Hardware Hacking Guide — Citizen Engineer 100
Solderingfool writes "MAKE Magazine's Phil Torrone and open source hardware hacker Ladyada from Adafruit Industries have a new video series called 'Citizen Engineer.' In the first video they show how a SIM card works, then build a SIM card reader which could be used to clone a SIM card. They also show how to use an old payphone as a regular home phone, later with coins, and for their final hack — how to 'Redbox' it. They released all the projects as open source, and the video is well produced."
How long will it take for the FBI to ride? (Score:4, Insightful)
Maybe the fact that a hole is there doesn't mean you can expoit it.
And, finally, does FBI understand it?
Re:How long will it take for the FBI to ride? (Score:5, Funny)
Maybe the fact that a hole is there doesn't mean you can exploit it.
I've seen a lot of videos on the internet that suggest there's no such thing as a hole you can't exploit.
Re: (Score:2, Interesting)
Re: (Score:1)
Re: (Score:1)
Re: (Score:2)
It isn't on Woz's WP article, but I'm pretty sure there were some mentions of it in his book (iWoz I think it was called)
Re: (Score:1)
Re: (Score:1)
Re: (Score:3, Insightful)
And, finally, does FBI understand it?
To the issues of 2600 at the book store in the mall, to the anarchist's cookbook and to the old text file archives of yore this information has been around for as long as we've wanted to learn it. Sure the FBI (or some other organization) might puff up with hubris but I doubt it and in fact I think it's high time we start seeing more things like this. And I think this place [hackaday.com] is a good start...
Re: (Score:1, Redundant)
Hole what hole? (Score:5, Insightful)
Re: (Score:1, Interesting)
Backing up your own SIM is perfectly legal, these are your data after all. Cracking your SIM to extract or modify operator keys is something else: since the card belongs to your operator you are not supposed to crack it open.
Anyway, cracking a smartcard is a very difficult and costly operation. Smartcard manufacturers took special care of making these tamper-resistant, so that the cost of extraction outweighs the gains by a very large factor. Without specialized hardware and complete specs from the manufact
Re: (Score:2)
The card belongs to the operator? Really? When I gave T-Mobile $5 and they gave me a SIM, they were actually... what? Renting it to me?
Re: (Score:2)
When I throw that SIM away, do they then come after me? Do I have to give it back to them when I'm finished with it?
This just makes no sense to me. I don't recall anything in the terms of service which said that they still owned the SIM (although I didn't read them very carefully) and it certainly appears to be mine as far as what I can do with it and who will or will not prosecute me if I do certain things with it.
Re: (Score:1)
Basically, from my
Re:How long will it take for the FBI to ride? (Score:5, Informative)
The video contains no holes in SIMs, Payphones, or the telco billing system.
Did you even watch it?
She had to rewire the phone in order to get a red box to work because modern phones keep the microphone unpowered before you pay.
A SIM reader isn't illegal or even really a black hat thing to do.
Re: (Score:3, Interesting)
Well they did brute force the secret key (Ki [wikipedia.org]) from their SIM using the reader they build, but as they said, newer SIMs will detect the high number of requests and self-destruct. Additionally this was a 5V SIM reader, and many modern SIMs are 3V in anycase.
The only thing that worried me in the video was the quality of the soldering!
Mike
Re:How long will it take for the FBI to ride? (Score:5, Informative)
Re: (Score:2)
Hmm, you could be right, not sure. I was thinking of 3GPP 21.111, section 9 "Electrical characteristics and transmission protocols":
"Electronic signals and transmission protocols shall be in accordance with the specifications in TS 31.101.
The electrical specifications shall at least cover the 1.8V and 3V voltage ranges as specified in GSM 11.12 [9] and GSM 11.18 [10]. Lower voltages may be added in the future. 3G terminals shall not support 5V on the ME-UICC interface."
Linky: http://www.3gpp.org/ftp/Specs/ [3gpp.org]
Re: (Score:3, Informative)
I know RTFA is a bit hard, but did you even see what they were doing?
"Modify a retired payphone so it can be used as a home telephone and for VoIP (Skype). Then learn how to modify the hacked payphone so it accepts quarters - and lastly, use a Redbox to make "free" phone calls from the modified coin-accepting payphone."
So they first show you how to use a retired home phone for personal use. Then how to set it up to accept coins (you own the phone). Then how to redbox the phone you own.
At the bottom they sho
SMI reader kit is for sale (Score:5, Informative)
$17 seems pretty reasonable to me.
Re: (Score:1)
Payphones? Redboxes? (Score:5, Funny)
Re: (Score:2)
Re:Payphones? Redboxes? (Score:5, Insightful)
Re: (Score:1)
Re: (Score:3, Insightful)
Re: (Score:3, Insightful)
What knowledge is there to be had by following instructions off some text phile you d/l'd off some pirate BBS, anyway?
... Uhm. Plenty.
TLDR: Documentation is a Good Thing.
I have to agree. If you didn't already know how to do it, then those instructions taught you how to do it. In fact, correct me if I'm wrong, but I thought that was the point of a tutorial: Teaching you how to do something.
The Linux Documentation Project [tldp.org], at least, seems to think so.
Normally I'm in favor of elitism, but when one goes to the extent of saying, "There's no point in this documentation because anyone worth anything already knows it." they're going a tad too fa
Re: (Score:1)
This is analogous to script kiddies who don't even have to understand the damage they're doing, so there's no hacking involved.
Re: (Score:2)
Say I like to draw, if I want to get better at it I have to draw a lot. One way to get better is to get instructions; books, articles, videos and so on. By following instructions downloaded from the net, or listed in a book, you learn how to do it.
So without any great knowledge about this particular subject I can still see the benefit for someone interested in the field to thinker and tweak to increase their knowledge.
Re: (Score:2)
"1981 called - it wants its meme back."
1985 called - it wants its jokes back.
Why video? (Score:5, Insightful)
Online video is a waste of time and bandwidth unless it's porn.
I can easily skim an article and review a diagram much quicker than watching a video. Text also provides an easier point of reference than fast forwarding and rewinding a video to find a pertinent bit of information.
When it comes to online media the best innovation is no innovation at all.
Re:Why video? (Score:5, Funny)
It's geekporn. A geeky girl, soldering, throwing together electronics and showing you her enthousiasm for hacking and electronics? This *IS* porn.
Why do you think there aren't as much reactions?
Re: (Score:1)
Re:Why video? (Score:5, Funny)
It's geekporn. A geeky girl, soldering, throwing together electronics and showing you her enthousiasm for hacking and electronics? This *IS* porn.
Dude! That was terrible porn. I mean she used Windows! Windows for crying out loud!!! And did you see her solder joints? They were messy and horrible! No way that reader's going to go the distance!
Re: (Score:1)
It's geekporn. A geeky girl, soldering, throwing together electronics and showing you her enthousiasm for hacking and electronics? This *IS* porn.
Hear, Hear.
Re: (Score:2)
> Online video is a waste of time and bandwidth unless it's porn.
Not necessarily. Personally, I found the video quite educational. I've never seen someone assemble a circuit board before, having learned to do it from a book, and I have learned a few things by watching her do it.
Re: (Score:2)
For me it was more of an affirmation. My first thought was: "hey, that looks exactly like a lot of my quickie projects!"
It is interesting to encounter someone who has similar traits to your own.
In Latin class several of us had to translate some sentences on the chalkboard. When I sat back down at my desk and looked up I noticed that I couldn't tell where my (incredibly bad) handwriting stopped and the handwriting of a girl I had a crush on began. It was kind of spooky.
Re: (Score:2)
Online video is a waste of time and bandwidth unless it's porn.
If a video is without interest it don't get watched; thus it only consumes space and not bandwidth as such. If it gets watched it uses bandwidth; but then if it gets watched it's obviously of interest to someone.
Re: (Score:1)
Online video is a waste of time and bandwidth unless it's porn. I can easily skim an article and review a diagram much quicker than watching a video. Text also provides an easier point of reference than fast forwarding and rewinding a video to find a pertinent bit of information. When it comes to online media the best innovation is no innovation at all.
Sounds like somebody is upset that they still have dial-up.
Re: (Score:1)
Re: (Score:3, Informative)
Ada runs her own business, selling stuff to geeks, she understands her market - it isn't guys in suits
Re: (Score:2)
And I've never understood why so many businesses that want and need competent programmers make them dress like tools and fit into a corporate culture that that's actually harmful to good engineering practice. But they do.
Fortunately I haven't worked for such companies; I know a few people that have, in various industries. I don't know why they take the jobs, just to be unhappy there, but they do.
Re: (Score:1)
There are $ome $pecific $ide benefit$ that u$ually accompany employment at tho$e companie$ with $ane, rea$onable and profe$$ional dre$$ code$.
In my business life, the parking lots at the companies where everybody dresses like Larry the Cable Guy seem to be full of Ford Escorts and Kia Rios. Conversely, the lots at the IBMs and Microsofts of the world seem to have a higher percentage of Lexii, BMWs and Harley dressers.
Video ends too early (Score:2)
I watched the entire (HD) video and I was all set to see the last part where she has the old payphone release the coin after a call is complete.
"Time to try it out..." at 23:40 the HD video ends but the non-HD version continues on for another seven minutes.
Other than that it's great, I've always been a fan of Ladyada since seeing her cellphone jammer project.
Re: (Score:2)
And those who are lazy (Score:2)
Could skip all this "build your own" stuff (ok, read it thoroughly) and buy one of those chinese-made SIM card duplicators for about 20 bucks. Or a USB reader for even less. :)
Because, you know, you don't always have to build stuff
Re:And those who are lazy (Score:4, Insightful)
Oh man but the beautiful thing about having done it yourself is that you've done it yourself and learned a lot in the process. What you made might not be perfect but it is your creation.
I have made many things from wood and they exist in houses around the area, some even across the country. (Some stuff went to Germany but I don't think I had much to do with that project.)
I had a 2000 Ford Explorer Sport that turned the lights on automatically. That got totalled (no I wasn't driving it). I got a 2001 model of the same vehicle but the mirror didn't have the sensor. Dash drilling and several weeks later (figuring on a failed attempt too and wondering how I'd cover the hole I'd drilled prematurely) and the sensor is embedded in the dash *with a timer even* so that it works properly and doesn't just randomly turn the lights on when the vehicle goes under a shadow. (It was tougher than I had anticipated and my mishaps were plentiful.)
Either way, it is something you did. Something only you did. Even if you go the directions from a site (I probably should have but didn't find one) the result is still your work and you will have learned so much from just having done so and (I think) will appreciate it so much more.
Re: (Score:1)
Re:Open Source? Not exactly. (Score:5, Informative)
Re: (Score:1)
Out of curiosity, I've noticed the the I/O electronics for the SIM reader looks a bit like Dallas One Wire - but it has been years since I've designed anything for that so I'm not sure. Is it DOW?
Re: (Score:2, Informative)
Re: (Score:1)
Anyway, I'll keep an eye out for your next episode. Cheers!
Any dial the numbers? (Score:1)
Anyone else dial the numbers in the "last 10 phone calls"? One is from here in Atlanta!
2186813390 (80?)
4046296500
8003444539
6464653692
Re: (Score:1)
Note: The 800 number is digikey :)
Re: (Score:1)
218 ends in 80, its digikey's fax.
404 is for McMaster-Carr parts(?): http://www.mcmaster.com/#contact [mcmaster.com]
Lost all respect for Make (Score:2)
When they had an article about adding a PID controller to the heater on a home espresso machine. The so-called geek who wired it in used an off-the-shelf IC that did the whole thing for you, and admitted that he had no idea what it was or how it worked, just that it did.
Um, thats what Walmart shoppers do. Geeks and engineers UNDERSTAND things, how else do you think anything gets made? "Make" degenerated into the Mythbusters level after the first year.
Re: (Score:3)
I suppose you make your own RAM, know exactly how every one of the 500 million transistors on your CPU is wired, and bake your own bread?
It's perfectly acceptable to simply accept that an IC does what it's specced to do without knowing why. Comparing it to a Wal-Mart shopper is asinine.
Re: (Score:2)
I suppose you make your own RAM, know exactly how every one of the 500 million transistors on your CPU is wired, and bake your own bread?
Of course. He also built the powersupplies for all his tech toys, and refuses to use NAND IC's* (instead wiring his own.) He can even give the circuit diagram for his computer and trace all the voltage and current in it.
*For every single lab course I've ever had, we always used IC's for logic. I'm not sure you can buy a single nand gate, unless it's an educational kit for kids or something.
I just had to wire up an amp for a lab, and it's not something I plan to do again unless absolutely necessary 'cause th
Re: (Score:1)
Re: (Score:3, Informative)
Re: (Score:1)
Uhm.. A WHOOOOSH might be necessary here.
a) Either look at that part of the video or stop commenting: All screws are prepared already (i.e. loosened) and the part I was mocking is the one connecting the third screw/last two wires. She has no problems attaching the wire (the screw doesn't need to be loosened anymore) and turns the screw in the wrong direction afterwards.
b) I know that this is "real". I was trying to be funny. You messed it up.
Well. Here I am trying to start fun. Yes, it's nitpicking and the
Re:"Geek girl" that doesn't know how to screw righ (Score:5, Insightful)
Re:"Geek girl" that doesn't know how to screw righ (Score:4, Informative)
Re: (Score:2)
Thank you for responding and sticking up for yourself. I wish that more women would do likewise instead of just quietly leaving, as you say.
Re: (Score:2)
Re:"Geek girl" that doesn't know how to screw righ (Score:4, Informative)
In fact, most girls that are into nerdstuff are quite resistant to all those jokes.
You are Legend..-arily clueless. Are you so blind that you don't realize this belief is self-fulfilling? I've known quite a number of women that really just don't want to put up with this disrespectful boys' locker-room crap... and they find other things to do. Spelling it out: insensitive bozos like you keep repelling bright creative minds from all manner of disciplines. STOP IT!
Re: (Score:1)
Aw what is with this site? Are lesbians automatically modded down because they want to have a little fun with the subject matter who is female? You, mods, need to work on your tolerance certification.
Re: (Score:1)
Re: (Score:2)
I know, this is /. but if you don't mind... Just this once...
Sexist pig!!!!
I wanted, I even tried to resist after a preview, but I so have to send this as I may never get to do this again.
Nice videos, but... (Score:2)
All that stuff has been easily learned by anyone with the ability to READ for a long time now. What's the big deal?
Now some lazy ass can sit on his couch and be entertained by the THOUGHT of actually hacking on something by some folks on the pretty flashy LCD panel across the room.
Wanna hack? Build a workbench, turn the TV off, and grab a good book. [amazon.com]
would it been easier (Score:2)
to get a used cheap nokia phone off ebay ($6.99), a nokia serial cable and just write software to access the sim contents? i.e. reusing an old phone as a sim reader?
though novel and educational, I don't see the reason for the effort when I can use existing h/w.
Re: (Score:1)