Vodafone Femtocells Hacked, Root Password Revealed

July 14, 2011 by Mike Nathan 14 Comments

vodafone_femtocell_network_diagram

As phone systems have evolved over time, the desire to break them and exploit their usage continues to flourish. Just recently, [The Hacker’s Choice (THC)] announced that they had accessed secure data from Vodafone’s mobile phone network last year, via their femtocell product.

The purpose of the femtocell is to extend mobiile network coverage to locations where reception might not be ideal, routing calls to Vodafone’s network via IPSec tunnels. [THC] knew that this meant the femtocells required a high-level of interaction with the carrier’s traditional mobile network, so they started poking around to see what could be exploited.

After gaining administrative access to the femtocell itself using the root password “newsys”, they found that they were able to allow unauthorized users to utilize the service – a simple ToS violation. However, they also had the ability to force any nearby Vodafone subscriber’s phone to use their femtocell. This enabled them to request secret keys from Vodafone, which they could then use to spoof calls and SMS messages from the victim’s phone without their knowledge.

They have been kind enough to release all of the pertinent information about the hack on their wiki for any interested parties to peruse. Now we’re just wondering how long it takes before stateside carriers’ femtocells are exploited in the same fashion.

[Thanks, kresp0]

Replacing Non-standard USB Charging Ports

July 13, 2011 by Mike Nathan 20 Comments

htc_charging_port_replacement

While many mobile phone manufacturers are moving towards the micro-USB interface as a standard, others such as Apple and HTC are still bucking the trend. Part of [arto’s] job includes repairing mobile phones, and last month he found himself faced with a pair of broken HTC handsets that needed their charging ports replaced.

Replacements for HTC’s proprietary connectors are apparently quite hard to find, and [arto] says he had to source them from an HTC repair center. With the proper parts in hand, he could finally get down to work.

The HTC Hermes handset he repaired was a breeze, as it had plenty of space available around the charging port. He said that this allowed him to replace the jack pretty easily, but the HTC Touch Dual was a mess in comparison. He started by removing the old adapter, which was done by cutting it out bit by bit. He says that he did it this way rather than desoldering, due to its proximity to other heat-sensitive components. After some careful soldering under a microscope, everything was back in working order.

While his repairs are not necessarily the things that hacks are made of, the information is still quite helpful. Broken charging ports are extremely common among smart phones, and with plenty of these older models still floating around, his pointers just might help someone save a few bucks on a replacement phone.

One-click Unbrick For Samsung Phones

July 12, 2011 by Mike Szczys 20 Comments

[Adam Outler] has been pretty heavy into mobile device hacking lately. The biggest problem with that field is recovering from back flashes or development firmware glitches. In many cases you can use a JTAG programmer to reflash stock firmware to resurrect a handset. Unfortunately you’ll be hard pressed to find a phone that comes with a JTAG header, and soldering to the microelectronic boards is not for the faint of heart.

But a solution is here, [Adam] pulled together a wide set of resources to create a package to unbrick Samsung phones. Now we’re sure that there’s more than a handful of people who would argue that a bad firmware flash that can be fixed this way means that the phone wasn’t actually “bricked” in the first place. But what we see is one more barrier torn down between being a hardware user and becoming a hardware hacker. You’re much more likely to get in there and get your hands dirty if you know that you’ll be able to undo your mistakes and reclaim you precious pocket hardware. See just how easy it is in the video after the break.

Continue reading “One-click Unbrick For Samsung Phones” →

External Text Display For Nexus One

July 1, 2011 by Noah Dunker 4 Comments

Nexus One External Display

[follower] prototyped a 2-line external display for his Nexus One using an Arduino with a USB Host Shield, and the Android Open Accessory Protocol. There are two basic software pieces at work: an Arduino sketch that handles displaying data sent from the phone, and a lightweight android app to detect the presence of the external screen and send data to it. As shown here, it diplays the time and the beginning of the most recently received SMS message.

This project coalesced from several other things [follower] had been working on with regards to USB accessories, background services, interfacing with the Arduino and handling SMS messages, so it’s modular and open-source. If you’re interested in mashing up microcontroller projects and your android phone, there’s plenty of stuff in this project to help you get off the ground.

As hacks go, this is very much a “because you can” sort of deal that’s designed to tie a bunch of cool things together. You’re unlikely to catch us carrying an LCD and breadboard around in our pockets any time soon, but it paves the way for some potentially fun phone accessories.

Alternative Phone Charging Devices

June 30, 2011 by Jeremy Cook 32 Comments

We’ve all heard of solar cells that charge your devices, or the odd flashlight that charges when you shake it, but this style charger should be new to almost everyone. This “pan charger” is reportedly capable of charging a cell phone or other mobile device using a USB connection in 3 to 5 hours. It also has a built-in radio and lantern. This should be a great tool for surviving a zombie apocalypse or if you simply live in a region without readily available power.

A second charger, currently being used in Africa, is an adaptation of a small generator hooked up to a bicycle. As this form of transportation is quite common in developing nations, this simple idea definitely shows promise. Check out the video of the bike cell phone charger after the break. Continue reading “Alternative Phone Charging Devices” →

24 Cellphone Buttons Controlled With 6 Microcontroller Pins

June 22, 2011 by Mike Szczys 30 Comments

[J8g8j] has been playing around with an old cellphone. He wanted to control it using a microcontroller but since there’s 24 buttons he wasn’t thrilled about hooking up a couple dozen relays to do the switching. Instead, he managed to control all 24-buttons using just 6-pins of a microcontroller.

The proof-of-concept video that he posted on his site shows the phone responding to an arbitrary string of button presses. [J8g8j] spent the majority of his time reverse engineering how the phone’s keypad is wired. Once he figured out the rows and columns of the key matrix he soldered wires to access each of them. This turns out to be 14 connections. To these, he wired up a set of opto-isolators to handle the switching. These are in turn controlled by a set of three 74HC138A 3-8 bit decoders. what’s left are six input pins that leave plenty of room for him to hook up other items to the Arduino serving as the microcontroller.

If You Don’t Have A Steampunk Smartphone…

June 18, 2011 by Nick Schulze 21 Comments

[Richard] has been working on the concept of “incorporating more feeling into our digital objects”. His design is still just a concept but hopefully someone will take up the idea because we think the results would be amazing. The attention to detail in the design is impressive, the Rotary Mechanical Smartphone as he is calling it contains a generic smartphone maintaining all the features such as the touch screen, but also including a set of interchangeable rotary dials on the back. There is the true rotary dial just like an old phone and a push button dial, for complete integration of the old and new technologies.

Once the design was complete, Richard built himself a proof of concept model to show off his work. The shell was 3D printed and copper plated to get the desired steampunk finish. The rotary dials are made from brass plate and hand finished. [Richard] has put in a lot of effort getting the finish right with electroplating, painting, and sanding. The final results are nothing short of impressive. Check out his site for some very nice photos and build details.