E911 - Windows Mobile Development and Hacking General

I'm looking for any information, SDK, documentation, codes...
about E911 emergency service.
a few Windows Mobile devices (like XDAIII) have some descriptions
about features to use such a kind of service.
can I get these data programmatically?
on the client/device side?
where does this service run?
is it depend directly from the network operator?
or just from hardware/software inside the device?
is it a common "World" standard?
any help? link?

it is dipendent from hardware/software inside the device?
There was a Reg Key to set the number.Try to search in the reg closely

sorry.
I did not asked about emergency call numbers. This is well known.
I asked about some emergency service, where the network operator can recognize the location of phone automatically, becasue the phone can send some extra localion data on request. The newest hardware has some specialized chip inside to make it without GPS Rx. Look for XDAIII (exactly for PPC6600 in USA Sprint operator) details descriptions about its features.

Provider Service, not client application
I thinks so.

Related

Getting the MSISDN

Does anyone know how to get the MSISDN of a Wallaby or Himalaya device?
I think it depends on the network you are connected to. On my phone, it is on top in my main phone setting page where you can select a ringtone.
I should have said that I want to be able to get it programatically.
I have 2 devices at the moment an M1000 on Orange and an XDAII on O2 UK.
I'm starting to get close to it, but haven't got a solution yet. It's mainly this code. (Look for "Accessing SIM Information")
The trick is to change the address from 6f46 (Service Provider Name) to 6f40 (MSISDN). A list of possible addresses is available here: http://umtslink.at/cgi-bin/reframer.cgi?../GSM/simkarte_elementardateien.htm
(It's german but I think you'll get it anyway)
The problem that I still have is to access the read data correctly, so that I actually get this number.
Let me know if you found out some more. I'll keep you informed, too.

Fax Software

Can anyone recommend Fax software that I can load onto my XDA II to enable it to sebd and receive faxes? I have a fax number that I had with Orange but O2 do not have the same facilities for fax so I have had to put the number on permanent divert to my home fax. Not good as I cannot read them when I am out on the road working. O2 refused to tell me any fax software as they cannot endorse any companies other than O2, and as O2 do not do the software I am stuffed! Any ideas?
KSE Truefax 2
Try KSE Trufax 2.06 for XDA II, at:
http://www.ksesoftware.com
(although it's not always working with me)
When I download will it wipe off anything I have on my XDA? I am very nervous about downloading stuff as I do not want to loose any info I have on my XDA. Thanks
You can download it and install it simply. It won't wipe anything. When sending a fax, the telephone function is automatically suspended, and, when finished, it goes on again. Sometimes, while sending a fax, the system hangs so you need to make a simple soft reset.
got the trial version can but says no carrier any advice ?
hi jus got the trial version of the sofware when i try to send a fax the program reports - dialing using internal modem - slight pause - then says no carrier signal ....... can you shed some light on this for me please .....
thanks heath.
problem sending faxes !!! solution
hi loaded the software as noted above but on trying out the sofware i kept getting the message no carrier i found some info on the kse website which told me to ring my provider and ask if the sim card was enabled for fax !!!
ang guess what yep i am now waiting for the settings to filter through the system.....
i will report back to this thread with an update in errrrrrr 12 - 24 hours...
reporting back !!!!
very impresive have had the trial version running and have used it succesfully many time to send as yet not received any still working on that but information i have suggests i again need to contact my provider to be issued with a fax number ???....... will keep you all posted. :?
Why we need a fax number from provider?
Why we cannot use a standard gsm number?
Anybody knows another software capable to receive faxes without a special fax number?
:roll:
I beleive you can't fax directly over GSM because it's a completely different set of communication protocols to fax. It's analogue for a start. GSM modems don't know about fax carrier signals etc. What happens when you get a fax number from yoyur provuder is this number goes to a box at your phone provider, which accepts fax protocols and converts things to go via a GSM data channel to your phone.
I wonder if a completely software fax solution would be possible, ie it opens the GSM audio stream and provides a software based implementation of fax comms. Probably impossible as even though anlogue fax and GSM audio are similar bandwidth (9.6Kbps) the GSM audio codec is geared to voice so wouldn't represent the fax singnal adequately.
andyclap said:
the GSM audio codec is geared to voice so wouldn't represent the fax singnal adequately.
Click to expand...
Click to collapse
Fax tones are specifically designed to work over voice systems....
(300 to 3.4K)
as these are the set limitations of earlier Telephone Transmission systems....(4 meg fdm & pcm)
Don't know a lot about GSM though..... :?

xda exec blocked

if i change the rom to an i-mate jasjar or any other will it be unblocked?
No
why is that ?
I'm not an expert but Sometimes I wonder why is that, If we replace ech and every file of locked mda-pro with unlocked jasjar ?? then there should be no reason for a locked mda-pro.
can anyone explain inside science of locking & unlocking ?
I think it also depends on the definition of "blocked"
If the phone iteslf has had its IMEI blocked, then no amount of reprogramming/reflashing will unblock it.
If the phone has a simlock on it, then I believe this would be to do with something within the phone hardware itself.
Hi guys
That old chestnut again, locked and blocked are 2 completely different issues and unfortunately neither of these actually involves anything that is didrectly under the control of pocket windows.
There are 2 types of locking.
1) PUK locking (SIM Locking), this occurs if you incorrectly enter the SIM pin code 3 times in a row. If this happens you need to contact the network provider to get PUK unlock code, better still if you enter the PUK code incorrectly 5 times you will destroy the sim and need t get a new one.
2) Network Locking is a flag that specifies the LAIN of the mobile network that supplied the mobile phone and if this feature is enabled by the operator it will mean that only a SIM card that has the corect LAIN will work in that phone. I forget what LAIN stands for but basically it is used in the GSM international roaming world and therefore each operator has its own, the first few digits indciate the country then the last ones the specific network.
This can be disabled in 2 ways firstly by using and encrypted code specifically issued for your handset. Or secondly by trial and error by writing different values to the registers on the EPROM on the GSM unit itself. Eventually this will result in the phone unlocking itself. In order to do this the gsm engine needs to be removed from the handest and interfaced to a serial port. A 0 or a 1 is then sent to each register 1 ata time and the phone is then tested to see if it works. Depending on the size of the chip this takes a long time. However when you no the memeory location of the register this can then be done to any phone in a matter of minutes. this is basically the way modsyt of the unlocking systems are developed.
Finally IMEI blocking. This is done where the network has evidence that a crime has taken place either fraud commited on the handest, abusive phone calls or the unit has been stolen. If the network IMEI blocks it you have 2 options, 1 sell it in a diferent country ( Nigeria) or some chip sets contain the IMEI details on a flash chip. Again the registers are read over a serial interface and this can be rewritten. The first phones to support this IMEI in flash were the siemens TC35 gsm engines also the wavecom gsm modules support this. I am not really sure of any legitimate application for changing the IMEI of a mobile handest or even why this data is not writen in ROM but there you go.
I hope that helps to clear up issues relating to locking and blocking.
Regards
Charlie
thanks for such informative essay, we all are concerned about the network locking. I have noticed a tool to remove simlock from HTC wizard using same OS as HTC Universal. but in the above post its mentioned that OS has nothing to do with unlocking ..
But unloking tool of all old HTC devices running WM 2003 never took so long as in the case of Universal ? or may be quite possible that all good brains of our forum dont use Universal ?

Hermes not showing name display

My provider, Fido, offers a service where the name of the caller and telephone number show up. It's called name display. Unfortunately, on the hermes, the name does not show up. I only get the telephone number.
I have used another phone with this service and the service works.
I have been through several roms and they all give the same result. Any clues to what could be going on?
bump bump77
I never knew there was this funtionality from the provider......
Always thought there was a conversion on the phone when there comes a call in. Number recognition is we'll known, name send with the provider I have never heard off.....
Hope someone has an answer for you!
http://www.fido.ca/portal/en/support/namedisplay.shtml#q01
"What is Name Display?
It's a unique service exclusively offered by Fido and Rogers that lets you see on your handset display a caller's NAME and phone number from Fido, Rogers Wireless and landline callers across the nation, even if it isn't entered in your phone book. So you'll always know who's calling you. "
dying to find a solution
I have Hermes from Rogers. I have name display and of course stop working after upgrading to WM6.
just to prevent duplication, please read what I've done so far at the following link:
http://forum.xda-developers.com/showpost.php?p=3078617&postcount=9
I don't have enought info or experience. Can anybody help? Work together or direction whatever...
This cannot be impossible. I don't think HTC developed a driver only for Rogers.

How is the Imei sent over the network?

Do any one know how a windows mobile sends the IMEI to the network?
Which function in the api ?
i'm sure it is in the low level api , kernel or may be the coredll.dll but i cannot find any clue on it , and i don't have any idea on where to start to trace that.
Any help or clue would be grateful
Is it really sent??
I'm by no means an expert on this subject -- but is it really sent over the network? In my case the US ATT network? I'm not so sure it is...
...if so, why do they have to always ask me for it?
...if so, why aren't they automatically charging me an extra $30/mo. for a PDA data plan which they insist is REQUIRED for PDAs to connect-even though we all KNOW that's a lie and an ATT rip-off scheme?
...if so, why am I able to call them and give them ANY NON ATT IMEI over the phone and they not dispute it?
...jus a few questions to answer your question.
I'm not an expert either, but I can tell you that they see it. I like to think of the IMEI number as your "ip address" or your phone's "username" for the network. It has to be sent for access purposes and it would be stupid not to log that type of server access. Else how else would you be restricted from using other Cellular towers.
Wrong.
Read up on IMSI's and TMSI's
In the Netherlands the police used an IMEI number to send text messages to a stolen cellphone, even thought they had changed the simcard the phone would show: " This phone is stolen please bring it to the police" every 5 minutes...
Though I'm not an expert on this topic, I thought that the Radio Firmware handled all communications with the Cellular network, including IMEI. One reason I am inclined to go with the Radio Firmware is this simple reason: If it was handled by WM, somebody could probably figure out how to spoof it through WM at one point or another, in the same way that MAC addresses can be spoofed.
And as I said, I'm no expert on this, so please, somebody correct me if I'm blatantly incorrect.
Oh, and w00t! 400th post!
IMEI is for sure transmitted to the network, since this is registered on the BTS every time your signal "auth" on it , and the server logs it and checks if your phone is on the "blacklist" and then reject connection if it is the case.
Check here
But i wonder, technically, where from it is sent, maybe from the Radio firmware like previously posted ?
I guess, since we have some tools to read & change the IMEI on others HTC, it could be done on every models (if i understood right, the IMEI part is somewhere on "read only" and we first need to unlock the CID to unlock this part of memory and then modify / alter it.)
The tools is found here :
IMEI Updater
But works only for iWizard and some other models.
But couldnt we hook the function that retrieves the imei and alter it on the fly? (from the software point of view?) or should i digg in the flash memory?
Or is it hardcoded on the SPL or the IPL? When and what function is used to send it on the network ?
Also for al the legal issues, i might add that an opensource OpenBTS Project is running , and it is in a research-oriented initiative.
So no post saying that i want to change stolen Imei etc.. this is not the case.
I'm a developer for one year now, and i'm interested in mobile security and research.
ix0u said:
IMEI is for sure transmitted to the network, since this is registered on the BTS every time your signal "auth" on it , and the server logs it and checks if your phone is on the "blacklist" and then reject connection if it is the case.
Check here
But i wonder, technically, where from it is sent, maybe from the Radio firmware like previously posted ?
I guess, since we have some tools to read & change the IMEI on others HTC, it could be done on every models (if i understood right, the IMEI part is somewhere on "read only" and we first need to unlock the CID to unlock this part of memory and then modify / alter it.)
Click to expand...
Click to collapse
I think you'd have to Security Unlock as well. And I'm certain that it's stored somewhere in protected flash memory, at least on the Qualcomm based devices, because there have been isolated reports of IMEI changes after using Olipro's Kaiser SIM/CID unlocker/changer.
It works by flashing a modified radio firmware which security unlocks the device (until a different radio is flashed), then a program is run in Windows Mobile which somehow changes SIM lock and CID information. If you're curious, those cases concerning IMEI changes as a result of this tool are here and here. And if you really want to know about this issue, a visit to the XDA IRC channel, or a polite PM to cmonex, Jockeyw2001, Olipro, or Pof could probably clear this up, as those are the people who really know these devices. Good luck
Thank you very much DaveTheTytnIIGuy, at least i have a lead now, on where to go and who to ask.

Categories

Resources