Defcon 15: Hacking EVDO

[King Tuna]‘s Hacking EVDO was a popular talk. Things are really just starting on this front. Now that some of the newer cards have unlocked firmware (probably thanks to the need for sofware update EVDO revisions), It’s now possible to edit the firmware. With the door open, people can start mucking around with ESN’s and we’ll probably see some ESN duplication exploits soon.


  1. Forrest says:

    How cheap can you get an unlimited EV-DO plan? I’ve been thinking of getting it.

  2. terminalblue says:

    my “phone as modem plan” with sprint is 39.99 a month for unlimited service. However if you just wanted evdo for your wireless device it is 15.99 a month…but no modem access…
    funny story. i bought a Moto Q from ebay and had it activated. after two weeks the evdo stopped working on the Q but started to work on my RAZR (my original phone). I called sprint about the Q not working but i never mentioned the RAZR to them. After a few days they fixed the Q and the RAZR still has unlimited data service…
    Anybody had this happen to them?

  3. Eliot says:

    By almost all accounts, the EVDO talk was crap.

  4. Eric says:

    Will they be posting vids of the talks at all?

  5. Forrest says:

    from m/NASApp/onlinestore/en/Action/DisplayPlans?filterString=Data_Plan_Filter&id12=UHP_PlansTab_Link_DataPlans it looks like that is not an unlimited plan.

  6. Forrest says:
  7. EarlJr says:

    I’ve always wondered what kind of authentication system evdo uses, but I don’t have it in my area so I couldn’t experiment with it.

  8. tr0s says:

    actually you can get unlimited ev-do for 15.99 with sprint through the data cable on your phone or bluetooth by simply disabling the nai in the hidden settings. look it up, i access internet at 230 kbps off my a900 all the time.

  9. bob evdo kim says:

    Forrest… evdo REV A is $59/m regardless whether you have a evdo card or not.

    Eliot, long time no talk. EVDO VOIP in rev A is MUCHO better at 80ms than Rev 0 was at stinkin 400ms.

    But heck, even my vonage over PRO DSL still sounds crappy at times. Eh.

    HSUPA or EVDO Rev B should be perfect. But by that time, we have Wimax on the grid so who knows.

  10. necromcr says:

    FYI: Here in Slovenia almost every major settlement has HSDPA connection via Mobitel provider and it flies with full 3.6Mbit/sec. Monthy fee for 1GB limit is 21 euros.

  11. Tom says:

    It was a popular topic… the actual talk on the other hand, was mostly him trying to get his laptop work…

  12. Double D says:

    Wait…when did EVDO become a subscription service? With my verizon phones (I have 4 different phones on a family share), all of them have EVDO coverage and it doesnt cost a thing. I think the subscription service you guys are talking about is VCast, at least, thats what verizon calls it, I dont know what Sprint calls their service. But then, I could be wrong.

  13. Courtney says:

    But no guess!

  14. Mark says:

    Some “public” interesting information about 3G EVDO hacks:

    PoC 3G/UMTS Alex Hernandez

    does any1 have the presentation or more information to contact the author Kings Tuna?

    blogs, tips anything are welcome


  15. Mark says:

    Some public interesting information about 3G EVDO hacks:

    PoC 3G/UMTS Alex Hernandez

    does any1 have the presentation or more information to contact the author Kings Tuna?

    blogs, tips anything are welcome


  16. an attendee says:

    There was no information. The presentation was “We’ve found an EVDO card that has unlocked firmware. We can do cool stuff like change ESN’s using QPST, but it’s a felony. We don’t know what all we can do and would like your help. Come to the vendor area and buy some EVDO cards.

    The only valuable piece of information was this:
    Assuming you have an EVDO phone with an EVDO plan, you can read the ESN from your phone using QPST, then write that ESN to your unlocked EVDO laptop card and have free 300-700kbps internet on your laptop as long as your phone is off. If Verizon sees your ESN coming from two devices simultaneously, you’re in deep shit (that whole felony thing).

    There ya go – King Tuna’s 50 minute presentation in 1 minute.

  17. aj says:

    Does anyone have luck with writing cellphone esn (evdo cell with pcs vision plan) to laptop internal evdo card?

  18. Yinka says:

    can somebody please help me out? I have an EVDO which I use in browsing, though it is linked with a CDMA network in my country, which I have to subscribe to every month before gaining access.

    I would like to get a crack that I can use in breaking into the EVDO, so that I would be able to brwose with the EVDO without subscribing every month.

    I would be glad if any one can get this for me.

  19. w0lf says:

    you sir are an idiot

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


Get every new post delivered to your Inbox.

Join 96,693 other followers