Monday, November 24, 2008

The Magic Jack Hack

I recently purchased a magicJack on the advice of a friend. It's a VoIP USB device that for $20 for a year gives you unlimited North American calling with a free incoming number from your choice of major cities across the US. It sounds too good to be true, but I had to find out for myself. After signing up online and paying the initial $40 fee (includes the first year of service) and patiently waited by the mailbox for my jack, 5-10 business days later it arrived (I kind of lost track of how many days it really was after a couple days of sitting there on the stoop). The install was simple and I won't bore you with the details, but it basically worked. My first call was a success... after I disabled bit torrent anyway. Other bandwidth intensive apps will basically kill the quality. You'll need to do some traffic prioritization if you have a router that supports it (ie Linksys WRT54G) or otherwise just make sure you have enough bandwidth when you want to make a call. The incoming number worked fine as well. In fact it worked so well, I decided to hook it up to my regular phones in the house. I happen to have an RCA 2-link Dect 6.0 phone and the 2nd line is available, so after some education on RJ14C jacks I hook the magic jack through the existing wiring in my house. Now my 2-line phone upstairs sees the other pair of wires (the black and yellow ones) as an active line and selecting line 2 on the phone gives you the magic jack dial tone. So far so good, I start using the 2nd line for all my outgoing calls. After a few calls I notice something strange. Sometimes the person I am calling can't hear me. I can hear them but they can't hear me... it's just "Hello.... hello? &!$%*! ". It gets progressively worse and my friends are starting to get really annoyed with me. I was not sure what the issue was at first but I was losing friends fast and my brain finally kicked in. It's my Asterisk server in the basement. What's Asterisk? Basically a whole other system you can run if you are a hard core VoIP geek like me. The problem is I have all the VoIP ports forwarded to my Asterisk server and it seems to be interfering with my magicJack. Soon enough it occurs to me that if the Asterisk server is interfering the the magicJack, perhaps it uses the same protocols (ie SIP) and maybe, just maybe I can make it work WITH Asterisk instead of against it. A quick search reveals that in fact my idea is not new or clever at all, many people have been attempting to and succeeding in this very thing! My elation soon turns to despair however as I fail repeatedly at making this work. It seems that the magicJack folks were bound and determined to not let people connect their Asterisk servers or other SIP softphones to their service. I read post after post of a battle that has waged since last year when magicJack first came out. It seems every time someone managed to get it working they would post the method on a public forum and then the magicJack techs would change something and stop them. Eventually I managed to figure it out on my own, but sadly I can't really reveal the method as I don't want it to stop working! But trust me, it can be done. I now have my 2nd line connecting to my Asterisk server which is registered with magicJack. My actual USB dongle is sitting on my desk collecting dust while I happily make all the calls I want for $20 a year.

33 comments:

Ranreply said...

Hi,
Iam trying to find he same thing. Can u atleast provide hints so that i can get a idea.

INTJ Geek said...

Well I can tell you what doesn't work and save you some trouble with trying what I did. The password is a 20 character alphanumeric string and is transmitted one way encrypted (md5), so a sniffer won't work. It's not crackable unless you have a supercomputer and a few years to wait for a brute force attack.

Anderson said...

Can we transmit the encrhypted password to a specific ip? Tell us something.

INTJ Geek said...

Anderson, you just need to register with the MagicJack SIP server using the normal method of your softphone. You need to know the unencrypted password to enter into the config. There are many different IP's across the country, I have listed all the ones I am aware of below. If you do a reverse DNS lookup on the IP it usually tells you the name of the city. Pick the IP of the city that your phone number is for.

67.88.183.70
216.234.79.8
67.88.218.6
67.90.177.70
67.111.81.6
67.109.32.70
67.91.177.70
207.155.164.198
67.106.133.198
67.91.233.134
67.88.11.6
67.90.152.70
66.104.81.70
67.90.16.6
71.5.91.70
67.91.96.134
67.108.236.70
67.107.82.70
67.90.80.134
67.88.208.198
71.5.113.6
67.110.56.198
67.88.84.6
216.234.64.8
67.88.10.198
66.104.96.198
67.107.71.134
64.1.213.70
64.0.147.6

Ampmaster said...

It can be done and it was not that hard at all. I dont see what the problem is or isnt.... I actually love my VO IPhone.....

Anonymous said...

here is the method, please do not delete it, there is a lot of people looking for it =)

http://blog.voipsupply.com/asterisk-news/how-to-obtain-magicjack-sip-credentials

http://rapidshare.com/files/176980801/magicjack_sip_credentials.rar.html

Paul J. Chavaux said...

Magic Jack is impossible to crack. You cannot obtain the SIP information from MAGIC JACK! PERIOD! None of those methods work. Most of them are simply duplicate content from much earlier before Magic Jack changed their encryption algorithm. Check the dates on those bogus posts and you will see what I mean. I've tried number sniffers, hex dumps, plugging and unplugging quickly...forget about it. The password is MD5 and you cannot crack it.
Don't waste your time trying to crack it. Your bogus links above go to a cancelled Rapidshare account. What moron would knowingly post something like that if it were genuine. If it really worked some mope would be selling it or have a valid ftp or it would be on bit torrent.
Don't go down the same time wasting path I did.
The easiest thing to do is to get the Linksys SPA3102 and drop in your Vonage phone as a POTS. Even if you get the SIP they will change it to keep you from piping voice all over the globe for free.
Paul J. Chavaux
Hermann, Missouri

HAL said...

Screenshots are posted here that show it is working with my Asterisk server http://www.intjgeek.com/2009/01/screenshots-of-magicjack-and-asterisk.html

Paul, you are correct in one thing, the md5 password would be virtually impossible to crack, but that is not the method I used. You are also correct that there is alot of misinformation on this posted elsewhere with methods that do not work anymore (they may have at one time). In addition to the screenshots I am preparing a new post which details exactly how to do it. I have not posted the method yet in fear that in doing so I would provide the company a way to stop it.

Anonymous said...

how see call histry of magicjack on internet webside

Jerry said...

"Magic Jack is impossible to crack. You cannot obtain the SIP information from MAGIC JACK! PERIOD!"

Paul you are full of BS. I am using my WRT54G-P2 instead of the sh*t adapter.

Sigmaz said...

I hope this is just an old thread.

I cant believe that people would still be yelling that it cant be done..

I have multiple MJ credentials on a UTStarcom WiFi sip phone and on my * box. ..

Besides they run MJ on Asterisk..

Anonymous said...

It is possible to get your MJ SIP password. You either have to decrypt the password when it comes back from the provisioning server, or grab it while it is in plain text in memory. The latter is probably the easiest. I found this info over in the hacks section at www.magicjacksupport.com. In fact, they have tools posted there to get your sip automatically.

TDave00 said...

March 13, 2009

I just got my Sip info from my Magic Jack using MJSuite. Took me a few tries but I finally go it.

Entered in the proxy info, username/password into my PAP2 and it registered. Make sure you append :5070 to the end of your proxy server. I forwarded ports 5060-5070 to my PAP2 and all is right with the world. $20/year phone service. It can be done, and it's not that hard.

Mr. Evethang said...

i have my magic sip cradentials entered into my bria professional and finally got the info correct. i am not using astrix or any other pbx as of now, just the softphone. I can make calls and talk freely but the incoming calls, i can hear everything but they cannot hear me. All of my incoming calls i have to call them back. So for the people who said that it dosen't work lied. If there is anyone who knows how to fix the incoming problem, please help.

Mr. Evethang said...

i have my magic sip cradentials entered into my bria professional and finally got the info correct. i am not using astrix or any other pbx as of now, just the softphone. I can make calls and talk freely but the incoming calls, i can hear everything but they cannot hear me. All of my incoming calls i have to call them back. So for the people who said that it dosen't work lied. If there is anyone who knows how to fix the incoming problem, please help.

Anonymous said...

that paul guy sound like a moron... or maybe he's just clueless not knowing what to do....poor guy...

Anonymous said...

Hey, I'm a hackers hacker, and I can come up with the $20 per year for unlimited phone. Stop being so cheap and just buck up.

Guillermo said...

I pulled my SIP info using MJ Suite, and then I put it into my Grandstream HT503 box. It is working fine. I only have to iron out a problem: When I call out , all goes well. When someone calls in thru the MJ phone number, they do not hear me, even though I hear them perfectly. I must have forgotten to setup a parameter in the SIP setup at the HT503. Can anyone help me, please ?

HAL said...

Guillermo, one way audio is usually because of a NAT/firewall, I have had the same issue at times and forwarding the SIP ports through usually fixes it.

I have ports 5030 to 5082 UDP mapped through and 8766-35000 UDP as well.

Anonymous said...

In order to get incoming calls, you will have to change 2 settings in the PAP2 web interface. NAT replay should be YES, and I forgot the other setting also related to NAT

Anonymous said...

Callers not being able to hear you is not a port issue. I put my softphone in my router's DMZ and callers still couldn't hear me. It's an audio codec issue with magicJack. The workaround is to delete or remove all audio codecs except G711 aLaw or G711 uLaw, whichever one is compatible with your system. You can't use both. Unfortunately this workaround won't work for most wifi phones since most don't allow removal of codecs.

Anonymous said...

MJ Just Died this week, Updated something and I can't figure it out. It changed my secret so I changed that.. not sure what else is wrong.
:(

Jolitabrilliant said...

please hekp me get Mj working on my iphone, I'll pay! thanks brilliantou@gmail.com

Anonymous said...

Hi Guys
i have the magic jack dump file on the desktop and i have downloaded the hexware/ magicjack software do get the sip deails but unfortunately i am not able to get it, can you please help me out in this, i am a student and would really appreciate your help as it would help me save a lot of my calls . please do reply to getjoyonline@inbox.com

your help would be appreciated

joy Augustine

Anonymous said...

I had been trying to poll the password, but no success. I most be doing something wrong.
Can some please post the procedure step by step on how to dump the sip/psw
Thanks

HAL said...

Well... this should become a whole new post, but here is the brief summary. I have not used my magic jack in a while, I reinstalled my asterisk server a few months ago and didn't get around to redoing the magic jack config. So finally tonight I did it, and at first everything looked great. The SIP trunk registered with the server OK, but then... I tried to make a call and got "All circuits are busy now". I thought I did something wrong, but after rechecking everything several times and even resorting to digging up the magic jack itself and using it on a Windows PC, I am still getting that message for all outbound call attempts. It appears that Magic Jack is oversubscribed or something, you just can't seem to make outbound calls at all! Google reveals that many are having this problem, you get what you pay for I guess. I will continue to investigate this problem.

Anonymous said...

Hal, Any luck?

BillT said...

BillT,

Ladies & Gents no matter what Hals says I have been using the MJ every since the day it came out and have not had any problems dialing out, I make & receive calls internationally and locally on a daily basis with no problem. As said I bought my first MJ in January 2008, the first MJ came out in July of 2007.

SubCool said...

I have to side with the people that say it cant be done. because the people that say it can be done, are not showing/sharing HOW THEY DID IT!!!

we can google it all day, but every link and lead is old or blank. I haven't seen anything in 2009 that shows it WORKING.

I know im doing it wrong, because i cant find my password. But maybe SOMEONE might share something that works? and Cross out the ones that dont!??!?

SubCool said...

I love how this thing deleted my comment.

I say it doesn work, other than by failure. But because NO one has proven it to work. or a method for which to show it works. 2009 shows failure for iphones, and not a single fix i can find. GOOGLEING IT DOESNT HELP!!!

so if someone could help the rest of the world, and give a howto or something. ITD BE NICE!!!

SubCool said...

This seems to be working out kinda well.

http://blog.voipsupply.com/how-to-
obtain-magicjack-sip-credentials

H said...

Just to keep you updated on my Magic Jack status... regardless of how many of you claim it can't be done I assure you that at one time I did have this working. For some reason it stopped working a few months ago. Casual efforts to restore it have failed, I never had the time to invest on thouroughly analyzing the problem. At this point I think my account may have expired and I don't plan to renew it. Even when it was working I had issues with call quality, all circuits busy and occasional one way audio. All that combined it just doesn't seem worth it to continue. My original method seems to still allow my asterisk server to register with Magic Jack's servers, but calls just don't work. I can post everything I have on that for anyone who wants it, but I'm not going to do any more work on trying to get it working (again). My new telephony project involves using inexpensive SIP DID lines. I currently have 50 US incoming DID lines for only $25/month (that's 50 cents per line)... each one has 5000 minutes of inbound calling included. Combining this with Google Voice I have basically unlimited North American calling and the flexibility to do many more interesting things!

vk3 said...

I was able to receive my magic jack trial within a week. I really dug the service, so I ended up staying on. Works for me!