How do SIM Cards work? - SIMtrace

Поділитися
Вставка
  • Опубліковано 8 вер 2024
  • In this video we use SIMtrace to intercept the communication between the phone and SIM card to understand how that works. This is part 1 in a series introducing mobile security.
    buy my font (advertisement): shop.liveoverf...
    Vadim Yanitskiy: / axilirator
    Osmocom: osmocom.org/
    =[ ❤️ Support ]=
    → per Video: / liveoverflow
    → per Month: / @liveoverflow
    buy my font (advertisement): shop.liveoverf...
    =[ 🐕 Social ]=
    → Twitter: / liveoverflow
    → Website: liveoverflow.com/
    → Subreddit: / liveoverflow
    → Facebook: / liveoverflow
    #MobileSecurity

КОМЕНТАРІ • 1,4 тис.

  • @LiveOverflow
    @LiveOverflow  6 років тому +1355

    Small corrections:
    The SIM card does not typically store a private key. It has a secret key that is shared with your mobile operator. And that secret is used to derive session keys that will then be used in the actual encrypted communication.

    • @gregorykhvatsky7668
      @gregorykhvatsky7668 6 років тому +78

      LiveOverflow also in the early 2000 some SIM cards used some form of weak crypto which allowed to actually extract the key from the card with cryptanalysis. This allowed for multi-sim cards that allowed you to store multiple keys (multiple virtual SIM’s) of one card and then switch between them on the fly. It was some good stuff, but then they upgraded the crypto and the whole thing disappeared.

    • @RAGHAVENDRASINGH17
      @RAGHAVENDRASINGH17 6 років тому +1

      Nice video

    • @GottZ
      @GottZ 6 років тому +48

      fun fact: the sim can receive new applications over the air. there are certain security vulnerabilities in that area that have not been fixed physically. you need to MITM the GSM network though to make some fun things.

    • @tjeulink
      @tjeulink 6 років тому +8

      +Jan-Stefan Janetzky could you point to an paper or article or something detailing this? isn't doing an MITM on the GSM network trivial or is that only for mobile internet access?

    • @parv8131
      @parv8131 6 років тому +3

      So whats difference in Esim?

  • @hellmen54
    @hellmen54 Рік тому +170

    fun fact: The original SIM-card is actually the same size as the credit card. What most people call a "normal SIM" card is officially called MINI-SIM.

    • @genesis1914
      @genesis1914 11 місяців тому

      some carriers/sub-carries like VOXI issue SIM cards in the standard credit card size, with cutouts and small plastic tabs to every size under that, so you could "snap" out the size you need. (www.cordbusters.co.uk/wp-content/uploads/2020/09/voxi-sim-card.jpg)

    • @picoplanetdev
      @picoplanetdev 11 місяців тому +17

      Generally most phones use Nano-SIM today.

    • @nixulescu9399
      @nixulescu9399 11 місяців тому +6

      wow, now I finally know why the 'normal' was called 'mini' lol, never given it too much thought but now it makes sense.

    • @dictatoribenevolo8394
      @dictatoribenevolo8394 7 місяців тому +3

      micro and Nano now both exist as well..

    • @whamer100
      @whamer100 7 днів тому

      atomic sim when

  • @ForbiddenUser403
    @ForbiddenUser403 5 років тому +138

    You forgot about an additional computer within the cell phones. You have the main CPU which runs the OS and User IO, You have the sim card, and you've also got the baseband processor which is what is directly communicating with the sim. The main CPU of the phone is not what's actually communicating with the sim card. The phone CPU uses the baseband as it's gateway to the wireless network after the baseband has already verified credentials and established a connection to the network.

    • @genesis1914
      @genesis1914 11 місяців тому +3

      on iPhones you also have the cryptex and SEP, along with the main SoC and BB.

    • @rajatmond
      @rajatmond 9 місяців тому +1

      You usually have storage on your phone. All bulk storages have a separate cpu responsible for actually controlling the storage system.

    • @TheRailroad99
      @TheRailroad99 8 місяців тому

      Baseband almost always is a dedicated core, but I think many SoCs include it on-die.
      Bluetooth/WiFi usually also have their own "CPUs". They are usually called Radio schedulers. Their timings are very important so they need to run bare-metal without an OS scheduler.
      Many of today's smart sensor chips also include tiny 8-bit or even 32 bit ARM (e.g. Cortex M0) processor cores, also the main CPU usually has an on-die secure enclave core.
      They all communicate with the main CPU via SPI,I2C, UART or even DMA access.

  • @CrazyDanishHacker
    @CrazyDanishHacker 6 років тому +717

    Check out the Defcon presentation: "The Secret Life of SIM Cards", and the Black Hat presentations:
    "Cloning 3G/4G SIM Cards With A PC And An Oscilloscope: Lessons Learned In Physical Security" &
    "Rooting SIM Cards".

    • @wowimoldaf
      @wowimoldaf 6 років тому +22

      Whoa, Thats cool as fuck.

    • @tunghoang8911
      @tunghoang8911 6 років тому +2

      Thanks.....

    • @sven33r
      @sven33r 6 років тому +9

      I can recommend that "secret life of sim cards", just watched it recently.

    • @rgilles42
      @rgilles42 6 років тому +2

      I immediately thought about one of these videos I had seen a few months ago but couldn't remember where it came from... Thank you so much !

    • @mido3ds
      @mido3ds 6 років тому +70

      Videos in order
      ua-cam.com/video/31D94QOo2gY/v-deo.html
      ua-cam.com/video/qKCQ1KL9GEc/v-deo.html
      ua-cam.com/video/scArc93XXWw/v-deo.html

  • @LifeofBoris
    @LifeofBoris 5 років тому +344

    Thats why I started learning Java in the first place..

    • @askart8576
      @askart8576 5 років тому +33

      Forget Java. Spill some *vodka* into cup in _Java logo_ ...

    • @Koubles
      @Koubles 5 років тому +5

      Wow! I didn’t know you were taking up Java Boris. Good luck on that!!

    • @szymonzak6681
      @szymonzak6681 Рік тому +3

      ayy big boris?

    • @NanoSpicer
      @NanoSpicer Рік тому +10

      Is that neighbor Vadim?

    • @aadityadadhich9613
      @aadityadadhich9613 Рік тому +1

      oopa boris {in slavic accent}

  • @stumbling
    @stumbling 5 років тому +136

    Smart cards have a clock speed of 13.5MHz and up to 80kB EEPROM. For comparison, the Commodore 64 had a 1MHz CPU and 20kB ROM. It would be so cool to make an 8 bit PC with one of these cards if possible.

    • @CoolKoon
      @CoolKoon 2 роки тому +14

      I suppose you could, but these smartcards have no GPU in them...

    • @309electronics5
      @309electronics5 Рік тому +21

      ​@@CoolKoonmaybe a terminal based pc?!

    • @norbert.kiszka
      @norbert.kiszka Рік тому +10

      ​@@CoolKoonevery CPU can work as GPU and GPU can be connected externally.

    • @CoolKoon
      @CoolKoon Рік тому

      @@309electronics5 Heh, good luck trying to change the firmware in it (there's a 99.99% chance that you can't).

    • @CoolKoon
      @CoolKoon Рік тому +2

      @@norbert.kiszka "every CPU can work as GPU" - That's simply not true. CPUs in general are not able to generate a signal necessary for driving a display, obviously the C64 mentioned above has used a dedicated chip for that too. All it can do is to generate the picture stream that would be sent to said graphic chip.
      And the second part of your comment ("GPU can be connected externally") is even bigger nonsense, unless you have a VERY fast interconnect (in embedded electronics you usually don't) you CANNOT. That's why oftentimes they just slap a GPU next to a GPU and call it a SoC.

  • @FennecTECH
    @FennecTECH 5 років тому +66

    Most phones have 4 or 5 or more computers. There is the SOC that runs android. The Bluetooth adapter. The wireless modem. The WiFi radio. The secure element and the baseband. And even the biometric sensor (thumbprint / faceid) All with independent processors. There are probably others too. Broadcom WiFi adapters generally have a decently powerful Linux system on them with megabytes of free ram and storage. PCs can have dozens!

    • @ethanchow9170
      @ethanchow9170 9 місяців тому

      There's microcontrollers dedicated to haptic feedback and motion data as well and don't forget the USB c multiplexer

    • @alakis
      @alakis 9 місяців тому +2

      And even many of those systems consist of multiple "independent" processing units. For example, a cellular modem may have up to 5 processors for various tasks (software radio, programmable filters etc.).

  • @XDRosenheim
    @XDRosenheim 6 років тому +1607

    So that's why Java is used on 3 billion devices :P
    Edit: Please stop. It was a cheap joke, don't overthink it.

    • @michalnemecek3575
      @michalnemecek3575 6 років тому +15

      yup

    • @rkan2
      @rkan2 6 років тому +43

      The real number would be >15 billion devices once you sum up all mobile phone for example… Unless you meant “daily use”, when even then it is probably more, since NA and Europe alone have 1 billion users.
      “The first cell phone was produced by Motorola. Since then there have been produced around 17.37 billion mobile phones.” Most of these would’ve supported java in some shape or form.. Probably only the first few 100 million at the 80s early 90s didn’t do java..

    • @SianaGearz
      @SianaGearz 6 років тому +33

      I wonder if not all SIM cards run Java. The phone doesn't have to know whether it runs Java or not since it only communicates data back and forth, it never needs to upload Java bytecode to the SIM card.

    • @rkan2
      @rkan2 6 років тому +10

      Siana Gearz I think the operator decides whether they want to implement a java-application or not. Still, nearly all phones produced have had some sort of support for Java on them..

    • @YO3HJV
      @YO3HJV 6 років тому +5

      ... to be accessible to some power-users.

  • @threeMetreJim
    @threeMetreJim 5 років тому +17

    Wow, I did this back in the late 90's using a serial port and a simple circuit. Watching a SIM update is very interesting. Also used for the TV viewing cards, which is how I got interested in it in the first place.

  • @nap8187
    @nap8187 6 років тому +1342

    I want to run the original DOOM on the simcard.

    • @GameMaker3_5
      @GameMaker3_5 6 років тому +69

      You mean store the original game data on one? non-possible. Sims only have around 8 bytes on the card

    • @nap8187
      @nap8187 6 років тому +177

      GameMaker 3_5 don't crush my dreams

    • @AtmelKiller
      @AtmelKiller 6 років тому +198

      Wrong. SIM cards can have up to 256KB of memory space.

    • @bigbadwolf3712
      @bigbadwolf3712 6 років тому +55

      that means we can actually produce smart cards as a VERY secure way of saving data? very nice

    • @GameMaker3_5
      @GameMaker3_5 6 років тому +16

      @@AtmelKiller thank 4 correction but I don't think the original doom (or even chex quest) could be stored on a SIM even without storing saves on the card

  • @raz0229
    @raz0229 5 років тому +9

    02:37 _YES! Now I believe people are gonna make videos about overclocking your SIM cards and playing high end games on 'em!_

  • @Araitik
    @Araitik 6 років тому +60

    Your videos are incredible. You maintain an insanely high level of quality through each and every video. When this video ended, I said "already ?" out loud, couldn't believe I didn't see the 11 minutes pass. Simply amazing !

  • @balika011
    @balika011 6 років тому +69

    A small clarification: The phones main CPU doesn't talk to the Sim, but the baseband does it. Also you can trace the apdu commands using a uart. You don't need any special hardware.

    • @0x6d696368
      @0x6d696368 6 років тому +20

      Do you have more information about tracing the APDU commands using a UART?
      As far as I know was the SIMTrace build by Osmocom specifically because you can't passively sniff ISO7816 communication (at least not reliably and according to the specs) unless your UART can work in ISO7816-mode.
      But would be nice if we could passively sniff ISO7816 without special hardware. So please share more information about how to "trace the apdu commands using a uart". Thanks!

    • @gyroninjamodder
      @gyroninjamodder 6 років тому +2

      Well, nowadays they are on the same SoC so not entirely wrong

    • @berni8k
      @berni8k 6 років тому +14

      Yeah the radio baseband CPU is what talks to the SIM and the cell network. I remeber back in the days of Windows CE phones you sometimes had to make sure you had the correct firmware in the baseband CPU when upgrading OS or it might not be able to connect to the cell network, even seen error messages saying that the radio is not responding when things went wrong with it.
      But you could take this even further. A lot of otherwise dumb components have hidden CPUs in them, technically making them computers too. A lot of other radios have dedicated CPUs for them like WiFi, bluetooth or GPS. The SD memory card is also hiding a CPU inside as a memory controller and so are eMMC flash chips often used for onboard flash storage. But it does not end there, a lot of chips can act autonomously so that they only bother the main application CPU when needed, for example there is a tiny CPU in the touchscreen controller chip that sits on the glass panel, it scans the matrix of conductors and does math to decide when a touch is detected, calculates the center coordinates and then sends that to the main CPU with an interrupt. So the actual number of computers in a modern phone is probably closer to 10.
      Some of these can be hacked to carry a virus such as an SD card, but hacking a touchscreen controller is probably not a viable thing as the chip is very underpowered and runs its code from a factory ROM with not even the capability to execute code from RAM.

    • @gyroninjamodder
      @gyroninjamodder 6 років тому +5

      berni8k You are confusing CPUs and microprocessors.

    • @berni8k
      @berni8k 5 років тому +11

      @gyroninja CPUs are the main building block of a microprocessor, everything else in a microprocessor is just there to help the CPU run, like provide it memory access, clocks, power etc.
      I think "something containing a CPU" can be reasonably called a computer. Just that some CPUs are really under powered and limited. Ones that run the digital timer on a microwave or play a melody in a greeting card. Really slow 8bit computers that have a total of a few kilobytes of memory, but provided you changed there program they could still do anything else(Within there under powered limitations naturally).

  • @timetraveler_0
    @timetraveler_0 5 років тому +1

    When I was a kid, everytime I moved to a new school, I used to block my dad's SIM by entering SIM pin wrong thrice, forcing him to get a new number, so that my school teachers won't have any contact to complain about me, if I ended getting caught doing something crazy at school.
    Now I know which piece of code I was running at the time. Thank you!

  • @AfonsodelCB
    @AfonsodelCB 6 років тому +3

    well... I've been wanting to get into cybersecurity for at least 2 years now. stumbling across your channel via a recommendation of this video showed me CTF, which finally gave me a tangible goal. I will now start my cybersecurity journey. thanks for the directions :p

  • @jaredmeit6127
    @jaredmeit6127 11 місяців тому +1

    Can’t wait for this series. Most people don’t know that 2G still works across the US.

  • @andreslb151
    @andreslb151 6 років тому +29

    Awesome, just 2 questions:
    1) If SIM cards are computers, can you make it to do any other thing you want?
    2) Can you make your own Java Card apps for any SIM card? What would we need?

    • @fixeria
      @fixeria 6 років тому +22

      1) Depends on the access level you have, see VVV
      2) Yes, you can write and compile them, but for commercial SIM-cards you need to know the secret keys to install your own apps :/ Please see "Hello World": git.osmocom.org/sim/hello-stk/tree/src/org/toorcamp/HelloSTK/HelloSTK.java

    • @cocobos
      @cocobos 5 років тому +5

      It actually not a computer, it still need it's host computer to execute the commands

    • @uzor123
      @uzor123 5 років тому +11

      In india, people have used this sim gui-api to make games. People there have actually produces games on the sim card using an api meant for debugging. The distribute games that are stored on sim-cards

    • @gerhardvandeventer8636
      @gerhardvandeventer8636 5 років тому +4

      Also the SIM must have a JavaCard Virtual Machine(JCVM) and JavaCard runtime environment(JCRE) loaded.

    • @paulfontaine7819
      @paulfontaine7819 5 років тому +4

      SIM cards use the Global Platform standard for managing the apps.

  • @choppab3864
    @choppab3864 6 років тому +2

    As an Information Security college student i have to say you are my fucking savior, THANK YOU FOR TAKING THE TIME AND MAKING THESE AWESOME VIDEOS.
    I hope you reach all your goals in life.

  • @AntonHelm
    @AntonHelm 6 років тому +32

    I came across your channel randomly like a few months ago and stayed since. You videos are awesome, in quality and content. Keep it up and can’t wait for the new videos to pop up....Reached “Game of Thrones” status for me

  • @fightingfalconfan
    @fightingfalconfan Рік тому +1

    I dont know about other countries since i have never left the us before. But here in the US, your simcard in the phone contains the information needed to successfully connect you to the wireless network. Basically it will tell the network who you are, what your number is, phones mac address, and other identifying information. Say you didn't pay your bill; your carrier will block some functions of the network on their end until you have paid. Plus the network is hidden and dont use your basic wifi for the connection. Your simcard also tells the phone what network its allowed to use.

  • @theonewhobullies
    @theonewhobullies Рік тому +13

    What a great explanation. Thanks a lot for presenting it so succinctly.

  • @Master-Cunninglinguist
    @Master-Cunninglinguist 5 років тому

    I'm no engineer, computer science major.. or in school at all but i love watching shit like t his. Thank you for the content! :D

  • @PATTHECATMCD
    @PATTHECATMCD 5 років тому +5

    I and a few colleagues recently had phones hacked, contacts removed. Thanks for giving me enough information to know how this was done, and who was responsible.

  • @aborda6044
    @aborda6044 5 років тому +1

    That proves some uni are awesome.. they do teach good things...

  • @aaronramsden1657
    @aaronramsden1657 6 років тому +76

    So cool, I'm getting bored of learning to code lol, the hardware stuff is so mysterious and cool to learn about

    • @robbenfan1792
      @robbenfan1792 6 років тому +1

      Aaron Ramsden IDK what path to choose

    • @aaronramsden1657
      @aaronramsden1657 6 років тому +1

      RobbenFan Python is what I'm learning at the moment, it's pretty fun, but I'm not sure how to get into hardware stuff yet

    • @TheDragShot
      @TheDragShot 5 років тому +6

      *+Aaron Ramsden* then you're wasting your time. If you want to go low level, proceed with C/C++, and if you want to decent further onto the bare metal try assembler, but only once you got the hang of C.

    • @Koubles
      @Koubles 5 років тому +7

      TheDragShot I mean, In my opinion. Python is not bad to learn to start off with. Besides, diving headfirst into low level languages and machine code is obviously very daunting on someone who is just starting out, like me.

    • @aaronramsden1657
      @aaronramsden1657 5 років тому +12

      TheDragShot noted,
      But it's never a "waste of time" learning something you're interested in

  • @andremachado93
    @andremachado93 5 років тому

    I m a telecommunication student from Portugal and this video is amazing

  • @kirdow
    @kirdow 6 років тому +52

    Can you please promise to set up a Patreon as a christmas present for us all and you? Looking forward to this series, and to support you on Patreon. And as always, love the work you do, keep it up

  • @TaohRihze
    @TaohRihze 6 років тому +371

    This video scares me. I can only start guessing what kind of force was needed to crack the display on that Nokia.

    • @fuskaren
      @fuskaren 6 років тому +12

      Thats not a nokia 3310

    • @theapexsurvivor9538
      @theapexsurvivor9538 6 років тому +27

      I've broken a 3310 by just keeping it in my pocket with my house keys...
      I'm convinced that I have some kind of curse: any time I own an electronic device that isn't broken in some way it finds some way to remedy the situation...

    • @idowhatiwantdowhatisaygoog2361
      @idowhatiwantdowhatisaygoog2361 6 років тому +21

      It required over 20 years of brute force but we finally cracked it

    • @jocerv43
      @jocerv43 6 років тому +50

      Probably dropped another Nokia on it..

    • @itzbenz941
      @itzbenz941 6 років тому +3

      Use nokia for brick

  • @SQDImon
    @SQDImon 5 років тому +901

    Man on english talking about german sim card on russian nokia phone maded in finland O_o

    • @LiveOverflow
      @LiveOverflow  5 років тому +131

      And where are you watching this?

    • @jackalpha9670
      @jackalpha9670 5 років тому +8

      Dimon Sq That came to my mind as well.

    • @goodtoshi
      @goodtoshi 5 років тому +85

      Disigned in Finland but made in India, you can see the label at 4:10

    • @Architector_4
      @Architector_4 5 років тому +5

      +Amazon Echo
      Well, this phone's language is set to Russian.

    • @Architector_4
      @Architector_4 5 років тому +8

      +Amazon Echo
      True. I'm not sure why you are saying that Nokia isn't russian. I think it's obvious that by "russian nokia phone" they meant "nokia phone with its language set on russian".

  • @kur0ro1
    @kur0ro1 5 років тому +5

    For additional info. Some menus are embeded to the sim card because we know that sim card can store data but not enough, some menu are requested to the telecom servers and output will appear on your screen.

  • @pauldotdll3276
    @pauldotdll3276 5 років тому +12

    This was explained really well! I've always been interested in this, and glad I found the video. A lot of times, the video's are explained at such level where it makes no sense but this makes total sense to me.

  • @dziobaczy
    @dziobaczy 5 років тому +1

    Very nice video I learned so much, also worth to mention I guess that if U will fail 10 times with the PUK code, the sim is pretty much dead and you can call only emergency numbers.

  • @10e999
    @10e999 5 років тому +6

    > "Most of us know how the internet works"
    Personally, I would be interested to watch a video on wireshark and packets!

  • @teckzusferalupus5382
    @teckzusferalupus5382 5 років тому

    Everyone should watch this. I had no idea how much technology was involved on these simple metal contacts

  • @dominicdo
    @dominicdo 5 років тому +3

    You should be an instructor, very good and clear explanation. Good job!

  • @silentantagonist2333
    @silentantagonist2333 6 років тому

    Ribbon cable broke in three... two... one. Ribbon cable broken successfully, prepare for evac at designated TCZ. Good work on being the bane of blind mobile device teardowns.

  • @mikee.
    @mikee. 6 років тому +57

    Nice! Looking forward to the follow-up videos!

  • @glenntaylor6201
    @glenntaylor6201 5 років тому +1

    Glad there are clever people about and willing to share but this has gone way above my head.

  • @ElonMusk-FanZone
    @ElonMusk-FanZone 5 років тому +15

    You are awesome! Don’t stop!

  • @dolphhandcreme
    @dolphhandcreme 5 років тому +2

    A modern smartphone actually has even more CPUs inside, for example the baseband modem cpu, several microcontrollers, one cpu in the wifi module etc.

  • @misaalanshori
    @misaalanshori 6 років тому +24

    I always thought that SIM cards are just something that stores the unique subscriber ID and that the menu is processed from some server somewhere

  • @allwhatyouwant
    @allwhatyouwant 6 років тому

    Du bist auf die TU gegangen! Mein Held! Jetzt darf ich davon träumen so krass zu werden wie du

  • @Deoxys094
    @Deoxys094 Рік тому +6

    You sir, just got a new subscriber!! Thank you so much for this awesome explaination! Right now I'm collaborating in a project related to 4/5G networks, your videos really helped me understand the subject even more!!

    • @AlTiri-rd7ly
      @AlTiri-rd7ly 9 місяців тому

      How did the oroject go, 2 months kater?

  • @MRsmith283
    @MRsmith283 4 роки тому

    I'm a Smart Card platform developer, and I can tell you this small SIM card can do hell lot of things :)

  • @DavidBrown-cz8lj
    @DavidBrown-cz8lj 5 років тому +14

    Очень познавательно! Спасибо вам)

  • @tkgaming70
    @tkgaming70 6 років тому

    Yes !! I always wanted to know how sim card and their networking works. Thanks!

  • @appelnonsurtaxe
    @appelnonsurtaxe 6 років тому +3

    That was very interesting. I have been curious about these cards for a few months, and I have all the answers I was looking for (especially the similarity between SIM cards and credit cards, or the SIM service menu app in Android, which I didn't know actually kind of ran on the card).

  • @misconstrudel
    @misconstrudel 5 років тому

    Nice video. I cut out the chip in my credit card and put it in my phone. Now I can phone myself money!

  • @Jack-fw9kh
    @Jack-fw9kh 6 років тому +4

    thank you so much for this video, in kenya we still use the applet on the sim card a lot, mostly for mobile money transfer which is a very big thing here, would like to get my hands on the osmocombb project , this is really cool though, looking forward for the follow up.

    • @LiveOverflow
      @LiveOverflow  6 років тому +1

      can you send me an email or msg me on twitter? I know that in other areas of the world these SIM applications are used a lot and would love to learn more about it!

  • @alexanderbaron9778
    @alexanderbaron9778 6 років тому +1

    That's really interesting! To be honest, I never really thought about SIM-Cards before, but now I'm hooked xD

  • @teknobalance
    @teknobalance Рік тому +3

    I wondered how the system works some time ago…
    And this video is very very incredeble. You maintain an insanely high level of quality through each and every video.
    And i’am your new subscriber 🎉🎉

  • @FxTR22
    @FxTR22 Рік тому

    A bit funny: Guy explains stuff in english on a russian mobile phone using a german sim 😄
    But thank you, i learned a lot today ❤

  • @shintsu01
    @shintsu01 6 років тому +13

    This is an interesting subject looking forward for the rest of the series :)

  • @Cygnus0lor
    @Cygnus0lor 6 років тому +1

    Every time you upload a video you blow my mind...

  • @Jirrick
    @Jirrick 6 років тому +10

    SIM Tools are present in Android as well, I don't think the 3310 is any more special (in this particular issue) than any other (smart)phone confirming to GSM standard. Also the modem is separate computer in most smartphones (don't believe that request to SIM are coming from main CPU) so there is at least three computers in contemporary phone. Probably much more as power and sensor management is done with specialized controller.

    • @SianaGearz
      @SianaGearz 6 років тому +3

      The power management and ADC controller is usually not a processor but a simple state machine with minimal flexibility. The whole purpose of it is keeping the analogue domain out of the fully digital SoC.
      You know what is though? The eMMC disk drive usually is a processor. Samsung uses ARM, others have something else, but they have firmware stored on the same flash as the data.

    • @berni8k
      @berni8k 6 років тому +2

      Yes its usualy the baseband CPU.
      But depending on where you draw the line you can find a lot more CPUs. Things like SD cards and eMMC flash storage have CPUs doing the job of a memory controller. Other radios like WiFi, Bluetooth, GPS etc tend to have dedicated CPUs to run them. Even dumb looking things like a touchscreen controller has a tiny CPU inside to scan the touch matrix, decide when a touch occurs, calculate the center coordinates and finally send them to the main application CPU. Even something as simple as an accelerometer/gyro chip could have sometimes a CPU inside. But these deeply embedded CPUs usually run code from ROM so are not viable to hack.

    • @SianaGearz
      @SianaGearz 6 років тому +1

      @@berni8k while mask ROM microcontrollers usually make for the least interesting targets, the firmware can be susceptible to ROP, basically reusing existing ROM code and invoking it by smashing the stack.

    • @berni8k
      @berni8k 5 років тому +2

      @Siana Gearz Yes technically it is possible, but there is very little code inside so its difficult to find useful snippets, there is very little RAM (Proabobly

  • @pickachublast8
    @pickachublast8 5 років тому +2

    Wow thank you! And I had no idea how identical sim cards and credit card chips looked

  • @Phoenix1337
    @Phoenix1337 6 років тому +5

    I have seen some defcon videos about this. i believe the sim would be classified more as a microcontroller than a computer.this something that interested me for a while however

  • @spoonnz
    @spoonnz 5 років тому +1

    WOW i fix phones and i didn't know that it was this complex! Thanks for this video, Awesome!

  • @seifenspender
    @seifenspender 5 років тому +3

    I wondered how the system works some time ago but never wanted to dig in. I think I will learn a lot from this series.
    Thank you so much, this is really interesting. Looking forward for more!

  • @SakarPudasaini10
    @SakarPudasaini10 5 років тому +1

    Please do more of these, intercepting protocols and data when we send/receive a call/sms/mms, switch BTS, switch network mode(2G/3G/LTE), create a mobile data connection etc.

  • @FengXingFengXing
    @FengXingFengXing 6 років тому +6

    Probably can emulate SIM card use software. No security for verify cell tower is real tower of fake tower?

    • @berni8k
      @berni8k 6 років тому +1

      Yep you can emulate a SIM card in software. But the cell tower will only accept you on the network is you prove you have the correct secret key by encrypting things correctly, this key is very difficult to extract from the SIM card.

  • @unknow03
    @unknow03 2 роки тому +1

    Vielen vielen Dank für die Videos :) Da kann man so viel lernen!
    Lustig das Video kam an meinem 15. Geburtstag raus.

  • @angelosediego4658
    @angelosediego4658 5 років тому +7

    so if my teachers says "give an example of a computer" can i answer it with "a simcard"? just curious ✌️😅

  • @honkatatonka
    @honkatatonka 6 років тому

    Amazing! Just came up today: "What happens when you loose the PUK?"
    Looking forward to this series and thanks for sharing your enthusiasm!

    • @gerhardvandeventer8636
      @gerhardvandeventer8636 5 років тому +1

      Your service provider can unblock your PIN/PUK with the ADM1. Only they now what this value is.

  • @SwordQuake2
    @SwordQuake2 6 років тому +3

    That's the old famous Nokia that goes for a lot of money on eBay. They use it for some sort of fraud but I don't know the details. Didn't know there were other phones that could do it (the Motorola).

  • @henripihet536
    @henripihet536 6 років тому

    Very great video! And it's also the first time that I see a Nokia with a broken screen 😄. Keep doing video! Sorry for my English.

  • @raz0229
    @raz0229 5 років тому +3

    00:08 _Ya'll know what makes Nokia 3310 so special!_

  • @HappyfoxBiz
    @HappyfoxBiz 5 років тому

    that's not the only cool things... it's also the security on the other side...
    Your phones IMEI is also sent over the radio waves along with your SIM number (in encrypted form) and if your IMEI is blocked by the carrier, your phone cannot be used with any SIM, however it can still be used to dial 112.
    In Australia, once your phone is reported stolen by ANY carrier in Australia it cannot be used on any carrier network... all of them, including the rail networks that have a licence and a few towers.
    So, if your phone is stolen, you have the option to report it stolen to the carrier so your IEMI is now so much more important.

  • @valrossenOliver
    @valrossenOliver 6 років тому +5

    A surprise to be sure. But a welcome one!

  • @EmanuelFrias
    @EmanuelFrias 6 років тому +2

    This was a very much needed video, I also feel that these kind of topics are not spread out enough. Thanks for sharing, great vid!!

  • @myofficetop
    @myofficetop 5 років тому +4

    Вадим молодец! :)

  • @Phlickey
    @Phlickey 6 років тому +2

    This is fascinating. Would you be interested in making a video about the wireless radio stack and how it differs from tcp/ip? Because I'd be interested in watching

  • @GRBtutorials
    @GRBtutorials 6 років тому +9

    Well, theoretically you could decap the IC and examine it with a microscope to get the private key, but when you're finished, the owner has most likely already changed their SIM or credit card...

    • @SianaGearz
      @SianaGearz 6 років тому +3

      I don't think so. Flash and EEPROM are usually capacitive, storing data as electrical charge on the gate of a MOSFET. But you can't see electrons with a microscope!
      You can read Mask ROM with a microscope.

    • @berni8k
      @berni8k 6 років тому +5

      You can't read flash memory using a microscope.
      But what they do instead is poke the bare die with microprobes while the chip is running so that they can look at the data bus of the internal CPU while its reading the key from memory. Obviously this is very difficult do to so its not practical, but people do this a lot to get the keys for satellite TV out of cards. Once they have the key they can make as many clones as they want and sell them cheap to people who want to watch the good channels.

    • @gerhardvandeventer8636
      @gerhardvandeventer8636 5 років тому +1

      High End smart cards, like those used in chip based debit or credit cards, actually has protection mechanisms against probing attacks. It can, for example, detect when the NVM is breached and will then stop executing code - a security reset will be triggered.

    • @berni8k
      @berni8k 5 років тому

      @Gerhard van Deventer
      Actually credit cards use the least secure smartcard chips.
      This might seam counter intuitive at first since there is actual money on the line here, but for the criminals to do this they need to physically steal your card, at that point they might as well just use the stolen card rather than make a copy, besides once you can't find your card for a few days you will report the lost card to the bank so that they deactivate it and make it useless in an instant. As a result these cards are secure enough that you can't simply make a copy in a few minutes, but don't have the more advanced security features because nobody would bother to try that hard.
      However smartcards used for satelite and cable TV don't have two way communication back to a server so they can't remotely detect suspicious behavior and block the card. This allows someone to hack a card, make 1000s of copies and sell them for profit to people who want to watch the fancy channels on the cheap. This makes a hacked satelite TV smartcard much more valuable than a hacked credit card. As a result the people who buy the card from the manufacturer are willing to pay extra for a more secure smartcard model and these cards have such advanced security methods like hard to etch trough layers, snaking patterns to detect intrusion, hiding important signals on deeper layers etc.

    • @gerhardvandeventer8636
      @gerhardvandeventer8636 5 років тому +2

      @berni8k
      This isn't true. I actually develop software for SIMs and debit cards. The security requirements for debit cards are very high. To get certification from MasterCard, for instance, your card has to hold up to all sorts of penetration testing, such as probing attacks or deferential power analysis. You are right in that its easy to block your card if its stolen. The problem is that if some one can obtain the keys necessary to do authentication and to generate or verify certificates that is used during a transaction. These keys aren't unique per chip, just as for satellite or cable TV. So yes these cards must be super secure. SIM cards on the other hand typically uses way less secure chips.

  • @tedmosby9409
    @tedmosby9409 6 років тому

    i bought loads from ebay i even have a reworked one that cost me about 80 gbp i found it so fiddly with the 2.5mm jack so i dont ever set it up .. love your vids man

  • @JBBost
    @JBBost 5 років тому +4

    Can you run Wolfenstein off one or more SIM cards?
    Halfway serious question.

    • @SireSquish
      @SireSquish 3 роки тому

      Now you've got me curious about benchmarking a sim card, overclocking it and running Doom on it.

  • @saravanar7140
    @saravanar7140 Рік тому

    Man do u know that you are a genius..

  • @Sparkette
    @Sparkette 2 роки тому +13

    So you're saying a SIM card can run Minecraft?

  • @darksideloneliness73
    @darksideloneliness73 5 років тому

    All these years.. all question from high school is finally answered how they worked completely

  • @mikopiko
    @mikopiko 6 років тому +8

    0:35 what was happening there? Did he spoof a phone call?

  • @abelashenafi6291
    @abelashenafi6291 5 років тому

    Thanks for revealing the mechanics of the sim man. thank you both

  • @rupesh43145
    @rupesh43145 5 років тому +3

    Sim cloning attacks are common now a day's
    What would you like to say on that as according to you we can't clone a sim

  • @luckyb3859
    @luckyb3859 5 років тому

    A well scripted video which stayed on task and informed the viewer! Many videos waste time with unimportant transitions between content sequences.

  • @masaratech
    @masaratech 6 років тому +4

    1:37 Do you have the pin number for this card?

    • @tazboy1934
      @tazboy1934 5 років тому

      Sultan Mustapha Jallaludin Pasha Han zindabad

  • @silverismoney
    @silverismoney 11 місяців тому

    You can extract the encryption keys though. There was a DefCon talk about doing exactly this by downgrading the connection to GSM and using something like OpenBTS.

  • @chris_sndw
    @chris_sndw 5 років тому +3

    Is my credit card also running on java?

  •  11 місяців тому

    I think coolest video on UA-cam. Took me to my childhood where I was playing with sim cards :) Thank youuu!

  • @RonLaws
    @RonLaws 5 років тому +3

    there i was thinking the sim card was just a memory chip.. how i was wrong :D

  • @gerimeni7323
    @gerimeni7323 5 років тому +2

    This is one of your coolest video, i always wanted to know about sim card abd the information im getting in this video is amazing

  • @dtteamofficial
    @dtteamofficial 2 роки тому +2

    9:09 that image, sus.

  • @WSADKO
    @WSADKO 6 років тому

    Sir, you just got a subscriber, radiotechnician subscriber

  • @parma2414
    @parma2414 6 років тому +4

    So, is there a way to sign private messages with a sim card?

    • @fixeria
      @fixeria 6 років тому +1

      Only if you install a special cardlet for that, I think.

    • @Sypaka
      @Sypaka 6 років тому +1

      Private messages, what kind? SMS, Email?

    • @berni8k
      @berni8k 6 років тому +1

      Yes if you have the secret key inside to decrypt it again. The cellular service provider has a copy of that key (because they are the ones who sold you the SIM card) so that they can decrypt your calls and messages while someone else listening to your cellphones radio traffic can't decrypt it.

  • @scottmurray18
    @scottmurray18 11 місяців тому

    Sir, I learned so much from this first video I have seen, I subscribed and will be watching all night. Your knowledge and ability to present that knowledge is outstanding thank you
    .
    Thank

  • @account0199
    @account0199 5 років тому +4

    all i could hear was "the sim card runs java" and then i thought "so, it's vulnerable..."

    • @Amejonah
      @Amejonah 2 роки тому

      I hope it has not log4j on it tho xP

  • @midclock
    @midclock 7 місяців тому

    Wow! I wouldn't ever imagine that the sim card menu was java based. Very interesting

  • @ori61511
    @ori61511 6 років тому +182

    its funny how we research things that humans made... i mean, why didnt they just tell you the things that you just discovered, would save some time lol

    • @dennohpeter
      @dennohpeter 6 років тому +3

      hahaha

    • @dennohpeter
      @dennohpeter 6 років тому +4

      those guys made these stuffs where did they go

    • @GRBtutorials
      @GRBtutorials 6 років тому +65

      You're describing open source...

    • @ori61511
      @ori61511 6 років тому +2

      basically yes but most of the things are not

    • @bjordsvennson2726
      @bjordsvennson2726 6 років тому +54

      Because the less people know about the security mechanisms, the more secure they are.

  • @alifalawi
    @alifalawi 5 років тому

    its little hard for some beginner like me, but this vid is awesome. I really like it. Worth to watch.

  • @adi.mp3
    @adi.mp3 5 років тому +5

    But I'm already Tracer.

  • @Metalsorow
    @Metalsorow 9 місяців тому

    Amazing what kind of informations is just simply out here. Thanks für your contribution. It's been a long time since I had an "aha"-effect for something I never knew how it worked.

  • @Eu_Sunt_Dracul
    @Eu_Sunt_Dracul 5 років тому +6

    by the way..................can it run crysis?

  • @RazorMureithi
    @RazorMureithi 5 років тому

    We use the sim menu a lot in Kenya, since mobile money applications run on the sim cards eg Mpesa. check it out its intresting