DarkStorm’s Book of Compiled Articles on Destruction, Crime and other Illeg
DarkStorm’s
Book
of
Compiled Articles on
Destruction, Crime,
and
Other Illegal Acts
"Are You Ready For A
Good Time?"
Version II.IX May 1991
Page
i
Pretext:
The author and co-authors of this
document, and authors of
the enclosed articles take absolutely no responsibilyity for the
assumed to be of whole mind and
competancy, so as not to warrant
the punishment of anyone for committing any act herein
described.
This file was composed as a documentary article, and in no
way reflects the
author’s views on law enforcement, its officers,
or its purpose. This article is an
informative look at the other
side. The readers do not have to nor are expected to take part
in
any of the acts herein described.
Inside this file one will find many detailed
descriptions on
how to get anything you ever wanted for free, how to make others
pay for
your goodies, how to destroy any thing and anyone at
will, and how to reek havoc upon the
populus. The author does not
condone this sort of action, and suggests that those who
really
want to do this should read no further, and go see a doctor.
Those who shun the
thought of my even compiling this file should
stop fucking reading this and delete it, since
it won’t do well
sitting next to all your other pristine files on how to track
hackers,
and how to protect yourself from setting eyes upon
pornography(*).
I hereby denounce
this article and have decided to delete it
from my drive, hopefully before I get the urge to
upload it to
the unsuspecting populus. Those concerned with my actions, rest
your eyes,
type: DEL DARK19-?.TXT <CR> at the DOS prompt, and get
some sleep.
Now that
those assholes are gone, everyone else come back,
all others should read on(including the guys
I told to see a
doctor). Enjoy this documentation, it is the result of many
sleepless
nights, many hours of downloading, buffering, and CHATs
to get the necessary information for
you all. By the time you
read this I will probably have about 40-60k more of texts to add
jailbreak, car theft,
atombombs (<–most humorous article, a must
read.), radar guns, unemployment checks while
you still have a
job, free food, anti-police warfare, phreaking(@), knife
fighting, the
making of viruses (comes complete with a starter
kit/file) etc. I’m sure you’ll all enjoy
these, but for now, just
read the ones here, it will take you long enough as it is.
Greek or something for ‘the
writing of the prostitutes’. Nice
writing I assume.
(@) There are some articles on
phreaking here, but I have
more….
Page ii
Pretext
——-
(cont.)
Read the articles carefully on
phreaking and on hacking, it
is important that you do not get caught trying out any of
these
things. There are some non-hacker/pirate articles here, such as
the noise filter
to rid yourself of linenoise forever, but I felt
it was important to the hacker, and even to
the amatuer.
Most all of the articles enclosed can be done with little
expended money,
some more than others. The only articles that do
not say how to build them, such as the HBO
decoder and the RADAR
jammer are stored as .ZIP files in the DRKSTRM?.ZIP. These are
for
you to read, and decide whether or not you want to spend the
money to get them. I would assume
that the guys have been shut
down, so I have been looking for a replacement for the RADAR
text
(I already have a couple of HBO texts on how to make em.)
The only other stuff in
here that claims to tell how to
build something that doesn’t is the couple of articles on
Blue
Boxing, (#’s 1-3), they are VERY informative to the newcomer, and
I left them ther
for the reading, besides, the texts on how to
build the Pearl Box and a bunch of others will
allow you to make
the Blue Box tones. Some of my own advice for you: Make the Gold
Box,
NEVER EVER make a Blotto Box, unless you wish to get a
lawsuit shoved so far up your asshole
that you’ll be tasting it
in your mouth for years to come. And unless you’re extrememely
demented, don’t make a Urine Box.
I am looking for the file "Jane’s All The World’s
Boxes", if
anyone has it, please upload it to any BBS I’m on, I would like
to
include it in my next issue of DRKSTRM. It has many many more
boxes that are not listed here,
nor anywhere else to my
knowledge. (To the authors of Jane’s ATWB, I only plan to use a
few of the better ones, I will not include it all.) [Still
looking....]
The HBO file on
page 123 works great. I use it now, and it’s
fine.
Also, if you have any intention of
doing anything mentioned
in this documnet, read the articles on it carefully. As in the
instance of the two Carding texts, the first says how to do it,
but yet, if you read the
second one, you will realize that had
you tried it now, you would probably be sitting in a
dingy cell
with a big Samoan named Biff who wants to make you his wife.
Go nuts!
Have a Hell of a time!
Page iii
Table of
Contents
—– — ——–
Subject: Page(s):
——- ——-
Pretext…………………………………………ii-iii
Table of
Contents………………………………..iv-vi
Special Thanks
To:…………………………………vii
Preaking and Hacking:
Bell
Trashing…………………………………1-2
Blue
Boxing…………………………………..3-5
Better Homes and Blue Boxing File
#1…………….6-8
Better Homes and Blue Boxing File #2…………….9-15
Better
Homes and Blue Boxing File #3……………16-20
Red
Boxing…………………………………….21
Hacker’s Atlas (By: The
Wyvern)………………..22-26
How To Build Various Boxes:
Noise
Filters………………………………..27-29
Neon
Box………………………………………30
White
Box……………………………………31-32
Black
Box……………………………………33-35
Urine
Box……………………………………36-37
Blotto
Box…………………………………..38-40
Beige
Box……………………………………41-44
Aqua
Box…………………………………….45-48
Cheese Box File
#1……………………………..49
Cheese Box FIle
#2……………………………..50
Brown
Box……………………………………51-52
Gold
Box…………………………………….53-54
Crimson
Box………………………………….55-56
Pearl
Box……………………………………57-58
Silver
Box…………………………………..59-61
Red
Box……………………………………….62
Green
Box……………………………………..63
The Book of Unlawfuls (By: Shadowspawn):
Section II —
Hacking…………………………..66
Lock Picking:
Combination
Locks…………………………….67-68
Door Knobs….(2
Files)……………………….69-75
Padlocks………………………………………76
Weird
Drugs………………………………………77-78
House
Breaking……………………………………..79
Demolition Files (By: King Arthur):
Number
2…………………………………….82-84
Page iv
Table of Contents
—– — ——–
(cont.)
Subject:
Page(s):
——- ——-
Bombs + Chemicals:
House-Hold Equivelences for
Chemicals…………..85-86
Misc. Compounds (By: The Prowler)………………87-88
Black Powder…………………………………89-90
Fire Bombs, Napalm,
etc……………………….91-92
Nitrogylcerine……………………………….93-94
Misc. Demolitions, Flares, Fuels,
etc………….95-101
Moltov Cocktail……………………………….102
The
Anarchist’s Micro-Cookbook (By: Maelstrom)………103-105
Cars:
How to Hotwire a
Car…………………………..106
How to Fuck one
up…………………………….107
Terror/ism:
Electronic
Terrorism…………………………108-110
Harmless
Terror……………………………..111-112
Carding:
Carding Text
#1……………………………..113-114
New Info on
Carding………………………….115-119
Free Shit:
Change……………………………………….120
Postage…………………………………….121-122
HBO………………………………………….123
HBO
Revised…………………………………..123b
HBO + Free PAY
TV……………………………124-128
Cable TV
Hacking……………………………128b-128
3-Way
Teleconferencing…………………………129
Horses……………………………………….130
Frequencies:
Bugs, Taps,
Mikes……………………………131-132
Federal
Frequencies………………………….133-136
Code
Words………………………………….137-138
Common 10 Codes (ie;
10-4)……………………..139
Quick Notes on Frequencies……………………..140
Information on Hacker Groups………………….141-142
Printed Hacker/CU
Magazines…………………..145-146
Misc. Catalogs on Crime/CU/Hacking
etc…………147-151
Page v
Table of Contents
—– — ——–
(cont.)
Subject: Page(s):
——- ——-
Info on Haking/Pirate Groups: (cont.)
Hacker BBS’s
etc………………………………152
The Butler’s
Disclaimer………………………..153
Last Minute Additions:
Excerpts from ‘Steal
This Book’:
People’s Chemistry………………………154-155
Fuses……………………………………156
Coin/Bill
Fraud…………………………157-158
Free Calls/Elimentary Red
Boxing……………159
Enclosure Notes:
Enclosed Hz-Generator and Misc.
Texts……………160
One Final Note to All From DarkStorm…………….161
Page vi
Special Thanks To:
—————–
BAH, JDS, Andersen, Streak, Gunner, McCarthy, Flare,
Starburst (AKA Mark Taverns), and Hayes.
\______Not his real name boys, a handle OK?
He’s insane, not Stupid.
An Extra Note of Thanks:
———————–
To the United States of America, for allowing me the
freedom
of expression, that of speech, and that of the press, which thus
granted me the
right to publish this article. (Sort of.)
{Not like I wouldn’t have published it if it were
illegal}
But thanks anyway; it’s the thought that counts.
One Last
note (I Hope)
———————-
Most of the BBS numbers have been left attached to
the
files, that is, accept for the Police Station, which I think only
appears once, but
no matter, you can still call most of these
BBS’s even if all their articles are not properly
denoted.
You can find most of these articles, plus many more on any
of the BBS’s
mentioned in this file, and on many others not
mentioned here. Many good BBS’s have message
sections devoted to
Law and Lawlessness.
Oh Yeah
— —-
might want to use a Search
program, or one with a Search (and
replace) key in it. Search in the forward direction from
the
Table of Contents for ‘Page ###’ and it will get you there faster
than you can. In
my next issue, or in a few at least, I will
divide it up a bit so you can load some of it, or
discard or
whatever to make it better for you. (Did it this time….)
Page vii
Bell Trashing
By: The Dragyn
The
Police Station
612-934-4880
The Phone Co. will go to extreams on
occasions. In fact,
unless you really know what to expect from them, they will
suprise
the heck out of you with their "unpublished tarriffs".
Recently, a situation was
brought to my attention that up till
then I had been totaly unaware of, least to mention, had
any
concern about. It involved garbage! The phone co. will go as far
as to prosecute
anyone who rumages through their garbage and
helps himself to some.
Of course,
they have their reasons for this, and no doubt
benefit from such action. But, why should they
be so picky about
garbage? The answer soon became clear to me: those huge metal
bins are
filled up with more than waste old food and refuse…
Although it is Pacific Tele. policy to
recycle paper waste
products, sometimes employees do overlook this sacred operation
when
sorting the garbage. Thus top-secret confidential Phone Co.
records go to the garbage bins
instead of the paper shredders.
Since it is constantly being updated with "company
memorandums,
and supplied with extensive reference material, the Phone co.
must
continualy dispose of the outdated materials. Some phone
companies are supplied each year with
the complete "System
Practices" guide. This publication is an over 40 foot long
telephones. As the new edition
arrives each year, the old ver-
sion of "System Practices" must also be thrown
out.
I very quickly figured out where some local phone phreaks
were getting their
material. They crawl into the garbage bins and
remove selected items that are of particular
interest to them and
their fellow phreaks. One phone phreak in the Los Angeles area
has
salvaged the complete 1972 edition of "Bell System
Practices". It is so large and
was out of order (the binders had
been removed) that it took him over a year to sort it out
and
create enough shelving for it in his garage.
Much of this "Top
Secret" information is so secret that most
phone companies have no idea what is in their
files. They have
their hands full simply replacing everything each time a change
in
wording requires a new revision. It seems they waste more
paper than they can read!
Page 1
It took quite a while for Hollywood Cal traffic manager
to
figure out how all of the local phone phreaks constantly
discovered the switchroom
test numbers.
Whenever someone wanted to use the testboard, they found the
local
phone phreaks on the lines talking to all points all over
the world. It got to the point where
the local garbage buffs knew
more about the office operations than the employees
themselves.
One phreak went so far as to call in and tell a switchman what
his next
daily assignment would be. This, however, proved to be
too much. The switchman Miscellanous
Nastiesied the tool of his
trade.
In another rather humorous incident, a fellow
phreak was
rumaging through the trash bin when he heard somone apraoching.
He pressed up
against the side of the bin and silently waited for
the goodies to come. You can imagine his
surprise when the
garbage from the lunchroom landed on his head. Most people find
evenings best for checking out their local telco trash piles. The
only thing necessary is a
flashlight and, in the case mentioned
above, possibly a rain coat. A word of warning though,
before you
rush out and dive into the trash heap. It is probably illegal,
but no matter
where you live, you certainly won’t get the local
policeman to hold your flashlight for
you.
Page
2
THE THEORY OF "BLUE BOXING"
After most neophyte
phreaks overcome their
fascination with Metrocodes and WATS extenders, they will usually
seek to explore other avenues in the vast phone network. Often,
they will come across
references such as:
’simply dial KP+2130801050+ST for the Alliance
teleconferencing
system in LA’.
Numbers such as the one above were intended to be used with a
blue box;
this article will explain the fundamental principales
of the fine art of blue boxing.
GENESIS
In the begining, all long distance calls were
connected manually by oper-ators
who passed on the called number
verbally to other operators in series. This is because
pulse(aka
rotary) digits are created by causing breaks in the DC current.
Since long
distance calls require routing through various switch-
ing equipment and AC voice amplifiers,
pulse dialing cannot be
used to send the destination number to the end local office
(CO)>
Eventually, the demand for faster and more
efficient long distance (LD) service
caused Bell to make a
multi-billion dollar decision. They had to create a
signaling
system that could be used on the LD network.
Basically, they had two options:
(1) to
send all the signaling and supervisory information (ie.
ON and OFF HOOK) over separate data
links. This type of
signaling is referred to as out-of-bandsignaling,
or
(2) to
send all the signaling information along with the
conversation using tones to represent
digits. This type of
signaling is referred to as in-band signaling.
Beingthe
cheap bastards that they naturally are, Bell
chose the latter(and cheaper) method - in-band
signaling. They
eventually regretted this, though (heh,heh)…
IN BAND SIGNALING
PRINCIPLES
When a subscriber dials a telephone number, whether in rotary or
touch- tone
(aka DTFM), the equipment in the CO interprets the
digits and looks for a convenient Trunk
Line to send the call on
its way. In the case of a local call, it will probably be sent
via an Inter-Office Trunk: otherwise, it will be sent to a toll
office (class 4 or higher) to
be processed. When trunks are not
being used there is a 2600 Hz tone on the line, thus to find
a
free trunk, the CO equipment simply checks for the presence of
2600 Hz. If it doesn’t
find a free trunk the customer will
receive a re-order signal (120IPM busy signal) or the
‘all
circuts are busy…’message. If it does find a free trunk, it
’seizes’ it
–removing the 2600Hz.
Page 3
It then sends the called
number or a special routing code to
the other end or toll office. The tones it uses to send
this
information are called Multi-Frequency (MF) tones. An MF Tone
consists of two
tones from a set of six master tones which are
combined to produce 12 separate tones. You can
sometimes
hear these tones in the background when you make a call, but
they are usually
filtered out so your delicate ears cannot
hear them. These are NOT the same as touchtones.
that it is about to receive routing
information, the originating
end first sends a Key Pulse (KP) tone. At the end of sending
the
digits, the originating end then sends a STart (ST) tone.
Thus to call 914 - 359 -
1517, the equipment would send KP +
9143591517 + ST in MF tones. When the customer hangs up,
2600 Hz
is once again sent to signify a disconnect to the distant end.
HISTORY
In November 1960 issue of the Bell System
Technical Journal, an article entitled ‘Signaling
Systems for
Control of Telephone Switching’ was published. This journal,
which was sent
to most university libraries, happened to
contain the actual MF tones used in signaling. They
appeared as
follows:
DIGIT TONES
1………………………………700 + 900 HZ
2………………………………700 +
1100 HZ
3………………………………900 + 1100 HZ
4………………………………700 + 1300 HZ
5………………………………900 +
1300 HZ
6……………………………..1100 + 1300 HZ
7………………………………700 + 1500 HZ
8………………………………900 +
1500 HZ
9……………………………..1100 + 1500 HZ
0……………………………..1300 + 1500 HZ
KP…………………………….1100 +
1700 HZ
ST…………………………….1500 + 1700 HZ
11
(*)………………………….700 + 1700 HZ
12 (*)………………………….900 +
1700 HZ
KP2 (*)………………………..1300 + 1700 HZ
(*) Used only
on CCITT SYSTEM 5 for special
inter-national calling.
Bell caught wind of blue
boxing in 1961, when it
caught a Washington State College student using one. They
originally found out about blue boxes through police raids and
informants. In 1964, Bell Labs
came up with scanningequipment,
which recorded all suspicious calls. to detect blue box usage.
Page 4
These units were
installed in CO’s where major toll fraud
existed.
AT&T security would then listen
to the tapes to see if any
toll fraud was actually committed. Over 200 convictions resulted
limited to the electronics
enthusiast:
AT&T has caught businessmen, film stars, college students,
doctors,
lawyers, high school students, and even a millionaire
financier (Bernard Cornfield) using the
device. AT&T also
said that nearly half of those that they catch are
businessman.
Page 5
| 17-JUN-1987 Blue box plans,
part I
Note to SysOps: You are welcomed to download this file and use it
on your
system, providing you do NOT remove the credits for:
MARK TABAS OR KAOS.
In other
words, Try to act like a HUMAN BEING!
————————————–
___________________
THE MARK TABAS ENCOUNTER \ Dropped to lower/
SERIES PRESENTS: /case
by your old \
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- \ friend, /
BETTER HOMES AND BLUE
BOXING / -=+DarkStorm+=-\
PART I \(Much easier to /
THEORY OF OPERATION / read now.)
\
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- \_________________/
To quote KARL MARX,
BLUE Boxing has ALWAYS been the most noble
form of Phreaking. As opposed to such things as
using an MCI code
to make a free fone call, which is merely mindless pseudo-
phreaking,
BLUE boxing is actual interaction with the BELL SYSTEM
TOLL NETWORK. it is like wise advisable
to be more cautious when
BLUE boxing, but the careful phreak will NOT BE CAUGHT,
regardless of what type of switching system he is under.
{{Perhaps not the Careful phreak, but
it is hard to tell if you
are careful ENOUGH. If you get caught, you know you weren’t
careful enough. Too bad there’s such a penalty for it…. Good
luck my friends!}}
In
this part, I will explain how and why BLUE boxing works,
as well as where. In later parts, I
will give more practical
information for BLUE boxing and routing information. —-
Communications with trunks.—–
Trunks must NOT be confused with SUBSCRIBER LINES (or
"Customer Loops") which are standard telefone lines. Trunks are
those lines that
connect central offices. Now, when trunks are
NOT in use (I.E., Idle or "ON-HOOK"
state) They have 2600Hz
applied to them. If they are Two-way Trunks, there is 2600Hz in
both directions. When a trunk is in use (Busy or "OFF-HOOK"
state), The 2600Hz is
removed from the side that is off-hook. the
2600Hz is therefore known as a Supervisory Signal,
because it
indicated the status of a trunk; on hook (TONE) or off-hook (NO
TONE). NOTE
also that 2600Hz is denoted SF (Single frequency)
signalling and is "IN-BAND." This
is very important. "IN-BAND"
means that it is within the band of frequencies that
may be
transmitted over normal telefone lines. Other SF Signals, such as
3700Hz are used
also. However, they cannot be carried over the
telefone network normally (They are
"OUT-OF-BAND" and are
therefore NOT able tobe taken advantage of as 2600Hz is. Back
to
trunks. Let’s take a hypothetical phone call. You pick up your
fone and dial
1+806-258-1234(Your goof friend in Amarillo Texas).
For ease we’ll assume that you are on #5
crossbar swithcing and
not in the 806 area. Your central office (CO) would recognize
Page 6
that 806 is a Foreign NPA, so it would route the call to the
toll
centre that serves you. [For the sake of experienced reader, note
that the CO in
question is a Class 5 with LAMA that uses
OUT-OF-BAND SF supervisory signalling]. Depending on
where you
are in the country, the call would leave your toll centre(on more
trunks) to
abother tollcenter, OR office of higher "RANK".Then it
would be routed to
centraloffice 806-258 eventually and the call
would be completed. ILLUSTRATION:
A—CO1——-TC1——TC2—-CO2—-BA=YOU
___________
CO1=YOUR CENTRAL OFFICE / Got
bored \
TC1=YOUR TOLL OFFICE. \ of trans- /
C2=TOLL OFFICE IN AMARILLO. /lating all \
B=YOUR FRIEND (806-258-1234) /___________\
IN THIS SITUATION IT WOULD BEREALISTIC TO SAY THAT CO2 USES
SFIN-BAND (2600HZ)
SIGNALLING, WHILEALL THE OTHERS USE
OUT-OF-BANDSIGNALLING (3700HZ). IF YOU DON’TUNDERSTAND
THIS,
DON’T WORRY TOO MUCH.I AM POINTING THIS OUT MERELY FOR THESAKE OF
ACCURACY. THE
POINT IS THATWHILE YOU ARE CONNECTED TO
806-258-1234, ALL THOSE TRUNKS FROM YOURCENTRAL OFFICE
(CO1) TO
THE 806-258CENTRAL OFFICE (CO2) DO *NOT* HAVE2600HZ ON THEM,
INDICATING TO
THEBELL EQUIPMENT THAT A CALL IS INPROGRESS AND THE
TRUNKS ARE IN USE. NOW LET’S SAY YOU’RE
TIRED OFTALKING TO YOUR
FRIEND IN AMARILLO(806-258-1234) SO YOU SEND A 2600HZDOWN THE
LINE. THIS TONE TRAVELS DOWNOFFICE (CO2) WHERE IT IS
DETECTED.HOWEVER, THAT CO THINKS THAT
THE2600HZ IS ORIGINATING
FROM BELLEQUIPMENT, INDICATING TO IT THATYOU’VE HUNG UP, AND THUS
BUT ACTUALLY, YOUHAVE NOT HUNG
UP, YOU HAVE FOOLED
THEEQUIPMENT AT YOUR FRIEND’S CO INTOTHINKING YOU HAVE. THUS,IT
DISCONNECTSHIM AND RESETS THE EQUIPMENT TOPREPARE FOR THE NEXT
CALL. ALL THISHAPPENS VERY
QUICKLY (300-800MS FORSTEP-BY-STEP
EQUIPMENT AND 150-400MSFOR OTHER EQUIPMENT). WHEN YOU
STOP
SENDING 2600HZ (AFTERABOUT A SECOND), THE EQUIPMENT THINKSTHAT
ANOTHER CALL IS
COMING TOWARDSIT (I.E., IT THINKS THE FAR END
HASCOME "OFF-HOOK" SINCE THE TONE
HASSTOPPED). IT COULD BE
THOUGHT OF AS ATOGGLE SWITCH: TONE –> ON HOOK, NOTONE
–>OFF
HOOK.
NOW THAT YOU’VESTOPPED SENDING 2600HZ, SEVERAL THINGSHAPPEN:
1) A
TRUNK IS SEIZED.
2) A "WINK" IS SENT TO THE CALLING ENDFROM THE CALLED END
INDICATING THATTHE CALLED END (TRUNK) IS NOT READY TORECEIVE
DIGITS YET.
3) A REGISTER
IS FOUND AND ATTACHEDTO THE CALLED END OF THE
TRUNK WITHINABOUT TWO SECONDS (MAX).
4) A
START-DIAL SIGNAL IS SENT TO THECALLING END FROM THE
CALLED ENDINDICATING THAT THE CALLED END
ISNOW, ALL OF THIS IS
PRETTY MUCHTRANSPARENT TO THE BLUE BOXER. ALL HEREALLY HEARS WHEN
Page 7
THESE FOUR THINGSHAPPEN IS A <BEEP><KERCHUNK>.
SO,SEIZURE OF A TRUNK WOULD GO SOMETHINGLIKE THIS:
1> SEND A 2600HZ
2>
TERMINATE 2600HZ AFTER 1-2 SECS.
3> [BEEP][KERCHUNK]
ONCE THIS HAPPENS, YOU
ARE CONNECTEDTO A TANDEM THAT IS
READY TO OBEY YOUREVERY COMMAND. THE NEXT STEP IS TOSEND
MUSTSIMULATE THE SIGNALLING
USED BYOPERATORS AND AUTOMATIC
TOLL-DIALINGEQUIPMENT FOR USE ON TRUNKS.
THEREARE MAINLY
TWO SYSTEMS, DP AND MF.HOWEVER, DP WENT OUT
WITH THE DINOSAUR, SO I’LL ONLY DISCUSS MF
SIGNALLING.MF
(MULTI-FREQUENCY) SIGNALLING IS THESIGNALLING USED BY THE
MAJORITY OF
THEINTER- AND INTRA-LATA NETWORK. IT ISALSO USED IN
INTERNATIONAL DIALINGKNOWN AS THE CCITT
NO.5 SYSTEM. MF
SIGNALLING CONSISTS OF 7 FREQUEN-CIES, BEGINNING WITH 700HZ
ANDSEPARATED
BY 200HZ. A DIFFERENT SET OFTWO OF THE 7 FREQUENCIES
REPRESENT THEDIGITS 0 THRU 9, PLUS AN
ADDITIONAL 5SPECIAL KEYS.
THE FREQUENCIES AND USESARE AS FOLLOWS:
FREQUENCIES
(HZ) | DOMESTIC | INT’L |
—————–|————-|————-| ______________
700+900 | 1 | 1 | / I don’t know \
900+1100 | 3 | 3 | \about you, but/
700+1300 | 4 | 4
| /sometimes I \
900+1300 | 5 | 5 | \ actually dial/
1100+1300 | 6 | 6 | /the number 2.
\
700+1500 | 7 | 7 | \ SEE THE /
900+1500 | 8 | 8 | /FILE ON LIKE \
1100+1500 | 9
| 9 | \PAGE 3 FOR THE/
1300+1500 | 0 | 0 | / TONES FOR #2 \
700+1700 | ST3P | CODE 11 |
\______________/
900+1700 | STP | CODE 12 |
1100+1700 | KP | KP1 |
1300+1700 |
ST2P | KP2 |
1500+1700 | ST | ST |
THE TIMING OF ALL THE MF SIGNALS IS A
NOMINAL
60MS
EXCEPT FOR KP, [which is] 120MS
— The World of
Cryton (UK)— +44 4 584 7608
Page 8
|
17-JUN-1987 Blue box plans, part II
THE MARK TABAS ENCOUNTER SERIES _______________
/80- columns /
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /
for all of /
BETTER HOMES AND BLUE BOXING / you out there/
PART II /who want it, +/
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= / don’t.
/
—————-
(IT IS ASSUMED THAT THE READER HAS READ AND UNDERSTOOD PART I OF
THE ESSENTIAL PURPOSE OF BLUE BOXING IN THE BEGINNING WAS
MERELY
TO RECEIVE TOLL SERVICES FREE OF CHARGE. THOUGH
THIS CAN STILL BE DONE, BLUE BOXING HAS
ESSENTIALLY OUTLIVED ITS
USEFULNESS IN THIS AREA. MODERN DAY "EXTENDERS" AND
LONG DISTANCE SERVICES PROVIDE A SAFER AND EASIER WAY TO MAKE
FREE FONE CALLS.
HOWEVER,
YOU CAN DO THINGS WITH A BLUE BOX THAT JUST CAN’T BE
DONE WITH ANY-THING ELSE. FOR ORDINARY
TOLL-FRAUD, A
BLUE BOX IS IMPRACTICAL FOR THE FOLLOWING REASONS:
1. CLUMSY
EQUIPMENT REQUIRED (BLUE BOX OR EQUIVALENT)
2. MOST BOXED CALLS MUST BE MADE THROUGH AN
EXTENDER. NOT FOR
SAFETY REASONS, BUT FOR REASONS I’LL EXPLAIN LATER.
3. CONNECTIONS ARE
OFTEN SACRIFICED BECAUSE CONSIDERABLE
DISTANCES MUST BE DIALED TO CROSS A SEIZABLE TRUNK, IN
ADDITION
TO AWKWARD ROUTING.
ARE USUALLY MADE THROUGH AN EXTENDER. THIS IS
FOR BILLING
REASONS. IF YOU RECALL FROM PART I, 2600HZ IS USED AS A
"SUPERVISORY" SIGNAL. THAT IS, IT SIGNALS THE STATUS OF A TRUNK–
"ON-HOOK" OR "OFF-HOOK." WHEN YOU SEIZE A TRUNK (BY BRIEFLY
SENDING
2600HZ), YOUR END (THE CALLING END) GOES ON HOOK FOR THE
DURATION OF THE 2600HZ AND THEN GOES
OFF-HOOK ONCE AGAIN WHEN THE
2600HZ IS TERMINATED. THE CALLED END RECOGNIZES THAT A CALL
IS ON THE WAY AND ATTACHES A REGISTER, WHICH INTERPRETS THE
DIGITS WHICH ARE TO BE SENT. NOW,
UNDERSTAND THAT EVEN
THOUGH YOUR END HAS COME OFF-HOOK (NO 2600HZ PRESENT), THE OTHER
END IS STILL ON-HOOK. YOU MAY WONDER THEN,
WHY, IF THE OTHER END (THE CALLED END) IS STILL
ON-HOOK, THERE IS
NO 2600HZ COMING THE OTHER WAY ON THE TRUNK, WHEN THERE SHOULD
BE.
THIS IS CORRECT.
2600HZ *IS* PRESENT ON THE TRUNK WHEN YOU SEIZE IT AND
AFTERWARDS, BUT
YOU CANNOT HEAR IT BECAUSE OF A BAND
ELIMINATION FILTER (BEF) AT YOUR CENTRAL OFFICE.
BACK TO THE PROBLEM. REMEMBER THAT WHEN YOU SEIZE A TRUNK,
2600HZ IS INDEED COMING THE OTHER
WAY ON THE
Page 9
TRUNK BECAUSE THE CALLED END IS STILL
ON-HOOK, BUT YOU DON’T
ACTUALLY HEAR IT BECAUSE OF A FILTER. HOWEVER, THE
BELL EQUIPMENT
KNOWS IT’S THERE (THEY CAN "HEAR" IT). THE
PRESENCE OF THE 2600HZ IS TELLING THE
BILLING EQUIP-
MENT THAT YOUR CALL HAS NOT YET BEEN COMPLETED (I.E., THE CALLED
END IS
STILL ON-HOOK). WHEN FINALLY YOU DO
2600HZ FROM THE CALLED END TERMINATES. THIS TELLS
THE BILLING
EQUIPMENT THAT SOMEONE PICKED UP THE FONE AT THE CALLED END AND
YOU SHOULD
BEGIN TO BE BILLED. SO YOU DO START TO GET BILLED,
BUT FOR THE CALL TO THE TRUNK, NOT THE
BOXED CALL. YOUR BILLING
EQUIPMENT THINKS THAT YOU’VE CONNECTED WITH THE NUMBER YOU USED
TO SEIZE THE TRUNK.
ILLUSTRATION:
1. YOU CALL 1+806-258-2222 (DIRECTLY)
<———————————–>
(YOU)
806-258-2222
NO 2600HZ——-> <————2600HZ
WHEN YOU SEIZE A TRUNK
(BEFORE THE NUMBER YOU CALLED ANSWERS)
THERE IS NO AFFECT ON YOUR BILLING EQUIPMENT. IT SIMPLY
THINKS
THAT YOU’RE STILL WAITING FOR THE CALL TO COMPLETE
(THE CALLED END IS STILL
ON-HOOK; IT IS RINGING, BUSY, GOING TO
RECORDING OR INTERCEPT OPERATOR).
NOW, LET’S SAY
THAT YOU’VE SEZIED A TRUNK (806-258-2222) AND
FOR EXAMPLE, KP+314+949+1705+ST. THE CALL IS
ROUTED
FROM THE TANDEM YOU SEIZED TO: 314-949-1705.
ILLUSTRATION:
<——————>O<—————>
(YOU) 806 314-949
TANDEM
NOTE THAT THE ENTIRE PATH TOWARDS THE RIGHT (THE CALLED END)
HAS NO 2600HZ PRESENT
AND IS THEREFORE "OFF-HOOK." THE ENTIRE
PATH TOWARDS THE LEFT (THE CALLING END) DOES
HAVE 2600HZ
PRESENT ON IT, INDICATING THAT THE CALLED END HAS NOT PICKED UP
(OR COME
"OFF-HOOK"). WHEN 314-949-1705 ANSWERS,
"ANSWER SUPERVISION" IS GIVEN AND
THE 2600HZ TOWARDS THE LEFT
(THE CALLING END) TERMINATES. THIS TELLS YOUR BILLING
EQUIPMENT,
WHICH THINKS THAT YOU’RE STILL WAITING TO BE CONNECTED
WITH 806-258-2222,
THAT YOU’VE FINALLY CONNECTED. BILLING THEN
BEGINS TO 806-258-2222. NOT EXACTLY AN AUSPICIOUS
BEGINNING FOR
AN ASPIRING YOUNG PHONE PHREAK.
Page 10
TO AVOID THIS, SEVERAL ACTIONS MAY BE TAKEN. AS PREVIOUSLY
MENTIONED, ONE MAY AVOID BEING
CHARGED FOR THE NUMBER CALLED TO
SEIZE A TRUNK BY USING AN EXTENDER (IN WHICH CASE THE
EXTENDER WILL GET BILLED). IN SOME AREAS, BOXING MAY BE
ACCOMPLISHED USING AN 800 NUMBER,
GENERALLY IN THE
FORMAT OF 800-858-XXXX (MANY AMARILLO NUMBERS) OR 800-NN2-XXXX
(SPECIAL
INTRA-STATE CLASS IN-WATS NUMBERS).
HOWEVER, BOXING OFF OF 800 NUMBERS IS IMPOSSIBLE IN MANY
AREAS.
IN MY AREA, DENVER, I AM SERVED BY #1A ESS AND IT IS IMPOSSIBLE
FOR ME TO BOX OFF
OF ANY 800 NUMBER.
YEARS AGO, IN THE EARLY DAYS OF BLUE BOXING (BEFORE MY TIME),
PHREAKS
OFTEN USED DIRECTORY ASSISTANCE TO BOX OFF
OF BECAUSE THEY WERE "FREE" LONG
COMPETETIVE LONG DISTANCE
COMPANIES,
DIRECTORY ASSISTANCE SURCHARGES ARE NOW $0.50 IN
MANY AREAS. IT
IS ADDITIONALLY ADVISED THAT DIRECTORY ASSISTANCE NUMBERS NOT BE
USED TO
BOX FROM BECAUSE OF THE FOLLOWING:
AVERAGE DA CALLS LAST UNDER 2 MINUTES. WHEN YOU BOX A
CALL,
CHANCES ARE THAT IT WILL LAST CONSIDERABLY LONGER. THUS, THE BELL
BILLING
EQUIPMENT WILL MAKE A NOTE OF CALLS TO DIRECTORY
ASSISTANCE THAT LAST A LONG TIME. A CALL TO A
DIRECTORY ASSISTANT
LASTING FOR 4 HOURS AND 17 MINUTES MAY APPEAR SOMEWHAT
SUSPICIOUS.
ALTHOUGH THE DATE, TIME, AND LENGTH OF A DA CALL DO NOT APPEAR
ON THE BILL,
IT IS RECORDED ON AMA TAPE AND WILL TRIP A TROUBLE
REPORT IF IT WERE TO LAST TOO LONG. THIS IS
HOW MOST
PHREAKS WERE DISCOVERED IN THE OLD DAYS. ALSO, SOMETIMES TOO MANY
CALLS LASTING
TOO LONG TO ONE 800 NUMBER MAY RAISE A FEW EYEBROWS
AT THE LOCAL SECURITY OFFICE.
ASSUMING YOU CAN COMPLETE A BLUE BOX CALL, THE FOLLOWING ARE
LISTED ROUTINGS FOR VARIOUS BELL
INTERNAL OPERATORS.
THESE ARE IN THE FORMAT OF KP+NPA+SPECIAL ROUTING+1X1+ST, WHICH I
WILL EXPLAIN LATER.
THE 1X1 IS THE ACTUAL OPERATOR ROUTING, AND
NPA AND NPA+SPECIAL
ROUTING ARE USED FOR OUT-OF-
AREA CODE CALLS AND OUT-OF-AREA CODE CALLS REQUIRING SPECIAL
KP+101+ST …… TOLL TEST BOARD
KP+121+ST ……
INWARD OP
KP+141+ST …… WAS RATE & ROUTE. NOW ONLY WORKS IN
312, 815,
717, AND A FEW OTHERS. IT HAS
BEEN REPLACED WITH A UNIVERSAL RATE & ROUTE
NUMBER,
800+141+1212.
KP+151+ST …… OVERSEAS COMPLETION OPERATOR (INBOUND). WORKS
ONLY IN
CERTAIN NPAS, SUCH AS 303.
KP+181+ST …… IN SOME AREAS, TOLL STATION FOR SMALL TOWNS
Page 11
THUS, IF YOU SEIZE A TRUNK IN 806 NPA AND WANTED AN
INWARD (IN
806), THEN YOU WOULD DIAL KP+121+ST. IF YOU WANTED A 312 INWARD
AND WERE
DIALING ON AN 806 TRUNK, AN AREA CODE WOULD BE REQUIRED.
THUS, YOU WOULD DIAL
KP+312+121+ST.
FINALLY, SOME PLACES IN THE NETWORK REQUIRE SPECIAL ROUTING,
IN ADDITION
TO AN AREA CODE. AN EXAMPLE IS FRANKLIN PARK, ILL. IT
REQUIRES A SPECIAL ROUTING OF 032. FOR
THIS, YOU WOULD
DIAL KP+312+032+121+ST FOR A FRANKLIN PARK INWARD OPERATOR.
SPECIAL
ROUTINGS ARE IN THE FORMAT OF 0XX. THEY ARE USED
PRIMARILY FOR LOAD BALANCE, SO THAT TRAFFIC
FLOW
MAY BE EVENLY DISTRIBUTED. ABOUT HALF OF THE EXCHANGES IN THE
NETWORK REQUIRE
SPECIAL ROUTING. NOTE THAT SPECIAL ROUTINGS ARE
NEVER EVER EVER USED TO DIAL NORMAL TELEPHONE
NUMBERS,
ONLY OPERATORS.
OPERATOR FUNCTIONS:
TOLL TEST BOARD-
GENERALLY A CORDBOARD
THEY ARE NOT USED BY OPERATORS, ONLY SWITCHMEN.
INWARD- ASSISTS THE NORMAL TSPS (0+) OPERATOR IN COMPLETING CALLS
OUT OF THE TSPS’S AREA.
ALSO, INWARDS PERFORM EMERGENCY INERRUPTS
WHEN THE NUMBER TO BE INTERRUPTED IS OUT OF THE AREA
CODE
OF THE ORIGINAL (TSPS) OPERATOR. FOR EXAMPLE, A 303 OPERATOR HAS
A CUSTOMER THAT
NEEDS AN EMERGENCY INTERRUPT ON 215-647-6969. THE
303 OPERATOR GETS THE ROUTING FOR THE INWARD
THAT COVERS
215-647, SINCE SHE CANNOT DO THE INTERRUPT HERSELF. THE ROUTING
IS FOUND TO
BE ONLY 215+ (NO SPECIAL ROUTING REQUIRED). SO, THE
303 OPERATOR KEYS KP+215+121+ST. AN INWARD
ANSWERS
AND THE 303 SAYS TO HER, "INWARD, THIS IS DENVER. I NEED AN
EMERGENCY
INTERRUPT ON 215-647-6969. MY CUSTOMER’S NAME IS MARK
TABAS." THE INWARD WILL THEN DO THE
INTERRUPT (OFF
THE LINE, OF COURSE). IF THE NUMBER TO BE INTERRUPTED HAD
REQUIRED
SPECIAL ROUTING, SUCH AS, SAY, 312-456-1234
(SPEC ROUTING 032), THEN THE 303 OPERATOR WOULD
DIAL
KP+312+032+121+ST FOR THE INWARD TO DO THAT INTERRUPT.
DIRECTORY ASSISTANCE-
THESE ARE THE NORMAL NPA+555+1212 OPERATORS
THAT ASSIST CUSTOMERS WITH OBTAINING TELEFONE
DIRECTORY LISTINGS.
NOT MUCH TOLL-FRAUD POTENTIAL HERE, EXCEPT MAYBE $0.50.
RATE
AND ROUTE- THESE OPERATORS ARE REACHED BY DIALING
KP+800+141+1212+ST.
WITH RATES
AND ROUTINGS (THUS THE NAME). THE ONLY USES I
TYPICALLY HAVE FOR THEM ARE THE FOLLOWING:
1. ROUTING INFORMATION. IN THE ABOVE EXAMPLE, WHEN THE 303
Page 12
OPERATOR NEEDED TO DIAL AN INWARD THAT SERVED 215-647,
SHE NEEDED TO KNOW IF ANY
SPECIAL ROUTING WAS REQUIRED AND, IF
SO, WHAT IT WAS. ASSUMING SHE WOULD USE RATE AND ROUTE,
SHE
WOULD DIAL THEM AND SAY NICELY, "OPERATOR’S ROUTE, PLEASE, FOR
215-647."
RATE & ROUTE WOULD RESPOND WITH "215 PLUS." THIS
MEANS THAT THE OPERATOR WOULD
DIAL KP+215+121+ST TO REACH THE
INWARD THAT SERVES 215-647. IF THERE WERE SPECIAL ROUTING
RESPOND WITH "312 PLUS 032
PLUS." IN THAT CASE, THE OPERATOR
WOULD DIAL KP+312+032+ST FOR THE INWARD THAT SERVES
312-456.
IT IS GOOD PRACTICE TO ASK FOR "OPERATOR’S ROUTE" SPECIFICALLY,
AS
THERE ARE ALSO "NUMBERS ROUTE" AND "DIRECTORY ROUTES." IF
YOU DO NOT
SPECIFICALLY ASK FOR OPERATOR’S ROUTE, RATE & ROUTE
WILL GENERALLY ASSUME THAT IS WHAT
YOU WANT ANYWAY.
"NUMBERS" ROUTE REFERS TO OVERSEAS CALLS. EXAMPLE, YOU WANT TO
(AND YOU ALREADY HAVE THE NUMBER). YOU
WOULD CALL ROUTING AND SAY
"NUMBERS ROUTE, PLEASE, GENEVA, SWITZERLAND."
THE
OPERATOR WOULD RESPOND WITH:
"MARK 41+22. 011+041+ST (PLUS) 041+22"
THE
"MARK 41+22" HAS TO DO WITH BILLING, SO DISREGARD IT. THE
011+041 BE DISCUSSED IN
PART III) AND THE 041+ 22+ IS THE ROUTING
FOR GENEVA FROM THE OVERSEAS SENDER.
"DIRECTORY" ROUTINGS ARE FOR DIRECTORY ASSISTANCE OVERSEAS.
EXAMPLE:
YOU WANT
A DA IN ROME, ITALY. YOU WOULD CALL RATE & ROUTE
AND SAY, "DIRECTORY ROUTING PLEASE,
FOR ROME, ITALY." THEY
WOULD RESPOND WITH "011+039+ST (PLUS) 039+1108 START."
AS IN THE
PREVIOUS EXAMPLE, THE 011+039 IS ACCESS TO THE OVERSEAS GATEWAY.
THE 039+1108
IS A DIRECTORY ASSISTANT IN ROME.
2. NAMEPLACE INFORMATION. RATE & ROUTe WILL GIVE
YOU THE LOCATION
OF AN NPA+ EXCHANGE. EXAMPLE: "NAMEPLACE PLEASE, FOR 215-648."
THIS ISN’T ESPECIALLY
USEFUL, SINCE YOU CAN GET THE SAME
INFORMATION (LEGALLY) BY DIALING 0, BUT USING RATE &
ROUTE IS
OFTEN MUCH FASTER AND IT AVOIDS HAVING TO HANG UP WHEN YOU ARE
ALREADY ON A
TRUNK.
*NOTE ON RATE & ROUTE: AS A BLUE BOXER, ALWAYS ASK FOR "IOTC"
ROUTE", ETC.)
THIS TELLS THEM THAT YOU WANT CORDBOARD-TYPE
ROUTINGS, NOT TSPS, BECAUSE A BLUE BOXER IS
ACTUALLY JUST A
CORDBOARD POSITION (THAT BELL DOESN’T KNOW ABOUT).
Page 13
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
OVERSEAS COMPLETION OPERATOR
(INBOUND) THESE OPERATORS
(KP+151+ST) ASSIST IN THE COMPLETION OF CALLS COMING IN TO
THE
UNITED STATES FROM OVERSEAS. THERE NPAS IN THE COUNTRY
(NAMELY 303). TO USE ONE, YOU WOULD
SEIZE A TRUNK AND
DIAL KP+303+151+ST. THEN YOU WOULD TELL THE OPERATOR, FOR
EXAMPLE,
"THIS IS BANGLADESH CALLING. I NEED U.S.
NUMBER 215-561-0562 PLEASE." [IN A BROKEN
INDIAN ACCENT]. SHE
WOULD CONNECT YOU, AND THE BILL WOULD BE SENT TO BANGLADESH
(WHERE
I’VE BEEN BILLING MY KP+151+ST CALLS FOR TWO
YEARS).
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
OTHER INTERNAL BELL
OPERATORS.
KP+11501+ST …… UNIVERSAL OPERATOR
KP+11511+ST …… CONFERENCE
OP
KP+11521+ST …… MOBILE OP
KP+11531+ST …… MARINE OP
KP+11541+ST ……
LONG DISTANCE TERMINAL
KP+11551+ST …… TIME & CHARGES OP
KP+11561+ST ……
HOTEL/MOTEL OP
KP+11571+ST …… OVERSEAS (OUTBOUND) OP
THESE 115X1 OPERATORS
ARE IDENTICAL IN ROUTING TO THE 1X1
OPERATORS LISTED PREVIOUSLY, WITH ONE EXCEPTION. IF
SPECIAL ROUTING IS REQUIRED (0XX), THEN THE TRAILING 1 IS LEFT
OFF.
EXAMPLES:
A 312 UNIVERSAL OP … KP+312+11501+ST A FRANKLIN PARK (312-456)
UNIVERSAL OP
(SPECIAL ROUTING 032 REQUIRED)….KP+312+032+1150+ST
[THE TRAILING 1 OF 11501 IS LEFT OFF].
UNIVERSAL- USED FOR COLLECT/CALLBACK CALLS TO COIN STATIONS.
CONFERENCE- THIS IS A CORDBOARD CONFERENCE OPERATOR WHO WILL SET
UP A CONFERENCE FOR A
CUSTOMER ON A MANUAL OPERATION BASIS.
MOBILE- ASSISTS IN COMPLETION OF CALLS TO MOBILE
(IMTS) TYPE
TELEFONES MARINE- ASSISTS IN COMPLETION OF CALLS TO OCEAN GOING
VESSELS.
LONG DISTANCE TERMINAL- NOW OBSOLETE. WAS USED FOR COMPLETION OF
LONG DISTANCE
CALLS.
Page 14
TIME & CHARGES- WILL GIVE EXACT COSTS OF CALLS. USED TO TIME
CALLS AND INFORM
CUSTOMER OF EXACTLY HOW MUCH IT COST.
HOTEL/MOTEL- HANDLES CALLS TO/FROM HOTELS AND
MOTELS.
OVERSEAS COMPLETION (OUTBOUND)- ASSISTS IN COMPLETION OF CALLS TO
OVERSEAS POINTS. ONLY WORKS IN SOME, IF ANY NPAS, BECAUSE
OVERSEAS ASSISTANCE HAS BEEN
CENTRAIZED TO IOCC (COVERED IN
PART III).
NOTE THAT ALL KP+1X1+ST AND KP+115X1+ST
OPERATORS AUTOMATICALLY
ASSUME THAT YOU ARE A TSPS OR CORDBOARD OPERATOR ASSISTING A
CUSTOMER WITH A CALL. DO NOT DO ANYTHING TO JEOPARDIZE
**DON’T CALL THESE OPERATORS!
FIND OUT WHAT TO DO FIRST.**
THIS CONCLUDES PART II. THERE IS ONE FINAL PART IN WHICH I
WILL
EXPLAIN OVERSEAS DIALING, IOCC (INTERNATIONAL OVERSEAS COMPLETION
CENTRE), RQS
(RATE/QUOTE SYSTEM), AND SOME BASIC SCANNING.
…………………………………
(C) FEBRUARY 6, 1900 MARK TABAS
…………………………………
— The World of Cryton (UK)— +44 4 584
7608
Page 15
| 17-JUN-1987 Blue box plans, part III
THE MARK TABAS ENCOUNTER SERIES
PRESENTS…
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
BETTER HOMES AND BLUE BOXING
PART III
ADVANCED SIGNALLING
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
(IT IS ASSUMED THAT
THE READER HAS READ AND UNDERSTOOD PARTS I &
II BEFORE PROCEEDING TO THIS PART).
AND OPERATORS. IN THIS
PART I WILL EXPLAIN OVERSEAS DIRECT
BOXING, THE IOCC, THE RQS, AND SOME BASIC SCANNING
METHODS.
OVERSEAS DIRECT BOXING.
CALLING OUTSIDE OF THE UNITED STATES AND
CANADA IS ACCOMPLISHED
BY USING AN "OVERSEAS GATEWAY." THERE ARE 7 OVER-
SEAS
GATEWAYS IN THE BELL SYSTEM, AND EACH ONE IS DESIGNATED TO
SERVE A CERTAIN REGION OF THE
WORLD. TO INITIATE AN OVERSEAS
CALL, ONE MUST FIRST ACCESS THE GATEWAY THAT THE CALL
IS
TO BE SENT ON. TO DO THIS AUTOMATICALLY, DECIDE WHICH COUNTRY
YOU ARE CALLING AND FIND ITS
COUNTRY CODE.
THEN, PAD IT TO THE LEFT WITH ZEROS AS REQUIRED SO IT IS THREE
DIGITS.
[ADD EXAMPLES:
LUXEMBOURG (352) IS 352 (STAYS THE SAME)
SPAIN (34) BECOMES 034 (1
ZERO ADDED)
U.S.S.R. (7) BECOMES 007 (2 ZEROS ADDED)
NEXT, SEIZE A TRUNK AND DIAL
KP+011+CC+ST. NOTE THAT CC IS THE
THREE DIGIT PADDED COUNTRY CODE THAT YOU JUST DETERMINED BY
THE
ABOVE METHOD. [FOR LUXEMBOURG, DIAL KP+011+352+ST, SPAIN
KP+011+034+ST, AND THE
U.S.S.R. KP+011+007+ST]. THIS IS DONE TO
ROUTE YOU TO THE APPROPRIATE OVERSEAS GATEWAY THAT
WILL ALLOW YOU TO DIAL EVERY
DIALABLE COUNTRY, IT
IS GOOD PRACTICE TO USE THE GATEWAY THAT IS DESIGNATED FOR THE
COUNTRY YOU ARE CALLING.
AFTER DIALING KP+011+CC+ST (AS CC IS DEFINED ABOVE) YOU SHOULD
BE CONNECTED TO AN OVERSEAS GATEWAY. IT WILL ACKNOWLEDGE BY
SENDING A WINK, WHICH IS AUDIBLE
AS A <BEEP><KERCHINK> AND A
DIAL TONE. ONCE YOU RECEIVE INTERNATIONAL DIAL TONE,
YOU MAY
ROUTE YOUR CALL ONE OF TWO WAYS:
A) AS AN OPERATOR-ORIGINATED CALL,
OR
Page 16
CALL, KEY KP+COUNTRY CODE (NOT PADDED WITH ZEROS)+ CITY CODE+
NUMBER+ST. YOU
WILL THEN BE CONNECTED, PROVIDING THE COUNTRY YOU
ARE CALLING CAN RECEIVE DIRECT-DIALED CALLS.
THE U.S.S.R. IS AN
EXAMPLE OF EXAMPLE OF A BOXED INT’L CALL:
TO MAKE A CALL TO
THE POPE (ROME, ITALY), FIRST OBTAIN THE
COUNTRY CODE, WHICH IS 39. PAD IT WITH ZEROS SO
THAT
IT IS 039. SEIZE A TRUNK AND DIAL KP+011+039+ST. WAIT FOR SENDER
DIAL TONE AND THEN
DIAL KP+39+6+6982+ST. 39 IS THE COUNTRY CODE,
6 IS THE CITY CODE, AND 6982 IS THE POPE’S
NUMBER IN ROME.
TO GO AS AN OPERATOR-ORIGINATED CALL, SIMPLY PLACE A ZERO IN
FRONT OF THE COUNTRY CODE WHEN DIALING ON THE GATEWAY. THUS,
KP+0+39+6+6982+ST WOULD BE DIALED
AT SENDER DIAL TONE. ROUTING
YOUR CALL AS OPERATOR-ORIGINATED DOES NOT AFFECT MUCH UNLESS
YOU
ARE DIALING AN OPERATOR IN A FOREIGN COUNTRY
TO DIAL AN OPERATOR IN A FOREIGN
COUNTRY, YOU MUST FIRST OBTAIN
THE OPERATOR ROUTING FROM RATE & ROUTE FOR THAT COUNTRY.
DIAL
RATE & ROUTE AND IF YOU’RE TRYING TO GET AN OPERATOR IN
YUGOSLAVIA, SAY NICELY,
"IOTC OPERATOR’S ROUTE, PLEASE, FOR
YUGOSLAVIA." [IN LARGER COUNTRIES IT MAY BE
NECESSARY TO SPECIFY
A CITY]. RATE & ROUTE WILL RESPOND WITH, "38 PLUS 11029".
SO,
DIAL YOUR OVERSEAS GATEWAY, KP+011+038+ST, WAIT FOR
SENDER DIAL TONE, AND KEY
KP+0+38+11029+ST. YOU SHOULD THEN GET
AN OPERATOR IN YUGOSLAVIA. NOTE THAT YOU MUST PREFIX THE
COUNTRY
CODE ON THE SENDER WITH A 0 BECAUSE PRESUMABLY ONLY AN OPERATOR
HERE CAN DIAL AN
OPERATOR IN A FOREIGN COUNTRY.
WHEN YOU DIAL KP+011+CC+ST FOR A 3-DIGIT SENDER CODE OF THE
COUNTRY YOU ARE DIALING.
THE OVERSEAS GATEWAYS AND
THEIR 3-DIGIT CODES ARE LISTED BELOW.
182 ….. WHITE
PLAINS, NY
183 ….. NEW YORK, NY
184 ….. PITTSBURG, PA
185 ….. ORLANDO, FL
187 ….. DENVER, CO
188 ….. NEW YORK, NY
DIALING KP+182+ST WOULD GET YOU THE SENDER IN WHITE PLAINS, AND
KP+183+ST WOULD GET THE SENDER
IN NYC, ETC., BUT THE KP+011+CC+ST
IS HIGHLY SUGGESTED (AS PREVIOUSLY MENTIONED). TO FIND
OUT
WHAT SENDER YOU WERE ROUTED TO AFTER DIALING KP+011+CC+ST, DIAL
(AT INT’L DIAL
TONE): KP+0000000+ST.
IF YOU HAVE DIFFICULTY IN REACHING A SENDER, CALL RATE AND
ROUTE
AND ASK FOR A NUMBERS ROUTE FOR THE COUNTRY
YOU’RE DIALING. SOMETIMES, KP+011+PADDED COUNTRY
CODE+ST WILL NOT
WORK.
Page 17
I HAVE FOUND THIS IN
MANY 3-DIGIT COUNTRY CODES. LEXEMBOURG,
COUNTRY CODE 352, FOR EXAMPLE, SHOULD BE
KP+011+352+ST
THEORETICALLY. BUT IT IS NOT. IN THIS CASE, DIAL KP+011+
003+ST FOR THE
OVERSEAS GATEWAY. IF YOU HAVE TROUBLE, TRY DIALING
KP+011+FIRST DIGIT OF COUNTRY CODE+ST, OR
CALL RATE AND ROUTE.
THE IOCC
ROUTE AND ASK FOR AN "IOTC NUMBERS
ROUTE" OR "IOTC OPERATORS
ROUTE" FOR A FOREIGN COUNTRY, YOU WILL GET SOMETHING
LIKE
"160+700" (AS IN THE CASE OF THE SOVIET UNION). THIS MEANS
THAT THE
COUNTRY IS NOT DIALABLE DIRECTLY AND MUST BE HANDLED
THROUGH THE INTERNATIONAL OVERSEAS
COMPLETION CENTRE (IOCC). FOR
AN IOCC ROUTING, PAD THE COUNTRY CODE TO THE RIGHT WITH
ZEROS UNTIL IT IS 3 DIGITS. THEN KP+160 IS DIALED, PLUS THE
PADDED COUNTRY CODE, PLUS ST.
EXAMPLES:
THE U.S.S.R. (7) …… KP+160+700+ST
JAPAN (81) …………
KP+160+810+ST
URAGUAY (598) ……… KP+160+598+ST
YOU WILL THEN BE ROUTED TO
THE IOCC IN PITTSBURG, PA, WHO WILL
ASK FOR COUNTRY, CITY, AND NUMBER BEING DIALED.
MANY
TIMES THEY WILL ASK FOR A RINGBACK [THANKS TO TELENET BOB]
SO HAVE A LOOP READY. THEY WILL
THEN PLACE THE CALL AND CALL YOU
BACK (OR SOMETIMES PUT YOU THROUGH DIRECTLY). SOME CALLS,
SUCH
AS TO MOSCOW, TAKE SEVERAL HOURS.
THE RATE QUOTE SYSTEM (RQS).
THE RQS IS THE OPERATOR’S RATE/QUOTE SYSTEM. IT IS A COMPUTER
USED BY TSPS (0+) OPERATORS TO
GET RATE AND ROUTE
INFORMATION WITHOUT HAVING TO DIAL THE RATE AND ROUTE OPERATOR.
IN
PART II, I DISCUSSED GETTING AN INWARD ROUTING
FOR DIALING-ASSISTANCE AND EMERGENCY
FROM RQS. SAY YOU WANT
THE INWARD ROUTING FOR 305-994. YOU WOULD
SIEZE A TRUNK AND DIAL KP+009+ST (TO ACCESS THE
RQS).
SOMETIMES, IF YOU SEIZE A TRUNK IN AN NPA NOT EQUIPPED WITH RQS,
YOU NEED TO DIAL
AN NPA THAT IS EQUIPPED WITH RQS FIRST, SUCH AS
303. ANYWAY, AFTER YOU DIAL KP+009+ST OR
KP+303+009+ST, YOU
WILL RECEIVE A WINK (<BEEP><KERCHINK>) AND THEN RQS DIAL TONE.
AT
RQS DIAL TONE, FOR AN INWARD ROUTING FOR 305-994 YOU WOULD DIAL
KP+06+305+994+ST.
THAT IS, KP+06+NPA+EXCHANGE+ST. RQS WILL
RESPOND WITH "305 PLUS 033 PLUS". THIS
MEANS YOU WOULD DIAL
KP+305+033+121+ST FOR AN INWARD THAT SERVICES 305-994.
IF NO
SPECIAL ROUTING WERE REQUIRED, RQS WOULD HAVE RESPONDED
Page 18
KP+305+121+ST FOR AN INWARD.
ANOTHER RQS FEATURE IS THE ECHO FEATURE. YOU CAN USE IT TO TEST
YOUR BLUE BOX. DIAL RQS
(KP+009+ST) AND THEN KEY
KP+07+1234567890+ST. RQS WILL RESPOND WITH VOICE IDENTIFICATION
OF THE DIGITS IT RECOGNIZED, BETWEEN THE KP+07 AND ST.
RQS CAN ALSO BE USED FOR RATES AND
DIRECTORY ROUTINGS, BUT
THOSE ARE SELDOM NEEDED, SO THEY HAVE BEEN OMITTED HERE.
SIMPLE SCANNING.
IF YOU’RE INTERESTED IN SCANNING, TRY DIALING ON A TRUNK,
ROUTINGS IN THE FORMAT OF KP+11XX1+ST. BEGIN WITH 11001
INTERESTING THINGS TO BE FOUND THERE,
AS DOCTOR WHO (413 AREA)
CAN TELL YOU. THOSE 11XX1 ROUTINGS CAN ALSO BE
PREFIXED WITH AN
NPA, SO IF YOU WANT TO SCAN AREA CODE 212, DIAL
KP+212+11XX1+ST.
THERE, NOW YOU
KNOW AS MUCH ABOUT BLUE BOXING AS MOST PHREAKS.
IF YOU READ AND UNDERSTAND THE MATERIAL, AND
PUT ASIDE
PRECONCEIVED IDEAS OF WHAT BLUE BOXING IS THAT YOU MAY HAVE
ACQUIRED FROM
INEXPERIENCED PEOPLE OR OTHER BULLETIN BOARDS, YOU
SHOULD BE WELL ON YOU WAY TO AN
ENLIGHTENING CAREER IN BLUE
BOXING. IF YOU FOLLOW THE GUIDELINES IN PART I TO BOX, YOU
SHOULD HAVE NO PROBLEM WITH THE FONE COMPANY. COMMENTS MADE BY
"PHREAKS" ON BULLETIN
BOARDS THAT PROCLAIM "TRACING"
OF BLUE BOXERS ARE NONSENSE AND SHOULD BE IGNORED
(EXCEPT FOR A
PASSING CHUCKLE).
NOTE 1: CCIS AND THE DOWNFALL OF BLUE BOXING.
CCIS STANDS FOR COMMON CHANNEL INTEROFFICE SIGNALLING. IT IS A
SIGNALLING METHOD
USED BETWEEN ELECTRONIC SWITCHING SYSTEMS THAT
ELIMINATES THE USE OF 2600HZ AND 3700HZ
SUPERVISORY SIGNALS, AND
MF PULSING. THIS IS WHY MANY PLACES CANNOT BE BOXED OFF OF;
THEY EMPLOY CCIS, OR OUT-OF-BAND SIGNALLING, WHICH WILL NOT
RESPOND TO ANY TONES THAT YOU
GENERATE ON THE
LINE. EVENTUALLY, ALL EXISTING TOLL EQUIPMENT WILL BE UPGRADED
OR
REPLACED WE’LL ALL BE BOXING WITH MICROWAVE
DISHES. UNTIL THEN (ABOUT 1995 BY CURRENT
BOC/AT&T ESTIMATES),
HAVE FUN!
IF YOU HAVE ANY QUESTIONS ABOUT THIS TEXT,
PLEASE FEEL FREE TO
DROP ME A LINE. I WILL RESPOND TO ALL MAIL, MESSAGES, ETC.
INSULTS
ARE ALSO WELCOMED. AND IF YOU DISCOVER ANYTHING
INTERESTING SCANNING, BE SURE TO LET ME
KNOW.
MARK TABAS
$LOD$
Page 19
THIS TEXT WAS PREPARED IN FULL BY MARK TABAS FOR:
K.A.O.S.
PHILADELPHIA, PA.
[215-465-3593].
ANY SYSOP MAY FREELY DOWNLOAD THIS TEXT AND USE
IT ON HIS/HER
BBS, PROVIDED THAT NONE OF IT BE ALTERED IN ANY WAY.
TECHNICAL
ACKNOWLEDGEMENTS:
KARL MARX, X-MAN, HIGH-RISE JOE, TELENET BOB, LEX LUTHOR, TUC,
JOHN DOE, DOCTOR WHO (413 AREA), THE TONE SWEEP, MR. SILICON,
K00L KAT, THE GLUMP.
1. NOTES ON THE BOC INTRA-LATA NETWORKS
BELL SYSTEM PUBLICATION,
1983.
2. NOTES ON THE NETWORK
BELL SYSTEM PUBLICATION, 1983.
3. BELL SYSTEM
BELL SYSTEM PUBLICATION, 1983.
4. NOTES ON DISTANCE DIALING
BELL SYSTEM PUBLICATION,
1968.
5. EARLY MEDIEVAL ARCHITECTURE.
WARREN & CATHY BILL, HOUGHTON-
PUBLISHING CO., 1979.
…………………………………
(C) FEBRUARY 6,
1900 MARK TABAS
…………………………………
CALL 1-305-994-996
[KELLEY IS A BLOND BABE]
[ I agree with you ]
— The World of Cryton (UK) —
+44 4 584 7608
Page 20
Red Boxing With Whistles by THE RESEARCHER.
This article is
presented as a news item only. It is not to be
taken as an encouragement to make fraudulent
telephone calls.
Red boxing consists of simulating the tones produced when coins
are
deposited in a pay phone.
Coin tones are beeps of 2200 Hz + 1700 Hz as
follows:
5 cents - 1 beep,66 milliseconds duration.
10 cents - 2 beeps,
each 66 milliseconds duration with 66
millisecond pause between beeps.
25 cents - 5
beeps, each 33 milliseconds duration with a 33
millisecond pause between beeps.
Two methods have commonly been used by phone phreaks to produce
these tones and make free
calls.
1. The traditional Red Box consisting of a pair of Wien-bridge
oscillators
with the timing controlled by 555 timer chips.
2. Producing the signals with a computer
which are recorded and
then played back into the mouth piece of a pay
phone.
blower. A phreak in the Midwest
has extensively tested
a method of red boxing which uses nothing more than a pair of
brass or aluminum whistles. The whistles are 1/4 inch
in diameter by 4 inches long and are
tuned by means of a wooden
dowel rod which fits snugly inside. The whistles can be brought
source such as a computer
capable of producing the tones. Once
tuned, the whistles are glued or taped together so they
can be
blown together to produce the dual tone used in coin signaling.
It has been
tested and proven that with a little practice these
whistles can be used to make free calls.
Now you can blow your
money without spending a cent.
Please note
these whistles are available (for test purposes
only) from P-80 for $35.
Send
orders to P-80 3310 5th Avenue.
Page 21
DD
%*%*%*%*%*%*%*%*%*% __________________________
* *\ / \
% HACKER’S ATLAS % \ \File
dropped from all CAPS/\
* * I / to the more readable \ \
%*%*%*%*%*%*%*%*%*% I \ state
of lower case by /\/
* *\I / -=+ DarkStorm +=- \ \
% RAGON/WYV/BOF % \
\__________________________/\/
* LTD * I / \ \
% PRESENTATION! % I \ Also moved to 80
columns /\/
* * I /as opposed to its original\ \
%*%*%*%*%*%*%*%*%*% i \ 40 column
screen waster /\/
\ \I / Sorry C-64 users! \ \
WRITTEN BY : THE WYVERN
\__________________________/\/
\ \ \
HOLLOW HILLS…[805]/682-5148
\_________________________\/
#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#
Now
into the subject of Hacking , This file should give all of
you people out there who are bored
and have nothing to do,
something to do…If it doesn’t then I guess it doesn’t. Look for
How ‘Bout some International
Numbers?
Queen Elizabeth loves to talk to computer hackers and can usually
bereached at 011-441-930-482…
SOME OTHER MISC ONES :
LONDON RADIO
44-1-246-8035
DIALING INSTRUCTIONS 44-1-246-8017
CIVIL EMERGENCIES 44-1-246-8088
A fun thing to do it….Sometimes when you are calling a friend,
Boardor whatever, you
will get a cross line. (Usually LD) Where
you canhear some other losers talking, well it’s
pretty fun to
listen intotheir conversations…I have heard some very
interesting
ones… If youare lucky they will be ableto sorta
hear you, and that’s when you dostuff like
"This is an emergency
interuption, please hang up imediatelyand prepare for an
emergency call" or start cursing themor anything you
want to do!
So anyway for all
you DIAL-A-"NUTS" out there you might as well
pick upsome new interests and call
Page 22
DIAL-A-FAG 415-685-6790
DIAL-A-TEENAGER
714-346-7673
DIAL-A-ATHEIST 213-254-4914
DIAL-A-IDIOT 212-934-9090
{For those who
like 800’s, try 1-800-HOT-FUCK}
{It’s some fag-line, call up on his bill and have some gay
for you FuckNumber, tell him
its 69 or something kinky.}
{Tell everyone to call this guy, it’s free, and he needs to be
Maybe yout the kind that likes to listen to
recordings? Well then
howabout calling 512-472-9941 and listening to the "insert 25
cent"recording a couple hundred times?
Here are some carrier numbers in 805
683-3831
3832
3833
3834
3835
As far as I know they all
belong to a corp. called Signal Tech.,
the first one is at least. Hit Return a few times and
there you
are, hackingtime.
Sheesh? Still bored Eh? Well why not go ahead and get
on a 6 way
conference call?!@@#!
Get on from 7-9pm (EASTERN STAND.)
301-736-3070….
OPERATOR TRUNK [LR*2II)X]
(TRY THESE IN THAT TRUNK!)
CONFERENCE OPERATOR XXX+11511
COIN REFUND OPERATOR XXX+181
Naw, your
the 800 extender type Eh? Well get out your program and
hackthese babys:
1-800-22-1950
NONONONO THE ABOVE IS SHIT LETS TRY
TO START AGAIN :
1-800-221-1950
8190
5670
5430
Page 23
5665
223-7854
243-7854
255-2255
327-0005
0326
2703
6713
9136
547-6754
237-2618 (CODE : 115342 MAY WORK)
Well I’m not sure which
number it is but it’s one of these two:
1-805-965-3608
6308
Anyways
thats some State Farm Insurance recording machine, and as
far asI know your phone buttons 0-9
will do stuff like:
REWIND, FAST FORWARD, READ, LEAVE
MSGS, ETC,
I’ll have
more info on it in the next atlas!
EXTENDERS….322-1415, 255-2255
NEWSNET……215-668-2645
(If you need passes for newsnet I understand a guy on Sherwood///
XEROX COMPUTING
312-922-4601
ON:XC56TS
PW:[HIT RETURN]
800-621-3026 SPECIAL OPERATOR
205-235-6205 ARMY POST
713-241-6421 SHELL OIL
800-323-7751 MCI MAIL
800-233-3312
800-223-2283 CITY BANKS
800-223-3450 WUI SAFE
Say guys here
are some beauty give aways for you:
WARNER 228-3333 (PWS ON KNOWN
(AWW))
ACCURAY (K00L SYSTEM)
261-2140
ENTER
Page 24
???????
436-9687
6/24
JOHN12
LIBRARY…
(LOGON IN HALF DUP.)
422-5025
(MORE ON USING THIS
IN NEXT ATLAS)
All of the above are in the 614 area code. In the next atlas the
numberfor Wendy’s computer! <—Wendy’s the Restaurant!?!?!
MISC. 614-481 EXCHANGE
:
8049
8194
8754
8764
8771
(ALL
ABOVE WITH CARRIER)
TRAVELNET : 800-521-8400 (VOICE 800 EXTENDER)
[) Hey
guys! These guys love you:
THE PENTAGON......202-694-0814
WATERGATE.........202-965-2900
WHITE HOUSE.......202-456-1414
Here are some
presses for you to call:
RONNIE'S PRESS 800-424-9009 (?)
WHITE HOUSE "
800-248-0151
Here are some real nice ones:
213 AREA CODE
6621 BIRTH REOCRDS INFO
Page 25
*** MORE MISC. NUMBERS ***
LOWELL U....617-459-0159
RECORD A
VOICE....800-858-9313
*** A FEW EXTENDERS ***
1-800-547-1784
323-8126
521-8000
743-7481
Well if you still want more! or your still
bored...Wait for Atlas
#2, or call ---- HOLLOW HILLS at 805-682-5148--------
THE
WYVERN...> WYVERN/RAGON/BOF LTD.
#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#
---------------------------------------
Page 26
----Modem
Noise Killer (alpha version)----
With this circuit diagram, some basic tools including
a soldering
iron, and four or five components from Radio Shack, you should be
able to
cut the noise/garbage that appears on your computer's
screen.
I started this
project out of frustration at using a US Robotics
2400 baud modem and getting a fare amount of
junk when connecting
at that speed. Knowing that capacitors make good noise filters, I
threw this together.
This is very easy to build, however conditions may be different
equipment (Bell's equipment),
and on and on. So it may not work
as well for you in every case. If it does work, or if
you've
managed to tweek it to your computer/modem setup I' d like
to hear from you.
I'd also appreciate any of you electronic wizzards out there
wanting to offer any
improvements. Let's make this work for
everyone!
Please read this entire message
and see if you understand it
before you begin.
OK, what you' ll need from Radio
Shack:
1 #279-374 Modular line cord if you don't already have one. You
won't need
one if your phone has a modular plug in its base.
$4.95
1 #279-420 Modular
surface mount jack (4 or 6 conductor) $4.49
1 #271-1720 Potentiometer. This is a 5k
audio taper variable
resistor. $1.09
1 #272-1055 Capacitor. Any non-polarized 1.0
to 1.5 uf cap should
do. Paper, Mylar, or metal film caps should be used, although
#272-996 may work as well. (272-996 is a non-polarized
electrolytic cap) $.79
1
100 ohm resistor - quarter or half watt. $.19
1 #279-357 Y-type or duplex modular
connector. Don't buy this
until you've read the section on connecting the Noise Killer
below. (A, B,or C) $4.95
First off, open the modular block. You normally just pry
them
open with a screwdriver. Inside you'll find up to 6 wires. Very
carefully cut out
all but the green and red wires. The ones
Page 27
you'll be
removing should be black, yellow, white, and blue.
These wires won't be needed and may be in
the way. So cut them
as close to where they enter the plug as possible. The other end
of
these wires have a spade lug connector that is screwed into
the plastic. Unscrew and remove
that end of the wires as well.
Now, you should have two wires left. Green and red. Solder
one
end of the capacitor to the green wire. Solder the other end of
the capacitor to the
center lug of the potentiometer (there are
three lugs on this critter). Solder one end of the
resistor to
the red wire. You may want to shorten the leads of the resistor
first.
Solder the other end of the resistor to either one of the
remaining outside lugs of the
potentiometer. Doesn't matter
which. Now to wrap it up, make a hole in the lid of the mod
block
to stick the shaft of the potentiometer through. Don't make this
hole dead center
as the other parts may not fit into the body of
the mod block if you do. See how things will
fit in order to find
where the hole will go. Well, now that you've got it built you'll
need to test it. First twist the shaft on the potentiometer until
it stops. You won't know
which way to turn it until later.
It doesn't matter which way now. You also need to determine
where
to plug the Noise Killer onto the telephone line. It can be done
by one of several
ways:
A. If your modem has two modular plugs in back, connect the Noise
Killer
into one of them using a line cord. (a line cord is a
straight cord that connects a phone to
the wall outlet. Usually
silver in color)
B. If your phone is modular, you can
unplug the cord from the
back of it after you're on-line and plug the cord into the Noise
C. You may have to buy a Y-type modular adaptor. Plug the adaptor
into
a wall outlet, plug the modem into one side and the Noise
Killer into the other. Call a BBS
that has known noise problems.
After you've connected and garbage begins to appear, plug
the
Noise Killer into the phone line as described above. If you
have turned the shaft on
the potentiometer the wrong way you'll
find out now. You may get a lot of garbage or even
disconnected.
If this happens, turn the shaft the other way until it stops and
try
again. If you don't notice much difference when you plug the
Noise Killer in, that may be a
good sign. Type in a few commands
and look for garbage characters on the screen. If there
still
is, turn the shaft slowly until most of it is gone. If nothing
seems to happen at
all, turn the shaft slowly from one side to
the other. You should get plenty of garbage or
disconnected at
some point. If you don't, reread this message to make sure you've
connected it right.
Page 28
***END OF
ORIGNAL FILE***
ADDITION TO ORIGNAL FILE - 2/29/88 - Mike McCauley - CIS
71505,1173
First, a personal recomendation. _THIS WORKS!!!_ I have been
plagued
with noise at 2400 for some time. I went round and round
with Ma Bell on it, and after they
sent out several "repair
persons" who were, to be kind, of limited help in the
matter, I
threw in the towel. I saw this file on a board up east
a few days ago, and
thought I'd bite. Threw the gismo together in
about 10 minutes, took another five to adjust
the pot for best
results on my worst conection, and guess what? No more worst
connecion!
A few pointers:
1) The pot need not be either 5K or audio taper. I used a 10K 15
turn trim pot. Suggest you use what is handy.
2) I used 2MFD's of capacitance (two 1MFD's in
parallel) Two R.S.
p/n 272-1055 work fine. Remember that about 90 Volts will appear
across red & green at ring, so the caps should be rated at
100VDC+.
3) I ended up
with a final series resistance value (100 ohm +
pot) of 2.75K. I speculate that one could
probably use 2MFD and a
fixed 2.7K resistor and do the job 90% of the time. The
adjustment of the pot is not very critical.
Changes of +/- 1K made little difference in the
performance of
the circuit.
Hope it works as well for you as it did for me.
Mike McCauley
Page 29
|
17-JUN-1987 Neon box plans
--------------------------------------
THE NEON BOX
ANTI-LINENOISE
--------------------------------------
A NEON BOX IS A VERY SIMPLE
ADJUSTMENT TO YOUR FONE, THAT WILL
ALLOW A VERY CLEAR PASSAGE FROM YOUR COMPUTER TONES
TO YOUR FONE. IT ALSO WORKS GREAT FOR RECORDING TONES, SEX FONE,
OR ANYTHING ELSE YOU WANT TO
RECORD OFF OF YOUR FONE.
TOOLS:
------
THIS MODIFICATION IS VERY SIMPLE,
AND CAN BE USED ON MOST FONES,
THOUGH IT IS MORE DIFFICULT ON ONE-PIECE UNITS. ALL YOU NEED
IS
AN OLD PAIR OF HEADFONES, OR SIMILAR, A FILIPS SCREWDRIVER, A
SOLDERING IRON AND SOME
SOLDER.
INSTRUCTIONS
------------
OPEN YOUR FONE WITH THE SCREWDRIVER. WHEN
OPENED, LOOK FOR THE
RED AND BLACK WIRES THAT LEAD TO THE MOUTHPIECE. (IF YOU'RE NOT
SURE WHICH WIRES LEAD TO THE MOUTHPIECE, OPEN UP THE MOUTHPIECE
AND FIND THE SAME COLOR WIRES
ON THE BASE. FOR ONE-PIECE
UNITS, JUST LOCATE THE MOUTHPIECE).
WHEN YOU HAVE
FOUND THE MOUTHPIECE, OR WIRES, CUT THE EARD OF THE
HEADFONES OFF, AND ONE WIRE (THE ONE THAT
LEADS TO THE RIGHT
EAR). STRIP THE LEFT WIRE SO ABOUT AN EIGHTH INCH IS SHOWING.
KEEP
THE OTHER SIDE IN TACT.
THEN ON THE RED WIRE, SOLDER THE WIRE THAT IS SEPARATLY
SEALED
FROM THE OTHER ONE. ON THE BLACK WIRE (THESE ARE THE ENDS OF THE
WIRE ON THE
CIRCUIT BOARD) SOLDER THE WAIRE WRAPPED AROUND THE
OTHER WIRE. THEN SOLDER A HOLE FOR THE
WIRE. YOU HAVE NOW MADE
A NEON BOX.
--- The World of Cryton (UK)--- +44 4
584 7608
Page 30
| 17-JUN-1987 White box plans (u/l by Agrajag the prolonged)
White Box Plans ---
MULTIPLE TONE
(Uploaded by Agrajag the Prolonged) GENERATOR----
This article
will tell you how to change a normal touch tone
keypad and convert it to a portable unit. In
addition, we
give the touch-tone frequencies.
First of all, the tones made by a
touch tone telephone are not
single tones, they are a combination of two tones, making
"DTMF"
(dual tone multi-frequency). The normal tone telephone dials 12
different signals, but is capable of dialing 16 different signals
(see bulletin on silver
boxes).
The power required by a keypad is about 25 volts, but they will
work with
as little as 15, thereby allowing the use of two 9-
volt radio batteries. As you may have
guessed, they are also
designed to operate with a telephone type speaker (and phone
line), and not the standard 8-ohm speaker which needs to be used
for adequate volume. To
accompolish this, we use a matching
transformer, this is one of those miniature ones available
at
Radio Shack. Enough of the theory, now for the circuit.
You will need:
A touch tone keypad
A miniature 1000 to 8 ohm transformer (Radio Shack # 273-1380)
Two 9-volt radio batteries
Two 9-volt battery clips
A
case to put it all in (optional)
A few construction notes, I suggest that you solder
and tape all
connections. It is also important to read this entire bulletin
before
attempting to construct this.
First, connect the RED wire of the transformer to
either
terminal on the speaker. Now connect the WHITE wire from the
transformer to the
other terminal on the speaker. Next, connect
the RED (positive) wire of one battery clip to
the black wire of
the other battery clip. Now connect the the remaining RED wire
on the
second battery clip to the GREEN wire from the touch tone
pad. Connect the BLUE wire from the
touch tone pad to the
ORANGE-and-BLACK striped wire from the touch tone pad. To these
two wires, now connect the remaining black lead from first
battery clip. You have now finished
the power connection to the
keypad. Connect the BLACK wire from the keypad to the BLUE wire
Page 31
from the keypad to the GREEN wire on the transformer. The BLACK
wire on the transformer should not be connected to anything,
along with quite a few wires from
the keypad. The connection of
the keypad is now complete. All you have to do is connect two
go. You may want to mount
it in a case for easy portability.
Note that the silver box modification CAN be made to this
unit,
allowing complete remote phreaking. When none of the buttons
are pressed, this
unit uses NO power, thereby eliminating the
need for a power switch, and extending the life of
the
batteries.
The following are the frequency combinations generated by each
KEY FREQ. #1 FREQ. #2
--- -------- --------
1 697
1209
2 697 1336
3 697 1477
A 697 1633
4 770 1209
5 770 1336
B 770 1633
7 852 1209
8 852 1336
9 852 1477
C 852
1633
* 941 1209
0 941 1336
# 941 1477
D 941 1633
All
frequencies are measured in Hertz
Note that A,B,C and D are not normally present (except for
silver
boxes)
--- The World of Cryton (UK)---
Page 32
| 17-JUN-1987 Black box plans
(2)
***************************************
* * FREE INCOMING CALLS!
* How
to build a BLACK BOX *
* *
***************************************
To all
who dare --
What is a BLACK BOX? A BLACK BOX is a device that is
hooked up to
your fone that fixes your fone so that when
you get a call, the caller doesn't get charged for
the call.
This is good for calls up to 1/2 hour, after 1/2 hour
the Fone Co. gets
suspicious, and then you can guess what
happens.
The way it works:
What this little beauty does is keep the line voltage
from dropping to 10v when you answer
your fone. The
line is insted kept at 36v and it will make the fone think
that it is
still ringing while your talking. The reason
for the 1/2 hour time limit is that the Fone CO.
thinks that
something is wrong after 1/2 an hour of ringing.
All parts are
available Radio Shack. Using the least
possible parts and arangement, the cost is $0.98 !!!!
And that
is parts for two of them! Talk about a deal! If you want
to splurge then you
can get a small PC board, and a switch.
There are two schematics for this box, one is
for most
normal fones. The second one is for fones that don't work
with the first. It
was made for use with a Bell Trimline touch
tone fone.
** Schematic 1 for most
fones **
** LED ON: BOX ON **
FROM >--------------------GREEN-> TO
LINE >--! 1.8k LED !---RED--> FONE
!--/\/\/\--!>--!
! !
------>/<-------
SPST
Page 33
Parts: 1 1.8k 1/2 watt resistor
1 1.5v LED
1 SPST switch
You may just have
two wires which you connect together for the
switch.
** Schematic 2 for
all fones **
** LED ON: BOX OFF **
FROM >---------------GREEN-> TO
LINE >------- ---RED--> FONE
! LED !
-->/<--!>--
! !
---/\/\/---
1.8k
Parts: 1 1.8k 1/2 watt resistor
1 1.5v LED
1 DPST
switch
Here is the PC board layout that I recommend using. It
is neat and
is very easy to hook up.
Schematic #1 Schematic #2
**************
****************
* * * ------- *<<----PC board
* --<LED>--- * * ! ! *
* ! ! * * ! <SWITCH> *
* RESISTOR ! * * ! ! ! *
* ! ! * * ! !
/<<----Obviously red line
* -------- ! * * ! ! \ *
* ! ! * * ! <LED>! / *
* ! ! * * ! ! / *
L * ! ! * F L * ! ! ! * F
I>RED-
-RED>O I>RED- ---RED>O
N>-----GREEN---->N N>-----GREEN------>N
E *
h * E E * * E
************** ****************
Once you have hooked up all
the parts, you must figure out
what set of wires go to the line and which go to the fone.
Page 34
This is because of the fact that LED's must be
put in, in a
certain direction. Depending on which way you put the LED is
what controls
what wires are for the line & fone.
How to find out:
Hook up the box
in one direction using one set of wires
for line and the other for fone.
*NOTE*
For Model I switch should be OFF.
*NOTE* For Model ][ switch should be set to side
connecting
the led.
Once you have hooked it up, then pick up the fone and see
is doesn't light then switch the wires
and try again. Once you
know which are which then label them. *NOTE* - If
neither
directions worked then your switch was in the wrong
position. Now lable the switch in its
current
position as BOX ON.
How to use it:
The purpose of this box
is not to poeple who call you so
it would make sence that it can only be used to
receive! calls. When the box is *ON* then you may only recieve
calls. Your fone will ring like
normal and the LED
on the box will flash. If you answer the fone now, then the
LED will
light and the caller will not be charged.
Hang up the fone after you are done talking like
normal.
You will not be able to get a dial-tone or call when
the box is on, so turn the
box *OFF* for normal calls. I
don't recommend that you leave it on all the time, as
you
don't want it to answer when Ma Bell calls!
from The Devil
--- The World
of Cryton (UK)---
| 17-JUN-1987 Urine (?) box plans
(>View: URINE BOX PLANS/F/MR.BAG
--- A PAINFUL PRANK ---
/==:==:==:==:==:==:==:==:==\
! Urine Box Plans ! ... new and improved! ...
\==:==:==:==:==:==:==:==:==/
3/2/86----
Now at last, Underground_Elite brings
you these
ultrasophisticated box plans for, well, uh, I guess we just kind
of bring them
for you. After many months of keeping this puppy
secret, we here at Underground_Elite have
inally come
to the consensus that the public oughtn't be kept in the dark
from the wrath
of Ma Bell, that great telephone company in the
sky.
The Urine Box (tm) basically
creates a capacitative disturbance
between the ring and tip wires in another's telephone
headset. I
have utilized this to the distinct advantage of the operator of
the Urine box
and to the disadvantage of the other party
involved, hopefully you won't get caught.
Without further a doo, wire this schematic together. Copper wire
(or gold) will work
best due to its lessened resistance. It might
be a good idea to keep the wiring cooled, to
further reduce
current loss.
47k ohms --------------- .01 uF
!\
!------/\/\/-----------! SPSTswitch !----!-----)!------!
! \ ! --------------- ! !
!
!--! ! (+)!
! !----------<-!----!---------/\/\/------------! ----------
! / PVP
diode! 470k ohms ! 12 VDC !
!/ ! _ ----------
! / .005 uF (-)!
SPKR 20W
!------/\/\/\/\/---------)!---<-!--------!
! _/ VR1 (see note1) PVP diode !
! !
to RING to TIP
(your phone) (your phone)
note1 - VR1 is a three position
variable resistor, enabling
settingsequivalent to 100k ohms, 210k ohms, and 320k ohms (all
Page 36
note2 - The diodes are silicon-germanium
based bipolar RF
reducers to limit current polarity reversal. If these are placed
backwards the box will not work as intended.
note3 - The speaker will emit low tones
when the SPST is closed
(ie the box is "ON") and when the settings of VR1 are moved
to
higher resistance the tone level will increase.
note4 - Place setting
evaluation symbols to represet the lowest
resistance setting for VR1 to be "STEAM",
the second (210) to be
"MELT", the third (320) to be "VAPORIZE".
Usage of box.
Use in place of your normal telephone receiver. Do not attempt
speaker with tape recorded
noise. Use touch tone sounds as pulse
requires electric disruption of line, not just audio.
After
answer (listen in on SPKR 1) set VR1 to desired strength
and let her go. Victim
will feel unpleasant sensations in his/her
head and will undergo a series of high intensity
seizures, not
unlike epilepsy, and jointly proportional to VR-1 setting and
time
induced.
Settings. (The Fun Part)
STEAM. A short -poof- of water vapor
condenses within the
victim's earpiece, rendering the telephone short circuited and
the
victim quite dazed.
MELT. Causes structural phase change of receiver (usually
reinforced
urea-formal-dehyde plastic material - high tech).
As in urine?// \\Some kinda water shit I
guess.
This has the unpleasant bonus of removing the victim's hand.
VAPORIZE. If
the victim is particularly nasty, this setting will
remove his upper anatomy (if box is
enabled properly, that is!).
Continued usage of this setting is generally not recommended,
as
death or other serious injury will accompany.
Disclaimer.
Yes, I will
refuse to take responsibility for your incompetence
in electrical doings. This includes my
reluctance to give court
testimony, etc. etc.
Wolfgang von Albatross
Attorney at Law, ex Telco employee.
Brought to you by the 408/245-SPAM people.
300/1200. /boog?
--- The World of Cryton (UK)---
Page 37
| 17-JUN-1987 Blotto box plans
%+%+%+%+%+%+%+%+%+%+%+%+%+
%HOW TO BUILD A
BLOTO BOX+ THE DEATH DEVICE!
%+%+%+%+%+%+%+%+%+%+%+%+%+
Finally, it is here! What
was first conceived as a joke to fool
the inncoent phreakers around America has finally been
concieved
by the one phreak who is the expert on lines and voltage: The
Traveler. Other
boxes by the Traveler include the White Gold Box,
the Aqua Box, The Diverti Box, and the Cold
Box. All of those
plans will soon be available in a BBS/AE near you!
Well, for you
people who are unenlightened about the Blotto Box,
here is a brief summery of a legend.
--*-=> The Blotto Box <=-*--
For years now every pirate has dreamed of the Blotto
Box. It
was at first made as a joke to mock more ignorant people into
thinking that the
function of it actually was possible. Well, if
you are The Voltage Master, it is possible.
Originally conceived
by King Blotto of much fame, the Blotto Box is finally available
to
the public.
NOTE: The Traveler can not be responcable for the information
disclosed in
the file! This file is strictly for informational
purposes and should not be actually built
and used! Usage of this
electronical impulse machine could have the severe results listed
Again, The Traveler
TAKES NO
RESPONCABILITY! <--Need an English tutor?
All right, now that that is cleared up,
here is the basis of
the box and it's function.
The Blotto Box is every phreaks dream...
you could hold AT&T
down on it's knee's with this device. Because, quite simply, it
can turn off the phone lines everywhere. Nothing. Blotto. No
calls will be allowed out of an
area code, and no calls will be
allowed in. No calls can be made inside it for that matter.
As
long as the switchhing system stays the same, this box will not
stop at a mere area
code. It will stop at nothing. The electrical
impulses that emit from this box will open every
line. Every
line will ring and ring and ring... the voltage will never be cut
off until
the box/ generator is stopped. This is no 200 volt job,
here. We are talking GENERATOR. Every
phone line will continue to
ring, and people close to the box may be electricuted if they
But, the Blotto Box can be stopped by merely cutting of the
line
or generator. If they are cut off then nothing will emit
any longer. It will take a while for
the box to calm back down
Page 38
again, but that is
merely a superficial aftereffect. Once again:
Construction and use of this box is not advised!
The Blotto Box
will continue as long as there is electricity to continue with.
OK, that
is what it does, now, here are some interesting
things for you to do with it...
--*-=> The Blotto Box Functions and Installation <=-*--
Once you have installed your
Blotto, there is no turning back.
The following are the instructions for construction and use
of
this box. Please head and heed all warnings in the above section
before you attempt
to construct this box.
Materials:
- A Honda portable generator or a main power outlet
- A radio shack cord set for 400 volts that
splices
a female plug into a phone line jack.
- A meter of voltage to attach to the box
itself.
- A green base (i.e. one of the nice boxes about 3'
by 4' that you see around in
your neighborhood. They are the main
switch boards and would be a more effective line to start
with.
or: A regular phone jack (not your own, and not in
your area code!
- A
soudering iron and much souder.
- A remote control or long wooden pole.
Now. You must
have guessed the construction from that. If not,
here goes,
I will explain in detail.
Take the Honda Portable Generator
and all of the other listed equiptment and go out and hunt
for a
green base. Make sure it is one on the ground or hanging at head
level from a
pole, not the huge ones at the top of telephone
poles. Open it up with anything convienent, if
you are
two feeble that fuck don't try this. Take a look inside... you
are hunting for
color-coordinating lines of green and red. Now,
take out your radio shack cord and rip the
meter thing off.
Replace it with the voltage eter about. A good level to set the
voltage
to is about 1000 volts. Now, attach the voltage
meter to the cord and set the limit for one
thousand. Plug the
other end of the cord into the generator. Take the phone jack and
splice the jack part off. Open it up and match the red and green
wires with the other red and
green wires. NOTE: If you just had
the generator on and have done this in the correct order,
you
will be a crispy critter. Keep the generator off until you
plan to start it up. Now,
sauder those lines together carefully.
Wrap duck tape or insultation tape around all of the
wires. Now,
place the remote control right on to the startup of the
generator. If you
have the long pole, make sure it is very long
and stand back as far away as you can get and
reach
the pole over. NOTICE: If you are going right along with this
Page 39
without reading the file first, you
sill realizd0now tHat your
area code is about to become null! Then, getting back, twitch
the
pole/remote control and run for your damn life. Anywhere, just
get away from it. It
will be generating so much electricity that
if you stand to close you will kill yourself. The
generator
will smoke, etc. but will not stop. You are now killing your area
code,
because all of that energy is spreading through all of the
phone lines around you in every
direction.
Have a nice day!
--*-=> The Blotto Box: Aftermath <=-*--
Well, that is the plans for the most devastating and
ultimately deadly box ever created. My
hat goes off to: King
Blotto (for the original idea),
Captain Xerox (for the suggestion
about stadiums), and
Modern s}}x (for the fact I was on his BBS when I thought of it.
--- The World of Cryton (UK)---
Page 40
| 17-JUN-1987 Beige box
plans
THE BEIGE BOX---------------------------A LINEMAN'S HANDSET
FREE
CALLS!!!!
------------
INTRODUCTION
------------
Have
you ever wanted a lineman's handset? Surely every
phreak has at least once considered the phun
that he could have
with one. After searching unlocked phone company trucks for one
for
months, we had an idea. We could build one. We did, and
named it the "Beige Box,"
simply because that is the color of
ours. In the following file we will give complete
instructions
for the construction and use of a Beige Box.
------------
CONSTRUCTION
------------
The construction is very simple.
First, you must
understand the concept of the device. In a modular jack, there
are four
wires. These are red, green, yellow, and black. For a
single line telephone, however, only two
matter: the red (ring)
and green (tip). The yellow and black are not necessary for this
project. A lineman's handset only has two clips on it: the ring
and the tip.
You
will need a phone (we reccommend a touch-tone) with a
modular plug, a modular jack, and two
large alligator clips
(preferably red and green, respectively). Take the modular jack
and look at the bottom of its casing. There should be a grey
jack with four wires (red, green,
yellow, and black) leading out
of it. To the end of the red wire attach a red alligator clip.
To the end of the green wire attach a green alligator clip. The
yellow and black wires
can be removed, although I would only set
them aside so that you can use the modular jack in
future
projects. Now insert your telephone's modular plug into the
modular jack. That's
it.
This particular model is nice because it can be easily
made, is inexpensive,
uses common parts that are readily
available, is small, is lightweight, and does not require
the
destruction of a phone.
Page 41
----- ---
----
BEIGE BOX USES
----- --- ----
There are many uses for the Beige Box.
However, before
you can use it, you must know how to attach it to its output
device.
This device can be any of several Bell switching
apparatus that include terminal sets (i.e.,
remote switching
centers, bridging heads, cans, etc.). To open most Bell
Telephone
switching apparatus, you must have a 7/16 inch hex
driver. This piece of equipment can be
picked up at your local
hardware store. With your 7/16 hex driver, turn the security
bolt(s) approximately 1/8 of an inch counter-clockwise and
open. If your output device is
locked, then you must have some
knowledge of destroying and/or picking locks. However, we
have
never encountered a locked output device. Once you have opened
your output device,
you should see a mass of wires connected to
terminals. On most of your output devices, the
terminals should
be labeled "T" (Tip -- if not labeled, it is usually on the
left)
and "R" (Ring -- if not labeled, it is usually on the right).
Remember:
Ring - red - right. The "Three R's" -- a simple way
to remember which is which.
Now you must attach the red alligator clip (ring) to the
"R" (ring)
terminal. Attach the green alliagtor clip (tip) to
the "T" (tip) terminal. NOTE: If
instead of a dial tone you
hear nothing, re-adjust the alligator clips so that they are not
are firmly attached. By
this time you should hear a dial tone.
Dial ANI and find out the number that you are using
(you wouldn't
want to use your own).
Here are some practical applications:
o
Eavesdropping
o Long distance, static-free phone calls to
phriends
o Dialing
direct to Alliance Conferencing (also
static-free)
o Phucking people over
o
Bothering the operator at little risk to
yourself
o Blue Boxing with a greatly reduced
chance of
getting caught
o Anything at all that you want, since you are
an
extension on that line
Page 42
Eavesdropping:
-------------
To be most effective, first attach the Beige
Box and then
your phone. This eliminates static caused by connecting the
box, therefore
reducing the potential suspicion of your victim.
When eavesdropping, it is always best to be
neither seen nor
heard. If you hear someone dialing out, do not panic; but rather
hang
up, wait, and pick up the receiver again. The person will
either have hung up or tried to
complete their call again. If
the latter is true, then listen in, and perhaps you will find
you are listening to, after
dialing ANI, pull a CN/A on the
number.
Dialing Long Distance:
------- ---- --------
This section is self-explanatory, but don't forget to
dial
a "1" before the NPA.
Dialing Direct to Alliance Conferencing:
------- ------ -- -------- ------------
Simply dial 0-700-456-1000 and you will get
instructions
from there. I prefer this method over PBXs, since PBXs often
have poor
reception and are more difficult to come by.
Phucking People Over:
-------- ------ ----
This is a very large topic for discussion. Just by using
the
other functions described, you can create a large phone bill
for the person (they will not
have to pay it, but it is a hassle
for them). In addition, since you are an extension of
the
person's line, leave your phone off hook, and they will not be
able to make or
recieve calls. This can be extremely nasty
because no one would suspect the cause of the
problem.
Bothering the Operator:
--------- --- --------
This
is also self-explanatory and can provide hours of
entertainment. Simply ask or say things to
her that are
offensive and you would not like traced to your line. This also
Page 43
corresponds with the
previous described section, Phucking People
Over. After all, guess who's line it gets traced
to? He he
he...
Blue Boxing:
---- ------
See a file on
Blue Boxing for more details. This is an
especially nice feature if you live in an
ESS-equipped prefix,
since the calls are, once again, not traced to your line.
{{{As
well as no true Blue Boxing being necessary. The
call is charged to someone else, no tones
needed.}}}
--------- ----- -- ----- ------
POTENTIAL RISKS OF BEIGE BOXING
--------- ----- -- ----- ------
Overuse of the Beige Box may cause suspicions within
the
Gestapo, and result in legal problems. Therefore, I would
recommend that you:
o Use more than one output device
o Choose a secluded spot to do your Beige Boxing
name on a public BBS concerning
your accomplishments)
o In order to make sure that the enemy has not been
inside your
ouput device, I reccomend that you place
a piece of transparent tape over the opening of your
output device.
Therefore, if it is opened in your absence, the tape
will be
displaced and you will be aware of the fact
that someone has been intruding upon your
territory.
--- The World of Cryton (UK)---
Page 44
| 17-JUN-1987 Aqua box plans
READ: aqua box/f/sir william
/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/
/-/ /-/
/-/
The Aqua Box /-/
/-/ /-/ ANTI-LOCK IN
/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/
/-/ /-/
TRACE
/-/ Concept by: Captain Xerox /-/
/-/ /-/
/-/ Plans by: The Traveler /-/
/-/ /-/
/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/
Every true phreaker lives in
fear of the dreaded F.B.I. 'Lock in
Trace.' For a long time, it was impossible to escape from
the
lock in trace. This box does offer and escape route with simple
directions to it.
This box is quite a simple concept, and almost
any phreaker with basic electronics knowledge
can construct and
use it.
/-/-/-/-/-/-/-/-/-/-/-/
/-/ The Lock /-/
/-/ in Trace /-/
/-/-/-/-/-/-/-/-/-/-/-/
A lock in trace is a device used by the
F.B.I. to lock into the
phone users location so that he can not hang up while a trace is
in progress. For those of you who are not familiar with the
concept of 'locking in', then
here's a brief description.
The F.B.I. can tap into a conversation, sort of like a
three-way
call connection. Then, when they get there, they can plug
electricity into the
phone line. All phone connections are held
open by a certain voltage of electricity, that is
why you
sometimes get static and faint connections when you are calling
far away,
because the electricity has trouble keeping the line
up. What the lock in trace does is cut
into the line and generate
that same voltage straight into the lines. That way, when you
try and hang up, voltage is retained. Your phone will ring just
like someone was calling you
even after you hang up. (If you have
call waiting, you should understand better about that,
for call
waiting intercepts the electricity and makes a tone that means
someone is
going through your line. Then, it is a matter of which
voltage is higher. When you push down
the receiver, then it
see-saws the electricity to the other side. When you have a
person
on each line it is impossible to hang
up unless one or both of them will hang up. If you try
to hang
up, voltage is retained, and your phone will ring. That should
give you an
understanding of how calling works, also. When
Page 45
electricity passes through a certain point on your phone, the
electricity causes a bell to
ring or on some newer phones an
electronic ring to sound.)
So, in order to eliminate
the trace, you somehow must lower the
voltage level on your phone line. You should know that
every
time someone else picks up the phone line, then the voltage does
decrease a
little. In the first steps of planning this out, Xerox
suggested getting about a hundred
phones all hooked into the
same line that could all be taken off the hook at the same time.
That would greatly decrease the voltage level. That is also why
most three-way
connections that are using the bell service three
way calling which is only $3 a month) become
quite faint after a
while.
By now, you should understand the basic idea. You have to
drain
all of the power out of the line so the voltage can not be kept
up. I suddenly
thought draining of power could quickly short out
the F.B.I. voltage machine, because it was
only built to sustain
the exact voltage necessary to keep the voltage out.
For now,
imagine this. One of the normal Radio Shack generators
that you can go pick up that one end of
the cord that hooks into
the central box has a phone jack on it and the other has an
electrical plug. This way, you can "flash" voltage THROUGH the
line, but cannot
drain it. So, some modifications have
to be done.
/-/-/-/-/-/-/-/-/-/-/-/
/-/
The Aqua Box /-/
/-/-/-/-/-/-/-/-/-/-/-/
Materials needed- a BEOC (Basic
Electrical Output Socket), like
a small lamp type connection, where you just have a simple
plug
and wire that would plug into a light bulb.
- One of cords mentioned above, if you
can't find one
then construct your own... same voltage connection,
but the restrainer
must be built in (i.e. the central
box)
- TWO phone jacks (one for the modem, one for
if you are
being traced to plug the aqua box into)
- Some creativity and easy work.
NOTICE: No phones have to be destroyed/modified to make this
box, so don't go
out and buy a new phone for it!
All right, this is a very simple procedure. If you
have the
BEOC, it could drain into anything, a radio, or whatever. The
purpose of having
that is you are going to suck the voltage out
from the phone line into the electrical
applicence so there would
be no voltage left to lock you in with.
1)Take the connection
cord. Examine the plug at the end. It
should have only two prongs, if it has three, still, do
not fear.
Page 46
MAKE
SURE THE ELECTRICAL APPLIANCE IS TURNED OFF unless you wanna
become a crispy critter while
making this thing. Most plugs will
have a hard plastic design on the top of them to prevent
you from
getting in at the electrical wires inside. Well, get a nice
one and remove it.
If you want to keep the plug (I don't see
why...) then just cut the top off.
When you
look inside, low and behold, you will see that at the
base of the prongs there are a few wires
connecting in. Those
wires conduct the power into the appliance. So, you carefully
unwrap those from the sides and pull them out until they are
about and inch ahead of the
prongs. If you don't wanna keep
the jack, then just rip the prongs out. If you are, cover
the
prongs with insultation tape so they will not connect with the
wires when the power
is being dvained from the line.
2)Do the same thing with the prongs on the other plug, so
you
have the wires evenly connected. Now, wrap the end of the wires
around each other.
If you happen to have the other end of the
voltage cord hooked into the phone, stop reading
now, your too
fucking stupid to continue.
After you've wrapped the wires around each
other, then cover the
whole thing with the plugs with insulating tape. Then, if you
built your own control box or if you bought one, then cram all
the wires into the box and
reclose it. That box is your ticket
out of this.
3)Re-check everything to make sure
it's all in place. This is a
pretty flimsy connection, but on later models when you get
more
experienced at it then you can sauder{Solder, my friend} away at
it and form the
whole device into one big box, with some kind of
cheap mattel hand-held game inside to be the
power connector.
In order to use it, just keep this box handy. Plug it into the
jack if you want, but it will slightly lower the voltage so it
isn't connected. When you plug
it in, if you see sparks, unplug
it and restart the WHOLE thing. But if it just seems fine
then
leave it.
Page 47
/-/-/-/-/-/-/-/-/-/
/-/ Using it !! /-/
/-/-/-/-/-/-/-/-/-/
Now, so you have the whole thing plugged in and all... DO NOT
gone on, don't panic, unplug
your phone, and turn on the
appliance that it was hooked to. It will need energy to turn
itself on, and here's a great source... the voltage to keep
a phone line open is pretty small
and a simple light bulb should
drain it all in and probably short the F.B.I. computer at
the
same time.
Happy boxing and stay free!
\ater,
The
Traveler
Zer0-g
Council of Minds.
Call these BBS:
/-------------------------------\
! Little America (507)289-8211!
! Brainstorm
(612)345-2815!
! Rogues Gallery (507)282-7974!
! Apple Entertain (507)282-8993!
! City of Atlantis (215)844-8836!
! King's Lair (804)379-8630!
! Static Barrier
(312)225-9836!
\-------------------------------/
---------------------------------------
FROM TARAN KING AT METAL SHOP (314)432-0756
---------------------------------------
Put up on Cryton by /\/\/ Captain Caveman \/\/\
+44 4 584 7608 - The World of Cryton (UK) - 300/1275/1200/2400
---------------------------------------
Note to Sysops:
You can put this material up on
your BB, but remember not to put
it on view to anyone! & don't change anything.
---------------------------------------
Page 48
|
17-JUN-1987 How to make your phone into a cheesebox
$$$$$$$$$$-=>Making Your
Phone<=-$$$$$$ PAY PHONE
$$$$$$$$$$-=>Into a Cheesebox <=-$$$$$$
/=\Typed by:Sir Knight/=\
A Cheesebox (named for the type of box the first one was
your telephone a Pay-Phone.....This
is a simple,modernized, and
easy way of doing it....
Inside Info: These were
first used by bookies many years ago
as a way of making calls to people without being
called by the cops or having their numbers traced and/or
tapped......
How To Make
A Modern Cheese Box
Ingredients:
------------
1 Call Forwarding
service on the line
1 Set of Red Box Tones
The number to your prefix's
Intercept operator(do some
scanning for this one)
How To:
-------
your prefix, use your
call-forwarding and forward
all calls to her...this will make your phone stay off the
hook(actually, now it waits for a quarter to be dropped
in)...you now have a cheese box...
In Order To Call Out On This Line:You must use your Red Box tones
and generate the
quarter dropping in...then,you can make phone
calls to people...as far as I know, this is
fairly safe, and
they do not check much...Although I am not sure, I think you can
even
make credit-card calls from a cheesebox phone and not get
traced...
Enjoy, and
don't get Caught!
=><= Sir Knight =><=
Head of APPA
---
The World of Cryton (UK)---
Page 49
view: box
plans<- jack the ripper
**************************************
* how to build and use
a cheesebox * PAY PHONE #2
**************************************
a cheese box
makes your home telephone into a
payphone. the method s