A bug in iOS 5 discovered by Michael Capozzi theoretically allows any iPhone 4S to be unlocked to any GSM carrier. However, Capozzi says he was only able to test with T-Mobile.
We are currently working towards independent confirmation of his method. It does require you to have an active T-Mobile SIM card (with data working). Remember it must be cut to micro-SIM size to fit the iPhone 4S.
The Steps:
● Insert original carrier AT&T SIM card
● Dial 611 for AT&T customer service hotline and drop the call
● Turn on Airplane Mode
● Take out AT&T SIM card
● Insert T-Mobile SIM card
● Make sure WiFi is off ( also tap on 'Forget this Network" to make sure it doesn't connect automatically later)
● Switch off Airplane Mode and iPhone will search for network. This is followed by the Apple splash screen appearing.
● Activation Required will be displayed on the screen
● EDGE network will activate automatically – notice the 'E' on the top left corner of the screen
● Wait for about 20-30 seconds and turn off the phone
● Turn on iPhone and the same Activation Required screen will be displayed
● When you see one signal bar, tap on Use Cellular Connection
● Eject SIM card
● Activation Required screen will be displayed the second time
● Insert SIM card
● Unlocked!
We are getting some confirmation reports. If you are able to test this, please let us know your results. Remember this method may unlock your device; however, it will not last through a reboot. So while not practical for day to day use. It may benefit those traveling abroad.
MuscleNerd notes that while you might be able to successfully get network access, you will lose it once the network is refreshed which makes this procedure even less useful.
"If you are successful at temporarily gaining network access, you'll lose it as soon as TMSI is refreshed (happens often)"
"the TMSI refresh is a normal, regular action on the network (it's actually intended to protect you)"
