Posts

Showing posts from July, 2026

Sequential (141) GSM

Image
https://johnchihau.blogspot.com/2026/07/httpsjohnchihau.html?m=1  . Ref:  https://johnchihau.blogspot.com/2026/07/httpsjohnchihau.html?m=1 . . John : See the Pic above.  In fact , inside a Chip of GSM transmitter and receiver, there're 2 Circuit.  They are Circuit A and B. . Me: However,  we don't see those circuits with our naked eyes.  . John : Of course,  we don't see them with our naked eyes. They are hidden.   I supposed that. The clock line of the GSM Antenna is hacked.  . Me: Ok. . John:  Hacker can set the clock line of the SIM card on Circuit B. Hacker can set the Circuit of SIM_I/O on Circuit B either. Something like, . 1) Subject [Sim card Clock line] . 2) Subject [Sim Card I/O] . 3) Circuit [A] <-- Originally,  it's Circuit B . 4) Chosen clock line [GMS antenna] <-- Originally,  it is Crystal oscillator.  . 5) Interrupt status [Real interrupt] . . Me: How to set? . John : Take a look at this article ...

Sequential (140) GSM

Image
https://johnchihau.blogspot.com/2026/06/blog-post_19.html?m=1 . Ref:  https://johnchihau.blogspot.com/2026/06/blog-post_19.html?m=1 . . . .  John : See the 2nd picture. There's a data-register called RO. . Me: Ok. . John : If R0 chose clock line A,  R0 is on Circuit A. . Me: Yes, R0 is on circuit A. However,  if the transistor is cut off, indeed,  R0 receive no clock signal. . John : You are correct.   See the 1st Picture above.  There're 2 Circuits.  . Me: Ok. . John: They're Circuit A and Circuit B. Circuit A has its own crystal oscillator.  Circuit B use the oscillator from the GMS antenna.  . Me: Ok. . While (The oscillator of the GSM Antenna is running) { If (RTS = 1) { TXD = Real interrupt. // The transistor is saturated. Clock signal can be received.  } else  { TXD = Mask interrupt;  // The transistor is cut off. Clock signal can't be received.  } } . John : Before we start,  you might read this art...