New Exploit for Permanent iPhone 4 Unlock Is On The Way

MuscleNerd of the iPhone Dev Team has confirmed about a new exploit (NCK) which was discovered few hours ago and expected to permanently unlock the iPhone 4 basebands.

This new exploit is under work and is yet to be tested out. These news has been confirmed by the most popular iPhone hacker MuscleNerd and the well-known iPhone enthusiast Vincent on their Twitter accounts:

MuscleNerd: To those patiently ignoring all the chatter from “promises” we never made comes a jewel: NCK unlock code is just 40 bits!

MuscleNerd: (if turns out to be true, it’s unexpected surprise for those w/vuln BB’s. All the data is there for 40-bit brute force)

Veeence: The NCK @MuscleNerd is talking about is the code that allows to unlock the baseband.

Veeence: The exploit the got now gives you enough information to bruteforce crack your unique NCK key -> gives you an (official) permanent unlock.

The following FAQ (courtesy of Vincent) will help answer most of your questions related to this new permanent iPhone 4 unlock exploit.

Since there is a lot of confusion out there, and since I’m repeating myself all the time (which I do not really like), I made this little write up of questions that are continuously being asked (my personal FAQ). Please not that this is a global explanation. Don’t try to argue with me on specific details.

1. What happened?! I thought the unlock for basebands 02.10.01 & 03.10.01 would be released within the next 2 weeks?

As you know the Dev-Team (MuscleNerd) have been working on the unlock for quite a while now. They were making great progress on the unlock, but they found out that they (accidentally) unlocked “one particular SIM card” instead of the baseband itself. Which means that the unlock would only be an unlock you could use with MuscleNerd’s T-Mobile SIM. So, useless. If the unlock would unlock the baseband instead of “the SIM”, it’d probably be out within 2 weeks (reasonable timeframe which they had hoped). But things turned out to be different. Basically these <2 weeks predictions were a lack of information. 2. What is this NCK-key cracking? How does it work? The NCK-key is the key generated by Apple if you’d officially unlock you iPhone, and with officially I mean, via your carrier. This "NCK-unlock" method is known over a few years now, actually since geohot started working on unlocking the iPhone 2G. He developed a program that could "crack" this 15 digits long key and unique for every device. Geohots NCKBF program could do around 100,000 keys/second which would produce a hit in many years, or complete a search in 317 years. To get to a point where this is actually doable we would need many orders of magnitude of improvement. Even if you use a PS3 (would we still want to use this??) or special hardware (within 1,000 US$ range) you will only get an improvement of 20-100 times.. which doesn’t help much. Now, luckily, with the exploits they have now, they can’t unlock your baseband, but they *can* capture more information from the baseband to speed up this cracking process. Since the NORID and CHIPID (unique for every device) are known, you’d apparently only have to check 40 more bits (5 digits). A 40 bits key is theoretically crackable on "home hardware" within a week (24/7). The downside of this approach is that you’ll have to keep your computer turned on, and your iPhone has to be connected. And that is the reason why they never tried it before. Please note that this method is completely theorical and has been NOT tried at all till this moment. 3. Now what? Should I sell my locked iPhone 4? I’d wait for more information on this "NCK-unlock". Right now it’s pretty vague what timeframe we’re talking about. If the Dev-Team can pull this method off, it’d be very promising for those waiting for an unlock. If this method turns out to be not doable, I’d consider selling your iPhone 4 and save up for a factory unlocked iPhone 5. 4. Do you think there is every going to be an unlock? Of course. But that’s unlikely to be any time soon (with soon being <1 month). 5. If the NCK method fails, how long do you think it will take for the Dev-Team to unlock the iPhone 4? No ETA at all. Could be a few weeks, but it could easily be a few months as well.

Anyway, we hope this new exploit will successfully work to unlock iPhone 4. Stay with us for the latest jailbreaking and unlocking news.

Thanks
Click On Ads To Buy iPhones Accessories

This Post Has 8 Comments

  1. Grinberg8888

    Last time you guys were saying confirmed also, my ass confimed. Unless the guy himself comes out and says confirmed Noone will believe the media!

  2. Sinu77

    if only carrier specific unlock can be done, release it as a relief. Atleast it would passify millions patiently waiting for the permanent baseband unlock. Who knows it would take maybe another year for the NCK unlock to be sensibly and feasibly implemented.

    with knowledge and fame comes great resposibility.

  3. ifuckd4

    It is just another “promising story”

  4. gargoyle

    Well I waited long enough and finally bought a gevey from ebay. My iPod is an iPhone now and working just fine.The only reason these people are working on these hacks is for fame and I respect that. However I don’t understand how musclenerd “tests” gevey and says it’s illegal.We know jailbroken iphones are not covered by apple, and if your iphone stops booting for some reason and you cannot remove the jailbreak you just have an expensive paperweight.According to apple all the job they have done is illegal and they can actually ban all the jailbroken devices and nobody can do anything about it. Geohot gave up against sony, so even they are successful, I doubt it will last long.(apple banned hashim a while ago) Long story short, I believe with this kind of process, an unlock will come out after apple releases iphone 6. As I said I am now using gevey for a week and it works just fine and since I removed the jailbreak if something happens my iphone is still under warrranty. I stopped following these guys from twitter too. I believe they like the attention and if they think if they release an unlock before a new iphone comes out, they might lose the attention. But that is my opinion I still respect what they are trying to do but I had enough with all this “unlock coming after this”, “very close to unlock”, “just 40bit, simple with brute force” stuff and this gevey sounds like a better solution since you are not trusting bunch of guys who is doing this for fun (god knows what kind of problems unlockers will experience after they change apple’s code) ..
    I wish all who is waiting for an unlock lots of patience.
    Good day

  5. Steelking9300

    The question is will it be free for all or a ridiculous price like the ones selling online now 160-200dollers……..?

  6. lcelervs

    I unlocked my i4 BB 03.10.01 in march via Gevey Sim. Since then no problem at all. Got tired of waiting for these guys to come up with a solution they kept raising hopes for. Maybe they shouldn´t talk about an unlock until they have something solid, otherwise they´re making fools of themselves.

  7. Gerk

    I’d gladly leave my phone connected to my computer for a week if it means a permanent unlock!!

    Thanks to MuscleNerd and all the team working this……..it is GREATLY appreciated!!!!!!!

Leave a Reply