Home User CP Donate Chat Register Today!  
  Get New posts Faq / Help?
   


Go Back   Hackint0sh > Projects and Hacks > iPhone > General > Turbo-, Supersim and Simcloning Solution

Reply
 
LinkBack (1) Thread Tools Display Modes
  1 links from elsewhere to this Post. Click to view. #1 (permalink)  
Old 08-04-2008, 06:17 PM
deco
Status: Offline
iPhone Moderator
 
Join Date: Dec 2007
Posts: 153
Rep Power: 10
deco is on a distinguished road
Default [*Sim] [3G] Results from data observation - Stay away from *sim solutions.

Hi guys,

First of all I want to thank everybody who sent me their logs so I could see if the *sim solutions were using different methods.

Though it may sound a little frustrating to some of you who believe this would work out if we could find a tweak to the methods implemented by the 'almost-there' solutions.

By collecting all the data and checking the logs to see how each sim dealt with the IMSI information (something like your ID on the network) I could compare legit, legit with *sim, locked sim + *sim.

My conclusion is as follows:

All of the tested solutions use IMSI solutions that are not appropriate and could possibly get you in deep trouble.

Here's a little explanation of why it worked before and why it's not working anymore (and possibly will not work ever)

People found out that the iPhone asked for your IMSI twice, the first time used to be for the iPHone itself, and the second time was relayed to the network for identification. What they did was they created a program that would respond to the first request with a IMSI that belonged to ATT network so that the iPHONe would believe it was working with an ATT sim card, but to the second request the program would reply with your own IMSI and this would be sent to the network which would make your proper identification in the network.

What changed?

Apple got smart and changed how this works. Now the requests aren't so simple and so far it seems to us that it's not possible to fake the IMSI using the same techniques that were used before.

An example of what could be happening:

the iPhone asks your SIM for it's IMSI and then relays that same IMSI everytime it's needed by the network without consulting your SIM again and again.

This way if we give the iPhone a fake IMSI, it'll relay the fake IMSI to the network which won't work as a stable, safe and legit (as far as networking goes) way.

What's my plan ?

I don't plan on giving up just yet, I believe much has to be learned about the baseband before we can rule out the *sim solutions. I will keep working on this at the same pace I have been (one-two hours a day).

The next thing on my plate now is to attempt reversing some of the baseband in search of IMSI related or pretty much any SIM related calls. If I succeed in doing that I plan on using that information to try and create a reliable and safe way of using *sim solutions.

I would advise everyone who has one of these chips to stop using them. Even though you might think it's ok, it's not ok because pretty much what you are doing is using a fake ID at a store or a fake credit card.

Also for those who're using ZeroG, it's doing basically the same thing, so stay away from ZeroG as well.

Don't throw your turbo-sim or whatever other sim you have away. Keep it with you because if someday we can find a proper solution they might be useful.

I'll keep looking at logs of other solutions to see if they are using the same stuff but until it's safe to use a solution for a daily basis I would recommend that you guys keep watching the forums until it's proven by reliable people that such solution would work properly.

This is my two cents about this subject.

Thanks for everyone who helped me.

Last edited by Zf_; 08-04-2008 at 06:29 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #2 (permalink)  
Old 08-04-2008, 08:07 PM
mattmartincouk
Status: Offline
Senior Member
 
Join Date: Sep 2007
Posts: 152
Rep Power: 10
mattmartincouk is on a distinguished road
Default

@deco - pretty much beat me to the punch. Same conclusion that I had come to a few days ago - just hadnt gotten round to making the post. :iphone:
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #3 (permalink)  
Old 08-04-2008, 09:37 PM
nvidia2008
Status: Offline
Senior Member
 
Join Date: Jul 2008
Posts: 136
Rep Power: 9
nvidia2008 is on a distinguished road
Default

Thanks Deco, keep us all updated. :hack: ...Dumb question, at what stage will those outside the Dev Team be able to access baseband code and baseband firmware? I know, that's where all the action is. Where huge risk is as well...
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
Sponsored links Remove advertisements
Advertisement
Advertisement

  #4 (permalink)  
Old 08-04-2008, 10:06 PM
deco
Status: Offline
iPhone Moderator
 
Join Date: Dec 2007
Posts: 153
Rep Power: 10
deco is on a distinguished road
Default

You actually can do this without being in the Dev Team (as I am not).

What you need to do is get the IPSW file and decompress it, then you'll find the ramdisk.. then you get the ramdisk and decrypt it and you`ll be able to mount it. Then you mount it and find the .fls file.. once you are there you have to know about the secpack and memory map so you can find the baseband firmware and attempt to Reverse it by using some tool like IDA Pro.

The knowledge for this is all on the internet (a lot of it is in www.theiphonewiki.com) and with the last part (reversing) there's a lot of info on the net as well.

If I get anything useful I'll share.

Have fun!
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #5 (permalink)  
Old 08-05-2008, 02:14 AM
baalbeck
Status: Offline
Senior Member
 
Join Date: Aug 2007
Location: Brasil
Posts: 111
Rep Power: 8
baalbeck is on a distinguished road
Default

Tnx for the efforts and for the reliable inforrmation deco!

Anyway, I hate this process, I hate it is unstable, and even illegal..

But for sure can see a smile in my face everytime it works.
Until now is the only way I got my carrier signal and I was able to receive/send calls/sms even though it was for a short time. Temptation...
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #6 (permalink)  
Old 08-05-2008, 07:39 AM
iphone2
Status: Offline
Junior Member
 
Join Date: Jan 2008
Posts: 24
Rep Power: 0
iphone2 is on a distinguished road
Default

Quote:
Originally Posted by deco View Post
Hi guys,

........

I would advise everyone who has one of these chips to stop using them. Even though you might think it's ok, it's not ok because pretty much what you are doing is using a fake ID at a store or a fake credit card.

Thanks for everyone who helped me.
Hi DECO,

I do not understand why should we not use the * sim if it work on my 3G iphone, we used the same fake ID solution in 2G iphone without causing problems. The idea of * sim is to cheat iPhone that we are using the correct sim, right?

I have tested on three * sim solutions, the GExxx sim, the STxxxxsim SE, the isxm, none of them work 100 % right. They will work fine in one 3G network, but no service at all under another 3G network etc.

There are a few 3G network in Hong Kong.

Test results:
GExxx sim>>>>>>
a) PCCW (3G) : No service. no service at all in3G nor 2G network.
b) Hutchison 3G : no service at all in3G nor 2G network.
c) People (2G only): working fine.
d) CSL (3G): working fine. working on 3G & 2G network, but under 2G network has a stronger signal strength.

Stxxxsim SE>>> slightly better, same result as GExxx sim, but can get network in Hutchison 3G. In Hutchison 3G, STxxxsim SE sometime can connected to the 2G network only (not 3G) because it show 3G(2G) on the iphone top left corner. Occasionally , it sometimes has no service at all after a signal drop.Even waiting for hours, switching on & off again did not work.

isxm>>> work similar as GExxx sim. not so good in some network.

So is the result operators dependent ? or sim dependent? or base station dependent?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
Sponsored links Remove advertisements
Advertisement
Advertisement

  #7 (permalink)  
Old 08-05-2008, 07:53 AM
iphone2
Status: Offline
Junior Member
 
Join Date: Jan 2008
Posts: 24
Rep Power: 0
iphone2 is on a distinguished road
Default

Furiousim>>> I tried to test it, but I damaged it when I tried to put it out to change another sim from the iphone. .I shall get a new one & test again.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #8 (permalink)  
Old 08-05-2008, 01:08 PM
deco
Status: Offline
iPhone Moderator
 
Join Date: Dec 2007
Posts: 153
Rep Power: 10
deco is on a distinguished road
Default

iPhone2,

As I tried to explain in my previous post, the solution is relaying a test or fake IMSI to the network which could be very bad for you.

Just put them on hold while we do research, don't throw them away.

When we get more info we'll be able to explain better, I don't understand the process exactly but I'm working with some people and as soon as I can pinpoint exactly why it won't (doesn't) work you can be sure I'll post here.

Have fun!
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
  #9 (permalink)  
Old 08-05-2008, 07:05 PM
manole
Status: Offline
Junior Member
 
Join Date: Aug 2008
Location: Hong Kong, China, Bali, Romania
Posts: 16
Rep Power: 0
manole is on a distinguished road
Send a message via ICQ to manole Send a message via AIM to manole
Default

Hi,

Deco is right, there is not any sim solution (in market) at the moment for solving edge/3G problem in iphone 3G.

All this started here from this team yessim who only know how to make spam advertisement for incomplete solution that was working in universal sim before iphone was released, and they assume this for yessim.

But i can not resist to tell you, there is sim solution (not in market, yet).
I have ready universal sim new update for this.
And is not based on IMSI, so i assume there is no more illegal involved here.

Later we will post video for show you this.

@deco: i wait you send me pm with details for sending you samples of universal sim, same like we sent already for other 2 members of this forum.

@iphone2, are you based in Hong Kong? i can make for you live demo

BR,
Manole

Last edited by manole; 08-05-2008 at 07:10 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
Sponsored links Remove advertisements
Advertisement
Advertisement

  #10 (permalink)  
Old 08-05-2008, 07:38 PM
Zf_
Status: Offline
iPhone Dev Team
 
Join Date: Jul 2007
Posts: 717
Rep Power: 44
Zf_ will become famous soon enoughZf_ will become famous soon enough
Default

Quote:
Originally Posted by manole View Post
Hi,

Deco is right, there is not any sim solution (in market) at the moment for solving edge/3G problem in iphone 3G.

All this started here from this team yessim who only know how to make spam advertisement for incomplete solution that was working in universal sim before iphone was released, and they assume this for yessim.

But i can not resist to tell you, there is sim solution (not in market, yet).
I have ready universal sim new update for this.
And is not based on IMSI, so i assume there is no more illegal involved here.

Later we will post video for show you this.
Meh. You started well, let's try to continue better post technical details than a video, or be ready for the template
__________________
char dumbass[128]="pasta.dat";
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Spurl this Post!Reddit! Wong this Post!
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


LinkBacks (?)
LinkBack to this Thread: http://www.hackint0sh.org/f124/48433.htm
Posted By For Type Date
Rebel Simcard...? This thread Refback 01-14-2009 11:37 AM



All times are GMT +2. The time now is 06:29 AM.



Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.3.2 Ad Management by RedTyger
follow us on Twitter!

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448