GSM

Global System for Mobile Communication.

GSM is the dominant
2G digital mobile phone standard for most of the world. It determines
the way in which mobile phones communicate with the land-based network
of towers.

GSM is one of two major mobile phone technologies in
the U.S. The other is CDMA. Cingular and T-Mobile use GSM. Sprint and
Verizon use CDMA. GSM is more prevalent in most other parts of the
world, and especially in Europe.

Although GSM and CDMA provide
similar basic features and services to end-users, (such as voice
calling, text messaging, and data services,) they operate very
differently at many technical levels. This makes GSM phones completely
incompatible with CDMA networks, and vice-versa.

The most
visible feature of GSM are SIM cards. SIM cards are removable,
thumbnail-sized smart cards which identify the user on the network, and
can also store information such as phone book entries. SIM cards allows
users to switch phones by simply moving their SIM card from one phone
to the other.

1xEV-DO

(EV-DO)

Part of a family of CDMA2000 1x digital wireless standards. 1xEV-DO
is a “3G” CDMA standard. EV-DO originally stood for “EVolution,
Data-Only”, but recently is also referred to as “EVolution,
Data-Optimized”.

EV-DO provides data rates over 10 times faster than 1xRTT, the previous data technology for CDMA networks.

Unlike
other “1x” standards, EV-DO only addresses data - not voice. It
requires a dedicated slice of spectrum, separate from voice networks
using standards such as 1xRTT.

There are currently two main versions of 1xEV-DO: “Release 0″ and “Revision A”.

Release
0 is the original version, and the first to be widely deployed. Rel. 0
offers data rates up to 2.4 mbps, averaging 300-600 kbps in the real
world. This is much faster than the 50-80 kbps typically offered by
1xRTT technology. Rel. 0 data rates are identical to 1xEV-DV Revision C.

Revision
A integrates most of the faster data technology from 1xEV-DV Revision
D, and improves latency. These enhancements allow features such as VoIP
and video calling.

Although EV-DO does not include voice
capability natively, Rev. A is fast enough to support VoIP technology
at service levels equal or better to 1xRTT voice technology. This may
be a future upgrade path for CDMA carriers if EV-DV development remains
stalled.

In terms of data speed and general technology evolution, the closest equivalent to EVDO for GSM/WCDMA networks would be HSDPA.

1xEV-DO
is based on a technology initially known as “HDR” (High Data Rate) or
“HRPD” (High Rate Packet Data), developed by Qualcomm. The
international standard is known as IS-856.

CDMA

Code-Division Multiple Access.

CDMA is a digital wireless
technology. It is a general type of technology, implemented in many
specific technologies. But the term “CDMA” is also commonly used to
refer to one specific family of technologies (IS-95 and CDMA2000) that
competes with technologies such as GSM.

CDMA is a “spread
spectrum” technology, which means that it spreads the information
contained in a particular signal of interest over a much greater
bandwidth than the original signal.

Unlike many competing
technologies, CDMA has no hard limit for the number of users who may
share one base station (tower). Instead, with CDMA, additional users
can connect until the base station determines that call quality would
suffer beyond a set limit.

CDMA (IS-95) systems have been in
commercial operation since 1995. CDMA networks operate in the 800 and
1900 MHz frequency bands with primary markets in the Americas and Asia.
IS-95 CDMA systems are sometimes referred to as cdmaOne. The next
evolutionary step for CDMA to 3G services is cdma2000.

OK, after looking at the internal photos on the FCC's website, I'm pretty sure it can be done.

Here's how you do it… I think! I have only gotten as far as step 4 and I'm not going any further.

*** WARNING *** WITHOUT A DOUBT THIS WILL VOID YOUR WARRANTY, SO DON'T BLAME ME IF YOU BRICK YOUR PPC

1 Remove the battery cover.

2 Remove the battery.

3 Unscrew the two screws under the top of the battery cover. There may be some stickers over them.

4 Pry the panel over the camera off. Be careful, there are some tabs
holding it in place. Two at the top of the panel and one to the side of
the speaker. You should now see a circuit board. This looks like one
part of the camera. It has the flash LED on it. An insteresting side
note. On the top side under that panel is a flex circuit board with a
zig zag pattern on it. This must be the Bluetooth or WiFi antenna.

5 There is one screw holding the LED circuit board in place. Unscrew it.

6 Now you should be able to pry this circuit board out of it's connector which is right under the LED itself.

7 This should expose the camera module. I think the module can also
be pryed out of its connector which should be under the right side of
the (flex?) circuit board. There are four holes in the plastic housing
right where the camera should be, but I don't think they are for screws
or anything.

8 Put back the panel and screw it back on.

9 Put the battery back and also the cover.

Hit the reset button.

Viola! A PPC-6701.

Any brave soul willing to try this for real??? Take pictures as you do it and post them here.

Mobile Identification Number (MIN) - Uniquely identifies a
mobile unit within a wireless carrier's network. The MIN often can be
dialed from other wireless or wireline networks. The number differs
from the electronic serial number (ESN), which is the unit number
assigned by a phone manufacturer. MINs and ESNs can be checked
electronically to help prevent fraud.

Kyocera S14, the Rave and the Slider

• Power the handset on.
• To power it on, press firmly on the key with the red phone symbol.
• Press the #1 key six times.
• Highlight the word OPTION and press OK.
• Arrow down to the word Programming and press OK.
• Key in 5 8 7 8 4 6
• Scroll to the word MIN and press OK.
• Press the CLR (clear) key to erase any existing numbers.
• Enter the MIN that was assigned in the work order and then press OK.
• Scroll to the words Home SID and press OK.
• If a Not Common screen displays, highlight the word Edit and press OK.
• Press the CLR (clear) key to erase any existing numbers.
• Enter the correct Home SID.
• Press OK.
• Scroll down to MDN and depress OK.
• The MDN should be already populated as the same number that was entered into the MIN field. If the MDN is different from the MIN, press the clear (CLR) key to erase the number displayed and enter the MDN that was assigned in the billing system. Press OK.
• Press the key with the red phone symbol; the handset will power off and right back on again.

Programming the LG 1200

• Power on the handset by pressing the red END PWR key.
• Press # # 587846 on the keypad.
• Using the down arrow, highlight the word Save and press the OK key.
• At the SVC Program menu, select Mobile Phone # (this is the MDN).
• Enter the 10-digit MDN and press the OK key.
• Scroll to Home SID and press the OK key. 4273
• Enter the appropriate SID and make certain OK is highlighted.
• Press the OK key.
• Back at the SVC Program menu, using the down arrow, highlight the word Advanced and press the OK key.
• At the Advanced menu, using the down arrow, highlight the word IMSI (this is the MIN) and press the OK key.
• The number that was entered into the Mobile Phone # field as the MDN will be displayed (preceded by two zeros).
• If the MIN is the same as the MDN, press the OK key.
• If the MIN is NOT the same as the MDN, enter the appropriate MIN beginning with two zeros.
• For example, if the MIN is 2145551111, enter 002145551111. If the preceding zeros are not entered, an error message “Too Few Digits” will display.
• Should this occur, press the OK key, reselect IMSI from the Advanced menu and re-enter the MIN using the two proceeding zeros.
• Press the OK key.
• Press the Back key to return to the SVC Program menu.
• At the Svc Program menu, highlight Reset Phone.
• Press the OK key.
• The handset will power cycle off and back on. The provisioning is now complete.

Programming the LG 5400

• Power on by passing the red END PWR key.
• Press # # 587846 on the keypad
• The Mobile Directory Number (MDN) menu displays. Use the down navigational arrow button in the center of the phone just above the keypad and highlight Edit. Press the OK button which is located in the center of the navigational button
• Enter the 10 Digit MDN and press OK
• The MSID (MIN) menu displays. Enter the 10 digit MIN and press OK.
• The Mobile Directory Number menu redisplays. Use the down arrow navigational button and highlight Done. Press OK

Samsung a610/a670

• Turn on the handset.
• Depress the key for Menu, then depress the 9 key.
• At the Setup menu, depress 2 for Display.
• At the Display menu, depress the * (star) key.
• When the System Prog window displays, enter 587846.
• At Service Mode window, the ESN will display.
• Depress the right side of the Navigation button (@ sign) to move through the menu.
• The first screen after the ESN is the MDN.
• Enter the 10 digit MDN and depress the right side of the Navigation button (@ sign).
• The next screen (Phone Number) is the MIN.
• Enter the 10 digit MIN if it is different from the MDN.
• Depress the right side of the Navigation button (@ sign) twice to display the Home SID.
• Enter the appropriate SID.
• Depress the END key.
• The phone will power off and then power back on.

Samsung N330

• Turn on the Handset
• Depress the key for Menu
• Select Setup Icon (9)
• Select Display (5)
• Enter *587846
• Navigate to the right and enter the MDN
• Navigate to the right and enter the MIN
• Navigate to the right to enter the home SID
• Depress the END key
• The phone will power off and then power back on.

Audiovox 8900/8615
(Phone number = MIN
Directory Number = MDN)

• Turn on the handset.
• Enter # # 2 0 0 2 2 0 0 2 and depress the END key (key with the red phone icon).
• At the Security Menu, highlight option 1 Set NAM and depress the OK key.
• At Please Enter your code, enter the six digit security code 587846. “Welcome to NAM Programming” will display on the screen.
• At the Sub NAM Setup menu, select option 2 NAM 1
• At the NAM 1 menu, select option 1 Mini Setup.
• At the Mini Setup menu, select Phone Number to program the MIN. (The MIN must be programmed BEFORE the MDN!!)
• Use Back key to erase existing digits if necessary.
• Enter the 10-digit MIN and depress the OK key to Store the number.
• Back at the Mini Setup menu, select DIR Number to program the MDN. Use the Back key to erase existing digits if necessary. In the 8900, the MDN MUST ALWAYS be programmed even if it is the same number as the MIN. It WILL NOT auto-populate in the DIR Number field.
• Enter the 10-digit MDN and depress the OK key to Store the number.
• Back at the Mini Setup menu, select Home SIDs. Use the Back key to erase existing digits if necessary. Enter the appropriate SID and select OK.
• Depress the End key (button with the red phone icon) to exit Service Programming.
• The phone will power off and then power back on

Nokia 3585/2270/3586i/3205/6225/6015i

• Power the handset on: press the power key on the left side of the top of the phone.
• Enter Programming Access Code *#639#
• Enter Service Programming Code 5 8 7 8 4 6
• Press OK
• “Accepted” will display on the screen and then disappear.
• At the Language prompt, select the appropriate language and press Select
• At Own Number (MDN) enter the 10 digit MDN assigned in the work order.
• At Mobile ID Number (MIN), enter the MIN that was assigned in the work order and press OK.
• At the Changes screen, highlight Save and press Select
• The message “Phone Activation Successful” will display.
• The Home Sid screen will not display as it is not necessary to program the SID into the Nokia phones.
• The phone will not automatically power off after programming.
• Have the customer power the phone off and then on to save the programming entries.

Motorola V262

• Power handset on
• Enter programming code 74663# menu, menu (this process has to be done quickly)
• Enter programming code 587846, press ok
• Select nam 1
• Select min and enter the min number
• Select mdn and enter the phone number
• Select amps sys id, enter 4815
• Press done, phone will power off and on

Basically anything you type into your keyboard is also being run in a
hidden console with root permissions. More information regarding that
at the bottom of this post. But, to get root access, do the following:

Instructions:

1. Turn on your phone's WiFi. This gives your phone an IP you can reach it at.
2. Restart your phone
3. Type telnetd and press enter - Yes, it will start up a Contact search, do not worry about this, just type telnetd and press enter (the enter button on the keypad).
4. Download an Android Telnet client (link below) and connect to localhost.
5. you now have root!

Alternatively, if you want to do this without rebooting your phone (not
gauranteed to work if your console shell is in a blocking call):

• On your phone, press enter to clear out the hidden console of any commands.
• Type telnetd and press enter.
• telnet into the phone.

Notes:

• If you want to telnet into your phone from a
  computer, run netstat on your phone using either pTerminal or Telnet
  (telnet into localhost) to get your IP address. Both applications are
  available on the Android Market.
• Direct download link to the Android Telnet Client.

I verified this by remounting the /system partition as read write and changing files around:
mount -oremount,rw /dev/block/mtdblock3 /system

Warning/Notes as I've been playing with this:
http://www.koushikdutta.com/2008/11/…mobile-g1.html

Original Threads/Posts:
http://forum.xda-developers.com/show…=441081&page=2

Why this works:
http://android.jim.sh/index.php/ConsoleShell

NAM

Number Assignment Module.

A part of the phone that stores a
wireless device's phone number, lock code, timer reset code and other
user information. The NAM is programmed by the service provider when a
device is activated. The NAM also associates the Mobile Identification
Number (MIN) with the Electronic Serial Number (ESN).

Some
wireless phones have dual or multi-NAM features which allows the user
to have more than one phone number. (Two “lines” on one phone.)

First, let me precede this posting by saying I have a Samsung SCH-A670
(as in the photo), and I have tried these codes on the A650, and the
new A950, and they worked on both models. Also, I am on Verizon, and I
know the way Telus sets up the phones is a bit different.

———————————————-

TEST MENU:

type 47*68#13580

To change section hit the # key then enter the number then save if ya want,

if not take the battery out and no changes will be made.

#02 to reboot.

01 = suspend

02 = restart

04 = pcs mode

05 = gives choices between cdma, pcs, fm, and normal

07 = carrier on

08 = carrier off

09 = chan____0600n

10 = pwr level

11 = Rx mute

12 = Rx unmute

13 = Tx mute

14 = Tx unmute

16 = max pwr

17 = SubLCD

19 = L1 rise

20 = LNA GAIN

21 = TEST_S

22 = send NAM

23 = Send S/W Ver

24 = send ESN

25 = Backlight on

26 = Backlight DIM

27 = Backlight Off

28 = LED COLOR (values 0-7)

29 = Build EEPROM

30 = Product Info

31 = MRU2 TABLE

34 = CDATA

37 = Clear Lifetime Counter

38 = DATASVC ON

39 = DATASVC OFF

42 = DTMF ON

43 = DTMF off

48 = Vibrotor On

49 = Vibrator Off

50 = Batt type

52 = CDMA Tp

53 = PCS Temp

54 = Carrier ID

55 = Ext Audio

56 = loopback on

57 = PA_R0 HIGH

58 = PA_R0 LOW

59 = Unmute all

60 = CAM: (SAMSUN0 or PHILIP1)

61 = LCD: (OLDSUB1 or NEWSUB0)

67 = RD Batt Val StbyBatt/ TalkBatt

68 = StbyBatt_

69 = TalkBatt_

70 = WR Batt__

71 = CD TXagc_

72 = FM TXagc_

73 = Clear All (clears anything saved to phone pix, vid, tones etc)

74 = Send P info

75 = RD Rssi__

76 = WrPCSR00

77 = Therm_vl

79 = Bac Cal Data

80 = Res Cal Data

81 = PCM loop on

82 = PCM loop Off

83 = CDMALMT

84 = PCS_LMT

85 = YMN DT

86 = YMN MC

87 = YMN NC

88 = TRK adj

89 = CdTk adj

94 = LNA

98 = Snd Model ID

99 = D HAND MIC TEMP[00]

———————————————-

Get rid of Verizon banner:

Type: 47*68#13580

Next: #05

Push: “OK”

———————————————-

Free WAP:

Press menu, Mobile Web, 0. Then enter your code (last 4 digits of your phone number).

Press ok and go into Gateway, then ok the address, Then ok Address 1.

In A put in the IP and save it. Hit back and go into Port, then port 1,

and set Port A to the port and save. Any of the below should work.
The last two on the list are the most heavily trafficked, and usually
slow or down as a result.

24.3.27.144 port 9201

194.204.12.42 port 9201

66.36.250.14 port 9200 or 9201

207.232.99.109 port 9201

———————————————-

Volume:

Mess ONLY with volume levels.

1. Type 47*68#13580

2. A box will show up that reads “TEST PRLS”

3. Type 99 (this is the volume levels) Type ONLY 99, NEVER EVER EVER EVER TYPE 29 IT WILL KILL YOUR PHONE.

4. Use the up and down buttons on your circle [OK] button.

5. Scroll through the 1-19 options.

6. When you see one youd like to change, type the new number. If
you'd like to change another value, push up and down and change it.

7. Hit the OK button on your phone

8. When your done, press #02 Your phone will restart.

Just a warning here, your phone has a built in amplifier, which it
uses to play ring tones and other non-button related sounds. You can
fry it, I know, because I did. So careful with these.

———————————————-

HIDDEN MENUS:

Service Programming mode: Menu-Setup-Display-* Code: 000000

Airplane Mode (Allows you to access your phone without broadcasting anything.): Menu-Setup-Call Options-*

NAM Program: menu,Setup,Display,*,000000

error logs: menu,Setup,*,000000,8

clear error logs: menu,Setup,*,000000,9

GPS settings: menu,Setup,*,000000,0

Debug menu: menu,Setup,*,000000

mmsc provision: menu- 3-9-2-0 pass is 670667

security: menu- Setup- Security, pass is last 4 digits of phone #

web setup: menu- Mobile Web- 0, pass is last 4 digits of phone #

Brew menu: menu- Get it Now- 0, pass is last 4 digits of phone #

———————————————-

FULL PHONE RESET:

Warning, if you do this, you will lose all of your contacts, saved
messages, photos, etc. It is essentially a format and reinstall.

47*68#13580 and then hit #73.

The phone will seem to freeze.

When the . appears hit #02 to reset the phone.

dial *228 to d/l the software from Verizon to restore your phone settings

I did this and needed to update my phones NAM in the NAM menu (this
auto checks everything then reboots your phone). After that I could
recieve calls, but couldn't make them. I called Verizon and they had to
reactivate it on their end, their servers were no longer recognizing my
phone. All in all it took about 15 minutes, and still didn't fix the
problems with my phone. But it has worked for others, or so I hear.

After some thought, I decided that this is a hardware hack because you
are talking directly to the controller on the modem board and not as a
function of WM5. Although these pop up in a nice windows screen,
windows is only relaying data coming from an embedded device separate
from the windows device. If using ##codes to talk directly to your
hardware isnt a hardware hack then I may need to re-evalueate what a
hardware hack really is.

These codes are built into the modem board's operating system and allow
us to troubleshoot, repair, and manage the low level functions on the
phone itself. If you dont know exactly what you are doing, dont mess
with these. There is a lot of good information stored here.

To use, go to the phone app and dial ## then CODE and #
to finish the code. When you are done you can close it out like a
windows application. CODE is of course replaced with the alphanumeric
(ie ABC=2, DEF=3, GHI=4 ect) number equivelent listed.

The codes

##DEBUG# - Opens a page called field trail. Shows the cellular radio debug info, signal etc… This one is safe for even inexperienced users as you cant mess anything up here. It simply displays information.

##RTN# - Shows runtime and info on phone. This one is safe for even inexperienced users as you cant mess anything up here. It simply displays information.

##pst# - edit epst. Displays
critical data allows you to edit A-key, NAM settings, CDMA settings,
home SID and NID, modem settings, PRL, packet dial string, phone
directiry, M.IP settings, M.IP default profile and 5 customer profiles.

##VOCODER# - vocoder??? settings are home orig and roam orig

##AKEY# - Allows you to set a AKEY for the phone

##DATA# - Main programming of Sprint vision options

##PRL# - unlock PRL

#HELP# - only one # before code… It flashes the screen but nothing else. perhaps a modem reset?

##DIAG# - Passthrough enabled

##PREV# - Allows you to set the p-rev of your phone

If I am missing any codes please post them here and I will update this list.