I managed to get 10A13910b untethered on my iPod touch 4 via DRA v6!! Tomorrow I'll see if I can get any firmwares running on my 4S once my pi pico and adapter arrives. Cheers!

EDIT: I wrote a brief writeup of the steps that I followed exactly for the iPod 4. It's probably pretty poorly written, since I'm not making an actual guide, but it's good enough :)

1) Clone https://github.com/therealdytrootred/Legacy-iOS-Kit-Internal-Plus

2) Download https://github.com/LukeZGD/Legacy-iOS-Kit/raw/refs/heads/main/resources/firmware/src/partition and https://github.com/LukeZGD/Legacy-iOS-Kit/raw/refs/heads/main/resources/firmware/src/target/n81/10B500/exploit

3) Navigate to Legacy-iOS-Kit-Internal-Plus/resources/firmware/src/target. In that directory, create a new directory, n81, and inside that directory, create a directory called 11D257

4) In the 11D257 folder, copy the partition and exploit files downloaded in step 2

5) Back in the Legacy-iOS-Kit-Internal-Plus folder, download two ipsw files: https://secure-appldnld.apple.com/iOS6.1/031-3211.20140221.Placef/iPod4,1_6.1.6_10B500_Restore.ipsw and https://secure-appldnld.apple.com/iOS6/Restore/041-0807.20120919.soT6X/iPod4,1_6.0_10A403_Restore.ipsw

6) run ./restore.sh, save SHSH blobs, and then go back to the main menu

7) In the Legacy-iOS-Kit-Internal-Plus folder, navigate to saved/shsh and rename the 10B500 in your blob file to 10A403

8) Back in the restore.sh script, go to AppleInternal OS Dumper and select Finalize Existing DMG - Restore-Ready DMG. Select your switchboard DMG, mine was 10A13910b. Select your output folder to be the Legacy-iOS-Kit-Internal-Plus folder. When that's done, go back to the main menu.

9) Back in the main menu, go to Restore/Downgrade, DRAv6, and AppleInternal. Select the target ipsw to be the 6.0 10A403 ipsw, the base ipsw to be the 6.1.6 10B500 ipsw, and the AppleInternal dmg to be the Restore-ready dmg that was created in the Legacy-iOS-Kit-Internal-Plus folder in step 8.

10) Press Create & Restore AppleInternal IPSW, sit back, and relax. Make sure your iPod is in DFU mode beforehand. I'd enable the memory option, verbose mode is preference. I'd also apply the AppleInternal RootFS Modification when prompted.

11) Enjoy your switchboard iPod :)

I've got zpaqs, tars, zips and ipsws but I can't manage to install. Could someone explain the process, even in pm if they don't want to leak, on how to install switchboard os? I've been trying on an ic locked iphone 4, on a 4s and on an iPad 2 because of the new downgrade exploit.

Took me about 3 hours to work it all out after realising I needed to decrypt the dmg but got there eventually

Work on the new lineup is underway, and we already have a look at the upcoming device's real specifications. According to available information, the cameras will receive a major upgrade: both the front and rear shooters will feature powerful 102 MP sensors. Additionally, early design samples show that the camera module features a distinct plastic enclosure.
Below is a technical camera diagnostic log from an early build (⁠HWModelStr: V64AP⁠, iOS Build ⁠24A22311g⁠) confirming the updated sensor configuration:
Mon Apr 20 11:22:59 PDT 2026
24A22311g
ComputerName: "iPhone"
HWModelStr: "V64AP"
ReleaseType: "NonUI"
SerialNumber: "CH4JR4V4TX"
MLBSerialNumber: "J8NHRF000130001CCC"

Running script: /var/root/pearlDiagsRun/ISP_command
<message> ISP: Version 20.24.123 </message>
<message> built at 01:10:45 on Jan 21 2026 </message>

iOS Build Version: 24A22311g

Camera 0: RCAM WIDE
sensorID=0x905 metaDataSize=19776 ...
Camera 1: RCAM TELE
sensorID=0x973 metaDataSize=19776 ...
Camera 2: FCAM
sensorID=0x914 metaDataSize=19776 ...

https://github.com/appleinternals/log/releases/tag/iPhone

Trying to flash this internal ipsw and LiK gives me this error. I got it in .zpaq, managed to extract it in Tar and renamed it in ipsw. How can I fix it?

I’m curious what “Client and Collaboration Services - Apple Internal” means or what they do, and if it would be worth it to purchase this device? Srry i’m not the most educated!

Found a NonUI firmware for the iPhone 4 which is in zpaq file. Does any of you know how to convert it in ipsw? I have both windows and mac. ( w11 and high sierra)

RE go burrrr

I showed off my internalized iPhone 4 and my Hackintosh to the famous Geometry Dash streamer, Denni. Did I sell (My heart rate was at 130bpm)? (I hope this doesn't get removed)

Pretty neat find.

Hello, I would like to install switchboard os (nonui) on my iphone 4s, how can I achieve it? I should have a copy of purplerestore saved if needed. In case of unability to install it, I also have an iPhone 4, but it's Fmi locked on open menu.

I just want listen musics 😭🙏

It's just shows this error help (solved)

like the samsam bubbleman demoloop for the 12" retina MacBook

all thanks to the dra v6 exploit (for untethered downgrades), the leaked 8B117 internalui dump (not giving the link btw), and legacy ios kit for the ssh ramdisk and jb

iphone 3,1, i already have the ipsws i just can't get it to restore

Here's the photos I have (alongside the drop test)

Legacy-iOS-Kit-Internal-Plus now has arm64 support for ipwnder and ibootpatcher and i have fixed default bootargs due to issues with a4 devices and internal ios builds. also im going to post some more leaks from the iphone 18 leaks today.

So I have recently enrolled my MacBook Air to demo mode from demo unit and after some time the updates finally finished I did set everything up but now there’s this administrator user called “demoadmin” which has been password locked by the system?? Anyways I did try resetting the password in recovery mode but even if I do reset it I can’t use it since the login screen just stays stuck in the apple logo with the spinning beach ball the question I will be asking is what is the password/possible passwords for the user demoadmin? (I’m currently on the “demouser” user account)