Here's a link I had buried in my bookmarks from last November, that discussed this issue.
If accurate, it suggests the problem is not just bad code quality in the baseband processor being remotely exploitable. This article suggests it's basically a monoculture because everybody just buys the same "hardware part" because actually implementing it on your own is (very) hard. Once you add in all the FCC compliance issues, it's practically impossible.
Oh, and it suggests you may not need to bother with flashing the firmware as mschuster91 suggested. It trusts the cell-tower implicitly. Nevermind fancy stuff like "passwords" - just tell the phone to auto-answer because it accepts Hayes modem commands directly.
Here's a link I had buried in my bookmarks from last November, that discussed this issue.
If accurate, it suggests the problem is not just bad code quality in the baseband processor being remotely exploitable. This article suggests it's basically a monoculture because everybody just buys the same "hardware part" because actually implementing it on your own is (very) hard. Once you add in all the FCC compliance issues, it's practically impossible.
Oh, and it suggests you may not need to bother with flashing the firmware as mschuster91 suggested. It trusts the cell-tower implicitly. Nevermind fancy stuff like "passwords" - just tell the phone to auto-answer because it accepts Hayes modem commands directly.