Papers  
 
Motorola v710 Info Page
Last Update: July 18, 2005
Please notify me of any corrections or suggested additions

Jonathan A. Zdziarski
Do NOT email me with questions about your phone or this page will disappear again.

v710 and E815 Technical FAQ

[ Handset Review | Seem Hacking | SMIL GW ]

Q. Has anyone hacked OBEX yet?

A. OBEX can only be unlocked on the E815. The profile does not exist on the v710. It would be interesting to see, however, whether you could flash the v710 with the E815's firmware.

Q. I'm pissed that Verizon crippled the v710. Is there anything I can do?

A. I'm not generally a politically motivated individual, and I generally believe the less legislation the better. I do feel, however, that this is one of the appropriate times for legislation. I fired off this letter to my house rep and senators. Surprisingly, I got a hard-copy letter back from my rep agreeing with me and he has written the chairman of the FCC to further investigate. I would encourage anyone who thinks monopolies are wrong to send a copy of this letter to your representatives, at the very least to make them aware of what's going on under their noses.

Q. How can I get better quality voice calls?

A. You can change your voice codec from EVRC (Enhanced Variable Rate Codec) to 13K in the programming menu. Verizon uses EVRC to conserve bandwidth (and fit more calls on a switch). Switching to 13K will use the full supported level of bandwidth, and provides crystal clear quality. NOTE: The tower has ultimate authority over audio codec, so this only works in some locations.

Q. Help! I've tried hacking my phone's seems/menus/files and now it won't boot!

No worries. Pull out your battery, then put it back in. Leave the phone off, then plug in the USB cable, and hook your charge cable up. When the phone is turned off, the interfaces will still come up so long as the charge cable is plugged in. You should be able to restore your original files now. If you don't have a USB cable with a charger port, buy one. Part #SKN6311B.

Q. How can I set my web browser up to use a public proxy?

Go to Mobile Web > Web Sessions. Create a new entry. Now find a public proxy at http://www.publicproxyservers.com. Create a new Web Session and fill in the following information:

Name: Public Proxy (or whatever you like)
Homepage: http://www.nuclearelephant.com/wap.html (or use your own)
User ID:
Password:
Gateway IP: IP Address of Proxy
Gateway 1:
Service Type 1: HTTP
Port 1: Port Number of Proxy
E2E Port 1: Port Number of Proxy
LXL Port 1: Port Number of Proxy
Domain 1:


Q. Can I get stereo earbuds?

A. Yes. Part #CHYN4516. You can buy them directly from Motorola. They play in true stereo (not mixed mono). You may also be interested in the MP35A adapter, which allows you to attach conventional earbuds. You can find them here. Be warned, you will have to remove the adapter to take a phone call, which is why most prefer the earbuds (they include a mic).

Ugly Hackery

Dialup Networking

Verizon provides their own Internet gateway called MobileOffice. It's free to use and only costs you airtime (free nights and weekends - yay). It's actually faster to connect to Verizon's data network than making data calls to your ISP, because your data call has to go through their network anyway. MobileOffice provides speeds up to 14.4k; when making a data call to my ISP, I only got about 11k. ExpressNetwork is their high-speed service using packet data. You can get speeds up to 144k. Verizon charges a subscription fee for this service, but it is enabled on your account so that your phone can use GIN. I've never been billed for using it on occasion, but that's not to say Verizon won't start cracking down at some point.

It's relatively easy to connect to either one of these data services using Linux, Mac, or whatever. I'm posting this here because a lot of people are just dying to do this over Bluetooth. It's a matter of having the right phone number, initialization strings, and login information. See if you can procure a copy of Linux Magazine from July 2004; I have an article called "Linux on the Laptop" which discusses this in detail.
Here are most of the details:

Init String
Tells Verizon which service you're connecting to. Use ATZ to reset the modem, then:
  • AT$QCMDR=2 for MobileOffice or
  • AT$QCMDR=3 for ExpressNetwork

This loads the appropriate register specifying the service you are connecting to. As I understand it, if you don't load this register, it defaults to MobileOffice as some have reported.

Phone number
Dial #777

Authentication
  • To authenticate with MobileOffice, use qnc as both your login and password.
  • To use ExpressNetwork, use [10-Digit Phone Number]@vzw3g.com as your login and vzw as your password.

In both cases, you'll need to support CHAP to get connected. If you're running Linux* (as all people should be), you'll need to edit /etc/ppp/chap-secrets. It's very important that you find out how to support CHAP or you will receive CHAP authentication failures.

* The DUN gateway is on BT channel 8. See my Linux T30 Page for more information on DUN and BT, and how to bind to it from Linux.

Service Discovery Output
Service Name: Handsfree Voice Gateway
Service RecHandle: 0x10000
Service Class ID List:
  "Headset Audio Gateway" (0x1112)
  "Generic Audio" (0x1203)
Protocol Descriptor List:
  "L2CAP" (0x0100)
  "RFCOMM" (0x0003)
    Channel: 3
Language Base Attr List:
  code_ISO639: 0x656e
  encoding:    0x6a
  base_offset: 0x100
Profile Descriptor List:
  "Headset" (0x1108)
    Version: 0x0100
                                                                                
Service Name: Handsfree Voice Gateway
Service RecHandle: 0x10001
Service Class ID List:
  "" (0x111f)
  "Generic Audio" (0x1203)
Protocol Descriptor List:
  "L2CAP" (0x0100)
  "RFCOMM" (0x0003)
    Channel: 4
Language Base Attr List:
  code_ISO639: 0x656e
  encoding:    0x6a
  base_offset: 0x100
Profile Descriptor List:
  "" (0x111e)
    Version: 0x0101
                                                                                
Service Name: Dial-Up Networking Gateway
Service RecHandle: 0x10002
Service Class ID List:
  "Dialup Networking" (0x1103)
Protocol Descriptor List:
  "L2CAP" (0x0100)
  "RFCOMM" (0x0003)
    Channel: 8
Language Base Attr List:
  code_ISO639: 0x656e
  encoding:    0x6a
  base_offset: 0x100
Profile Descriptor List:
  "Dialup Networking" (0x1103)
    Version: 0x0100

Not so Secret Codes
Most of the codes below require somewhat rapid entry in order to work. If you can't get one working, just try typing it in a bit faster.
  • Programming Menu: Menu + 0 + 73887 + * (Security Code: 000000)
  • Enable Test Mode: Menu + 00 + ** + T E S T M O D E + *
  • Disable Test Mode: Menu + 00 + ** + T E S T O F F + *
  • Enter/Exit Text Mode: Menu + LeftOpt
  • Enter Operator Codes: Menu + 048263 + *
  • NAM Programming Menu: P H O N E (7 4 6 6 3) + # + Menu + Menu
  • Vocoder Menu: ## + VOCODER (8 6 2 6 3 3 7)
* The 'Menu' button as referenced above is the topmost middle button, the one that gives you a menu (why this is such a complicated issue I don't know).

Operator Codes
Motorola phones support the use of operator codes to set miscellaneous options. I don't have access (yet) to the v710 level 3 manuals, but many of the opcodes from previous models still work - I used this to boost the earpiece volume somewhat (although it's still too quiet).

First, to enter the opcode screen, press Menu + 048263 + *. You'll have to do this rather quickly. This will bring you to a box prompting you for an opcode. Before you can enter any codes, it will be necessary to suspend the phone. To do this, enter 54* and press OK. The display will go black and the phone will be suspended. Press the camera button on the outside of your phone to turn the backlight back on. You should see "SUCCESS" on the screen. Go back and then you can enter whatever opcodes you like. So far these are the ones I have that work - feel free to send more if you got them. About the only useful one is the audio level. I know there are more, but I can't find documentation anywhere.

0*0*0 Select tone 0
0*0*1 Select tone 1
0*0*2 Select tone 2
0*0*3 Select tone 3
0*0*4 Select tone 4
0*0*5 Select tone 5
0*0*6 Select tone 6
0*0*7 Select tone 7
0*0*8 Select tone 8
0*0*9 Select tone 9
3*0*1 Enable vibrator
3*0*0 Disable vibrator
4*3*1 Enable speech coder full rate Audio loopback
4*3*0 Disable speech coder full rate
4*4*1 Enable speech coder enhanced full rate
4*4*0 Disable speech coder enhanced full rate
4*5*1 Enable speech coder half rate
4*5*0 Disable speech coder half rate
5*0*0 Set audio level 0
5*0*1 Set audio level 1
5*0*2 Set audio level 2
5*0*3 Set audio level 3
5*0*4 Set audio level 4
5*0*5 Set audio level 5
5*0*6 Set audio level 6
5*0*7 Set audio level 7
5*0*8 Set audio level 8
5*0*9 Set audio level 9
5*0*10 Set audio level 10
5*0*11 Set audio level 11
5*0*12 Set audio level 12
5*0*13 Set audio level 13
5*0*14 Set audio level 14
5*0*15 Set audio level 15
6*2*2*0*0 Set Audio Path. Int Mic, IntSpk, RX unmute, TX unmute
6*4*6*0*0 Set Audio Path. Boom Mic, Boom Spk, RX unmute, TX unmute
18*0 Initialize non-volatile memory (Master Reset)
18*1 Initialize Non-volatile memory (Master Clear)
55*2*001 Test Display. All pixels ON
55*2*000 Test Display. All pixels OFF
55*2*002 Test Display. Checkerboard pattern A
55*2*003 Test Display. Checkerboard pattern B
55*2*004 Test Display. Border pixels ON

I also found this file in the p2kman package, which seems to have a lot of opcodes (in hexadeximal); many of which appear to work on this phone.

 All Website Content © 2004 Jonathan A. Zdziarski. All Rights Reserved.
Reproduction prohibited without permission