freemyipod - User contributions [en]

EmCORE Installation/iPodNano6G

2026-04-12T04:30:55Z

ZeOne:

Sorry, your device is not currently supported by [[emCORE]].

Porting [[emCORE]] to a new device is generally a lot of work and requires lots of experience with embedded system development.

The exact amount of work needed varies greatly and depends on the complexity of the device and similarities to devices that [[emCORE]] has already been ported to.

Aditionaly as [[emCORE]] is depreciated and Rockbox should be used instead, there is no reson you should be waiting for an [[emCORE]] port on the [[Nano 6G]].

An exploit has been found [[S5Late]] and a modified version made to work with the [[Nano 6G]] exists. (find it here [https://github.com/NyanSatan/S5Late-8723 S5Late-8723]) there is some work in progress to getting it to work with wInd3x and getting alpine linux booted on it (not emCORE for now).

Chronology

2026-04-12T04:13:21Z

ZeOne:

This page list all models of iPods and set the naming of it. So that, on this wiki, the Discord, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [https://support.apple.com/en-us/103823 Identifying iPod Models]" page and The Apple Wiki's [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos]. There is also alot of information on [https://en.wikipedia.org/wiki/IPod Wikipedia's iPod page].

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V1]
| 2012-10
| 16 GB
| Newest retailOS 1.0.4
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V2]
| 2015-06
| 16 GB
| Newest retailOS 1.1.2
|}

==Timeline==
[[File:TimeLineofIPod.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

Contributing

2026-04-09T14:59:16Z

ZeOne: /* Developing */

The first question people generally ask about this project is, "How can I help out?". Here are some ways someone can be useful to the project:

==Developing==
This is perhaps the most valuable way one can help the project. We get many people who want to help with development but they don't have the necessary skills. If you don't, think of it as an opportunity to learn new and worthwhile skills instead of a roadblock. After all, the best way to learn is in the field doing real work. Here are some topics that developers need to know about:
*'''ARM assembly''' - this is probably the hardest topic for beginners to grasp. Resources:
**[https://www.bing.com/ck/a?!&&p=dada0435c0139c07a5df758056e5fbe119b3a54f9326fb3f4556768a34561f20JmltdHM9MTc3NTY5MjgwMA&ptn=3&ver=2&hsh=4&fclid=3fc6f895-7af1-6abf-0648-efa57b776b03&u=a1aHR0cHM6Ly9kb2N1bWVudGF0aW9uLXNlcnZpY2UuYXJtLmNvbS9zdGF0aWMvNjgxMzU5Mjg3OWM0YzE3YWQ4MDM4Njkx ARM's guide (PDF)]
**[http://simplemachines.it/doc/arm_inst.pdf an ARM primer]
**[http://simplemachines.it/doc/QRC0001H_rvct_v2.1_arm.pdf ARM Quick Ref]
**[http://www.lysator.liu.se/~kjell-e/embedded/ARM-ARM.pdf ARM ARM]
**http://simplemachines.it has great resources for learning ARM
*'''Rust''' and '''C''' - Used whenever we can avoid using ARM assembly.
*'''Go''' and '''Python''' - Used to implement host-side software like wInd3x and bits of EMcore/Rockbox/...

==Vulnerabilities==
If you've ever found a way to get your iPod to crash by corrupting things or inputting weird things, we could use the info to see if the bug is a vulnerability. Some examples of bugs like this are the [[Notes vulnerability]] and the [[Pwnage 2.0]] vulnerability. [[OSOS]] bugs in any releases are also appreciated, as they might allow to potentially untether [[wInd3x]].

If you find any bug, report it via IRC.

==Development==

We need an open-source reimplementation of the [[Nano2G FTL|Samsung Whimory FTL]] used in S5L-based iPods. This will allow us to access the FAT/HFS partition on NAND from any open source software. The FTL is a complex piece of software, and it needs a high-quality, clean-room implementation for reliable read/write access.

==Writing guides==
Another way to help out is writing guides like these on the Wiki. Make it easier for new users to get information.

==Testing==
Testers are always good to have, and its also a good way to help out if you don't want to spend much time on the project or don't know much about development. Developers, however, will get tired of working with you if you are clueless about how everything works, so make sure you have a good understanding about the tools you're testing.

Contributing

2026-04-09T12:43:12Z

ZeOne: added a link to learn arm will fix the other links later

The first question people generally ask about this project is, "How can I help out?". Here are some ways someone can be useful to the project:

==Developing==
This is perhaps the most valuable way one can help the project. We get many people who want to help with development but they don't have the necessary skills. If you don't, think of it as an opportunity to learn new and worthwhile skills instead of a roadblock. After all, the best way to learn is in the field doing real work. Here are some topics that developers need to know about:
*'''ARM assembly''' - this is probably the hardest topic for beginners to grasp. Resources:
**[https://www.bing.com/ck/a?!&&p=dada0435c0139c07a5df758056e5fbe119b3a54f9326fb3f4556768a34561f20JmltdHM9MTc3NTY5MjgwMA&ptn=3&ver=2&hsh=4&fclid=3fc6f895-7af1-6abf-0648-efa57b776b03&u=a1aHR0cHM6Ly9kb2N1bWVudGF0aW9uLXNlcnZpY2UuYXJtLmNvbS9zdGF0aWMvNjgxMzU5Mjg3OWM0YzE3YWQ4MDM4Njkx ARM's guide]
**[http://simplemachines.it/doc/arm_inst.pdf an ARM primer]
**[http://simplemachines.it/doc/QRC0001H_rvct_v2.1_arm.pdf ARM Quick Ref]
**[http://www.lysator.liu.se/~kjell-e/embedded/ARM-ARM.pdf ARM ARM]
**http://simplemachines.it has great resources for learning ARM
*'''Rust''' and '''C''' - Used whenever we can avoid using ARM assembly.
*'''Go''' and '''Python''' - Used to implement host-side software like wInd3x and bits of EMcore/Rockbox/...

==Vulnerabilities==
If you've ever found a way to get your iPod to crash by corrupting things or inputting weird things, we could use the info to see if the bug is a vulnerability. Some examples of bugs like this are the [[Notes vulnerability]] and the [[Pwnage 2.0]] vulnerability. [[OSOS]] bugs in any releases are also appreciated, as they might allow to potentially untether [[wInd3x]].

If you find any bug, report it via IRC.

==Development==

We need an open-source reimplementation of the [[Nano2G FTL|Samsung Whimory FTL]] used in S5L-based iPods. This will allow us to access the FAT/HFS partition on NAND from any open source software. The FTL is a complex piece of software, and it needs a high-quality, clean-room implementation for reliable read/write access.

==Writing guides==
Another way to help out is writing guides like these on the Wiki. Make it easier for new users to get information.

==Testing==
Testers are always good to have, and its also a good way to help out if you don't want to spend much time on the project or don't know much about development. Developers, however, will get tired of working with you if you are clueless about how everything works, so make sure you have a good understanding about the tools you're testing.

User:ZeOne

2026-04-09T03:27:48Z

ZeOne:

I'm just some dude working on exploiting the nano 6g i live in Winnipeg, Canada. I'm a cyclist on team Manitoba! My username on discord is zeone_28574 you can dm me there if you have questions or please just ping @zeone in the ipod nano hacking discord server.

My iPods:
2 nano 6g
1 nano 5g (kinda dead, no battery and the screen's ribbon cable is broken)
1 nano 7g
2 iPod touch 4th gen (one 8gb one 32gb)

Currently my plan is to reverse engineer the S5Late-8723 exploit the S5Late exploit and wInd3x to get S5Late-8723 (the nano 6 version of S5Late) working with wInd3x to maybe eventually port linux to the nano 6g. I don't know if I'll be able to awnser them, but if you have any questions about this just ask! I'd be more then happy to help.
I also work on updating the freemyipod pages to make them more acurate and up to date when i cant work on my nano.

My main computer is a 2014 macbook pro but i also have a Ubuntu PC.
I also have access to raspberry pi's.

Hopefully when you see this im still somewhat active in the project!

Chronology

2026-04-08T14:22:43Z

ZeOne: added the wikipedia link

This page list all models of iPods and set the naming of it. So that, on this wiki, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [https://support.apple.com/en-us/103823 Identifying iPod Models]" page and The Apple Wiki's [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos]. There is also alot of information on [https://en.wikipedia.org/wiki/IPod Wikipedia's iPod page].

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V1]
| 2012-10
| 16 GB
| Newest retailOS 1.0.4
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V2]
| 2015-06
| 16 GB
| Newest retailOS 1.1.2
|}

==Timeline==
[[File:TimeLineofIPod.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

Chronology

2026-04-08T14:14:18Z

ZeOne: /* Timeline */ Updated ipod timeline photo

This page list all models of iPods and set the naming of it. So that, on this wiki, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [https://support.apple.com/en-us/103823 Identifying iPod Models]" page, The Apple wiki's [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos]

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V1]
| 2012-10
| 16 GB
| Newest retailOS 1.0.4
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V2]
| 2015-06
| 16 GB
| Newest retailOS 1.1.2
|}

==Timeline==
[[File:TimeLineofIPod.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

File:TimeLineofIPod.png

2026-04-08T14:11:37Z

ZeOne:

Updated Apple timeline from wikipedea

Chronology

2026-04-08T14:04:11Z

ZeOne: removed the warning as ive updated the page

This page list all models of iPods and set the naming of it. So that, on this wiki, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [https://support.apple.com/en-us/103823 Identifying iPod Models]" page, The Apple wiki's [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos]

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V1]
| 2012-10
| 16 GB
| Newest retailOS 1.0.4
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V2]
| 2015-06
| 16 GB
| Newest retailOS 1.1.2
|}

==Timeline==
[[Image:IPod Timeline.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

Chronology

2026-04-08T04:42:29Z

ZeOne: /* iPod Nano Series */ fixed newest version os eror

{{outdated|reason=This information is out of date. See [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos] for an up-to-date listing of iPod models.}}
This page list all models of iPods and set the naming of it. So that, on this wiki, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [http://support.apple.com/kb/HT1353 Identifying iPod Models]" page

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V1]
| 2012-10
| 16 GB
| Newest retailOS 1.0.4
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V2]
| 2015-06
| 16 GB
| Newest retailOS 1.1.2
|}

==Timeline==
[[Image:IPod Timeline.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

Chronology

2026-04-08T04:35:45Z

ZeOne: /* iPod Nano Series */ fixed nano7 links added month released and corected storage size

{{outdated|reason=This information is out of date. See [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos] for an up-to-date listing of iPod models.}}
This page list all models of iPods and set the naming of it. So that, on this wiki, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [http://support.apple.com/kb/HT1353 Identifying iPod Models]" page

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V1]
| 2012-10
| 16 GB
| Newest retailOS 1.0.4
|-
|
[http://support.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G V2]
| 2015-06
| 16 GB
| Newest retailOS 1.4.1
|}

==Timeline==
[[Image:IPod Timeline.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

Chronology

2026-04-08T04:28:25Z

ZeOne: /* iPod Nano Series */ fun fact im editing on a kindle

{{outdated|reason=This information is out of date. See [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos] for an up-to-date listing of iPod models.}}
This page list all models of iPods and set the naming of it. So that, on this wiki, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [http://support.apple.com/kb/HT1353 Identifying iPod Models]" page

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[http://suport.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G]
| 2012-?
| 8 GB or 16 GB
| Newest retailOS 1.0.4
|-
|
[http://suport.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G]
| 2015-?
| 8 GB or 16 GB
| Newest retailOS 1.4.1
|}

==Timeline==
[[Image:IPod Timeline.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

Chronology

2026-04-08T04:26:16Z

ZeOne: /* iPod Nano Series */ changed back to http as there where erors (will fix tomorrow)

{{outdated|reason=This information is out of date. See [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos] for an up-to-date listing of iPod models.}}
This page list all models of iPods and set the naming of it. So that, on this wiki, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [http://support.apple.com/kb/HT1353 Identifying iPod Models]" page

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT135#iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[http://suport.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G]
| 2012-?
| 8 GB or 16 GB
| Newest retailOS 1.0.4
|-
|
[http://suport.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G]
| 2015-?
| 8 GB or 16 GB
| Newest retailOS 1.4.1
|}

==Timeline==
[[Image:IPod Timeline.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

Chronology

2026-04-08T04:23:08Z

ZeOne: /* iPod Nano Series */ fixed names and changed links to https

{{outdated|reason=This information is out of date. See [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos] for an up-to-date listing of iPod models.}}
This page list all models of iPods and set the naming of it. So that, on this wiki, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [http://support.apple.com/kb/HT1353 Identifying iPod Models]" page

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [https://support.apple.com/kb/HT135#iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[https://suport.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G]
| 2012-?
| 8 GB or 16 GB
| Newest retailOS 1.0.4
|-
|
[https://suport.apple.com/kb/HT1353#iPod_Nano_7G Nano 7G]
| 2015-?
| 8 GB or 16 GB
| Newest retailOS 1.4.1
|}

==Timeline==
[[Image:IPod Timeline.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

Chronology

2026-04-08T04:18:25Z

ZeOne: /* iPod Nano Series */ fixing looks

{{outdated|reason=This information is out of date. See [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos] for an up-to-date listing of iPod models.}}
This page list all models of iPods and set the naming of it. So that, on this wiki, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [http://support.apple.com/kb/HT1353 Identifying iPod Models]" page

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT135 #iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[http://suport.apple.com/kb/HT1353 #iPod_Nano_7G Nano 7G]
| 2012-?
| 8 GB or 16 GB
| Newest retailOS 1.0.4
|-
|
[http://suport.apple.com/kb/HT1353 #iPod_Nano_7G Nano 7G]
| 2015-?
| 8 GB or 16 GB
| Newest retailOS 1.4.1
|}

==Timeline==
[[Image:IPod Timeline.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

Chronology

2026-04-08T04:16:34Z

ZeOne: /* iPod Nano Series */ added the nano 7 to table (will reveu stuf)

{{outdated|reason=This information is out of date. See [https://theapplewiki.com/wiki/List_of_iPods List of iPods] and [https://theapplewiki.com/wiki/List_of_iPod_nanos List of iPod nanos] for an up-to-date listing of iPod models.}}
This page list all models of iPods and set the naming of it. So that, on this wiki, or on IRC nobody can be confused with what we are speaking about. Please also refer to Apple's [http://support.apple.com/kb/HT1353 Identifying iPod Models]" page

==iPod Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#scrollwheel 1G]
| 2001-10
| 5 GB or 10 GB
|
|-
| [http://support.apple.com/kb/HT1353#touchwheel 2G]
| 2002-07
| 10 GB or 20 GB
|
|-
| [http://support.apple.com/kb/HT1353#dockconnector 3G]
| 2003-04
| 10 GB, 15 GB, 20 GB, 30 GB, or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#clickwheel 4G (Greyscale)]
| 2004-07
| 20 GB or 40 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodphoto 4G (Color)]
| 2004-10
| 20 GB, 30 GB, or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth 5G (Video)]
| 2005-10
| 30 GB or 60 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodfifth2 5.5G (Video)]
| 2006-09
| 30 GB or 80 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodclassic (6G) Classic 1G]
| 2007-09
| 80 GB or 160 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_120GB (6G) Classic 2G]
| 2008-09
| 120 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_classic_160GB (6G) Classic 3G]
| 2009-09
| 160 GB
|
|}

==iPod Nano Series==

{| class="wikitable"
! Model !! Introduced !! Capacity !! Notes
|-
| [http://support.apple.com/kb/HT1353#ipodnano Nano 1G]
| 2005-09
| 1 GB, 2 GB, or 4 GB
|
|-
| [http://support.apple.com/kb/HT1353#ipodnano2 Nano 2G]
| 2006-09
| 2 GB, 4 GB, or 8 GB
| Encryption starts
|-
| [http://support.apple.com/kb/HT1353#ipodnano3 Nano 3G]
| 2007-09
| 4 GB or 8 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano_4th_generation Nano 4G]
| 2008-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT1353#iPod_nano5G Nano 5G]
| 2009-09
| 8 GB or 16 GB
|
|-
| [http://support.apple.com/kb/HT135 #iPod_Nano_6G Nano 6G]
| 2010-09
| 8 GB or 16 GB
| Multi-Touch display
|-
|
[http://suport.apple.com/kb/HT1353 #iPod_Nano_7G Nano 7G]
| 2012-?
| 8 GB or 16 GB
| Newest retailOS 1.0.4
|-
|
[http://suport.apple.com/kb/HT1353 #iPod_Nano_7G Nano 7G]
| 2015-?
| 8 GB or 16 GB
| Newest retailOS 1.4.1
}

==Timeline==
[[Image:IPod Timeline.png|800px|The timeline of iPod releases (from Wikipedia)]]

==The Motive==
Understanding the mindset and motives behind Apple is key to understanding how and why the iPod was encrypted. While many people believe that the iPod was encrypted to put an end to iPodLinux and Rockbox, the main reason for the encryption was to thwart third-party imitators. Apple was not as concerned with iPodLinux and Rockbox because people were still buying their (overpriced) hardware, and therefore still generating profits. The main reason was because there were many imitations that replicated the hardware and ran the exact firmware that was run on normal iPods. This was a major drain of money for Apple. Another reason was that the DRM mechanism in the unencrypted firmware was being hacked. This allowed pirated content like games to be run without being bought.
==The Response==
Since Apple was losing money from the iPod imitators, they encrypted the firmware so the iPod clones could no longer use Apple firmware on their devices. There are still iPod clones out there (just search eBay), but very few use the Apple firmware anymore. Apple has encrypted all of their portable devices since the iPod Nano 2G.
==The Change==
In order to stop the fake iPods from using their firmware, Apple encrypted the firmware so only their devices could decrypt it. Apple changed their processor to Samsung and no longer used PortalPlayer.
==Helpful Pages==
http://support.apple.com/kb/HT1353

Modes

2026-04-08T02:49:55Z

ZeOne: alignment again

At any given time an iPod can be in one of several modes, some of which can be activated by holding down certain buttons while the iPod is booting.

==Normal mode==
"Normal mode" is when the iPod is booted into [[RetailOS]] normally. In this mode the iPod presents as a mass storage device to a computer, allowing files to be transferred. Receiving device information from the iPod, as well as updating the iPod's [[Firmware]], can be done from normal mode through the use of proprietary SCSI commands.

==Disk mode==
In disk mode, like normal mode, the iPod presents as a mass storage device to a computer and can have its information read and firmware updated. When in disk mode, the iPod screen will display, with a black foreground and white background, either a no symbol with the text "Do not disconnect." or a checkmark symbol with the text "OK to disconnect." depending on whether the iPod is connected and if it has been ejected.

Disk mode exists on all iPod models. For more information on how to enter disk mode, refer to [https://support.apple.com/kb/ht1363 this Apple support document]

Disk mode is also referred to as "forced disk mode" in device information received from the iPod.

The place where disk mode is stored on the device differs depending on the iPod model. On the iPod nano (4th generation) and newer, disk mode is stored in the "disk" partition of the [[Firmware]].

==DFU mode==
[https://en.wikipedia.org/wiki/Device_Firmware_Upgrade Device Firmware Upgrade], or DFU, is a standard for upgrading firmware over USB that is used by many devices, including iOS devices and newer iPods. DFU mode exists on the [[Nano 3G]] and newer and the [[Classic 6G]] and newer, coinciding with Apple's switch from PortalPlayer to Samsung processors. DFU mode is contained in the on-processor BootROM. Instructions on entering DFU mode can be found [https://theapplewiki.com/wiki/DFU_Mode#iPod here].

When in DFU mode, the iPod can be sent a special WTF [[IMG1]] firmware image to enter WTF mode. Other IMG1 images cannot be sent in this mode.

The [[Nano 2G]] also has a DFU mode, but it can only be entered by shorting testpoints on the iPod's circuit board or flashing the NOR with an image with an invalid signature or hash. It does, however, support a NOR DFU mode that can be entered by holding down Back+Play right after rebooting the device<ref>https://www.rockbox.org/irc/log-20080904#13:31:44</ref>.

==WTF mode==
In WTF mode (possibly 'Where's The Firmware?'), the iPod will accept any [[IMG1]] image it is sent over DFU and, if signature and decryption checks pass, will attempt to boot to it. It is entered from DFU mode when a specific WTF [[IMG1]] firmware image is sent. While in WTF mode the iPod still uses the standard DFU protocol.

The iTunes behavior upon seeing an iPod in WTF mode is to send it a "recovery" firmware image, which places the iPod in disk mode. However, any firmware image can be sent to it, including, for example, the "osos" partition from production iPod firmware, which enables tethered booting an iPod into [[RetailOS]].

==Diagnostic mode==
__NOTOC__
[[File:Nano 7G diagnostic mode.jpg|thumb|right|[[Nano 7G]] in diagnostics mode]]
This mode will give quite a lot of info about your iPod. Except for the very first iPods, it can be accessed on clickwheel ipods by holding center and rewind when the apple logo appears during reboot. For the [[Nano 6G]] you enter Diagnostics mode by holding down all three boutons. For the [[Nano 7G]] you press and hold all butons other then the "play/pause" buton between the volume butons.
In diagnostics mode you can find info about the battery power check the LCD, buton inputs, radio signals, DRAM, Nand, Accelorometor, dock information and an about section. On touchscreen iPods there is also a section for touchscreen testing.

==USB IDs==
When connected to a computer, the iPod presents a vendor ID of 05ac (Apple Inc.) and a product ID that depends on its model and which mode it is in:
{| class="wikitable"
|-
! colspan="2" | Model
! Normal/disk mode
! DFU mode
! WTF mode
|-
| colspan="2" | [[Nano 2G]]
| <code>1260</code>
| <code>1220</code>
| <code>1240</code>
|-
| colspan="2" | [[Nano 3G]]
| <code>1262</code>
| <code>1223</code>/<code>1224</code>
| <code>1242</code>
|-
| colspan="2" | [[Nano 4G]]
| <code>1263</code>
| <code>1225</code>
| <code>1243</code>
|-
| colspan="2" | [[Nano 5G]]
| <code>1265</code>
| <code>1231</code>
| <code>1246</code>
|-
| colspan="2" | [[Nano 6G]]
| <code>1266</code>
| <code>1232</code>
| <code>1248</code>
|-
| rowspan="2" | [[Nano 7G]]
| Initial
| rowspan="2" | <code>1267</code>
| rowspan="2" | <code>1234</code>
| <code>1249</code>
|-
| Rev A
| <code>124a</code>
|-
| rowspan="4" | [[Classic 6G]]
| [[Classic 6G#Initial|Initial]]
| rowspan="4" | <code>1261</code>
| rowspan="4" | <code>1223</code>
| <code>1241</code>
|-
| [[Classic 6G#Rev A|Rev A]]
| <code>1245</code>
|-
| [[Classic 6G#Rev B|Rev B]]
| <code>1247</code>
|-
| Rev C
| <code>1250</code>
|}

Modes

2026-04-08T02:23:36Z

ZeOne: modifyed picture alingment

Modes

2026-04-08T02:21:09Z

ZeOne: /* Diagnostic mode */ clarified things up, added a lot

At any given time an iPod can be in one of several modes, some of which can be activated by holding down certain buttons while the iPod is booting.

==Normal mode==
"Normal mode" is when the iPod is booted into [[RetailOS]] normally. In this mode the iPod presents as a mass storage device to a computer, allowing files to be transferred. Receiving device information from the iPod, as well as updating the iPod's [[Firmware]], can be done from normal mode through the use of proprietary SCSI commands.

==Disk mode==
In disk mode, like normal mode, the iPod presents as a mass storage device to a computer and can have its information read and firmware updated. When in disk mode, the iPod screen will display, with a black foreground and white background, either a no symbol with the text "Do not disconnect." or a checkmark symbol with the text "OK to disconnect." depending on whether the iPod is connected and if it has been ejected.

Disk mode exists on all iPod models. For more information on how to enter disk mode, refer to [https://support.apple.com/kb/ht1363 this Apple support document]

Disk mode is also referred to as "forced disk mode" in device information received from the iPod.

The place where disk mode is stored on the device differs depending on the iPod model. On the iPod nano (4th generation) and newer, disk mode is stored in the "disk" partition of the [[Firmware]].

==DFU mode==
[https://en.wikipedia.org/wiki/Device_Firmware_Upgrade Device Firmware Upgrade], or DFU, is a standard for upgrading firmware over USB that is used by many devices, including iOS devices and newer iPods. DFU mode exists on the [[Nano 3G]] and newer and the [[Classic 6G]] and newer, coinciding with Apple's switch from PortalPlayer to Samsung processors. DFU mode is contained in the on-processor BootROM. Instructions on entering DFU mode can be found [https://theapplewiki.com/wiki/DFU_Mode#iPod here].

When in DFU mode, the iPod can be sent a special WTF [[IMG1]] firmware image to enter WTF mode. Other IMG1 images cannot be sent in this mode.

The [[Nano 2G]] also has a DFU mode, but it can only be entered by shorting testpoints on the iPod's circuit board or flashing the NOR with an image with an invalid signature or hash. It does, however, support a NOR DFU mode that can be entered by holding down Back+Play right after rebooting the device<ref>https://www.rockbox.org/irc/log-20080904#13:31:44</ref>.

==WTF mode==
In WTF mode (possibly 'Where's The Firmware?'), the iPod will accept any [[IMG1]] image it is sent over DFU and, if signature and decryption checks pass, will attempt to boot to it. It is entered from DFU mode when a specific WTF [[IMG1]] firmware image is sent. While in WTF mode the iPod still uses the standard DFU protocol.

The iTunes behavior upon seeing an iPod in WTF mode is to send it a "recovery" firmware image, which places the iPod in disk mode. However, any firmware image can be sent to it, including, for example, the "osos" partition from production iPod firmware, which enables tethered booting an iPod into [[RetailOS]].

__NOTOC__
[[File:Nano 7G diagnostic mode.jpg|thumb|right|[[Nano 7G]] in diagnostics mode]]
==Diagnostic mode==
This mode will give quite a lot of info about your iPod. Except for the very first iPods, it can be accessed on clickwheel ipods by holding center and rewind when the apple logo appears during reboot. For the [[Nano 6G]] you enter Diagnostics mode by holding down all three boutons. For the [[Nano 7G]] you press and hold all butons other then the "play/pause" buton between the volume butons.
In diagnostics mode you can find info about the battery power check the LCD, buton inputs, radio signals, DRAM, Nand, Accelorometor, dock information and an about section. On touchscreen iPods there is also a section for touchscreen testing.

==USB IDs==
When connected to a computer, the iPod presents a vendor ID of 05ac (Apple Inc.) and a product ID that depends on its model and which mode it is in:
{| class="wikitable"
|-
! colspan="2" | Model
! Normal/disk mode
! DFU mode
! WTF mode
|-
| colspan="2" | [[Nano 2G]]
| <code>1260</code>
| <code>1220</code>
| <code>1240</code>
|-
| colspan="2" | [[Nano 3G]]
| <code>1262</code>
| <code>1223</code>/<code>1224</code>
| <code>1242</code>
|-
| colspan="2" | [[Nano 4G]]
| <code>1263</code>
| <code>1225</code>
| <code>1243</code>
|-
| colspan="2" | [[Nano 5G]]
| <code>1265</code>
| <code>1231</code>
| <code>1246</code>
|-
| colspan="2" | [[Nano 6G]]
| <code>1266</code>
| <code>1232</code>
| <code>1248</code>
|-
| rowspan="2" | [[Nano 7G]]
| Initial
| rowspan="2" | <code>1267</code>
| rowspan="2" | <code>1234</code>
| <code>1249</code>
|-
| Rev A
| <code>124a</code>
|-
| rowspan="4" | [[Classic 6G]]
| [[Classic 6G#Initial|Initial]]
| rowspan="4" | <code>1261</code>
| rowspan="4" | <code>1223</code>
| <code>1241</code>
|-
| [[Classic 6G#Rev A|Rev A]]
| <code>1245</code>
|-
| [[Classic 6G#Rev B|Rev B]]
| <code>1247</code>
|-
| Rev C
| <code>1250</code>
|}

File:Nano 7G diagnostic mode.jpg

2026-04-07T22:40:06Z

ZeOne:

nano 7G in diagnostic mode

Freemyipod:About

2026-04-07T04:05:53Z

ZeOne: added discord as option thingy

This wiki was started in order to collect all information about the freemyipod project, whether that be on the Discord, IRC, website, or mailing list, and compile it all into a convenient and organized location. Please feel free to add/edit information (it is a wiki after all).

Also, '''speculation is good'''! Since this is an ongoing project, some things might not be known for sure. Even still, it is important to put speculation in this wiki to keep ideas flowing. Just make sure you mark speculation by using a question mark or something.

Modes

2026-04-07T03:47:16Z

ZeOne: /* Diagnostic mode */ added how to acess it on nano 6 tomorow i will add and clarify stuf here

At any given time an iPod can be in one of several modes, some of which can be activated by holding down certain buttons while the iPod is booting.

==Normal mode==
"Normal mode" is when the iPod is booted into [[RetailOS]] normally. In this mode the iPod presents as a mass storage device to a computer, allowing files to be transferred. Receiving device information from the iPod, as well as updating the iPod's [[Firmware]], can be done from normal mode through the use of proprietary SCSI commands.

==Disk mode==
In disk mode, like normal mode, the iPod presents as a mass storage device to a computer and can have its information read and firmware updated. When in disk mode, the iPod screen will display, with a black foreground and white background, either a no symbol with the text "Do not disconnect." or a checkmark symbol with the text "OK to disconnect." depending on whether the iPod is connected and if it has been ejected.

Disk mode exists on all iPod models. For more information on how to enter disk mode, refer to [https://support.apple.com/kb/ht1363 this Apple support document]

Disk mode is also referred to as "forced disk mode" in device information received from the iPod.

The place where disk mode is stored on the device differs depending on the iPod model. On the iPod nano (4th generation) and newer, disk mode is stored in the "disk" partition of the [[Firmware]].

==DFU mode==
[https://en.wikipedia.org/wiki/Device_Firmware_Upgrade Device Firmware Upgrade], or DFU, is a standard for upgrading firmware over USB that is used by many devices, including iOS devices and newer iPods. DFU mode exists on the [[Nano 3G]] and newer and the [[Classic 6G]] and newer, coinciding with Apple's switch from PortalPlayer to Samsung processors. DFU mode is contained in the on-processor BootROM. Instructions on entering DFU mode can be found [https://theapplewiki.com/wiki/DFU_Mode#iPod here].

When in DFU mode, the iPod can be sent a special WTF [[IMG1]] firmware image to enter WTF mode. Other IMG1 images cannot be sent in this mode.

The [[Nano 2G]] also has a DFU mode, but it can only be entered by shorting testpoints on the iPod's circuit board or flashing the NOR with an image with an invalid signature or hash. It does, however, support a NOR DFU mode that can be entered by holding down Back+Play right after rebooting the device<ref>https://www.rockbox.org/irc/log-20080904#13:31:44</ref>.

==WTF mode==
In WTF mode (possibly 'Where's The Firmware?'), the iPod will accept any [[IMG1]] image it is sent over DFU and, if signature and decryption checks pass, will attempt to boot to it. It is entered from DFU mode when a specific WTF [[IMG1]] firmware image is sent. While in WTF mode the iPod still uses the standard DFU protocol.

The iTunes behavior upon seeing an iPod in WTF mode is to send it a "recovery" firmware image, which places the iPod in disk mode. However, any firmware image can be sent to it, including, for example, the "osos" partition from production iPod firmware, which enables tethered booting an iPod into [[RetailOS]].

==Diagnostic mode==
This mode will give quite a lot of info about your iPod. Except for the very first iPods, it can be accessed by holding center and rewind when the apple logo appears during reboot. For the [[nano 6G]] you enter Diagnostics mode by holding down all three boutons. <sup>(clarification needed)</sup>

==USB IDs==
When connected to a computer, the iPod presents a vendor ID of 05ac (Apple Inc.) and a product ID that depends on its model and which mode it is in:
{| class="wikitable"
|-
! colspan="2" | Model
! Normal/disk mode
! DFU mode
! WTF mode
|-
| colspan="2" | [[Nano 2G]]
| <code>1260</code>
| <code>1220</code>
| <code>1240</code>
|-
| colspan="2" | [[Nano 3G]]
| <code>1262</code>
| <code>1223</code>/<code>1224</code>
| <code>1242</code>
|-
| colspan="2" | [[Nano 4G]]
| <code>1263</code>
| <code>1225</code>
| <code>1243</code>
|-
| colspan="2" | [[Nano 5G]]
| <code>1265</code>
| <code>1231</code>
| <code>1246</code>
|-
| colspan="2" | [[Nano 6G]]
| <code>1266</code>
| <code>1232</code>
| <code>1248</code>
|-
| rowspan="2" | [[Nano 7G]]
| Initial
| rowspan="2" | <code>1267</code>
| rowspan="2" | <code>1234</code>
| <code>1249</code>
|-
| Rev A
| <code>124a</code>
|-
| rowspan="4" | [[Classic 6G]]
| [[Classic 6G#Initial|Initial]]
| rowspan="4" | <code>1261</code>
| rowspan="4" | <code>1223</code>
| <code>1241</code>
|-
| [[Classic 6G#Rev A|Rev A]]
| <code>1245</code>
|-
| [[Classic 6G#Rev B|Rev B]]
| <code>1247</code>
|-
| Rev C
| <code>1250</code>
|}

Notes vulnerability

2026-04-06T23:42:28Z

ZeOne: Removed broken links

=== Basics ===

The notes functionality is basically a HTML browser included in the iPod.

Basic rules are:
* 64kB files are loaded just after the boot of the iPod, however they are not kept in RAM
* each file is limited to 4kB
* the links point to other files, notes, or media files.
* the link is limited to 256 chars. Apple documents this limit, but they don't say it can cause a buffer overflow ;)

There are many buffers scattered throughout the RAM:
# Some are perfect copies of the disc file, including BOM, etc... These are the ideal buffers to jump to.
# Some have UTF16 processing. These are a burden but can be worked around.
# Some have UTF8 processing. These are virtually unusable.

The main disadvantage to this vulnerability is that small buffers must be located in megabytes of RAM. The [[Pwnage 2.0]] vulnerability is now preferred since it does not have this disadvantage.

=== Dealing with UTF-16 ===

If jumping to a UTF16-processed buffer, the possible character sequences are limited.
The best thing to have the most charset possibilities is to encode the exploit directly to [http://unicode.org/faq/utf_bom.html#utf16-2 UTF16].

The forbidden values in UTF16 are:
* FE FF: UTF16 BOM
* D8 00 up to DF FF: not checked what happens if inserting them
* 00 00: would stop string processing

The payload is placed in the body of the .htm file.

=== Link overflow ===

After loading the file, the links are then checked against the file system.
Many modified copies of this string are present on the stack.
We could identify the most important steps of this process, until the string overflow in the stack (order could be a little different):

*Fist, the link is extracted from the file, and copied to some heap or fixed buffers
*The link is converted to UTF8. Every char >7F is encoded in many bytes
*Then it is passed through an uppercase function
*The URL encoding is decoded : %xx values are converted to their equivalent (limited to valid UTF8 or the like)
*Finally, this link is copied in a limited buffer which is located on the stack. By putting a return adress repetitively in the link, the processor will jump to this adress.

For conveninece, the return adress is always encoded using %xx URL encodings. This avoids problems with some special chars and with lowercase chars. Possible values are 00 < xx <= 7F. (the unescaped chars seem to be transcoded from ISO-8859-1 to UTF8 again)

== Exploiting, getting execution ==

(Credit for the exploit goes to [[Sto]])

To exploit, we used JTAG to determine the correct paddings and return adresses of the buffers.

In my case, I had to place a second file to influence the buffer's location in order to have a return adress which conforms to UTF8 (no byte of the return address can be >7F).

An example of a working overflow file set no longer exists but would go like this.
The file "Brokenlink.htm" begins with a UTF16 BOM, then "AA" as padding, then the overflowing link (the return address is 0x08640D60), then a NOP (opcode E1A01001) landing zone, and finally a "while(1);"

This "while(1);" does not freeze or reset the iPod, but instead just crashes the background task since interrupts are still enabled. You can still scroll the menus, but the ipod will freeze as soon as you press "play" or if you enter the notes menu, etc...

The processor arrives at the notes payload in supervisor state, with interrupts activated (menu scrolling) and so on.
Caches are also activated. Disabling them is recommended if you are performing complex IO & DMA stuff because they can interfere.

== Dumping memories ==

For dumping the iPod's memories, first the cache was used (JTAG dumps), but it turned out that the UART is more flexible.
The dumps can't be published here, due to copyright issues.

== UART ==

The UART is exactly the same as described in the datasheet (if one did indeed exist).

There used to be a guide on building a UART cable for the iPod dock connector but it no longer exists so just ask the comunity if you are looking for info on how to make one.

My complete setup is a little bit more complex: [[Image:Nanofighter.jpg|100px|thumb]]
* left board: DLC5 JTAG interface, modified for reset and USB switching
* right board: some programmer board, only the ST232 is used
* upper board: this was the JTAG scanner, now only the power supply and 5V regulator are used
* middle board: all the switching stuff

To automatically enter DFU mode, I wired transistors to the USB 5V line, and to the "play" and "enter" buttons of the clickwheel.

== USB ==
USB was eventually figured out so we no longer needed the UART cables.

Notes vulnerability

2026-04-06T23:29:39Z

ZeOne: removed nonworking link

=== Basics ===

The notes functionality is basically a HTML browser included in the iPod.

Basic rules are:
* 64kB files are loaded just after the boot of the iPod, however they are not kept in RAM
* each file is limited to 4kB
* the links point to other files, notes, or media files.
* the link is limited to 256 chars. Apple documents this limit, but they don't say it can cause a buffer overflow ;)

There are many buffers scattered throughout the RAM:
# Some are perfect copies of the disc file, including BOM, etc... These are the ideal buffers to jump to.
# Some have UTF16 processing. These are a burden but can be worked around.
# Some have UTF8 processing. These are virtually unusable.

The main disadvantage to this vulnerability is that small buffers must be located in megabytes of RAM. The [[Pwnage 2.0]] vulnerability is now preferred since it does not have this disadvantage.

=== Dealing with UTF-16 ===

If jumping to a UTF16-processed buffer, the possible character sequences are limited.
The best thing to have the most charset possibilities is to encode the exploit directly to [http://unicode.org/faq/utf_bom.html#utf16-2 UTF16].

The forbidden values in UTF16 are:
* FE FF: UTF16 BOM
* D8 00 up to DF FF: not checked what happens if inserting them
* 00 00: would stop string processing

The payload is placed in the body of the .htm file.

=== Link overflow ===

After loading the file, the links are then checked against the file system.
Many modified copies of this string are present on the stack.
We could identify the most important steps of this process, until the string overflow in the stack (order could be a little different):

*Fist, the link is extracted from the file, and copied to some heap or fixed buffers
*The link is converted to UTF8. Every char >7F is encoded in many bytes
*Then it is passed through an uppercase function
*The URL encoding is decoded : %xx values are converted to their equivalent (limited to valid UTF8 or the like)
*Finally, this link is copied in a limited buffer which is located on the stack. By putting a return adress repetitively in the link, the processor will jump to this adress.

For conveninece, the return adress is always encoded using %xx URL encodings. This avoids problems with some special chars and with lowercase chars. Possible values are 00 < xx <= 7F. (the unescaped chars seem to be transcoded from ISO-8859-1 to UTF8 again)

== Exploiting, getting execution ==

(Credit for the exploit goes to [[Sto]])

To exploit, we used [[Nano2G%2BHW%2Banalysis|JTAG]] to determine the correct paddings and return adresses of the buffers.

In my case, I had to place a second file to influence the buffer's location in order to have a return adress which conforms to UTF8 (no byte of the return address can be >7F).

An example of a working overflow file set is [http://f4eru.free.fr/8701/Notes_overflow_example.zip here].
The file "Brokenlink.htm" begins with a UTF16 BOM, then "AA" as padding, then the overflowing link (the return address is 0x08640D60), then a NOP (opcode E1A01001) landing zone, and finally a "while(1);"

This "while(1);" does not freeze or reset the iPod, but instead just crashes the background task since interrupts are still enabled. You can still scroll the menus, but the ipod will freeze as soon as you press "play" or if you enter the notes menu, etc...

The processor arrives at the notes payload in supervisor state, with interrupts activated (menu scrolling) and so on.
Caches are also activated. Disabling them is recommended if you are performing complex IO & DMA stuff because they can interfere.

== Dumping memories ==

For dumping the iPod's memories, first the cache was used (JTAG dumps), but it turned out that the UART is more flexible.
The dumps can't be published here, due to copyright issues.

== UART ==

The UART is exactly the same as described in the datasheet (if one did indeed exist).

See [http://pargon.nl/?p=6 this guide] for building a UART cable for the iPod dock connector.

My complete setup is a little bit more complex: [[Image:Nanofighter.jpg|100px|thumb]]
* left board: DLC5 JTAG interface, modified for reset and USB switching
* right board: some programmer board, only the ST232 is used
* upper board: this was the JTAG scanner, now only the power supply and 5V regulator are used
* middle board: all the switching stuff

To automatically enter DFU mode, I wired transistors to the USB 5V line, and to the "play" and "enter" buttons of the clickwheel.

== USB ==
USB was eventually figured out so we no longer needed the UART cables.

EmCORE Installation/iPodTouch

2026-04-06T22:34:41Z

ZeOne: added the fact you can jailbreak the touch

Sorry, your device is not currently supported by [[emCORE]].

Porting [[emCORE]] to a new device is generally a lot of work and requires lots of experience with embedded system development.

The exact amount of work needed varies greatly and depends on the complexity of the device and similarities to devices that [[emCORE]] has already been ported to.

Given that it would take several years of work to reach a state where [[emCORE]] could compete with the features of the original firmware, there doesn't seem to be much interest in an [[emCORE]] port to this device.

On most iPod touch's you can jailbreak them using diferent tools. You can find more info at [https://pangu8.com/ pangu8] but
=== please be wherey of any jailbreak asking you to pay money they are scams ===
free options are available look elsewhere if pangu8 doesent tell you how (I think the apple wiki has some info).

User:ZeOne

2026-04-06T22:18:40Z

ZeOne: added me edditing pages

I'm just some dude working on exploiting the nano 6g i live in Winnipeg, Canada. I'm a cyclist on team Manitoba! My username on discord is zeone_28574 you can dm me there if you have questions or please just ping @zeone in the ipod nano hacking discord server.

My iPods:
2 nano 6g
1 nano 5g (kinda dead, no battery and the screen's ribbon cable is broken)
1 nano 7g
2 iPod touch 4th gen (one 8gb one 32gb)

Currently my plan is to reverse engineer the S5Late-8723 exploit the S5Late exploit and wInd3x to get S5Late-8723 (the nano 6 version of S5Late) working with wInd3x to maybe eventually port linux to the nano 6g. I also work on updating the freemyipod pages to make them more acurate and up to date when i cant work on my nano.

My main computer is a 2014 macbook pro but i also have a Ubuntu PC.
I also have access to raspberry pi's.

This page was last updated by me Sunday April 5th 2026

Linux4nano

2026-04-06T22:16:22Z

ZeOne: added the existing link to basecly the last linux4nano page

This project derived from the linux4nano project in July/August 2010. The linux4nano project had the goal - as the name might already indicate - to port Linux to the [[Nano 2G|iPod nano 2g]]. As none of the project members wanted to do that and as the project already cared about [[Hardware|other iPods]] we decided to change the name to freemyipod and relaunch the project. there is still a link that is active but is for archiving purposes only as it has nothing usefull [https://hackaday.com/tag/linux4nano/ linux4nano]

EmCORE Installation/iPodNano6G

2026-04-06T22:09:06Z

ZeOne: updated the page to include the S5Late exploit info and links for nano 6 version so it is acurate

Sorry, your device is not currently supported by [[emCORE]].

Porting [[emCORE]] to a new device is generally a lot of work and requires lots of experience with embedded system development.

The exact amount of work needed varies greatly and depends on the complexity of the device and similarities to devices that [[emCORE]] has already been ported to.

An exploit has been found [[S5Late]] and a modified version made to work with the [[nano 6G]] exists. (find it here [https://github.com/NyanSatan/S5Late-8723 S5Late-8723]) there is some work in progress to getting it to work with wInd3x and getting alpine linux booted on it (not emCORE for now).

Linux

2026-04-06T16:04:29Z

ZeOne: Added the note that im working on the nano 6G

== Current: Freemyipod Linux ==

We are working on supporting Samsung/S5L-based devices which have an MMU. Currently our main focus is the [[Nano 7G]], there are also builds for [[Nano 2G]] and [[Nano 5G]]. An experimental source tree is available on [https://github.com/freemyipod/linux github.com/freemyipod/linux]. Aditionaly [[ZeOne]] is working on making it work with the [[nano 6G]] you can read more about that on his page.

=== User Guide ===

Not yet available, as the Linux port isn't yet practical to use. We have no storage drivers, no sound driver...

=== Developer Guide ===

If you're somewhat familiar with embedded Linux, you can get started by building [[WInd3x|wInd3x]], [[U-Boot]] and the Kernel as described below. However, '''you will have to provide your own userland''' (eg. buildroot, archlinux arm, ... anything armv6 compatible) and either run it from an initramfs or over NFS. '''A serial cable is not necessary, but very useful to troubleshoot boot issues.'''

==== Build everything ====

''These are not copy-paste instructions. You are expected to understand what's happening.'

You will need an arm-none-eabi- toolchain into your $PATH, eg. gcc-arm-embedded from your package manager.

First, wInd3x: this will be used to run u-boot.

$ git clone https://github.com/freemyipod/wInd3x
$ cd wInd3x
$ go build ./cmd/wInd3x

Second, U-Boot:

$ git clone https://github.com/freemyipod/u-boot
$ cd u-boot
$ git checkout s5l87xx
$ make apple_ipodnano2g_defconfig # for Nano 2G OR
$ make apple_n33_defconfig # for Nano 5G OR
$ make apple_n31_defconfig # for Nano 7G
$ make CROSS_COMPILE=arm-none-eabi- -j $(nproc) u-boot.bin

Third, Linux:

$ git clone https://github.com/freemyipod/linux
$ cd linux
$ git checkout n5g-wip # for Nano 5G OR
$ git checkout n7g-wip # for Nano 7G
$ make ARCH=arm nano5g_defconfig # for Nano 5G
$ make ARCH=arm apple_n31_defconfig # for Nano 7G
$ make ARCH=arm CROSS_COMPILE=arm-none-eabi- -j $(nproc) zImage

By this point, have a initramfs ready. If you wanna boot directly from nfs, edit CMDLINE in the kernel .config accordingly.

Finally, bundle together an u-boot image containing the kernel, your initramfs, and the device-tree (built by u-boot):

$ mkimage -A arm -C none -O linux -T multi -a 0x08000000 -e 0x08000000 -d arch/arm/boot/zImage:initramfs.gz:../u-boot/arch/arm/dts/s5l8730.dtb mImage

''mImage'' is your combined image.

==== Running ====

Connect your iPod nano in DFU mode.

Run u-boot using wInd3x:

$ ./wInd3x cfw run ../u-boot/u-boot.bin

This should start u-boot. Running this for the first time will take a while, as some bootloader stages need to be downloaded, decrypted and modified. A new USB device (05ac:8007) appear on your host. Use dfu-util to upload mImage:

dfu-util -d 05ac:8007 -D mImage && dfu-util -d 05ac:8007 -e

Then, in the serial console you'll see Linux booting:

## Booting kernel from Legacy Image at 08000000 ...
...
Starting kernel ...

[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 6.2.0-rc4-00476-g4c4af4d7e53c (q3k@mimeomia) (arm-none-eabi-gcc (GNU Arm Embedded Toolchain 10.3-2021.10) 10.3.1 20210824 (release), GNU ld (GNU Arm Embedded Toolchain 10.3-2021.10) 2.36.1.20210621) #70 Fri Jan 20 18:02:56 CET 2023
...

The LCD display should start up and show a boot log. If not, try adding <code>console=tty0</code> to your CMDLINE? You might also use <code>fbcon=rotate:1</code> to rotate the framebuffer 90 degrees.

If everything goes well, the kernel should boot up and attempt to mount a rootfs. It's up to you to get this part working, at least until we streamline the process. The USB CDC EEM ethernet gadget should also appear on your host (probably as usb0, or some long systemd predictable name). The other end will be visible as 'usb0' on the device.

On [[Nano 7G]] you'll need a DCSD cable (Alex/Magico), and the command line to get proper serial output:

picocom --baud 115200 --imap lfcrlf /dev/ttyUSB0

Now go on and have a go at reverse-engineering some peripherals! :)

== Legacy: iPodLinux ==

The [http://www.ipodlinux.org/ iPodLinux] project supports all the PortalPlayer based iPods: iPod 1G-4G, Photo/Color, Video/5G/5.5G, Mini, iPod Nano 1G. It is currently semi-abandoned, and uses a very old ucLinux kernel build.

User:ZeOne

2026-04-06T02:07:23Z

ZeOne: Added a page for me!

I'm just some dude working on exploiting the nano 6g i live in Winnipeg, Canada. I'm a cyclist on team Manitoba! My username on discord is zeone_28574 you can dm me there if you have questions or please just ping @zeone in the ipod nano hacking discord server.

My iPods:
2 nano 6g
1 nano 5g (kinda dead, no battery and the screen's ribbon cable is broken)
1 nano 7g
2 iPod touch 4th gen (one 8gb one 32gb)

Currently my plan is to reverse engineer the S5Late-8723 exploit the S5Late exploit and wInd3x to get S5Late-8723 (the nano 6 version of S5Late) working with wInd3x to maybe eventually port linux to the nano 6g.

My main computer is a 2014 macbook pro but i also have a Ubuntu PC.
I also have access to raspberry pi's.

This page was last updated by me Sunday April 5th 2026

Linux

2026-04-03T23:29:03Z

ZeOne: changed main focus note at start from nano 5g to 7g

== Current: Freemyipod Linux ==

We are working on supporting Samsung/S5L-based devices which have an MMU. Currently our main focus is the [[Nano 7G]], there are also builds for [[Nano 2G]] and [[Nano 5G]]. An experimental source tree is available on [https://github.com/freemyipod/linux github.com/freemyipod/linux].

=== User Guide ===

Not yet available, as the Linux port isn't yet practical to use. We have no storage drivers, no sound driver...

=== Developer Guide ===

If you're somewhat familiar with embedded Linux, you can get started by building [[WInd3x|wInd3x]], [[U-Boot]] and the Kernel as described below. However, '''you will have to provide your own userland''' (eg. buildroot, archlinux arm, ... anything armv6 compatible) and either run it from an initramfs or over NFS. '''A serial cable is not necessary, but very useful to troubleshoot boot issues.'''

==== Build everything ====

''These are not copy-paste instructions. You are expected to understand what's happening.'

You will need an arm-none-eabi- toolchain into your $PATH, eg. gcc-arm-embedded from your package manager.

First, wInd3x: this will be used to run u-boot.

$ git clone https://github.com/freemyipod/wInd3x
$ cd wInd3x
$ go build ./cmd/wInd3x

Second, U-Boot:

$ git clone https://github.com/freemyipod/u-boot
$ cd u-boot
$ git checkout s5l87xx
$ make apple_ipodnano2g_defconfig # for Nano 2G OR
$ make apple_n33_defconfig # for Nano 5G OR
$ make apple_n31_defconfig # for Nano 7G
$ make CROSS_COMPILE=arm-none-eabi- -j $(nproc) u-boot.bin

Third, Linux:

$ git clone https://github.com/freemyipod/linux
$ cd linux
$ git checkout n5g-wip # for Nano 5G OR
$ git checkout n7g-wip # for Nano 7G
$ make ARCH=arm nano5g_defconfig # for Nano 5G
$ make ARCH=arm apple_n31_defconfig # for Nano 7G
$ make ARCH=arm CROSS_COMPILE=arm-none-eabi- -j $(nproc) zImage

By this point, have a initramfs ready. If you wanna boot directly from nfs, edit CMDLINE in the kernel .config accordingly.

Finally, bundle together an u-boot image containing the kernel, your initramfs, and the device-tree (built by u-boot):

$ mkimage -A arm -C none -O linux -T multi -a 0x08000000 -e 0x08000000 -d arch/arm/boot/zImage:initramfs.gz:../u-boot/arch/arm/dts/s5l8730.dtb mImage

''mImage'' is your combined image.

==== Running ====

Connect your iPod nano in DFU mode.

Run u-boot using wInd3x:

$ ./wInd3x cfw run ../u-boot/u-boot.bin

This should start u-boot. Running this for the first time will take a while, as some bootloader stages need to be downloaded, decrypted and modified. A new USB device (05ac:8007) appear on your host. Use dfu-util to upload mImage:

dfu-util -d 05ac:8007 -D mImage && dfu-util -d 05ac:8007 -e

Then, in the serial console you'll see Linux booting:

## Booting kernel from Legacy Image at 08000000 ...
...
Starting kernel ...

[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 6.2.0-rc4-00476-g4c4af4d7e53c (q3k@mimeomia) (arm-none-eabi-gcc (GNU Arm Embedded Toolchain 10.3-2021.10) 10.3.1 20210824 (release), GNU ld (GNU Arm Embedded Toolchain 10.3-2021.10) 2.36.1.20210621) #70 Fri Jan 20 18:02:56 CET 2023
...

The LCD display should start up and show a boot log. If not, try adding <code>console=tty0</code> to your CMDLINE? You might also use <code>fbcon=rotate:1</code> to rotate the framebuffer 90 degrees.

If everything goes well, the kernel should boot up and attempt to mount a rootfs. It's up to you to get this part working, at least until we streamline the process. The USB CDC EEM ethernet gadget should also appear on your host (probably as usb0, or some long systemd predictable name). The other end will be visible as 'usb0' on the device.

On [[Nano 7G]] you'll need a DCSD cable (Alex/Magico), and the command line to get proper serial output:

picocom --baud 115200 --imap lfcrlf /dev/ttyUSB0

Now go on and have a go at reverse-engineering some peripherals! :)

== Legacy: iPodLinux ==

The [http://www.ipodlinux.org/ iPodLinux] project supports all the PortalPlayer based iPods: iPod 1G-4G, Photo/Color, Video/5G/5.5G, Mini, iPod Nano 1G. It is currently semi-abandoned, and uses a very old ucLinux kernel build.

Linux

2026-04-03T23:27:30Z

ZeOne: changed main focus note at start from nano 5g to 7g

== Current: Freemyipod Linux ==

We are working on supporting Samsung/S5L-based devices which have an MMU. Currently our main focus is the [[Nano 7G]], there are also builds for [[Nano 2G]] and [[Nano 5]]. An experimental source tree is available on [https://github.com/freemyipod/linux github.com/freemyipod/linux].

=== User Guide ===

Not yet available, as the Linux port isn't yet practical to use. We have no storage drivers, no sound driver...

=== Developer Guide ===

If you're somewhat familiar with embedded Linux, you can get started by building [[WInd3x|wInd3x]], [[U-Boot]] and the Kernel as described below. However, '''you will have to provide your own userland''' (eg. buildroot, archlinux arm, ... anything armv6 compatible) and either run it from an initramfs or over NFS. '''A serial cable is not necessary, but very useful to troubleshoot boot issues.'''

==== Build everything ====

''These are not copy-paste instructions. You are expected to understand what's happening.'

You will need an arm-none-eabi- toolchain into your $PATH, eg. gcc-arm-embedded from your package manager.

First, wInd3x: this will be used to run u-boot.

$ git clone https://github.com/freemyipod/wInd3x
$ cd wInd3x
$ go build ./cmd/wInd3x

Second, U-Boot:

$ git clone https://github.com/freemyipod/u-boot
$ cd u-boot
$ git checkout s5l87xx
$ make apple_ipodnano2g_defconfig # for Nano 2G OR
$ make apple_n33_defconfig # for Nano 5G OR
$ make apple_n31_defconfig # for Nano 7G
$ make CROSS_COMPILE=arm-none-eabi- -j $(nproc) u-boot.bin

Third, Linux:

$ git clone https://github.com/freemyipod/linux
$ cd linux
$ git checkout n5g-wip # for Nano 5G OR
$ git checkout n7g-wip # for Nano 7G
$ make ARCH=arm nano5g_defconfig # for Nano 5G
$ make ARCH=arm apple_n31_defconfig # for Nano 7G
$ make ARCH=arm CROSS_COMPILE=arm-none-eabi- -j $(nproc) zImage

By this point, have a initramfs ready. If you wanna boot directly from nfs, edit CMDLINE in the kernel .config accordingly.

Finally, bundle together an u-boot image containing the kernel, your initramfs, and the device-tree (built by u-boot):

$ mkimage -A arm -C none -O linux -T multi -a 0x08000000 -e 0x08000000 -d arch/arm/boot/zImage:initramfs.gz:../u-boot/arch/arm/dts/s5l8730.dtb mImage

''mImage'' is your combined image.

==== Running ====

Connect your iPod nano in DFU mode.

Run u-boot using wInd3x:

$ ./wInd3x cfw run ../u-boot/u-boot.bin

This should start u-boot. Running this for the first time will take a while, as some bootloader stages need to be downloaded, decrypted and modified. A new USB device (05ac:8007) appear on your host. Use dfu-util to upload mImage:

dfu-util -d 05ac:8007 -D mImage && dfu-util -d 05ac:8007 -e

Then, in the serial console you'll see Linux booting:

## Booting kernel from Legacy Image at 08000000 ...
...
Starting kernel ...

[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 6.2.0-rc4-00476-g4c4af4d7e53c (q3k@mimeomia) (arm-none-eabi-gcc (GNU Arm Embedded Toolchain 10.3-2021.10) 10.3.1 20210824 (release), GNU ld (GNU Arm Embedded Toolchain 10.3-2021.10) 2.36.1.20210621) #70 Fri Jan 20 18:02:56 CET 2023
...

The LCD display should start up and show a boot log. If not, try adding <code>console=tty0</code> to your CMDLINE? You might also use <code>fbcon=rotate:1</code> to rotate the framebuffer 90 degrees.

If everything goes well, the kernel should boot up and attempt to mount a rootfs. It's up to you to get this part working, at least until we streamline the process. The USB CDC EEM ethernet gadget should also appear on your host (probably as usb0, or some long systemd predictable name). The other end will be visible as 'usb0' on the device.

On [[Nano 7G]] you'll need a DCSD cable (Alex/Magico), and the command line to get proper serial output:

picocom --baud 115200 --imap lfcrlf /dev/ttyUSB0

Now go on and have a go at reverse-engineering some peripherals! :)

== Legacy: iPodLinux ==

The [http://www.ipodlinux.org/ iPodLinux] project supports all the PortalPlayer based iPods: iPod 1G-4G, Photo/Color, Video/5G/5.5G, Mini, iPod Nano 1G. It is currently semi-abandoned, and uses a very old ucLinux kernel build.