freemyipod - Recent changes [en]

Restore iPod without iTunes

User890104 — Sun, 31 May 2026 16:51:08 GMT

rewrite/reformat the guide, add linux/mac instructions

Hardware

User890104 — Sat, 30 May 2026 15:52:17 GMT

fix NOR flash datasheet URLs

← Older revision		Revision as of 15:52, 30 May 2026
Line 11:		Line 11:
	\|ARM7TDMI x 2		\|ARM7TDMI x 2
	\|[https://files.freemyipod.org/misc/K4M56163PG.pdf K4M56163PG] (32MiB)		\|[https://files.freemyipod.org/misc/K4M56163PG.pdf K4M56163PG] (32MiB)
	\|[~~http~~://~~www~~.~~sst~~.~~com~~/~~products~~/~~?inode=41856~~ SST39WF400A] (512KiB)		\|[https://files.freemyipod.org/misc/SST39WF400A.pdf SST39WF400A] (512KiB)
	\|		\|
	\|14/17		\|14/17
Line 20:		Line 20:
	\|ARM940T		\|ARM940T
	\|[https://files.freemyipod.org/misc/K4M56163PG.pdf K4M56163PG] (32MiB)		\|[https://files.freemyipod.org/misc/K4M56163PG.pdf K4M56163PG] (32MiB)
	\|[~~http~~://~~www~~.~~sst~~.~~com~~/~~products~~/~~?inode=41422~~ SST39WF800A] (1MiB)		\|[https://files.freemyipod.org/misc/SST39WF800A.pdf SST39WF800A] (1MiB)
	\|N36		\|N36
	\|19/29		\|19/29
Line 29:		Line 29:
	\|rowspan="4"\|ARM926		\|rowspan="4"\|ARM926
	\|[https://files.freemyipod.org/misc/K4X56163PI-L.pdf K4X56163PI] (32MiB)		\|[https://files.freemyipod.org/misc/K4X56163PI-L.pdf K4X56163PI] (32MiB)
	\|rowspan="4"\|[~~http~~://~~www~~.~~sst~~.~~com~~/~~products~~/~~?inode=41340~~ SST25VF080B] (1MiB)		\|rowspan="4"\|[https://files.freemyipod.org/misc/SST25VF080B.pdf SST25VF080B] (1MiB)
	\|N46		\|N46
	\|26		\|26

Nano 2G

User890104 — Sat, 30 May 2026 15:00:25 GMT

fix RAM chip datasheet link

← Older revision		Revision as of 15:00, 30 May 2026
Line 14:		Line 14:
	\| 2		\| 2
	\| SDRAM		\| SDRAM
	\| [~~http~~://~~www~~.~~samsung~~.~~com~~/~~global~~/~~business/semiconductor/productInfo~~.~~do?fmly_id=753&partnum=K4M56163PG~~ Samsung K4M56163PG]		\| [https://files.freemyipod.org/misc/K4M56163PG.pdf Samsung K4M56163PG]
	\|SEC 637 GG75, K4M56163PG, AQH373P1		\|SEC 637 GG75, K4M56163PG, AQH373P1
	\| ~~[http://pdf1.alldatasheet.net/datasheet-pdf/view/168204/SAMSUNG/K4M56163PG.html here] is the datasheet.~~ This is the same chip used in the [[Nano 1G]]. Sometimes the Qimonda [http://www.alldatasheet.com/datasheet-pdf/pdf/207179/QIMONDA/HYE18L256169BFX-7.5.html HYE18L256] chip is used instead.		\| This is the same chip used in the [[Nano 1G]]. Sometimes the Qimonda [http://www.alldatasheet.com/datasheet-pdf/pdf/207179/QIMONDA/HYE18L256169BFX-7.5.html HYE18L256] chip is used instead.
	\|-		\|-
	\| 3		\| 3

Hardware

User890104 — Sat, 30 May 2026 14:59:03 GMT

fix RAM chip link

← Older revision		Revision as of 14:59, 30 May 2026
Line 10:		Line 10:
	\|M26		\|M26
	\|ARM7TDMI x 2		\|ARM7TDMI x 2
	\|[~~http~~://~~www~~.~~samsung~~.~~com~~/~~global~~/~~business/semiconductor/productInfo~~.~~do?fmly_id=753&partnum=K4M56163PG~~ K4M56163PG] (32MiB)		\|[https://files.freemyipod.org/misc/K4M56163PG.pdf K4M56163PG] (32MiB)
	\|[http://www.sst.com/products/?inode=41856 SST39WF400A] (512KiB)		\|[http://www.sst.com/products/?inode=41856 SST39WF400A] (512KiB)
	\|		\|
Line 19:		Line 19:
	\|M1		\|M1
	\|ARM940T		\|ARM940T
	\|[~~http~~://~~www~~.~~samsung~~.~~com~~/~~global~~/~~business/semiconductor/productInfo~~.~~do?fmly_id=753&partnum=K4M56163PG~~ K4M56163PG] (32MiB)		\|[https://files.freemyipod.org/misc/K4M56163PG.pdf K4M56163PG] (32MiB)
	\|[http://www.sst.com/products/?inode=41422 SST39WF800A] (1MiB)		\|[http://www.sst.com/products/?inode=41422 SST39WF800A] (1MiB)
	\|N36		\|N36

Nano 1G

User890104 — Sat, 30 May 2026 14:57:49 GMT

fix RAM chip datasheet link

← Older revision		Revision as of 14:57, 30 May 2026
Line 15:		Line 15:
	\| 5		\| 5
	\| SDRAM		\| SDRAM
	\| [~~http~~://~~www~~.~~samsung~~.~~com~~/~~global~~/~~business/semiconductor/productInfo~~.~~do?fmly_id=753&partnum=K4M56163PG~~ Samsung K4M56163PG]		\| [https://files.freemyipod.org/misc/K4M56163PG.pdf Samsung K4M56163PG]
	\| SEC534 BG75, K4M56163PG, AQF061WX		\| SEC534 BG75, K4M56163PG, AQF061WX
	\| ~~A datasheet for this~~ Mobile SDRAM chip ~~can be found [http://pdf1.alldatasheet.net/datasheet-pdf/view/168204/SAMSUNG/K4M56163PG.html here].~~		\| Mobile SDRAM chip
	\|-		\|-
	\| 10		\| 10

Hardware

User890104 — Sat, 30 May 2026 14:52:29 GMT

merge ipod classic device code names

← Older revision		Revision as of 14:52, 30 May 2026
Line 35:		Line 35:
	\|[[Classic 1G]]		\|[[Classic 1G]]
	\|rowspan="3"\|[https://files.freemyipod.org/misc/K4X51163PE-L.pdf K4X51163PE] (64MiB)		\|rowspan="3"\|[https://files.freemyipod.org/misc/K4X51163PE-L.pdf K4X51163PE] (64MiB)
	\|N25		\|rowspan="3"\|N25
	\|24		\|24
	\|-		\|-
	\|[[Classic 2G]]		\|[[Classic 2G]]
	~~\|N25~~
	\|33		\|33
	\|-		\|-
	\|[[Classic 3G]]		\|[[Classic 3G]]
	~~\|N25~~
	\|35/38		\|35/38
	\|-		\|-

Nano 3G

User890104 — Sat, 30 May 2026 14:49:34 GMT

fix RAM chip link

← Older revision		Revision as of 14:49, 30 May 2026
Line 14:		Line 14:
	\| 3		\| 3
	\| SDRAM		\| SDRAM
	\| [~~http~~://~~www~~.~~samsung~~.~~com~~/~~global~~/~~system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi~~.pdf K4X56163PI] or Qimonda HYE18M169CX75		\| [https://files.freemyipod.org/misc/K4X56163PI-L.pdf K4X56163PI] or Qimonda HYE18M169CX75
	\| 0728, C, HYE18M256, 169CX75, W3338092		\| 0728, C, HYE18M256, 169CX75, W3338092
	\| SDRAM - Mobile DDR, 256Mb, 1.8V. WORK ON THIS: Like the flash chip, the memory also varies. The most popular chip seems to be the [~~http~~://~~www~~.~~samsung~~.~~com~~/~~global~~/~~system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi~~.pdf K4X56163PI]. Another similar one that is sometimes used is the Qimonda HYE18M169CX75		\| SDRAM - Mobile DDR, 256Mb, 1.8V. WORK ON THIS: Like the flash chip, the memory also varies. The most popular chip seems to be the [https://files.freemyipod.org/misc/K4X56163PI-L.pdf K4X56163PI]. Another similar one that is sometimes used is the Qimonda HYE18M169CX75
	\|-		\|-
	\| 5		\| 5

Hardware

User890104 — Sat, 30 May 2026 14:47:16 GMT

fix S5L8702 RAM datasheet link

← Older revision		Revision as of 14:47, 30 May 2026
(One intermediate revision by the same user not shown)
Line 4:		Line 4:

	{\| class="wikitable"		{\| class="wikitable"
	! Generation !! SoC !! CPU Core !! RAM !! NOR/Utility Flash !! Device ~~Code Name !! SoC Family~~ Code Name !! UpdaterFamilyID		! Generation !! SoC !! SoC Family Code Name !! CPU Core !! RAM !! NOR/Utility Flash !! Device Code Name!! UpdaterFamilyID
	\|-		\|-
	\|[[Nano 1G]]		\|[[Nano 1G]]
	\|PP5021C-TDF		\|PP5021C-TDF
			\|M26
	\|ARM7TDMI x 2		\|ARM7TDMI x 2
	\|[http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=753&partnum=K4M56163PG K4M56163PG] (32MiB)		\|[http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=753&partnum=K4M56163PG K4M56163PG] (32MiB)
	\|[http://www.sst.com/products/?inode=41856 SST39WF400A] (512KiB)		\|[http://www.sst.com/products/?inode=41856 SST39WF400A] (512KiB)
	~~\|M26~~
	\|		\|
	\|14/17		\|14/17
Line 17:		Line 17:
	\|[[Nano 2G]]		\|[[Nano 2G]]
	\|S5L8701		\|S5L8701
			\|M1
	\|ARM940T		\|ARM940T
	\|[http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=753&partnum=K4M56163PG K4M56163PG] (32MiB)		\|[http://www.samsung.com/global/business/semiconductor/productInfo.do?fmly_id=753&partnum=K4M56163PG K4M56163PG] (32MiB)
	\|[http://www.sst.com/products/?inode=41422 SST39WF800A] (1MiB)		\|[http://www.sst.com/products/?inode=41422 SST39WF800A] (1MiB)
	\|N36		\|N36
	~~\|M1~~
	\|19/29		\|19/29
	\|-		\|-
	\|[[Nano 3G]]		\|[[Nano 3G]]
	\|S5L8702		\|rowspan="4"\|S5L8702
	\|ARM926		\|rowspan="4"\|M1A
	\|[~~http~~://~~www~~.~~samsung~~.~~com~~/~~global~~/~~system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi~~.pdf K4X56163PI] (32MiB)		\|rowspan="4"\|ARM926
	\|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)		\|[https://files.freemyipod.org/misc/K4X56163PI-L.pdf K4X56163PI] (32MiB)
			\|rowspan="4"\|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)
	\|N46		\|N46
	~~\|M1A~~
	\|26		\|26
			\|-
			\|[[Classic 1G]]
			\|rowspan="3"\|[https://files.freemyipod.org/misc/K4X51163PE-L.pdf K4X51163PE] (64MiB)
			\|N25
			\|24
			\|-
			\|[[Classic 2G]]
			\|N25
			\|33
			\|-
			\|[[Classic 3G]]
			\|N25
			\|35/38
	\|-		\|-
	\|[[Nano 4G]]		\|[[Nano 4G]]
	\|S5L8720		\|rowspan="2"\|S5L8720
	\|ARM1176		\|M2S
			\|rowspan="4"\|ARM1176
	\|Integrated (32MiB)		\|Integrated (32MiB)
	\|''none''		\|''none''
	\|N58		\|N58
	~~\|M2~~
	\|31		\|31
			\|-
			\|iPod touch (2nd generation)
			\|M2P
			\|Integrated (128MiB)
			\|''none''
			\|N72AP
			\|
	\|-		\|-
	\|[[Nano 5G]]		\|[[Nano 5G]]
	\|S5L8730		\|S5L8730
	\|~~ARM1176~~		\|M2?
	\|Integrated (64MiB)		\|Integrated (64MiB)
	\|''none''		\|''none''
	\|N33		\|N33
	~~\|M2~~
	\|34		\|34
	\|-		\|-
	\|[[~~Nano 6G\|~~Nano 6G]]		\|[[Nano 6G]]
	\|S5L8723		\|S5L8723
	\|~~ARM1176~~		\|?
	\|Integrated (64MiB)		\|Integrated (64MiB)
	\|''none''		\|''none''
	\|N20<ref>N20 Snowfox in the ''Diagnostics mode'' header</ref>		\|N20<ref>N20 Snowfox in the ''Diagnostics mode'' header</ref>
	\|
	\|36		\|36
	\|-		\|-
	\|[[~~Nano 7G\|~~Nano 7G]]		\|[[Nano 7G]]
	\|S5L8740		\|S5L8740
			\|M2R<ref>m2rfmssWriteBLPage in 1.0.4 [[RetailOS]]</ref>
	\|Cortex A5		\|Cortex A5
	\|Integrated (64MiB)		\|Integrated (64MiB)
	\|''none''		\|''none''
	\|N31<ref>N31 Snowfox in the ''Diagnostics mode'' header</ref>		\|N31<ref>N31 Snowfox in the ''Diagnostics mode'' header</ref>
	~~\|M2R<ref>m2rfmssWriteBLPage in 1.0.4 [[RetailOS]]</ref>~~
	\|37		\|37
	\|-
	~~\|[[Classic 1G]]~~
	~~\|S5L8702~~
	~~\|ARM926~~
	~~\|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (64MiB)~~
	~~\|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)~~
	~~\|N25~~
	~~\|M1A~~
	~~\|24~~
	\|-
	~~\|[[Classic 2G]]~~
	~~\|S5L8702~~
	~~\|ARM926~~
	~~\|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X56163PI] (64MiB)~~
	~~\|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)~~
	~~\|N25~~
	~~\|M1A~~
	~~\|33~~
	\|-
	~~\|[[Classic 3G]]~~
	~~\|S5L8702~~
	~~\|ARM926~~
	~~\|[http://www.samsung.com/global/system/business/semiconductor/product/2007/11/13/236652ds_k4x56163pi.pdf K4X51163PE] (64MiB)~~
	~~\|[http://www.sst.com/products/?inode=41340 SST25VF080B] (1MiB)~~
	~~\|N25~~
	~~\|M1A~~
	~~\|35/38~~
	\|}		\|}

Main Page

User890104 — Wed, 27 May 2026 13:26:00 GMT

← Older revision		Revision as of 13:26, 27 May 2026
Line 28:		Line 28:
	[[Nano 7G]]		[[Nano 7G]]
	* There's a [[U-Boot]] port, and [[Linux\|Linux]] boots with an initramfs.		* There's a [[U-Boot]] port, and [[Linux\|Linux]] boots with an initramfs.
			* [[NanoApps]] allows you to run custom homebrew apps.

	There's a set of earlier tooling ([[emCORE]]/[[emBIOS]]/[[iBugger]]) which was exploiting other vulnerabilities and was a lead-up to a port of Rockbox, but it's mostly abandoned.		There's a set of earlier tooling ([[emCORE]]/[[emBIOS]]/[[iBugger]]) which was exploiting other vulnerabilities and was a lead-up to a port of Rockbox, but it's mostly abandoned.

NanoApps

User890104 — Wed, 27 May 2026 13:25:17 GMT

← Older revision		Revision as of 13:25, 27 May 2026
(2 intermediate revisions by the same user not shown)
Line 1:		Line 1:
	~~= NanoApps =~~
	===== Run custom homebrew apps on iPod nano 7th generation. =====		===== Run custom homebrew apps on iPod nano 7th generation. =====
			== Overview ==
			NanoApps is an early developer preview for hobbyists and tinkerers who want to build and run custom apps for iPod nano 7th generation. This is the very beginning of custom apps on nano: it needs a lot more research and polish before it can become a daily-driver app platform, but early results are promising, allowing you to run basic versions of [[:File:NanoApps_Paint.png\|Paint]], [[:File:NanoApps_Notes.png\|Notes]], [[:File:NanoApps_WAV_Player.png\|WAV Player]], and [[:File:NanoApps_Launcher.png\|Homebrew Launcher]] on nano today. Contributions are very welcome; see [https://github.com/nfzerox/NanoApps/blob/main/README.md#contributing-to-nanoapps Contributing to NanoApps], join the [https://discord.gg/7PnGEXjW3X iPod nano Hacking Discord], and share what you build on [https://www.reddit.com/r/ipod/ r/ipod].

	NanoApps is an early developer preview for hobbyists and tinkerers who want to build and run custom apps for iPod nano 7th generation. This is the very beginning of custom apps on nano: it needs a lot more research and polish before it can become a daily-driver app platform, but early results are promising, allowing you to run basic versions of [[:File:~~NanoApps_Paint.png\|Paing]], [[:File:NanoApps_Notes.png\|Notes]], [[:File:NanoApps_WAV_Player.png\|WAV Player]], and [[:File:NanoApps_Launcher~~.png\|Homebrew Launcher]] on nano today. Contributions are very welcome; see [https://github.com/nfzerox/NanoApps/blob/main/README.md#contributing-to-nanoapps Contributing to NanoApps], join the [https://discord.gg/7PnGEXjW3X iPod nano Hacking Discord], and share what you build on [https://www.reddit.com/r/ipod/ r/ipod].		[[File:NanoApps_Overview.png\|640px]]

	~~[[File:NanoApps_Overview.png~~]]

	== Links ==		== Links ==
	* https://github.com/nfzerox/NanoApps		* https://github.com/nfzerox/NanoApps

NanoApps

User890104 — Wed, 27 May 2026 13:20:49 GMT

Created page with "= NanoApps = ===== Run custom homebrew apps on iPod nano 7th generation. ===== NanoApps is an early developer preview for hobbyists and tinkerers who want to build and run custom apps for iPod nano 7th generation. This is the very beginning of custom apps on nano: it needs a lot more research and polish before it can become a daily-driver app platform, but early results are promising, allowing you to run basic versions of Paing, :File:Nano..."

New page

= NanoApps =
===== Run custom homebrew apps on iPod nano 7th generation. =====

NanoApps is an early developer preview for hobbyists and tinkerers who want to build and run custom apps for iPod nano 7th generation. This is the very beginning of custom apps on nano: it needs a lot more research and polish before it can become a daily-driver app platform, but early results are promising, allowing you to run basic versions of [[:File:NanoApps_Paint.png|Paing]], [[:File:NanoApps_Notes.png|Notes]], [[:File:NanoApps_WAV_Player.png|WAV Player]], and [[:File:NanoApps_Launcher.png|Homebrew Launcher]] on nano today. Contributions are very welcome; see [https://github.com/nfzerox/NanoApps/blob/main/README.md#contributing-to-nanoapps Contributing to NanoApps], join the [https://discord.gg/7PnGEXjW3X iPod nano Hacking Discord], and share what you build on [https://www.reddit.com/r/ipod/ r/ipod].

[[File:NanoApps_Overview.png]]

== Links ==
* https://github.com/nfzerox/NanoApps

File:NanoApps WAV Player.png

User890104 — Wed, 27 May 2026 13:13:11 GMT

User890104 uploaded File:NanoApps WAV Player.png

New page

NanoApps WAV Player

File:NanoApps Paint.png

User890104 — Wed, 27 May 2026 13:13:02 GMT

User890104 uploaded File:NanoApps Paint.png

New page

NanoApps Paint

File:NanoApps Overview.png

User890104 — Wed, 27 May 2026 13:12:52 GMT

User890104 uploaded File:NanoApps Overview.png

New page

NanoApps Overview

File:NanoApps Notes.png

User890104 — Wed, 27 May 2026 13:12:32 GMT

User890104 uploaded File:NanoApps Notes.png

New page

NanoApps Notes

File:NanoApps Launcher.png

User890104 — Wed, 27 May 2026 13:12:16 GMT

User890104 uploaded File:NanoApps Launcher.png

New page

NanoApps Launcher

Modes

User890104 — Sat, 23 May 2026 17:14:57 GMT

@@ Line 11: / Line 11: @@
 Disk mode is also referred to as "forced disk mode" in device information received from the iPod.
 The place where disk mode is stored on the device differs depending on the iPod model. On the iPod nano (4th generation) and newer, disk mode is stored in the "disk" partition of the [[Firmware]].
 ==DFU mode==
@@ Line 18: / Line 29: @@
 When in DFU mode, the iPod can be sent a special WTF [[IMG1]] firmware image to enter WTF mode. Other IMG1 images cannot be sent in this mode.
-The [[Nano 2G]] also has a DFU mode, but it can only be entered by shorting testpoints on the iPod's circuit board or flashing the NOR with an image with an invalid signature or hash. It does, however, support a NOR DFU mode that can be entered by holding down Back+Play right after rebooting the device<ref>https://www.rockbox.org/irc/log-20080904#13:31:44</ref>.
+The [[Nano 2G]] also has a DFU mode, but it can only be entered by shorting testpoints on the iPod's circuit board or flashing the NOR with an image with an invalid signature or hash. It does, however, support a NOR DFU mode that can be entered by holding down '''Rewind''' and '''Play/Pause''' right after rebooting the device<ref>https://www.rockbox.org/irc/log-20080904#13:31:44</ref>.
 ==WTF mode==
@@ Line 27: / Line 47: @@
 ==Diagnostic mode==
 [[File:Nano 7G diagnostic mode.jpg|thumb|right|[[Nano 7G]] in diagnostics mode]]
-This mode will give quite a lot of info about your iPod. Except for the very first iPods, it can be accessed on clickwheel iPods by holding Select and Rewind when the Apple logo appears during reboot. For the [[Nano 6G]] you enter it by holding down the Volume Up, Volume Down and Power buttons. For the [[Nano 7G]] you enter it by holding down the Volume Up, Volume Down, Power and Menu buttons.
+This mode will give quite a lot of info about your iPod. In diagnostics mode you can find info about the battery power check the LCD, button inputs, radio signals, DRAM, NAND, Accelerometer, dock information and an about section. On touchscreen iPods there is also a section for touchscreen testing.
-In diagnostics mode you can find info about the battery power check the LCD, button inputs, radio signals, DRAM, NAND, Accelerometer, dock information and an about section. On touchscreen iPods there is also a section for touchscreen testing.
+=== How to access it===
 <br clear="all" />
 ==USB IDs==

File:Fastfetch nano 2g 6.10.png

Jdkjkjj — Sat, 16 May 2026 16:55:44 GMT

Jdkjkjj uploaded a new version of File:Fastfetch nano 2g 6.10.png

New page

fastfetch nano2g

Main Page

Jdkjkjj — Sat, 16 May 2026 16:29:29 GMT

fastfetch on ipod nano 2g

← Older revision		Revision as of 16:29, 16 May 2026
Line 34:		Line 34:
	<gallery>		<gallery>
	File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]		File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]
	File:Fastfetch ~~on iPod~~ nano 2G.png\|fastfetch on [[Nano 2G]]		File:Fastfetch nano 2g 6.10.png\|fastfetch on [[Nano 2G]]
	File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]		File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]
	File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]		File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]

File:Fastfetch nano 2g 6.10.png

Jdkjkjj — Sat, 16 May 2026 16:28:45 GMT

Jdkjkjj uploaded File:Fastfetch nano 2g 6.10.png

New page

fastfetch nano2g

Main Page

Jdkjkjj — Fri, 15 May 2026 21:05:05 GMT

move fastfetch image

← Older revision		Revision as of 21:05, 15 May 2026
Line 34:		Line 34:
	<gallery>		<gallery>
	File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]		File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]
			File:Fastfetch on iPod nano 2G.png\|fastfetch on [[Nano 2G]]
	File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]		File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]
	~~File:Fastfetch on iPod nano 2G.png\|fastfetch on [[Nano 2G]]~~
	File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]		File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]
	File:EmCORE_Nano2G_Nano4G_Classic.jpg\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]		File:EmCORE_Nano2G_Nano4G_Classic.jpg\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]

Linux

Jdkjkjj — Fri, 15 May 2026 20:43:23 GMT

add nano3g tutorial

← Older revision		Revision as of 20:43, 15 May 2026
Line 2:		Line 2:
	== Current: Freemyipod Linux ==		== Current: Freemyipod Linux ==

	We are working on supporting Samsung/S5L-based devices which have an MMU. Currently our main focus is the [[Nano 7G]], there are also builds for [[Nano 2G]] and [[Nano 5G]]. An experimental source tree is available on [https://github.com/freemyipod/linux github.com/freemyipod/linux]. Aditionaly [[User:ZeOne]] is working on making it work with the [[Nano 6G]] you can read more about that on his page.		We are working on supporting Samsung/S5L-based devices which have an MMU. Currently our main focus is the [[Nano 7G]], there are also builds for [[Nano 2G]], [[Nano 3G]] and [[Nano 5G]]. An experimental source tree is available on [https://github.com/freemyipod/linux github.com/freemyipod/linux]. Aditionaly [[User:ZeOne]] is working on making it work with the [[Nano 6G]] you can read more about that on his page.

	=== User Guide ===		=== User Guide ===
Line 30:		Line 30:
	$ git checkout s5l87xx		$ git checkout s5l87xx
	$ make apple_n36_defconfig # for Nano 2G OR		$ make apple_n36_defconfig # for Nano 2G OR
			$ git checkout n3g-wip # for Nano 3G
			$ make nano3g_defconfig # for Nano 3G OR
	$ make apple_n33_defconfig # for Nano 5G OR		$ make apple_n33_defconfig # for Nano 5G OR
	$ make apple_n31_defconfig # for Nano 7G		$ make apple_n31_defconfig # for Nano 7G
Line 46:		Line 48:
	$ cd linux		$ cd linux
	$ git checkout n2g-wip # for Nano 2G OR		$ git checkout n2g-wip # for Nano 2G OR
			$ git checkout n3g-wip # for Nano 3G OR
	$ git checkout n5g-wip # for Nano 5G OR		$ git checkout n5g-wip # for Nano 5G OR
	$ git checkout n7g-wip # for Nano 7G		$ git checkout n7g-wip # for Nano 7G
	$ make ARCH=arm nano2g_defconfig # for Nano 2G		$ make ARCH=arm nano2g_defconfig # for Nano 2G
			$ make ARCH=arm nano3g_defconfig # for Nano 3G
	$ make ARCH=arm nano5g_defconfig # for Nano 5G		$ make ARCH=arm nano5g_defconfig # for Nano 5G
	$ make ARCH=arm apple_n31_defconfig # for Nano 7G		$ make ARCH=arm apple_n31_defconfig # for Nano 7G

Main Page

Jdkjkjj — Fri, 15 May 2026 20:23:28 GMT

fastfetch on ipod nano 2g

← Older revision		Revision as of 20:23, 15 May 2026
Line 35:		Line 35:
	File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]		File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]
	File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]		File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]
	File:~~Albafetchdemo~~.png\|~~albafetch~~ on ~~the~~ [[Nano 2G]] ~~running [[Linux]] 6.10~~		File:Fastfetch on iPod nano 2G.png\|fastfetch on [[Nano 2G]]
	File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]		File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]
	File:EmCORE_Nano2G_Nano4G_Classic.jpg\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]		File:EmCORE_Nano2G_Nano4G_Classic.jpg\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]

File:Fastfetch on iPod nano 2G.png

Jdkjkjj — Fri, 15 May 2026 20:22:16 GMT

Jdkjkjj uploaded File:Fastfetch on iPod nano 2G.png

New page

fastfetch on ipod nano 2g

Main Page

User890104 — Thu, 14 May 2026 21:06:57 GMT

Convert homepage pictures to a gallery

@@ Line 1: / Line 1: @@
 __NOTOC__
 This is the wiki for the freemyipod project. Freemyipod is a project aimed at reverse-engineering non-iOS iPods (all models other than the Touch) and creating tools and documentation so that other people can port alternative firmwares to them such as [https://www.rockbox.org/ Rockbox] or [https://kernel.org/ Linux]. Freemyipod is a relaunch of [[Linux4nano]].
@@ Line 33: / Line 30: @@
 There's a set of earlier tooling ([[emCORE]]/[[emBIOS]]/[[iBugger]]) which was exploiting other vulnerabilities and was a lead-up to a port of Rockbox, but it's mostly abandoned.
 == Getting an account ==

File:Linux nano 7g 7.1-rc3.jpg

User890104 — Thu, 14 May 2026 20:30:17 GMT

User890104 uploaded File:Linux nano 7g 7.1-rc3.jpg

New page

File:Fastfetch nano 7g 7.1-rc3.png

User890104 — Thu, 14 May 2026 20:21:53 GMT

User890104 uploaded File:Fastfetch nano 7g 7.1-rc3.png

New page

Main Page

Jdkjkjj — Sun, 10 May 2026 18:10:30 GMT

remove sysfetch and add albafetch image

← Older revision		Revision as of 18:10, 10 May 2026
Line 1:		Line 1:
	__NOTOC__		__NOTOC__
	[[File:~~Sysfetch on iPod Nano 2G~~.~~jpg~~\|thumb\|right\|~~sysfetch~~ on the [[Nano 2G]] running [[Linux]] 6.10]]		[[File:Albafetchdemo.png\|thumb\|right\|albafetch on the [[Nano 2G]] running [[Linux]] 6.10]]
	[[File:Photo 2025-12-27 20-36-24.jpg\|280px\|thumb\|right\|[[Linux]] 6.14.0 on [[Nano 7G]]]]		[[File:Photo 2025-12-27 20-36-24.jpg\|280px\|thumb\|right\|[[Linux]] 6.14.0 on [[Nano 7G]]]]
	[[File:EmCORE_Nano2G_Nano4G_Classic.jpg\|280px\|thumb\|right\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]]]		[[File:EmCORE_Nano2G_Nano4G_Classic.jpg\|280px\|thumb\|right\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]]]

File:Albafetchdemo.png

Jdkjkjj — Sun, 10 May 2026 18:08:57 GMT

Jdkjkjj uploaded File:Albafetchdemo.png

New page

albafetch on ipod nano 2g with nixos logo enabled

Main Page

User890104 — Sun, 10 May 2026 14:12:31 GMT

update faq/progress

← Older revision		Revision as of 14:12, 10 May 2026
Line 15:		Line 15:
	Not much (yet) unless you're an embedded developer :).		Not much (yet) unless you're an embedded developer :).

	On the ~~[[Nano 3G]]~~, [[Nano 4G]] and [[Nano 5G]], we have a stable tethered exploit ([[wInd3x]]) which allows early, untethered and safe (no permanent modification) code execution. This in turn allows you to run [[U-Boot]] and an early [[Linux\|Linux port]] or experiment with reverse-engineering/modifying the original firmware, [[retailOS]].		Here's the current progress, by iPod model:

	~~On the~~ [[Nano 6G]], [[Nano 7G]] ~~and iPod shuffle (4th generation), a vulnerability in DFU_DNLOAD packet parsing code can be exploited with~~ [[~~S5Late~~]]~~. It~~ allows ~~tethered~~ code execution.		[[Nano 3G]] and [[Nano 4G]]
			* [[wInd3x]] allows untethered and safe code execution (no permanent modification).
			* Rockbox bootloader has been published, but [https://isthererockboxonipodnano3g.freemyipod.org/ the Rockbox port is not yet completed].

	~~On the~~ [[Nano 6G]] and [[Nano 7G]], a ~~font~~ parsing ~~vulnerability~~ (CVE-2010-1797) ~~can be exploited with~~ [[~~ipod_sun~~]]~~. It allows untethered code execution~~.		[[Nano 5G]]
			* [[wInd3x]] allows untethered and safe code execution (no permanent modification).
			* There's a [[U-Boot]] port, and [[Linux\|Linux]] boots with an initramfs.

			[[Nano 6G]] and [[Nano 7G]]
			* Tethered code execution using [[S5Late]] (a vulnerability in DFU_DNLOAD packet parsing code) (also for iPod shuffle (4th generation))
			* Untethered code execution using [[ipod_sun]] (CVE-2010-1797)

			[[Nano 7G]]
			* There's a [[U-Boot]] port, and [[Linux\|Linux]] boots with an initramfs.

	There's a set of earlier tooling ([[emCORE]]/[[emBIOS]]/[[iBugger]]) which was exploiting other vulnerabilities and was a lead-up to a port of Rockbox, but it's mostly abandoned.		There's a set of earlier tooling ([[emCORE]]/[[emBIOS]]/[[iBugger]]) which was exploiting other vulnerabilities and was a lead-up to a port of Rockbox, but it's mostly abandoned.

Notes vulnerability

User890104 — Sun, 10 May 2026 13:53:03 GMT

← Older revision		Revision as of 13:53, 10 May 2026
(One intermediate revision by the same user not shown)
Line 2:		Line 2:

	The notes functionality is basically a HTML browser included in the iPod.		The notes functionality is basically a HTML browser included in the iPod.
	Some documentation about it can be found [~~http~~://~~developer~~.~~apple~~.~~com~~/~~ipod~~/iPodNotesFeatureGuideCB.pdf ~~here~~].		Some documentation about it can be found in Apple's [https://files.freemyipod.org/misc/iPodNotesFeatureGuideCB.pdf iPod Notes Feature Guide].

	Basic rules are:		Basic rules are:
Line 20:		Line 20:

	If jumping to a UTF16-processed buffer, the possible character sequences are limited.		If jumping to a UTF16-processed buffer, the possible character sequences are limited.
	The best thing to have the most charset possibilities is to encode the exploit directly to [~~http~~://unicode.org/faq/utf_bom~~.html~~#utf16-2 UTF16].		The best thing to have the most charset possibilities is to encode the exploit directly to [https://unicode.org/faq/utf_bom#utf16-1 UTF16].

	The forbidden values in UTF16 are:		The forbidden values in UTF16 are:
Line 48:		Line 48:
	(Credit for the exploit goes to [[Sto]])		(Credit for the exploit goes to [[Sto]])

	To exploit, we used [[~~Nano2G%2BHW%2Banalysis~~\|JTAG]] to determine the correct paddings and return adresses of the buffers.		To exploit, we used [[Nano2G_HW_analysis#JTAG\|JTAG]] to determine the correct paddings and return adresses of the buffers.

	In my case, I had to place a second file to influence the buffer's location in order to have a return adress which conforms to UTF8 (no byte of the return address can be >7F).		In my case, I had to place a second file to influence the buffer's location in order to have a return adress which conforms to UTF8 (no byte of the return address can be >7F).

	An example of a working overflow file ~~set~~ is [~~http~~://~~f4eru~~.~~free~~.fr/~~8701~~/~~Notes_overflow_example~~.~~zip~~ here].		An example of a working overflow file is [https://files.freemyipod.org/releases/20120101/installer-ipodnano2g-r855-20120101.bootnote here]. The source code is [https://github.com/freemyipod/freemyipod/tree/master/noteboot at GitHub, named noteboot]. It installs [[emCORE]] if executed on [[Nano 2G]].
	The file ~~"Brokenlink.htm"~~ begins with a UTF16 BOM, then "AA" as padding, then the overflowing link (the return address is 0x08640D60), then a NOP (opcode E1A01001) landing zone, and finally a "while(1);"
			The original exploit file begins with a UTF16 BOM, then "AA" as padding, then the overflowing link (the return address is 0x08640D60), then a NOP (opcode E1A01001) landing zone, and finally a "while(1);"

	This "while(1);" does not freeze or reset the iPod, but instead just crashes the background task since interrupts are still enabled. You can still scroll the menus, but the ipod will freeze as soon as you press "play" or if you enter the notes menu, etc...		This "while(1);" does not freeze or reset the iPod, but instead just crashes the background task since interrupts are still enabled. You can still scroll the menus, but the ipod will freeze as soon as you press "play" or if you enter the notes menu, etc...
Line 69:		Line 70:
	The UART is exactly the same as described in the datasheet (if one did indeed exist).		The UART is exactly the same as described in the datasheet (if one did indeed exist).

	See [http://pargon.nl/?p=6 this guide] for building a UART cable for the iPod dock connector.		See [https://web.archive.org/web/20100924130558/http://pargon.nl/?p=6 this guide] for building a UART cable for the iPod dock connector.

	My complete setup is a little bit more complex: [[Image:Nanofighter.jpg\|100px\|thumb]]		My complete setup is a little bit more complex: [[Image:Nanofighter.jpg\|100px\|thumb]]

Contributing

User890104 — Sun, 10 May 2026 13:33:41 GMT

fix link

← Older revision		Revision as of 13:33, 10 May 2026
Line 4:		Line 4:
	This is perhaps the most valuable way one can help the project. We get many people who want to help with development but they don't have the necessary skills. If you don't, think of it as an opportunity to learn new and worthwhile skills instead of a roadblock. After all, the best way to learn is in the field doing real work. Here are some topics that developers need to know about:		This is perhaps the most valuable way one can help the project. We get many people who want to help with development but they don't have the necessary skills. If you don't, think of it as an opportunity to learn new and worthwhile skills instead of a roadblock. After all, the best way to learn is in the field doing real work. Here are some topics that developers need to know about:
	*'''ARM assembly''' - this is probably the hardest topic for beginners to grasp. Resources:		*'''ARM assembly''' - this is probably the hardest topic for beginners to grasp. Resources:
	**[https://~~www~~.~~bing~~.com/ck/a?!&&p=dada0435c0139c07a5df758056e5fbe119b3a54f9326fb3f4556768a34561f20JmltdHM9MTc3NTY5MjgwMA&ptn=3&ver=2&hsh=4&fclid=3fc6f895-7af1-6abf-0648-efa57b776b03&u=a1aHR0cHM6Ly9kb2N1bWVudGF0aW9uLXNlcnZpY2UuYXJtLmNvbS9zdGF0aWMvNjgxMzU5Mjg3OWM0YzE3YWQ4MDM4Njkx ARM's guide (PDF)]		**[https://documentation-service.arm.com/static/6813592879c4c17ad8038691 ARM's guide (PDF)]
	**[http://simplemachines.it/doc/arm_inst.pdf an ARM primer]		**[http://simplemachines.it/doc/arm_inst.pdf an ARM primer]
	**[http://simplemachines.it/doc/QRC0001H_rvct_v2.1_arm.pdf ARM Quick Ref]		**[http://simplemachines.it/doc/QRC0001H_rvct_v2.1_arm.pdf ARM Quick Ref]

Chronology

User890104 — Sun, 10 May 2026 13:31:08 GMT

fix ipod classic model names

Show changes

Notes vulnerability

User890104 — Sun, 10 May 2026 13:14:15 GMT

Reverted edits by ZeOne (talk) to last revision by Farthen

EmCORE Installation/iPodTouch

User890104 — Sun, 10 May 2026 13:11:44 GMT

Reverted edit by ZeOne (talk) to last revision by TheSeven

← Older revision		Revision as of 13:11, 10 May 2026
Line 8:		Line 8:

	Given that it would take several years of work to reach a state where [[emCORE]] could compete with the features of the original firmware, there doesn't seem to be much interest in an [[emCORE]] port to this device.		Given that it would take several years of work to reach a state where [[emCORE]] could compete with the features of the original firmware, there doesn't seem to be much interest in an [[emCORE]] port to this device.

	~~On most iPod touch's you can jailbreak them using diferent tools. You can find more info at [https://pangu8.com/ pangu8] but~~
	~~=== please be wherey of any jailbreak asking you to pay money they are scams ===~~
	~~free options are available look elsewhere if pangu8 doesent tell you how (I think the apple wiki has some info).~~

Linux4nano

User890104 — Sun, 10 May 2026 13:11:05 GMT

Reverted edit by ZeOne (talk) to last revision by Farthen

← Older revision		Revision as of 13:11, 10 May 2026
Line 1:		Line 1:
	This project derived from the linux4nano project in July/August 2010. The linux4nano project had the goal - as the name might already indicate - to port Linux to the [[Nano 2G\|iPod nano 2g]]. As none of the project members wanted to do that and as the project already cared about [[Hardware\|other iPods]] we decided to change the name to freemyipod and relaunch the project. ~~there is still a link that is active but is for archiving purposes only as it has nothing usefull [https://hackaday.com/tag/linux4nano/ linux4nano]~~		This project derived from the linux4nano project in July/August 2010. The linux4nano project had the goal - as the name might already indicate - to port Linux to the [[Nano 2G\|iPod nano 2g]]. As none of the project members wanted to do that and as the project already cared about [[Hardware\|other iPods]] we decided to change the name to freemyipod and relaunch the project.

EmCORE Installation/iPodNano6G

User890104 — Sun, 10 May 2026 13:10:31 GMT

← Older revision		Revision as of 13:10, 10 May 2026
Line 6:		Line 6:
	The exact amount of work needed varies greatly and depends on the complexity of the device and similarities to devices that [[emCORE]] has already been ported to.		The exact amount of work needed varies greatly and depends on the complexity of the device and similarities to devices that [[emCORE]] has already been ported to.

	~~Additionally as [[emCORE]] is deprecated and Rockbox should be used instead, there is no reason you should be waiting for an [[emCORE]] port on the [[Nano 6G]].~~

	An exploit ~~has been~~ found [[~~S5Late~~]] ~~and a modified version made~~ to ~~work with the~~ [[~~Nano 6G~~]] ~~exists. (find it here~~ [https://github.com/NyanSatan/S5Late-8723 ~~S5Late-8723~~]~~) there~~ is some work in progress ~~to getting it to work with~~ wInd3x and getting ~~Alpine~~ Linux ~~booted~~ on ~~it (not~~ [[emCORE]] for ~~now)~~.		Given that your device is locked down heavily to prevent it from running non-approved code, an exploit needs to be found in order to port [[emCORE]] to it.

			Recently, [[S5Late\|an exploit has been found]] and a [https://github.com/NyanSatan/S5Late-8723 modified version] that works on the [[Nano 6G]] exists. There is some work in progress in merging the exploit into [[wInd3x]] and getting [[Linux]] to boot on this model. [[emCORE]] is deprecated and no port for [[Nano_6G]] is expected.

Nano2G HW analysis

User890104 — Sun, 10 May 2026 11:19:16 GMT

fix broken link

← Older revision		Revision as of 11:19, 10 May 2026
Line 54:		Line 54:
	== getting code execution ? ==		== getting code execution ? ==

	[[~~Notes_exploit~~]]		[[Notes_vulnerability]]

Linux

Jdkjkjj — Sat, 09 May 2026 09:38:53 GMT

Add steps for iPod nano 2g

← Older revision		Revision as of 09:38, 9 May 2026
Line 32:		Line 32:
	$ make apple_n33_defconfig # for Nano 5G OR		$ make apple_n33_defconfig # for Nano 5G OR
	$ make apple_n31_defconfig # for Nano 7G		$ make apple_n31_defconfig # for Nano 7G
	$ make CROSS_COMPILE=arm-none-eabi- -j $(nproc) u-boot.bin		$ make CROSS_COMPILE=arm-none-eabi- dtbs # for Nano 2G
			$ make CROSS_COMPILE=arm-none-eabi- -j $(nproc) u-boot.bin # don’t run this for Nano 2G yet

	On macOS, you need to install openssl using homebrew. If the build system does not find it, append the following to the last command:		On macOS, you need to install openssl using homebrew. If the build system does not find it, append the following to the last command:
Line 44:		Line 45:
	$ git clone https://github.com/freemyipod/linux		$ git clone https://github.com/freemyipod/linux
	$ cd linux		$ cd linux
			$ git checkout n2g-wip # for Nano 2G OR
	$ git checkout n5g-wip # for Nano 5G OR		$ git checkout n5g-wip # for Nano 5G OR
	$ git checkout n7g-wip # for Nano 7G		$ git checkout n7g-wip # for Nano 7G
			$ make ARCH=arm nano2g_defconfig # for Nano 2G
	$ make ARCH=arm nano5g_defconfig # for Nano 5G		$ make ARCH=arm nano5g_defconfig # for Nano 5G
	$ make ARCH=arm apple_n31_defconfig # for Nano 7G		$ make ARCH=arm apple_n31_defconfig # for Nano 7G
Line 62:		Line 65:
	Connect your iPod nano in DFU mode.		Connect your iPod nano in DFU mode.

	~~Run~~ u-boot using wInd3x:		For [[Nano 3G]] and later, execute u-boot using wInd3x:

	$ ./wInd3x cfw run ../u-boot/u-boot.bin		$ ./wInd3x cfw run ../u-boot/u-boot.bin
Line 69:		Line 72:

	dfu-util -d 05ac:8007 -D mImage && dfu-util -d 05ac:8007 -e		dfu-util -d 05ac:8007 -D mImage && dfu-util -d 05ac:8007 -e

			For the [[Nano 2G]], you will have to chainload the rockbox bootloader with u-boot.

			To do this, we assume you have already built u-boot dtbs along with Linux.

			To create the mImage, run this command inside your Linux folder:

			$ ./create_image.sh

			Note: if it dosen’t work, you will have to make it executable, usually by running:

			$ chmod +x create_image.sh


			After it creates the mImage, go to your u-boot folder and build u-boot.bin.

			$ make CROSS_COMPILE=arm-none-eabi- -j $(nproc) u-boot.bin

			Now generate a fake rockbox.ipod that tricks it into starting U-Boot:

			$ ./tools/mkimage -T ipod -d u-boot.bin rockbox.ipod

			Copy this new rockbox.ipod into the .rockbox folder on your iPod nano 2G.

	Then, in the serial console you'll see Linux booting:		Then, in the serial console you'll see Linux booting:

Main Page

Jdkjkjj — Sat, 09 May 2026 09:18:53 GMT

Add iPod nano 2g demo image

← Older revision		Revision as of 09:18, 9 May 2026
Line 1:		Line 1:
	__NOTOC__		__NOTOC__
			[[File:Sysfetch on iPod Nano 2G.jpg\|thumb\|right\|sysfetch on the [[Nano 2G]] running [[Linux]] 6.10]]
	[[File:Photo 2025-12-27 20-36-24.jpg\|280px\|thumb\|right\|[[Linux]] 6.14.0 on [[Nano 7G]]]]		[[File:Photo 2025-12-27 20-36-24.jpg\|280px\|thumb\|right\|[[Linux]] 6.14.0 on [[Nano 7G]]]]
	[[File:EmCORE_Nano2G_Nano4G_Classic.jpg\|280px\|thumb\|right\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]]]		[[File:EmCORE_Nano2G_Nano4G_Classic.jpg\|280px\|thumb\|right\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]]]

File:Sysfetch on iPod Nano 2G.jpg

Jdkjkjj — Sat, 09 May 2026 09:13:38 GMT

Jdkjkjj uploaded File:Sysfetch on iPod Nano 2G.jpg

New page

sysfetch, a C-written clone of neofetch running on iPod nano 2G

User:Jdkjkjj

User890104 — Fri, 08 May 2026 23:57:44 GMT

User890104 changed group membership for Jdkjkjj: granted confirmed

← Older revision		Revision as of 16:29, 16 May 2026
Line 34:		Line 34:
	<gallery>		<gallery>
	File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]		File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]
	File:Fastfetch ~~on iPod~~ nano 2G.png\|fastfetch on [[Nano 2G]]		File:Fastfetch nano 2g 6.10.png\|fastfetch on [[Nano 2G]]
	File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]		File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]
	File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]		File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]

← Older revision		Revision as of 21:05, 15 May 2026
Line 34:		Line 34:
	<gallery>		<gallery>
	File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]		File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]
			File:Fastfetch on iPod nano 2G.png\|fastfetch on [[Nano 2G]]
	File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]		File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]
	~~File:Fastfetch on iPod nano 2G.png\|fastfetch on [[Nano 2G]]~~
	File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]		File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]
	File:EmCORE_Nano2G_Nano4G_Classic.jpg\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]		File:EmCORE_Nano2G_Nano4G_Classic.jpg\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]

← Older revision		Revision as of 20:23, 15 May 2026
Line 35:		Line 35:
	File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]		File:Fastfetch_nano_7g_7.1-rc3.png\|fastfetch on [[Nano 7G]]
	File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]		File:Linux nano 7g 7.1-rc3.jpg\|[[Linux]] 7.1.0-rc3 on [[Nano 7G]]
	File:~~Albafetchdemo~~.png\|~~albafetch~~ on ~~the~~ [[Nano 2G]] ~~running [[Linux]] 6.10~~		File:Fastfetch on iPod nano 2G.png\|fastfetch on [[Nano 2G]]
	File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]		File:Photo 2025-12-27 20-36-24.jpg\|[[Linux]] 6.14.0 on [[Nano 7G]]
	File:EmCORE_Nano2G_Nano4G_Classic.jpg\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]		File:EmCORE_Nano2G_Nano4G_Classic.jpg\|[[emCORE]] r779 on [[Nano 2G]], [[Nano 4G]] and [[Classic 2G]]

← Older revision		Revision as of 13:14, 10 May 2026
Line 2:		Line 2:

	The notes functionality is basically a HTML browser included in the iPod.		The notes functionality is basically a HTML browser included in the iPod.
			Some documentation about it can be found [http://developer.apple.com/ipod/iPodNotesFeatureGuideCB.pdf here].

	Basic rules are:		Basic rules are:
Line 47:		Line 48:
	(Credit for the exploit goes to [[Sto]])		(Credit for the exploit goes to [[Sto]])

	To exploit, we used JTAG to determine the correct paddings and return adresses of the buffers.		To exploit, we used [[Nano2G%2BHW%2Banalysis\|JTAG]] to determine the correct paddings and return adresses of the buffers.

	In my case, I had to place a second file to influence the buffer's location in order to have a return adress which conforms to UTF8 (no byte of the return address can be >7F).		In my case, I had to place a second file to influence the buffer's location in order to have a return adress which conforms to UTF8 (no byte of the return address can be >7F).

	An example of a working overflow file set ~~no longer exists but would go like this~~.		An example of a working overflow file set is [http://f4eru.free.fr/8701/Notes_overflow_example.zip here].
	The file "Brokenlink.htm" begins with a UTF16 BOM, then "AA" as padding, then the overflowing link (the return address is 0x08640D60), then a NOP (opcode E1A01001) landing zone, and finally a "while(1);"		The file "Brokenlink.htm" begins with a UTF16 BOM, then "AA" as padding, then the overflowing link (the return address is 0x08640D60), then a NOP (opcode E1A01001) landing zone, and finally a "while(1);"

Line 68:		Line 69:
	The UART is exactly the same as described in the datasheet (if one did indeed exist).		The UART is exactly the same as described in the datasheet (if one did indeed exist).

	~~There used to be a~~ guide on building a UART cable for the iPod dock connector ~~but it no longer exists so just ask the comunity if you are looking for info on how to make one~~.		See [http://pargon.nl/?p=6 this guide] for building a UART cable for the iPod dock connector.

	My complete setup is a little bit more complex: [[Image:Nanofighter.jpg\|100px\|thumb]]		My complete setup is a little bit more complex: [[Image:Nanofighter.jpg\|100px\|thumb]]