From ee7850c9967e00a7eb02625fd47d100bc8ce1806 Mon Sep 17 00:00:00 2001 From: Eric Brian Anil <38664231+EricBrianAnil@users.noreply.github.com> Date: Tue, 1 Oct 2019 15:28:40 +0530 Subject: [PATCH 01/13] rectified a grammatic error rectified a grammatic error in line 113 --- JAILBREAK-GUIDE.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/JAILBREAK-GUIDE.md b/JAILBREAK-GUIDE.md index 17dc5e91..00dba0d7 100644 --- a/JAILBREAK-GUIDE.md +++ b/JAILBREAK-GUIDE.md @@ -97,7 +97,7 @@ You must answer No to create a 24Kpwn IPSW using redsn0w. If you did this correc ### Compatibility with older iOS versions -Newer phones might not support some older versions of iOS. You cannot brick your phone by attempting to restore an older version of iOS, so it might be worth it to try anyway. If iTunes restore fails with Error 28, the hardware of your phone is not compatible with that version of iOS. +Newer iphones might not support some older versions of iOS. You cannot brick your phone by attempting to restore an older version of iOS, so it might be worth it to try anyway. If iTunes restore fails with Error 28, the hardware of your phone is not compatible with that version of iOS. | Manufactured | Error 28 | Success | |--------------|------------|------------| @@ -110,7 +110,7 @@ Newer phones might not support some older versions of iOS. You cannot brick your | Week 36 2011 | 3.x | 4.0+ | | Week 26 2012 | 3.x, 4.x | 5.0+ | -You can find the week and year of manufacture by looking at the serial number of your phone. If your phone is from 2011 or 2012, help me expand this list and let me what versions worked or didn't work. +You can find the week and year of manufacture by looking at the serial number of your phone. If your phone is from 2011 or 2012, help me expand this list and let me know what versions worked or didn't work. ### Decoding iPhone 3GS serial number From 471d350eed06934bd782bd4cd1c956857eb0037c Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Tue, 1 Oct 2019 15:08:27 -0500 Subject: [PATCH 02/13] Added Dependency for Python 2.7 simple one line change --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 9415c2c1..fe3d6d5e 100644 --- a/README.md +++ b/README.md @@ -56,7 +56,8 @@ This tool should be compatible with Mac and Linux. It won't work in a virtual machine. -* libusb, `If you are using Linux: install libusb using your package manager.` +* libusb `If you are using Linux: install libusb using your package manager.` +* Python 2.7 `Python 3 is NOT backwards compatible` * [iPhone 3GS iOS 4.3.5 iBSS](#ibss) From 2ff24c5732a15e43425a4a3e701dbb13efaf2352 Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Tue, 1 Oct 2019 15:09:27 -0500 Subject: [PATCH 03/13] Fancied README for SoC support Enhanced markdown for a nested list (for tidiness) --- README.md | 26 +++++++++++++++++++++++--- 1 file changed, 23 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index fe3d6d5e..a1e4f335 100644 --- a/README.md +++ b/README.md @@ -13,9 +13,29 @@ * allows dumping SecureROM, decrypting keybags for iOS firmware, and demoting device for JTAG -* current SoC support: s5l8947x, s5l8950x, s5l8955x, s5l8960x, t8002, t8004, t8010, t8011, t8015 - -* future SoC support: s5l8940x, s5l8942x, s5l8945x, s5l8747x, t7000, t7001, s7002, s8000, s8001, s8003, t8012 +* current SoC support: + - s5l8947x + - s5l8950x + - s5l8955x + - s5l8960x + - t8002 + - t8004 + - t8010 + - t8011 + - t8015 + +* future SoC support: + - s5l8940x + - s5l8942x + - s5l8945x + - s5l8747x + - t7000 + - t7001 + - s7002 + - s8000 + - s8001 + - s8003 + - t8012 * full jailbreak with Cydia on latest iOS version is possible, but requires additional work From 94c60f3f7384bc7ca8d2277b47d3cb20e9043495 Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Tue, 1 Oct 2019 15:16:07 -0500 Subject: [PATCH 04/13] fixed grammar again wanted to credit the original suggestion so I just merged --- JAILBREAK-GUIDE.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/JAILBREAK-GUIDE.md b/JAILBREAK-GUIDE.md index 00dba0d7..cc79f046 100644 --- a/JAILBREAK-GUIDE.md +++ b/JAILBREAK-GUIDE.md @@ -97,7 +97,7 @@ You must answer No to create a 24Kpwn IPSW using redsn0w. If you did this correc ### Compatibility with older iOS versions -Newer iphones might not support some older versions of iOS. You cannot brick your phone by attempting to restore an older version of iOS, so it might be worth it to try anyway. If iTunes restore fails with Error 28, the hardware of your phone is not compatible with that version of iOS. +Newer iPhones might not support some older versions of iOS. You cannot brick your phone by attempting to restore an older version of iOS, so it might be worth it to try anyway. If iTunes restore fails with Error 28, the hardware of your phone is not compatible with that version of iOS. | Manufactured | Error 28 | Success | |--------------|------------|------------| From 02907f2982a3f6e3d3db0ece137ae3734bb22c12 Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Tue, 1 Oct 2019 19:54:48 -0500 Subject: [PATCH 05/13] Some housekeeping, restructuringm aesthetic things Changes in this commit exclusive to README.md: - Condensed lists - Reformatted some important messages - Switched some links to be embedded in existing text for cleanliness {see Tutorial and iBSS} - Fixed case - Probably did some deleting of extraneous line breaks but idk --- README.md | 36 ++++++++---------------------------- 1 file changed, 8 insertions(+), 28 deletions(-) diff --git a/README.md b/README.md index a1e4f335..4996b09b 100644 --- a/README.md +++ b/README.md @@ -7,12 +7,9 @@ ## checkm8 -* permanent unpatchable bootrom exploit for hundreds of millions of iOS devices - -* meant for researchers, this is not a jailbreak with Cydia yet - -* allows dumping SecureROM, decrypting keybags for iOS firmware, and demoting device for JTAG - +* Permanent, unpatchable bootrom exploit for hundreds of millions of iOS devices +* Meant for researchers, **this is not a jailbreak with Cydia yet** (see below) +* Allows dumping SecureROM, decrypting keybags for iOS firmware, and demoting device for JTAG * current SoC support: - s5l8947x - s5l8950x @@ -23,7 +20,6 @@ - t8010 - t8011 - t8015 - * future SoC support: - s5l8940x - s5l8942x @@ -36,8 +32,8 @@ - s8001 - s8003 - t8012 - -* full jailbreak with Cydia on latest iOS version is possible, but requires additional work + +*Full (Cydia-inclusive) jailbreak on any iOS version is possible, but requires additional work* ## Quick start guide for checkm8 @@ -56,19 +52,12 @@ ## Features * Jailbreak and downgrade iPhone 3GS (new bootrom) with alloc8 untethered bootrom exploit. :-) - * Pwned DFU Mode with steaks4uce exploit for S5L8720 devices. - * Pwned DFU Mode with limera1n exploit for S5L8920/S5L8922 devices. - * Pwned DFU Mode with SHAtter exploit for S5L8930 devices. - * Dump SecureROM on S5L8920/S5L8922/S5L8930 devices. - * Dump NOR on S5L8920 devices. - * Flash NOR on S5L8920 devices. - * Encrypt or decrypt hex data on a connected device in pwned DFU Mode using its GID or UID key. @@ -88,18 +77,13 @@ This tool can be used to downgrade or jailbreak iPhone 3GS (new bootrom) without ## Exploit write-up -Write-up for alloc8 exploit can be found here: - -https://github.com/axi0mX/alloc8 +Write-up for alloc8 exploit can be found [here](https://github.com/axi0mX/alloc8) ## iBSS -Download iPhone 3GS iOS 4.3.5 IPSW from Apple: - -http://appldnld.apple.com/iPhone4/041-1965.20110721.gxUB5/iPhone2,1_4.3.5_8L1_Restore.ipsw - -In Terminal, extract iBSS using the following command, then move the file to ipwndfu folder: +* Download [iPhone 3GS iOS 4.3.5 IPSW](http://appldnld.apple.com/iPhone4/041-1965.20110721.gxUB5/iPhone2,1_4.3.5_8L1_Restore.ipsw) from Apple +* In Terminal, extract iBSS using the following command, then move the file to ipwndfu folder: ``` unzip -p iPhone2,1_4.3.5_8L1_Restore.ipsw Firmware/dfu/iBSS.n88ap.RELEASE.dfu > n88ap-iBSS-4.3.5.img3 @@ -109,13 +93,9 @@ unzip -p iPhone2,1_4.3.5_8L1_Restore.ipsw Firmware/dfu/iBSS.n88ap.RELEASE.dfu > ## Coming soon! * Reorganize and refactor code. - * Easier setup: download iBSS automatically using partial zip. - * Dump SecureROM on S5L8720 devices. - * Install custom boot logos on devices jailbroken with 24Kpwn and alloc8. - * Enable verbose boot on devices jailbroken with 24Kpwn and alloc8. ## Disclaimer From 1c6f1bda0ef217743b3d48f666a9cb30d376471d Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Tue, 1 Oct 2019 20:01:08 -0500 Subject: [PATCH 06/13] Condensing and indention Condensed numbered list in the Quick Start guide to fit markdown numbered list support Tabbed code in iBSS for uniform indention (hopefully this works) --- README.md | 15 +++++---------- 1 file changed, 5 insertions(+), 10 deletions(-) diff --git a/README.md b/README.md index 4996b09b..0cfc9c47 100644 --- a/README.md +++ b/README.md @@ -38,14 +38,10 @@ ## Quick start guide for checkm8 -1. Use a cable to connect device to your Mac. Hold buttons as needed to enter DFU Mode. - -2. First run ```./ipwndfu -p``` to exploit the device. Repeat the process if it fails, it is not reliable. - +1. Use a cable to connect device to your Mac or Linux machine. Hold buttons as needed to enter DFU Mode. +2. First run ```./ipwndfu -p``` to exploit the device. Repeat the process if it fails, **it is not reliable**. 3. Run ```./ipwndfu --dump-rom``` to get a dump of SecureROM. - 4. Run ```./ipwndfu --decrypt-gid KEYBAG``` to decrypt a keybag. - 5. Run ```./ipwndfu --demote``` to demote device and enable JTAG. @@ -84,10 +80,9 @@ Write-up for alloc8 exploit can be found [here](https://github.com/axi0mX/alloc8 * Download [iPhone 3GS iOS 4.3.5 IPSW](http://appldnld.apple.com/iPhone4/041-1965.20110721.gxUB5/iPhone2,1_4.3.5_8L1_Restore.ipsw) from Apple * In Terminal, extract iBSS using the following command, then move the file to ipwndfu folder: - -``` -unzip -p iPhone2,1_4.3.5_8L1_Restore.ipsw Firmware/dfu/iBSS.n88ap.RELEASE.dfu > n88ap-iBSS-4.3.5.img3 -``` + ``` + unzip -p iPhone2,1_4.3.5_8L1_Restore.ipsw Firmware/dfu/iBSS.n88ap.RELEASE.dfu > n88ap-iBSS-4.3.5.img3 + ``` ## Coming soon! From c2746db93383c42a95fae671522cc5c1d506ab1a Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Tue, 1 Oct 2019 20:04:10 -0500 Subject: [PATCH 07/13] Gave dependencies more priority and bolded a message Dependencies should be at the top imo, for our Linux friends who need to see it. HEY YOU "WEN ETA WINDOWS" KIDS, FUCK OFF --- README.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index 0cfc9c47..10295a7d 100644 --- a/README.md +++ b/README.md @@ -36,6 +36,15 @@ *Full (Cydia-inclusive) jailbreak on any iOS version is possible, but requires additional work* +## Dependencies + +This tool is compatible with macOS and Linux **[NO WINDOWS SUPPORT FOR NOW]**. It won't work in a virtual machine. + +* libusb `If you are using Linux: install libusb using your package manager.` +* Python 2.7 `Python 3 is NOT backwards compatible` +* [iPhone 3GS iOS 4.3.5 iBSS](#ibss) + + ## Quick start guide for checkm8 1. Use a cable to connect device to your Mac or Linux machine. Hold buttons as needed to enter DFU Mode. @@ -57,15 +66,6 @@ * Encrypt or decrypt hex data on a connected device in pwned DFU Mode using its GID or UID key. -## Dependencies - -This tool should be compatible with Mac and Linux. It won't work in a virtual machine. - -* libusb `If you are using Linux: install libusb using your package manager.` -* Python 2.7 `Python 3 is NOT backwards compatible` -* [iPhone 3GS iOS 4.3.5 iBSS](#ibss) - - ## Tutorial This tool can be used to downgrade or jailbreak iPhone 3GS (new bootrom) without SHSH blobs, as documented in [JAILBREAK-GUIDE](https://github.com/axi0mX/ipwndfu/blob/master/JAILBREAK-GUIDE.md). From 4907059f6bf5d934e7443929a084d75d4f344f80 Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Wed, 2 Oct 2019 08:39:47 -0500 Subject: [PATCH 08/13] Added new table of detailed support Detailed support thanks to [this comment](https://github.com/axi0mX/ipwndfu/issues/80#issuecomment-536287246) Nice little markdown table (markdown doesn't support line breaks in tables yet) nice message for wen eta kids. --- README.md | 20 +++++++++++++++++++- 1 file changed, 19 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 10295a7d..a6743925 100644 --- a/README.md +++ b/README.md @@ -32,7 +32,8 @@ - s8001 - s8003 - t8012 - +*(more support information in [Detailed Support](#Detailed Support)* + *Full (Cydia-inclusive) jailbreak on any iOS version is possible, but requires additional work* @@ -54,6 +55,23 @@ This tool is compatible with macOS and Linux **[NO WINDOWS SUPPORT FOR NOW]**. I 5. Run ```./ipwndfu --demote``` to demote device and enable JTAG. +## Detailed Support +| SoC | CPUID | Name | Supported Devices | +|-----------------|--------|-------------|------------------------------------------------------------------------| +| S5L8930 | 0x8930 | A4 | * iPad * iPhone 4 * iPod Touch (4th Gen) * Apple TV (2nd Gen) | +| S5L8947 | 0x8947 | A5 (rev. B) | * Apple TV (3rd Gen) | +| S5L8950 | 0x8950 | A6 | * iPhone 5 * iPhone 5c | +| S5L8955 | 0x8955 | A6X | * iPad (4th Gen) | +| S5L8950/S5L8965 | 0x8960 | A7 | * iPhone 5S * iPad mini 2 * iPad mini 3 * iPad Air | +| T8002 | 0x8002 | S1P S2 T1 | * Apple Watch S1 * Apple Watch S2 * T1 iBridge | +| T8004 | 0x8004 | S3 | * Apple Watch S3 | +| T8010 | 0x8010 | A10 Fusion | * iPad (6th Gen) * iPad (7th Gen) * iPhone 7/7+ * iPod Touch (7th Gen) | +| T8011 | 0x8011 | A10X Fusion | * iPad Pro (2nd Gen) * Apple TV 4K | +| T8015 | 0x8015 | A11 Bionic | * iPhone 8/8+ * iPhone X | + +**If your device is not on this list, it is _NOT SUPPORTED_** +Future device support is being worked on, please be patient. + ## Features * Jailbreak and downgrade iPhone 3GS (new bootrom) with alloc8 untethered bootrom exploit. :-) From 71a181d3322742d81e6ad79f340069fd98e48ce9 Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Wed, 2 Oct 2019 08:44:26 -0500 Subject: [PATCH 09/13] Added table line breaks hopefully this works --- README.md | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/README.md b/README.md index a6743925..a325afeb 100644 --- a/README.md +++ b/README.md @@ -56,18 +56,18 @@ This tool is compatible with macOS and Linux **[NO WINDOWS SUPPORT FOR NOW]**. I ## Detailed Support -| SoC | CPUID | Name | Supported Devices | -|-----------------|--------|-------------|------------------------------------------------------------------------| -| S5L8930 | 0x8930 | A4 | * iPad * iPhone 4 * iPod Touch (4th Gen) * Apple TV (2nd Gen) | -| S5L8947 | 0x8947 | A5 (rev. B) | * Apple TV (3rd Gen) | -| S5L8950 | 0x8950 | A6 | * iPhone 5 * iPhone 5c | -| S5L8955 | 0x8955 | A6X | * iPad (4th Gen) | -| S5L8950/S5L8965 | 0x8960 | A7 | * iPhone 5S * iPad mini 2 * iPad mini 3 * iPad Air | -| T8002 | 0x8002 | S1P S2 T1 | * Apple Watch S1 * Apple Watch S2 * T1 iBridge | -| T8004 | 0x8004 | S3 | * Apple Watch S3 | -| T8010 | 0x8010 | A10 Fusion | * iPad (6th Gen) * iPad (7th Gen) * iPhone 7/7+ * iPod Touch (7th Gen) | -| T8011 | 0x8011 | A10X Fusion | * iPad Pro (2nd Gen) * Apple TV 4K | -| T8015 | 0x8015 | A11 Bionic | * iPhone 8/8+ * iPhone X | +| SoC | CPUID | Name | Supported Devices | +|--------------------|--------|-------------|------------------------------------------------------------------------------------| +| S5L8930 | 0x8930 | A4 | * iPad
* iPhone 4
* iPod Touch (4th Gen)
* Apple TV (2nd Gen) | +| S5L8947 | 0x8947 | A5 (rev. B) | * Apple TV (3rd Gen) | +| S5L8950 | 0x8950 | A6 | * iPhone 5
* iPhone 5c | +| S5L8955 | 0x8955 | A6X | * iPad (4th Gen) | +| S5L8950
S5L8965 | 0x8960 | A7 | * iPhone 5S
* iPad mini 2
* iPad mini 3
* iPad Air | +| T8002 | 0x8002 | S1P S2 T1 | * Apple Watch S1
* Apple Watch S2
* T1 iBridge | +| T8004 | 0x8004 | S3 | * Apple Watch S3 | +| T8010 | 0x8010 | A10 Fusion | * iPad (6th Gen)
* iPad (7th Gen)
* iPhone 7/7+
* iPod Touch (7th Gen) | +| T8011 | 0x8011 | A10X Fusion | * iPad Pro (2nd Gen)
* Apple TV 4K | +| T8015 | 0x8015 | A11 Bionic | * iPhone 8/8+
* iPhone X | **If your device is not on this list, it is _NOT SUPPORTED_** Future device support is being worked on, please be patient. From 2d1446fe6335cbfdec3e1f732eeedcb35b0992e0 Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Wed, 2 Oct 2019 11:40:04 -0500 Subject: [PATCH 10/13] hotfix for broken link screw markdown --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index a325afeb..55d4a8ce 100644 --- a/README.md +++ b/README.md @@ -32,7 +32,7 @@ - s8001 - s8003 - t8012 -*(more support information in [Detailed Support](#Detailed Support)* +(more support information in [Detailed Support](#Detailed-Support) *Full (Cydia-inclusive) jailbreak on any iOS version is possible, but requires additional work* @@ -55,7 +55,7 @@ This tool is compatible with macOS and Linux **[NO WINDOWS SUPPORT FOR NOW]**. I 5. Run ```./ipwndfu --demote``` to demote device and enable JTAG. -## Detailed Support +## Detailed-Support | SoC | CPUID | Name | Supported Devices | |--------------------|--------|-------------|------------------------------------------------------------------------------------| | S5L8930 | 0x8930 | A4 | * iPad
* iPhone 4
* iPod Touch (4th Gen)
* Apple TV (2nd Gen) | From aa6a84061715ee31fdd5d8e86aa01954ef2d9718 Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Wed, 2 Oct 2019 11:40:45 -0500 Subject: [PATCH 11/13] again, tried fixing link formatting this time --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 55d4a8ce..22892043 100644 --- a/README.md +++ b/README.md @@ -32,7 +32,8 @@ - s8001 - s8003 - t8012 -(more support information in [Detailed Support](#Detailed-Support) + +*(more support information in [Detailed Support](#Detailed-Support))* *Full (Cydia-inclusive) jailbreak on any iOS version is possible, but requires additional work* From d8468bdd041b44bcd5248b14d0e717bd074a5171 Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Wed, 2 Oct 2019 11:56:08 -0500 Subject: [PATCH 12/13] Added a message just a note about device support. Thinking about restructuring to emphasize the fact the tool shares both 24Kpwn and alloc8 with checkm8 but I'm not sure on how to clarify that. Probably won't, I've already added enough "personal" touches. --- README.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 22892043..46b67bd8 100644 --- a/README.md +++ b/README.md @@ -57,6 +57,8 @@ This tool is compatible with macOS and Linux **[NO WINDOWS SUPPORT FOR NOW]**. I ## Detailed-Support + +This table lists all currently supported devices for the checkm8 exploit: | SoC | CPUID | Name | Supported Devices | |--------------------|--------|-------------|------------------------------------------------------------------------------------| | S5L8930 | 0x8930 | A4 | * iPad
* iPhone 4
* iPod Touch (4th Gen)
* Apple TV (2nd Gen) | @@ -71,7 +73,8 @@ This tool is compatible with macOS and Linux **[NO WINDOWS SUPPORT FOR NOW]**. I | T8015 | 0x8015 | A11 Bionic | * iPhone 8/8+
* iPhone X | **If your device is not on this list, it is _NOT SUPPORTED_** -Future device support is being worked on, please be patient. +Future device support is being worked on, please be patient. +If you have a device older than the iPhone 3GS (the iPhone 3G or original) or newer than the iPhone X (all A12 and A13 devices), this tool will *not* support your device. Not now, most likely not ever. ## Features From 4b0da5da67ac677550d4cf0f1ce50ea716bb88b3 Mon Sep 17 00:00:00 2001 From: Jake Hauser <33241295+DaJakerBoss@users.noreply.github.com> Date: Wed, 2 Oct 2019 14:08:21 -0500 Subject: [PATCH 13/13] unfuck the table fuck markdown --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 46b67bd8..84cfc2f4 100644 --- a/README.md +++ b/README.md @@ -59,6 +59,7 @@ This tool is compatible with macOS and Linux **[NO WINDOWS SUPPORT FOR NOW]**. I ## Detailed-Support This table lists all currently supported devices for the checkm8 exploit: + | SoC | CPUID | Name | Supported Devices | |--------------------|--------|-------------|------------------------------------------------------------------------------------| | S5L8930 | 0x8930 | A4 | * iPad
* iPhone 4
* iPod Touch (4th Gen)
* Apple TV (2nd Gen) |