iPad 3G/WiFi – iPad1,1_5.0.1_9A405_Restore.ipsw
iPad 2 WiFi – iPad2,1_5.0.1_9A405_Restore.ipsw
iPad 2 GSM – iPad2,2_5.0.1_9A405_Restore.ipsw
iPad 2 CDMA – iPad2,3_5.0.1_9A405_Restore.ipsw

iPhone 3GS – iPhone2,1_5.0.1_9A405_Restore.ipsw
iPhone 4 – iPhone3,1_5.0.1_9A405_Restore.ipsw
iPhone 4 CDMA – iPhone3,3_5.0.1_9A405_Restore.ipsw
iPhone 4S – iPhone4,1_5.0.1_9A405_Restore.ipsw

Apple TV 2G – AppleTV2,1_4.4.3_9A405l_Restore.ipsw

I’m a little late with these 5.0.1 links, what with Apple providing it as a delta OTA update. Updating right on the phone is a much smaller download and doesn’t require iTunes at all, so that’s probably the easier way to do it, but these links still may be handy in some situations.

iPad 3G/WiFi – iPad1,1_5.0_9A334_Restore.ipsw
iPad 2 WiFi – iPad2,1_5.0_9A334_Restore.ipsw
iPad 2 GSM – iPad2,2_5.0_9A334_Restore.ipsw
iPad 2 CDMA – iPad2,3_5.0_9A334_Restore.ipsw

iPhone 3GS – iPhone2,1_5.0_9A334_Restore.ipsw
iPhone 4 – iPhone3,1_5.0_9A334_Restore.ipsw
iPhone 4 CDMA – iPhone3,3_5.0_9A334_Restore.ipsw
iPhone 4S – iPhone4,1_5.0_9A334_Restore.ipsw

Apple TV 2G – AppleTV2,1_4.4_9A334v_Restore.ipsw

Here’s the new iOS 5.0 for portable devices, and 4.4 for the second-gen Apple TV.  As always, avoid this if you’re an unlocker.  There currently isn’t a jailbreak available yet.  Save your SHSH blobs now if you think you may ever need to go back to an older version of iOS.

iPad 3G/WiFi – iPad1,1_4.3.5_8L1_Restore.ipsw
iPad 2 WiFi – iPad2,1_4.3.5_8L1_Restore.ipsw
iPad 2 GSM – iPad2,2_4.3.5_8L1_Restore.ipsw
iPad 2 CDMA – iPad2,3_4.3.5_8L1_Restore.ipsw

iPhone 3GS – iPhone2,1_4.3.5_8L1_Restore.ipsw
iPhone 4 – iPhone3,1_4.3.5_8L1_Restore.ipsw
iPhone 4 CDMA – iPhone3,3_4.2.10_8E600_Restore.ipsw

This version patches a certificate chain validation issue in the handling of X.509 certificates. The vulnerability allows an attacker to capture or modify data in sessions protected by SSL/TLS (and possibly other attacks involving X.509 certificate validation). HT4824 has more info. http://issl.recurity.com/ is a test page that will show if your iDevice is vulnerable.

As there’s no untethered jailbreak for 4.3.4+ yet, users wishing to remain jailbroken can install isslfix in Cydia (from BigBoss) to patch this vulnerability without having to upgrade.  4.3.3 + jailbreakme.com + PDF Patcher 2 + isslfix will give you the jailbroken equivalent of 4.3.5.

I once again noticed that the firmware for the Apple TV is a slightly newer version. It’s still listed as 4.3 (as it was when I posted with the 4.3.1 release, but it’s now labeled as “8F455″ instead of “8F202″. It may have changed before this (I manually look through Apple’s XML for these new versions), but this is the first I noticed it.
Apple TV 2G – AppleTV2,1_4.3_8F455_Restore.ipsw

iPad 3G/WiFi – iPad1,1_4.3.4_8K2_Restore.ipsw
iPad 2 WiFi – iPad2,1_4.3.4_8K2_Restore.ipsw
iPad 2 GSM – iPad2,2_4.3.4_8K2_Restore.ipsw
iPad 2 CDMA – iPad2,3_4.3.4_8K2_Restore.ipsw

iPhone 3GS – iPhone2,1_4.3.4_8K2_Restore.ipsw
iPhone 4 – iPhone3,1_4.3.4_8K2_Restore.ipsw
iPhone 4 CDMA – iPhone3,3_4.2.9_8E501_Restore.ipsw

With this version, Apple has only patched the PDF exploit used by jailbreakme.com 3.0. Though it is a remotely exploitable security issue, another major reason for issuing this update is to stop jailbreakers. They’ve already released a tethered jailbreak for 4.3.4, but there’s not really any point to doing it. 4.3.3 + jailbreakme.com + Cydia’s PDF Patcher 2 will get you an untethered jailbreak with the PDF exploit patched. As always, unlockers should be especially careful with new iOS versions and baseband upgrades.

iPad 3G/WiFi – iPad1,1_4.3.3_8J3_Restore.ipsw
iPad 2 WiFi – iPad2,1_4.3.3_8J2_Restore.ipsw
iPad 2 GSM – iPad2,2_4.3.3_8J2_Restore.ipsw
iPad 2 CDMA – iPad2,3_4.3.3_8J2_Restore.ipsw

iPhone 3GS – iPhone2,1_4.3.3_8J2_Restore.ipsw
iPhone 4 – iPhone3,1_4.3.3_8J2_Restore.ipsw
iPhone 4 CDMA – iPhone3,3_4.2.8_8E401_Restore.ipsw

This can be jailbroken (untethered) with the same exploit that was discovered for 4.3.1. redsn0w 0.9.6rc16 fixes a 4.3.3 issue with the iPhone side switch vibration, though the exploit is the same. If you’re an unlocker, you must use a custom IPSW to avoid updating the baseband.

iPad 3G/WiFi – iPad1,1_4.3.2_8H7_Restore.ipsw
iPad 2 WiFi – iPad2,1_4.3.2_8H7_Restore.ipsw
iPad 2 GSM – iPad2,2_4.3.2_8H7_Restore.ipsw
iPad 2 CDMA – iPad2,3_4.3.2_8H8_Restore.ipsw

iPhone 3GS – iPhone2,1_4.3.2_8H7_Restore.ipsw
iPhone 4 – iPhone3,1_4.3.2_8H7_Restore.ipsw

As always, avoid this for now if you’re a jailbreaker and/or unlocker.

iPad 3G/WiFi – iPad1,1_4.3.1_8G4_Restore.ipsw
iPad 2 WiFi – iPad2,1_4.3.1_8G4_Restore.ipsw
iPad 2 GSM – iPad2,2_4.3.1_8G4_Restore.ipsw
iPad 2 CDMA – iPad2,3_4.3.1_8G4_Restore.ipsw

iPhone 3GS – iPhone2,1_4.3.1_8G4_Restore.ipsw
iPhone 4 – iPhone3,1_4.3.1_8G4_Restore.ipsw

I also noticed that the listed firmware for the Apple TV is a slightly newer version than what I had last posted, so here’s that too.
Apple TV 2G – AppleTV2,1_4.3_8F202_Restore.ipsw

As always, avoid this for now if you’re a jailbreaker and/or unlocker.

iPad 3G/WiFi – iPad1,1_4.3_8F190_Restore.ipsw
iPad 2 WiFi – iPad2,1_4.3_8F191_Restore.ipsw
iPad 2 GSM – iPad2,2_4.3_8F191_Restore.ipsw
iPad 2 CDMA – iPad2,3_4.3_8F191_Restore.ipsw

iPhone 3GS – iPhone2,1_4.3_8F190_Restore.ipsw
iPhone 4 – iPhone3,1_4.3_8F190_Restore.ipsw

Apple TV 2G – AppleTV2,1_4.3_8F191m_Restore.ipsw

As always, avoid this for now if you’re a jailbreaker and/or unlocker.

Having done a little addon development in the past, I figured I should be able to use a chrome link to open the default Cookies window without having to go through the Options dialog. After a little experimenting, I found chrome://browser/content/preferences/cookies.xul is the URL you want to use. Cookies is a shortcut that you can drag to your toolbar or anywhere else convenient. This will simply open the “page” to the default Cookies interface. For security reasons, I don’t believe Firefox will allow chrome:// links to work from a webpage, but you can drag it from here to your UI for quick “installation”.

In the future, I may toss this into a simple icon that you can place on your toolbar, but that seems like a lot of work for something so simple. There may even be other “Options” addons that already do this (though I didn’t necessarily want a huge, feature-rich app for this).

Copyright Lawyers Sue Lawyer Who Helped Copyright Defendants

USCG’s attorneys are responsible for suing thousands of people who supposedly downloaded films like The Hurt Locker and Far Cry. Users faced the choice of a $1,500 – $2,500 settlement or fighting it in court (which would probably cost more than $2,500 in lawyer fees).

A lawyer named Graham Syfert of the Affinity Law Firm realized that many people wouldn’t have much choice and would simply pay the settlement, as even fighting it and “winning” would end up costing just as much or more, on top of the possibility of not actually winning the case and facing huge fines (the USCG letter mentions $150,000). Syfert, in collaboration with other attorneys on EFF’s list, put together some fillable PDF forms necessary to fight USCG’s threat, and started selling the pack for $9.99 (it has since gone up to $19.95, though he was originally asking $99.99). So far, 19 people have used Syfert’s package to counter what he calls USCG’s ‘pay-up-or-else’ scheme.

So to sum that up, a big group of lawyers threatened to sue some users for apparently downloading copyrighted movies. They give the user the choice of paying a settlement now or facing huge fines in court, knowing that most users will simply pay the settlement rather than trying to deal with legal issues they don’t understand. That seems to be pretty standard procedure for these sorts of things nowadays. A lawyer who understands the problems users face in a situation like this put together a little self-help pack that people could easily afford and will at least stop USCG from trampling over people because it’s too costly and/or complicated to defend against it.

Well, now USCG is trying to sue Syfert because people used his kit to defend against their accusations.

Yeah, they’re trying to sue a lawyer for providing some generic assistance to people not familiar with law. Stop and think about that for a minute. I really hope this ends up with the legal prohibition of all lawyers…

Obviously, USCG is trying to stop this because it’s hurting their profits. Judges have been denying the motions to quash and motions for protective order, but not the motions to dismiss for a lack of personal jurisdiction. In these cases, USCG would have to refile in different states, adding significant cost to their plan. Because they would have to do more work and spend more money, they obviously don’t want word about this getting out.

Unfortunately for USCG, this sort of thing leads to the Streisand effect with people like me. The legal issues don’t personally concern me, so I wasn’t aware of Syfert’s self-help PDF pack before. However, USCG’s actions anger me on principal alone, so now I want to help spread the word to as many people as possible.