[Om2009] PIN & PUK

[David Fokkema]

On Mon, 2009-06-08 at 12:15 +0300, Risto H. Kurppa wrote:
> On Mon, Jun 8, 2009 at 11:36 AM, David Fokkema<dfokkema at ileos.nl> wrote:
> > Hi list,
> >
> > Getting a bit too confident, I decided to change the PIN (default 0000)
> > of my SIM.
> >
> > 1. Paroli doesn't require you to re-enter the PIN, to make sure you made
> > no typo's.
> >
> > 2. Paroli doesn't give feedback on incorrect old PIN values, so you
> > don't really know for sure the PIN was actually changed.
> >
> > 3. On startup, unlocking the phone with your PIN is not very verbose. An
> > incorrect PIN results in another 'enter your PIN' screen, but nothing
> > like 'PIN incorrect, only 2 tries left'.
> >
> > 4. When the SIM is blocked (incorrect PIN) nothing shows in Paroli. It
> > doesn't tell you that the SIM is blocked and that you now need to enter
> > your PUK code. Having already tried a few times, I asked a colleague for
> > his unlocked phone to really make sure I wouldn't block the SIM by
> > entering incorrect PUK codes.
> >
> > So, does anyone dare reproducing this, ;-) ?
> 
> Thank you David for sharing your experience! I don't think we'll soon
> find anyone ready to test this (maybe with old SIM cards..). Could you
> please report all this to http://www.paroli-project.org/trac so it
> will not get lost in the mail archives. I think this is something
> quite important to be fixed..

I might try a few times. Apparently, as long as you're not entering an
incorrect PUK code ten times, all is well. Of course, an unlocked phone
nearby is necessary to the whole procedure.

I added this to trac:

http://www.paroli-project.org/trac/ticket/176

Regards,

David