DOS pCNJg @ hpNup`dos.library#_Yf sale all the time for $14.95, and they only cost $19.95 when they're not on sale, and they can save you thousands, so it's well worth it. While at Radio Shaft, pick up some alligator clips also. Cut the modular plug off the fone, then solder an alligator clip on to each wire, and try to match the colors, black and red. You now have a fully functional beige box. Now go find a phone terminal box. There's one on every house, and apartment building in the world. Also, if you live near S|Sfuture issues, such subjects as The Network, colored boxes, telephone electronics, central office equipment, operators, special #'s, and much, much more will be covered. LONG-DISTANCE SERVICES: ----------------------- In an attempt to offer lower prices, alternatives to Bell have been set up. Services such as Sprint, Metrophone, ITT, MCI, Travelnet, and many others are all familiar to us. These services are known as Specialized Common Carriers (SCC's) or Other Common Carriers (OCC|P^z's). [Don't confused this with Switching Control Center, also known as SCC] The basis of all these services are that they own their own switching equipment. First, we will look at those services which use a local dial-up. The principle of these are: 1) You dial the local #. 2) When it picks up you get a 2nd dial tone, you then enter a code. 3) You then enter the destination # & whalla, you're connected--a free call! Next, we will look at several of the services: SPRINT: ---|٨"---- Sprint, also known as SPC, was one of the first LD services. Many boards contain SPC #'s and I plan to include a list of them as an appendix to this course so you can find your local #. The codes for SPC are 8 digits long. SPC is not considered safe, since many people have been busted on it! It is common knowledge that Sprint has declared war on phone phreaks. So, fight back (with care)! {914 dial-up--> (914) 997-1616} METROphone: ---------- Metrophone, owned by Western Union|, is very popular among phone phreaks due to the large abundance of codes and it (at the time of this writing) is considered fairly safe. Recently (7/84), Metrophone has allegedly been placing "trap codes" on BBS's which are being traced. I suggest that you hack your own for safety purposes. The code is 6 digits long. To find out the local dial-up for your area, just call (800) 325-1403 and ask the "nice lady" for the # for your area. FORMAT: At tone--> code+area code (NPA)+destin|.ation # NOTE: NPA & A/C are abbreviations for area code. ITT: ---- ITT is a little different in that upon hearing the dial tone after calling the local access #, you enter the a/c and then the #. You will then hear a short tone, you then immediately enter your 7 digit access code. {dial-ups:(212)248-0151, (914)997-8576} FORMAT: At tone, destination # + 7 digit access code. MCI: ---- MCI has dial-ups in most areas but the codes are not interchangable (ie, a code that works f| Cor the New York dial-up will NOT work for the Boston dial-up). FORMAT: At tone, 5 digit access code + destination #. MCI CREDIT CARD (MCI CC): ------------------------- This MCI service also known as MCI Execunet, is for people who travel alot (ie, business pigs) & need a code that works in several places. Therefore, the codes on this system are interchangable throughout the dial-ups unlike the regular MCI service. FORMAT: At tone, 7 digit access code + destination #. {212 dial-| Pʻup: 248-0151} NOTE: You can usually call up the companies customer service #, and say you just moved or that you are traveling and ask for the access # for your area code. To find out the customer service # call dir. asst. at (800) 555 1212. ============== =950 Exchange= ============== The 950 exchange is a nationwide access exchange, in most areas, that includes several SCC's. All services on this exchange are considered dangerous due to the fact that they have the ability to tr| !sace. The currently working numbers in many metropolitan areas in the US are: 950-1000 SPC (Sprint) -1022 MCI Execunet -1033 US Telephone -1044 AllNet -1066 Lexitel -1088 Skyline This exchange will probably be phased out when customers choose their LD carrier as a result of "equal access." SKYLINE: -------- SBS Skyline is a new service owned by IBM, Comsat and AEtna. It has the same local access # across the country: 950-1088. It is supposed to have 6 (possibly 8) digit cod x;7ade by a woman identifying herself as a Telecom official. At least a dozen complaints were lodged yesterday over the hoaxes and many more calls are believed to have gone unreported. All complaints came from people living in, or near, Mt Druitt. In each case, the victim answered their phone to a recorded message on which a woman claiming to be from Telecom said she had a Christmas message for them. She asked them to wait for a beep at which point the voice of a man shouting ob Nscenities cut in. The woman's voice then came back on the recording, asking the victim to wait for another beep after which they could leave a message telling Telecom what they thought of their Christmas 'present'. [JA: hahahaha!] Wendy Betts, from Mt Druitt, had just gone to bed at 11.30pm on Sunday when she received one of the abusive calls. 'The woman sounded very official - well spoken and intelligent and quite elderly - so at first I thought the call was fair dinkum,' she Ttjsaid. 'Then the bloke got on and started screaming abuse at me, and all the time he would stop to say "hello, are you listening?".' A Telecom spokesperson said the matter was being lookind into by the company's investigative branch, Protective Services. She said making obscene telephone calls was a criminal offence and that the perpetrators faced up to 12 months jail or a $6000 fine if caught. However she said it was very difficult to trace offensive phone calls when they were made randomly as they appeared to have been in this case. ---------------------------------------------------------------------------- 'TELECOM WARNS OF CALL CON' - The Daily Telegraph Mirror, Dec. 23, 1992. ---------------------------------------------------------------------------- SYDNEY phone subscribers are being asked to provide confidential personal details about themselves and their credit cards in an elaborate telephone con discovered by Telecom. In warning about thعBqe con, Telecom investigators yesterday urged anyone who may have fallen for it to contact his or her bank. Telecom spokesperson Margaret Finch said the con is believed to have been operating in Sydney for only a couple of days, but so far no-one appears to have fallen for it. 'We have received complaints from 15 people; there could well be more,' Ms Finch said. The con involves a woman's voice in a recorded message played down a victim's telephone line in late night calls, she s|{aid. Victims appeared to be selected at random. The caller tells the victim that due to a computer malfunction their previous Telecom repayment was not recorded. 'They are asked to give details about themselves and their credit cards and the previous bill paid to Telecom,' she said. Telecom is also investigating a series of obscene telephone calls in Sydney's west made by a woman idetifying herself as a Telecom official. But it is not known if it is linked to the con. -   -------------------------------------------------------------------------- ACID: Well WHO THE FUCK was responsible for that ABUSE?! HAHAHAHA! --------------------------------------------------------------------------- IN THE NEXT ISSUE OF ABUSE: =========================== - A FULL documentation on hacking ASPEN VMB's, - Australian VMB system listing, - A full list of the toll-free Australian 0014-800-125-xxx numbe!krs, - US partyline listing, - Hacking credit cards voice, - Some working codes & info, - More overseas stuff (with your help!), - Hack/Phreak stuff, - Whatever contributions we get (send us some!). CREDITS FOR THIS ISSUE OF ABUSE: ================================ Main Editor/Organizer.....................................Acid Co-Editor/Organizer.......................................Voltage Australi"'&an Organizers.....................................Acid & Voltage Canadian Organizer........................................Punisher New Zealand Organizer.....................................Contact Us! USA Organizer/s...........................................Contact Us! UK Organizer/s............................................Contact Us! Wherever Organizers.......................................Contact Us! Ansi art..........................................#9........Acid & iTeC Original Concept..........................................Voltage Thanx goes to Frantic for the magazine name! - Hack/Phreak stuff, - Whatever contributions we get (send us some!). CREDITS FOR THIS ISSUE OF ABUSE: ================================ Main Editor/Organizer.....................................Acid Co-Editor/Organizer.......................................Voltage Australi"k_n the terminology section because I planned to detail it here anyway). A TRUE beige box is really a Telephone Lineman's handset, they cost around a thousand bucks. However, anything you can use to clip onto a phone line and dial a call can be termed a beige box. Here's how to make one... Go to Radio Shaft, and get their real cheap one-piece fone, the one that's just basically a fone handset, with a modular cord coming out of it, and ending in a standard modular plug. They're onVbination go wild, you can come up with a lot of good shit. Here are some examples of stuff what you can do: This one is just used to find out information on people: 'Hello this is Mike Thomas from Australian Telecom, we are currently doing a survey on our equipment and our services. That's why we are going through Telecom Messaging to reach a lot more callers at 1 time. The 1st Question is: Do you own a Telecom Telecard, If so how often do you use it? The 2J nd Question is: What do you think of the service that we provide? The 3rd Question is: If you could change anything about our service what would that be and why? Thank you for taking your time to answer these questions. All we need from you now is your name and telephone number to go in the draw for the Telecom sweepstakes of $10000 dollars for answering the questions. And remember to leave your answers and name after the tone. BYE'. The above is good for f9Q=inding out information people eg. like I said do you own a Telecom telecard. IF they say yes you could ring back and hack all their shit from them.. The above was set out for Australians only but you can change things around to suit such things as AT&T, MCI, Sprint Etc.. Do the following for a laugh: SAY: 'CONGRATULATIONS! Thanks to Holden General Motors And Telecom Australia you have just won a Holden Executive valued at 22 thousand dollars. The reason for you winning t;8jhis fabulous car is that Telecom Australia put together a random dial program to promote the new Holden Executive 1993 model, and your phone number was the one phoned up! All we need from you is your name, telephone number and address to contact you as soon as possible. Oh and one last thing could you tell us in 25 words or less why you like Holden motor cars. And remember to speak after the tone..'. The above is a good thing for a laugh as they get all excited, and the funny thing about it is when they have to say 25 words or less on what they think of Holden cars.. Overseas people change it to what ever you want, this is just a basic outline of what to say.. We did it to this person once and when he had to talk about Holden in 25 words or less he went on for about 2 minutes. So we rang this guy back by voice this time and said I'm sorry to say this but you didn't win the car as you went over 25 words. Listen to the shit that comes out from them. Hehe cool st uff. Later.. -------------------------------------------------------------------------------- ABUSE WORLD NEWS ================ ----------------------------------------------------------------------------- 'SEE-FIRST CALL PLAN' - The Daily Telegraph Mirror, Dec. 30, 1992. ----------------------------------------------------------------------------- A system where the caller's number flashes up on the receiver's telephn;uone while it is ringing will be tested next year. This lets the person being called see who is calling before answering. After the test by Telecom, the tele-communications watchdog Austel will decide if the service should stay. But telephone companies will have to satisfy fears of invasion of privacy before a final go-ahead. ---------------------------------------------------------------------------- 'SYSTEM TO CUT PHONE COSTS' - The Daily Telegraph Mirror, Dec. 29, 1992. ؝) ---------------------------------------------------------------------------- A local company has come up with a computer program it says will help any business cut down its telephone bill. The product is Calldata, developed and marketed by CSM International of St. Leonards [Sydney]. CSM managing director Malcolm Monk claims Calldata will be of benefit to any business with a monthly telephone bill of more than $1000. Linked to the company telephone system, Calldata runs in the [background mode on a non-dedicated IBM compatible personal computer, allowing the user to carry on without interruption. Mr Monk says that about 2500 businesses have bought the software. They range from the Boral group, Comalco and Radio Rentals to the NSW Attorney General's Department, the Sydney Opera House and various Rugby League clubs, including the Brisbane Broncos and St. George. 'As a management tool Calldata skins the fat from the telephone system,' Mr Monk said. ' Ksuest detectives 914A - Attempted suicide 914C - Request coroner 914D - Request doctor 914F - Request fire dept. 914H - Heart attack 914N - Concerned party notified 914S - Suicide 915 - Dumping rubbish 916 - Holding suspect 917A - Abandoned vehicle 917P - Hold vehicle for fingerprints 918A - Escaped mental patient 918V - Violent mental patient 919 - Keep the peace 920 - Missing adult 920A - Found adult/Missing adult 9?ЗS20C - Missing child 920F - Found child 920J - Missing juvenile 921 - Prowler 921P - Peeping Tom 922 - Illegal peddling 924 - Station detail 925 - Suspicious person 926 - Request tow truck 926A - Tow truck dispatched 927 - Investigate unknown trouble 927A - Person pulled from telephone 927D - Investigate posible dead body 928 - Found property 929 - Investigate person down 930 - See man regarding a complaint 931 @N8( - See woman regarding a complaint 932 - Woman or child abuse/Open door 933 - Open window 949 - Gasoline spill 950 - Burning permit 951 - Request fire investigator 952 - Report condititions 953 - Check smoke report 954 - Arrived at scene 955 - Fire under control 956 - Availble for assignment 957 - Fire under control 960X - Car stop - dangerous suspects 961 - Take a report/Car stop 962 - Subject is armed and dangeA~Vrous 966 - Sniper 967 - Outlaw motorcyclists 975 - Can your suspect hear your radio? 981 - Frequency is clear/Need radiological 982 - Are we being received/Bomb threat 983 - Explosion 995 - Labor trouble 996 - Explosion 996A - Unexploded bomb 998 - Officer involved in shooting 999 - Officer needs help - urgent! 10-1 - [BOTH] You are being received poorly, [MISS] Change location 10-2 - [BOTH] You are being received ok 10-3 ,Z6 - [BOTH] Stop transmitting/Change channels 10-4 - [BOTH] Ok, Acknowledgement 10-5 - [BOTH] Relay 10-6 - [BOTH] Station is busy, standby unless urgent 10-7 - [BOTH] Out of service - radio off 10-8 - [BOTH] In service 10-9 - [BOTH] Repeat last message 10-10 - [CA] Out of service - radio on 10-10 - [MISS] Fight in progress 10-11 - [CA] Give FCC call sign/Transmitting too fast 10-11 - [MISS] Dog case 10-12 - [CA] Visitors present 10-12 - [MIC/essage to notify you that as of Tomorrow morning your phone will be disconnected because of an outstanding amount of $18.30. If you wish to prevent this from occuring please pay your outstanding amount as soon as possible by going to your local Telecom office tomorrow at 9.00am or preferably, pay by phone by leaving your name, credit card number and expiry date after the tone. Failure to take one of these options will lead to disconnection and a substantial bond may be required for rDXeconnection. Thankyou. ############# Or use this one (I haven't used it yet...): Hello, this is a Telecom Australia message notifying you that due to financial difficulties with a number of our clients we now require payment of a $30.00 bond on all our minor accounts. Payment must be made as soon as possible by going to your local Telecom office tomorrow at 9.00am or preferably, pay by phone by leaving your name, credit card number and expiry date after the tone. Failure to take o E -6ne of these options will lead to disconnection and a substantial bond may be required for reconnection. Thankyou. ########### Or if things start getting desperate, record a mailing list in an 'upper' class and send this message: Hello, this is a Telecom Australia message notifying you that, , due to a computer breakdown your last payment made by credit card was not processed. Therefore to prevent disconnection of your phone line please state your name, credit card n F7?umber and expiry date after the tone. I repeat, please state your name, credit card number and expiry date after the tone. Thankyou. Have fun! JA -------------------------------------------------------------------------------- FUN WITH VOICE MAIL BY VOLTAGE ============================== After hacking all these voice mail boxes, we thought there could be something else we could use them for, instead of just leaving messages to  Gkother people. So we looked around and found a nice little option called send to a phone number. What we want to concentrate on here is sending messages to people's phone numbers. The system that I'm going to talk about is MESSAGEBANK, I know there are a heap of different systems that can do this as well but we are just going to stick to a basic system. But before I go on, this is not a text file on how to use the send command but to tell you how you can have fun with it. Ok let's t H!C>ake it from the start, you first have to find a voice mail for yourself [Hey! You could buy one off us!]. Once you have your voice mail box, you have 2 choices on how you want to send a messgae to a phone number. 1. Is sending to a number, or 2. Send to a heap of numbers at once. Well I recommend send to a heap of numbers. To send a heap of numbers you have to create a group list, which is done by doing 3 + 3 + 2 from the main menu. A group list can contain up to 20 phone num +;}Mbers, and you can have 20 different group lists. After following instructions on the system on how to add a phone number in go back to the main menu and press 2 to send a message to a phone number. It will then ask you for a mail box or telephone number to send the message to. Ok just presume that your group list is list 1. So what you do now is enter 1 when you hear the above prompt then press *. It will then say something like 'group list one... after the tone please record your  JI{=local use...? 6th dig=ext.spkr. 11 * 11 * 1010 Option Code #2 (right to left, 0's or 1's) 1st dig=Eight hour timeout 2nd dig=Always one 3rd dig=Long tone DTMF 4th dig=Motorola enh. scan Finished? Press SND to sto Kre the stuff; press # to exit and not save. CLR at any step will revert the displayed data to the previous value. Watch out for the counter, though, you just might be out of quarters (heheh).... To screw with the EPROM, you'll probably need to remove it or get a Motorola part #30-84406R01 test connector. If you do THAT, just pressing the # key will put the phone in manual test mode. This "test connector" is a  LpS very simple 25 pin M/F inline connector that just changes a few pins on the set. If I can grab a schematic, we'll all have one by summer. Later, grendal Police Codes ------------ Ever wonder what those codes you here are when you are scanning the pol78xice band with your home-scanner? Well for those that are interested here they are. Code A - No rain expected Code B - Rain expected Code 1 - Answer on radio Code 2 - Proceed immediately w/o siren Code 3 - Proceed w/ siren and red lights Code 4 - No futher assistance neccesary Code 4A - No futher assistance is neccesary, but suspect is not in custody Code 5 - Uniformed officers stay away Code 6 - Out of car to investigate Code 6A - Out of caNMB and don't blue box. A much safer (although still dangerous) way to call for phree is by using codes. Start by getting yourself a code hacking program (my favorite is P-Hack, another popular one is Code Thief) from a p/h BBS. Set it up for the extender you are hacking (try 9501493 if you live in Southern California). You'll need to know the phone number for the extender, the dialing order, and the number of digits they use in their codes. You also need a list of modem numbers that O will never be busy, but most code hackers come with a list of Telenet dialups built right in, so you almost never have to worry about it. See, the way this works is the program figures out a code to try, calls the extender, enters the code, then the modem number, and if there's a carrier, the code is valid. You need to know the dialing order since some LD companies have you dial the phone number first, then the code. You also need to figure out a template to hack on, which most progPrams allow you to enter as a series of digits with X's in it. Any digits will be used verbatim, and an X means "any digit". For example, if your template was 1X1XXX, the code hacker will randomly generate codes with a "1" as the first and third digits. Also, most hackers will allow you to enter an amount of time to delay between hack attempts, and it is very important to use this feature if the hacker you are using supports it because some hacker busting procedures use the numbeQϑr of times a number is called within a certain period to decide if something is shady. I always use 1 minute and 30 seconds as my delay, and I've never been caught. It is also a good idea to be hacking several extenders at once if your hacker supports it. Let the thing fly, go to bed, and when you wake up, the Code Fairy should have left you a nice little present (or several!). NOTE: I did not go through the details of setting the hacker up to work with your modem, since I assu Rb7me you can handle such a task. Ok, so now you've hacked some codes, and you're ready to use them. Well, go to a pay phone, dial the extender, wait for a tone, enter the code (this assumes code-first dialing, of course), wait for another tone, then enter the area code and phone number you are calling, and you have just made a call FOR FREE! NOTE: You must ALWAYS use the area code, even if it's the one you're in. You can also use this to call out-of-state BBSs for free, and it's esp!5[pecially easy with Telix... You just make the phone number in your dialing directory "!,,,@,,7146469180" (for example, substitute the number of the BBS you want to call), and then set up the long distance codes in Telix... Set "!" to the extender, and "@" to the code, and you're set. Wow! Now you've been using codes for awhile, saving all kind of cash on fone calls, but, "Is this all?" you ask... Well, NO!, it's not. There's another fun thing called a Beige Box (I didn't put this iTCߎj---\|/-----\/|/-----\/----------\/------|/------- A B U S E I S S U E O N E - F E B R U A R Y 1 9 9 3 ---------------------------------------------------------------------------- ========================================== TABLE OF CONTENTS FOR THIS ISSUE OF ABUSE: ========================================== - Introduction.............................................Acid - Hacking credit cards usingUqa& Telecom VMB's.................Jorrem Almighty - Fun with voice mail......................................Voltage - Abuse world news.........................................Acid & Jorrem - What's up next issue.....................................Acid - Credits for this issue & where to contact us.............End of magazine ---------------------------------------------------------------------------- INTRODUCTION V ============ Welcome to the very first issue of ABUSE text magazine. Through the pages of ABUSE we hope to keep you informed of any topics of interest connected with hacking & phreaking in general. We apologize for the lack of size of this issue, but this is only because just 3 guys have worked on the magazine over a period of a few weeks. We are hoping for a good response to our request for more contributors, both overseas and in Australia. If you're interested in helping ouWt in any way, either with a permanent position on the team, the odd article, or just a one-off contribution, please don't hesitate to contact either myself or Voltage. Now sit back and relax, and enjoy the first issue of ABUSE. Later. ---------------------------------------------------------------------------- HACKING CREDIT CARDS USING TELECOM VMB'S ======================================== Idea created, developed and enhanced by: B[C[ Acid Jorrem Almighty Dirty Snake Text file Written By: Jorrem Almighty -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- What to do: Hack a Telecom VMB (See one of our previous text files on how to hack them.) Record a mailing list in an area and send this message (in an official voice): Hello, this is a Telecom Australia mY7a get their name and address. This is not as easy as it sounds since some CNA dialups require talking to an operator, which may be suspicious of you, plus you need the code. Some CNAs are automated where you call and enter the number on a fone keypad,then the code. Some you call with your modem. COSMOS: The fone company's operating system. NPA: Stands for Numeral Prefix Allocation. An area code in layman's terms. ZJ>% Code Hacker: A program which repeatedly dials an extender, trying different codes, and logging which ones are valid. This is the main method which most phreaks use to get their fone calls. Telenet: This is a large network of computers. You call a Telenet dialup, then if you know a machine's NUA (its address), you type it in, and connect. This is good because there are Telenet dialups local to everywhere, and then you can con[nnect to computers on the network no matter where they are. Other networks like Telenet include Tymnet and the Internet (the largest network on earth, a network of networks, really). [C] Carding/Scamming/Etc Terminology CBI: This is a multi-use acronym which stands for Credit Bureau Information. It is used to refer to: [1] the information given by a credit reporting agency [2] the concept itself [3] a code use\ud to access such a service [4] it is also used by one such reporting agency (namely Equifax) to refer to itself. Basically, if you have a CBI access code (normally just called "a CBI"), you can call a CBI dialup, enter the code, someone's name and address (or their Social Security Number), and you will get all credit info on them, including account numbers. This is quite useful as I'm sure you can see. Drop Site: This i]|Dts where the carder would have the carded merchandise sent to, since only a Data would send the shit to his own house. [D] Warez Terminology Cracker: This is the person who actually breaks the copy protection on a piece of software. This often involves using hex editors,etc., and is quite difficult. Courier: This is a person whose sole job is to upload the cracked warez to as many BBSs as possible so as to distrib^5sute the software as widely as possible. This is most of the terminology you will see popping up in message bases and text files. I haven't (by any means) covered all of the terms out there, but these are some of the most common, and should help you greatly. If there are any you can't figure out, send me email (you can find me, I'm everywhere), and I'll help, and will probably add it to the next version of this file. ------------ ABOUT MYSELF_;RK ------------ Before I get to the next section (which will detail techniques for doing these various Underground activities), I'd like to tell you a bit about my experience. I started screwing with computers when I was only 10. My grandmother gave me a Commodore 64 for Christmas (note: this was 12 years ago). I started fucking with BASIC, and decided it sucked penii, so I learned 6502 Assembler. About five, maybe six years after that, I got an Ami`o Bga, and then learned C. I had also got a modem, and you KNOW what that led to. Shortly after (like 2-3 years), I got my first IBM Clone and started really "undergrounding it". In late 1989, my BBS went up for the first time, then called Motel 666. By the time April 1990 rolled around, the Motel, and two other BBSs (The Drop Site and Louder Than Bombs) were probably the most active p/h systems in the Southern California area (and some might say the ca,nqountry...). My BBS has been up and down many times since then, due to forced sales of my computers, but the BBS is here to stay now, since this computer was paid for legit, with cash. So, what all this means, is that when I talk about this stuff, I speak from experience. I've done all this stuff. And if I'm not too experienced in a certain area, I'll say so. My reason for doing this is to revive the Underground to its former glory by crbeating interest in it among newcomers, in the hopes that they'll spread it, and it'll grow and become the Underground it used to be. ---------- TECHNIQUES ---------- NOTE: EVERYTHING DESCRIBED IN THIS SECTION IS UTTERLY AND TOTALLY AGAINST THE LAW AND IF YOU GET CAUGHT YOU WILL GO TO JAIL. THE AUTHOR OF THIS FILE ASSUMES NO RESPONSIBILITY FOR ANYTHING THAT HAPPENS BECAUSE OF THIS INFORMATION. IT IS JUST HERE FOR EDUCATIONAL PURPOSES ONLY. YOU HAVE BEEN WARNED. I. PhreakingM. Techniques Anyway, so you're a new phreak, and you wanna commit your first phraud. Well, if this were the late seventies/early eighties, I'd tell you to get a blue box, and blue box away. A blue box is a device capable of making the tones which telco operators use to control the phone system. However, since this is 1993, I'll tell you DO NOT BLUE BOX! They WILL catch you and you WILL go to jail. Unless you are fond of anal sex with niggers possessing 23 inch penises, take my adviceEd!A that were invented and are available today. HOLLERITH - With this system, holes are punched in a plastic or paper card and read optically. One of the earliest technologies, it is now seen as an encoded room key in hotels. The technology is not secure, but cards are cheap to make. BAR CODE - The use of bar codes is limited. They are cheap, but there is virtually no security and the bar code strip can be easily damaged. FJ7E INFRARED - Not in widespread use, cards are factory encoded by creating a "shadow pattern" within the card. The card is passed thru a swipe or insertion reader that uses an infrared scanner. Infrared card pricing is moderate to expensive, and encoding is pretty secure. Infrared scanners are optical and therefore vulnerable to contamination. PROXIMITY - Hands-free operation is the primary selling point of this card.  f/3ke minded modemers often get together and form an organized Group and publish Magazines (electronically, as files on BBSs), or distribute warez. Some of the most famous Groups (some are LOOOONNNGGG gone) are: LOD (Legion of Doom), CHiNA (Communist Hackers in North America), CuD (Computer Underground Digest), Phrack, P/HUN (Phreakers/Hackers Underground Network) - p/h groups; THG (The Humble Guys), INC (Inter national Network of Crackers), the FiRM ( g¤+First in Releasing Most) - warez groups. Of course, there are/were MANY more, these are just the most common ones you'll see being referred to. TERMINOLOGY ----------- Many new Undergrounders have trouble figuring out all the terminology used and are of course afraid to make a post asking for help for fear of looking lame, so I'll help with a simple list... [A] General Underground Terminology Data: This is the handle of someone w htHJho used to be a modemer. He is now a worm feast (corpse). He basically pissed off too many people by being a lame asshole dick, and got KILLED. His real name was Stuart Tay, I'm sure you've heard of him. This term is really great, and has SO, SO many uses... "He's a Data" ... "He pulled a Data" ... etc etc etc Lamer: This is someone who claims to be knowledgeable/active in some area of the underground, but in i'j fact knows/does nothing. An example would be a 2400bps user claiming to be a great warez courier. Leech: This is someone who calls BBSs and just downloads everything in sight without contributing anything (or uploading garbage just to get credits). [B] Phreaking/Hacking Terminology (NOT in *ANY* order) Rebecca Bigley/Bitchley: The former chief of security at TheftyTel, a California private LD service provider. Aj֙e famed Hacker Hunter and bitch from hell. Extender: This is an important phreaking term. It refers to the number you call when accessing a Long Distance Carrier's service. An example is 950-1493, which is ThriftyTel's Extender. ANI: Stands for Automatic Number Identification. If you call a telephone number that has ANI, your number (and sometimes address) shows up on a console at their location (or is logged mpto a printer, disk file, etc). This is bad, since most private long distance carriers use it to see who is calling their extenders. ESS: Stands for Electronic Switching System. It is the system most Bell Organizations use to switch calls. It is what makes horrors like ANI possible. Gestapo: This is used to refer to any security/law enforcement agency. Its meaning should be obvious... SS: Stands for Secret SerlThknowledge of phreaking and how it is done. It is not a DIY manual. Some files may not be relevant to the country you live in, but we do try to provide a variety of philes from all over but we do tend to support philes covering our favourite phone companies, those being BT and AT&T. Where possible I have converted philes to 77 columns as this is my wordpro setting but if you do find any errors or overlaps please tell me! Some files are from different computer formats and are in 40 v+fJcolumn formats or UPPERCASE which I hate but don't want to waste my time editing. Phreaking Only 3 has been tested on an A500 with 1MB memory and an external drive although I can't see any problems with other machines. If there is please tell me. The official release date is 1/8/94 for all you swappers out there who drool over release dates! ;) Kei/CyberDreams lpaper. Phreaking Only is a collection of files both new and old collected together to provide you with a basic X4vice. Any similarities between "SS" being used to refer to the Secret Service and the "SS" of Nazi Germany during World War II is by no means co-incidental, believe me. CNA: This acronym stands for Customer Name/Address (also could be CNL - Customer Name/Location). Basically, if you have the CNA dialup for an area code, and someone's fone number in that area code, you can call the CNA dialup and give their fone number, and :o your friends, family, and co-workers to help! "Hey, can I, ahh, like BORROW your MCI calling card tonight? I'm working on an, ahh, EXPERIMENT. Please?" Just...be honest! Also, do some trashing. People will often BEND expired cards in half, then throw them out. Simply bend them back into their normal shape, and they'll usually work (I've done it!). They may be expired, but they're not ERASED! ------------------------------------------------------------------------------- -=M;p#Qastercard=- Number on front of card -> 1111 2222 3333 4444 Expiration date -> 12/99 Track 2 (BCD,75 bpi)-> ;1111222233334444=99121010000000000000? *** Track 1 (ALPHA,210 bpi)-> %B1111222233334444^PUBLIC/JOHN? * Note that the "101" was common to all MC cards checked, as well as the "B". ------------------------------------------------------------------------------- -=VISA=- Number on<q

1111 2222 3333 4444 Expiration date -> 12/99 Track 2 (BCD,75 bpi)-> ;1111222233334444=9912101xxxxxxxxxxxxx? *** Track 1 (ALPHA,210 bpi)-> %B1111222233334444^PUBLIC/JOHN^9912101xxxxxxxxxxxxx? * Note that the "101" was common to all VISA cards checked, as well as the "B". Also, the "xxx" indicates numeric data that varied from card to card, with no apparent pattern. I believe this is =rv+Athe encrypted pin for use when cardholders get 'cash advances' from ATMs. In every case, tho, I found *13* digits of the stuff. ------------------------------------------------------------------------------- -=Discover=- Number on front of card -> 1111 2222 3333 4444 Expiration date -> 12/99 Track 2 (BCD,75 bpi)-> ;1111222233334444=991210100000? ******** Track 1 (ALPHA,210 bpi)-> %B1111222233334444^PUBLIC/JOHN___^99121010>sA0000? ******** Note, the "10100000" and "B" were common to most DISCOVER cards checked. I found a few that had "10110000" instead. Don't know the significance. Note the underscores after the name JOHN. I found consistently that the name data field had *26* characters. Whatever was left of the field after the name was "padded" with SPACES. So...for all of you with names longer than 25 (exclude the "/") characters, ?tEPREPARE to be TRUNCATED! ;) ------------------------------------------------------------------------------- -=US Sprint FON=- Number on front of card -> 111 222 3333 4444 Track 2 (BCD,75 bpi)-> ;xxxxxx11122233339==xxx4444xxxxxxxxxx=? * Track 1 (ALPHA,210 bpi)-> %B^ /^^xxxxxxxxxxxxxxxxx? * Strange. None of the cards I check had names in the Track 1 fields. Track 1 looks unused, yet it was always formatted with fi@ueeld separators. The "xxx" stuff varied from card to card, and I didn't see a pattern. I know it isn't a PIN, so it must be account data. ------------------------------------------------------------------------------- -=Fleet Bank=- Number on front of card -> 111111 222 3333333 Expiration date -> 12/99 Track 2 (BCD,75 bpi)-> ;1111112223333333=9912120100000000xxxx? **** Track 1 (ALPHA,210 bpi) -> %B11111Av12223333333^PUBLIC/JOHN___^9912120100000000000000xxxx000000? * **** Note that the "xxx" data varied. This is the encrypted PIN offset. Always 4 digits (hmmm...). The "1201" was always the same. In fact, I tried many ATM cards from DIFFERENT BANKS...and they all had "1201". ------------------------------------------------------------------------------- (Can't leave *this* one out ;) -=Radio Shack=- Number on front of card -> 1111 22Bwk2 333333 NO EXPIRATION data on card Track 2 (BCD,75 dpi)-> ;1111222333333=9912101? ******* Note that the "9912101" was the SAME for EVERY Radio Shack card I saw. Looks like when they don't have 'real' data to put in the expiration date field, they have to stick SOMETHING in there. ------------------------------------------------------------------------------- Well, that's all I'm going to put out right now. As you can see, thCxIce major types of cards (ATMs, CC) all follow the same rules more or less. I checked out a number of security passcards and timeclock entry cards..and they ALL had random stuff written to Track 2. Track 2 is by FAR the MOST utilized track on the card. And the format is pretty much always ANSI/ISO BCD. I *did* run into some hotel room access cards that, when scanned, were GARBLED. They most likely used a character set other than ASCII (if they were audio tones, my reader would havDcpe put out NOTHING...as opposed to GARBLED data). As you can see, one could write a BOOK listing different types of card data. I intended only to give you some examples. My research has been limited, but I tried to make logical conclusions based on the data I received. ** Cards of All Flavors ** People wanted to store A LOT of data on plastic cards. And they wanted that data to be 'invisible' to cardholders. Here are the different card technologies{.d from the project. Surprisingly enough, blue boxing is not solely limited to the electronics enthusiast; AT&T has caught businessmen, film stars, doctors, lawyers, college students, high school students and even a millionaire financier (Bernard Cornfeld) using the device. AT&T also said that nearly half of those that they catch are businessmen. Of course, phone phreaks have achieved an almost cult status. They have also had their fair share of media. In October 1971, Esquire publi3~So interpret all that data on magstripes! But.waitasec, what kind of equipment do I need to read the stripes? Where can I buy a reader? I don't see any in Radio Shack!!" Sorry, but magstripe equipment is hard to come by. For obvious reasons, card readers are not made commonly available to consumers. How to build one is the topic for another file (this file is already too long). Your best bets are to try and scope out Electronics Surplus Stores and flea markets. Do not even bot|"]shed the infamous "Secrets of the Little Blue Box" article which featured phreaks such as Captain Crunch, who took his name from the cereal which one gave away whistles that produced a perfect 2600 Hz pitch; Joe Engressia, the blind phreak; and Mark Bernay, one of the nation's first and oldest phreaks. Others such as Apple computer co-founders Steve Wozniak & Steve Jobs have also had blue box backgrounds. 1971 also saw the publication of the first issue of YIPL, the phone phreak new}~sletter, (now TAP) under the editorship of supreme yippie Abbie Hoffman. Usage: ------ To use a blue box, one would usually make a free call to any 800 number or distant directory assistance (NPA-555- 1212). This,of course, is legitimate. When the call is answered, one would then swiftly press the button that would send 2600 Hz down the line. This has the effect of making the distant CO equipment think that the call was terminated and it leaves the trunk hanging. Now, the user has L}$about 10 seconds to enter in the telephone number he wished to dial -- in MF, that is. The CO equipment merely assumes that this came from another office and it will happily process the call. Since there are no records (except on toll fraud detection devices!) of these MF tones, the user is not billed for the call. When the user hangs up, the CO equipment simply records that he hung up on a free call. DETECTION: ---------- Bell has had 20 years to work on detection devices; ther4l0kher trying to buy one directly from a manufacturer, since they will immediately assume you have "criminal motives." And as for getting your hands on a magstripe ENCODER...well, good luck! Those rare beauties are worth their weight in gold. Keep your eyes open and look around, and MAYBE you'll get lucky! A bit of social engineering can go a LONG way. There are different kinds of magstripe readers/encoders. The most common ones are "swipe" machines: the type you have to physicall5aSy slide the card thru. Others are "insertion" machines: like ATM machines they 'eat' your card, then regurgitate it after the transaction. Costs are in the thousands of dollars, but like I said, flea markets and surplus stores will often have GREAT deals on these things. Another problem is documentation for these machines. If you call the manufacturer and simply ask for 'em, they will probably deny you the literature. "Hey son, what are you doing with our model XYZ swipe reader? 6鯟 That belongs in the hands of a "qualified" merchant or retailer, not some punk kid trying to "find out how things work!" Again, some social engineering may be required. Tell 'em you're setting up a new business. Tell 'em you're working on a science project. Tell 'em anything that works! 2600 Magazine recently had a good article on how to build a machine that copies magstripe cards. Not much info on the actual data formats and encoding schemes, but the device described is a star7Pt. With some modifications, I bet you could route the output to a dumb terminal (or thru a null modem cable) in order to READ the data. Worth checking out the schematics. As for making your own cards, just paste a length of VCR, reel-to-reel, or audio cassette tape to a cut-out posterboard or plastic card. Works just as good as the real thing, and useful to experiment with if you have no expired or 'dead' ATM or calling cards lying around (SAVE them, don't TOSS them!). 8MKZ ** Examples of Data on Magstripes ** The real fun in experimenting with magstripe technology is READING cards to find out WHAT THE HELL is ON them! Haven't you wondered? The following cards are the result of my own 'research'. Data such as specific account numbers and names has been changed to protect the innocent. None the cards used to make this list were stolen or acquired illegally. Notice that I make careful note of "common data." This is data that I noticed 9nq was the same for all cards of a particular type. This is highlighted below the data with asterisks (*). Where I found varying data, I indicate it with "x"'s. In those cases, NUMBER of CHARACTERS was consistent (the number of "x"'s equals the number of characters...one to one relationship). I still don't know what some of the data fields are for, but hopefully I will be following this file with a sequel after I collect more data. It ISN'T easy to find lots of cards to examine. Ask>o actually route calls to certain senders yourself (KP + NPA + 18X + ST) but it is better off not to since it may look suspicious if a call is sent through a sender that it shouldn't go through. Here are the senders: 182 -- White Plains, NY 183 -- New York, NY 184 -- Pittsburg, PA 185 -- Orlando, FL 186 -- Oakland, CA 187 -- Denver, CO 188 -- New York, NY Also, there tends to be alot of talk about the Code 11, Code 12, KP2, STP, ST3P, & ST2P keys. While they do exist the bl\ƅue boxer need not concern himself with them. The first three are used on CCITT System 5. This is the signaling system that the International Senders use to send information to other countries. These codes are usually added automatically just like the language assistance digit [which distinguishes operator (or blue box) dialed calls from customer dialed calls]. The STP, ST3P, & ST2P tones are used when equipment is communicating with the TSPS. These also are automatically added whA\en needed in most cases. [see Telcom III for more on International Switching Centers (ISC)] 11XXX -- miscellaneous operators 11501 -- universal cordboard operator 11511 -- conference operator 11521 -- mobile operator 11531 -- marine operator 11541 -- LD incoming switchboard 11551 -- leave word for time & charges (neat stuff) 11561 -- same as 11551 but for hotel/motels 11571 -- overseas operators -- language assistance The 11XXX series is interesting scanning material. MiscellaneocKus Routing Codes : ----------------------------- Alliance Teleconferencing has several numbers, a few of which are listed below: KP + 213 080 XXXX + ST KP + 305 025 XXXX + ST KP + 312 001 XXXX + ST XXXX = 1050, 1100, or a few others Also, at KP + 317 009 + ST there is a MF tone checker. After the beep-kerclunk, dial in KP + 999 1234567 890 + ST and it will repeat the digits that you pulsed if they are of the right frequency. Tandem Scanning: ---------------- To find all sorts o [f interesting things, you must look. Begin scanning three digit codes in your area (i.e., KP + 000 + ST, KP + 001 + ST, etc.). Keep track of all of your results. Sometimes you must probe things, send additional digits and see what happens, send touch-tone, send it 2600 Hz, rip it apart. You never know, you may run into something phun, like a computer that checks CC numbers. Incidentally, in some exchange you can dial inwards and other box codes directly! For example, 914-121-1111v# will get you a NY inward. The only problem is that a 0 or 1 as the first digit of the exchange is usually prohibited in customer dialing. Somebody may have "accidentally" changed this screening code on your ESS's computer, though -- you never know and it can't hurt to try. WATS translation numbers also take up some of the 0XX & 1XX codes. Finally, certain tones on the blue box can also be used for other purposes. An MF "2" corresponds to COIN COLLECT while "KP" corresponds to COI E+"N RETURN. Thus every blue box is also a green box (see Telcom VI). encing has several numbers, a few of which are listed below: KP + 213 080 XXXX + ST KP + 305 025 XXXX + ST KP + 312 001 XXXX + ST XXXX = 1050, 1100, or a few others Also, at KP + 317 009 + ST there is a MF tone checker. After the beep-kerclunk, dial in KP + 999 1234567 890 + ST and it will repeat the digits that you pulsed if they are of the right frequency. Tandem Scanning: ---------------- To find all sorts op!RE RESOURCES UNKNOWN # SOFTWORKS UNKNOWN # SENORA COMPUTING 504-246-7937 SOUTHEASTERN SOFTWARE 714-562-3670 SOUTHWESTERN DATA 213-644-0056 SPIES LABORATORIES 415-454-6500 STONEWARE 415-964-1353 STRATEGIC SIMULATIONS 217-359-8482 SUBLOGIC COMMUNICATIONS UNKNOWN # SYMPATHETIC SOFTWARE 206-226-3216 SYNERGISTIC SOFTWARE 713-974-6529 SYNTONIC SOFTWARE 213-374-4471 SYSTEM DESIGN LAB (SDL) 703-734-7500 TELECOMPUTING CORP. 213-516-9430 TELEPHONE SOFTWARE E!CONN. 213-682-0347 UNITED SOFTWARE OF AMER. 403-247-1621 WESTERN MICRO DATA 1-800 Voice Mail Systems 1-800-222-5275 VMS 1-800-222-9825 VMS Box:[9]+3 DIGITS 1-800-228-6423 VoiceBank Box:[4] *Another Dialup for 88-Voice* 1-800-262-8477 UniSys Answering Service Box:[4] 1-800-284-6245 Meridian Mail 1-800-323-3433 VMS 1-800-323-4555 Dexter Midland Box:[3] 1-800-323-3938 VMS Box:[4] 1-800-325-5554 VMS Box:[4] 1-800-331-1763 INNOVATIVE SOFTWARMJH(uz {,3 (.1J_*/@qݟ"__1jJ"rAr2@x{C<-.MMG_+K;#b8#3TƔ 9 ?")8;ܷ~;_ R̛h/drUӟOw$@Tc ˈثS0<󚓧b=| '#37{/e s3:(2 Ip"}JsB^BЉPS-0hM?0@_a O c o[PHxWQM!S~%"H*2u1;:9=…:Ҿ ?f0r+;#.w?v(# =I2, 5(􄣀 @Kxpo0?<;0J:$*;o=. :*/ :U86J$5Dz;3"/pq.N3bߢ+!8>H6{ CJu3 rDw ?Jx1 M [I~O2G 3 >zKF3|ǽ CdScI|vH `GPD_[e̒)"|"!N2qȁp v!vAE1q.1'DBx8 @rɽ "}tϻtwwӧpGh{(lTg(8pHw̺ sp;ðχ}N~9?@-71./70* ϟ$K/\}W0?h<8sRP(B?@PG뿨_L넧?WTwDKPVH7HOP0l$w$ ;\ral@ϲ"nC1O?BZM]PR^aNeϛ9,G/nc}| @\~qoS?^ARCc/!Repo^R\R`oN3n\~0X$w?2 rޒb]\n\"1\@#>a|o0cZA bpRqd}a$@V and you wanted to get through. First you would drop your trunk then go KP-612-121-ST. This will give you a local operator in the 612 area code. When she answers (she thinks you are an operator from somewhere else calling) you say "emergency interruption on area code 612-874-8700 and the party's name is Peter (or some dumb name)" Since trunk verification cannot be done by outside toll switching systems, you cannot do these by boxing and you have to let the operator do them for you߻al with international calling, conferencing, emergency-break throughs and just having fun with the box. But now days, boxing is m} it was back 10-15 years ago, so if you aren't cautious or you live on a modern ESS, than you might just get caught (but if you're not 18 yet then big deal! Go rag the hell out of Ma Bell!) Have you ever wanted to call overseas and talk to someone in another country? Or are you just bored of Metrofone or MCI? Then try this: When you place an internatiY3onal call, it is routed through the closest or closest unbusy international link. You can find these links by going KP-213-182-ST. This is the Los Angles link. Most major cities have them by the coast like New York KP-212-182-ST and even Denver KP-303-182-ST. When you call one of these links, you will get a tone, sometimes not, and then you have about 10 seconds to enter the number you are dialing in MF tones. If you make a mistake, it will tell you. The normal format for makingT* a call would be: KP-212-182-ST (wait for tone) KP-(country code)-(phone number in country) -ST then wait for the call to go through. There two ways to do conference calls. One is to MF up KP-213-080-1050-ST. This gives you Aliance tele-conferencing in Los Angles. The way this one works is you enter KP-2130801050-ST wait till you hear it drop twice then you enter another number that the call is going to be billed to (usually someone that you don't like). This one is totally compuHter controlled and you just enter the info needed by a normal touch tone pad. The other way for conferencing is to mf up your local or not so local conference operator. To do this just drop a trunk then go KP-(area code)-11511-ST and the lady will answer "conference operator, can I help you?" Now if you wanted to hook just 1-10 people together you give her the ph#s and she will dial them up and put everyone on together, meanwhile, she thinks you are the operator setting it up for son??meone else. One note, whenever you are dialing in mf tones and get an operator, they have no idea that you are boxing, they just think you are an operator from somewhere out of town. So don't be scared, give those operators hell! In fact, if you can find a good operator, they will even tell you how to do things. Now don't you all hate a busy signal? Ever try to get to someone and the line was busy? Well, don't fret anymore! Let's say that the phone number 612-874-8700 was busyV }Ba[9>=E BBGxcfE:>:Ǧ$A{Ff~?߽F%@G|{CBg壇]|!"@}}{'':Z]ZC'"gEF_~zC99poff7WIIF^I(H8G6wI1`z/`)A}]ar3܋4#Iĝ* TI4_R_k#S I8 ![{HAm#ਞ1_!#If31\)=T%=C=PI`ڰn9 <~,Tk '_<|@欜$?%Hei<@<N$\:Jw,a#$<WJ><# '#%e2@0 a^6MEtB@l1(}Q|tTdr 3+2b6N?DpXPB?8}evCE.R>xp[쐶vQ<_$*:4?081lSkAQYbXoEHxz~Z 9 0` {^nL#m)ÈIQgA 1s P  t9׀`"0ֱȐ' =Gf2< NnEKC=S55^nd#36VB(%BRŒ$8x\tȄ8𐈈wG} AA,6bRJaOi/n,[<~ ^3 SAd3k/ F*j^1Hhj[LXZ"//RjZ ":R49rN.)=35??c_Iq))cg'qtH+ІJc)# "0/wGcUIloΝ!0ѣlp{+XÅ!BHGIx$x+3!~:N @4l]ݼ (>IP!OK⠡ {[o?Rk`Zg,^|apɩjqݳi01QP̑Ԅ2"(" :*~Ei&w钕@  6=,c/<#H#'V Y`)$MSFI=z2LLT䤄X(za%3"+hG;LwJ+-ύa1TRX_QL@hZQ_2!*֣@|~\@lT L,L<tDGDAC#$@3RR(Hzj 3ʳ (D&ф?CN{2BrJI9Do),Nj۠d,4 "*:&A'$aQ ZO4d<#4SMAD_G Q"p} Eʌ& J+h*ڹ>-& VaiMSNH_v;_hX<>9#+ #> ǃa+)2$Ȫ//(.}oNuPDCV^Z7Z9nlLlZA{~9lƞ~`}fSd ɧ0ƋJ\}71wה&F@piU,{{+c ) )^P˟m~zrpuV"𘸄b|Lxx|Vot1hp|*6%7.sZC\Gco~ PIH~МQV@KKPƹ͌UcPppIE5 ,! AJRNUscazwrbH 3-%>6!+<j:!;Y-ʩb,mM0y=P! +DŽBCN/#T54u5Dl08fKsscM%EEyЍG{kݍ =+- "ҙ@%1=(ozq7{6~9$x펒Iwy E !) #$PC HPаq脔M:ZIs [_J=-kC}M~fJOL\vAčUU3G?IUmwTҊjj"L?SVɢDGXJGNH0RTRi DBAD"aT5 :cK^O)F;I3ҘE̡.P+GaU#gG |BL0-!$#) sp a @@ JZMFBE &(DJjiB_WV+]Y~M0* ?n>ͱvG }!gec$'x^EIy~:cUla>fZbfnIEUUyyUCoC#}MznjzЧ!#}ݜ'8L,|y!!%-!/;CÁaPJ!:9ZhJqҐ!owTC3`A q [~ef&P'W #\|H4D8AHL\B""|LxhBjj"[9Pd*BE}YYQnf_"dUvLLM=];_\ ;+ !22]"72 9!/t<a>v,dpHrvQ% -K{SQ.&*",$pP dzƙoG{V/ 0P}Cm99hT I  [ʤ.'TրMp c!i(opo3o8oDpW~4FSg k&Ӯ*hCBa@B&#h8{Argo:Xި/'Wm01=eԾ k'!lH[@w="1`.d*6Vu/26>:lOn@%c] JyoكT%0'&2F 譡2~Rב~737&A 'o%-c ^,0@*`)#s Pecwć?D? Ӄszx/#\ЂxCޝ쀷 n/^DU_AMh _gLLVvFoF"ogR0=M)GeK%ӏ0=#]<\\"q7"lnG@a~Rb\P+0x qՍр%U[Bt b (Unu#}/@6C~:d/{b)3 ϟ  :cGax 0'WPOy"7@ jD40pHXV_f^nV@.?᰻ם u u_ m`mi}]Za wag y~!,!#{`w:O_@(wk:P-sِG a 5UmP0Q>0]T9=}]E  l@GYA8ľ  hcfO%/x` By-FAp C|c!>kL4Ccc"|ws$p|"%8'"@}`B~G?4Xø*ϐ?q C]\`0gH@_?L ,Pap(7KiO|jjN G y  *F-@S; g#_~d , A Gy}, MA@?cb`4 Ď{0 O p+ttD7ٔ\"<õEx7'`Zxx <~(?# 7:498 >f$ƈ@y#  != Y0' A8/*aޞ+( xpj'h tjQ o7oϠg~  : HL` P gr0#|A@oh5_d;$ V.@U_I<%8=4GKP,0a˥a@Dd HN\A((`=#+Ɛ?o@_(/ &"8L 'Ha‹`~8HBb\ `Ks'$ߜzV *>椉+ vD+/EzpDBJO  3?m x- >2"gG`HpX}f"#E>Babd=::GAE|6A*/#?ާGe BFCDq^OycýLzf|Bt$h$ #_Z"L"* %ܼ@eOd?v!I{Z! &yaB(^v7`ȱpÊV#Z&@.b71q0A E:XGyXAIݽ|۱ab##o2H}=<8`P[ R,w٢!/. 2_sҴwo_HHA#.&@ rL9Fv @H bXw//LpJCd q2v(,{|ANI4 =!|^H2@__>𠀱(A/oHDon~  }K1#C2`=̣r?h8A ?0֎soXBq9Ao?>_{DR ?Èb|>Zwo&a#{G![?!};Xp豟6Op/~{` n!}t CGho@_H$wƤ֗.!php>fp<]ǥFgF<*|h;9_F%%%BA_?`iiiM /_iApH)~0ɈxCۍމ x o iwo#  q@4K兣H'xp_^`1(8?Hay:Y:|gc`GG&8epsn  jxa`GAljbtpB 94d0p O`@.^`H9YAHbDڽxxGU :8zjnZ`k]Kbabn ]A@Yp?v" |kvj [AM$äؑ0 vNàRіa#!A  UG& !4N#<stDÀrt?\P * a޾bP.`0Б?n?_܂lMUMyxa>?h //.Ixe~Ԍ  "rV`&BkrG~=(B3Ғ mtL-&D%& {w|%/MJHw͢ O-Chw}A;Y?zG#WvbI  0_[{G#@)1W#C=]CƄ]Xz|I1fb8e\?ם|_/?{ = t߽`"A m<0 7">41rsJH1@]@^=7dݝ[z|Vq6p;bhY5>fc@Es@J g"XˍCxٙ8B"FUS w{-`Idy&j_&=X~C;Q ~9(4,Bt4!R@PX.,(CŻt`9 \Y4R4WFYD'Չ 2| _hf)~"L XsŹ͟\hořb=-À Ȣ,MNr#}^1 "!Ã#A-˷@Пv4ha9xp`mى(^ٕo{&C 2L1=32}Nt KEDK~8,&(''[8g1|{Ge WsdbsfxX8Y᠐I0OVgR+4}܆G!`!w7VO_A1Yp a>}76{0P`@d¾`{ع &#9&n-A[٤pxd<2.,7'] rCӒᒰ!.](2-/bFB7wEԟvm{s~DN |X4 2r W#`fokgy熆$%aŀ!'8y8__ )% t-黯ޡsndah)iqA  oa  r$K@i>z;zEpCa$;:zxHam )ɹ8Sė$Mejwœۧ r&N^|V6LWŽ E@:" shn| c8!6```Bxd0?ld\݁|+EH8ex IniHh^]}LO휝>As 28'$#r I!ؠ!CޢA|'8$'CDƅxGgs{f{AHNzH<]흑' eQq9z )x|qhAK 8_ ^g>FRM#N?˚-:.^y)z9tuBEayr@\ )^9"ike/^q."Xd(" ?Ttk|# J4)78 `~ |rt! Q-!R8HD:U {:ܹظAaafd'y~]ػ8BC`fd n \;;B%febfCzEsd fad:~x۸>CǠ!gCFڼ@vw_nO^ pIhYip mx{}:}I8|X}N|@''%H('ᙷ;H?÷ϜzB2j?YiDEg/&ahU o"B߾N6H~ @O}ozohB^U1LH7έ?π@,tUk&C%XD'-\nMMgº|b w;  T@N~>>a>ΞD_NLtd   DPl PStfg?,X0`zap(BX=ޞ.^ "/8- ^}#"A\<&8 ;XowG2HTGA`:uR &!JL]  Vjsi    HBngn 0a(EjqWvn>q`Aa ` oO, 9 $ , o]ܽQ@I<:1-H`8Puw~ͬJqbR?DMxu7X6z1q *DJ@%MH{^?zq N.%4,3,;uL/\Byv Il\J`Srkj ï082=4". /С3]mg= ! b‘2}!Љr B,0{{m'wxTlL"b;{[ӃwqCA Q o~/)-0.v?1q$FefbG{o=,Cnd0G N("+D( HM wk 6=p89(ฐA Kp q1 >٘?8gV` q0^<cDh( tfiUzRa:: \/ݥw/wj  UJXXxY:8ݸEE~}Qd$V:^F qalot(o١`YYȐ_G`//>/dž ^taabhe Wd%xsivp H6WyKOOz",Zf('6jr %ݝ$__R j# oãaÁ#'b/߇'C{ E7Ͽ_eW׏6G'D!OdGEyڼ8|&ļz"0 ^"m pe a=>{ĄA'ĆCe4dfgĺj !^6OVA@/ίvAaipqKݳ1 $GGţb |88|+ xoaIJLztq21/-49 9( $_P$)5)'J#H9c\O˽߾A)I^z~gH DtEGTD`wb/p$rM#,bvBG&{3KdOHQmDwpFCw IDLx 񷻻GOLC{_ȸD8߷K'KE̺f!q WvO_AHyK@C{=)qp( ; a<C'Ƥ#_ؽ( XrRZ2$_gH2:L0p@ cC y  *L`%@1驈_@ 0 8o峀_`^ 8Ǡ[($,j BH7Ɨ3cFd|  |~1 OKKxwD"EC w3 GԨp`aQ10 {w\XH,NZ_F`_h!ىzg@,_JeF^y%j<A9 | sB>@ f{xXf!`~~{Ą#AF$Z`ԇ;Y"r\(b*+ˏX<< |>^]B#"yo b~%yJXk''8|8)7.200( !-,>@gXP䰀YL8 w MGؓ]贀ހBn,?9-,;8E+͊5psK`$pxDЀ?^`11@N6p `,>!0v7@ʌ OD|(w\6,'љ׼zB R22H@/ۋC|E'8Ng HIiANa  bxj{` &;}D"E^adăݑCc&{ (h0gGGGU,=.9騘)^.Ap$@~]Beb|>'ņ#aā9 d$E}G!@!fbFژ[?Mbە@$9b`{b~핈^ wzmko ]}fG;nRTq eXHCLknbf}  Ay8nIN^)b͙| tdppyéͻߢf_Yٞ\B@E8h] ņٶb'!>־~?='hS'8hbl;=@Tl,ThߛHH0q>,9Rs3} ]!"ׅao7gΟ~'NZ,9H'dPH*U)2`Չ2&2VHό :|WէO@Xfq"?񀈙YpYŷ'd# ua %A0Če1o.& %”z|GV5mp>1i88^nc=zHۆht ?$LHjf87˳@,b8{ 4}{}&gx}@v9*1kB_BA@QӃn.ohΡD 0 .KGE pq $L $LP_s[|0W vCPB W ^0(7j-RsPp K} ˥' {h7 ,/0Akr*2= ,'#\-S=ApqHϗ't?Zv^9f ~#b&CIaΏw1><=B"'cinP+?d'DDzC&DC1;E@`<̘o 3ۓ.Z8,N!_㠑~(q!;JrhXʀ4Vb>.2$@gA: EJ̠?%Àf[bb>]hA .N XZ+۝ |h$øں;_"&J];ob {x%&PwߠA_Π MÓ|^-B3HH@ФTx8Dϟwk/@wWX?c" `0`)K? 4&+08q#¾m}C??{EA爑@~DvHL2Oߨ_ơ F=;!@>H?ސY!@NOndh!pIpС";=A$ A}bL ;8 3׀o? Ha>qIxW:XJA}\$  莘w}  vv P*V\POozg "G@A#=[XQN &ˮ'8wJhiȂw=1?b `ñH/dftLGi(C'8q1:FˮaI wz74 Fp/{['hԪxw,C8=3 @$e {G>7I(h!w=11pJ /W}m($>./S0/^$1)/8$08y>,I 7a zvB"E EI-!rvs'p`<7׸T,TO' >=^9%q! 8bb!xy?=;ᆀ>`SB8ظ}=ࢆ'6OC`Rs՝ۋVH )_6vk&(80P8ؑ`p.N7.?8`1pqpp8 9AOv6ΟWwLJ`0qЉy<_V::;㷸K| o׺)ꉘr 2,n~*fd2mݏ߿NmᆵX/ |"6hX%D>ۚ݇:l?R~!jD-ץP?H0a{V4 ?/0E47E'֓ H N\mnA@0xp2?C -# 5xs(#m"s87j >|;xE-+&%"& 42{£ ;>3 KrP"\5M(@7ԶpM iKqq2 Suoo]~mόP( q 0q!wN=+/( 0`Q3P!1l}ά ֣(Ld7GKK?c}8KL 8䬐Rn.,/윿J._Tb\54dd \8o'}KS1'ݱ˘ZV?¦ae'F9px M qpw@OO8~Sf"HpvgZ99ļ<\䕠g@dg}9ޛۿ8=&dbh DN[omubcdG#gRb<:\o}ㇰ`6N z^1|i *_㥺_߽"%HEN+8{dH/'"@utq8^Բx o4lBL$J8/{E;GO?ߐ0t<._BnY@043!".8pcK]MG7 "$̇̓@h B}VB⊋QВ !E 0:WVz K $$8RJ,8_@0pu}mm'HPHH,bD$S&"wk}Tom2($0"9/&=6 kRL/@=.14 ~#[X]S RaR,vwo `Rc"щ(hHDӽ=Qu? rSb~ъc`r=mMNgu^}=S!~}2 @g;k}H\h?VL9֙fJ&̝b א8l7_D<8}Z'"?^_Bÿ=>Bp"`Q}" pgg/$_wwx& //lkwx8ha H|s\^|Ch  JOO 䨱~66aHLy);@ ( ?EE|\\Ń&YzA D8E?>bP7¦ޚ8EbR5F`յ@_,Zr( щ`X^5.L? mgyxqwGWV#;@vfD¥#zÂEU~9`:ץ՘e@)Ii &֎q@N0NDłג[{߾X%  WZ\lg}ݪȘqX OWbuvwsldWLLe{xޅf``ܺx%b7a%ۨx?;8ZzDgb:p0lPUiq?v^7~m`DH^0ѥz*tŮ6^6NZdC={@f7INWw78/0!UxIgZّqgj7!QqI&P7e _ACwuqvcbcr@ID^LKZIjcznxg{P]T^O`mm< #O‰v e(X>/'Z ɩ5U0?־<ٞ;+a1W 3t)=/4$$rwKwrp=5@B)Ã7N u{zEw5C'382:1=H,Lt`зo?l y{q ,Tx̄x_gXW'[">,70?+Owxz{ @FGO__H`W$/[xlxФD0&PǷ@X3~C~" b# tu{{LKK " cB~}A#=<#R\@bC>Òb} Ab = g> 7N94 5./<`RcvA^-KYFrAM@DŽU=%8h &A DɁxEA`^w>>XZ*OAFu}HAM{zz)z, U6Eѷ 8?Rd^|P۟e{ R`撡9i* Cs} UudD%CX=9`k)l@q.OpAGKږ~EokkG@g"}h)4Qj(#٭û<\Oz9Qnt}X^jkd #`>,hkxC$2W @Xؼ@`a" \̬}f4GXݼ'Eڐ`.TT,}"㋚ZI2`!_-SBac ~-Ul+>[A Ӣ!, >"@BB!~/ֵw9 /,`0P[u}wz,Px?;; %_@'<"% /==+ >'XdX_ϟ[w?Lu114ΑqBQǂ\` K}ON ARsH S}}ps woW lB,xx`HdhOwSkg4LR 0T0p5L}'';Gk@Ht ?1  tH谲d yq8=pr| EKG Dx3!4,7"2/ ABυ u;vwtEaCAq2\/x 2&1plPcc[W{_`ppP 2p?0@|tO~MhxXt? 8+ojR0$!8&815!3Or{r0>!=2$ /" X'= '@xGH-&"LR"GQRow}CqPXLr" @ u=wH=90hX!*㓠ow54Nb1>"..2:.:-`}k\ 0ĜNR@`#rq `B}ԳvvA#ӊ+S o0=,0'",MCL7  !&& 87+8(tw\ ! /(8 +v>4!)p@wۿ3S3 =-  \ϵm߾---Nܞ}Y (!30 Ȱr}. *ݿJg$2j5} wX騥Yfo70)9ΑE䒺pww'/odhªo[Pr8k[ݾ!Rcыq]^/~²sK0 q==/0=q.-< o/=a3ӑ1QA`]rtg[;'{OLDpǻ3H?آIcAтll~b r|-]s)i#X"tOMmn/(icnݮ.-ln"(ȉBuHgW_{R6'3Scskw2Jlk3ǯ"fd3{c R $3^O :p8Vn]j*"w..RJ iALNlVwmsYˋCv oBq JuN,N|aI|+14=} LOE8=Xu "jdKqLKA>8ӷ9kOC_{" cD;<7t$l`)?W0Ċ < KdڎZꊼ-@d\D@?01c!Y]U{/#9? -]@8|<08>(+g)Lj8> *a u|wT2@;ƨn*ݾJI xx57׳%,gch'A8 5`oq8::B+.fNjxyu@ <45;н/J#%Þ~u-.AEꤋt5yyCdA >ش13tFˍD`){183bS>s,߇МB#C> ,LO-|#a)@^r#.#^N_#P(PS'/XD?A?!A^.mOL_#aR2AB] `c}߿#@mͷ/ ГҚ8hQ@}-ݼK yy|9`TvDP`wskpA7(+`&ҖR?P`Uc?A67T]:{]` ?KmA1=UN?n d쉠fJEDUN/۳xHwUHlܜ/sg?c>m}Á}+kD&/us6?.01wo5$=,/Amhک`Q dzsO;t$sL1*p#4-ymųެ37  q1.<~m 4Ը@mK(+{{w{ԣ Mv?\AA=Q*&8!Et`'Wt2\xœ0GãA~cP^s0hJBu> "\@ӊ] 5:3D`Hh;m"RtLߠӋT3lBTL'HT`[3kȘh/!RpBC-M ăAp``2`Hb~1\B2)(,iX ɑn&{^^jU^"BD>xz<8p|Aa2,% wwvh>._Dtq vaebd'$$@8"Ez@>=GdC"%hqqW!q~.7GFO%iQр/p84e0pOwhNmp?6'6Hqan0fcjIFW\^ YvnhgM^K@Pu n/]@f6O!8tT5pov^q_϶0 Ĩ0`NXqxTZM?!?vޮY?~^?`߶I Ud}G'|hl@ZB\H|/~ã}]nߒCr(q3P B }rwWC 0H u|=\|l]-Pȸ5˵7| ~q/(@Lw=2:$D|yX:C tjv m WI pv;^vvH"VLÃj iwoAHJ pnn n0iH |mhv  jb ҈DZlwugb" CHPf&|682H(-щõ/8@Cջ2? eA6ǦW._>I?~^_1@C X zuvcxg`s嵿 D16trr| - IA~ERDX%&4Z"RH]8գ,(:1R  |2bj`=`,$$_|$/tDp2_T?2(`H)AeY)q(i {ħnbA\E`¿XD &CIh`/nw8E6f0 Ϡ8X@.Tq`֗f0x"=eT\ZO1Y?qɑnQ> YU>w07׳1VB8󓧗 _jui0OiAV^v귃 =2G((/*44="(61/ ! 4"8,* I~pD)% y;T3" 8 J"%x}3trp ,m*˃ x C%ɍS=}xB.oƌtyzA%ػ\;C':¢xZ;Y{"DC>5ƈH8{W9Aa!~Jx{vܐtGcy>\>e1yb$ccgA>ߺŢ@'#Y:۹ ;?Fado_p(zVmŻB߼Ơ` '$E}p~: yB?v/p~  DA>=#e ; ąy>Oɘ8K(\"PO޽rnvL/gib3oJa} !`qs5De0b!a`?|mMpJG[80H8?ڐ@=>̝3rᑡ>^@ p_@Oo/'xD" &0?S޽|nrSl` q0 -:.;/'Ç0 x/hHP8xOpwg'G?D8,28T'O'`Dx0ϰWпA =8HDp0'W_K;OR,1o# RA@o>  9JO tq8Ƥ) ~z г@#llO,);g0̼Th0p_/;sRGg/P84ф_Ƞ{=wlZҊbg0Ϥby86 n) ʯ/Iz|717܀ 0[`༺H?àlC-B h; K'H2 Hg'{S]KpzzW}  Oj\KM&C|:Hnhm T{V=`)OU/_k `=.MloAh?5pbDvwس;>st(fg++k\Ҝ S8k@c3Cnkp.v/n^^AssnJ ~.%{% ?Ck] EyM"&٠,͍}~#q3Cm->A-DPH% 'R Ŋ+dĻ ۉ]$A @c.^ @ġˁyG@]F@e<żA);7A!5 A 1v d \#5E 0^C 4H8 @ `@@Tg . 48{/o_W?QBPKp}uGqsw.6#/ R43zFr$ `~?cn`M=b=l~!=^ mc<ݱ^?~`ΰm;,*:/ &9(,&#|1`ܒ~,0Cޝ \\"|1܃B"R^M"b? 㾁gC̴yw} qDʾ C~p OI/ӌK1 M L{^CC"Я}b 2 :!#I/O-` t;#Ph" 82%5/5g(,)<23 (;|x$3-.Y|0 &6+4p ;pRݜ@mC]cBcC\#}r44^Q,R} +^͒-܂ccC] 5Ѐbp!|ޣ_ݲ!KXD{xWGwKW'(go'{?D,;P ' ؗ(%Vf{G{ߓxdxz41?>~a!w.  ly 1n1?! )711Q?AA!@1POȏpޯ.P/׼+8ooD~O>B~>AW{xЯџeh`Qp~f݅B|y؁{8~ <VDB<5Dc&*p _=,(oC}B@?BB]lq ӅށOv^R"xlWaQOg !`Py0g;7`os_?`CI`no@^  kĴ@PW0O?|nVh$@{?D'kEFT 1_ar : iuƆtbxB~}y`g4'I1 Qa"2B!oca>`qxP@!g|؎VUGx qPgF|"S '@#I|?a?^ao A>~  -n4%%U 5~*!,C'A0HEp=--?|p_7 8u `>*&BAd\X{$T!@,`_@_@?}/?P #J& |?~ b  zfwcڸ!]AjFf;@$&@P\%LSb<bA:Bꤡl#z]vOSw#W/7|q X5Gx,`kCمP[pJ]t*`V~\@"n=bS };nJMű;n^Wa{"J;,`="~?1y>~.'N% a!WHq@IAټB lqUvS} n t hIjdm}?HA52 FׁՍAL{= , P{x#}u'$*:Ȇ:5 bl@`e l s  ezF v_iaowLu Rx d` aW ^/;SϞiCgimmu7K/O=sSOi 0iQb  t_o.:2%K@?Ӓgdž]_fl9NqWh;?AI'oUp_cߜ= - WTEu'|)zKCGm$kKXoa} ^| gj 3w 7P:%]wLM<]l]X%ׂsXPU2 # >0OPs?.D֟1?@ nQ)(NA~h6~(.nрIv~;ocG?<'{g=n3~|n!ÁA̽CC^ҽsA0,"bl`?  o |:1 S.#358'ސh!`EمF=Hp&}sVw!,54Я ~о_BA)}uOC_ s s D! 2+ݬ/܏ ~~=~_AA<eOw p yҥ"@ A<xEy(' N~qx u4ǘX|\"}k *"6:Q 'O!ϑP~icp_`xR(sOPF;@y{FE^F:?X?-~z$=M_>l8<$zDZFh$l׀Twߔ@=|I=p=#< A=`0>f !(##!;3OBDhtf4+#a/x(d[H/qx/'$'쑊sw(o@` 9`7@Wa@v&38;,'-"1;?+ @~L wzP#AC]~>(u@OA3b |X5NR0 M3 9  C?@=@?08=( C˟/P zB8W+[;?oG0.&%!/>>@_C@X_׸{ g`SG !Ad@|}&_߈7Prp?!r(7<'<+À^b=s<^"Ń<C>"\[L2 G0y!2!~ oOYp?,@@z`xX   >~d6(Pߤ9 (A _>P?8FR /d~~x=> 2q@ppQ)bH9 QOMO,ǀt>q((+Cx7  Z3+$>S) 0/R͜B4t;'c[ȿqa]o߾ >[X$$`{gP0lzz̤8}GX8Ͻ|>b")Pc o\^t힀3HP` P/FFB$8pmTD4Q0`FZXXKۿLBb@weUءK*X <İ>g3@P3 CԴM"n2"`8"!à¢26@F $b;hX7)OD _\>ܝ^VMst+rW5ƒg'H&^_voED:8oESBCJC: I:!.!22!*/,rx_&4="?"L4cT(bY|w*o22)0BD;?1oY?T~`DmP`EPR!Mm^ZN Q-PIh@`/+ NMk @_)x@7({ "*#lXF(C',AW CKYa_T` x.)]rͻF@AK+E 'MdQˏ )ya$9L~ 4b ? cBDD}HaEWtV ބLe\dJ,pȔtP75`h5ȲVR.u{!łN:-v ?q( `$ QT!VXhh̩@l8"걂^J?X~0o 2QM+*b!O"H)HUJ^ vJ #:&0ډ(y7!!;20|! mJkO0XA ?` ȱlg?^ H*Y-;;.?HW AK$ߊYng a switchable circuit which was able to process the information (telephone call) to the hookup of the pocket modem. The circuit is located right near the speaker of the cordless telephone and made switchable so you can turn it on or off. Get an old phone and experiment with this idea, each model is different. After a while of use the cordless phone would start to lose power, so to get around this you can make a little recharging jack (dick smith) and K+Kstrap / or drill this into the bottom of the phone where the batteries are and then plug it into the cigarette lighter place of the car. You can buy the special voltage converter from dick smith for about $20. It is best to get a 12v - 3v converter. Or the easiest way is to obtain an acoustic coupler (which is the very old type of modems, where you used to put the phone on the acoustic pad, coupler) Then you are able to phreak, hack of it etc.. or just plain liste[n in on the other person. Cordless Phone & Hacking Use's : Another topic which we have not presented yet is how the cordless telephone can be used to gain unauthorized access to computer systems of varies kinds. There is a advantage, when using cordless phones of being untraceable when hacking into a system. Ideas have sprung to life regarding this issue, many methods are currently being used. It is quite "eeasily to hook up a telephone to outside phone wires on houses, buildings of any sort which have a connection already in place. Units are a very good source of hooking up a cordless telephone. The cordless telephone would have to be adjusted to be able to receive a lot further than what they are originally designed for. This is very easy to do, first open up the base set and look for some variable resisters (Pots) and there should be about 3 or 4 in the base setwc. One will be the frequency shift of the base to the handset, the other will be a resister limiting the reception of the cordless phone, this is the one you need to turn fully up. The others will be for the bell, and clarity etc.. Once the cordless phone is fine tuned to be able to receive at about 800m - 1km, this is very handy for the hackers use. All you need to find is a junction box on a pole, or look at were the wires come into buildings etc.. and connect th!e base set up to wires in parallel. Uni's and flats are very useful for this purpose also because groups of units have a telecom pit or a telecom walk in little room, where all the lines for the group of buildings are located. Schools also provide these easy access telecom sites. Now I will not go into the details of how to connect the base set to the wires because there are so many text files around which tell you how to do this anyway. But it is very  easy to do, one you have connected the base set to the lines, leave it there and close the door etc.. and then you must have a car or live very close to where you have connected the cordless phone base set. If you live in a group of units and have connected the base set to the telecom walk in room or whatever then you have the ideal situation. You switch on your cordless phone remote handset and should be able to get a dial tone (providing you arqe not located far away) from the base set. Now you can call some American PBX's or Australian PBX's, diverters, extenders, etc.. and this will add to the extra security of not being traced fast enough. Or you cannot be bothered, then call directly to the source of the system you want to learn about ehehehe. You should hopefully be far away enough that if a trace is done and the authorities are after the caller, then all they will find is the base set connected  to a person's line. By that time you have already disconnected and maybe even watching the commotion from across the street or where ever you maybe. This is a professional way of hacking, as you can rarely get caught. Cordless Phones Worries : When using the Cordless Phone, you must be sure that the other person is not going to pick up the phone etc.. otherwise you will lose carrier (or they will be wondering what p}7the fuck is going on) So when phreaking using this method, do it when you know the person has gone out for a while or otherwise you are taking a risk. Also do not make many overseas's calls on the one persons line. He/She will get the bill and will freak out at all the overseas's numbers that have been dialed, so use other people's. There is no way of tracing the calls back to you because if a trace is done, it will go back to their address anyway. Your cordpless telephone can be traced in only one way and that is if the DOTAC find out that your are transmitting and they know that you are in the middle of the call etc.. and lay a trace on where the transmission is coming from. This will never really happen, as the federal police would have to lay a trace on the phone, then get the help of a different department (DOTAC) and then they can zero in on the location the call is being made by the use of the triangle towers w E SYSTEMS 415-527-2626 PERFECT SOFTWARE UNKNOWN # PERSONAL BUSINESS SYSTEM 408-745-7841 PERSONAL COMPUTER 408-745-7841 PERSONAL SOFTWARE 312-438-4850 PHOENIX SOFTWARE UNKNOWN # PICCADILLY SOFTWARE 609-589-5500 POWERSOFT 203-661-8799 PROGRAM DESIGN (PDI) INC 800-631-0856 PROGRAMMA (HAYDEN) 213-344-6599 QUALITY SOFTWARE 213-349-5560 RAINBOW COMPUTING 800-241-3649 RETAIL SCIENCES INC. 301-479-1312 RIVERBANK SOFTWARE 915-544-4397 RTR SOFTWARE 214-324-205ڣܼ0 S-C SOFTWARE UNKNOWN # S.S.R. CORPORATION UNKNOWN # SCIENCE RESEARCH ASSOC. 313-399-8877 SENSIBLE SOFTWARE 303-925-9293 SENTIENT SOFTWARE 408-730-0179 SHAFER SOFTWARE 702-647-2673 SIERRA SOFTWARE 916-920-1939 SIRIUS SOFTWARE 215-393-2640 SIR-TECH UNKNOWN # SMALL SYSTEMS ENGINEER 201-539-3770 SOFTAGON 213-985-5763 SOFTAPE UNKNOWN # SOFTWARE ALTERNATIVES 918-745-0062 SOFTWARE EMPORIUM 415-962-8911 SOFTWARE PUBLISHING CO. 617-495-5900 SOFTWA  y[plies to cordless phones. During the Summer of 1991 a friend and I brought a new transmitter and we were able to transmit on most cordless phone systems. Boy did we have fun for a while. In the end we were using our cordless phones, like carphones and pocket mobile phones and making calls overseas's and interstate on others peoples lines. The best way to do this is the following: The security code on most phones, prevents unauthorized use  xd of the phone. Most people set their password to 1234 or 4321 or 9876 etc.. (just like PBX's) Take your cordless phone and attach a piece of coax, or wire to a car CB antenna. The cordless phones uses a frequency of just above 30 Mhz. So therefore a normal CB antenna which has a SWR (Standing Wave Ratio) of 26-27Mhz will be around the right antenna. This is not perfect, but it will do. If people would like to SWR their antenna into the correct resident frequency of  < 30Mhz then you will be able to receive calls and transmit a lot better. This can be done using a GOOD SWR meter which is capable of measuring output power and SWR. Once you have finished your connection of the piece of wire to CB antenna, then connect the other end of the wire to your cordless phone antenna. This will enable you to get out and also receive a lot better. Then cruse around the streets until you hear a dial out tone. This tone will be from a cor $Sdless telephone which is being used or lying idle. Sometimes you will hear a conversation, DON'T speak at all into your cordless phone. if you do, they will hear you. You can work out how close you are to the house which uses the cordless phone, by driving up and down until you get the best receive area. Now you wait until they have finished and have hung up. If the phone does not come back out with a dial tone, then it is security locked or they have repl z̸aced the phone on the base set and have switched it all off. So then go and find another phone to phreak off. If the dial tone comes back on, then wait for a while and make a call on your cordless phone and have a chat to someone. If someone picks up the phone again and you are chatting on it, GET OFF quickly. They will wonder what the hell was going on, but usually they will not give a shit. It is amazing how many people use cordless phones and tell personal detaȭils on them, thinking that they are safe. You can obtain credit card details, phone numbers, passwords etc.. of the people from cordless phones. This can be handy for the elite hacker (more on this later). Make a map of where the best cordless phones are located and whether they have security locking etc.. and you can use them all the time. I personally know of about 7 people in my area where I can dial out anytime I feel like it. But that would be illegal and; I'm not in any way responsible for other peoples actions. This article is written to improve my knowledge on the cordless phone subject only. Anyway once you have your map, you can visit the street regularly and make free phone calls overseas's or where you like. You can usually park well away from the house and transmit to their cordless phone base set providing you have a car CB Antenna. Now if you hear a conversation going, take note of it on your map and6O wait until they hang up. When they hang up and no dial tone is there anymore. Then the person who made the call has replaced the handset down on the base unit and switched it off, or they have a security lock out number. If they have this system, you can then hack out their password manually and it will usually be about a 4 digit password (numbers only). Common passwords are 1234, 4321, 9876, etc.. once these are obtained, you can then get the dial out tone I%D and quickly place your call. Cordless Phones & Computer : This method of using the cordless telephone was tried and completed in late 1991. This involved a lap top computer and the use of a pocket modem. While sitting in your car or friends. You are able to place calls using the lap top computer which was connected to the modem and also the cordless phone. This involved drilling a hole into the cordless phone and maki_L Bottomless Pit 60 megs 12/9600 //gs xfers 530-5033 Apple Core AE/BBS 10 megs 3/1200 774-0800 Boot Camp III GBBS 20 Meg 12/24 786-7240 Freebase AE/CF/BBS 10 megs 858-9492 The French Connection, multi-user 877-3044 The Dungeon AE/BBS 10 megs 897-0412 The Bombay 80 megs 12/9600 Newpass: B-1 BOMBER 962-3222 The Cornerstone CF 991-5756 Alcatraz 20 megs 1200 baud GBBS 716-473-8051 The Capital Connection II 12/9600 717-273-2034 Phoenix Project 20 megs 12/2400 718 - New York 2 89-1189 Direct Connect CF/BBS 445-2431 Das Underground GBBS /1200 479-9824 Apple Station //gs 12/2400 492-3054 Outer Limits 80 meg AE/BBS 12/9600 499-4362 Fifth Dimension BBS 969-0324 Robo Defense 20 meg 12/2400 GBBS 801-546-1939 The Airport 10 meg 3/2400 801-943-9436 The Leeches Guild 20 megs 12/2400 802-254-2051 Raw Dog AE 10 megs 12/9600 804-285-2667 The Alcove AE/BBS 3/2400 804-737-2432 The Fishing Hole AE/CF/BBS 20 megs, //gs 805 - CA 252-8488 Panther AE/BBS/RPG 3!/1200 255-6666 File Cabinet AE TASS 648-5536 The Crystal Palace 280 megs 3/9600 //e, //gs, IBM, Mac software 984-3547 Down the Rabbit Hole AE/BBS 10 megs 806-745-7614 Genocidal Tendencies 20 megs 20 subs 806-794-1842 Castle Catonic & Cellulite Spa 806-794-3766 Dark Sector Elite 806-794-4362 Demon Roach Underground 40 subs, login pw: THRASH Newpass: FEAR 806-799-0016 Phreak Klass 2600 300 baud CF EDUCATE 808-499-2831 F\ Proterm System 12/2400 No pass 808-625-1734 Beyond The Banks Apple //gs 808-833-7289 Liteworx 10 meg 3/2400 813-584-4447 Infomaniac AE/BBS 20 megs 1200 815-942-8228 Point After // GBBS 20 Meg 3/12 815-968-6088 The Cat's Cove 5 megs 3/2400 17-572-1811 White Slope GBBS 817-572-6027 Skara Brae AE/BBS 3/2400 818 - CA 332-7105 Apple Connexion //gs wares 335-5651 Mistywood AE/CF/BBS 3/1200 338-3625 Realm/Pink Dragon 352-2327 The Golden Apple 3/12/24 764-3594 Omu1ni AE 6 drives 300/1200 782-2161 Apple Orchard 20 megs 3/2400 795-9303 Paradise Bar & Grill AE/CF/BBS 799-7555 The Blue Lagoon 60 megs 3/2400 810-0401 Dark Side II 12/9600 //gs 957-0347 Glendale Private Library AE 20 megs 981-4230 Golden Disk AE/BBS 20 megs 3/12/2400 993-7422 The Abyss CF 3/1200/202 25 megs 904-774-4253 The End AE 3 drives 12/2400 DOORS 913-262-5155 Ray's ][gs Line Protac 20 Megs 24/9600 only 914-921-0885 The Harbor House 3/24009E 914-961-8494 The Carriage House 20 megs 915 - TX 532-3226 The New Society GBBS/AE 20 megs 3/1200 561-9392 The Castle AE/BBS 20 megs 12/2400, RPG's 565-1308 Empire of the Sword 3/1200 Proving Grounds 699-7689 Proterm System 12/2400 NORWAY 833-3258 The Cactus AE/GBBS 5 meg 3/1200 919-489-6890 Panopticon Center AE/CF/BBS 10 megs 3/1200 SOFTWARE HOUSES THE FOLLOWING LIST IS COMPRISED OF MISCELLANEOUS SOFTWAR3JE COMPANIES AND THEIR PHONE NUMBERS. 414-289-9988 AARDVARK SOFTWARE UNKNOWN # ADVANCED MANAGEMENT 305-862-6917 ADVENTURE INTERNATIONAL 617-255-0510 AGS SOFTWARE UNKNOWN # ALLADIN COMPUTER CORP. 919-852-1482 ANDROMEDA INCORPORATED 800-538-8400 APPLE COMPUTER INC. UNKNOWN # APPLE JACK 213-985-2922 ARTSCI 714-627-9887 ASTAR INTERNATIONAL 608-249-5875 AURORA ENTERPRISES 415-964-8021 AUTOMATED SIMULATIONS UNKNOWN # AVALON HILL 503-345-3043 AVANT GA(RDE CREATIONS 714-296-6400 BEAGLE BROTHERS 512-454-2801 BPI SYSTEMS 415-456-6424 BRODERBUND SOFTWARE 415-658-8141 BUDGE COMPANY 801-753-6990 C.D.S. CORPORATION 415-841-6500 CAPTAIN SOFTWARE 714-755-5392 CAVALIER COMPUTER 515-224-1995 CE SOFTWARE 312-231-0912 CO-OP SOFTWARE 801-753-6990 COMPUTER DATA SYSTEMS 213-378-8277 CONTEXT 213-371-5612 CONTINENTAL SOFTWARE 800-631-8112 CREATIVE COMPUTING 318-255-8921 CROSS EDUCATIONAL 408-683-0696 CRYSTAL COMPUTER C6}O. 800-631-8112 DAKIN 5 CORPORATION UNKNOWN # DATA SECURITY CONCEPTS UNKNOWN # DATA TRANSFORMS INC. 213-894-9154 DATA-SOFT INC. 501-664-2715 DATACOPE CO. 213-366-7160 DATAMOST UNKNOWN # DISCOVERY GAMES 716-442-8960 DYNACOMP 919-748-8446 EASTERN HOUSE SOFTWARE 213-346-6783 EDU-WARE 314-991-0300 EDUCATIONAL PROGRAMMING 517-782-2132 FCI INCORPORATED 800-336-4766 FERROX MICROSYSTEMS, INC UNKNOWN # GALAXY 408-226-2377 GALFO SYSTEMS UNKNOWN # WcGEORGE EARL 415-937-1030 H & H TRADING CO. 505-522-1482 HARVEY'S SHIP REPAIR 800-631-0856 HAYDEN 405-840-9900 HIGH TECHNOLOGY INC. 206-228-6691 HIGHLAND COMPUTER 14-454-5079 HOWARD SOFTWARE SERVICE 415-525-9452 INFORMATION UNLIMITED 505-522-7373 INNOVATIVE DESIGN, INC. 503-779-2465 INSOFT 603-924-7296 INSTANT SOFTWARE UNKNOWN # KINETIC SYSTEMS INC. 213-790-9817 MAGNA SOFT UNKNOWN # MALIBU MICRO COMPUTING 213-530-3063 MASTERWARE SOFTWARE 213-541-3377qc MATHWARE 919-983-1990 MED SYSTEMS SOFTWARE UNKNOWN # MICRO DATA BASE SYSTYEMS 312-433-7550 MICRO LAB UNKNOWN # MICRO POWER & LIGHT 213-541-5131 MICRO PRODUCTS CO. 213-459-3177 MICRO-LIPPS 617-367-6362 MICROCOM INCORPORATED 213-821-4340 MICROMOTION 415-457-8990 MICROPRO INTERNATIONAL 206-454-1315 MICROSOFT 314-991-4220 MILLIKEN PUBLISHING CO. 301-659-7212 MUSE SOFTWARE UNKNOWN # MYTOPIA GAMEWARE 213-885-1955 NONAME SOFTWARE 209-683-6858 ON-LIN -7193 Haunted House AE:Tac 1200 423-6272 The Hotline AE 997-7357 The Greenhouse AE/CF/BBS 10 meg 1200 409-696-8226 The Wizard's Guild 20 meg 3/1200 //e, //gs wares, RPG's, phreak 412-325-2875 The Dead Zone Elite 414 - 224-7731 Trader's Alley AE 3/1200 12 am-midnight APPLE 255-4183 Night Shift AE:Tac 3/1200 258-7985 Far East Network GBBS 300 baud 377-8201 Dear Venus GBBS 3/2400 384-1701 Modern Pastimes GBBS 3/2400 461-4946 The War Wagon 3/1200 483-1010  ԟ_/Milliway's GBBS 3/2400 483-2808 Three Pile Island GBBS 3/1200 527-4779 City of Aldimar III 3/1200 $ 544-6092 The Wasteland GBBS 30 megs 3/2400 639-9301 Phreaker's Haven Proterm 12/2400 CRACKERS 785-1507 Software Artists' GBBS 3/1200 873-7971 Soft-X 3/1200 415 - CA 221-4370 Valhalla 20 megs 3/1200 Apple, Mac, Atari 349-8245 Cat's Tail AE/BBS 3/1200 365-4819 The Oracle 471-1138 The Far Se AE 593-9001 Noble House AE 851-4143 The Foxhole AE 3/1200 3 dri!Uves FOX 961-9337 Rogue's Gallery AE 20 megs No pass/IND 994-2758 University of Piracy 40 megs AE/CF 3/2400 419-882-2421 Electric Cafe 82 meg GBBS 12/9600 502-245-8270 Fifth Precinct AE/BBS 20meg 3/12 503-388-7849 The Warehouse AE/BBS 40 megs 504-291-6339 Cajun Bytes AE 504-641-3219 The Animal Farm 3/2400 hack/phreak oriented 504-847-1231 The Black Dimension 1200 baud hack/phreak oriented newpass: SNOW 505 - New Me"!xico 268-4804 Lair of the Beast AE/BBS 10 megs 3/1200 275-0110 Binary Sixx AE:TAC 40 meg 3/12 434-0381 The Foundation AE/CF/BBS 10 meg 12/9600 512 - TX 441-0095 Smash*Palace South AE/GBBS 20 megs 3/2400 533-7509 Cygnus 10 meg 3/1200 687-1221 Alpha 2000 GBBS 3/9600 513-984-5625 Scotland Yard AE/BBS 20 megs 12/2400 514-276-4047 Castle //gs 3/17.4 baud 514-598-1460 Castle //e BBS 3/2400 515-224-6545 Midnight Apple Dump Elite GBBS 12/2400 515-278-5880 Alpine Exchange 10 m#eg GBBS 12/2400 516-361-6744 The Third Planet 12/2400 516-374-5071 Dragon's Lair AE/CF 10 megs 602 - AZ 298-9310 AE 3/1200 AE 577-1051 The Underground AE/BBS 10 megs 841-8408 Carrion 1200 DIE 935-6519 Cranston Manor 100 megs 3/2400 Opus Amiga, Apple, IBM, c-64 info 603-641-6655 The Castle's Chamber GBBS 12/2400 20 megs 603-868-2038 Data Base II AE/BBS 12/2400 604 - Canada 273-5394 The El$`FIectric Company AE 10 megs 3/1200 OHMS 479-1022 Other Worlds AE 522-4242 The Lab AE/BBS/CF 21.7 megs 576-2631 The Milky Way BBS/PAE 300 1200 Baud 40 Megs 606-271-2156 The Power Source GBBS 20 megs 1200 baud 606-272-2241 Dead Body Outline GBBS 20 megs 3/1200 606-581-6088 The Citadel 609 - NJ 273-7133 Shadow Spawn AE 3/1200 PAWN 435-5793 The Surf Shop Underground, hack/phreak Newpass: DEADSPOT 645-0787 Fallout //gs 612 - IL 224-3%@158 Water's Edge AE/BBS 20 megs 3/2400 439-5023 Dead Water BBS 3/1200 483-2313 Thunderdome 40 megs 3/2400 484-5925 Krackline BBS 3/1200 487-1092 Satan's Shrine BBS 3/1200 489-4595 Irongate AE 40 megs 12/9600 489-5740 Fort Knocks AE/BBS 40 megs 3/1200 490-0025 Alliance 3/2400 490-0352 The Rocker's Hideout AE 1200 3 drives 533-9103 Second City BBS 3/1200 553-0908 Dark Side Of Reality AE/BBS 40 megs 12/9600 566-1353 Stronghold 3/1200 636-4285 Desert Oasis 1 meg 3/1200 RPG's&B(; 778-1222 Desert Oasis 21 megs 12/2400 xfers, //gs things 788-8029 The Motel 10 megs BBS 3/2400 tons of docs/solves 825-5719 Ichthus 3/2400 829-8509 Syndicate Report 300 831-6235 Minni Apples BBS 3/1200 866-3788 Soft Swap 3/2400 869-7313 The Curse 20 megs 12/9600 934-1405 Hidden Kingdom BBS 3/1200 941-8519 Golfsofts BBS 3/1200 614-861-3948 Temple of Doom 617 - MASS 272-7533 Crystal Towers 20 megs 12/2400 326-0259 Binex II AE 443-0493 Survivor's Heaven BBS 475-8187 Th'pie Twilight Hotel 10 megs GBBS/PAE 3/1200 459-4297 Data Base I AE/BBS 12/2400 528-1721 The Apogee BBS 832-9229 Den of Crude Tortures GBBS 20 Megs 12/24 922-1917 Dragon's Den 3/1200 964-5906 The Parthenon AE/CF 3/1200 20 megs 619 - CA 464-1335 Tanelorn II GBBS 20 megs 3/2400 475-6187 The Convent 4 drives 3/1200 textfiles only PHOENIX 692-9518 The Enchanted World GBBS 50 megs 3/9600 942-3713 Split Infinity //gs 703 - Virginia 370-4223 Apple Pack GBBS 20 Megs 3/12 764-2(I775 Big Dawg CF/BBS 10 megs 300 baud New pass: SMEGMA 922-6123 The Spiral AE 40 megs 12/2400 baud SPIRAL 978-6734 Data Base III AE/BBS 12/2400 707-938-2997 The Farthest Shore 20 meg 12/2400 GBBS 713 - TX 375-2532 Crystal Palace // 3/1200 438-7418 Doxside AE/BBS 20 Megs 448-1505 Texas Fathers AE/BBS 20 megs 461-7170 The Market AE/CF/BBS 21 megs 3/2400 492-7448 The Kingdom CF 2.2A 300 baud No pass 496-0032 The Keep AE 489-7779 Alterna[te Mindlink, Apple + IBM xfers 580-8213 Celestial Woodlands 30 meg 3/2400 Apple + IBM xfers, online games 583-9735 ProTerm system 12/2400 ZAP 690-3918 Hobbit's Hideaway AE/CF/BBS 20 megs 933-6017 Blackdawn Fortress AE/CF/BBS 10 megs, RPG's 980-9208 RLJ Infosystems 10 megs 3/2400 714 - CA 380-8743 Digital Dimension AE 300/1200 472-8241 The Asylum // AE/CF/BBS 40 megs 521-4319 Catastrophe AE/CF/BBS/TF 526-2932 Twilight Connection GBBS 20 Megs 3/12 528-2653 Thev*(#Hlum 3/2400 213 - CA 325-2245 The Rock House BBS 395-0221 Club Zero AE/CF/BB S 30 megs 1200 463-9608 The Apple County GBBS 3/2400 475-3250 The Refuge //GS 20 megs AE, Proterm 493-2011 The Citadel AE/CF/BBS 20 meg 537-3378 Access One AE/BBS 679-8011 The Insane Asylum 3/2400 Apple GBBS 698-3306 The Dark Side 3/9600 AE multi-user //gs 828-8827 Duplicate Dimension 80 meg 3/1200 Apple GBBS 968-3665 SpecElite Telecat 140 Megs 1200 214 - TX 262-5044 Grey Haven 341-1972 1972 Aw+?:lE:Tac 10 Meg 12/2400 373-7610 The French Quarter AE/GBBS 3/1200 393-0156 Red Light Inn AE 10 megs HACKER 424-2001 Peripherals Plus GBBS 21 Megs 3/12/24 522-5321 The Dead Zone AE 790-5361 The Anarchist's Temple AE/BBS 20 megs 1200 baud 827-5249 Last Dimension AE:Tac 20 megs 12/2400 964-0175 The Machine 55 megs //gs software 215 - Pennsylvania 250-0341 Info Unlimited II AE/BBS 3/1200 269-8303 Buzzboard GBBS 10 megs 3/1200 271-9164 The Pirate's Palace 3x,RI E/1200 20 megs 398-4983 Phoenix Systems GBBS 30 Megs 12/24/96 398-7764 The Planet Magrathea 120 megs 12/9600 537-5267 Kaos GBBS 10 megs 3/2400 540-9811 The Nuclear Escape AE/GBBS 3/19.2 baud 647-5384 The Pirate Zone AE:Tac 2 megs 12/2400 736-0570 The Black Dragon Society HQ Elite GBBS 3/1200 21-1053 Wisdom of the Magi 10 megs 3/12/2400 25-9567 Apple Magic 10 megs 3/2400 926-6203 The Exchange 20 megs 12/9600 938-7349 Mega-City II GBBS 20 meg 3/200 965-3499 Gilgamesh's Tavey-urn GBBS 10 megs 1200 baud 969-3384 Eagles Net 3/1200 216 - Ohio 235-6613 S.O.B. GBBS 10 megs 12/24/9600 267-2938 The Dock AE/BBS 60 megs 12/9600 521-6835 No Bullsheet GBBS 40 megs 12/240 630-9524 Apple Delta BBS 3/1200 974-1153 The Mist // AE/BBS 51 megs 12/2400 301 - MD 252-3325 Infinity's Border AE/BBS 3/1200 298-0094 Terminal Obsession GBBS 2 megs 3/1200 423-4924 Revelation AE:Tac 30 megs 12/24 SPEED 445-5897 Halifax AE/CF/BBS 20 megs 3/1200 486-4515 Fz.auture World AE/BBS 21 megs 1200 baud, ProDos 526-6717 Twilight Realm GBBS 2.3 megs 3/12 561-6161 The Razor's Edge AET/BBS 10 meg 12/2400 657-3872 Wayside Bastard AE 3/1200 661-9355 The Weather Station AE/BBS 3/12 730-4468 Eternity's End AE:Tac 20 megs 12/2400 794-6687 The Floating Dragon Elite 10 meg AET/BBS 3/9600 302-328-6079 Terminator AE/BBS 12/2400 303 - CO 286-8267 Genesis Project 10 meg 3/2400 287-5274 The Lab AE/CF/BBS 3/2400 287-8267 Avalon 3/1200 457-0388 The {/FBone Cellr BBS/PAE 21 megs 12/2400 789-0500 DJ's AE/BBS 980-1304 The Enterprise 3/1200 AE 980-9413 The Cemetary AE/BBS 3/1200 305 - FL 286-6519 Transfer Zone AE/BBS 20 megs /AE 12/24/9600 395-6906 Digital Logic 10 megs 3/12 431-3576 High Times 3/1200 GBBS 557-3834 Abuse AE/BBS 4 drives 300 No pass 628-2948 Base Two AE/BBS 12/2400 687-4742 Twilight AE 1200 baud 1 meg No pass 777-8365 The Connection AE:TAC 10 meg 3/12, //gs |0ܼ No pass/IND 792-2024 The Fourth Dimension AE/BBS 821-2232 Rock 'n' Roll Harbour 20 megs 12/2400 898-5649 S.E. Connection AE/BBS 6 megs 948-8000 Miami's Big Apple 3/1200 u/d, RPG. 309-662-0779 Logical Shift Left GBBS 10 Megs 3/12 312 - IL 225-9836 Static Barrier AE/BBS 246-9493 Traders Connection 3/2400 249-4385 Blue Knight 272-1423 The Castle 3/1200 347-3857 The Mansion AE/BBS 3/2400 377-7674 Front 242 AE/BBS 3/1200 447-3857 The Midwest Exchange 20 megs 12/9}1AJL600 AE/BBS 528-5020 Ripco AE/BBS 40 meg 3/12/24 564-8170 Hacker's Heaven 12/2400 g-files, phreaking, 584-6079 4077th MASH AE 10 megs 654-2918 The Quarterdeck AE/BBS 40 megs 12/2400 724-0807 Bullwinkle's Bar AE/BBS 1 meg 3/12 787-2174 The Dark Side AE/Prodos/BBS 20 meg 12/9600 837-7196 The Code AE:Tac 20 megs 12/2400 870-7830 Falcon's Nest AE/BBS 20 megs 870-7875 Aero Force AE 4 drives 3/1200 baud 893-6618 Well of Souls AE 3/1200 897-4221 Fort Weyr 300 baud Cat-fur ~2Y No pass 934-4637 Shady Vale Inn 10 meg 948-5463 Dataland AE/BBS 10 megs 3/2400 313 - Michigan 261-1968 Death Star AE 20 megs 274-3206 Highway 61 3/1200 GBBS 294-5772 Mount Olympus 453-7693 Double Bogie 20 megs 1200 459-7333 The Stronghold AE 474-5795 Electronic Odyssey AE 478-6902 12/2400 AE MAXELL 538-7877 Redford's AE 3/1200 559-7199 The Pirate's Hold 40 meg AE/BBS 12/2400 591-1024 Red Sector AE/CF/BBS 20 meg 33Լ\/2400 661-9359 Sethanon 30 meg 3/2400 GBBS 851-0435 KHQ AE/BBS 314 - Illinois 351-3808 Emerald Forest 3/1200 GBBS 391-6264 West Word 3/1200 GBBS 576-6160 The St. Louis Apple Orchard 3/1200 GBBS, online games 576-6232 The Spider's Web 3/1200 GBBS 725-2802 The Castle Paradox 3/1200 GBBS 315-638-9279 Mao's Pagoda AE 3 drives 3/1200 RICE 318-396-9831 The Time Machine 60 megs AE/BBS 3/2400 401-247-2034 The Inner Sanctum 401-789-1809 Out of the Blue GBBS 3/24p^00 402-483-6926 Solomon's Mine AE 5 meg 12/2400 idden Castle 300 baud, gaming 932-2233 The Forbidden Zone GBBS 20 megs 12/2400 971-5297 Omni Connection 973-6542 The Oracle AE/BBS 20 megs 12/2400 995-5287 Molecular Magic AE/BBS 12/2400 405-436-6885 Trader's Hotline AE/BBS 405-752-0256 Captain Video's AE 86 megs 3/1200 408 - CA 225-6480 The Warez Center 40 megs 3/1200 WAREZ 245-7726 The Dark Side AE 10 meg 3/1200 text files No pass 255k5*;4+ 3/12 D/AZPHO/ 612 Minneapolis, Minnesota 3/12 D/MNMIN/ 617 Boston, Massachuetts 3/12/24 D/MABOS/ 618 Saint Louis, Missouri 12 D/MOSLO/ in 314, 618 619 San Diego, California 12 D/CASAD/ 703 Washington, DC 3/12/24 D/DCWAS/ 703,202,301 713 Houston, Texas 3/12/24 D/TXHOU/ 714 Riverside, California l63 12 D/CARIV/ 714 Santa Ana, California 12 D/CASAN/ 718 New York City, New York 3/12/24 D/NYNYO/ in 212, 718 801 Salt Lake City, Utah 3/12 D/UTSLC/ 813 Tampa, Florida 3/12 D/FLTAM/ 815 Chicago, Illinois 3/12/24 D/ILCHI/ in 312, 815 816 Kansas City, Missouri 3/12/24 D/MOKAN/ in 816, 913 817 Dallas, Texas m7K>l 3/12/24 D/TXDAL/ in 214, 817 818 Glendale, California 12 D/CAGLE/ 913 Kansas City, Missouri 3/12/24 D/MOKAN/ in 816, 913 916 Sacramento, California 12 D/CASAC/ 919 Research Triangle Park, North Carolina 3/12 D/NCRTP/ Pirate boards around the United States - compiled by: The Stainless Steel Rat (602) 201 Metal AE 201-879-6668 203 Realm ofn80% Death 203-938-9888 Hell Hole 203-289-1970 205 IronGate 205-979-8409 212 Power Station 212-364-6678 213 Cabal 213-946-8843 Dark Side Elite II 213-698-3306 214 Grey Haven 214-262-5044 301 Floating Dragon Elite 301-794-6687 Razor's Edge 301-561-6161 305 Digital Logic 305-395-6906 Apple Tree GS 305-23o9+c8-5999 Outer Limits Florida 305-434-2518 The Far Side 305-434-6580 Looking Glass 305-522-1342 Estrella Congelada 305-344-0317 Rock'N'Roll Harbour 305-821-2232 The Transfer Zone 305-286-6519 Seventh Star 305-666-3748 The Rain Forest 305-434-4972 4th Dimension 305-792-2924 312 Front 242 312-377-7674 The Dark Side 312 312-787-2174 313p:Z' Sethanon 313-661-9359 Pirate 313-559-7199 NONAME 313-478-6902 412 The Dead Zone 412-325-2875 505 Binary Sixx 505-275-0110 Second Foundation 505-434-0381 513 NONAME 513-984-5625 603 Snac-Call-AE 603-883-6168 604 Revelations 604-929-1615 Apex 604-685-8765 The Lab 6q;Hs04-522-4242 NONAME 604-439-7365 609 Deagon Fire Private 609-424-2606 Fallout GS 609-645-0787 612 Alliance 612-490-0025 619 Convent 619-475-6187 716 Exchange 716-388-1284 717 Phoenix Project 717-273-2034 718 Outer Limits New York 718-492-3054 Entrophy's Edge 718-229-2460 Robotech 718-969-0324 806 Genoicidalr<4z Tendencies 806-745-7614 Dark Sector 806-794-3766 Domain of Roach 806-794-4362 Castle Catonic 806-794-1842 818 The Golden Apple 818-352-2327 The Dark Side Elite 818-810-0410 904 Communications Hex 904-721-3271 915 Waffen SS 915-565-1308 Jello 915-532-3226 NJ 226-0623 The Hidden Stronghold 20 megs 12/2400 baud 256-4202 Trade Center AE/CF/BBS 20s=LCl meg, also //gs 3/1200 297-3442 Power Pack 20 Megs 3/2400 362-6304 Hard Rock Cafe GBBS 10 Megs 12/9600 18 subs, online games, xfers 392-9654 Eagle's Eye AE:Tac 3 drives 12/2400 403-9757 The Board AE/BBS 11 Meg 3/1200 438-3078 The Looney's Tune AE 1200 baud 469-0049 The Graphics Dump 20 meg AE/BBS 515-8557 Chessboard Microlink 10 Megs 1200 785-1990 Final Level //gs only 20 megs 12/2400 848-1648 The Lost Caverns 3/1200 867-5031 Da Cave AE 1 meg 12/2400 baud 879-2693 Atlantict>P{ Alliance AE/BBS 10 megs 1200 879-6668 The Metal AE 10 megs 1200 KILL 896-1328 Starship AE 4 drives 925-3418 AE SPUDS 933-4308 The Garage AE 943-2424 Unfinished Tales 10 megs 1200 baud 203 - Connecticut 287-9120 The Anxiety Closet AE/BBS 288-2819 Moonlighting 20 meg AE 289-1970 Hell Hole 205-942-6627 Arc-Light AE/BBS 3/1200 205-979-8409 Irongate AE/BBS 10 megs, RPG's 3/2400 206 - WA 588-0927 Maximum Overu) cdrive AE 20 megs 1200 baud 634-0862 Vulcan Logic AE/CF/BBS 838-7686 Shooting Star AE/BBS 20 megs 3/12 852-7874 The Information Station AE/BBS 300 baud, RPG's 938-1888 R.A.B.B.S. AE 300 baud 208-746-0071 Medicine Shop AE 209-526-2360 Den of the Firefox AE 20 Meg 1200 212 - NY 364-6678 The Power Station AE 529-8820 Battle Circle 535-8144 The Cave AE 10 megs 3/1200 ART 628-4817 High Times BBS 671-9399 The Magic Apple GBBS 3/2400 877-6296 The Apple Asy`@e prompted for # of redials. 3> Return to the TeleNet Prompt. Simple type "@" 4> Get a menu. Simply type "?". 5> Set parameters. Type "O". (If you know how to use these, please leave me mail on one of the boards listed at the end.) That's it!! Hope this helps all of you out!! ____________________________________________________________________________ Outdial Listings _AC___PCP______aAgFCity Name__________________Comments___________Baud Rates_____ 201 NJNEW Newark, New Jersey 3/12/24 202 DCWAS Washington, DC 3/12/24 203 CTHAR Hartford, Connecticut 3/12 206 WASEA Seattle, Washington 3/12/24 212 NYNYO New York, New York 2/12/24 213 CALAN Los Angeles, California 3/12 21bBd׃4 TXDAL Dallas, Texas 3/12 215 PAPHI Philadelphia, Pennsylvania 3/12/(24?) 216 OHCLV Clevland, Ohio 3/12 303 CODEN Denver, Colorado 3/12/24 305 FLMIA Miami, Flordia 3/12 312 ILCHI Chicago, Il 3/12/24 313 MIDET Detroit, Michigan 3/12/24 cCOM* 314 MOSLO St. Louis, Missouri Also 618 3/12 404 GAATL Atlanta, Georgia 3/12 407 FLMIA Miami, Flordia Dial 1407+Number 3/12 408 CASJO San Jose, California 3/12 414 WIMIL Milwaukee, Wisconsin 3/12 415 CASFA San Fransisco, California 3/12 415 CAPAL Palo Alto, California 3/12 415 CASFA dDqeI San Fransisco, California 3/12 415 CASJO San Fransisco, California Dial 1415+Number 3/12 503 ORPOR Portland, Oregon 3/12 602 AZPHO Pheonix, Arizona 3/12 612 MNMIN Minneapolis, Minnesota 3/12 617 MABOS Boston, Maryland 3/12 618 MOSLO St. Louis, Missouri Also 314 3/12 619 CASAD San DiegoeEh, California 3/12 619 CASAD San Diego, California 3/12 703 DCWAS Washington, DC Dial 1703+Number 3/12/24 713 TXHOU Houston, Texas 3/12/24 714 CASAN ???, California 3/12 714 CACOL ???, California 3/12 718 NYNYO New York, New York Dial 1718+Number 3/12/24 801 UTSLC Salt Lake CifF]#ty, Utah 3/12 813 FLTAM Tampa, Flordia 3/12 815 ILCHI Rockford, Illinois Dial 1815+Number 3/12/24 816 MOKCI Kansas City, Missouri 3/12 818 CAGLE Glendale, California 3/12 913 MOKCI Kansas City, Missouri Dial 1913+Number 3/12 919 NCRTP Reasearch Triangle Park, N 3/12 ____________________________________gGq________________________________________ PCP - Prefixes Format: C prefixbb,code,password PREFIX=See below BB=Baud rate 3 12 24 CODE & PASSWORD=Self explanatory AREA CITY & STATE BAUD PREFIX CODE SAME IN ----------------------------------------------------------------------------- 201 Newark, New Jersey 3/12/24 D/NJNEW/ 202 Washington, DC 3/12/24 D/DCWAS/ 70hH3,202,301 203 Hartford, Conneticut 12 D/CNHAR/ 206 Seattle, Washington 3/12/24 D/WASEA/ 212 New York City, New York 3/12/24 D/NYNYO/ in 212, 718 213 Los Angeles, California 3/12/24 D/CALAN/ 214 Dallas, Texas 3/12/24 D/TXDAL/ in 214, 817 215 Philadelphia, Pennsylvania 3/12/24 D/PAPHI/ 216 Cleveland, Ohio 3/12 D/OHCLV/ 3iIe01 Washington, DC 3/12/24 D/DCWAS/ 703,202,301 303 Denver, Colorado 3/12/24 D/CODEN/ 305 Miami, Florida 3/12 D/FLMIA/ 312 Chicago, Illinois 3/12/24 D/ILCHI/ in 312, 815 313 Detroit, Michigan 3/12/24 D/MIDET/ 314 Saint Louis, Missouri 12 D/MOSLO/ 404 Atlanta, Georgia 3/12/24 D/GAATL/ 408 Palo Altj4o, California 12 D/CAPAL/ in 415, 408 408 San Jose, California 12 D/CASJO/ 414 Milwaukee, Wisconsin 12 D/WIMIL/ 415 Palo Alto, California 12 D/CAPAL/ 415 San Francisco, California 3/12/24 D/CASFA/ 415 San Jose, Califonia 12 D/CASJO/ in 408, 415 503 Portland, Oregon 3/12 D/ORPOR/ 602 Phoenix, Arizona UK),[67 (902) (902) 421-4110 1367 (904) (912) 752-2000 1367 (906) (313) 424-0900 2365 (912) (912) 752-2000 1367 (913) (913) 276-6708 1367 (914) (518) 471-8111 9435 (915) (512) 828-2501 1367 (916) (415) 781-5271 2077 (918) (405) 236-6121 1367 (919) (912) 752-2000 1367 201-- Classified 202--304-343-7016 203--203-789-6815 204--204-949-0900 206--VLu206-345-4082 207--617-787-5300 208--303-293-8777 209--415-781-5271 212--518-471-8111 213--415-781-5271 214--214-464-7400 215--412-633-5600 216--614-464-0519 217--217-789-8290 218--402-221-7199 219--317-265-4834 301--304-343-1401 302--412-633-5600 303--303-293-8777 304--304-344-8041 305--912-752-2000 307--303-293-8777 308--402-221-7199 312--312-796-9600 313--313-424-0900 314--816-275-8460 316--913-276-6708 317--317-265-4834 318--504-245-5330 319--402-22WMo׬1-7199 401--617-787-5300 402--402-221-7199 404--912-752-2000 405--405-236-6121 406--303-293-8777 412--412-633-5600 413--617-787-5300 414--608-252-6932 415--415-781-5271 416--416-443-0542 417--816-275-8460 418--614-464-0123 419--614-464-0519 501--405-236-6121 502--502-583-2861 503--206-345-4082 504--504-245-5330 505--303-293-8777 509--206-345-4082 512--512-828-2501 513--614-464-0519 514--514-394-7440 515--402-221-7199 517--313-424-0900 518--518-471-8111XNxSG 519--416-443-0542 601--601-961-8139 602--303-293-8777 603--617-787-5300 605--402-221-7199 606--502-583-2861 607--518-471-8111 608--608-252-6932 609-- Classified 612--402-221-7199 613--416-443-0542 614--614-464-0519 615--615-373-5791 616--313-424-0900 617--617-787-5300 619--415-781-5271 701--402-221-7199 702--415-543-2861 703--304-344-7935 704--912-752-2000 705--416-443-0542 707--415-781-5271 712--402-221-7199 713--713-961-2397 715--608-252-6932 7YO%A16--518-471-8111 717--412-633-5600 718--518-471-8111 801--303-293-8777 802--617-787-5300 804--304-344-7935 805--415-781-5271 806--512-828-2501 809--404-751-8871 812--317-265-4834 813--813-228-7871 814--412-633-5600 815--217-789-8290 816--816-275-8460 817--214-464-7400 901--615-373-5791 904--912-752-2000 906--313-424-0900 912--912-752-2000 914--518-471-8111 916--415-781-5271 918--405-236-6121 912--912-752-2000 ZP3gz **** MAINFRAMES & MISC. **** THE FOLLOWING IS A LIST OF NUMBERS I HAVE COMPILED THROUGH A PERIOD OF TIME. NOTE THAT SOME OF THE NUMBERS LISTED ARE NOT OF MAINFRAME NATURE BUT RATHER A SMALLER TYPE SYSTEM. 312-972-7603 ARROGON NET LAB 800-228-1111 AMERICAN EXPRESS 215-564-6572 ATLANTIC CITY CASINO 800-225-8456 AUTONET 800-327-676 313-234-5621 FTS 213-798-2000 FTS 202-347-3222 F.A.A. 817-332-8491 FORTWORTH SCHOOL 817-625-6401 GIS 617-732-125[Q)1 HARARD 617-732-1802 " 415-857-8193 HP3000 303-232-8555 HP3000 313-644-3840 HIGH SCHOOL 714-962-3365 H.A.T.S. 215-563-9213 HP3000 512-385-4170 HP3000 301-881-6156 HP3000 301-881-6157 HP3000 301-881-6158 HP3000SION 609-734-3131 RCA/CMS 414-476-8010 RSTS/E 414-542-4494 " 414-543-0789 " 303-447-2540 " 817-877-0548 " 313-964-2064 SMITH & HENCHMAN 315-423-1313 SYRACUSE DECS 404-885-3460 SEARS CREDIT CHECK 212-369-5114 SPENCE SCHOOL 713-795-1200 \Rw SHELL VULCAN 313-964-2000 SEMAT COMPUTER 412-794-7601 SLIPPERY ROCK OIL 800-424-9494 TELEMAIL 714-776-4511 TRW PCP List v1.1 - 8/31/88 Introduction: What is PCP? PCP stands for PC Pursuit. This is an online service which for a nominal fee allows you to call almost anywhere in the continential US. The main restriction is that you must call via data, i.e. a modem. What you must do is call the node nearest you and then follow the in]Sstructions in the next section. ___________________________________________________________________________ Instructions: When you connect with the TeleNet node type "@" ( stands for Carriage Return). Hit return until you get the prompt "@". This is the telenet prompt. At the telenet prompt you may do one of the following: 1> Hang-Up. Simply type "HANG" 2> Connect with an outdial. 3> Disconnect with an outdial. Simply type^TYվ "D" 4> Use the various set commands. (This will be covered in the next issue of PCP list) Connecting with an Outdial: At the "@" prompt type the following: C D/XXXXX/YY,PCPZZZZZ XXXXX = Outdial Specifier (PCP on the lisings) YY = Baud Rate ZZZZZ = Your PCP User Number You will then be prompted for you password. If the password is correct you will be given one of the following: D/XX_?PgMXXX,YY BUSY 00 00 (The Outdial is busy) (^^ ^^ these vary) D/XXXXX,YY CONNECTED (You are connected to the Outdial) D/XXXXX,YY NOT OPERATING 00 00 (The Outdial is under repair) Once connected to an Outdial you must type: "ATZ" "" You should then get the "*" prompt from here you can do 5 things: 1> Dial. Simply type "D,NNNNNNN" (NNNNNNN = Phone Number) 2> Re-Dial. Simply type "R". You will bJV*.Y 950-1850 7 950-0488 ITT 14 950-0859 Value-Line ? 950-1432 Li-Tel ? 950-0777 Sprint 9 950-0223 Global Kall 7 950-1001 6 950-8055 5 950-1432 KWa6 CNA List NPA Dialup Pin(s) Notes ------- ---------------------- ------------ ----------------- (201) Call business office 1367 (202) (304) 343-7016 1367 (203) (203) 789-6815 1367 (204) (204) 949-0900 1367 (205) (205) 988-7000 1367 (206) (206) 345-4082 ot0185 Pac-Bell (207) (617) 787-5300 760 (208) (303) 393-LXb]z8777 ot085 (209) (415) 781-5271 2077 (212) (518) 471-8111 9435 (213) (415) 781-5271 2077 (214) (214) 464-7400 1367 (215) (412) 633-5600 1367 (216) (614) 464-0519 1316 (217) (217) 789-8290 0363 (218) (402) 221-7199 0001367zct (219) (317) 265-4834 1316 (301) (304) 344-8041 1316 (302) (412) 633-5600 1316 (303) (402) 572-5MY5858 1316 (304) (304) 344-8041 1316 (305) (912) 752-2000 1316 (306) (306) 347-2878 1316 (307) (402) 572-5858 1316 (308) (402) 221-7199 e00000 or 0001367zct (312) (312) 796-9600 0366 24 hrs ?? (313) (313) 424-0900 2365 automated & 24 hrs (314) (816) 275-8460 1367 or 0001367zct (315) (518) 471-8111 9435 (316) (913) 276-6708 NZs9 1367 or 0001367zct (317) (317) 265-4834 1367 (318) (504) 245-5330 1367 (319) (402) 221-7199 e00000 or 0001367zct (401) (617) 787-5300 760 (402) (402) 221-7199 e00000 or 0001367zct (403) (403) 425-2652 1367 (404) (912) 752-7000 1367 (405) (405) 236-6121 1367 (406) (402) 572-5858 e00000 (408) (415) 781-5271 2077 (409) (614) 464-0123 O[Q 1367 (412) (412) 633-5600 1367 (413) (617) 787-5300 760 (414) (608) 252-6932 e00000 (415) (415) 781-5271 2077 (416) (416) 443-0542 1367 (417) (816) 275-8460 1367 or 0001367zct (418) (614) 464-0123 1367 (419) (614) 464-0519 1367 (501) (405) 236-6121 1367 (503) (206) 345-4082 ot0185 (504) (504) 245-5330 1367 (505) (402) 57P\_2-5858 1367 (506) (506) 694-6541 1367 (507) (402) 221-7198 1367 24 hrs ?? (509) (206) 345-4082 ot0185 (512) (512) 828-2501 1367 (513) (614) 464-0123 1367 (514) (514) 394-7440 1367 (515) (402) 221-7199 1367 (516) (518) 471-8111 9435 (517) (313) 424-0900 236835 24 hrs & automated (518) (518) 471-8111 9435 (519) (416) 443-054Q]SJ2 1367 (601) (601) 961-8139 1367 (602) (402) 572-5858 1367 (603) (617) 787-5300 760 (604) (604) 432-2996 1367 (605) (402) 221-7199 e00000 (606) (502) 583-2861 1367 (607) (518) 471-8111 9435 (608) (608) 252-6932 e00000 (609) Call business Office 1367 (612) (402) 221-7198 E00000 (613) (416) 443-0542 1367 (614) (614) 464-0511 R^y 1367 (615) (615) 373-5791 0001365ZCW (616) (313) 424-0900 2365 (617) (617) 787-5300 760 (618) (217) 789-8290/5 0363 or 500 (619) (415) 781-5271 2077 (701) (402) 221-7199 1367 (702) (702) 877-7400 2077 (703) (304) 344-7935 1367 (704) (912) 752-2000 1367 (705) (416) 443-0542 1367 (707) (415) 781-5271 2077 (712) (402) 221-71S_x99 1367 (713) (713) 961-2397 1367 (714) (415) 781-5271 2077 (715) (402) 572-5858 e00000 (716) (518) 471-8111 9435 (717) (412) 633-5600 1367 (718) (518) 471-8111 9435 (801) (402) 572-5858 1367 (802) (617) 787-5300 760 (803) (912) 757-2000 1367 (804) (304) 344-7935 1367 (805) (415) 781-5271 2077 (806) (512) 827-2501 TJk& 1367 (807) (416) 443-0542 1367 (808) (404) 751-8871 1367 (809) (404) 751-8871 1367 (812) (317) 265-4834 1367 (813) (813) 228-7834 1367 (814) (412) 633-5600 1367 (815) (217) 789-8290 0363 (816) (816) 275-8460 1367 (817) (214) 464-7400 1367 (818) (415) 781-5271 2077 (819) (514) 394-7440 1367 (901) (615) 373-5791 13Egm8s-1996 | 6+[1]+# | | (800)328-8555 | |800-638-2633 | 7:[1]+# | | Clear! | |800-682-4000 | 6 | TMC | | |800-821-6511 | 5+[1]+# | American Pioneer | (800)852-4154 | |800-821-6629 | 6+[1]+# | Max | (800)982-4422 | |800-821-7961 | 6+[1]+# | Max | (800)982-4422 | |800-826-7397 | 6:[1]+# Fh ǹ | Call U.S. | | |800-826-8017 | 7:[1]:# | | | |800-835-0111 | 9 | | | |800-843-0698 | 6+[1]+# | | | |800-847-0042 | 6 | | | |800-858-4009 | 6+[1]+# | NTS | Voice | |800-862-2345 | 7:[1]+# | TMC Gi | | |800-874-1534 | [35]+[1]+# | | | |800-877-8000 | [0]+#:14 | US Sprint Calling Card | FON Cards | |800-882-2255 | 6:[1]+# | AmeriCall | False Carrier | |800-950-1022 | [0]+#:14 | MCI Calling Card | | |800-992-1444 | 9 | AllNet | | ====================================================================Hj(8 ========= 950's List KNOWN 950'S NAME CODE LENGTH 950-1033 9 950-1044 Alnet 6 950-1444 Alnet 9 950-0220 Metro 6 950-1055 6/9 950-1007 7 950-0223 IUg/R 6 950-1003 RCI 6 950-1011 5 950-1999 6 950-0963 6 950-1088 6 950-1022 MCI 14 950-1986 5 950-1066 7 +wySeparator "^" Name=26 alphanumeric characters max. Additional Data=Expiration Date, offset, encrypted PIN, etc. ES=End Sentinel "?" LRC=Longitudinal Redundancy Check *** Track 2 Layout: *** | SS | PAN | FS | Additional Data | ES | LRC | SS=Start Sentinel ";" PAN=Primary Acct. # (19 digits max) FS=Field Separator "=" Additional Data=Expiration Date, offset, encrypted PIN, etc. ES=End Sentinel "?" LRC=Longitudinal Redundancy Check *** Track 3 Layou,x%Gt: ** Similar to tracks 1 and 2. Almost never used. Many different data standards used. Track 2, "American Banking Association," (ABA) is most commonly used. This is the track that is read by ATMs and credit card checkers. The ABA designed the specifications of this track and all world banks must abide by it. It contains the cardholder's account, encrypted PIN, plus other discretionary data. Track 1, named after the "International Air Transport A-yssociation," contains the cardholder's name as well as account and other discretionary data. This track is sometimes used by the airlines when securing reservations with a credit card; your name just "pops up" on their machine when they swipe your card! Since Track 1 can store MUCH more information, credit card companies are trying to urge retailers to buy card readers that read Track 1. The *problem* is that most card readers read either Track 1 or Track 2, but NOT BOTH! And the.zL installed base of readers currently is biased towards Track 2. VISA USA is at the front of this 'exodus' to Track 1, to the point where they are offering Track 1 readers at reduced prices thru participating banks. A spokesperson for VISA commented: "We think that Track 1 represents more flexibility and the potential to deliver more information, and we intend to build new services around the increased information." What new services? We can only wait and see. Tra/{VVBeck 3 is unique. It was intended to have data read and WRITTEN on it. Cardholders would have account information UPDATED right on the magstripe. Unfortunately, Track 3 is pretty much an orphaned standard. Its *original* design was to control off-line ATM transactions, but since ATMs are now on-line ALL THE TIME, it's pretty much useless. Plus the fact that retailers and banks would have to install NEW card readers to read that track, and that costs $$. Encoding protocol specifies 0|?0that each track must begin and end with a length of all Zero bits, called CLOCKING BITS. These are used to synch the self- clocking feature of biphase decoding. See Figure 10. Figure 10: end sentinel start sentinel | longitudinal redundancy check | | | 000000000000000 SS.................ES LRC 0000000000000000 leading data, data, data trailing clo1}icking bits clocking bits (length varies) (length varies) THAT'S IT!!! There you have the ANSI/ISO STANDARDS! Completely explained. Now, the bad news. NOT EVERY CARD USES IT! Credit cards and ATM cards will follow these standards. BUT, there are many other types of cards out there. Security passes, copy machine cards, ID badges, and EACH of them may use a PROPRIETARY density/format/track-location system. ANSI/ISO2zE1B is REQUIRED for financial transaction cards used in the international interbank network. All other cards can play their own game. The good news. MOST other cards follow the standards, because it's EASY to follow a standard instead of WORKING to make your OWN! Most magstripe cards other than credit cards and ATM cards will use the same Track specifications, and use either BCD or ALPHA formats. ** A Bit About Magstripe Equipment ** "Wow, now I know how t s18H) " 1 0 0 1 1 0 0 9 (19H) " 0 1 0 1 1 0 0 : (1AH) Special 1 1 0 1 1 0 1 ; (1BH) " 0 0 1 1 1 0 0 < (1CH) " 1 0 1 1 1 0 1 = (1DH) " 0 1 1 1 1 0 1 > (1EH) " 1 1 1 1 1 0 0 ? (1FH) End Sentinel 0 0 0 0 0 1 0 @!7'] (20H) Special 1 0 0 0 0 1 1 A (21H) Data (alpha) 0 1 0 0 0 1 1 B (22H) " 1 1 0 0 0 1 0 C (23H) " 0 0 1 0 0 1 1 D (24H) " 1 0 1 0 0 1 0 E (25H) " 0 1 1 0 0 1 0 F (26H) " 1 1 1 0 0 1 1 G (27H) " 0 0 0 1 0 1 1 H "(28H) " 1 0 0 1 0 1 0 I (29H) " 0 1 0 1 0 1 0 J (2AH) " 1 1 0 1 0 1 1 K (2BH) " 0 0 1 1 0 1 0 L (2CH) " 1 0 1 1 0 1 1 M (2DH) " 0 1 1 1 0 1 1 N (2EH) " 1 1 1 1 0 1 0 O (2FH) " 0 0 0 0 1 1 1 P (30H) " #ˆ 1 0 0 0 1 1 0 Q (31H) " 0 1 0 0 1 1 0 R (32H) " 1 1 0 0 1 1 1 S (33H) " 0 0 1 0 1 1 0 T (34H) " 1 0 1 0 1 1 1 U (35H) " 0 1 1 0 1 1 1 V (36H) " 1 1 1 0 1 1 0 W (37H) " 0 0 0 1 1 1 0 X (38H) " 1 0 0 $V 1 1 1 1 Y (39H) " 0 1 0 1 1 1 1 Z (3AH) " 1 1 0 1 1 1 0 [ (3BH) Special 0 0 1 1 1 1 1 \ (3DH) Special 1 0 1 1 1 1 0 ] (3EH) Special 0 1 1 1 1 1 0 ^ (3FH) Field Separator 1 1 1 1 1 1 1 _ (40H) Special ***** 64 Character 7-bit Set ***** %A * 43 Alphanumeric Data Characters * 3 Framing/Field Characters * 18 Control/Special Characters The two ANSI/ISO formats, ALPHA and BCD, allow a great variety of data to be stored on magstripes. Most cards with magstripes use these formats, but occasionally some do not. More about those later on. ** Tracks and Encoding Protocols ** Now we know how the data is stored. But WHERE is the data stored on the magstripe?&'b ANSI/ISO standards define *3* Tracks, each of which is used for different purposes. These Tracks are defined only by their location on the magstripe, since the magstripe as a whole is magnetically homogeneous. See Figure 8. Figure 8: --------- _________________________________________________________________ | ^ ^ ^ |------------------| 0.223"--|---------|------------------------- | 'E: | | 0.353" | ^ |..................|.........|.........| 0.493" | | Track #1 0.110" | | | |............................|.........|... | | | | |............................|.........|... | | Track #2 0.110" | | |......................................|... (`S{ | | | | |......................................|... | | Track #3 0.110" | |.......................................... | | | |------------------------------------------------------------------ | | | You can see the exact)§y distances of each track from the edge of the card, as well as the uniform width and spacing. Place a magstripe card in front of you with the magstripe visible at the bottom of the card. Data is encoded from left to right (just like reading a book). See Figure 9. Figure 9: --------- ANSI/ISO Track 1,2,3 Standards Track Name Density Format Characters Function -------------------------------------------------------------------- 1 I*vsATA 210 bpi ALPHA 79 Read Name & Account 2 ABA 75 bpi BCD 40 Read Account 3 THRIFT 210 bpi BCD 107 Read Account & *Encode* Transaction *** Track 1 Layout: *** | SS | FC | PAN | Name | FS | Additional Data | ES | LRC | SS=Start Sentinel "%" FC=Format Code PAN=Primary Acct. # (19 digits max) FS=Field ׍ easily. There are obviously an *infinite* number of possible standards, but thankfully the American National Standards Institute (ANSI) and the International Standards Organization (ISO) have chosen 2 standards. The first is ** ANSI/ISO BCD Data format ** This is a 5-bit Binary Coded Decimal format. It uses a 16-character set, which uses 4 of the 5 available bits. The 5th bit is an ODD parity bit, which means there must be an odd number of 1's in thre 5-bit character..the parity bit will "force" the total to be odd. Also, the Least Significant Bits are read FIRST on the strip. See Figure 6. The sum of the 1's in each case is odd, thanks to the parity bit. If the read system adds up the 5 bits and gets an EVEN number, it flags the read as ERROR, and you got to scan the card again (I *know* a lot of you out there *already* understand parity, but I got to cover all the bases...not everyone sleeps with their modem and can recite{ the entire AT command set at will, you know). See Figure 6 for details of ANSI/ISO BCD. Figure 6: ANSI/ISO BCD Data Format --------- * Remember that b1 (bit #1) is the LSB (least significant bit)! * The LSB is read FIRST! * Hexadecimal conversions of the Data Bits are given in parenthesis (xH). --Data Bits-- Parity b1 b2 b3 b4 b5 Character Function 0 0 0 0 1 0 (0H) Data 1 0 0 0 0 1 (1H) # H " 0 1 0 0 0 2 (2H) " 1 1 0 0 1 3 (3H) " 0 0 1 0 0 4 (4H) " 1 0 1 0 1 5 (5H) " 0 1 1 0 1 6 (6H) " 1 1 1 0 0 7 (7H) " 0 0 0 1 0 8 (8H) " 1 0 0 1 1 9 (9H) " 0 1 0 1 1 : (AH) Control 1 1 0 1 0 ; (BH) Stagd7rt Sentinel 0 0 1 1 1 < (CH) Control 1 0 1 1 0 = (DH) Field Separator 0 1 1 1 0 > (EH) Control 1 1 1 1 1 ? (FH) End Sentinel ***** 16 Character 5-bit Set ***** 10 Numeric Data Characters 3 Framing/Field Characters 3 Control Characters The magstripe begins with a string of Zero bit-cells to permit the self- clocking ~feature of biphase to "sync" and begin decoding. A "Start Sentinel" character then tells the reformatting process where to start grouping the decoded bitstream into groups of 5 bits each. At the end of the data, an "End Sentinel" is encountered, which is followed by an "Longitudinal Redundancy Check (LRC) character. The LRC is a parity check for the sums of all b1, b2, b3, and b4 data bits of all preceding characters. The LRC character will catch the remote error that could occur M if an individual character had two compensating errors in its bit pattern (which would fool the 5th-bit parity check). The START SENTINEL, END SENTINEL, and LRC are collectively called "Framing Characters", and are discarded at the end of the reformatting process. ** ANSI/ISO ALPHA Data Format ** Alphanumeric data can also be encoded on magstripes. The second ANSI/ISO data format is ALPHA (alphanumeric) and involves a 7-bit character set with 64 characteLrs. As before, an odd parity bit is added to the required 6 data bits for each of the 64 characters. See Figure 7. Figure 7: --------- ANSI/ISO ALPHA Data Format * Remember that b1 (bit #1) is the LSB (least significant bit)! * The LSB is read FIRST! * Hexadecimal conversions of the Data Bits are given in parenthesis (xH). ------Data Bits------- Parity b1 b2 b3 b4 b5 b6 b7 Character Function 0 0 0 0 0 ; 0 1 space (0H) Special 1 0 0 0 0 0 0 ! (1H) " 0 1 0 0 0 0 0 " (2H) " 1 1 0 0 0 0 1 # (3H) " 0 0 1 0 0 0 0 $ (4H) " 1 0 1 0 0 0 1 % (5H) Start Sentinel 0 1 1 0 0 0 1 & (6H) Special 1 1 1 0 0 0 0 ' (7H) " 0 0 0 1 0 q/ 0 0 ( (8H) " 1 0 0 1 0 0 1 ) (9H) " 0 1 0 1 0 0 1 * (AH) " 1 1 0 1 0 0 0 + (BH) " 0 0 1 1 0 0 1 , (CH) " 1 0 1 1 0 0 0 - (DH) " 0 1 1 1 0 0 0 . (EH) " 1 1 1 1 0 0 1 / (FH) " 0 0 0 0 1 0 0 [g# 0 (10H) Data (numeric) 1 0 0 0 1 0 1 1 (11H) " 0 1 0 0 1 0 1 2 (12H) " 1 1 0 0 1 0 0 3 (13H) " 0 0 1 0 1 0 1 4 (14H) " 1 0 1 0 1 0 0 5 (15H) " 0 1 1 0 1 0 0 6 (16H) " 1 1 1 0 1 0 1 7 (17H) " 0 0 0 1 1 0 1 8 ( ?'erfaces, and reading consists of (you guessed it) detecting 'em. The S-S and N-N interfaces are called flux transitions, or flux reversals. ||| ||| <-flux lines Figure 2: N------------N-N-S-S-----------------S --------- flux lines -> ||| |||  ӵ The external magnetic field used to flip the polarities is produced by a solenoid, which can reverse its polarity by reversing the direction of current. An encoding head solenoid looks like a bar magnet bent into the shape of a ring so that the North/South poles are very close and face each other across a tiny gap. The field of the solenoid is concentrated across this gap, and when elemental magnetic particles of the magstripe are e c,Үxposed to this field, they polarize to the opposite (unlike poles attract). Movement of the stripe past the solenoid gap during which the polarity of the solenoid is reversed will produce a single flux reversal (see Figure 3). To erase a magstripe, the encoding head is held at a constant polarity and the entire stripe is moved past it. No flux reversals, no data. | | <----wires leading to solenoid | | (wrapp VE;ed around ring) /-|-|-\ / \ Figure 3: | | <----solenoid (has JUST changed polarity) --------- \ / \ N S / <---gap in ring.. NS polarity across gap N----------------------SS-N-------------------------S ^^ <<<<<-direction of stripe movement S-S flux reversal crʤeated at trailing edge of solenoid! So, we now know that flux reversals are only created the INSTANT the solenoid CHANGES its POLARITY. If the solenoid in Figure 3 were to remain at its current polarity, no further flux reversals would be created as the magstripe moves from right to left. But, if we were to change the solenoid gap polarity >from NS to *SN*, then (you guessed it) a *N-N* flux reversal would instantly be created. Just remember, for each and every reversal in solenoid$W! polarity, a single flux reversal is created (commit it to memory). An encoded magstripe is therefore just a series of flux reversals (NN followed by SS followed by NN). DATA! DATA! DATA! That's what you want! How the hell are flux reversals read and interpreted as data? Another solenoid called a READ HEAD is used to detect these flux reversals. The read head operates on the principle of ELECTROMAGNETIC RECIPROCITY: current passing thru a solenoid produces a magnetic field at the gap, therefore, the presence of a magnetic field at the gap of a solenoid coil will *produce a current in the coil*! The strongest magnetic fields on a magstripe are at the points of flux reversals. These are detected as voltage peaks by the reader, with +/- voltages corresponding to NN/SS flux reversals (remember, flux reversals come in 2 flavors). See Figure 4. magstripe---> -------NN--------SS--------NN---------SS------ Figure 4: voltage-----> .,v......+.........-.........+...........-..... --------- ---------- ------------- peak readout--> | | | | --------| |----------| |---- The "peak readout" square waveform is critical. Notice that the voltage peak remains the same until a new flux reversal is encountered. Now, how can we encode DATA? The most common technique used is known as Aiken Bip12hase, or "two-frequency coherent-phase encoding" (sounds impressive, eh?). First, digest the diagrams in Figure 5. Figure 5: ---------- ---------- ---------- --------- | | | | | | <- peak a) | |--------| |--------| | readouts * 0 * 0 * 0 * 0 * 0 * ----- ----- ----- ----- ----- - | | | | >|tV | | | | | | | b) | |----| |----| |----| |----| |----| * 1 * 1 * 1 * 1 * 1 * ----- ---------- ----- ----- - | | | | | | | | | c) | |----| |--------| |----| |----| * 1 * 0 * 0 * 1 * 1 * There you have it. Data is encoded in "bit cells," the frequency of w@ehich is the frequency of '0' signals. '1' signals are exactly TWICE the frequency of '0' signals. Therefore, while the actual frequency of the data passing the read head will vary due to swipe speed, data density, etc, the '1' frequency will ALWAYS be TWICE the '0' frequency. Figure 5C shows exactly how '1' and '0' data exists side by side. We're getting closer to read DATA! Now, we're all familiar with binary and how numbers and letters can be represented in binary fashion very_IBER)+AC+#+15. NOW IF IT COULDN'T BE PUT THROUGH, REORDER OR AN INTERNATIONAL RECORDING TRY THE ONLY INTERNATIONAL SENDER AUSTRALIA HAS,IT'S MONTREAL CANADA. YOU WOULD ENTER 14+COUNTRY CODE+2OR0+ AC+#+15. NOW THAT SHOULD BE ABOUT ALL THAT YOU NEED KNOW TO HAVE FUN ON ANOTHER COUNTRIES TRUNK. EIGHTH LESSON WELL IF YOU ACCTUALLY LIVED IN AUSTRALIA YOU WOULD HAVE A BITCH OF A TIME BOXING,DUE TO THE FACT THAT THEY USE DC PHONES UNLIKE OUR AC PHONES. YOU SEE WHEN WE HANG-UP OUR PHONES THE PHONE SHOOTS A 2600HZ TONE TO TELL THE PHONE COMPANY THAT THE PARTY HAS HUNG-UP,BUT OVER THERE THEY JUST REMOVE THE GROUND,OR THE NEGATIVE SIDE OF THE LINE,SO THERE ARE NO TONES LIKE OURS.IF YOU ARE SAYING HEY YOU MUST BE WRONG I KNOW SUCH AND SUCH WHO LIVES THERE AND BOXES ALL THE TIME,WELL YOUR PARTIALLY RIGHT.THEY DO,OR AT LEAST THEY DID.IN THE PAST FEW YEARS A CALL TO THE STATES COST THEM ABOUT 20-30 A MIN. WHICH EQUALS ABOUT 25-40$ OUR MONEY.BUT THEY DID ONE ' UP ON THIER TELECOMM, THIER LIKE THE OLD A.T.T. MA-BELL,YOU SEE THEY WOULD SHORT HAUL THIER CALLS TO THE STATES.WHAT THEY WOULD DO IS CALL NEW ZEALAND AND THEN BLAST THE 2400+2600HZ SIGNAL AND BOOM THEY WOULD BE PAYING FOR A CALL TO NEW ZEALAND, THE COST IS LIKE CALLING FROM NY TO LA HERE,A SUBSTANIAL DIFFERENCE BUT YOU SEE THAT IS NOT SO ANYMORE. THE COST IS ABOUT THE SAME,$1.00 DIFFERENCE A MIN,SO AUSTRALIANS DON'T REALLY NEED TO BOX ANYMORE,AND THEY DON'T!! WELL I HAVE TRIED T>y߯O HELP THOSE WHO ARE NEW THIS FIELD AND THE OLD TIMERS IN IT TOO,WITH THIS ARTICLE. I HOPE THAT AT LEAST ONE LESSON HELPS SOME OF YOU OUT THERE!! I WISH TO THANK THE FOLLOWING. TELECOM AUSTRALIA A.T.T. WHICH WITHOUT THIER LINES I COULD NEVER HAVE HAD AS MUCH FUN IN THIS FIELD,OR LEARNED SO MUCH ABOUT THE WORLD!! ARTIALLY RIGHT.THEY DO,OR AT LEAST THEY DID.IN THE PAST FEW YEARS A CALL TO THE STATES COST THEM ABOUT 20-30 A MIN. WHICH EQUALS ABOUT 25-40$ OUR MONEY.BUT THEY DID ONEֽH@ 321171 321171 323608 HATFIELD 74972 63719 63719 63719 ST.ALBANS 64641 54023 54023 54023 PARK STREET 73190 73190 73190 73190 BOWMANS GREEN 23190 23190 23190 23190 POTTERS BAR 56490 58125 52702 55690 CUFFLEY 873513 873513 873513 873513 BARNET 440 0799 440 1191 440 1190  440 2411 ENFIELD 363 1728 363 1925 363 1925 363 1925 PONDERS END 805 5555 805 5555 805 5555 805 5555 WINCHMORE HILL 360 5414 360 5414 360 5414 360 5414 MILE END PW 980 3807 980 3807 980 3807 STRATFORD PW 534 3588 534 3588 534 2626 534 3588 889 4715 WEL GDN CITY 371636 ݀responsible for anything you do or any consequences thereof. I do not condone fraud, larceny, or any other criminal activities. ** MAGSTRIPE FIELDS, HEADS, ENCODING/READING ** Now, I'll get down to business! First, I am going to explain the basics behind fields, heads, encoding and reading. Try and absorb the theory behind encoding/reading. This will help you greatly if you ever decide to build your own encoder/reader from scratch (more on that later). Ferromagnetic materials are substances that retain magnetism after an external magnetizing field is removed. This principle is the basis of all magnetic recording and playback. Magnetic poles always occur in pairs within magnetized material, and magnetic flux lines emerge from the north pole and terminate at the south. The elemental parts of megstripes are ferromagnetic particles about 20 millionths of an inch long, each of which acts like a tiny bar magnet. These l particles are rigidly held together by a resin binder. The magnetic particles are made by companies which make coloring pigments for the paint industry, and are usually called pigments. When making the magstripe media, the elemental magnetic particles are aligned with their North-South axes parallel to the magnetic stripe by means of an external magnetic fields while the binder hardens. These particles are actually permanent bar magnets with two stable polarities. If a magnetic particle is placed in a strong external magnetic field of the opposite polarity, it will reverse its own polarity (North becomes South, South becomes North). The external magnetic field strength required to produce this flip is called the coercive force, and is a measure of the coercivity of the particle. Magnetic pigments are available in a variety of coercivities (more on that later on). An unencoded magstripe is actually a series of North-South magnetic domains (see Figure 1). The  x adjacent N-S fluxes merge, and the entire stripe acts as a single bar magnet with North and South poles at its ends. Figure 1: N-S.N-S.N-S.N-S.N-S.N-S.N-S.N-S <-particles in stripe --------- represented as-> N-----------------------------S However, if a S-S interface is created somewhere on the stripe, the fluxes will repel, and we get a concentration of flux lines around the S-S interface (same with N-N interface). Encoding consists of creating S-S and N-N int ^ (4) - 700 + 1300 ^ ^ (5) - 900 + 1300 ^ ^ (6) - 1100+ 1300 ^ ^ (7) - 700 + 1500 ^ ^ (8) - 900 + 1500 ^ ^ (9) - 1100+ 1500 ^ ^ (0) - 1300+ 1500 ^ ^ (KP) - 1100+ 1700 ^ ^ (ST) - 1500+ 1700 ^ ^ (11) - 700 + 1700 ^ ^ (12) - 900 + 1700 ^ ^ (KP2)- 1300+ 1700 ^ ^ Zi ^ ^ ^ ^ ALL FREQUENCIES GIVEN ARE IN HZ. ^ ^ ^ ^ ^ -------------------------------------- AND LEAST BUT NOT LAST THE MAGICICAL TONE,THAT DOES IT ALL,2600HZ. THIRD LESSON OK SO YOUR JUST SITTING THERE LOOKING AT THIS DUMB PGM YOU MADE,WELL ENOUGH OF THE TECH INFO,NOW FOR THE HANDS ON. YOU MUST ALWAYS BEFORE A CALL GET INTO A TRUNK THIS TODAY CAg N ONLY BE DONE BY CALLING A STEP-BY-STEP SWITCHING SYSTEM,AS OPPOSED TO CROSSBAR,ESS,OR DMS.FOR SAKE OF SIMPLICITY I WILL USE MONTREAL DIRECTORY ASSICTANCE. CALL ON YOU PHONE,(DTMF),TOUCH-TONES. 1-514-555-1212,WHEN YOU HEAR IT RING PLAY INTO THE PHONE 2600HZ.IF ALL GOES WELL YOU WILL HEAR KERCHINK KERCHUNK SLINCE.NOW AFTER YOU DO THIS NO MORE TOUCH TONES WILL BE USED. FOR YOUR FIRST TIME TRY 2600HZ WAIT 1 SEC AND KEY IN KP,ALL CALLS MUST START WITH KP AND END IN ST,YOUR FRIENDS ARtEA CODE AND # AND ST.NOW WAIT. IF ALL GOES WELL IT WILL RING AND YOUR FRIEND WILL ANSWER.BUT DON'T STAY ON TOO LONG. FOURTH LESSON OK SO YOU GOT THIS FAR AND ARE HUNGRY FOR MORE,WELL IF YOU ARE NOT THEN YOU WILL NEVER BE CLASSIFIED AS A PHREAKER BUT A LOSER. THIS SYSTEM HAS A GREAT MANY FILES ON JUST THAT SUBJECT SO LOOK THEM OVER.IF YOU READ SOMETHING ON ANOTHER GREAT FILE,AND DON'T UNDERSTAND IT,THEN YOU ARE MESSING WITH SOMETHING OUT OF YOU LEAGUE. GRADUALLY BUI kLD UP TO IT THEN YOU WILL NOT BE CONSIDERED A LOSER BUT A GREAT PHREAKER. YOU KNOW I STARTED 6-7 YEARS AGO AND I TOO HAD TO GRADUALLY BUILD UP TO IT, BUT NOT UNTILL A YEAR AGO THIS MONTH DID I HAVE AS MUCH FUN IN IT,AS YOU WILL.AS I AM WRITING THIS ARTICLE I STILL HAVE VISIONS OF ALL THE GOOD BBS'S THAT USED TO BE UP TO HELP NEW PHREAKS AND EXPERT PHREAKS,AND YOU KNOW WHAT I FEEL KINDA SORROWED THAT THEY ARE JUST A HANDFULL OF GOOD BBS'S AROUND FOR ALL THE FUTURE PHREAKS OF THE WO o\6RLD TO LEARN ON. -------------------------------------- THE FOLLOWING INFORMATION IS FOR ADVANCE TO EXPERT PHREAKERS ONLY!!! -------------------------------------- OK ENOUGH OF THAT OLD HAT HERE IS WHAT I MEANT ABOUT 'EVEN THE DIE HARD PHREAKS DON'T KNOW'. THIS WAS FOUND OUT ON OCT 10 1984 STRAIGHT FROM TELECOM AUSTRALIA. I WILL TELL YOU WHAT THE TONES ARE FOR THE CCITT #5 IS,WHICH BY THE WAY IS USED BY THE REST OF THE WORLD!! FIFTH LESSON OK FIRST HERE ARE THE FREQ T4UENCIES -------------------------------------- ^ THE CCITT#5 FREQUENCIES ^ ^ ^ ^ ^ ^ (1) - 1380 + 1500 ^ ^ (2) - 1380 + 1620 ^ ^ (3) - 1500 + 1620 ^ ^ (4) - 1380 + 1740 ^ ^ (5) - 1500 + 1740 ^ - (6) - 1620 + 1740 ^ ^ (7) - 1380 + 1860 ^ ^ (8) - 1500 + 1860 ^ ^ (9) - 1 i9620 + 1860 ^ ^ (0) - 1740 + 1860 ^ ^ (11) - 1380 + 1980 ^ ^ (12) - 1500 + 1980 ^ ^ (13) - 1620 + 1980 ^ ^ (14) - 1740 + 1980 ^ ^ (15) - 1860 + 1980 ^ ^ ^ ^ ^ ^ ALL FREQUENICIES GIVEN ARE IN HZ. ^ ^ ^ ^ ^ ------------------------------- ------- OK SO NOW YOU HAVE THE FREQUENCIES LETS GET ON A AUSTRALIAN TRUNK. YOU MUST FIRST CALL AN AUSTRALIAN # AND SINCE SOMETHING MAY GO WRONG FOR YOU EVERY ONCE IN A WHILE,I SUGGEST STRONGLY CALLING THROUGH AN EXTENDER THAT WILL ALLOW AN OVERSEAS CALL TO GO THROUGH. IF YOU HAVE ONE PUT IT TO USE NOW!! OK LETS ASSUME YOU DO.WELL CALL AN AUSTRALIAN # AND WHEN YOU HEAR IT RING PLAY THE MAGICAL TONES FOR THE CCITT EQUIPMENT,ITS 2400HZ+2600HZ,WHEN YOU DO THIS YOU WILL HEAR A SOUND W"HICH WILL MAKE YOU THINK THAT THE CONNECTION WAS LOST,BUT IT WASN'T,IN FACT YOU ARE NOW ON AN AUSTRALIAN TRUNK!! AND BY THE WAY,THERE IS NOT A 10SEC TRUNK TIME OUT. SIXTH LESSON NOW YOU NEED TO KNOW THE PROPER PROCEDURE FOR THE CCITT LINE,AND WHAT KEYS DO WHAT. KEYS 0-12 ARE EXACTLY LIKE OURS!! KEY DEFINITIONS -------------------------------------- 13 IS LIKE OUR KP. 14 IS LIKE OUR KP2. 15 IS LIKE OUR ST. -------------------------------------- SEVENT#vH LESSON OK NOW YOU KNOW ALL THE KEYS AND TONES SO NOW IT IS TIME TO LEARN HOW TO USE THEM. LETS ASSUME YOU WERE GOING TO CALL A # IN AUSTRALIA,THE PROCEDURE WOULD BE-> 13+5+15+0+AC+# WAIT ABOUT 2OR3 SECS AND ENTER 1(OPER) OR 2(SUBSCRIBER) OR 3(TEST CALL). AND DON'T WORRY ABOUT THE SOUNDS YOU HEAR AFTER YOU KEY IN THE TONES, BECAUSE ALL CCITT#5 TRUNKS ARE SUPPOSE TO ECHO BACK EACH CHAR YOU KEY IN!! NOW LETS CALL THE UNITED STATES. PROCEDURE WOULD BE-->13+2(A LIVE OPER) OR0(SUBSCR>(C | | | |800-323-1314 | [6]:[9]:# | | | |800-323-9944 | 6:#+[000] | | | |800-325-0192 | [1]+#+6 | MCI | | |800-325-1337 | 7:[1]+# | TMC Watts | | |800-325-1369 | 6:[10]:[1]+# | | | |800-325-4067 | 4:#:[7]:[9] | ?K | | |800-325-6667 | 4 | | | |800-325-7222 | 6+[1]+# | Max | (800)982-4422 | |800-325-7970 | 6+[1]+# | Max | (800)982-4422 | |800-327-2703 | | | | |800-327-4532 | 8 | All-TelCo | | |800-327-9488 | #:13 | ITT | @j | |800-328-0282 | | | | |800-328-5791 | 6:[9]:# | | | |800-334-0193 | [9]+# | Piedmont | | |800-341-1005 | 6+[1]+# | | (800)482-4848 | |800-345-0008 | [0]+#:14 | US Sprint Calling Card | FON Cards | |800-348-1108 | 7:[1]+# | | | |800-3Ab68-4222 | 8 | Congress Watts Lines | | |800-368-5963 | 6+[1]+# | | | |800-437-7010 | 13 | GCI | | |800-441-0647 | 4:[12]+# | | | |800-448-8989 | 14+[1]+# | Call US | | |800-451-2300 | 12:# | TMC | | |800-492-0009 | 11:# BĔ | | (800)824-2479 | |800-521-2201 | 6+[1]+# | | | |800-521-8400 | 8:# | TravelNet | Accepts Voice | |800-523-7248 | 4:[1]+# | | Nights Only! | |800-532-0132 | | SouthernNet | Voice | |800-538-0007 | 8 | | | |800-541-1398 | 6+[1]+# | C | | |800-541-2255 | 10 | MicroTel | | |800-543-7168 | 8 | | | |800-547-1784 | 13 | AmericaNet | | |800-548-0003 | 7:[1]+# | | | |800-558-1000 | 6+[1]+# | | | |800-558-7888 | 6+[1]+# | | DfdQ; | |800-621-1121 | 13 | | | |800-621-1703 | 6+[1]+# | | False Carrier | |800-621-5640 | 6+[1]+# | ExpressTel | | |800-635-6366 | 10 | | | |800-637-4663 | 5+[1]+# | TeleSave | | |800-637-7377 | 7:[1]+# | | | |800-638wr&PP THE RADIO ON. TO ADJUST THE VOLUME, JUST USE THE VOLUME CONTROL ON ________________________________________ _________________-END-__________________ o Written by 13th Floor Enterprises T THE OTHER END TO THE GREEN WIRE. THEN CONNECT THE MAIN OF THE PLUG OR WHATEVER YOU ARE USING TO THIS CONNECTION SO THE GREEN WIRE, ONE END OF R1 AND THE MAIN OF THE SPEAKER WIRE ALL MEET IN ONE CONNECTION. AFTER THIS CONNECT PIN 2 TO THE GROUND OF YOUR PLUG (OR WHATEVER). HOW TO USE THIS F_ ^ -------------------------------------- OK WELL THIS ARTICLE WILL DEAL WITH SOMETHING THAT THE PUBLIC IN GENERAL, INCLUDING EVEN THE MOST DIE HARD PHREAKERS,DONT KNOW.THE FIRST PART WILL DEAL WITH THE BACKGROUND KNOW-HOW ,THE SECOND PART WILL DEAL WITH THE TONES NEEDED.THE THIRD WILL DEAL WITH WHAT TO DO WITH THEM WHEN YOU HAVE THEM.THE FOURTH PART WILL BE THE THE CONCLUDING PART,ON THE AMERICAN PORTION. FIRST LESSON WELL THE WORD PHREAKING RE{ALLY MEANS GETTING A CALL TO GO THROUGH AND NOT HAVING TO PAY FOR IT.THE REST OF THIS ARTICLE WILL USE THE TERM PHREAKER OR PHREAKING. WELL PHREAKING REALLY STARTED IN 1960 WHEN TWO MEN FOUND,IN THE BOTTOM OF THIER TELEPHONE COMPANY,A OLD,OLD,OLD TEC-MANUAL.IT HAD ALL THE INFO ON TELCO TERMINOLGY OF THAT DAY,AND THE SUCH,BUT THE BEST PART OF THE OLD MANUAL WAS,----THE TRUNCK TONES. THEY TOLD HOW TO,WHEN TO,WHAT SHOULD HAPPEN,AND THE SUCH.THAT FAITHFULL DAY BACK IN 1968,WAS THE DAWN28 BING OF THE PHREAKER. SECOND LESSON WELL YOU NEED ONE OF TWO THINGS 1-A COMPUTER CAPABLE OF PLAYING MUSIC. 2-A HOME MADE MEMORY REDIAL BLUE BOX. AND WELL SINCE,I GUESS,YOU ARE READING THIS OFF OF A BBS YOU ALREADY HAVE 1 SOOOOO PUT IT TO USE BUB!! THE TONES THAT MAKE UP A KEY. -------------------------------------- ^ ^ ^ (1) - 700 + 900 ^ ^ (2) - 700 + 1100 ^ ^ (3) - 900 + 1100 ^q40\l\ qwVoq_]Wp?E `7 Q܏R$v X5`⒨ "J DJD@6U "N0\  !l 1 'U\@*8Ia TVH>~y:Ũg}!&Ax?7l|%\@'2 /1$ h6C,e]~\`$P iJ)s:\+-|oĀ'a=W,~Y0*5}f R OLZ>g^?aXCg445_yx`4,ЅG0fZwYCx,`gR3$>U&<ώއ~¸j%>8邈(ο1>OܼRl+ G.) W#|Ҿl40=#CJ װ埸|v&|v'Ye2TL,o]%; 9uF׻ވXƸ yw.ebdv?? %Wn_+ȅw8`gys"&x+ǰV XfƷAF X"==9'(4a$]O#o ^fũFj /ΡVeȢ&MU|t`I|(Т=5uŰ8[)Ne2LJgNc1 gr&Mӕ4~e 丄!a;7 -cpSTIYF\Bl~G6Sc'`H7.Cm$~.á@oӧ W$XC+!691R~֌uȸ8IK=޽a/BA / ָ(m Rd`6%K 0FO5a6|k_(0K))y0IRixxA<+)aL6T!$2qǥ󫭕,uN%00}Biw^+X22IV2.URi0#4fL-1`֖aUdȘ>PNx~$"7dOe6~10bX C(rCgqБ>֢ yahмAijӬ۞JvApA"0A.ΜZH [{4bfEx1!A%9Hu93ċ^N5Mw᱙*M C:P 7:aC7.#*u;@ 56[@*p({W!!c9yeQ UAJ?*$Y`+ & b`p$88l,zJ8 6[Ss(a 0%```S.P$nd++,`\8@@\KgF]\lrGA mEC';"vu51={@,B$5$!v6w ,}0$܉W2˘NƖfFijoLi@H2"*dX4~0 ŀ (p ʙ8Y* : +J@۹4u10"4$6 #C;))y0IRixxA<+)aL6T!$2qǥ󫭕,uN%00}Biw^+X22IV2.URi0#4fL-1`֖aUdȘ>P#95)9 /+P.DFBDC {"~|yz*mͭN/ PxZbR]SY[YRRT[7038378P@/Q`<*N$"V^$\ syiſoP 'ۗ`0  M!4@  H/ Сoom^;Ŕϐ!~ul'C@ *>@U aCP EDBZOa `b 'a - b<,%X  @a Nt`.88<`k @DQPSRPD@#dXbOɈ )^0$8F# (`@-@4ϸ ;q@8RP FHhJ 7" E dd P*Th{\o < x Á)p@&^ txpx{uqys)TUFecb<` *l $ @hO@_@  ̇0@->F8Xҷ@$hrQ 5+,U<=zww7=[wWW7g!r8Ly*WhXxD3rT j2PhD%ACBD$$-)Lj*% )cw-w(-ԔҳH'C(?rLELq a@[ ї6't|1?&1U4 |B,D0q]ۼS:0c>q6H `I0X TbI`Q! ?2$G\c1}_ > 6#GǙO9Iπr=e!e',9^@UBP+(_L,xDm88Ox"A J4A `ఐP[DDE((CEEAACABFBBDAB< p00pPC@􊙯(RBh-+/ 7`!%EI}0#(>@x4@0 r]\` !s(8c ?? e*2I3N|bkXpܖ׉18TH )ȵq8B s bA|j⟞n4c ߗޑp2Q{ ^Cn6ޗԁRXHֈNq@JIV v@Bւ)Ys0Q< .6VbRD b@hcڃ7 lCs T?{c}߫k8}y: )H j|@` n0B#\ D.*[F-(ФE85mT\,늈u*O@+CzCϪ!*<C!Dc^MxIP%8MAN 7w``B5;INY~9yl~`<8 gwb~"0 #P@ (/{ ¥͘G~anAmȨ?"4и,(aNRB E[[ULi\l5i?)'07q4TUPN_VW_@@WeÃFyG#?Pf{sGzK67so:*FG:<.6 %- S|UU]QҟV=^0;8_2=Q[֞7R ??"!>?!+$/0h$b ?!!2# xyE&  Y~І(2@5)xA}JaE~o˃V,R`p^HT[8"TH1z.gd zgv`(y$#5`@#=ޘߵDk_x',_5h IȔ}a.^ Z[)!ȟ7AO @@44ByFgN*~-N}1 :[y1d"(n6~@ƺzF: 6@v8i b}Ȟ<: dal0gjn+^8?! 5(@a["/P<^ EM* !<Ë`BE9/"?=KSqI*hp=ZF jzԇ|[ꉑNHLÃH0 litBt_gVTu-vU o<ފNBFV[极y>c`q ~qznwHH N 1 F-Nag }EE ~[U}.\*m6FF蹀F0b+= -;ȓ Iw.H`W?Zo#CY)nD@sL mIPDv  s\qB8J܂΢i( 9~`['Jo=< ,DHc]R"H/1ݲ,uhn[!{{}y{}8޺%H's\߭0qzva'٢`^ `@S "0_PSJ0rRBsɒ_=0=*CI$$ðmqc_z4 /NNK.'20hh1<8\P.pQAѱ.I?rsÐ%.&r{wipȿl.>t#+K @D=?$h$̐osh\T$?SЀ/P>BCƺz#(ˇwyP@aE_FȠޗ6vOzay<]}{#w5CBd_J8p22/#,@QAoNK-A<=,$''O}r5ZO4Tr:H(8*_Tr{YehXxjN)0r0sS3tB $P8rbpD7!Kp'ڤr39.:*4TSZX] ~lo+5%6':70 8)π2 *:&6.?@BAC@ a`A@PlPmPlhRxX`D}*5 ++)*XEhghbh` hahd(YfkxA& %!AӤ &&|M fK dHUh`z@ a %lHH&DbғZT"pA Af!BX ap a)X`,U @\"'8 a ^IK2 Th*b 'qр60;44ݠPEx|BupF+=OXK RFB  /0(ۂϙH( k;XzD QNK JV e @̩ml  p!$V<:Uz8$L@1m4 th Xhm$kD!HB$#4G ȐV(-6/&18)P}'DQ b!۠@pVOAOL6@w@o&"E P06PAIC+gfL\F Y ) @윀 {@@.$ȰD0D8;B_f, -l)Fau&8 ^.l HZ\D-<[@ XHE)\1D8si`u f·00 L}8P8˧82f z0z$AX\/c ]  bآC .WfHCcp;P aIB$ "0 l)nЀ(`0l&NdE$^2y+Ja/VV B ֘̀h$I㙁H2Qup6@KYA߀Df j0l&SPpD9I19 Za&9a%ɲ#.r~  ߹bAC7+x{g؁N,,wL'sT| +ġNEF˫&E dd= )+Q } @1kGFW5wa'!;gD^E`Ϲ܀?AC<:::=I6>?8H< @΍ ˆw2y6Ѻ2t1p8Rs;= = K= )$) ;'"Z" ]oʁ 8JjXI +p0e~ qѱw1Q1ane6Mu'Р}``K3x=2q3tGwѷ9v#CP(@D sG{+#D @ @0&870$99;Et(zI€@K@#z"X",XTL7G?_D t yR~̏vw:6R;/@}'AvW|ttyBpAENdHD`?Um8#_@v4 z"Ȥ| '?{D_Wx`cuA񁇰rxֱ Vge9AJ&g?j"|Ң|qЗ7I5;A= Xg'7CWTh``n_TnJ$? ?Z+GO8/x & ;"8*[813{` X<)StNǀI?I׷R*:бMcc~gh߉HJO_:A>ػǢRG ? Qܛ]y8[¿Bz8grQ療t#ԢnB 0|  D- 44R: 3 s~ 6-T^qpdvVXZ(@??qovNЂ|\,\\[ Cr񃃚pP-JPCnn]P]aj#o"8?߲4aF~Ir3078ZSHclηc:y*Cl,5v#b&;B- -C݁b|k@JBt)ǺLFTUIɷ3ȉLhLZ,@`Vh'_= H>5tr!UAc|lwD&dۗk5p$j. B77G!FN{wv:L |"xWXJ=h,UgT8GB$DJB,?+pyBFw81yy3pfgyQD,%}, •,[?np.6[fHnG6Ao*1v\hEF$E) E0fٺfA'Ag$)אgCb#GAx\:9,l\9n;j_{D@y܁撷X.HБ@\Q>& # *ʎy)4M$㲖|_?z8twm\?QnTK)CA+@ *RȈxJQpsf^N\ZV ꆖrL?PA'Kj(B؄x@J\[պTC'Zxz (HKIJށߋ{zBE'E2v1WPO}s!`c%., '̤(ɉ 1Qv6ޡ>zg//۳Gg:sK[B2ңr ,!}JRDLrzO\GQXZ_T1Y58>#2/>~̚  Yb1`&bFiyqXQA~9 y1i^FIUEV CP%RQR yu %ZvRV֓䎢 J II  0D DIP5y>lh0p_po?<_]m;scsc ;_VؑBCSX B6ֲ0;=).;7%-'r2l22 {\BK*[k{\6޾p|g~@!a`~ 0$T, <<r2BZغ9z{srppu56247RWRQca   gNj/2bܪmsΞΎߩJҺ+ J~@ ƙ6ֶΖށῂ$r1չեYsgwpyz}y#y{x6}@(ppHHHXDd4dHPP~NDI<>>:/9FIU%%TJC% T1SP哽,z&!  c ~(O` @L 1Y %*0t``A >E*:&2<-\d< -a9V"L~!p +rA!rqA!2JI-y@rdrJBG) <jL~!]" l2^@30I#) J*6 4 =tlp <( `(  m<a= d%X"VI$ `6H3d v2TФfcq8on`(0G,ZOʹXd , Xh"%;pi2sCh4%@8@@)@ @0!? .brJjZ6(hl , p H Ƭ%*u* əB| PJt)H>'R#RDt$( @4Z %,.eL'F G(.A PM: X@ K0)!pP1*8Tm6#:DS 9-YKJu@HA)4Gt8N + (_( zyiŀ#3!Pl~!,@,Vra? y'у".g 8P('~a Us*AP@\En (}0v$I Z%Dѣc?==m ?Ԁ9M@PJf-슀9`38}O4h2R9AXBtjqc   FcaL0htQJqq"AD>F =>2F_ߐL pXTa C1P"! bZS ,j83~(=@{B\pAp 3‰'00@4`4H :  xdk@IpT>  yT̮`@GQ@Ո0 $E/Q?PD3 _39 7LOTZBfsY} "0Q-D7Gf)ԛԔ,R^2A( rZS#3Q%"dVBu B2s $ ķ \ L㘐т] OtvOw:ւR@"K#rPF@@(Րـ,J"R+ ||$3>/[ƢܯpI%je(ɀ9VY>pQP10qpP  ۀ`#p;S55S6S%4S7956)4 7156!47>5?inlj,lLh oFtkF4mFTiFnFdjF$lFDhFoxk8mXi~hz(|Hhbu0<__>+'w7W[{;[k+ s3c#}]- uUe%9YiIqQaA>.6&zZjJrRbB<,?Zh(X4B zfp?o ;nx/_ E4`. C/@;c0 `А!&@0 T`h 1 IC$Q8q '.AeA&>EM9ĕ5~@T䣔X%$idqTOwtD! sn$J@ %8_8'lx;e>-!P}* {AӬPS0H;WДf$6#tNp8`!,5r9ɩwQU0<A <]ظ7%a:(\D88Wc".Qp3``Jž99xMVaYqL%aZ&eL̘d:=@5xN`e ] {kjHsB)x@A#eW:CS:⅓$Y*P~< ; ) ^03kB|'1Y {_' BeaESP `."\J# ,*,H7gbT*3K(ʟ PW0B `z ,TTe=8#42],+m-@=R%AV#Gap=B] ac'm:$;aPÔX v?E"Ya& CM$PGiZj!&4 A˲ AE2rp0 a 0b A۟9$$ސ!^ǍGʛ;:sch2@#vzn"5BP|€S b|𵥿,Ù:h@%#A*bF oGY $VхvE\ h*>r 0@{',t"$+"4NDdc*-0&BP*K( (b\[0\g̶4d!؈8* 4_2cBDS:PݰJI U֙T+a?!2p0In$'0(C$#HП 2`&$P%S 5F6Yc_U|r55  &5MqW:{ɘ#\pr:(+P*vg d%0Ë=0Jx'#; `R㞀dYH胖ZB[ IF2T +` dJmi R.@  ִi&:F}Aȼj8 r]Z514AЮƶ(0h0Ž(7# 3AKrhfc"`3v؛Vt.Kk{'S>];;p=׹dSh2E;IЇaP@)lDZ \L mM\lH%BHgobjdOgjh@Cڣ%-1:YUc+V s9k0 `yK$?P0 `h"128=KӤ8$r'F(+D,# N4= h!(L]G;Xo\7ܘ \X~yc}C~ˀˀˀˀˀˀˀˀ@@@@@@@@4:Cä9p i`A  0  (  8k6 ,`:z2L?}??|?N03.Tqpq01PQ~u X}sǾP P}}9 (=p wY8 eY|{yvlg4's=7#:2D~0x %f$ H0uVY"i  %r!p/X";%!>Z`` Vl"%T=X@$ 0 %(ɀ IC%5=%`2c IFG4"=2^9 ?Y5-t x"Q o"zL`fDRf M Ss%/[wR/AE8>`$C6jz|e @o* B@dx%<_H\S~X"[K3sh@Lx heB$PJG/#_8ꛪ#}1|01%_+ q@?4YO `CJ ) '?Wc2.QQZ>2 bf^HE-/:.J( `` 10 jԾZ/Ȟ$"u+$ e O1`bPI01B.Q/R 4OB|tQ pK<-b eea ۝j$zH?(` Br! P”BTL!:+XdkX7(`^(.IYZF(\& ~d1aŮ'11ĚPNDXoAa/CϞd##3'=2#@H::@OVn7 `9|v> j7x ;⅂#BP]&~|L'l4@a*P pV 3VS  7IzH G4 "Ncv 0( W1H-E-EpPCC#P @ d = x?0i @P9mɌK2@@SD{U)dgLH ^ apj4 aDR|{gѨ5p80DK f8 | )fFo) {”Cn Zg P %_1 "Z07@6D݂Ndk@72tĐ9=*< 49 h;P ;;!#BX=4̤4k dYOd  d wAIl *G_Z~HN/:4XO$1⣀2Cfq(SמQȡ; j΢`Me8E@[_0?>I < Z@"kS  8 fx6C@7)4z٠h AO.oBy[ <2iD}H4"B A)as:|)u0"p)3"x+- /3Z:$"5}?l+WSL0a)2 Bo#X0gJO< c: e,h!2d6<ELf 0р&f=2=>,ZDtS8dK2Ni'v6.a43,EnĒ`v ZP5xԼ:@a(%h3@eaB%LXy n @>moi}0(:-JOzP}os=N{Tpn PrA\aGxHCBCWKV=&'8ia`4NBV?f( (,y@k;Րm XT-S $!cMDf]M@ dK}]Ǿ"$ 9>f`4\y 8 UB$ vax*FCc(ra4DD :x2a\/.!.PeD%1%PN6$(F4BH;$ T M@  GMV&GG$p8##W;Y$gGG3 $sl  ~V"z*bDL4T8XhHH?`` Q< U f ?7-~28@c@y@@*@F`,@(o[}eqFrv OހI@Ҁ0 Pnd?w~ƨP,@ @P$I^@:)`$`54dl @9{1bD? @0 T̨fw`*L90 `0 L`}0 3.<p :7 PE`$A_l!)_d {0 „ . =*@|)^4?I@ieJڔ(jP~e(P]֥!h ]:@gm3h 0T`md bE7[ dV@,EҊD>6(P5Xz@ᢁEΊf|(g@"ETv48?(p`0ȡC2=83)pu[nj>-[nŸ2pe/9n _0 Gn^ j mˠ!C5 0*kTC! rB0 HCH;z< 2,~x Ƌ߇ؠ@;La0 `4@@3rl.`R<dlXp@3r"3\@2ohEpP R@0jjTP @=`5*iP sŪT_y$0 L8ɀv/0'LS&LҘ0.p z5e\-5s)胪kE# D\R0aDf" F mkhE(4NYȩ'_*9D\6N,UAt@G&G@w?<y^,;<ADBs<#fAyiQRHi0Zo|EhOM Q Bmgonccp|/fc` Ɛ*PUCQ1p:c )6!0*B/'a|hAm`+6 ֈpL.I}6 ëoP6t<rSQ^ˀ3h @@$3ɝSrrplǤz.`Wz%` -{ e)[?끐&aayEKA` C # %.*s@ ̊pI\` (/f.`8 (a@YMy]t_ocl LTh>& 42P N 3NhB6?8$%e|iœ{Fɓ :0ș) 3yeϿpP1%g@KX VDu8g?" eB&pʬ; PqYx@0;1ѐ–@,l rG+Mv8-AE;%~ y41`HO"D$|C0 ! h<(&A02مم \ P:R "TBDW0 4P;8c†v.v :-l@M~9;ۙ:;8DEV])d( '+"j  8ax.@! !p"@@ M_ )rG*"5'‘ b\@tGL!Qɳ8&>Zgq#L ` XS b{o&3ŧ$:`9:YlS?͖ϗQH#5 0$OTCHF A(J0%P C('!մ8)*,~3gzӺ% *M!@c '$t4t øf X!:_eWpH* *H{JT5 o1ՠ\ƚe:e~‘Q :4s F@H! C~f0@~jP%J}.(& % @A0u=N!@.IB [@ ѧ,u3 S2! Ӏ999 zcb-MI/HZa@{iSNfa fCs*XT`=f9Og0E$!J+E(֐ #AlKapmxTYNFJM)t3ā;:4%h[f SC T p) <,:%Ha(I,!L\ p(0"oh%A ! EI9#P: @R ؇Bq[1?КE褀e<^IDNȆ>J#¦=6 EXCeqG==6<L >tx a F1OB @ D1GР;S?88M`9'2# ɠ RO{*! х]U @ " |M N l7R߅H@tمT؁I%"p@3 HDLāN!$Fn3:wcY #W78^HX}H|@,ug lU'|ã.dXOmP3(JAAz*BeXM``CTL! T!4*PBUHTP"hhe%cz? $dԕ@9)7,+у@d PzhY2y5$=EDkLG C^K ԭdf0)/$RPf @J8 H<Xe7*:M$Ԡ*y <@. q@C>@rI sBj aZ݁/;M adgw}sCt f" A!WHA)Q"ND> EšB@_ጎ@oCaDcLwπ77Ԣ$@- zH=#(deg hlnI\.}1rR]'֧>%X+d3)ge %x8@ڜ>dɅ'S4Ɓ?8Y|pcO8 ozzU f@$'- %'-$a'-`%9}C0ljT_脨MM@ղ@3-B|`yji{ isDŽ?lLFa#O88u0!43r)>GDA90b=t Bb8$ca8@֦N7p CcS[;rNuKRϷt3?P+˪)Ҋ  4*SJPƅǞPT}}E@,DYBRLEV?q۽ HgJMYQU%9:QDS09A''U>wL-]fHl%MU32}>aBARt@%(q'ϐ`P'\HA~9ہB..ff6?貰E ݝp PUu2 C*# ӐKg12xZ[88dKdCd2V"`Pt 09<< l1PwL. /h5!cPa$ @Y0?]h0  0 X`$,%р_s yMT|J`Ġ@ l0 H`/@;LN0 `H%JF>C0 Pu 2` PFn'CFm0 `@, x0X`HhbP5 Z@`'%eg hlnI\.}1rR]'֧>%X+d3)ge %x8@ڜ>dɅ'S4Ɓ?8Y|pcO8 ozzU f@$'- %'-$a'-`%9}C0ljT_脨MM@ղ@3-B|`yji{ isDŽ?lLFa#O88u0!43r)>GDA90b=t Bb8$ca8@֦N7p CcS[;rNuKRϷt3?P+˪)Ҋ  &>?ich was used in FyberLyte's project) to produce the "Talking Greeting Card". For a mere $7.95 you can buy a completely assembled digital audio recording device (complete with speaker and microphone) built into a greeting card. The idea is to record your 10 second voice greeting on the card and mail it to the person of your choice. The possibilities abound... If you take the card apart, you'll find a plastic and cardboard frame inside containing a tiny 1" square circuit board, four 1.5V watch batteries, two switches, a piezo- electric microphone, and a decent 1.5" 16-ohm speaker. This is basically the same thing FyberLyte took pains to gather parts for and assemble, except it is much smaller, much cheaper, and ready to go! My hacker friends and I have removed these modules and concealed them inside all kinds of unlikely containers: a chewing-tobacco tin, a Zippo lighter, a dental floss dispen- ser, even a coat collar! The voice-band fidelity is quite goo\Wd, and it's excellent for recording (and playing back) ACTS coin deposit tones, Sprint voice FONcard codes, call- progress tones, telco recordings, etc. Thank you Hallmark, for "caring enough to send the very best" in a cheap, accessible, and readily hackable device! **You also might want to pick up a small NC (normally closed) momentary switch to replace the cheap plastic-and leaf switch activator. The other switch (rec/play) is a spst slide and works fine.** e circuit board, f `$gt gv fRhrN%I5 Br ҉#A$<hԉ#Bd#Bd%AlBtv%Cpr#A|tnZ" <INJf&&)$)|")d <I\N <(jPNR")dҩ|tԁ(rҩ|`&)t")d <I\Nr <(jNJg*"*X <(jNG" <(j$N``F <(jPNN ***BREAK Rp$*tpn&$<X"*lp(jN%AtJfrNBp"*lҪptԁr0($!(rNNqJg>x#D t"N#A$) rNV#At") NJf ")`rҩҩ#A$)&)$GD" p$(jL U(N")S#Ar#AnDґtԁr0($GL" p,(j(NrҩtNJf r p,(jNrҩ`#ir#Anr p,(jNrҩ`")S#Ar#An8ґtԁr0(#A t nvl`r.p0(jNrҩ`p$(jNN%X4: %X2J\g"*\p (jNp (jNJ`g"*`p (jNp (jN"*xp (jNNNqT ignored !Invalid option combination N & H **BREAK Jdg$*hG|" p(j(Np(jN"tgrp(jNJgr p(jNrtgFN"p(jNr   4YA|g`a610QNqNqNqeNuprS@Sf< * QNu H8Y?'>O; y8LE~?c8Vƺ̠&0I)`Gmf䮋BvCEʧJ>=4 `~ , KN4\ĄdLYX qDzaj1+¤u$*Ԃy 4=LA+N~f4 5>i+#}P2a3[[ y QG9 vaiHvHO0P8kn},WF,: Q mLԄ U &U15345q{Aq@wڧNQGxۋ[(SeŞ+4)X*C[(SvqO0B& $ЏWhB!=a1Q  W3!HpCjA`VLNgR?ATlB rm}:o V8;@?0}3r:,R]E 8J2veunP$%Q(ܑ! !|lqCTa{(c#y|'Co"E`2PĄ MHl+`gᢠ2O ĂK]@DDS$_5m+yBCɈGbx*.ɀf8!(qmP({fc#$ xl:`605T|#k+Ppi7[&oGr>@1f-g x|24+'I#DH +aRK@v2# mi;,($J6b@lEohbc ,pB@[S[*Jx`U*ldlaignk nQ!q^Lxp)&+جQ(( @ dd@A &JXB] |.4$;3p" DP`/vCבy ;XcK`/ƀ"!u@.đP<h ر` ?e&) 4*P30?ٖ-8JEg,wC&pP`1DF) O"`$d@Db:wDdzn  @RTb-?=@h`5?F᱁NSA2'1BCd%,M~)R G(+ꘀ~qwx,/n you a device on the line that does not belong there, probably a parall disconnected wire and go to the other end and measure the resistance of this. This resistance should be about one ohm or two at the most in a big house with a lot of phones. If it is more, then you probably have a series bug. If in the first case, taking parallel measurements using a meter (not LED/ LCD) and you notice a "kick" in the needle, you probably have a line tap Now if you also make a measurement wix{th the wire end twisted together and you notice the resistance reads about 1-2kohms, then you may have a drop-out relay. A drop-out relay is a relay that senses a phone going off hook, and signals a tape recorder to start recording. Another test to do with the phones still hooked up to the outside world, on hook voltage is about 48 Volts and off hook is about 6-10 Volts. Any other conditions may mean telephone surveillance. If you use a Wide Range Audio frequency generator and cxXUr%Ad``r#A`V")ҩt0G" <(j(N`.")ҩt0" <(j,NtHgvNg`R")t0l~"Jgt#B"Jgt%BdzJdg0Jg(G" <(j$Nr%Ax <(jPNJg <IlN`r%Ah <(jN#Atgd <(jN <INJfr <(jNJg0"*X <(jNG" <(j$Nr%Ax`` <(jPNN#FROM/A,TO/S,TO,OPT/K,HEX/S,NUMBER/S Bad args Can't open %S %S already exists Can't open %S Option '%C' ignored !Invalid option combination N & H **BREAK Jdg$*hG|" p(j(Np(jN"tgrp(jNJgr p(jNrtgFN"p(jNr nP00A and is made by Archer and the chip will run you exactly $18.88 including tax. The total cost will be around the price of a Radio Shack 33 memory red box conversion, but probably a bit more. PRE-CONSTRUCTION You will want to check inside your computer for a Soundblaster, as this is needed to create tones, or if you don't have one, you could record red box tones from a Radio Shack conversion. What I am saying is, you need something that generates tones that you will want to record. The following is what I used, not including the electronic components: PARTS LIST ISA1000A (the chip) Case (I use a film case, you know those little gray and black canisters) 16 ohm speaker (go to a dollar store and buy some cheap Walkman headphones) 28 pin socket (do not buy the Radio Shack ones if you can help it, find one with an open design, instead of Radio Shack's weird design) Soldering iron, of course Microphone The breadboard is important. What you will be dtoing is building the record circuit on the breadboard, and then the play circuit right on a 28 pin socket. You can pop the chip into the bread- board when you need to record and then pop it back into the play circuit when you are ready to play. This will prevent any etching and keep the play circuit small. As sson as you buy the chip, open the package. Inside there will be a manual. Turn to page 6 and buy all those components. Skip S4 and R7-R14 since we will start recording at }the beginning address, and also skip the 8 ohm speaker and the electric micro- phone, since you will be using a normal, higher-quality microphone and a 16 ohm headphone speaker. BUILDING When you get home, unpack everything. Breadboard the circuit on pg. 6, noticing that you will choose the simpler construction (bottom right corner). Then solder the play circuit that is on pg. 7 onto the 28 pin socket. Remember that you will fry the chip if you solder directly onto it, so use theF\l socket! If you must use the Radio Shack socket, try to make sure no rosin or solder slithers down the pins into the clips. I had this probblem on two sockets which wouldn't allow me to play. Pop the chip into the recording circuit, load up QUARTER.VOC or use the Radio Shack dialer or whatever and record. Recording instructions are founf on pg. 7. Remember, as long as you have the tones, you can record them. HOW TO BUILD THE FILM CASE CONTAINER Take the top off the case and you yr headphone speaker should fit perfectly in the gray cap. Cut a hole in the top and glue the speaker into the cap. You might want to use a speaker grille. Next, cut a hole in the bottom of the black cylinder big enough for the pushbutton switch. You should know how to wire up a switch. The chip, battery, socket, switch, and speaker all fit in perfectly. Everything fits in mine, but you might need to cut off the bottom part of the speaker, the unnecessary plastic part. USE If yo Xu can find BlueBeep, versions 004 and above, you can use the red box tones included. The QUARTER.VOC that I use has worked successfully on all phones to a live AT&T operator. In places where the Radio Shack didn't work, the .VOC did. As a red box the simple play circuit is fine because all you have to do is hold down the switch. Even though blue boxing is not possible for most people, the tone box can be used as a blue box. For a blue box, you need to do some addressing, which i -s explained in the manual. Depending on which pin (pins 1-10 only) you connect to ground you can address that corresponding address in memory. So for a blue box you would set for address 1 the 2600 blast, address 2 the KP1, and address 3 the ST. So, to seize, hit 1, 2, dial on the phone's keypad (or your own dialer), then 3. **NEXT...This makes it a LOT easier...the following article was in the next 2600 issue...Spring 94** A GIFT FROM HALLMARK by Bernie S. My heart's out to k FyberLyte for his efforts on the The Magical Tone Box article in the Winter 1993-94 issue of 2600. While his efforts deserve plaudits, the week after his article saw print it became obsolete! Once again, the mass-market consumer electronics industry has succeeded in bringing down the cost of very sophisticated technology to ridiculous levels. Hallmark, Inc. (the greeting card company) has teamed up with Inform- ation Storage Devices, Inc. (who makes the chip Radio Shack sells wh ??$"h5=-#@0D @(`/:% `p >00P3KC &(@A faMPhm@& &#'#~i6`5"'+E0P^s @Ė8 .6bc@(6!/"."=7#cΠ` `+ټv5RaJ!(h p ge  ٝ \~/RA" UC+l I~30!& <H&D?IGXE8$Xx  4_m~ZPI oXŠ7PhdC8k@}n@jCpFi< P`h(AXqKr0(Q>mMD~k`S-[%>G&R>@m B&#=6)]J讳$|cF)!U(8 >A pd2 ;NkDtH5Ul@)z  !V ees6aM^o٭Ǜɴ7D[ <$!RK p`w-T \ <-]0m0t%\D5QG@S@K.%` i&9). /yAR: V3a%,$$U0dA. $IIi^9z 2o0ANp_w}pFƟJ^kNN@ ̡  .*ra{<^',xN.u@  !R&KKRX h, 'H++0' pPP76 /)| dzsQOO^7`' IUs` fKR@1Ă.5.4pcI[`GH 8\$2X8 ӷ2dqq%AD2#8 nf.B2Y%y!$(`;`) `@&C< D! (-9c%@/DM SϿxfpU;/ap H|29Y@ \ 6LȢ 6` h ##@5`x5E$s N<; $Dqt<ЉQ")JVX8-!LӘLҀD <ƁJ\8XB F \:BCA.B;6_7>h 6cB,U<#+Wx䃇9[R5 +}(Mx(qF  0ф0(O} Q30G@Lm〤9.21" Za',sJDO\1jrvf NPp=@TB, )L̀Q f P'EF80@w87dp #9Q!rZs!@),Q MیG(Dqe q@)AgJb l:Nz$]D I9'"AoA'' s0:8HLCo#Zh0K9:ߍ9̆\Mm, (ؼ?+K/!@B|h0` Ovz0`Cu=D .jkCouqZp?%{Z?=Fgʆ@< Xza֟ xHh8!aq=Xq>qG abbeoI0 x$!`9W*x. E?"> IJ(ʹɪMxxH H2 ~]qCd5qRo 8N>2 ͩ^Xi@/@9  3$hС rTA 0E@U-TY(041Af(3:6cpaE+TXHpD2']L]agI@P@XkB.k$)FP21ET'0*7<$~9Df4'W@ڐ i)1>4@=G.ȔeW#0D# kd@%L%IJ{5Ys#$I'upRf_pD J"0?6 Rf0"}=`ĈZW`S<BjDRH86ENN+J+ X`2$(T 8b[OjH+@0"5 F H .rN@&ն^ $$ v01HmpɠOI(z A%j1`&oJ0F$S8bL@0 @ MA"OM1!/E KC< w} k _1b@1js}s0``'A]0` KC8mwL%[?S0 P SE?^0\M6EB}`&aCCz9yELvsK&^ ,Kߺ)CM X="Ht ж"{G ,G'  PizoI lN|o>ZoKFaס=rC9 ii)cA/# B, t0 A4+Az Dx:K#('FΆ6%剟 'wt \ZYp9dl `#,-7!wOA$i '@NNN=;6Ɔ.Ζve^"j\(ruO?G_poadu:<{_9"`eFogbC;cSZpyv9;W>&/x0ţ?ygEoCѿ8#9gíڕ#H{ "FC 1 0t`` qǀ((:ö́ 4>G-@YE@} LA ikh$ˍ° L4榀Bۇa1 BpM äUM 4Q;}Ap(yn`<8ФŇB5wTzU-?8F[,j1>`A@H# ~ %5 ̴Н HbqIAԽ dQX/Rt ,@G {yHCgRF$K P>=x@@@O+3=NXc0'H0mԟ*AoO` I7?Z$Q&'AڄƒBf|LVP r8 T0;"`[š 1"7@.aC 4B| Ip'iDCpbasA%˘AR /"eRJB%7I|@CRD.[bn c: 4#s!%I "D``#I +M󴠑eƝ>7 4rڧ 1)J*IDq&ZHH`<$+ ْyh%dG`WG3òO." (? Cl;YǤA  ϤJLfA W7;\ 2q,>@2 Mz(A/ϩDpa)XZtQW$4 $-B{ ?gd\"lE8#'K"r9X02 NT /$&pZÌ/ 7[X Oz(t8`Ir8Ia X-kZ*.d$EH?^'; [ 9@(  0]P;P4f|#*&bhY 3fzؐF4)DH=ͺVb+@ ]t`@/`/qM9 U&jI$%ov~|P0P3KC &(@A faMPhm@& &#'#~i6`5"'+E0P^s @Ė8 .6bc@(6!/"."=7#cΠ` `+ټv5RaJ!(e{Xב? CeM0u-Y9&t90(EBatu}|7Aÿm4U_fDRAٔ&p` $K8*'@@;CL[ saE#Yep")j )' 8BU\L^YK@:'8Q H"iEɺ $0Ldtf 4? D<CHQP|@ !I X$(}W>@b8˥+ٌ2|.pgD!q4bePѮQB{1'C;sKg !Tқ!Y@-6Tid˧|¨$'|W71410|ޞh(F(N XG,!"^(2Vdo) 234-5612 (213) 789-2000 F.A.A................................................. (202) 347-3222 COCIS................................................. (303) 447-2540 AUSTIN COMPUTERS...................................... (512) 474-5011 AUTOBAHN IMPORTS...................................... (817) 977-0663 LYRICS TIMESHARE...................................... (516) 567-8013 SLIPPERY ROCK OIL...................)3hƾF.................. (412) 794-7601 UNION OIL............................................. (201) 686-2425 SHELL COMa............................................ (713) 795-1200 Credit Card Validation <*----------------------*> CHARGE CARD ASSOCIATION............................... (313) 964-2018 JC PENNY CREDIT CARD.................................. (303) 371-1296 NTRCHA................................................ *4m(214) 742-2636 SEARS CREDIT CHECK.................................... (404) 885-3460 VISA MERCHANT ID...................................... (313) 956-9600 CREDIT CHECK.......................................... 1-800-228-1122 MASTERCARD/VISA....................................... 1-800-362-7171 VISA CREDIT CHECK..................................... 1-800-228-1111 MASTERCARD............................................ 1-800-292-2730 CODE: 44360006-R MICHIGA+59N BANK CARD.................................... 1-800-462-3420 ??????????????........................................ 1-800-321-8067 CODE: 370466 (TOUCH TONE CODE!) Phreaking <*---------*> MCI (5 DIGIT CODE).................................... (313) 978-8100 (313) 237-0603 (313) 950-1022 SP,6jRINT (8 DIGIT CODE)................................. (313) 950-1000 ALLNET................................................ (313) 950-1044 LEXITEL............................................... (313) 950-1066 SKYLINE (6 DIGIT CODE)................................ (313) 950-1088 METROFONE (6 DIGIT CODE).............................. (313) 963-4847 TRAVELNET (8 DIGIT CODE).............................. (313) 268-6620 TRACING TEST (low-high (GOOD), high tone (BAD)).....-7 ޻.. (617) 494-9900 (617) 890-9900 TRAVELNET............................................. 1-800-521-8400 SAY "YES" FOR VERIFICATION PBX................................................... 1-800-221-3044 DIAL CODE + 96 + 1 + DEST. (4 DIGIT CODE) PBX................................................... 1-800-245-0033 CODE: 356172 PBX................................................... 1-800.8oV}-345-0008 A VERY GOOD PBX....................................... 1-800-446-4462 CODES: 919194, 334447, 520585 SOME DIVERTERS........................................ 1-800-433-5656 1-800-845-0031 1-800-325-9990 1-800-238-2847 (312) 678-9923 /9 678-9952 RCI COMPANY........................................... 1-800-922-0918 AT TONE DIAL: CODE+DEST. UNKNOWN............................................... 1-800-457-0047 COULD BE CODES BUT THE NUMBER MAY NOT NEED THEM: 272423, 868358, 958818, 762398 METRO CODES.....................188-193....188-342....133-353........ CONSUMER NAME AND ADDRESS (CNA)....................... (313) 220:x 3-8690 SPRINT CODE................................................ 666666630 Conferance Starters <*-------------------*> 0-700-456-1000 0-700-456-1001 0-700-456-1002 4 sites are Chicago, 0-700-456-1003 New York, Dallas and 0-700-456-1004 Los Angeles. 0-700-456-2000 0-700-456-2001 0-700-456-2002 0-700-456-2003 0-700-456-2004 800 LD Carriers/exten1;oders Digits Number Company Digits Number Company ------ -------- --------------------- ------ -------- --------------------- 5 221-0902 Extender 6/7 221-1950 6 221-2106 Savenet 6 221-8190 RCA 011+num+#+code 4 221-9600 Extender +'83' 222-0248 233-1011 Metromedia (voice) 223-4444 227-2089 Call USA 228-0276 Houston Network 6 228-63412&u" Call USA 7 228-9711 TMC 6 241-4918 Extender 4 241-5066 Extender 4 241-7077 Extender 243-7650 Extender 8 233-3098 TDX 7 248-4200 4 251-7786 7 228-9711 TMC 255-2255 Telesave (voice) 223-8326 Extender +'9' 6 238-1740 6 248-6248 4 251-1435 Extender 6 225-0227 6 =%............... (202) 347-0999 HAWIIAN TELE.......................................... (808) 533-4426 GENERAL TELE.......................................... (213) 829-0111 ILLINOIS BELL......................................... (312) 530-1755 ILLINIOS BELL......................................... (312) 368-8000 INDIANA BELL.......................................... (317) 265-8611 MICHIGAN BELL......................................... (313) 223-7233 > 881-0659 964-4042 964-0042 924-9977 839-3373 961-8572 892-0?Bmr060 NEW ENGLAND BELL...................................... (207) 955-1111 NEW JERSEY BELL....................................... (201) 483-3800 NEW YORK TELEPHONE.................................... (212) 395-2200 OHIO BELL............................................. (216) 822-6980 WISCONSIN TELEPHONE................................... (414) 678-3511 U.S. TELEPHONE........................................ (313) 950-1033 UNKNOWN.................................... @[j2........... (800) 327-6713 Mainframes <*----------*> AMERICAN EXPRESS...................................... 1-800-228-1111 RSX-11................................................ 1-800-521-8426 HP3000................................................ (303) 232-8555 (415) 857-8193 (215) 563-9213 !A (512) 385-4170 (301) 881-6156 881-6157 881-6158 COSMOS NY............................................. (212) 370-4304 394-1203 DEPAUL............................................."B/... (312) 939-7950 DEVELCON.............................................. (415) 486-4959 RCA/CMS............................................... (609) 734-3131 NASUA................................................. (713) 483-2700 DIALOG................................................ (212) 947-7522 GIS................................................... (817) 625-6401 RSTS/E................................................ (212) 369-5114 #C`N` (516) 586-2850 (303) 447-2540 (817) 877-0548 (414) 476-8010 542-4494 543-0789 OVL111................................................ (203) 527-0006 RAPID$D DATA............................................ (212) 736-3377 MILLERSVILLE UNIVAC................................... (717) 872-0911 MIT................................................... (617) 258-8313 LYRICS TIMESHARING.................................... (516) 567-8013 MERADCOM.............................................. (703) 781-4520 ENGINEERING COM....................................... (313) 964-2064 MENLO PARK CORP....................................... %E=T(415) 361-2500 DEC VAX............................................... (414) 445-4050 DEC PDP-11/70......................................... (414) 476-8010 DEC-10................................................ (315) 423-1313 SEMAT COMPUTER........................................ (313) 964-2000 BOND-NET.............................................. (313) 962-1102 H.A.T.S............................................... (714) 962-3365 ISO.............................&FU1...................... (515) 294-9440 TSO................................................... (312) 996-5100 VAX 11/44............................................. (619) 485-9888 VM370................................................. (214) 742-3189 WANG VS/80............................................ (303) 978-2111 W.I.T.S............................................... (313) 769-8803 WYLBUR................................................ (212) 246-7170 WAYNE STA'1%XVTE........................................... (313) 577-0260 UNIX.................................................. (609) 452-0025 (415) 486-7020 486-7015 JOSKES................................................ (214) 742-3999 LAUSD................................................. (213) 742-8000 FTS................................................... (313HE0 (714) 776-4511 638-3492 956-3370 DOW JONES VIA TYMNET.................................. (313) 962-2870 LOGIN: DOW1;; PW: 94K24W6TAN PW: FUN2KR9381 WHITE HOUSE (voice)................................... (202) 456-1414 RONALD REGAN (voice).................................. (202) 445-4616 F.B.I. NET....I#........................................ (412) 527-8291 PENTAGON TACTICAL..................................... (202) 697-0814 N.A.S.A. H.TEX........................................ (713) 483-4115 N.A.S.A............................................... (806) 353-9901 NUCLEAR COMMISSION (voice)............................ (404) 221-5519 NAVY SHIPS INFORMATION (voice)........................ (213) 547-6801 K.K.K................................................. (619) 723Jɱ-8996 ATLANTIC CITY CASSINO................................. (215) 564-6572 US BUREAU OF STANDARDS................................ (303) 499-7111 AIR FORCE............................................. (203) 748-3947 PENTAGON.............................................. (202) 545-6706 PENTAGON.............................................. (202) 553-0229 DEFENSE DEPARTMENT.................................... (703) 781-4531 Kv , 4522 WAR DEPARTMENT........................................ (401) 841-3436 N.O.R.A.D............................................. (203) 748-3947 N.A.S.A. (FLORIDA).................................... (806) 353-9901 COMPUSERVE............................................ (313) 285-9207 MICHCON............................................... (313) 271-3008 UNINET................................................ (313) 358-5780 Ljÿ (415) 937-2868 APRANET............................................... (415) 327-5220 TELENET............................................... (313) 268-6620 579-9162 965-6005 AUTONET............................................... (313) 271-6950 663-7618M$ Z 646-2237 1-800-225-8456 1-800-327-6764 TYMNET................................................ (313) 962-2870 965-6005 Various Numbers, Terminals, Stores <*----------------------------------*> ABC NENEW YORK FEED LINE................................ (212) 799-5017 TELEMAIL.............................................. 1-800-424-9494 NAVY FINANCE CENTER................................... 1-800-321-1082 JOHNSON & JOHNSON..................................... 1-800-253-9892 AT&T STOCK PRICES..................................... 1-800-882-1061 STOCK QUOTES.......................................... (212) 986-1660 (9Oh14) 997-1277 (201) 623-0150 (516) 794-1707 STOCK MARKET REPORTS (voice).......................... (213) 541-2462 (312) 939-1600 (505) 883-6828 RADIO SHACK........................................... (313) 964-5538 WIERD EFFECTS!....................P֫.................... (213) 935-1111 WIERD RECORDING....................................... (512) 472-4263 INTERNATIONAL GRAPHICS................................ (612) 339-5200 RVS CABLEVISION....................................... (414) 259-1233 EDUCATIONAL RESEARCH.................................. (713) 792-7200 SMITH & HENCHMAN...................................... (313) 964-2064 McDONALDS............................................. (305) 764-4595 REPAIR COMPQDUTER CENTER................................ (313) 881-0659 PHONE COMPANY TEST LINE............................... (619) 748-0002 SHUTTLE COMMUNICATIONS................................ (900) 410-6272 MICHIGAN BELL NEWSLINE................................ (313) 223-7223 ?????????????......................................... (313) 950-0777 (TOUCH TONE CODE: 14730091) Telephone Services <*--------------<=----*> AT&T.................................................. (214) 742-1195 AT&T CALLING CARD OPERATOR............................ 1-800-855-4008 AMERICAN TELEPHONE.................................... (201) 221-6397 BELL, SOUTHWESTERN.................................... (214) 742-1354 'y 742-1637 BELL OF PENNSYLVANIA.................................. (215) 466-6680 CHESAPEAKE TELE........................SD4i 300 B 370-4312 1200 B 370-4300 1200 B HARVARD UNIVERSITY.................................... (617) 732-1802 732-1251 WAYNE STATE UNIVERSITY................................ (313) 5T&77-2424 LYOLA COLLEGE......................................... (213) 642-2706 PRINCETON UNIVERSITY.................................. (609) 452-6736 UNIVERSITY OF KY...................................... (313) 964-2500 DARTMOUTH COLLEGE..................................... (603) 643-6310 HONEYWELL UNIVERSITY.................................. (612) 870-6086 POLY TECH UNIVERSITY.................................. (714) 598-4861 AMARILLO UNIVERSITY.................... UzF"............... (806) 741-5951 MARSHALL UNIVERSITY WASHINGTON........................ (304) 696-6711 NEW YORK STATE COLLEGE................................ (212) 777-7600 598-7001 FORTWORTH SCHOOL...................................... (817) 332-8491 FAIRFAX SCHOOL SYSTEM................................. (202) 256-9676 OAK-COUNTY SCHOOLS.................................... (857) 950-1313 LIVONIA SCHOOLS. VS ...................................... (313) 464-1234 OAKLAND SCHOOLS....................................... (313) 857-9500 ARBOR SCHOOLS......................................... (313) 769-8821 REDFORD SCHOOLS....................................... (313) 494-1921 GROSSE POINTE SCHOOLS................................. (313) 343-2000 GROSSE POINTE SOUTH TIMESHARE (RECORDING)............. (313) 343-2340 GROSSE POINTE NORTH HIGH SCHOOL....................... (313) 343-2 WRp9350 LOGIN: RS FUNCTIONS: HP1 HP3 LOGIN: HOST HP2 MOI ROMULUS............................................... (313) 941-3308 WAYNE COUNTY COMMUNITY COLLEGE........................ (313) 577-0335 MACOMB COLLEGE COMPUTER............................... (313) 445-0260 MACOMB COLLEGE COMPUER ROOM........................... (313) 445-7157 LAWERANCE INSTITUTE................................... (313) 356-4040 LOWELL UNIVERSITY................. X޶ .................... (617) 459-0159 LOGIN: HELLO ID: 9102002 CONSULTANT FOR WAYNE STATE UNIVERSITY (vioce)......... (313) 577-4778 MERIT COMPUTER NETWORK (WAYNE STATE UNIV.)............ (313) 577-0335 THROUGH THIS YOU CAN CONTACT THE FOLLOWING SERVICES ANDCOLLEGES FOR NO CHARGE: MS=MICHIGAN STATE UNIV. OU=OAKLAND UNIV. UB=UNIV. OF MICHIGAN UM=UNIV. OF MICHIGAN WM=WESTERN MICHIGAN UNIV. WU=WAYNE STATE UNIV. Y Autonet ITI MAGNET MSU IBM MSUnet MTU OU SECS RPI Telenet UM CAVAX UM CLINFO UM CVVAX UM DSC UM Engin Harris UMLIB UMLIB 300 WMU-CAE WMU-Kanga WMU-Pooh WMU-Puff WSU CSVAX WSU ET ZOOnet Minnesota Cyber Minnesota VAX MIT Multics MIT VM Montreal ZO] Natl Lib Med New Brunswick Newsnet NJIT EIES NLM Notre Dame NRC NYTimes OAG Queens Rice SDC SFU Simon Fraser Source Source 11 Source 12 Source 13 Stanford STN Telenet Cust Serv Telenet Mail Telenet Telemail Toronto TUCC UBC UQV Victoria [ Washington Waterloo TSS Waterloo VM Wilsonline Wisconsin MACC Wisconsin VAX Yale GROSSE POINTE WOODS (voice)........................... (313) 343-2440 CITY OF HARPER WOODS.................................. (313) 343-2500 URI................................................... (401) 884-5970 ARIZONA STATE......................................... (602) 965-7001 LIBRARY............................................... (301) 528-39\2M.22 1st NATIONAL BANK..................................... (408) 248-8818 MICHIGAN NATIONAL BANK................................ (313) 964-5808 GENERAL MOTORS........................................ (313) 685-6709 TELCO................................................. (203) 776-2516 ITT DIALCOM NETWORK................................... (212) 947-7522 LAW OFFICE............................................ (313) 964-5858 AIRLINE.....................................Gy(.......... (714) 775-2104 TWA................................................... (213) 417-8987 MA BELL............................................... (313) 651-9743 IN PURSUIT OF - INFO ON PC PURSUIT & REGISTRATION..... (202) 689-2987 TRW................................................... (305) 371-6382 (408) 280-1901 (602) 257-9054 ^ high and has a large bell sticker on it explaining that it is against the law to use blah blah blah. It is usually protected by a bolt on the bottom.. It can be unlocked with a 7/16 hex or cresent wrench. 6. Materials Needed 1 7/16 Hex Wrench 1 Pair Of Alligator Clips 1 Phone Cord 1 Roll Of Electrical Tape 1 Phone Ok, Now Cut the phone cord and the cord running from the alligator clips. Connect the Green _xtWand Yellow cord to one wire and connect the black and red wires to the other. Make sure that the green and yellow and the red and black wires are seperated and use some electrical tape to seal the splice. Congratulations you know have the equipment needed to patch into a phone line. 7. How To Do It Ok, We have come to the point of the document when I tell the final step. Go to the cylinder like phone box you have found. Use the 7/16 hex wrench to unbolt the bolt and slide`VCZ the plastic cover off. In front of you should be a long row of prongs on a stick. A close up would look somewhat like this _______________ /______________/| | || | ----------- || || /()\ /()\ | || || | || | ----------- || | || That is just one of the many prongs you should see.a(. Now look for a a set of prongs that has wires running to it, that is a operating phone link. Hook up the two alligator clips there.. One clip per prong. Hook the cord to the phone you brought with you and check for a dial tone.. If you got one.. congratulations you have complete control over their phone line. 8. Some Suggestions On What To Do With It 1: Call all the board or LD friends you may have.. Remember a simple 102881(area code)(Number) will bg over ride any long distance blocking. 2: Call all those 1900 lines you see on television 3: Call the AT&T Teleconfrencing Operater and set up a confrence for you and your friends around the US to talk on .. for free.. the number to call is 18005446363.. You will need to call an ANI first to find out the number you are calling from. 4: Prank Call The Police.. tell them what you really think about them and P60 watch the owners of the line get a visit by mama's little piggie ng phone link. Hook up the two alligator clips there.. One clip per prong. Hook the cord to the phone you brought with you and check for a dial tone.. If you got one.. congratulations you have complete control over their phone line. 8. Some Suggestions On What To Do With It 1: Call all the board or LD friends you may have.. Remember a simple 102881(area code)(Number) willdDSTED MOBL.......................... 1-800-325-4072 COMBAT SUPPORT BRANCH................................. 1-800-325-4095 ROPD USAR COMBAT ARMS DIVISION........................ 1-800-325-4890 WHITE HOUSE PRESS (voice)............................. 1-800-248-0151 SOCIAL SECURITY....................................... 1-800-432-3960 PUGET SOUND NAVAL SHIPYARD............................ 1-800-426-5996 GENERAL MOTORS........................................ 1-800-685-6790e5 TELE-CONNECT (voice).................................. 1-800-255-2255 FORD.................................................. 1-800-521-4120 AMERICAN NETWORK (voice).............................. 1-800-227-0090 THE SOURCE............................................ 1-800-828-6321 RCA................................................... 1-800-526-3714 IBM DISTRIBUTION...................................... 1-800-426-2222 XEROX.........................................fDT2L........ 1-800-828-6321 PC PURSUIT............................................ 1-800-835-3001 TELCOR................................................ 1-800-231-3158 UNKNOWN............................................... 1-800-521-0013 UNIVERSITY OF LOUSVILLE............................... (502) 588-6020 UNIVERSITY OF FLORIDA................................. (904) 392-5533 UNIVERSITY OF MASSACHUSETTS........................... (413) 545-1600 UNIVERSITY OF NEW MEXgX6ICO.............................. (505) 227-3351 UNIVERSITY OF PERUE................................... (317) 494-1900 UNIVERSITY OF TEXAS................................... (214) 688-1400 UNIVERSITY OF TEMPLE.................................. (215) 787-1010 UNIVERSITY OF SAN DIEGO............................... (619) 293-4510 UNIVERSITY OF HARTFORD................................ (203) 242-6492 242-6852 R UNIVERSITY OF MARYLAND................................ (301) 454-6111 UNIVERSITY OF COLORADO................................ (303) 644-3841 UNIVERSITY OF MINNESOTA............................... (714) 974-4020 UNIVERSITY OF VIRGINIA................................ (703) 328-8086 UNIVERSITY OF MICHIGAN................................ (313) 454-1000 OAKLAND UNIVERSITY.................................... (313) 370-4399 {ik;7-864-4796 The Spade 609-443-5789 & 609-371-0369 XTC 512-346-3375 Inner Circle 904-259-3358 Jacksonville, Fl. Virii 914-993-6232 DCi HQ.. *This is an official Aryan Sekret Service distribution Site Heres Somethin you can have some Phun with.. Merry Christmas from your Friends at MCi.. MCI Card Number: 6126334408 First Name: Richard Middle Name: Todd Last Name: Restion {TMCI Account# 6A824231 3-4761 Diagnosed Paranoid 203-263-5019 Woodbury, CT Pirate-80 304-744-2253 Hackers Hide Out 513-870-9566 Cincinnati, OH Matrix Develop Co. 210-699-6777 Digital Mafia Hq. Jagged Edge 305-362-7315 Mr. Ed's Corner 713-477-6119 Alpha 2010 210-687-9660 & only 14.4k 210-687-9111 House of Sin 21]] metal boxes on the ground that the bell employee's use to fix or monitor your line, and we use to make calls from it. 5. How To Find The Bell Phone Box When many people think about box's they think of aqua boxes or blue or any other color in existance.. I am simply talking about a metal or plastic box that bell uses to hide and protect their equipment from the weather and vandals. It is not really a box more a cylinder. In our part of the nation it is plastic, about 3 feetl>Bsible for any outcomes. 3. Table Of Contents. 1. Introduction 2. Disclaimer 3. Table Of Contents 4. Overview 5. Method I 6. Method II 7. Rap Up 4. Overview Ever wanted to find out exactly what your girlfriend or brother or neighbors are talking about when your not around.. ever want to just listen to someone else's phone calls just for the hell of it.. well this document was made for you.. in it we will describe to ways to record and monitor your target's phone calls. 5.m9 Method I Both methods involve the phone patching equipment described in our last document.. How to Patch Into Other People's Phone Lines. Simply find your target's line by doing this 1) Find the box near the house 2) Dial an ANI number to see what number you are calling from. Now that you have found the line simply take off the phone cord that is spliced into the aligator clips and replace it with a cord from a microphone or eanrphones. Then hook the clips to the line and the cord to a voice activated recorder with plenty of tape. But all of this in the box and lock it up.. The next night come back for it and either take the tape and leave or change tapes and take the one you have home for your listening pleasure. 6. Method II Also once again you need the phone patching equipment mentioned in our last doc "How to Patch Into Other People's Phone Lines". This method will allow you to listen to thoD+e calls as they are happening from the comfort of any room with a FM radio. You first must find the person's line by once again. 1) Finding a box near their house 2) Dialing an ANI to find the right number Ok.. now that you have done that you need to find a wireless FM microphone.. you can find these little babies at radioshack.. and a bit more sophistacted ones in the back of popular science or in a Ham Radio magazine. Now once again hook the equipment to the proper setp( of prongs, this time hook the aligator clips to a pair of mono headphones which you tape next to your FM wireless microphone. Make sure that the wireless mic is tuned to a dead frequency so that you can hear it all. Now simply tune in the new station and listen in privacy to their intimate secrets. If you find a wireless mic with a mic slot or if you can splice into the mic in the wireless mic all the better.. you also won't pick up background noise. 7. Rap Up  Oh well, that's all for now.. look for more quality documents from your friends here at A*S*S*.. Aryan Sekret Service.. n. 1) Finding a box near their house 2) Dialing an ANI to find the right number Ok.. now that you have done that you need to find a wireless FM microphone.. you can find these little babies at radioshack.. and a bit more sophistacted ones in the back of popular science or in a Ham Radio magazine. Now once again hook the equipment to the proper setrSling. Phone Patching.. Simply it's getting into someone else's phone line, just like those simple yet oh so faithfull bell employee's do. The method is easy, the application is even easier, the risk though is high. 2. Disclaimer The following information is for Entertainment purposes only. I the author am in no way responsible of the material contained here in is used in the wrong manner. 3. Table Of Contents 1. Introduction 2. Disclaimer 3. Table Of Contents 4. Overvij ew 5. How To Find The Bell Phone Box 6. Materials Needed 7. How To Do It 8. Some Suggestions On What To Do With It 4. Overview Bell systems has to keep up maintance of all phone lines and test them too.. this means they had to make a point where the line man could easily go and enter the customer's phone line. Though we have always seen this on a telephone poll, or a bell employee cutting open a large cord containg thousands of lines. There is an easier way. Bell also has -`_hl Qb$o0(b;qLi" ;Y2gGl XGXf 48,| ':( ph&N8 pPF!1 I@.>` 87X0L&9L5' [!’( < H[ 8|6:eG+bBK49 0!n nHRC-ya @ 3' F <B@"cV\+ c YH@r `j5MJ@(JiBPՇxPEe!%$XZf_|=OS`(W?l6$@1>>q1 1pE< '&$ cǸ8d\u.bu8\[TLY!! the operator then thinks there is a fault with the Money registor at there end that indicate how much you put in , then Quietly lift up the hang up button to reconnect your call ,because the operator will still have the line open thinking theres a fault in the phone your using they will ask did you insert your money , you say yes and they connect you for the amount you sayed I.E. a pound coin!!! Do it as much as you like!!!!! Because when you insert money the operator hereHls a tone in there ear to indicate how much you inserted but if the phones fucked they can only connect you!!!! Text file by the shadey 1 u say "ok is a Pound okay im gonna be on for a while " "yes they will say " they then ring the no. the 3rd party will answer and they will say " hold the line I have a call for you " then they will ask you to insert your money hehehe you then insert your 2p and before it drops to the bottem you quietly pull down on the hang up button, QUIEwxVgk. The only system listed here that I haven't boxed off myself is SOCOTEL, which, according to my knowledge is used somewhere in Europe (who knows where). Using R1 to box off Europe (or any other country) from the US is not recommended. US trunks are maybe not used to route the call, but the fraud detectors do not know this and sooner or later you *will* be in trouble. Using systems like R2 from the US is a good idea, since no detector in the US is looking for R2 tones, and boxing ox({Bff 800 numbers that offer Country Direct services should not seem suspicous. The CCITT R1 system =================== ----------------------------------------------------- Freq. 700 900 1100 1300 1500 1700 [Hz] ----------------------------------------------------- Digit 1 x x 2 x x 3 x x 4 x x 5 x x 6 x x 7 x y唅 x 8 x x 9 x x 0 x x 11 x x 12 x x KP x x KP2 x x ST x x ----------------------------------------------------- 50/50ms timing can be used with all digits, even 20/20 is possible on some systemzs if you want fast dialing. One problem with R1 is trunk seizure. The normal procedure would be sending 2400/2600, waiting a while, then blowing 2400, and the trunk would be seized. This is very unlikely to work, though. Even more so is sending 2400 or 2600 directly. The telco equipment is nowadays very exact with timing and the only way to find it out is by testing. Usually the 2400/2600 (hangup tone) should be sent for at least 80ms and no more than 200ms, if 200 ms is not enough`*, you probably aren't on r1. A way to find out the timing is to send 2400/2600 starting with 200ms, then decreasing the timing with 1ms steps. With 200ms, the trunk is likely to hang up when you send the hangup tone. Find the timing that hangs up, but leaves you on the trunk (this can be heard by a wink), then keep the 2400/2600 timing that way and adjust the delays and the 2400 timing. Timings suggested for AT&T + MCI t used with all digits, even 20/20 is possible on some system 11 902.400 926.400 ^ ^ ^ ^ ^ ^ ^ ^ ^ 59 903.870 927.870 -  D bttest.txtmpA.416p{} 203-266-4308 Woodbury, CT The House of Cain 203-598-0242 The Pharohs Tomb 203-264-4935 Southington, CT The Joshua Tree 203-283-1478 Toxic Feces 203-263-4114 NUP:Yellow Pickle The Wierd BBS 203-266-5340 Woodbury, CT Way Out Wild 203-723-9430 Naugatuck, CT The NightMare Dream 203-264-7697 The Gateway to Hell 203-263-4542 Woodbury, CT {h{ 203-263-4761 Diagnosed Paranoid 203-263-5019 Woodbury, CT Pirate-80 304-744-2253 Hackers Hide Out 513-870-9566 Cincinnati, OH Matrix Develop Co. 210-699-6777 Digital Mafia Hq. Jagged Edge 305-362-7315 Mr. Ed's Corner 713-477-6119 Alpha 2010 210-687-9660 & only 14.4k 210-687-9111 House of Sin 21y9cfG<93I@D0  ?8~b۳p!x;sQ7/ ?>0p0#( ?00pp #!&G ?x|KY@8{~3@p>ga? p@p p9`?00pc0#%`?|<"R@X1 Aq>gݟD?A`4ppq9 x?A0``0c'y:Cjz ?>> "@(0W cp@C:`b!=! C0`b&2` $<\>'~C?byggBCpAl>b K@'@de>@|0'Ѐ %/ߛy@p?@tx ǀb,8?Gatǃx?? \8?\'f6TB `pt0a$AFgpaQe$NugNu* NuDrgQNu* `0ap54Ffaepa6paAGg`a6D30Q3eNu  $p]k1f\\3&" a i>0C9$I$$>apdC) O(#p 63`@$ d~!A"*x$@*DHJ !@  l"D)j5'@4E2˓8"`Գ fBJ@B(6 G 'zH?J^k[_NI̐AI%  "BarE +0r JaU@fԠu Pt@xCaÐL M8;nBbCHC,٧¢cېFK#/*og%Gr7 d?+wApp\#VC|-Elj BqD{Z;+j9mSQӃ f.;)%z8JEHl3J$Y˙0Lz`ɒp IW4B0a+ O=$!m6/28*E{!SL\% W q-c7O2&E& An `1ЄhmQ|Slj@\Z^k8vh= S aj`ds;i[ s^9@æs$'(3(%(r nC0B"sgf (InP8 e"D(<a~c!)J"P1&l"7t4F@ 1VjDd WldmקM _]<`vS i(HpU8p3)3 kڸӢH1PZ 2t2Y&CH  * '2!pƑR{ᚶE0o˘nYB("=))`.J:s1(xQA1u2 !$(bd\ {11Io%4@ r& , sPH= ;9Y@m2s53t53ݮ:2 &1*K#C{ɂv?K[@@\y.?͞3??H? G0!??8 {?݀]?8" c??Ń? ?p ?x?K ?? @??@?xp_w @?y/~@?p?r  =@ @?  ?8@?@s?~#x ~~@{?<8?<c<#88?Ńrg888'8~>y05'~y<~?p##~y> A#> pxu@xuxu? |p L(@|x|p?|"p?H|?|x>'>>0>p>p>py1)"I~`!~` ?~`xG  G?8_ ?`?_>  O @O0cx Ǧ<8Ax8? pp{pp `>8y2sه`` >>? ? G?0G?:@?@8 A? @A??@?> gp@~? 3ax݀??p? 3~ ??` ?|= ?y3_?p ???pw ux?qW|w |@?  x  @ |8 X'@ Px|t  h@y4 9c @t @]F?> @8+@G? G ?~ ?? 0?p????p???~?>G`<@? pπ? ?>Ey5G4T p`?Wpp?AG_ ?M@ @0?U@T?o @}_@>@^ _@|@?'@?D@/ߠ @ @_@? @/@  py6^V__@?`0+(@ ~sG?w`?yq; G3hxw~ `{G@?hp!_V` @?wN1WN@@{|y7 ?O0W'C_}v @\@`8@v` }8C8<@# 蹡04{`@x8}x8q#8@8F8?@8ہCa{@}?~0B9I?@'3;@s@~Q@y8~@YUf%1'F03rŀx C0ݡA# (1P   #FA=8$~W?D`can? "` w#2/b1\G@ q@ @,20!`8?%8`c:϶2bpy#8P>???  8 K> #G<@ Gp: ? ?';/~P>?1O<<?@] oq!8n?;#7>Cy$4@@Ѐ 0/>@ ./?@?? Oc?C`X y@y `@ ?@?9' ?+ }0`AB_ 8bُ ?C_9?'0ax9 ="ʔc$9~ ?y%Qq'?817`?3?$?8??? ?'8{A?h'F97 > p/{??`?  |0?qo`,I0 | #;0p? 'N y{hᎀ7?`=30py&m0 #t>O x?~8'9 0?~?G?x ?~?? ?Ax ?x # ???`?G+N}q9x`|`30   ?Џ߿y'W|qg3  ?/c ;ߣ 8_c ?F|?w? |?wp? |p =>3N ~~ <3`??<0y(j/?p>x  G?v7?@?7? H?/< >t ~???~?? 2@??> ?????y)SQ3?rԟ ~?H?98x???x _?G`Co>? @@@?w?_`?d o? d? ??p8\ y*P8b#0x/o?~x  ?/?8p ?/q& p p?7pPy&x |  ?3y+?Q0?|?π?˿`?'0?' ?>d`x?/???`?{x|???~?d/?x8  y,%;?_2|?p?2~!| Àpg f '?@/ۀe g'?( E`n#?cy- 9]?~#?8 B?  ?H51@C?P 5?C_59>G??_@>]?x`nYOx`w"THING THAT YOU JUST MADE.... WHEN YOU WANT TO PUT SOMEONE ON HOLD JUST FLICK THE SWITCH INTO THE OTHER POSITION AND HANG-UP THE PHONE. EVEN THOUGH YOU HAVE HUNG-UP, THE RESISTOR R1 MAKES THE PHONE CO THINK THAT THE PHONE IS STILL OFF THE HOOK. WHEN YOU DO THIS, WHATEVER IS COMING OUT OF YOUR RADIO WILL GO DIRECTLY INTO THE LINE (ONLY THE PERSON ON HOLD WILL BE ABLE TO HEAR THE MUSIC). FOR THIS TO WORK, THOUGH, IT IS BEST TO KEEP THIS THING PLUGED IN ALL THE TIME AND ALWAYS KEEyr8' ?cE``Y3;ß_~ /=` ?_"_?8 ?p?/0pJ Ü~O8ȍ?? {?0N ??0' `yFx?DG\'?x?Gqp??1y"˴ O?'>#<Ǡv?NwL`@'<>> O p _s?'~>O?_?́!|?? p</'? _?>>  \Gq~? /'̿?!Ox8<y{ ?p3/?'~!<0?@ ~/? ^(?,F2@ 8/? : p ~ ` ``H '?'yj>  X`'? ? @^``  @㿀xx'x? s@<`;> ??g ?  p@x`;0 ? <?h0 yF,/ ?0> "!,pQ` <? !3< ?p   3| 6zsx" `< ? 0q 'P  ? P#t >l`}@X??{  x? xP〠] }C wN? ?ޏ/y` 0p ?<~ e `cO  0` ? 8~~= a 3 " `x ^ Q߃ ;  p^ ? 8? ~~c #?܂H?   ?!#0y\>L' <?0p>0???ܞ08c >0? ?_J# l?0 px~  >! ࿊?p?#|@>0?7 G I>1p$ ~7y |d C0 q 0 8 3?'7`>=`(!` 7 g '`{Gx?e?uÀ@ ? ?g |f??'p ?';qy! z!x 9 g  <?0{;!Kq #@p0G~ ;@*?+|0=~,`{x (`pw? p@88o 9> ?? >y"|'9pa  q''>9p.8~  !'8b0p -;3>¸'>8`? 0  `'!`?? 7c;`w ` `0 p ' wLj3> >w yϯc ?? f< $ .x0 ?0'oph :O?p~p0? 'pp~a?p@'xtG@8cx 0?ߍ8 ? ǀq€H1|~G  0? 8 ?y#WS  ;'  p 33̱Ex /`Dq 7 'CĀ/?p?Ƃ߿'8 `~ ??( ?y5'ƀ ?$E?0?'8?{0_?z?x'-?' /_wߟl0#8|`b|~?Gy<;_Ca ? ?~'3!o^?x?'?x?_ ?~'/cO>`??x_?~'q/skw1h ?~p/;?%|ws_yM ?~'q>o'=u x8 E|y_ #  ?'C;oO85x!! K<y0}O?h  ?'? :8?6 ?0'~7?W<q_ ?< ?'yW / xw;?؜x''?O?__ y ??'8#Ox6'=;' ƀ~oy?x o? # ??'~-O >&q' ~o}8ǀ??`?8'>?܀!2}?@0< 'ya"?u<}>??_???'#6}\  {$8}~> _? ?NO! vg 880 ?֟_#`FnGv4'#  wb/9_________/ \ / \ / ' CONNECT THESE TO YOUR RADIO BY USING A PHONO, 1/8, OR 1/4 PLUG. IF YOU USE A PLUG, JUST PLUG IT INTO THE EARPHONE JACK. (REMEMBER, IF YOU USE A PLUG,THE LONG TERMINAL CONNECTS TO THE GROUND AND THE SHORT CONNECTS TO THE MAIN.) TRY SWITCHING THE RED AND GREEN WIRES AROUND FOR BETTER SOUND. THE ABOVE DIAGRAM IN ENGLISH... ------------------------------- THE NUMBERS 1,2,3,4,5,6 STAND FOR THE PINS ON THE DPDT SWITCH (MOST HAVE THE NUMBERS ON Tw׎HEM). THE SWITCH IS THE BOX AROUND THE NUMBERS. THE R1 IS A RESITOR WHICH IS LISTED IN THE MATERIAL LIST. FIRST CONNECT THE GREEN WIRE TO PINS 1 AND 4. THEN CONNECT R1 TO PIN 5 AND CONNECT THE OTHER END TO THE GREEN WIRE. THEN CONNECT THE MAIN OF THE PLUG OR WHATEVER YOU ARE USING TO THIS CONNECTION SO THE GREEN WIRE, ONE END OF R1 AND THE MAIN OF THE SPEAKER WIRE ALL MEET IN ONE CONNECTION. AFTER THIS CONNECT PIN 2 TO THE GROUND OF YOUR PLUG (OR WHATEVER). HOW TO USE THIS yL~g?@_ ???~?^pA1,O|1z3? ?? p? "?y?~? ?`??0>ˁ⑊ ?? apyC?@qa953`?c|~C؈ ~cyU~^Op/1;??g|C?Ӂgw<ؓGNa`L@?cϿ`3/`??~Ӂk9 '@@@@3@??@7G`9@??x?AB2#`߁yEc?<  ~ ?<<73?H>Ӝ-2! sGЯ? `/ ?'>?Hpp>PG=Pz / ('N?0/ pp ?p # y (@< ? =?>p@ ?8@> r@ s?bX?p#b 80 pπ@ %Ϗ|m@01n8 10 @? ǀ-_hl| `< pxG _eG<?8y C\ G8x0 e< x >1e? <1?> 1gp?,H|0oL 9?\ <? 8??wo>`y@?x:8@ @w`?/әdy@t0Ͽ /?? 2@98 W B?|? /  @A?7< 9؞j0~?x ` A&7fOy "Fӯs0G||p3 ?qO@?|1c `1A0K|qx ??߄ .? M~.`  x ?ǀ??.>` IG@a@ ?ǀy l? :>O?@GG`ߏC`x À??yw>O?㏀Ĩ.OA`pg `?? X? ?@)p~?la@`' ü~@Q /Mb>π0xGyy-0 ?08Ã?_X(|a?/`'  ? >?D??6LH<60#??<?' 0 <??? < '??`HPC?6#?/`?>C? ??y +Up >C?? 09- a7 P~@#?^?~~ ~>? p?,b#3]yG~x0<(  ?`?1&!vǙF|>x80 x?'w0 how it works, and how they can control it, which often leads to making telephone calls for free (which is of course illegal). Often groups of Phreakers will band together and form an organized group, and publish articles on the subject. 2. Hackers - These are the people who love computer systems (and networks) and who love to find out how they work, how to get into them, etc. A TRUE Hacker is not the malicious scum that the Media3X\d and Hollywood would have you believe, he is just someone who loves computers and computer networks. There's nothing wrong with logging into someone's computer, so long as you don't go deleting files or stealing trade secrets. NOTE: Hackers and Phreakers are very often combined into one group, referred to as h/p or p/h (for "phreak/hack"). 3. Carders - These people are admittedly criminals. They use credit card numbers, checks, c6q;hecking account numbers, whatever, fraudulently to obtain whatever they want for free. However, this isn't as bad as the media wants you to think... You are NOT LIABLE for charges made on your CC account that you didn't authorize, so the bank has to eat it, and that's why they have insurance... 4. Anarchists - In the sense it's used in the Computer Underground, an Anarchist is someone who loves to play with fire, explosives, etcy.|.>G~?`8?!h70 ~'?a0|@/# 3?=0?#   :?=珏b#0> ??? (0??8~??ϟ?.?ylu`0?{7ÿ co?~?J?' ,l.a>0`?|q/<@ 8t|@~?9 ) and then RQS dial tone. At RQS dial tone, for an inward routing for 305-994 you would dial KP+06+305+994+r>4ST. That is, KP+06+NPA+exchange+ST. RQS will respond with "305 plus 033 plus". This means you would dial KP+305+033+121+ST for an inward that services 305-994. If no special routing were required, RQS would have responded with "305 plus" and you would simply dial: KP+305+121+ST for an inward. Another RQS feature is the echo feature. You can use it to test your blue box. Dial RQS (KP+009+ST) and then key KP+07+1234567890+ST. RQS will respond with voice identification of the digits ir?5?Lt recognized, between the KP+07 and ST. RQS can also be used for rates and directory routings, but those are seldom needed, so they have been omitted here. Simple Scanning. If you're interested in scanning, try dialing on are a trunk, routings in the format of KP+11XX1+ST. Begin with 11001 and scan to 11991. There are lots of interesting things to be found there, as Doctor Who (413 area) can tell you. Those 11XX1 routings can also be prefixed with an NPA, so if you want to scanr@6 area code 212, dial KP+212+ 11XX1+ST. There, now you know as much about blue boxing as most phreaks. If you read and understand the material, and put aside preconceived ideas of what blue boxing is that you may have aquired from inexperienced people or other bulletin boards, you should be well on you way to an enlightening career in blue boxing. If you follow the guidelines in Part i to box, you should have no problem with the fone company. Comments made by "phreaks" on bulletin rA7y8boards that proclaim "tracing" of blue boxers are nonsense and should be ignored (except for a passing chuckle). NOTE 1: CCIS and the downfall of blue boxing. CCIS stands for Common Channel Interoffice Signalling. It is a signalling method used between electronic switching systems that eminiates the use of 2600Hz and 3700Hz supervisory signals, and MF pulsing. This is why many places cannot be boxed off of; they employ CCIS, or out-of-band signalling, which will not respond to any rB8 tones that you generate on the line. Eventually, all existing toll equipment will be upgraded or replaced with CCIS or T-carrier. In this case, we'll all be boxing with microwave dishes. Until then (about 1995 by current BOC/AT&T estimates), have fun! If you have ANY questions about this text, please feel free to drop me a line. I will respond to all mail, messages, etc. Insults are also welcomed. And if you discover anything interesting scanning, be sure to let me know. rC#g Mark Tabas $LOD$ This text was prepared in full by Mark Tabas for: K.A.O.S. Philadelphia, PA. [215-465-3593]. Any sysop may freely download this text and use it on his/her BBS, provided that none of it be altered in any way. Technical acknowledgements: Karl Marx, X-Man, High-Rise Joe, Telenet Bob, Lex Luthor, TUC, John Doe, Doctor Who (413 area), The Tone Sweep, Mr. Silicon, K00L KAT, The Glump. References: 1. Notes on the BOC Intra-LATA Networks r.:ofor collect/callback calls 2+1 to coin stations. CONFERENCE- This is a cordboard conference operator who will set up a conference for a customer on a manual operation basis. MOBILE- Assists in completion of calls to mobile (IMTS) type telefones MARINE- Assists in completion of calls to ocean going vessels. LONG DISTANCE TERMINAL- Now obsolete. Was used for completion of long distance calls. TIME & CHARGES- Will give exact costs of calls. Used to time calls and inform customer ofr/; exactly how much it cost. HOTEL/MOTEL- Handles calls to/from hotels and motels. OVERSEAS COMPLETION (outbound)- assists in completion of calls to oversead Ls points. Only works in some, if any NPAs, because overseas assistance has been centraized to IOCC (covered in Part iii). Note that all KP+1X1+ST and KP+115X1+ST operators automatically assume that you are a TSPS or cordboard operator assisting a customer with a call. DO NOT DO ANYTHING TO JEOPARDIZE THIS! If you do not know wr0mUas call, one must first access the gateway that the call is to be sent on. To do this automatically, decide which country you are calling and find its country code. Then, pad it to the left with zeros as required so it is three digits. [Add 1, 2, or 3 zeros as required]. Examples: Luxembourg (352) is 352 (stays the same) Spain (34) becomes 034 (1 zero added) U.S.S.R. (7) becomes 007 (2 zeros added) Next, seize a trunk and dial KP+011+ CC+ST. Note that r3?CC is the three digit padded country code that you just determined by the above method. [For Luxembourg, dial KP+011+352+ST, Spain KP+011+034+ST, and the U.S.S.R. KP+011+ 007+ST]. This is done to route you to the appropriate overseas gateway that handles the country you are dialing. Even though every gateway will allow you to dial every dialable country, it is good practice to use the gateway that is designated for the country you are calling. After dialing KP+011+CC+ST (as CC is dr4@ efined above) you should be connected to an overseas gateway. It will acknowledge by sending a wink (which is audible as a and a dial tone. Once you receive internat- ional dial tone, you may route your call one of two ways: a) as an operator-originated call, or b) as a customer-originated call. To go as a operator-originated call, key KP+ country code (NOT padded with zeros)+city code+number+ST. You will then be connected, providing the country you are calling can r5A㥋receive direct-dialed calls. The U.S.S.R. is an example of a country that cannot. Example of a boxed int'l call: To make a call to the Pope (Rome, Italy), first obtain the country code, which is 39. Pad it with zeros so that it is 039. Seize a trunk and dial KP+011+039+ST. Wait for sender dial tone and then dial KP+39+6+6982+ST. 39 is the country code, 6 is the city code, and 6982 is the Pope's number in Rome. To go as an operator-originated call, simply place a zero in front of thr6BZ[Le country code when dialing on the gateway. Thus, KP+0+39+6+6982+ST would be dialed at sender dial tone. Routing your call as operator-originated does not affect much unless you are dialing an operator in a foreign country To dial an operator in a foreign country, you must first obtain the operator routing from rate & route for that country. Dial rate & route and if you're trying to get an operator in Yugoslavia, say nicely, "IOTC Operator's route, please, for Yugoslavia." [In largr7C0ler countries it may be necessary to specify a city]. Rate & route will respond with, "38 plus 11029". So, dial your overseas gateway, KP+011+038+ST, wait for sender dial tone, and key KP+0+38+ 11029+ST. You should then get an operator in Yugoslavia. Note that you must prefix the country code on the sender with a 0 because presumably only an operator here can dial an operator in a foreign country. When you dial KP+011+CC+ST for an overseas gateway, it is translated to a 3-digit sendr8.ƢAer code of the format 18X, depending on which sender is designated to handle the country you are dialing. The overseas gateways and their 3-digit codes are listed below. 182 ..... White Plains, NY 183 ..... New York, NY 184 ..... Pittsburg, PA 185 ..... Orlando, FL 186 ..... Oakland, CA 187 ..... Denver, CO 188 ..... New York, NY Dialing KP+182+ST would get you the sender in White Plains, and KP+183+ST would get the sender in NYC, etc., but the KP+011+CC+ST is highlr#EJ require special routing. Note that special routings are NEVER EVER EVER used to dial normal telephone numbers, only operators. Operator functions: TOLL TEST BOARD- Generally a cordboard position that assists in trunk testing. They are not used by operators, only switchmen. INWARD- Assists the normal TSPS (0+) operator in completing calls out of the TSPS's area. Also, inwards perform emergency inerrupts when the number to be interrupted is out of the area code of the original (Tr$FHU*SPS) operator. For example, a 303 operator has a customer that needs an emergency interrupt on 215-647-6969. The 303 operator gets the routing for the inward that covers 215-647, since she cannot do the interrupt herself. The routing is found to be only 215+ (no special routing required). So, the 303 operator keys KP+215+121+ST. An inward answers and the 303 says to her, "Inward, this is Denver. I need an emergency interrupt on 215-647-6969. My customer's name is Mark Tabas." The inwr%G |ard will then do the interrupt (off the line, of course). If the number to be interrupted had required special routing, such as, say, 312-456-1234 (spec routing 032), then the 303 operator would dial KP+312+032+121+ST for the inward to do that interrupt. DIRECTORY ASSISTANCE- These are the normal NPA+555+1212 operators that assist customers with obtaining telefone directory listings. Not much toll-fraud potential here, except maybe $0.50. RATE AND ROUTE- These operators are reachedr&H-rG by dialing KP+800+141+1212+ST. They assist normal (TSPS) operators with rates and routings (thus the name). The only uses I typically have for them are the following: 1. Routing information. In the above example, when the 303 operator needed to dial an inward that served 215-647, she needed to know if any special routing was required and, if so, what it was. Assuming she would use rate and route, she would dial them and say nicely,"Operator's route, please, for 215-647." Rate & rour'IՂte would respond with "215 plus." This means that the operator would dial KP+215+121+ST to reach the inward that serves 215-647. If there were special routing required,such as in 312-456,rate & route would respond with "312 plus 032 plus." In that case, the operator would dial KP+312+032+ST for the inward that serves 312-456. It is good practice to ask for "operator's route" specifically, as there are also "numbers route" and "directory routes." If you do not specifically ask for or(JTperator's route, rate & route will generally assume that is what you want anyway. "Numbers" route refers to overseas calls. Example, you want to know how to reach a number in Geneva, Switzerland (and you already have the number). You would call routing and say "Numbers route, please, Geneva, Switzerland." The operator would respond with: "Mark 41+22. 011+041+ST (plus) 041+22" The "Mark 41+22" has to do with billing, so disregard it. The 011+041 is access to the overseas gateway (tor)KF be discussed in Part III) and the 041+ 22+ is the routing for Geneva from the overseas sender. "Directory" routings are for directory assistance overseas. Example: you want a DA in Rome, Italy. You would call rate & route and say, "Directory routing please, for Rome, Italy." They would respond with "011+039+ST (plus) 039+1108 STart." As in the previous example, the 011+039 is access to the overseas gateway. The 039+1108 is a directory assistant in Rome. 2. Nameplace information. r*L"%Rate & Route will give you the location of an NPA+ exchange. Example: "Nameplace please, for 215-648." The operator would respond with "Paoli, Pennsylvania." This isn't especially useful, since you can get the same information (legally) by dialing 0, but using rate & route is often much faster and it avoids having to hang up when you are already on a trunk. *NOTE on Rate & Route: As a blue boxer, always ask for "IOTC" routings. (e.g., "IOTC operator's route", "IOTC numbers route", er+M8{tc.) This tells them that you want cordboard-type routings, not TSPS, because a blue boxer is actually just a cordboard position (that Bell doesn't know about). OVERSEAS COMPLETION OPERATOR (inbound)- These operators (KP+151+ST) assist in the completion of calls coming in to the United States from overseas. There are KP+151+ST operators only in a few NPAs in the country (namely 303). To use one, you would seize a trunk and dial KP+303+151+ST. Then you would tell the operator, for exr,N؆ample, "This is Bangladesh calling. I need U.S. number 215-561-0562 please." (in a broken Indian accent). She would connect you, and the bill would be sent to Bangladesh (where I've been billing my KP+151+ST calls for two years). Other internal Bell Operators. KP+11501+ST ...... universal operator KP+11511+ST ...... conference op KP+11521+ST ...... mobile op KP+11531+ST ...... marine op KP+11541+ST ...... long distance terminal KP+11551+ST ...... time & charges op KP+11561+ST .....r-9pDA. hotel/motel op KP+11571+ST ...... overseas (outbound) op These 115X1 operators are identical in routing to the 1X1 operators listed previously, with one exception. If special routing is required (0XX), then the trailing 1 is left off. Examples: A 312 universal op ... KP+312+11501+ST A Franklin Park (312-456) universal op (special routing 032 required)................... KP+312+03 2+1150+ST [The trailing 1 of 11501 is left off]. Purposes of 115X1 operators. UNIVERSAL- Used rP.F) at your central office. Back to the problem. Remember that when you seize a trunk, 2600Hz is indeed coming the other way on the trunk because the CALLED end is still on-hook, but you don't actually hear it because of a filter. However, the Bell equipment knows it's there (they can "hear" it). The presence of the 2600Hz is telling the billing equipment that your call has not yet been completed (i.e., the CALLED end is still on-hook). When finally you do connect with your boxed ca"*"((( ( "" * ""*( ( " (( * "((* "* ((" ((" ( "((((*" ( ( * ( "*( ** ("* ( "** (  * * (* "(* ( " "(* * " "((( * * (* * " " * " "((( ( " "*" ( " (( * ( " **( ( "*( " ((* * " "((((*" ( ( * ((**" ( (* "" "*** " "( ( ( **rR3>R 806-258-2222 No 2600Hz-------> <------------2600Hz When you seize a trunk (before the number you called answers) there is no affect on your billing equipment. It simply thinks that you're still waiting for the call to complete (the CALLED end is still on-hook; it is ringing, busy, going to recorder or intercepts operator. Now, let's say that you've sezied a trunk (806-258-2222) and for example, KP+314+949+1705+ST. The call is routed from the tandem you seized to: 314-94%*)**RJRDIIE*TJE*IIDDIDDIIDDQEU*JIII*ERQEEETIEEQ*RUTQEU*TJREUEJDIREITDQ)$QEEE*IIDDQ$QUIJIQ*TE*EEQIEU$TIIE*QETERIDJEURQ$TJE*RITE*QUETE*QQQTEE*RQQ)$TJE*RQQ*IQ*TJE*ERERITERQ*RITE%QUETE*QQQTEE$ITIQ*I*IEERUTERUQEDJQ*TQRQ*)*ERERITERQ*TE*EETRITE*IDDREUTE*IDDEREITIEDUITJEUTJITIDE*TE*DIIDTJE*RITE*IDDREUTE*ERERITERIDRIRTII$I*DIQIUQQEDEETTIDErTven and the 2600Hz towards the left (the CALLING end) terminates. This tells your billing ! nequipment, which thinks that you're still waiting to be connected with 806-258-2222, that you've finally connected. Billing then begins to 806-258-2222. Not exactly an suspicious beginning for an aspiring young phone phreak. To avoid this, several actions may be taken. As previously mentioned, one may avoid being charged for the number called to seize a trunk by using an extender (in whichrU*+dO case the extender will get billed). In some areas, boxing may be accomplished using an 800 number, generally in the format of 800-858-xxxx (many Amarillo numbers) or 800-NN2-xxxx (special intra-state class in-WATS numbers). However, boxing off of 800 numbers is impossible in many areas. In my area, Denver, I am served by #1A ESS and it is impossible for me to box off of any 800 number. Years ago, in the early days of blue boxing (before my time), phreaks often used directory assisrVp>$tance to box off of because they were "free" long distance calls. However, because of competetive long distance co mpanies, directory assistance surcharges are now $0.50 in many areas. It is additionally advised that directory assistance numbers not be used to box from because of the following: Average DA calls last under 2 minutes. When you box a call, chances are that it will last considerably longer. Thus, the Bell billing equip- ment will make a note of calls to directory assisrWg tance that last a long time. A call to a directory assistant lasting for 4 hours and 17 minutes may appear somewhat suspicious. Although the date, time, and length of a DA call do not appear on the bill, it is recorded on AMA tape and will trip a trouble report if it were to last too long. This is how most phreaks were discovered in the old days. Also, sometimes too many calls lasting too long to one 800 number may raise a few eyebrows at the local security office. Assuming you cr X+Ґan complete a blue box call, the following are listed routings for various Bell internal operators. These are in the format of KP+NPA+ special routing+1X1+ST, which I will explain later. The 1X1 is the actual operator routing, and NPA and NPA+ special routing are used for out-of- area code calls and out-of-area code calls requiring special routing, respectively. KP+101+ST ...... a toll test board KP+121+ST ...... inward op KP+131+ST ...... directory assistance KP+141+ST ...... was rr!Y2Date & route. Now only works in 312, 815, 717, and a few others. It has been replaced with a univer- sal rate & route number, 800+141+1212. KP+151+ST ...... overseas completion operator (inbound). Works only in certain NPAs, such as 303. KP+181+ST ...... in some areas, toll station for small towns Thus, if you seize a trunk 806 NPA and wanted an inward (in 806), then you would dial KP+121+ST. If you wanted a 312 inward and were dialing on an 806 trunk,r"D\ an area code would be required. Thus, you would dial KP+312+121+ST. Finally, some places in the network require special routing, in addition to an area code. An example is Franklin Park, Ill. It requires a special routing of 032. For this, you would dial KP+312+032+121+ST for a Franklin Park inward operator. Special routings are in the format of 0XX. They are used primarily for load balance, so that traffic flow may be evenly distributed. About half of the exchanges in the networkr [K3 by 200Hz. A different set of two of the 7 frequencies represent the digits 0 thru 9, plus an additional 5 special keys. The frequencies and uses are as follows: Frequencies (Hz) Domestic Int'l -------------------------------------- 700+900 1 1 700+1100 2 2 900+1100 3 3 700+1300 4 4 900+1300 5 5 1100+1300 6 6 700+1500 7 7 900+1500 r\ 8 8 1100+1500 9 9 1300+1500 0 0 700+1700 SM Code 11 900+1700 STp Code 12 1100+1700 KP KP1 1300+1700 ST2p KP2 1500+1700 ST ST The timing of all the MF signals is a nominal 60ms, except for KP, which should have a duration of 100ms. There should also be a 60ms silent period between digits. This is very flexible, however, and most Bell eqr]>uipment will accept outrageous timings. In addition to the standard uses listed above, MF pulsing also has expanded uses known as "expanded inband signalling" that include such things as coin collect, coin return, ringback, operator attached, and operator released. KP2, code 11, and code 12 and the ST (STart "primes") all have special uses which will be mentioned only briefly here. To complete a call using a blue box, once seizure of a trunk has been accomplished by sending 2600Hr^!z and pausing for the , one must first send a KP. This readies the register for the digits that follow. For a standard domestic call, the KP would be followed by either 7 digits (if the call were in the same NPA as the seized trunk) or 10 digits (if the call were not in the same NPA as the seized trunk). [Exactly like dialing a normal fone call. Following either the KP and 7 or 10 digits, a STart is sent to signify that no more digits follow. Example of a complete calr_ l: 1> Dial 1-806-258-1234 2> wait for a call-progress indication (such as ring, busy, recording, etc.) 3> Send 2600Hz for about 1 second. 4> Wait for about 2 seconds while a trunk is seized. 5> Send KP+305+994+9966+ST The call will then connect if every- thing was done properly. Note that if a call to an 806 number were being placed in the same situation, the area code would be omitted and only KP+ seven digits+ST would be sent. Code 11 and code 12 are used in inr`!Xgternational calling to request certain types of operators. KP2 is used in international calling to route a call other than by way of the normal route, whether for economic or equipment reasons. STp, ST2p, and ST3p (prime, two prime, and three prime) are used in TSPS signalling to indicate calling type of call (such as coin-direct dialed). This has been Part I of Better Homes and Blue Boxing. I hope you enjoyed and learned from it. If you have any questions, comments, threats or raC2insults, please fell free to drop me a line. If you have noticed any errors in this text (yes, it does happen), please let me know and perhaps a correction will be in order. Part II will deal mainly with more advanced principles of blue boxing, as well as routings and operators. Note 1: other highly trunkable areas include: 816,305,813,609,205. I personally have excellent luck boxing off of 609-953-0000. Try that if you have any trouble. Better Homes and Blue Boxing rb] Part II Practical Applications =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= (It is assumed that the reader has read and understood Part i of this series). The essential purpose of blue boxing in the beginning was merely to receive toll services free of charge. Though this can still be done, blue boxing has essentially outlived its usefulness in this area. Modern day "extenders" and long distance services provide a safer and easier way to make free fone calls. HowevercWr, you can do things with a blue box that just can't be done with any- thing else. For ordinary toll-fraud, a blue box is impractical for the following reasons: 1. Clumsy equipment required (blue box or equivalent) 2. Most boxed calls must be made through an extender. Not for safety reasons, but for reasons I'll explain later. 3. Connections are often sacrificed because considerable distances must be dialed to cross a seizable trunk, in addition to awkward routirdQOng. As stated in reason #2, boxed calls are usually made through an extender. This is for billing reasons. If you recall from Part i, 2600Hz is used as a "supervisory" signal. That is, it signals the status of a trunk-- "on-hook" or "off-hook." When you seize a trunk (by briefly sending 2600Hz), your end (the CALLING end) goes on hook for the duration of the 2600Hz and then goes off-hook once again when the 2600Hz is terminated. The CALLED end recognizes that a call is on the way rO+and attaches a register, which inerprets the digits which are to be sent. Now, understand that even though your end has come off-hook (no 2600Hz present), the other end is still on-hook. You may wonder then, why, if the other end (the CALLED end) is still on-hook, there is no 2600Hz coming the other way on the trunk, when there should be. This is correct. 2600Hz *IS* present on the trunk when you seize it and afterwards, but you cannot hear it because of a Band Elimination Filter (BErf`ee fone call, which is merely mindless pseudo-phreaking, blue boxing is actual interaction with the Bell System toll network. It is likewise advisable to be more cautious when blue boxing, but the careful phreak will not be caught, regardless of what type of switching system he is under. In this part, I will explain how and why blue boxing works, as well as where. In the later parts, I will give more practical information for blue boxing and routing information. To begin with, blrg ue boxing is simply communicating with trunks. Trunks must not be confused with subscriber lines (or "customer loops") which are standard telefone lines. Trunks are those lines that connect central offices. Now, when trunks are not in use (i.e., idle or "on-hook" state) they have 2600Hz applied to them. If they are two-way trunks, there is 2600Hz in both directions. When a trunk IS in use (busy or "off-hook" state"), the 2600Hz is removed from the side that is off-hook. The 2600Hz isrhk therefore known as a supervisory signal, because it indicates the status of a trunk; on hook (tone) or off-hook (no tone). Note also that 2600Hz denoted SF (single frequency) signalling and is "in-band." This is very important. "In-band" means that it is within the band of frequencies that may be transmitted over normal telefone lines. Other SF signals, such as 3700Hz are used also. However, they cannot be carried over the telefone network normally (they are "out-of- band") and are riR*therefore not able to be taken advantage of as 2600Hz is. Back to trunks. Let's take a hypothetical phone call. You pick up your fone and dial 1+806-258-1234 (your good friend in Armarillo, Texas). For ease, we'll assume that you are on #5 Crossbar switching and not in the 806 area. Your central office (CO) would recognize that 806 is a foreign NPA, so it would route the call to the toll centre that serves you. [For the sake of accuracy here, and for the more experienced readers, nrjԸote that the CO in question is a class 5 with LAMA that uses out-of-band SF supervisory signalling]. Depending on where you are in the country, the call would leave yq iour toll centre (on more trunks) to another toll centre, or office of higher "rank". Then it would be routed to central office 806-258 eventually and the call would be completed. Illustration: A---CO1-------TC1------TC2----CO2----B A=you CO1=your central office TC1=your toll office. TC2=toll office in Amarillo. CO2rke=806-258 central office. B=your friend (806-258-1234) In this situation it would be realistic to say that CO2 uses SF in-band (2600Hz) signalling, while all the others use out-of-band signalling (3700Hz). If you don't understand this, don't worry too much. I am pointing this out merely for the sake of accuracy. The point is that while you are connected to 806-258- 1234, all those trunks from YOUR central office (CO1) to the 806-258 central office (CO2) do *NOT* have 2600Hz on themrl-, indicating to the Bell equipment that a call is in progress and the trunks are in use. Now let's say you're tired of talking to your friend in Amarillo (806-258-1234) so you send 2600Hz down the line. This tone travels down the line to your friend's central office (CO2) where it is detected. However, a that CO thinks that the 2600Hz is originating from Bell equipment, indicating to it that you've hung up, and thus the trunks are once again idle (with 2600Hz present on them). But r m*actually, you have not hung up, you have fooled the equipment at your friend's CO into thinking you have. Thus,it disconnects him and resets the equipment to prepare for the next call. All this happens very quickly (300-800ms for step-by-step equipment and 150-400ms for other equipment). When you stop sending 2600Hz (after about a second), the equipment thinks that another call is coming towards it (e.g. it thinks the far end has come "off-hook" since the tone has stopped. It couldr n V be thought of as a toggle switch: tone --> on hook, no tone -->off hook. Now that you've stopped sending 2600Hz, several things happen: 1) A trunk is seized. 2) A "wink" is sent to the CALLING end from the CALLED end indicating that the CALLED end (trunk) is not ready to receive digits yet. 3) A register is found and attached to the CALLED end of the trunk within about two seconds (max). 4) A start-dial signal is sent to the CALLING end from the CALLED end indicating that the CALr o4HLED end is ready to receive digits. Now, all of this is pretty much transparent to the blue boxer. All he really hears when these four things happen is a . So, seizure of a trunk would go something like this: 1> Send a 2600Hz 2> Terminate 2600Hz after 1-2 secs. 3> [beep][kerchunk] Once this happens, you are connected to a tandem that is ready to obey your every command. The next step is to send signalling information in order to place your call. For this yor ZZu must simulate the signalling used by operators and automatic toll-dialing equipment for use on trunks. There are mainly two systems, DP and MF. However, DP went out with the dinosaur , so I'll only discuss MF signalling. MF (multi-frequency) signalling is the signalling used by the majority of the inter- and intra-lata network. It is aO also used in international dialing known as the CCITT no.5 system. MF signalling consists of 7 frequen- cies, beginning with 700Hz and separatedH"?2yqr{wx,u Downloads62qvC-,v CH10.txtprHsժ'&%$#876543210/.CBA@?>=<;:9NMLKJIHGFEDYXWVUTSRQPOdcba`_^]\[Zonmlkjihgfes sB2ueBoxing.txtptret The incredible Help Program for Blue Boxing --------------------------------------------- Presented by Keepermann -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Better Homes and Blue Boxing Part I Theory of Operation =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- To quote Karu Bluel Marx, blue boxing has always been the most able form of phreaking. As opposed to such things as using an MCI code to make a frtc+*)(rV/p| ϟ 8/ ___/ / __ \/ _/_/ / \/ / / / / /\\/ N / / /__/\/__/__/__/__/_____/__/__/__/__/__/__/__/_____/ / L : _\ \ \__\/\__\__\__\__\_____\__\__\_____\__\__\__\_____\/ Y | {___/ Y Y Y Y Y Y Y Y Y Y Y Y Y | - --q,Q R ************************************* * * * * * Tricks with UK Pay Phones * * More Ways For Free Calls * * By Bender * * * * Plus you don't need * * a pencil for this one! * * * * * ************************************* w{p[ 1:H6omepho.txtA.416pxm  FH7tect.bu1mpA.840py=~rItsGoodToPhreakPicpz魧q  :7>H1ti-hackingBill.txtp{>nih}|nH3shole.txt(ED)p|H}{ }0M2sicTELECOMMunications1p~|7 **********GILROY's course in*********** * * * ========================== * * =BASIC TELECOMMUNICATIONS= * * ========================== * * PART I * *************************************** PREFACE: -------- In this course, I plan to cover as much material as possible relating to tele- communications. First, in the syllabus are the long-distance services, which is the topic of part I. In ~H".SRQfedcba`_^]\qponmlkjihg|{zyxwvutsr~}|H6f$#"! /.-,+*)('&%:9876543210EDCBA@?>=<;PONMLKJIHGF[ZYXWVUT|Ԫ|@iQ{_M80fone.txt(ed)pHĈn dcxwvutsrqpon~z}|{zyxwvRRM5gnusEdTempA.128po8z    "!+DM10nusEdTempA.128pHihgf,+*)('&;:987654321FEDCBA@?>=<QPONMLKJIHG\[ZYXWVUTSRgfedc( kM6p}a7Help!sEdTempA.384p#zDetailed info on BT exchanges. EXCHANGE TEST FACILITIES AVAILABLE FRB = Fault Ring Back ; CPI = Cable Pair Indicator ; LPI = Line Pair Indicator NST = New Subs Test ; SALT = Standard Auto Line Tester ; OSC=Exch Oscillator +---------------+-----+-----+-----+-----+------+-----+-----------+ | EXCH | FRB | CPI | LPI | NST | SALT | OSC | CONT.No. | +---------------+-----+-----+-----+-----+------+-----+-----------+ | 888/881 {j 900MHz phone freqs ---------------------------------- Panasonic 900MHZ Cordless Freqencies: CH BASE HANDSET -- ------- ------- 01 902.100 926.100 02 902.130 926.130 03 902.160 926.160 04 902.190 926.190 05 902.220 926.220 06 902.250 926.250 07 902.280 926.280 08 902.310 926.310 09 902.340 926.340 10 902.370 926.370 yFORMrILBMBMHD@ @CMAP0 000@@@PPP```pppDPPSnh@ZCAMG@BODYr8 &`?|? +p??@?<0 ~1????8?c0?`g! Help! ~~~~~ It's pretty straight forward really, press the function key for the menu you want and then select the article by pressing the key listed beside the article title. Greetz & ThanX ~~~~~~~~~~~~~~ It's taken me a while to do this 3rd disk in the phreaking only series and I couldn't of done it without the help of these guys - Spicoally/CyberDreams Oz - For supplying me with loads of philes from our g@ Australian BBS `Falcons Nest' of which I'd like to thank Falcon/CyberDreams Oz himself! Progen/Indy - For some UK philes and for giving me the idea of altering the UK BT advert from `It's good to talk' to `It's good to phreak'! Keep running mate! ;) Conan/CyberDreams - For digitising the BT picture and sending it to me! Slate/CyberDreams - For helping me edit a couple of these philes! Maffia/CyberDreamsc3 Hacking and Phreaking Numbers <*-----------------------------*> EASY LINK............................................. 1-800-325-4112 CITIBANK.............................................. 1-800-223-3312 EXPORT/IMPORT BANK.................................... 1-800-424-5201 ALCOHOL, TOBBACCO & FIREARMS.......................... 1-800-523-0677 FEDERAL INFORMATION CENTER............................ 1-800-532-1556 ARMS & SERVICE ENLIZ|#=kB1xingAroundTheWorld.TXT|py"xy/?.rDŽ /8?> 0? AAC7w`p0A?C;8?>> ??a?_ \0C  vy< ??c?_ W0 ;6G 87X7> O_> h\| H8gging.txtpA.400pw\ MMenu2sEdTempA.296pw\G 8Menu3sEdTempA.296pOo DM11est.txtmpA.416pEn:     RQPONMba`_^]\[ZYXmjihgfeM3gnusEdTempA.128p}vadlkF&  DisclaimermpA.072p~\p? 8Menu1sEdTempA.424pke Disclaimer ~~~~~~~~~~ I'd just like to point out that neither I (Kei) or any member of CyberDreams condones phreaking or illegal use of the phone system. Phreaking Only is a compilation of files on various phreaking related subjects purely for reference only and we do not condone them being used for practical purposes other than printouts if you can't afford wallpaper. Phreaking Only is a collection of files both new and old collected together to provide you with a basic u! _ _ ________/ \___________________________/ \_____________ ___ \____ / / ___ /___________ / / / / / ____/\ O [__ \ / ___/ / __ \/ _/_/ / \/ / / / / /\\/ N / / /__/\/__/__/__/__/_____/__/__/__/__/__/__/__/_____/ / L : _\ \ \__\/\__\__\__\__\_____\__\__\_____\__\__\__\_____\/ Y | {___/ Y Y Y Y Y Y Y Y Y Y Y Y Y | - --u _ _ ________/ \___________________________/ \_____________ ___ \____ / / ___ /___________ / / / / / ____/\ O [__ \ / ___/ / __ \/ _/_/ / \/ / / / / /\\/ N / / /__/\/__/__/__/__/_____/__/__/__/__/__/__/__/_____/ / L : _\ \ \__\/\__\__\__\__\_____\__\__\_____\__\__\__\_____\/ Y | {___/ Y Y Y Y Y Y Y Y Y Y Y Y Y | - --X- -: -- . : : . --- : --- : : : --- : --------+- - . : . . . : . . . | . . : Boxing . ~~~~~~ A - Boxing Around The World B - Better homes & Blue boxing C - The joys of boxing .D - Overseas dialling E - Blue box information F - Signalling systems & the blue box G - Tone Box H - Blue tones F1 - Main Menu _/_/ / \/ / / / / /\\/ N / / /__/\/__/__/__/__/_____/__/__/__/__/__/__/__/_____/ / L : _\ \ \__\/\__\__\__\__\_____\__\__\_____\__\__\__\_____\/ Y | {___/ Y Y Y Y Y Y Y Y Y Y Y Y Y | - --΃uV _ _ ________/ \___________________________/ \_____________ ___ \____ / / ___ /___________ / / / / / ____/\ O [__ \ / ___/ / __ \/ _/_/ / \/ / / / / /\\/ N / / /__/\/__/__/__/__/_____/__/__/__/__/__/__/__/_____/ / L : _\ \ \__\/\__\__\__\__\_____\__\__\_____\__\__\__\_____\/ Y | {___/ Y Y Y Y Y Y Y Y Y Y Y Y Y | - --wd!7Menu4sEdTempA.296p=y SCANNER FREQUENCY LISTINGS By: John Johnson, KWV8BP "TOPOL" of the Hotline MBBS 304-736-9169 BUGGING FREQUENCIES ------------------- There has been an increase in the use for using wireless transmitters not only by Law Enforcement Agencies but for private gain of information. Big companies bug there competition to find out about new products and suc.dh, husbands/wives bug each other to find out if the other is having an affair, and so on. Wireless transmitters are not only used for these purposes you can find them in use by your local preacher at church, or entertainers while on stage and so forth. Put these freq's in your scanner and drive around and see what comes up. Common search bands ------------------ 49 - 50 Mhz. 72 - 76 Mhz. 88 - 108 Mhz. 174 - 216 Mhz. Known freq~SwOuencies used by Entertainers and for Surveillance ----------------------------------------------------------- 30.84 33.12 33.14 33.40 35.02 39.06 42.98 149.35 150.775 150.79 151.625 154.57 154.60 154.695 154.995 165.9125 167.3375 167.3425 167.4875 168.0115 169.20 169.445 169.505 170.245 170.305 171.045 171.105 171.45 171.845 171.905 172.000 172.)H200 173.225 173.3375 457.525 457.55 457.5625 457.575 457.60 467.75 467.775 467.7875 467.80 467.825 467.85 467.875 467.90 467.925 Charleston Wv. Police Wireless Mic's "known" ------------------------------------------- 165.0875 166.0875 CID Mics 165.185 Federal Agencies seem to stick within there band when using wires ----------------------------------------------------------------- x|p Bug Detection on Home phones (COURTESY OF DR JIMMY AND MR JIM) First of all to test for bugs, you need a VOM (Multimeter) the higher the impedance the better (a Digital with FET circuitry or a Vacuum Tube Volt Meter is the best). First disconnect the phone line(s) AT BOTH ENDS. Undo the phone instrument and hook it up to the entry point of the phone line from the outside world (Ma Bell does not like you cut her off completely.) The scheme ҃uF _ _ ________/ \___________________________/ \_____________ ___ \____ / / ___ /___________ / / / / / ____/\ O [__ \ / ___/ / __ \/ _/_/ / \/ / / / / /\\/ N / / /__/\/__/__/__/__/_____/__/__/__/__/__/__/__/_____/ / L : _\ \ \__\/\__\__\__\__\_____\__\__\_____\__\__\__\_____\/ Y | {___/ Y Y Y Y Y Y Y Y Y Y Y Y Y | - --Tĕ --------------------------------------------------------- A Beginner's Guide To The Computer Underground Written By Pazuzu --------------------------------------------------------- FOREWORD: I, nor any SysOp or User of ANY BBS on which this file appears are in any way liable for any damages caused by use of information or ideas contained in this file. This file serves only to describe and introduce the Computer Underground as I myself view it, not to encouW}ut.DdH9eeph.txtmpA.416px is the physically isolate your house, apartment, etc from the outside world. But before you do this measure the line voltage (It should be approximately 48 Volts). Now with the wires disconnected at both ee set your resistance scale to a high reading and measure the resistance of the phone line, it should be very high on the order of million ohms or more, this is the normal condition, since you are measuring the resistance of an open circuit. If it is much less, say 50-100Kohms the+ Exchange Test Numbers Abbreviations SPM = Subscriber Pulse Metering FRB = Ringback Test CPI = Cable Pair Indicator (Loud tones on line to identify cable) LPI = Line Pair Indicator (Gives telephone number connected to) SALT = Subscriber automatic line test TXE4 - Electronic Equipment: SALT Dial 175 and wait for "Start Test" message Replace handset. Rings Mess͜ȗage: "Line Testing Ok" or fault if present. Continue, wait for dial tone for dial test. Dial 1 3 0 5. Rings. Message "Testing Ok" or fault if present FRB Dial 174 LPI Dial 188 gives directory number & equipment, or if not, Dial 187 gives equipment number. CPI 176 plus full national code (i.e. 176 081 553 7104) Tone is present on line when dialled. Replace receiver to cancel tone. ;'[TXD-X - System X Equipment SALT Dial 175 FRB Await ringback and listen for message. Continuation tests. Await interrupted dial tone. Dial "1" for dial test. On LD phone, dial 1-0. On MF phone, dial 1-9*0#. Dial "4" for SPM test. 10 metering pulses are sent, then NU tone, followed by 10 more pulses. CPI Dial 176 plus full national code (i.e. 176 [F081 553 7104) (This will only work from same processor) Wait for short burst of tone reminder, then tone is transferred to the specified line. To disconnect tone, replace handset. TXD-Y - System Y Equipment SALT Dial 175 Await ringback and listen for tone. Dialtone=OK Engaged=Suspect Faulure=Fault Dial next test if required, tests as follows: 2 Low A/B Insulat5݇ion test | 3 A/B to earth | Insulation tests 4 A/B to battery | 5 A/B loop to earth | 9 Bell answer before 5th ring 11 SPM test 7 Loop Res test 8 Dial test. LD Dial 0. MF Dial 1-9 0 10 Rec all pre 6 Line reversal for diode check Dialtone=OK Engaged=Suspect Faulure=Fault FRB 174 This info was  +gleaned from various places and it should be noted that all engineering calls are logged at the exchange.These number may also be switched off ouside of normal working hours (whatever they may be?). Regards, Nick nick.pulsford@wonderland.dircon.co.uk 2:440/8.12 Fidonet UK FRB on a TXE2 is 1267 |> If it's capable of accepting star services (dial `*' on your 'phone: |> NU response says it's not), then it's a digital exchange. Since BT |> say it's not an X, it must therefore be gPZa Y. If it can't do the star |> services, it's a TXE4(or one of its derivatives) I remember seeing a TXE2 (probably a TXE4 actually) in Wilmslow, Ches. with an IBM made "extension" on it to supply StarServices (& DTMF?). This was a pretty wealthy area with lots of businesses etc so this 'extension" was probably quite rare but they do (did!) exist. rsal for diode check Dialtone=OK Engaged=Suspect Faulure=Fault FRB 174 This info was oqzyxwvFB6&tbbr.txtpA.416pRFree phone calls in the U.K using Pay Phones and Taxi Phones Free phone calls from the U.K. The first one you can call Internationaly or localy. Stuff you need: A netset Pocket Dialer or a Key tone Dialer for a answer machine. Then you take a walk to your local superstore or hospital and look for a complamentry Taxi phone, if it has a dial tone youve cracked it! if not look for anouther one that has one, most of them have keys disabled are no keys at all ,thats what you use youf;r dialer for, Hold the dialer about half an inch away from the mouth piece cause the dial tone is slightly louder than normal to try and stop free calls!! hehehe. The other way is from a pay phone. Stuff you need: A 2p peice and a piece of spounge or a hankey. What to do, carefully insert the spounge or hankey into the coin return slot in such a way to cussion the drop of your coin when its inserted! Now what you do is you phone the operator, and say summit like "could you heltтp please, Im dialing this no. and it does not ring? " They will say "Ok ,But if im able to connect you it will cost you so much pence? " You say "ok is a Pound okay im gonna be on for a while " "yes they will say " they then ring the no. the 3rd party will answer and they will say " hold the line I have a call for you " then they will ask you to insert your money hehehe you then insert your 2p and before it drops to the bottem you quietly pull down on the hang up button, QUIEH('&%$#"! 3210/.-,+*)>=<;:987654IHGFEDCBA@?TSRQPONMLKJ_^]\[ZYXWVUjW-------------------------------------- ^ ^ ^ BOXING AROUND THE WORLD ^ ^ IN 10 EASY LESSONS OR LESS ^ ^ ^ ^ BY ^ ^ ^ ^ **MOB-RULES** ^ ^ ^ ^ WRITTEN ^ ^ For P-80 Systems ^ ^ O N ^ ^ z = ANTI-HACKING A BILL To create offences of unauthorised access to electronically stored data and its transmission; to confer powers of monitoring, search, seizure and destruction of such data; and for related purposes Presented by Emma Nicholson Offences 1.(1) (a) A person who effects unauthorised accessO ] M9ou.txtpr &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& & & & SIGNALLING SYSTEMS & THE BLUE BOX REVAMPED & & & &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& NOTE: This file is for informational purposes only and in no way is any toll-fraud suggested by the author. INTRODUCTION ============ I will in this file w9 -/HOME PHONE TIPS/- THE FOLLOWING TIPS ARE JUST LITTLE EXTRAS THAT YOU MIGHT BE ABLE TO MAKE USE OF. BESIDES, THEY ARE VERY EASY TO MAKE. TABLE OF CONTENTS... -------------------- 1. TO MAKE YOUR PHONE BUSY WITHOUT KEEPING TO PHONE OF THE HOOK. 2. MUSIC ON HOLD (PLAY SOMEONE MUSIC WHILE THEY ARE WAITING ON HOLD.) --------------------------------------- (1) GET YOURSELF A MODULAR PHONE PLUG WITH ABOUT OR AT LEASTTWO INCHES OF WIRE COMING OFF IT. TAKE THE TWO MID- DLE WIREěc$zPP20 !< eTCEFL@IUז)=zF P H,/''()# ]F045WOPMB_)* T8'pdIT@^UG|6fAP-[S0>P%&ovѤ,Kc;Di%Ә%@b^]>ra)$~A'k|JW34No|8Y뉦 2XI _߻] 1 cW'ǭs2 `=醀sE}t;PpB 9%~~òjn4i8}n7QdV/^34@`p4t@ϟ0!󃩐cYu}9v7n7'gЍ! 5Y!^/ʃvT$4m<discuss some of the international trunk-signalling systems used and methods to box over them. The main reason for writing this article is the downfall of US boxing due to: * 2400 & 2600 detectors on trunks * CCIS * Snooping on subscribers who place several (lengthy) calls to 800 numbers Detection could simply by avoided by boxing off another country (on a tollfree line of course) and then calling globally using a signalling system other than the ones used in the states. I vYJ#qhave also included an in-depth review of the R2. USAGE ===== The signalling systems used widely today are: CCIS, CCITT 4, R1, R2 and SOCOTEL. CCITT 4 can be found mainly in African and South American countries and is very seldom worth boxing off due to the long routing needed and the poor quality acheived. R1 and R2 is still very popular in Europe and the US and is really worth boxing with, especially R2, which offers a multitude of options yet uncovered for the enthusiastic phrea{|S Ŀ The Hackers Phone Book of Pirate BBSs v.01 ASS: DysPhunXioN ASS '94 - Anarchy/Cracking/Graphics/Hacking/Phreaking/Virus Development For more info e-mail kowinfo@aol.com. BBS Name Phone # Location -------- ------- -------- Fifth Quadrant 203-266-4307 Woodbury, CT X3B7nebxxdTempA.368zpcponmlk n:H4sphntp.txt(ED)p8 THE MAGICAL TONE BOX by Fyberlyte **from 2600 Winter 93/94, transcribed by s0m3 d00d L0D (Legion of Drunks)** INTRO The tone box is my latest mad invention. This device will satisfy your phreaking needs well into the future. There is a new technology out called DAST: Direct Analog Storage Technology. What this is is an EEPROM which writes analog data directly, without A/D or D/A, on a single chip. What this means for you is, any tone related box you need is yours with this sik* How to tap someone's phone line By: DysPhunXioN 1. Introduction I forgot to put this in the last document "How to patch into other people's phone lines". So I decided.. what the hell... just put it in another doc instead of trying to update the other before it get's spread around. 2. Disclaimer This information is intended for Entertainment purposes only. If it is used for any other purposes I am not respons Txba`_^]jrqxn*H5sphone.txt(ED)pq߿) The Forgotten Art of Phone Patching.. Or how to get Free LD without having some crappy box, or struggling all night trying to find a PBX By: DysPhunXioN 1. Introduction It seems as though everyone has forgotten about the easiest yet riskiest form of free long distance cal%y3    E~7M7u-159.txt(ED)p  =, Card-O-Rama: Magnetic Stripe Technology and Beyond or "A Day in the Life of a Flux Reversal" Written by oooOO Count Zero OOooo Restricted Data Transmissions November 99, 1999 Look in your wallet. Chances are you own at least 3 cards that have magnetic stripes on the back. ATM cards, credfit cards, calling cards, frequent flyer cards, ID cards, passcards,...cards, cards, cards! And chances are you have NO idea what information is on those stripes or how they are encoded. This detailed document will enlighten you and hopefully spark your interest in this fascinating field. None of this info is "illegal"...but MANY organizations (the government, credit card companies, security firms, etc.) would rather keep you in the dark. Also, many people will IMMEDIATELY assuǒETme that you are a CRIMINAL if you merely "mention" that you are "interested in how magnetic stripe cards work." Watch yourself, ok? Just remember that there is nothing wrong with wanting to know how things work, although in our present society, you may be labelled a "deviant" (or worse, a "hacker")! Anyway, I will explain in detail how magstripes are encoded and give several examples of the data found on some common cards. I will also cover the technical theory behind mYagnetic encoding, and discuss magnetic encoding alternatives to magstripes (Wiegand, barium ferrite). Non-magnetic card technology (bar code, infrared, etc.) will be described. Finally, there will be an end discussion on security systems and the ramifications of emergent "smartcard" and biometric technologies. *DISCLAIMER* Use this info to EXPLORE, not to EXPLOIT. This text is presented for informational purposes only, and I cannot be held bZ Oone I met at Xmascon..including but not excluding Crimson Death, Dispater, Sterling, Mack Hammer, Erik Bloodaxe, Holistic Hacker, Pain Hertz, Swamp Ratte, G.A.Ellsworth, Phaedrus, Moebius, Lord MacDuff, Judge Dredd, and of course hats off to *Drunkfux* for organizing and taking responsibility for the whole damn thing. Hope to see all of you at SummerCon '92! Look for Cyber-striper GIFs at a BBS near you..heh heh) Comments, criticisms, and discussions about this file are welcome. [d I can be reached at: count0@world.std.com count0@spica.bu.edu count0@atdt.org Magic Man and I are the sysops of the BBS "ATDT"...located somewhere in Massachusetts. Great message bases, technical discussions...data made flesh...electronic underground.....our own Internet address (atdt.org)... field trips to the tunnels under MIT in Cambridge.....give it a call.. mail me for more info.. ;) eh heh ** ClosP ! ____________________________________________________________________ +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ +=+ Advanced Phreaking Using Cordless Phones +=+ +=+ Written for Criminal Intent +=+ +=+ by:-> FreeStyle / Ci +=+ +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ /\ The Complete Manual On Cordless Phone /\ qJT Hacking & Phreaking ****************************************************************** : The author hereby grants permission to reproduce, redistribute,: : or include this file in your g-file section, electronic or : : print newsletter, or any other form of transmission that : : you choose, as long as it is kept intact and whole, : : with no omissions, deletions, or changes in anyway.. : :@ (C) FreeStyle : ****************************************************************** I believe that if you call yourself a hacker, phreaker or cyberpunk then you must have a BROAD knowledge on all aspects of technology in our society today. The world is only limited to your imagination, radio communication, the use of camera's, sound editing equipment is all at our disposal. We must take the time $Vto understand these things and then it will be another useful weapon to add to our ever growing arsenal. -- FreeStyle. Introduction : Are you finding that the 0014 numbers and also exchanges are being updated and also monitored more widely these days ??? It's getting tiring trying to find out the new frequencies for a certain number to box off. The federal police are haЬ1ppily waiting to catch us with the use of CLI's and also telecom. WELL this problem could be solved, or should I say that a method which I have not yet read about on any BBS board, has been well under way for many, many years. This is the use of phreaking using cordless phones. This method was come across after a friend brought a brand new radio transmitter which was capable of transmitting on the cordless phone system. It is a easy to do and has been widely used for many years by certain people who shall remain anonymous. Cordless Phones : There are many models of cordless phones on the market today. The basic models do not have any code security at all. The up market models around the $200 - $400 usually have a 4 digit code security (just like a PBX system) this prevents other people dialing out on their own phone. The cordless phones operate 6 main different frequencies, which have been laid 4!hout by the DOTAC (The department of Transport and Communication) and all manufacturers must comply with these rules. These frequencies enable you to transmit your phone conversation to your base set, which then sends the conversation to the phone lines. When you pick up your cordless phone and move around the house or office etc.. with it. The conversation is transmitted via 1 of the 6 frequencies to your base set. This is why some cordless phones have dif Bferent switches on the back to change the frequency of the base set (pick up) and also the handset (transmission). This is to avoid crossovers of the conversation being transmitted to a nearby neighbors cordless phone and getting interference from one another. Cordless Phone Phreaking : With the use of electronic technology, there will always be a way of avoiding the same technology we invent, this also apmLB8uetone.txt(ED)pTacations, the vast storage capabilities of smartcards are just not needed. ** Biometrics: Throw yer cards away! ** I'd like to end with a mention of biometrics: the technology based on reading the physical attributes of an individual thru retina scanning, signature verification, voice verification, and other means. This was once limited to government use and to supersensitive installations. However, biometrics will soon acquire a larger market share in access U?control sales because much of its development stage has passed and costs will be within reach of more buyers. Eventually, we can expect biometrics to replace pretty much ALL cards..because all those plastic cards in your wallet are there JUST to help COMPANIES *identify* YOU. And with biometrics, they'll know you without having to read cards. I'm not paranoid, nor do I subscribe to any grand "corporate conspiracy," but I find it a bit unsettling that our physical attributes will moVGhfst likely someday be sitting in the cool, vast electronic databases of the CORPORATE world. Accessible by anyone willing to pay. Imagine CBI and TRW databases with your retina image, fingerprint, and voice pattern online for instant, convenient retrieval. Today, a person can CHOOSE NOT to own a credit card or a bank card...we can cut up our plastic ID cards! Without a card, a card reader is useless and cannot identify you. Paying in cash makes you invisible! However, with biometWػBrics, all a machine has to do is watch... listen...and record. With government/corporate America pushing all the buttons. "Are you paying in cash?..Thank you...Please look into the camera. Oh, I see your name is Mr. Smith...uh, oh...my computer tells me you haven't paid your gas bill...afraid I'm going to have to keep this money and credit your gas account with it....do you have any more cash?...or would you rather I garnish your paycheck?" heh heh ** ClosXbing Notes (FINALLY!!!!) ** Whew...this was one MOTHER of a file. I hope it was interesting, and I hope you distribute it to all you friends. This file was a production of "Restricted Data Transmissions"...a group of techies based in the Boston area that feel that "Information is Power"...and we intend to release a number of highly technical yet entertaining files in the coming year....LOOK FOR THEM!! Tomorrow I'm on my way to Xmascon '91... we made some slick buttons commemoratingY the event...if you ever see one of them (green wreath.XMASCON 1991 printed on it).hang on to it!... it's a collector's item.. (hahahah) Boy, I'm sleepy... Remember.... "Truth is cheap, but information costs!" But -=RDT is gonna change all that... ;) set the info FREE! Peace. ..oooOO Count Zero OOooo.. Usual greets to Magic Man, Brian Oblivion, Omega, White Knight, and anyone else I ever bummed a cigarette off. (1/18/92 addition: Greets to everymSTdevspTJlpE U~sp3 Ak keymaps`Q  Tcp 0B3p`O BLUETONES Digit Tones ----- ----- 1 700 + 900 Hz 2 700 + 1100 Hz 3 900 + 1100 Hz 4 700 + 1300 Hz 5 900 + 1300 Hz 6 1100 + 1300 Hz 7 700 + 1500 Hz 8 900 + 1500 Hz 9 1100 + 1500 Hz 0 1300 + 1500 Hz KP 1100 + 1700 Hz ST 150,V0 + 1700 Hz 11 (*) 700 + 1700 Hz 12 (*) 900 + 1700 Hz KP2 (*) 1300 + 1700 Hz (*) Used only on CCITT SYSTEM 5 for special international calling. ge, Captain Zap, The Visionary, Phelix the Hack, /*)('&%$#"!6543210/.-,A@?>=<;:987LKJIVM4g1.txtTempA.368p S L}|{y;]FB5p`G THIS ARTICLE CONTAINS TECHNICAL DATA THAT WILL BE OF INVALUABLE ASSITANCE, BUT IS NOT WRITTEN IN EXTREME INSTRUCTIONAL BLOW-BY-BLOW DETAIL AS THIS FORWORD HAS BEEN. IT ASSUMES THAT YOU ALREADY HAVE A CERTAIN AMOUNT OF TECHNICAL KNOWLEDGE IF YOU DO NOT, ALL THE INFORMATION FOR YOU TO LEARN BY IS HERE INCLUDING NETWORK SPEC'S AND FREQ'S. IF YOU DONT ALREADY HAVE AN IDEA WHAT GOES WHERE JUST KEEP THIS FILE AVAILABLE FOR REFERENCE AS YOU LEARN. <*> Notes on OveScard companies. They feel that the tech is too expensive, and that still more data can be squeezed onto magstripe cards in the future (especially Track 1). I find this somewhat analogous to the use of metallic oxide disk media. Sure, it's not the greatest (compared to erasable- writable optical disks), but it's CHEAP..and we just keep improving it. Magstripes will be around for a long time to come. The media will be refined, and data density increased. But for conventional appliy Bell caught wind of blue boxing in 1961 when it caught a Washington state college student using one. They originally found out about blue boxes through police raids and informants. In 1964, Bell Labs came up with scanning equipment, which recorded all suspicious calls, to detect blue box usage. These units were installed in CO's where major toll fraud existed. AT&T Security would then listen to the tapes to see if any toll fraud was actually committed. Over 200 convictions resulteR.fer's social security number (yeah, real difficult to find out a person's SS#...GREAT idea), and having passcards with only 3 or 4 digit codes. Smartcard technology involves the use of chips embedded in plastic cards, with pinouts that temporarily contact the card reader equipment. Obviously, a GREAT deal of data could be stored in this way, and unauthorized duplication would be very difficulty. Interestingly enough, not much effort is being put into smartcards by the major credit ! Sphear ------ __ ___ __ ___ / / / / / / /\ / / \ /__/ /__/ /__ /__\ /__/ __/ / / / /__ / / / \ DigiZine Phreaking Hacking Anarchy -)| (And AnyThing Else P/H/A/C/C/V) Editor: Signal File Contributions:John Deere Sphear can be reached at system@axposf.pa.dec.com ~or~ sphear.digizine@lambada.oit.unc.edu Issue #4 [05.22.94] If y:ou have any articles, advertisements, worthy of our time please send them by Internet email to system@axposf.pa.dec.com Also, Sphear entertains any editorials and interesting articles. WARNING Sphear Digital Magazine is not responsible for any misuse ofv^ the information contained herein. The information supplied in this electronic Magazine is intended for purely informational purposes. >Don't be stupid If you FUCK YOURSELF OVER well, Tough< Contents -------- h Info Texts ---------- Motorola NAM Access by grendal Police Codes For Scanning How A Cable Descrambler Works SHORT HACK #1: CELLULAR PHONZ 101   By grendal MOTOROLA NAM ACCESS Many Motorola units can be NAM programmed from the handset, but they all contain a counter that limit the number of times you can do it. It isn't a big number and it changes from model to model. I haven't found the specifics for this, but if you exit the program without changing anything, the counter isn't changed. To see if a phone CANn be changed, power it on. The display should show "ON". If the handset has a FCN key press: FCN+0+the 6 digit security code twice+RCL The display should show "01" If it doesn't, press: Control+0+the 6 digit security code TWICE+(asterisk) If "01" doesn't appear, press CLR and try again, or try the security code again. If it still won't go, the counter may have expired. Don't worry, we'll get to that in another SHORTHACK. Anyway, let's get to it: Here's the programming table. It steps through all the fields until the data is stored or you exit the program. Press (asterisk) to step through the fields: ST Press Display Shows Entry __ _____ _____________ __________________________ 1 01 (entry #1) * 00000 Carrier system I.D. 2 * 02 c[{ * 111 Area code 3 * 1110111 Telephone # 4 * 04 * XX (varies) Station class mark (usually 12) 5 * 05 * 00 Access overload class 6 * 06 00 Group ID mark 7 * 07 * 000000 User security code 8 * 08 * 123  I{ Unlock code 9 * 09 * 0334 Initial paging channel 10 * 10 * 011100 Option Code #1 (right to left, 0's or 1's) 1st dig=always 0 2nd dig=second tel num 3rd dig=auto recall 4th dig=min mark 5th dig#u[0 +HGFEDCBWVUTSAa|%M1gnusEdTempA.392pS____________________________________________________________________________ ____________________________________________ ____________ \ _ | _ \ || / _ / _ / / _ \ _ | /\_/ | |) _/ || \__ \_/| |\_/_ / | \_/ | / /| | |) \ || | \_ \ _|_/ \ \ | / | | \____|__ | _______/_______ | _____ / _____ / \ ___/ | __| ------------\|/------------Inal magnetic fields (don't worry about leaving these cards on top of the television set...you can't hurt them!). Here's an example of the layout of the wires in a Wiegand strip: ||| || || | ||| | || || | || || | | || | | | | | | |||| || |||| || The wires are NOT visible from the outside of the card, but if your card is white, place it in front of a VERY brJ`ight light source and peer inside. Notice that the spacings between the wires is uniform. BARIUM FERRITE - The oldest magnetic encoding technology (been around for 40 yrs!) it uses small bits of magnetized barium ferrite that are placed inside a plastic card. The polarity and location of the "spots" determines the coding. These cards have a short life cycle, and are used EXTENSIVELY in parK king lots (high turnover rate, minimal security). Barium Ferrite cards are ONLY used with INSERTION readers. There you have the most commonly used cards. Magstripes are common because they are CHEAP and relatively secure. ** Magstripe Coercivity ** Magstripes themselves come in different flavors. The COERCIVITY of the magnetic media must be specified. The coercivity is the magnetic field strength required to demaL{Wgnetize an encoded stripe, and therefore determines the encode head field strength required to encode the stripe. A range of media coercivities are available ranging from 300 Oersteds to 4,000 Oe. That boils down to HIGH-ENERGY magstripes (4,000 Oe) and LOW-ENERGY magstripes (300 Oe). REMEMBER: since all magstripes have the same magnetic remanence regardless of their coercivity, readers CANNOT tell the difference between HIGH and LOW energy stripes. Both are read the same by theM_kO same machines. LOW-ENERGY media is most common. It is used on all financial cards, but its disadvantage is that it is subject to accidental demagnetization from contact with common magnets (refrigerator, TV magnetic fields, etc.). But these cards are kept safe in wallets and purses most of the time. HIGH-ENERGY media is used for ID Badges and access control cards, which are commonly used in 'hostile' environments (worn on uniform, used in stockrooms). Normal magnets will not affNnSect these cards, and low-energy encoders cannot write to them. ** Not All that Fluxes is Digital ** Not all magstripe cards operate on a digital encoding method. SOME cards encode AUDIO TONES, as opposed to digital data. These cards are usually used with old, outdated, industrial-strength equipment where security is not an issue and not a great deal of data need be encoded on the card. Some subway passes are like this. They require only expiration data onON the magstripe, and a short series of varying frequencies and durations are enough. Frequencies will vary with the speed of swiping, but RELATIVE frequencies will remain the same (for instance, tone 1 is twice the freq. of tone 2, and .5 the freq of tone 3, regardless of the original frequencies!). Grab an oscilloscope to visualize the tones, and listen to them on your stereo. I haven't experimented with these types of cards at all. ** Security and SmartPa_cards ** Many security systems utilize magstripe cards, in the form of passcards and ID cards. It's interesting, but I found in a NUMBER of cases that there was a serious FLAW in the security of the system. In these cases, there was a code number PRINTED on the card. When scanned, I found this number encoded on the magstripe. Problem was, the CODE NUMBER was ALL I found on the magstripe! Meaning, by just looking at the face of the card, I immediately knew exactly what was encodQCed on it. Ooops! Makes it pretty damn easy to just glance at Joe's card during lunch, then go home and pop out my OWN copy of Joe's access card! Fortunately, I found this flaw only in 'smaller' companies (sometimes even universities). Bigger companies seem to know better, and DON'T print ALL of the magstripe data right on card in big, easily legible numbers. At least the big companies *I* checked. ;) Other security blunders include passcard magstripes encoded ONLY with the own@form. Then you call US Robotics, talk to a sales weasel, and say you're from whatever company and that you need two power supplies for a Dual Standard. They'll ask how you want to pay, say Purchase Order. They'll ask you to send the PO. You'll get all the cost info, etc, TYPE that onto the PO then send it. They'll send you two power supplies, with an invoice for $21 (the supplies cost $10.50 each) or more, depending on shipping, etc. PAY THE INVOICE. THIS IS IMPORTANT. YOU ARE GETTIN l VclsA=G A USR DUAL STANDARD FOR $21 - IT'S WORTH IT. Then, like a week or two after you get the power supplies (just chuck 'em, you don't need them anyway), and have paid the invoice, call back the same sales fool, and say you need a Dual Standard modem. They'll send it to you on a PO, send them the PO like before, then when the modem comes, don't pay the invoice. You just grabbed a Dual Standard for $21. Another scam I used alot last summer was check fraud. The stuff I'm going to descriBJbe here seems quite wimpish at first, but I'm sure you can adapt it to your needs. Grab someone's checks. Call a pizza place, say you have to be at work for an emergency meeting (or whatever) in five minutes, but your kids need food. Tell them you'll send your son/daughter over with a check. Write out the check, and go pick up your free pizza. This is only the beginning of the scams you can have fun with. If you come up with any new ones, email me. IV. Anarchy Info I'll admCzit that when I first heard about it, anarchy seemed pretty dumb to me. I mean who the HELL wants to go around setting off bombs. Then the LA riots hit (I LIVE in LA), and I thought different. I don't know a lot about the anarchy side of the Underground, but I'm snatching all the files I can find on it, and learning fast. It useful just to be able to blow things up, especially of you get caught in a riot zone. It's also useful for just normal ordinary revenge. Like I said, I don't knoD^;lw it too well yet, but I will soon, and that'll be for another file... Anyway, I think that's it for now. I've covered quite a bit here and I'm sure you're itching to go try it out. Go for it, but remember, YOU WERE WARNED. If you have any interesting experiences, call my BBS (the number is at the end of this file), and post about it. I mentioned before that my reason for doing this was to revive the Underground. That is a major goal of mine. We need new blood down here. If yoEMaIu are interested in writing a piece for one of my files, or starting up a newsletter, or whatever, email me somewhere (I shouldn't be too hard to find), and let me know. WE NEED TO RESTORE THE UNDERGROUND... Look for my next file coming when it comes... Until then: STAY ALERT, TRUST NO-ONE, AND KEEP YOUR LASER HANDY... - Pazuzujust to be able to blow things up, especially of you get caught in a riot zone. It's also useful for just normal ordinary revenge. Like I said, I don't knoG 2@pz Although several different circuit designs are used, all proximity cards permit the transmission of a code simply by bringing the card near the reader (6-12"). These cards are quite thick, up to 0.15" (the ABA standard is 0.030"!). WIEGAND - Named after its inventor, this technology uses a series of small diameter wires that, when subjected to a changing magnetic field, induce a discrete voltage output in aHF sensing coil. Two rows of wires are embedded in a coded strip. When the wires move past the read head, a series of pulses is read and interpreted as binary code. This technology produces cards that are VERY hard to copy or alter, and cards are moderately expensive to make. Readers based on this tech are epoxy filled, making them immune to weather conditions, and neither card nor readers are affected by exter Ȯ   V ppmoreq,xC4 <N,@g N"A($vNJkpNuN|`pNudos.libraryHJV4cp  !0/.-s Vppshow HzHI TXH&HPK,x/a WQH&ֈPK.PK n (g @BI<,Eh|zVJ $@( Df 5FRJ $@0g\JS@gJfVJ` DgJgRz TrHAgT$N:Jg"@" ((IXI f*I g/ Dg6$A(""Sf$W Be$Sf$W ^"CN.t%XX`>zRb45F/M@VK &@" AfPHAa8$ RK &@0g2a$($B" ӒS@grf ؁`"MYSAe"Q`XNu AgrHAJAg"_Q N.ANJf ( n%eNJ%$#"! pVSetMap!jJgHzxHI TXH&HPK,x/ aV WQH&ֈPK.PK n (g @BI<,Eh|z( Df5F gXJ` DgJgRz TrHAgT$N:Jg"@" ((IXI f*I g/ Dg6$A(""Sf$W Be$Sf$W ^"CN.t%XX`XzRbN5F/M@" Af0HAa$ g"a" $BӒSf`"MYSAe"Q`XNu AgrHAJAg"_Q N.AJf (LNuK|x~z$K" Jga(ae>t0a$AFgpaQe$NugNu* K VtypeC}ċOO(jdp N$"<I(l/ / g ,倲l"4(T`,2(jtp NJg2**p$A. J (F t0a$AFgpaQe$NugNu* ФNuDrgQNu* `0ap54Ffaepa6paAGg`a6D30Q3eNu NF1!]x"p8 (&0 4(lNhp)1< {Lp L㟪I)0XX 7r0$*G3HxS9<@ p1.tb<1!@̒qU@.IP}>ʈ|C _@G LA#PV:0 o WF8> x0 O 3F,5V%+|R/O98Dt&@'A`sʅ&1K@l)gGȜKF9Z _״nP2h p10#P( C -;\X̬R!qBJP0" bI&a7 !MUB4)QB&69p`-A&,X8 pae0䥑C$8_$8s!` ;_}2@&w.: aF:,tGt'@kec,fz>43A/ @L2?DӎrXB{ÿ78l$00F~/5D:+H8HpJ GI8t!aHX`ƼAmT |l00AZ$>8ؓx習sQN  69pB^H`j %'{0_Ykq^Q@̃!'!{,Kk|`W86p11kA\j|#G٪!67`6=j̐zmc}櫝Z$΀n@| Cc (C 6Όox"{l^5JR]4~`EJ%Õn`?g[/8rx@@1AHbW0u"$ D!d_~ |_6%`(\EQ׼?厀^^c.Ԁl Taԏ߷ -B|.1V%<;2ԬEbD|Ȩ&R %EPI+{7@{YDp3`m!0AʾV(Y:̱ @̀ ̅pG| +Jz-l0c@ ' 0̾ 43$q05pY8vf $4AEVc3)!ټ+٘N&:Y2 .ÈG|O| vD??\c5jt/\Q> o vN@ua߹ v~',A=Ƙ8x%CHB|ue蓄E>Wx&ّ L)\6`h?0 `"7E` xa4|@5H4 KH>Z$tPk>vC Ҍ|Go(Q'$@U0O@nԴ}e8aJ=H#IA jMdm{"6 D  wE(^"Iķ-U.b`;?xb>rkP 0@pd 1l╩'  |Hh  !E(A–U ̰!$Xx^eUq Ω$l8 <R BSmtXć s3YS#-`$#@|4JMK ̨ 0e*p?M(lYa4@!Jtr$=hGdG3 ΄^8Jm Xt 1J[(LOQ ( &$`Kd["=A^0D@ JA%=#_nJnjC(s0._BDg@pC G[l82^A%@KØQץ$pL`"ˁ%!,T`T`d uBA)%~$z@# << 9K $5 @|'!Bx{G3TA _ _y 猳1pC'jt- hZ`5:$@H#V@p! CB$ H' 1,` A=1Pb%P:| `&Hpt5 * Y DWv p4 Pkp `aCl^@ZS SJS&a iHl@V2 bbiaò !`@2}9.Tr%:؀uD*ub "Bo,A"VE@`Xf 'A?_u%rTCxE؎nb?(5R؎b;h#eV0 80`n$0 H Qp8#4sPe؂\ Q HYgwcnPS Gt9`nQn!!|&(!XMHL_ B6r aҀʅ`"!6!1|&8!xMhL_ B>z`CB&hwdG$aXD6yI@8 W!9 DH <Gr``Fcג> !Xr )ԤpXh 8@X`Eq:ǀ  ls)/:)T_ILcϰXP8 i0 4`h$%}'uI(*$Æ0X0Z\ a5b `TJd1Ipl$G"k`6d1g %/1~0 7fpT@ IyQ/J sk4[XI y*gOr" E\>[Ca`yxyG<8_H5kf!ag,-3B%SÄP;BI1(,@18A(58 $׈A/[JIǠ-GDbyȏsE`y`*Q.<T„B#` hxfl3= !" ;@D쌌uf#'.cn 7Lg@Gжa4d]*=1!52i'{&7 4`=[ M L ~cpq$4d1 +øEm]$^ =Ȓ%5Gjjk\%,pfhp&4FοZjh\ gno`JbgK8}lV/dHS"`_A< AB!@`@!  ,4,|Ty=?G˟y};};?ğ|?+x?=#1z㪃=~O4=?V{e$|垿O?,_{Kχ_|?~}:uӯ^m`S7_c-<$8O<n? >`?~~~&x'@G?yFxzG{ax]|G?|k ˯'}wo߿˞Q2?yο5}ӵ%9Qμ8  _E?/{+Ff `s_п?ߟ?G |z~~>ߤ'r?S / sߝ?=??|woǎ8(܊by!`?'V!__|s} $_D?߅E~ =οAy>?>ӯ~_???|s{9_|yC>3|?{8G}7G}Gy'??s? %1@A~`@pp??~w9woG X+??[+s>az7o_}-~z?1j󀾋pQ74q/}K~/~(;߾>7=s??c_+ǟ.Fh}jc/#?`'ߟW$KA/o6'?`~s?y}4/_>7E+?I|u>O_^`.Oߟz8g<zGzjt~ͬoy}ǿx{PI~;SyxG֓8eqU>*o|}Á ?_|^<z?<x? ɏ>)ك>sLmLz;cs7A41 x4uS'ǟxG7Շ8G)B@|Ox4.3Q\/#?@7`@yHA>y_^=su8Cj<;ο<7so^~{=ǧ1?56iˏ=p"~94'?s.?~u9< {{ɵn~au9p P7XXgo =h̐o A֨7Ӧ0u4SRQPONMLKJI^]\[ZYXWVUTihgf//H200 QaW[free on ppshow itsgoodtophreakpic noiseplayer -p6 mod cls type menu1 setmap po3  U~sp2 4c4Tpowerpacker.library,3%6S@?>=<;:9876F\T  req.library,2:H}pNupowerpacker.librarypplib 35.344 (24.5.92) J2x# x #X(Ldos.libraryintuition.librarygraphics.libraryH I(*@+H$CNh)@CNh)@CNh)@ N|"NA Z 0|.N\# LNv LpNuRn " NupSn f."fNuH *N,xJm g "p`bN|A0gNvp`L"N :0|.N\Nv$-$"MNI"TNb"lNb"lNb"Mp0-mN. LpNupNu"55B,{M[ZYXWlkjihgfedcbwvutsrqponm~}|{zyxKJIHGFEDCBcTT reqtools.library,37Lu$pNuJ *req.libraryReqLibrary 2.5 (Tue Oct 9 1990) dos.libraryintuition.librarygraphics.libraryconsole.devicerexxsyslib.librarytimer.devicereq timer portHRr |,,,-f2 ( v  <H 3 *H*@+N"+H2B&B*B.B6B"m@ gp0N."m6 g <N.p"M0-mN.NuRn  NupSn f .gaNuH *N,xJm g p`$-2"MNaP L`NupNu/N NuH,n*Hp2(."hA NVLJ@f0(Hnh4/@lBB0/ h@c40JAf2(Inh6/AlBC2/hAc61Cp2/39pp7he 2/ hepLNuH`Jg `$H@J@f0p0LNup`H0Jg`&HCJCfHB SL Nup`HBR@(o :HD6HDJCj fRBCHCڃ L8NuH(N"O0<BYQC0<2Q IEGj0<4<"Z* g N1B&2( XA7ADA1Ah dQԛN?A <rHA,xN:/@b.g o"o $@ ga$`f G,La@ B 6/oo>C@c07@k oZ"ON1 i(4(?Bki e0) 7@2)kd7AZ2o_A?Ao>ooH?@: o"KN1/)3:|[ @/+A f| '|@ '|'o "k fpr`0)Hi2) IikSA Ka*,l* KN4*@Jg,l. n"m2Na /bg"@ <,xN. g o,m0/.gpJ"<,xN:/@g&@".pN f"opJN.B`t@N'@A'H B+ ||"KN &W'@'|(|Ap"KrNDJgp`7| p0/.'@ B$"KN2 mV(~Jg k( /0 JgN*gp` g mVNJg"@$)6)8)$iNp ftg0*&`fJk o$go$3;g EgNC2A J,LNFC ng6 qg0 bg* lg$p yg vg rgp mg,l"`d$ g M,l*N /g<,x"KN,Jf"KN "KN&"KN>"oNp/N"opJN. LNuH,l.p0/Zfp"m2N G"m2z:/ZEi>adHHp"NLREoJ@gNLJfLNuHvxz"ga:RD@b6Jf:D024L8NuH@pR@  gJfLNua4aNuH(H&I9@9A9| 9|9|A,)HA<)H4|3|0p9@,9@.AP)H!K B(|H$HȞZ"ON1 o(9h37|0+kN0+JkxgTAAAAkk@7@0+@7@|| '|H '|7|.A0C$Kp2+[Aka7|VACaJkx3>$ogk'l@ks0+k8@kc7@ kZ"ON10) kd7@2)kd7AZ0+P@D@k7@ k"JN1pr Kal +prHA,m"N:'@$g"@Ыt'@( klfA2Cp2Q'kCEB@2<ZA,4<LN2,m* KN4Jgt$@ @CN,m. n"j2NJkxgB,MN4*7kXAp*6 j2h>/ ECaBTAE Ca $_/ A"J,MN8$_,m" jVN jVN @2<C2Q"@N + fg0+H@?g`g k8(&grJkxgn k$Jgd,m.,MN0+4C6"+3 ?a@m o@C-p*6T@r*7kXA j2BBBh>XA/ a:$_,m*N`"BD J,m*N JNJDg k$"klfJkxg)k@,m" +p"k$N. <"KN. LNuH*N&I><:8,m.N02"KN 02"KN 02"KN 02"KN LNuH(:<>&H"n6f(pr 6<fp r 6<tNk|:B+;A@NkN|zB+{Ag 2Ap`0@r tNvkA@&A'H@B0<f0<7@p7@7@0k@k kL@kkNk7F7G7FD7GFf,kDk D7Fk 3 @㧦7G0@ g8kLk`,kFk F7Gk 7F0@@g kLk@LNuH?Z*N"ON1 o(,m.NJg"@pr2)0)HNL`,MNZLNuH? n. h f prLNupr2(0(LNua 'HNua 'HNua" 'H1C1DNuH`NT*N$H"Ot BYQ O|1@1A!J UO"Or,m Jdos.libraryintuition.librarygraphics.librarygadtools.libraryutility.libraryconsole.deviceH I$(*@+H&CNh)@+@*CNh)@+@.ACprND ,()@B6 @p#hdCNh+@:CeNh+@6C*Nh)@ +@2 LpNuRn " NupSn f."fNuH *N,xJm g "p`T$-&"MN"m*Nb5D"m.Nb"m6 g Nb"m:Nb"m2NbC8N>"Mp0-mN. LpNupNut<pLtlI8U"fH v`H vBpE `PasswordH v( NLNuH82pHA2GE&,xNL$ "Opv( NOLLNuNu%ldH v( NLNu/NuH0Cprtv,n*NL@ NuH<*HEBE(S&HCBCp@ef"`"BAHA "HABA҃ځR`LrOAQ|j܆pg ,p*F܀R "<NTt$@ J/HD fp` $H*-pg rjҁЁ%@`Bp%@pf(<^`xZ؄ g< +g(J g+k  rg+@0+;@0+;@%k%k+mx`,+ gPSgTSgXSg\Sg`SgdSgfSghUgpr gpUgxSgz_g|SgSgSgr/g`%F0`%F`+F` ;@`| ;@`t+F`n%F(`h F p+@2`\%F`VpfP+F`J%F`D%F`>+Fp+@`25G)+Fp+@`&pgpf(`pfJf m B`%FAxNL&@ f+D&pgBRpg %j4"5A>5|pA4%H5| gp`p@"*A@+A+||A0/-/*("HANNPO%@(f p Ja z`$oD/ j(C:,l$E6N$_HmNHmR/*(/@LNO j(+h( j("h(MX/N< N ^ j("h(p0),-/@8rg,GrnG m JgJfG+Kt`&G/ "Kp m GN d&_ -ѭ -rNQ%@Jf p Ja `$oD - j"H+H/I(/ "K m &o,N (&_ m "KN . o5H(~("jN J|xz&m`$ j+PA,l(N'Xo(RXm+D. rFЁH&JtWDHH+A>J>f&G/ "Kp mtGN &_ -rLNUѭ -rNP%@ Jf p Ja ` $oD -" j "H+Ir,NT+I| -rNT+I+H/I(/ "K mt&o,N &_ o("j N F|z&m`& j +PA,l(NrЁ'XѭRXm&m f mG>`G@+K*/@,/8 І"V(\$.-&/@4/A0/B,vg"剒,r܁Jgr"X܁ f/ ACGVN V&_`$ gA`A/ CGVN 05It)9&_AV+HA,l(N"PtЂHBo.pZЀl4.`0&R "-NSvrЁ"ҁ҆Ҁ,ZHF ->f"҄܁ ->f"-$&-ԃo."-:o.+G&"-6o,+F*JfP Ѕ"U&m -$&3(,HJH"ro"(Q"Q$& m"K -r,l$N|`(JjR m %A|$mz+m|`A"Jp"Q"oD i %P A"mp "Q -J m1@ /,1@ "m 1X1@!J &H"m 1X1@ T1@& -"Sfr7A&"oD#Kp0+&"oDf)f o%o<#KJf#KRXp,ѭ5JMm6`(JjRp+@" ;@,-* ;@*/8 -f."-"jR$D;B"JjR$Dԁԯ@Z;B&oD/ A"k(,l$$k0N$_,-pg"-Sp,NQ> m|'H` 7@j /0V7@f7|d r7@hpn JjRY7@d7|h` m "kfp7@npfn m'PPpgnA,l(N4'@f p Kab`&oD k$h2*-&(-*// -R"/@ JaPOJ>f>|&m|./,`,0+H2+H/-R/-N//"-J JaOR,m&oD,p./0pg /8\/-R/-N//p" JaN R"t,/HX.N/-R//5 K r JANHOJg /4Ѐ" t $&-BJjR/-N/-R///A8/B@" JAaO /0Q"/(t JC,l(N(`/-N/-R/-F/p" JaO P;@ .JjR,z~x`N+g -& mH,p#l, ;@ k+P JCp",l(N(R /8RހXm,-pg`` J>gp` -Sr,NN m| &@$oD g(/ j"Kp",l(NJ$_/ K"jN"$_ *r j0NE4 l(%h<, j(,l(N%F%m%m%m%m0-U@WDHH%A%m A@$ j"hVp)r$%B%AJ2g5 D <` $oD"JNL\N]NuNUH:I&I$H+@+J`.* *&p l$ S'@$g +rgSa6efore, in this day and age, they are rather well refined. Basically, the detection device will look for the presence of 2600 Hz where it does not belong. It then records the calling number and all activity after the 2600 Hz. If you happen to be at a fortress fone, though, and you make the call short, your chances of getting caught are significantly reduced (see Telcom VI). Incidentally, there have been rumors of certain test numbers (see Telcom II) that hook directly into trunks AN\eLL.=6EGCGCGGGGGGGGGCGGGGGGGGGGGGGGGGAAAAAAAAAAAAAAA@~`~`$$4%%5^^6&&7**8((9))0_-_-+=+=|\|\0*D]v{[{[}]}]1235Ng:;:;"'"'456></H<,<,>.>.?/?/.789 AOTa -hpx$/:E p m9 !!p m10 @@p m11 ##p h9 Qp m5 Wp b5 Ep h10 Rp m2 Tp m7 Yp m3 Up h1 I APip h7 O p h8 Pp b1 Ap m1 Sߧp b4 Dp b6 Fp b7 Gp b8 Hp h2 J p h3 K p h4 L p m8 Zp m6 Xp b3 Cp m4 Vp b2 Bp h6 Np h5 M  ZATBSC @D Acls type mAQx."enu1 10~cls type menu2 11~cls type menu3 12~cls type menu4 13~cls type disclaimer 14~cls type help! 15~6~16~7~17~8~18~9~19~?~мPO3Albert S.6@($  d`\XTPLHD($  *&" p m3 Up h1 I QRG_^]\RT;freeQ\TIL!!H?>Gr&a.a& :|g "@,xNb :|g"@Nb.zJL|Nu  GSg`CDrQ !H@<?gH ᘰ|ongH@off*g infog`&a4NuaNu"-A$&<c,zNNu(-"A$v,zN"-A$&<NSfNu :H@<?g ᘰ|ongH@off*ginfog"A$v N m hv$"NA$"6<N`f,.,xN*@Jg,xC:BNC<"g,xC BNC"g,@aNu"-tv,z NAC|#H EN!J!|E !@ -ST۠pTTsystem-configurationS 5P 'N @<"!! @(|>A!%FW,genericK BSTdevspVmlse, an international dial tone will be heard. This will time out to a reorder in about ten seconds. When the dial tone is heard, the system is ready to accept the second stage of pulsing in the format: KP-country code-city code-digits-ST. At this stage it is the country code not the paired country code which is used. Use the paired country codes when calling inward operators. Some toll offices are screened against 011 coming in on a long distance trunk. In that case precede t-he 011 with the area code which would apply for that toll office. Example: for a toll office in Gainsville, FL use KP-904+011+paired CC-ST. Another way to reach the overseas senders is to call them directly with KP-sender number-ST. If this doesn't work add the area code of the sender Example: KP-904185-ST. This is a list of international centers with their area codes.: A/C Sender Location --- ------ -------- 914 182 White Plains, NY 212 183 New York, NY 412 51X?.RJfrVDHHABA"mfLLN]NuRAMaaf (fpNucpNupNuHx<$(<~`za ggHDm np`pgpLNuH $A J"B8<g$OaLNuJf(RDpNuSDf .Jp`Jgg oNAagRDpNuJgHaLfJf`HaLfrrJg fRA fSAl`@@N```2`````f`h````rrJg~ fRA fSAl`hHaRgP`DLrg` fRA fSAkLJAf f``Pr`rg*Jg& g g$ -fRH(ecJg fJg`JfJg 52YBf`HrgP fRA` fSAlEaf*Laf LaJgg/I`L`lL`]*~[]#?()|%'Ap WNuRJ<`pH>8 AJf R&O(OB$$A"BxtzafD;@N Jfhr~`2`.``l`*`R`$`V```agS<'` f|` ftxSonadg` fp` fpRSoL` ?gVxSo:`x ~f<RSo"g 'fg` ]f<`Jgx .KL|Nu"o o / "`gSd`BSd Nu"o o JfSfNuH0$&HBHCCHBBBЂL NuJjD53Z˟Jj Da DNuaDDNuJj DaDNu/HA4f"H@HAHB4g0H@40HB2$Nu/v AdQC AdYC A dUCJAkSC4HBBBHC604HAdSCЁdr2HCH@A&$Nu!XL0H,($ d`\TPD@<84 |F26>BTn UKIBF$I  yUU 54[oN| 8 p |  A KKKKKKKKKP(   vbN@6 3aa3 3aa3 8`s>554N???~???H@HAHB4g0H@40HB2$Nu/v AdQC AdYC A dUCJAkSC4HBBBHC604HAdSCЁdr2HCH@A&$Nu!XL0H,($ d`\TPD@<84 |F26>BTn UKIBF$I  yUU Q]eg @,xNA N *gz$@&j.Nur(jx fIx` DASf< `g g(@`pd"<,xN:Jg((@)|DAS)|`NuAx"P `g I`(H&pd,xN.(Nu(jx g DASf `g f`zNu(@`p,zNb*pr0*2*((D@DA J,zNX0*2* ((4*j4+ 6*j6+BCD@DA JN EN\Nu"-A$v,zNNuaIap,zlNb*( B (6B6A>p g0"@ ig ig i g i%g I`(( QJf EN\ JN8r ,zN:aTNuaQ^}vaJp,zNb*/ G`r"c #g @  "Q&_%l %l6 ,j",j J,zN ,j", j JNX EN\aa J,zRN8Nu"-gAX$v,zJN`"-gAj$v',z0N`intuition.librarydos.libraryc ERROR: wd_UserData occupied! ON/s,OFF/s,INFO/s,?/s: Usage: 33m 0m