1. Download Blackra1n
2. Run blackra1n. If you have ASL.DLL error, make sure you copy blackra1n.exe to
   C:\Program Files (x86)\Common Files\Apple\Apple Application Support
3. When the device reboot, pay attention to the screen. Once it get out of the restore mode, quickly unplug the data cable. If not, repeat again.

Once done, you may want to upgrade to iOS4 the right way

A lot of info that iPhone 3GS 3.1.3 with Modem Firmware 05.12.01 can only be jailbroken using spirit jailbreak and no way to upgrade to iOS4. Here’s a full unlock of iOS4 when you’re stuck at 3.1.3 spirit jailbreak.

1. Restore to default with 3.1.3 and JB using spirit
   (if can’t activate, then you can try without restore)
2. Use Cydia to install the following packages: afc2add, openSSH, MobileTerminal
3. Download Spirit2Pwn and extract
4. Get sn0wbreeze 1.5.2
5. Get 3.1.3 ipsw and 4.0 ipsw
6. Create a 3.1.3 Customer firmware using sn0wbreeze. Ignore the warning (if any) and just create the firmware. We’re not going to restore using this firmware anyway.
7. Firmware should be put on Desktop. Go to desktop and rename it to something that identify it as 3.1.3 Sn0wbreeze firmware. Also, change the extension to zip.
8. Extract the zip file
9. Connect your iPhone to your WiFi. Use SFTP and login to your iPhone. If you have no SFTP client, you can use FileZilla. Default username/password combo is: “root”/”alpine” (without the quotes)
10. Copy all the files you find in “Firmware/all_flash/all_flash.n88ap.production” (from the extracted custom firmware) to iPhone’s “/tmp”
11. Copy all the files you extracted from spirit2pwn_r2.zip to iPhone’s “/tmp”.
    NOTE: Some reports error, so you may want to make another copy of “pwn_old_boot_r2.sh” on the /tmp named “pwn_old_boot_r1.sh”
12. Once done, SSH into the phone using PuTTy or use MobileTerminal on the phone
13. Use the same credentials as the SFTP credentials. Then run the following commands:
    cd /tmp
chmod 755 pwn_old_boot_r2.sh
chmod 755 pwn_old_boot_r1.sh
./pwn_old_boot_r2.sh

14. Wait for the process to say “SUCCESS”
15. type “reboot” and let the phone reboot
16. Download sn0wbreeze 1.6.1
17. Create custom firmware for iOS4
18. Use the Shift+Restore (on Windows) or Alt+Restore (on Mac) and point to the custom iOS4 firmware.
    NOTE: If you’re not using iTunes 9.2 at this point, an error (13) will be raised
19. After complete, use Cydia and install the same packages again (openSSH, afc2add, MobileTerminal) and add another repository: http://repo666.ultrasn0w.com
20. Find Ultrasn0w and your phone is now jailbroken and unlocked on iOS4

http://www.idroidproject.org/wiki/Installing_iDroid_(Linux)

That link is actually for a Linux, so I uses VirtualBox and a Linux (Ubuntu) image file. From there I followed most part of the guide.

However I’ll post my observation (on 2G):

• It’s running way too sluggish
• Call sometimes doesn’t work (stuck at the calling, but not really dialing)
• Phone becomes really warm and battery drain is too much
• There’s not enough button
• Overall condition is not really usable for daily use

Couple notes:

• If Wifi connects but browser not going anywhere, try the DNS fix
• All “adb” type commands require the download of SDK
• If Virtual Box can’t connect to the iPhone when doing the ‘./oibc’ portion, you may need to shut down and restart your virtual machine (including the Virtual Box itself)
• Going to Apple’s recovery mode (for upgraders) from the openiboot would require you to hold the “Menu” button after choosing the iPhone mode

Post comments for questions and help on how to install iDroid.

I found a solution:

1. Enable Restrictions by going to Settings -> General -> Restrictions and key in a pass code
2. Go to home and disable the restrictions (by going through the same menu above)

After I do that, all my applications shows up again (except for Cydia based apps which are deleted by the upgrade process).

As it turns out, Outlook doesn’t support SSLv3. I had been using Thunderbird for the longest time without any problem, but since I had to test Outlook 2007 for business purposes.

To fix the issue, I changed my Courier IMAP setting from:
TLS_PROTOCOL=SSL3
to
TLS_PROTOCOL=SSL23

Fix:
Run outlook with the /cleanviews switch. (For x64 Vista I run the following command: “c:Program Files (x86)Microsoft OfficeOffice12OUTLOOK.EXE /cleanviews”)

• There is a duplicate “Aperture Projects” on the left selection navigation when trying to change background.
• When adding folders, you don’t see the folders being displayed on the left navigation box. If you try to add it again, you get the following error message:
  Duplicate Folder
  The folder you selected is already present in the picture source list.

Fix:
Open iPhoto and create an iPhoto library in the Pictures folders (you don’t have to put any pictures)

1. Go to Settings -> Mails, Contacts, Calendars
2. Create a new Exchange account
3. Set the information as follows
   • Email:@gmail.com
   • Username: @gmail.com
   • Password:
   • Server: m.google.com
4. Choose which you want to sync

The file that needs to be removed is/var/mobile/Library/Calendar/Calendar.sqlitedb. There are some sites that talk about changing the permission, but I have not tried that. If you want to try changing the permission, you should try changing it by running the command chown mobile:mobile /var/mobile/Library/Calendar/Calendar.sqlitedb

NOTE:If you have calendar events on your phone that you haven’t sync to GCal, it will be erased after removing the Calendar.sqlitedb. Also after you move the file, you will need to run the calendar apps at least once.

1. Choose an MP3 file and trim it to 30 seconds or less – I use Audacity (download link) to do it
2. Import that MP3 into iTunes
3. Goto iTunes -> Preferences (for Mac) or Edit -> Preferences (for PC)
4. Navigate to Advanced -> Importing tab and set the “Import Using:” to AAC
5. Find the trimmed MP3 file inside iTunes, right click and choose “Convert Selection to AAC”
6. Right click the AAC version of the file and choose “Get Info”
7. Note the path to the file as indicated by the “Where” section under the “Summary” tab
8. Navigate to the location of the file and copy it to desktop
9. Change the extension of the copied file to “.m4r”
10. Open the files in iTunes and it should be automatically inserted under Ringtones category, which then can be transferred to iPhone

NOTE: I have tried to use “SoundConverter” and set the file type to be m4a. This actually doesn’t work. When I did it that way, the file will be uploaded but won’t be able to be played. It might have something to do with the file size generated by “SoundConverter” being too large.

SMS Notification is slightly more complicated than the Ringtones counterpart. SMS notification actually can’t be added, only modified. I also recommend shorter file for SMS notification. Here are the steps I take:

1. Trim MP3 files using Audacity (usually SMS notification should be shorter, roughly 3-4 seconds should be good)
2. Import the MP3 file to iTunes
3. Change the iTunes import to AIFF (Follow the ringtones guide to change importing mode in iTunes)
4. Find the AIFF file and copy to desktop
5. Change the extension to “.caf”
6. SFTP to the iPhone using Cyberduck (Mac) or WinSCP (Windows) or any other SFTP software
7. Navigate to the following directory: “/System/Library/Audio/UISounds”
8. Change one of the “sms-received<x>.caf” file to “sms-received_<x>.caf” where <x> is an integer from 1 to 6 that is least preferrable
   For example: Rename “sms-received6.caf” to “sms-received_6.caf” to replace the Electronic with custom sound
   File name mapping to notification name:
   sms-received1.caf -> Tri-tone
   sms-received2.caf -> Chime.caf
   sms-received3.caf -> Glass
   sms-received4.caf -> Horn
   sms-received5.caf -> Bell
   sms-received6.caf -> Electronic
9. Upload the file on the desktop using the old name of that was changed
   For example: if “sms-received_6.caf” is changed to “sms-received_6.caf”, upload the file using the name “sms-received6.caf”
10. Choose in iPhone the replaced tone
    For example: if you replaced sms-received6.caf, then you should choose Electronic

UPDATE: Ringtone should be set to 30 seconds. Another way to trim the music is to use iTunes’ ‘start time’ & ‘stop time’ field. This field is accessible by right clicking the song then choosing Get Info -> Options. After performing that, you export the file as AAC then rename it.

UPDATE: As one commenter mentioned, the SMS Notification hack only works on jailbroken iPhone