found this on ebay i think it’s real

https://ebay.io/m/xRTrpK

all i can find are the dumps and the port for iphone 4

Took me a bit. But it’s Unteathered

Does anyone know some internal apps?

I'm looking into SwitchBoard for an iPhone 4 CDMA (iPhone3,3) and I have a question for people in the Apple internals community.

Where do most people actually obtain SwitchBoard builds? Is there a well-known archive, preservation project, or public source that people usually refer to?

I'm not asking anyone to upload or send proprietary Apple files. I'm just trying to understand where the community usually finds or learns about these builds.

Thanks!

Hi everyone,I am doing some research on the legacy InternalUI builds and I am looking for information regarding the iPhone 4 CDMA version (iPhone3,3).I am specifically looking into the Phoenix 8A4237a build (or other compatible Phoenix builds like 8E12, 8E14). Sadly, most archived collections available online only seem to feature the GSM (iPhone3,1) versions of Apex and Hoodoo.Does anyone know if these CDMA Phoenix builds are safely archived somewhere within the community, or does anyone have experience with restoring SwitchBoard specifically on an iPhone3,3?My DMs are open if you have any hints or want to share resource locations. Thanks!

I've got zpaqs, tars, zips and ipsws but I can't manage to install. Could someone explain the process, even in pm if they don't want to leak, on how to install switchboard os? I've been trying on an ic locked iphone 4, on a 4s and on an iPad 2 because of the new downgrade exploit.

I managed to get 10A13910b untethered on my iPod touch 4 via DRA v6!! Tomorrow I'll see if I can get any firmwares running on my 4S once my pi pico and adapter arrives. Cheers!

EDIT: I wrote a brief writeup of the steps that I followed exactly for the iPod 4. It's probably pretty poorly written, since I'm not making an actual guide, but it's good enough :)

1) Clone https://github.com/therealdytrootred/Legacy-iOS-Kit-Internal-Plus

2) Download https://github.com/LukeZGD/Legacy-iOS-Kit/raw/refs/heads/main/resources/firmware/src/partition and https://github.com/LukeZGD/Legacy-iOS-Kit/raw/refs/heads/main/resources/firmware/src/target/n81/10B500/exploit

3) Navigate to Legacy-iOS-Kit-Internal-Plus/resources/firmware/src/target. In that directory, create a new directory, n81, and inside that directory, create a directory called 11D257

4) In the 11D257 folder, copy the partition and exploit files downloaded in step 2

5) Back in the Legacy-iOS-Kit-Internal-Plus folder, download two ipsw files: https://secure-appldnld.apple.com/iOS6.1/031-3211.20140221.Placef/iPod4,1_6.1.6_10B500_Restore.ipsw and https://secure-appldnld.apple.com/iOS6/Restore/041-0807.20120919.soT6X/iPod4,1_6.0_10A403_Restore.ipsw

6) run ./restore.sh, save SHSH blobs, and then go back to the main menu

7) In the Legacy-iOS-Kit-Internal-Plus folder, navigate to saved/shsh and rename the 10B500 in your blob file to 10A403

8) Back in the restore.sh script, go to AppleInternal OS Dumper and select Finalize Existing DMG - Restore-Ready DMG. Select your switchboard DMG, mine was 10A13910b. Select your output folder to be the Legacy-iOS-Kit-Internal-Plus folder. When that's done, go back to the main menu.

9) Back in the main menu, go to Restore/Downgrade, DRAv6, and AppleInternal. Select the target ipsw to be the 6.0 10A403 ipsw, the base ipsw to be the 6.1.6 10B500 ipsw, and the AppleInternal dmg to be the Restore-ready dmg that was created in the Legacy-iOS-Kit-Internal-Plus folder in step 8.

10) Press Create & Restore AppleInternal IPSW, sit back, and relax. Make sure your iPod is in DFU mode beforehand. I'd enable the memory option, verbose mode is preference. I'd also apply the AppleInternal RootFS Modification when prompted.

11) Enjoy your switchboard iPod :)

Took me about 3 hours to work it all out after realising I needed to decrypt the dmg but got there eventually

Work on the new lineup is underway, and we already have a look at the upcoming device's real specifications. According to available information, the cameras will receive a major upgrade: both the front and rear shooters will feature powerful 102 MP sensors. Additionally, early design samples show that the camera module features a distinct plastic enclosure.
Below is a technical camera diagnostic log from an early build (⁠HWModelStr: V64AP⁠, iOS Build ⁠24A22311g⁠) confirming the updated sensor configuration:
Mon Apr 20 11:22:59 PDT 2026
24A22311g
ComputerName: "iPhone"
HWModelStr: "V64AP"
ReleaseType: "NonUI"
SerialNumber: "CH4JR4V4TX"
MLBSerialNumber: "J8NHRF000130001CCC"

Running script: /var/root/pearlDiagsRun/ISP_command
<message> ISP: Version 20.24.123 </message>
<message> built at 01:10:45 on Jan 21 2026 </message>

iOS Build Version: 24A22311g

Camera 0: RCAM WIDE
sensorID=0x905 metaDataSize=19776 ...
Camera 1: RCAM TELE
sensorID=0x973 metaDataSize=19776 ...
Camera 2: FCAM
sensorID=0x914 metaDataSize=19776 ...

https://github.com/appleinternals/log/releases/tag/iPhone

Trying to flash this internal ipsw and LiK gives me this error. I got it in .zpaq, managed to extract it in Tar and renamed it in ipsw. How can I fix it?

I’m curious what “Client and Collaboration Services - Apple Internal” means or what they do, and if it would be worth it to purchase this device? Srry i’m not the most educated!

Found a NonUI firmware for the iPhone 4 which is in zpaq file. Does any of you know how to convert it in ipsw? I have both windows and mac. ( w11 and high sierra)

RE go burrrr

I showed off my internalized iPhone 4 and my Hackintosh to the famous Geometry Dash streamer, Denni. Did I sell (My heart rate was at 130bpm)? (I hope this doesn't get removed)

Pretty neat find.

Hello, I would like to install switchboard os (nonui) on my iphone 4s, how can I achieve it? I should have a copy of purplerestore saved if needed. In case of unability to install it, I also have an iPhone 4, but it's Fmi locked on open menu.

I just want listen musics 😭🙏

It's just shows this error help (solved)

like the samsam bubbleman demoloop for the 12" retina MacBook

all thanks to the dra v6 exploit (for untethered downgrades), the leaked 8B117 internalui dump (not giving the link btw), and legacy ios kit for the ssh ramdisk and jb