OpenBTS
In the absence of an “official” download link for these so far (although I’m sure they’ll be up on the Shmoocon page soon enough), my slides from Shmoocon this year. Seems it got a little press coverage and a whole bunch of attention on Twitter, so I figured I should get these out ASAP. Hopefully video will be up soon but if anyone has questions about the talk in the meantime please ping me (ideally on twitter ) and I’ll update the FAQ as and when I can. What hardware / software were you using? I used a Vivopay 4500 contactless card reader, an MSE-750 magstripe reader/writer, a Square dongle for my cellphone (on Android, not iPhone), and some code I wrote based on 3ricj ‘s PwnPass code (no longer publicly available, afaik). How did you get magstripe data from a contactless read?
Chris Paget's Blog
To repeat what I said on Twitter , it’s somewhat pointless but a neat hack nonetheless – running a GSM base station from a CDMA handset. With minimal work it’s possible to get gnuradio and OpenBTS working on the ARMEL architecture used on the Droid, allowing my Droid to act as a base station to which handsets can connect; the Droid then connects calls using an on-board Asterisk server and routes them to the PSTN via SIP over Verizon’s 3G network. The quick version: I can provide voice and SMS connectivity to local GSM handsets using nothing but a Droid and a USRP. A quick log of what you’ll need to replicate this. This is from memory so I may have missed something; fortunately there’s an easier way that I’ll come back to. - Root the Droid and install Sholes Mod . - Mount your SD card in a desktop machine and create an EXT3 partition.
OpenBTS on Droid