home *** CD-ROM | disk | FTP | other *** search
/ The Hacker's Encyclopedia 1998 / hackers_encyclopedia.iso / zines / phrack2 / phrack33.009 < prev    next >
Encoding:
Text File  |  2003-06-11  |  10.4 KB  |  188 lines
  1.                                 ==Phrack Inc.==
  2.  
  3.                 Volume Three, Issue Thirty-Three, File 9 of 13
  4.  
  5.                   /////////////////////\\\\\\\\\\\\\\\\\\\\\
  6.                  ||                                        ||
  7.                  ||  A Real Functioning RED BOX Schematic  ||
  8.                  ||                                        ||
  9.                  ||      Written by: R.J. "BoB" Dobbs      ||
  10.                  ||                                        ||
  11.                   \\\\\\\\\\\\\\\\\\\\\/////////////////////
  12.  
  13. ::What is a Red Box?::
  14.  
  15.      Essentially, the Red Box is a device used to fool the phone company's
  16. computer into thinking coins are deposited into a payphone.  Every time you
  17. drop a coin into a payphone, the phone signals the type of coin inserted with
  18. one or more bursts of a combination of 1700hz and 2200hz.  The tone bursts are
  19. coded as follows:
  20.  
  21. Nickel : One 60 millisecond pulse
  22. Dime   : Two 60 millisecond pulses separated by 60 milliseconds
  23. Quarter: Five 35 millisecond pulses separated by 35 milliseconds
  24.  
  25. ::How to use it::
  26.  
  27.      Simply dial a long distance number (some areas require you to stick in
  28. a genuine nickel first), wait for the ACTS computer to demand your cash, and
  29. press the "deposit" button on the red box for each coin you want to simulate.
  30. The coin signals are coupled from the red box into the phone with a small
  31. speaker held to the mouthpiece.  For local calls, either you must first deposit
  32. a genuine nickle before simulating more coins or place your call through the
  33. operator with 0+xxx+yyyy.  Use some care when the operator is on the line -
  34. sometimes they catch on to your beeper ploy.
  35.  
  36.  ::Circuit Operation::
  37.  
  38.      Each time the pushbutton is pressed, it triggers half of IC1, configured
  39. as a monostable multivibrator to energize the rest of the circuit for a length
  40. of time determined by the setting of the coin selector switch. This in turn
  41. starts the other half of IC1, configured as an astable multivibrator, pulsing
  42. on and off at regular intervals at a rate determined by the 100k pot between
  43. pins 12 and 13.  The output of the astable thus alternately powers of IC2,
  44. configured as a square wave oscillator, providing the required 1700hz and
  45. 2200hz to the op amp which acts as a buffer to drive the speaker.
  46.  
  47. ::Alignment & Testing::
  48.  
  49.      When you are making this thing by no means should you use a 9v AC to DC
  50. adapter! I also suggest not using a bread board. So be careful with that
  51. sodering iron. Both of these things will cause you problems.
  52.      For alignment, a frequency counter is desired but you can use a good
  53. oscilloscope as well. (These are not ABSOLUTELY necessary, but to help.) In
  54. order to figure frequency in Hz with your scope you can use the following
  55. formula.
  56.  
  57.            1          S = The measurement of the wave that is on the display
  58. Hz =   -----------
  59.        S*(T*10^-6)    T = The setting of the time selector (milliseconds)
  60.  
  61.               1
  62. Hz =  ------------------  Hz = 2198
  63.       9.1 * 50ms * 10^-6
  64.  
  65.      Carefully remove IC1 from it's socket. Install a temporary jumper from
  66. +9v supply to pin 14 of IC2 and temporarily disconnect the 0.01uF capacitors
  67. from pins 5 and 9 of IC2. Power up the circuit.  Measuring the output from pin
  68. 5 of IC2 with the frequency counter or scope, adjust the 50k pot between pins 1
  69. and 6 for an output of 1700hz.  Now adjust the 50k pot between pins 8 and 13
  70. for an output of 2200hz from pin 9 of IC2.  Remove the temporary jumper and
  71. re-attach the capacitors to pins 5 and 9 of IC2, and re-insert IC1.  (Note: if
  72. no frequency counter is available, the outputs can be adjusted by ear one at a
  73. time by zero-beating the output tone with a computer generated tone of known
  74. precision.)
  75.      Next, using a multimeter, adjust the 10K pot at the cathode of the
  76. "quarter" diode for resistance of approximately 8K ohms.  (This sets the
  77. difference between the duration of the quarter pulses and those of the
  78. nickel/dime -- fine tuning of this ratio may be necessary durring the latter
  79. stages of alignment; this can be done by ear.)
  80.      Now, temporarily disconnect the wire between pins 5 and 10 of IC1.  Set
  81. coin selector switch in the "N" (nickel) position.  With the oscilloscope
  82. measuring the output from pin 9 of IC1, adjust the 100k pot between pins 12 and
  83. 13 of IC1 for output pulses of 60 millisecond duration.  Reconnect the wire
  84. between pins 5 and 10.  (Note: If no scope is available, adjust the pulse rate
  85. by ear using computer generated tones for comparison.)
  86.      Leave the selector switch in the "N" position. Adjust the 50K pot
  87. labeled "Nickel" for a single beep each time the deposit pushbutton is pressed.
  88.      Next set the coin selector switch to "Dime". Adjust the 50k pot labelled
  89. "Dime" for a quick double beep each time the pushbutton is pressed.
  90.      Finally, set the selector to "Quarter".  Adjust the 50k pot labelled
  91. "Quarter" until exactly 5 very quick beeps are heard for each button
  92. press.  Don't worry if the quarter beeps sound shorter and faster than
  93. the nickel and dime ones. They should be.
  94.  
  95. ::Conclusion::
  96.  
  97.      If all went well to this point, your red box should be completely
  98. aligned and functional.  A final test should now be conducted from a payphone
  99. using the DATL (Dial Access Test Line) coin test.  Dial 09591230 and follow the
  100. computer instructions using the red box at the proper prompts.  The computer
  101. should correctly identify all coins "simulated" and flag any anomalies.  With a
  102. little discretion, your red box should bring you many years of use.  Remember,
  103. there is no such thing as spare change!
  104.  
  105. ::Parts list for Red Box::
  106.  
  107. 2  556 Dual Timer IC's             8 0.01uF Caps
  108. 1  741 Op Amp IC                   2 0.1uF Cap
  109. 2  1N914 Diodes                    1 1.0uF Electrolytic Cap
  110. 5  10k Resistors                   2 10uF Electrolytic Caps
  111. 1  4.7k Resistor                   1 3 Position Rotary Switch
  112. 2  100k Resistors                  1 SPST Toggle Switch
  113. 1  100k PC Mount Pots              1 Momentary Push Button Switch (n/o)
  114. 3  50k PC Mount Pot                1 9v Battery Clip
  115. 1  10k PC Mount Pot                2 14 Pin Dip Socket
  116. 2  50k Multi-Turn Pots             1 8 Pin Dip Socket
  117.  
  118. ::Schematic::
  119.        _
  120. +9__S1/  _____________________________________________________________
  121.         |        |           |          |                   |   S3    |
  122.        R1       R2           |         R3                o  @  o      |
  123.         |___C1___|      _____|          |_________|/___ /   o   \___  |
  124.         |    ____|_____|_____|____      |     |   |\   |    |      _| |
  125.      _| o   |    6     4    14    |    R4    R5    D1  |    |   R9<   |
  126.  S2   | o  _|5                  13|_____|     |        |    |__  |    |
  127.         | | |                     |     |__   g        |      _| |    |
  128.         g |_|10       IC1        8|_      _|           |   R8<   |    |
  129.             |         556         | |__R6<             |__  |    |    |
  130.            _|9                  12|_|                    _| |    |    |
  131.           | |                     | |__C2__g          R7<   |    |    |
  132.           | |_11___3___7___2___1__|                    |    |    |    |
  133.           |    |   |   |   |___|_______________________|____|____|    |
  134.           |    |  C3   |       |                                      |
  135.           |__|/|   |   |      C4                                      |
  136.           |  |\    |   |       |                                      |
  137.           |   D2   g   g       g                                      |
  138.           |_____________________                                      |
  139.                |       |        |                                     |
  140.          ___  R10      |       R11  ___                               |
  141.         v   |  |       |        |  |  v                               |
  142.       __R12 |__|    ___|___     |__| R13__                            |
  143.      |        _|___|___|___|____|_        |                           |
  144.      |       | 1   4  14  10   13 |       |                           |
  145.      |       |                    |       |                           |
  146.      |_______|6                  8|_______|                           |
  147.      |    |  |        IC2         |  |    |                           |
  148.     C5    |__|2       556       12|__|   C6                           |
  149.      |       |                    |       |                           |
  150.      g     __|3                 11|__     g                           |
  151.           |  |_____7___5___9______|  |                                |
  152.          C7        |   |   |        C8                                |
  153.           |        |  C9  C10        |                                |
  154.           |        |   |___|         |                                |
  155.           g        g     |           g                                |
  156.                          |                                            |
  157.                          |            ________________________________|
  158.                          |           |                 |
  159.                          |          R14                |
  160.                          |           |           |\    |
  161.                          |           |           |  \  |
  162.                          |___________|___________|3   \|
  163.                          |           |           |    7 \
  164.                        C11          R15          |IC3     \
  165.                          |           |           |741    6/___
  166.                          g           g           |    4 /     |
  167.                                                  |    /|      |
  168.                           g_[speaker]___C12______|2 /  |      |
  169.                                               |  |/    g      |
  170.                                               |_______________|
  171.  
  172. ::Schematic Parts Code::
  173.  
  174. R1:10K          R4:10K          R7:50K pot      R10:10K         R13:50K pot
  175. R2:10K          R5:10K          R8:50K pot      R11:10K         R14:100K
  176. R3:4.7K         R6:100K pot     R9:50K pot      R12:50K pot     R15:100K
  177.  
  178. C1:0.01uf       C4:10uf         C7:0.01uf       C10:0.01uf
  179. C2:1.00uf       C5:0.01uf       C8:0.01uf       C11:0.10uf      D1 :1N914
  180. C3:0.01uf       C6:0.01uf       C9:0.01uf       C12:10uf        D2 :1N914
  181.  
  182. S1 - SPST toggle
  183. S2 - Momentary push button Normally Open
  184. S3 - 3-position rotary switch                   g - Ground
  185.  
  186. \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\?///////////////////////////////////////
  187.                                                                         
  188.