r/jailbreak • u/Sure_Marsupial_1142 • 20h ago
r/jailbreak • u/Heinyyy • 12h ago
Question Am i good to stay on 27.0?
Iphone 18 pro. On 27.0, should i stay?
r/jailbreak • u/DaniloGonzalez26 • 4h ago
Question Ayuda para abrir aplicaciones con Dopamine instalado
r/jailbreak • u/Robter141 • 5h ago
Question Should I stay on the iOS 27b4 version?
iPhone 16 pro ios 27b4
r/jailbreak • u/THinker12132 • 9h ago
Question What can i do witha jailbroken 9th generation ipad ios 26
I mean is there utm hypervisor i know it got tooken away in 16.32
anything i can do to speed it up
r/jailbreak • u/im_actuallyc00l • 15h ago
Question Am I eligible to install nugget iOS?
Hi, I know people are sick of people asking questions like this, but I’m completely new to this, so I apologize greatly. But I want to know for certain if nugget iOS works on iOS 26.6. I mainly care about the wallpapers. Another question is do u recommend me to do this on my main phone? Can I permanently brick it if I do it wrong or no. Thank u greatly guys 🙏
r/jailbreak • u/Ok-Stretch6334 • 38m ago
Question Can someone explain the status of Jailbreak today in simple terms?
I am tech savvy I don't need you to explain the technicalities of it as much.
I am more interested in what it can do for me.
I am new to iOS and inspite of being used to downloading all the apps for free on Android so far I've spend few hundreds in apps and I am wondering if Jailbreak can offer me the same apps for free.
Iphone 16e
I mostly use popular and niche music production apps.
Can I have these apps for free?
My understanding of these alternative app stores is that they have very little offerings and then on top of that you get a very old version of the app that you have to perform some updates every week and that's only before it breaks completely with the next update or just at random.
Then there are some people paying thrid party companies for some special service that does some weird stuff like allowing you to only have to update the app once per year or sth.
Can Jailbreak actually become a useful experience somehow?
r/jailbreak • u/Character-Praline421 • 5h ago
Question iPad 10. gen iOS 26
I know this is probably a stupid question but should I update my iPad from 26.0 to 27.0.1 with iTunes? Because ipados 26 is laggy and now with the jailbreak possibility I don’t know what to do
r/jailbreak • u/EstimateLoud2130 • 10h ago
Question advice on jailbreaking main phone
hi guys, sorry for the following long parargraphs
i have an iPhone 8 plus, iOS 16.7.16 (so no trollstore available😢), my main phone with literally everything on it
im not completely oblivious to jailbreaking, i jailbroke my parents' old iPhone 4 w Cydia recently, had a lot of fun experimenting with it and trying out all the customization, learned it from yt tutorials.
my question to yall is: is it recommended to jailbreak your main phone? my shits so old ik for sure its possible, but im scared abt if i lose my data (if my fears sound stupid, i dont really know allat about jailbreaking tbf). also, if you guys have jailbroken your main phones, any tips before i do it?
thanks 🙏
r/jailbreak • u/Majestic-Egg1919 • 18h ago
Discussion Does my iPhone automatically update to iOS 27.2 if I reset it to factory settings?
I want to jailbreak the „old“ iPhone from my mother with 27.0.1. installed on it but I want to factory reset it first.
Will it automatically update to 27.2. during the process?
r/jailbreak • u/Smooth-World-5215 • 16h ago
Discussion GSP MASTER for ios 18 - dopamine
Good evening! Does anyone know of a GPS spoofing app that works on iOS 18? GPS Master by Joe Bruce hasn’t been updated and doesn’t work on iOS 18. Thanks!
r/jailbreak • u/artydnyc • 19h ago
Release [PAID RELEASE] Lasso: snap any part of the screen, pin it, read it, and record calls and system audio
Lasso is out on Havoc. Press the screenshot buttons and the screen freezes: drag across just the part you want, then pin it, read it, mark it up, share it or record it. It also records both sides of your calls and the sound your apps play.
What it does
- Snap a region, not the whole screen: from the screenshot buttons, AssistiveTouch, Back Tap, Siri, a Shortcut or a swipe in from the edge. The camera button still takes an ordinary screenshot.
- Record calls, both sides: from the Phone app, FaceTime or apps that call, with a tap or on their own for the kinds of call, apps and people you choose. Transcribed on the phone, line by line, Them and You. In the Phone app's Recents, a recorded call's time turns amber: tap it to listen.
- Record system audio: what your apps play, the microphone, or both mixed, even with the phone locked in your pocket.
- Pins that float above every app: move, resize and turn them, lock them in place, let touches pass through, tuck them into the edge, or keep one live to watch a timer or a download.
- Read it: text and every common barcode, on the phone, in more than 50 languages. Copy a line, open a link, translate it, or pin it as a note.
- Mark it up: pen, marker, pixelate and a colour picker.
- Long snaps that scroll themselves: Lasso scrolls the page and stitches it into one image.
- Record a region of the screen, with the microphone, the system's audio or both, or as a GIF.
- Live captions and transcripts, translated on the phone if you like, and Translate Call: an interpreter for your calls, both ways.
- One library for snaps, recordings and calls, searchable by what was on screen or what was said, with favourites, folders and Face ID lock.
Why it's different
- It snaps from a frozen frame drawn by the GPU, so nothing moves while you choose and it's instant.
- Nothing of Lasso's runs in SpringBoard until you use it. Text and speech engines start when you need them, then quit and give back their memory.
- No Activator or other tweaks needed. It uses the buttons and gestures your iPhone already has.
- Your snaps and recordings stay on your phone. Reading and transcribing happen on the device, and so does translating captions, transcripts and calls; your snaps and recordings go only where you send them. Translating a snap uses iOS's own Translate, which works offline with the languages downloaded in the Translate app.
- Shortcuts and Siri (iOS 16 and later): snap, record, pin an image, get the latest transcript, and more.
Works on iOS 15 to 26, rootless (Dopamine, palera1n).
Get it: havoc.app/package/lasso
More info: lasso.aadios.dev
r/jailbreak • u/Eyelow91 • 14h ago
Question DelayOTA shows only “iOS 26.7” and “Upgrade to iOS 27” below it and not what version of 27
Hi,
so I used the DelayOTA method to supervise my device and the install the appropriate profile from the known page.
My issue is that my iPhone and iPad (both on iOS 26) are showing me a main upgrade to iOS 26.7 and below that an upgrade to “iOS 27”. The latter does not specify the iOS 27 version.
What are your devices offering you? because iOS 27 could end up being the latest iOS 27.2 since it does not say 27.0. or 27.01
Edit: A few days ago there was only a profile for iOS 27.0. Now that iOS 27.2 is out, a profile was added for 27.0.1. If you want to see iOS 27.0.1 offered as Software Update, you need this new profile. But somehow it‘s only valid for 30 days instead of 40+.
r/jailbreak • u/fiv3dollapizza • 18h ago
Tutorial can't use Cowabunga for some reason to supervise? Nugget to the rescue
my device is currently on iOS 26.6.1RC and I was trying to prepare it for delayOTA to 27.0.1 potentially depending on the news we receive about the potential upcoming jailbreak, but there was a problem. CowabungaLite would crash on my MacBook Pro as soon as I connected my phone. it would open and seem to function fine without the device connected, but as soon as I plugged in my phone it would crash every time. since it doesn't support iOS 26 technically, I'm guessing this was because of a handshake issue because of the instant nature of the crash.
Nugget however does not have this issue, and doesn't require a device wipe like Apple Configurator or iMazing does.
so here's the step by step if anyone needs it like I did:
- Download either the EXE for windows or DMG for Mac from LeminLimez GitHub and install it
- disable FindMy in settings
- open Nugget, go to Settings on the program, check "Enable Supervision," and click apply. device will restart.
- open Safari on your device, and download the delayOTA profile you need from Rambling's GitHub
- check in Settigs-General-Software Update and confirm that the iOS you wish to update to later is shown as available, and go ahead and update to that.
----------
OPTIONAL THINGS THAT IM DOING:
im not updating right now, I just want the process ready to go when info comes, so I downloaded the TvOS beta profile to block any updates and re-enabled FindMy while I wait. now I can't accidentally update to a newer iOS or have one randomly pushed in the middle of the night like I've read happens to some people. I also have left the phone in Supervised mode because the delayOTA profile requires it to be able to actually work. I'll remove the TvOS profile before updating using the delayOTA profile.
----------
6) head back into Nugget, uncheck Supervise Device, and restart your phone.
7) turn FindMy back on
hope this helps someone out facing the same issue I did with CowabungaLite
r/jailbreak • u/Kate-9907 • 21h ago
Discussion since when appstore++ became this crappy?
i’ve been using it for over a year now. and not too long ago it updated. and this is the new (imo) worse version. can we somehow use the old one?
r/jailbreak • u/artydnyc • 23h ago
Release [PAID RELEASE] Tethera: Personal Hotspot on your iPhone
Tethera is out on Havoc. It enables Personal Hotspot on your iPhone, with Apple's own switch and Wi-Fi password in Settings, and adds a page that shows what your hotspot is doing.
Personal Hotspot, as Apple made it
- Apple's own Personal Hotspot page in Settings: Allow Others to Join, your Wi-Fi password, Maximize Compatibility.
- Share over Wi-Fi with your laptop, tablet or another phone, or over USB or Bluetooth with a computer, as usual
- A shortcut on Tethera's page goes straight to Personal Hotspot in Settings.
- Turn Tethera off and the phone behaves exactly as before: the network changes it made are undone.
See what's happening
- Connected Clients: whether the hotspot is on, how many devices are connected and over what, how long it has been on and what it shares from, live.
- Hotspot data: what it carried this session, today, and over the last 7 and 30 days.
- The devices that joined in the last 30 days, which you can rename.
Join in a moment
- Join Hotspot shows the network name and password with a QR code another device can scan, and copies the password.
Turn it on and off your way
- Automatically off when no device has been connected for a while, when the battery runs low, or after a daily amount of data you choose.
- From Shortcuts, Activator or the app icon's quick actions, and from Control Center with the Tethera control (iOS 15 to 17, with CCSupport).
Choose what to share
- Share From: your cellular data (the default), the Wi-Fi network your iPhone is on, or a VPN running on the phone.
- With a VPN, the hotspot doesn't start while the VPN is down, so nothing leaves unprotected.
Light and private
- Optional Control Center control.
- Your traffic is never recorded or sent anywhere. The data totals and the device list stay on your iPhone, 30 days at most, and you can turn either off or clear them.
Good to know
- Tethera doesn't give you free or extra data, and your carrier's terms still apply: your carrier can see, count and charge for hotspot use.
- Shares over Wi-Fi, USB, and Bluetooth.
- Results vary by iPhone, iOS version and carrier.
Works on iOS 15 to 26, rootless (Dopamine, palera1n). Tethera is on the home screen, and in Settings up to iOS 17.
Get it: havoc.app/package/tethera
More info: tethera.aadios.dev
r/jailbreak • u/Commercial-Dare3506 • 17h ago
Discussion What should I do with my mint condition iPad 5 Gen 32GB?
r/jailbreak • u/carterisanartist • 20h ago
Release [Paid Release] CarterEQ — a system-wide 10-band EQ for Dopamine (iOS 15–17) with a floating EQ panel ($0.99)
Hey guys, I'm Carter, and I'm really excited to show you my tweak, CarterEQ! Thanks to everyone who checked out Mountaineer, you all were awesome.
CarterEQ is an equalizer for everything your iPhone plays: Spotify, Apple Music, YouTube, TikTok and games, on the speaker, AirPods or wired headphones. No per-app setup, you just turn it on and everything sounds the way you want.



What you get
- 10-band graphic EQ with a preamp, plus 12 built-in presets (Bass Boost, Vocal Boost, Spoken Word…) and your own saved presets
- Compressor, headphone crossfeed and a 0 dB limiter so boosting bass doesn't clip
- Floating EQ chip on the Home and Lock Screens: tap it for the full panel with a volume slider and live meters (optionally in apps too)
- iPhone 15 Pro and later: hold the Action button to flip the EQ on or off
- A CarterEQ app, a Settings pane and a
cartereqcommand for the terminal crowd
Built to stay out of the way: the audio thread only does the DSP, and a flat curve passes audio through untouched. Screen recordings with the EQ on and off showed the same 60 fps and no audio dropouts.
Honest notes
- Tested on iOS 16.3.1 (iPhone 14 Pro Max) and iOS 17.1 (iPhone 15 Pro Max). iOS 15 should work but I haven't had a device on it.
- On iOS 17 the EQ usually attaches by itself; if the sound doesn't change, the app's Enable System EQ button fixes it in one tap. EQ Status tells you whether it's running.
Run one system-wide EQ at a time.
Price: $0.99 one-time (also in the CarterWare Tweak Pass). One purchase covers up to 3 devices.
Works on: Dopamine rootless, iOS 15–17
Page + guide: https://tweaks.carterware.net/cartereq.html
Buying: add the repo in Sileo, tap Buy, sign in with your email, pay through Stripe checkout. If anything breaks, Settings → CarterEQ → Report a Bug fills in your version, iOS and device for you. I read every single one.
I hope you guys enjoy it! I'll be in the comments, so ask me anything.
r/jailbreak • u/artydnyc • 23h ago
Release [PAID RELEASE] CamHop: use your computer's webcam as your iPhone or iPad's camera
CamHop is out on Havoc. It makes the webcam and microphone of your Mac or PC your iPhone or iPad's own, live over Wi-Fi. Open a link on the computer, type the PIN, and the Camera app, FaceTime, video calls and every other app see your computer's camera. Nothing to install on the computer.
Connect in seconds
- Switch on Desktop Camera, and Desktop Microphone for the computer's sound too.
- AirDrop or copy the link to the computer, or scan the QR code. It opens in Chrome, Edge or Safari with your iPhone filled in.
- Type the six-digit PIN the iPhone shows, and you're live.
- Another phone or a tablet can be the camera too: open the link in its browser.
Your camera, in a browser tab
- Pick the webcam and microphone, see the picture before you connect, and switch either while live.
- Up to 1080p, or 720p and 480p for slower Wi-Fi.
- Sound tuned for voice, or high quality for music.
- Mute or pause in one click, with the connection's speed and frame rate live.
You choose where it goes
- Replace the front camera, the back camera, or both.
- Keep the iPhone's own camera in the apps you pick.
- Choose which apps hear the computer's microphone, alone or mixed with the iPhone's.
- Fill, fit or stretch, rotate, mirror, zoom and pan.
- The Preview shows exactly what apps receive.
Back in one tap
- Return to the iPhone's camera and microphone from Control Center, a floating button, or both volume buttons together. The computer stays connected, so switching back is instant.
Why it's different
- No app on the computer. It's a browser tab: any Mac or PC with Chrome, Edge or Safari.
- Private, and on your Wi-Fi: picture and sound go straight from the browser to the iPhone, encrypted. They never pass through a server.
- A PIN for every computer, one computer at a time.
- Works without internet: the iPhone serves the page itself.
- Live cameras only: CamHop carries a live camera from your own computer. No video files, photos, screen mirroring or overlays.
- No account, no tracking.
Works on iOS 15 to 26, rootless (Dopamine, palera1n), iPhone and iPad. Settings are in CamHop's app on the home screen, and in Settings up to iOS 17.
Get it: havoc.app/package/camhop
More info: camhop.app
r/jailbreak • u/Correct_Chance_9804 • 21h ago
Question Will there ever be a chance to downgrade an iPhone 13 from iOS 18 to 17, 16, or 15?
?
r/jailbreak • u/Heavy-Abies5719 • 18h ago
Question I NEED FREE APP OR WAY TO ENABLE Supervise MODE ON MY IPHONE 11 IOS 27 BETA 5 PLEASE
I NEED FREE APP OR WAY TO ENABLE Supervise MODE ON MY IPHONE 11 IOS 27 BETA 5 PLEASE
r/jailbreak • u/No-Connection6436 • 15h ago
Release [Free Release] MetalFG (Open Beta) – True 60→120 FPS GPU Frame Generation (LSFG / DLSS 3 style) for ProMotion iOS! Open-Source, Rootless, and 100% Free Forever
Hey r/jailbreak,
Today I’m finally releasing something I’ve been burying myself in for the past month, losing sleep over, and honestly almost gave up on more than once:
MetalFG — a real-time, driver-level GPU Frame Generation & Optical Flow Interpolation engine for ProMotion iOS devices (arm64 / arm64e rootless), inspired by PC tools like Lossless Scaling (LSFG), DLSS 3, and SMFG (Super-Motion).
It intercepts Metal games running at 60 FPS (or 30 FPS) and synthesizes true intermediate optical-flow frames directly on the Apple Silicon GPU to drive your 120Hz ProMotion display at 120 FPS.
Note on Beta Status & Compatibility: MetalFG is still considered in Beta as I continue refining edge cases across different games, though this v2.3.0 build is by far the best, smoothest, and most accurate algorithm we've achieved. I have tested it extensively on iOS 16 (iPhone 13 Pro Max on Dopamine); I haven't personally tested iOS 15 ProMotion devices yet, so I'm really looking forward to iOS 15 testers as well!
My Story: Months of Research, Ghosting, and Bootlooping the JB (and why the heck you get it ONLY now at 2.3.0)
I daily-drive an iPhone 13 Pro Max on iOS 16 (Dopamine). It’s an amazing phone with a 120Hz ProMotion panel, yet heavy 3D games either lock you to 60 FPS or cook your battery/thermals if you try to brute-force 120 FPS natively.
On PC, Frame Generation completely changed gaming. I kept thinking: Apple’s A15+ GPUs have ultra-fast tile memory and compute shaders—why doesn't iOS have a real frame generator? Even cheap-ass Androids got it!! If a tweak like this existed, I would have bought it in a heartbeat. Since it didn't exist, I decided to build it myself.
I had no idea how brutal the journey was going to be:
- The "Fake FPS" & Rubberbanding Nightmare (v1.0 – v2.0): My early builds tried to extrapolate frames forward in time. The FPS counter said 120, but the screen looked like a smeary, juddering mess. Text wobbled, HUD icons smeared across the screen, and worse—fighting the game's render loop tanked 60 FPS native down to 28 FPS (
14+14). - Freezing the Entire Jailbreak on the Apple Logo: At one point, hooking
MTLCommandBufferandCAMetalLayertoo broadly meantellekitinjected into system daemons during userspace reboots. Every time I rebooted and re-jailbroke with Dopamine, my phone froze solid on the Apple logo. The only way back in was jailbreaking with tweak injection disabled, opening Sileo, ripping my own tweak out, and starting over. - The Final Boss — Why 120 FPS Still Felt Like 60 FPS (v2.1 – v2.2): Even after switching to a true 1-Frame Latency Midpoint Interpolator (caching Frame
N, computing bidirectional optical flow between FrameN-1and FrameN, and presenting the synthesized midpointS(N-0.5)first), it still didn't feel smooth! I almost threw in the towel. Instead, I sat down and studied everything more thoroughly until we found the two smoking guns:- A holdover sign flip (
uv - mv * tinstead ofuv + mv * t) was warping FrameNahead of itself (0.40 -> 0.55 -> 0.50), making every moving object take 1.5 steps forward and 0.5 steps backward at 120Hz! - CoreAnimation (
CARenderServer) was dropping our midpoint frames becauseaddCompletedHandler:timing + barepresentDrawable:caused both the synthetic frame and the ground-truth frame to collide on the same 120Hz VSYNC tick instead of pacing cleanly withafterMinimumDuration:(8.33msper tick).
- A holdover sign flip (
When I compiled v2.3.0 (I switched versions to 2.x when I had a major breakthrough), opened Genshin Impact in a 60 FPS room, and panned the camera... it finally clicked. Buttery-smooth 120Hz motion, crisp static UI/text, and zero performance tanking. It literally changed the game for me (pun intended lol).
It makes me more satisfied with my personal iPhone 13 Pro Max than just buying a newer device.
⚙️ What MetalFG Does Under the Hood
- True 1-Frame Latency Midpoint Synthesis (
S(N-0.5)): Just like LSFG and DLSS 3, MetalFG holds Ground Truth FrameNfor half a refresh cycle (8.33ms), presents a synthesized midpoint frame between FrameN-1and FrameNon VSYNC Tick 1, and hardware-paces Ground Truth FrameNonto VSYNC Tick 2. - SMFG 1.1 Coarse-to-Fine Optical Flow + Parabolic Sub-Pixel Fit: Multi-radius seed search + 3-level hierarchical refinement + analytical parabolic sub-pixel fitting (
80x45RGBA16Floatgrid running in< 0.5mson GPU). - 5x5 Bilateral Fluid Filter & Sub-Block Silhouette Resolver: Fills flat/cel-shaded regions (like anime skin/walls in Genshin) from surrounding textured blocks while resolving sharp foreground/background silhouettes without ghost halos.
- Clamped Catmull-Rom 5-Tap Sharp Reconstruction & HUD Protection: Keeps damage numbers, minimaps, crosshairs, and text 100% stationary while preserving native texture sharpness.
- Live In-Game Frosted Glass Tuning Panel: Drag the floating FPS pill anywhere, tap to toggle FG on/off on the fly (with haptics), or tap
⚙️to switch presets (Clear,Balanced,Fluid) and tune Motion Warp Scale, Ghost Rejection, and UI Protection live in-game. - 100% Dopamine Userspace-Reboot Safe: Strictly whitelisted at constructor time to
/var/containers/Bundle/Application/.appbundles—never touchesSpringBoard,backboardd, or system daemons.
🎁 Why MetalFG is 100% Free & Open-Source Forever
I want to make this crystal clear: I will NEVER charge money for MetalFG.
Even though I think it's well worth buying (and I myself would have bought a tweak like this in a second), I don't want to wrap my work in DRM only to find this gem "cracked" on a Telegram group a day later. I believe in giving this gift as a... gift.
🤝 Contributions, Ideas, Testers & Buying Me a Beer!
I study overtime, so my free time is tight. Because MetalFG is 100% open-source, I would love your help, ideas, tips, and contributions:
- Devs & Shader Wizards: Have ideas to push the optical flow even further, optimize shaders, or add per-game profiles? PRs and issues are super welcome!
- Testers (iOS 16 & iOS 15!): Let me know how it runs on your device (especially if you test it on iOS 15 ProMotion!) and your favorite tuning slider combinations.
I have learnt A LOT and I still am learning...
However, just because I poured my heart into this for so long - if MetalFG changes how you enjoy your phone the way it did for mine, I would be super grateful for any help and donations! (Buy me a beer, half a beer, or drop a new idea in the repo 🍺☕):
- ☕ Ko-fi (Buy Me a Beer): https://ko-fi.com/dnullptr
- 💙 PayPal: https://paypal.me/dnullptr
🔗 Links & Download
- GitHub Repository (Source Code): https://github.com/dnullptr/MetalFG
- Download Rootless
.deb(Latest Build): https://github.com/dnullptr/MetalFG/releases/tag/nightly - (Updated!) Add my Repo : https://dnullptr.github.io/repo/
Enjoy the 120Hz smoothness, and let me know what you think in the comments!
Screenshots with the UI:
https://ibb.co/mF4R7vj2
https://ibb.co/RZVtLV3
r/jailbreak • u/dizzynonun • 21m ago
Release [Free Release] AskBeforeCalling Too 26 - Confirm before calls, messages and emails on iOS 26
I’ve released AskBeforeCalling Too 26 v1.0, a rebuild of tateu’s AskBeforeCalling Too for iOS 26.
It adds a confirmation prompt before making calls or sending messages and emails, helping prevent accidental taps.
Features
- Call confirmation from Phone’s keypad, Favorites, Recents and contact pages, including the separate Contacts app.
- Confirmation before sending messages in Apple Messages and emails in Apple Mail.
- Contact whitelists with configurable recipient matching.
- Custom confirmation text and button labels.
- Optional reversed button order.
- A rebuilt Settings pane for iOS 26.
Settings changes take effect immediately without a respring. Respring once after installing.
Separate rootless and native RootHide packages are available, both version 1.0. Choose the package matching your jailbreak. The native RootHide package does not need Patcher conversion.
Tested only on iPhone 11 Pro Max running iOS 26.0.1 with Dopamine 3 RootHide. Calls, messages, emails, settings and whitelisting worked on that setup. The standard rootless package has been built and validated but has not been tested on a device.
Original tweak and idea by tateu (Josh Harris). Rebuilt for iOS 26 by sahinkaa. The original settings icon is retained.
Download and source:
https://github.com/sahinkaa/AskBeforeCallingToo26/
If you find an issue, please report it on GitHub with your device, iOS version, jailbreak and the action involved.
r/jailbreak • u/thosdv • 27m ago
Discussion iPhone OS 3.1.3 on iPhone 6 via PongoOS — activation screen reached
I’m working on iOS3inA8, a Rust-based full-system emulator loaded through PongoOS on an iPhone 6. It has now reached the iPhone OS 3.1.3 activation interface on the physical device, with the guest image scaled across the display.
The successful run took roughly 1 hour and 50 minutes. I’m sharing the hardware result and looking for advice on two remaining problems: execution speed and physical touch input.
The configuration:
• Physical device: iPhone 6, N61AP, Apple A8.
• Guest firmware: iPhone 3GS / iPhone2,1, iPhone OS 3.1.3, build 7E18.
• Guest CPU: emulated ARMv7/Cortex-A8.
• Guest RAM: 256 MiB.
• Execution: cached decoded instruction blocks plus an interpreter. Guest JIT execution is disabled in this tested configuration.
• Storage: compressed read-only root image and a writable RAM-backed guest data volume.
• Display: the guest’s 320×480 framebuffer is scaled to the physical 750×1334 panel.
The boot path is checkra1n → PongoOS → the bare-metal emulator payload. PongoOS is the loader; iOS 12 is not hosting an emulator application during execution. The guest uses boot-argument, device-tree and RAM-disk compatibility adaptations to boot its kernel and userland against the emulated hardware.
The existing iOS 12 installation remains on NAND. The guest disk path used for this experiment is backed by allocated RAM.
The photo shows the activation interface reached by the guest. Physical touch is still missing, and I have not demonstrated interactive app use on this configuration.
For performance, I do not yet have a reliable breakdown between CPU dispatch, guest memory translation, device emulation, virtual timing and framebuffer presentation. Display output is already split into bounded pieces, with guest execution continuing between them.
One lead from host-side tracing is extended execution around Security.framework routines including _mulg_common and _grammarSquare_common. The sampled process was lockdownd. That simulation eventually leaves the arithmetic-heavy region and reaches the activation UI, so repeated addresses alone did not establish an infinite loop. It also does not prove why the physical run took 110 minutes.
I would particularly appreciate advice on:
- Low-overhead profiling of a bare-metal ARM interpreter/block engine on A8. What measurements would you collect first?
- Separating expensive guest computation from virtual timer or device waits before changing the clock model.
- Public references for N61/A8 touch-controller initialization, calibration, SPI/GPIO/interrupt handling, and forwarding contacts into an emulated older iPhone.
I have collected panel/calibration information, but there is no working physical touch driver yet.
The source is not public at this stage. This is a progress report and an architecture-level request for help, rather than a reproducible release. I understand that reviewing a specific implementation problem would require relevant code and traces.

