Can't receive calls even with Sim_Emu_u1 method

[JustIn]

Iphone can't receive calls even with Sim_Emu_u1 method ! Very strange , in the beginning everything was perfect. But now Iphone can't receive any calls. When i start calling the following "Call Forwarding Active" message is appearing.
Any ideas how to resolve this problem?

[ozbimmer]

"Call Forwarding Active" message is normal, it is there so when you make a call all incoming calls will be forwarded, usually to your voicemail.

So the real issue is that you cannot receive call. Did you reboot the iphone and see how it go?

[JustIn]

@ozbimmer, thank you for quick reply!
Of course, i tried everything like rebooting phone, changing sim cards and even registering to the network with original sim and different phone when iphone is off.
In the first few hours there is no "Call forward..." message. But in this time I had no second phone to test call receiving. Also after a while I saw that for a short period of time there is no GSM signal. I think the GSM operator is changed something depend on IMEI of the phone.

[ozbimmer]

hmm... hard to know what exactly has happended. I think the telco are striking back :) No more dodgy sim cloning business with iphone :)

[JustIn]

May be, but the symptoms are exactly the same as Sassha reported after his first test with SuperSim and first version of SimEmu - not u1. I am wondering what is the difference of these two versions of SimEmu software?

[ozbimmer]

slight difference in the reporting of IMSI to iphone requests. Try the latest one, it should work better.

[JustIn]

I've tested all versions with no success :(

[Zf_]

Try to blank the whole chip (code & EEPROM) before reflashing and retry

Verify that you're using the new version of the SIM Emu

Verify the personalization data

Then verify whether or not you can receive calls using another handset

If this still doesn't work, post your baseband logs, after trying to receive a call

[Vladimir_CDI]

May be, but the symptoms are exactly the same as Sassha reported after his first test with SuperSim and first version of SimEmu - not u1. I am wondering what is the difference of these two versions of SimEmu software?

I have the same situation in my local carrier (No calls-in) but other carrier goes fine.
1. Try to disable call forwarding
2. Try other carriers
3. defference is IMSI-sequence
first release has: IMSI-A,IMSI-A,IMSI-B,IMSI-B,IMSI-B,.....
u1 has: IMSI-B,IMSI-A,IMSI-B,IMSI-B,IMSI-B,.....

[JustIn]

After many test I think the problem is how the iphone registers in the network. May be some info (fake IMSI value) is sent to the operator.
from logs i don't see any problem:


18309 sim: PIN unlock (status=2)
18309 sim: Network personalization unlock (status=2)
18309 sim: Skip personalization unlock, radio is not locked: fSimStatus = 2
18310 send[call]: at............
18510 recv[call]: OK
18510 evt: Sending internal notification kEventSimPinAccessResponse (26) params.................
18510 evt: Sending event kSimUnlockSuccess (33)
18511 send[call]: at+xpincnt
18531 recv[call]: +XPINCNT: 3,3,10,10
18531 recv[call]: OK
18533 send[call]: at+cpin?
18546 recv[call]: +CPIN: READY
18546 recv[call]: OK
18547 send[call]: at+cimi
19156 recv[call]: +XLOCK: "PN",1,0,"PU",5,0,"PP",5,0,"PC",5,0,"PS",5,0
-------------------------------------------------------------------------------------------
19268 send[call]: at+cimi
19275 recv[call]: ...............
19276 recv[call]: OK
19277 evt: Sending event kNewSim (117)
19277 evt: Sending event kSimStatusChanged (138)
19277 evt: Sending internal notification kEventSimReady (12) params............
19278 reg: GsmRegistrationModel: Operation kLimitedService -> kWaitForAutoReg
19280 evt: Sending event kRegistrationStatusNotification (11)
19280 evt: Sending internal notification kEventSimInitComplete (13) params............
19280 evt: Sending internal notification kEventSimRefresh (16) params.............
19280 sim: Home PLMN is ..................
19280 evt: Sending internal notification kEventHomePlmnUpdated (20) params................
19319 send[call]: at+clip=1
19319 send[reg]: at+creg=2
19319 send[sms]: at+cnmi=1,2,2,1
19319 send[pdp_0]: ate0


BTW SIM works very well with normal phone - call out and call in also ...

[Zf_]

You should copy the logs from the device (/var/logs ...) otherwise the logs synced from iTunes miss some useful information, as you can see :)

Also, what happens when you try to call the handset ? something should appear in the logs.

[JustIn]

Zf_ , please tell me what is the easyest method for getting this files from /var/log without installing ssh?

[nikibs]

.................................................. .....

[nikibs]

............................

[Zf_]

Very interesting results indeed, thanks for taking the time to test and report.

If you noticed the same problems (no incoming calls) on only a single carrier, and since this issue seems to always be limited to specific carriers in different countries, I'm tempted to think that the problem is on the carrier network side, not on the subscription side.

It'd be very interesting to get a genuine AT&T subscription roaming on such a carrier to see what happens. If the same problem occurs, then it's reassuring for the SIM attacks in one way :) (the bad news being that that bug would need to be fixed in the baseband, and that they'll obviously take the opportunity to fix the SIM attack while fixing this bug :D)

Also perhaps you can provide the logs of a "working" subscription to compare against the logs of a "non working" subscription (logs done after receiving a call) - I don't think that'll prove anything but still :)


Zf_ , please tell me what is the easyest method for getting this files from /var/log without installing ssh?

you should be able to retrieve them with iPhoneInterface (or iPHUC)

[nikibs]

...............................

[nikibs]

..................