How to Jailbreak but not activate/un-simlock your 1.1.1 iPhone

The DevTeam so close to a fully-working 1.1.1 iPhone that I can taste here in my Brooklyn basement. Good on ’em. Thus far they’ve Jailbroken the firmware and now have read/write access to the file system and can install AppTapp, which is absolutely great. That doesn’t mean you should try this on your non-AT&T iPhone, however, because they haven’t been able to fake activate it yet, meaing unless you’re running on AT&T you’re still kind of stuck.

Do not use any other method to Jailbreak your phone. Things have changed completely with the 1.1.1 release

Jailbreaking Steps

1. Sync and pray
1. Sync your iPhone with iTunes. You’ll be losing all of your information, so it’s a good idea to back up
2. Downgrade to v1.0.2
1. Hold down the Sleep/Wake and Home buttons at the same time for about 10 seconds. The phone should shut down.
2. When the phone shuts down, release the Sleep/Wake button but continue holding Home
3. Wait until iTunes recognizes the iPhone. The screen will appear to be off, but iTunes will eventually recognize the iPhone. When it does, let go.
4. A message will appear telling you to restore. Click OK
5. Using your favorite browser, download the v1.0.2 software from this location. You may need to rename to .ipsw if it comes as a .zip
6. Back in iTunes, hold Option on the Mac or Shift on the PC while clicking Restore. Navigate to the software you downloaded and select it.
7. The phone will restore, but it will fail. This is normal.
8. Your iPhone should show a yellow triangle. Run Nullriver’s AppTapp. It should bring you back to the Activation step on the phone and show an error in the application. Disregard the error.
9. Run AppTapp again and it should succeed.
10. If not using an AT&T SIM, use INdependence to activate your iPhone. That’s it!
3. Create Symlink
1. If you haven’t already, install Nullriver’s AppTapp
2. Go to in iPhone’s Safari. Tap “Yes” to add to Installer
3. Plug iPhone in and open iTunes. Make sure it’s recognized before proceeding
4. Using Installer, install “Trip1Prepz” located under “System”
4. Upgrade to v1.1.1
1. In iTunes click “Upgrade” and not Restore. Restoring will ruin our progress.
2. Once upgraded to 1.1.1, close iTunes
5. Jailbreak
1. Download iPHUC and friends from Rapidshare
2. Extract the contents so that iphuc, fstab, and iphonefs are all on the Desktop
3. If you don’t have libreadline, download it and extract the zip to your Macintosh HD
4. Open located in Applications>Utilities
5. Type cd ~/Desktop and hit return
6. Type ./iphuc and hit return
7. Type getfile /dev/rdisk0s1 iphonefs/rdisk0s1 314572800 and hit return. This will take about five minutes so grab something to drink in the meantime. Once complete, there will be a file named “rdisk0s1” in your “iphonefs” folder
8. Add .dmg to the end of the file. It should end up being rdisk0s1.dmg
9. Double click the file to mount it
10. Open the newly mounted Snowbird3A109a.UserBundle drive and open the “etc” folder. Replace the fstab file inside the “etc” folder with the supplied fstab file.
11. Unmount the image
12. Back in Terminal, assuming that you’ve kept iPHUC up and running, type putfile iphonefs/rdisk0s1.dmg /dev/rdisk0s1 and hit return. This will take another minute or so. When it’s finished, reboot the iPhone. You’re jailbroken!
6. Install SSH
1. Download iNdependence from its Google code page here
2. Open iNdependence and go to the “SSH” tab
3. Click “Install SSH/SFTP/SCP” and follow the instructions. It will ask to reboot the iPhone several times
4. When you’re done, SSH into your iPhone from the Terminal by typing ssh -l root your.iphones.ip.address. When asked the password is alpine. If it gives a fuss, you may need to remove the “known_hosts” file from /Users/YourUser/.ssh/
5. Accept the key by typing yes and hitting return if asked. Leave the window open.
6. Open your favorite FTP (I recommend CyberDuck) client and log in using your iPhone’s IP address, root for the username and alpine for the password. Make sure to use SFTP and not plain old FTP
7. If you’re not already there, navigate to /var/root and rename Media to Media_sym
8. Rename MediaBackup to Media. Keep the FTP and SSH windows open.
9. Open iTunes and allow it to activate. If it doesn’t recognize your phone, reboot it and/or restart iTunes.
7. Install AppTapp
1. Download Nullriver’s AppTapp
2. Right click or control click AppTapp Installer and click “Show Package Contents”. Navigate to Contents>Resources
3. Using the FTP application, copy from the Resources folder into the Applications folder on your iPhone
4. Back in the terminal, SSH into your iPhone again (if you’re not already), give the comand chmod -Rf +x /Applications/ and hit return.
5. Slide to unlock your iPhone then type /Applications/ and hit return to launch Installer.
6. After AppTapp opens, press control+c to close it
7. Open Safari on iPhone and navigate to
8. Tap yes to add it to Installer
9. Back in terminal, using ssh, type /Applications/ and hit return to launch Installer again.
10. Install Trip1PogoStick located under the “System” category to enable scrolling and applications.
11. When you’re done, reboot the iPhone and close all your windows. You now have AppTapp.

via iPhoneAlley