heres a preview of my thourough disection of the ipod firmware

ive been studying ipod firmware 19.8.1.3 using xvi32 these are my notes

0x0A seems to be a verry common end of data bit possible EOF?

line 5e10 - IPODRESOURCEFAT16
Fat16? That could come in use, fat16 partitions have a standard header.
Could be used to verify a successfull decryption

line 61ed - character sets
Characters are printed in hex:
00 01 02 01 03 -> FF

 line 63F1 - character set again
00 02 01 02 -> FF
after FF there is another FF. is it like null termination?

 ... lots more character sets with different seperating numbers.

line E012 - Ipod resources
each letter sepperated by 0x00

 ... 0x00s

line 127F6 - data starts again with multiple references to
 miles xml (http://www.miles8.com/xna/)? <http://www.miles8.com/xna/>
calorie(always seprated by other bits)
calorie.x (always seprated by other bits) xml?
 I'm thinking mabe a bitswapping alogrithim (moving places)

 line 12FDB - start of xml data
category="calorie"
Appears to be the language data for things like menu names, etc
vp... items, control handlers? Could be usefull in a buffer overflow.

 140A6 - start of zeros

147FF - end of zeros
xml data relating to multilingual nike running thinggi.
again more vptriggers possible buffer overflows.

 15801 - start 0's

15FF - end 0's
more xml data same kinda thing as above.

 1707E - start 0's

177FF - end 0's, more xml data relating to nike running thing

188AA - start 0's

18FFF - end 0's
I think each 1 of these nike xml files are different pages on the ipod.

1A054 - start 0's

1A7FF - end 0's
more xml data for nike (YAWN im sick of bloody nike)

to be continued in next message

On 9/15/07, Emmanuel Fleury <[EMAIL PROTECTED]> wrote:
>
> Emmanuel Fleury wrote:
> >
> > PS: I'm still fighting against this WebDAV crap !!!
>
> Finally done... I went back to the bzip2 format... don't ask me why but
> it worked (I guess it has something to do with the file checksum,
> changing the name is not enough):
>
> Get it at:
> http://www.labri.fr/~fleury/download/ipodnano/firmwares-nano.tar.bz2
>
> This archive is complete and has a proper script that must work properly.
>
> Sorry for this long long serie of "Yes, it's uploaded", "No, it's not",
> "Yes, it is", "No, it's not", ... :)
>
> Regards
> --
> Emmanuel Fleury
>
> I worry about my child and the Internet all the time, even though
> she's too young to have logged on yet. Here's what I worry about.
> I worry that 10 or 15 years from now, she will come to me and say
> 'Daddy, where were you when they took freedom of the press away
> from the Internet?'.
>   -- Mike Godwin
>
> _______________________________________________
> Linux4nano-dev mailing list
> Linux4nano-dev@gna.org
> https://mail.gna.org/listinfo/linux4nano-dev
> http://www.linux4nano.org
>



-- 
We explore... and you call us criminals.
We seek after knowledge... and you call us criminals.
We exist without skin color, without nationality, without religious bias...
and you call us criminals.
You build atomic bombs, you wage wars, you murder, cheat, and lie to us and
try to make us believe it's for our own good...
....yet we're the criminals.

____________WAUSHARE ROX ______________
Join the dark side we've got cheese
Annoying people since 1992
If you hate me, I love you too. It ain't my fault I'm better than you
Save Water, Drink Beer
God Made Women First, Then He Had A Better Idea.
If Barbie is soo popular...how come you have to buy her friends?
Don't play stupid with me... I'm better at it!
You were so cute when you were a baby...What happened?
My folks were always asking me to wear underpants. What am I, the pope?
I'm calling the police!... Right after I flush some tings.
Join the army, see the world, meet interesting people, and kill them.
_______________________________________________
Linux4nano-dev mailing list
Linux4nano-dev@gna.org
https://mail.gna.org/listinfo/linux4nano-dev
http://www.linux4nano.org

Reply via email to