News for hackers. Stuff that matters.
Re:Reverse engineering a Qualcomm baseband processor [pdf] by kefka on Monday December 29, 2014 @10:42PM (#8813212)
My phone is a HaiPai Noble N7889.

I have complete control over my phone (baseband and userspace), including a nifty tool sanctioned by MediaTek to insert arbitrary AT commands in my processor at will.

I also have the ability to toggle something on the range of 75 GPIO pins. I'm not entirely sure what they do, so I don't play with them. But aside that, I have complete control over every part of the hardware.

Re:Reverse engineering a Qualcomm baseband processor [pdf] by noselasd on Tuesday December 30, 2014 @05:50AM (#8814061)
The processor that interprets those AT commands run its own operating system, and it runs a huge codebase implementing at the very least the GSM layer 2/3 and the UMTS layer 2/3 protocols. (Here's(http://cgit.osmocom.org/vovida-gsml/tree/) partially leaks of such code for an old GSM only phone, ramping up at about near 200000 lines of C and C++ code)

It sounds like you don't really have access to that and can e.g. change the protocol messages being exchanged by the BTS/NodeB or the mobile switching center.

Re:Reverse engineering a Qualcomm baseband processor [pdf] by rsync on Tuesday December 30, 2014 @02:30AM (#8813709)
Would you please elaborate as to how you have complete control over the baseband ?

Would you further provide the name of the mediatek tool ?

Re:Reverse engineering a Qualcomm baseband processor [pdf] by kefka on Tuesday December 30, 2014 @07:50AM (#8814350)
The tool is available on the Google play store: Mobileuncle Tools.
Re:Reverse engineering a Qualcomm baseband processor [pdf] by xai3luGi on Tuesday December 30, 2014 @03:01AM (#8813764)
Which FLOSS operating system are you running on the baseband?
Re:Reverse engineering a Qualcomm baseband processor [pdf] by kefka on Tuesday December 30, 2014 @07:35AM (#8814310)
Its a modified 4.2.1 android with a Chinese patched Google Play install.

I didn't like the samsung-esque install of their base, so I recompiled to what I liked.

Re:Reverse engineering a Qualcomm baseband processor [pdf] by vetinari on Tuesday December 30, 2014 @01:38PM (#8815932)
Android does not drive baseband, it runs on application processor.

Baseband processor is separate core that runs its own, realtime OS, that handles radio communication. These OS are not opensource.

The application processor talks to baseband via RIL (rild in Android), which is basically a form of IPC via shared memory.

To recapitulate: In your phone, there is another CPU, with closed-source OS full of bugs, connected via air to network and it has full access to RAM of your application processor.

I hope that it's obvious, that it does not matter, what OS runs on the application CPU.