Re: First small steps toward free GSM firmware

2013-11-14 Thread joerg Reisenweber
On Fri 15 November 2013 01:59:10 Sebastian Krzyszkowiak wrote:
> On Fri, Nov 15, 2013 at 1:50 AM, kardan  wrote:
> > The following is more generally related to the GSM subject:
> > http://www.osnews.com/story/27416/The_second_operating_system_hiding_in_e
> > very_mobile_phone
> 
> I really don't understand this article. It's like it's some kind of
> surprise that GSM modems run firmware on their processors. It's so
> obvious, yet everyone seems surprised and shares this article like it
> was something insightful.
> 
> Probably you know this, but I feel like clearing it up to some other
> readers that may be confused: This whole topic is exactly about such
> "OS hiding in the modem" and I guess everyone who was following
> Openmoko struggling with firmware bugs already know that it's buggy
> and probably not very hard to exploit (AFAIR even some pretty standard
> GPRS usage may cause buffer overflows).

[quote]
Lastly, the baseband processor is usually the master processor, whereas the 
application processor (which runs the mobile operating system) is the slave.
[/quote]

Nothing more to say. This article isn't worth the CPU time to render it on my 
screen.

You can hack and exploit the baseband as much as you like, it stays baseband 
can can do nothing it couldn't do anytime on any location in the network.
IOW, don't worry about what's going on in your modem. It's even less 
interesting than what's going on in your harddisk of your PC. Since the 
harddisk could actually introduce a infected bootloader or kernel to your 
system, the modem is sth you rarely ever boot from. ;-P

incredible

Thanks Dos1! :-)
/j
-- 
()  ascii ribbon campaign - against html e-mail 
/\  www.asciiribbon.org   - against proprietary attachments
(alas the above page got scrapped due to resignation(!!), so here some 
supplementary links:)
http://www.georgedillon.com/web/html_email_is_evil.shtml  
http://www.nonhtmlmail.org/campaign.html
http://www.georgedillon.com/web/html_email_is_evil_still.shtml
http://www.gerstbach.at/2004/ascii/ (German)


signature.asc
Description: This is a digitally signed message part.
___
Openmoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: First small steps toward free GSM firmware

2013-11-14 Thread Sebastian Krzyszkowiak
On Fri, Nov 15, 2013 at 1:50 AM, kardan  wrote:
> The following is more generally related to the GSM subject:
> http://www.osnews.com/story/27416/The_second_operating_system_hiding_in_every_mobile_phone

I really don't understand this article. It's like it's some kind of
surprise that GSM modems run firmware on their processors. It's so
obvious, yet everyone seems surprised and shares this article like it
was something insightful.

Probably you know this, but I feel like clearing it up to some other
readers that may be confused: This whole topic is exactly about such
"OS hiding in the modem" and I guess everyone who was following
Openmoko struggling with firmware bugs already know that it's buggy
and probably not very hard to exploit (AFAIR even some pretty standard
GPRS usage may cause buffer overflows).

-- 
Sebastian Krzyszkowiak, dos
http://dosowisko.net/

___
Openmoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: First small steps toward free GSM firmware

2013-11-14 Thread kardan
Hey,

Excuse me for reading the thread only cursory,

On Mon, 11 Nov 2013 01:39:22 +0400 Norayr Chilingarian
 wrote:

> I would write instructions in wiki.

So far I did not understand your setup from the links you gave.
Your findings seem to be quite fresh. It is probably great work you are
doing. Maybe some sorted testing should be done before publishing
"facts". Please continue documenting your experiments to the list for
direct feedback as it is probably best to share with fellow developers
first.

The following is more generally related to the GSM subject:
http://www.osnews.com/story/27416/The_second_operating_system_hiding_in_every_mobile_phone
http://events.ccc.de/congress/2011/Fahrplan/attachments/2022_11-ccc-qcombbdbg.pdf
http://www.youtube.com/watch?v=fQqv0v14KKY

All the best,
kardan

-- 
Kardan 
Please encrypt emails to me. http://gnupg.org/documentation
Public GPG key 9D6108AE58C06558 at hkp://pool.sks-keyservers.net
fingerprint: F72F C4D9 6A52 16A1 E7C9  AE94 9D61 08AE 58C0 6558

Why?
* EU data retention since 2006 http://tinyurl.com/eu-data-retention
* NSA/GHCQ soak up all they can into their data centers
* orwell 2.0: http://knopfdoubleday.com/book/232010/the-circle/

EFF.org: Stop Watching Us! https://www.youtube.com/watch?v=aGmiw_rrNxk
> https://prism-break.org software for informational self protection

"everyone has the right to know who is knowing what about him at what
time." https://www.datenschutz.de/privo/recht/grundlagen


signature.asc
Description: PGP signature
___
Openmoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: GTA04A5 ready to be pre-ordered

2013-11-14 Thread Dr. H. Nikolaus Schaller
Hi,

Am 13.11.2013 um 22:46 schrieb thomasg:

> On Fri, Nov 8, 2013 at 11:20 PM, Dr. H. Nikolaus Schaller
>  wrote:
>> 
>> Am 08.11.2013 um 23:08 schrieb Michael Parchet:
>> 
>> Hello,
>> 
>> Sorry I found only GTA04A4  but not GTA04A5 with LTE for pre order and
>> price.
>> 
>> Why
>> 
>> 
>> If you look at the date (22 janvier 2013), a long time has passed. We did
>> start for preorders
>> back then, but there wasn't enough response. So it was put on hold some
>> weeks later.
>> 
>> In the meantime the list cited below is still almost correct, but not
>> everything.
>> 
>> Now, we are *thinking* about restarting the project with *maybe* LTE
>> (option).
>> 
> 
> Hi Nikolaus,
> 
> glad to hear that, I'd be really happy to see a new device that might
> leave the exterior of the Neo's behind for something better.

No, the GTA04A5 will keep the Neo's exterior as it is.

It is still a motherboard replacement.

But as before you may be able to design your own case around it.

> A long time ago, people were interested in replacing the Calypso with
> a Telit modem for future devices; as you might think about a new
> platform, I wonder if the Telit modems might be considered, still?

Initially we tried with the Telit modems but they were not flat enough
and we would have had to sacrifice the speaker (handsfree).

Fortunately we found the GTM601 which is used in the GTA04A1-A4.

> The big difference to the Qualcomms is, that the user documentation is
> much better, including a freely available full AT command reference
> [2] and more.

They also have Qualcomm inside.

> They have, for example, the new L910 [1] with LTE
> support, and as they aren't used by most major phone makers, I'd
> assume that they might be more reasonable in delivering smaller,
> reasonably priced, batches.
> It also includes GNSS (GPS, GLONASS) support (with documented AT
> interface), and has VoLTE support (voice over LTE), which makes it
> reasonably future-proof.
> With an 28.2 * 28.2 * 2.2 mm (LGA 144) package it isn't exactly tiny,
> but not that much larger than alternatives I think.
> Their modules are all pin-compatible, so the NA and EU variants, as
> well as 2G, 3G, 4G variants can be replaced without further changes.

The same holds with the Cinterion PxS8 modules. Documentation is
also available w/o problems.

We are currently evaluating all these options, but there are technical
and commercial aspects to consider. E.g. the Telit xE910 modems
are 10% thicker and likely still too thick.

> An extra wish would be using a main SoC with ARM Mali graphics, so
> free GPU drivers would be realistic (in contrast to all other options
> it seems).
> I'd certainly be in.

There is no plan to change the CPU since the OMAP3/DM3730 is still
the best mobile processor that can easily be purchased in small
quantities. And (despite the GPU) it is very well documented and
supported by mainline linux.

So please don't expect a wonder to happen... Just small steps and
improvements.

BR,
Nikolaus

___
Openmoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community