If you use Method 2 or Method 3 to bypass the Activation Lock, you are altering the local file system rather than clearing the status on Apple's servers. This results in several permanent limitations:
While each tool has its own unique steps, the process generally follows a pattern. Here's a walkthrough using the powerful combination of the Phoenix Jailbreak and the open-source A5_Bypass_OSS, which represents the most "pure" approach for iOS 9.3.5.
with a USB Host Shield. This hardware setup is used to trigger a "Checkm8" A5 exploit, allowing you to delete the file via tools like DNS Bypass (Limited Access) iphone 4s activation lock bypass ios 935 exclusive
file on a private web server. By pointing the device’s activation requests to this server instead of Apple's, the device can be tricked into "activating" untethered, provided the server remains accessible. DNS Bypass:
This method is wildly inconsistent on iOS 9.3.5. Apple patched the Siri loop in later versions, but the 4s never got the patch. However, the "exclusive" nature of this trick is that it only works on iOS 9.x, not on 8.x or 6.x. If you use Method 2 or Method 3
If you want to try the safest, free method today for your iOS 9.3.5 iPhone 4s, follow the method closely.
For a complete, untethered deletion of the Setup app on iOS 9.3.5, you must place the A5 chip into a pwnedDFU state. Because the A5 chip cannot be exploited via software alone from a normal state, standard USB commands are insufficient. This method requires an Arduino Uno paired with a USB Host Shield to execute the hardware exploit. Hardware Prerequisites: Arduino Uno R3 board. USB Host Shield (properly soldered for 5V operation). with a USB Host Shield
No software or hardware exploit can bypass Apple’s server-side baseband activation checks. Consequently, your iPhone 4s will not fetch cellular signals or process SMS text messages through a SIM card. It acts exclusively as an iPod Touch or Wi-Fi-only tablet.