Computer Solutions Blog

Dell Mini 3i / OPhone Hacking thoughts / notes

Lawrence Sheed — Mon, 08 Mar 2010 20:48:16 +0000

Currently I have an iPhone (ancient 2G), and have just bought a Dell Mini3i (600RMB with an 18month contract @ China Telecom), as I donated my 3G iPhone to one of the extended family back home.

The Mini3i runs an Android variant called OPhone.

The 3i is a little underwhelming software wise.

Its quite crap at the moment as its sitting on Android 1.0 (OPhone 1.0), but for all intents and purposes Android = Ophone its pretty much the same underneath.

There are a bunch of similar phones to this – the Lenovo O1, LG GW880, Motorola something or other (can’t be hassled to go look) etc.

While I haven’t rooted mine just yet, I have been playing around, and reading the Chinese forums.

Boot loader appears to be similar on all the devices – its made by BORQ’s in Beijing, and appears to be quite basic.

Motorola and O1 seem to have the best support for now, the main problem in the Chinese forums is people bitching about being stuck on older versions.

Some are running 1.6, most on 1.5, and the unlucky few 1.0 “Ophone”
2.0 and 2.1 has yet to hit the mainstream here.

There are people with N1/G5’s (Nexus 1 / HTC G5) on 2.1 though (yes, thats you in Beijing Tom!), pretty much any phone is available, although anything with wifi is essentially grey import from overseas (HK mostly)

Back to the phone -

Thankfully you can install any apps as apk’s, no need to hack for that – so its fairly easy to get info on the innards.

RootExplorer is your friend

RootExplorer also allows you to remount partitions r/w, so root access is fairly easy too. There are precompiled su binaries for 1.5 out there, although I’ve yet to do my phone.

The Dell mini3 is running on a Marvell Tabor. Fast chip, nice touchscreen, decent resolution, just crap on 1.0.

Firmware files for most of the “ophones” (except motorola) are mff files.

The mff files appear to just be compressed images with instructions for how to write the various partitions out.

eg the Lenovo O1 mff has this in the “mff” zip

2010/02/25 10:53 147,111,936 factory_CHERRY.fbf
2010/02/25 10:53 249 factory_CHERRY.mff.mlt
2010/02/25 10:53 364 JADE_EVB_RawNANDx16.ini
2010/02/25 10:53 327 magic_fbf.ini
2010/02/25 10:53 2,692 magic_fbf_inner.ini
2010/02/25 10:53 10,236,719 mfw.pac
2010/02/25 10:53 54,180 MHLV_NTDKB_h.bin
2010/02/25 10:53 176 MHLV_NTDKB_TIM.bin
2010/02/25 10:53 858 NTIM_td.ini

magic_fbf_inner.ini has the layout

[INTEL_FLASH_DEVICE_INPUT_FILE]
Number_of_Images=24

[IMAGE_HEADER_0]
Start_Address=0×240000
Image_Length=0×40000
EraseBlocks=1
WriteImage=0
VerifyWrite=0

[IMAGE_HEADER_1]
Start_Address=0×6900000
Image_Length=0xf00000
EraseBlocks=1
WriteImage=0
VerifyWrite=0

(etc)

Different phones have different firmware writing software, the Motorola’s are using RSDLite, LG – SML_OMS, CTHall, others something homegrown called Firebolt, which is written by BORQS. I have all the firmware tools already, despite the Ophone8 forums lack of courtesy in sharing, grrr.

Most firmware tools appear similar though functionality wise.
Haven’t played around inside the phone yet to see if its easy to get jtag access, although that was mostly because i couldn’t work out how to remove the top part without breaking it.

If anyone wants more info, or a firmware dump let me know.

Hopefully there is some interest out there in the English speaking world for these!

Of Qmail, Zombies and qmail-remote timeout issues.

Lawrence Sheed — Thu, 25 Feb 2010 04:29:49 +0000

Occasionally even in a well maintained system, qmail has issues.

One semi-common issue I get to see, is when a server we send mail to doesn’t timeout. This ties up an outgoing mail slot. Over a period of time, this can lead to issues where the whole outgoing or incoming queue is sitting doing nothing, as every connection is tied up by ‘tarpitted’ connections.

Ideally Qmail should be able to cope with these. There are settings in qmail to control how long a connection takes, and how long it should wait for. These settings are covered in the following files (usually set in /var/qmail/control)

timeoutconnect – how long for qmail to wait on initial outgoing connection before trying another mail server.
timeoutremote – how long to wait before timing out a connected outgoing server.
timeoutsmtpd – how long for qmail to wait before dropping an incoming connection.

In our system, we set these values to:
30 seconds for timeoutconnect
600 seconds for timeoutremote
360 seconds for timeoutsmtpd

In theory timeoutremote should see qmail drop a connection after 10 minutes (600 seconds).
In practice, qmail doesn’t.

Why?

timeoutremote only applies if the connection hasn’t received any data for the timeout period.
It doesn’t apply to the connection time as a whole.
If the remote end sends some data, the timeout is reset again, and it will wait again for the timeoutremote period. If the remote server dribbles back an ACK or similar once every few minutes, then it can keep a connection alive for as long as it wants.

This may not happen very often, but it can happen enough to tie up our connection queue over a period of time. I’ve seen connections go on for as long as days or weeks in practice.

Ideally one should be able to set a proper timeout period in qmail which it adheres to, so that any connection over a certain time period gets killed, or at least set something up in ucspi-tcp, however thats something for another time.

Here is a real world example.

I’ve run my kill zombie script in test mode (see bottom of page for the script)

/var/qmail/bin/kill-qmail-smtpd-zombies --test **Running in TEST mode** Running: ps ax -o etime,pid,comm --no-heading | grep qmail-remote | grep ':[0-9][0-9]:' | awk '{print }' -=-=-=-=-=-=-=-=-=-=- Found zombies, setting up shotgun. Killing qmail-remote zombies kill -9 26707 -=-=-=-=-=-=-=-=-=-=-

Its come up with a connection thats been running longer than an hour. – 26707

I’ll double check to see that its correct

ps ax -o etime,pid,comm | grep 26707 01:39:07 26707 qmail-remote

Yup, qmail-remote has been running for 1hr39minutes on that connection.

Lets check what the connection is

ps -ef | grep 26707 root 2964 17112 0 13:01 pts/2 00:00:00 grep 26707 qmailr 26707 21959 0 11:23 ? 00:00:00 qmail-remote bamboo.sz.js.cn zhangbin@bamboo.sz.js.cn

Hmm, its a known troublesome server bamboo.sz.js.cn.
In fact, its the one that caused me to write this article!

Lets watch whats actually happening in real time.

strace -p 26707 Process 26707 attached - interrupt to quit read(3,

[wait for a minute or two...]

Still nothing.

Hmm, sitting there waiting for a response to a read. Guess what happens before the timeout period?
Yup, we receive some more characters just in time to keep the connection up and running…

We could set the timeoutremote to a lower number, but we do actually have cases where servers genuinely are slow on responses for various spam testing reasons (although they usually pickup speed once they pass those tests), so I prefer another method.

Whats my current (lazy in lieu of patching qmail or ucspi-tcp) solution for this?

A culling the zombies script!

To install in your qmail/bin folder, do the following:

cd /var/qmail/bin wget http://www.computersolutions.cn/blog/wp-content/uploads/2010/02/kill-qmail-zombies.txt mv kill-qmail-zombies.txt kill-qmail-zombies.sh chmod 0700 kill-qmail-zombies.sh

The script has a help file built in, parameters are:
./kill-qmail-zombies.sh --test - Run in test mode (zombie friendly) --help - Show the help --force - Kill some zombies!

./kill-qmail-zombies.sh --test

You could set this to run every few hours in a cron script, but I strongly suggest you test first to see if it works correctly. See the help file for more info on that.

Script below for those who want to take a look. Its one of my first shell scripts, so feel free to laugh, and comment accordingly!

#!/bin/sh

# ===========================
# qmail zombie killer script
# Version: 1.0
# Author: L. Sheed
# Company: Computer Solutions
# URL: http://www.computersolutions.cn
# ===========================

PATH=/usr/bin:/bin

function short_usage
{
cat <<- _EOF_
$0: missing parameter
Try ‘$0 –help’ for more information.

_EOF_
}

function usage
{
cat <<- _EOF_
Parameters:
–force kill qmail-smtpd and qmail-send processes (aka zombies) older than 1 hour
–test do a test run (no zombie processes will be harmed)
–help show this help page

Notes:
Strongly suggest test first to see if the ps line works correct on your system before killing any processes!
eg – Run the ps below on your system, and see if the output looks similar

ps ax -o etime,pid,comm –no-heading | grep qmail-smtp
04:40 6468 qmail-smtpd
01:47 7473 qmail-smtpd
01:00 8142 qmail-smtpd
01:00 8143 qmail-smtpd
00:46 8235 qmail-smtpd
00:36 8283 qmail-smtpd
00:19 8391 qmail-smtpd
00:11 8445 qmail-smtpd
00:07 8494 qmail-smtpd

_EOF_
}

function zap_the_bastards
{
PLIST=`ps ax -o etime,pid,comm –no-heading | grep $WHAT | grep ‘:[0-9][0-9]:’ | awk ‘{print $2}’`

#In test mode, show what would be called also
if [ "$test" = "1" ]; then
echo "Running: ps ax -o etime,pid,comm –no-heading | grep $WHAT | grep ‘:[0-9][0-9]:’ | awk ‘{print $2}’"
fi

if [ -n "${PLIST:-}" ]
then
echo "-=-=-=-=-=-=-=-=-=-=-"
echo "Found zombies, setting up shotgun."
echo "Killing $WHAT zombies"
for p in $PLIST
do
if [ "$force" = "1" ]; then
echo "Kabooom:"
kill -9 $p
fi
echo "kill -9 $p"
done
echo "-=-=-=-=-=-=-=-=-=-=-"
else
echo "Good news everybody. No $WHAT zombies found."
fi
}

## Main

#parse our parameters
if [ ! $# == 1 ]; then
short_usage
exit
fi

while [ "$1" != "" ]; do
case $1 in
–force )
echo "**Running in FORCE mode**"
force=1
;;
–help )
usage
exit
;;
–test )
echo "**Running in TEST mode**"
test=1
;;
esac
shift
done

#do the deed
targets=( "qmail-remote" "qmail-smtpd" )

for target in ${targets[@]}
do
WHAT=$target
zap_the_bastards
done

Happy Chinese New Year!

Lawrence Sheed — Thu, 11 Feb 2010 07:04:22 +0000

Note to clients that we will be closed from 13th – 19th February for Chinese New Year.

Urgent issues can be addressed either by sending an email to support@computersolutions.cn or calling my mobile number on 13901 802 269.

Have a good vacation, and a great year of the tiger!

Difference between China and the UAE in Blocking

Lawrence Sheed — Tue, 09 Feb 2010 03:22:16 +0000

As I’m currently in the airport, waiting for a flight back to the UAE, I thought I’d share this small snippet of transparency vs secrecy.

As most China users will know, there is no official agency that “blocks” websites. In fact, most of the time, the government states that sites are not blocked, despite fairly obvious proof to the contrary.

China typically asserts that “connection resets” to sites like Facebook and Youtube are just network issues, despite those network issues solely appearing at the ip addresses associated with the government firewalls at the gateway routers to overseas.

Here in the UAE (Dubai), the government still blocks, but at least they’re upfront about it:
See below for an example of a blocked site

Why is this important?

Transparency is a big problem for western entities doing business in China. As with the recent Google PR stunt/debacle, most companies have no real mechanism for dealing with arbitrary judgements for / against things that affect their business.

A clear and transparent mechanism for dealing with why sites are blocked, coupled with a delisting mechanism would be a good place to start. It would also help to defuse the detractors against censorship – although most countries censor, China is one of the usual scapegoats picked on.

Maybe if China implemented a what (was blocked) / why (it was blocked) / how (to get unblocked) system, detractors would have less to complain about.

Lawrence.

MMS on 2G iPhone 3.1.2 for China Mobile (CMNET) – quick howto.

Lawrence Sheed — Wed, 20 Jan 2010 10:38:38 +0000

Although most of my friends are using 3G/s now, I do get the odd 2G phone to play with.

Today I had another crack at enabling MMS on a 2G. For some reason not much documentation, and too much misinformation out there on the net.

Guaranteed working instructions for China Mobile users below:

Install 3.1.2
Jailbreak with usual steps.
Add cydia.ifoneguide.nl in Cydia / Sources
Wait a bazillion years for cydia to timeout with the various blocked in China repositories.
Click Search
Download Activate 2G MMS
Reboot

Normally we’d be done, however the MMS settings won’t let us save a diffferent MMS and GPRS name, so we need to install a specific IPCC (iPhone Carrier Setting file) for China Telecom.
As China Telecom is (at time of writing) not an official iPhone supplier, they don’t have an IPCC file, so we need to roll our own.

Here’s one I found earlier – ChinaMobileCarrierSettingsWithMMS.zip

Download that, unzip, and throw on the desktop.

We’ll need to tell iTunes that its ok to use the IPCC file first, so close iTunes.
Now head off to terminal (or a DOS window for those on Windows), then paste this in.

Mac users:
defaults write com.apple.iTunes carrier-testing -bool TRUE

Windows users:
(32 bit)
“C:\Program Files\iTunes\iTunes.exe” /setPrefInt carrier-testing 1

(64 bit)
“C:\Program Files (x86)\iTunes\iTunes.exe” /setPrefInt carrier-testing 1

Done?

Ok, now open iTunes again, connect the phone if its not connected, and..

Mac Users:

Press + hold down Alt(option), and Click “Update”

Windows Users:

Press + hold down shift, then Click “Update”

iTunes will prompt you for a file.
Choose the IPCC file you downloaded.

Sync the phone.

Finally… shut the phone off again.

Once you power up again, you should be able to send/ receive MMS!

If its not working for you, check that the settings are in there –

Settings / General / Network / Cellular Data Network

(anything not listed below should be empty)

Cellular Data
APN -> cmnet

MMS
APN -> cmwap
MMSC -> http://mmsc.monternet.com
MMS Proxy -> 10.0.0.172
MMS Max Message Size -> 300172

Tested, and working on 2 x 2g iPhones!

Domain names, ICP licenses, and other fun in 2010

Lawrence Sheed — Mon, 11 Jan 2010 10:55:54 +0000

New rules are now in place that restrict applications for Chinese domain names (anything ending in .cn)

CNNIC issued new guidelines for registrars and hosting companies on January 6th / 2010.

Roughly translated, these state:

CNNIC (China’s Internet Domain Government Agency) wishes promote the standard and healthy application of .CN domain names.
CNNIC aims to coordinate with China’s review mechanism for domain name registration information and further crack down on registration of domain names with false information.

What this means in non-government-speak is that from now onward new .com.cn and .cn domains cannot be registered unless you are an officially licensed entity within China.
Existing domains can be renewed for the meantime though (pending verification of details/validity).

This has been in process since mid December, as individual registrations were the first to get blocked

Chinese domain name supervision organization China Internet Network Information Center announced that starting from 21:00 on December 14, 2009, it closed domain name registrations for individual users who are not purchasing domains on behalf of companies or organizations. Prior to this sudden announcement, China’s central television station criticized domain name registration service providers and agencies for false, inaccurate or incomplete information in the registration process.

More here on that here – http://www.chinatechnews.com/2009/12/21/11239-chinese-measures-will-regulate-website-domain-name-registrations

Entities wishing to register domain names for others will need an ICP许可证 (ICP Xu Ke Zheng).
The ICP许可证 is a commercial licence, which is different from an ICP备案 (ICP Bei An).
We will also be subject to new requirements for new domain registrations (China loves paperwork!)

The Notification about further enhancement of auditing domain name registration information

In order to further enhance the authenticity, accuracy, and integrality of the domain name registration information, now notify as following:

1. Domain name applicants need to submit the formal paper based application material when making the online application to the registrar. The application material includes the original application form with business seal, company business license (photocopy), and registrant ID (photocopy).

2. Registrar should carefully review the application material. When application is deemed qualified, registrar need to submit the application material via fax or E-mail to CNNIC, and withhold the original application material.

3. From the day of the submission of online application, if CNNIC does not receive the formal paper based application material within 5 days or the application material auditing is not qualified, the domain name to be applied will be deleted.

4. The above regulations will be executed since 9:00AM (Beijing Time), Dec 14th, 2009.

If you have any question, free to contact us at 86-10-58813000 or email to service@cnnic.cn.

Existing ICP Registrations
In addition to these new rules, all existing domain registrations are being scrutinized carefully, and all details are being verified.
As we have been quite proactive in ensuring that all clients have ICP licensing, and keeping our upstream ISP / contacts at Shanghai Telecom advised of anything information they require ahead of time, we expect that this will cause minimal disruption to our services.
If we do need to verify additional information from clients, please be prompt in forwarding them to us if we do request them, to avoid issues.

New ICP Registrations
Due to the above checks, new ICP registrations (which are required for any domain hosted in China) are taking substantially longer than the normal 2-3 days. We are currently seeing delays of up to 2 months for new license applications from the MII (Ministry of Information). We deal with the licensing bureau’s on a daily basis, and are notified quickly in case of issues, but the current checking requirements are just making everything take rather longer than is usual. We ask clients to be patient while their ICP registration is in progress. We are aware that it is not an ideal situation to have to wait for a few weeks, but we are dependent on the government issuing body, who are very very backlogged with work right now. License applications that are currently in process can be checked by clients at the government website here – http://www.miibeian.gov.cn/chaxun/ggcx.jsp.

Computer Solutions client ICP Registration site is here – http://icp.computersolutions.cn/. New clients can register a user account on our ICP site, and submit an application form from our site.

Outgoing TLS port Denial of Service – Fixed

Lawrence Sheed — Tue, 05 Jan 2010 08:24:17 +0000

Noticed that our incoming TLS connection queue was a little high – running at 60 concurrent connections for an hour or so.

A check of the queue revealed that all the connections were coming from a single IP – and were tying up the queue, making it a denial of service attack. This one ip address was connecting and reconnecting multiple times, hogging up all the connections.

I’ve blocked that ip address, and restarted the TLS service, its back at normal levels now.

For the interested –

Connections:

mail:/var/log/qmail/qmail-tls# tcp 0 0 61.129.49.190:587 tcp 1 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 1 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 1 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 1 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 tcp 0 0 61.129.49.190:587 netstat -an –numeric-ports | grep 587 | grep 58.246.24.242
58.246.24.242:24384 ESTABLISHED
58.246.24.242:39581 CLOSE_WAIT
58.246.24.242:11625 ESTABLISHED
58.246.24.242:42614 ESTABLISHED
58.246.24.242:46630 ESTABLISHED
58.246.24.242:20802 ESTABLISHED
58.246.24.242:51956 ESTABLISHED
58.246.24.242:4463 ESTABLISHED
58.246.24.242:39878 ESTABLISHED
58.246.24.242:43678 ESTABLISHED
58.246.24.242:39181 CLOSE_WAIT
58.246.24.242:62054 ESTABLISHED
58.246.24.242:64421 ESTABLISHED
58.246.24.242:24326 ESTABLISHED
58.246.24.242:58740 ESTABLISHED
58.246.24.242:25779 ESTABLISHED
58.246.24.242:50209 ESTABLISHED
58.246.24.242:41358 ESTABLISHED
58.246.24.242:32383 ESTABLISHED
58.246.24.242:27925 ESTABLISHED
58.246.24.242:46540 ESTABLISHED
58.246.24.242:7049 ESTABLISHED
58.246.24.242:13999 ESTABLISHED
58.246.24.242:62962 ESTABLISHED
58.246.24.242:19771 ESTABLISHED
58.246.24.242:43604 ESTABLISHED
58.246.24.242:38757 CLOSE_WAIT
58.246.24.242:39909 ESTABLISHED
58.246.24.242:30470 ESTABLISHED
58.246.24.242:39754 CLOSE_WAIT
58.246.24.242:61393 ESTABLISHED
58.246.24.242:52072 ESTABLISHED
58.246.24.242:22294 ESTABLISHED
58.246.24.242:60398 ESTABLISHED
58.246.24.242:60530 ESTABLISHED
58.246.24.242:36049 ESTABLISHED
58.246.24.242:1426 ESTABLISHED
58.246.24.242:40190 ESTABLISHED
58.246.24.242:15402 ESTABLISHED
58.246.24.242:23457 ESTABLISHED
58.246.24.242:65187 ESTABLISHED
58.246.24.242:39910 ESTABLISHED
58.246.24.242:23181 ESTABLISHED
58.246.24.242:3286 ESTABLISHED
58.246.24.242:40540 ESTABLISHED
58.246.24.242:12957 ESTABLISHED
58.246.24.242:39829 ESTABLISHED
58.246.24.242:19748 ESTABLISHED

IP Owner:

mail:/var/log/qmail/qmail-tls# whois 58.246.24.242

% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 58.246.24.240 – 58.246.24.247
netname: SH-Ribeira
country: cn
descr: Ribeira (Shanghai) Business Consulting Co., Ltd.
admin-c: YR194-AP
tech-c: YR194-AP
status: ASSIGNED NON-PORTABLE
changed: sh-ipmaster@chinaunicom.cn 20081125
mnt-by: MAINT-CNCGROUP-SH
source: APNIC

I’ve sent a note to China Unicom, but don’t expect any reply. A google of Ribiera Shanghai doesn’t reveal any obvious people to complain to either.

Yet another instance where I should put some active logging into the server to notify me when queue / connection sizes stay at high levels…

CSR (Corporate Social Responsibility)

Lawrence Sheed — Fri, 01 Jan 2010 02:52:50 +0000

Although I’m loathe to call ourselves a corporation – we’re not!, we do try to do the odd bit of good for the community, whether locally, or regionally.

Last year saw our first donation to the Library Project. The Library Project is a worthy cause, and donates books and libraries to under financed schools and orphanages in the developing world.

Computer Solutions donated funds for a Library, which ended up going to Chen Jia Gou Elementary school in Shaanxi province.

Link to our donated library here – http://www.library-project.org/libraries/chen_jia_gou_elementary_school.html

We also donate support to a more local cause – LifeLine Shanghai.

Computer Solutions has been providing complementary IT, and Web Services for a number of years now for Lifeline. Last year, after a few months of persuasion they finally agreed to let us redesign their existing volunteer created website too.

Our design team took note of LifeLine’s requirements, and came up with something more visually appealing, with a clearer layout and site structure. Visit their site here – http://www.lifelineshanghai.com

Lastly, we also support a cause which donates items and books for schools up in Qinghai. We’ve previously donated computers, funds, and other items to help out. More info about that here: http://www.tonyphotoshop.com/forum/index.php?topic=4.0. Do your part too, and help out, donations of clothes and other items are very welcome!

Lastly, if you are a charity organization in Shanghai, or China, and would like us to assist you in some way, please contact us. We’re more than happy to donate our services to worthy causes.

Samsung N310 (Samsung Go) Hackintosh Installation on Snow Leopard

Lawrence Sheed — Wed, 23 Dec 2009 07:52:43 +0000

One of my friends brought round a notebook for me to Hackintosh yesterday. Unlike the usual god no… kind of options I get given, this is actually a nice machine.
This one is almost as Mac friendly as my current Nano sized Hackintosh (aka Loz’s Hackbook Nano)

I present the next best thing in Mini Mac’s (until the will it? won’t it? Mac Tablet comes out!) – The Samsung N310

The Samsung is a generic Atom based Netbook with the following hardware:

CPU Intel Atom N270, 1600 Mhz
Chipset Intel 82945GSE Graphics Controller
Graphics Card Intel GMA 950
Audio Realtek ALC272
Wifi Atheros AR5007EG Wireless
Ethernet Marvell Yukon 88E8040 PCI-E Fast Ethernet
Bluetooth Adapter USB Based Generic
Webcam USB Based Namuga 1.3M

Installation is remarkably easy.
You’ll need the following things – an External USB DVD drive, and Snow Leopard.

Download the latest NetbookInstaller ISO from here – http://osx.mechdrew.com/downloads/
Burn to CD. Connect your USB drive to the N310, and boot off of the newly burned CD.

Follow the instructions to swap with your Snow Leopard DVD at the appropriate time, and boot into the installer.
Install as normal (in my case, I just wiped the existing partitions, set the boot type to GUID instead of MBR in Partition, Options, and did a full install)
Once the OS reboots, boot from the NetbookInstaller ISO again, but this time choose the HDD (as we still need to install a valid bootsector for the OS to run)

The OS should boot up ok, fill in the relevant bits and pieces, and get to the desktop screen.
Open up NetBookMaker from the CD, navigate to the Tools folder and open NetbookInstaller:

I did this using 0.8.3RC4, but newer versions should be similar.
Click Continue for the Unrecognized Hardware Prompt.

Choose the correct disk in the Volume Dropdown, and
Check Install Chameleon 2 RC3
Check Install General Extensions
Check Generate a System Specific DSDT.AML file.
Uncheck everything else.

Click Install.

It should trundle away for a few minutes, then recommend you reboot.

Remove the NetbookInstaller DVD, and make sure that you can reboot ok from the Hard Drive

Right now you should have working Webcam, Video, Bluetooth, and Trackpad will support 2 finger scroll (go to System / Preferences/ Trackpad to configure)

We’re still missing Wifi, Audio, and you’ll notice that sleep doesn’t quite work yet.
To install those, we’ll need to download some extra Kext’s, and replace the wifi card.

Wifi – the original card is a crap atheros. I couldn’t be buggered looking for drivers, and immediately swapped it out for a Dell1390 Broadcom card. Cheap, and the same as real Macbooks, so no driver issues.
The N310 is reasonably easy to disassemble, just remove all the plastic plugs underneath (including the larger feet ones), and remove the screws. Gently remove the case bottom, and replace the wifi card.
If you use the Dell1390 you won’t need to install any drivers, they’re built in, yay!

For the remaining drivers, see below:
Audio – As I’m a nice person, I’ve uploaded the working driver here – http://www.kexts.com/view/182-alc272_%28snow_leopard%29.html
Sleep – Go to http://www.superhai.com/darwin.html, and download the 2 Snow Leopard kexts (VoodooBattery.kext, VoodooPowerMini.kext).

Download those to the desktop, unzip the kexts.
Copy to /Extras/GeneralExtensions, then rebuild the Extension cache.

You can do that manually or use a tool. NetbookInstaller nicely places a program called UpdateExtra into the /Extra folder which can rebuild the Extension cache for you.

Thats pretty much it!

If you are having problems with the laptop waking from sleep:
I’ve uploaded a DSDT.aml for the n310 here – DSDT.aml. you’ll need to rename it so that the .N310 is removed, and copy into the root folder over the existing DSDT.aml that NetBookMaker may or may not have created. I’d appreciate comments as to whether this works for you or not.

Iain in the comments thread was nice enough to email his working sleep DSDT.aml file, can some people try both and see if either work for them? Also check the BIOS settings as per Iain’s comment: Enabled EDB. Disabled Legacy USB Support. Enabled USB S3 Wake-Up

Download his DSDT.aml here. To use, rename file to DSDT.aml, and copy to /Extra, then reboot.

Note: If you do mess around with DSDT.aml files, please have a working recovery method available that you can access the hard drive with (eg an OSX Install DVD + Boot132 CD). Apple’s install DVD can also be used for recovery.

If you find that you can’t boot after installing the DSDT.aml, boot from the Boot132 CD or USB, then boot into to the OSX install DVD. Go to terminal in the installer, and delete the offending file, then reboot.

Now you should have a fully working Samsung N310 running OSX Snow Leopard!

I haven’t bothered messing around with the brightness or volume stuff, but the volume on/off keyboard functions work, as do the trackpad on/off.

Good luck with yours!

Useful links:
http://www.kexts.com – kexts (drivers) for OSX
http://www.superhai.com/darwin.html – Power related drivers for OSX
http://osx.mechdrew.com/ – MechDrew from MyDellMini’s site on Hackintosh Installs
http://cid-8b65993ef55cf014.skydrive.live.com/browse.aspx/.Public/OSx86/Snow%20Leopard – some Czech site hosted on live.com full of goodies/ kexts

iPhone Model Number Info

Lawrence Sheed — Thu, 17 Dec 2009 10:23:53 +0000

Apple used to have info about where phones came from on their website, but for some reason have now deleted that info.
Below is a list of verified unlocked part numbers.

Hong Kong

MB489ZP/A 8gb blk
MB496ZP/A 16gb blk
MB500ZP/A 16gb white

Same with
ZZ = Macau
ZA = Singapore

here is the list of official unlock units from other countries.
MB489NF/A
MB496NF/A
MB500NF/A

MB489CZ/A
MB496CZ/A
MB500CZ/A

MB490CZ/A
MB497CZ/A
MB501CZ/A

MB489CZ/A
MB496CZ/A
MB500CZ/A

MB489GR/A
MB496GR/A
MB500GR/A

MB489T/A
MB496T/A
MB500T/A

MB489NF/A
MB496NF/A
MB500NF/A

MB489FB/A
MB496FB/A
MB500FB/A

MB489ZP/A
MB496ZP/A
MB500ZP/A

MB489ZA/A
MB496ZA/A
MB500ZA/A

MB489X/A
MB496X/A
MB500X/A

MB489RS/A
MB496RS/A
MB500RS/A

MB489AB/B
MB496AB/B
MB500AB/B

MB489ZA/A
MB496ZA/A
MB500ZA/A

MB489SL/A
MB496SL/A
MB500SL/A

MB489SO/A
MB496SO/A
MB500SO/A

MB489TA/A
MB496TA/A
MB500TA/A

MB489TH/A
MB496TH/A
MB500TH/A

MB489TU/A
MB496TU/A
MB500TU/A

MB489AB/B
MB496AB/B
MB500AB/B