iPod touch prototypes
On the right: Fifth generation iPod touch, PROTO1 stage
On the left: Sixth generation iPod touch, DVT stage
The fifth generation unit features laser marks on the device and a double line of holes for the speaker.
This unit was the first iPod touch to feature the lightning connector as well. Previous stages of the same unit feature legacy 30 pin dock connector.
The sixth generation unit features holes on the chassis to allow easy access to RF interfaces on the main board and battery logic board. It was likely used by FCC as part of the model compliance validation process.
Both units run a nonUI version of iOS, used in factories to run tests on development units, named SwitchBoard:
They run their release base version, 6.0 for the 5th generation and 8.3 for the 6th generation.
It’s quite curious how Apple introduced a new boot logo for development devices, getting rid of the skeuomorphic gear in favor of a flat gear icon, almost in the same period as the normal iOS migration, with iOS 7.
The Factory OS proves once more that this unit was initially planned to feature a combination of both #FaceID and #TouchID, two biometric authentication systems that were never seen together yet.
“Mesa” is the codename for the TouchID - fingerprint sensor.
On this unit, produced during a stage really close to mass production, Touch ID is absent, but tools are still present on the file system.
I wanted to share with you some details about the #TouchID security system, implemented across 2013 #iPhone 5S all the way up to 2020 iPhone SE 2nd Gen (and many #iPad and #MacBook models as well).
1/ TouchID is a security system handled by Secure Enclave Professor (SEP).
2/ it has seen improvements over the years.
Technically speaking, TouchID is nothing more than an under-glass Camera that captures pictures of the finger used to unlock the device. The metal ring around the button is capable of detecting the finger.
3/ Apple is probably working on a solution to move it under display.
Left: under display TouchID patent (Apple)
Right: Touch ID original patent
This is a thread on what we know about Apple’s prototyping and development process of manufactured products.
1/ All info here could be incomplete/wrong/outdated. I may (or may not) update this thread in future if I have enough things to share 😁 #AppleInternal#AppleCollection
2/ First of all, by digging into Apple’s internal assets, we almost immediately come across acronyms like EVT, DVT, PVT, OQC, DOE.
So what do those stand for?
Let’s take a few steps back.
In the industry environment, these process follow some sort of a standardized path:
3/ At Apple, a Golden Line is set up, consisting in a prototype assembly that serves as a reference for all other lines that are set up after it.
This line is to be considered as a template, which develops up to its ‘perfection’ and gets locked right after.
@axi0mX’s #checkm8 is out and let’s you debug your device (up to A11).
But how is this done?
Here is a little thread on dumping the bootrom (SecureROM) on demoted devices with Apple’s official tools.
1/ connect the cable using the correct lighting orientation and launch astris
2/ select the CPU you want to work on (in this case, we’ll select CPU0) and halt it.
As result, astris will provide the output containing the selected CPU’s registers with their content.
We can now use the debugger to copy the content from the memory region
3/ use the command ‘save’ followed by the destination filename on the host, the address of the SecureROM and the size of the desired region to be copied (512kb are enough)