Live data from Hacker News

The secret life of SIM cards (2013)

simhacks.github.io

31–40 of 45 posts

Re: The secret life of SIM cards (2013)

#31

These must be pretty small applications -- don't SIM cards have under a megabyte of storage capacity?

I was under impression the biggest cards have up to 1-2 MB RAM, 128 MB flash and relatively fast 32-bit MCUs.

And that was a few years ago.

Edit: Found a PDF from 2006 that talks about even higher spec SIM cards: http://www.spansion.com/products/documents/hd_sim_whitepaper...

Re: The secret life of SIM cards (2013)

#32
post #22

Earlier quoted context omitted.

This really isn't that accurate anymore. Verizon Wireless, which is the largest carrier in the US right now, uses sim cards in all of their LTE devices. Behind them is AT&T which of course is completely GSM and T-Mobile. Sprint, well... they're there.

Correct me if I'm wrong, but I don't think most people have an LTE phone.

Given that people typically get a "free" phone every two years, I'd imagine that most people in the US have LTE phones by now.

Re: The secret life of SIM cards (2013)

#33
post #6

Wait, what? They're unknown in the U.S? Then what in the world are they using over there?

There are also USSD menus which I hadn't heard of before going to Asia. It was used by carriers there to provide an alternative to voice menus to topup and buy addons. In India there is a company providing access to Facebook over it: https://www.facebook.com/notes/airtel_in/airtel-launches-the...

USSD has very limited support outside Asia and US.

Re: The secret life of SIM cards (2013)

#34
post #24
post #2

In Kenya, the SIM card application is very important as most Telecommunication companies have important services that they offer thorugh the application. These include Mpesa, Airtel Money, YU Cash and Orange Money among other services. The iPhone has a menu option within Settings > Phone > Sim Applications where these are displayed. I haven't seen this on other SIM cards

Same for Tanzania, Uganda, Rwanda, and I suspect a lot of the rest of the (non-Eastern) Africa. USSD codes are critical.

Tanzania? Not so sure. What I've seen in Dar is that the way to access mobile money for instance is to dial 150XX# to access services. SIM Toolkit Applications on the contrary present as regular phone applications (albeit limited by the SIM tooklit capabilities).

Re: The secret life of SIM cards (2013)

#35
post #19

It reminds my good days programming simcards, i was the founded of a startup in Brazil that made a good use of simcard programming to store two numbers in the same simcard, around 2010 it's a cool and profitable, the thing is that i managed to insert a local imsi and an a north american imsi registered in the same card so everyone that travel abroad could be free of expensive roaming charges, them we sold the company…

in 2010??? v2/v3 sims were already popular in 2008, and its impossible to clone those (extract ki and imsi) unless sims in brazil were that outdated/insecure at the time

It's not impossible, large carriers are still using DES to sign the OTA updates. Using rainbow tables you can crack the key and install an app which can break out of the sandbox and read the ki and IMSI.

Re: The secret life of SIM cards (2013)

#36
post #22

Earlier quoted context omitted.

This really isn't that accurate anymore. Verizon Wireless, which is the largest carrier in the US right now, uses sim cards in all of their LTE devices. Behind them is AT&T which of course is completely GSM and T-Mobile. Sprint, well... they're there.

Correct me if I'm wrong, but I don't think most people have an LTE phone.

Most people have a GSM or LTE phone.

Re: The secret life of SIM cards (2013)

#37
post #22

Earlier quoted context omitted.

Correct me if I'm wrong, but I don't think most people have an LTE phone.

Given that people typically get a "free" phone every two years, I'd imagine that most people in the US have LTE phones by now.

Well, most people out of the 56% that actually own a smart phone: http://www.pewinternet.org/2013/06/05/smartphone-ownership-2...

Re: The secret life of SIM cards (2013)

#38
It seems it would be a lot of fun to hack on these with some version of Lua. A reference counted variant might be more suitable.

Havent had a chance to watch the presentation, perhaps its already answered there: Are these totally locked down or is it within realms of possibility to take out the SIM card from an average GSM phone and start poking around, adding one's own applications.

Post reply on HN