clear that I did this for fun. If you really want to donate you can contact me at xsemaphorex (the symbol for the word "at") gmail (the dot symbol) com.
Labels: , , , , , ,

140 comments:

  1. Hi, can you please comment if it's done right:
    1 Got ECID,
    2nd Ran umbrella (both 32 and 64 version) and got only 1 file, which is 01.shsh (64kb)
    I'm on 3GS 3.0 JB, Itunes 9.0

    ReplyDelete

  2. That is correct. Umbrella now captures your shsh files intelligently instead of sending 3 separate requests, it sends a single request to obtain all 20 of your shsh blobs and stores them in *ONE* file named 00.shsh.

    Incidentally if you still have your 3 files 01.shsh, 02.shsh, 03.shsh, TinyTSS will conveniently combine them for you and create 00.shsh

    ReplyDelete

  3. Does it matter if my *ONE* file is not "00.shsh" but "01.shsh"? Sorry for being annoying :)

    ReplyDelete

  4. Something likely went wrong then. Redownload the latest from the link above.

    ReplyDelete

  5. OK. Got "00.shsh" this time with the new umbrella, size is exactly the same as the previous one "01.shsh" 65048 bytes. Thank You

    ReplyDelete

  6. You must have gotten the version I first uploaded. I realized that I kept the file name the same: 01.shsh but quickly decided that was misleading. I would rather have 00.shsh represent the master shsh blob and 01-03 represent the first version.

    if you run TinyTSS with 00.shsh in the same directory (or pass the path of 00.shsh to tinytss.exe) you will be able to perform a 3.1 restore even after apple stops signing 3.1 shsh blobs. :)

    ReplyDelete

  7. Does this only apply to 3GS or 3G as well. Running a 3G jb only.

    Thanks

    ReplyDelete

  8. please how to execute TinyTSS thanks please

    ReplyDelete

  9. Hello, I'm trying to understand this.

    I need to restore my iphone 3gs to 3.01. But my info is not on the saurik server, can I still use umbrella to get a shsh file and then use tinytss to restore with itunes?

    ReplyDelete

  10. please i run tinytss 00.shsh nothing please help me thanks

    ReplyDelete

  11. oh i thought this could work on 3.01. but i guess it doesn't.

    ReplyDelete

  12. i run tinytss 00.shsh don't work I HAVE WINDOWS 7please i nee help

    ReplyDelete

  13. don' compatible with windows 7,thanks

    ReplyDelete

  14. iphonekiller_ci: You need to run the exe as administrator. Since it is a command line utility this means you need to start an 'Elevated shell'. Google search the term and follow those directions.

    ReplyDelete

  16. i don 't unterdand how to use elevated shell please explain me thanks

    ReplyDelete

  17. You wrote on the dev-team blog that this is only for already jailbroken iphones. I executed the umbrella.jar on a non-jailbroken 3.1 3GS and it created the 00.shsh file. I suppose this could still be of use to revert from future updates, even if my iphone isn't jailbroken right now. Is that correct?

    Thanks.

    ReplyDelete

  18. I don't recall saying this is for jb phones.

    I've removed the 'elevated privilege requirement' for vista/windows 7 users.

    Redownload the latest!

    ReplyDelete

  19. a user named "semaphore" posted the following on the dev-team blog:

    If you have a JB'ed phone you now have two choices for protecting your 3.1 ecid shsh blobs: Saurik is saving on cydia and thefirmwareumbrella.

    things are already confusing for us mortals ;)

    ReplyDelete

  20. You are absolutely correct. I didn't finish my thought. I'm sorry. I meant to finish that thought.

    I meant to say that unJB phones had no option for saving ecid shsh files. But apparently I was too quick on the 'post' button =) thanks for that catch.

    ReplyDelete

  21. Well.. they had no option... until now.

    ReplyDelete

  22. yep! feels good to have the signed file on my hdd - you never know what Apple pulls off next.. thanks for this nice tool!

    ReplyDelete

  23. Please add the functionality to "download" 3.0 blob from cydia's server... i feel safer if i have a local backup :D

    ReplyDelete

  24. BTW, it is nice to be able to collect signatures for firmware that we have not installed.

    I am in 3.0 but i now have the blob of 3.1
    If the jailbreak for 3.1 is released AFTER apple releases 3.2 i will still be able to "upgrade" to 3.1 with the blob.

    ReplyDelete

  25. ilias. done. umbrella can now collect the files from saurik.

    Just change your hosts file to point to sauriks machine for gs.apple.com and run umbrella again this time with -v 3.0 or -v 3.0.1

    good luck!

    ReplyDelete

  26. please where indicates default in umbrella command

    ReplyDelete

  27. In the readme... and when you run umbrella with no arguments... do you see the values that have *8920* and *3.1*?

    Those are the defaults. Read the readme.

    ReplyDelete

  28. Question about the 00.shsh file. I am using Notepad++ to make a better structure/sense out of the shsh file. If you change the file names within the file (shsh file) you think this may work to restore say a 3.0 or 3.0.1 file as long as all the file names are the same in the shsh file or by doing some work to the firmware file renaming the individual files rezip and change the file name?

    ReplyDelete

  29. Hopefully that makes some sense. ask me anything if you want me to clarify

    ReplyDelete

  30. thanks please i don't have shsh file pointing in saurik server
    sorry for my bad english

    ReplyDelete

  31. This comment has been removed by the author.

    ReplyDelete

  32. Tom - your idea makes sense to me. However, before I'm willing to experiment, I'm waiting for the Dev Team to release Pwnage Tool 3.1 for the iPhone 3GS.

    Once I know I can create a custom IPSW to preserve my baseband, I'll be much more wiling to play with your suggestion. Trying it now and having it fail would likely lead us to having to restore 3.1 from Apple, hence updating the baseband.

    Even though I don't need unlock right now, I want to keep my options open.

    ReplyDelete

  33. sir i run umbrella on vista but its not opening, the command window opens and closes immediately.

    Also please tell me the correct procedure to run this, do i have to put my iphone in recovery mode or do i have to run iTunes?

    ReplyDelete

  34. did you read the distributed readme file? If you did, read it again ;)

    ReplyDelete

  35. yes i read that, i have java installed. could you please tell me what exactly i have to do?

    ReplyDelete

  36. 1. find your ECID. you need to go in recovery mode and use usbview.exe. google for it if you don't know how.

    2. open a command shell (hit winkey+r and type "cmd") then change dir to where you extracted the package (example: "cd c:\umbrella").

    3. type "umbrella <ecid>". replace <ecid> with your 16 digit ECID. if you have a 3g or touch you might have to find the chipid and add it to the command.

    Now it should create the 00.shsh in the same directory.

    ReplyDelete

  37. majo follow the instructions
    open comman cmd
    cd /desktop/fw-umbrella-semaphore press enter
    umbrella -v(your version) -e(ecid) -c(chipid) press enter

    ReplyDelete

  38. thank you so much, let me try

    ReplyDelete

  39. majo umbrella command-place a folder in your desktop exemple
    open cmd comand dos
    cd /desktop/fw-umbrella-semaphore press enter
    umbrella -v 3.01 -e 0000000000000000 -c 8920 press enter

    ReplyDelete

  40. once it start to collect all blobs i'am getting an error its asking me to check the values

    ReplyDelete

  41. IF YOUR FIRWARE VERSION IS 3.0 OR 3.0.1 POINT SAURIK SERVER?IF YOUR FIRMWARE VERSION IS 3.1 POINT APPLE SERVEUR
    SORRY FOR MY BAD ENGLISH

    ReplyDelete

  42. Thanks for Umbrella. Locally storing my 3.0, 3.0.1, and 3.1 SHSH hashes. Kudos for you.

    PS. Mac binaries don't work in your new version.

    ReplyDelete

  43. its on 3.0.1 pointing to saurik server then also not working

    ReplyDelete

  44. jaikob could you tell me the procedure for doing it?

    ReplyDelete

  45. You need windows atm. cd to directory in CMD, then umbrella -e ECIDHERE -v 3.0

    ReplyDelete

  46. You need to point to sauriks server tho.

    ReplyDelete

  47. You need windows atm. cd to directory in CMD, then umbrella -e ECIDHERE -v 3.0 - i didn't get this could u please explain?

    ReplyDelete

  48. This app will work no matter what fw your phone is on. All it is doing is obtaining the ecid shsh blobs for a particular iphone os version.

    ReplyDelete

  49. And I've fixed the Mac issue that I accidentally introduced. The latest download has the fix in place:

    java -jar umbrella.jar -e (ecid) -v (version) -c (chip)

    should work just fine.

    Sorry for the mess up!

    ReplyDelete

  50. Hi, thqnks for this.
    I dump all firmware files fro, saurik as he said to have also dumped the files for 3.1 today.
    I have a question :
    the FW 3.0 and 3.1 are 64K and the FW 3.0.1 is only 4K.
    Is it normal ???
    Thanks again

    ReplyDelete

  51. The Firmware Umbrella please my 3gs with 3.0.1 FW stuck in loopin apple logo
    what can i do?help me please thanks

    ReplyDelete

  52. my shsh size 273K pointing saurik serveur
    Is it normal ???
    ecid 3.0.1 8920

    ReplyDelete

  53. 3gs with 3.0.1 FW stuck in loopin apple logo
    my shsh size 273K pointing saurik serveur
    Is it normal ???
    command umbrella ecid 3.0.1 8920
    please reply me thanks

    ReplyDelete

  54. That is not normal.

    try:

    umbrella -e (ecid) -v 3.0.1

    That should be all you need.

    ReplyDelete

  55. The umbrella runs but is not saving any file that I can see.

    ReplyDelete

  56. me too..... it said "Collecting all blobs and then came out with something that said Connection time out ....

    When doing this, do it needs to point to Apple server ? I am 3.1 unJB. I put a # in front of Saurik IP address which I added earlier.

    ReplyDelete

  57. This comment has been removed by a blog administrator.

    ReplyDelete

  58. iphonekiller_ci: If you don't have your 3.0.1 files saved on saurik's server then you will never be able to get your 3.0.1 blobs. Sorry.

    Vincent: You probably have a network issue. If you were pointing at Saurik's server - he could be down. Try commenting the hosts entry so you are pointing at apple.

    jackal - run the umbrella exectuable from the command line. if there is an error it will spit out an error message.

    ReplyDelete

  59. please how to save my files on saurik server?
    thanks

    ReplyDelete

  60. It was a network error, I just commented the hosts file entry and it is working. Thank you!

    ReplyDelete

  61. iphonekiller_ci:

    To save files on sauriks machine for 3.0 or 3.0.1 you must have selected the 'make my life easier' option during a short window-of-opportunity. If you didn't, there is nothing that can be done. I'm sorry. If you did, you can add an entry in your hosts file and run the umbrella command like normal with the -v 3.0 or -v 3.0.1 switch.

    Download the latest. It is far more informative.

    ReplyDelete

  62. thanks,my 3GS 3.0.1 FW stuck in loopin apple logo so i wait

    ReplyDelete

  63. any one know if had 3.0.1 jb created ECID SHSH file in cydia but in 3.1,(no idea why going 3.1) it which mean no longer to restore back to 3.0.1 any more,rite?
    and even use umbrella no help too,tite?

    ReplyDelete

  64. I already commented the hosts file by adding a # infront of Saurik's IP (or I should totally delete that line) but it still gave me the connect timeout error. My computer is online and I receive response back from Apple Server when I ping it. It shows 17.112.176.11 (I thinks that Apple's IP). I am doing it in my company's intranet, may be that has an issue. I will try again tonight in my home computer.

    ReplyDelete

  65. This comment has been removed by a blog administrator.

    ReplyDelete

  66. Im on Snow Leopard, running the command as per readme, but when i try and get the 00.shsh for 3.0 or 3.0.1 using -v
    (java -jar umbrella.jar -e 00000111AA11A1A1 -v3.0) it spits out the XML but doesnt create the 00.shsh file.

    If i dont use -v (so defaults 3.1) it works fine, just doesnt make a file for 3.0 or 3.0.1.

    Any ideas!??

    Oh, its using the normal apple server btw

    ReplyDelete

  67. If cydia does not have your 3.0 or 3.0.1 shsh ecid hashes, there is nothing you can do to get them. Period. End of discussion.

    ReplyDelete

  68. ahha, i didnt understand that bit, but i get it now, the cydia option would have signed for what ever firmware you were running when you chose the cydia option?? (which i DID do). -- cydia says "this device has a 3.0 shsh ecid on file"....

    I just wanted a compy on my computer.

    Im assuming then, that i change the host file to point to sauriks, as per readme then re-run with the -v 3.0.1 etc?

    I apologize for annoying you with what appeared to be a repeated question, but it was just my missunderstanding of the process. I did know that if you didnt have an ecid already in cydia, it was supposed to be impossible to get it for 3.0, like i said i basically having a dumb moment lol.

    So, ill re-run this but point to saurik's & hopefully ill get a shsh file? am i correct?

    Many thanks

    J

    ReplyDelete

  69. Thank you so much for this.
    Worked perfectly.
    Grabbed my 3.0 and 3.1 from our good friend Saurik
    Checked the 3.1 to the one I got from apple and they are identical.
    Great Job!!!

    ReplyDelete

  70. Is there a way to use the iBECC and iBSS files for my 3G[S] v3.0 that I captured from a DFU restore back in June to create an shsh blob? AFAIK, this is why we were told to capture them, and why I bothered to do so. (I would have synced with Saurik as well, if I'd understood the difference.)

    *My 3G[S] brick requires a restore.* I have my iBECC and iBSS files for 3.0. If I could make 00.shsh out of them, then I could use your brilliant tinytss to restore my phone without updating the baseband.

    This is a special request to you, as I can't write the code myself (yet.)

    ---- Please make a Mac utility to create 00.shsh out of iBECC and iBSS files.

    ps {
    I feel for you, having all these commenters who think they can restore to 3.0 when they failed to be prepared ahead of time. I know what my problem is; I'm just asking around, hoping someone can put together this tool.[/i]
    }

    ReplyDelete

  71. James - You were not annoying at all. What you do need to do to pull those 3.0/3.0.1 shsh hashes from cydia is to point to cydia instead of gs.apple.com and then run umbrella. If 3.0 only produces a file of ~4k size it means you don't have a 3.0 blob on file with saurik. If 3.0.1 only produces a file of ~4k size -- same deal -- you don't have a 3.0.1 blob on file with saurik.

    The size you are looking for is around 65k-ish.


    Scott: The reason for obtaining those files unfortunately had nothing to do with restoring. And equally unfortunately one cannot recreate ones own ecid shsh blobs from those files alone -- there just isn't enough information. (The iBSS and iBEC files of which you speak are created _using_ the shsh blobs) The problem is that there are 18 other blobs that you need which you would not have in any form if all you saved was your iBEC and iBSS.

    Even if you had an entire backup of all of the resulting files from a restore, restoration of the blobs would be scary painful....

    Sorry.

    ReplyDelete

  72. Oh.

    Well, that's disappointing, but thank you for explaining it.

    Thanks again for giving us umbrella and tinytss. Since the JB for 3.1 - 3G[S] is on it's way, I should be fine. Now I have my 3.1 blobs saved, so I'll be set in the future.

    I put my SIM in an old phone while I wait for the Dev-Team, so I'm in no big rush anyway.

    ReplyDelete

  73. @The Firmware Umbrella - Thanks, i pointed the sever to Sauriks and was able to get my 3.0 00.shsh file (66k), however 3.0.1 wasnt stored :( (4k)... im curious though why cydia only stored my 3.0 shsh when my firmware is 3.0.1 - ne thoughts? (just wondered if you might know why saurik may have only got my 3.0 and not 3.0.1) -- albeit if i remember rightly the only difference in 3.0.1 was basically the sms fix!

    Thanks for this anyway, i now have my 3.1 & 3.0 shsh backed up :)

    Cheers

    J

    ReplyDelete

  74. James:

    Good question. The answer is simple. When you clicked 'make my life easier' you entered a queue because saurik has thousands and thousands of users... he had to throttle obtaining shsh blobs. He started with 3.0 and once he captured those, he moved to 3.0.1.

    Unfortunately, apple turned off 3.0/3.0.1 signing while he was in the process of obtaining 3.0.1's.

    This is what is meant by the 'few lucky ones'.

    (that was speculation - he may have just requested the shsh blobs for the version you currently had installed. idk. but he did one of these two things :) )

    ReplyDelete

  75. Ahhhhhhhh yes, i remember reading something like that now! i think he must've just done all 3.0's then was going to do 3.0.1's. Of course to me it wouldve made more sense to get the shsh of the firmware running (3.0.1 in my case) but i dont know his process so might not of been that easy. thanks for the info refresher :) few, well, at least i can get to 3.0 if i ever need! until they release pwnage for 3GS ill sit comfortably on 3.0.1 :))

    ReplyDelete

  76. hello there!!I just got my 3Gs and i'm felling kinda lost!too much information for me the last few days and i m having a real bad headache..so please please pleeeeeaaaaase help me figure some things out!!
    ok say my 3gs is on 3.0 or 3.0.1 (not 3.1) could i then get my 3.1 (wich is supposed to be vulnerable to greenp0ison exp) shsh files using the umbrella utility WITHOUT having to restore(and thus be forced to upgrade) my phone?if so i could then jb my phone and use the "cydia on file thing" just to be sure..right??
    if not plz tell me what to do to get the files and be sure ia can jb for ever!!many thnx from a confused guy!!

    ReplyDelete

  77. stavrosjonjon: Correct - you can grab your 3.1 ecid shsh files without having to update your phone to 3.1.

    Sorry about the headache. I'm new to iphones as well. I've had mine less than a month.

    ReplyDelete

  78. Thanks soooo much!well u seem to have gotten over that headache juuuuust fine!! :)
    so if the only thing i want is to grab 3.1shsh files (that will help downgrade in the future) do i need to run both umbrella and tinytss or just umbrella?wich is the difference?keep in mind i can't get my files from sauriks server because they simply aren't there..so the only thing i want is to get the signed 3.1files into my mac.wich steps from the readme file should i follow?+where do i find my ecid in hex format???again (and i cant say this enough) many many thanks!!!

    ReplyDelete

  79. @stavrosjonjon...
    the 3.1 shsh file is only required when say apple release 3.1.1 or 3.2. If your currently on 3.0.1 but missed the oppotunity within cydia then you can only make your 3.1 shsh, and for that you just need umbrella. TinyTSS is only required if say 3.2 was out, and you wanted to use 3.1 (assuming apple is only signing 3.2 files)...TinyTSS would act as a web server, hosting your shsh file, so that when i tunes makes the call "home" it will actually goto TinyTSS and return the shsh and effectivly sign the file.

    As for the ECID, on Mac OSX - Plug USB cable into computer, turn off phone. Now, holding The HOME button, plug the phone into the usb cable. When the Restore screen sppears (This is when it shows a cable and itunes on the screen), goto About this mac (click the apple top left, about this mac, then goto More Info...when System Profiler opens, under Hardware, goto USB, and there will be a n entry similar to Apple Recovery Mode. Click on this, and in the 2nd half of the split window, you will see text such as CPID xxx blah xxx ECID: 0000011111 ... this is your ecid number in hex (the numbers after ECID of course)

    ReplyDelete

  80. ...oops, forgot to say, to get out of recovery mode, just press and hold POWER i think.... or press and hold both POWER + HOME untill you get the grey apple :)

    ReplyDelete

  81. Right!Thanks a million!You've been really helpful!However what i dont get is this:
    are the files which are produced by umbrella signed or not??Or Does tinyTss sign them and then return them to your computer?I need the signed ones right?If apple releases new fw and stops signing 3.1 will tinytss also stop working for the 3.1shsh files?Or is it that once u use umbrella to get your 3.1 shsh then u can always sign these files using tinytss?Are u saying that tinytss should be used only when u need to downgrade or restore to a fw apple has stopped signing??
    in that case if i only have my 3.1shsh and not the previous ones(3.0) i can make NO use of tinytss untill 3.1.x is out.Right???
    sorry for being annoying but i m relly confused..lol
    THANKS AGAIN

    ReplyDelete

  82. @stavrosjonjon

    You are correct! TinyTSS Has no use to you yet as the only shsh file you have is for 3.1 meaning you can never use 3.0 or 3.0.1 to restore

    From my understanding...,

    when the request is sent to apple, it returns this shsh which signs the firmware. (the issue is the firmware itself isnt signed...the shsh file basically approves and signs it when restoring)

    So with me for example, i have a 3.0shsh which means i would use TinyTSS - tell it to use the 3.0 shsh file, and then attempt to restore to 3.0... iTunes will connect to TinyTSS (from editing the hosts file) and retrieve the shsh file and will believe its been approved/signed and then it will allow the restore.

    So, if you used umbrella, and only have a 3.1shsh TinyTSS & The 00.shsh file is useless untill apple release say version 3.1.x or 3.2 etc, they would then stop signing 3.1 files and this is were TinyTSS would come in, and allow you, using the shsh file to sign the 3.1 firmware and allow you to use it during the restore process.

    Hopefully that helps :)

    ReplyDelete

  83. OMG suddenly it's like daylight!!!!THANK U SOOOOO MUCH!!!!!
    i think i got it now!!ok let me summarize: i checked my java version and it's good.I open up terminal cd to the directory where umbrella is saved (it wasn't unziped there though..does this matter?i put all the files included in the zip in a separate folder) and then type :
    java -jar umbrella.jar -e "My ECID in hex" and hit enter!and that's it!!
    no need to mess with the hosts file if i don't want to use saurik's server right?i will only edit it when the time comes to use tinytss!!It doesn't matter which fw my 3gs has umbrella will save the 3.1 shsh by default right??Finally i think im getting it THANKS TO YOU!!woot!!
    oh one more thing did u try to restore?is it confirmed? did it work??after using tinytss u still have to follow saurik's instructions and perform 2 restores and then jb??

    ReplyDelete

  84. oh and while running ubrella iphone doesn;t have to be connectd to computer right?

    ReplyDelete

  85. @stavrosjonjon

    java -jar umbrella.jar -e "My ECID in hex" is correct, and yes no need to mess with the hosts file atm. And yes, the current firmware on your phone is irrelavant, you simply backing up your "signature" file now for future reference. For 3GS, Apple is ONLY signing 3.1 firmware - hence this mess in the 1st place - and yes umbrella will get shsh for 3.1 by default as basically if you dont have anything on cydia, its not too late, so 3.1 is the ONLY option.

    As for the restore, im afraid i cant confirm, my 3GS is on 3.0.1, and untill stuff like winterboard work without sending mobilesubstrate into safe mode frenzy im not updating.

    From my understanding tho - if you have a 3GS -- there isnt a 3.1 JB yet. and if your saying you are on 3.0 already then you simply run redsn0w. You wont be able to downgrade to anything (as you only have a 3.1shsh) so if you screw up, you on 3.1 hell. If your currently on 3.0 or 3.0.1 i would run redsn0w or wait for dev team to finish pwnage tool for 3GS

    .... and no, doesnt have to be connected. Umbrella has nothing to do with you actual phone if that makes sense. Only "link" to you phone is the ECID number you use.

    ReplyDelete

  86. i m on 3.0.1 out of the box!i just bought it yesterday!! i understand that from now on i will ever be able to restore to 3.0.1 if something happens..however there have been many reports about 3.1 being vulnerable and about an upcoming jb tool called greenpoison so i guess hope is not compeletely gone!!thats the whole point of getting the 3.1 shsh files!!i' m a bit scared to do redsnow now because if something goes wrong.....mostly i'm afraid i wont be able to put it in dfu at my first try ...if it was a "one button thing" i do it more easily...
    Man u 've been of great help to me!!!!

    ReplyDelete

  87. @stavrosjonjon

    GreenPois0n is for the iPod Touch 3G - NOT the iPhone 3G[S]...

    And lets say you do mess something up NOW, the 3.1shsh is still useless as apple IS signing 3.1 firmware - theres just no JailBreak yet (for 3GS)

    And RedSn0w from experience, i had a few issues with the 3G - and i did end up using pwnage to make a custom firmware, my 3GS however, worked perfect first time. I bought mine with 3.0.1 on o2 pay as you go, and atm i only use it on o2 anyway... ran redsn0w perfectly.

    Your shsh file wont have any use what so ever until apple stop signing the 3.1 firmware when the next firmware is out.

    The shsh has no effect on the JailBreak - its simply for allowing a restore.

    The Dev Team are in the process of the 3GS Pwnage tool though

    ReplyDelete

  88. well i'll have to disagree..greenpoison IS for BOTH ipt3g and 3gs!! if u see the twitter account @greenpis0n u ll see what i mean!Actually greenpois0n was initially found on the 3gs before even ipt3g was released!
    Anyway i have one more q..if the way tinytss works is the one we've been talking about wont we still depend on some kind of a server??or is tinytss something like a "virtual" server a dummy if u will that only uses our own computer??

    ReplyDelete

  89. hmm i stand semi-corrected. GreenPois0n is basically in the exact same poisition as the Dev Team with pwnage....in otherwords 3GS = nono

    TinyTSS...

    No...TinyTSS IS a virtual server basically. When you do a restore you edit the hosts file to send requests looking for gs.apple.com to actually goto 127.0.0.1 -- which is "localhost" -- in other words 127.0.0.1 = your computer. TinyTSS acts as the "apple server" and issues the shsh to say yes sign it :)

    ReplyDelete

  90. u mean nono for the time being...huh??it is true that at THIS moment there is no jb solution for the 3gs+3.1 but there will be pwnage tool which will let u update to custom 3.1 on an already jb 3gs and thre is also gonna be greenpois0n!otherwise it wouldn't really make any sense to get the 3.1 shsh...at least thats what i have understood after following chronicdev team members on twitter..
    hhmmm great!everything seems to clear for me now...!!
    thanks alot!!

    ReplyDelete

  91. yes - its a no no for the time being. Pwnage is for 3G only - 3GS is not far away though.

    But you must understand, that the shsh files gained from ECID are NOTHING TO DO WITH JAILBREAKS - they are simply firmwares signatures.

    Lets say i had an UNjailbroken 3GS and i wanted to use UNjailbroken 3.0 -- i would use TinyTSS

    but the point behind the shsh stuff is that you can sign the firmware files thusly apple cant "block" or Force you onto the newest version.

    TinyTSS & ECID's & shsh files are a whole other side of the equation. Lets say tomorrow 3.2 comes out and 3.1 is not jailbroken.... apple stop signing 3.1, so even with a jailbroken custom firmware you CANT restore it anymore because its 3.1... TinyTSS gets around that by faking the sign process. if you didnt have your 3.1 shsh you wouldnt be able to put 3.1 back on in order to even run greenpois0n

    Whether your jailbroken or not bares no resemblance.

    The point of the shsh files is simpy to allow a restore to a previous version that Apple have stopped signing.

    Hmmm not sure if that made things any clearer lol :)

    ReplyDelete

  92. hey!!I'm back to report success!!I have now stored my 3.1shsh files using umbrella in a file called 00.shsh the size of which is 63.5kB!!Does this sound correct??Hope so..Now i know i will be able to use these files in the near future to possibly downgrade to 3.1 even if apple stops signing them.Given that 3.1 is vulnerable to a new exploit i can always downgrade to this jb-able fw version!!
    Many Many Many thanks for helping clear somethings up!!

    ReplyDelete

  93. yes that sounds correct. glad to help! roll on the 3GS 3.1 JailBreak :)

    ReplyDelete

  94. Ok so i got umbrella to pull my shsh blobs from sauriks server. I know that i have a 3.0 shsh on file with cydia. My question is when i run tiny tss it says 3.1 shsh is detected, how do i choose the 3.0 shsh. When i requested the file from his server did it retrieve 3.0,3.0.1 and 3.1 all at once. I noticed that the readme says that you have a couple of options when running the command umbrella -e 0000000ecid which are -v for firmware version and -c for chipid and the 3.1 is default. How do you run this command. Thanks for your help

    ReplyDelete

  95. To respond to my questions above i have done further investigating and was able to pull my 3.0 and 3.1 SHSH from sauriks server. I havnt needed to restore yet because im on 3.0, but it is very comforting to know that i have my signed files on my computer and backed up on a cd rom. I have opened tinytss and it loads both of them fine. When saurik started this signature server i had wanted to have those files for myself. Thanks to the dev's hard work putting these programs together we can now feel at ease with this whole Apple/ecid shsh issue. Thanks a Millon

    ReplyDelete

  96. This I like!
    But pretty please with sugar on top.. dump the java.. Don't want it on my machine messing with it and sloooowing it down:(..

    ReplyDelete

  97. any know why cydia does not pull 3.0 ecid, only 3.1 ? My 3gs i frozen and now in boot loop nothing helps, cydia send 3.1 ecid normaly and write this device has an 3.1 ecid on file... Now cant do restore to 3.0 now ecid no exist.
    I had iphone for 4 days, now is bricked in boot loop mode.
    What to do ?

    ReplyDelete

  98. @MP - the moment apple released 3.1, they stopped signing 3.0. If you only got your phone 4 days ago, then you would defo of missed the slot for getting a 3.0 shsh. Sorry to say but your buggered

    ReplyDelete

  99. thanks for info.
    that is realy bad of apple, shame on you apple... :)

    ReplyDelete

  100. This comment has been removed by the author.

    ReplyDelete

  101. the shsh files wont who up on my mac but do on my pc whats the deal sorry for being annoying

    ReplyDelete

  102. @xander.... come again!??? sorry, i dont understand your question

    ReplyDelete

  103. 1st off, thanks so much for creating this incredibly useful utility. Just a quick question though - I ran Umbrella twice, the first time with my hosts pointing to Saurik's server (where I have a 3.0 ECID SHSH on file) and it created the shsh blob file. The second time I ran umbrella, I let it connect to Apple's server & it created another shsh file - what's the difference between these two files? Thanks

    ReplyDelete

  104. @Dan

    the one from Saurik as you said is 3.0 shsh

    If you re-ran using apple servers then if you used the -v 3.0 switch, you'll probs have a useless 4kb file... if you let it run default you'll have a correct 66kb 3.1shsh

    3.0shsh lets you donwgrade to 3.0 ... the 3.1shsh will let you downgrade to 3.1 AFTER 3.1.x / 3.2 is released (as apple would then stop signing 3.1)

    ReplyDelete

  105. Thanks for the clarification. The second time I ran Umbrella with Apple's server I did use the defaults and have a 64kb file size - same as when I ran it specifying Saurik's servers via the hosts file. One more quick question, when running Umbrella via Terminal on OSX it seems to echo what looks like a .plist before creating the shsh file - is this normal behavior?

    ReplyDelete

  107. Well I did everything in the readme file and I got my 00.shsh file. 64kb size. I wanna make sure this is right?

    I opened hosts, added 74.208.105.171 gs.apple.com, then saved.
    I ran command line and entered my ECID, then I checked and my 00.shsh file was saved to my directory. I opened the 00.shsh file with notepad and STATUS=0 shows on the first line.
    I ran TinyTSS and noticed it catching blobs....
    After wards it detected 3.1 shsh blobs and now says starting port 80.

    So this is were I stopped. Should I do anything else?

    Now since it says detected 3.1 shss blobs, can I restore to 3.0FW iPhone 3GS? I would like to restore to fresh 3.0FW again if possible...

    My iPhone 3GS is currently 3.0FW Redsn0w Jailbreak (Windows)

    THANKS!

    ReplyDelete

  108. @Lilskaterpunk

    iPhone Dev Team has now released Pwnage tool for 3GS - why dont you just use that since 3.1 is now JB? :)

    ReplyDelete

  109. @James Tanner

    Yo!
    I don't use Mac, im PC (Windows)
    I could use a custom FW which is 3.1FW and made with Pwnage tool. Would u recommend that? My baseband will NOT be updated and the only changes would be FW versions, right?

    ReplyDelete

  110. This comment has been removed by the author.

    ReplyDelete

  111. @Lilskaterpunk

    Ahhh, erm as long as the fw you get is 100% pwned and 3GS then you may as well. And assuming the person whom made the custom £GS 3.1 pwned firmware did it properly then no, the baseband wont be updated.

    I must ask tho, why the importance to upgrade or restore?

    bare in mind is you have ONLY a 3.1shsh file than if something goes wrong with the custom build, you cant downgrade to 3.0 (i base that on you saying you have the 3.1shsh file... do you have the 3.0 file too??). Im on 3GS, 3.0.1 RedSn0wed, and to be perfectly honest i see no reason to update yet. Winterboard is tempramental atm - works on some, others have had issues ... ive got it working on a mates, but another 3GS i put it on caused constant safe mode untill i removed it. Also, 5 icon dock etc isnt ported to 3.1 yet either. Each to their own i know, but im staying put untill i see a NEED to go up. Hey, if your feeling brave and wanna try pwnage your self, you could always tru install hackintosh osx and dual boot vista! i used to do it until i bought my macbook pro :) ... i recommend iAtkos from personal use but always research 1st :)

    ReplyDelete

  112. @James Tanner

    The reason why I want to restore my iPhone 3GS 3.0FW is because its just acting up and has so much junk on it lol I SSH lots of files in and out, I played around with files for themes and other mods that I just like to restore my iPhone and start fresh again. (I know a restore does not fully restore to factory, but it does the best job to get a fresh start :))

    Now why I say 3.1FW is because I cannot restore back to 3.0FW or else I would!
    I didn't let Cydia catch my ECID SHSH as I missed out and didn't check Cydia for like a week :(

    I manually have my ECID and I got blobs, etc. for 3.0FW but it keeps saying for 3.1FW for doing the steps above. I don't think there is anything I can do right now with my 3.0FW to restore back to 3.0FW.
    You can read here... http://thefirmwareumbrella.blogspot.com/2009/10/umbrella-tinytss-ipod-touch-3g-support.html
    Its the newest blog post and how I am SOL, well I think so...

    I do NOT want to update to 3.1FW as WB and other apps are not ported, just like you said above. Tethering not working too. My iPhone is just being really annoying with all the mods and files I have done that I want to restore!
    So far my only option is CFW 3.1. Stupid APPLE!

    Yes I was thinking about dual boot as I did it back in the day until some OSX didn't properly work with my older laptop, maybe my new one may work better.

    Hey man, u got an email I can talk to you at? It's about Macbook and u mentioned u have one.

    If u have any ideas to help me out, plz let me know.

    Thanks dude!

    ReplyDelete

  113. @Lilskaterpunk,

    If you saying you simply got you 3.0 shsh files by manually pointing to saruiks server (not done through cydia) then the files you have are bogus and probs just less than 4kb in size. I think you've only got a valid 3.1 shsh and there fore restore to 3.0 is impossible for you im afraid.

    ReplyDelete

  114. just curious if anyone has information on the new tool that had been developed for those people that captured their ibec and ibss files. I have read on http://www.funkyspacemonkey.com/downgrade-3gs-31-30 that this tool will allow you to create the 00shsh. file that tiny tss uses from those files you captured with doing a restore through itunes. Thanks

    ReplyDelete

  115. @James Tanner

    Yup, there just bogus and probs less then 4KB. Useless... :( The Firmware Umbrella mentioned that to me to in another blog post.
    O well.

    Thanks

    @Will

    Yes I read that earlier today too. But doesn't that mean u still would have needed to let Cydia grab your 3.0 ECID SHSH files to be able to use the new program to downgrade to 3.0FW?
    Or is it possible to be running 3.0FW still and try to do a restore (Which u get error), will it grab ibec and ibss? I know Apple stop signing 3.0FW and this would prob not work. Just thought I would ask.

    ReplyDelete

  116. Hi, I just got a new iphone 3gs (locked to AT&T) with 3.1 and I found my ECID number; then downloaded Umbrella, opened the umbrella.jar file, filled in my ECID number and got an error "Could not get your ECID for that model/version:sorry". I'm using a MAC. I'm confused - I guess I should have done something before simply inputting my ECID into Umbrella? thx

    ReplyDelete

  117. Awesome tools! I feel so much better knowing I have a backup of my SHSH blobs. Sadly I missed out on the Cydia 3.0 ECID grab - oh well.

    I have read a lot about Umbrella producing a 00.shsh file. I've run Umbrella twice - using iPhone 3gs 3.1 as the version and against Apple and Cydia. Both produce the same file:

    3085700404686-iphone-3.1.shsh

    The file size is 64k - so that seems to indicate something good...but I just want to make sure I'm good in case Apple stops signing 3.1 which they probably already are now that 3.1.2 is out! Thanks in advance for any clarification on this.

    ReplyDelete

  118. I had the ECID and the 3.0 ECID stored on Cydia so I decided to save my latest 3.1 blobs locally and at the same time save the 3.0 blobs from cydia. The extract of the blobs from cydia and the apple server downloaded fine.

    so i decided to test the restore and changed the localhost file to point locally and started the server as per instructions with the exact filename.

    I start itunes and do a shift restore and the restore fails to start with an unknown error. Can someone help.
    I then moved on and changed the hosts to point to cydia's server and the restores goes fine. What is different that cydia does that tinytss/umbrella does not?

    I've also tried this on another system with the exact same results. Can someone help. The extracted blob also shows 'Success' in the extracted shshSTATUS=0&MESSAGE=SUCCESS&

    ReplyDelete

  119. Got fw-umbrella-semaphore-217.zip
    and retrieved a 64k shsh file for my 3GS 3.1.2 iphone from App.e
    when i try to start tinytss.exe i am getting the following error on bot win7 and winxp sp3.
    On xp java is
    java version "1.6.0_17"
    Java(TM) SE Runtime Environment (build 1.6.0_17-b04)
    Java HotSpot(TM) Client VM (build 14.3-b01, mixed mode, sharing)

    Any help?

    tinytss.exe -f 4...6-iphone-3.1.2.shsh
    TinyTSS[INFO|main|11:52:23]: Caching blobs...
    TinyTSS[INFO|main|11:52:23]: Cached 4...6-iphone-3.1.2.shsh
    java.lang.NullPointerException
    at com.semaphore.TinyTSS.mergeFiles(TinyTSS.java:434)
    at com.semaphore.TinyTSS._cacheFiles(TinyTSS.java:353 )
    at com.semaphore.TinyTSS.cacheFiles(TinyTSS.java:264)
    at com.semaphore.TinyTSS. init (TinyTSS.java:121)
    at com.semaphore.TinyTSS.main(TinyTSS.java:79)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Nativ e Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknow n Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Un known Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at com.exe4j.runtime.LauncherEngine.launch(Unknown Source)
    at com.exe4j.runtime.WinLauncher.main(Unknown Source)
    TinyTSS[INFO|main|11:52:23]: Finished caching blobs
    TinyTSS[INFO|TinyTSS-Service|11:52:23]: Starting TinyTSS service on port 80

    ReplyDelete

  120. Hi, I just got an Ipod Touch 3g 32g MC model. it is currently running 3.1 and it is also jailbroken already. I tried to create an shsh file but it didn't work. I found my EDIC but when I tried to select my firmware version, 3.1 is not on the list (only ipod touch 3g 3.1.1 3.1.2 and 3.1.3, but not 3.1). What should I do?

    Also, I am also looking for a way to upgrade my 3.1 firmware to 3.1.2 firmware. I've looked everyhwere but nobody seem to know how to do it.

    ReplyDelete

  121. hi im a noob of the iphone and i bought one the past month and i upgrade it to the FW 3.1.3. i have a 3gs never jb before and i wanted to ask if with this metod i could make the downgrade to 3.1.2 without havimg problems. sorry for the time i took and for the bad english. plese help im desperate

    ReplyDelete

  122. This comment has been removed by the author.

    ReplyDelete

  123. Hi i have 3gs 3.1.3 with BB 05.12.01 i used umbrella to get my SHSH file then i set local host to gs server and tinytss runs fine when the itune checks for apple server tinytss even gives the "successfully wrote the blob response" but when the acutal restore happens from 3.1.3 to 3.1.2 i always get error either 1600 or 1604 or 1601 i've tired on dif pc and os same result.

    ReplyDelete

  124. iTunes - log

    http://pastebin.com/b1n2Gjdg

    Help Me Please!

    ReplyDelete

  125. I am trying to recover my SHSH file so that I can get my 3gs out of recovery mode without updating to 3.1.3.

    I followed the tutorial here, http://modmyi.com/forums/3g-s-downgrading/685331-howto-setup-local-3gs-restore-verification-server-ecid-shsh.html.

    However, when I got to Part 2, step 4, I did not see, "SHSH Repository" in the list. Umbrella could not find an SHSH from Apple, Cydia, or local server.

    What should I do?

    ReplyDelete

  126. Hello,

    Yesterday, using Umbrella on TinyTss connected server, I got the 3.1.2 shsh file from Apple server. It's 65K in size compared to the usual 64K. The TinyTss was connected using my 3.1.3 shsh file from Cydia.
    Then, I connected TinyTss using the 3.1.2 shsh file got from Apple and the message was "3.1.2 shsh detected" or kind of. And TinyTss connected very well.
    My question is if the Apple file got yesterday is good or just a fake or an Umbrella error?

    Thank you.

    ReplyDelete

  127. I must be sped. I used Umbrella to get my SHSH. Now I can understand the read me. What do I do with TinyTSS to get my ipod touch to restore.
    I already set my host file as in the read me.
    I am on Mac Leopard.
    I need all the help i can get... email me any answers.. colinm478@gmail.com

    ReplyDelete

  128. With USBDeview, you dont need to go in recovery mode to retrieve your ECID.

    http://www.nirsoft.net/utils/usb_devices_view.html

    ReplyDelete

  129. I precise juste my last comment. You can see your ECID in the "serial" number displayed by USBDeview.
    It doesnt matter if your iPhone is plugged or not during the operation.
    What it is important is that you have jailbroken your iPhone (or entered in DFU mode at least one time) from this computer.

    As I am already scared when I reboot my 3GS with new iBoot, this discover was quite usefull for me.
    Hope this help.

    ReplyDelete

  130. when I run in my mac os or linux environment:

    sudo java -jar tinytss.jar -f 3...6-iphone-3.1.3.shsh

    I got:

    Exception in thread "main" java.lang.NoClassDefFoundError: org/jdom/Content
    Caused by: java.lang.ClassNotFoundException: org.jdom.Content
    at java.net.URLClassLoader$1.run(URLClassLoader.java:200)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
    at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:252)
    at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:320)
    Could not find the main class: com.semaphore.TinyTSS. Program will exit.

    Any ideas ?

    Tks !

    JM

    ReplyDelete

  131. Hi guys i made my shsh file fine but everytime i try to run tinytss it pops up for a second and disappears who knows why and how can i fix this? Please send replies to shafahie@gmail.com

    ReplyDelete

  132. When I try to run tinytss on my windows 7 32bit computer, I get an error that says "no JVM could be found on your system"...but I definately have Java on my system...what do I do?

    ReplyDelete

  133. Simply, the best thing i have ever read/seing in my whole life!!!!!! ñ_ñ

    generic viagra

    viagra online

    buy viagra

    Valeri Karpin
    Alt Reinickendorf 89
    86473 Ziemetshausen

    ReplyDelete

  134. Hello,

    Do you have a working link to your youngest windows versions?

    Tanks in advance!

    ReplyDelete

  135. Where exactly is the Local copy stored? I am wondering so I can back it up correctly !

    ReplyDelete

  136. Still refuses to see my iPhone 4, tried 4.00.22,
    4.00.23, and now 4.00.24
    Worked great on my iPad but a no go for iPhone 4, and yes its plugged in via USB

    ReplyDelete

  137. I received an error stating that "This device isn't eligible for the requested build". I have an iPhone 3G JB 3.1.2, will this not work?

    ReplyDelete

  138. MC model new boot not work :(

    ReplyDelete

  139. I notice in the ver 4.00.23 in advanced options you could select localhost as well as apple or cydia in the latest ver there is no localhost option is this correct? if I am running the tss server and set my host file to 127.0.0.1 what option should be selected in advanced options?
    great work by the way thanks..
    Ricky

    ReplyDelete

  140. Hello, I have been following this in hopes of finding an answer. I had the same problem as Kevin, not being able to run TSS server due to lack of adminstration abilities. I have checked my router and terminal, and found nothing on port 80. I am pretty desperate at this point

    I screenshot'd:
    http://img809.imageshack.us/img809/1074/tinyumbrella.jpg

    Any suggestions?

    ReplyDelete

Subscribe to: Post Comments (Atom)