iOS 9.3.6 was released in July 2019 specifically to address a GPS time rollover issue affecting older hardware. It is the final supported firmware for the iPhone 4s and corresponding iPad models. Because these devices utilize the ARMv7 architecture, they are exempt from the hardware-based security mitigations introduced in later 64-bit devices (such as KPP - Kernel Patch Protection). This makes them prime candidates for permanent, untethered modifications.
iOS 9.3.6 was released primarily to fix a GPS rollover issue on older 32-bit devices like the iPhone 4S and iPad mini 1. Because these devices are older, the jailbreak community has developed several tools to unlock them:
Apple still signs and iOS 8.4.1 OTA (Over-The-Air) blobs for the iPhone 4s and iPad 2. This allows you to downgrade your device legally and easily without saved SHSH blobs. The iOS 8.4.1 Route (EtasonJB) ios 9.3 6 jailbreak untethered
Always backup your device via iTunes/Finder before proceeding. Charge: Ensure your device has at least 50% battery.
Every 7 days, your computer-sideloaded Phoenix app certificate expires. If your phone reboots after 7 days, the Phoenix app will crash. To fix this, plug your phone back into your computer and run Sideloadly again to refresh the certificate. Your tweaks and data will not be lost. This makes them prime candidates for permanent, untethered
This paper examines the technical intricacies of achieving an untethered jailbreak on iOS 9.3.6. As the final firmware release for legacy 32-bit devices (iPhone 4s, iPad 2, iPad 3, iPad mini 1, iPod Touch 5G), iOS 9.3.6 holds significant historical and functional value. While the original "Home Depot" jailbreak (posixninja) was released as a solution, subsequent community developments have evolved into untethered or semi-untethered solutions. This document analyzes the kernel vulnerabilities utilized, the transition from tethered to untethered states, and the installation mechanisms required for end-of-life hardware.
By deploying the semi-untethered Phoenix utility and installing modern security certificate patches, you can effectively revitalize your iOS 9.3.6 hardware for years to come. This allows you to downgrade your device legally
A completely computer-free method is more challenging for an untethered jailbreak. However, the Carbon method is a great option because the initial semi-untethered jailbreak is done entirely through Safari on your device. After that, you only need to open Cydia to install the iocaste untether package.
Use Sideloadly to install the IPA file onto your iPhone/iPad.
The community waited. Most jailbreaks of that era were "semi-untethered," meaning every time the battery died, the magic vanished, requiring a computer to jump-start the rebellion. But the purists craved the "Untethered" Holy Grail—a code so deeply woven into the boot process that the device belonged to the user from the second the Apple logo appeared. Enter the legends of the scene, names like
: Another semi-untethered option for 32-bit devices that offers high exploit reliability.