iCloud lock removal by hardware replacement possible?

Question

iPhone 6s修理

苹果官方于2015年9月25日正式发售iPhone6S A1688/A1633机型。此机型的修理方式与先前几代差不多, 需要螺丝起子及撬棍工具。同时也适用GSM or CDMA/16, 64 or 123 GB/ 银色, 金色, 深空灰色, 玫瑰金色等机型。

2654 个问题查看全部

Mason Lowry @lowry00

声誉积分: 143

3

2

1

发帖于: 2018年10月11日

更多选项

iCloud lock removal by hardware replacement possible?

This question might be slightly different from some of the other questions asked about this topic.

Obviously, it can be done by replacing a few chips on the logic board and reprogramming the NAND chip or something like that.

But, my question is, can you somehow reprogram the EXISTING chip that came on the iPhone or is a new one needed? I saw a forum somewhere where someone had tried this but never updated his post.

Also, some special tools and software are needed for this type of project. I would love to know specifically what kind of software and tools are needed for this kind of job, and also, where I could buy them.

There are plenty of sites that sell this kind of material, but I want to know a reputable site that sells quality products and someone who doesn’t scam you into giving them your credit card information but never gives you a product.

I plan on repairing and flipping phones later in life as a side-job and depending on how much the chips cost that need replacing, doing iCloud unlock by hardware replacement. I don’t know how much the chips cost or anything like that, but considering you can get an iCloud locked iPhone 7 for about $50 and sell it for around $400, this may be profitable.

Thanks for your time and answers, they are much appreciated!

已回答！ 显示答案我也有这个问题

这是一个好问题吗？

是否

得分 11

1条评论

147 thousand employees against a couple of hackers…..&&^&

由 Lifestayswhackbro 完成的 2020年11月30日

添加一条评论

3个答案

已选择的解决方案

Minho @refectio

声誉积分: 221.2千

Refectio - Mail-in Micro-Soldering Repairs & Data Recovery

15

281

804

发帖于: 2018年10月11日

更多选项

You cannot “replace a few chips” to remove an iCloud lock nor can you reprogram these chips. If it was that easy, the market would be flooded with iCloud UNlocked devices and iPhone theft would be a rampant problem.

On GSM/LTE iPads, there is a hardware “fix” that unlocks them but they can be used as WiFi-only devices and updating them to the latest iOS usually renders them back to a locked state. Apple has done it’s homework here and made iCloud Lock essentially impenetrable. The only known exception is when an internal Apple employee sells GSX access to unlock the device but that’s a different barrel of fish.

Essentially, the CPU/NAND/Baseband CPU and EEPROM are all tied together with a secure code. While you can reprogram the NAND, there is no such access to the CPU or Baseband CPU. Therefore, the only way to make a logic board unlocked is to transfer those IC’s from a non locked board…that’s a whole lot of work for nothing as you haven’t made anything new, you risk damaging both boards (this is a very difficult repair with low success rates) and it would have been easier to just transfer the unlocked board in the first place.

Unfortunately, in regards to iCloud locked boards, you can’t make something out of nothing.

这个答案有帮助吗？

是否

得分 16

11条评论:

To add to @refectio - comments: Older iOS had a few holes which allowed some means of access (as an example Phone use only) these are no longer accessible with the newer iOS versions.

Besides, all you are doing is becoming a cog in the theft ring!

由 Dan 完成的 2018年10月11日

@refectio Those are the components I was talking about when I said “a few chips.” But I know they CAN be replaced to remove the IC lock because I’ve seen and heard about it being done. There is also equipment made specifically for this task because I’ve viewed it online. I’m by no means calling you a liar or trying to argue or anything. You OBVIOUSLY know A LOT more about this than I do and I respect that. But from what I’ve read and understood, the three chips ARE paired together and that’s why they must all be replaced and the NAND chip is the one people are reprogramming because it stores the IMEI and things of that nature.

All I wanted to know is CAN it be done, and if done correctly, is it profitable? And if it’s profitable, where I might be able to obtain some of these parts and equipment.

I’m sorry for the trouble, I just want to make sure that I understand all this correctly. I appreciate your time in answering my questions.

由 Mason Lowry 完成的 2018年10月11日

@refectio This is the link where they replace the parts and reprogram the NAND chip: http://www.3u.com/tutorial/articles/how-...

由 Mason Lowry 完成的 2018年10月11日

Maybe you should re-read my answer ;>).

First of all, the link provided shows an iPhone 5S, you are talking about flipping iPhone 7's.

Since then, the CPU is included in the code-locked IC's; there is no way to access the Secure Enclave within it. There is also no know way to program or read the Baseband CPU. There are tools to read/program the NAND and EEPROM but that is a moot point when it comes to unlocking iCloud when you can't do anything with the CPU/BBCPU.

Now when it comes to transferring IC's, here's why its of no value. Suppose you have a logic board (LB1) which is iCloud locked. You also have access to another phone that is damaged but not iCloud locked, let's call it LB2. You think that you can transfer over the needed components from LB2 (CPU/NAND/BBCPU/EEPROM) to unlock LB1. Well, yes...in theory.

由 Minho 完成的 2018年10月11日

In practice, it is insanely hard to do. However, Iet's assume it is done successfully. What do you have in your hands at the end of the exercise? LB1 which now works and is unlocked and LB2 which is now toast and of no value. In fact, assuming the main IC's were good to begin with, it would have been much easier to simply repair LB2. The end result would be the same and you will not have risked destroying either or both logic boards by removing CPU's.

The only way this works is if you have a steady stream of iCloud locked devices and an equally steady stream of unlocked but damaged devices that cost you almost nothing. You still have to do the work but then you haven't really unlocked anything, your just moving components around it would just be simpler to move logic boards around instead. It could probably work if you were in China, with access to low-cost labour and a near infinite supply of damaged/returned/stolen phones. But not in the "western" world.

由 Minho 完成的 2018年10月11日

显示更多的6条评论

添加一条评论

To add to @refectio - comments: Older iOS had a few holes which allowed some means of access (as an example Phone use only) these are no longer accessible with the newer iOS versions.

Besides, all you are doing is becoming a cog in the theft ring! — Dan
@refectio Those are the components I was talking about when I said “a few chips.” But I know they CAN be replaced to remove the IC lock because I’ve seen and heard about it being done. There is also equipment made specifically for this task because I’ve viewed it online. I’m by no means calling you a liar or trying to argue or anything. You OBVIOUSLY know A LOT more about this than I do and I respect that. But from what I’ve read and understood, the three chips ARE paired together and that’s why they must all be replaced and the NAND chip is the one people are reprogramming because it stores the IMEI and things of that nature.

All I wanted to know is CAN it be done, and if done correctly, is it profitable? And if it’s profitable, where I might be able to obtain some of these parts and equipment.

I’m sorry for the trouble, I just want to make sure that I understand all this correctly. I appreciate your time in answering my questions. — Mason Lowry
@refectio This is the link where they replace the parts and reprogram the NAND chip: http://www.3u.com/tutorial/articles/how-... — Mason Lowry
Maybe you should re-read my answer ;>).

First of all, the link provided shows an iPhone 5S, you are talking about flipping iPhone 7's.

Since then, the CPU is included in the code-locked IC's; there is no way to access the Secure Enclave within it. There is also no know way to program or read the Baseband CPU. There are tools to read/program the NAND and EEPROM but that is a moot point when it comes to unlocking iCloud when you can't do anything with the CPU/BBCPU.

Now when it comes to transferring IC's, here's why its of no value. Suppose you have a logic board (LB1) which is iCloud locked. You also have access to another phone that is damaged but not iCloud locked, let's call it LB2. You think that you can transfer over the needed components from LB2 (CPU/NAND/BBCPU/EEPROM) to unlock LB1. Well, yes...in theory. — Minho
In practice, it is insanely hard to do. However, Iet's assume it is done successfully. What do you have in your hands at the end of the exercise? LB1 which now works and is unlocked and LB2 which is now toast and of no value. In fact, assuming the main IC's were good to begin with, it would have been much easier to simply repair LB2. The end result would be the same and you will not have risked destroying either or both logic boards by removing CPU's.

The only way this works is if you have a steady stream of iCloud locked devices and an equally steady stream of unlocked but damaged devices that cost you almost nothing. You still have to do the work but then you haven't really unlocked anything, your just moving components around it would just be simpler to move logic boards around instead. It could probably work if you were in China, with access to low-cost labour and a near infinite supply of damaged/returned/stolen phones. But not in the "western" world. — Minho

Ashley Sandlin @ashleysandlin 声誉积分: 25 1 · Answer 1 · 2020-11-17T20:13:34-07:00

Ashley Sandlin @ashleysandlin

声誉积分: 25

1

发帖于: 2020年11月17日

更多选项

Apple forbids minor to create an account on their products. Take the phone in say your kid lied and started account using their service. By law assuming you are a parent, they have to remove the account associated with the phone.

Or not I don’t know. I like to hack things and the i-phone is my biggest enemy when it is cloud locked. There really is no way to get around it. Unless you have inside help. Or you think out side the box. :)

这个答案有帮助吗？

是否

得分 2

添加一条评论

Kenneth shawn @jj14378 声誉积分: 67 4 2 · Answer 2 · 2020-01-28T12:58:30-07:00

Kenneth shawn @jj14378

声誉积分: 67

4

2

发帖于: 2020年1月28日

更多选项

Does the cpu store icloud lock on it and would the new cpu need to be reprogrammed before installing the new one on the logic board because I have a iPhone 6 that's icloud locked im trying to find ways to unlock by hardware some people said I would need a new cpu and then reprogram the cpu to the board I'm not sure if that's true but also the a new logic board for iPhone 6 is quite expensive

这个答案有帮助吗？

是否

得分 1

1条评论:

The CPU doesn't store data. The Apple iCloud activation server checks the iPhone nand storage drive for the serial number of the device, once it knows the serial, it then checks a database on their side to see if it is assigned to an email address. No email address means its not tied to an account, so you pass step 1 and move on to step 2 where it checks the integrity of the device, if the WiFi and BT Mac addresses match and the baseband/baseband pmic/eeprom/logic all check out, you are free to continue through to the setup/activation process. If there's an email address in the database, well you already know what happens. You would need to replace the CPU, baseband, baseband power ic, eeprom and nand. The CPU is unable to be written to, so you write the data to the board/eeprom and let the CPU update itself with the new info, you also need to update the nand with valid info from a dead/decomissioned iPhone. It is not at all affordable to go this route, you are better off buying the replacement board or you could sell the device for parts. The 6 is too old to undergo any real modifications or updates. Used iPhone 6 in working order can be purchased for as little as $50-$100 and board repair/upgrades are more than that. I would charge at least 2-3x as much as it costs to buy another IPhone 6 in order to swap & program those chips for you. It took me about 3 years of 8-12 hour days in the business to be qualified to do that task and even still to this day I can mess it up permanently if im not careful.

由 butterfries 完成的 2020年8月24日

添加一条评论

iPhone 6s修理

iCloud lock removal by hardware replacement possible?

3个答案

添加你的答案