The Hacker's Encyclopedia 1998

home *** CD-ROM | disk | FTP | other *** search

/ The Hacker's Encyclopedia 1998 / hackers_encyclopedia.iso / etc / misc / dark19_1.txt < prev next >

Wrap

Text File | 2003-06-11 | 130.9 KB | 3,781 lines

DarkStorm's Book of Compiled Articles on Destruction, Crime, and Other Illegal Acts "Are You Ready For A Good Time?" Version II.IX May 1991 Page i Pretext: The author and co-authors of this document, and authors of the enclosed articles take absolutely no responsibilyity for the actions taken by the readers of this file. The readers are assumed to be of whole mind and competancy, so as not to warrant the punishment of anyone for committing any act herein described. This file was composed as a documentary article, and in no way reflects the author's views on law enforcement, its officers, or its purpose. This article is an informative look at the other side. The readers do not have to nor are expected to take part in any of the acts herein described. Inside this file one will find many detailed descriptions on how to get anything you ever wanted for free, how to make others pay for your goodies, how to destroy any thing and anyone at will, and how to reek havoc upon the populus. The author does not condone this sort of action, and suggests that those who really want to do this should read no further, and go see a doctor. Those who shun the thought of my even compiling this file should stop fucking reading this and delete it, since it won't do well sitting next to all your other pristine files on how to track hackers, and how to protect yourself from setting eyes upon pornography(*). I hereby denounce this article and have decided to delete it from my drive, hopefully before I get the urge to upload it to the unsuspecting populus. Those concerned with my actions, rest your eyes, type: DEL DARK19-?.TXT <CR> at the DOS prompt, and get some sleep. Now that those assholes are gone, everyone else come back, all others should read on(including the guys I told to see a doctor). Enjoy this documentation, it is the result of many sleepless nights, many hours of downloading, buffering, and CHATs to get the necessary information for you all. By the time you read this I will probably have about 40-60k more of texts to add to the file, as I have sitting in front of me a few articles on jailbreak, car theft, atombombs (<--most humorous article, a must read.), radar guns, unemployment checks while you still have a job, free food, anti-police warfare, phreaking(@), knife fighting, the making of viruses (comes complete with a starter kit/file) etc. I'm sure you'll all enjoy these, but for now, just read the ones here, it will take you long enough as it is. (*) oh yeah, PORNOGRAPHY--->definition--from 'porno-graphos' Greek or something for 'the writing of the prostitutes'. Nice writing I assume. (@) There are some articles on phreaking here, but I have more.... Page ii Pretext ------- (cont.) Read the articles carefully on phreaking and on hacking, it is important that you do not get caught trying out any of these things. There are some non-hacker/pirate articles here, such as the noise filter to rid yourself of linenoise forever, but I felt it was important to the hacker, and even to the amatuer. Most all of the articles enclosed can be done with little expended money, some more than others. The only articles that do not say how to build them, such as the HBO decoder and the RADAR jammer are stored as .ZIP files in the DRKSTRM?.ZIP. These are for you to read, and decide whether or not you want to spend the money to get them. I would assume that the guys have been shut down, so I have been looking for a replacement for the RADAR text (I already have a couple of HBO texts on how to make em.) The only other stuff in here that claims to tell how to build something that doesn't is the couple of articles on Blue Boxing, (#'s 1-3), they are VERY informative to the newcomer, and I left them ther for the reading, besides, the texts on how to build the Pearl Box and a bunch of others will allow you to make the Blue Box tones. Some of my own advice for you: Make the Gold Box, NEVER EVER make a Blotto Box, unless you wish to get a lawsuit shoved so far up your asshole that you'll be tasting it in your mouth for years to come. And unless you're extrememely demented, don't make a Urine Box. I am looking for the file "Jane's All The World's Boxes", if anyone has it, please upload it to any BBS I'm on, I would like to include it in my next issue of DRKSTRM. It has many many more boxes that are not listed here, nor anywhere else to my knowledge. (To the authors of Jane's ATWB, I only plan to use a few of the better ones, I will not include it all.) [Still looking....] The HBO file on page 123 works great. I use it now, and it's fine. Also, if you have any intention of doing anything mentioned in this documnet, read the articles on it carefully. As in the instance of the two Carding texts, the first says how to do it, but yet, if you read the second one, you will realize that had you tried it now, you would probably be sitting in a dingy cell with a big Samoan named Biff who wants to make you his wife. Go nuts! Have a Hell of a time! Page iii Table of Contents ----- -- -------- Subject: Page(s): ------- ------- Pretext................................................ii-iii Table of Contents......................................iv-vi Special Thanks To:.......................................vii Preaking and Hacking: Bell Trashing.......................................1-2 Blue Boxing.........................................3-5 Better Homes and Blue Boxing File #1................6-8 Better Homes and Blue Boxing File #2................9-15 Better Homes and Blue Boxing File #3...............16-20 Red Boxing...........................................21 Hacker's Atlas (By: The Wyvern)....................22-26 How To Build Various Boxes: Noise Filters......................................27-29 Neon Box.............................................30 White Box..........................................31-32 Black Box..........................................33-35 Urine Box..........................................36-37 Blotto Box.........................................38-40 Beige Box..........................................41-44 Aqua Box...........................................45-48 Cheese Box File #1...................................49 Cheese Box FIle #2...................................50 Brown Box..........................................51-52 Gold Box...........................................53-54 Crimson Box........................................55-56 Pearl Box..........................................57-58 Silver Box.........................................59-61 Red Box..............................................62 Green Box............................................63 The Book of Unlawfuls (By: Shadowspawn): Section I -- Bombs.................................64-65 Section II -- Hacking................................66 Lock Picking: Combination Locks..................................67-68 Door Knobs....(2 Files)............................69-75 Padlocks.............................................76 Weird Drugs.............................................77-78 House Breaking............................................79 Demolition Files (By: King Arthur): Number 1...........................................80-81 Number 2...........................................82-84 Page iv Table of Contents ----- -- -------- (cont.) Subject: Page(s): ------- ------- Bombs + Chemicals: House-Hold Equivelences for Chemicals..............85-86 Misc. Compounds (By: The Prowler)..................87-88 Black Powder.......................................89-90 Fire Bombs, Napalm, etc............................91-92 Nitrogylcerine.....................................93-94 Misc. Demolitions, Flares, Fuels, etc.............95-101 Moltov Cocktail.....................................102 The Anarchist's Micro-Cookbook (By: Maelstrom).........103-105 Cars: How to Hotwire a Car................................106 How to Fuck one up..................................107 Terror/ism: Electronic Terrorism..............................108-110 Harmless Terror...................................111-112 Carding: Carding Text #1...................................113-114 New Info on Carding...............................115-119 Free Shit: Change..............................................120 Postage...........................................121-122 HBO.................................................123 HBO Revised.........................................123b HBO + Free PAY TV.................................124-128 Cable TV Hacking.................................128b-128 3-Way Teleconferencing..............................129 Horses..............................................130 Frequencies: Bugs, Taps, Mikes.................................131-132 Federal Frequencies...............................133-136 Code Words........................................137-138 Common 10 Codes (ie; 10-4)..........................139 Quick Notes on Frequencies..........................140 Info on Hacking/Pirate Groups: Information on Hacker Groups......................141-142 Electronic Hacker Magazines.......................143-144 Printed Hacker/CU Magazines.......................145-146 Misc. Catalogs on Crime/CU/Hacking etc............147-151 Page v Table of Contents ----- -- -------- (cont.) Subject: Page(s): ------- ------- Info on Haking/Pirate Groups: (cont.) Hacker BBS's etc....................................152 The Butler's Disclaimer.............................153 Last Minute Additions: Excerpts from 'Steal This Book': People's Chemistry...........................154-155 Fuses..........................................156 Coin/Bill Fraud..............................157-158 Free Calls/Elimentary Red Boxing...............159 Enclosure Notes: Enclosed Hz-Generator and Misc. Texts...............160 One Final Note to All From DarkStorm................161 Page vi Special Thanks To: ----------------- BAH, JDS, Andersen, Streak, Gunner, McCarthy, Flare, Starburst (AKA Mark Taverns), and Hayes. \______Not his real name boys, a handle OK? He's insane, not Stupid. An Extra Note of Thanks: ----------------------- To the United States of America, for allowing me the freedom of expression, that of speech, and that of the press, which thus granted me the right to publish this article. (Sort of.) {Not like I wouldn't have published it if it were illegal} But thanks anyway; it's the thought that counts. One Last note (I Hope) ---------------------- Most of the BBS numbers have been left attached to the files, that is, accept for the Police Station, which I think only appears once, but no matter, you can still call most of these BBS's even if all their articles are not properly denoted. You can find most of these articles, plus many more on any of the BBS's mentioned in this file, and on many others not mentioned here. Many good BBS's have message sections devoted to Law and Lawlessness. Oh Yeah -- ---- Almost forgot, this is a fairly good size article, so you might want to use a Search program, or one with a Search (and replace) key in it. Search in the forward direction from the Table of Contents for 'Page ###' and it will get you there faster than you can. In my next issue, or in a few at least, I will divide it up a bit so you can load some of it, or discard or whatever to make it better for you. (Did it this time....) Page vii Bell Trashing By: The Dragyn The Police Station 612-934-4880 The Phone Co. will go to extreams on occasions. In fact, unless you really know what to expect from them, they will suprise the heck out of you with their "unpublished tarriffs". Recently, a situation was brought to my attention that up till then I had been totaly unaware of, least to mention, had any concern about. It involved garbage! The phone co. will go as far as to prosecute anyone who rumages through their garbage and helps himself to some. Of course, they have their reasons for this, and no doubt benefit from such action. But, why should they be so picky about garbage? The answer soon became clear to me: those huge metal bins are filled up with more than waste old food and refuse... Although it is Pacific Tele. policy to recycle paper waste products, sometimes employees do overlook this sacred operation when sorting the garbage. Thus top-secret confidential Phone Co. records go to the garbage bins instead of the paper shredders. Since it is constantly being updated with "company memorandums, and supplied with extensive reference material, the Phone co. must continualy dispose of the outdated materials. Some phone companies are supplied each year with the complete "System Practices" guide. This publication is an over 40 foot long library of reference material about everything to do with telephones. As the new edition arrives each year, the old ver- sion of "System Practices" must also be thrown out. I very quickly figured out where some local phone phreaks were getting their material. They crawl into the garbage bins and remove selected items that are of particular interest to them and their fellow phreaks. One phone phreak in the Los Angeles area has salvaged the complete 1972 edition of "Bell System Practices". It is so large and was out of order (the binders had been removed) that it took him over a year to sort it out and create enough shelving for it in his garage. Much of this "Top Secret" information is so secret that most phone companies have no idea what is in their files. They have their hands full simply replacing everything each time a change in wording requires a new revision. It seems they waste more paper than they can read! Page 1 It took quite a while for Hollywood Cal traffic manager to figure out how all of the local phone phreaks constantly discovered the switchroom test numbers. Whenever someone wanted to use the testboard, they found the local phone phreaks on the lines talking to all points all over the world. It got to the point where the local garbage buffs knew more about the office operations than the employees themselves. One phreak went so far as to call in and tell a switchman what his next daily assignment would be. This, however, proved to be too much. The switchman Miscellanous Nastiesied the tool of his trade. In another rather humorous incident, a fellow phreak was rumaging through the trash bin when he heard somone apraoching. He pressed up against the side of the bin and silently waited for the goodies to come. You can imagine his surprise when the garbage from the lunchroom landed on his head. Most people find evenings best for checking out their local telco trash piles. The only thing necessary is a flashlight and, in the case mentioned above, possibly a rain coat. A word of warning though, before you rush out and dive into the trash heap. It is probably illegal, but no matter where you live, you certainly won't get the local policeman to hold your flashlight for you. Page 2 THE THEORY OF "BLUE BOXING" After most neophyte phreaks overcome their fascination with Metrocodes and WATS extenders, they will usually seek to explore other avenues in the vast phone network. Often, they will come across references such as: 'simply dial KP+2130801050+ST for the Alliance teleconferencing system in LA'. Numbers such as the one above were intended to be used with a blue box; this article will explain the fundamental principales of the fine art of blue boxing. GENESIS In the begining, all long distance calls were connected manually by oper-ators who passed on the called number verbally to other operators in series. This is because pulse(aka rotary) digits are created by causing breaks in the DC current. Since long distance calls require routing through various switch- ing equipment and AC voice amplifiers, pulse dialing cannot be used to send the destination number to the end local office (CO)> Eventually, the demand for faster and more efficient long distance (LD) service caused Bell to make a multi-billion dollar decision. They had to create a signaling system that could be used on the LD network. Basically, they had two options: (1) to send all the signaling and supervisory information (ie. ON and OFF HOOK) over separate data links. This type of signaling is referred to as out-of-bandsignaling, or (2) to send all the signaling information along with the conversation using tones to represent digits. This type of signaling is referred to as in-band signaling. Beingthe cheap bastards that they naturally are, Bell chose the latter(and cheaper) method - in-band signaling. They eventually regretted this, though (heh,heh)... IN BAND SIGNALING PRINCIPLES When a subscriber dials a telephone number, whether in rotary or touch- tone (aka DTFM), the equipment in the CO interprets the digits and looks for a convenient Trunk Line to send the call on its way. In the case of a local call, it will probably be sent via an Inter-Office Trunk: otherwise, it will be sent to a toll office (class 4 or higher) to be processed. When trunks are not being used there is a 2600 Hz tone on the line, thus to find a free trunk, the CO equipment simply checks for the presence of 2600 Hz. If it doesn't find a free trunk the customer will receive a re-order signal (120IPM busy signal) or the 'all circuts are busy...'message. If it does find a free trunk, it 'seizes' it --removing the 2600Hz. Page 3 It then sends the called number or a special routing code to the other end or toll office. The tones it uses to send this information are called Multi-Frequency (MF) tones. An MF Tone consists of two tones from a set of six master tones which are combined to produce 12 separate tones. You can sometimes hear these tones in the background when you make a call, but they are usually filtered out so your delicate ears cannot hear them. These are NOT the same as touchtones. To notify the equipment at the far end of the trunk that it is about to receive routing information, the originating end first sends a Key Pulse (KP) tone. At the end of sending the digits, the originating end then sends a STart (ST) tone. Thus to call 914 - 359 - 1517, the equipment would send KP + 9143591517 + ST in MF tones. When the customer hangs up, 2600 Hz is once again sent to signify a disconnect to the distant end. HISTORY In November 1960 issue of the Bell System Technical Journal, an article entitled 'Signaling Systems for Control of Telephone Switching' was published. This journal, which was sent to most university libraries, happened to contain the actual MF tones used in signaling. They appeared as follows: DIGIT TONES 1....................................700 + 900 HZ 2....................................700 + 1100 HZ 3....................................900 + 1100 HZ 4....................................700 + 1300 HZ 5....................................900 + 1300 HZ 6...................................1100 + 1300 HZ 7....................................700 + 1500 HZ 8....................................900 + 1500 HZ 9...................................1100 + 1500 HZ 0...................................1300 + 1500 HZ KP..................................1100 + 1700 HZ ST..................................1500 + 1700 HZ 11 (*)...............................700 + 1700 HZ 12 (*)...............................900 + 1700 HZ KP2 (*).............................1300 + 1700 HZ (*) Used only on CCITT SYSTEM 5 for special inter-national calling. Bell caught wind of blue boxing in 1961, when it caught a Washington State College student using one. They originally found out about blue boxes through police raids and informants. In 1964, Bell Labs came up with scanningequipment, which recorded all suspicious calls. to detect blue box usage. Page 4 These units were installed in CO's where major toll fraud existed. AT&T security would then listen to the tapes to see if any toll fraud was actually committed. Over 200 convictions resulted from the project. Surprisinglyenough, blue boxing is not solely limited to the electronics enthusiast: AT&T has caught businessmen, film stars, college students, doctors, lawyers, high school students, and even a millionaire financier (Bernard Cornfield) using the device. AT&T also said that nearly half of those that they catch are businessman. Page 5 | 17-JUN-1987 Blue box plans, part I Note to SysOps: You are welcomed to download this file and use it on your system, providing you do NOT remove the credits for: MARK TABAS OR KAOS. In other words, Try to act like a HUMAN BEING! -------------------------------------- ___________________ THE MARK TABAS ENCOUNTER \ Dropped to lower/ SERIES PRESENTS: /case by your old \ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- \ friend, / BETTER HOMES AND BLUE BOXING / -=+DarkStorm+=-\ PART I \(Much easier to / THEORY OF OPERATION / read now.) \ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- \_________________/ To quote KARL MARX, BLUE Boxing has ALWAYS been the most noble form of Phreaking. As opposed to such things as using an MCI code to make a free fone call, which is merely mindless pseudo- phreaking, BLUE boxing is actual interaction with the BELL SYSTEM TOLL NETWORK. it is like wise advisable to be more cautious when BLUE boxing, but the careful phreak will NOT BE CAUGHT, regardless of what type of switching system he is under. {{Perhaps not the Careful phreak, but it is hard to tell if you are careful ENOUGH. If you get caught, you know you weren't careful enough. Too bad there's such a penalty for it.... Good luck my friends!}} In this part, I will explain how and why BLUE boxing works, as well as where. In later parts, I will give more practical information for BLUE boxing and routing information. ---- Communications with trunks.----- Trunks must NOT be confused with SUBSCRIBER LINES (or "Customer Loops") which are standard telefone lines. Trunks are those lines that connect central offices. Now, when trunks are NOT in use (I.E., Idle or "ON-HOOK" state) They have 2600Hz applied to them. If they are Two-way Trunks, there is 2600Hz in both directions. When a trunk is in use (Busy or "OFF-HOOK" state), The 2600Hz is removed from the side that is off-hook. the 2600Hz is therefore known as a Supervisory Signal, because it indicated the status of a trunk; on hook (TONE) or off-hook (NO TONE). NOTE also that 2600Hz is denoted SF (Single frequency) signalling and is "IN-BAND." This is very important. "IN-BAND" means that it is within the band of frequencies that may be transmitted over normal telefone lines. Other SF Signals, such as 3700Hz are used also. However, they cannot be carried over the telefone network normally (They are "OUT-OF-BAND" and are therefore NOT able tobe taken advantage of as 2600Hz is. Back to trunks. Let's take a hypothetical phone call. You pick up your fone and dial 1+806-258-1234(Your goof friend in Amarillo Texas). For ease we'll assume that you are on #5 crossbar swithcing and not in the 806 area. Your central office (CO) would recognize Page 6 that 806 is a Foreign NPA, so it would route the call to the toll centre that serves you. [For the sake of experienced reader, note that the CO in question is a Class 5 with LAMA that uses OUT-OF-BAND SF supervisory signalling]. Depending on where you are in the country, the call would leave your toll centre(on more trunks) to abother tollcenter, OR office of higher "RANK".Then it would be routed to centraloffice 806-258 eventually and the call would be completed. ILLUSTRATION: A---CO1-------TC1------TC2----CO2----BA=YOU ___________ CO1=YOUR CENTRAL OFFICE / Got bored \ TC1=YOUR TOLL OFFICE. \ of trans- / C2=TOLL OFFICE IN AMARILLO. /lating all \ CO2=806-258 CENTRAL OFFICE. \ this shit./ B=YOUR FRIEND (806-258-1234) /___________\ IN THIS SITUATION IT WOULD BEREALISTIC TO SAY THAT CO2 USES SFIN-BAND (2600HZ) SIGNALLING, WHILEALL THE OTHERS USE OUT-OF-BANDSIGNALLING (3700HZ). IF YOU DON'TUNDERSTAND THIS, DON'T WORRY TOO MUCH.I AM POINTING THIS OUT MERELY FOR THESAKE OF ACCURACY. THE POINT IS THATWHILE YOU ARE CONNECTED TO 806-258-1234, ALL THOSE TRUNKS FROM YOURCENTRAL OFFICE (CO1) TO THE 806-258CENTRAL OFFICE (CO2) DO *NOT* HAVE2600HZ ON THEM, INDICATING TO THEBELL EQUIPMENT THAT A CALL IS INPROGRESS AND THE TRUNKS ARE IN USE. NOW LET'S SAY YOU'RE TIRED OFTALKING TO YOUR FRIEND IN AMARILLO(806-258-1234) SO YOU SEND A 2600HZDOWN THE LINE. THIS TONE TRAVELS DOWNOFFICE (CO2) WHERE IT IS DETECTED.HOWEVER, THAT CO THINKS THAT THE2600HZ IS ORIGINATING FROM BELLEQUIPMENT, INDICATING TO IT THATYOU'VE HUNG UP, AND THUS THE TRUNKSARE ONCE AGAIN IDLE (WITH 2600HZPRESENT ON THEM). BUT ACTUALLY, YOUHAVE NOT HUNG UP, YOU HAVE FOOLED THEEQUIPMENT AT YOUR FRIEND'S CO INTOTHINKING YOU HAVE. THUS,IT DISCONNECTSHIM AND RESETS THE EQUIPMENT TOPREPARE FOR THE NEXT CALL. ALL THISHAPPENS VERY QUICKLY (300-800MS FORSTEP-BY-STEP EQUIPMENT AND 150-400MSFOR OTHER EQUIPMENT). WHEN YOU STOP SENDING 2600HZ (AFTERABOUT A SECOND), THE EQUIPMENT THINKSTHAT ANOTHER CALL IS COMING TOWARDSIT (I.E., IT THINKS THE FAR END HASCOME "OFF-HOOK" SINCE THE TONE HASSTOPPED). IT COULD BE THOUGHT OF AS ATOGGLE SWITCH: TONE --> ON HOOK, NOTONE -->OFF HOOK. NOW THAT YOU'VESTOPPED SENDING 2600HZ, SEVERAL THINGSHAPPEN: 1) A TRUNK IS SEIZED. 2) A "WINK" IS SENT TO THE CALLING ENDFROM THE CALLED END INDICATING THATTHE CALLED END (TRUNK) IS NOT READY TORECEIVE DIGITS YET. 3) A REGISTER IS FOUND AND ATTACHEDTO THE CALLED END OF THE TRUNK WITHINABOUT TWO SECONDS (MAX). 4) A START-DIAL SIGNAL IS SENT TO THECALLING END FROM THE CALLED ENDINDICATING THAT THE CALLED END ISNOW, ALL OF THIS IS PRETTY MUCHTRANSPARENT TO THE BLUE BOXER. ALL HEREALLY HEARS WHEN Page 7 THESE FOUR THINGSHAPPEN IS A <BEEP><KERCHUNK>. SO,SEIZURE OF A TRUNK WOULD GO SOMETHINGLIKE THIS: 1> SEND A 2600HZ 2> TERMINATE 2600HZ AFTER 1-2 SECS. 3> [BEEP][KERCHUNK] ONCE THIS HAPPENS, YOU ARE CONNECTEDTO A TANDEM THAT IS READY TO OBEY YOUREVERY COMMAND. THE NEXT STEP IS TOSEND SIGNALLING INFORMATION IN ORDERTO PLACE YOUR CALL. FOR THIS YOU MUSTSIMULATE THE SIGNALLING USED BYOPERATORS AND AUTOMATIC TOLL-DIALINGEQUIPMENT FOR USE ON TRUNKS. THEREARE MAINLY TWO SYSTEMS, DP AND MF.HOWEVER, DP WENT OUT WITH THE DINOSAUR, SO I'LL ONLY DISCUSS MF SIGNALLING.MF (MULTI-FREQUENCY) SIGNALLING IS THESIGNALLING USED BY THE MAJORITY OF THEINTER- AND INTRA-LATA NETWORK. IT ISALSO USED IN INTERNATIONAL DIALINGKNOWN AS THE CCITT NO.5 SYSTEM. MF SIGNALLING CONSISTS OF 7 FREQUEN-CIES, BEGINNING WITH 700HZ ANDSEPARATED BY 200HZ. A DIFFERENT SET OFTWO OF THE 7 FREQUENCIES REPRESENT THEDIGITS 0 THRU 9, PLUS AN ADDITIONAL 5SPECIAL KEYS. THE FREQUENCIES AND USESARE AS FOLLOWS: FREQUENCIES (HZ) | DOMESTIC | INT'L | -----------------|-------------|-------------| ______________ 700+900 | 1 | 1 | / I don't know \ 900+1100 | 3 | 3 | \about you, but/ 700+1300 | 4 | 4 | /sometimes I \ 900+1300 | 5 | 5 | \ actually dial/ 1100+1300 | 6 | 6 | /the number 2. \ 700+1500 | 7 | 7 | \ SEE THE / 900+1500 | 8 | 8 | /FILE ON LIKE \ 1100+1500 | 9 | 9 | \PAGE 3 FOR THE/ 1300+1500 | 0 | 0 | / TONES FOR #2 \ 700+1700 | ST3P | CODE 11 | \______________/ 900+1700 | STP | CODE 12 | 1100+1700 | KP | KP1 | 1300+1700 | ST2P | KP2 | 1500+1700 | ST | ST | THE TIMING OF ALL THE MF SIGNALS IS A NOMINAL 60MS EXCEPT FOR KP, [which is] 120MS --- The World of Cryton (UK)--- +44 4 584 7608 Page 8 | 17-JUN-1987 Blue box plans, part II THE MARK TABAS ENCOUNTER SERIES _______________ PRESENTS... / Thrown to / /80- columns / =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= / for all of / BETTER HOMES AND BLUE BOXING / you out there/ PART II /who want it, +/ PRACTICAL APPLICATIONS /even those who/ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= / don't. / ---------------- (IT IS ASSUMED THAT THE READER HAS READ AND UNDERSTOOD PART I OF THIS SERIES). THE ESSENTIAL PURPOSE OF BLUE BOXING IN THE BEGINNING WAS MERELY TO RECEIVE TOLL SERVICES FREE OF CHARGE. THOUGH THIS CAN STILL BE DONE, BLUE BOXING HAS ESSENTIALLY OUTLIVED ITS USEFULNESS IN THIS AREA. MODERN DAY "EXTENDERS" AND LONG DISTANCE SERVICES PROVIDE A SAFER AND EASIER WAY TO MAKE FREE FONE CALLS. HOWEVER, YOU CAN DO THINGS WITH A BLUE BOX THAT JUST CAN'T BE DONE WITH ANY-THING ELSE. FOR ORDINARY TOLL-FRAUD, A BLUE BOX IS IMPRACTICAL FOR THE FOLLOWING REASONS: 1. CLUMSY EQUIPMENT REQUIRED (BLUE BOX OR EQUIVALENT) 2. MOST BOXED CALLS MUST BE MADE THROUGH AN EXTENDER. NOT FOR SAFETY REASONS, BUT FOR REASONS I'LL EXPLAIN LATER. 3. CONNECTIONS ARE OFTEN SACRIFICED BECAUSE CONSIDERABLE DISTANCES MUST BE DIALED TO CROSS A SEIZABLE TRUNK, IN ADDITION TO AWKWARD ROUTING. ARE USUALLY MADE THROUGH AN EXTENDER. THIS IS FOR BILLING REASONS. IF YOU RECALL FROM PART I, 2600HZ IS USED AS A "SUPERVISORY" SIGNAL. THAT IS, IT SIGNALS THE STATUS OF A TRUNK-- "ON-HOOK" OR "OFF-HOOK." WHEN YOU SEIZE A TRUNK (BY BRIEFLY SENDING 2600HZ), YOUR END (THE CALLING END) GOES ON HOOK FOR THE DURATION OF THE 2600HZ AND THEN GOES OFF-HOOK ONCE AGAIN WHEN THE 2600HZ IS TERMINATED. THE CALLED END RECOGNIZES THAT A CALL IS ON THE WAY AND ATTACHES A REGISTER, WHICH INTERPRETS THE DIGITS WHICH ARE TO BE SENT. NOW, UNDERSTAND THAT EVEN THOUGH YOUR END HAS COME OFF-HOOK (NO 2600HZ PRESENT), THE OTHER END IS STILL ON-HOOK. YOU MAY WONDER THEN, WHY, IF THE OTHER END (THE CALLED END) IS STILL ON-HOOK, THERE IS NO 2600HZ COMING THE OTHER WAY ON THE TRUNK, WHEN THERE SHOULD BE. THIS IS CORRECT. 2600HZ *IS* PRESENT ON THE TRUNK WHEN YOU SEIZE IT AND AFTERWARDS, BUT YOU CANNOT HEAR IT BECAUSE OF A BAND ELIMINATION FILTER (BEF) AT YOUR CENTRAL OFFICE. BACK TO THE PROBLEM. REMEMBER THAT WHEN YOU SEIZE A TRUNK, 2600HZ IS INDEED COMING THE OTHER WAY ON THE Page 9 TRUNK BECAUSE THE CALLED END IS STILL ON-HOOK, BUT YOU DON'T ACTUALLY HEAR IT BECAUSE OF A FILTER. HOWEVER, THE BELL EQUIPMENT KNOWS IT'S THERE (THEY CAN "HEAR" IT). THE PRESENCE OF THE 2600HZ IS TELLING THE BILLING EQUIP- MENT THAT YOUR CALL HAS NOT YET BEEN COMPLETED (I.E., THE CALLED END IS STILL ON-HOOK). WHEN FINALLY YOU DO 2600HZ FROM THE CALLED END TERMINATES. THIS TELLS THE BILLING EQUIPMENT THAT SOMEONE PICKED UP THE FONE AT THE CALLED END AND YOU SHOULD BEGIN TO BE BILLED. SO YOU DO START TO GET BILLED, BUT FOR THE CALL TO THE TRUNK, NOT THE BOXED CALL. YOUR BILLING EQUIPMENT THINKS THAT YOU'VE CONNECTED WITH THE NUMBER YOU USED TO SEIZE THE TRUNK. ILLUSTRATION: 1. YOU CALL 1+806-258-2222 (DIRECTLY) 2. STATUS OF TRUNKS: <-----------------------------------> (YOU) 806-258-2222 NO 2600HZ-------> <------------2600HZ WHEN YOU SEIZE A TRUNK (BEFORE THE NUMBER YOU CALLED ANSWERS) THERE IS NO AFFECT ON YOUR BILLING EQUIPMENT. IT SIMPLY THINKS THAT YOU'RE STILL WAITING FOR THE CALL TO COMPLETE (THE CALLED END IS STILL ON-HOOK; IT IS RINGING, BUSY, GOING TO RECORDING OR INTERCEPT OPERATOR). NOW, LET'S SAY THAT YOU'VE SEZIED A TRUNK (806-258-2222) AND FOR EXAMPLE, KP+314+949+1705+ST. THE CALL IS ROUTED FROM THE TANDEM YOU SEIZED TO: 314-949-1705. ILLUSTRATION: <------------------>O<---------------> (YOU) 806 314-949 TANDEM NOTE THAT THE ENTIRE PATH TOWARDS THE RIGHT (THE CALLED END) HAS NO 2600HZ PRESENT AND IS THEREFORE "OFF-HOOK." THE ENTIRE PATH TOWARDS THE LEFT (THE CALLING END) DOES HAVE 2600HZ PRESENT ON IT, INDICATING THAT THE CALLED END HAS NOT PICKED UP (OR COME "OFF-HOOK"). WHEN 314-949-1705 ANSWERS, "ANSWER SUPERVISION" IS GIVEN AND THE 2600HZ TOWARDS THE LEFT (THE CALLING END) TERMINATES. THIS TELLS YOUR BILLING EQUIPMENT, WHICH THINKS THAT YOU'RE STILL WAITING TO BE CONNECTED WITH 806-258-2222, THAT YOU'VE FINALLY CONNECTED. BILLING THEN BEGINS TO 806-258-2222. NOT EXACTLY AN AUSPICIOUS BEGINNING FOR AN ASPIRING YOUNG PHONE PHREAK. Page 10 TO AVOID THIS, SEVERAL ACTIONS MAY BE TAKEN. AS PREVIOUSLY MENTIONED, ONE MAY AVOID BEING CHARGED FOR THE NUMBER CALLED TO SEIZE A TRUNK BY USING AN EXTENDER (IN WHICH CASE THE EXTENDER WILL GET BILLED). IN SOME AREAS, BOXING MAY BE ACCOMPLISHED USING AN 800 NUMBER, GENERALLY IN THE FORMAT OF 800-858-XXXX (MANY AMARILLO NUMBERS) OR 800-NN2-XXXX (SPECIAL INTRA-STATE CLASS IN-WATS NUMBERS). HOWEVER, BOXING OFF OF 800 NUMBERS IS IMPOSSIBLE IN MANY AREAS. IN MY AREA, DENVER, I AM SERVED BY #1A ESS AND IT IS IMPOSSIBLE FOR ME TO BOX OFF OF ANY 800 NUMBER. YEARS AGO, IN THE EARLY DAYS OF BLUE BOXING (BEFORE MY TIME), PHREAKS OFTEN USED DIRECTORY ASSISTANCE TO BOX OFF OF BECAUSE THEY WERE "FREE" LONG COMPETETIVE LONG DISTANCE COMPANIES, DIRECTORY ASSISTANCE SURCHARGES ARE NOW $0.50 IN MANY AREAS. IT IS ADDITIONALLY ADVISED THAT DIRECTORY ASSISTANCE NUMBERS NOT BE USED TO BOX FROM BECAUSE OF THE FOLLOWING: AVERAGE DA CALLS LAST UNDER 2 MINUTES. WHEN YOU BOX A CALL, CHANCES ARE THAT IT WILL LAST CONSIDERABLY LONGER. THUS, THE BELL BILLING EQUIPMENT WILL MAKE A NOTE OF CALLS TO DIRECTORY ASSISTANCE THAT LAST A LONG TIME. A CALL TO A DIRECTORY ASSISTANT LASTING FOR 4 HOURS AND 17 MINUTES MAY APPEAR SOMEWHAT SUSPICIOUS. ALTHOUGH THE DATE, TIME, AND LENGTH OF A DA CALL DO NOT APPEAR ON THE BILL, IT IS RECORDED ON AMA TAPE AND WILL TRIP A TROUBLE REPORT IF IT WERE TO LAST TOO LONG. THIS IS HOW MOST PHREAKS WERE DISCOVERED IN THE OLD DAYS. ALSO, SOMETIMES TOO MANY CALLS LASTING TOO LONG TO ONE 800 NUMBER MAY RAISE A FEW EYEBROWS AT THE LOCAL SECURITY OFFICE. ASSUMING YOU CAN COMPLETE A BLUE BOX CALL, THE FOLLOWING ARE LISTED ROUTINGS FOR VARIOUS BELL INTERNAL OPERATORS. THESE ARE IN THE FORMAT OF KP+NPA+SPECIAL ROUTING+1X1+ST, WHICH I WILL EXPLAIN LATER. THE 1X1 IS THE ACTUAL OPERATOR ROUTING, AND NPA AND NPA+SPECIAL ROUTING ARE USED FOR OUT-OF- AREA CODE CALLS AND OUT-OF-AREA CODE CALLS REQUIRING SPECIAL ROUTING, RESPECTIVELY. KP+101+ST ...... TOLL TEST BOARD KP+121+ST ...... INWARD OP KP+141+ST ...... WAS RATE & ROUTE. NOW ONLY WORKS IN 312, 815, 717, AND A FEW OTHERS. IT HAS BEEN REPLACED WITH A UNIVERSAL RATE & ROUTE NUMBER, 800+141+1212. KP+151+ST ...... OVERSEAS COMPLETION OPERATOR (INBOUND). WORKS ONLY IN CERTAIN NPAS, SUCH AS 303. KP+181+ST ...... IN SOME AREAS, TOLL STATION FOR SMALL TOWNS Page 11 THUS, IF YOU SEIZE A TRUNK IN 806 NPA AND WANTED AN INWARD (IN 806), THEN YOU WOULD DIAL KP+121+ST. IF YOU WANTED A 312 INWARD AND WERE DIALING ON AN 806 TRUNK, AN AREA CODE WOULD BE REQUIRED. THUS, YOU WOULD DIAL KP+312+121+ST. FINALLY, SOME PLACES IN THE NETWORK REQUIRE SPECIAL ROUTING, IN ADDITION TO AN AREA CODE. AN EXAMPLE IS FRANKLIN PARK, ILL. IT REQUIRES A SPECIAL ROUTING OF 032. FOR THIS, YOU WOULD DIAL KP+312+032+121+ST FOR A FRANKLIN PARK INWARD OPERATOR. SPECIAL ROUTINGS ARE IN THE FORMAT OF 0XX. THEY ARE USED PRIMARILY FOR LOAD BALANCE, SO THAT TRAFFIC FLOW MAY BE EVENLY DISTRIBUTED. ABOUT HALF OF THE EXCHANGES IN THE NETWORK REQUIRE SPECIAL ROUTING. NOTE THAT SPECIAL ROUTINGS ARE NEVER EVER EVER USED TO DIAL NORMAL TELEPHONE NUMBERS, ONLY OPERATORS. OPERATOR FUNCTIONS: TOLL TEST BOARD- GENERALLY A CORDBOARD THEY ARE NOT USED BY OPERATORS, ONLY SWITCHMEN. INWARD- ASSISTS THE NORMAL TSPS (0+) OPERATOR IN COMPLETING CALLS OUT OF THE TSPS'S AREA. ALSO, INWARDS PERFORM EMERGENCY INERRUPTS WHEN THE NUMBER TO BE INTERRUPTED IS OUT OF THE AREA CODE OF THE ORIGINAL (TSPS) OPERATOR. FOR EXAMPLE, A 303 OPERATOR HAS A CUSTOMER THAT NEEDS AN EMERGENCY INTERRUPT ON 215-647-6969. THE 303 OPERATOR GETS THE ROUTING FOR THE INWARD THAT COVERS 215-647, SINCE SHE CANNOT DO THE INTERRUPT HERSELF. THE ROUTING IS FOUND TO BE ONLY 215+ (NO SPECIAL ROUTING REQUIRED). SO, THE 303 OPERATOR KEYS KP+215+121+ST. AN INWARD ANSWERS AND THE 303 SAYS TO HER, "INWARD, THIS IS DENVER. I NEED AN EMERGENCY INTERRUPT ON 215-647-6969. MY CUSTOMER'S NAME IS MARK TABAS." THE INWARD WILL THEN DO THE INTERRUPT (OFF THE LINE, OF COURSE). IF THE NUMBER TO BE INTERRUPTED HAD REQUIRED SPECIAL ROUTING, SUCH AS, SAY, 312-456-1234 (SPEC ROUTING 032), THEN THE 303 OPERATOR WOULD DIAL KP+312+032+121+ST FOR THE INWARD TO DO THAT INTERRUPT. DIRECTORY ASSISTANCE- THESE ARE THE NORMAL NPA+555+1212 OPERATORS THAT ASSIST CUSTOMERS WITH OBTAINING TELEFONE DIRECTORY LISTINGS. NOT MUCH TOLL-FRAUD POTENTIAL HERE, EXCEPT MAYBE $0.50. RATE AND ROUTE- THESE OPERATORS ARE REACHED BY DIALING KP+800+141+1212+ST. WITH RATES AND ROUTINGS (THUS THE NAME). THE ONLY USES I TYPICALLY HAVE FOR THEM ARE THE FOLLOWING: 1. ROUTING INFORMATION. IN THE ABOVE EXAMPLE, WHEN THE 303 Page 12 OPERATOR NEEDED TO DIAL AN INWARD THAT SERVED 215-647, SHE NEEDED TO KNOW IF ANY SPECIAL ROUTING WAS REQUIRED AND, IF SO, WHAT IT WAS. ASSUMING SHE WOULD USE RATE AND ROUTE, SHE WOULD DIAL THEM AND SAY NICELY, "OPERATOR'S ROUTE, PLEASE, FOR 215-647." RATE & ROUTE WOULD RESPOND WITH "215 PLUS." THIS MEANS THAT THE OPERATOR WOULD DIAL KP+215+121+ST TO REACH THE INWARD THAT SERVES 215-647. IF THERE WERE SPECIAL ROUTING REQUIRED, SUCH AS IN 312-456, RATE & ROUTE WOULD RESPOND WITH "312 PLUS 032 PLUS." IN THAT CASE, THE OPERATOR WOULD DIAL KP+312+032+ST FOR THE INWARD THAT SERVES 312-456. IT IS GOOD PRACTICE TO ASK FOR "OPERATOR'S ROUTE" SPECIFICALLY, AS THERE ARE ALSO "NUMBERS ROUTE" AND "DIRECTORY ROUTES." IF YOU DO NOT SPECIFICALLY ASK FOR OPERATOR'S ROUTE, RATE & ROUTE WILL GENERALLY ASSUME THAT IS WHAT YOU WANT ANYWAY. "NUMBERS" ROUTE REFERS TO OVERSEAS CALLS. EXAMPLE, YOU WANT TO KNOW HOW TO REACH A NUMBER IN GENEVA, SWITZERLAND (AND YOU ALREADY HAVE THE NUMBER). YOU WOULD CALL ROUTING AND SAY "NUMBERS ROUTE, PLEASE, GENEVA, SWITZERLAND." THE OPERATOR WOULD RESPOND WITH: "MARK 41+22. 011+041+ST (PLUS) 041+22" THE "MARK 41+22" HAS TO DO WITH BILLING, SO DISREGARD IT. THE 011+041 BE DISCUSSED IN PART III) AND THE 041+ 22+ IS THE ROUTING FOR GENEVA FROM THE OVERSEAS SENDER. "DIRECTORY" ROUTINGS ARE FOR DIRECTORY ASSISTANCE OVERSEAS. EXAMPLE: YOU WANT A DA IN ROME, ITALY. YOU WOULD CALL RATE & ROUTE AND SAY, "DIRECTORY ROUTING PLEASE, FOR ROME, ITALY." THEY WOULD RESPOND WITH "011+039+ST (PLUS) 039+1108 START." AS IN THE PREVIOUS EXAMPLE, THE 011+039 IS ACCESS TO THE OVERSEAS GATEWAY. THE 039+1108 IS A DIRECTORY ASSISTANT IN ROME. 2. NAMEPLACE INFORMATION. RATE & ROUTe WILL GIVE YOU THE LOCATION OF AN NPA+ EXCHANGE. EXAMPLE: "NAMEPLACE PLEASE, FOR 215-648." THE OPERATOR WOULD RESPOND WITH "PAOLI, PENNSYLVANIA." THIS ISN'T ESPECIALLY USEFUL, SINCE YOU CAN GET THE SAME INFORMATION (LEGALLY) BY DIALING 0, BUT USING RATE & ROUTE IS OFTEN MUCH FASTER AND IT AVOIDS HAVING TO HANG UP WHEN YOU ARE ALREADY ON A TRUNK. *NOTE ON RATE & ROUTE: AS A BLUE BOXER, ALWAYS ASK FOR "IOTC" ROUTINGS. (E.G.,"IOTC OPERATOR'S ROUTE", "IOTC NUMBERS ROUTE", ETC.) THIS TELLS THEM THAT YOU WANT CORDBOARD-TYPE ROUTINGS, NOT TSPS, BECAUSE A BLUE BOXER IS ACTUALLY JUST A CORDBOARD POSITION (THAT BELL DOESN'T KNOW ABOUT). Page 13 *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* OVERSEAS COMPLETION OPERATOR (INBOUND) THESE OPERATORS (KP+151+ST) ASSIST IN THE COMPLETION OF CALLS COMING IN TO THE UNITED STATES FROM OVERSEAS. THERE NPAS IN THE COUNTRY (NAMELY 303). TO USE ONE, YOU WOULD SEIZE A TRUNK AND DIAL KP+303+151+ST. THEN YOU WOULD TELL THE OPERATOR, FOR EXAMPLE, "THIS IS BANGLADESH CALLING. I NEED U.S. NUMBER 215-561-0562 PLEASE." [IN A BROKEN INDIAN ACCENT]. SHE WOULD CONNECT YOU, AND THE BILL WOULD BE SENT TO BANGLADESH (WHERE I'VE BEEN BILLING MY KP+151+ST CALLS FOR TWO YEARS). *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* OTHER INTERNAL BELL OPERATORS. KP+11501+ST ...... UNIVERSAL OPERATOR KP+11511+ST ...... CONFERENCE OP KP+11521+ST ...... MOBILE OP KP+11531+ST ...... MARINE OP KP+11541+ST ...... LONG DISTANCE TERMINAL KP+11551+ST ...... TIME & CHARGES OP KP+11561+ST ...... HOTEL/MOTEL OP KP+11571+ST ...... OVERSEAS (OUTBOUND) OP THESE 115X1 OPERATORS ARE IDENTICAL IN ROUTING TO THE 1X1 OPERATORS LISTED PREVIOUSLY, WITH ONE EXCEPTION. IF SPECIAL ROUTING IS REQUIRED (0XX), THEN THE TRAILING 1 IS LEFT OFF. EXAMPLES: A 312 UNIVERSAL OP ... KP+312+11501+ST A FRANKLIN PARK (312-456) UNIVERSAL OP (SPECIAL ROUTING 032 REQUIRED)....KP+312+032+1150+ST [THE TRAILING 1 OF 11501 IS LEFT OFF]. UNIVERSAL- USED FOR COLLECT/CALLBACK CALLS TO COIN STATIONS. CONFERENCE- THIS IS A CORDBOARD CONFERENCE OPERATOR WHO WILL SET UP A CONFERENCE FOR A CUSTOMER ON A MANUAL OPERATION BASIS. MOBILE- ASSISTS IN COMPLETION OF CALLS TO MOBILE (IMTS) TYPE TELEFONES MARINE- ASSISTS IN COMPLETION OF CALLS TO OCEAN GOING VESSELS. LONG DISTANCE TERMINAL- NOW OBSOLETE. WAS USED FOR COMPLETION OF LONG DISTANCE CALLS. Page 14 TIME & CHARGES- WILL GIVE EXACT COSTS OF CALLS. USED TO TIME CALLS AND INFORM CUSTOMER OF EXACTLY HOW MUCH IT COST. HOTEL/MOTEL- HANDLES CALLS TO/FROM HOTELS AND MOTELS. OVERSEAS COMPLETION (OUTBOUND)- ASSISTS IN COMPLETION OF CALLS TO OVERSEAS POINTS. ONLY WORKS IN SOME, IF ANY NPAS, BECAUSE OVERSEAS ASSISTANCE HAS BEEN CENTRAIZED TO IOCC (COVERED IN PART III). NOTE THAT ALL KP+1X1+ST AND KP+115X1+ST OPERATORS AUTOMATICALLY ASSUME THAT YOU ARE A TSPS OR CORDBOARD OPERATOR ASSISTING A CUSTOMER WITH A CALL. DO NOT DO ANYTHING TO JEOPARDIZE **DON'T CALL THESE OPERATORS! FIND OUT WHAT TO DO FIRST.** THIS CONCLUDES PART II. THERE IS ONE FINAL PART IN WHICH I WILL EXPLAIN OVERSEAS DIALING, IOCC (INTERNATIONAL OVERSEAS COMPLETION CENTRE), RQS (RATE/QUOTE SYSTEM), AND SOME BASIC SCANNING. ....................................... (C) FEBRUARY 6, 1900 MARK TABAS ....................................... --- The World of Cryton (UK)--- +44 4 584 7608 Page 15 | 17-JUN-1987 Blue box plans, part III THE MARK TABAS ENCOUNTER SERIES PRESENTS... =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= BETTER HOMES AND BLUE BOXING PART III ADVANCED SIGNALLING =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= (IT IS ASSUMED THAT THE READER HAS READ AND UNDERSTOOD PARTS I & II BEFORE PROCEEDING TO THIS PART). IN PARTS I & II, I COVERED BASIC THEORY AND DOMESTIC SINGALLING AND OPERATORS. IN THIS PART I WILL EXPLAIN OVERSEAS DIRECT BOXING, THE IOCC, THE RQS, AND SOME BASIC SCANNING METHODS. OVERSEAS DIRECT BOXING. CALLING OUTSIDE OF THE UNITED STATES AND CANADA IS ACCOMPLISHED BY USING AN "OVERSEAS GATEWAY." THERE ARE 7 OVER- SEAS GATEWAYS IN THE BELL SYSTEM, AND EACH ONE IS DESIGNATED TO SERVE A CERTAIN REGION OF THE WORLD. TO INITIATE AN OVERSEAS CALL, ONE MUST FIRST ACCESS THE GATEWAY THAT THE CALL IS TO BE SENT ON. TO DO THIS AUTOMATICALLY, DECIDE WHICH COUNTRY YOU ARE CALLING AND FIND ITS COUNTRY CODE. THEN, PAD IT TO THE LEFT WITH ZEROS AS REQUIRED SO IT IS THREE DIGITS. [ADD EXAMPLES: LUXEMBOURG (352) IS 352 (STAYS THE SAME) SPAIN (34) BECOMES 034 (1 ZERO ADDED) U.S.S.R. (7) BECOMES 007 (2 ZEROS ADDED) NEXT, SEIZE A TRUNK AND DIAL KP+011+CC+ST. NOTE THAT CC IS THE THREE DIGIT PADDED COUNTRY CODE THAT YOU JUST DETERMINED BY THE ABOVE METHOD. [FOR LUXEMBOURG, DIAL KP+011+352+ST, SPAIN KP+011+034+ST, AND THE U.S.S.R. KP+011+007+ST]. THIS IS DONE TO ROUTE YOU TO THE APPROPRIATE OVERSEAS GATEWAY THAT HANDLES THE COUNTRY YOU ARE DIALING. EVEN THOUGH EVERY GATEWAY WILL ALLOW YOU TO DIAL EVERY DIALABLE COUNTRY, IT IS GOOD PRACTICE TO USE THE GATEWAY THAT IS DESIGNATED FOR THE COUNTRY YOU ARE CALLING. AFTER DIALING KP+011+CC+ST (AS CC IS DEFINED ABOVE) YOU SHOULD BE CONNECTED TO AN OVERSEAS GATEWAY. IT WILL ACKNOWLEDGE BY SENDING A WINK, WHICH IS AUDIBLE AS A <BEEP><KERCHINK> AND A DIAL TONE. ONCE YOU RECEIVE INTERNATIONAL DIAL TONE, YOU MAY ROUTE YOUR CALL ONE OF TWO WAYS: A) AS AN OPERATOR-ORIGINATED CALL, OR B) AS A CUSTOMER-ORIGINATED CALL. TO GO AS A CUSTOMER-ORIGINATED Page 16 CALL, KEY KP+COUNTRY CODE (NOT PADDED WITH ZEROS)+ CITY CODE+ NUMBER+ST. YOU WILL THEN BE CONNECTED, PROVIDING THE COUNTRY YOU ARE CALLING CAN RECEIVE DIRECT-DIALED CALLS. THE U.S.S.R. IS AN EXAMPLE OF EXAMPLE OF A BOXED INT'L CALL: TO MAKE A CALL TO THE POPE (ROME, ITALY), FIRST OBTAIN THE COUNTRY CODE, WHICH IS 39. PAD IT WITH ZEROS SO THAT IT IS 039. SEIZE A TRUNK AND DIAL KP+011+039+ST. WAIT FOR SENDER DIAL TONE AND THEN DIAL KP+39+6+6982+ST. 39 IS THE COUNTRY CODE, 6 IS THE CITY CODE, AND 6982 IS THE POPE'S NUMBER IN ROME. TO GO AS AN OPERATOR-ORIGINATED CALL, SIMPLY PLACE A ZERO IN FRONT OF THE COUNTRY CODE WHEN DIALING ON THE GATEWAY. THUS, KP+0+39+6+6982+ST WOULD BE DIALED AT SENDER DIAL TONE. ROUTING YOUR CALL AS OPERATOR-ORIGINATED DOES NOT AFFECT MUCH UNLESS YOU ARE DIALING AN OPERATOR IN A FOREIGN COUNTRY TO DIAL AN OPERATOR IN A FOREIGN COUNTRY, YOU MUST FIRST OBTAIN THE OPERATOR ROUTING FROM RATE & ROUTE FOR THAT COUNTRY. DIAL RATE & ROUTE AND IF YOU'RE TRYING TO GET AN OPERATOR IN YUGOSLAVIA, SAY NICELY, "IOTC OPERATOR'S ROUTE, PLEASE, FOR YUGOSLAVIA." [IN LARGER COUNTRIES IT MAY BE NECESSARY TO SPECIFY A CITY]. RATE & ROUTE WILL RESPOND WITH, "38 PLUS 11029". SO, DIAL YOUR OVERSEAS GATEWAY, KP+011+038+ST, WAIT FOR SENDER DIAL TONE, AND KEY KP+0+38+11029+ST. YOU SHOULD THEN GET AN OPERATOR IN YUGOSLAVIA. NOTE THAT YOU MUST PREFIX THE COUNTRY CODE ON THE SENDER WITH A 0 BECAUSE PRESUMABLY ONLY AN OPERATOR HERE CAN DIAL AN OPERATOR IN A FOREIGN COUNTRY. WHEN YOU DIAL KP+011+CC+ST FOR A 3-DIGIT SENDER CODE OF THE FORMAT 18X, DEPENDING ON WHICH SENDER IS DESIGNATED TO HANDLE THE COUNTRY YOU ARE DIALING. THE OVERSEAS GATEWAYS AND THEIR 3-DIGIT CODES ARE LISTED BELOW. 182 ..... WHITE PLAINS, NY 183 ..... NEW YORK, NY 184 ..... PITTSBURG, PA 185 ..... ORLANDO, FL 186 ..... OAKLAND, CA 187 ..... DENVER, CO 188 ..... NEW YORK, NY DIALING KP+182+ST WOULD GET YOU THE SENDER IN WHITE PLAINS, AND KP+183+ST WOULD GET THE SENDER IN NYC, ETC., BUT THE KP+011+CC+ST IS HIGHLY SUGGESTED (AS PREVIOUSLY MENTIONED). TO FIND OUT WHAT SENDER YOU WERE ROUTED TO AFTER DIALING KP+011+CC+ST, DIAL (AT INT'L DIAL TONE): KP+0000000+ST. IF YOU HAVE DIFFICULTY IN REACHING A SENDER, CALL RATE AND ROUTE AND ASK FOR A NUMBERS ROUTE FOR THE COUNTRY YOU'RE DIALING. SOMETIMES, KP+011+PADDED COUNTRY CODE+ST WILL NOT WORK. Page 17 I HAVE FOUND THIS IN MANY 3-DIGIT COUNTRY CODES. LEXEMBOURG, COUNTRY CODE 352, FOR EXAMPLE, SHOULD BE KP+011+352+ST THEORETICALLY. BUT IT IS NOT. IN THIS CASE, DIAL KP+011+ 003+ST FOR THE OVERSEAS GATEWAY. IF YOU HAVE TROUBLE, TRY DIALING KP+011+FIRST DIGIT OF COUNTRY CODE+ST, OR CALL RATE AND ROUTE. THE IOCC ROUTE AND ASK FOR AN "IOTC NUMBERS ROUTE" OR "IOTC OPERATORS ROUTE" FOR A FOREIGN COUNTRY, YOU WILL GET SOMETHING LIKE "160+700" (AS IN THE CASE OF THE SOVIET UNION). THIS MEANS THAT THE COUNTRY IS NOT DIALABLE DIRECTLY AND MUST BE HANDLED THROUGH THE INTERNATIONAL OVERSEAS COMPLETION CENTRE (IOCC). FOR AN IOCC ROUTING, PAD THE COUNTRY CODE TO THE RIGHT WITH ZEROS UNTIL IT IS 3 DIGITS. THEN KP+160 IS DIALED, PLUS THE PADDED COUNTRY CODE, PLUS ST. EXAMPLES: THE U.S.S.R. (7) ...... KP+160+700+ST JAPAN (81) ............ KP+160+810+ST URAGUAY (598) ......... KP+160+598+ST YOU WILL THEN BE ROUTED TO THE IOCC IN PITTSBURG, PA, WHO WILL ASK FOR COUNTRY, CITY, AND NUMBER BEING DIALED. MANY TIMES THEY WILL ASK FOR A RINGBACK [THANKS TO TELENET BOB] SO HAVE A LOOP READY. THEY WILL THEN PLACE THE CALL AND CALL YOU BACK (OR SOMETIMES PUT YOU THROUGH DIRECTLY). SOME CALLS, SUCH AS TO MOSCOW, TAKE SEVERAL HOURS. THE RATE QUOTE SYSTEM (RQS). THE RQS IS THE OPERATOR'S RATE/QUOTE SYSTEM. IT IS A COMPUTER USED BY TSPS (0+) OPERATORS TO GET RATE AND ROUTE INFORMATION WITHOUT HAVING TO DIAL THE RATE AND ROUTE OPERATOR. IN PART II, I DISCUSSED GETTING AN INWARD ROUTING FOR DIALING-ASSISTANCE AND EMERGENCY OPERATORS (KP+800+141+1212+ST). THE SAME INFORMATION IS AVAILABLE FROM RQS. SAY YOU WANT THE INWARD ROUTING FOR 305-994. YOU WOULD SIEZE A TRUNK AND DIAL KP+009+ST (TO ACCESS THE RQS). SOMETIMES, IF YOU SEIZE A TRUNK IN AN NPA NOT EQUIPPED WITH RQS, YOU NEED TO DIAL AN NPA THAT IS EQUIPPED WITH RQS FIRST, SUCH AS 303. ANYWAY, AFTER YOU DIAL KP+009+ST OR KP+303+009+ST, YOU WILL RECEIVE A WINK (<BEEP><KERCHINK>) AND THEN RQS DIAL TONE. AT RQS DIAL TONE, FOR AN INWARD ROUTING FOR 305-994 YOU WOULD DIAL KP+06+305+994+ST. THAT IS, KP+06+NPA+EXCHANGE+ST. RQS WILL RESPOND WITH "305 PLUS 033 PLUS". THIS MEANS YOU WOULD DIAL KP+305+033+121+ST FOR AN INWARD THAT SERVICES 305-994. IF NO SPECIAL ROUTING WERE REQUIRED, RQS WOULD HAVE RESPONDED Page 18 WITH "305 PLUS" AND YOU WOULD SIMPLY DIAL: KP+305+121+ST FOR AN INWARD. ANOTHER RQS FEATURE IS THE ECHO FEATURE. YOU CAN USE IT TO TEST YOUR BLUE BOX. DIAL RQS (KP+009+ST) AND THEN KEY KP+07+1234567890+ST. RQS WILL RESPOND WITH VOICE IDENTIFICATION OF THE DIGITS IT RECOGNIZED, BETWEEN THE KP+07 AND ST. RQS CAN ALSO BE USED FOR RATES AND DIRECTORY ROUTINGS, BUT THOSE ARE SELDOM NEEDED, SO THEY HAVE BEEN OMITTED HERE. SIMPLE SCANNING. IF YOU'RE INTERESTED IN SCANNING, TRY DIALING ON A TRUNK, ROUTINGS IN THE FORMAT OF KP+11XX1+ST. BEGIN WITH 11001 INTERESTING THINGS TO BE FOUND THERE, AS DOCTOR WHO (413 AREA) CAN TELL YOU. THOSE 11XX1 ROUTINGS CAN ALSO BE PREFIXED WITH AN NPA, SO IF YOU WANT TO SCAN AREA CODE 212, DIAL KP+212+11XX1+ST. THERE, NOW YOU KNOW AS MUCH ABOUT BLUE BOXING AS MOST PHREAKS. IF YOU READ AND UNDERSTAND THE MATERIAL, AND PUT ASIDE PRECONCEIVED IDEAS OF WHAT BLUE BOXING IS THAT YOU MAY HAVE ACQUIRED FROM INEXPERIENCED PEOPLE OR OTHER BULLETIN BOARDS, YOU SHOULD BE WELL ON YOU WAY TO AN ENLIGHTENING CAREER IN BLUE BOXING. IF YOU FOLLOW THE GUIDELINES IN PART I TO BOX, YOU SHOULD HAVE NO PROBLEM WITH THE FONE COMPANY. COMMENTS MADE BY "PHREAKS" ON BULLETIN BOARDS THAT PROCLAIM "TRACING" OF BLUE BOXERS ARE NONSENSE AND SHOULD BE IGNORED (EXCEPT FOR A PASSING CHUCKLE). NOTE 1: CCIS AND THE DOWNFALL OF BLUE BOXING. CCIS STANDS FOR COMMON CHANNEL INTEROFFICE SIGNALLING. IT IS A SIGNALLING METHOD USED BETWEEN ELECTRONIC SWITCHING SYSTEMS THAT ELIMINATES THE USE OF 2600HZ AND 3700HZ SUPERVISORY SIGNALS, AND MF PULSING. THIS IS WHY MANY PLACES CANNOT BE BOXED OFF OF; THEY EMPLOY CCIS, OR OUT-OF-BAND SIGNALLING, WHICH WILL NOT RESPOND TO ANY TONES THAT YOU GENERATE ON THE LINE. EVENTUALLY, ALL EXISTING TOLL EQUIPMENT WILL BE UPGRADED OR REPLACED WE'LL ALL BE BOXING WITH MICROWAVE DISHES. UNTIL THEN (ABOUT 1995 BY CURRENT BOC/AT&T ESTIMATES), HAVE FUN! IF YOU HAVE ANY QUESTIONS ABOUT THIS TEXT, PLEASE FEEL FREE TO DROP ME A LINE. I WILL RESPOND TO ALL MAIL, MESSAGES, ETC. INSULTS ARE ALSO WELCOMED. AND IF YOU DISCOVER ANYTHING INTERESTING SCANNING, BE SURE TO LET ME KNOW. MARK TABAS $LOD$ Page 19 THIS TEXT WAS PREPARED IN FULL BY MARK TABAS FOR: K.A.O.S. PHILADELPHIA, PA. [215-465-3593]. ANY SYSOP MAY FREELY DOWNLOAD THIS TEXT AND USE IT ON HIS/HER BBS, PROVIDED THAT NONE OF IT BE ALTERED IN ANY WAY. TECHNICAL ACKNOWLEDGEMENTS: KARL MARX, X-MAN, HIGH-RISE JOE, TELENET BOB, LEX LUTHOR, TUC, JOHN DOE, DOCTOR WHO (413 AREA), THE TONE SWEEP, MR. SILICON, K00L KAT, THE GLUMP. REFERENCES: 1. NOTES ON THE BOC INTRA-LATA NETWORKS BELL SYSTEM PUBLICATION, 1983. 2. NOTES ON THE NETWORK BELL SYSTEM PUBLICATION, 1983. 3. BELL SYSTEM BELL SYSTEM PUBLICATION, 1983. 4. NOTES ON DISTANCE DIALING BELL SYSTEM PUBLICATION, 1968. 5. EARLY MEDIEVAL ARCHITECTURE. WARREN & CATHY BILL, HOUGHTON- PUBLISHING CO., 1979. ....................................... (C) FEBRUARY 6, 1900 MARK TABAS ....................................... CALL 1-305-994-996 [KELLEY IS A BLOND BABE] [ I agree with you ] --- The World of Cryton (UK) --- +44 4 584 7608 Page 20 Red Boxing With Whistles by THE RESEARCHER. This article is presented as a news item only. It is not to be taken as an encouragement to make fraudulent telephone calls. Red boxing consists of simulating the tones produced when coins are deposited in a pay phone. Coin tones are beeps of 2200 Hz + 1700 Hz as follows: 5 cents - 1 beep,66 milliseconds duration. 10 cents - 2 beeps, each 66 milliseconds duration with 66 millisecond pause between beeps. 25 cents - 5 beeps, each 33 milliseconds duration with a 33 millisecond pause between beeps. Two methods have commonly been used by phone phreaks to produce these tones and make free calls. 1. The traditional Red Box consisting of a pair of Wien-bridge oscillators with the timing controlled by 555 timer chips. 2. Producing the signals with a computer which are recorded and then played back into the mouth piece of a pay phone. A third method has recently appeared which is a real mind blower. A phreak in the Midwest has extensively tested a method of red boxing which uses nothing more than a pair of brass or aluminum whistles. The whistles are 1/4 inch in diameter by 4 inches long and are tuned by means of a wooden dowel rod which fits snugly inside. The whistles can be brought precisely on frequency by tuning them against a known signal source such as a computer capable of producing the tones. Once tuned, the whistles are glued or taped together so they can be blown together to produce the dual tone used in coin signaling. It has been tested and proven that with a little practice these whistles can be used to make free calls. Now you can blow your money without spending a cent. Please note these whistles are available (for test purposes only) from P-80 for $35. Send orders to P-80 3310 5th Avenue. Page 21 DD %*%*%*%*%*%*%*%*%*% __________________________ * *\ / \ % HACKER'S ATLAS % \ \File dropped from all CAPS/\ * * I / to the more readable \ \ %*%*%*%*%*%*%*%*%*% I \ state of lower case by /\/ * *\I / -=+ DarkStorm +=- \ \ % RAGON/WYV/BOF % \ \__________________________/\/ * LTD * I / \ \ % PRESENTATION! % I \ Also moved to 80 columns /\/ * * I /as opposed to its original\ \ %*%*%*%*%*%*%*%*%*% i \ 40 column screen waster /\/ \ \I / Sorry C-64 users! \ \ WRITTEN BY : THE WYVERN \__________________________/\/ \ \ \ HOLLOW HILLS...[805]/682-5148 \_________________________\/ #^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^# Now into the subject of Hacking , This file should give all of you people out there who are bored and have nothing to do, something to do...If it doesn't then I guess it doesn't. Look for issue 2 which iscoming soon to a BBS near you. How 'Bout some International Numbers? Queen Elizabeth loves to talk to computer hackers and can usually bereached at 011-441-930-482... SOME OTHER MISC ONES : LONDON RADIO 44-1-246-8035 DIALING INSTRUCTIONS 44-1-246-8017 CIVIL EMERGENCIES 44-1-246-8088 A fun thing to do it....Sometimes when you are calling a friend, Boardor whatever, you will get a cross line. (Usually LD) Where you canhear some other losers talking, well it's pretty fun to listen intotheir conversations...I have heard some very interesting ones... If youare lucky they will be ableto sorta hear you, and that's when you dostuff like "This is an emergency interuption, please hang up imediatelyand prepare for an emergency call" or start cursing themor anything you want to do! So anyway for all you DIAL-A-"NUTS" out there you might as well pick upsome new interests and call Page 22 DIAL-A-FAG 415-685-6790 DIAL-A-TEENAGER 714-346-7673 DIAL-A-ATHEIST 213-254-4914 DIAL-A-IDIOT 212-934-9090 {For those who like 800's, try 1-800-HOT-FUCK} {It's some fag-line, call up on his bill and have some gay bashing orsomething. or be a fag for the day and when prompted for you FuckNumber, tell him its 69 or something kinky.} {Tell everyone to call this guy, it's free, and he needs to be insultedfor his fag dude-ing} Maybe yout the kind that likes to listen to recordings? Well then howabout calling 512-472-9941 and listening to the "insert 25 cent"recording a couple hundred times? Here are some carrier numbers in 805 683-3831 3832 3833 3834 3835 As far as I know they all belong to a corp. called Signal Tech., the first one is at least. Hit Return a few times and there you are, hackingtime. Sheesh? Still bored Eh? Well why not go ahead and get on a 6 way conference call?!@@#! Get on from 7-9pm (EASTERN STAND.) 301-736-3070.... OPERATOR TRUNK [LR*2II)X] (TRY THESE IN THAT TRUNK!) CONFERENCE OPERATOR XXX+11511 COIN REFUND OPERATOR XXX+181 Naw, your the 800 extender type Eh? Well get out your program and hackthese babys: 1-800-22-1950 NONONONO THE ABOVE IS SHIT LETS TRY TO START AGAIN : 1-800-221-1950 8190 5670 5430 Page 23 5665 223-7854 243-7854 255-2255 327-0005 0326 2703 6713 9136 9895 547-6754 237-2618 (CODE : 115342 MAY WORK) Well I'm not sure which number it is but it's one of these two: 1-805-965-3608 6308 Anyways thats some State Farm Insurance recording machine, and as far asI know your phone buttons 0-9 will do stuff like: REWIND, FAST FORWARD, READ, LEAVE MSGS, ETC, I'll have more info on it in the next atlas! EXTENDERS....322-1415, 255-2255 NEWSNET......215-668-2645 (If you need passes for newsnet I understand a guy on Sherwood/// (914-352-6543) By the name of PRINCE TANA (sp?) has them... XEROX COMPUTING 312-922-4601 ON:XC56TS PW:[HIT RETURN] 800-621-3026 SPECIAL OPERATOR 205-235-6205 ARMY POST 713-241-6421 SHELL OIL 800-323-7751 MCI MAIL 800-233-3312 800-223-2283 CITY BANKS 800-223-3450 WUI SAFE Say guys here are some beauty give aways for you: WARNER 228-3333 (PWS ON KNOWN (AWW)) ACCURAY (K00L SYSTEM) 261-2140 ENTER Page 24 GAMES ??????? 436-9687 6/24 JOHN12 OHIO STATE LIBRARY... (LOGON IN HALF DUP.) 422-5025 (MORE ON USING THIS IN NEXT ATLAS) All of the above are in the 614 area code. In the next atlas the numberfor Wendy's computer! <---Wendy's the Restaurant!?!?! MISC. 614-481 EXCHANGE : 8049 8194 8754 8764 8771 (ALL ABOVE WITH CARRIER) TRAVELNET : 800-521-8400 (VOICE 800 EXTENDER) [) Hey guys! These guys love you: THE PENTAGON......202-694-0814 WATERGATE.........202-965-2900 WHITE HOUSE.......202-456-1414 Here are some presses for you to call: RONNIE'S PRESS 800-424-9009 (?) WHITE HOUSE " 800-248-0151 Here are some real nice ones: 213 AREA CODE 974-6624 DEATH RECORDS INFO 6621 BIRTH REOCRDS INFO Page 25 *** MORE MISC. NUMBERS *** LOWELL U....617-459-0159 RECORD A VOICE....800-858-9313 *** A FEW EXTENDERS *** 1-800-547-1784 323-8126 521-8000 743-7481 Well if you still want more! or your still bored...Wait for Atlas #2, or call ---- HOLLOW HILLS at 805-682-5148-------- THE WYVERN...> WYVERN/RAGON/BOF LTD. #^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^#^# --------------------------------------- Page 26 ----Modem Noise Killer (alpha version)---- With this circuit diagram, some basic tools including a soldering iron, and four or five components from Radio Shack, you should be able to cut the noise/garbage that appears on your computer's screen. I started this project out of frustration at using a US Robotics 2400 baud modem and getting a fare amount of junk when connecting at that speed. Knowing that capacitors make good noise filters, I threw this together. This is very easy to build, however conditions may be different due to modem type, amount of line noise, old or new switching equipment (Bell's equipment), and on and on. So it may not work as well for you in every case. If it does work, or if you've managed to tweek it to your computer/modem setup I' d like to hear from you. I'd also appreciate any of you electronic wizzards out there wanting to offer any improvements. Let's make this work for everyone! Please read this entire message and see if you understand it before you begin. OK, what you' ll need from Radio Shack: 1 #279-374 Modular line cord if you don't already have one. You won't need one if your phone has a modular plug in its base. $4.95 1 #279-420 Modular surface mount jack (4 or 6 conductor) $4.49 1 #271-1720 Potentiometer. This is a 5k audio taper variable resistor. $1.09 1 #272-1055 Capacitor. Any non-polarized 1.0 to 1.5 uf cap should do. Paper, Mylar, or metal film caps should be used, although #272-996 may work as well. (272-996 is a non-polarized electrolytic cap) $.79 1 100 ohm resistor - quarter or half watt. $.19 1 #279-357 Y-type or duplex modular connector. Don't buy this until you've read the section on connecting the Noise Killer below. (A, B,or C) $4.95 First off, open the modular block. You normally just pry them open with a screwdriver. Inside you'll find up to 6 wires. Very carefully cut out all but the green and red wires. The ones Page 27 you'll be removing should be black, yellow, white, and blue. These wires won't be needed and may be in the way. So cut them as close to where they enter the plug as possible. The other end of these wires have a spade lug connector that is screwed into the plastic. Unscrew and remove that end of the wires as well. Now, you should have two wires left. Green and red. Solder one end of the capacitor to the green wire. Solder the other end of the capacitor to the center lug of the potentiometer (there are three lugs on this critter). Solder one end of the resistor to the red wire. You may want to shorten the leads of the resistor first. Solder the other end of the resistor to either one of the remaining outside lugs of the potentiometer. Doesn't matter which. Now to wrap it up, make a hole in the lid of the mod block to stick the shaft of the potentiometer through. Don't make this hole dead center as the other parts may not fit into the body of the mod block if you do. See how things will fit in order to find where the hole will go. Well, now that you've got it built you'll need to test it. First twist the shaft on the potentiometer until it stops. You won't know which way to turn it until later. It doesn't matter which way now. You also need to determine where to plug the Noise Killer onto the telephone line. It can be done by one of several ways: A. If your modem has two modular plugs in back, connect the Noise Killer into one of them using a line cord. (a line cord is a straight cord that connects a phone to the wall outlet. Usually silver in color) B. If your phone is modular, you can unplug the cord from the back of it after you're on-line and plug the cord into the Noise Killer. C. You may have to buy a Y-type modular adaptor. Plug the adaptor into a wall outlet, plug the modem into one side and the Noise Killer into the other. Call a BBS that has known noise problems. After you've connected and garbage begins to appear, plug the Noise Killer into the phone line as described above. If you have turned the shaft on the potentiometer the wrong way you'll find out now. You may get a lot of garbage or even disconnected. If this happens, turn the shaft the other way until it stops and try again. If you don't notice much difference when you plug the Noise Killer in, that may be a good sign. Type in a few commands and look for garbage characters on the screen. If there still is, turn the shaft slowly until most of it is gone. If nothing seems to happen at all, turn the shaft slowly from one side to the other. You should get plenty of garbage or disconnected at some point. If you don't, reread this message to make sure you've connected it right. Page 28 ***END OF ORIGNAL FILE*** ADDITION TO ORIGNAL FILE - 2/29/88 - Mike McCauley - CIS 71505,1173 First, a personal recomendation. _THIS WORKS!!!_ I have been plagued with noise at 2400 for some time. I went round and round with Ma Bell on it, and after they sent out several "repair persons" who were, to be kind, of limited help in the matter, I threw in the towel. I saw this file on a board up east a few days ago, and thought I'd bite. Threw the gismo together in about 10 minutes, took another five to adjust the pot for best results on my worst conection, and guess what? No more worst connecion! A few pointers: 1) The pot need not be either 5K or audio taper. I used a 10K 15 turn trim pot. Suggest you use what is handy. 2) I used 2MFD's of capacitance (two 1MFD's in parallel) Two R.S. p/n 272-1055 work fine. Remember that about 90 Volts will appear across red & green at ring, so the caps should be rated at 100VDC+. 3) I ended up with a final series resistance value (100 ohm + pot) of 2.75K. I speculate that one could probably use 2MFD and a fixed 2.7K resistor and do the job 90% of the time. The adjustment of the pot is not very critical. Changes of +/- 1K made little difference in the performance of the circuit. Hope it works as well for you as it did for me. Mike McCauley Page 29 | 17-JUN-1987 Neon box plans -------------------------------------- THE NEON BOX ANTI-LINENOISE -------------------------------------- A NEON BOX IS A VERY SIMPLE ADJUSTMENT TO YOUR FONE, THAT WILL ALLOW A VERY CLEAR PASSAGE FROM YOUR COMPUTER TONES TO YOUR FONE. IT ALSO WORKS GREAT FOR RECORDING TONES, SEX FONE, OR ANYTHING ELSE YOU WANT TO RECORD OFF OF YOUR FONE. TOOLS: ------ THIS MODIFICATION IS VERY SIMPLE, AND CAN BE USED ON MOST FONES, THOUGH IT IS MORE DIFFICULT ON ONE-PIECE UNITS. ALL YOU NEED IS AN OLD PAIR OF HEADFONES, OR SIMILAR, A FILIPS SCREWDRIVER, A SOLDERING IRON AND SOME SOLDER. INSTRUCTIONS ------------ OPEN YOUR FONE WITH THE SCREWDRIVER. WHEN OPENED, LOOK FOR THE RED AND BLACK WIRES THAT LEAD TO THE MOUTHPIECE. (IF YOU'RE NOT SURE WHICH WIRES LEAD TO THE MOUTHPIECE, OPEN UP THE MOUTHPIECE AND FIND THE SAME COLOR WIRES ON THE BASE. FOR ONE-PIECE UNITS, JUST LOCATE THE MOUTHPIECE). WHEN YOU HAVE FOUND THE MOUTHPIECE, OR WIRES, CUT THE EARD OF THE HEADFONES OFF, AND ONE WIRE (THE ONE THAT LEADS TO THE RIGHT EAR). STRIP THE LEFT WIRE SO ABOUT AN EIGHTH INCH IS SHOWING. KEEP THE OTHER SIDE IN TACT. THEN ON THE RED WIRE, SOLDER THE WIRE THAT IS SEPARATLY SEALED FROM THE OTHER ONE. ON THE BLACK WIRE (THESE ARE THE ENDS OF THE WIRE ON THE CIRCUIT BOARD) SOLDER THE WAIRE WRAPPED AROUND THE OTHER WIRE. THEN SOLDER A HOLE FOR THE WIRE. YOU HAVE NOW MADE A NEON BOX. --- The World of Cryton (UK)--- +44 4 584 7608 Page 30 | 17-JUN-1987 White box plans (u/l by Agrajag the prolonged) White Box Plans --- MULTIPLE TONE (Uploaded by Agrajag the Prolonged) GENERATOR---- This article will tell you how to change a normal touch tone keypad and convert it to a portable unit. In addition, we give the touch-tone frequencies. First of all, the tones made by a touch tone telephone are not single tones, they are a combination of two tones, making "DTMF" (dual tone multi-frequency). The normal tone telephone dials 12 different signals, but is capable of dialing 16 different signals (see bulletin on silver boxes). The power required by a keypad is about 25 volts, but they will work with as little as 15, thereby allowing the use of two 9- volt radio batteries. As you may have guessed, they are also designed to operate with a telephone type speaker (and phone line), and not the standard 8-ohm speaker which needs to be used for adequate volume. To accompolish this, we use a matching transformer, this is one of those miniature ones available at Radio Shack. Enough of the theory, now for the circuit. You will need: A touch tone keypad A miniature 1000 to 8 ohm transformer (Radio Shack # 273-1380) A standard 8-ohm speaker Two 9-volt radio batteries Two 9-volt battery clips A case to put it all in (optional) A few construction notes, I suggest that you solder and tape all connections. It is also important to read this entire bulletin before attempting to construct this. First, connect the RED wire of the transformer to either terminal on the speaker. Now connect the WHITE wire from the transformer to the other terminal on the speaker. Next, connect the RED (positive) wire of one battery clip to the black wire of the other battery clip. Now connect the the remaining RED wire on the second battery clip to the GREEN wire from the touch tone pad. Connect the BLUE wire from the touch tone pad to the ORANGE-and-BLACK striped wire from the touch tone pad. To these two wires, now connect the remaining black lead from first battery clip. You have now finished the power connection to the keypad. Connect the BLACK wire from the keypad to the BLUE wire on the transformer. Next connect the RED-and-GREEN striped wire Page 31 from the keypad to the GREEN wire on the transformer. The BLACK wire on the transformer should not be connected to anything, along with quite a few wires from the keypad. The connection of the keypad is now complete. All you have to do is connect two nine volt batteries to the battery clips, and you'll be ready to go. You may want to mount it in a case for easy portability. Note that the silver box modification CAN be made to this unit, allowing complete remote phreaking. When none of the buttons are pressed, this unit uses NO power, thereby eliminating the need for a power switch, and extending the life of the batteries. The following are the frequency combinations generated by each button on the keypad. KEY FREQ. #1 FREQ. #2 --- -------- -------- 1 697 1209 2 697 1336 3 697 1477 A 697 1633 4 770 1209 5 770 1336 6 770 1477 B 770 1633 7 852 1209 8 852 1336 9 852 1477 C 852 1633 * 941 1209 0 941 1336 # 941 1477 D 941 1633 All frequencies are measured in Hertz Note that A,B,C and D are not normally present (except for silver boxes) --- The World of Cryton (UK)--- Page 32 | 17-JUN-1987 Black box plans (2) *************************************** * * FREE INCOMING CALLS! * How to build a BLACK BOX * * * *************************************** To all who dare -- What is a BLACK BOX? A BLACK BOX is a device that is hooked up to your fone that fixes your fone so that when you get a call, the caller doesn't get charged for the call. This is good for calls up to 1/2 hour, after 1/2 hour the Fone Co. gets suspicious, and then you can guess what happens. The way it works: What this little beauty does is keep the line voltage from dropping to 10v when you answer your fone. The line is insted kept at 36v and it will make the fone think that it is still ringing while your talking. The reason for the 1/2 hour time limit is that the Fone CO. thinks that something is wrong after 1/2 an hour of ringing. All parts are available Radio Shack. Using the least possible parts and arangement, the cost is $0.98 !!!! And that is parts for two of them! Talk about a deal! If you want to splurge then you can get a small PC board, and a switch. There are two schematics for this box, one is for most normal fones. The second one is for fones that don't work with the first. It was made for use with a Bell Trimline touch tone fone. ** Schematic 1 for most fones ** ** LED ON: BOX ON ** FROM >--------------------GREEN-> TO LINE >--! 1.8k LED !---RED--> FONE !--/\/\/\--!>--! ! ! ------>/<------- SPST Page 33 Parts: 1 1.8k 1/2 watt resistor 1 1.5v LED 1 SPST switch You may just have two wires which you connect together for the switch. ** Schematic 2 for all fones ** ** LED ON: BOX OFF ** FROM >---------------GREEN-> TO LINE >------- ---RED--> FONE ! LED ! -->/<--!>-- ! ! ---/\/\/--- 1.8k Parts: 1 1.8k 1/2 watt resistor 1 1.5v LED 1 DPST switch Here is the PC board layout that I recommend using. It is neat and is very easy to hook up. Schematic #1 Schematic #2 ************** **************** * * * ------- *<<----PC board * --<LED>--- * * ! ! * * ! ! * * ! <SWITCH> * * RESISTOR ! * * ! ! ! * * ! ! * * ! ! /<<----Obviously red line * -------- ! * * ! ! \ * * ! ! * * ! <LED>! / * * --SWITCH-- * * ! ! \ * * ! ! * * ! ! / * L * ! ! * F L * ! ! ! * F I>RED- -RED>O I>RED- ---RED>O N>-----GREEN---->N N>-----GREEN------>N E * h * E E * * E ************** **************** Once you have hooked up all the parts, you must figure out what set of wires go to the line and which go to the fone. Page 34 This is because of the fact that LED's must be put in, in a certain direction. Depending on which way you put the LED is what controls what wires are for the line & fone. How to find out: Hook up the box in one direction using one set of wires for line and the other for fone. *NOTE* For Model I switch should be OFF. *NOTE* For Model ][ switch should be set to side connecting the led. Once you have hooked it up, then pick up the fone and see if the LED is on. If it is, the LED will be lit. If is doesn't light then switch the wires and try again. Once you know which are which then label them. *NOTE* - If neither directions worked then your switch was in the wrong position. Now lable the switch in its current position as BOX ON. How to use it: The purpose of this box is not to poeple who call you so it would make sence that it can only be used to receive! calls. When the box is *ON* then you may only recieve calls. Your fone will ring like normal and the LED on the box will flash. If you answer the fone now, then the LED will light and the caller will not be charged. Hang up the fone after you are done talking like normal. You will not be able to get a dial-tone or call when the box is on, so turn the box *OFF* for normal calls. I don't recommend that you leave it on all the time, as you don't want it to answer when Ma Bell calls! from The Devil --- The World of Cryton (UK)--- Page 35 | 17-JUN-1987 Urine (?) box plans (>View: URINE BOX PLANS/F/MR.BAG --- A PAINFUL PRANK --- /==:==:==:==:==:==:==:==:==\ ! Urine Box Plans ! ... new and improved! ... \==:==:==:==:==:==:==:==:==/ 3/2/86---- Now at last, Underground_Elite brings you these ultrasophisticated box plans for, well, uh, I guess we just kind of bring them for you. After many months of keeping this puppy secret, we here at Underground_Elite have inally come to the consensus that the public oughtn't be kept in the dark from the wrath of Ma Bell, that great telephone company in the sky. The Urine Box (tm) basically creates a capacitative disturbance between the ring and tip wires in another's telephone headset. I have utilized this to the distinct advantage of the operator of the Urine box and to the disadvantage of the other party involved, hopefully you won't get caught. Without further a doo, wire this schematic together. Copper wire (or gold) will work best due to its lessened resistance. It might be a good idea to keep the wiring cooled, to further reduce current loss. 47k ohms --------------- .01 uF !\ !------/\/\/-----------! SPSTswitch !----!-----)!------! ! \ ! --------------- ! ! ! !--! ! (+)! ! !----------<-!----!---------/\/\/------------! ---------- ! / PVP diode! 470k ohms ! 12 VDC ! !/ ! _ ---------- ! / .005 uF (-)! SPKR 20W !------/\/\/\/\/---------)!---<-!--------! ! _/ VR1 (see note1) PVP diode ! ! ! to RING to TIP (your phone) (your phone) note1 - VR1 is a three position variable resistor, enabling settingsequivalent to 100k ohms, 210k ohms, and 320k ohms (all 110k apart). Page 36 note2 - The diodes are silicon-germanium based bipolar RF reducers to limit current polarity reversal. If these are placed backwards the box will not work as intended. note3 - The speaker will emit low tones when the SPST is closed (ie the box is "ON") and when the settings of VR1 are moved to higher resistance the tone level will increase. note4 - Place setting evaluation symbols to represet the lowest resistance setting for VR1 to be "STEAM", the second (210) to be "MELT", the third (320) to be "VAPORIZE". Usage of box. Use in place of your normal telephone receiver. Do not attempt usage as a regular phone. Call victim by sending tones through speaker with tape recorded noise. Use touch tone sounds as pulse requires electric disruption of line, not just audio. After answer (listen in on SPKR 1) set VR1 to desired strength and let her go. Victim will feel unpleasant sensations in his/her head and will undergo a series of high intensity seizures, not unlike epilepsy, and jointly proportional to VR-1 setting and time induced. Settings. (The Fun Part) STEAM. A short -poof- of water vapor condenses within the victim's earpiece, rendering the telephone short circuited and the victim quite dazed. MELT. Causes structural phase change of receiver (usually reinforced urea-formal-dehyde plastic material - high tech). As in urine?// \\Some kinda water shit I guess. This has the unpleasant bonus of removing the victim's hand. VAPORIZE. If the victim is particularly nasty, this setting will remove his upper anatomy (if box is enabled properly, that is!). Continued usage of this setting is generally not recommended, as death or other serious injury will accompany. Disclaimer. Yes, I will refuse to take responsibility for your incompetence in electrical doings. This includes my reluctance to give court testimony, etc. etc. Wolfgang von Albatross Attorney at Law, ex Telco employee. Brought to you by the 408/245-SPAM people. 300/1200. /boog? --- The World of Cryton (UK)--- Page 37 | 17-JUN-1987 Blotto box plans %+%+%+%+%+%+%+%+%+%+%+%+%+ %HOW TO BUILD A BLOTO BOX+ THE DEATH DEVICE! %+%+%+%+%+%+%+%+%+%+%+%+%+ Finally, it is here! What was first conceived as a joke to fool the inncoent phreakers around America has finally been concieved by the one phreak who is the expert on lines and voltage: The Traveler. Other boxes by the Traveler include the White Gold Box, the Aqua Box, The Diverti Box, and the Cold Box. All of those plans will soon be available in a BBS/AE near you! Well, for you people who are unenlightened about the Blotto Box, here is a brief summery of a legend. --*-=> The Blotto Box <=-*-- For years now every pirate has dreamed of the Blotto Box. It was at first made as a joke to mock more ignorant people into thinking that the function of it actually was possible. Well, if you are The Voltage Master, it is possible. Originally conceived by King Blotto of much fame, the Blotto Box is finally available to the public. NOTE: The Traveler can not be responcable for the information disclosed in the file! This file is strictly for informational purposes and should not be actually built and used! Usage of this electronical impulse machine could have the severe results listed below and could result in high federal prosecution! Again, The Traveler TAKES NO RESPONCABILITY! <--Need an English tutor? All right, now that that is cleared up, here is the basis of the box and it's function. The Blotto Box is every phreaks dream... you could hold AT&T down on it's knee's with this device. Because, quite simply, it can turn off the phone lines everywhere. Nothing. Blotto. No calls will be allowed out of an area code, and no calls will be allowed in. No calls can be made inside it for that matter. As long as the switchhing system stays the same, this box will not stop at a mere area code. It will stop at nothing. The electrical impulses that emit from this box will open every line. Every line will ring and ring and ring... the voltage will never be cut off until the box/ generator is stopped. This is no 200 volt job, here. We are talking GENERATOR. Every phone line will continue to ring, and people close to the box may be electricuted if they pick up the phone. But, the Blotto Box can be stopped by merely cutting of the line or generator. If they are cut off then nothing will emit any longer. It will take a while for the box to calm back down Page 38 again, but that is merely a superficial aftereffect. Once again: Construction and use of this box is not advised! The Blotto Box will continue as long as there is electricity to continue with. OK, that is what it does, now, here are some interesting things for you to do with it... --*-=> The Blotto Box Functions and Installation <=-*-- Once you have installed your Blotto, there is no turning back. The following are the instructions for construction and use of this box. Please head and heed all warnings in the above section before you attempt to construct this box. Materials: - A Honda portable generator or a main power outlet like in a stadium or some such place. - A radio shack cord set for 400 volts that splices a female plug into a phone line jack. - A meter of voltage to attach to the box itself. - A green base (i.e. one of the nice boxes about 3' by 4' that you see around in your neighborhood. They are the main switch boards and would be a more effective line to start with. or: A regular phone jack (not your own, and not in your area code! - A soudering iron and much souder. - A remote control or long wooden pole. Now. You must have guessed the construction from that. If not, here goes, I will explain in detail. Take the Honda Portable Generator and all of the other listed equiptment and go out and hunt for a green base. Make sure it is one on the ground or hanging at head level from a pole, not the huge ones at the top of telephone poles. Open it up with anything convienent, if you are two feeble that fuck don't try this. Take a look inside... you are hunting for color-coordinating lines of green and red. Now, take out your radio shack cord and rip the meter thing off. Replace it with the voltage eter about. A good level to set the voltage to is about 1000 volts. Now, attach the voltage meter to the cord and set the limit for one thousand. Plug the other end of the cord into the generator. Take the phone jack and splice the jack part off. Open it up and match the red and green wires with the other red and green wires. NOTE: If you just had the generator on and have done this in the correct order, you will be a crispy critter. Keep the generator off until you plan to start it up. Now, sauder those lines together carefully. Wrap duck tape or insultation tape around all of the wires. Now, place the remote control right on to the startup of the generator. If you have the long pole, make sure it is very long and stand back as far away as you can get and reach the pole over. NOTICE: If you are going right along with this Page 39 without reading the file first, you sill realizd0now tHat your area code is about to become null! Then, getting back, twitch the pole/remote control and run for your damn life. Anywhere, just get away from it. It will be generating so much electricity that if you stand to close you will kill yourself. The generator will smoke, etc. but will not stop. You are now killing your area code, because all of that energy is spreading through all of the phone lines around you in every direction. Have a nice day! --*-=> The Blotto Box: Aftermath <=-*-- Well, that is the plans for the most devastating and ultimately deadly box ever created. My hat goes off to: King Blotto (for the original idea), Captain Xerox (for the suggestion about stadiums), and Modern s}}x (for the fact I was on his BBS when I thought of it. --- The World of Cryton (UK)--- Page 40 | 17-JUN-1987 Beige box plans THE BEIGE BOX---------------------------A LINEMAN'S HANDSET FREE CALLS!!!! ------------ INTRODUCTION ------------ Have you ever wanted a lineman's handset? Surely every phreak has at least once considered the phun that he could have with one. After searching unlocked phone company trucks for one for months, we had an idea. We could build one. We did, and named it the "Beige Box," simply because that is the color of ours. In the following file we will give complete instructions for the construction and use of a Beige Box. ------------ CONSTRUCTION ------------ The construction is very simple. First, you must understand the concept of the device. In a modular jack, there are four wires. These are red, green, yellow, and black. For a single line telephone, however, only two matter: the red (ring) and green (tip). The yellow and black are not necessary for this project. A lineman's handset only has two clips on it: the ring and the tip. You will need a phone (we reccommend a touch-tone) with a modular plug, a modular jack, and two large alligator clips (preferably red and green, respectively). Take the modular jack and look at the bottom of its casing. There should be a grey jack with four wires (red, green, yellow, and black) leading out of it. To the end of the red wire attach a red alligator clip. To the end of the green wire attach a green alligator clip. The yellow and black wires can be removed, although I would only set them aside so that you can use the modular jack in future projects. Now insert your telephone's modular plug into the modular jack. That's it. This particular model is nice because it can be easily made, is inexpensive, uses common parts that are readily available, is small, is lightweight, and does not require the destruction of a phone. Page 41 ----- --- ---- BEIGE BOX USES ----- --- ---- There are many uses for the Beige Box. However, before you can use it, you must know how to attach it to its output device. This device can be any of several Bell switching apparatus that include terminal sets (i.e., remote switching centers, bridging heads, cans, etc.). To open most Bell Telephone switching apparatus, you must have a 7/16 inch hex driver. This piece of equipment can be picked up at your local hardware store. With your 7/16 hex driver, turn the security bolt(s) approximately 1/8 of an inch counter-clockwise and open. If your output device is locked, then you must have some knowledge of destroying and/or picking locks. However, we have never encountered a locked output device. Once you have opened your output device, you should see a mass of wires connected to terminals. On most of your output devices, the terminals should be labeled "T" (Tip -- if not labeled, it is usually on the left) and "R" (Ring -- if not labeled, it is usually on the right). Remember: Ring - red - right. The "Three R's" -- a simple way to remember which is which. Now you must attach the red alligator clip (ring) to the "R" (ring) terminal. Attach the green alliagtor clip (tip) to the "T" (tip) terminal. NOTE: If instead of a dial tone you hear nothing, re-adjust the alligator clips so that they are not touching each other or other terminals. Also make sure that they are firmly attached. By this time you should hear a dial tone. Dial ANI and find out the number that you are using (you wouldn't want to use your own). Here are some practical applications: o Eavesdropping o Long distance, static-free phone calls to phriends o Dialing direct to Alliance Conferencing (also static-free) o Phucking people over o Bothering the operator at little risk to yourself o Blue Boxing with a greatly reduced chance of getting caught o Anything at all that you want, since you are an extension on that line Page 42 Eavesdropping: ------------- To be most effective, first attach the Beige Box and then your phone. This eliminates static caused by connecting the box, therefore reducing the potential suspicion of your victim. When eavesdropping, it is always best to be neither seen nor heard. If you hear someone dialing out, do not panic; but rather hang up, wait, and pick up the receiver again. The person will either have hung up or tried to complete their call again. If the latter is true, then listen in, and perhaps you will find information worthy of blackmail! If you would like to know who you are listening to, after dialing ANI, pull a CN/A on the number. Dialing Long Distance: ------- ---- -------- This section is self-explanatory, but don't forget to dial a "1" before the NPA. Dialing Direct to Alliance Conferencing: ------- ------ -- -------- ------------ Simply dial 0-700-456-1000 and you will get instructions from there. I prefer this method over PBXs, since PBXs often have poor reception and are more difficult to come by. Phucking People Over: -------- ------ ---- This is a very large topic for discussion. Just by using the other functions described, you can create a large phone bill for the person (they will not have to pay it, but it is a hassle for them). In addition, since you are an extension of the person's line, leave your phone off hook, and they will not be able to make or recieve calls. This can be extremely nasty because no one would suspect the cause of the problem. Bothering the Operator: --------- --- -------- This is also self-explanatory and can provide hours of entertainment. Simply ask or say things to her that are offensive and you would not like traced to your line. This also Page 43 corresponds with the previous described section, Phucking People Over. After all, guess who's line it gets traced to? He he he... Blue Boxing: ---- ------ See a file on Blue Boxing for more details. This is an especially nice feature if you live in an ESS-equipped prefix, since the calls are, once again, not traced to your line. {{{As well as no true Blue Boxing being necessary. The call is charged to someone else, no tones needed.}}} --------- ----- -- ----- ------ POTENTIAL RISKS OF BEIGE BOXING --------- ----- -- ----- ------ Overuse of the Beige Box may cause suspicions within the Gestapo, and result in legal problems. Therefore, I would recommend that you: o Use more than one output device o Choose a secluded spot to do your Beige Boxing o Keep a low profile (i.e., do not post under your real name on a public BBS concerning your accomplishments) o In order to make sure that the enemy has not been inside your ouput device, I reccomend that you place a piece of transparent tape over the opening of your output device. Therefore, if it is opened in your absence, the tape will be displaced and you will be aware of the fact that someone has been intruding upon your territory. --- The World of Cryton (UK)--- Page 44 | 17-JUN-1987 Aqua box plans READ: aqua box/f/sir william /-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/ /-/ /-/ /-/ The Aqua Box /-/ /-/ /-/ ANTI-LOCK IN /-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/ /-/ /-/ TRACE /-/ Concept by: Captain Xerox /-/ /-/ /-/ /-/ Plans by: The Traveler /-/ /-/ /-/ /-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/ Every true phreaker lives in fear of the dreaded F.B.I. 'Lock in Trace.' For a long time, it was impossible to escape from the lock in trace. This box does offer and escape route with simple directions to it. This box is quite a simple concept, and almost any phreaker with basic electronics knowledge can construct and use it. /-/-/-/-/-/-/-/-/-/-/-/ /-/ The Lock /-/ /-/ in Trace /-/ /-/-/-/-/-/-/-/-/-/-/-/ A lock in trace is a device used by the F.B.I. to lock into the phone users location so that he can not hang up while a trace is in progress. For those of you who are not familiar with the concept of 'locking in', then here's a brief description. The F.B.I. can tap into a conversation, sort of like a three-way call connection. Then, when they get there, they can plug electricity into the phone line. All phone connections are held open by a certain voltage of electricity, that is why you sometimes get static and faint connections when you are calling far away, because the electricity has trouble keeping the line up. What the lock in trace does is cut into the line and generate that same voltage straight into the lines. That way, when you try and hang up, voltage is retained. Your phone will ring just like someone was calling you even after you hang up. (If you have call waiting, you should understand better about that, for call waiting intercepts the electricity and makes a tone that means someone is going through your line. Then, it is a matter of which voltage is higher. When you push down the receiver, then it see-saws the electricity to the other side. When you have a person on each line it is impossible to hang up unless one or both of them will hang up. If you try to hang up, voltage is retained, and your phone will ring. That should give you an understanding of how calling works, also. When Page 45 electricity passes through a certain point on your phone, the electricity causes a bell to ring or on some newer phones an electronic ring to sound.) So, in order to eliminate the trace, you somehow must lower the voltage level on your phone line. You should know that every time someone else picks up the phone line, then the voltage does decrease a little. In the first steps of planning this out, Xerox suggested getting about a hundred phones all hooked into the same line that could all be taken off the hook at the same time. That would greatly decrease the voltage level. That is also why most three-way connections that are using the bell service three way calling which is only $3 a month) become quite faint after a while. By now, you should understand the basic idea. You have to drain all of the power out of the line so the voltage can not be kept up. I suddenly thought draining of power could quickly short out the F.B.I. voltage machine, because it was only built to sustain the exact voltage necessary to keep the voltage out. For now, imagine this. One of the normal Radio Shack generators that you can go pick up that one end of the cord that hooks into the central box has a phone jack on it and the other has an electrical plug. This way, you can "flash" voltage THROUGH the line, but cannot drain it. So, some modifications have to be done. /-/-/-/-/-/-/-/-/-/-/-/ /-/ The Aqua Box /-/ /-/-/-/-/-/-/-/-/-/-/-/ Materials needed- a BEOC (Basic Electrical Output Socket), like a small lamp type connection, where you just have a simple plug and wire that would plug into a light bulb. - One of cords mentioned above, if you can't find one then construct your own... same voltage connection, but the restrainer must be built in (i.e. the central box) - TWO phone jacks (one for the modem, one for if you are being traced to plug the aqua box into) - Some creativity and easy work. NOTICE: No phones have to be destroyed/modified to make this box, so don't go out and buy a new phone for it! All right, this is a very simple procedure. If you have the BEOC, it could drain into anything, a radio, or whatever. The purpose of having that is you are going to suck the voltage out from the phone line into the electrical applicence so there would be no voltage left to lock you in with. 1)Take the connection cord. Examine the plug at the end. It should have only two prongs, if it has three, still, do not fear. Page 46 MAKE SURE THE ELECTRICAL APPLIANCE IS TURNED OFF unless you wanna become a crispy critter while making this thing. Most plugs will have a hard plastic design on the top of them to prevent you from getting in at the electrical wires inside. Well, get a nice one and remove it. If you want to keep the plug (I don't see why...) then just cut the top off. When you look inside, low and behold, you will see that at the base of the prongs there are a few wires connecting in. Those wires conduct the power into the appliance. So, you carefully unwrap those from the sides and pull them out until they are about and inch ahead of the prongs. If you don't wanna keep the jack, then just rip the prongs out. If you are, cover the prongs with insultation tape so they will not connect with the wires when the power is being dvained from the line. 2)Do the same thing with the prongs on the other plug, so you have the wires evenly connected. Now, wrap the end of the wires around each other. If you happen to have the other end of the voltage cord hooked into the phone, stop reading now, your too fucking stupid to continue. After you've wrapped the wires around each other, then cover the whole thing with the plugs with insulating tape. Then, if you built your own control box or if you bought one, then cram all the wires into the box and reclose it. That box is your ticket out of this. 3)Re-check everything to make sure it's all in place. This is a pretty flimsy connection, but on later models when you get more experienced at it then you can sauder{Solder, my friend} away at it and form the whole device into one big box, with some kind of cheap mattel hand-held game inside to be the power connector. In order to use it, just keep this box handy. Plug it into the jack if you want, but it will slightly lower the voltage so it isn't connected. When you plug it in, if you see sparks, unplug it and restart the WHOLE thing. But if it just seems fine then leave it. Page 47 /-/-/-/-/-/-/-/-/-/ /-/ Using it !! /-/ /-/-/-/-/-/-/-/-/-/ Now, so you have the whole thing plugged in and all... DO NOT USE THIS UNLESS THE SITUATION IS DESPERATE! When the trace has gone on, don't panic, unplug your phone, and turn on the appliance that it was hooked to. It will need energy to turn itself on, and here's a great source... the voltage to keep a phone line open is pretty small and a simple light bulb should drain it all in and probably short the F.B.I. computer at the same time. Happy boxing and stay free! \ater, The Traveler Zer0-g Council of Minds. Call these BBS: /-------------------------------\ ! Little America (507)289-8211! ! Brainstorm (612)345-2815! ! Rogues Gallery (507)282-7974! ! Apple Entertain (507)282-8993! ! City of Atlantis (215)844-8836! ! King's Lair (804)379-8630! ! Static Barrier (312)225-9836! \-------------------------------/ --------------------------------------- FROM TARAN KING AT METAL SHOP (314)432-0756 --------------------------------------- Put up on Cryton by /\/\/ Captain Caveman \/\/\ +44 4 584 7608 - The World of Cryton (UK) - 300/1275/1200/2400 --------------------------------------- Note to Sysops: You can put this material up on your BB, but remember not to put it on view to anyone! & don't change anything. --------------------------------------- Page 48 | 17-JUN-1987 How to make your phone into a cheesebox $$$$$$$$$$-=>Making Your Phone<=-$$$$$$ PAY PHONE $$$$$$$$$$-=>Into a Cheesebox <=-$$$$$$ /=\Typed by:Sir Knight/=\ A Cheesebox (named for the type of box the first one was found in) is a type of box which will, in effect, make your telephone a Pay-Phone.....This is a simple,modernized, and easy way of doing it.... Inside Info: These were first used by bookies many years ago as a way of making calls to people without being called by the cops or having their numbers traced and/or tapped...... How To Make A Modern Cheese Box Ingredients: ------------ 1 Call Forwarding service on the line 1 Set of Red Box Tones The number to your prefix's Intercept operator(do some scanning for this one) How To: ------- After you find the number to the intercept operator in your prefix, use your call-forwarding and forward all calls to her...this will make your phone stay off the hook(actually, now it waits for a quarter to be dropped in)...you now have a cheese box... In Order To Call Out On This Line:You must use your Red Box tones and generate the quarter dropping in...then,you can make phone calls to people...as far as I know, this is fairly safe, and they do not check much...Although I am not sure, I think you can even make credit-card calls from a cheesebox phone and not get traced... Enjoy, and don't get Caught! =><= Sir Knight =><= Head of APPA --- The World of Cryton (UK)--- Page 49 view: box plans<- jack the ripper ************************************** * how to build and use a cheesebox * PAY PHONE #2 ************************************** a cheese box makes your home telephone into a payphone. the method shown below is an easy way of doing it. supplies need.2- ------ one line that has call forwarding. one red box or recording of red box tones. first you need to find out the number to the intercept operator in your prefix. when you have the number to the intercept operator then forward .2alls to her. this makes your phone inoperable until a quarter is deposited i.e. your phone is now a payphone. and to make calls off this line just get your red box or boot up the cat's meow and insert your coins then call. also you must beware.2phreak off this line or they will assume it is a troubled fortress. then they will send someone out to stake out the fortress, and then well i'll just say it'll be pretty hairy! later... jack .2 the ripper (>view: Page 50 | 17-JUN-1987 Brown box plans /-/-/-/-/-/-\-\-\-\-\-\ THREE WAY CALLING <:-\-Brown Box Plans-/-:> \-\-\-\-\-\-/-/-/-/-/-/ (>Introduction<) This is a fairly simple modification that can be made to any phone. All it does is allow you to take any 2 lines in your house and create a party line. So far I have not heard of any problems with it from my friends that have set one up and I have not had any either. There is one thing that you will notice when you are one of the two people who is called by a person with this box. The other person will sound a little bit faint. I could overcome this with some amplifiers but then there wouldn't be very many of these boxes made. I think that the convenience of having two people on line at any one time will make up for the minor volume loss. (>Phone Modification Instructions<) Here is the diagram: KEY:___________________________________ ! PART ! SYMBOL ! ----------------------------------- !BLACK WIRE ! * ! !YELLOW WIRE ! = ! !RED WIRE ! + ! !GREEN WIRE ! - ! !SPDT SWITCH ! _/_ ! ! _/_ ! !VERTICAL WIRE ! ! ! !HORIZONTAL WIRE ! _ ! ----------------------------------- Page 51 * = - + * = - + * = - + * = - + * = - + * ==_/_- + *******_/_++++++ ! ! ! ! ! ! !_____PHONE____! --------------------------------------- In some houses the black and yellow are already wired in others you will have to go out to your box and rewire it. A good way to figure out which line is which is to take the phone you are looking for off the hook. Then you only need to take the red and green wires entering your phone and hook them to the different pairs of red and green going into the house. You can't hurt anything in the phone or telephone by probeing. When you find the pair that you want take the black from your line and attach it to the red of the other line then take the yellow and attach it to the green line. Now you are all set to go. For people with rotary phones you can have one person call you then place the second call out to the other person. Though not a phreakers tool, the brown box can be phun. ___________________________-END-____________________________ o Written by The Doc & Edited by 13th Floor Enterprises 619-420-8678 --- The World of Cryton (UK)--- Page 52 | 17-JUN-1987 Gold box plans MAKE YOURSELF A RELAY LINE (Blueboxing with no risk) GOLD BOX PLANS: COURTESY OF SIR WILLIAM HOW TO BUILD IT _______________ YOU WILL NEED THE FOLLOWING: TWO 10K OHM AND THREE 1.4K OHM RESISTORS, TWO 2N3904 TRANSISTORS, TWO PHOTOCELLS, TWO RED LED'S (THE MORE LIGHT PRODUCED THE BETTER), A BOX THAT WILL NOT LET LIGHT IN, AND RED AND GREEN WIRE. LIGHT FROM THE #1 LED MUST SHING DIRECTLY ON THE PHOTOCELL #1. THE GOLD BOX I MAID NEEDED THE TOP OF THE LED'S TO TOUCH THE PHOTOCELL FOR IT TO WORK. THE SAME APPLIES TO THE #2 PHOTOCELL AND LED 1 :-PHOTOCELL--: : : : :BASE : 1 TTTTT : +LED- TRANSISTOR : TTTTT : : : : -I(-- : :COLLECTOR RED1--< >:--: :-------:-----GREEN2 -I(-- : ----------: : : 2 :-/+/+/-/+/+/-/+/+/-/+/+/ LED 10K 10K 1.4K 1.4K RESISTORES 2 -PHOTOCELL----------------- : : :BASE : TTTTT : TRANSISTOR : TTTTT : : :EMITTER : GREEN1- --------------------------RED2 : : /+/+/ 1.4K Page 53 THE 1.4K RESISTOR IS VERIABLE AND IF THE SECCOND PART OF THE GOLD BOX IS SKIPPED IT WILL STILL WORK BUT WHEN SOMEONE PICKS THE PHONE UP THEY WILL HEAR A FAINT DIAL TONE IN THE BACKGROUND AND MIGHT REPORT IT TO THE GESTOPO ER...(AT&T). 1.4K WILL GIVE YOU GOOD RECEPTION WITH LITTLE RISK OF A GESTOPO AGENT AT YOUR DOOR. NOW THAT YOU HAVE BUILT IT TAKE TWO GREEN WIRES OF THE SAME LENTH STRIP THE ENDS, TWIST TWO ENDS TOGETHER AND CONNECT THEM TO GREEN1 AND PLACE A PEICE OF TAPE ON IT WITH LINE #1 WRITING ON IT. CONTINUE THE PROCESS WITH RED1 ONLY USE RED WIRE. REPEAT WITH RED2 AND GREEN2 BUT CHANGE TO LINE #2. HOW TO INSTALL ______________ YOU WILL NEED TO FIND TWO PHONE LINES THAT ARE CLOSE TOGETHER. LABEL ONE OF THE PHONES LINES LINE #1.CUT THE PHONE LINES AND TAKE THE OUTER COUTING OFF IT. THERE SHOULD BE 4 WIRES CUT THE YELLOW AND BLACK WIRES OFF AND STRIP THE RED AND GREEN WIRES FOR BOTH LINES. LINE #1 SHOULD BE IN TWO PEICES TAKE THE GREEN WIRE OF ONE END AND CONNECT IT TO THE ONE OF THE GREEN WIRES ON THE GOLD BOX. TAKE THE OTHER HALF OF LINE #1 AND HOOK THE FREE GREEN WIRE TO THE GREEN WIRE ON THE PHONE LINE. REPEAT THE PROCESS WITH RED1 AND THE OTHER LINE. ALL YOU NEED TO DO NOW IS TO RIGHT DOWN THE PHONE NUMBERS OF THE PLACE YOU HOOKED IT UP AT AND GO HOME AND CALL IT. YOU SHOULD GET A DIAL TONE!!! IF NOT LEAVE ME A MESSAGE ON THE MODEM MADNESS BBS 516-569-0589 OR TRY CHANGING THE EMITTER WITH COLLECTOR. OH AND HOOKING IT UP TO A PAYPHONE IS A FEDERAL OFFENCE AND IS ILLEAGAL TO PUT ON ANY PHONE. I RECOMMEND YOU SEE YOUR LOCAL POLICE DEPARTMENT BEFORE DOING ANYTHING SAID IN THIS ARTICLE. (HAHAHAHA!!!!!!) U/l'ed to: Static Barrier BBS by Sandman Call These KEWL BBS!! T H E O A S I S [312] 724 - 0346 : H O T E L C A . [312] 234 - 6237 --- The World of Cryton (UK)--- Page 54 | 17-JUN-1987 Crimson box plans (*)*(*)*(*)*(*)*(*) (*) Crimson Box (*) HOW TO MAKE A HOLD BUTTON FOR (*) Plans (*) YOUR PHONE (*)*(*)*(*)*(*)*(*) The Crimson Box is very simple device that will allow you to put someone on hold or make your fone busy with a large amount of ease. You flip a switch and the person can't hear you talking. Flip it back and everything is peechy. (*)*(*)*(*)*(*)*(*)*(*)*(*) (*) Needed Materials (*) (*)*(*)*(*)*(*)*(*)*(*)*(*) [ (1) 100 ohm or less resistor (1) SPDT toggle switch, On-On (3) feet of good wire Wire cutters Solder and soldering iron (*)*(*)*(*)*(*)*(*)*(*)*(*)*(*)*(*) (*) Construction & Schemtaic (*) (*)*(*)*(*)*(*)*(*)*(*)*(*)*(*)*(*) First I will give you the schematic and then I will explain what the hell is going on. [-----------black wire on line----- --------+ red wire on line +--- ______________________ --------)--+/\/\/-green wire---)--- / : . . : . /\ --------)--! yellow wire-------)--- / -)- <--wire is under/:/ ! ! ! / : \_Wire is over(-)/:/ +--!------+ ! | . : . wire . |\/ +----+ ! +----------+ |____________________|| ! ! ! \____________________\ 1 2 3 Ok. The '/\/\/' is the resistor. And '1 2 3' is the switch where the numbers are the poles on the switch. Notice you leave the black and yellow wires alone. You DO NOT cut them! [ Strip the red and green wires so you've got about an inch of bare wire. Solder some of the extra wire and follow the schematic. You should have the resistor on the green wire with an extra piece Page 55 of wire coming from one leg of it. The other leg goes to the other end of the green wire. You should solder the green wire to the left pole of the switch and the red to the middle and the other end of the red to the right pole. Now, lift up the phone. If all you get is an annoying buzz then throw the [switch and you should get a dial tone. If not, don't worry and just follow the instructions and schematic again. _______________________________________ This has been an HMH presentaion-1985 Crimson Box - Written and created by: Dr. D-Code Watch for the upcoming Sand Box _______________________________________ --- The Static Barrier 1200/2400 BBS/AE--- (312) 225-9836 --- The World of Cryton (UK)--- Page 56 | 17-JUN-1987 Pearl box plans THE MULTIPLE TONE GENERATOR TO REPLACE MOST BOXES U/L'ed by The Masked Squirrel Call: The Squirrel's Lair-=> 606-341-8204 1200 only/AE/indv pw Maharaja's Hi-Times 10 MEG BBS C/F <Call> (702)-832-7469 Formatted for 80 columns. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ $$ ***************** $$ $$ * How to make a * $$ $$ ***************** $$ $$ $$ $$ <> Pearl Box <> $$ $$ $$ $$ Written and created by: Dr. D-Code $$ $$ $$ $$ (Sysops may use this information if it's not altered in ) $$ $$ (any way at all) $$ $$ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ The Pearl Box: Definition - This is a box that may substitute for many boxes which produce tones in hertz. The Pearl Box when operated correctly can produce tones from 1-9999hz. As you can see, 2600, 1633, 1336 and other crucial tones are obviously in its sound spectrum. Materials you will need in order to build The Pearl Box: ======================================================== C1, C2::::::::.5mf or .5uf ceramic disk capacitors Q1::::::::::::NPN transistor (2N2222 works best) S1::::::::::::Normally open momentary SPST switch S2::::::::::::SPST toggle switch B1::::::::::::Standard 9-Volt battery R1::::::::::::Single turn, 50k potentiometer R2:::::::::::: " " 100k potentiometer R3:::::::::::: " " 500k potentiometer R4:::::::::::: " " 1meg potentiometer SPKR::::::::::Standard 8-ohm speaker T1::::::::::::Mini transformer (8-ohm works best) Misc.:::::::::Wire, solder, soldering iron, PC board or perfboard, box to contain the completed unit, battery clip Instructions for building The Pearl Box: ======================================== Since the instruction are EXTREMELY difficult to explain in Page 57 words, you will be given a schematic instead. It will be quite difficult to follow but try it any way. There is also a Hi-Res picture you can get that shows the schematic in great detail. (Schematic for The Pearl Box) {It's not really that diffucult to understand. Try it} +-------------+------------+---------+ ! ! \ +--S1---- C1 C2 \ SPKR ! ! + +-------- + + ----+T1 + !\ +---------------+------+ ! b c-------! ! Q1 ! ! e-----S2---+ ! ! ! ! ! B1 ! ! ! ! ! +-------+ !R1 R2 R3 R4! /\/\ /\/\ /\/\ /\/\ +--+ +--+ +--+ Now that you are probably thoroughly confused, let me explain a few minor details. The potentiometer area is rigged so that the left pole is connected to the center pole of the potentiometer next to it. The middle terminal of T1 is connected to the piece of wire that runs down to the end of the battery. Correct operation of The Pearl Box: =================================== You may want to get some dry-transfer decals at Radio Shack to make this job a lot easier. Also, some knobs for the tops of the potentiometers may be useful too. Use the decals to calibrate the knobs. R1 is the knob for the ones place, R2 is for the tens place, R3 if for the hundreds place and R4 is for the thousands place. S1 is for producing the all the tones and S2 is for power. Step 1: Turn on the power and adjust the knobs for the desired tone. (Example: For 2600 hz- R1=0:R2=0:R3=6:R4=2) Step 2: Hit the pushbutton switch and VWALA! You have the tone. If you don't have a tone recheck all connections and schematic. If you still don't have a tone call Brainstorm BBS:612-345-2815, The Bay:415-775-2384 or Pirate's Harbor:617-720-3600 and leave me e-mail stating what the scene is. --------------------------------------------------------------- This has been a High Mountain Hackers presentation - 1985 --------------------------------------------------------------- Shakepeare is currently working on an improved version of the Pearl Box.. look for the ppplans soon! Page 58 | 17-JUN-1987 Silver box plans MAKE SILVER BOX TONES [+>Read: silver boxing =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Ingredients: 1 Blue wire about 1 foot. 1 Gray wire about 1 foot. 1 Brown wire about 1 foot. (Better to overkill....) 1 Single pole/Double throw (SPDT) switch. (Smallest you can find.) 1 Standard bell phone. Tools: 1 Soldering Iron and Solder. 1 flat-tip screwdriver. 1 Very patcient person. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 1: Take the casing off your phone by loosening the two screws underneath it. (Don't take the screws all the way off!) 2: Loosen (But don't remove) the screws on the side of the touch tone keypad. (The ones that attach it to the mounting bracket.) and CAREFULLY remove the keypad from the mounting bracket. 3: You will notice a plastic cover on the keypad; seperate the two halves and get the out of your way. (Don't destroy them, you will need them later.) 4: Now, look at the top of the pad (so the 123 row is facing away, and the *0# row is toward you. Turn over the keypad. You should see a mass of wires, gold plated contacts, discrete components, and two large doughnut shaped black thingies. (These are the coils that make the touch-tone frequencies. All you are going to do is connect the wires that Ma Bell "Forgot" to.) 5: Look at the coil on the left (with 5 solder contacts facing you, rather than being perpendicular to you.) Count over 4 contacts FROM the left (or 2 conacts FROM the right) and solder the GRAY wire to the fourth post FROM the left. 6: Solder the other end of the GRAY wire to the LEFT pole of the SPDT switch. 7: (The point of no return).......... Take a look at the bottom edge of the keypad. You should see a row of three gold plated contacts (to the right of two very large capasitors) look at the one on the left and GENTELY seperate the two touching connectors (They are soldered together with a drop of solder) and spread them apart. Page 59 8: Solder the brown wire to the top contact (The one futhest from you), and solder it to the RIGHT pole of SPDT switch. 9: Now, take the blue wire and solder it to the bottom (Closest)contact. Solder the other end of this wire to the CENTER pole of SPDT switch. *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* DONE *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* 10: Now put you phone back together. (To make it look professonal, make a hole in the plastic top of your phone and stick the SPDT switch through it. Now, (Hopefully) when the switch is in on position you will have a normal phone and when it is in the other position the 3, 6, 9, and # keys (Which are now the A, B, C, and D keys) will magically produce the SILVER BOX TONES! Have Phun and Happy Phreaking, The Devil -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- ==================================== USING A SILVER BOX ----------------------------------- First off, a silver box adds the four extra tones to your phone that Ma Bell never told you about. They go like this: 1 2 3 A 4 5 6 B 7 8 9 C * 0 # D There used to be many places were you could use SILVER BOX tones, but now you can only use it in places were Ma Bell hasn't Page 60 gotten around to replacing her old switchboxes, (4A), or on Autovan. Autovan is a special military phone line, like a mass of private lines hooked together (I think, but I'm not sure). To see if a specific area has the old 4A switchboxes try this test: Call up there directory assistance byusing XXX-555-1212, (Where XXX is the area code you are check out. Now hold down the "D" key as soon as you finish dialing. (If you are using the SILVER BOX that I showed you how to make; Switch to SILVER BOX tones and hold down the "#" key.) The phone should start ringing and the operator will answer. If the operator screams at you to stop pressing your keypad, then hang up and try a diffrent areacode. (This one does not work.) If you get a pulsing tone the you got a good line! Now try out different numbers. 6 and 7 usually form a loop line and two people with SILVER BOXES can talk. But some of these are watched, so DON'T say anything you wouldn't want your mother to hear! I have heard the 213 works but is being watched. Try out of the way states like Iowa, Monatana, Wyoming, ect...(etc) Have Phun, The Devil ==================================== --- The World of Cryton (UK) --- Page 61 | 17-JUN-1987 Red box info You better know HOW TO BUILD AND USE A RED BOX...... what THIS is! =<COURTESY OF -<U.N>->= =<TYPED BY THE MASTER >= ---------------------- THE RED BOX BASICALLY SIMULATES THE SOUND OF COINS BEING DROPPED INTO THE COIN SLOT OF A PAY TELEPHONE. A PAY TELEPHONE GENERATES A BURST OF TWO MIXED FREQUENCIES, 1700 HZ AND 2200 HZ, FOR A SPECIFIC TIME INTERVAL TO DENOTE A NICKLR, DIME, OR QUARTER. A NICKLE IS 1700 HZ +2200 HZ FOR 66 MILLISECONDS. A DIME IS 1700 HZ + 2200 HZ FOR 66 MILLI. SECS. ON, 66 MS. OFF , THEN 66 MS ON AGAIN. FINALLY, A QUARTER IS 1700 HZ+2200 HZ FOR 33,MS ON, 33 MS, OFF, CONTINUOSLY REPEATING FOR 5 TIMES. WHEN USING A RED BOX ON A PAY PHONE, FIRST DEPOSIT A REAL NICKLE (BECAUSE THEY CAN TELL IF THE FIRST ONE IS A REAL ONE OR JUST A TONE), THEN USE THE TONE BURST. YOU CAN BUILD THE CIRCUIT TO GENERATE A NICKLE TONE, THEN RECORD IT AND PLAY IT INTO THE PAY PHONE WITH A WALKMAN CASETTE PLAYER. TO GET THE MAP, SEND $2 DOLLARS TO MASTER WORLD 1609 S. BENTLEY AVE LOS ANGELES, CALIFORNIA 90025 THE MAP HAS MANY FIGURES THAT THE COMPUTER CANNOT PRODUCE. IF YOU HAVE THE MAP , HERE ARE SOME TIPS: ADJUST R1 TO GET 2200 HZ AT POINT A ADJUST R2 " " 1700 HZ " " B PRESS SWITCH FOR 66 MS ON AT SPEAKER THIS SIMULATES A NICKLE THE 555 TIMER-> 66MS TIMER THE 556 DUAL TIMER->2200HZ+1700HZ GENERATOR 741->TIMER OP AMP BUFFER FOR SPEAKER SO REMEMBER IF YOU DON'T HAVE THE MAP SEND TWO DOLLARS TO THE ADDRESS UP ABOVE {{{ My Hertz Generator will make most tones necessary for RED Boxing, so try it first before you go and spend your money.}}} {{{Tell me how you like it....}}} {{{ The generator, that is. }}} Page 62 :%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%: :% %: :% THE GREEN BOX %: :% %: :%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%: The Green Box generates useful tonessuch as COIN COLLECT, COIN RETURN, and RINGBACK. These are the tones that ACTS or the TSPS operator would send to the CO when appropriate. Unfortunately, the green box cannot be used at a fortress station, but must be used by the CALLED party. The tones (hz) are: COIN COLLECT 700 + 1100 COIN RETURN 1100 + 1700 RINGBACK 700 + 1700 Before the called party sends any of these tones, an operator released signal should be sent to alert the MF detectors at the CO. This can be done by sending 900 + 1500 Hz or a single 2600 Hz wink (90 ms) followed by a 60 ms gap and then the appropriate signal for at least 900 ms. Also, do not forget that the initial rate is collected shortly before the 3 minute period is up. :-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-::-:-:-:-:-:-:-:-:-:-: Page 63