Database Info

Can a GSM Service Provider have access to my personal data?

Recently a customer asked me about remote access to his personal data. He was afraid if could be a backdoor inside a PocketPc that would allow the GSM Service Provider to have remote access to his personal data.
I would like information from you about this possibility.
The remote information i am asking for isn't the information inside the SIM card, but the information inside the pocketPc Memory, like the flash memory contents , programs inside and running, and like that....
Thank you.

i'd say no
it would require
that ms made a backdoor in their device
and told every cellphone operator about how to use it
and kept it a secret
and no operator who felt they dident need it would spill the beans
and there is also the fact that the pda is off and get be accesss'd when it's suspeced
not to mention the fact all roaming over other networks would give the spying away unless EVERYBODY were in on it
it would be easier for the cellphone company to pay off the consumers dentist to drill in some mic's and maybe a cam
or for them to put a mind altering substance in the water
but to be sure tell his to wear one of these and maybe one for his pda
http://zapatopi.net/afdb/

LOL - too bad there is a response I was going to terrify this poor bloke with a lot of FUD :twisted:
The only way for a provider to peek into what you have is only if you have a Sidekick device where the data is stored on the provider's servers

BlackBerry Connect OTA enterprise activation backup, passwords etc.

QUESTION 1
I've been flashing and reflashing ROMs for a couple of weeks now and am very impressed with Dutty's latest endeavor. In anticipation of the v4 release, I'm hoping someone in the community can tell me if it is possible to backup an over-the-air (OTA) enterprise activation of BB Connect. Currently I'm calling our technical support guys who, sooner than later I'm sure, will start asking why I have to have to get a new OTA activation password (which they change as soon as you use it) every 5-7 days.
So, in short: moving from one ROM to the next and want to back up OTA BBConnect enterprise activation. Possible? If so, how?
QUESTION 2
Any BES administrators out there willing to tell me if my Tilt/Kaiser shows up on the BES (v4) differently than a BlackBerry (like the POS 7280 I'm given by the company). If so, is there a way to "spoof" that since my company will not allow non-blackberry devices.
QUESTION 3
When using the stock AT&T ROM, my Tilt respects the (highly restrictive, Bluetooth disabling, password-enforcing, ridiculous) IT Policy pushed by the BES administrator. When I flashed to Dutty's DualTouch ROM v3 Final, this no longer happened. Now, it just reads "default" for the IT Policy. Is this a fluke or some wonderful reg entry that we need to identify and protect like diamonds?
Thanks, all.
Cheers,
Your Local Village Idiot

VillageIdiot said:
QUESTION 2
Any BES administrators out there willing to tell me if my Tilt/Kaiser shows up on the BES (v4) differently than a BlackBerry (like the POS 7280 I'm given by the company). If so, is there a way to "spoof" that since my company will not allow non-blackberry devices.
Click to expand...
Click to collapse
We run BES here and indeed non-blackberry devices are reported as the phone model when you look up the phones information.
This could probably easily be spoofed to whatever you like. If you hacked the blackberry connect application, or intercepted and modified the data passed over to BES. You could make it say anything you want at that point.
I'd get "in" with your IT guys and that way they can pull a favor for you now and then with the BES server. Other then that, have the company pay for a blackberry phone and carry two phones around, or refuse to carry a company phone and don't use your personal phone for company resources. If they're blocking your productivity by a poorly guided company policy, make it cost them money. Don't inconvenience yourself to keep your productivity as an employee on par.
Really though, it's not feasible to secretly go behind your employers back with your tilt. I think it's ridiculous a company wouldn't let you use your Tilt -- though probably because the corporation is uneducated or ignorant to the fact that the Tilt can be locked down just as well as a blackberry phone. Too bad the employer has a bunch of pointy haired management types running around who don't know what they're doing and out of ignorance banned non-BB devices.

Jon,
Thank you for your prompt reply and clarification on what shows up at the BES. Hacking the BB connect app is beyond my current knowledge set, but I may look into it if I'm unable to find a simpler solution.
Unfortunately, my company has several thousand employees so my productivity concerns are far outweighed by their misinformed security concerns. I've pitched the benefits of BB connect, WM5/6 devices and direct-push Exchange sync, but my pitch falls on deaf ears. They have provided me a BB 7280 and some get newer 8XXX devices, but beyond that we're expected to be happy with what we have. I'm even buying a non-camera Tilt to replace my two week old Tilt because they won't allow personal camera phones (all BB connect issues aside). You'd think I work for MI-6...
Cheers,
T.V.I.

VillageIdiot said:
QUESTION 1
I've been flashing and reflashing ROMs for a couple of weeks now and am very impressed with Dutty's latest endeavor. In anticipation of the v4 release, I'm hoping someone in the community can tell me if it is possible to backup an over-the-air (OTA) enterprise activation of BB Connect. Currently I'm calling our technical support guys who, sooner than later I'm sure, will start asking why I have to have to get a new OTA activation password (which they change as soon as you use it) every 5-7 days.
im soooo it this situation, any ideas?
Click to expand...
Click to collapse

Here's how you do it
you could use the desktop software instead of OTA. this will activate the phone without requiring you to get a new activation code.
Here's how I back up and restore. This has worked often, and not worked a few times.
Try to follow this exactly for best results.
get task manager v2.7 from fdcsoft
tap the blackberry icon on the taskbar and suspend the service under status
start taskmanager, and go to services. stop the two blackberry services, log and security.
open file explorer, and copy the directory RIM in /application data to your storage card
flash your phone with whatever-
copy the RIM folder back to /application data from your storage card
load blackberry connect (this should be the same version you had, otherwise you may have issues)
tap the blackberry icon in settings-system
instead of installing, you should see a window that says "repairing settings"
your old password should be restored, and the phone will lock and ask you to unlock. use your password you had before the backup.
all of your folders and mail should be back.
This works about 90% of the time.
some issues I've had-
multiple blackberry folders- one with emails, one with nothing.
folders missing, a bunch of email in drafts folder.
older messages no longer sync with desktop
good luck!

identify if IMSI catchers were used with field test?

Hello all
I've been reading this forum for some months now and i like the windows'es and informations i've found here on my Hermes device
But now i have some questions on using the often integrated tool field test.
I've found out that with the IMSI-catcher (german wikipedia as one of the sources), that are more and more often used semi-legal by the police(here in europe there are a lot of 'GA-90' devices sold to the police and other institutions), it is possible to listen to phone calls(man in the middle attack), by just 'emulating' the strongest phone-cell in the area, to which the device connects instead of connecting to the provider's cell.
I also read that it would be possible to find out if there was an imsi-catcher device active in the area near you or not. The only thing needed is a special monitor software (field test?) that observes the MNC(Mobile Network Codes) behavior(appearently you need 2 handy's from the same provider with the monitoring software running).
But they didn't explain exactly on which behavior you should pay attention.
Since I could use 2 windows mobile devices to test this out, I am searching for more detailled information on this subject, and the first place that came in my mind was xda-developers
I allready did search this forum for the subject imsi catcher, and the only thing I've found is this.
google result
so one person who tries to change hies imei number, and another one who doesn't seem to know exactly what an imsi catcher can do.
Is here anyone who knows more?
I know that where I live, there are pple who make abuse with IMSI-catchers(catching calls without the permission from a judge or similar, or even one time someone listening to his girlfriends phone calls to see if she's cheating(and she did and that was the reason he left her))And yes this one was a young policeman who told that to his friends and even was proud of it.
I also dislike the fact that the handy, instead of the encrypted one with the provider's cell, has an non encrypted connection to the imsi catcher(if not there would be no possibility for a listening man in the middle attack).
I also read about the cellphones from http://www.cryptophone.de/
Appearently they do allways have encrypted conversations even through an Imsi-catcher. But if that would be true, the other side will need the same handy to decrypt it again. Because it has to encrypt, the allready encrypted data traffic with the provider's cell, if not it can't allow any protection against IMSI -Catcher devices. I also ask myself if, depending on where u want to use it, the 2nd encryption could produce a to huge phone traffic that could result p.ex. in a robot voice...
Anyone who could light me up?
Or is there any software able of reencrypting the encrypted transfer on windows mobile devices?technically it should be possible(2nd phone dialer installed so you choose the normal one for normal calls and 2nd one for calls with pple who also have this software installed on their phones)perhaps not with an 256 bit encryption but perhaps with a 128 or 64 bit encryption...
BTW, if there would be anyone able to programm such a hot piece of software for windows mobile devices I wouldn't have any problem to donate him with paypal, and i suppose other pple would do the sameAnd no I don't wanna replace that by Voip or skype via HTC...
Thanks in advance
Patrick

So no one who knows more about this?
I would be very happy if i could at least test if they're really used that often as they say they are(where i live).
And since i could try it in different major 'cities' over here, i suppose catching a imsi catcher soon or later
I'm quite curios if all the pple, telling that there is a lot of abuse with these machines, are right, or if that's all nonsens...

It would be nice if a warning icon could be integrated into Windows Mobile or the dialer to indicate that a call is not being encrypted. Read the Wikipedia entry for IMSI-catcher for more info. I'm guessing CDMA is largely unaffected since the hole seems to rely on the UMTS spec's backward-compatibility with GSM.
I'd also like to note that Skype is the way to go for true endpoint to endpoint call encryption. You know, if you're a gangster or something and need to brush off the popos. It would be interesting to investigate whether the WM6 integrated VOIP stack requires authentication/encryption.

[Q] WPA-Enterprise Configuration

Hi
Does anyone know how to import the wireless authentication certificate from Win7 (for a WPA-Enterprise Wifi Nework - most corporate wifi networks), and install it on Android ?
Use case: I have a laptop that connects to my work wifi using a stored certificate and would like my phone to connect to the corporate wifi as well.
Also, the company does not 'officially' support Android phones. Only BB and iPhone allowed.

imarvind said:
Hi
Does anyone know how to import the wireless authentication certificate from Win7 (for a WPA-Enterprise Wifi Nework - most corporate wifi networks), and install it on Android ?
Use case: I have a laptop that connects to my work wifi using a stored certificate and would like my phone to connect to the corporate wifi as well.
Also, the company does not 'officially' support Android phones. Only BB and iPhone allowed.
Click to expand...
Click to collapse
Your IT let you connect BB and Iphones on the Corporate Network?
Look, as an IT administrator I'm going to say this... if your IT department wanted you to connect your Android device to the corporate network, they would provision it for you. If they are not provisioning it for you, you're probably breaking company policy. Even if it were possible, there's no way I'd help you do this.

rootSU said:
Your IT let you connect BB and Iphones on the Corporate Network?
Look, as an IT administrator I'm going to say this... if your IT department wanted you to connect your Android device to the corporate network, they would provision it for you. If they are not provisioning it for you, you're probably breaking company policy. Even if it were possible, there's no way I'd help you do this.
Click to expand...
Click to collapse
I see. Well that's like saying - 'If Samsung wanted you to have KitKat on their older models, they'd provision it for you. I will not help you install kangs'.
Thanks anyway. I'll look elsewhere

imarvind said:
I see. Well that's like saying - 'If Samsung wanted you to have KitKat on their older models, they'd provision it for you. I will not help you install kangs'.
Click to expand...
Click to collapse
Not really, no. Installing a Kang is not affecting someone's corporate network, putting it at risk and putting your job at risk and potentially causing massive problems for your IT department.
It's more akin to saying "My company doesn't want me to have a corporate credit card. They've given me the numbers for online purchases but I want to use it in a physical shop. Can you help me print the details to a blank card"
anyway, I said "even if it was possible", meaning in other words "it's not possible"

rootSU said:
Not really, no. Installing a Kang is not affecting someone's corporate network, putting it at risk and putting your job at risk and potentially causing massive problems for your IT department.
It's more akin to saying "My company doesn't want me to have a corporate credit card. They've given me the numbers for online purchases but I want to use it in a physical shop. Can you help me print the details to a blank card"
anyway, I said "even if it was possible", meaning in other words "it's not possible"
Click to expand...
Click to collapse
I full quote.
Anyway, on serious networks the are always port-security enabled and several checks at access and distributions layers. Say that, @imarvind, even if you can import your certificate, this is does not mean that you can reach connectivity

2014 Definitive Verizon to Page Plus DIY Free

After reading many posts across various forums and buried in the comments of threads spanning many years--I've summed up moving from Verizon to Page Plus in one document. This is the 2014 definitive step-by-step guide to manually programming the 4G LTE Verizon HTC Thunderbolt Smartphone for use with Page Plus Cellular (PPC). This guide might also serve for Kitty Wireless and other PPC resellers. Topics include: (1) Porting your phone number from VZW to PPC (2) Checklist of everything you'll need to succeed (3) Device driver and software installation (4) Configuration & DIY Free Programming (5) Activation (6) PPC Account & Plan Finalization
I hope this benefits anyone still using this excellent smartphone. I gave up my unlimited data on VZW and moved to PPC after realizing I mostly use WiFi these days and was not taking full advantage of unlimited data on a 4G LTE network. Saving $696 per year is a great incentive. I give credit and reference all of the various posts that were summed up. Rather than attempt to reformat the document as a forum post I've made it available on Google Drive. I hope that's fine. I've attached it to this post as a DOCX. Hopefully one or both of these methods works.
http docs.google.com document/d/17Tmz2R-DEHRQqQZmbEPALR7UIYNYyZO8aqBi2_AOFn0/edit?usp=sharing
Peace ~

corezion said:
After reading many posts across various forums and buried in the comments of threads spanning many years--I've summed up moving from Verizon to Page Plus in one document. This is the 2014 definitive step-by-step guide to manually programming the 4G LTE Verizon HTC Thunderbolt Smartphone for use with Page Plus Cellular (PPC). This guide might also serve for Kitty Wireless and other PPC resellers. Topics include: (1) Porting your phone number from VZW to PPC (2) Checklist of everything you'll need to succeed (3) Device driver and software installation (4) Configuration & DIY Free Programming (5) Activation (6) PPC Account & Plan Finalization
I hope this benefits anyone still using this excellent smartphone. I gave up my unlimited data on VZW and moved to PPC after realizing I mostly use WiFi these days and was not taking full advantage of unlimited data on a 4G LTE network. Saving $696 per year is a great incentive. I give credit and reference all of the various posts that were summed up. Rather than attempt to reformat the document as a forum post I've made it available on Google Drive. I hope that's fine. I've attached it to this post as a DOCX. Hopefully one or both of these methods works.
http docs.google.com document/d/17Tmz2R-DEHRQqQZmbEPALR7UIYNYyZO8aqBi2_AOFn0/edit?usp=sharing
Peace ~
Click to expand...
Click to collapse
Thanks a lot for the updated guide. I was hoping to use this to turn on data on my Thunderbolt (voice already works).
However, I am stuck on the part about connecting the phone to the PC. My laptop is on Windows 8.1 Pro. No matter which HTC sync version/drivers I use, the laptop does not recognize the phone.
I tried downloading an older version of HTC Sync, but that did not work either.

I experienced the same setback and, instead of troubleshooting further, used an old Windows XP laptop. See if you can find access to an older machine for the purpose of programming your phone. Perhaps a family member, friend, neighbor, cybercafe, or yard sale.
Before XP was EOL Microsoft offered a downloadable kit to install XP within Windows 7 etc as a virtual machine for running older applications. I'm not sure if USB devices were accessible within the VM. Another option might be WINE from within Linux but I've never attempted that either. The easiest route is to find a 32-bit machine you can borrow.
There may be a simple 64-bit driver workaround but I'm not yet aware of what that might be. When I have some free time, I'll explore the 64-bit driver dilemma and if I'm successful I'll update the documentation.

corezion said:
After reading many posts across various forums and buried in the comments of threads spanning many years--I've summed up moving from Verizon to Page Plus in one document. This is the 2014 definitive step-by-step guide to manually programming the 4G LTE Verizon HTC Thunderbolt Smartphone for use with Page Plus Cellular (PPC). This guide might also serve for Kitty Wireless and other PPC resellers. Topics include: (1) Porting your phone number from VZW to PPC (2) Checklist of everything you'll need to succeed (3) Device driver and software installation (4) Configuration & DIY Free Programming (5) Activation (6) PPC Account & Plan Finalization
I hope this benefits anyone still using this excellent smartphone. I gave up my unlimited data on VZW and moved to PPC after realizing I mostly use WiFi these days and was not taking full advantage of unlimited data on a 4G LTE network. Saving $696 per year is a great incentive. I give credit and reference all of the various posts that were summed up. Rather than attempt to reformat the document as a forum post I've made it available on Google Drive. I hope that's fine. I've attached it to this post as a DOCX. Hopefully one or both of these methods works.
http docs.google.com document/d/17Tmz2R-DEHRQqQZmbEPALR7UIYNYyZO8aqBi2_AOFn0/edit?usp=sharing
Peace ~
Click to expand...
Click to collapse
I was able to follow the instructions and get the voice working. Many thanks for this detailed instruction.
using DFS to change the phone settings works fine on non-9k port. but on 9k port, lots of the parameter was "read only", not allow to change.
I must have a sim card in the phone, otherwise it will stuck in dailing. Incoming calls/txt was first not working at all, but suddenly working and working since. i would guess it has to do i was calling when someone called me, but i have no proof.
Separate question: I am not able to use "settings->software upgrade->check new" to upgrade my phone from gingerband to icecream. Pageplus said they don't support and their OTA will ruin 4g phone. do you know any alternative way?
stupid question: i activated in diag+modem mode. Now everything completes, when the phone restarts, it still do that. do i need to disable it?

Halp!
FIRST A HUGE THANK YOU!
your walk through combined with the one where I found the link to yours both let me set up my phone after a friend accidentally factory reset my store flashed phone lol.
From never flashing a phone to scrounging up the software and getting my phone set up and working without spending a dime!:good:
Now that I have a better understanding I am hoping you guys with more experience can help me figure out shy I'm stuck on 1x
everything else is working except 3g when i boot the phone i see 3g for about a milisecond then just 1x
No matter how many times I enter the "vzw" passwords for PAP, PPP, etc and write them to the phone they are gone when I read the phone.
Everything else is there, [email protected] sticks but not the passwords.