Cellular Network Infrastructure » IMSI Pseudonymization

I've implemented a menu, and a submenu for "Change IMSI":

    IMSI Pseudonymization
    1 Show LU counter
    2 Show IMSI
    3 Change IMSI

    Change IMSI
    1 Set 1 as last digit
    2 Set 2 as last digit

Then I've started to implement "Show IMSI", so we have a convenient way of verifying that the IMSI written to the card was written properly. (Change IMSI is not working yet.)
The IMSI should be in DF GSM -> EF IMSI. So in theory, this should work:

gsmFile.select((short) SIMView.FID_DF_GSM);
gsmFile.select((short) SIMView.FID_EF_IMSI);
gsmFile.readBinary((short)0, IMSI, (short)0, (short)9);

However, the readBinary call throws a "AC_NOT_FULFILLED" exception.

This reason code (= 3) is used to indicate that the access condition is not fulfilled by the calling applet for the called method.

WIP code is pushed to the git repo.

However, the readBinary call throws a "AC_NOT_FULFILLED" exception.

Resolved by adding an --access-domain=00 (default is ff) argument to the programmer.

Neels extended the code further, now there is one menu entry for "Change IMSI", that correctly displays the decoded IMSI. The user is then able to edit the IMSI, and if it was changed, it gets written back to the SIM card.

A standalone version of the Change IMSI code can be found here:
https://git.osmocom.org/sim/hello-stk/tree/imsi-change