Originally Posted by jlechner
Judging by the time spent since your post, I'm gonna go with yes. Lol. Nailed it.
Not much out of unknown today, must be dealing with his friends. Feel bad for the guy.
Sent from my Sprint/Virgin Mobile hybrid
Yeah, hes got a lot going on.
Back on topic now, after all that other stuff, have you tried to get your AAA shared secret? After reading I found that its phone specific just like the MEID and ESN, and sprint uses it to provision the phone. I also found that "secret" is the HA shared secret and its not phone specific. Some people cant get 3g and I wonder if this matters.
Maybe you know this but ill say it for anyone interested, getting to the AAA shared secret Isnt hard once you've done it once, I was using the wrong version of QXDM, youll need version 03.11.36. open it up and go to options/communications then set target port to the port your phone is on (make sure you dial ##diag#). Now in the command window type "spc 000000" no qutoes of course and 000000 = your msl. then type "requestnvitemread ds_mip_ss_user_prof" and itll show you some stuff, look at the lower stuff called DIAG RX item. theirs 16 lines for each password (AAA & HA). the characters after 0x are the keys. Its supposed to be 30 characters total. The weird thing is, I have a few characters beside the HA lines but all my AAA lines have zeros.
Edit... that first request command was for the profile 0 passwords , this is the command to get profile 1 "Requestnvitemread ds_mip_ss_user_prof 1" , which is also all zeroed out on mine. I wish someone that didnt take the vmfw could look at theirs and tell me if its all zeroed out.
Yesterday Unknownforce said his phone worked with a testers radio config but the testers phone didnt work with it. Maybe Unknown has his pass and the tester doesnt? Just trying to stir up some ideas here...
Want a good read? Check here