Can't restore to 4.1 (possible tinyumbrella problem)?

[bellyfrog]

Hey guys,

I'm having a problem restoring to iOS 4.1 on 2 seperate iPhone 3GS.

One of them successfully saved SHSH 4.1 from TinyUmbrella, the other one seemingly didn't. Are Apple still signing 4.1?

Either way both of them give me error 3194 when I shift + restore to a 3GS 4.1 restore ipsw.

This is what my host files looks like:

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
#127.0.0.1 gs.apple.com
74.208.10.249 gs.apple.com
#74.208.105.171 gs.apple.com

I also have this horrible issue which I cannot find any solution for about System PID:4 Must Be Killed in TinyUmbrella, I have no clue what to do about this. People say it's an antivirus issue but I have killed every single process on my computer and I STILL get this error every time I launch TinyUmbrella so it seems impossible to do a TSS server restore.

Help!!!

[Simon]

Yes Apple have stopped signing 4.1. With the one that has SSH try closing tiny umbrella, dont use it. Then put the iphone into dfu and try the 4.1 restore.

[bellyfrog]

Same thing, error 3194

Damn this is annoying I would rather avoid doing a custom firmware restore as they seem to destroy the battery life of 3GS phones.

[Simon]

Try it on another computer if you can, something may be up with your hosts files on that one. Remember to run the latest tiny umbrella once, then close it. Doing this sets your hosts to cydia.

[bellyfrog]

Yep I'll try that. Is it possible to reset my hosts file? Just delete all those entries and then run TU/close.

Would be a lot easier to do it at home.

[iYeow]

The new umbrella will automatically set it for you but you can change the configuration under advance whether to point the hosts file towards Cydia or Apple upon Exit.
You should check with Tiny Umbrella to see what shsh you have.

[bellyfrog]

As I said, I have 4.1 SHSH for my 3GS. At least TU says I do. And you can see my hosts file quoted in the OP. I have TU set to point to Cydia. Still getting the error, in DFU, restore, and normal modes.

OK now I'm really confused. I made a PwnageTool 4.1 ipsw without the hacktivation and I'm still getting error 3194 after putting the phone into pwned DFU mode with redsn0w 0.9.6b5

This is annoying!

[Orby]

Error 3194 is your processor failing to find the blobs for your device to match the version of the OS and ECID.

If TU is telling you that it cannot start the TSS server because of conflict process on port 80, try this (unabashedly lifted straight from notcom's TinyUmbrella FAQ).

PC
* Go to services: Start -> run -> services.msc and look for Apache or any other application that runs on port 80 and stop it.
* If that doesnt work, you'll need to consult google.
* Try "netstat -aon | findstr LISTEN | findstr ":80"
o Kill or disable the service LISTENING on port XX.XX.XX.XX:80

If you'd like to double-check the accuracy and availability of any SHSHs, please post or PM the applicable ECIDs. I'll post/PM digests of any SHSH file(s) I can obtain on your behalf.

Part Deux: the reason redsn0w is still failing is because redsn0w (and all other untethered jailbreaks for new bootrom 3GS units at 4.1, to the best of my knowledge) do not alter any files in the "normal boot chain;" the only exploit used is a kernel-patching userland one. Therefore, SHSH blobs are still required to re-flash any and all files in the normal boot chain.

[bellyfrog]

Ok orby but that doesn't explain why I can't restore to a PwnageTool custom firmware does it? Regardless of anything else, I should be able to run redsn0w's "Enter Pwned DFU Mode" and then shift+restore to a custom firmware, but even that is giving me errors 3194 and 3014.

One of the phones is old bootrom 4.1 and the other is new bootrom 4.0.2

Neither will let me restore custom firmware.

I think I'll try reinstalling iTunes, I've never encountered this problem before and I have jailbroken 50+ phones.

If anyone has encountered the issue and knows how to fix, please help!

Update - Reinstalling iTunes didn't help... WTF is going on?!

[Simon]

Orb was trying to say that even if you use a custom firmware shsh blobbs are still needed to verify the restore. So your issue lies in the verification part, which leads us back to your hosts file. I am not the best at manually editing to what it should be, I usually leave it to tiny umbrella to do for me. You can try deleting anything that has gs.apple.com in it, then open and close tiny umbrella making sure it is set to change hosts to cydia on exit. Then reboot the computer and try the restore from dfu again. Make sure it is dfu (black screen).

[bellyfrog]

Huh? I thought the whole point of custom firmware is that it doesn't require SHSH blobs?

For example before I have custom firmware updated to 4.0 or 4.0.1 long after the signing period for SHSH blobs was closed and pretty sure those devices didn't have SHSH on file (if they did I would have just done a regular restore to that version).

[Simon]

The custom firmwares created using the new limera1n exploit cannot bypass the SHSH verification which is what orbyorb was saying. The old method that works on iPhone 3G on old bootrom did not need SHSH verfication, the pwning of those devices bypassed that step.

[Orby]

The custom firmwares created using the new limera1n exploit cannot bypass the SHSH verification which is what orbyorb was saying. The old method that works on iPhone 3G on old bootrom did not need SHSH verfication, the pwning of those devices bypassed that step.

You're officially hired as my interpreter... lol.

The bootrom exploit in limera1n /only/ allows for the running and copying of unsigned code via USB. It does not break (very essential to be broken) the chain of trust as the device boots.

The method to get unsigned code running is to use limera1n to deposit shellcode in userland to exploit the pf kernel hole. This code runs AFTER the chain of trust has been established and fully verified on every boot. That code running in userland is what hands you your jailbreak every boot.

Because the boot chain (in the 3GS, Secure ROM -> Stage 1 bootloader -> LLB -> Stage 2 bootloader (known as iBoot) -> kernel cache -> filesystem) is NOT altered and we don't have any exploits to alter the new-bootrom devices for our means, the full requirements of SHSH blobs and code signing (both hardware and as imposed by LLB/iBoot) are still in force.

Valid blobs are needed to flash those stock files correctly and to avoid invalidating the chain of trust and throwing the whole thing into a bootloop, DFU, or Recovery (a tethered jailbreak situation).

PT flashes the boot chain files to the stock 4.1 versions, it needs blobs. Redsn0w doesn't, because the OS has to be already installed from stock (and therefore have passed the blob checks from that install).

Hopefully that makes more sense.

[Simon]

Ya no prob. Even I have a little trouble understanding what you are saying sometimes

[Orby]

Ya no prob. Even I have a little trouble understanding what you are saying sometimes

Heh, the quintessential (digital) form of the blabbering nerd who thinks he's making perfect sense but really isn't...

[bellyfrog]

Ok yeah I kinda understand. What I don't get is why this computer won't let me restore to 4.1 custom firmware when I do have SHSH blobs. I managed to do it on another computer (by using TSS Server method) but now when I put the phone into iTunes to activate it gives the error "iTunes cannot read the contents of iPhone... restore blabla" and obviously I am back home now so I cannot re-restore! Fun times...

edit - By the way this phone is already running 6.15.00 baseband which means I can only restore to custom firmware not to stock (although stock firmware restore did go all the way to the end of the process before being rejected).

Also

PC
* Go to services: Start -> run -> services.msc and look for Apache or any other application that runs on port 80 and stop it.
* If that doesnt work, you'll need to consult google.
* Try "netstat -aon | findstr LISTEN | findstr ":80"
o Kill or disable the service LISTENING on port XX.XX.XX.XX:80

From TinyUmbrellas site really doesn't help much. There is no service called apache running, I have googled for this issue several times and the only solution anyone seems to offer is "turn off your antivirus" , and the command promt netstat thing just tells me that it's task ID 4 that is running on port 80, which I already know because TinyUmbrella tells you the same thing.

taskkill pid 4 doesnt work, says you have to force it

taskkill -f -pid 4 doesn't work, says access denied

Super fun times

Ok... finally managed to get it to restore to cfw and load up. Didn't fix the wifi problem I had though

Just as a heads up to others, the way I fixed the TinyUmbrella problem was stopping World Wide Web Publishing service. You have to run services.msc as administrator for it to let you stop it. After that my TSS server runs fine