File 1/1 By: A Bunch of people "Phreaking, Boxing, and KILL BELL" `/`\`/`\`/`\`/`\`/`\`/`\`/`\`/`\` |-------Acrylic Box Plans-------| | \----------------/ | | \______By______/ | | | | [ The Pimp ] | \_______________________________/ Call: /\/\aharaja's Hi-Times 10 Meg BBS C/F 600+ G-Files (7 0 2) - 8 3 2 - 7 4 6 9 \/-----------------------\/ || A High Mtn. Hackers || || Presentation || /\-----------------------/\ Ok the purpose of this box is to get Three-Way-Calling, Call Waiting, programmable Call Forwarding, and an easier way of extended Bud Boxing ALL for FREE. Materials: 1) Wire stripers 2) Couple Feet Wire 3) AT&T/BELL Can 4) Hex Wrench Idea: Ok the idea of this box is to get all of the above features by stealing them from the fortunate ones on your block. Procedure: Step 1) Find AT&T/BELL Can that is being used to service you surrounding area. Step 2) Open can with Hex wrench. Step 3) Find your line and another persons line who has 3-way, Call (waiting/forwarding), if the # of all the lines are not listed in the box you will have to use your local ANI to find them. Step 4) Once you have found the lines then wire the (Black & Yellow) wires on the victims line to the (Black & Yellow) wires on you line (Be sure your phone at home uses all 4 wire as some of the cheap phones don't). Step 5) Then disconnect the victims (Black & Yellow) Wires, resulting the the loss of these features to their line ( you mat want to leave these wires connected, this may or may not cause problems I haven't tried it that may yet). Well That Sums It Up! Procedure for easier extended Bud Box. If if for some reason your line is disconnected, or you just want to use hook someone's line to your line for fearless phreaking follow the procedure below. Ok Go to the local can and find a line that is used by weekend visitors or a summer/winter home, and hook their (Red & Green) Wires to your (Red & Green) Wires, and your off into the fearless world of phreaking ( i recommend you phreak from these line, so that the owners don't get uptight and look into the matter), unless of course you are doing it for revenge! Some Suggestions: Take a Bud box Along to do a ANI just to make sure you have the right line, also in some cases you will have to switch between the (Red/Green) (Black/Yellow) or any other combination if your area has changed the standard format which id very unlikely. Have Fun -------------------------------- /-/ /-/ /-/ The Aqua Box /-/ /-/ /-/ /-/ Concept by: Captain X /-/ /-/ /-/ /-/ Plans by: The Boozler /-/ /-/ /-/ /-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/ Every true phreaker lives in fear of the dreaded F.B.I. 'Lock in Trace.' For a long time, it was impossible to escape from the lock in trace. This box does offer and escape route with simple directions to it. This box is quite a simple concept, and almost any phreaker with basic electronics knowledge can construct and use it. /-/-/-/-/-/-/-/-/-/-/-/ /-/ The Lock /-/ /-/ in Trace /-/ /-/-/-/-/-/-/-/-/-/-/-/ A lock in trace is a device used by the F.B.I. to lock into the phone users location so that he can not hang up while a trace is in progress. For those of you who are not familiar with the concept of 'locking in', then here's a brief description. The F.B.I. can tap into a conversation, sort of like a three-way call connection. Then, when they get there, they can plug electricity into the phone line. All phone connections are held open by a certain voltage of elec- tricity, that is why you sometimes get static and faint connections when you are calling far away, because the electricity has trouble keeping the line up. What the lock in trace does is cut into the line and generate that same voltage straight into the lines. That way, when you try and hang up, voltage is retained. Your phone will ring just like someone was calling you even after you hang up. (If you have call waiting, you should understand better about that, for call waiting intercepts the electricity and makes a tone that means someone is going through your line. Then, it is a matter of which voltage is higher. When you push down the receiver, then it see-saws the electricity to the other side. When you have a person on each line it is im- possible to hang up unless one or both of them will hang up. If you try to hang up, voltage is retained, and your phone will ring. That should give you an understanding of how calling works. Also, when electricity passes through a certain point on your phone, the electricity causes a bell to ring or on some newer phones an electronic ring to sound. So, in order to eliminate the trace, you somehow must lower the voltage level on your phone line. You should know that every time someone else picks up the phone line, then the voltage does decrease a little. In the first steps of planning this out, Xerox suggested getting about a hundred phones all hooked into the same line that could all be taken off the hook at the same time. That would greatly decrease the voltage level. That is also why most three-way connections that are using the bell service three way calling (which is only $3 a month) become quite faint after a while. By now, you should understand the basic idea. You have to drain all of the power out of the line so the voltage can not be kept up. I rather sudden draining of power could quickly short out the F.B.I. voltage machine, because it was only built to sustain the exact voltage necessary to keep the voltage out. For now, imagine this. One of the normal Radio Shack generators that you can go pick up that one end of the cord that hooks into the central box has a phone jack on it and the other has an electrical plug. This way, you can "flash" voltage THROUGH the line, but can't drain it. So, some modifications have to be done. MATERIALS NEEDED- a BEOC (Basic Electrical Output Socket), like a small lamp type connection, where you just have a simple plug and wire that would plug into a light bulb. - One of the cords mentioned above, if you can't find one then construct your own; same voltage connection, but the restrainer must be built in (i.e. the central box) - TWO phone jacks (one for the modem, one for if you are being traced to plug the aqua box into) - Some creativity and easy work. NOTICE: No phones have to be destroyed/modified to make this box, so don't go out and buy a new phone for it! All right, this is a very simple procedure. If you have the BEOC, it could drain into anything, a radio, or whatever. The purpose of having that is you are going to suck the voltage out from the phone line into the electri- cal appliance so there would be no voltage left to lock you in with. 1) Take the connection cord. Examine the plug at the end. It should have only two prongs, if it has three, still, do not fear. MAKE SURE THE ELEC- TRICAL APPLIANCE IS TURNED OFF unless you wanna become a crispy critter while making this thing. Most plugs will have a hard plastic design on the top of them to prevent you from getting in at the electrical wires inside. Well, get a knife and remove it. If you want to keep the plug (I don't see why...) then just cut the top off. When you look inside, low and behold, you will see that at the base of the prongs there are a few wires connect- ing in. Those wires conduct the power into the appliance. So, you care- fully unwrap those from the sides and pull them out until they are about an inch ahead of the prongs. If you don't wanna keep the jack, then just rip the prongs out. If you are, cover the prongs with insulation tape so they will not connect with the wires when the power is being drained from the line. 2) Do the same thing with the prongs on the other plug, so you have the wires evenly connected. Now, wrap the end of the wires around each other. If you happen to have the other end of the voltage cord hooked into the phone, stop reading now, you're too fucking stupid to continue. After you've wrapped the wires around each other, then cover the whole thing with the plugs with insulating tape. Then, if you built your own control box or if you bought one, then cram all the wires into the box and re-close it. 3) Re-check everything to make sure it's all in place. This is a pretty flimsy connection, but on later models when you get more experienced at it then you can solder away at it and form the whole device into one big box, with some kind of cheap Mattel hand-held game inside to be the power con- nector. In order to use it, just keep this box handy. Plug it into the jack if you want, but it will slightly lower the voltage so it isn't connected. When you plug it in, if you see sparks, unplug it and restart the WHOLE thing. But if it just seems fine then leave it. USING IT !! Now, so you have the whole thing plugged in and all... DO NOT USE THIS UN- LESS THE SITUATION IS DESPERATE! When the trace has gone on, don't panic, un- plug your phone, and turn on the appliance that it was hooked to. It will need energy to turn itself on, and here's a great source... the voltage to keep a phone line open is pretty small and a simple light bulb should drain it all in and probably short the F.B.I. computer at the same time. Happy boxing and stay free! ------------------\ Aqua Box | ------------------| by | Game Warlord | Hyperspace Bandit | Frequency Bandit | Twilight Phantom | ------------------/ [Definitions] Black Box A device that tells the operator that the phone is hangup. When actually it is off the hook. Aqua Box A device that cancel F.B.I. lock and trace devices. Lock and Trace F.B.I. use a voltage transformer to keep the phone connection up. This allows them to trace with out being hangup on. [General Infomation] -When phone is hangup the voltage is 55 volts. -When phone is off the hook the voltage is 5.5 volts. -Resistance over phone line is changing all the time. -Current is the same as resistance. -Phone line wires red and green are line1. -Phone line wires yellow and black are line2 (if you have a second line). [Items needed] -T1 10:1 voltage ratio transformer -T2 1:10 voltage ratio transformer -LED Light Emiting Diode -SW1 DPDT Switch -SW2 DPDT Switch -Plug Molecular phone plug with cord (length as disere) -Jack Molecular phone jack -R1 10k Resistor(brown,black,orange,gold or silver) -R2 9.9k Resistor(white,white,red,gold or silver) -Perfboard 3 inches by 4 inches -Project box big enough to put the transformer, jack, swiches, ect. [Equipment] -VOM meter -pliers -wirecutters -screwdrivers -soldering iron -drill -files -drillbits -solder -wire [Circuit] P |-red-----------------------------\ l |-green------------------\ | u |-yellow-\not needed | | g |-black--/ | | /---------+--------+--------------------\ J |-red----------+---------+----*---+--------------------+----\ a |-green--------*-----1\_ | 1\_ | | | c |-yellow-\ | \O SW1 | \O | | k |-black--/not needed 2 2 | | | | | | | | | | O SW2 O | | / / | | 1 2 1 2 | | | | | | | | /----------------------/ \----+---+-----------------\ | | | /---------------------------/ \------------\ | | | | | | | | | | | /---------/ | | | | | | | | | | | *---- R1 -----* | | | | | | | | | | *-- LED - R2 --* | | | | | | | | | | \---------\ | | | | | | | | | | \----O O------------*-O O----/ | | | | T1 | T2 | | | \--------O O-*----------+-O O---------/ | | | | | | | \--------------------------/ | \------------------------------------------/ [Construction] -Take the Molecular phone plug(Plug) with cord. The cord length is if you want it next to the wall, phone, modem, ect. First, remove about an inch and a half of insulation off with the wirecutters. Second, tie off the yellow and black wires. They are not needed. Third, take off about three forths of insulation off the red and green wires. Then twist the wires, but not together. Then melt some solder on the wires. Forth, drill a forth of and inch hole in one end of the project box. Fifth, put the wires through the hole about three inches, and tie the cord so that the wires will not slip. +-----------------------+ | red | hole | / | Plug \ = /\green | ]-----------------------------*< | =| \__yellow\ | |\ \-black--* | | knots-----/ | +-----------------------+ -Drill a hole on top. Then file it. So that SW1 will fit correctly. Insert SW1. Make sure the it is sercure. Next, solder the red and green wires to the middle termals of the SW1 on seprate sides. SW1 +--------+ |O p1 O| | | red-O O-green | | |O p2 O| +--------+ -Drill a hole and file, so that the Jack will fit. Insert Jack. First, cut two wires three inches long. Second, take off about three forths of a inch of insulation on both ends of both wires. Third, put some solder on the ends of the wires. Forth, solder one wire on each p1 on SW1. The side where the red wire is, solder the other end of the wire on p1 of SW1 to red on the Jack. The side where the green wire is, solder the other end of the wire on p1 of SW1 to green on the Jack. Sixth, cut two more wires about five inches long. Seventh, take off about three forths of a inch of insulation on both end of both wires. Eighth, put some solder on the ends of the wires. Nineth, solder one wire on p1 of SW1. -Drill another hole on the top. File it, so that SW2 fits. Insert SW2. First, cut two wires about two and a half inches long. Second, take off about three forths of a inch of insulation on both ends of both wires. Third, put some solder on the ends of the wires. Forth, solder one wire on each p2 on SW1. Fifth, solder the other end of wires to the middle termal of SW2. Sixth, cut four wire about three inches long. Seventh, take off about three forths of a inch of insulation on both ends of the wires. Eighth, put so solder on each end of the wires. Nineth, solder one wire on each termal p1 and p2 of SW2. -Drill a hole on top, so that the LED fits. Cut a wire about three inches,remove insulation,and solder to LED leg. On the other leg solder R2. -Take the perfboard. Insert T1. Connect wires from one side of sw2 to the termals on one side of T1. Cut two wires about two inches, remove insulation, solder to the other termals of T1. Next, solder ends of wires to the termals on one side of T2. Cut two wires about two inches, remove insulation, solder to each end of R1, also solder the LED and R2 to each end of R1. Finaly, solder the wires from the other side of SW2 to each side of R1. --O O---*-O O---*------------- SW2 T1 Jack T2 *---O SW2 --O O---*-O O-\ | LED |R1 R2 \-*---O--------- note----- T1 and T2 are the same type transformer just revesed, the voltage ratio is primary voltage/ secondary voltage. 1 3-----*-3 1 T1 Jack T2 2 4-----*-4 2 -Put project box together +---------------------------------------+ | SW1 SW2 LED | | 1 O 2 1 O 2 O | ]-Plug---| [Jack | | | | +---------------------------------------+ note --- please mark your switches and positions. it will help. [How to Use It] -SW1 is off/on,SW2 is black/aqua. -First, SW1 is 1, SW2 is 1. Second, turn on, the black box is on ,and you call as mention in definition. Third, when finish change SW2 to 2, if LED comes on then F.B.I. is trying to trace ,but the aqua box is on and hangsup your phone. [Comments] This is experimental. We would like some response, or ideas, or anything else. If you meet us on a board, just say 'hi, i liked that black and aqua box of yours.' ----------------------- How to build a BLUE BOX ----------------------- We all know that the touch tone frequencies are composed of 2 tones (2 different frequencies) so that is the reason why we have 2 VCO's (Voltage Controlled Oscilators). We will call then VCO#1 and VCO#2. If you have noticed VCO#1 and VCO#2 are exactly the same type of circuits. That is why only 1 was drawn. But remember that whatever goes for VCO#1 also goes for VCO#2. Both VCO'S are composed of a handfull of part. One chip, two capacitors, 2 resistors and five potentiometers. All of this will give you (when properly calibrated) one of the freqencies necessary (the other one will come from VCO#2) for the operation of the Blue Box. Both of these freqs. will be mixed in the speaker to form the required tone. This is one of the most sophisticated designs I have ever made. Why? Because other designs will drain the battery after 10 calls. This design will make them last 10 months!!!!! But never the less, don't forget to put in a switch for on and off. Ok let's build the two VCO'S and calibrate the unit before we get to the keyboard construction. VCO CONSTRUCTION: ---------------- TOOLS REQUIRED 1 ocilliscope(optional but not req) 1 Freq. counter (REQUIRED) 1 Volt meter " " " Electronics tools (Pliers,drll, screwdrivers, etc.) ===================================== PARTS R1 1.5K RESISTOR 5% R2 1K RESISTOR 5% C1 .1uf ELECTROLYTIC CAPACITOR 16VDC C2 .01uf " " (MYLQR)16VDC IC1 2207 VCO CHIP BY EXAR ELECTRONICS Remember the above only says VCO#1 but the same is for VCO#2 R3-R4 150 OHM RESISTORS 5% C3-C4 .1 uf ELECTROLITIC CAPACITOR 10VDC P1-P10 200K TRIMMER POT - 20 TURNS DIODES USED IN THE KEYBOARD ARE 1N914 TYPE (40 OF THEM) & 13 SWITCHES FOR THE KEYBOARD SPST MOMENTARY. SPKR=YOU CAN USE A TELEPHONE SPEAKER FOR THIS (IT WORKS BEST) BUT REMEMBER TO TAKE OUT THE DIODE THAT IS CONNECTED ACCROSS IT. ======================================= IMPORTANT NOTES 1. DO NOT USE ANYTHING ELSE OTHER THAN A MYLAR CAPACITOR FOR C2. 2. PINS 10,9,8 SHOULD BE TIED TOGETHER AND BE LEFT FLOATING. 3. ALL RESISTORS SHOULD BE 5%! NOTHING ELSE! 4. A TELEPHONE SPEAKER GIVES THE BEST RESULTS. ======================================= TROUBLE SHOOTING By now you should have constructed the two VCO'S on a bread board or anything that pleases you. Check for cold solder joints, broken wires, polarity of the battery, etc. Before we apply power to the VCO'S we have to adjust the pots for their half way travel point. This is done by turning them 21 turns to the right and then 10 turns to the left. Do the same for all ten of them. Now apply power to the unit check to see that you have power in the chips by putting the positive lead of your volt meter on pin 7 and the negative lead on pin 12. If you do not have anything there turn off the unit and RECHECK THE WIRING. When you get the right voltages on the chips, connect a diode to a piece of wire (look at fig. 2 for the orientation of the diode) from ground to any pot at point T (look carefully at the schematic for point T it is labeled T1-T10 for all pots). You should be able to hear a tone, if not disconnect the lead and place the speaker close to your ear and if you hear a chirp-like sound, this means that the two VCO'S are working if you don't, it means that either one or both of the VCO'S are dead. So in this case it is always good to have an ocilloscope on hand. Disconnect the speaker from the circuit and hook the ocilliscope to 1 of the leads of the speaker & the ground from the scope to the ground of the battery. Connect again the ground lead with the diode connected to it from ground to any pot on the VCO that you are checking and you should see a triangle wave if not turn the pot in which you are applying the ground to until you see it. When you do see it do the the same for the other VCO to make sure it is working. (amplitude is about 2VAC). When you get the two VCO's working you are set for the adjustment of the individuals pots. Adjustment ---------- Disconnect the speaker from the circuit and connect a freq. counter (the positive lead of the counter to one of the speakers leads that belongs to VCO#1 or connect it to pin 14). Connect the negative lead to the battery negative and connect the jumper lead with the diode from ground to pot number 1.T1. ( the first pot number 1 point T1) if you got it working you should hear a tone and get a reading on the counter. Adjust the pot for a freq. of 1700HZ and continue doing the same for pots 2-5 except that they get differents freqs. which are: $$$$$$$$$$$$$$ $ P1= 1700hz $ $ P2= 1300hz $ $ P3= 1100hz $ $ P4= 900hz $ $ P5= 1500hz $ $$$$$$$$$$$$$$ Now disconnect the freq. counter from the speaker lead of VCO#1 or from pin 14 (which ever you had it attached to at the beginning) and connect it to the speaker lead of VCO#2 or to pin 14 of VCO#2 and make the same adjustments to P6-10. $$$$$$$$$$$$$$$ $ P6= 1100hz $ $ P7= 700hz $ $ P8= 900hz $ $ P9= 2600hz $ $ P10= 1500hz $ $$$$$$$$$$$$$$$ When you finish doing all of the pots go back and re-check them. Keyboard -------- If you look at FIG-2 you will see that the keys are simple switches. Connected to a ground and two diodes on the other end. these diodes are used to simplify the construction of the keyboard because otherwise the distribution of the ground signal for both VCO'S would have been done mechanically. The diode will go to VCO#1 and the other will go to VCO#2. FIG-3 shows the arrangement of the keys on the keyboard. Below is a table that will help you connect the keys to the required VCO's pots. (-FIG 2-) -----!-----!--------!--------!------- ! ! ! ! TO ! TO ! FREQ ! FREQ ! KEY POT ! POT ! OUT: ! OUT: ! ON ! ON ! ! ! VCO1! VCO2! ! ! -----!-----!--------!-------%!------- 1 ! 06 ! 1700hz ! 1100hz ! C 2 ! 10 ! 1300hz ! 1500hz ! 0 1 ! 10 ! 1700hz ! 1100hz ! E 4 ! 07 ! 0900hz ! 0700hz ! 1 3 ! 07 ! 1100hz ! 0700hz ! 2 3 ! 08 ! 1100hz ! 0900hz ! 3 2 ! 07 ! 1300hz ! 0700hz ! 4 2 ! 08 ! 1300hz ! 0900hz ! 5 2 ! 06 ! 1300hz ! 1100hz ! 6 5 ! 07 ! 1500hz ! 0700hz ! 7 5 ! 08 ! 1500hz ! 0900hz ! 8 5 ! 06 ! 1500hz ! 1100hz ! 9 - ! 09 ! ------ ! 2600hz ! X Remember that in FIG-2 it's the same for each key except the "X" key, which only takes one diode. few KEYS to the diagram: Cx is capacitor #x Denoted by: ---| | --- Px is Pot or Variable resistor #x Deno ted by :/ \ /<-- \ Rx is resistor #x Denoted by /\/\/\/\ SCHEMATICS The XR-2207 chip is a Voltage-Controlled Oscillator and a 14 pin device thus you must be very careful when soldering the parts to this device. It is a little dificult to actually draw a schematic on an 80 character screen using limited graphics, but I will give it a try. TO GND_____________ | ___ C2 C3 ___ _||_ | | | _____|__9v+ | | | | ` ` ` ` ` ` ` | ------------------------------- | 7 6 5 4 3 2 1 | | | < | |8 9 10 11 12 13 14| | ------------------------------- | ` ` ` ` ` ` ` | | | | --| |--------| | | |C1 R2 | R1 | GND ______|___/\/\/\/\______|_____/\/\/\/\______| is is a diagram of how to locate the different pins on the chip. Please notice that pin one (1) is the closest to the notch on top of the chip. The first thing we'll do is to connect power to the chip (remember that you need to build two (2) of these to get a complete system) this is accomplished by connecting the positive wire of the battery lead to pin#1 one leg of R1 and R2 is soldered to pin#11. The other leg of R1 goes to pin 1 or to the d. C1 goes between pin 10 and ground. The timing capacitor or C2 goes between pins 2 and 3 of the chip. Pins 8 and 9 should be grounded to ground. Pin 14 is the output and this is where one leg of C4 (C3 goes on the other VCO) in series with R3 (the same goes for the other VCO) and to one lead of the speaker. The trimmer pots P1 to P10 should be grouped in groups of 5 pots each. The way you group it is by soldering one end of the pot to each other leaving the wiper and the other end free. | This end goes to pin 6 of the chip | _____________|_____________ / / / / / \ \ \ \ \ /<- /<- /<- /<- /<- \ | \ | \ | \ | \ | / | / | / | / | / | | | | | | | | | | | P1 P2 P3 P4 P5 And finally this is the way each key should be wired. diode he contact of the |--------- \------ key to Px ------>|-----| | diode | ----- --- Ground Blue Boxing Numbers (1-800'S) These numbers can be used to drop a trunk and will work with ANY switching system! In particular, these numbers allow you to box from DIGITAL (ESS/DMS) Electronic Switching Systems!!! Florida Scan Range (0600-0619) (0750-0905) (4600-4639) .874-0146 Golf Equipment - Fort Walton *874-0610 *874-0613 *874-0619 *874-0812 *874-0842 *874-0843 Modem *874-0844 *874-0890 .874-0891 *874-0897 *874-0898 *874-4600 *874-4602 .874-4603 Bear Archery - Gainesville .874-6478 American Sports, INC. - Havana South Carolina Scan Range (5900-6129) (6200-6209) .845-2471 Resort Hotel - Myrtle Beach .845-4369 Office Furniture - Florence *845-5918 *845-5922 .845-5927 Electronic Marine Equipment - Lake City .845-6011 Motel - South of the Border *845-6013 *845-6016 *845-6018 *845-6022 *845-6051 *845-6052 *845-6065 *845-6072 *845-6079 *845-6080 Kachunk *845-6084 Kachunk *845-6120 Chunk *845-6124 .845-6135 Resort - Hilton Head Island .845-8248 Invironments, INC. - Laural Bay Oregon .547-0251 Motel - Salem .547-2513 Merco Producst - Eugene .547-4741 Hotel - Ashland .547-7842 State Tourist Information - Salem Pennsylvania Scan Range (3600-3619) (3700-3709) *458-3600 .458-3602 Resort Hotel - State College (Click) *458-3605 *458-3608 *458-3610 *458-3613 *458-3615 *458-3617 *458-3619 *458-3700 *458-3705 *458-3709 .458-3735 Clearfield Hardware - Clearfield (Click) South Dakota .843-8319 Hotel - Rapid City Texas Scan Range (0800-0809) (3600-3609) (4400-4479) *858-0800 (Click) *858-4402 .858-4403 Motel - Amarillo *858-4404 *858-4410 *858-6666 _____________________________________________ ! ! ! Introducing the: ! ! ! ! BBBBB EEEEE IIIII GGGGG EEEEE ! ! B B E I G E ! ! BBBBB EEE I G GGG EEE ! ! B B E I G G E ! ! BBBBB EEEEE IIIII GGGGG EEEEE ! ! ! ! BBBBB OOOOO X X ! ! B B O O X X ! ! BBBBB O O XX ! ! B B O O X X ! ! BBBBB OOOOO X X ! ! ! ! - Construction and Use - ! ! ! ! Invented and Written by: ! ! ! ! The Exterminator ! !_____________________________________________! INTRODUCTION Have you ever wanted a lineman's handset? Surely every phreak has at least once considered the phun that he could have with one. After searching unlocked phone company trucks for months, we had an idea. We could build one. We did, and named it the "Beige Box," simply because that is the color of ours. In the following file, we will give complete instructions for the con- struction and use of a Beige Box. CONSTRUCTION The construction is very simple. First, you must understand the concept of the device. In a modular jack, there are four wires. These are red, green, yellow, and black. For a single line telephone, however, only two matter: the red (ring) add green (tip). The yellow and black are not neces- sary for this project. A lineman's handset only has two clips on it: the ring and the tip. You will need a phone (we recommend a touch-tone) with a modular plug, a modular jack, and two large alligator clips (preferably red and green, respec- tively). Take the modular jack and look at the bottom of its casing. There should be a gray jack with four wires (red, green, yellow, and black) leading out of it. To the end of the red wire attach a red alligator clip. To the end of the green wire attach a green alligator clip. The yellow and black wires can be removed, although I would only set them aside so that you can use the modular jack in future projects. Now insert your telephone's modular plug into the modular jack. That's it. This particular model is nice because it can be inexpensive, uses common parts that are readily available, is small, is lightweight, and does not re- quire the destruction of a phone. USES There are many uses for the Beige Box. However, before you can use it, you must know how to attach it to its output device. This device can be any of several Bell switching apparatus that include terminal sets (i.e., remote switching centers, bridging heads, cans, etc.) To open most Bell Telephone switching apparatus, you must have a 7/16 inch hex driver. This piece of equipment can be picked up at your local hardware store. With your 7/16 hex driver, turn the security bolt(s) approximately 1/8 of an inch counter-clock- wise and open. If your output device is locked, then you must have some knowledge of destroying and/or picking locks. However, we have never encoun- tered a locked output device. Once you have opened your output device, you should see a mass of wires connected to terminals. On most of your output devices, the terminals should be labeled "T" (Tip -- if not labeled, it is usually on the left) and "R" (Ring -- if not labeled, it is usually on the right). Remember: Ring - red - right. The "Three R's" -- a simple way to remember which is which. Now you must attach the red alligator clip (ring) to the "R" (ring) termi- nal. Attach the green alligator clip (tip) to the "T" (tip) terminal. NOTE: If instead of a dial tone you hear nothing, re-adjust the alligator clips so that they are not touching each other or other terminals. Also make sure that they are firmly attached. By this time you should hear a dial tone. Dial ANI and find out the number that you are using (you wouldn't want to use your own). Here are some practical applications: o Eavesdropping o Long distance, static-free phone calls to phriends o Dialing direct to Alliance Conferencing (also static free) o Phucking people over o Bothering the operator at little risk to yourself o Blue Boxing with a greatly reduced chance of getting caught o Anything at all that you want, since you are an extension on that line Eavesdropping: To be most effective, first attach the Beige Box and then your phone. This eliminates static caused by connecting the box, therefore reducing the potential suspicion of your victim. When eavesdropping, it is always best to be neither seen nor heard. If you hear someone dialing out, do not panic; but rather hang up, wait, and pick up the receiver again. The person will either have hung up or tried to complete their call again. If the latter is true, then listen in, and perhaps you will find information worthy of blackmail! If you would like to know who you are listening to, after dialing ANI, pull a CN/A on the number. Dialing Long Distance: This section is self-explanatory, but don't forget to dial a "1" before the NPA. Dialing Direct to Alliance Conferencing: Simply dial 0-700-456-1000 and you will get instructions from there. I prefer this method over PBXs, since PBXs often have poor reception and are more difficult to come by. Phucking People Over: This is a very large topic for discussion. Just by using the other functions described, you can create a large phone bill for the person (they will not have to pay it, but it is a hassle for them). In addition, since you are an extension of the person's line, leave your phone off hook, and they will not be able to make or receive calls. This can be extremely nasty be- cause no one would suspect the cause of the problem. Bothering the Operator: This is also self-explanatory and can provide hours of entertainment. Simply ask or say things to her that are offensive and you would not like traced to your line. This also corresponds with the previous described section, Phucking People Over. After all, guess who's line it gets traced to? He he he... Blue Boxing: See a file on Blue Boxing for more details. This is an especially nice feature if you live in an ESS-equipped prefix, since the calls are, once again, not traced to your line. POTENTIAL RISKS OF BEIGE BOXING Overuse of the Beige Box may cause suspicions within the Gestapo, and result in legal problems. Therefore, I would recommend that you: o Use more than one output device o Choose a secluded spot to do your Beige Boxing o Keep a low profile (i.e., do not post under your real name on a public BBS concerning your accomplishments) o In order to make sure that the enemy has not been inside your output device, I recommend that you place a piece of trans- parent tape over the opening of your output device. There- fore, if it is opened in your absence, the tape will be dis- placed and you will be aware of the fact that someone has been intruding upon your territory. DISCLAIMER Since this file has been written for information purposes only, the authors cannot and will not take any responsibility for the construction and use of the Beige Box. * - * - * + * - * - * * * * How to build a BLACK BOX * * * *************************************** (Also known as mute box) To all who dare -- What is a BLACK BOX? A BLACK BOX is a device that is hooked up to your fone that fixes your fone so that when you get a call, the caller doesn't get charged for the call. This is good for calls up to 1/2 hour, after 1/2 hour the Fone Co. gets suspicious, and then you can guess what happens. The way it works: What this little beauty does is keep the line voltage from dropping to 10v when you answer your fone. The line is instead kept at 36v and it will make the fone think that it is still ringing while your talking. The reason for the 1/2 hour time limit is that the Fone CO. thinks that something is wrong after 1/2 an hour of ringing. All parts are available at Radio Shack. Using the least possible parts and arrangement, the cost is $.98. And that is parts for two of them! Talk about a deal! If you want to splurge then you can get a small PC board, and a switch. There are two schematics for this box, one is for most normal fones. The second one is for fones that don't work with the first. It was made for use with a Bell Trimline touch tone fone. ** Schematic 1 for most fones ** ** LED ON: BOX ON ** FROM >--------------------GREEN-> TO LINE >--! 1.8k LED !---RED--> FONE !--/\/\/\--!>--! ! ! ------>/<------- SPST Parts: 1 1.8k 1/2 watt resistor 1 1.5v LED 1 SPST switch You may just have two wires which you connect together for the switch. ** Schematic 2 for all fones ** ** LED ON: BOX OFF ** FROM >---------------GREEN-> TO LINE >------- ---RED--> FONE ! LED ! -->/<--!>-- ! ! ---/\/\/--- 1.8k Parts: 1 1.8k 1/2 watt resistor 1 1.5v LED 1 DPST switch Here is the PC board layout that I recommend using. It is neat and is very easy to hook up. Schematic #1 Schematic #2 ************** **************** * * * ------- * * ----- * * ! ! * * ! ! * * ! * * RESISTOR ! * * ! ! ! * * ! ! * * ! ! / * * -------- ! * * ! ! \ * * ! ! * * ! ! / * * --SWITCH-- * * ! ! \ * * ! ! * * ! ! / * * ! ! * * ! ! ! * * ! ! * * ! !-! * ***!******!*** ***!********!*** *** These last few lines were inserted by hypothesis! --- The Director *** Once you have hooked up all the parts, you must figure out what set of wires go to the line and which go to the fone. This is because of the fact that LED's must be put in, in a certain direction. Depending on which way you put the LED is what controls what wires are for the line & fone. How to find out: Hook up the box in one direction using one set of wires for line and the other for fone. *NOTE* For Model I switch should be OFF. *NOTE* For Model ][ switch should be set to side connecting the LED. Once you have hooked it up, then pick up the fone and see if the LED is on. If it is, the LED will be lit. If is doesn't light then switch the wires and try again. Once you know which are which then label them. *NOTE* - If neither directions worked then your switch was in the wrong position. Now label the switch in its current position as BOX ON. How to use it: The purpose of this box is not to people who call you so it would make since that it can only be used to receive calls. When the box is *ON* then you may only receive calls. Your fone will ring like normal and the LED on the box will flash. If you answer the fone now, then the LED will light and the caller will not be charged. Hang up the fone after you are done talking like normal. You will not be able to get a dial-tone or call when the box is on, so turn the box *OFF* for normal calls. I don't recommend that you leave it on all the time, as you don't want it to answer when Ma Bell calls! BLACK BOX PLANS HERE IS HOW YOU CONSTRUCT A BLACK BOX. WHEN YOUR PHONE IS JUST SITTING THERE DOING NOTHING THE VOLTAGE THROUGH THE PHONE LINE IS ZERO. THEN IF SOMEONE CALLS YOU (FOR SOME STRANGE REASON) AND THE PHONE IS RINGING. THE VOLTAGE JUMPS TO 48 VOLTS WHICH TELLS MA BELL TO STAND BY IF YOU SHOULD PICK UP SO SHE CAN BILL YOU. WHEN YOU EVENTUALLY PICK UP THE PHONE, THE VOLTAGE DROPS TO 10 VOLTS AND THE BILLING STARTS. WHAT A BLACK BOX DOES IS KEEPS THE THE VOLTAGE AS 36 VOLTS, THEREFORE THE INCOMING CALLER NEVER GETS BILLED (INGEINIOUS) THE ORIGINAL BLACK BOX WAS CREATED BY AN EX-BELL EMPLOYEE WHO WENT BY THE NAME "CAPTAIN CRUNCH". HE GOT HIS NAME FROM THOSE LITTLE WHISLES YOU GOT IN BOXES OF CAPTAIN CRUNCH BECAUSE THEY EMITED A TONE THAT WAS EQUAL TO A COIN.CAPTAIN CRUNCH JUST ANNOUNCED HIS RETIREMENT FROM PHREAKING WHEN HE WAS RELEASED FROM A CALIFORNIA JAIL. HE WAS CAUGHT WITH A BLUE BOX. CONSTRUCTION OF A BLACK BOX 1] A 36 VOLT ZENER DIODE. 2] A CERAMIC OR MYLAR CAPACITOR OF 0.1 MICROFARAD. 3] A ELECTROLYTIC CAPACITOR OF 1.0 MICROFARAD. YOU CAN GET THESE AT YOUR LOCAL RADIO SHACK DEALER. FIRST YOU HAVE TO OPEN UP YOUR PHONE.YOU SHOULD NOTICE THREE WIRES COMING IN FROM THE BACK OF THE PHONE, A GREEN, RED, AND YELLOW. MOST OF THE TIME THEY CAN DIFFER.DON'T WORRY ABOUT THE YELLOW WIRE, WE WILL NOT BE USING THIS.YOU WILL NEED TO FIND THE MOST POSITIVE OF THE REMAINING TWO WIRES.(ALMOST ALWAYS THE GREEN WIRE). NOW CONNECT THE BANDED END OF THE ZENER DIODE TO THE MORE POSITIVE OF THESE TWO WIRES. "IN SERIES". YOU HAVE JUST COMPLETED THE FIRST STEP. FOR THE SECOND STEP YOU NEED A CERAMIC OR MYLAR CAPACITOR OF 0.1 MICROFARAD. YOU CONNECT THIS "IN PARRALLEL" ACROSS THE DIODE. THIS IS NEEDED TO ALLOW THE DIODE TO PASS VOICE SIGNALS. NOW FOR THE FINAL STEP TAKE YOUR ELECTROLYTIC CAPACITOR OF UP TO ONE MICROFARAD WITH ITS '+' END CONNECTED TO THE BANDED END OF THE DIODE AND THE OTHER END SHOULD BE CONNECTED TO THE ANODE END OF THE DIODE. MA BELL IS NOT TOTALLY OBLIVIOUS TO THIS.IF THE PHONE RINGS FOR ABOUT A HALF-HOUR THEY WILL THINK SOMETHING IS WRONG AND BILL YOU ANYWAY. WHEN USING A BLACK BOX,YOUR PHONE WILL CONTINUE RING EVEN THOUGH YOU PICKED IT UP. YOU HAVE TO MAKE A SWITCH TO CONNECT ONE OF THE RINGER WIRES.THAT WILL SHUT IT OFF. THAT'S IT! HAVE PHUN!!!!!!!!!!!!!!!! <><><><><><><><><><><><><><><><><><><><><><><><><><<><> /-/-/-/-/-/-\-\-\-\-\-\ <:-\-Black Box Plans-/-:> \-\-\-\-\-\-/-/-/-/-/-/ (>Introduction<) What is a BLACK BOX? A BLACK BOX is a device that is hooked up to your phone that fixes your phone so that when you get a call, the caller doesn't get charged for the call. This is good for calls up to 1/2 hour, after 1/2 hour the Gestapo (the you can guess what happens. What this little beauty does is keep the line voltage from dropping to 10v when you answer your phone. The line is insted kept at 36v and it will make the phone think that it is still ringing while your talking. The reason for the 1/2 hour time limit is that the Gestapo thinks that something is wrong after 1/2 an hour of ringing. (I mean, come on) (>Phone Modification Instructions<) All parts are available Radio Shack. Using the least possible parts and arrangement, the cost is $0.98; and that is parts for two of them! Talk about a deal! If you want to splurge then you can get a ®+±±PC board, and a switch. There are two s ** Schematic 1 for most fones ** ** LED ON: BOX ON ** FROM >--------------------GREEN-> TO LINE >--! 1.8k LED !---RED--> FONE !--/\/\/\--!>--! ! ! ------>/<------- SPST Parts: 1 1.8k 1/2 watt resistor 1 1.5v LED 1 SPST switch *You may just have two wires which you connect together for the switch. ** Schematic 2 for all fones ** ** LED ON: BOX OFF ** FROM >---------------GREEN-> TO LINE >------- ---RED--> FONE ! LED ! ---->/<--!>-- ! ! ---/\/\/--- 1.8k Parts: 1 1.8k 1/2 watt resistor 1 1.5v LED 1 DPST switch Here is the PC board layout that I recommend using. It is neat and is very easy to hook up: Schematic #1 Schematic #2 ************** **************** * * * ------- * * ----- * * ! ! * * ! ! * * ! * * RESISTOR ! * * ! ! ! * * ! ! * * ! ! / * * -------- ! * * ! ! \ * * ! ! * * ! ! / * * --SWITCH-- * * ! ! \ * * ! ! * * ! ! / * L * ! ! * F L * ! ! ! * F I>RED- -RED>O I>RED- ---RED>O N>-----GREEN---->N N>-----GREEN------>N E * h * E E * * E ************** **************** Once you have hooked up all the parts, you must figure out what set of wires go to the line and which go to the fone. This is because of the fact that LED's must be put in, in a certain direction. Depending on which way you put the LED is what controls what wires are for the line & fone. In order to find out, hook up the box in one direction using one set of wires for line and the other for phone. *NOTE* For Model I switch should be OFF. *NOTE* For Model ][ switch should be set to side connecting the LED. Once you have hooked it up, then pick up the fone and see if the LED is on. If it is, the LED will be lit. If is doesn't light then switch the wires and try again. Once you know which are which then label them. *NOTE* - If neither directions worked then your switch was in the wrong position. Now lable the switch in its current position as BOX ON. (>Black Box Usage<) The purpose of this box is not to people who call you so it would make sense that it can only be used to recieve calls. When the box is *ON* then you may only recieve calls. Your phone will ring like normal and the LED light on the box will flash. When you answer the fone the LED will light and the caller will not be charged. Hang up the fone after you are done like normal. You will not be ab [=-=================================-=] [=-=] Presenting: [=-=] [=-=] The !BLAST! Box [=-=] [=-=] An *ORIGINAL* Box, [=-=] [=-=] || [=-=] [=-=] /\/\/\/\ [=-=] [=-=================================-=] Ever want to really make yourself be heard? Ever talk to someone on the phone who just doesn't shut up? Or just call the operator and pop her eardrum? Well, Up until recently it has been impossible for you to do theese things. That is, unless of course you've got a blast box. All a blast box is, is a really cheap amplifier, (around 5 watts or so) connected in place of the microphone on your telephone. It works best on model 500 AT&T Phones, and if constructed small enough, can be placed inside the phone. Construction: Construction is not really important. Well it is, but since I'm letting you make your own amp, I really don't have to include this. Usage: Once you've built your blast box, simply connect a microphone (or use the microphone from the phone) to the input of the amplifier, and presto. There it is. Now, believe it or not, this device actually works. (At least on crossbar.) It seems that illinois bell switching systems allow quite alot of current to pass right through the switching office, and out to whoever you're calling. When you talk in the phone, it comes out of the other phone (again it works best if the phone that you're calling has the standard western electric earpiece) incredibly loud. This device is espicially good for PBS Subscription drives. Have Phun, and don't get caught! %+%+%+%+%+%+%+%+%+%+%+%+%+ %HOW TO BUILD A BLOTO BOX+ %+%+%+%+%+%+%+%+%+%+%+%+%+ Finally, it is here! What was first conceived as a joke to fool the inncoent phreakers around America has finally been concieved by the one phreak who is the expert on lines and voltage: The Traveler. Other boxes by the Traveler include the White Gold Box, the Aqua Box, The Diverti Box, and the Cold Box. All of those plans will soon be available in a BBS/AE near you! Well, for you people who are unenlightened about the Blotto Box, here is a brief summery of a legend. --*-=> The Blotto Box <=-*-- For years now every pirate has dreamed of the Blotto Box. It was at first made as a joke to mock more ignorant people into thinking that the function of it actually was possible. Well, if you are The Voltage Master, it is possible. Originally conceived by King Blotto of much fame, the Blotto Box is finally available to the public. NOTE: The Traveler can not be responcable for the information disclosed in the file! This file is strictly for informational purposes and should not be actually built and used! Usage of this electronical impulse machine could have the severe results listed below and could result in high federal prosecution! Again, The Traveler TAKES NO RESPONCABILITY! All right, now that that is cleared up, here is the basis of the box and it's function. The Blotto Box is every phreaks dream... you could hold AT&T down on it's knee's with this device. Because, quite simply, it can turn off the phone lines everywhere. Nothing. Blotto. No calls will be allowed out of an area code, and no calls will be allowed in. No calls can be made inside it for that matter. As long as the switchhing system stays the same, this box will not stop at a mere area code. It will stop at nothing. The electrical impulses that emit from this box will open every line. Every line will ring and ring and ring... the voltage will never be cut off until the box/ generator is stopped. This is no 200 volt job, here. We are talking GENERATOR. Every phone line will continue to ring, and people close to the box may be electricuted if they pick up the phone. But, the Blotto Box can be stopped by merely cutting of the line or generator. If they are cut off then nothing will emit any longer. It will take a while for the box to calm back down again, but that is merely a superficial aftereffect. Once again: Construction and use of this box is not advised! The Blotto Box will continue as long as there is electricity to continue with. OK, that is what it does, now, here are some interesting things for you to do with it... --*-=> The Blotto Box Functions and Installation <=-*-- Once you have installed your Blotto, there is no turning back. The following are the instructions for construction and use of this box. Please read and heed all warnings in the above section before you attempt to construct this box. Materials: - A Honda portable generator or a main power outlet like in a stadium or some such place. - A radio shack cord set for 400 volts that splices a female plug into a phone line jack. - A meter of voltage to attach to the box itself. - A green base (i.e. one of the nice boxes about 3' by 4' that you see around in your neighborhood. They are the main switch boards and would be a more effective line to start with. or: A regular phone jack (not your own, and not in your area code! - A soudering iron and much souder. - A remote control or long wooden pole. Now. You must have guessed the construction from that. If not, here goes, I will explain in detail. Take the Honda Portable Generator and all of the other listed equiptment and go out and hunt for a green base. Make sure it is one on the ground or hanging at head level from a pole, not the huge ones at the top of telephone poles. Open it up with anything convienent, if you are two feeble that fuck don't try this. Take a look inside... you are hunting for color-coordinating lines of green and red. Now, take out your radio shack cord and rip the meter thing off. Replace it with the voltage meter about. A good level to set the voltage to is about 1000 volts. Now, attach the voltage meter to the cord and set the limit for one thousand. Plug the other end of the cord into the generator. Take the phone jack and splice the jack part off. Open it up and match the red and green wires with the other red and green wires. NOTE: If you just had the generator on and have done this in the correct order, you will be a crispy critter. Keep the generator off until you plan to start it up. Now, sauder those lines together carefully. Wrap duck tape or insultation tape around all of the wires. Now, place the remote control right on to the startup of the generator. If you have the long pole, make sure it is very long and stand back as far away as you can get and reach the pole over. NOTICE: If you are going right along with this without reading the file first, you sill realized now that your area code is about to become null! Then, getting back, twitch the pole/remote control and run for your damn life. Anywhere, just get away from it. It will be generating so much electricity that if you stand to close you will kill yourself. The generator will smoke, etc. but will not stop. You are now killing your area code, because all of that energy is spreading through all of the phone lines around you in every direction. Have a nice day! --*-=> The Blotto Box: Aftermath <=-*-- Well, that is the plans for the most devastating and ultimately deadly box ever created. My hat goes off to: King Blotto (for the original idea), Captain Xerox (for the suggestion about stadiums), and Modern s}}x (for the fact I was on his BBS when I thought of it. -------------------------- Blue Box Numbers: 0-700-456-1000 Teleconference (free, because you are the operator!) (Area code)-101 Toll Switching (Area code)-121 Local Operator (hehe) (Area code)-131 Information (Area code)-141 Rate & Route (Area code)-181 Coin Refund Operator (Area code)-11511 Conference operator (when you dial 800-544-6363) 800 Dialup Listings 1-800-345-0008 (6) 1-800-547-6754 (6) 1-800-245-4890 (4) 1-800-327-9136 (4) 1-800-526-5305 (8) 1-800-858-9000 (3) 1-800-437-9895 (7) 1-800-245-7508 (5) 1-800-343-1844 (4) 1-800-322-1415 (6) 1-800-437-3478 (6) 1-800-325-7222 (6) /-/ Vocabulary /-/ - Do not misspell except certain exceptions: phone -> fone freak -> phreak - Never substitute 'z's for 's's. (i.e. codez -> codes) - Never leave many characters after a post (i.e. Hey Dudes!#!#! - NEVER use the 'k' prefix (k-kool, k-rad, k-whatever) - Do not abbreviate. (I got lotsa wares w/ docs) - Never substitute '0' for 'o' (r0dent, l0zer). - Forget about ye old upper case, it looks ruggyish. All right, that was to relieve the tension of what is being drilled into your minds at the moment.. now, however, back to the teaching course. Here are some things you should know about phones and billings for phones, etc. LATA: Local Access Transference Area. Some people who live in large cities or areas may be plagued by this problem. For instance, let's say you live in the 215 area code under the 542 prefix (Ambler, Fort Washington). If you went to dial in a basic Metro code from that area, for instance, 351-0100, that might not be counted under unlimited local calling because it is out of your LATA. For some LATA's, you have to dial a '1' without the area code before you can dial the phone number. That could prove a hassle for us all if you didn't realize you would be billed for that sort of call. In that way, sometimes, it is better to be safe than sorry and phreak. The Caller Log: In ESS regions, for every household around, the phone company has something on you called a Caller Log. This shows every single number that you dialed, and things can be arranged so it showed every number that was calling to you. That's one main disadvantage of ESS, it is mostly computerized so a number scan could be done like that quite easily. Using a dialup is an easy way to screw that, and is something worth remembering. Anyways, with the caller log, they check up and see what you dialed. Hmm... you dialed 15 different 800 numbers that month. Soon they find that you are subscribed to none of those companies. But that is not the only thing. Most people would imagine "But wait! 800 numbers don't show up on my phone bill!". To those people, it is a nice thought, but 800 numbers are picked up on the caller log until right before they are sent off to you. So they can check right up on you before they send it away and can note the fact that you fucked up slightly and called one too many 800 lines. Right now, after all of that, you should have a pretty good idea of how to grow up as a good phreak. Follow these guidelines, don't show off, and don't take unnecessary risks when phreaking or hacking. -------------------------------------- ^ ^ ^ BOXING AROUND THE WORLD ^ ^ IN 10 EASY LESSONS OR LESS ^ ^ ^ ^ BY ^ ^ ^ ^ **MOB-RULES** ^ ^ ^ ^ WRITTEN ^ ^ For P-80 Systems ^ ^ ^ ^ ^ ^ ^ ^ ^ -------------------------------------- OK WELL THIS ARTICLE WILL DEAL WITH SOMETHING THAT THE PUBLIC IN GENERAL, INCLUDING EVEN THE MOST DIE HARD PHREAKERS,DONT KNOW.THE FIRST PART WILL DEAL WITH THE BACKGROUND KNOW-HOW ,THE SECOND PART WILL DEAL WITH THE TONES NEEDED.THE THIRD WILL DEAL WITH WHAT TO DO WITH THEM WHEN YOU HAVE THEM.THE FOURTH PART WILL BE THE THE CONCLUDING PART,ON THE AMERICAN PORTION. . FIRST LESSON THE WHAT THE HELL HE IS TALKING ABOUT PART. WELL THE WORD PHREAKING REALLY MEANS GETTING A CALL TO GO THROUGH AND NOT HAVING TO PAY FOR IT.THE REST OF THIS ARTICLE WILL USE THE TERM PHREAKER OR PHREAKING. WELL PHREAKING REALLY STARTED IN 1960 WHEN TWO MEN FOUND,IN THE BOTTOM OF THIER TELEPHONE COMPANY,A OLD,OLD,OLD TEC-MANUAL.IT HAD ALL THE INFO ON TELCO TERMINOLGY OF THAT DAY,AND THE SUCH,BUT THE BEST PART OF THE OLD MANUAL WAS,----THE TRUNCK TONES. THEY TOLD HOW TO,WHEN TO,WHAT SHOULD HAPPEN,AND THE SUCH.THAT FAITHFULL DAY BACK IN 1968,WAS THE DAWNING OF THE PHREAKER. . SECOND LESSON . OR . OK THAT HAPPENED SO LONG AGO WHAT ABOUT NOW,AND HOW CAN I PUT THAT OLD STUFF TO WORK FOR ME?? WELL YOU NEED ONE OF TWO THINGS 1-A COMPUTER CAPABLE OF PLAYING MUSIC. 2-A HOME MADE MEMORY REDIAL BLUE BOX. AND WELL SINCE,I GUESS,YOU ARE READING THIS OFF OF A BBS YOU ALREADY HAVE 1 SOOOOO PUT IT TO USE BUB!! THE TONES THAT MAKE UP A KEY. -------------------------------------- ^ ^ ^ (1) - 700 + 900 ^ ^ (2) - 700 + 1100 ^ ^ (3) - 900 + 1100 ^ ^ (4) - 700 + 1300 ^ ^ (5) - 900 + 1300 ^ ^ (6) - 1100+ 1300 ^ ^ (7) - 700 + 1500 ^ ^ (8) - 900 + 1500 ^ ^ (9) - 1100+ 1500 ^ ^ (0) - 1300+ 1500 ^ ^ (KP) - 1100+ 1700 ^ ^ (ST) - 1500+ 1700 ^ ^ (11) - 700 + 1700 ^ ^ (12) - 900 + 1700 ^ ^ (KP2)- 1300+ 1700 ^ ^ ^ ^ ^ ^ ALL FREQUENCIES GIVEN ARE IN HZ. ^ ^ ^ ^ ^ -------------------------------------- AND LEAST BUT NOT LAST THE MAGICICAL TONE,THAT DOES IT ALL,2600HZ. . THIRD LESSON . OR .WELL HELL DUDE KEEP GOING,CAUSE I'M . READY AND WILLING. OK SO YOUR JUST SITTING THERE LOOKING AT THIS DUMB PGM YOU MADE,WELL ENOUGH OF THE TECH INFO,NOW FOR THE HANDS ON. YOU MUST ALWAYS BEFORE A CALL GET INTO A TRUNK THIS TODAY CAN ONLY BE DONE BY CALLING A STEP-BY-STEP SWITCHING SYSTEM,AS OPPOSED TO CROSSBAR,ESS,OR DMS.FOR SAKE OF SIMPLICITY I WILL USE MONTREAL DIRECTORY ASSICTANCE. CALL ON YOU PHONE,(DTMF),TOUCH-TONES. 1-514-555-1212,WHEN YOU HEAR IT RING PLAY INTO THE PHONE 2600HZ.IF ALL GOES WELL YOU WILL HEAR KERCHINK KERCHUNK SLINCE.NOW AFTER YOU DO THIS NO MORE TOUCH TONES WILL BE USED. FOR YOUR FIRST TIME TRY 2600HZ WAIT 1 SEC AND KEY IN KP,ALL CALLS MUST START WITH KP AND END IN ST,YOUR FRIENDS AREA CODE AND # AND ST.NOW WAIT.IF ALL GOES WELL IT WILL RING AND YOUR FRIEND WILL ANSWER.BUT DON'T STAY ON TOO LONG. . FOURTH LESSON . OR . YEA BUT WHATS ALL THE HIDDEN STUFF . I HEAR ABOUT. OK SO YOU GOT THIS FAR AND ARE HUNGRY FOR MORE,WELL IF YOU ARE NOT THEN YOU WILL NEVER BE CLASSIFIED AS A PHREAKER BUT A LOSER. THIS SYSTEM HAS A GREAT MANY FILES ON JUST THAT SUBJECT SO LOOK THEM OVER.IF YOU READ SOMETHING ON ANOTHER GREAT FILE,AND DON'T UNDERSTAND IT,THEN YOU ARE MESSING WITH SOMETHING OUT OF YOU LEAGUE. GRADUALLY BUILD UP TO IT THEN YOU WILL NOT BE CONSIDERED A LOSER BUT A GREAT PHREAKER. YOU KNOW I STARTED 6-7 YEARS AGO AND I TOO HAD TO GRADUALLY BUILD UP TO IT, BUT NOT UNTILL A YEAR AGO THIS MONTH DID I HAVE AS MUCH FUN IN IT,AS YOU WILL.AS I AM WRITING THIS ARTICLE I STILL HAVE VISIONS OF ALL THE GOOD BBS'S THAT USED TO BE UP TO HELP NEW PHREAKS AND EXPERT PHREAKS,AND YOU KNOW WHAT I FEEL KINDA SORROWED THAT THEY ARE JUST A HANDFULL OF GOOD BBS'S AROUND FOR ALL THE FUTURE PHREAKS OF THE WORLD TO LEARN ON. -------------------------------------- THE FOLLOWING INFORMATION IS FOR ADVANCE TO EXPERT PHREAKERS ONLY!!! -------------------------------------- OK ENOUGH OF THAT OLD HAT HERE IS WHAT I MEANT ABOUT 'EVEN THE DIE HARD PHREAKS DON'T KNOW'. THIS WAS FOUND OUT ON OCT 10 1984 STRAIGHT FROM TELECOM AUSTRALIA. I WILL TELL YOU WHAT THE TONES ARE FOR THE CCITT #5 IS,WHICH BY THE WAY IS USED BY THE REST OF THE WORLD!! . FIFTH LESSON . OR HOW TO GET ON ANOTHER COUNTRIES TRUNK. OK FIRST HERE ARE THE FREQUENCIES -------------------------------------- ^ THE CCITT#5 FREQUENCIES ^ ^ ^ ^ ^ ^ (1) - 1380 + 1500 ^ ^ (2) - 1380 + 1620 ^ ^ (3) - 1500 + 1620 ^ ^ (4) - 1380 + 1740 ^ ^ (5) - 1500 + 1740 ^ - (6) - 1620 + 1740 ^ ^ (7) - 1380 + 1860 ^ ^ (8) - 1500 + 1860 ^ ^ (9) - 1620 + 1860 ^ ^ (0) - 1740 + 1860 ^ ^ (11) - 1380 + 1980 ^ ^ (12) - 1500 + 1980 ^ ^ (13) - 1620 + 1980 ^ ^ (14) - 1740 + 1980 ^ ^ (15) - 1860 + 1980 ^ ^ ^ ^ ^ ^ ALL FREQUENICIES GIVEN ARE IN HZ. ^ ^ ^ ^ ^ -------------------------------------- OK SO NOW YOU HAVE THE FREQUENCIES LETS GET ON A AUSTRALIAN TRUNK. YOU MUST FIRST CALL AN AUSTRALIAN # AND SINCE SOMETHING MAY GO WRONG FOR YOU EVERY ONCE IN A WHILE,I SUGGEST STRONGLY CALLING THROUGH AN EXTENDER THAT WILL ALLOW AN OVERSEAS CALL TO GO THROUGH. IF YOU HAVE ONE PUT IT TO USE NOW!! OK LETS ASSUME YOU DO.WELL CALL AN AUSTRALIAN # AND WHEN YOU HEAR IT RING PLAY THE MAGICAL TONES FOR THE CCITT EQUIPMENT,ITS 2400HZ+2600HZ,WHEN YOU DO THIS YOU WILL HEAR A SOUND WHICH WILL MAKE YOU THINK THAT THE CONNECTION WAS LOST,BUT IT WASN'T,IN FACT YOU ARE NOW ON AN AUSTRALIAN TRUNK!! AND BY THE WAY,THERE IS NOT A 10SEC TRUNK TIME OUT. . SIXTH LESSON . OR . THE KEY DEFINITONS PART. NOW YOU NEED TO KNOW THE PROPER PROCEDURE FOR THE CCITT LINE,AND WHAT KEYS DO WHAT. KEYS 0-12 ARE EXACTLY LIKE OURS!! KEY DEFINITIONS -------------------------------------- 13 IS LIKE OUR KP. 14 IS LIKE OUR KP2. 15 IS LIKE OUR ST. -------------------------------------- . SEVENTH LESSON . OR . THE PROPER PROCEDURE AND KEY USAGE . PART. OK NOW YOU KNOW ALL THE KEYS AND TONES SO NOW IT IS TIME TO LEARN HOW TO USE THEM. LETS ASSUME YOU WERE GOING TO CALL A # IN AUSTRALIA,THE PROCEDURE WOULD BE-> 13+5+15+0+AC+# WAIT ABOUT 2OR3 SECS AND ENTER 1(OPER) OR 2(SUBSCRIBER) OR 3(TEST CALL). AND DON'T WORRY ABOUT THE SOUNDS YOU HEAR AFTER YOU KEY IN THE TONES, BECAUSE ALL CCITT#5 TRUNKS ARE SUPPOSE TO ECHO BACK EACH CHAR YOU KEY IN!! NOW LETS CALL THE UNITED STATES. PROCEDURE WOULD BE-->13+2(A LIVE OPER) OR0(SUBSCRIBER)+AC+#+15. NOW IF IT COULDN'T BE PUT THROUGH, REORDER OR AN INTERNATIONAL RECORDING TRY THE ONLY INTERNATIONAL SENDER AUSTRALIA HAS,IT'S MONTREAL CANADA. YOU WOULD ENTER 14+COUNTRY CODE+2OR0+ AC+#+15. NOW THAT SHOULD BE ABOUT ALL THAT YOU NEED KNOW TO HAVE FUN ON ANOTHER COUNTRIES TRUNK. . EIGHTH LESSON . OR . THE CONCLUDING PART. WELL IF YOU ACCTUALLY LIVED IN AUSTRALIA YOU WOULD HAVE A BITCH OF A TIME BOXING,DUE TO THE FACT THAT THEY USE DC PHONES UNLIKE OUR AC PHONES. YOU SEE WHEN WE HANG-UP OUR PHONES THE PHONE SHOOTS A 2600HZ TONE TO TELL THE PHONE COMPANY THAT THE PARTY HAS HUNG-UP,BUT OVER THERE THEY JUST REMOVE THE GROUND,OR THE NEGATIVE SIDE OF THE LINE,SO THERE ARE NO TONES LIKE OURS.IF YOU ARE SAYING HEY YOU MUST BE WRONG I KNOW SUCH AND SUCH WHO LIVES THERE AND BOXES ALL THE TIME,WELL YOUR PARTIALLY RIGHT.THEY DO,OR AT LEAST THEY DID.IN THE PAST FEW YEARS A CALL TO THE STATES COST THEM ABOUT 20-30 A MIN.WHICH EQUALS ABOUT 25-40$ OUR MONEY.BUT THEY DID ONE UP ON THIER TELECOMM,THIER LIKE THE OLD A.T.T. MA-BELL,YOU SEE THEY WOULD SHORT HAUL THIER CALLS TO THE STATES.WHAT THEY WOULD DO IS CALL NEW ZEALAND AND THEN BLAST THE 2400+2600HZ SIGNAL AND BOOM THEY WOULD BE PAYING FOR A CALL TO NEW ZEALAND,THE COST IS LIKE CALLING FROM NY TO LA HERE,A SUBSTANIAL DIFFERENCE BUT YOU SEE THAT IS NOT SO ANYMORE. THE COST IS ABOUT THE SAME,$1.00 DIFFERENCE A MIN,SO AUSTRALIANS DON'T REALLY NEED TO BOX ANYMORE,AND THEY DON'T!!WELL I HAVE TRIED TO HELP THOSE WHO ARE NEW THIS FIELD AND THE OLD TIMERS IN IT TOO,WITH THIS ARTICLE. I HOPE THAT AT LEAST ONE LESSON HELPS SOME OF YOU OUT THERE!! I WISH TO THANK THE FOLLOWING. TELECOM AUSTRALIA A.T.T. WHICH WITHOUT THIER LINES I COULD NEVER HAVE HAD AS MUCH FUN IN THIS FIELD,OR LEARNED SO MUCH ABOUT THE WORLD! /-/-/-/-/-/-\-\-\-\-\-\ <:-\-Brown Box Plans-/-:> \-\-\-\-\-\-/-/-/-/-/-/ (>Introduction<) This is a fairly simple modification that can be made to any phone. All it does is allow you to take any 2 lines in your house and create a party line. So far I have not heard of any problems with it from my friends that have set one up and I have not had any either. There is one thing that you will notice when you are one of the two people who is called by a person with this box. The other person will sound a little bit faint. I could overcome this with some amplifiers but then there wouldn't be very many of these boxes made. I think that the convenience of having two people on line at any one time will make up for the minor volume loss. (>Phone Modification Instructions<) Here is the diagram: KEY:___________________________________ ! PART ! SYMBOL ! ----------------------------------- !BLACK WIRE ! * ! !YELLOW WIRE ! = ! !RED WIRE ! + ! !GREEN WIRE ! - ! !SPDT SWITCH ! _/_ ! ! _/_ ! !VERTICAL WIRE ! | ! !HORIZONTAL WIRE ! _ ! ----------------------------------- * = - + * = - + * = - + * = - + * = - + * ==_/_- + *******_/_++++++ | | | | | | |_____PHONE____| In some houses the black and yellow are already wired in others you will have to go out to your box and rewire it. A good way to figure out which line is which is to take the phone you are looking for off the hook. Then you only need to take the red and green wires entering your phone and hook them to the different pairs of red and green going into the house. You can't hurt any- thing in the phone or telephone by probing. When you find the pair that you want take the black from your line and attach it to the red of the other line then take the yellow and attach it to the green line. Now you are all set to go. For people with rotary phones you can have one person call you then place the second call out to the other person. Though not a phreakers tool, the brown box can be phun. Written by The Doc & Edited by 13th Floor Enterprises /=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\ /=\ /=\ /=\ HOW TO MAKE YOUR FONE INTO A /=\ /=\ /=\ /=\ BUD BOX /=\ /=\ /=\ /=\ Written BY: /=\ /=\ /=\ /=\ DR. D-CODE & THE PIMP /=\ /=\ /=\ /=\ THE SLAUGHTERED CHICKEN /=\ /=\ 212/Choke-IT /=\ /=\ /=\ /=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\ This box is quite similar to a beige box, except this is a portable unit. It is extremely handy for free voice calls and tapping a near by house's line. It's really easy to make so don't worry about it (unlike a blue box!). MATERIALS: 2 Alligator clips One piece fone or normal fone (one piece is easier!) Soldering iron and some solder Some good wire PROCEDURE 1) Cut the wire that connects the fone to the wall. Inside there should be 4 colored wires. Yellow, red, green, and black. If the wires are not colored, no need to get worried. The two in the middle are red & green. Those are the two you need. 2) Make sure to keep about 1-2 feet of this wire connected to the fone unless you want to use the other wire listed above. Now solder one alligator clip to the green wire, and one the red. 3) If you're using the other wire, strip the ends and solder one end to of each to the red and green on the fone, and one end to an alligator clip. 4) Go to a near by house and locate the little gray box. It's simple to find, look by the gas meter. It should have the BELL logo on it. 5) To open this thing, put your hand underneath it and hit upward. You should get contact with the bottom edge of it. 6) Now it should come open nice and easy. Look inside and you will see five screws in this pattern: * * * * * 7) The screw in the middle and the two on the left do nothing. (you may want to check the two on the left, some people have a second line hooked up to these two.) All you need to worry about are the two on the right. The one in the top right-hand corner is usually the green, and the one in the bottom right-hand corner is usually the red. 8) Clip an alligator clip to the corresponding terminals. (red to red, the green to green.) You should get a dial tone. If you don't, switch the alligator clips around. If you still don't get a dial tone (or someone's conversation!) then the line has probably been disconnected or the fone is off the hook. IDEAS OF USE FOR THE BUD BOX Get a lot of wire and run it into your house. Then you'll be an extension of that line. The fone will ring and you can listen to everything that's going on the that line. You can call direct to any place using normal BELL service (gasp!). i.e.: 1-702-831-4263. The bill will be not be charged to you. It will be charged to your neighbors (or whoever.) ********************* * The Busy Box * * by * * - Black Death - * ********************* - Disclaimer - This file is intended for informational purposes only, and should not be constructed. It Should definately not be used on another person's fone line without their consent. ------------------------------------------------------------------------------- Ok, Now you're really pissed. The Neighborhood Lamer has gone one step too far this time. It's time for the Busy Box. 1) What is The Busy Box? The Busy Box is the Simplest Box ever created. It is attached to the outside of the person's house, in their telephone box. It Makes it So that When any Fone inside That house is Picked up, No dial Tone is heard, and no Calls can be Received, or Sent. This is Good for Lame BBS's as They Tend not to call out much, and it will remain Undetected for a longer Period of Time. 2) Sounds Great! What do I need? A) One Phone Cord - 5 Inches or so B) Alligator Clips (Optional) 3) Wow! That's it? Tell me More! How do I set It Up? Well, Take your phone cord, and remove the Outer insulation. Now you should have 4 wires inside of it, Red, Green, Black, And Yellow. All you need for most things are Green and Red, so save those. Take either the Black or The Yellow and strip about 3 Inches with a wire stripper or a Knife. Now cut off 3 inches of Uninsulated wire and, voila, you have a really thin wire. Now, take this wire, and go to your neighbors back yard. Look for Their Power Box, Near it should be a small grey (or beige, or some ugly color) box with the little Bell on it. Open this up (it should come right off, if not, use a 7/15 Hex Driver) Now inside you should find four more pegs. Look for the Pegs with a Green or Red wire coming out of them. If you have a Beige Box, hook it up to Make sure there Is a Dial Tone. If therre is, Tie one end of your small wire to the peg with the Green Wire coming out of it, and another to the one with the Red coming out of it. Now use your beige box on it again, there should be no dial tone, and pressing buttons should be ineffective. Congratulations, you've disabled their fone line. Something you might want to try is to make the small wire longer, and stuff it in to the back of the box where there is a jungle of wires, so it will be more unnoticable. The more discreet, the better. - Some Pro's and Con's - Pro's - Very Effective - Any Idiot Could Build it - Very Inexpensive - Easy to Install Hard to Detect source of problem Con's - Easy to Detect that there -IS- a problem (No dial tone when receiver is picked up) If anyone knows how to busy the line out, and leave a dialtone, Please let me know This phile Was writen/Designed at The Unholy Temple By Black Death If you have any problems building this - You're an idiot. Sell your modem and buy a life. However, if ya just want to say "Hi" or get the Latest H/P Filez, Contact me on My board The Unholy Temple --- [408] 249-5405 or any of your favorite H/P boards. Have phun, and don't electrocute yourself. The Charging Box (c) Stinky Pig Productions ---------------- -------------------------- What it does: The Charging Box is used to indicate when a call is being charged for and when it is not. Once installed, the box has two lights, a green and a red. Green means free and red shows that you are being stung by BT! Components: 1 x green LED 1 x circuit board 1 x red LED 2 x 10K ohm (1/4 watt) resistors 2 x short lengths of wire 2 x small bulldog clips Circuit Diagram: | Line | | (50v) | |------ ------| | | |-----[]------O------| | | |-----[]------O------| Where [] is a resistor and O is an LED. NB. IMPORTANT! One LED should have it's anode towards the resistor and the other should have it's cathode towards the resistor. Connection: Build that onto the board and connect the two points marked line to the wire, with the bulldog clips at the end. The box should now be connected to the line in parallel with the phone. Operation: When the line is opened (Ie. the phone lifted) the green LED will light (if the read one does then just reverse the polarity of the box). Dialling numbers (by pulse) will cause the green LED to flicker but while you are making free calls it should never go out and the red LED will not light. As soon as the exchange starts charging for your call, the green LED will go out and the red LED glow. How it works: As the LEDs are in opposite directions, only one can light depending on the polarity of the current supply. This is exploited when the exchange begins charging as the polarity of the line is reversed. ________________________________ | | | Making Your Phone | | Into a Cheesebox | | | |________________________________| A Cheesebox (named for the type of box the first one was found in) is a type of box which will, in effect, make your telephone a Pay-Phone. This is a simple, modernized, and easy way of doing it. Inside Info: These were first used by bookies many years ago as a way of making calls to people without being called by the cops or having their numbers traced and/or tapped. ------------------------------------------------------------------------------ How To Make A Modern Cheese Box You will need: 1 Call Forwarding service on the line 1 Set of Red Box Tones The number to your prefix's Intercept operator(do some scanning for this one) How To: ------- After you find the number to the intercept operator in your prefix, use your call-forwarding and forward all calls to her. This will make your phone stay off the hook (actually it now waits for a quarter to be dropped in). You now have a cheese box. In Order To Call Out On This Line: You must use your Red Box tones and gener- ate the quarter dropping in. Then you can make phone calls to people. As far as I know, this is fairly safe, and they do not check much. ------------------------------------------------------------------------------ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \[____________________________[_ \ / \[ The Chrome Box [_ A Portable Self-Contained Device \[ 14-JUN-88 [_ / to Manipulate Traffic Signals \ \[ Outlaw Telecommandos [_ / by Remote Control \ \[ Modem Free Earth [_ / \ \[\\\\\\\\\\\\\\\\\\\\\\\\\\\\[_ -=p*p=- _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Emergency vehicles in many cities are now using devices called OptoComs. OptoComs are a system of sensors on traffic lights that detect a pattern of flashes from vehicle-mounted strobe lights. This flash pattern varies from city to city depending on the manufacturer of the equipment used. Often the sensors are installed only at major intersections. Nevertheless, the Chrome Box, which simulates these strobe patterns can often be used to give your car the same priority as an ambulance, paramedic van, firetruck or police car. Because of the varying patterns on different systems this phile will outline a general procedure for making the Chrome Box. Decoding Flash Patterns: First, you need to observe an emergency vehicle in action. You can wait until you encounter one by chance, running out to see when you hear a siren, or when you pull over in your car to let one pass by. You might wait near a fire station for the next emergency to occur. Or, if you are very impatient, you can summon one by calling in a false alarm (not recommended in areas with limited services - that could divert attention from a real emergency). If the OptoComs in your area are the kind with a pattern of single flashes at a steady rhythm, you have merely to buy a strobe light at Radio Shack & adjust the flash rate until you can induce a traffic light to change. If the flash pattern is more complex, you can videotape the emergency vehicle & then play back the tape in single-frame mode, counting the number of frames between each flash. Each video frame is 1/30 of a second, using this you can calculate the time between flashes in the pattern. Another way is to count the number of flashes (or flash-groups) in one minute and use that to compute the rate. Counting video frames will give you a good idea of the spacing of the flashes in a complex pattern. For really accurate information, call the fire station & ask them, or write to the manufacturer for a service manual, which will include a schematic diagram that you can use to build one. A good cover story for this is that you are a consultant & one of your clients asked you to evaluate Optocom systems, or you could pose as a free-lance journalist writing an article. Modifying the Strobe Light: You may not have to modify the strobe at all. But if you need a faster flash rate than your strobe allows, open it up & find the large capacitor inside. Capacitors are marked in microfarads, abbreviated as mf,mfd or ufd. By replacing the capacitor with one of the same voltage-rating (usually 250 volts or more) and a SMALLER value in microfarads, you can increase the flash rate. Halving the microfarads doubles the rate. The other component that can be changed is the potentiometer (the speed control device with the knob on it). Using a smaller value (measured in ohms or Kilohms, abbrevaited with the greek letter 'omega' or the letter K) will speed up the strobe. There may also be a resistor (small cylinder with several colored stripes on it, and wires coming out of each end). Replacing this resistor with one of smaller value will also speed up the strobe. To generate a complex pattern, you will either have to design and build a triggering circuit using IC chips, or rig up a mechanical device with a multiple-contact rotary switch and a motor. It HAS been done. To modify the strobe for mobile operation the simplest thing is to get a 110-volt inverter that will run off of a car battery by plugging into the cigarette lighter & run the strobe from that. Or, you can figure out (or find in a hobby electronics magazine) a strobe circuit that will run from batteries. Battery-powered strobes may also be availble, either assembled or as kits. Stealth Technology: Most light sensors and photocells are more sensitive in the infrared area of the light spectrum. Infrared (IR) is invisible to the human eye. Putting an infrared filter over the strobe light may allow the Chrome Box to operate in traffic undetected by police or other observers. IR filters can be obtained from military surplus sniperscope illuminators, or from optical supply houses like Dow-Corning or Edmunds Scientific Co. Using the Chrome Box: Mounted on your car, the Chrome Box can guarantee you green lights at major intersections in cities that have OptoComs. Handheld Chrome Boxes may be used to create gridlock by interfering with the normal flow of traffic. If you have access to a window overlooking a traffic light, you can play pranks by switching the signals at inappropriate moments, or you can plug the strobe into an exposed outlet at a laundromat or gas station. Some Decoded Patterns: Torrance, California Standard large Radio Shack strobe lights are used. Moderately fast rate. * * * * * * * * Manhattan Beach,CA Flash-pairs in a 4:1 ratio, at a rate of 2 flash-pairs per second. * * * * * * * * <------ 1 sec -----> ****************************************************************** * Please add any new patterns or info you discover to this File * ****************************************************************** Thanks to those who posted observations on the South Bay WWIV's. --------------------------------------- CLEAR BOX The idea for the Clear box comes from an article in the newsletter 2600. The clear box works on 'post pay' coin phones, pay phones that require money only after the connection has been made. The way this works is: After the connection is made the mouthpiece of the phone is muted but not the ear- piece, free calls to dial-it services can be made with these phones. In order to talk to the person you called without paying (NOTE: It is against the law to do this!!) Take yourself down to your nearby electronics store and get a four transistor amplifier and a telephone suction cup induct- ive pick-up. Put the pick-up on the earpiece and plug it into the output of the amplifier, and plug a microphone into the input. You then talk into your microphone and listen normally through the earpiece. Radio Shack sells an item that won't need much modification, and that should work the same as the above construction. It is their 'Portable snap-on handset amplifier' (Part # 43-238) Their description says to put it on the earpiece and it will boost the caller's voice to five times the normal level. In order to make this function like a clear box one would have to take the amplifier apart and remove the internal speaker, in its place, connect the suction cup inductive pick-up. Place the pick-up (which is now the speaker) to the mouth piece of the payphone, and talk into the microphone of the ampli- fier. The line will not cut off, and will wait forever for you to put the coins in. Note also that these types of payphones are not connected to the tsps in the same way as normal payphones. The phone does all the charging and not the Central Office. It is because of this, that a phone connected to the lines BEFORE the payphone would act just like a normal phone. So get out your smallest phone, cut off the jack and strip the wires. Connect the wires to two alligator clips. Then you can clip onto the payphone's wires BEFORE they connect to the payphone, you then have a normal telephone line that you don't pay the bills on! (*)*(*)*(*)*(*)*(*) (*) Crimson Box (*) (*) Plans (*) (*)*(*)*(*)*(*)*(*) The Crimson Box is very simple device that will allow you to put someone on hold or make your fone busy with a large amount of ease. You flip a switch and the person can't hear you talking. Flip it back and everything is peechy. (*)*(*)*(*)*(*)*(*)*(*)*(*) (*) Needed Materials (*) (*)*(*)*(*)*(*)*(*)*(*)*(*) (1) 100 ohm or less resistor (1) SPDT toggle switch, On-On (3) feet of good wire Wire cutters Solder and soldering iron (*)*(*)*(*)*(*)*(*)*(*)*(*)*(*)*(*) (*) Construction & Schemtaic (*) (*)*(*)*(*)*(*)*(*)*(*)*(*)*(*)*(*) First I will give you the schematic and then I will explain what the hell is going on. [-----------black wire on line--------- --------+ red wire on line +------ --------!--+/\/\/-green wire---!------ --------!--! yellow wire-------!------ ! ! ! +--!------+ ! +----+ ! +----------+ ! ! ! 1 2 3 Ok. The '/\/\/' is the resistor. And '1 2 3' is the switch where the numbers are the poles on the switch. Notice you leave the black and yellow wires alone. You DO NOT cut them! [ Strip the red and green wires so you've got about an inch of bare wire. Solder some of the extra wire and follow the schematic. You should have the resistor on the green wire with an extra piece of wire coming from one leg of it. The other leg goes to the other end of the green wire. You should solder the green wire to the left pole of the switch and the red to the middle and the other end of the red to the right pole. Now, lift up the phone. If all you get is an annoying buzz then throw the [switch and you should get a dial tone. If not, don't worry and just follow the instructions and schematic again. ][//////////////////////////////////][ ][///////////THE/DLOC/BOX///////////][ ][//////////////////////////////////][ ][//////////////-=BY=-//////////////][ ][//////////////////////////////////][ ][//////THE/DARK/LORDS/OF/CHAOS/////][ ][//////////////////////////////////][ ][////PROWLER///////////////////////][ ][///////APPRENTICE/////////////////][ ][//////////PRO/HACK////////////////][ ][//////////////ZEUS////////////////][ ][////////////////TARKMETH//////////][ ][///////////////////BLACKSTOKE/////][ ][//////////////////////////LAZER///][ ][//////////////////////////////////][ ][][][][][][][][][][][][][][][][][][][ STUFF YOU'LL NEED: ------------------ A SOLDERING IRON A SPOOL OF LOW RESISTANCE WIRE 2 FEMALE FONE JACKS 2 SPST TOGGLE SWITCHES 4 GOLD PLATED ALLIGATOR CLIPS A BOX TO PUT IT ALL IN SOME SOLDER A BRAIN HERE'S A SIMPLE DIAGRAM OF HOW IT IS PUT TOGETHER: @ @ KEY: G R G R G= GREEN WIRE G R R= RED WIRE G R *= FEMAL JACK G R \= SPST SWITCH G R O= CONNECTION O------*-----O @= GATOR CLIPS ! ! -= WIRE ! ! != WIRE \ \ ! ! ! ! ! ! O------*-----O G R G R G R G R G R G R @ @ ASSEMBLE IT AS ABOVE, AND PUT IT IN THE BOX, WITH THE TOGGLE SWITCHES PARALLEL, AND THE FEMALE JACKS MOUNTED ON EITHER SIDE OF THE BOX. OR, IF YOU DON'T WANT TO GO TO THE TROUBLE OF MAKING IT BY YOURSELF, YOU CAN GET ONE FOR $7.50 FROM DLOC. OURS ARE ENCASED IN A STURDY PLASTIC BOX, WITH OUR LOGO STENCILED ON THE SIDE, AND ARE VERY WELL MADE. IF YOU WANT TO BUY ONE, CONTACT A DLOC MEMBER ON ONE OF THE BOARDS LISTED BELOW IN THIS FILE. DLOC BOX FUNCTIONS: ------------------- HOOKUP: TO HOOK UP THE BOX, PLUG YOUR FONES INTO THE JACKS ON THE BOX. ON MINE, THE WIRES ARE LABELED EVERY FOOT SO THAT I KNOW WHICH TRUNK I'M ON. CLIP THE APPROPRIATE SET OF CLIPS ON THE TERMINALS YOU WISH TO INVADE, AND THEN LISTEN/DIAL THROUGH WHICHEVER PHONE IS CONNECTED. THIS BOX HAS TWO LINES GOING THROUGH IT, WITH AN OPTION TO CONFER- ENCE THE TWO. I ADDED THIS SO IF WHILE ON ALLIANCE TELECONFERENCING, YOU WANT TO DIAL AN 800,900,700, OR 976 NUMBER, YOU CAN SIMPLY DIAL IT WITH THE OTHER TRUNK AND THEN CONFERENCE THE TWO. CONFERENCING THE TWO LINES: TO JOIN THE TWO LINES, TURN BOTH OF THE TOGGLE SWITCHES TO THE ON POSITION. NOTE: MAKE SURE THAT NO PHONE IS CONNECTED TO THE BOX WHEN YOU HOOK UP THE CLIPS, AND ALSO MAKE SURE THAT BOTH SWITCHES ARE TURNED OFF. GOLD BOX PLANS MATERIALS: (2) 10k OHM resistors (3) 1.4k OHM resistors (2) 2N3904 transistors (2) Photocells (2) LED's (Make sure they're real bright) Box to contain it in that will not allow sunlight in it. Some wire (Red and green for easiness sake) PROCEDURE Light from the LED's must shine directly on the photocells. You may have to have the LED touching the photocell for it to work. [ Schematic ] +-----Photocell #1------+ | +---I[---+ | | | +- | | | | Led#1 | | | +--+ | |Base | | +--------+ ***** | | | Transistor | | | ***** Red #1-----+--+ +----------------+ | | | |Collector +---+ | | | +-+ +-----+------Green #2 | | | | | +-+ | +-----------+ | | | | | | +---/\/----/\/----/\/----/\/---------+ | | 10k 10k 1.4k 1.4k | | R E S I S T O R S | | | +------------------+ +-------------------+ | | | + I[ LED #2 +-----Photocell #2----+ Base | | ***** +------+ Transistor | ***** | Collector | | Emitter | | +-------------+---Red #2 Green #1-+ | | +---+ | | +-/\/-+ 1.4k Resistor The 1.4k resistor is variable and if the second part of of the box is skipped the box will still work but if someone picks up the fone they may report it to the Phone Co. The 1.4k will give you good reception with little risk of the Gestapo knocking at your door. Take two green wires and strip the ends. Twist one end of each together so they make one wire. Connect it to Green #1. Label this 'Line #1'. Do the same but with red wire and attach it to Red #1. Repeat the process for Red #2 and Green #2 and label it 'Line #2'. INSTALLATION Find two fone lines that are close together. Label one of them 'Line #1'. Cut the phone lines and take off the outer covering. You'll see 4 colored wires inside. Cut the yellow and black wire off and strip the red and green wires on both lines. Line #1 should be in two pieces. Take the green wire of one end and con- nect to one of the green wires on the box. Take the other half of the fone line green wire and connect it to the other green wires on the gold box. Do the same for the red wires on the other line and the red wires on the box. Now, find out what number you hooked up the gold box to. Go home and call it. You should get a dial tone and you can dial out. If not, re-check every- thing. If it still doesn't work, pack up and go home. Other Scamitcs by another person. GOLD BOX =------= YOU WILL NEED THE FOLLOWING MATERIALS: (2) 10K OHM AND (3) 1.4K OHM RESISTORS, (2) 2N3904 TRANSISTORS,. (2) PHOTOCELLS, (2) RED LEDS, A BOX THAT WILL NOT LET LIGHT IN, AND RED AND GREEN WIRE. LIGHT FROM THE #1 LED MUST SHINE DIRECTLY ON THE PHOTOCELL #1. HERE IS THE SCHEMATIC FOR THE GOLD BOX: 1 :-PHOTOCELL--: : : : :BASE : 1 TTTTT : +LED- TRANSISTOR : TTTTT : : : : -I(-- : :COLLECTOR RED1--< >:--: :-------:-----GREEN2 -I(-- : ----------: : : 2 :-/+/+/-/+/+/-/+/+/-/+/+/ LED 10K 10K 1.4K 1.4K RESISTORS 2 -PHOTOCELL----------------- : : :BASE : TTTTT : TRANSISTOR : TTTTT : : :EMITTER : GREEN1- --------------------------RED2 : : /+/+/ 1.4K THE 1.4K RESISTOR IS VARIABLE AND IF THE SECOND PART OF THE GOLD BOX IS SKIPPED IT WILL STILL WORK, BUT WHEN SOMEONE PICKS UP THE PHONE THEY WILL HEAR A FAINT DIAL TONE IN THE BACKGROUND AND MIGHT REPORT IT TO THE FONE CO. 1.4K WILL GIVE YOU GOOD RECEPTION WITH LITTLE RISK OF A BELL AGENT AT YOUR DOOR. NOW THAT YOU HAVE BUILT THE GOLD BOX, TAKE TWO GREEN WIRES OF THE SAME LENGTH, AND STRIP THE ENDS. TWIST TWO ENDS TOGETHER AND CONNECT THEM TO GREEN1 AND PLACE A PIECE OF TAPE ON IT WITH LINE #1 RIDING ON IT. CONTINUE THE PROCESS WITH THE RED1, ONLY USE RED WIRE. REPEAT WITH GREEN2 AND RED2, BUT CONNECT IT TO LINE #2. TO INSTALL YOUR NEW FOUND FRIEND, YOU WILL NEED TO FIND TWO PHONE LINES THAT ARE CLOSE TOGETHER. LABEL ONE OF THE PHONE LINES LINE #1. CUT THE PHONE LINES AND TAKE OUT THE OUTER COUTING OFF IT. THERE SHOULD BE 4 WIRES. CUT THE YELLOW AND BLACK WIRES OFF AND STRIP THE RED AND GREEN WIRES FOR BOTH FONE LINES. LINE #1 SHOULD BE IN TWO PIECES. TAKE THE GREEN WIRE OFF ONE END AND CONNECT IT TO THE ONE ONE THE GOLD BOX. TAKE THE OTHER HALF OF LINE #1 AND HOOK THE FREE GREEN WIRE TO THE GREEN WIRE ON THE FONE LINE. REPEAT THE PROCESS WITH RED1 AND THE OTHER LINE. ALL YOU NEED TO DO NOW IS GO HOME AND PHONE THE HOUSE YOU PUT THE GOLD BOX ON. YOU SHOULD GET A DIAL TONE! YOU HAVE SEIZED THEIR LINE FROM A REMOTE LOCATION. IT IS IMPOSSIBLE FOR BELL TO TRACE YOU. THEY WILL TRACE THE PEOPLE WHO'S FONE YOU ARE USING! eception with little risk of the Gestapo knocking at your door. :%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %%%%%%%%%%%%%: :% %: :% THE GREEN BOX %: :% %: :%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %%%%%%%%%%%%%: The Green Box generates useful tonessuch as COIN COLLECT, COIN RETURN, and RINGBACK. These are the tones that ACTS or the TSPS operator would send to the CO when appropriate. Unfortunately, the green box cannot be used at a fortress station, but must be used by the CALLED party. The tones (hz) are: COIN COLLECT 700 + 1100 COIN RETURN 1100 + 1700 RINGBACK 700 + 1700 Before the called party sends any of these tones, an operator released signal should be sent to alert the MF detectors at the CO. This can be done by sending 900 + 1500 Hz or a single 2600 Hz wink (90 ms) followed by a 60 ms gap and then the appropriate signal for at least 900 ms. Also, do not forget that the initial rate is collected shortly before the 3 minute period is up. :-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-::-:-:-:-:-:-:-:-:-:-: -:-:-:-:-:-:-:-: THE JACKBOX MA BELL IS NOT THE ONLY ONE WITH STANDARDS! JUST ABOUT EVERY MANUFACTURER OF IC'S THAT GENERATE TOUCH TONES HAS ALSO GONE BY THE 16 KEY (8 TONE) STANDARD FOR TOUCH TONE PADS. AND IT IS EVEN EASIER TO CONVERT A TONE PAD THAT USES AN INTEGRATED CIRCUIT TO GENERATE THE TONES THAN CONVERTING A MA BELL PAD! IT WILL HELP IMMENSELY IF YOU HAVE THE SCHEMATIC FOR THE PAD IN QUESTION, OR AT LEAST THE PIN-OUT DIAGRAM OF THE CHIP BEING USED. PIN-OUTS CAN USUALLY BE OBTAINED FROM THE MANUFACTURER OR FROM AN ECG, SK, GE OR SIMILIAR SEMICONDUCTER HANDBOOK (PROVIDED THAT MANUFACTURER MAKES AN EQUIVALENT FOR THE CHIP IN YOUR PAD). I'LL USE THE RADIO SHACK CEX-4000 TONE PAD MODULE FOR AN EXAMPLE, EVEN THOUGH IT IS PROBABLY ALMOST THE LOUSIEST ONE YOU CAN BUY, IT IS FAIRLY TYPICAL ASILY AVAILABLE. TAKE A LOOK AT THE DIAGRAM OR THE PIN-OUT OF THE CHIP. YOU SHOULD SEE TWO GROUPS OF PINS, THE ROWS TONE PINS AND THE COLUMN TONE PINS. THESE WILL BE MARKED AS R1,R2,R3,R4 AND C1,C2,C3 (RADIO SHACK) OR OR X1,X2,X3 AND Y1,Y2,Y3 ETC. ON OTHERS. AT ANY RATEU SHOULD BE ABLE TO DISTINGUISH WHICH THREE PINS CONTROL THE COLUMNS AND WHICH FOUR CONTROL THE ROWS. IF YOU'RE LUCKY, EACH GROUP OF ROWS AND COLUMNS WILL BE CONTIGUOUS. NOW LOOK AT THE COLUMN PINS, AND YOU'LL PROBABLY SEE AN EMPTY PIN RIGHT NEXT TO THEM. THIS IS THE COLUMN PIN FTHE 1633 HZ TONES. THESE CHIPS USUALLY ACHIEVE THEIR SWITCHING BY CONNECTING A ROW PIN WITH A COLUMN PIN (THAT WAY TQAN USE A0VERY SIMPLE KEYBOARD PAD, UNLIKE MA BELL'S COMPLICATED ONE). SO ALL YOU HAVE TO DO IS TAKE A SPDT SWITCH AND A FEW PIECES OF WIRE, CUT THE TRACE GOING TO THE COLUMN 3 PIN OF THE CHIP, ATTACH A WIRE FROM THE CHIP SIDEOF THAT CUT TO ONE END OF THE SPDT SWITCH, A WIRE FROM THE OTHER SIDE OF THE CUT TO THE CENTER OF THE SPDT SWITCH, AND FINALLY, FROM THE REMAINING CONTACT ON THE SPDT SWITCH, HOOK A WIRE TO THE PREVIOUSLY IDENTIFIED PIN C4 (COLUMN 4). NOW YOU HAVE A "BANK SWITCHING ARRANGEMENT EXACTLY LIKE THE ONE DESCRIBED IN THE PREVIOUS BULLETIN FOR MODIFYING A MA BELL PAD. IF YOU CAN'T GET THE SCHEMATICS OR THE PIN OUTS FOR YOUR CHIP, DON'T DESPAIR. THERE IS STILL HOPE FOR YOU! YOU JUST HAVE TO TRACK THE CONNECTIONS GOING FROM THE PAD'S KEYS TO THE CHIP. CHANCES ARE YOU'LL FIND THAT EACH ROW HAS A COMMON TRACE, AND SO DOES EACH COLUMN (FOR THOSE NON-TECHNICAL FOLKS, A TRACE IS A CONNECTION ETCHED OUT ON A CIRCUIT BOARD). JUST FOLLOW THESE TO THE CHIP, AND MAKE YOUR OWN SCHEMATIC UP. NOW TAKE A LOOK FOR THAT EXTRA PIN--THERE SHOULD BE ONE FLOATING AROUND RIGHT NEXT TO THE COLUMN PINS. IT WILL BE NOT BE HOOKED UP TO ANYTHING ELSE, THAT IS, "HANGING FREE". DRILL A HOLE IN THE SIDE OF TONEPAD'S CASE, AND MOUNT YOUR SWITCH. RADIO SHACK SELLS A NICE MICROMINIATURE SWITCH THAT WORKS EXCELLENTLY! (ALMOST THE ONLY GOOD THING I CAN SAY ABOUT RADIO SHACK IN THIS ARTICLE) KEY === First a few KEYS to the diagram: Cx is capacitor #x Denoted by: ---| |--- Px is Pot or Variable resistor #x Denoted by :/ \ /<-- \ Rx is resistor #x Denoted by /\/\/\/\ SCHEMATICS ========== The XR-2207 chip is a Voltage-Contr olled Oscillator and a 14 pin device thu s you must be very careful when soldering the parts to this device. It is a little dificult to actually draw a schematic on a 80 character scren using limited gra phics but will give it a try. TO GND_____________ | ___ C2 C3 ___ _||_ | | | _____|__9v+ | | | | ` ` ` ` ` ` ` | ---------------- --------------- | |7 6 5 4 3 2 1 | | | < | |8 9 10 11 12 13 14| | ---------------- --------------- | ` ` ` ` ` ` ` | | | | --| |--------| | | |C1 R2 | R1 | GND ______|___/\/\/\/\______|_ ____/\/\/\/\______| This is a diagram of how to locate the different pins on the chip please no tice that pin one is the closest to the n otch on top of the chip. The first thing we'll do is to connect power to the chip (remember that you need to build two of these to get a complete system) this is accomplished by connecting the positive wire of the battery lead to pin 1 one leg of R1 and R2 is solder to pin 11 the other leg of R1 goes to pin 1 or to the positive of the battery. The other leg of R2 goes to ground, C1 goes between pin 10 and ground. The timing capacitor or C2 goes between pins 2 and 3 of the chip pins 8 and 9 should be grounded to ground. Pin 14 is the output and this is where one leg of C4 (C3 goes on the other VCO) in series with R3(the same goes for the other VCO) and to one lead of the speaker. The trimmer pots P1 to P10 should be grouped in groups of 5 pots each . the way you group it is by soldering one end of the pot to each other leaving the wiper and the other end free. | This end goes to pin 6 of the chip | _____________|_____________ / / / / / \ \ \ \ \ /<- /<- /<- /<- /<- \ | \ | \ | \ | \ | / | / | / | / | / | | | | | | | | | | | P1 P2 P3 P4 P5 And finally this is the way each key should be wired. diode to Px ------>|-----| This is the contact of the |--------- \------ key to Px ------>|-----| | diode | ----- --- Ground - This may not be the best way to show the schematics but at least it is something. ============== Box Definitions: aqua box - A box designed to drain the voltage of the FBI lock-in- trace/trap-trace so you can hang up your fone in an emergency and phrustrate the Pheds some more. The apparatus is simple, just connect the two middle wires of a phone wire and plug, which would be the red and green wires if in the jack, to the cord of some electrical appliance; ie, light bulb or radio. KEEP THE APPLIANCE OFF. Then, get one of those line splitters that will let you hook two phone plugs into one jack. Plug the end of the modified cord into one jack and your fone into the other. THE APPLIANCE MUST BE OFF! Then, when the Pheds turn their lame tracer on and you find that you can't hang up, remove your fone from the jack and turn the appliance ON and keep it ON until you feel safe; it may be awhile. Then turn it off, plug your fone back in, and start phreaking again. black box - The infamous box that allows the calling party to not be billed for the call placed. We won't go in depth right now, most plans can be found on many phreak oriented BBS's. The telco can detect black boxes if they suspect one on the line. Also, these will not work under ESS. bleeper boxes - The United Kingdom's own version of the blue box, modified to work with the UK's fone system. Based on the same principles. However, they use two sets of frequencies, foreword and backwards. Blotto box - This box supposedly shorts every fone out in the immediate area, and I don't doubt it. It should kill every fone in the immediate area, until the voltage reaches the fone company, and the fone company filters it. I won't cover this one in this issue, cuz it is dangerous, and phreaks shouldn't destroy MA's equipment, just phuck it up. Look for this on your phavorite BBS or ask your phavorite phreak for info if you really are serious about seriously phucking some fones in some area. blue box - An old piece of equipment that emulated a true operator placing calls, and operators get calls for free. The blue box seizes an open trunk by blasting a 2600 Hz tone through the line after dialing a party that is local or in the 800 NPA so calls will be local or free for the blue boxer. Then, when the blue boxer has seized a trunk, the boxer may then, within the next 10-15 seconds, dial another fone number via MF tones. These MF tones must be preceded by a KP tone and followed with a ST tone. All of these tones are standardized by Bell. The tones as well as the inter- digit intervals are around 75ms. It may vary with the equipment used since ESS can handle higher speeds and doesn't need inter-digit intervals. There are many uses to a blue box, and we will not cover any more here. See your local phreak or phreak oriented BBS for in depth info concerning blue boxes and blue boxing. Incidentally, blue boxes are not considered safe anymore because ESS detects "foreign" tones, such as the 2600 Hz tone, but this detection may be delayed by mixing pink noise of above 3000 Hz with the 2600 Hz tone. To hang up, the 2600 Hz tone is played again. Also, all blue boxes are green boxes because MF "2" corresponds to the Coin Collect tone on the green box, and the "KP" tone corresponds to the Coin Return tone on the green box. See green box for more information. Blue boxing is IMPOSSIBLE under the new CCIS system slowly being integrated into the Bell system. blue box tones - The MF tones generated by the blue box in order to place calls, emulating a true operator. These dual tones must be entered during the 10-15 second period after you have seized a trunk with the 2600 Hz tone. 700: 1 : 2 : 4 : 7 : 11 : KP= Key Pulse Parallel Frequencies 900: ** : 3 : 5 : 8 : 12 : ST= STop 2= Coin Collect 1100: ** : ** : 6 : 9 : KP : KP2= Key Pulse 2 KP= Coin Return 1300: ** : ** : ** : 10 :KP2 : **= None (green box tones) 1500: ** : ** : ** : ** : ST : : 900:1100:1300:1500:1700: 75ms pulse/pause busy box - Box that will cause the fone to be busy, without taking it OFF-HOOK. Just get a piece of fone wire with a plug on the end, cut it off so there is a plug and about two inches of fone line. Then, strip the wire so the two middle wires, the tip and the ring, are exposed. Then, wrap the ring and the tip together, tape with electrical tape, and plug into the fone jack. The fone will be busy until the box is removed. cans - Cans are those big silver boxes on top of or around the telephone poles. When opened, the lines can be manipulated with a beige box or whatever phun you have in mind. cheese box - Another type of box which, when coupled with call forwarding services, will allow one to place free fone calls. The safety of this box is unknown. See references for information concerning text philes on this box. clear box - Piece of equipment that compromises of a telephone pickup coil and a small amp. This works on the principal that all receivers are also weak transmitters. So, you amplify your signal on PP fortress fones and spare yourself some change. green box - Equipment that will emulate the Coin Collect, Coin Return, and Ringback tones. This means that if you call someone with a fortress fone and they have a green box, by activating it, your money will be returned. The tones are, in hertz, Coin Collect=700+1100, Coin Return=1100+1700, and Ringback=700+1700. However, before these tones are sent, the MF detectors at the CO must be alerted, this can be done by sending a 900+1500 Hz or single 2600 Hz wink of 90ms followed by a 60ms gap, and then the appropriate signal for at least 900ms. gold box - This box will trace calls, tell if the call is being traced, and can change a trace. grey box - Also known as a silver box. See silver box. Paper Clip Method - This method of phreaking was illustrated in the movie War Games. What a phortress fone does to make sure money is in a fone is send an electrical pulse to notify the fone that a coin has been deposited, for the first coin only. However, by simply grounding the positive end of the microphone, enough current and voltage is deferred to the ground to simulate the first quarter in the coin box. An easy way to accomplish this is to connect the center of the mouthpiece to the coin box, touch tone pad, or anything that looks like metal with a piece of wire. A most convenient piece of wire is a bend out of a paper clip. Then you can send red box tones through the line and get free fone calls! Also, telco modified fones may require you to push the clip harder against the mouthpiece, or connect the mouthpiece to the earpiece. If pressing harder against the mouthpiece becomes a problem, pins may be an easier solution. purple box - This one would be nice. Free calls to anywhere via blue boxing, become an operator via blue box, conference calling, disconnect fone line(s), tap fones, detect traces, intercept directory assistance calls. Has all red box tones. This one may not be available under ESS. rainbow box - An ultimate box. You can become an operator. You get free calls, blue box. You can set up conference calls. You can forcefully disconnect lines. You can tap lines. You can detect traces, change traces, and trace as well. All incoming calls are free. You can intercept directory assistance. You have a generator for all MF tones. You can mute and redial. You have all the red-box tones. This is an awesome box. However, it does not exist under ESS. red box - Equipment that will emulate the red box tone generated for coin recognition in all phortress fones. red box tones - Tones that tell the phortress fone how much money was inserted in the fone to make the required call. In one slot fones, these are beeps in pulses; the pulse is a 2200+1700 Hz tone. For quarters, 5 beep tones at 12-17 PPS, for dimes it is 2 beep tones at 5-8.5 PPS, and a nickel causes 1 beep tone at 5-8.5 PPS. For three slot fones, the tones are different. Instead of beeps, they are straight dual tones. For a nickel, it is one bell at 1050-1100 Hz, two bells for a dime, and one gong at 800 Hz for a quarter. When using red box tones, you must insert at least one nickel before playing the tones, cuz a ground test takes place to make sure some money has been inserted. The ground test may be fooled by the Paper Clip Method. Also, it has been known that TSPS can detect certain red box tones, and will record all data on AMA or CAMA of fraudulent activity. regional center - Any class 1 switching office in North America. silver box - Equipment that will allow you to emulate the DTMF tones A,B,C,D. The MF tones are, in hertz, A=697+1633, B=770+1633, C=852+1633, D=941+1633. These allow special functions from regular fones, such as ACD Testing Mode. white box - This is a portable DTMF keypad.}PEPSON}iðf@´ðf@Maharaja's Hi-Times 10 MEG BBS C/F <%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%> <%> <%> <%> Making the <%> <%> <%> <%> Lunch Box <%> <%> ===== === <%> <%> <%> <%> Typed by: Dr. D-Code <%> <%> <%> <%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%> Introduction ============ The Lunch Box is a VERY simple transmitter which can be handy for all sorts of things. It is quite small and can easily be put in a number of places. I have successfully used it for tapping fones, getting inside info, blackmail and other such things. The possibilities are endless. I will also include the plans for an equally small receiver for your newly made toy. Use it for just about anything. You can also make the transmitter and receiver together in one box and use it as a walkie talkie. Materials you will need ======================= (1) 9 volt battery with battery clip (1) 25-mfd, 15 volt electrolytic capacitor (2) .0047 mfd capacitors (1) .022 mfd capacitor (1) 51 pf capacitor (1) 365 pf variable capacitor (1) Transistor antenna coil (1) 2N366 transistor (1) 2N464 transistor (1) 100k resistor (1) 5.6k resistor (1) 10k resistor (1) 2meg potentiometer with SPST switch Some good wire, solder, soldering iron, board to put it on, box (optional) Schematic for The Lunch Box =========================== This may get a tad confusing but just print it out and pay attention. [!] ! 51 pf ! ---+---- ------------base collector ! )( 2N366 +----+------/\/\/----GND 365 pf () emitter ! ! )( ! ! +-------- ---+---- ! ! ! ! ! ! ! GND / .022mfd ! ! 10k\ ! ! ! / GND +------------------------emitter ! ! ! 2N464 / .0047 ! base collector 2meg \----+ ! ! +--------+ ! / ! GND ! ! ! GND ! ! ! +-------------+.0047+--------------------+ ! ! ! +--25mfd-----+ -----------------------------------------+ ! ! microphone +--/\/\/-----+ ---------------------------------------------+ 100k ! ! GND---->/<---------------------!+!+!+---------------+ switch Battery from 2meg pot. Notes about the schematic ========================= 1. GND means ground 2. The GND near the switch and the GND by the 2meg potentiometer should be connected. 3. Where you see: )( () )( it is the transistor antenna coil with 15 turns of regular hook-up wire around it. 4. The middle of the loop on the left side (the left of "()") you should run a wire down to the "+" which has nothing attached to it. There is a .0047 capacitor on the correct piece of wire. 5. For the microphone use a magnetic earphone (1k to 2k). 6. Where you see "[!]" is the antenna. Use about 8 feet of wire to broadcast approx 300ft. Part 15 of the FCC rules and regulation says you can't broadcast over 300 feet without a license. (Hahaha). Use more wire for an antenna for longer distances. (Attach it to the black wire on the fone line for about a 250 foot antenna!) Operation of the Lunch Box ========================== This transmitter will send the signals over the AM radio band. You use the variable capacitor to adjust what freq. you want to use. Find a good unused freq. down at the lower end of the scale and you're set. Use the 2 meg pot. to ï73  Šadjust gain. Just fuck with it until you get what sounds good. The switch on the 2meg is for turning the Lunch Box on and off. When everything is adjusted, turn on an AM radio adjust it to where you think the signal is. Have a friend say some shit thru the Box and tune in to it. That's all there is to it. The plans for a simple receiver are shown below: The Lunch Box receiver ====================== (1) 9 volt battery with battery clip (1) 365 pf variable capacitor (1) 51 pf capacitor (1) 1N38B diode (1) Transistor antenna coil (1) 2N366 transistor (1) SPST toggle switch (1) 1k to 2k magnetic earphone Schematic for receiver ====================== [!] ! 51 pf ! +----+----+ ! ! ) 365 pf (----+ ! ) ! ! +---------+---GND ! +---*>!----base collector----- diode 2N366 earphone emitter +----- ! ! GND ! - + - battery + GND------>/<------------+ switch Closing statement ================= This two devices can be built for under a total of $10.00. Not too bad. Using these devices in illegal ways is your option. If you get caught, I accept NO responsibility for your actions. This can be a lot of fun if used correctly. Hook it up to the red wire (I think) on the fone line and it will send the conversation over the air waves. HOW TO BUILD AND USE A MAGENTA BOX. Designed and Written by Street Fighter. First of all I named this the Magenta Box because all of the fags that made boxes, whose only purpose is adding a hold button to your phone, used all of the fucking colors. I can afford a fucking piece of shit Radio Shack 2-line phone with hold. A box's purpose is to fuck with the Telco., not to add a fucking hold button to your phone. Anyway I will get on with this. PARTS LIST: SPDT Miniature PC RELAY (about 9v, 500 ohm) DPDT Miniature PC RELAY (about 6v, 500 ohms, 12 mA) 2000 or so uF electrolytic capacitor 1 meg resistor .01 uF capacitor 555 timer chip 2 diodes (1N914) 10 K resistor 1 K resistor 9 volt battery -w- clip Pc Board 4 alligator clips some kind of a box (small) some 20 or 22 gauge wire to work with. If you don't know how to put together a project by looking at a schematic, then isn't the project to start with. I would ask someone with some electronics knowledge to give you a helping hand. This has to be put together on a pc-board. Enough talk, now the schematic: +9v ^ | +---------------+----+----------------+ | |8 |4 | | ------------ | / | |3 | |--| \ | |-------------------->|---+------|\ | 1 Meg / R1 | | | | C| \| (1000K)\ | | | - O|\ | | | 555 | \ ^ I| \| | | chip | 10 K / | L|\ | | 7| | \ +------| \| +------------| | / | |--| | 6| |2 | | +------------| |-------------+-------+ | NC | ------------ | | +-o o o--< | |1 |5 --------o NC | | | TIP #2 | | | --___ | | | NC + | | | ---o---+ | | | o o o--< --- | ---.01 uF | | | | | RING #2 2000 uF -^- C1 | -^- --------o-- | --+ | | | *see note | | | | | | | | | | +-------|--|C | | | | | | | | |\ |O +---+ | | | | | | | | \|I | | | | | | | | +---|--|L | | | | +-------------+---+-------------------+-----------+ | | | | | | | ----- | +-----------+-------------+ | --- | | | - +--/\/\/\----------+------------+ GROUND 4.7K | | 9V | | | +------------< RING #1 | | +---------------< TIP #1 K E Y ~~~~~ NC - Normally Closed --< - Alligator Clip --- -^- Capacitor ->|- Diode | - ^ Diode | o o o Contacts on relay. DPDT o o o --------o ___---o Contacts on relay. SPDT -- --------o -/\/\/\- Resistor | / \ Resistor / | Whew! Well, the schematic explains almost everything. It would be helpful to you if you used one color for the line #1 clips and another for the line #2 clips. It will work even if you get the ring and tip mixed up, but you must get all of the clips on the right line. But, to be safe, you could put tags on each clip labeling it RING #1, TIP #2, ect. Installation. Find one of those green posts that are about 3 feet high. They are everywhere. Get a socket wrench to open it up. There will be (a) row(s) of paired up posts. Each pair of posts represents a line. YOU *MUST* KNOW THE NUMBER OF LINE #1. Sometimes the number is tagged on to the pair of wires leading up to the posts, if so pick these posts as your line #1. Then you can pick any other set of posts for line #2. Now to the good part. Use of the the final product. When you call up line one from your house you will get a dial tone almost immediately. Using DTMF you can dial anywhere that the person who owns line 2 has service to. Which means you can direct dial alliance, Australia, and your favorite BBS for FREE. The Telco. will undoubtably discover the device after 2 days, so post the number on your favorite boards so you can abuse it while it is in service. With a 2000 uF capacitor and a 1 meg resistor you will get a 50 minute call before it disconnects you. By lowering the value of the resistor and capacitor you can change the time to your taste. So don't dial a wrong number, because you will have to wait 50 minutes until it resets again. The formula for the time is the following: 2*R1 C1 C1 is in microfarads ---- * ---- R1 is in Kohms 100 10 See schematic for location of R1 and C1. ----------- = Minutes 60 The time produced by this formula is only approximate. Well, that is one of the more complicated boxes to build. But it is very useful and will pay for itself with its first use. It would be wise to remove it before the Telco. finds it so you won't have to make another, or install it on a line that belongs to a family that is on vacation (GOOD IDEA) Well, there it is. I hope it saves you a lot of cash. If you wish to have one built for you. Leave me E-mail on the Iron Curtain or the CornerStone or any other board I frequent. It won't be more than $15, hopefully it will only be about $8. DON'T LET PHREAKING DIE! STREET FIGHTER _________________________ /~~~~~~~~~~~~~~~~~~~~~~~~~\ | How to Build Your Own | | | | |\ /| _ __ | | | \/ | |_| | | | | |__ | | | | | | |_| \/ |__ | | __ | | | \ _ | | |__/ / \ \_/ | | | \ \_/ / \ | | |__/ / | | _________/ | | | \_________________________/ ~~~~~~~~~~~~~~~~~~~~~~~~~ ____________________________ | Written by Captian Generic | | With Help from The Genetic | | Mishap. | | Phreakers ROCK!!! | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Please bear with me, as the construction of this box will seem rather silly. This box was found in a construction site. Or rather, it found us at a construction site. We were using a $5 Radio Shack phone out of a semi-completed office building. One afternoon during a holiday, and immediately following a storm, we found our bus in shambles. To our suprise, we also found that one of the phone connections we were tapping had been draped through a murky puddle. The fact that suprised us even more was that this line still worked and now posessed some great capibilities. Materials: 2 tupperware or similar 8oz contianers 1 small bag earth (dirt) (12oz) 1 pint water 2 lantern batteries 1 nine volt battery 1 battery clip 2 SPST switches 4 ounces of iron shavings 2 polar magnets 5 feet wire 1 set soldering equipment This is the part you won't believe. Take the tupperware containers, and fill them with a mixture of the earth and the iron shavings. Make sure that the mixture is well done. (*NOTE* for best results, use the sand in fine ash trays.) Cut the cut the red and green wires and splice the switches into them. From the switches, solder wire to the magnets. Connect the red to the + (positive) side of one magnet, and the green to the - (negative) side of the second magnet. From the other poles of the magnet, solder wires the battery & clip. Make sure the + (positive) and - (negative) are correct. Set the nine-volt battery between the two tupperware containers and place the battery end of the two magnets into the tupperware. Now connect wire to the two poles of the lantern battery, and place them in the same containers as the poles of the magnets/9-volt battery. You are almost done. Finally, add just enough water to the two pots, and let them sit in the sun and bake like bricks. at this point, you have a MAUVE BOX. Explaning and Using What You Have: The red and green wires have been places into a magnetic field which is being charged continually be a lantern battery. (It is necessary to change this battery every one to one and a half months.) This will literaly pull in the nearest phone conversatiion. (Don't try this in a big apartment or dorm.) When the 9-volt battery is connected, this will now create enough current for the poles of the magnets to reverse themselves (perhaps you're seen Mr. Wizard do this. It's just like with the soap). At this point, you have a phone transmitting to one (if not more) of the nearest phones. (Again, if you're in a dorm, don't try this.) I suppose this just accomplishes what a tap would do, but with a MAUVE BOX, your fingerprints never will show on a terminal or on someones telephone lines. Notes and Addendum: This will only work with a touch-tone phone connected to a phone line. When the switches are pulled, it's off your line and into the air. This is named a MAUVE BOX, becuase this is the most disgusting box, and I find mauve to be the single most disgusting colour I know of. Also, this file is for information purposes only. This is not to be used in an illegal mannar. Perhaps one of these by the pool, sending to your sethe co-author, accept no responsibility for your actions with the MAUVE BOX. Thank you...MUSIC BOX -------------------------------------- THE NEON BOX -------------------------------------- A NEON BOX IS A VERY SIMPLE ADJUSTMENT TO YOUR FONE, THAT WILL ALLOW A VERY CLEAR PASSAGE FROM YOUR COMPUTER TONES TO YOUR FONE. IT ALSO WORKS GREAT FOR RECORDING TONES, SEX FONE, OR ANYTHING ELSE YOU WANT TO RECORD OFF OF YOUR FONE. TOOLS: ------ THIS MODIFICATION IS VERY SIMPLE, AND CAN BE USED ON MOST FONES, THOUGH IT IS MORE DIFFICULT ON ONE-PIECE UNITS. ALL YOU NEED IS AN OLD PAIR OF HEADFONES, OR SIMILAR, A FILIPS SCREW- DRIVER, A SOLDERING IRON AND SOME SOLDER. INSTRUCTIONS ------------ OPEN YOUR FONE WITH THE SCREWDRIVER. WHEN OPENED, LOOK FOR THE RED AND BLACK WIRES THAT LEAD TO THE MOUTH- PIECE. (IF YOU'RE NOT SURE WHICH WIRES LEAD TO THE MOUTHPIECE, OPEN UP THE MOUTHPIECE AND FIND THE SAME COLOR WIRES ON THE BASE. FOR ONE-PIECE UNITS, JUST LOCATE THE MOUTHPIECE). WHEN YOU HAVE FOUND THE MOUTHPIECE, OR WIRES, CUT THE EARD OF THE HEAD- FONES OFF, AND ONE WIRE (THE ONE THAT LEADS TO THE RIGHT EAR). STRIP THE LEFT WIRE SO ABOUT AN EIGHTH INCH IS SHOWING. KEEP THE OTHER SIDE IN TACT. THEN ON THE RED WIRE, SOLDER THE WIRE THAT IS SEPARATLY SEALED FROM THE OTHER ONE. ON THE BLACK WIRE (THESE ARE THE ENDS OF THE WIRE ON THE CIR- CUIT BOARD) SOLDER THE WAIRE WRAPPED AROUND THE OTHER WIRE. THEN SOLDER A HOLE FOR THE WIRE. YOU HAVE NOW MADE A NEON BOX. (>::::::::::::::::::::::::::::::::::::::::::::::::::::::::<) (> <) (> Olive Box Plans <) (> <) (>::::::::::::::::::::::::::::::::::::::::::::::::::::::::<) This is a relatively new box, and all it basically does is serve as a phone ringer. You have two choices for ringers, a piezoelectric transducer (ringer), or a standard 8 ohm speaker. The speaker has a more pleasant tone to it, but either will do fine. This circuit can also be used in conjunction with a rust box to control an external something or other when the phone rings. Just connect the 8 ohm speaker output to the inputs on the rust box, and control the pot to tune it to light the light (which can be replaced by a relay for external controlling) when the phone rings. ______________ | | ^ NC --|-- 5 4 --|-----/\/\/------->G | | / R2 G<----)|----|-- 6 3 --|-- NC | C3 | U1 | -------|-- 7 2 --|---------- --- -- - > TO RINGER | | ----|-- 8 1 --|-- | |______________| | | ---/\/\/----|(----- L1 | R1 C1 ------------------------------------------ L2 a. Main ringer TTL circuit (>::::::::::::::::::::::::::::::::::::::::::::::::::::::::<) _ FROM PIN 2 < - -- --- ----------| |_| |------------->G P1 b. Peizoelectric transducer (>::::::::::::::::::::::::::::::::::::::::::::::::::::::::<) __ /| FROM PIN 2 < - -- --- ---------|(---------. .-------| |/ | >||< |S1| | >||< --| | | >||< | |__|\ | G<---------.>||<.--- \| T1 c. Elctro magnetic transducer Parts List ---------- U1 - Texas Instruments TCM1506 T1 - 4000:8 ohm audio transfomer S1 - 8 ohm speaker R1 - 2.2k resistor R2 - External variable resistor; adjusts timing frequency C1 - .47uF capacitor C2 - .1uF capacitor C3 - 10uF capacitor L1 - Tip L2 - Ring L1 and L2 are the phone line. Shift Rate: ----------- This is the formula for determining the shift rate: 1 1 SR = --------------------- = ------------ = 6.25 Hz (DSR(1/f1)+DSR(1/f2)) 128 128 ---- + ---- 1714 1500 DSR = Shift Devider Rate ratio = 128 f1 = High Output Frequency = 1714 f2 = Low Output Frequency = 1500 ******************* * * * PANDORA'S BOX * * * * BY DR. RAT * * * ******************* Brought to you from the expansive, well equipped, and very expensively decorated laboratories of Dr. Rat C.I. This box falls into the prank category. It has little phreak/hack use, except for irritating the hell out of anyone on the phone. It makes operators more pissed than turning on your carrier for them. A phasor is a device using high intensity sound to produce pain. I'm sure you have seen phasors (crowd/dog control, pain fields, etc.) for sale in Information Unlimited ads or catalogs. Unfortunately, these often cost $100 to $1000. Natchly this wouldn't do for Dr. Rat so I created the poor man's phasor or, Pandora's Box. Producing the sound was easy and the circuit is probably the simplest meathod to produce a variable sound from a 555 chip. The only drawback to this box is that you need to use a $13.00 tweeter because it uses so little power and gives the loudest output of high frequency sound. Parts list with Radio Shack cat. numbers 1. One 555 Timer (RS# 276-1723) 2. One .01mfd capacitor (RS# 272-131) 3. One 100K variable resistor (RS# 271-1722) 4. One tweeter (RS# 40-1381) 5. One 9v battery 6. Some wire (any kind - Dr. Rat suggest RS# 278-1294) NOTE: You can change the values of #2 or #3 on the list slightly. But these are extremely easy to find so try to use them. Circuit for Pandora's Box: \ -9 Volts +9 Volts ³ \ ³ ÚÄÄÄÄÄ¿ ³ ³ \ÄÄÄÂÄÄÄÄÄÁÄÄ´1 T 8ÃÄÄ´ ³ ³ ³ ³ O ³ ³ ³ /Ä¿ Àij(ÄÂÄÄÄ´2 P 7³ ³ ³ / ³ ³ ³ ³ ³ / ÃÄÄÄÄÄÄ+ÄÄÄ´3 5 6ÃÄÄ+Ä¿ ³ ³ ³ 5 ³ ³ ³ ³ ³ ÚÄ´4 5 5³ ³ ³ ³ ³ ³ ÀÄÄÄÄÄÙ ³ ³ ³ ³ ³ ³ ³ ³ ³ ÀÄÄÄÄÄÄÄÄÄÄÙ ³ ³ ³ ³ ÀÄ/\/\ÄÁÄÄÄÄÄÄÄÄÄÄÄÄÄÄÙ ^ SYMBOLS: ³ ³ or ÄÄÄ = Wire (Vertical/Horizontal) ³ + = Where two wires cross over each other but don't touch ³( = .01mfd CAPACITOR /\/\ ^ = 100K Variable resistor \ ³ \ ³ \ ³ ³ = Tweeter ³ / ³ / / NOTE: Pin 1 of the 555 is the pin next to a small dos on top of the chip. Variable resistors have three leads; the circuit requires only two so connect one wire to the middle lead and the other wire to either of the outer leads. Here's a pin by pin reading of the wiring in case the circuit got screwed during transmission: 1. Pin 1 connected to the -9v, one lead of the tweeter, and one end of the capacitor 2. Pin 2 connected to pin 6 and the other end of the capacitor 3. Pin 3 connected to other lead of tweeter and to one lead of the variable resistor 4. Pin 4 connected to pin 8 5. Pin 5 not connected 6. Pin 6 connected to pin 2 and other lead of variable resistor 7. Pin 7 not connected 8. Pin 8 connected to +9v and the pin 4 P.S. Works especially well on animals, girls, and young people because the bones in their ears are smaller. Use the variable resistor to adjust the pitch to just above the highest pitch you can hear. You might not notice anything at first. After a short time you should fell a a tingle or buzzing in your neck, ears, or sinus. A little while longer and you should feel a head/neck ache that grows in pain. Try turning it to an audibal frequency and blasting it through the phone. Remember girls can hear higher pitches than boys so they can well when you have it on. Try turning the pitch a little higher so they can't hear it. Entertain your class during finals. They can't hear anything because it's too high pitched. Have Fun! Dr. Rat DR. RAT C.I. RAT LABS, S.F., CA The P A R T Y B O X --------------------- Written by Greyhawke of TDK Ever wanted three-way calling without having to pay for it? Wanted to connect two phone conversations at once, without any static or excess wiring, or even having two phone lines? Ever gone beige boxing and wanted to connect two operators (or anyone!) but didn't have the necessary stuff with you? The party box fixes them all! First off, go to your local Radio Shack and pick up the following parts: (1) DPDT slide switch (all you need is DPST, but DPDTs are easy to get) (2) Modular phone jacks (4) Alligator clips Some wire (doesn't matter what kind) For the modular jacks, if you get the kind that look like a box with the back open, it makes a nice looking party box when you stick them together. Assembly: Take four lengths of wire, and strip the ends about 1/4" on both ends of the wire. Connect two wires to the red and green terminals on one phone jack, and two wires to the red and green terminals on the other phone jack (so you've used all four pieces of wire). Connect to the other ends of each wire a red or green alligator clip (down at Radio Shack they sell some nice ones with color coded insulator sleeves. Get these, it's REAL important that you know the red ends from the green). If you do this right, you'll have a red and green aligator clip on each of the two phone jacks, connected to the wires. By this time, you should not have any wire end loose; they should all be connected to SOMETHING. Now, if you've been paying attention and you know your boxes, you'll recognize the two pieces of equipment you've just assembled as beige boxes. That's all they are, really, is beige boxes. Here's what makes those two beige boxes into a single party box. Take four more short (like 1.5") lengths of wire, and strip all the ends to about 1/4". First connect one side of each wire to a contact on the DPDT or DPST switch. Just make sure it's the right switch. For DPST, you won't have a problem, but for DPDT, make sure the switch looks like this when the wires are connected: *-**-* - *-**-* - It's doesn't really matter which side you connect the wires to, just make sure that at least two of them are in the middle. The wires are connected to the terminals surrounded by asteriks (*). Solder each connection carefully to make sure it's a good one that won't fall off, and make sure none of the wires are touching each other!! If they do you've got a short circuit and the box won't work! Here's the tricky part. Take the bottom two wires (looking at the DPDT switch from the bottom, so it looks like the above picture) and connect each one to the red terminal on the phone jacks. One wire to each jack. Then, take the top two wires and connect one to the green terminal on each phone jack. Again, one wire to each jack. Screw down all the terminals good and tight. If you've done this correctly, there should be two wires leading to each red and green terminal on the two phone jacks. Set the switch so it's in the off position. It's off when only the middle terminals of the switch are covered, or so that the switch is on the side where there aren't any wires coming to the terminals there. Just make sure it's in the beige mode. Your box is now built. (This is if you used the jacks I suggested at the top of the file.) To make it look pretty, you can cut away a portion of the plastic surrounding one of the jacks so that the switch will fit nicely in the place you cut away. Also cut away a small half-circle on the bottom of the surrounding plastic to feed the wires out of (the ones with the alligator clips, not the ones leading to the switch). Once these two things are done, and the switch is screwed down securely, tape it all up, super-glue, who cares. It doesn't matter; just so it stays together. Once all this is done, here's a few things I like to do to make things easy. Put a small dot of white paint in the lower part of the switch, so that when it's on the paint shows. This is easy to do. Also you might want to know which line you're using for each box. Just put a glob of a different colored paint on each side of the party box, and put the same color paint on the wires leading out of that side of the box. Use: When used in beige box mode (so that the switch is off), the party box will operate just like two beige boxes. There are totally, 100% separate from each other, and the conversations don't get crossed. However, when used in the party box mode, the party box connects both lines to each other, essentially connecting all four people to the same line. Everyone can hear each other, and there is little or no static created by doing this. It's works great for connecting anyone together, and all that's needed is each beige box connected to an output device ("Bell Can"), and the switch in the party mode position. See a file on beige boxing for detained info on what to do while boxing, etc, or how to connect to a Bell Can. Schematic: This is a really easy box, but someone might want a schematic, so here's one: <--- to one phone jack to the other phone jack ---> --------------------------- __/ ----------------------------- (red [ring] wire) | __/! | (red [ring] wire) ------------------------- O/ !_/ O --------------------------- (green [tip] wire) | __/ | (green [tip] wire) | O/ O | | | | | --- --- It's a really bad schematic, but the little things in the middle are supposed to represent the switch in the off posistion, and the exclamation points just mean it's a DPST switch that doesn't connect the top and the bottom termials. The (-) and the (|) are supposed to be the wire. Disclaimer: This file is, of course, only meant for informational purposes, and is in no way meant to be used. Any tapping of telephone lines is a federal offense, so don't come crying to me if you get busted, because I'm telling you not to do it. I'm not responsible for you; you're responsible for you. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ $$ How to make a $$ $$ $$ $$ Pearl Box $$ $$ $$ $$ Written and created by: Dr. D-Code $$ $$ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ The Pearl Box: Definition - This is a box that may substitute for many boxes which produce tones in hertz. The Pearl Box when operated correctly can produce tones from 1-9999hz. As you can see, 2600, 1633, 1336 and other cru- cial tones are obviously in its sound spectrum. MATERIALS: C1, C2::::::::.5mf or .5uf ceramic disk capacitors Q1::::::::::::NPN transistor (2N2222 works best) S1::::::::::::Normally open momentary SPST switch S2::::::::::::SPST toggle switch B1::::::::::::Standard 9-Volt battery R1::::::::::::Single turn, 50k potentiometer R2:::::::::::: " " 100k potentiometer R3:::::::::::: " " 500k potentiometer R4:::::::::::: " " 1meg potentiometer SPKR::::::::::Standard 8-ohm speaker T1::::::::::::Mini transformer (8-ohm works best) Misc.:::::::::Wire, solder, soldering iron, PC board or perfboard box to contain the completed unit, battery clip PROCEDURE Since the instruction are EXTREMELY difficult to explain in words, you will be given a schematic instead. It will be quite difficult to follow but try it any way. There is also a Hi-Res picture you can get that shows the schematic in great detail. Schematic for The Pearl Box +-------------+------------+---------+ ! ! \ +--S1---- C1 C2 \ SPKR ! ! + +-------- + + ----+T1 + !\ +---------------+------+ ! b c-------! ! Q1 ! ! e-----S2---+ ! ! ! ! ! B1 ! ! ! ! ! +-------+ !R1 R2 R3 R4! /\/\ /\/\ /\/\ /\/\ +--+ +--+ +--+ Now that you are probably thoroughly confused, let me explain a few minor details. The potentiometer area is rigged so that the left pole is connected to the center pole of the potentiometer next to it. The middle terminal of T1 is connected to the piece of wire that runs down to the end of the battery. OPERATION OF THE PEARL BOX You may want to get some dry-transfer decals at Radio Shack to make this job a lot easier. Also, some knobs for the tops of the potentiometers may be useful too. Use the decals to calibrate the knobs. R1 is the knob for the ones place, R2 is for the tens place, R3 if for the hundreds place and R4 is for the thousands place. S1 is for producing the all the tones and S2 is for power. Step 1: Turn on the power and adjust the knobs for the desired tone. (Example: For 2600 hz - R1 = 0: R2 = 0: R3 = 6: R4 = 2) Step 2: Hit the push-button switch and VOILA! You have the tone. If you don't have a tone recheck all connections and schematic. If you still don't have a tone call: $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ $ THE HISTORY OF ESS $ $ --- ------- -- --- $ $ $ $ $ $ Another original phile by: $ $ $ $ $ $$$$$$$$$$$$-=>Lex Luthor<=-$$$$$$$$$$$ $ $ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Of all the new 1960s wonders of telephone technology - satellites, ultra modern Traffic Service Positions (TSPS) for operators, the picturephone, and so on - the one that gave Bell Labs the most trouble, and unexpectedly became the greatest development effort in Bell System's history, was the perfection of an electronic switching system, or ESS. It may be recalled that such a system was the specific end in view when the project that had culminated in the invention of the transistor had been launched back in the 1930s. After successful accomplishment of that planned miracle in 1947-48, further delays were brought about by financial stringency and the need for further development of the transistor itself. In the early 1950s, a Labs team began serious work on electronic switching. As early as 1955, Western Electric became involved when five engineers from the Hawthorne works were assigned to collaborate with the Labs on the project. The president of AT&T in 1956, wrote confidently, "At Bell Labs, development of the new electronic switching system is going full speed ahead. We are sure this will lead to many improvements in service and also to greater efficiency. The first service trial will start in Morris, Ill., in 1959." Shortly thereafter, Kappel said that the cost of the whole project would probably be $45 million. But it gradually became apparent that the development of a commercially usable electronic switching system -in effect, a computerized telephone exchange - presented vastly greater technical problems than had been anticipated, and that, accordingly, Bell Labs had vastly underestimated both the time and the investment needed to do the job. The year 1959 passed without the promised first trial at Morris, Illinois; it was finally made in November 1960, and quickly showed how much more work remained to be done. As time dragged on and costs mounted, there was a concern at AT&T and some-thing approaching panic at Bell Labs. But the project had to go forward; by this time the investment was too great to be sacrificed, and in any case, forward projections of increased demand for telephone service indicated that within a phew years a time would come when, without the quantum leap in speed and flexibility that electronic switching would provide, the national network would be unable to meet the demand. In November 1963, an all-electronic switching system went into use at the Brown Engineering Company at Cocoa Beach, Florida. But this was a small installation, essentially another test installation, serving only a single company. Kappel's tone on the subject in the 1964 annual report was, for him, an almost apologetic: "Electronic switching equipment must be manufactured in volume to unprecedented standards of reliability.... To turn out the equipment economically and with good speed, mass production methods must be developed; but, at the same time, there can be no loss of precision..." Another year and millions of dollars later, on May 30, 1965, the first commercial electric central office was put into service at Succasunna, New Jersey. Bad as Shit Recently, a telephone fanatic in the northwest made an interesting discovery. He was exploring the 804 area code (Virginia) and found out that the 840 exchange did something strange. In the vast majority of cases, in fact in all of the cases except one, he would get a recording as if the exchange didn't exist. However, if he dialed 804-840 and four rather predictable numbers, he got a ring! After one or two rings, somebody picked up. Being experienced at this kind of thing, he could tell that the call didn't "supe", that is, no charges were being incurred for calling this number. (Calls that get you to an error message, or a special operator, generally don't supervise.) A female voice, with a hint of a Southern accent said, "Operator, can I help you?" "Yes," he said, "What number have I reached?" "What number did you dial, sir?" He made up a number that was similar. "I'm sorry that is not the number you reached." Click. He was fascinated. What in the world was this? He knew he was going to call back, but before he did, he tried some more experiments. He tried the 840 exchange in several other area codes. In some, it came up as a valid exchange. In others, exactly the same thing happened -- the same last four digits, the same Southern belle. Oddly enough, he later noticed, the areas worked in seemed to travel in a beeline from Washington DC to Pittsburgh, PA. He called back from a payphone. "Operator, can I help you?" "Yes, this is the phone company. I'm testing this line and we don't seem to have an identification on your circuit. What office is this, please?" "What number are you trying to reach?" "I'm not trying to reach any number. I'm trying to identify this circuit." "I'm sorry, I can't help you." "Ma'am, if I don't get an ID on this line, I'll have to disconnect it. We show no record of it here." "Hold on a moment, sir." After about a minute, she came back. "Sir, I can have someone speak to you. Would you give me your number, please?" He had anticipated this and he had the payphone number ready. After he gave it, she said, "Mr. XXX will get right back to you." "Thanks." He hung up the phone. It rang. INSTANTLY! "Oh my God," he thought, "They weren't asking for my number -- they were confirming it!" "Hello," he said, trying to sound authoritative. "This is Mr. XXX. Did you just make an inquiry to my office concerning a phone number?" "Yes. I need an identi--" "What you need is advice. Don't ever call that number again. Forget you ever knew it." At this point our friend got so nervous he just hung up. He expected to hear the phone ring again but it didn't. Over the next few days he racked his brains trying to figure out what the number was. He knew it was something big -- that was pretty certain at this point. It was so big that the number was programmed into every central office in the country. He knew this because if he tried to dial any other number in that exchange, he'd get a local error message from his CO, as if the exchange didn't exist. It finally came to him. He had an uncle who worked in a federal agency. He had a feeling that this was government related and if it was, his uncle could probably find out what it was. He asked the next day and his uncle promised to look into the matter. The next time he saw his uncle, he noticed a big change in his manner. He was trembling. "Where did you get that number?!" he shouted. "Do you know I almost got fired for asking about it?!? They kept wanting to know where I got it." Our friend couldn't contain his excitement. "What is it?" he pleaded. "What's the number?!" "IT'S THE PRESIDENT'S BOMB SHELTER!" He never called the number after that. He knew that he could probably cause quite a bit of excitement by calling the number and saying something like, "The weather's not good in Washington. We're coming over for a visit." But our friend was smart. he knew that there were some things that were better off unsaid and undone. <> Phreaking COSMOS =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- COSMOS is Bell's computer for handling information on customer lines, special services on lines, and orders to change line equipment, disconnect lines, etc. COSMOS stands for Computerized System for Mainframe Operations. It is based on the UNIX operating system and, depending upon the COSMOS and upon your access, has some, many, or no UNIX standard commands. COSMOS is powerful, but there is no reason to be afraid of it. This article will give some of the basic, pertinent info on how users get in, account format, and a few other goodies. Password Identification =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- To get onto COSMOS you need a dialup, account, password, and wire center (WC). Wire centers are two letter codes that tell what section of the COSMOS you are in. There are different WC's f or different areas and groups of exchanges. Examples are PB, SR, LK, et c. Sometimes there are accounts that have no password; obviously such accounts are the easiest to hack. Checking It Out =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Let's suppose you have a COSMOS number which you obtained one way or another. The first thing to do would be to make sure it is really a COSMOS system, not some other Bell or AT&T computer. To do this, you would call it and connect your modem,, then hit some returns until you got a response. It should say: ';LOGIN:' or 'NAME:'. If you enter some garbage it should say: 'PASSWORD:'. If you hit a return and it says 'WC?', it is a COSMOS system. If it says something like 'TA%' then you're in business. If it doesn't do any of the above, then it is either some other kind of system, or, if you're not getting anything at all, the dialup has probably gone bad. Getting In =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- COSMOS has certain accounts that are usually on the system, one of which might not have a password. They consist of ROOT (most powerful and almost always on the system), SYS (second most powerful, still many privileges), BIN (a little less power), PREOP (a little less), and COSMOS (hardly any privileges, like a normal user). The way to tell if they have passwords is by entering accounts at the ';LOGIN:' or ' NAME:' prompt, and if it jumps straight to 'WC?', all you need is a WC to get in. But suppose all of the accounts have passwords? You have two choices. You can try to hack the password and WC to one of the above accounts. I won't deal with this method, as is self-explanatory. Or you can do something I find much easier...call the COSMOS during business hours and hope that someone forgot to log off. Keep calling until when you connect and hit return until you get a 'WC%' prompt. 'WC' is the WC that the account you found is currently in. You are now in! What to Do while on-line =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- The first thing you want to do is write down the WC you are in. Only on our first login it is a good idea to print everything or dump everything to a buffer. Commands =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 'WCFLDS'(!) : Should list all WC's. 'WHO' : Should print everyone currently logged on the system, giving some accounts. 'TTY' : Tells what terminal port you are on. 'WHERE' : Should tell the location of the COSMOS installation. 'WHAT' : Tells what version of COSNIX, COSMOS's operating system, it is. 'LS *' : Prints all the files you have access to. 'CD /dir' : Connects you to the directory '/dir'. 'CAT filename ' : Prints the file 'filename'. 'Q' : Quits the editor. CTRL- Y. : Logs off 'TAT' : Sometimes prints a little help file. 'ISH' : Check someone's telefone #, type 'ISH' at the COSMOS 'WC%' prompt. Then type. 'HTN XXX-XXXX' : (Hunt Telephone Number) to tell you about the local number you are interested in. 'CAT /ETC/PASSWD': Prints out the password file, if you have access. The passwords are almost always encrypted, but you get a list of all the accounts. If you are lucky, one of the lines will have two colons after the account name. This means there is no prompt from the ';LOGIN:' or 'NAME:' prompts when you enter that account. To run a file just type the name followed by a return. When the system gives you a '-', you type a '.', and it will type all kinds of info on the phone number you entered (in Bell abbreviations, of course). If it is not a good exchange, it will say something to that effect. You type a period to end the ISH. If you wish to learn more information about COSMOS, find yourself a COSMOS manual or look at future issues of 2600. A UNIX manual would also be helpful for standard UNIX commands. Phreaking AT&T Cards =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My topic will deal with using an AT&T calling card for automated calls. Ok to place a call with an AT&T card, lift the handset (PAY PHONE) hit (0) and the desired area code and the number to call. Also when calling the same number that the card is being billed to you enter the phone number and at the tone only enter the last four digits on the card. But we don't want to do that now, do we. If additional calls are wanted all you do is hit the (#) and you will get a new dial tone! After you hit (#) you do not have to re-enter the calling card number simply enter your desired number and it will connect you. If the number you called is busy just keep hitting (#) and the number to be called until you connect! Ok to calL the U.S. of a from another country, you use the exact same format as described above! Ok now I will describe the procedure for placing calls to a foreign country, such as CANADA,RUSSIA,SOUTH AMERICA, etc.. Ok first lift the handset then enter (01) + the country code + the city code + the local telephone number. Ok after you get the tone enter the AT&T calling card number. Ok if you can not dial operator assisted calls from your area don't worry just jingle the operator and she will handle your call, don't worry she can't see you! The international number on the AT&T calling card is used for calling the US of A from places like RUSSIA, CHINA you never know when you might get stuck in a country like those and you have no money to make a call! The international operator will be able to tell you if they honor the AT&T calling card. Well I hope that this has straightened out some of your problems on the use of an AT&T calling card! All you have to remember is that weather you are placing the call or the operator, be careful and never use the calling card from your home phone!! That is a BIG NO NO.. Also AT&T has came out with a new thing called (NEW CARD CALLER SERVICE) they say that it was designed to meet the public's needs! These phones will be popping up in many place such as airport terminals, hotels, etc... What the new card caller service is, is a new type of phone that has a (CRT) screen that will talk to you in a language of your choice. The service works something like this, when you find a (NEW CARD CALLER PHONE), all you do is follow the instructions on the (CRT) screen, then you insert the (NEW CARD CALLER CARD) and there is a strip of magnetic tape on the card which reads the number, thus no one can hear you saying your number or if there were a bug in the phone,no touch tones will be heard!! You can also bill the call to a third party. that is one that I am not totally clear on yet! The phone is supposed to tell you how it can be done. That is after you have inserted your card and lifted the receiver! The Official Phreaker's Manual [ESSENCE OF TELEPHONE CONFERENCING] [WRITTEN BY:] [FOREST RANGER] TELEPHONE CONFERENCING IS AN EASY WAY OF GETTING MANY FRIENDS TOGETHER AT ONCE. THIS CAN BE ACCOMPLISHED EASILY WITH LITTLE OR NO TROUBLE WHAT SO EVER. THE TECHNIQUES THAT I WILL TEACH YOU DO NOT REQUIRE A BLUE BOX OR A TOUCH TONE PHONE LINE. THE ONLY PREREQUISITE IS THAT YOU HAVE A PHONE THAT HAS A TONE SWITCH ON IT OR HAVE A HOOKABLE TOUCH TONE KEYPAD. NOW, IF YOU ARE THE PARANOID TYPE OF PERSON AND REFUSE TO USE YOUR OWN PHONE OUT OF YOUR HOUSE THEN HERE ARE SOME SIMPLE WAYS OF GETTING CONFERENCES STARTED FROM ANOTHER PHONE. GO TO A MALL OR A PLACE WHERE YOU KNOW THE PHONE IS BEING PAYED FOR BY THE BUSINESS IT IS IN. NOW THERE ARE TWO TO CALL THE CONFERENCE OPERATOR; DIAL "0" TO GET YOUR LOCAL OPERATOR SO SHE CAN PUT YOU THROUGH TO THE CONFERENCE OPERATOR OR DIAL THE CONFERENCE OPERATOR DIRECTLY IF YOU HAVE THE NUMBER HANDY. THE SYSTEM YOU WILL BE LINKED UP TO IS CALLED THE "ALLIANCE" SYSTEM. THERE ARE THREE BRANCHES; 1000,2000,3000. NOW ONCE YOU HAVE GOTTEN THE CONFERENCE OPERATOR YOU TELL HER YOU WOULD LIKE TO START A CONFERENCE AND YOU WOULD LIKE TO MAINTAIN CONTROL OF IT. SHE WILL THEN PROCEED TO ASK YOU FOR YOUR NAME AND NUMBER. YOU WILL THEN GIVE HER A FAKE NAME AND THE NUMBER OF THE PAY PHONE. SHE WILL HANG UP AND CALL YOU BACK ONCE SHE HAS CHECKED THE NUMBER. THEY USUALLY DON'T REALIZE IT IS A PAYPHONE SO DON'T THINK IT WON'T WORK! NOW ONCE THE OPERATOR HAS GIVEN YOU CONTROL YOU WILL THEN PROCEED TO HACK MY VOICE PHONE AND PUT ME ON THE CONFERENCE. NOW, THE OTHER WAY OF STARTING A CONFERENCE IN WHICH YOU DON'T GET A LIVE OPERATOR IS A "PBX". WITH THIS YOU WILL CALL A PBX NUMBER AND YOU WILL THEN RECEIVE A RECORDING OF A BUSINESS OR OFFICE CO. THEN WHEN THE RECORDING IS OVER YOU WILL HERE A BEEP...THEN AFTER ABOUT 10-30 SECONDS AFTER THE BEEP YOU WILL GET A DIAL TONE ON THE ON THE END OF THE PBX. YOU WILL THEN TYPE THE PBX CODE WHICH WILL THEN RESPOND WITH A RECORDING WELCOMING YOU TO THE CONFERENCING NETWORK (WHICH WILL IN MOST IF NOT ALL BE THE "ALLIANCE" SYSTEM). IT WILL BE SELF EXPLANATORY FROM THERE. NOW IF YOU DON'T WISH TO CALL THE CONFERENCE OPERATOR EITHER WAY ALREADY EXPLAINED THEN THERE IS A WAS OF GETTING YOUR FRIENDS IN CONFERENCE. THIS IS DONE OVER A LOOP EXTENSION. NO ONE WILL HAVE CONTROL, BUT YOU WILL STILL BE ON CONFERENCE. THIS IS CALLED THE SEVEN LINE LOOP EXTENSION. THIS MEANS YOU CAN HAVE UP TO SEVEN MEMBERS, BUT THAT IS IT! THE NUMBER IS IN LA, CA. 213-206-2820. THE LAST WAY I WILL EXPLAIN TO YOU IF YOU ARE IN DESPERATE NEED OF A CONFERENCE IS TO GO TO PAY PHONE LIKE I MENTIONED BEFORE ANY MAKE SURE SOME BUSINESS PAYS THE BILL FOR IT THEN CALL THE CONFERENCE OPERATOR IN THE FASHIONS MENTIONED AND ASK THE CONFERENCE OPERATOR TO PLACE CONFERENCE CALLS. THE WILL THEN ASK FOR THE NUMBERS OF THE PEOPLE TO PUT ON CONFERENCE, YOU GIVE HER THE NUMBERS AND SHE WILL PUT YOU ALL ON CONFERENCE. WHEN YOU ARE DONE YOU WILL HANG UP ON HER SO THERE WILL BE NO ONE IN CONTROL.THAT MEANS THE CONFERENCE WILL BE BILLED TO THE PAYPHONE AND NO ONE CAN BE BLAMED FOR THE CONFERENCE DUE TO NO ONE BEING IN CONTROL! ***NOTE*** THE CONFERENCE OPERATOR WILL NOT BE ON WHILE YOU ARE ALL TALKING! REMEMBER THAT CONFERENCES ARE NOT HARD AND IT IS VERY HARD TO GET ARRESTED ON ONE DUE TO WHAT I HAVE MENTIONED. [TELEPHONE CONFERENCE CONTROLS] # - CONTROL MODE # - 6 PASSES CONTROL # - 1 + AREA CODE & NUMBER ADDS # - 9 SILENT MODE # - 7 GETS CONFERENCE OPERATOR * - ENDS CONFERENCE THE "#" IS THE CONTROL KEY ON YOUR CONFERENCES. WHEN YOU PASS CONTROL TO SOMEONE ELSE HIT THE "#" THEN "6". WAIT FOR THE RECORDING TO SAY ENTER # OF PERSON TO PASS CONTROL TO, THEN ENTER THE NUMBER OF THE PERSON YOU ARE GOING TO GIVE CONTROL TO. TO ADD A PERSON ON TO THE CONFERENCE HIT "#" THEN "1","AREA CODE","NUMBER". THEN WHEN THE PERSON ANSWERS WAIT FIVE SECONDS THEN HIT THE "#" TO ADD. IF YOU ARE IN CONTROL OF THE CONFERENCE AND YOU WANT TO HEAR EVERYONE ELSE, BUT YOU DO NOT WANT TO BE HEARD IT "#" THEN "9" THEN THE "#" TO REJOIN THE CONFERENCE. REMEMBER AFTER ADDING SOMEONE ON OR PASSING CONTROL TO SOMEONE YOU MUST ALWAYS HIT THE "#" TO REJOIN THE OTHERS ON CONFERENCE: PASSING CONTROL: "#","6", WAIT FOR RECORDING TO SAY ENTER NUMBER OF PARTY TO GIVE CONTROL TO THEN ENTER NUMBER AND HIT "#" TO REJOIN YOUR CONFERENCE.IF YOU EVER WANT TO GET A CONFERENCE OPERATOR FOR SOME STRANGE REASON THEN HIT "#","7" AND WAIT FOR A CONFERENCE OPERATOR TO CLICK ON. TO END A CONFERENCE HIT "*". 2600 Magazine's story on the Private Sector Bust Uploaded by Elric of Imrryr Lunatic Labs Unlimited :::::::::::::::::::::::::::::::::::::::::::::::: Typed By Shooting Shark : The following article appeared in the August, 1985 issue of 2600 Magazine. Subscriptions to 2600 are $12 a year for individuals. Make checks payable to 2600 Enterprises, Inc. Write to: 2600, Box 752, Middle Island, NY 11953-0752. Their phone number is 516-751-2600. Text of article follows. SEIZED! 2600 Bulletin Board is Implicated in Raid on Jersey Hackers On July 12, 1985, law enforcement officials seized the Private Sector BBS, the official computer bulletin board of 2600 magazine, for "complicity in computer theft," under the newly passed, and yet untested, New Jersey Statute 2C:20-25. Police had uncovered in April a credit carding ring operated around a Middlesex County electronic bulletin board, and from there investigated other North Jersey bulletin boards. Not understanding subject matter of the Private Sector BBS, police assumed that the sysop was involved in illegal activities. Six other computers were also seized in this investigation, including those of Store Manager [perhaps they mean Swap Shop Manager? - Shark] who ran a BBS of his own, Beowolf, Red Barchetta, the Vampire, NJ Hack Shack, sysop of the NJ Hack Shack BBS, and that of the sysop of the Treasure Chest BBS. Immediately after this action, members of 2600 contacted the media, who were completely unaware of any of the raids. They began to bombard the Middlesex County Prosecutor's Office with questions and a press conference was announced for July 16. The system operator of the Private Sector BBS attempted to attend along with reporters from 2600. They were effectively thrown off the premises. Threats were made to charge them with trespassing and other crimes. An officer who had at first received them civilly was threatened with the loss of his job if he didn't get them removed promptly. Then the car was chased out of the parking lot. Perhaps prosecutor Alan Rockoff was afraid that he presence of some technically literate reporters would ruin the effect of his press release on the public. As it happens, he didn't need our help. The next day the details of the press conference were reported to the public by the press. As Rockoff intended, paranoia about hackers ran rampant. Headlines got as ridiculous as hackers ordering tank parts by telephone from TRW and moving satellites with their home computers in order to make free phone calls. These and even more exotic stories were reported by otherwise respectable media sources. The news conference understandably made the front page of most of the major newspapers in the US, and was a major news item as far away as Australia and in the United Kingdom due to the sensationalism of the claims. We will try to explain why these claims may have been made in this issue. On July 18 the operator of The Private Sector was formally charged with"computer conspiracy" under the above law, and released in the custody of his parents. The next day the American Civil Liberties Union took over his defense. The ACLU commented that it would be very hard for Rockoff to prove a conspiracy just "because the same information, construed by the prosecutor to be illegal, appears on two bulletin boards." especially as Rockoff admitted that "he did not believe any of the defendants knew each other." The ACLU believes that the system operator's rights were violated, as he was assumed to be involved in an illegal activity just because of other people under investigation who happened to have posted messages on his board. In another statement which seems to confirm Rockoff's belief in guilt by association, he announced the next day that "630 people were being investigated to determine if any used their computer equipment fraudulently." We believe this is only the user list of the NJ Hack Shack, so the actual list of those to be investigated may turn out to be almost 5 times that. The sheer overwhelming difficulty of this task may kill this investigation, especially as they find that many hackers simply leave false information. Computer hobbyists all across the country have already been called by the Bound Brook, New Jersey office of the FBI. They reported that the FBI agents used scare tactics in order to force confessions or to provoke them into turning in others. We would like to remind those who get called that there is nothing inherently wrong or illegal in calling any ANY BBS, nor in talking about ANY activity. The FBI would not comment on the case as it is an "ongoing investigation" and in the hands of the local prosecutor. They will soon find that many on the Private Sector BBS's user list are data processing managers, telecommunications security people, and others who are interested in the subject of the BBS, hardly the underground community of computer criminals depicted at the news conference. The Private Sector BBS was a completely open BBS, and police and security people were even invited on in order to participate. The BBS was far from the "elite" type of underground telecom boards that Rockoff attempted to portray. Within two days, Rockoff took back almost all of the statements he had made at the news conference, as AT&T and the DoD [Department of Defense - Shark] discounted the claims he had made. He was understandably unable to find real proof of Private Sector's alleged illegal activity, and was faced with having to return the computer equipment with nothing to show for his effort. Rockoff panicked, and on July 31, the system operator had a new charge against him, "wiring up his computer as a blue box." Apparently this was referring to his Novation Applecat modem which is capable of generating any hertz tone over the phone line. By this stretch of imagination an Applecat could produce a 2600 hertz tone as well as the MF which is necessary for "blue boxing." However, each and every other owner of an Applecat or any other modem that can generate its own tones therefore has also "wired up his computer as a blue box" by merely installing the modem. This charge is so ridiculous that Rockoff probably will never bother to press it. However, the wording of WIRING UP THE COMPUTER gives rockoff an excuse to continue to hold onto the computer longer in his futile search for illegal activity. "We have requested that the prosecutors give us more specific information," said Arthur Miller, the lawyer for The Private Sector. "The charges are so vague that we can't really present a case at this point." Miller will appear in court on August 16 to obtain this information. He is also issuing a demand for the return of the equipment and, if the prosecutors don't cooperate, will commence court proceedings against them. "They haven't been particularly cooperative," he said. Rockoff probably will soon reconsider taking Private Sector's case to court, as he will have to admit he just didn't know what he was doing when he seized the BBS. The arrest warrant listed only "computer conspiracy" against Private Sector, which is much more difficult to prosecute than the multitude of charges against some of the other defendants, which include credit card fraud, toll fraud, the unauthorized entry into computers, and numerous others. Both Rockoff and the ACLU mentioned the Supreme Court in their press releases, but he will assuredly take one of his stronger cases to test the new New Jersey computer crime law. by seizing the BBS just because of supposed activities discussed on it, Rockoff raises constitutional questions. Darrell Paster, a lawyer who centers much of his work on computer crime, says the New Jersey case is "just another example of local law enforcement getting on the bandwagon of crime that has come into vogue to prosecute, and they have proceeded with very little technical understanding, and in the process they have abused many people's constitutional rights. What we have developing is a mini witch hunt which is analogous to some of the arrests at day care centers, where they sweep in and arrest everybody, ruin reputations, and then find that there is only one or two guilty parties." We feel that law enforcement, not understanding the information on the BBS, decided to strike first and ask questions later. 2600 magazine and the sysops of the Private Sector BBS stand fully behind the system operator. As soon as the equipment is returned, the BBS will go back up. We ask all our readers to do their utmost to support us in our efforts, and to educate as many of the public as possible that a hacker is not a computer criminal. We are all convinced of our sysop's innocence, and await Rockoff's dropping of the charges. NOTE: Readers will notice that our reporting of the events are quite different than those presented in the media and by the Middlesex County Prosecutor. We can only remind you that we are much closer to the events at hand than the media is, and that we are much more technologically literate than the Middlesex County Prosecutor's Office. The Middlesex County Prosecutor has already taken back many of his statements, after the contentions were disproven by AT&T and the DoD. One problem is that the media and the police tend to treat the seven cases as one case, thus the charges against and activities of some of the hackers has been extended to all of the charged. We at 2600 can only speak about the case of Private Sector. ************* << BIOC AGENT 003'S COURSE IN >> ************* * * * $%$%$%$%$%$%$%$%$%$%$%$%$%$%$%$%$ * * BASIC TELECOMMUNICATIONS * * $%$%$%$%$%$%$%$%$%$%$%$%$%$%$%$%$ * * PART I * * * ************************************************************ PREFACE: <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> IN PART I, WE WILL EXPLORE THE VARIOUS SPECIAL BELL#'S, SUCH AS: CN/A, AT&T NEWSLINES, LOOPS, 99XX #'S, ANI, RINGBACK, AND A FEW OTHERS. CN/A: <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> CN/A, WHICH STANDS FOR CUSTOMER NAME AND ADDRESS, ARE BUREAUS THAT EXIST SO THAT AUTHORIZED BELL EMPLOYEES CAN FIND OUT THE NAME AND ADDRESS OF ANY CUSTOMER IN THE BELL SYSTEM. ALL #'S ARE MAINTAINED ON FILE INCLUDING UNLISTED #'S. HERE'S HOW IT WORKS: 1) YOU HAVE A # AND YOU WANT TO FIND OUT WHO OWNS IT, E.G. (914) 555-1234. 2) YOU LOOK UP THE CN/A # FOR THAT NPA IN THE LIST BELOW. IN THE EXAMPLE, THE NPA IS 914 AND THE CN/A# IS 518-471-8111. 3) YOU THEN CALL UP THE CN/A # (DURING BUSINESS HOURS) AND SAY SOMETHING LIKE, "HI, THIS IS JOHN JONES FROM THE RESIDENTIAL SERVICE CENTER IN MIAMI. CAN I HAVE THE CUSTOMER'S NAME AT 914-555-1234. THAT # IS 914-555-1234." MAKE UP YOUR OWN REAL SOUNDING NAME, THOUGH. 4) IF YOU SOUND NATURAL & CHEERY, THE OPERATOR WILL ASK NO QUESTIONS. HERE'S THE LIST: <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> NPA CN/A # NPA CN/A # --- ------------ --- ------------ 201 201-676-7070 517 313-232-8690 202 202-384-9620 518 518-471-8111 203 203-789-6800 519 416-487-3641 204 ****N/A***** 601 601-961-0877 205 205-988-7000 602 303-232-2300 206 206-382-8000 603 617-787-2750 207 617-787-2750 604 604-432-2996 208 303-232-2300 605 402-345-0600 209 415-546-1341 606 502-583-2861 212 518-471-8111 607 518-471-8111 213 213-501-4144 608 414-424-5690 214 214-948-5731 609 201-676-7070 215 412-633-5600 612 402-345-0600 216 614-464-2345 613 416-487-3641 217 217-525-7000 614 614-464-2345 218 402-345-0600 615 615-373-5791 219 317-265-7027 616 313-223-8690 301 301-534-11?? 617 617-787-2750 302 412-633-5600 618 217-525-7000 303 303-232-2300 701 402-345-0600 304 304-344-8041 702 415-546-1341 305 912-784-9111 703 804-747-1411 306 ****N/A***** 704 912-784-9111 307 303-232-2300 705 416-487-3641 308 402-345-0600 707 415-546-1341 309 217-525-7000 709 ****N/A***** 312 312-769-9600 712 402-345-0600 313 313-223-8690 713 713-658-1793 314 314-436-3321 714 213-995-0221 315 518-471-8111 715 414-424-5690 316 816-275-2782 716 518-471-8111 317 317-265-7027 717 412-633-5600 318 318-227-1551 801 303-232-2300 319 402-345-0600 802 617-787-2750 401 617-787-2750 803 912-784-9111 402 402-345-0600 804 804-747-1411 403 403-425-2652 805 415-546-1341 404 912-784-9111 806 512-828-2502 405 405-236-6121 807 416-487-3641 406 303-232-2300 808 212-226-5487 408 415-546-1341 BERMUDA ONLY 412 412-633-5600 809 212-334-4336 413 617-787-2750 812 317-265-7027 414 414-424-5690 813 813-228-7871 415 415-546-1132 814 412-633-5600 416 416-487-3641 815 217-525-7000 417 314-436-3321 816 816-275-2782 418 514-861-6391 817 214-948-5731 419 614-464-2345 819 514-861-6391 501 405-236-6121 901 615-373-5791 502 502-583-2861 902 902-421-4110 503 503-241-3440 903 ****N/A***** 504 504-245-5330 904 912-784-9111 505 303-232-2300 906 313-223-8690 506 506-657-3855 907 ****N/A***** 507 402-345-0600 912 912-784-9111 509 206-382-8000 913 816-275-2782 512 512-828-2501 914 518-471-8111 513 614-464-2345 915 512-828-2501 514 514-861-6391 916 415-546-1341 515 402-345-0600 918 405-236-6121 516 518-471-8111 919 912-784-9111 <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> BELL USES THESE #'S MAINLY TO FIND OUT WHO OWNS A # THAT A CUSTOMER CLAIMS HE NEVER CALLED. INFO ON STOCK, TECHNOLOGY, ETC. CONCERNING THE BELL SYSTEM. HERE ARE THE #'S THAT ARE CURRENTLY KNOWN TO PHREAKS (AT LEAST ME, ANYWAY): <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> 201-483-3800 NJ 513-421-9060 OH 203-771-4920 CT 516-234-9914 NY 212-393-2151 NY 518-471-2272 NY 213-621-4141 CA 617-955-1111 MA 213-829-0111 CA (GTE) 702-789-6711 NV 213-449-8830 CA 713-224-6116 TX 312-368-8000 IL 714-238-1111 CA 313-223-7223 MI 717-255-5555 PA 314-247-5511 MO 717-787-1031 PA 408-493-5000 CA 802-955-1111 VE 412-633-3333 PA 808-533-4426 HI 414-678-3511 WI 813-223-5666 FL 416-929-4323 ONT. 914-948-8100 NY 503-228-6271 OR 916-480-8000 CA RING BACK <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> RINGBACK, AS ITS NAME IMPLIES, CALLS BACK THE # YOU ARE AT WHEN YOU DIAL THE RINGBACK #. RINGBACK, IN NPA 914, IS 660. YOU DIAL 660+THE LAST 4 DIGITS OF THE FONE. YOU WILL THEN GET A TONE, HANG-UP QUICKLY AND PICK-UP IN ABOUT 2 SECONDS. YOU WILL THEN GET A SECOND TONE, HANG-UP AGAIN AND THE FONE WILL RING. IN NYC, IT IS ALSO 660, BUT YOU MAY HAVE TO PRESS 6 OR 7 BEFORE YOU HANG UP FOR THE FIRST TIME (IE, AT THE FIRST TONE). OTHER RINGBACK #'S THAT I HAVE SEEN ARE: 26011 - THIS 5 DIGIT FORMAT IS USED PRIMARILY ON STEP-BY-STEP. THE LAST 2 DIGITS (11) ARE DUMMY DIGITS. 890-897-XXXX - XXXX ARE THE LAST 4 DIGITS OF THE FONE #. 119911/11911/1199911 - GTE NNX-9906/9907 - NPA 301, NNX IS THE EXCHANGE THE REASON YOU GET THE TONE WHEN YOU PICK-UP AFTER IT RINGS IS BECAUSE IN SOME AREAS, PEOPLE WERE USING RINGBACK AS AN IN-HOUSE INTERCOM. THEY WOULD DIAL RINGBACK, AND WHEN IT STOPPED RINGING, THEY WOULD PICK-UP & TALK WITH THE PERSON WHO PICKED UP THE OTHER EXTENSION. BELL DIDN'T LIKE THIS SINCE THERE IS USUALLY ONLY 1 PIECE OF EQUIPMENT IN EACH EXCHANGE THAT DOES THE RINGBACK. WHEN PEOPLE USED THIS AS AN INTERCOM, LINEMEN & REPAIRMEN COULDN'T GET THROUGH! IN SOME AREAS, ESPECIALLY THOSE UNDER STEP-BY-STEP, RINGBACK CAN STILL BE USED AS AN INTERCOM. ALSO, UNDER STEP-BY-STEP, THE RINGBACK PROCEDURE IT USUALLY SIMPLE. FOR EXAMPLE, IN ONE AREA YOU WOULD DIAL 26011 AND HANG-UP; IT WOULD THEN RINGBACK. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- THE FOLLOWING CO CODES ARE RESERVED NATIONWIDE: 555 - DIRECTORY ASSISTANCE 844 - TIME ] THESE ARE NOW IN 936 - WEATHER ] THE 976 EXCHANGE 950 - FUTURE SERVICES 958 - PLANT TEST 959 - PLANT TEST 970 - PLANT TEST (TEMPORARY) 976 - DIAL-IT SERVICES ALSO, THE 3 DIGIT ANI & RINGBACK #'S ARE REGARDED AS PLANT TEST AND ARE THUS RESERVED. THESE NUMBERS VARY FROM AREA TO AREA. 950: HERE ARE THE SERVICES THAT ARE CURRENTLY ON THE 950 EXCHANGE: 1000 - SPC 1022 - MCI EXECUNET 1033 - US TELEPHONE 1044 - ALLNET 1066 - LEXITEL 1088 - SBS SKYLINE THESE SCC'S (SPECIALIZED COMMON CARRIERS) ARE FREE FROM FORTRESSES! Publishers note: Most 950's now require the station code (1022, 1000, 1088, etc.) to be five digits long. MCI 950-10222, US telefone 10333, ALLNET 10444, etc. Look in "Equal Access and the American Dream" p. for a complete list. PLANT TESTS: <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> THESE INCLUDE ANI, RINGBACK, AND OTHER VARIOUS TESTS. 976: DIAL 976-1000 TO SEE WHAT IS CURRENTLY ON THE SERVICE. ALSO, MANY BBS'S HAVE A LISTING OF THESE #'S. BELL IS TRYING TO PHASE SOME OF THESE OUT, BUT THEY STILL EXIST IN MANY AREAS. 011 - INTERNATIONAL DIALING PREFIX 211 - COIN REFUND OPERATOR 411 - DIRECTORY ASSISTANCE 611 - REPAIR SERVICE 811 - BUSINESS OFFICE 911 - EMERGENCY INTERNATIONAL DIALING WITH INTERNATIONAL DIALING, THE WORLD HAS BEEN DIVIDED INTO 9 NUMBERING ZONES. TO MAKE AN INTERNATIONAL CALL, YOU MUST DIAL: INT. PREFIX + COUNTRY CODE + NAT. # IN NORTH AMERICA, THE INTERNATIONAL DIALING PREFIX IS 011 FOR STATION-TO-STATION CALLS AND 01 FOR OPERATOR- SERVICED CALLS. IDDD STANDS FOR INTERNATIONAL DIRECT DISTANCE DIALING. THE COUNTRY CODE, WHICH VARIES FROM 1 TO 3 DIGITS, ALWAYS HAS THE WORLD NUMBERING ZONE AS THE FIRST DIGIT. FOR EXAMPLE, THE COUNTRY CODE FOR THE UNITED KINGDOM IS 44, THUS IT IS IN WORLD NUMBERING ZONE 4. SOME BOARDS MAY CONTAIN A COMPLETE LISTING OF OTHER COUNTRY CODES, BUT HERE ARE A FEW: 001 - NORTH AMERICA (US, CANADA,ETC) 020 - EGYPT 258 - MOZAMBIQUE 034 - SPAIN 049 - GERMANY 052 - MEXICO (SOUTHERN PORTION) 061 - AUSTRALIA 007 - USSR 081 - JAPAN 098 - IRAN IF YOU CALL FROM AN AREA OTHER THAN NORTH AMERICA, THE FORMAT IS GENERALLY THE SAME. FOR EXAMPLE, LET'S SAY YOU WANTED TO CALL THE WHITE HOUSE FROM SWITZERLAND. FIRST YOU WOULD DIAL 00 (THE SWISS INTERNATIONAL DIALING PREFIX), THEN 1 (THE US COUNTRY CODE), FOLLOWED BY 202-456-1414 (THE NATIONAL # FOR THE WHITE HOUSE). ALSO, COUNTRY CODE 87 IS RESERVED FOR MARITIME MOBILE SERVICE, IE CALLING SHIPS: 871 - MARISAT (ATLANTIC) 872 - MARISAT (PACIFIC) 873 - MARISAT (INDIAN ) INTERNATIONAL SWITCHING: IN NORTH AMERICA, THERE ARE CURRENTLY 7 NO. 4 ESS'S THAT PERFORM THE DUTY OF ISC (INTERNATIONAL SWITCHING CENTERS). ALL INTERNATIONAL CALLS DIALED FROM NUMBERING ZONE 1 WILL BE ROUTED THROUGH ONE OF THESE "GATEWAY CITIES." THEY ARE: 182 - WHITE PLAINS, NY 183 - NEW YORK, NY 184 - PITTSBURGH, PA 185 - ORLANDO, FL 186 - OAKLAND, CA 187 - DENVER, CO 188 - NEW YORK, NY ************************************** * * * MAX ACCESS PORTS * * * * (LEXITEL CORPORATION) * * * * WORD PROCESSED BY THE DAGDA MOR * * * ************************************** ADRIAN,MI............313-263-0191 LIVONIA, MI..........313-261-6970 AKRON,OH.............216-275-9814 LOS ANGELES, CA......213-624-9041 ANN ARBOR, MI........313-451-2121 LOUISVILLE, KY.......502-568-6204 ATLANTA, GA..........404-525-1769 MARION, OH...........614-387-1011 AVON LAKE, OH........216-933-2823 MCKEESPORT, PA.......412-664-4870 BADEN, PA............412-869-1360 MENTOR, OH...........216-255-1645 BALTIMORE, MD........301-444-7280 MIDDLETOWN, OH.......513-423-1066 BEAVER FALLS, PA.....412-847-3640 MILWAUKEE, WI........414-933-1880 BIRMINGHAM, MI.......313-649-0730 MINNEAPOLIS, MN......612-375-0280 BOSTON, MA...........617-267-9134 MONESSEN, PA.........412-684-8710 BUFFALO, NY..........716-854-0802 MORTON GROVE,IL......312-950-1066 BUTLER, PA...........412-285-9081 NEWARK, NJ...........201-624-5040 CANTON, OH...........216-455-1425 NEWARK, OH...........614-349-8754 CHICAGO, IL..........312-950-1066 NEW CASTLE, PA.......412-656-9420 CHILLICOTHE, OH......614-772-1066 NEW YORK, NY.........212-950-1066 CINCINNATI, OH.......513-421-1880 OAK LAWN, IL.........312-950-1066 CLEVELAND, OH........216-771-6614 PHILADELPHIA, PA.....215-751-9711 COLUMBUS, OH.........614-950-1066 PITTSBURG, PA........412-391-9532 DALLAS, TX...........214-653-1047 PLYMOUTH, MI.........313-451-2121 DAYTON, OH...........513-223-0366 PONTIAC, MI..........313-332-0500 DETROIT, MI..........313-950-1066 PORT HURON, MI.......313-982-7115 ELK GROVE, IL........312-950-1066 PHOENIX, AZ..........602-242-0252 ELYRIA, OH...........419-323-4431 QUEENS, NY...........718-204-7330 FINDLAY, OH..........419-424-5934 SANDUSKY, OH.........419-625-1289 GLEENSHAW, PA........412-486-7394 SHARON, PA...........412-983-0100 GRAND RAPIDS, MI.....616-456-7925 SPRINGFIELD, OH......513-950-1066 GREENSBURG, PA.......412-836-8110 STEUBENVILLE, OH.....614-283-1756 HACKENSACK, NJ.......201-342-2815 ST. LOUIS, MO........314-289-9100 HOUSTON, TX..........713-224-0982 ST. PAUL, WI.........612-375-0280 INDIANA, PA..........412-349-8760 TOLEDO, OH...........419-255-1316 INDIANAPOLIS, IN.....317-638-4442 TROY, OH.............513-335-2303 KALAMAZOO, MI........616-342-0266 TURTLE CREEK, PA.....412-823-1500 KANSAS CITY, MO......816-474-6193 WASHINGTON, DC.......202-479-4411 KOKOMO, IN...........317-453-9932 WASHINGTON, PA.......412-225-1800 LA GRANGE, IL........312-950-1066 WARREN, MI...........313-268-9120 LANCASTER, OH........614-687-0159 XENIA, OH............513-376-2991 LANSING, MI..........517-950-1066 YOUNGSTOWN, OH.......216-746-2021 LAFAYETTE, IN........317-423-5492 ZANESVILLE, OH.......614-454-6815 ******************** METROFONE ACCESS NUMBERS ******************** ANAHEIM, CA (714)527-7055 LOS ANGELES, CA (213)992-8282 ATLANTA, GA (404)223-1000 LOS ANGELES, CA (213)202-6117 AUSTIN, TX (512)474-6057 MIAMI, FL (305)326-3300 BALTIMORE, MD (301)659-7700 MILWAUKEE, WI (414)277-1805 BEAUMONT, TX (713)833-9331 MINNEAPOLIS, MN (612)370-9000 BOSTON, MA (617)482-3222 NEW ORLEANS, LA (504)566-8500 BUFFALO, NY (716)852-9200 NEW YORK, NY (212)732-7430 CHICAGO, IL (312)853-4700 NEWARK, NJ (201)645-9220 CINCINNATI, OH (513)241-1747 OAKLAND, CA (415)836-6900 CLEVELAND, OH (216)861-5163 OKLAHOMA CITY, OK (405)232-9011 COLUMBUS, OH (614)224-0577 OMAHA, NE (402)422-1120 CULVER CITY, CA (213)410-0078 PHILADELPHIA, PA (215)351-0100 DALLAS, TX (214)742-4500 PITTSBURGH, PA (412)261-5720 DAYTON, OH (513)228-1576 RENO, NV (702)329-1025 DENVER, CO (303)623-5326 RICHMOND, VA (804)225-1920 DETROIT, MI (313)963-4847 ST. LOUIS, MO (314)342-1130 EL MONTE, CA (213)350-1028 SACRAMENTO, CA (916)443-6921 ELK GROVE, IL (312)981-8870 SAN ANTONIO, TX (512)224-9600 FT. LAUDERDALE, FL (305)462-3530 SAN DIEGO, CA (714)233-0327 FT. WORTH, TX (817)338-1639 SAN FRANCISCO, CA (415)956-0162 HACKENSACK, NJ (201)487-3155 SAN JOSE, CA (408)947-7606 HARTFORD, CT (203)522-0003 SAN MATEO, CA (415)579-6001 HAWTHORNE, NJ (201)427-1100 SANTA ANA, CA (714)972-9515 HINSDALE, IL (312)986-0566 SEATTLE, WA (206)382-0910 HOUSTON, TX (713)224-9417 SKOKIE, IL (312)679-8120 HUNTINGTON BEACH, CA (714)972-8515 SYRACUSE, NY (315)474-3911 INDIANAPOLIS, IN (317)635-6284 TOLEDO, OH (419)243-1046 KANSAS CITY, KS (913)621-3186 WASHINGTON, DC (202)737-2051 LONG ISLAND, NY (516)443-5402 LOS ANGELES, CA (213)629-1026 ---------------------------------------------------------------------- Area Codes In Numerical Order, by The Jammer ______________________________________________________________________ 201 Newark New Jersey 519 London Ontario 202 Washington D.C (all) 601 Mississippi (all) 203 Connecticut (all) 602 Arizona (all) 205 Alabama (all) 603 New Hampshire (all) 206 Seattle Washington 605 South Dakota (all) 207 Maine (all) 606 Winchester Kentucky 208 Idaho (all) 607 Binghamton New York 212 Bronx Nyc, New York 608 Madison Wisconsin 212 Manhattan Nyc, New York 609 Trenton New Jersey 213 Los Angeles California 612 St. Paul Minnesota 214 Dallas Texas 613 Ottawa Ontario 215 Philadelphia Pennsylvania 614 Columbus Ohio 216 Cleveland Ohio 615 Nashville Tennessee 217 Springfield Illinois 616 Grand Rapids Michigan 218 Duluth Minnesota 617 Boston Massachusetts 219 Gary Indiana 618 Alton Illinois 301 Maryland (all) 619 San Diego California 303 Colorado (all) 700 Teleconference (all) 304 West Virginia (all) 701 North Dakota (all) 305 Miami Florida 702 Nevada (all) 305 Orlando Florida 703 Alexandria Virginia 307 Wyoming (all) 704 Charlotte North Carolina 308 Abott Nebraska 705 North Bay Ontario 309 Peoria Illinois 712 Councilbluffs Iowa 312 Chicago Illinois 713 Houston Texas 313 Detroit Michigan 714 Anaheim California 314 St. Louis Missouri 715 Bay City Wisconsin 315 Syracuse New York 716 Buffalo New York 316 Wichita Kansas 716 Rochester New York 317 Indinapolis Illinois 717 Harrisburg Pennsylvania 318 Lake charles Lousiana 800 WATS (all) 319 Davenport Iowa 801 Utah (all) 401 Rhode Island (all) 802 Vermont (all) 402 Omaha Nebraska 803 South Carolina (all) 404 Atlanta Georgia 804 Richmond Virgina 405 Oklahoma City Oklahoma 805 Bakersfield California 406 Montana (all) 806 Amarillo Texas 408 San Jose California 807 Thunder Bay Ontario 412 Pittsburg Pennsylvania 808 Hawaii (all) 413 Springfield Massachusetts 809 Bermuda (all) 414 Milwaukee Wisconsin 809 Bahamas (all) 415 San Francisco California 809 Puerto Rico (all) 416 Toronto Onterio 809 Virgin Islands (all) 417 Joplin Missouri 812 Evansville Indiana 418 Quebec Quebec 812 Dade park Kentucky 419 Toledo Ohio 814 Johnston Pennsylvania 501 Arkansas (all) 815 Rockford Illinois 502 Frankfort Kentucky 816 Independence Missouri 503 Oregon (all) 817 Fort Worth Texas 504 New Orleans Louisiana 818 Burbank California 504 Baton Rouge Louisiana 819 Trois Riv. Quebec 505 New Mexico (all) 900 Dial-it (all) 507 Rochester Minnesota 901 Memphis Tennessee 509 Pullman Washington 904 Talahassee Florida 512 Austin Texas 906 Escanaba Michigan 513 Cincinnati Ohio 907 Alaska (all) 514 Montreal Quebec 908 Metuchen New Jersey 515 Iowa Iowa 912 Savannah Georgia 913 Kansas City Kansas 516 Hempstead New York 915 El Paso Texas 517 Lansing Michigan 916 Sacramento California 518 Albany New York 918 Tulsa Oklahoma 919 Raleigh North Carolina Tac Dialups taken from Arpanet by Phantom Phreaker TAC DIALUPS SORTED BY LOCATION 26-NOV-85 State/Country 300 Baud 1200 Baud 1200 Type ------------- --------------- ----------------- --------- ALABAMA Anniston Army Depot [M] (ANNIS-MIL-TAC) (205) 235-6285 (R4) (205) 235-7650 B/V (205) 237-5731 (R8) (205) 237-5731 (R8) B/V (205) 237-5770 (R8) (205) 237-5779 (R8) B/V (205) 237-5805 (R8) (205) 237-5805 (R8) B/V *Please note: When accessing the Anniston TAC you must first enter a , then enter DDN . After you receive CLASS DDN START, proceed as normal. Gunter AFS [M] (GUNTER-TAC) (205) 279-3576 (205) 279-4682 Redstone Arsenal [M] (MICOM-TAC) [none known] ARIZONA Ft. Huachuca [M] (HUAC-MIL-TAC) [none known] Yuma [M] (YUMA-TAC) (602) 328-2186 (602) 328-2186 B/V (602) 328-2187 (602) 328-2187 B/V (602) 328-2188 (602) 328-2188 B/V CALIFORNIA (NORTHERN) Alameda [M] (ALAMEDA-MIL-TAC) [none known] Menlo Park [M] (SRI-MIL-TAC) (415) 327-5440 (R3) (415) 327-5440 (R3) B (USGS3-TAC) [M] [no dialups] Moffett Field [M] (AMES-TAC) [no dialups; contact NSC for access] William Jones - (415) 694-6482 (FTS) 494-6482 (AV) 359-6482 Monterey [M] (NPS-TAC) [none known] Sacsamento [M] (MCCLELLAN1-MIL-TAC) [none known] (MCCLELLAN2-MIL-TAC) [none known] Stanford [A] (SU-TAC) (415) 327-5220 CALIFORNIA (SOUTHERN) China Lake [M] (NWC-TAC) [none known] Edwards AFB [M] (EDWARD-MIL-TAC) [none known] El Segundo [M] (AFSC-SD-TAC) (213) 643-9204 (213) 643-9204 B/V Los Angeles [A] (USC-TAC) (213) 749-5436 Los Angeles [A] (USC-ARPA-TAC) [none known] San Diego [M] (ACCAT-TAC) (619) 225-1641 (R4) (619) 225-6903 V (619) 225-6946 (R3) (619) 223-2148 V (619) 226-7884 (R2) Santa Monica (RAND-ARPA-TAC) [A] (213) 393-9230 (213) 393-9237 (213) 393-9238 (213) 393-9239 (RAND2-MIL-TAC) [M] [none known] COLORADO Denver Fed Ctr [M] (USGS2-TAC) (303) 232-0206 (303) 232-0206 B/V Lowry Air Force Base [M] (LOWRY-MIL-TAC) [none known] D.C. Washington [Andrews AFB] [M] (AFSC-HQ-TAC) (301) 967-7930 (R16) (301) 967-7930 (R16) B (301) 736-2990 (R4) (301) 736-2990 (R4) B (301) 736-2998 (R2) (301) 736-2998 (R2) B (PENTAGON-TAC) (202) 553-0229 (R14) (202) 553-0229 (R14) B FLORIDA Eglin AFB [M] (AFSC-AD-TAC) (904) 882-8202 (904) 882-8202 B/V (904) 882-8201 (904) 882-8201 V MacDill AFB [M] (MACDILL-MIL-TAC) [none known] Naval Air Station - Jacksonville [M] (JAX1-MIL-TAC) [none known] Naval Air Station - Orlando [M] (ORLANDO-MIL-TAC) [none known] GEORGIA Robins AFB [M] (ROBINS-TAC) (912) 926-2725 (912) 926-2725 B/V (912) 926-2726 (912) 926-3231 (912) 926-3232 (912) 926-2204 (912) 926-2204 B/V HAWAII Camp H.M. Smith [M] (HAWAII2-TAC) (808) 487-5545 (808) 487-5545 B ILLINOIS Scott AFB [M] (SCOTT-TAC) [none known] (SCOTT2-MIL-TAC) [none known] KANSAS Ft. Leavenworth [M] (LVN-MIL-TAC) (913) 651-7041 (R8) (913) 651-7041 (R8) B LOUISIANA Navy Regional Data Automation Center [M] (NORL-MIL-TAC) (504) 944-7940 (504) 944-7940 B (504) 944-7948 (R2) (504) 944-7948 (R2) B (504) 944-7951 (R5) (504) 944-7951 (R5) B (504) 944-8702 (R8) (504) 944-8702 (R8) B MARYLAND Aberdeen Proving Ground [M] (BRL-TAC) (301) 278-6916 (R4) (301) 278-6916 (R4) B/V Bethesda [M] (DAVID-TAC) (202) 227-3526 (R16) (202) 227-3526 (R16) B/V Patuxent River [M] (PAX-RV-TAC) (301) 863-4815 (301) 863-4815 B/V (301) 863-4816 (301) 863-4816 B/V (301) 863-5750 (R6) (301) 863-5750 (R6) B/V Silver Spring [M] (WHITEOAK-MIL-TAC) (301) 572-5960 (R10) (301) 572-5960 (R10) B (301) 572-5970 (R10) (301) 572-5970 (R10) B MASSACHUSETTS Hanscom AFB [M] (AFGL-TAC) (617) 861-3000 (R8) (617) 861-3000 (R8) B (617) 861-4965 (R8) (617) 861-4965 (R8) Cambridge (BBN-MIL-TAC) [M] [none known] (BBN-ARPA-TAC) [A] [no dialup capability] (CCA-ARP-TAC) [A] [none known] (MIT-TAC) [A] (617) 491-5669 (617) 258-6224 V (617) 491-5708 (617) 258-6225 V (617) 491-5734 (617) 258-6227 V (617) 491-5819 (617) 258-6248 V (617) 491-5826 (617) 491-5841 (617) 491-5849 (617) 491-6769 (617) 491-6772 (617) 491-6937 (617) 258-6241 (617) 258-6242 (617) 258-6243 MICHIGAN U.S. Army Tank Automotive Command (TACOM) - Warren [M] (TACOM-TAC) [none known] MISSOURI St. Louis [M] (STLA-TAC) [none known] NEBRASKA Offutt AFB [M] (SAC1-MIL-TAC) [none known] (SAC2-MIL-TAC) (402) 292-4638 (R10) (402) 292-4638 (R10) B (SAC-ARPA-TAC) [A] (402) 294-2398 (402) 294-2398 B (402) 291-2018 (402) 291-2018 B (402) 292-7054 (402) 292-7054 B NEW JERSEY Dover [M] (ARDC-TAC) (201) 724-6731 (201) 724-6731 B/V (201) 724-6732 (201) 724-6732 B/V (201) 724-6733 (201) 724-6733 B/V (201) 724-6734 (201) 724-6734 B/V Fort Monmouth [M] (FTMONMOUTH1-MIL-TAC) (201) 544-2052 (201) 544-2052 B/V (201) 544-2062 (201) 544-2062 B/V (201) 544-2072 (201) 544-2072 B/V (201) 544-2396 (201) 544-2396 B/V (201) 544-2430 (201) 544-2430 B/V (FTMONMOUTH2-MIL-TAC) (201) 544-4254 (R3) (201) 544-2430 B (201) 544-2636 B (201) 544-2638 B (201) 544-2777 B NEW MEXICO Albuquerque [M] (AFWL-TAC) [none known] White Sands [M] (WSMR-TAC) [no dialups; contact NSC for access] Claude (Skeet) Steffey - (505) 678-1271 (FTS) 898-1271 (AV) 258-1271 NEW YORK Griffiss AFB (RADC-ARPA-TAC) [A] [no dialup capability] (RADC-TAC) [M] (315) 339-4913 (R5) (315) 337-2004 (315) 337-2004 B/V (315) 337-2005 (315) 337-2005 B/V (315) 330-2294 (315) 330-2294 (FTS) 952 B/V (315) 330-3587 (315) 330-3587 (FTS) 952 B/V NORTH CAROLINA Ft. Bragg [A] (BRAGG-ARPA-TAC) (919) 396-1131 (R10) (919) 396-1426 (R5) B/V (919) 396-1491 (R8) B/V Ft. Bragg [M] (BRAGG-MIL-TAC) [none known] OHIO Wright-Patterson AFB [M] (WPAFB-TAC) (513) 258-4218 (513) 258-4219 (513) 258-4987 (513) 258-4988 (513) 258-4989 (513) 258-4990 (WPAFB2-MIL-TAC) (513) 257-2172 (R8) (513) 257-2172 (R8) B (513) 257-2690 (R8) (513) 257-2690 (R8) B (513) 257-3625 (R8) (513) 257-3625 (R8) B OKLAHOMA Tinker AFB [M] (TINKER-MIL-TAC) [none known] PENNSYLVANIA New Cumberland Army Depot [M] (NCAD-MIL-TAC) [none known] (NCAD2-MIL-TAC) [none known] TEXAS Brooks AFB [M] (BROOKS-AFB-TAC) (512) 536-3081 (R6) (512) 536-3081 (R6) B/V Richardson [A] (COLLINS-TAC) (214) 235-2131 (214) 235-2131 B (214) 235-2143 (214) 235-2143 B (214) 235-2178 (214) 235-2178 B (214) 235-2204 (214) 235-2204 B (214) 235-2251 (214) 235-2251 B (214) 235-2278 (214) 235-2278 B UTAH Dugway Proving Ground [M] (DUGWAY-MIL-TAC) [none known] Salt Lake City (University of Utah) [A] (UTAH-TAC) (801) 581-3486 (801) 581-3486 B/V VIRGINIA Alexandria [M] (DARCOM-TAC) (202) 274-5300 (202) 274-5300 B (202) 274-5320 (R6) (202) 274-5320 (R6) B Arlington (ARPA1-MIL-TAC) [M] [none known] (ARPA2-MIL-TAC) [M] [none known] (ARPA3-TAC) [A] [no dialup capability] Dahlgren [M] (NSWC-TAC) (703) 663-2162 (R8) (703) 663-2162 (R8) B Langley Air Force Base [M] (LANGLEY-MIL-TAC) [none known] McLean [M] (DDN-PMO-MIL-TAC) [none known] (MITRE-TAC) [M] (703) 442-8020 (R15) (703) 893-0330 (R10) (703) 893-0330 (R10) B/V Norfolk [M] (NORFOLK-MILTAC) (804) 423-0241 (R2) (804) 423-0241 (R2) B (804) 423-0247 (R2) (804) 423-0247 (R2) B (804) 423-0346 (R4) (804) 423-0346 (R4) B (804) 423-0480 (804) 423-0480 B (804) 423-0486 (R2) (804) 423-0486 (R2) B (804) 423-0489 (804) 423-0489 B (804) 423-0570 (804) 423-0570 B (804) 423-0572 (R2) (804) 423-0572 (R2) B (804) 423-0577 (R2) (804) 423-0577 (R2) B (804) 423-0651 (804) 423-0651 B (804) 423-0654 (R3) (804) 423-0654 (R3) B (804) 423-0841 (R2) (804) 423-0841 (R2) B (804) 423-0845 (804) 423-0845 B (804) 423-0849 (804) 423-0849 B (804) 423-0858 (804) 423-0858 B (804) 423-0950 (804) 423-0950 B (804) 423-0952 (804) 423-0952 B (804) 423-0955 (R3) (804) 423-0955 (R3) B (804) 423-0959 (804) 423-0959 B Reston (DCEC-ARPA-TAC) [A] [no dialups available] (DCEC-MIL-TAC) [M] (703) 437-2892 (R5) (703) 437-2928 B (703) 437-2925 (703) 437-2929 B (703) 437-2926 (703) 437-2927 WASHINGTON Seattle [A] (WASHINGTON-TAC) [no dialup capability] ENGLAND [M] (CROUGHTON-MIL-TAC) [none known] GERMANY [M] (FRANKFURT-MIL-TAC) (M) 2311-5641 (R8) B (RAMSTEIN2-MIL-TAC) [none known] ITALY [M] (AGNANO-MIL-TAC) JAPAN [M] (BUCKNER-MIL-TAC) (ZAMA-MIL-TAC) KOREA [M] (KOREA-TAC) (M) 264-4951 (R8) B PHILIPPINES [M] (CLARK-MIL-TAC) SPAIN [M] (MILNET-TJN-TAC) [none known] (ROTA-MIL-TAC) [none known] Notes: 1. "(R10)" following phone number indicates a rotary with 10 lines. 2. For alternate phone numbers, FTS=Federal Telephone System. 3. (M)=Military DoD Telephone System. 4. [M] denotes a MILNET TAC and [A] denotes an ARPANET TAC. 5. "1200 Type" refers to the modem compatibility for 1200 baud only: B/V = Bell and Vadic B = Bell 212A only V = Vadic 3400 only 6. This list is contained in the file NETINFO:TAC-PHONES.LIST at SRI-NIC. >>==========================<< >>==> TELCO TEST NUMBERS <==<< >>====> Remember Xoo <=====<< >>=> compiled and updated <=<< >>====> by Shadow 2600 <====<< >>==========================<< 011-44-61-2468011 : US dial tone then "When this system changes, this is the new dial tone you hear" (UK is changing dialtone) 201-226-0709 : alternating tones, then "warble" 201-267-9922 : sweep tone 201-267-9966 : 600 ohm termination 201-232-9924 : (tone 1,2,5-beep, bleep; 9,#- 1200 baud static, beep, bleep; 6-tone, higher tone, bleep) 201-232-9959 : tone 11 sec. silence, repeats... 201-233-9972 : multitude of clicks 201-233-9974 : busy 15 sec. then tone w/ clicks 201-241-9916 : hissing with clicks 201-328-9971 : 1000 hrtz tone 201-376-9907 : "is being checked for trouble. Please try again later" 201-464-9915 : low tone 15 sec, silence 201-464-9916 : low tone 2 sec, silence 201-464-9963 : buzz 201-464-9974 : busy 15 sec, low tone 201-543-9902 : "If you'd like to make a call, hang up and try it again." 201-543-9903 : "We're sorry, your call did not go through." 201-543-9904 : "the number you have dialed requires a .20 cents deposit." 201-655-9900 : "cannot be completed as dialed from the phone you are using" 201-769-0205 : People's Express Reservation system 203-771-4920 : telephone company employee newsline 207-866-4411 : 1000 hrtz tone 212-233-9980 : (tone 1,2,3,*-tone, higher tone, bloop; 5-tone, bloop; 9,#- static,beep,bloop) 212-369-7003 : "you have reached 212-369-7003 in zone 3" (?) 212-799-5017 : ABC New York feed line 213-621-4141 : telephone employee newsline 213-935-1111 : sweep tone with echo at top of range (?) 215-489-0036 : tone, bloop (1,2,5-tone bloop, 3,6,9-tone, higher tone,tone) 215-489-0040 : "please check your instruction manual or call repair service for assistance" 215-489-0042 : "if you like to make a call please hang up and try again" 215-489-0043 : "We're sorry, your call did not go through." 215-489-0044 : "The call you have made requires a 25 cent deposit" 215-489-0045 : "You must first dial a 1 when dialing this number." 215-489-0074 : LOUD tone, stops, repeats 215-489-0075 : 600 ohm termination (silence) 215-489-0078 : tone, silence 215-489-0080 : 600 ohm termination 215-489-0097 : tone, (lower pitched than -0078) silence (also at -0098) 215-489-0104 : 1000 hrtz tone 216-861-8300 : tone, then higher tone 301-256-9987 : 1000 hertz 301-546-7777 : "Due to Telephone Company facility trouble your call cannot be completed at this time" 301-725-9904 : "deposit .20" 305-263-0000 : repeating bloop (keypress 2 : slow reorder w/ bloops, clicks) 305-994-9963 : pay fone instructions 305-994-9966 : "telephone you are calling from is not in service" 312-222-9948 : tone (keypress 1,2,3,6,7,*-tone, high tone, bleep, 4-tone,bloop,9, #-static,beep,bloop) 312-222-9954 : "Test Center" 312-222-9990 : clicks, ticking like 312-222-9996 : LOUD tone, repeats 312-368-8000 : Illinois Bell Communicator (employee newsline) 312-592-0000 : tone (keypress 2222, then other digits, at re-order type * to restart) (?) 313-223-7223 : telephone employee newsline 313-333-9981 : LOUD tone, silence 313-333-9989 : high tone (enter touchtones for a while, eventually get "metallic" echo, then 5-high pitched tone, random re-orders) 313-333-9990 : beep, click repeats, with "winks" 313-333-9994 : tone bloop (keypress in 2-tone,bloop, 3-tone, higher tone,tone, 9-static, beep,bloop) 313-333-9995 : 600 ohm termination (silence) 313-333-9996 : weird siren/sweep tone, multi-frequency 313-430-4300 : beep, beep, beep, then reorder 313-698-9998 : sweep tone 314-247-5511 : Southwestern Bell Telenews (employee newsline) 315-471-9934 : "deposit 5 cents for next five minutes" 408-255-0081 : (any two 2,4,8,0-tone) 408-294-6969 : beep, click, computer voice repeats number 408-395-1110 : (tone 2-bleep,glitch; 3-beep,higher beep;#then number-loud tone,bleep) 408-738-8190 : (tone 1,3,6,7,*-tone, high tone, tone;2-beep,cluck;9,#- static,tone,beep) 408-745-6060 : high pitched tone, low tone then repeats 408-994-0044 : tone end of loop 412-633-3333 : telephone company employee newsline 414-628-0001 : continuous tone 414-628-0002 : continuous tone (higher pitched, sounds like muted dial) 414-628-0004 : high pitched tone, bloop, silence 414-628-0006 : brief very high tone (also -0007) (multiple keypresses of 2,5,8,0 tone repeats) 414-628-0010 : loud tone, stops, repeats... 414-628-0011 : loud tone, stops 414-628-0013 : 600 ohm termination (silence) (also -0017, two in an exchange?) 414-628-0014 : continuous tone (sounds like weird dial), eventually stops 414-628-0015 : LOUD tone, repeats 414-628-0028 : "Your call cannot be completed as dialed 414-678-3511 : Wisconsin Bell Newsline 414-781-0004 : high tone, silence (keypress 2,5-beep,bleep, 3,6-beep,longbeep, bloop, 9-static,bloop) 415-284-1111 : one sweep, then silence 415-327-0046 : sweep tone 415-388-0037 : tone,bloop (keypress 2-tone,bloop, 3-tone,high tone,tone, 9-static,beep,bloop) 415-472-0046 : sweep w/ glitch at top 415-545-8800 : Pacific Bell Newsline 415-467-0097 : fast DTMF tones, keypress to repeat 415-777-0020 : 1000 hrtz tone 415-777-0037 : tone, bloop (keypress 2-beep,bloop, 3,6-tone,higher tone, 9-static,beep,bloop) 415-777-0046 : sweep tone with echo 415-777-0105 : tone,bloop (keypress 2-beep,bleep, 3,6-tone, higher tone, tone,9-static,beep,bloop 415-826-0022 : tone, click, tone (sounds like a busy) 415-994-0710 : multitude of clicks 512-472-2181 : "if you would like to make a call, please hang up and try again" 512-472-4263 : garbled recording (?) 512-472-9833 : "you must first dial a 1 or 0 before calling this number" 512-472-9936 : "please check your instructions or call your business office for assistance" 512-472-9941 : "insert 25 cents" 516-222-3825 : LOUD tone 516-234-9914 : New York Telephone Newsline 518-471-2272 : New York Telephone Newsline 518-789-3299 : weird busy, multitude of clicks 609-267-9966 : busy with clicks in background 609-267-9967 : 600 ohm termination (silence) 609-267-9968 : 1000 hrtz tone 609-267-9971 : LOUD tone, stops, repeats 609-267-9972 : rings with clicks in background (also -9973 and -9974) 609-877-9924 : high tone (tone in 1,2,5-tone, bloop; 3,6,*-tone, higher tone, bleep; #-static, beep, bleep) 609-877-9929 : 1000 hrz tone 617-553-9953 : tone end of loop 617-890-9900 : sweep tone 617-955-1111 : telephone company employee newsline 619-748-0002 : tone increases in pitch, silence, repeats in monotone 619-748-0003 : sweep, repeat, hangs up 702-789-6711 : Nevada Bell Newsline 713-354-0000 : touch tone in #, then new #, then 5 - listed, 9 - unlisted) 713-482-3199 : "We're sorry, all circuit are busy now." 713-652-5111 : touch tones echo back "metallic", something about "drivers licence number" replys in a female recorded voice 717-255-5555 : Bell of Pennsylvania "Inside Line" (employee newsline) 718-429-9900 : "Please slide a valid credit card through the slot now" 800-221-5959 : tone (# makes it ring) 800-228-8466 : Sensaphone (tm) demo (time etc. (EST) (wait 7+ rings)) 800-321-3048 : non-connecting loop with 800-321-3049 800-321-3052 : loop (don't know where other end is) 800-321-6366 : Centagram's Voice Memo System (extension 100 for demo) 800-323-6321 : tone, stops, bloop repeats 800-327-0000 : "Announcement three, Dallas" (changes sometimes) 800-344-4001 : non-connecting loop with 800-344-4002 800-524-0000 : "Announcement 1 Atlanta" 800-554-5924 : Cable News Network audio feed 800-824-8274 : "Enter your password service code" 802-955-1111 : telephone company newsline 808-533-4426 : Hawaiian Telephone Newsline 816-391-1122 : recorder (keypress 1-toggle on/off, 3-rewind, 4-stop, 7-play) 907-269-0955 : tone (sounds like extender, doesn't take touch tone (?)) 914-232-9901 : "Daytona, New York DMS-100 verification" 914-268-9901 : "Congers DMS 100 Verification" 914-268-9903 : "your call cannot be completed as dialed" 914-268-9968 : (keypress 2-high tone, 3-high, higher tone, 6,0-click, 7- hangs up, sometimes 0,#,*-harmony) 914-359-9901 : repeats the number dialed ("914-359-9901") 914-359-9960 : weird tone, stops, clicks, repeats 914-623-9968 : (keypress 2,5-beep glitch, 3,6-tone highertone) 916-480-8000 : Pacific Bell Newsline 3 ZDDDDDDDDDDDDDDDDDDDDDD? 3 How to Build Your Own Underground 3 3 . . 3 3 Television Transmitter 3 3 S n o w B o x 3 3 Using Commercially 3 3 . . 3 3 Available 3 3. 13-JUN-88 . 3 3 Parts 3 3 . 3 3 ]3:^3]33^3^::]3^:]^ ]^3]3^3]]^] 3 3 Outlaw Telecommandos 3 3 ]3:^3]33^3^::]3^:]^ ]^3]3^3]]^] 3 @DDDDDDDDDDDDDDDDDDDDDDY 3 ]3:^3]33^3^::]3^:]^ ]^3]3^3]]^] @DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDY 0 1 - 2 1 3 - 3 7 6 - 0 1 1 1 Yes, for some time now it has been possible to construct a clandestine television station, which you can operate from your Telecommando Lair, or modify for Mobile Media Guerrilla campaigns. We have named this device the Snow Box, due to its cool nature, and the snow seen on blank television channels waiting to be commandeered. To put together a TV station you will need this stuff: A VCR or Camcorder with video or RF outputs A Ham Radio 6-meter Band Linear amplifier (This boosts the RF signal from the VCR for broadcasting) (The Linear Amp should have a bandwidth of 6 MHz for best results) A cable television RF distribution amplifier may also be used. Coaxial cable with UHF connectors (Connects the Linear Amp to the Antenna) A cable-TV patch cable with an F-connector and a UHF connector (To connect the RF signal to the Linear Amp) (F-connectors are the small ones used with cable TV) (UHF connectors are the large ones used for Ham Radio) If your VCR does not have RF outputs: An external RF modulator (converts video to channel 3,6,12 etc.) a cable with RCA connectors (a standard stereo cord is ok) A 6-meter Ham radio antenna. If you do not have a pre-made 6-meter antenna: About 20 feet of strong wire 3 ceramic antenna insulators another UHF connector Likely places to get the linear amplifier, connectors and cables is a Ham Radio swapmeet, a Ham club newsletter's classified ads, a Buy-Sell-Trade paper like The Recycler, or at a store specializing in Ham gear. RF modulators are available at specialty video stores, or major VCR dealers. Setting Up the Transmitter: Using a VCR with RF out: [VCR/RF]F----------------------------U[Linear Amp]U------------U[Antenna] weak RF Power RF Using an External RF Modulator: [VCR]R-------R[RF Modulator]---------U[Linear Amp]U------------U[Antenna] video weak RF Power RF Diagram Symbols: U UHF-connectors (Ham radio) F F-connectors (cable TV) R RCA connectors (stereos) --- coax, cables, wires [] devices (name of device in brackets) ceramic insulator (the kind with a hole at each end) Building The Dipole Antenna: wire wire ---------------------++---------------------- | | Short coax | | [U] UHF connector The antenna is set up much like a clothesline with the wires tethered straight out horizontally. The outer insulators are used to isolate the antenna from the tether lines, which should be rope or nylon cords for good results. The inner insulator isolates a gap between the two long wires of the antenna. The length of the wires used for the antenna is critical. Look up the length in feet for the channel you want to use in the table below & make each of the two long wires that length. As a rule of thumb, a wire half-wave antenna's length in feet is equal to 468 divided by the frequency in MHz. **************************************** VHF Television Channel Data ---------------------------------------- TV MHz ---carrier--- antenna channel range video sound lengths ------- ----- ----- ----- ------- 2 54-60 55.25 59.75 8.47ft 3 60-66 61.25 65.75 7.64ft 4 66-72 67.25 71.75 6.95ft 5 76-82 77.25 81.75 6.05ft 6 82-88 83.25 87.75 5.62ft 7 174-180 175.25 179.75 2.67ft 8 180-186 181.25 185.75 2.58ft 9 186-192 187.25 191.75 2.49ft 10 192-198 193.25 197.75 2.42ft 11 198-204 199.25 193.75 2.34ft 12 204-210 205.25 209.75 2.28ft 13 210-216 211.25 215.75 2.21ft (All frequencies in MHz) (Lengths are for half-wave antennas) **************************************** For Further information: Look in the ARRL Handbook published by the American Radio Relay League for detailed plans & theory for antennas, transmitters & linear amplifiers. The info in that book can be used for setting up an underground AM or FM radio station. Uses for a TV Clandestine Station: Public Education: Make a videotape of each step in the process of constructing your transmitter. Show this tape in your broadcasts, "For informational purposes only", of course. Short-burst zipping: From a fixed or mobile base of operation show short snippets of graffiti-like computer graphics, quick subliminal messages, images & suggestions, or brief phreaker manifestos. Commercials are an opportune time to break into TV broadcasts. Live call-in shows: Using a Cheese Box, or other device for receiving untraceable phone calls and a video camera do a live call-in show. Encourage people to call in using Red, Blue, and other phreaking boxes. Cable TV Piracy: With modifications it may be possible to feed the power RF signal directly into a cable TV system, overriding cablecasts or comandeering unused channels. Mobile Operation: Using storage batteries and a 110-volt inverter the transmitter may be modified for mobile use to avoid detection by the FCC during long broadcasts. Battery operated mobile linear amps and portable camcorders are also available. * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * -= Anti-Modem Weapon =- * * * * * * Origianally By: Enemy Withz * * * * Re-written By: The Silent Trojan * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * An effective modem weapon, especially on crossbar phone systems. (Will still operate on ESS but you will kill phone service to your prefix for a few hours, and everyone talking will be cut off on your prefix and the one you called). What is this device? ------------------- It's a Tesla Coil! Concentrated static electricity. The Tesla coil, when properly used, will generate litrally thousands of volts at very low amperage. (Just the right current to bake silicon chip cookies!) Construction: ------------ 1. Disconnect all phones from your line. Disconnect answering devices and any data-transmission devices. 2. Run a preliminary test on the coil and disconnect nearby grounded objects. (Lamps, stereos, TV's, etc...) 3. Connect one phone that you see fit to subject. (It usually does not destroy phones, but I have seen them melt off walls.) 4. Connect iron or steel balls to the green and red wires of your connected phone (these are the line wires that go into the wall.) It and 12 terminals of your phone. 5. Put on a pair of thick rubber gloves (EXTREMELY IMPORTANT!) 6. Charge coil to at least 10,000 volts. An ideal setting is around 18 to 19 thousand, but 10 will jump Ma-Bells line surge protectors. 7. Hold metal balls in your left hand. (Make sure they don't touch each other) When the coil is fully charged, clip the steel ball connected to the red wire to the base of the Tesla coil and hold the other metal ball as far away from the coil as you can. 8. Dial the offending modems number. 9. When connected, move the metal object connected to the green wire within 2 feet of the coils top. (Note: Don't be afraid of the little bolts of electricity shooting from the top of the coil...) 10. Within 3 seconds a huge bolt of lightning will shoot forth at the phone from the hand you are holding the balls in. (Hold on tight cause it'll feel like loads of ants!) You will immediatly hear many strange occilations to the carrier on the phone. The last noise you will hear from the phone is a pop! (That is the last cry of agony as it shuts down.) Crossbar just disconnects. Guaranteed to fry the modem, the computer and any peripherals. Or anyone who answers the phone! ALL DAMAGE IS UN-REPAIRABLE. Including lives!!!!! (-eof-) (c)nXo/loteknologies