Giulio Zompetti Profile picture
Nov 27, 2022 6 tweets 3 min read
iPod touch prototypes
On the right: Fifth generation iPod touch, PROTO1 stage
On the left: Sixth generation iPod touch, DVT stage ImageImage The fifth generation unit features laser marks on the device and a double line of holes for the speaker.
This unit was the first iPod touch to feature the lightning connector as well. Previous stages of the same unit feature legacy 30 pin dock connector. ImageImageImage
Sep 14, 2021 4 tweets 2 min read
Prototype iPhone X

The Factory OS proves once more that this unit was initially planned to feature a combination of both #FaceID and #TouchID, two biometric authentication systems that were never seen together yet.

“Mesa” is the codename for the TouchID - fingerprint sensor. On this unit, produced during a stage really close to mass production, Touch ID is absent, but tools are still present on the file system.
Oct 20, 2020 4 tweets 4 min read
iPhone 12Pro
iBoot USB_SERIAL_NUMBER
SecureROM USB_SERIAL_NUMBER
#AppleEvent #iPhone12Pro ImageImage iPhone 12
iBoot USB_SERIAL_NUMBER
#AppleEvent #iPhone12 Image
Jul 29, 2020 6 tweets 4 min read
I wanted to share with you some details about the #TouchID security system, implemented across 2013 #iPhone 5S all the way up to 2020 iPhone SE 2nd Gen (and many #iPad and #MacBook models as well).

1/ TouchID is a security system handled by Secure Enclave Professor (SEP). 2/ it has seen improvements over the years.
Technically speaking, TouchID is nothing more than an under-glass Camera that captures pictures of the finger used to unlock the device. The metal ring around the button is capable of detecting the finger.
Jan 15, 2020 12 tweets 5 min read
This is a thread on what we know about Apple’s prototyping and development process of manufactured products.

1/ All info here could be incomplete/wrong/outdated. I may (or may not) update this thread in future if I have enough things to share 😁
#AppleInternal #AppleCollection 2/ First of all, by digging into Apple’s internal assets, we almost immediately come across acronyms like EVT, DVT, PVT, OQC, DOE.
So what do those stand for?
Let’s take a few steps back.
In the industry environment, these process follow some sort of a standardized path:
Sep 28, 2019 10 tweets 5 min read
@axi0mX’s #checkm8 is out and let’s you debug your device (up to A11).

But how is this done?
Here is a little thread on dumping the bootrom (SecureROM) on demoted devices with Apple’s official tools.

1/ connect the cable using the correct lighting orientation and launch astris 2/ select the CPU you want to work on (in this case, we’ll select CPU0) and halt it.

As result, astris will provide the output containing the selected CPU’s registers with their content.
We can now use the debugger to copy the content from the memory region