by John B. Carnett: Photo by John B. Carnett

Dept: Void Your Warranty
Tech: Cellphone unlocking

Cost: Free to $50

Time: 15 minutes

DABBLER | | | | | MASTERWhile number portability may have freed your cell digits, your phone is still a ball and chain, locked into one carrier’s service. These subsidy locks keep you from walking away before the provider can recover that big discount you got when you bought the phone.


But it doesn’t have to be so. If you have a GSM phone, you can unlock it and switch to any GSM network carrier (the big three are AT&T, Cingular and T-Mobile). You can also take an unlocked phone overseas (most of the world uses GSM) and use it on a local network to avoid paying for international roaming, or even buy a European phone (they tend to be ahead of us in cell tech) and use it here. Have an old phone lying around? Unlock it and keep it as a spare.


The key is the subscriber identity module, or SIM, card, which stores the essential information—carrier, number, contacts—in all GSM phones. So once your phone is unlocked, switching carriers or phones simply means popping in a new SIM (available at any cell store here or overseas).


The phone’s lock is defeated by inputting a special code (see "Unlocking the 3595," below). For Nokia phones, you can find free software at unlockme.co.uk that will calculate your phone’s code, or just post a request on the site’s forums and wait for a friendly hacker to reply.


If your phone is from any other manufacturer, check out gsm-software.com, which will e-mail you a code for $10 to $20. A few hard-to-crack models require a data cable that sends the phone a code from software on your computer.


Of course, there are a couple of catches: Even within the GSM network, carriers use different frequency sets (see list, below), so if your phone only supports one band, your coverage area may suffer. Also, special carrier-specific features like picture messaging may not work on an unlocked phone. But hey, every freedom has its price.


UNLOCKING THE 3595 (See photograph—above)

We unlocked a Cingular Nokia 3595 to pop in a prepaid Vodafone SIM from New Zealand. The screen below left is what we saw with the new SIM inserted before unlocking. To get the unlock codes, we posted a request at unlockme.co.uk with the 3595’s serial number and carrier. The next morning, we had two codes:
#pw+197824120263746+1#;
#pw+807711135262232+7#.

1. To enter a code, the phone must be on, with no SIM inserted. Our Cingular card was behind the battery.


2. Next we punched in the first code, hitting the * key several times to get the p, w and + symbols (don’t ask why; that’s just how it works).


3. When we finished, a "Restriction Off" message flashed, and when we inserted the Vodafone card, the phone began searching for a signal.


WHAT’S THE FREQUENCY, KENNETH?

Cingular and AT&T
850/1900MHz

T-Mobile
900/1900MHz
European
900/1800MHz
U.S. tri-band phones
850/900/1900MHz
European tri-band phones
900/1800/1900MHz
Quad-band “world phones”
850/900/1800/1900MHz

OTHER PHONE HACKS

Just about every cell has its hacker’s bag of tricks—things like adding custom games and wallpaper, using MP3 snippets as ring tones or even (don’t do this) stealing service.


To figure out what can be done—and how—on yours, try cellphonehacks.com, which has forums for each phone company and provider. If you dig through the cell-geek boasting matches that fill many of the threads, you can usually find some how-to’s for your phone.


I got lucky and found sites dedicated to hacking my Verizon LG VX4400 using a $23 data cable from RadioShack and a free program called
BitPim (bitpim.sourceforge.net). So far I’ve used the phone as a modem, removed the Verizon banner, added a shot of Johnny Cash at Folsom Prison to my wallpaper and changed my ring tone to The Jeffersons’ theme...probably all child’s play to a hardcore hacker, but it feels like movin’ on up to me.