In this post I will describe some unfinished hardware methods and information how to bypass (unlock) iCloud on iPad Wi-Fi, iPad Cellular, iPhone and iPod.
How to crash iOS 9.1 and get springboard.
Reach springboard on iOS 9.0.2 iPad
Steps to reach springboard on iOS 9.x.x
In theory you can flash custom firmware and unlock device using patched firmware. If you read instructions to modify firmware it looks like it should works.
As you already know Apple have been patched exploit that used by iCloud DNS Bypass. There was many devices with owner information on lock screen. This devices can be unlocked until reboot using Application -> Crash method. Since it no longer works, here is alternative ways to crash Activation page.
I have found glitch that allow to remove iOS Activation pages and skip them. It is not bypass, but way to find more bugs.
Month ago I wrote in Twitter that I'm searching someone who work in Apple to help remove iCloud. Some time passed and I stopped expecting that someone will contact me in this case. On Internet there is a lot of scammers, about 95% of people who selling unlock are bad people.