My take on how Smart Plug n Talk does it.

Hmm, this blog should have been posted December last year, however I was not able to finished it. So here it goes..

December 2008, Smart launched it's Plug 'n Talk service. The premise of the service is to use your Smart SIM to call and send SMS over the Internet without your GSM phone. So how it is done?

Dissecting the service, it has SIM authentication over IP, voice call and SMS. The voice call is VOIP, while the SMS is the same SMS but the medium of transport is IP.

However, to make use of the SIM, like be able to call from PC to Mobile and vice-versa and at the same time get billed from the SIM's load (yes you still need to top-up the SIM to use the service-- it is not free :D ), the SIM should be authenticated and register in the mobile operator's system. To authenticate the SIM without using your mobile device and still be online on the mobile network perspective,the technology EAP-SIM could be playing in this scenario. EAP-SIM is Extensible Authentication Protocol for GSM Subscriber Identity Module.

EAP have been around and used in the other wireless technology, the WiFi for wireless and even for wired system.

Since it connects and authenticates over IP to Operator's GSM network, there should be a gateway between IP to SS7.

The authentication server could be a RADIUS server that authenticates, authorizes and accounts the SIM usage over IP. This is almost the same with the HLR (Home Location Register) of the mobile network.

So how? In GSM network HLR database holds the IMSI and the MSISDN (acronyms used in mobile domain), the mapping of the actual dial-able number and the unique number inside your SIM plus the shared secret key called "ki"and other subscribers information. So when a SIM gets online by powering your mobile phone, it authenticates through the HLR.

In WiFI or in fixed network, the access control is done on controlled port access device. i.e. wifi access points, LAN switches, firewalls or even routers. They are called the authenticator.

While software needs to be installed or configured on the client side. This is called the supplicant (Smart Plug n Talk). Until the client is authenticated, the supplicant can only communicate with the RADIUS Server using the EAP. EAP supports variety of authentication methods including EAP-SIM authentication.

So a RADIUS can be the gateway between IP netwrok to GSM network. This RADIUS server somehow acts as a VLR (Visitor Location Register). So the SIM looks like in roaming mode.

So when inserting the Plug 'n Talk (with SIM) to notebook or desktop, it authenticates back to GSM network of Smart through IP based AAA server (RADIUS) that acts as VLR and gateway. This communication passes through IP, the basic language of the Internet.

So there it is, my take on how possibly Smart is doing it. Don't ask me the details for it is not as easy as you might think. :)

Read more!

Testing the Chrome Browser

Ok, ok, I will blog about Chrome.

I tried to resist on making blog on Google's latest but I needed to check it out. Browser war have come and gone and now this new kid on the block just started it again.

I downloaded the installer and for some reason when I ran the installer while my Firefox browser is still active my PC's Internet was suddenly got disconnected. I have to restart the machine.


I already read several comments about Chrome, the style, the color and performance. Just like any other browser that's just started, it has birth pains. Existing plug-ins I have in my Firefox are not by default running or not yet supported. I have to download them all over again.

Just like IM, I already have several browsers installed, Firefox, Safari, IE and now Chrome.

I find Chrome easy to use, lighweight and fast but I'll give it more time and I hope overtime it will not become memory hog just like Firefox.

Read more!

iPhone 3G Launching on August 22 under Globe Banner

Hear Ye! Hear Ye! Apple addict, Apple iPhone 3G will be landing on August 22, under the banner of Globe Telecom. Check the official site www.iphone3g.globe.com.ph.

Although iPhone have been available for quite a while here in grey market but it doesn't stop Globe in bringing-in the iPhone 3G version. We will see how this device will fare on the market and there will be some lining up on Globe's door. Wow, look at the plans available.

Read more!

Cuil, more than meets the Eye?

Every so often every 5 to 7 years, the Internet as we know it is disrupted by great idea and by great invention. Today, several bloggers, pro or not are discussing Cuil, the latest Search Engine in town. It boost that it is three times as many than Google and ten times as many than Microsoft.

It proud itself of not peeking on users viewing history, thus making your searching always private.

So how will this new search engine company going to dislodge the current king of searches?

Checking their website, www.cuil.com I checked the features and they are as follows;

Drilldowns
Roll-over definitions
Tabs
Navigation Suggestions

Their philosopy;

"The Internet is getting bigger and more disorganized every day. Cuil’s goal is to solve the two great problems of search: how to index the whole Internet—not just part of it—and how to analyze and sort out its pages so you get relevant results."

So there you go, they will index the whole Internet.

For me, I will just have to wait and see.

Read more!

The movie "Untraceable"

I saw the movie 'Untraceable", a serial killer movie starred by Diane Lane. Diane is cybercrime specialist FBI. The serial killer is a very talented criminal, knows programming, electronics, DNS hacking and other stuffs that is so hard to believe he can do it himself. While killing his victim, he video stream it over the Internet.

What really catch my attention is the DNS exploits he done, the movie was release January 25,2008 and while in real life there was a security advisory about DNS cache poisoning just early this month. It means that any cracker/hacker out there can basically alter the legit traffic of a server to a bogus one. Imagine a ecommerce server, payment system and credit cards.


While in the movie, the hacker was able to "owned" thousands of machine running DNS and dynamically changing his machine IP address (warning: geek speak). This made the FBI impossible to track the killer down. The killer only allow US viewers only, blocking foreign IP addresses. The FBI doesn't even know what to do on tracking this serial killer. They didn't even talk to ISPs or NAPs, or the CERTs and CSIRTs, Domain Registrars.

DNS records needs to be propagated before it become the new IP address gets reflected, the killer video streaming change IP address automatically and gets it working after FBI blocked the current IP address. Can it be done? hmmm

Read more!