By lex and ParrotGeek.

ZiPhone uses an original patch for iPhone OS 2.0 beta 2 and 3 to activate lockdownd and bypass the pink activation screen.

It works by changing iPhone1,2 and iPod2,1 to iPhone1,1 and iPod1,1. Seriously that's it. There is a routine in lockdownd I found that checked hw.model and if iPhone1,2 or iPod2,1 were found it automatically activated the device. This is the only routine in lockdownd that specifies the iPhone 3G and iPod Touch 2G, so simply searching for these strings and replacing them with 1,1 will make lockdownd automatically activate as ParrotGeek theorized.

This might work on iPhone OS 1.2 beta, but I don't have an IPSW file to see if the routine is there.

System Requirements


mac MD5: 4a7b59dd97ea843bc47036105da1f017


Step 1

Cd into the extracted release directory. These are the files it contains:

Step 2

Once patched, replace /usr/libexec/lockdownd on iPhone OS 2.0 beta 2 or 3 with the patched one. That's it, your device is activated. No more pink iTunes screen, no more depending on Apple for activation.