You are here: Home » Apple Inc. » iPhone Hacked in Hong Kong on Smartone-Vodafone

iPhone Hacked in Hong Kong on Smartone-Vodafone

by Vinko on September 16, 2007

Many of you know that I was in North America this past two weeks and was also in New York City.

While at NYC I spent some time at the 5th Ave. Apple Store gaining some hands on experience with the iPhone. This was the first time I saw the iPhone in person and played with its applications and Multitouch interface. I will talk more about this in a separate post.

Getting back to the topic in question. While in NYC last week much had transpired regarding the unlocking (release of the lock down of the iPhone to the AT&T carrier). End of last month iPhone SIM Free announced that they had a software to unlock the iPhone from AT&T iron fist. They said that they will be selling the software on a per user (iPhone) license within a few days. Weeks had past and no announcements.All of a sudden last Sunday iPhone SIM Free announced 4 resellers for their software and on Monday this past week the resellers started to sell the software within hours the pre-order were full and Tuesday was when the iPhone SIM Free resellers started to fulfill their pre-orders.

Then Tuesday evening there was news of the Internet that the iPhone SIM Free software had been hacked. On Wednesday morning news of a verified OpenSource hack was spreading throughout the iPhone hacker community. On that same afternoon a beta application to unlock the iPhone had been made available. Later that evening written guides for people to follow start to appear. I personally like the guide by ModMyiPhone.com.

I told this to my friends back in Hong Kong and one of them asked me to get an iPhone for them and unlock it using the OpenSource method.

I was very excited to have the opportunity to try the hack, while at the same time a bit worry that I will create a USD400+ iPhone Brick if the hack fails.

Unfortunately, I was not able to get a clear WiFi signal from the hotel room and none of the Starbucks had free WiFi access and requires the patrons to be T-Mobile customers.

I even attempted to use the WiFi network at the 5th Ave. Apple Store, but the signal was too weak from the street level. I thought setting up my MacBook Pro and a brand new iPhone, to hack the iPhone using Apple’s WiFi network was going a bit too far.

So, I had to give up and hope for the best when I return to Hong Kong with the brand new iPhone.

Tonight I got off the plane and as soon as I had unpacked and clean up, I attempted the hack. It was amazing aside from having to change my home WiFi network’s channel, I did not have any other problems with the hack.

Within 45 minutes I had an iPhone on the Smartone-Vodafone network. Made a test call and then used the Edge network to connect to the Internet.

As far as I know this is the first published unlock hack of an iPhone in Hong Kong using the pure software (free) method, without reprograming the SIM card or opening up the iPhone itself.

[Update: October 3, 2007]
The above described hack was done on a Macintosh, running Mac OS 10.4.10, iTunes 7.4.1, iPhone firmware 1.0.2, iNdependence 1.2.1a and the “iUnlock” application from iPhone Dev Team dated September 12, 2007.

[Update: October 4, 2007]
For all those who are trying to get their EDGE connection working, please check out either Ross Barkman’s GPRS Info page or ModMyiPhone’s “Carrier APN Settings” page for assistance. If the carrier you’re trying to connect is not listed on the ModMyiPhone Wiki page, please do your part to add to the list.

[Update: October 4, 2007]
I am happy to confirm that I was able to synchronize successfully an unlocked iPhone to iTunes 7.4.2 running on the Macintosh.

[Update: October 5, 2007]
All, especially those thinking of switching to Smartone-Vodafone.

I believe that some of the sales people at the stores are now telling customers that the “Internet Browsing Plan” is for 3G Voice Plan customers only. This is based on feedback from others who have spoken to Smartone-Vodafone.

I personally have a 3G Voice Plan from a previous phone, so the question never came up. I will try to confirm this at a store this afternoon.

One other thing is relating to the so called “extra features” that Smartone-Vodafone is offering for extra fees are not worth it. Do not fall into the trap. Also be aware of their “Fair Use” policy to avoid violating any of their policies.

[Update: October 23, 2007]
Instead of my readers having to scroll down to the comments below or email me about the following must have knowledge about hacking your iPhone. I will post it here for all:

  • Activate the Voicemail button so that it calls your carrier’s Voicemail service.
    Prior to doing this hack you will need to know the code to dial from your own mobile phone to access your carrier’s Voice Mail service.For example, Smartone-Vodafone in Hong Kong, the code is “138″ to reach the Voicemail from your OWN mobile phone.

    1. Go to the Phone button;
    2. Click on the Keypad button;
    3. Type the command: *5005*86*XXX#
      • where “XXX” is the access code for your carrier’s Voice Mail service. In my example, I will enter “138″ in place of the “XXX”;
      • if your carrier’s Voice Mail service has a number in the format *XXX, then you should enter the command *5005*86+XXX# instead.
    4. Click on the Call button.
  • Determine the firmware version of your iPhone straight out of the box from Apple before any hacking, activation or unlocking.
    1. Go to the Phone button;
    2. Click on the Keypad button;
    3. Type the command: *3001#12345#*
      to enter the Field Test mode;
    4. Select the Version item

    The following are the definitions of the “Firmware version” values:

    • 1.0.0 firmware has the modem firmware version 03.12.06_G
    • 1.0.1 firmware has the modem firmware version 03.12.08_G
    • 1.0.2 firmware has the modem firmware version 03.14.08_G
    • 1.1.1 firmware has the modem firmware version 04.01.13_G
    • 1.1.2 firmware has the modem firmware version 04.02.13_G
    • 1.1.3 firmware has the modem firmware version 04.03.13_G
    • 1.1.4 firmware has the modem firmware version 04.04.05_G
    • 2.0 firmware has the modem firmware version 04.05.04_G (all 1st generation iPhone stays at this modem firmware)
    • 2.0 firmware has the modem firmware version 01.45.00
    • 2.0.1 firmware has the modem firmware version 01.48.02
    • 2.0.2 firmware has the modem firmware version 02.08.01
    • 2.1 firmware has the modem firmware version 02.11.07
    • 2.2 firmware has the modem firmware version 02.28.00
    • 2.2.1 firmware has the modem firmware version 02.30.03
    • 3.0 firmware has the modem firmware version 04.26.08
    • 3.0.1 firmware has the modem firmware version 04.26.08
    • 3.1 firmware has the modem firmware version 05.11.07
    • 3.1.2 firmware has the modem firmware version 05.11.07

[Update: November 21, 2007]
On November 12, the German courts ruled against T-Mobile and issued an injunction preventing T-Mobile from selling Apple iPhones requiring a 2 years contract. The injunction also prevents T-Mobile from selling Apple iPhones with the so called “SIM lock” that prevents users from switching the Apple iPhone to any other carriers.

This evening T-Mobile announced that they will be selling the Apple iPhone for EUR999.00 without a 2 years contract and continues to sell the Apple iPhone for EUR399 with a 2 years contract commitment. In addition T-Mobile will remove the SIM lock for any customers who wishes, including any customers who previously purchased the Apple iPhone from them.

This is all quite interesting. As there is now official “unlocked Apple iPhones” in the market. What will the iPhone hacking community do? Will they stop their continue unlock hack of the iPhone?

Last week the iPhone firmware 1.1.2 had been unlocked for iPhones with firmware 1.0.2 and 1.1.1, but not brand new out-of-the-box iPhones with firmware 1.1.2.

May be the iPhone hacking community can work on jailbreaking future iPhone firmwares and continue allowing unauthorized 3rd party native application on the iPhone. Hold on a sec… Apple will be doing the same in the coming February.

I guess the work and efforts of the iPhone Hacking community had succeeded. With the helps of various courts (first the French and then German), by Spring of 2008 the iPhone with be officially open to all networks and contains sanctioned 3rd party native applications.

This is another example of people power.

[Update: December 1, 2007]
Sorry for the late posting of my findings regarding the most appropriate package(s) to subscribe to from Smartine-Vodafone.

After one and a half month of use, I have a fairly good idea whether my original proposed “Internet Browsing” and “2G/3G Data” plans are sufficient to allow for the freedom of using the iPhone, without worrying about the amount may be charged for the privilege.

Although these packages are not unlimited usage plans, they do provide enough data (GPRS/EDGE) allowance to cover the typical use of an iPhone. This includes features like: Mail, Stock application, Weather application, YouTube application, web browsing and various 3rd party applications that require Internet access.

These Smartone-Vodafone plans are: the HKD38.00/month “Internet Browsing” and the HKD118.00/month “2G/3G Data” plans; both these are non-commitment/contract prices.

As explained in my previous posting, for some undisclosed reason, the “Internet Browsing” plan does not cover all data usage on the iPhone, therefore one needs to also subscribe to a “2G/3G Data” plan. Otherwise you will be charged a data charge of HKD0.06/kb.

My test last month had me using 5.5MB of additional data usage aside from my “Internet Browsing” plan allowance. If I did not have a “2G/3G Data” plan I will have to pay an additional HKD330.00. If I had the HKD48.00/month “2G/3G Data” plan (the lowest available), I will still have to pay an extra HKD100.00.

Therefore I found the HKD118.00 “2G/3G Data” plan is the most economical choice, while allowing me to use the iPhone without any worries of being charged an extremely high data usage fee.

I hope these findings will help my fellow iPhone users in Hong Kong.

[Update: November 1, 2008]

I have now confirmed that the Internet Browsing plan; now known as IOM plan, indeed only cover HTTP and the corresponding HTTPS traffic. So any web traffic through Mobile Safari on your iPhone and any applications; whether it is downloaded from the Apple AppStore or unauthorized 3rd party, that uses the HTTP Posts and Gets will be covered in the Internet Browsing plan.

Any POP3 traffic will be outside of the Internet Browsing plan allowance and Smartone-Vodafone has a separate POP3 Email monthly plan for HKD30/month. As a result any IMAP or Exchange Push traffic will be count as regular Data traffic. I think this omission of IMAP and Exchange traffic from the Email monthly plan is the wrong thing to do for Smartone-Vodafone. Why would anyone choose POP3 over IMAP or Exchange email is beyond me. Especially when the iPhone is only one of many devices most users will use to access their emails, and definitely not the primary device. I urge Smartone-Vodafone to listen to its customers and change their Email monthly plan.

Related Posts with Thumbnails


{ 124 comments }

admin February 19, 2008 at 22:27

Hi Ana,

No one other than Apple can tell you when the iPhone will be officially available in Hong Kong through one or more mobile carriers.

The educated guess is that it will be latter half of this year, but I think that really depends on the negotiations Apple has with the local carriers.

I personally hope that local carrier is Smartone-Vodafone. In my opinion they are the only mobile carrier in Hong Kong really demonstrates that they do want to do better and provide the best possible customer care.

Note that I am talking about wanting to do better and customer care, they are definitely not the best in quality in terms of cell coverage voice quality.

Please note that now all versions of the iPhones are “easily” unlockable, the retail prices should be much much lower than what HK phone retail stores are charging for 1.1.3 (HKD48xx.00) and 1.1.1 (HKD68xx.00).

Note that the cost of purchasing an iPhone from one of the US Apple Store comes to about HKD3400.00 including state taxes. You should keep this in mind when checking out the HK mobile phone retail stores.

Ana February 20, 2008 at 17:01

You can said in your previous messages that you offering unlocking phone for free,:-) if i buy one from US can you help me to unlock it.. buy you a cup of coffee….

Cheers..

Vinko February 20, 2008 at 17:53

Hi Ana,

I believe I said there is a “fee”, but I will be using the “free” Opensource method to unlock your iPhone.

Although, since the unlocking of OTB (out-of-the-box) 1.1.2 and 1.1.3 iPhones are so simple, I will no longer do the unlock for people but will only charge for my time when I have to repair the unlocking if people mess up their iPhone in some way.

The really easy full proof way to unlock an OTB 1.1.2 and 1.1.3 iPhones is to use the ZiPhone method. I am confident of the Mac OS X version.

Brian March 1, 2008 at 00:45

I have installed the Build11 AppSupport with the Regional Format Patch and found out that the SMS contact name matches on my contact list. BUT i found out that when a PCCW (One of many Hong kong Carrier’s) user sends me a message, i get 852XXXXXXXX instead of the contact name. All other carrier’s are fine except PCCW. Is there a way i can edit the PhoneNumberTemplates for PCCW so that it can match?

In the PhoneNumberTemplates hong kong has:

hk 852 001;009;0080; – - ########

And here is the AppSupport1.1.2 that worked for me before:

hk 852 00 – 0 8 <-PCCW
hk 852 00 0 3 8
hk 852 40 0 0 8
hk 852 50 0 0 8
hk 852 70 0 0 8
hk 852 90 0 0 8

How can i edit the PhoneNumberTemplates to the ‘PCCW’ so that they match?

I tried:
hk 852 001;009;0080;00038 – - ########
hk 852 001;009;0080; – -;3 ########

But it didn’t work. Any ideas?/Suggestions? I’m sure i’m doing something wrong here. Help please

shaky March 1, 2008 at 15:10

Hi vinko

Just upgraded to 1.1.3. iSMS and SDSD no longer work. Numbers were not recognised until I installed the iClarified appsupport patch. Now most numbers are recognised. One wasn’t. Not sure if they were on PCCW.

One thing, Edge doesn’t work. I have Smartone-Vodafone in the APN settings. But no luck.

vinko March 1, 2008 at 18:40

Hi Shaky,

Yes, since 1.1.3 software that assumes the old structure and locations of files no longer works. This include iSMS, SMSD and weTools.

Every time a firmware upgrade us applied you must modify the AppSupport files to re-enable the recognition of local telephone numbers for caller ID.

At the moment the iClarified and other AppSupport hacks do have problems with PCCW mobile phone numbers, but the ones where you modify the AppSupport binary file yourself does not.

At one point I did have EDGE not work on Smartone-Vodafone after upgrading to 1.1.3, but after a restore to factory 1.1.3, re-jailbreak and re-unlock fixed the problem.

Given that it is now so easy to jailbreak/unlock using ZiPhone, you should try restoring your iPhone back to 1.1.3 and start again.

BTW: I no longer assist people to unlock for a fee since it is so easy to do so, but I will assist people who are not technically inclined and have messed up their phone.

shaky March 1, 2008 at 20:26

Thanks. To do a factory restore you put the phone in recovery mode and connect to itunes right?

thanks

Vinko March 1, 2008 at 21:31

Hi Shaky,

No, to do a factory restore you should click on the “Restore” button in iTunes, while holding down the (“Shift” key for Windows user, or “Option” key for Macintosh user). That is because firmware 1.1.4 is out.

When you do so, iTunes will ask you to locate the firmware package to restore your iPhone with. You should point it to the iPhone firmware 1.1.3 you previously downloaded.

shaky March 1, 2008 at 23:01

Well, tried that three times now. Still no EDGE. Will try more tomorrow. Thanks for your help.

Brian March 2, 2008 at 01:56

Hi Vinko,

“At the moment the iClarified and other AppSupport hacks do have problems with PCCW mobile phone numbers, but the ones where you modify the AppSupport binary file yourself does not.”

Is there a way of modifying the AppSupport 1.1.3 like how we do in the 1.1.2?
pntedit no longer works for 1.1.3.

Hi Shaky,

about your ‘EDGE’ problem. Try this:

- click Installer-icon on iPhone,
- click Install-icon, scroll down and click Utilities,
– scroll down and click BossPrefs, click Install, click Install, wait a little…
- click home-button, slide “slide to unlock” to the right
- click BossPrefs-icon on iPhone,
(if gui shows that Wifi is off, even if you see the Wi-Fi-icon on the statusbar: click ON)
- Edge: click ON (ie. you turn it off), wait a little, click ON again
If you now wish that EDGE shall always be turned off: click ON (ie. you turn off to OFF)

Hope that helps

Vinko March 2, 2008 at 11:44

Hi Brian,

I do not know how you would correct the problem on a Windows machine, as. I use a Macintosh.

Jason March 2, 2008 at 12:06

Hi Vinko,
Thanks for all the info. I have the recommended SmarTone account. I was wondering if you get the blue “E” in the box next to SmarTone VodaFone at the top of your screen. Mine is just a blue box which I believe means I am not getting full EDGE capability. Thanks in advance.

Jason March 2, 2008 at 12:17

I have entered the appropriate APN as advised above. Any recommendations?

shaky March 2, 2008 at 12:27

Hi Brian

Thanks, yeah, I’d tried that. No use.

Vinko – any way to downgrade to 1.1.1 or 1.1.2 and see if that works?

thanks

shaky March 2, 2008 at 12:33

Seems other people have the same problem:

http://www.modmyifone.com/forums/showthread.php?t=27307

shaky March 2, 2008 at 13:01

The settings say:

APN address: SmarTone-Vodafone
Username:
Password:
Authentication: Normal

What’s that Authentication section? I don’t have that part on my iphone.

Vinko March 2, 2008 at 23:49

Hi Jason,

Sorry I don’t understand your question, “I have entered the appropriate APN as advised above. Any recommendations?”.

Is your EDGE not working either?

Vinko March 2, 2008 at 23:56

Hi Shaky,

You can try downgrading to 1.1.1 but you will need to virginize. It is quite involved.

As for the EDGE settings, the iPhone does not have the option to set the Authentication method.

Kamran March 4, 2008 at 13:56

Hi,

I hv upgraded to 1.1.4 and unlocked (BL 3.9). Used ziphone 2.5. Having same problem for app support. But in my case one no from 3 (dualband) comes at 852………. while all others comes as +852……….. . Quite suprizing but not sure how to do? Earlier it was wokring perfrect when i was on 1.1.2. (Hv upgraded my phone from 1.0.2 – 1.1.1. – 1.1.2 – 1.1.3 – 1.1.4)

Also can not use Ibricker to amend the templates as it does not recognize the phone and asking to “Free the iphone” but i am afraid it may mess up things and i may hv to restore/downgrade/upgrade again.

Also noticed now that signal strength not so good while others reporting on various website (like iphone atlas) that signal strength was boosted after upgrading.

Any help??

Thanks

Best regards.

Keane March 7, 2008 at 16:26

Hi,

I may be a bit off-topic here but I was wondering if you could tell me where the best place to buy an unlocked iphone is in Hong Kong. Also a guide on prices would be great.

Many thanks.

Vinko March 7, 2008 at 18:10

Hi Keane,

Not that I do not want to help you, but I really do not recommend you purchase an unlocked iPhone in regular phone retail stores in Hong Kong.

You can see my comments above as to why.

For example, I just had two colleagues purchased two unlocked iPhones from a store in Wanchai, and I had to help them redo the jailbreak/unlocking from scratch.

If you still insist on getting one, the phone store just outside of the Wanchai MTR exist at the corner of O’Brien Rd. and Johnston Rd. had good prices in the past.

BTW: Please note that the prices of unlocked iPhones are plummeting. Mainly because the retailers are worry that the new iPhone 2.0 firmware will be release soon, and most of all because the unlocking is now so simple many are taking my suggested method of asking a friend to get the iPhone directly from an Apple Store in the US or UK.

PS: if you are going to get an unlocked iPhone, you should make sure it has the 3.9 bootloader and not the 4.6. Any phone that was Out-of-the-Box 1.1.1 and earlier will have the 3.9 bootloader.

Unfortunately, it is not easy to determine the bootloader when you purchase, unless you install the Bootloader Info application via the Installer application.

shaky March 9, 2008 at 23:28

re bootloader, from modmyiphone:

check your iPhone’s serial number (on the back of the iPhone box). The 4th and 5th number are the week number your iPhone was produced in. (e.g., 7S726107… would be week 26). If that number is 45 or higher, you have the 4.6 BL (boot loader). If its 42 or lower, you have the 3.9 BL. If you’re week 43 or 44, you will need to check further by installing HW Info from Installer

However … ziphone unlocks all phones now. including those with the 4.6 BL

Keane March 12, 2008 at 23:12

Great feedback, many thanks.

12345 March 26, 2008 at 14:03

For the users who have a problem on caller ID .. please install an application called “AppSupport Patch (1.1.4) should solve

[Edit: Administrator]
This reader is referring to the unauthorized 3rd-party application found in the Installer application’s “iClarified” section. The iClarified source is a source that is automatically set up if you use ZiPhone to unlock your phone. If you used another method to unlock your phone you can add the source using the following URI: http://installer.iclarified.com

If you want to install the suggested application, you will need to ensure your iPhone’s firmware is version 1.1.4. If not you should choose the correct version that matches your iPhone’s firmware.

Comments on this entry are closed.

blog comments powered by Disqus

Previous post:

Next post: