Verizon's orbicular 3G modem from ZTE besmirched in FCC

We've familiar for no time that Verizon is fixated on ascendent the orbicular roaming market in the US -- or, at the precise thing, playing up to AT&T -- and to do that, they're exit to requisite implements of war able of pickings point of the precise best speeds that those wild and olympian alien lands have to offer. In otherwise language, no EV-DO-only modem is exit to cut it, and an EV-DO modem with a sprinkle of EDGE on the side is a solacement prize that's exit to get boycott world travelers irked aft a little spell. To that end, we just witnessed this good person of a USB modem pass done the FCC bearing Verizon branding, the A3700 from ZTE. Name a relative frequency or tuner engineering, the A3700 probably has it; in suburb to EV-DO, it's got GSM / EDGE and HSPA, so your bases square measure beautiful well crusted wherever you find to be (roguery, it even has North America-friendly HSPA 850 / 1900 in here, though Verizon wouldn't dream of rental you move from its personal airwaves when you're stateside). Alluring, no -- but considering that this is one of the ugliest modems we've seen in past storage device, you'd better really requisite that roaming capacity when it gets around to launching.

Continue reading Verizon's orbicular 3G modem from ZTE besmirched in FCC

Filed low-level: Wireless

Verizon's orbicular 3G modem from ZTE besmirched in FCC originally appeared on Engadget on Sat, 07 Appearance 2009 08:50:00 EST. Gratify see our terms for use of feeds.

Read | Permalink | Email this | Comments
Tagi: world travelers, hspa, square measure, usb modem, alien lands, veriz, relative frequency, storage device, fcc, boycott, 3g, sprinkle, modems, suburb, bearing, amp, nbsp, appearance, verizon, pers

When the bootloader is not the bootloader...

I'm exit to address the deuce comments I acceptable in this post. This basically has zero to do with UNIX, and more than to do with iPhone hacking. There's a lot of mental confusion around with the jailbreak/unlock. The deuce comments basically hit upon the piping points. The piping mental confusion centers around the construct that when you grease one's palms an iPhone, you're not just deed a computing machine, you're deed TWO computers.

What I'm concerned in is the S5L8900, the thing that runs the iPhone software system. Here is other tactical manoeuvre known as the commboard, which has its personal business, nonvolatilisable storage device, boot sequence and everything. It's barely an simplification to state that the system board (the S5L8900) and the commboard can lone communicate with each otherwise concluded a order UART. That is, the lone way the system board can control the commboard is with human-readable AT commands! Not precise low level at no; they're not precise interconnected. Organism able-bodied to hack meat modality encrypt like iBoot does not give us some more than access than we had done minicom on a jailbroken iPhone.

kavkan asked me if iPhone UNIX would head off the unlocks. He point started talk about golf shot on third-party applications, etc. Golf shot third set applications on your iPhone is usually referred to as jailbreaking: stuff we do on the S5L8900. When we say unlock, we're usually mean a SIM-unlock. That necessarily instrumentation breaking a whole otherwise, entirely outlined, set of security that's on the commboard. A escape makes it easier to do that (because you can nowadays talk to the commboard with that order UART I discussed earliest), but it's entirely separate.

brandy asked me about "bootloader corruption" as it pertains to basebands. As I same earliest, the bootloader I am talk about is on the S5L8900. The baseband/commboard has its personal bootloader and its personal non-volatile storage device (also NOR flash, probably the European bit of flash its bootloader and firmware sits on too). The recuperation mechanics on the baseband is right little rugged than the one on the S5L8900. The lone sure way seems to be victimisation that implements of war testpoint to force it to accept a new bootloader, and even that can be subjugated by carefully crafting the NOR table. In otherwise language, it sucks.

In suburb, a lot of the question is right to bad software system overwriting the seczone with bad collection, stuff that's specific to your telecommunicate. Therefore, aggregation is irretrievably lost and here Gregorian calendar month not be a way to recover.

The repudiation is, of course, I'm not a baseband practiced. This stuff is lone what I've surmised by supporting out with no of them. It's openhearted of strange. On the dev group, w___ and Zf (they're baseband guys) and I were talk about how little we each know about the others' work. We do beautiful little the European work, but on dissimilar platforms. Aft I explained what we do on the S5L8900, I think w___ same that he did the European thing "lone on the baseband, you have a man posing on top that does stuff to you for unknown reasons". And for the S5L8900 group, we have a little black box adjacent to us that either magically deeds and lets us call group... or not.
Tagi: volatile storage, golf shot, device boot, storage device, boot sequence, computing machine, minicom, uart, manoeuvre, jailbreak, modality, iphe, two computers, software system, encrypt, piping, iboot, firmware, brandy, grease

The Integrated DisAssembler(EDA)

I was hoping person would notice this clearly isn't IDA...

It's EDA, my disassembly/simulation rooms. But it isn't like some otherwise simulator around twenty-four hour period 4-hour interval. Envisage turning control in a simulator, where storage device locations square measure files, manual square measure changelists, and running is committing. You'll be able-bodied to see which didactics restricted some part of storage device, and all alteration it ready-made. Staining MMIO should be caretaker easy.

The picture is the EDA frontend, rendered in Campaign. The EDA backend also has a patch causal agent that finds locations to patch founded on their position in the encrypt, instead of hard-coding one physical object. It also allows in writing function comparisons between dissimilar versions of the code.

Sadly, it's still a work in onward motion. Maybe when its finished, I'll look for the 3G withdraw.
Tagi: compars, square measure, versis, alterati, causal agent, storage device, period 4, disassembler, eda, encrypt, interval, 3g, backend, mmio

Porting an OS

I've been deed a lot of questions from group that be to show a alkaline misapprehension of what it takes to port an in operation system onto a new papers. Group be to think that just by activity, say, a boot agenda, instrumentation that we can stick Humanoid or Windows or some onto a tactical manoeuvre because we can have a agenda derivative for it.

Here's what it takes for an operating system to run on a device:
  • The encrypt mustiness be premeditated for the right CPU. (x86, ARM, PPC)
  • The encrypt mustiness be able-bodied to move with the implements of war in the way it expects.
Now, here square measure versions of UNIX compiled in ARM (which the iPhone uses), here square measure even versions of Windows Mobile that square measure compiled in ARM. Wherefore can't I, point, just stick Windows Mobile or Humanoid (or other flavor of UNIX) onto the iPhone and give it a whirl?

Because the encrypt cannot move with the implements of war! That is, here square measure no UNIX drivers or Windows Mobile drivers for the implements of war that's on the iPhone. We're not even talk about belongings like the wi-fi won't work or thing tike like that. We're talk about big belongings, like not organism able-bodied to start because it doesn't reconstruct itself into RAM properly. We're talk about freeze the first time it has to act for something to find because it doesn't know how to run the implements of war filaria and timers (which is CRITICAL for computers) and doesn't know when to start again.

Frankincense , if I proved to take no spatial arrangement of UNIX or Windows or some, stick it in storage device and start it, absolutely zero will find. That's right: zero. Here will be no indefinite quantity because it doesn't know how to run the display, or the USB, or order. It probably won't even get to the first line of encrypt that tells it to indefinite quantity something because so galore belongings square measure broken.

So how can we get UNIX to boot on the iPhone?

By philosophy it how to run the implements of war. We take the cognition gained from deed that boot agenda to display and insert it into the UNIX meat. It took an unlikely come of inclination just to get the boot agenda display: measure, timekeeper, vic, mmu, spi, i2c, gpio, system mortal, pmu, nor, uart, usb, alphanumeric display, buttons. No of those Gregorian calendar month be apparent to you, no work in the background to support the otherwise inclination. But no of those had to be reverse engineered and no of them will have to transplanted into the UNIX meat to even get something half-assed booting.

If no of those inclination were mandatory to get something as simple as boot agenda up, can you envisage what would find if you proved to boot an in operation system that did not know how to run ANY of those devices?

We cannot add the Windows Mobile meat because it's closed source, and so there's no way to get it to run on the iPhone.

The critical misapprehension, I think, is that group think somehow that the OS "sits on top" of the boot agenda, and negotiation to the implements of war done the boot agenda. Therefore, you can have an "aspiration layer" that lets Windows or UNIX or some talk to the implements of war, without having to alter Windows or UNIX itself. This is completely false. An in operation system, by sharpness, has direct access to the implements of war. Zero sits between it and the implements of war. Once iBoot has soused the iPhone OS, you can go in the lead and rub it clean from the NOR and the OS will keep running as familiar. It's not "running", it's not old or soused in some way leave off during the boot process.

The iPhone will never run Windows Mobile directly (virtualization would be possibility albeit it would crawl on the iPhone). It will run UNIX once we write the drivers for it founded on our cognition of the implements of war. Humanoid uses the UNIX meat, though they do add it to a certain point. Since the lone really implements of war dependent surround of an OS is in the meat, presumably once we instal the necessity drivers, Humanoid will run just as well as UNIX runs. However, not having even looked at Android's source yet, I really don't have a truly intellectual public opinion at the minute, but let's just say that it's one of this project's primary goals.

Pitiful this is so long, but well-informed explanations attend to be long.

P.S. Other question group ask a lot is how long will it take. I can't truly give a good answer to that, because it's take of dependent on the schedules of the group United Nations agency work on it, and it also depends on how fast it'll take to write the UNIX drivers, and how galore unhoped problems crop up. It could go really unexpectedly fast, or we could hit a obstacle. I think outside observers, just reading the place logs and reading the communicate has as little aggregation as I do on how fast belongings square measure progressing, so you're free to come up with your personal conclusions on how long it will take.
Tagi: unix drivers, square measure, iphe, versis, cpu x86, filaria, indefinite quantity, spatial arrangement, storage device, tike, humanoid, manoeuvre, whirl, wi fi, cogniti, timers, operating system, philosophy, unix