[DEV] GSM phone calls on Nexus 7 3G

Synman

Recognized Developer
Nov 2, 2010
826
547
0
Outside Philadelphia
www.shellware.com
Asus is useless.

Our device can enter APX mode (Power+Volume Up) which we should be able to access with nvflash, but I've got no idea how to use it.
I played with nvflash quite a bit back in the day with my gtab while working (loosely) with Clemsyn to do stuff there.

We always had partition map files to work from. Something I'm guessing we will have to build for the N7.

Sent from my Nexus 7 3G using Tapatalk 2
 
  • Like
Reactions: jitzbox

SliderSD

New member
Nov 30, 2011
1
2
0
Hey guys, any new information here?

I have only a little bit experience in deeper kernel/android modding, but I want to help where possible!

Thanks for all your effort!

Sent from my Nexus 7 3g using xda app-developers app
 
  • Like
Reactions: denzel09 and phonic

Shinj1EVA

Member
Mar 4, 2008
45
43
0
I got my new Nexus 7 3G in today. We need to figure out how to flash the baseband without destroying the IMEI. Unfortunately, I know next to nothing about baseband hacking. I've contributed as much as I can to this cause, time for someone with a deeper understanding of the baseband to take the torch.

I'll keep the "broken" tilapia for a few days if someone can figure out how to restore the IMEI, but it's got to go back to Google soon.

Synman, any ideas?
 

cmstlist

Senior Member
Jan 11, 2010
3,349
513
243
Toronto
What was the exact procedure you used to actually get that baseband flashed that borked your IMEI? Maybe if there's a way to dump that partition and the one from your new Nexus, you can find some sort of difference.

Sent from my Nexus 7 HSPA+
 

insel01

New member
Apr 21, 2010
2
23
0
Lübeck
sorry, its german

Hallo! Bin über meinen Beruf in die tegra3 Struktur geraten und bin einer Lösung für Telefonanrufe sehr nahe! google hat eine Sperre zum Anmelden in die Zellen der Mobilfunkbetreiber gesetzt.
Ich kann bis jetzt Anrufe im Vorwahlbereich meines Standortes führen (nur Festnetz), nur noch keine Anrufe erhalten oder zu Mobilnummern führen.

Ich muß leider erstmal prüfen ob ich hier durch meinen Arbeitgeber oder anderen Firmen Probleme bekomme und hoffe bis Weihnachten meinen jetzigen Lösungsansatz mit Euch teilen zu können!?
 

mburris

Senior Member
Dec 5, 2007
260
42
0
Hallo! Bin über meinen Beruf in die tegra3 Struktur geraten und bin einer Lösung für Telefonanrufe sehr nahe! google hat eine Sperre zum Anmelden in die Zellen der Mobilfunkbetreiber gesetzt.
Ich kann bis jetzt Anrufe im Vorwahlbereich meines Standortes führen (nur Festnetz), nur noch keine Anrufe erhalten oder zu Mobilnummern führen.

Ich muß leider erstmal prüfen ob ich hier durch meinen Arbeitgeber oder anderen Firmen Probleme bekomme und hoffe bis Weihnachten meinen jetzigen Lösungsansatz mit Euch teilen zu können!?
Rough Translation:
Hello! Here at my job I work with tegra3 and I am very close to finding a solution to making calls. Google has a lock to log into the cells of the mobile operators.
My progress so far: I can make outgoing calls to numbers with the same area code (landline only), but not receive incoming calls from mobile numbers (Possibly same area code only).

I have to make sure I'm not breaking any NDAs with my company before I can post this half-working solution.

Thanks meter is on the left :)
 
Last edited:

bertliza

New member
Dec 2, 2012
3
2
0
Finding Nexus 7 IMEI

Synman said last Dec 17, 2012:

//The IMEI # that I got stuck with appears to be a well known "generic" "black listed" IMEI. It is not allowed on the ATT network.//

As I understand in this, and other similar comments, there is a problem in determining the IMEI of each unit.

Some phones have their IMEIs indicated in the Settings, About Phone,

but IMEI of the Nexus 7 is not indicated in the Settings, About Tablet.

The tablet's IMEI can be found however in:

Data from Google Accounts, Dashboard

Android devices
Name: Asus Nexus 7
More data stored about this device
 

InvaderX

Member
Dec 24, 2012
24
49
0
@bertliza
The IMEI is indicated in Settings, About Tablet, Status.. You have just to scroll the popup down.

BTW: How can I find out if my IMEI is blacklisted?

@insel01
Es wäre toll, wenn du noch irgendwelche Informationen geben könntest um zu helfen, auch wenn du uns den hack nicht verraten darfst. Vielleicht kannst du ja die Lösung anonym veröffentlichen (bzw. jemanden hier per PM schicken), damit du keine Schwierigkeiten bekommst
[It would be great if you could give more information to help, even if you are not allowed to reveal the hack. Maybe you can publish the solution anonymous or send it somebody via PM, so you don't get in trouble.]
 
Last edited:
  • Like
Reactions: bertliza

Shinj1EVA

Member
Mar 4, 2008
45
43
0
Synman said last Dec 17, 2012:

//The IMEI # that I got stuck with appears to be a well known "generic" "black listed" IMEI. It is not allowed on the ATT network.//

As I understand in this, and other similar comments, there is a problem in determining the IMEI of each unit.

Some phones have their IMEIs indicated in the Settings, About Phone,

but IMEI of the Nexus 7 is not indicated in the Settings, About Tablet.

The tablet's IMEI can be found however in:

Data from Google Accounts, Dashboard

Android devices
Name: Asus Nexus 7
More data stored about this device
That's assuming you linked up your device with a Google account. Also, what's reported there is just what the OS sees from the RIL. So a much more direct method would just be to request it from the baseband processor via AT commands. We're not having a problem determining the IMEI number. Once we flash another radio, the baseband starts reporting a blacklisted IMEI number instead of the original, valid IMEI that shipped with the device.
 
  • Like
Reactions: bertliza

Synman

Recognized Developer
Nov 2, 2010
826
547
0
Outside Philadelphia
www.shellware.com
I got my new Nexus 7 3G in today. We need to figure out how to flash the baseband without destroying the IMEI. Unfortunately, I know next to nothing about baseband hacking. I've contributed as much as I can to this cause, time for someone with a deeper understanding of the baseband to take the torch.

I'll keep the "broken" tilapia for a few days if someone can figure out how to restore the IMEI, but it's got to go back to Google soon.

Synman, any ideas?
I'm in a similar place although I have a couple last minute ideas before I ship the bad one off. I would expect to at least be able to do an emergency call with the bad IMEI but even that function fails. So while the RIL and the baseband are talking at a base API (interface) level there appears to be other things at play.

Perhaps our German friend can provide something substantive. At this point though it appears to be nothing more than a ruse.
 

Synman

Recognized Developer
Nov 2, 2010
826
547
0
Outside Philadelphia
www.shellware.com
@insel01
Es wäre toll, wenn du noch irgendwelche Informationen geben könntest um zu helfen, auch wenn du uns den hack nicht verraten darfst. Vielleicht kannst du ja die Lösung anonym veröffentlichen (bzw. jemanden hier per PM schicken), damit du keine Schwierigkeiten bekommst
[It would be great if you could give more information to help, even if you are not allowed to reveal the hack. Maybe you can publish the solution anonymous or send it somebody via PM, so you don't get in trouble.]
^^^^ This!
 
C

cjsspape

Guest
Assuming it wasn't just some troll trying to get people's hopes up. Anyone can create an account and claim to be able to do something. The fact that our hero hasn't returned seems to indicate that it was just all BS.
Somebody please correct me if I'm wrong. I've been following this and see the progress and am absolutely convinced this is possible via software modding (I'm waiting on the new year to get this device so I may try to lend whatever I can to this) As I know it the tegra3 is the cpu/gpu and handles those processes. The ability for telephony services are handled by the radio which is where the problem is with flashing a compatible radio. I'm failing to see the connection of his claims to the problem at hand. I know from working/learning to compile cm & aokp for the gnote2 working with source and a new device tree forked from the international note we had to change the ro.telephony ril from the default samsungexynos ril to a more compatible qualcomm ril reflecting the radio network settings properly. Just from my limited experience it seems like that may be a similar issue here where the radio settings have to reflect the hardware just right. I may be way off base but trying to throw things out to help the cause.

Sent from my KFTT using xda premium