textfiles/phreak/fuckmabe.phk

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%   Some ways to fuck up	%
%	   Ma Bell		%
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

  Well, my first attempt at writing a phreak file here. It might be pretty lame,
but I'll list some 950 extendors for those that dare to use them (hehe.) Well,
while you're at it, call these BBS's.
  Brainstorm (612)345-2815  Little America (507)289-8211 Ok, here we go:

   Phreaking (free-king). n. The art of using limited supplies of codes,
systems, accounts, and boxes to insure the fact that you will not have to pay a
dime of an expensive long distance call. There are many ways of doing this and
some are listed here.

   1)Boxes. Boxing is the method of using electronical impulses or non- impulses
to fool the phone company into thinking that the call had never been made or
that there was no answer. Here are a few boxes and their function to you.

    Red Box: Simulates the noise of a quarter dropping into a payphone. Blue
    Box: Simulates the operator tone and gives you control of operator. Beige
    Box: Allows you to control your neighborhood. Purple Box: Reduces all long
    distance calls to local. Cheese Box: Destroys traces. Black
    Box:(famous)Makes the operator think the phone wasn't answered.

     All right, I can probably get you the plans for any of those boxes, contact
me about it and I'll look.

   2)LDX Codes: The most popular type of phreaking. You simply get an extendor
that can be local or an 800 number (watch out for LATA), and use it to access a
code base. You will get a tone, and at that tone you use a touchtone phone, or
even a modem, to enter the code. Then, after the code, you simply dial '1' and
the number. Some lines, however, like 1-800-437-3478 will have you dial a '9'
before the number. This is also an easy way to check for errors, and you can
read why later on.

      Hear are some companies to be familiar with.

    1)Sprint- The same people who spent a billion dollars making your
connections clearer spent another half billion on security... then switched to a
950 (read about this later) and installed ANI. ANI, or Automatic Number
Identification, will immediately "trace" the number to it's source. Therefor,
with systems employing ANI, the person owning the account will see the number of
the caller and callee, and the length of the call next to the amount charged for
the call.

    2)MCI- MCI is the leading company for long distance today. Their numbers are
everywhere. I'll list one or two of them later. It is incredibly easy to hack
their codes, since there are many of them, but most numbers are under constant
monitoring. You could go out and hack plenty of codes some night and have that
be the only night that they work.

    3)Us Telecom- My personal favorite. They do have a 950, but as far as I know
the codes are universal. ANI is NOT employed by Us Telecom, despite the popular
rumor, so fear not. I am still seeking an 800 number for them, and I'm sure I'll
find one soon.

    4)Metro- Incredibly common company. An absolute phreak out. They have shit
for security and I don't know a singl person that has ever been busted for using
one of them. They, also, I might list later.

   Well, those are the four major companies that this G-File will discuss a bit;
phone phreaking with codes is the bulk of this G-File, so lets explore some more
things you should know before we continue...

    1)ESS- Electronic Switching System. It is definately the most used system
for phones used today. Most people wonder exactly what it does do, so here's a
breif history/description: ESS has only recently been added to most areas of the
country. If you live in places like Wyoming, Montana, and some other states in
that area, you should know that ESS is not in service yet, you have Step by Step
switching. It is far less sofisticated than ESS; ESS is the only system now that
can support ANI. So if you live in areas controlled by Step by Step Switching,
then phreak without fear for now... 800's are fairly safe for you. 800's are not
safe with ESS, because ANI can immediately trace so you are busted. With 950
extendors, however, ESS is employed with only a few, such as Skylines
(950-1088).

    2)ANI- Automatic Number Identification. Phreakers bane. See the above
section for some places where ANI and ESS are employed. Places using ANI are
clearly spending alot of money on their lines. ANI is the one and only system
that not only lists the callee, but also the caller. So if you are using Skyline
or something, it will clearly show up that you used someone else code to call a
number. Both numbers will be on file. Fortunatley, that evidence CANNOT show up
in court, they would have to set up a trap for you, checking to see who's code
was used and then setting up a trace to prove that you in fact used the code.

    3)PBX- Private Branch Exchange. Better known as a teleconference. And I can
tell you that they are a trip! Although they aren't very easy to use, and most
have 20 digit codes, they are worth it. Unfortunately, a normal type PBX cannot
be used with a carrier to make a conference on modem, special PBX's are
available that will let you do so, however. I don't have any yet but when I do I
will have FUN!

    4)LATA- Local Access and Transport Area. LATA is employed for when you call
an area in your area code and then find that you are billed not full but about
3/4ths of the long distance rate. That way, even though you could assume that a
"local" extendor would cost you nothing to call, it could cost you alot of
money.

    5)CN/A- A hackers complete tool. It allows you, with a persons name and the
general area that he lives in, identify his phone number. Example: Lets just say
you met someone at a wild party and didn't get their phone number. A normal
person would be left in the dark, but someone with knowledge of CN/A would just
call (local prefix)-555-1212 and ask for any listings on (insert name.) This is
useful to hackers because they could see a company like "Protovision" (this is a
thing out of WarGames), call 555-1212, ask to be connected to that area codes
information, ask for any listings for that number. If none come up, he simply
asks for all of the prefixes and sets an auto carrier hunter (like WarGames
Dialer ][) out on all the prefixes. When he checks in it will tell him all of
the numbers with carriers attached and he can seek them out until he finds what
he's looking for.

   All right, memorize those terms, they are important in the life of a
"telecommunications hobbiest." Now that you know those, let us examine some
other things called extendors...

    1)LDX- Long Distance Extendor. They are phone numbers rented out by Us
Telecom, Sprint or whoever, that will let you make phone calls for a cheaper
rate than AT&T. When you call these numbers, you will get some sort of tone that
indicates that you should enter your code now. After that, you must dial in the
number. These companies will use their switching systems to "switch" you from
the extendor to the number you are calling. Then they will meter the length of
the call and bill you for along their own rates rather than AT&T's. This way you
won't have to go through the trouble of direct billing and that sort of stuff.
Be warned! Even if you are extremely desperate, don't use one code for more than
three weeks! By the time someone gets the bill they might set up a trap for that
number and bill you directly. In other words, every time anyone makes a call
from that number using that code they will switch them over to AT&T to pay their
full rates. If that happens, consider yourself lucky that the person who's
account you were using isn't pressing charges, though sometimes they will even
after that. Now, LDX's come in a few forms...

     1)800's. Most 800's employ ANI, so it is dangerous unless you live in a
part of the country listed above or are in a town with no local extendors. At
that point you can probably tell that they aren't employing ESS yet so you need
not worry about using it.

     2)True Locals- Most true locals include your area code and your prefix.
They could be anywhere... for instance, I found an MCI extendor at the number
(215)563-9818 the other day while scanning the area of my favorite BBS. The best
way to discover a local extenor surely is one of two things: ask around till you
find it, or, the best and seemingly most dangerous way, get an account with the
company. If you never use it and/or destroy the number, you could find out the
extendor and hack away.

     3)950's. Most people wince or blemish at the thought of using a 950
extendor. Actually, a few are not as dangerous as they might seem. You can
safely use some 950's, but usually check them out with one of your friends
first, because you never know what could be running them. A few 950's will be
listed later, and many of them go by the same pattern, so are easy to find out.

  After all this, you must have something to be able to tell all of your f
friends about. This isn't much, but here are a few extendors to start you off
with. With these in mind, you should have a successful start to using codes as a
phreak.

 950-1033  950-1044  950-1088  1-800-437-3478  1-800-345-0008  1-800-547-6754
 565424 	      (none)
 473464 	     571-091			 565426
 444670 		-106			 565489
 444737                 -123                     (that's it)
 392056 		-127
 --------  --------  --------  --------------  --------------  --------------
 That should give you a small start to LDX Codes.

 Well, that should give you an idea for the beginning phreaker... this sort of
guide should be distributed to anyone who needs it, feel free to leech... it's
worth it. In the mean time, call these BBS's with a couple of those nice little
phreaks you have their...

 Brainstorm  (612)345-2815
 Little America  (507)289-8211
 Missing Link  (806)799-0016 (phreak BBS)
 Phreak Klass  (215)673-6763 (phreak BBS)
 Private Sector  (412)379-8630

 Later,
The Traveler


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%  Some Way to fuck up Ma Bell:  %
%      The Advanced Course	 %
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

  Yes, it has returned quickly basically because I had nothing else to do. Be
sure, before you start reading this that you have read the original Some Ways to
Ftck up Ma Bell, or that you are very aquanted to terms such as ESS, LATA, PBX,
SXS, XBAR, ANI, and CN/A. Also you must be familiar with the different ways that
companies present their code sequences.

  All right, no breif review here... just hopping right in.

  1)Boxes, cont. According to the first G-File in this series, boxes are devices
that make strange electrical impulses that can be used to confuse operators.
Now, when you listen to your phone, it can make three nice basic tones. These
tones are available to all, and were designed so they could be used by anyone.
In army security, however, there is a fourth tone that a phone cannot make
unless it is a designed military phone. In other words, you could call a high
security computer, and it would require a different tone to even make te
connection. Now, of course, this is where probably the most crucial box, known
as the silver box, would come in.

    Another tone you must know at this time is Autovon. That is the basic system
that allows the silver box to manipulate the army tones. This special service is
the "trigger" (no pun intended) for the army's military computers. In order to
use it, however, you must be standing by a touchtone phone, with your computer
nearby. You dial the number (if your not phreaking it, stop reading this now)
and wait. When you get the tone, you should have some sort of external button
(different box makers have different ways of designing the outside of the boxes)
to press. If the tones are matching, then you will pass through the security and
will probably recieve a carrier or maybe another tone or code sequence. True
hackers will keep going despite everything though... however, if you want to be
a hacker, you are reading the wrong G-File.
  2)Codes, cont. Now, you can now be the basic code leecher. If you are taking
this advanced section here seriously (i.e. not someone who looks down on me
reading it to see how much old Trav knows) then from this point on thou shalt
not leech codes off of BBS's. Code leechers are the lowest form of phreaker. The
only instance you should code leech is when a friend of yours just hacked out an
entire thousand codes on some service. Phreakers shouldn't ask for the codes,
they should wait and see if they are granted to them or not. Phreakers don't say
please. The say "hey, sure, I'll take some codes!" Otherwise, you have to
realize this much: few dedicated phreakers are kind enough to post their codes
for all to take as soon as they hack them. Most phreakers will wear them out,
waiting until the person they are billing calls to gets his first phone bill...
and then they post them. By that time, there could be a trap up for phreakers
and you could get snagged. So you'll have to get your own codes. There are a
couple of ways to do that...

    1)A phreak hacker: These useful programs are easily obtained. Usually a
separate program is needed for every modem type, but what they do is all the
same. The program will dial the number, and then start with the number you want
it to start with, and end with another number you select. Along the way, it will
pick up all the working codes by dialing some nonsense number like 111-111-1111.
Then it will see if it gets a basic "incorrect code" or an "the number is not is
service." If it is the former, then it won't record it; if it is the latter then
it will save it on disk or print it out on printer.

    2)By Hand- Although many people will call me insane, I believe that this is
the better way of hacking phreaks. The dialer could alert the computer or
operator of someone hacking codes. If you remain fairly random with manual
hacking you will probably get the same amount as before.

 All right, next on the hit list is another basic function of phreaking that
wasn't mentioned in the last G-File... the real and proper use of a red box
pitted against the huge guidence system called...

  1)ACTS- Automatic Coin Toll Service. ACTS is the main reason why we can't make
free calls from payphones. You think of the payphone. It has a single slot the
goes down the a small container for coins inside it that can be opened only with
a special key. We all know this much: it isn't the weight of the coin inside the
coin container the determines whether a coin has been deposited, it listens to
the clinks inside. The next time you make a call from a pay phone, listen
carefully to the sound of the coin being deposited. If you are inserting a
quarter, you will hear three clicks before the coin lands in the coin container.
With a dime, you will hear two. With a nickel, only one. There is a good reason
for that, and it is this: The coins are going through a special weighted device
that listens for clicks along the way. So if there is a series of clicks then,
the phone will assume that you deposited that much money into it. Therefor, if
you called someone who has a program like the classic "Cat's Meow", they could
give you some change from their own side. But that isn't the point of this. The
red box is. The red box can emulate the sound of a quarter inserting into a
payphone. It is not as difficult as it might seem. It is merely hooked into the
machine, and then, when a small catch is pulled, it makes that noise. Believe it
or not, at an electronics- computer summer camp I went to, someone rigged a
payphone there with a red box from the back of it; so if you knew about the
lever there you could pull it and make free calls anywhere (and you should have
seen the rest of the camp! Whew!). If you want the plans for a red box or the
silver box noted above, I know I have my silver box plans right on hand here,
and I'm sure I could dig up red box plans when they are asked for.

   The whole purpose of this was to give you an understanding of the way the
payphone works every time you insert a quarter. May you never have to do it
again!

 Now, this is a section about operatiing systems for the DECs.

  1)DEC- Digital Equiptment Corporation.

    These are a few operating system for the Digital Equiptmenre run on. If you
easier to use.

   1)DCL-Digital Command Language. These are usually found on most VAX and VMS
systems. The command language is basically made up of code sequences as an
operating system.

   2)VMS- A DEC operating system run on a Vax Minicomputer.

   3)EDT- An editor found on many DEC systems that, to put it mildly, is far
less than ideal.

  To find out more about DEC and it's operating systems, be prepared for the
next one in this series! I only briefly mentioned it here because it is not an
easy thing to learn about. So if your curiosity is really bugging you, then
leave me mail and I'll write faster.

  Now, away from the DEC's. Lets take a nice look at another factor that in the
near future might become another base for telecommunicatios...

   1)CCIS- Common Channel Interoffice Signaling. Some people might call it an
intercom. But the basis of this is much more important than calling in a person
from the next room. It can already be employed onto a sort of tele- conference
type conversation. Because of the open channel, any number of people can be on
the same line as long as they are on the same portal type. In the near future
CCIS could grow into a major factor in telecommunications just for the clear
teleconference channels it could open.

     Right now, CCIS is just that, a common chanel INTEROFFICE signaling system.
Except for certain area where it can be employed across a couple houses in
length, it seems to be staying there for now. Because you have to remember this
much: you can dial into it, but not easily. They could have some sort of base
number to call that anyone else could call into. That way anyone could be on
conference. Then again, a PBX is a PRIVATE Branch Exchange, so it is far more
versitile at the tioe being.

  On to bigger and better things for now... I think I covered just about
everything I was supposed to cover in today, so I guess I'll shove off. Until ne

Later,
The Traveler
Call The Works BBS - 1600+ Textfiles! - [914]/238-8195 - 300/1200 - Always Open