 My name is Alexander Lash, and I'm here to talk about taking back your cell phone, really taking it back from the manufacturer, taking it back from the carrier, enabling features that you read on the spec sheet and then couldn't find after you bought it. But first, everyone's favorite part, the disclaimer. This talk is not an endorsement, a detailed guide about a particular phone except when it is, about carriers. Okay, well, it's mostly about carriers. It's especially not approved or sanctioned by my employer in any way, and in no way represents any opinion, policy, or stance of theirs. Oh, and more disclaimers. This will probably break your phone, please keep backups. It will break your contract if your carrier finds out. Your carrier can and will charge you. Do not use BitTorrent on a tethered link. It's funny until you get the bill. And this does mostly target the USA cell market. Apologies for international visitors. Why I'm doing this? Here's a brief history of tethering, me and Verizon. Sure, if you buy the data cable, two hours online of customer service getting a feature added. I need to get the secret code from the manufacturer, and then finally, and this is the current story. Oh, that's 60 a month, and it was free on your last phone. But your new phone's hardware isn't compatible, and well, with the free service anyways. And other innovations I've seen in my career here, crippled Bluetooth, because headsets are good, but ringtones are bad. Scare tactics, that $20,000 cell phone bill I think most of you have heard of. Media transfer fees, because you're not allowed to put your own ringtones on. Locked application platforms, such as Brew, because everyone should have to pay $10 for Solitaire. And many, many more. And just in memoriam, all the phones that have died to produce this talk. I will pour one out after the show. Anyway, some basic skills that you all want to have. Dealing with your carrier, I do get this a lot more than you'd expect. Automated systems, don't check for many things. Like for example, the fact that your phone wasn't purchased from the same carrier. Be very circumspect. Talk about faults in features you're already paying for. Be courteous, and above all, don't let them keep talking. Keep going on, they'll just simply cave in. Not that I said that. And again, stress that you need to make calls. Unless you're not paying for that. Some great online resources. Howard forums. I will say them, say it as many times as I can. It is the best resource to find people like me, people better than me. People who I've stolen notes from to produce this talk. You'll find someone who's already done the same mod you're attempting and can tell you what will go wrong. XDA Developers is one of the best Windows mobile sites and covers a lot of stuff that's of general interest to smartphone users. The appropriate phone operating system SDK from Apple, from Microsoft, or the Symbian Group has a lot of great examples for you to take and some of them will in fact enable these features. And if you can get it, your manufacturer is SDK. Motorola has a great program for this. So starting off with feature phones. Now what's a feature phone? Many of you have probably never heard the term. It's not a smartphone. It's your average cell phone. It's running a manufacturer's operating system. It generally runs only sandboxed apps. And yes, I know this describes the iPhone perfectly. Still it's a smartphone. Now it tends to be a much less expensive alternative up front. It tends to have many more locks in place. Far fewer features. There tend to be special plans for it. And I guess that's why it's a feature phone. And yes, it's already time for another iPhone joke. Essentials. Get a data cable. If you have a data cable, you should come to the hardware hacking village after the Q&A session. We might be able to do some interesting stuff for you. Serial terminal software. There's a GSM-AT command set that was finalized quite a while ago. And almost all of those commands are implemented on both CDMA and GSM-based phones and let you do, again, some fantastic stuff. BitPim, Gamu, and Nokia are all open source projects, all of which will let you open up your phone's feature phone's file system. The Qualcomm PST, which almost no one in the audience will be able to obtain. It's CDMA only, and it's not generally available to anyone but carriers, but will let you do some rather interesting tricks. The manufacturers product support tools available to their technical support people. Again, they're useful if you're trying to do stuff, but I don't know how you'd be able to obtain something like this. And most importantly, sign up for unlimited data. For a feature phone on most carriers, this is between $7 to $15 a month, and it gives you a wonderful excuse to be suddenly using a large number of data minutes for no apparent reason. Your Grail is the manufacturer PST. This is the real bricking alert. Even when used properly, these things tend to crash. And especially when used properly, these things tend to crash and leave your phone bricked. And really, find someone else who's tried it first. Very high risk, very high rewards. With this Grail, you can get rid of the proprietary UI. Some carriers horizon currently force on you. You can sometimes change out Qualcomm Brew for J2ME to install your own apps. It's a great way to kill a week in a phone. I have a wonderful war story for this. Unlock Bluetooth profiles again if you're lucky. You can get A2DP sometimes. And of course, file transfer for ringtones. Unlock USB mass storage mode. Use your phone as a flash drive. And flash features from newer phones or newer revisions of the same phone. Razer owners, I'm looking at you. Stupid phone tricks for everyone in the audience if you'd like to follow along. Here are a few different codes you can plug into your phone right now to access a certain menu which will let you do a variety of things. On most phones, this will let you set your own WAP proxy. Many of you are wondering what that will do. And the answer is, shortly, let you connect to the internet through your own proxy without paying for mobile web access from Verizon or a number of other carriers. Credit to HowardForums.com for all of these. Again, can't plug them enough. Oh, and the iPhone has one of these too. Just like every other smart phone. What can you do with this next? Okay, break your phone again. You can tweak some odd settings but you really don't want to tweak. If you don't understand what it is, look it up first. If you can't find a reference on it, really don't tweak it or at least if you did, don't tell me you did. You can get free WAP through this. Like I said, using your own HTTP proxy. This is usually called web sessions. You'll need to have an open HTTP proxy to do this and that's a wonderful problem in and of itself. Now, this is on CDMA only and we'll get into the reason for that in a second. Some phones will also not allow you to plug in a data cable without going into this menu and enabling the option. You can sometimes change your NAI and I will say what that means shortly and this is the first step towards free tethering. Now, why am I... Tethering is something I'm going to come back to a lot and to me it's one of the most important features on a feature phone because it lets you connect to your laptop or a real PDA, get real internet access, get real mobile apps going and that's what I do most of my research in. This is just what I have to do to get it to work. Tethering is carrier authenticated. It requires a valid context. There's different terms for GSM and CDMA there and how you get a valid one, easiest way is to buy one. Again, buy that feature phone data plan. It's very much worth it or you can kind of find one using a CDMA carrier issue which we're going to get to again in a second specifically into this second. CDMA. BitPim is your best ally if you're on Verizon or even on Sprint. Accessing your phone's file system, an open source alternative to a wide variety of tools that are difficult or illegal to find or steal. Tools that don't exist and tools that are very proprietary such as I don't know if anyone's ever heard of G-A-G-I-N, get around, get it now. Show of hands, anybody? Nice, old school. This works on every CDMA phone since the VX4400, the first phone I killed, no coincidence there and support gets better every day it's an open source project. BitPim is make a complete backup of your phone for when you break it because you will. And again, quick uses of BitPim. You can add ringtones with it instead of paying two bucks a ringtone. Add pictures instead of paying a buck to transfer it to yourself as an MMS. Add video which most carriers don't let you do. Download video to your computer which again most carriers don't let you do. Back up your phone. Again, the in-memoriam slide and modify system files which let you do little tricks like turn off the shutter noise on your camera and other annoying features built into your phone. And again, HowardForums.com is a great place to find out what to start breaking. Qualcomm PST is yet another breaking alert even though this is the most important carrier tool most stores use for service programming. You can use the backup service programming restore it to a new phone after you break yours, modify your service programming for tethering, really only tethering you don't want to mess with the rest of it and it's the only really surefire way to change your network access identifier, the NAI. It can also modify some files that BitPim can't. Here's a brief history of CDMA data which has a lot of great information for everyone and here's another I-Chart. But the most important part is everything now boils down to the NAI if you have a modern phone and by modern I mean pretty much in the last three years which should be everyone here. It authenticates you for data connections. You may have seen your number at vzw3g.com in various places. Now, most phones have two. One's for WAP and carrier services and unlimited access and I honestly have no idea I guess we've gone to DEF CON 17? Right, so goons anybody? I'll just yell louder. So most phones have two. One is for WAP and carrier services like for example checking in on your account unlimited access on this NAI tends to be 10 a month. Unlimited access on the, oh and of course most non-plan access generally bills as airtime for that particular NAI. That's what lets you download applications from their app store. There's a different one for tethering the one that you're charged 45 bucks a month to use and non-plan access generally gets rejected. Now what happens on your phone is depending on whether or not you're trying to tether or whether you're using a on-phone carrier service it will pick from one that's stored in its flash memory and the trick is simply to use Quellcom PST or your phone's debug menu to change this and I was going to do a demo and was told that by no means should I possibly do a demo thanks to my company's legal team but I will be at the hardware hacking village and will be happy to show some of this at the Q&A. Anyway, do we still have a okay, this is not a real alert this is merely a test. If there was really an alarm that needed to interrupt this talk it would be accompanied by somebody screaming probably me. Thanks, I'll be here all afternoon. So getting on to GSM which is basically the... Yeah, there we go! Halfway through the deck. Moving right along. GSM for the most part what I've said about the file system is the same. The tools you will access will be different. What makes GSM different is the fact that GSM data wasn't an accident. There's a few reasons for this. Most voice plans therefore have per kilobyte charges for data access whereas on most CDMA plans it's simply build as airtime. GSM phones tend to be sold in free or countries than this one. Generally support J2ME out of the box which means you can run your own applications without much trouble and rely on carrier locks whereas Verizon relies on device locking it's a different system and IMEI locks. And of course GSM networks allowed for non-carrier-approved devices from day one whereas most CDMA networks are just now allowing this. So we're getting on to the APN which is the equivalent of the NAI but for GSM and it authenticates you for data connections. WAP.Singular may look very familiar to someone or WAP.Voistream.Net or TZones.teamobile.com there's a large number of these. Again, most phones have two and this will look very, very similar except the fact that non-plan access tends to get billed per kilobyte or get rejected entirely. Neither of these are great and again the way around it is to simply buy a data plan temporarily and it's exactly like an NAI in every way. Really the carrier is just a little bit smarter about it. Good news! The APN is very rarely stored on the phone you set it when you're establishing a connection this means you generally do not have to reflash any part of your phone or have any real tools. You just need to know the APN. Unlimited WAP access therefore becomes unlimited tethering within a reason again no bit torrent and violates your carrier TOS and I didn't tell you how to do it. Carrier unlocking is a real issue for GSM which it's really hard for me to get into. Generally requires some deep firmware mods. It's usually phone specific if not manufacturer specific or it requires some hardware mods which can generalize to a wide variety of phones and profits get made here so it's very hard to find open information on this. I was able to put together some general tips and tricks but it really wouldn't be of interest to most of the audience mostly it's for older phones and it's really outside the scope of the talk and I could spend 3 hours on this I'm not sure why that was animated. Anyway smartphones which I think most everyone here is carrying can you show of hands actually if you're carrying a smartphone? Yeah! Real surprise there so general smartphone notes different plans at the exact same back end and generally cost 4 times as much for data because they know you're going to use it supply and demand very rarely are you software locked or feature restricted with a smartphone. Generally because carriers are low to go into the same effort really there's a lot more smartphone variation there's a lot of market reasons for this but it's a good thing and really modifications only have to touch the OS. If it works on one Windows mobile phone it's going to work on almost all of them unless of course you're relying on a GPS chip that simply isn't there. So first of all the Blackberry. All of my Blackberry slides are here. Blackberries are very much like feature phones they tried not to rewrite most of this this includes with respect to tethering the same tips and tricks apply verbatim they generally come with fairly few locks it's a recurring smartphone tethering. Symbion generally behaves like a feature phone including with respect to tethering generally comes with very few locks and yes it's a seriously recurring theme in smartphones. Symbion devices also tend to not get sold here and carriers outside of the United States take very different policies so again Symbion phones not a real issue to tether with Windows mobile devices. Your best weapon here is actually the official Windows mobile SDK to restore features your carrier left out this very commonly includes the Bluetooth dial-up networking profile. If you simply take the bits from the SDK and put them on your phone you have tethering. You can also use this to add features to your phone for example there is a SDK example which is a pseudo GPS driver which will take a variety of different pseudo GPS sources and turn them into a regular NMEA compatible GPS that can be consumed by Tom Tom or your particular GPS navigation solution of choice or any of a number of different applications really. And finally the iPhone which looks like a smartphone locks like a feature phone and frankly it's too early to tell how open it will get and also I'm kind of a fan. The most important thing about the iPhone which I hope everyone has heard about is the jailbreak I'm actually currently re-jailbreaking my phone during this talk is why it's plugged in. Again run your own community apps. There's no oversight or restrictions and there's no documentation whatsoever working on that. Carrier unlock on the iPhone has been established well for the 2G iPhone still being researched for the 3G iPhone some of it sounds very promising but nothing is out there yet. And there's of course one smartphone platform I guess I'm overlooking there's actually a few. Android and I wanted to have some stuff about Android but really there's no hardware there's nothing interesting for me to talk about yet. It's a very interesting concept as far as taking back your own cell phone because you're going to have full access to a variety of things that traditionally neither the manufacturer nor the carrier ever wanted you to touch. And in some ways that's a good thing in some ways that's a terrible thing. Google's rollout of the SDK has also been very interesting if you've been following that and I really look forward to seeing what impact if any it's going to make. And resources here. Again HowardForums.com I'm sorry I'm sorry anyway Howard Forums XDA developers, the iPhone dev team and the official SDK examples are all some fantastic places to find out all the stuff that I've been talking about today get the actual details and I'd like to say thanks to a few people all of whom are actually in the audience I'd like to thank Abent who's sitting there and hiding with long hair Shardy and Dave G who gave me the initial idea to give this talk I'd like to thank Totankov who's presenting on Sunday and you should all go and you all should have gone to Ferdinand's talk which was two hours ago and I missed it because I was putting together this slide deck and my friend Max Falco who doesn't know it but he is going to be presenting next year whether he likes it or not and yeah this is the first time anyone told him now you might think wow he ran through all shit tennis slides really quickly and the answer is yes I did and the answer is the most interesting part of this is the Q&A because you all have specific phones or you have Motorola questions or Nokia questions many of which I hope to be able to answer right now for you all this is great general information but really everyone wants to know what they can do with their phone same thing I did at Torcon people liked it and I'd like to now open the floor for questions you sir so the question here is is there any way to develop your own brew applications for your own brew enabled cell phone for free and the answer is unfortunately not anymore there used to be a way to get around it with brew v1 but we're now on to v3 with most phones it is possible to get a copy of the SDK and it is possible to start writing your own applications but unfortunately doing so requires a few hundred dollars worth of certificates there is no free or open way to develop for brew and that's one of the many reasons why I try and remove it on every device I own question here is how long do we expect it to be until there will be true flash as in a flash virtual machine and player on the iPhone and what's currently stopping the answer to what's currently stopping it really is Apple more than anything else I understand from Adobe they've put together prototypes and there's a wide variety of devices that run similar operating systems like the Nokia 770, 810 all have flash players and really Apple wants to ensure a certain experience of the iPhone and frankly most flash apps would run very poorly on it leading to crashes and hangs other things that Apple is very zealously against and I think that more than anything else is why we don't see it right now Adobe certainly would love to have it on every iPhone I mean no question speaking of questions you always hear about people who get caught using tethering without a tethering plan what sort of triggers will set that off every carrier has a built in limit to their feature phones unlimited plan in general this is about 5 gigabytes I know that is that for Verizon some international carriers go down to one or two Rogers for example is 1 gigabyte and really what will get you caught is going over that limit almost nothing else will BitTorrent will also get you caught for going over that limit because you're going to have upload and download that looks much more symmetric than it should be and that's a number of encrypted services again most of which don't run on phones can be a red flag but for the most part you're a needle in a haystack if you're not doing anything that goes over that 5 gig limit question now back there for the longest time you had to use Motorola PST to put the phone into suspend mode is there a way to do that with freeware tools now it is possible to suspend a Motorola phone by holding down star and hash as you boot it up that will put it into a bootloader mode P2K mode P2K mode is what lets you P2K mode is on a Motorola phone and has been for the longest time will let you access almost everything on the phone reflash settings, reflash the firmware and Motorola actually has released a freeware application called Motorola Software Updater which when used properly or just used period will put the phone in P2K mode at which point you can turn on and use apps like P2K Commander to browse the full phone file system or P2K Flex to reflash the settings in the firmware is it possible to do that from Linux and the answer is not really I got it working with wine once but you can do it through a VMware player virtual machine with the proper connections easy I'm sorry I can't quite hear you back there gotcha apparently Motorola has released a program from hearing you correctly called Moto4 Linux available in Gen2 already what can do P2K actions on Linux it sounds like excellent can you come up here Linux on the smartphone you mean like the limo collective and so forth again without having hardware in my hands I've been able to break and play with and I've got a community I don't have a lot of information on that I'd expect it to work the same way that Android is going to work in so far as with this much deep access into the kernel things that previously you weren't able to touch or couldn't touch with that expensive tools we're going to see some very interesting applications in very, very open phones what about actual hacks to put Linux on phones I'm not aware of any that are really usable my criteria is if I can't use it as a phone afterwards I can't really install Linux on it there's apparently a trio distribution if it works as a phone I haven't heard of it personally but that'd be great question before you do anything to your phone how do you back up your phone and the answer is I mean before you start writing things back to the phone make a backup tools like BitPim are entirely safe to use if your phone's on the supported list if it's on the supported list it's actually been physically tested and tested fairly rigorously and really for read operations you're not going to have any trouble it's when you start re-flashing your phone that you're going to kill a memory controller and have to have a very awkward conversation with Verizon technical support question couldn't hear you at all I'm sorry what is the most interesting thing I've seen done on a Windows mobile smartphone quantify interesting I've seen a browser on a Windows mobile smartphone that doesn't suck that was the most interesting thing I've seen on a Windows mobile smartphone which browser was that can't tell ya sorry I suck I know you've heard of it possibly this is a great question the question is all these modifications can they be done without noting the MSL master sub-stereo lock of your phone and the answer is a great deal of them can be most of the PST stuff couldn't care less about your MSL and in the event that you do have an MSL in your way for most phones have it set to 0000 or if you've heard space balls one two three four five six that covers 90% actually it's pretty funny Sprint has a policy of changing the MSL and if you call Sprint and form them you're a developer not only will they tend to give you developer access to your phone which includes being able to add your own root certificates I could get into J2M development if you'd like at the hardware village they'll give you the MSL if you ask the process for Sprint has now been improved to the point where it's entirely automated done all through the web and requires no interaction with the human being just requires a little bit of swapping this may be a good one to talk to about Sprint I can see questions I know that the removal of IPv6 from the iPhone is a very very there's a lot of people ticked off about that there's a lot of people ticked off about as far back as 112 they removed some hooks meaning like we'd be able to put our own kernel extensions on the iPhone I know there's a lot of people, myself included who are working furiously on that mostly people more qualified than me to modify a kernel on a system I've never ever used before but still I know people are working on that actively Shardi Shardi would like to know how to make free phone calls and because I knew he would ask this question I'd like everyone who has a spare moment to go to tinyurl.com slash h-a-r-d-y that's right tinyurl.com question enterprise policies in the blackberry and how that can help or hurt you so enterprise policies in the blackberry I have not seen a lot of them actually put in place I've only heard of a few companies that have gone through with them and there's not again there's not a lot of community information out there about it I have heard of one that prevents tethering with a location install you can circumvent with the proper pst especially if you're on cdma it wouldn't be a huge deal but beyond that I don't know what to tell you just again I'm limited to what I can get to the community if I can't get the hardware myself questions oh yeah totally sorry I've been neglecting that side I'm sorry I can't hear over you the speaker back behind me forgetting gps so you'd like to be able to use the gps in your Verizon blackberry means own expensive gps navigation system I know of a couple projects that have started on that they had some progress and then stopped I'm sorry problem with the community the open moco project again I kind of file into the open smart phones it's really cool I got to see one of the devices and it's an open device you can do whatever you want with it it's an open device it's expensive and has some hardware limitations and whether or not your carrier will ever let you activate it is another question but again until they start getting them into people's hands it's really cool but beyond that don't want to tell you way in the back I'm going to need a bucket brigade of people yelling unfortunately so editing the registry on your windows mobile device in order to enable tethering modern windows mobile devices do it through a different mechanism there's a separate app that you have to run that's like windows mobile 5 and 6 to be specific I'm sorry yes as far as I know there's no registry hack to enable it you just need to have the executable on your phone and it was removed in windows mobile 5 AKU 3 and then redistributed as part of the SDK which is the best place to find and XTA developers will have that available let's tell you where to find it I'll put it that way question sending X60 devices without sending it into Nokia for updates the firmware I had heard Nokia's got they've updated their software update to allow that on the older ones I can't help you with unfortunately you're stuck sending it in Nokia kind of phased out support for the early devices fairly rapidly and I'm really curious to see what happens now that Symbian's open source given the number of people that can update the devices had never heard of the Nokia software and you know we're going to find exploits in it we're good at that as a community question those from windows mobile right so on the original palm trios for the most part palm say what yeah palm OS based palm trios for the most part I wasn't aware they locked down too much on those I know that tethering again is just an installable app and that's all there is to it if you go to Howard forums they're going to have a forum for your specific model and it will have how to do that best recommendation I can give you question what company do I work for Microsoft I was worried about a lynch mob but so S60 question S60 is the one platform I know worse than anything else worse than palm oh okay do you want to actually say that when Symbian goes open source that's going to not going to affect updates from Nokia but Nokia have a policy of ceasing updates after a year or two years and open source Symbian isn't going to give you the drivers and the various add-ons that Nokia add for particular older devices you're not going to make new runs right in the front how likely is it is your company's enterprise service going to notice if you unlock everything based on a number of other enterprise systems that's supposed to lock this down the chances are between zero and not I've never heard of anyone ever except the fact of walking up to the head of IT and saying hey look my pin locks disabled actually getting caught for that very very popular unlock right in the front again because firewalls actually running on the handsets themselves I'm actually not aware of any really serious enterprise class firewall offerings for any phone on a handset do you mean VPN clients or do you mean firewalls does he got your yeah I mean I would love to have a firewall on my phone personally but I know for a fact on the iPhone they've disabled IPFW and no one's cracked kernel extensions quite yet big project though question any chance of A2DP advanced audio distribution profile getting anywhere on the iPhone I really hope so I have some nice bluetooth headphones I'd like to use them the reason why not is because as far as I'm aware there's nothing on the iPhone that's particularly good at decoding A2DP or excuse me decoding or encoding SBC subband codec and as a result you're going to see dramatically shortened battery life he was working on a project for the Nokia internet tablet devices they run Linux to get that working and until we were able to get it onto a DSP chip which the iPhone simply doesn't have the battery trade-off and CPU trade-off was just unacceptable you couldn't even really encode MP3s and excuse me decode music in real time or video and listen to it over a bluetooth link and I think you're going to have to stick with a dongle for the time being question encrypt the contents of the iPhone as in the partitions on it and so forth or the data stored in the applications what level of encryption so there are some if you jailbreak your iPhone you can install new PG and encrypt and decrypt whatever you'd like I'm not aware of any iPhone applications that support transparent encryption of the kind it sounds I mean you would have to manually encrypt and decrypt when you used and stopped using the application I'd be very very surprised if that remains the case as iPhone development matures and of course there's remote wipe and it's 140 if you set the IMEI if you clone a phone basically if you clone all of the settings on a phone what happens and the answer is it depends on the network and it's a really terrible idea because you're going to get cell registration you're going to you might get you won't get calls on both phones one phone will be able to answer it is what's going to happen and what will happen when the carrier systems start detecting duplicates might get very weird I don't know of anyone who's tried to do that except for nefarious purposes so I'm curious too but they don't really publish much so what? security through obscurity exactly question I actually know a tool that can pull the A key off a variety of CDMA phones not that I'd mention it by name but yes cloning doesn't really work and even if you were able to perfectly clone a phone the system wouldn't accept it it would pick you up fairly quickly and again there are some mobile firewalls out there and what I'm hearing is that they're not terribly useful yet yeah you just better hope that your phone is entirely proof against any attack with any sort of firewall of any kind trust your vendor is there a way to get Nokia feature phones to stop asking you to allow certain features to be used like for example being able to access the internet or accessing location information and I can't speak to all Nokia feature phones but almost every J2ME virtual machine has separate settings for signed and unsigned applications generally signed applications you're allowed to set certain features as always allow unsigned you're not what's funny is that with full file system access you can generally find the file that says these rules and modify it so that unsigned is allowed to set to always allow would be my recommendation there but there's nothing you can do easily on the phone immediately and getting a signature in there can be more or less difficult depending on your carrier and particular phone question can't hear you at all have I heard of anyone getting Bluetooth tethering working on Samsung's Instinct I have not heard of that yet I would say Howard forums probably already has a detailed how to with screenshots it's kind of what they do Instinct again too new for me to really cover it here I only really cover the iPhone because I own one and can break it whenever I feel like it which is frequently actually question I'm sorry like what mode monitor mode on a Wi-Fi enabled smartphone I would really expect you got to wait for a Linux or Android based device I've never heard of anyone getting monitor mode to work stably or successfully with a Windows mobile based phone haven't heard of it on the iPhone and I don't know enough about sim me to tell you I would expect no generally because getting that feed adding that support to the driver takes effort and if there's no need for it can't get to the radio on sim me and phones is what I'm hearing so no pretty definitively not yet I hope so soon is there a reason why carriers like to lock down the installation of new certificate authorities on their mobile phones oh god yes and the answer is money because if they're the only ones who can certify applications for your phone they are the only ones who can provide that certificate that actually lets you get through and use apps without looking yes I'd like to allow it to access the internet or yes use my location information it is purely a profit driver generally the installation certificate authorities once you have full file system access tends to not be too difficult in my experience your mileage may vary I haven't done a large number of phones mostly Motorola phones I find that it's not the manufacturer especially not sim me and doing this it is the carriers and again they're the ones who are realizing profit flow from this in the case of Apple it's much more complicated but we can kind of follow that from the app store there's a lot of motivations for Apple to never release any kind of signing key thank you jailbreak oh yeah SSH clients on feature phones mid P SSH very mature very stable use it all the time got a lot of great features I mean again you're still using SSH on a phone it's never going to be a very pleasant experience but I was able to set up macros and use pine perfectly mid P SSH good stuff runs wherever J2ME is available runs on blackberries runs on Windows mobile runs on you have a question in the back I'm sorry I can't hear you is there any significance of the iPhone test mode code being one character off of Nokia's I'm sorry I can't I still can't hear you but if I got the initial question right yes kind of alright I don't have a tin foil hat so I can't tell you I think it's pretty funny though but I mean motorolas is pound zero set up star I wouldn't be surprised to see that duplicated question or actually question the back you got one using the phone to send and receive faxes yes you can do it um yeah if you are sending a receiving faxes you're using well again I'm speaking to CDMA here I don't know enough about GSM for that one that one I can't feel for you on Verizon excuse me on CDMA networks that does go over basically analog basically over 2G and works as an analog you basically use as an analog fax modem with the right software question oh last one any thoughts on NFC I'm not recognizing the acronym off the top of my head oh near field communications I really expect it to not take off I would I think there's a lot of really interesting applications for it and a lot of cool stuff but as far as the U.S. cell market and the way we tend to lag behind I don't know what to tell you out of the country yes unfortunately I'm gonna have to take any remaining questions the Q&A is across the hall in 106 oh and one last plug the Q&A will be across the hall in 106 and if you are looking for the IDA pro book and like me missed the initial rush and didn't get one the EFF will be auctioning one in their room tomorrow at 2 p.m