libimobiledevice / libideviceactivation

A library to handle the activation process of iOS devices
https://libimobiledevice.org
GNU Lesser General Public License v2.1
291 stars 132 forks source link

ideviceactivate error - Unable to get ActivationInfo from lockdownd #37

Closed Phi1758 closed 5 years ago

Phi1758 commented 5 years ago

ideviceactivation activate --debug idevice_activation_request_new_from_lockdownd: Unable to get IMSI from lockdownd idevice_activation_request_new_from_lockdownd: Unable to get ActivationInfo from lockdownd Failed to create activation request.

ideviceinfo 
ActivationState: Unactivated
BasebandActivationTicketVersion: V2
BasebandCertId: 3840149528
BasebandChipID: 8343777
BasebandKeyHashInformation: 
 AKeyStatus: 2
 SKeyHash: u+/tcCwvaQ+1Y9t40I4yegCEmB28mALlaROhaIVGBWo=
 SKeyStatus: 0
BasebandMasterKeyHash: 8CB15EE4C8002199070D9500BB8FB183B02713A5CA2A6B92DB5E75CE15536182
BasebandRegionSKU: BQAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
BasebandSerialNumber: DUaHtQ==
BasebandStatus: BBInfoAvailable
BasebandVersion: 7.10.00
BluetoothAddress: 70:ec:e4:16:70:60
BoardId: 6
BrickState: true
BuildVersion: 16A404
CPUArchitecture: arm64
CarrierBundleInfoArray[1]: 
 0: 
  CFBundleIdentifier: com.apple.TMobile_TFW_Simple_US
  CFBundleVersion: 33.0
  GID1: deff
  GID2: ffff
  IntegratedCircuitCardIdentity: 8901260375160198463
  InternationalMobileSubscriberIdentity: 310260376019846
  MCC: 310
  MNC: 260
  MobileEquipmentIdentifier: 35930406210852
  SIMGID1: 3v8=
  SIMGID2: //8=
  Slot: kOne
  kCTPostponementInfoAvailable: DefaultCarrierInfo
CertID: 3840149528
ChipID: 28672
ChipSerialNo: DUaHtQ==
DeviceClass: iPhone
DeviceColor: #e1e4e3
DeviceName: iPhone
DieID: 378695926719526
EthernetAddress: 70:ec:e4:16:70:61
FirmwareVersion: iBoot-4513.200.297
FusingStatus: 3
HardwareModel: N61AP
HardwarePlatform: t7000
HasSiDP: true
HostAttached: true
IntegratedCircuitCardIdentity: 8901260375160198463
InternationalMobileEquipmentIdentity: 359304062108520
InternationalMobileSubscriberIdentity: 310260376019846
MLBSerialNumber: F3X52730SXZG16TE
MobileEquipmentIdentifier: 35930406210852
MobileSubscriberCountryCode: 
MobileSubscriberNetworkCode: 260
ModelNumber: MG562
NonVolatileRAM: 
 auto-boot: dHJ1ZQ==
 backlight-level: MTU0NQ==
 boot-args: 
 bootdelay: MA==
 com.apple.System.tz0-size: MHhDMDAwMDA=
PRIVersion_Major: 0
PRIVersion_Minor: 1
PRIVersion_ReleaseNo: 192
PartitionType: GUID_partition_scheme
PasswordProtected: false
PkHash: 5OQIGNymupBn16zMKPujMp3562XDnNFkULy+gshbERM=
ProductName: iPhone OS
ProductType: iPhone7,2
ProductVersion: 12.0.1
ProductionSOC: true
ProtocolVersion: 2
ProximitySensorCalibration: T00EAA0LPDgQA7wCsARVALwCHQEDAAAABQQDAHwI5wLuAkoAf5YhAWTFSRsAAAAA4QBkAAQCAABZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
RegionInfo: LL/A
SBLockdownEverRegisteredKey: false
SIMGID1: 3g==
SIMGID2: /w==
SIMStatus: kCTSIMSupportSIMStatusReady
SIMTrayStatus: kCTSIMSupportSIMTrayInsertedWithSIM
SerialNumber: F17Q21SDG5MF
SoftwareBehavior: EQAAAAAAAAAAAAAAAAAAAA==
SoftwareBundleVersion: 
SupportedDeviceFamilies[1]: 
 0: 1
TelephonyCapability: true
TimeIntervalSince1970: 1540691875.499427
TimeZone: America/New_York
TimeZoneOffsetFromUTC: -14400.000000
TrustedHostAttached: true
UniqueChipID: 378695926719526
UniqueDeviceID: 8705ffcbd4488dba5fd732d3b6dd8ef87fe459cd
UntrustedHostBUID: 6573698E-885E-2E64-50BD-F2ADA7667E43
UseRaptorCerts: true
Uses24HourClock: false
WiFiAddress: 70:ec:e4:16:70:5f
WirelessBoardSerialNumber: F6124E3C25A
kCTPostponementInfoPRIVersion: 0.1.192
kCTPostponementInfoPRLName: 0
kCTPostponementInfoServiceProvisioningState: true
kCTPostponementStatus: kCTPostponementStatusReady

I don't know what I am doing wrong here. I can use ifuse and ideviceinfo just fine but ideviceactivate activate will not work. Is there a way to get root access to this device. It was left in my taxi cab three years ago and sat in the glove box for a year with no luck finding the owner. Apple told me that the owner had a new phone for a long time already and that I should just dispose of the phone at this point. Being that I am disabled and my android recently broke I could use a phone so why through this one away. I can't get past the icloud lock or else I wouldn't be having any issues at all. But here I stand not being able to $ifuse --root or $ideviceactivate activate without getting some sort of lockdownd error. Please help me.

Phi1758 commented 5 years ago

If that's the case then why in the world does this program exist. There is no other reason for it and no other reason to go through the process of compiling all of those libs into a linux kernel. It makes no sense.

Phi1758 commented 5 years ago

I don't believe that for a second. I know there has to be a way to root an icloud locked device but people are just too afraid to publish it or they are bought off by Apple in it's reward program offering large sums of money to report bugs. As far as moral issues are concerned if someone leaved a device in my place of business and I follow the more than fair policy that I implemented for lost and found property how is it immoral for me to want to use an iPhone from my lost and found after I had exhausted all routes that I could think of at the time to return it in good faith to the owner. An owner who most likely was intoxicated and forgot where they left it and their security is what prevented me from reading the email address and phone number to contact them in the event of their loosing it. I have returned many many smartphones over the years because I know how much it sucks to loose one and that it is the right thing to do. I could give examples of how I have gone way out of my way to return someone's phone at my expense but will spare you with one exception. I returned a phone that wasn't lost in my business when I was younger because it allowed me to open it right up and use it. I opened it up and looked through the contacts and saw one for "Mom and Dad" and called that number and told them that I had their sons phone and how he could reach me and he did. So there is no moral implication here as the device was reset by me with iTunes and wiped their personal data which had I not have done I could have cracked this phone easily with the information that I have learned from studying this project. And moral implications as far as they are concerned is the reason why I use Linux instead of Windows and especially Apple. They are the immoral companies. Jobs was a disgusting example of a human being. He and Woz just took a Unix/Linux Kernel and turned it into iOS and added the best encryption algorithms that money could by from the brightest minds that they could find and took all of the credit. Then they built the phones in the most environmentally unfriendly places on earth exploiting the lack of fair labor laws to cut costs on production and then sell them to Liberals at top dollar. So the way I see it the moral thing to do is for every hacker in the world should have at Apple and take a bite in anyway that they can. What about Apple support telling me to dispose of the phone. How ethical is that for the environment. It's brand new and could be used for years to come. We should be working on a way to take all brands of smart phones and convert them all into opensource driven phones. If I could wipe the iOS off of the phone and install Linux on it I would gladly do so. I could sell it for parts and use the money to buy a new Raspberry Pi or I could be a dick and sell it to some sucker on Ebay or other but I wouldn't do that to somebody. I'd gladly return it to the owner but Apple support made that perfectly clear that that was not going to happen. T-mobile as well. So what to do with it. I guess I will toss it in a box and save it for a few years until there is a use for it. Maybe use it as a print server or something down the road. But moral implications, please.

On Sun, Nov 11, 2018 at 2:20 AM Ethan Nelson-Moore notifications@github.com wrote:

ideviceactivate does not bypass iCloud lock. In fact, no program exists that can. Moral issues notwithstanding, the security is just too good.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/libimobiledevice/libideviceactivation/issues/37#issuecomment-437649138, or mute the thread https://github.com/notifications/unsubscribe-auth/AqeVpoAF7og6B28p-zM5LQBGOX9KkOEUks5ut8-8gaJpZM4X9vXp .

nikias commented 5 years ago

iCloud lock can't be bypassed through activation. It is not possible, period. Apple has a database that holds the iCloud lock state and theoretically Apple could remove it. But they don't because if they'd easily allow removing it, this theft protection feature would just be pointless. Apart from that, this library and tools exist to provide support for iDevices without the need for iTunes. That's the point of it (And they are not compiled "into the kernel". It's userland software, and compiling it is fairly easy). Also FYI Apple does not offer bounties for this kind of bugs, given they exist. In any case, please stop discussing iCloud bypass related topics here. This is a bug tracker for the library.

nikias commented 5 years ago

@parrotgeek1 the actual issue with error about IMSI is still valid though. It should try to request an activation ticket even if it will end up in an activation lock form response.

Phi1758 commented 5 years ago

Any idea why ideviceinfo has no issues returning the IMSI but ideviceactivate will not without the lockdownd error? Same thing with Activationinfo?

nikias commented 5 years ago

I fixed it. The problem is lockdownd just doesn't want to return that info whenever you directly query that particular key(s). I changed it so that ideviceactivation will now query all the keys at once (like ideviceinfo does) and extract the desired information from there. This is all legacy mode though, newer devices are using the new mobileactivation service now. Still nice to see this fixed I guess ;)