Re: Femto - IuH

Hi Sipos, On Sat, Oct 17, 2015 at 12:48:58PM +0200, Sipos Csaba wrote: I have no idea. The point is basically to find (surplus, second hand) femtocells on the market, that a) speak an Iuh interface (older models have URSL, UMA/GAN or other proprietary protocols) b) can be rooted somehow, so we can either replace the ipsec certificates, or disable ipsec towards the SEGW c) are available in quantities that make them interesting/useful to the community At sysmocom we tried very hard to find a femtocell manufaturer who would be willing to sell certain volumes to us, where we could then sell them to the open market (including the community). However, this has not been successful for several reasons, including: * the quantities of femtocells are typically large, much larger than we would likely be able to sell * the vendors typically work with one supplier of the respective SEGW/HNBGW and associated management solution, and they don't like (or maybe even are contractually forbidden) from selling to anyone who does not at the same time operate that core network infrastructure. As we are building our own infrastructure, they don't like that. That was years ago. While those units are still quite hackable, they predate Iuh by some years and have some kind of proprietary framing around the RANAP (Iu) messages. So if you or anyone else on this list has some suggestions, it would of course be more than welcome. Some people are looking into now obsolete Huawei models (based on vxworks), where there was some presentation earlier this year: http://www.slideshare.net/arbitrarycode/adventures-in-femtoland-350-yuan-fo… It still needs to be seen what models using what firmware release are vulnerable as described in the slides, if the results can be reproduced, etc. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)