1265 lines
64 KiB
Plaintext
1265 lines
64 KiB
Plaintext
|
||
|
||
|
||
*================================*
|
||
[# #]
|
||
[# THE PHREAKER'S HANDBOOK #1 #]
|
||
[# #]
|
||
*================================*
|
||
|
||
|
||
**** An Official Phortune 500 Product ****
|
||
|
||
----------------------------------------------
|
||
a useful source for the phreaker covering both
|
||
the basics and advances of phreaking
|
||
----------------------------------------------
|
||
|
||
|
||
|
||
|
||
|
||
|
||
GENERAL NOTE
|
||
------------
|
||
The purpose of this newsletter is purely educational. It has
|
||
been released in order to teach and advance the knowledge of
|
||
today's declining phreaks. However, the author does not take
|
||
any responsibility over the misuse of the herein contained
|
||
information, and the newsletter itself does not encourage or
|
||
support the above type of activity. Also, any wrong or old
|
||
information in this document is not to the responsibility of
|
||
the author, and the reader accepts any consequences due to
|
||
information that may be mistaken in this manner.
|
||
|
||
|
||
NOTE TO ABUSERS
|
||
---------------
|
||
All information contained within this document was intended
|
||
towards educational purposes. Any misuse or illegal use of
|
||
the information contained in this document is strictly at
|
||
the misuser's risk. The author assumes NO responsibility
|
||
of the reader's actions following the release this document
|
||
(in otherwords, you're on your own if you get nailed!)
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
TPH Issue #1, Volume 1 Release Date::July 3, 1989
|
||
|
||
WRITTEN BY::DOCTOR DISSECTOR
|
||
[Phile 1.2]
|
||
|
||
|
||
TPH #1 Table Of Contents:
|
||
=========================
|
||
|
||
Title Page & Disclaimer Notes............................. 1.1
|
||
|
||
Table Of Contents & Introduction.......................... 1.2
|
||
|
||
The Phreak's Vitals....................................... 1.3
|
||
True Definition Of The Phreaker
|
||
The Phone Phreak's Ten Commandments
|
||
|
||
The Phreaker's Glossary................................... 1.4
|
||
|
||
Other Fone Information.................................... 1.5
|
||
Voltages & Technical Stuff
|
||
Scanning Phun Fone Stuff
|
||
|
||
References & Suggested Reading............................ 1.6
|
||
|
||
|
||
|
||
Introduction To TPH #1
|
||
======================
|
||
This phile was written for beginning as well as those uninformed
|
||
"advanced" phreaks who need something as a reference when reading or
|
||
writing philes concerning phreaking or fone phraud. Of course, you could be
|
||
a beginning phreak and use this phile to B.S. your way into a big group by
|
||
acting like you know a lot, or something, but that is up to you. Anyway, I
|
||
compiled this listing phrom various sources, the majority is listed as
|
||
references at the end of this phile.
|
||
|
||
This phile's only goal is to educate and inform. Any illegal or
|
||
fraudulent activity is neither encouraged nor supported by the author of
|
||
this phile, not by the majority of the >TRUE< phreaking community. The
|
||
author assumes NO responsibility for the actions of the reader.
|
||
|
||
Also, I know that some of the stuff covered in this release of TPH
|
||
will be old and outdated; however, I will try to clean that up by the next
|
||
release of TPH, and will notify you, the reader, of the changes due to
|
||
these revisions.
|
||
[Phile 1.3]
|
||
|
||
|
||
The Phreak's Vitals:
|
||
====================
|
||
|
||
True Definition Of The Phreaker
|
||
-------------------------------
|
||
"Many people think of phone phreaks as slime, out to rip off Bell for
|
||
all she is worth. Nothing could be further from the truth! Granted, there
|
||
are some who get their kicks by making free calls; however, they are not
|
||
true phone phreaks. Real phone phreaks are 'telecommunications hobbyists'
|
||
who experiment, play with, and learn from the phone system. Occasionally,
|
||
this experimenting and a need to communicate with other phreaks, without
|
||
going broke, leads to free calls. The free calls are but a small subset of
|
||
a >TRUE< phone phreak's activities."
|
||
|
||
- Wise Words Of The Magician
|
||
|
||
|
||
The Phone Phreak's Ten Commandments
|
||
-----------------------------------
|
||
I. Box thou not over thine home telephone wires, for those who doest
|
||
will surely bring the wrath of the Chief Special Agent down upon thy head.
|
||
II. Speakest thou not of important matters over thine home telephone
|
||
wires, for to do so is to risk thine right of freedom.
|
||
III. Use not thine own name when speaking to other phreaks, for that
|
||
every third phreak is an FBI agent is well known.
|
||
IV. Let not overly many people know that thy be a phreak, as to do so
|
||
is to use thine own self as a sacrificial lamb.
|
||
V. If thou be in school, strive to get thine self good grades, for the
|
||
authorities well know that scholars never break the law.
|
||
VI. If thou workest, try to be an employee and impressest thine boss
|
||
with thine enthusiasm, for important employees are often saved by their own
|
||
bosses.
|
||
VII. Storest thou not thine stolen goodes in thine own home, for those
|
||
who do are surely non-believers in the Bell System Security Forces, and are
|
||
not long for this world.
|
||
VIII. Attractest thou not the attention of the authorities, as the
|
||
less noticeable thou art, the better.
|
||
IX. Makest sure thine friends are instant amnesiacs and willst not
|
||
remember thou hast called illegally, for their cooperation with the
|
||
authorities willst surely lessen thine time for freedom on this earth.
|
||
X. Supportest thou TAP, as it is thine newsletter, and without it, thy
|
||
work would be far more limited.
|
||
|
||
[Phile 1.4]
|
||
|
||
|
||
The Phreaker's Glossary
|
||
=======================
|
||
1XB - No.1 Crossbar system. See XBAR for more information.
|
||
|
||
2600 - A hack/phreak oriented newsletter that periodically was
|
||
released and still is being released. See Phile 1.6 for more information on
|
||
the magazine and ordering.
|
||
|
||
4XB - No.4 Crossbar system. See XBAR for more information.
|
||
|
||
5XB - No.5 Crossbar system. The primary end office switch of Bell
|
||
since the 60's and still in wide use. See XBAR for more detail.
|
||
|
||
700 Services - These services are reserved as an advanced forwarding
|
||
system, where the forwarding is advanced to a user-programed location which
|
||
could be changed by the user.
|
||
|
||
800 Exceptional Calling Report - System set up by ESS that will log
|
||
any caller that excessively dials 800 numbers or directory assistance. See
|
||
ESS for more information.
|
||
|
||
800 Services - Also known as WATS. These services often contain WATS
|
||
extenders which, when used with a code, may be used to call LD. Many LD
|
||
companies use these services because they are toll-free to customers. Most
|
||
800 extenders are considered dangerous because most have the ability to
|
||
trace.
|
||
|
||
900 Services - Numbers in the 900 SAC usually are used as special
|
||
services, such as TV polls and such. These usually are $.50 for the first
|
||
minute and $.35 for each additional minute. Dial (900)555-1212 to find out
|
||
what the 900 services currently have to offer.
|
||
|
||
950 - A nationwide access exchange in most areas. Many LD companies
|
||
have extenders located somewhere on this exchange; however, all services on
|
||
this exchange are considered dangerous due to the fact that they ALL have
|
||
the ability to trace. Most 950 services have crystal clear connections.
|
||
|
||
ACCS - Automated Calling Card Service. The typical 0+NPA+Nxx+xxxx
|
||
method of inputting calling cards and then you input the calling card via
|
||
touch tones. This would not be possible without ACTS.
|
||
|
||
ACD - Automatic Call Distributor.
|
||
|
||
ACD Testing Mode - Automatic Call Distributor Test Mode. This level of
|
||
phreaking can be obtained by pressing the "D" key down after calling DA.
|
||
This can only be done in areas that have the ACD. The ACD Testing Mode is
|
||
characterized by a pulsing dial tone. From here, you can get one side of a
|
||
loop by dialing 6, the other side is 7. You may also be able to REMOB a
|
||
line. All possibilities of the ACD Test have not been experimented with.
|
||
See silver box for more details.
|
||
|
||
ACTS - Automated Coin Toll Service. This is a computer system that
|
||
automates phortress fone service by listening for red box tones and takes
|
||
appropriate action. It is this service that is commonly heard saying, "Two
|
||
dollars please. Please deposit two dollars for the next three minutes."
|
||
Also, if you talk for more than three minutes and then hang up, ACTS will
|
||
call back and demand your money. ACTS is also responsible for ACCS.
|
||
|
||
Alliance - A teleconferencing system that is apart from AT&T which
|
||
allows the general public to access and use its conferencing equipment. The
|
||
equipment allows group conversations with members participating from
|
||
throughout the United States. The fone number to Alliance generally follows
|
||
the format of 0-700-456-x00x depending on the location the call originates
|
||
from and is not accessible direct by all cities/states.
|
||
|
||
AMA - Automated Message Accounting. Similar to the CAMA system; see
|
||
CAMA for more info.
|
||
|
||
analog - As used for a word or data transmission, a continuously
|
||
varying electrical signal in the shape of a wave.
|
||
|
||
ANI - Automatic Number Identification - This is the system you can
|
||
call, usually a three digit number or one in the 99xx's of your exchange,
|
||
and have the originating number you are calling from read to you by a
|
||
computer. This is useful if you don't know the number you are calling from,
|
||
for finding diverters, and when you are playing around with other fone
|
||
equipment like cans or beige boxes. The ANI system is often incorporated
|
||
into other fone companies such as Sprint and MCI in order to trace those
|
||
big bad phreaks that abuze codez.
|
||
|
||
ANIF - Automatic Number Identification Failure. When the ANI system of
|
||
a particular office fails.
|
||
|
||
APF - All PINs Fail. This is a security measure which is designed to
|
||
frustrate attempts at discovering valid PINs by a hacking method.
|
||
|
||
aqua box - A box designed to drain the voltage of the FBI lock-in-
|
||
trace/trap-trace so you can hang up your fone in an emergency and
|
||
phrustrate the Pheds some more. The apparatus is simple, just connect the
|
||
two middle wires of a phone wire and plug, which would be the red and green
|
||
wires if in the jack, to the cord of some electrical appliance; ie, light
|
||
bulb or radio. KEEP THE APPLIANCE OFF. Then, get one of those line
|
||
splitters that will let you hook two phone plugs into one jack. Plug the
|
||
end of the modified cord into one jack and your fone into the other. THE
|
||
APPLIANCE MUST BE OFF! Then, when the Pheds turn their lame tracer on and
|
||
you find that you can't hang up, remove your fone from the jack and turn
|
||
the appliance ON and keep it ON until you feel safe; it may be awhile. Then
|
||
turn it off, plug your fone back in, and start phreaking again. Invented
|
||
by: Captain Xerox and The Traveler.
|
||
|
||
BAUDOT - 45.5 baud. Also known as the Apple Cat Can.
|
||
|
||
BEF - Band Elimination Filter. A muting system that will mute the 2600
|
||
Hz tone which signals hang-up when you hang up.
|
||
|
||
beige box - An apparatus that is a home-made lineman's handset. It is
|
||
a regular fone that has clips where the red and green wires normally
|
||
connect to in a fone jack. These clips will attach to the rings and tips
|
||
found in many of MA's output devices. These are highly portable and VERY
|
||
useful when messing around with cans and other output devices the fone
|
||
company has around. Invented by: The Exterminator and The Terminal Man.
|
||
|
||
BITNET - Nationwide system for colleges and schools which accesses a
|
||
large base of education-oriented information. Access ports are always via
|
||
mainframe.
|
||
|
||
bit stream - Refers to a continuous series of bits, binary digits,
|
||
being transmitted on a transmission line.
|
||
|
||
black box - The infamous box that allows the calling party to not be
|
||
billed for the call placed. We won't go in depth right now, most plans can
|
||
be found on many phreak oriented BBS's. The telco can detect black boxes if
|
||
they suspect one on the line. Also, these will not work under ESS.
|
||
|
||
bleeper boxes - The United Kingdom's own version of the blue box,
|
||
modified to work with the UK's fone system. Based on the same principles.
|
||
However, they use two sets of frequencies, foreword and backwards.
|
||
|
||
Blotto box - This box supposedly shorts every fone out in the
|
||
immediate area, and I don't doubt it. It should kill every fone in the
|
||
immediate area, until the voltage reaches the fone company, and the fone
|
||
company filters it. I won't cover this one in this issue, cuz it is
|
||
dangerous, and phreaks shouldn't destroy MA's equipment, just phuck it up.
|
||
Look for this on your phavorite BBS or ask your phavorite phreak for info
|
||
if you really are serious about seriously phucking some fones in some area.
|
||
|
||
blue box - An old piece of equipment that emulated a true operator
|
||
placing calls, and operators get calls for free. The blue box seizes an
|
||
open trunk by blasting a 2600 Hz tone through the line after dialing a
|
||
party that is local or in the 800 NPA so calls will be local or free for
|
||
the blue boxer. Then, when the blue boxer has seized a trunk, the boxer may
|
||
then, within the next 10-15 seconds, dial another fone number via MF tones.
|
||
These MF tones must be preceded by a KP tone and followed with a ST tone.
|
||
All of these tones are standardized by Bell. The tones as well as the inter-
|
||
digit intervals are around 75ms. It may vary with the equipment used since
|
||
ESS can handle higher speeds and doesn't need inter-digit intervals. There
|
||
are many uses to a blue box, and we will not cover any more here. See your
|
||
local phreak or phreak oriented BBS for in depth info concerning blue boxes
|
||
and blue boxing. Incidentally, blue boxes are not considered safe anymore
|
||
because ESS detects "foreign" tones, such as the 2600 Hz tone, but this
|
||
detection may be delayed by mixing pink noise of above 3000 Hz with the
|
||
2600 Hz tone. To hang up, the 2600 Hz tone is played again. Also, all blue
|
||
boxes are green boxes because MF "2" corresponds to the Coin Collect tone
|
||
on the green box, and the "KP" tone corresponds to the Coin Return tone on
|
||
the green box. See green box for more information. Blue boxing is
|
||
IMPOSSIBLE under the new CCIS system slowly being integrated into the Bell
|
||
system.
|
||
|
||
blue box tones - The MF tones generated by the blue box in order to
|
||
place calls, emulating a true operator. These dual tones must be entered
|
||
during the 10-15 second period after you have seized a trunk with the 2600
|
||
Hz tone.
|
||
700: 1 : 2 : 4 : 7 : 11 : KP= Key Pulse
|
||
Parallel Frequencies 900: ** : 3 : 5 : 8 : 12 : ST= STop
|
||
2= Coin Collect 1100: ** : ** : 6 : 9 : KP : KP2= Key Pulse 2
|
||
KP= Coin Return 1300: ** : ** : ** : 10 :KP2 : **= None
|
||
(green box tones) 1500: ** : ** : ** : ** : ST :
|
||
: 900:1100:1300:1500:1700: 75ms pulse/pause
|
||
|
||
BLV - Busy Line Verification. Allows a TSPS operator to process a
|
||
customer's request for a confirmation of a repeatedly busy line. This
|
||
service is used in conjunction with emergency break-ins.
|
||
|
||
BNS - Billed Number Screening.
|
||
|
||
break period - Time when the circuit during pulse dialing is left
|
||
open. In the US, this period is 40ms; foreign nations may use 33ms break
|
||
periods.
|
||
|
||
break ratio - The interval pulse dialing breaks and makes the loop
|
||
when dialing. The US standard is 10 pulses per second. When the circuit is
|
||
opened, it is called the break interval. When the circuit is closed, it is
|
||
called the make interval. In the US, there is a 60ms make period and a 40ms
|
||
break period. This is often referred to as a 60% make interval. Many
|
||
foreign nations have a 67% make interval.
|
||
|
||
bridge - I don't really understand this one, but these are important
|
||
phreak toys. I'll cover them more in the next issue of TPH.
|
||
|
||
British Post Office - The United Kingdom's equivalent to Ma Bell.
|
||
|
||
busy box - Box that will cause the fone to be busy, without taking it
|
||
OFF-HOOK. Just get a piece of fone wire with a plug on the end, cut it off
|
||
so there is a plug and about two inches of fone line. Then, strip the wire
|
||
so the two middle wires, the tip and the ring, are exposed. Then, wrap the
|
||
ring and the tip together, tape with electrical tape, and plug into the
|
||
fone jack. The fone will be busy until the box is removed.
|
||
|
||
cans - Cans are those big silver boxes on top of or around the
|
||
telephone poles. When opened, the lines can be manipulated with a beige box
|
||
or whatever phun you have in mind.
|
||
|
||
calling card - Another form of the LD service used by many major LD
|
||
companies that composes of the customers fone number and a PIN number. The
|
||
most important thing to know when questioned about calling cards are the
|
||
area code and the city where the calling card customer originated from.
|
||
|
||
CAMA - Centralized Automatic Message Accounting. System that records
|
||
the numbers called by fones and other LD systems. The recording can be used
|
||
as evidence in court.
|
||
|
||
CC - Calling Card.
|
||
|
||
CC - Credit Card.
|
||
|
||
CCIS - Common Channel Inter-office Signaling. New method being
|
||
incorporated under Bell that will send all the signaling information over
|
||
separate data lines. Blue boxing is IMPOSSIBLE under this system.
|
||
|
||
CCITT - The initials of the name in French of the International
|
||
Telegraph and Telephone Consultative Committee. At CCITT representatives of
|
||
telecommunications authorities, operators of public networks and other
|
||
interested bodies meet to agree on standards needed for international
|
||
intermarrying of telecommunications services.
|
||
|
||
CCS - Calling Card Service.
|
||
|
||
CCSS - Common Channel Signalling System. A system whereby all
|
||
signalling for a number of voice paths are carried over one common channel,
|
||
instead of within each individual channel.
|
||
|
||
CDA - Coin Detection and Announcement.
|
||
|
||
CF - Coin First. A type of fortress fone that wants your money before
|
||
you receive a dial tone.
|
||
|
||
Channel - A means of one-way transmission or a UCA path for electrical
|
||
transmission between two or more points without common carrier, provided
|
||
terminal equipment. Also called a circuit, line, link, path, or facility.
|
||
|
||
cheese box - Another type of box which, when coupled with call
|
||
forwarding services, will allow one to place free fone calls. The safety of
|
||
this box is unknown. See references for information concerning text philes
|
||
on this box.
|
||
|
||
clear box - Piece of equipment that compromises of a telephone pickup
|
||
coil and a small amp. This works on the principal that all receivers are
|
||
also weak transmitters. So, you amplify your signal on PP fortress fones
|
||
and spare yourself some change.
|
||
|
||
CN/A - Customer Name And Address. Systems where authorized Bell
|
||
employees can find out the name and address of any customer in the Bell
|
||
System. All fone numbers are listed on file, including unlisted numbers.
|
||
Some CN/A services ask for ID#'s when you make a request. To use, call the
|
||
CN/A office during normal business hours, and say that you are so and so
|
||
from a certain business or office, related to customers or something like
|
||
that, and you need the customer's name and address at (NPA)Nxx-xxxx. That
|
||
should work. The operators to these services usually know more than DA
|
||
operators do and are also susceptible to "social engineering." It is
|
||
possible to bullshit a CN/A operator for the NON PUB DA number and policy
|
||
changes in the CN/A system.
|
||
|
||
CO Code - Central Office code which is also the Nxx code. See Nxx for
|
||
more details. Sometimes known as the local end office.
|
||
|
||
conference calls - To have multiple lines inter-connected in order to
|
||
have many people talking in the same conversation on the fone at once. See
|
||
Alliance and switch crashing for more information.
|
||
|
||
credit operator - Same as TSPS operator. The operator you get when you
|
||
dial "0" on your fone and phortress fones. See TSPS for more information.
|
||
|
||
CSDC - Circuit Switched Digital Capability. Another USDN service that
|
||
has no ISDN counterpart.
|
||
|
||
DA - Directory Assistance. See directory assistance.
|
||
|
||
DAO - Directory Assistance Operator. See directory assistance.
|
||
|
||
data communications - In telefone company terminology, data
|
||
communications refers to an end-to-end transmission of any kind of
|
||
information other than sound, including voice, or video. Data sources may
|
||
be either digital or analog.
|
||
|
||
data rate - The rate at which a channel carries data, measured in bits
|
||
per second, bit/s, also known as "data signalling rate."
|
||
|
||
data signalling rate - Same as "data rate." See data rate.
|
||
|
||
DCO-CS - Digital Central Office-Carrier Switch.
|
||
|
||
DDD - Direct Distance Dialed.
|
||
|
||
Dial-It Services - See 900 Services.
|
||
|
||
digital - A method to represent information to be discrete or
|
||
individually distinct signals, such as bits, as opposed to a continuously
|
||
variable analog signal.
|
||
|
||
digital transmission - A mode of transmission in which all information
|
||
to be transmitted is first converted to digital form and then transmitted
|
||
as a serial stream of pulses. Any signal, voice, data, television, can be
|
||
converted to digital form.
|
||
|
||
Dimension 2000 - Another LD service located at (800)848-9000.
|
||
|
||
directory assistance - Operator that you get when you call 411 or
|
||
NPA-555-1212. This call will cost $.50 per call. These won't know where you
|
||
are calling from, unless you annoy them, and do not have access to unlisted
|
||
numbers. There are also directory assistance operators for the deaf that
|
||
transfer BAUDOT. You can call these and have interesting conversations. The
|
||
fone number is 800-855-1155, are free, and use standard Telex abbreviations
|
||
such as GA for Go Ahead. These are nicer than normal operators, and are
|
||
often subject to "social engineering" skills (bullshitting). Other
|
||
operators also have access to their own directory assistance at
|
||
KP+NPA+131+ST.
|
||
|
||
diverter - This is a nice phreak tool. What a diverter is is a type of
|
||
call forwarding system done externally, apart from the fone company, which
|
||
is a piece of hardware that will foreword the call to somewhere else. These
|
||
can be found on many 24 hour plumbers, doctors, etc. When you call, you
|
||
will often hear a click and then ringing, or a ring, then a click, then
|
||
another ring, the second ring often sounds different from the first. Then,
|
||
the other side picks the fone up and you ask about their company or
|
||
something stupid, but DO NOT ANNOY them. Then eventually, let them hang up,
|
||
DO NOT HANG UP YOURSELF. Wait for the dial tone, then dial ANI. If the
|
||
number ANI reads is different from the one you are calling from, then you
|
||
have a diverter. Call anywhere you want, for all calls will be billed to
|
||
the diverter. Also, if someone uses a tracer on you, then they trace the
|
||
diverter and you are safe. Diverters can, however, hang up on you after a
|
||
period of time; some companies make diverters that can be set to clear the
|
||
line after a set period of time, or click every once in a while, which is
|
||
super annoying, but it will still work. Diverters are usually safer than LD
|
||
extenders, but there are no guarantees. Diverters can also be accessed via
|
||
phortress fones. Dial the credit operator and ask for the AT&T CREDIT
|
||
OPERATOR. They will put on some lame recording that is pretty long. Don't
|
||
say anything and the recording will hang up. LET IT HANG UP, DO NOT HANG
|
||
UP. Then the line will clear and you will get a dial tone. Place any call
|
||
you want with the following format: 9+1+NPA+Nxx+xxxx, or for local calls,
|
||
just 9+Nxx+xxxx. I'd advise that you call ANI first as a local call to make
|
||
sure you have a diverter.
|
||
|
||
DLS - Dial Line Service.
|
||
|
||
DNR - Also known as pen register. See pen register.
|
||
|
||
DOV - Data-Over-Voice.
|
||
|
||
DSI - Data Subscriber Interface. Unit in the LADT system that will
|
||
concentrate data from 123 subscribers to a 56k or a 9.6k bit-per-second
|
||
trunk to a packet network.
|
||
|
||
DT - Dial tone.
|
||
|
||
DTF - Dial Tone First. This is a type of fortress fone that gives you
|
||
a dial tone first.
|
||
|
||
DTI - Digital Trunk Interface.
|
||
|
||
DTMF - Dual-Tone-Multi-Frequency, the generic term for the touch tone.
|
||
These include 0,1,2,3,4,5,6,7,8,9 as well as A,B,C,D. See silver box for
|
||
more details.
|
||
|
||
DVM - Data Voice Multiplexor. A system that squeezes more out of a
|
||
transmission medium and allows a customer to transmit voice and data
|
||
simultaneously to more than one receiver over the existing telefone line.
|
||
|
||
emergency break-in - Name given to the art of "breaking" into a busy
|
||
number which will usually result in becoming a third party in the call
|
||
taking place.
|
||
|
||
end office - Any class 5 switching office in North America.
|
||
|
||
end-to-end signalling - A mode of network operation in which the
|
||
originating central office, or station, retains control and signals
|
||
directly to each successive central office, or PBX, as trunks are added to
|
||
the connection.
|
||
|
||
ESS - Electronic Switching System. "The phreak's nightmare come true."
|
||
With ESS, EVERY SINGLE digit you dial is recorded, even mistakes. The
|
||
system records who you call, when you call, how long you talked, and, in
|
||
some cases, what you talked about. ESS is programed to make a list of
|
||
people who make excessive 800 calls or directory assistance. This is called
|
||
the "800 Exceptional Calling Report." ESS can be programed to print out
|
||
logs of who called certain numbers, such as a bookie, a known communist, a
|
||
BBS, etc. ESS is a series of programs working together; these programs can
|
||
be very easily changed to do whatever the fone company wants ESS to do.
|
||
With ESS, tracing is done in MILLISECONDS and will pick up any "foreign"
|
||
tones on the line, such as 2600 Hz. Bell predicts the whole country will be
|
||
on ESS by 1990! You can identify an ESS office by the functions, such as
|
||
dialing 911 for help, fortress fones with DT first, special services such
|
||
as call forwarding, speed dialing, call waiting, etc., and ANI on LD calls.
|
||
Also, black boxes and Infinity transmitters will NOT work under ESS.
|
||
|
||
extender - A fone line that serves as a middleman for a fone call,
|
||
such as the 800 or 950 extenders. These systems usually require a multi-
|
||
digit code and have some sort of ANI to trace suspicious calls with.
|
||
|
||
facsimile - A system for the transmission of images. The image is
|
||
scanned at the transmitter, reconstructed at the receiving station, and
|
||
duplicated on some form of paper. Also known as a FAX.
|
||
|
||
FAX - See facsimile for details.
|
||
|
||
FiRM - A large cracking group who is slowly taking the place of PTL and
|
||
the endangered cracking groups at the time of this writing.
|
||
|
||
fortress phone - Today's modern, armor plated, pay fone. These may be
|
||
the older, 3 coin/coin first fones or the newer, 1 coin/DT first fones.
|
||
There are also others, see CF, DTF, and PP. Most phortresses can be found
|
||
in the 9xxx or 98xx series of your local Nxx.
|
||
|
||
gateway city - See ISC.
|
||
|
||
Gestapo - The telefone company's security force. These nasties are the
|
||
ones that stake out misused phortresses as well as go after those bad
|
||
phreaks that might be phucking with the fone system.
|
||
|
||
green base - A type of output device used by the fone company. Usually
|
||
light green in color and stick up a few feet from the ground. See output
|
||
device for more information.
|
||
|
||
green box - Equipment that will emulate the Coin Collect, Coin Return,
|
||
and Ringback tones. This means that if you call someone with a fortress
|
||
fone and they have a green box, by activating it, your money will be
|
||
returned. The tones are, in hertz, Coin Collect=700+1100, Coin
|
||
Return=1100+1700, and Ringback=700+1700. However, before these tones are
|
||
sent, the MF detectors at the CO must be alerted, this can be done by
|
||
sending a 900+1500 Hz or single 2600 Hz wink of 90ms followed by a 60ms
|
||
gap, and then the appropriate signal for at least 900ms.
|
||
|
||
gold box - This box will trace calls, tell if the call is being
|
||
traced, and can change a trace.
|
||
|
||
grey box - Also known as a silver box. See silver box.
|
||
|
||
group chief - The name of the highest ranking official in any fone
|
||
office. Ask to speak to these if an operator is giving you trouble.
|
||
|
||
high-speed data - A rate of data transfer ranging upward from 10,000
|
||
bits per second.
|
||
|
||
H/M - Hotel/Motel.
|
||
|
||
ICH - International Call Handling. Used for overseas calls.
|
||
|
||
ICVT - InComing Verification Trunk.
|
||
|
||
IDA - Integrated Digital Access. The United Kingdom's equivalent of
|
||
ISDN.
|
||
|
||
IDDD - International Direct Distance Dialing - The ability to place
|
||
international calls direct without processing through a station. Usually,
|
||
one would have to place the call through a 011, station, or a 01, operator
|
||
assisted, type of setup.
|
||
|
||
IDN - Integrated Digital Networks. Networks which provide digital
|
||
access and transmission, in both circuit switched and packet modes.
|
||
|
||
in-band - The method of sending signaling information along with the
|
||
conversion using tones to represent digits.
|
||
|
||
INS - Information Network System. Japan's equivalent of ISDN.
|
||
|
||
Intercept - The intercept operator is the one you get connected to
|
||
when there are not enough recordings available to tell you that the number
|
||
has been disconnected or changed. These usually ask what number you are
|
||
calling and are the lowest form of the operator.
|
||
|
||
intermediate point - Any class 4X switching office in North America.
|
||
Also known as an RSU.
|
||
|
||
international dialing - In order to call across country borders, one
|
||
must use the format PREFIX + COUNTRY CODE + NATION #. The prefix in North
|
||
America is usually 011 for station-to-station calls or 01 for operator-
|
||
assisted calls. If you have IDDD, you don't need to place this prefix in.
|
||
|
||
INTT - Incoming No Test Trunks.
|
||
|
||
INWARD - An operator that assists your local TSPS '0' operator in
|
||
connecting calls. These won't question you as long as the call is within
|
||
their service area. The operator can ONLY be reached by other operators or
|
||
a blue box. The blue box number is KP+NPA+121+ST for the INWARD operator
|
||
that will help you connect to any calls in that area ONLY.
|
||
|
||
INWATS - Inward Wide Area Telecommunications Service. These are the
|
||
800 numbers we are all familiar with. These are set up in bands; 6 total.
|
||
Band 6 is the largest, and you can call band 6 INWATS from anywhere in the
|
||
US except the state where the call is terminated. This is also why some
|
||
companies have a separate 800 number for their state. Band 5 includes the
|
||
48 contiguous states. All the way down to band 1, which only includes the
|
||
states contiguous to that one. Understand? That means more people can reach
|
||
a band 6 INWATS as compared to the people that can access a band 1 INWATS.
|
||
|
||
IOCC - International Overseas Completion Centre. A system which must
|
||
be dialed in order to re-route fone calls to countries inaccessible via
|
||
dialing direct. To route a call via IOCC with a blue box, pad the country
|
||
code to the RIGHT with zeroes until it is 3 digits. Then KP+160 is dialed,
|
||
plus the padded country code, plus ST.
|
||
|
||
IPM - Interruptions Per Minute. The number of times a certain tone
|
||
sounds during a minute.
|
||
|
||
ISC - Inter-Nation Switching Centers. Most outgoing calls from a
|
||
certain numbering system will be routed through these "gateway cities" in
|
||
order to reach a foreign country.
|
||
|
||
ISDN - Integrated Services Digital Network. ISDN is a planned
|
||
hierarchy of digital switching and transmission systems. Synchronized so
|
||
that all digital elements speak the same "language" at the same speed, the
|
||
ISDN would provide voice, data, and video in a unified manner.
|
||
|
||
ITT - This is another large LD service. The extenders owned by this
|
||
company are usually considered dangerous. The format is
|
||
ACC-ESS#,(NPA)Nxx-xxxx,1234567.
|
||
|
||
KP - Key Pulse. Tone that must be generated before inputting a fone
|
||
number using a blue box. This tone is, in hertz, 1100+1700.
|
||
|
||
KP2 - Key Pulse 2. Tone that is used by the CCITT SYSTEM 5 for special
|
||
international calling. This tone is, in hertz, 1300+1700.
|
||
|
||
LADT - Local Area Data Transport. LADT is a method by which customers
|
||
will send and receive digital data over existing customer loop wiring. Dial-
|
||
Up LADT will let customers use their lines for occasional data services;
|
||
direct access LADT will transmit simultaneous voice and data traffic on the
|
||
same line.
|
||
|
||
LAN - Local Area Network.
|
||
|
||
LAPB - Link Access Protocol Balanced.
|
||
|
||
LD - Long Distance
|
||
|
||
Leave Word And Call Back - Another new type of operator.
|
||
|
||
local loop - When a loop is connected between you and your CO. This
|
||
occurs when you pick the fone up or have a fone OFF-HOOK.
|
||
|
||
loop - A pair or group of fone lines. When people call these lines,
|
||
they can talk to each other. Loops consist of two or more numbers, they
|
||
usually are grouped close together somewhere in the Nxx-99xx portions of
|
||
your exchange. The lower number in a loop is the tone side of the loop, or
|
||
the singing switch. The higher number is always silent. The tone disappears
|
||
on the lower # when someone dials the other side of the loop. If you are
|
||
the higher #, you will have to listen to the clicks to see if someone
|
||
dialed into the loop. There also are such things as Non-Supervised loops,
|
||
where the call is toll-free to the caller. Most loops will be muted or have
|
||
annoying clicks at connection, but otherwise, you might find these useful
|
||
goodies scanning the 99xx's in your exchange. Some loops allow multi-user
|
||
capability; thus, many people can talk to each other at the same time, a
|
||
conference of sorts. Since loops are genuine test functions for the telco
|
||
during the day, most phreaks scan and use them at night.
|
||
|
||
MA - Ma Bell, the Bell Telesys Company. Telco, etc. See Ma Bell for
|
||
more information.
|
||
|
||
Ma Bell - The telephone company. The Bell Telesys Phone Company. The
|
||
company you phreak and hack with. The company that doesn't like you too
|
||
much. The company you often phuck with, and sometimes phuck up. The company
|
||
that can phuck u up if u aren't careful.
|
||
|
||
make period - The time when, during pulse dialing, the circuit is
|
||
closed. In the US, this period is 60ms; however, foreign nations may use a
|
||
67ms make period. Make periods are also referred to in percentages, so a
|
||
60ms make period would be 60%, a 67ms as 67%.
|
||
|
||
marine verify - Another type of operator.
|
||
|
||
MCI - Yet another LD service that owns many dial-ups in most areas.
|
||
However, the codes from various areas may not be interchangeable. Not much
|
||
is known about MCI; however, MCI probably has some sophisticated anti-
|
||
phreak equipment. The format is ACC-ESS#,12345,(NPA)Nxx-xxxx.
|
||
|
||
MCI Execunet - The calling card equivalent of the regular MCI LD
|
||
service, but the codes are longer and interchangeable. For the local access
|
||
port near you, call (800)555-1212. The format for the port will be
|
||
ACC-ESS#,1234567,(NPA)Nxx-xxxx.
|
||
|
||
Metrofone - Owned by Western Union. A very popular system among fone
|
||
phreaks. Call Metrofone's operator and ask for the local access number at
|
||
(800)325-1403. The format is ACC-ESS#,CODE,(NPA)Nxx-xxxx. Metrofone is
|
||
alleged to place trap codes on phreak BBS's.
|
||
|
||
MF - Multi-Frequency. These are the operator and blue box tones. An MF
|
||
tone consists of two tones from a set of six master tones which are
|
||
combined to produce 12 separate tones. These are NOT the same as touch
|
||
tones. See blue box tones for frequencies.
|
||
|
||
mobile - A type of operator.
|
||
|
||
NAP/PA - North American Pirate/Phreak Association. A large group of bbs
|
||
boards which include a lot of pirates/phreakers. I'm not quite sure where the
|
||
group will go from here.
|
||
|
||
NON PUB DA - A reverse type of CN/A bureau. You tell the service the
|
||
name and the locality, they will supply the fone number. However, they will
|
||
ask for you name, supervisor's name, etc. Use your social engineering
|
||
skills here (aka, bullshitting skills). You also can get detailed billing
|
||
information from these bureaus.
|
||
|
||
NPA - Numbering Plan Area. The area code of a certain city/state. For
|
||
example, on the number (111)222-3333, the NPA would be 111. Area codes
|
||
never cross state boundaries sans the 800, 700, 900, and special exchanges.
|
||
|
||
Nxx - The exchange or prefix of the area to be dialed. For example of
|
||
the number (111)222-3333, the Nxx would be 222.
|
||
|
||
OGVT - OutGoing Verification Trunk.
|
||
|
||
OFF-HOOK - To be on-line, to have the switchhook down. To have a
|
||
closed connection. At this point, you also have a local loop.
|
||
|
||
ON-HOOK - To be off-line, to have the switchhook up. To have an open
|
||
connection.
|
||
|
||
ONI - Operator Number Identification. Identifies calling numbers when
|
||
an office is not equipped with CAMA, the calling number is not
|
||
automatically recorded by CAMA, or has equipment failures, such as ANIF.
|
||
|
||
OPCR - Operator Actions Program. Standard TBOC or equivalent "0"
|
||
operator.
|
||
|
||
OPEN - Northern Telecom's Open Protocol Enhanced Networks World
|
||
Program.
|
||
|
||
OSI - Open System Interconnection. Form of telecommunication
|
||
architechture which will probobly fail to SNA.
|
||
|
||
OST - Originating Station Treatment.
|
||
|
||
OTC - Operating Telefone Company.
|
||
|
||
out-of-band - Type of signaling which sends all of the signaling and
|
||
supervisory informations, such as ON and OFF HOOK, over separate data
|
||
links.
|
||
|
||
output device - Any type of interface such as cans, terminal sets,
|
||
remote switching centers, bridging heads, etc., where the fone lines of the
|
||
immediate area are relayed to before going to the fone company. These often
|
||
are those cases painted light green and stand up from the ground. Most of
|
||
these can be opened with a 7/16 hex driver, turning the security bolt(s)
|
||
1/8 of an inch counter-clockwise, and opening. Terminals on the inside
|
||
might be labeled "T" for tip and "R" for ring. Otherwise, the ring side is
|
||
usually on the right and the tip side is on the left.
|
||
|
||
OUTWATS - Outward Wide Area Telecommunications Service. These are WATS
|
||
that are used to make outgoing calls ONLY.
|
||
|
||
Paper Clip Method - This method of phreaking was illustrated in the
|
||
movie War Games. What a phortress fone does to make sure money is in a fone
|
||
is send an electrical pulse to notify the fone that a coin has been
|
||
deposited, for the first coin only. However, by simply grounding the
|
||
positive end of the microphone, enough current and voltage is deferred to
|
||
the ground to simulate the first quarter in the coin box. An easy way to
|
||
accomplish this is to connect the center of the mouthpiece to the coin box,
|
||
touch tone pad, or anything that looks like metal with a piece of wire. A
|
||
most convenient piece of wire is a bend out of a paper clip. Then you can
|
||
send red box tones through the line and get free fone calls! Also, telco
|
||
modified fones may require you to push the clip harder against the
|
||
mouthpiece, or connect the mouthpiece to the earpiece. If pressing harder
|
||
against the mouthpiece becomes a problem, pins may be an easier solution.
|
||
|
||
PBX - Private Branch eXchange. A private switchboard used by some big
|
||
companies that allow access to the OUTWATS line by dialing a 8 or a 9
|
||
after inputting a code.
|
||
|
||
PCM - Pulse Code-Modulated trunks.
|
||
|
||
PC Pursuit - A computer oriented LD system, comparable to Telenet,
|
||
which offers low access rates to 2400 baud users. Hacking on this system is
|
||
virtually impossible due to the new password format.
|
||
|
||
pen register - A device that the fone company puts on your line if
|
||
they suspect you are fraudulently using your fone. This will record EVERY
|
||
SINGLE digit/rotary pulse you enter into the fone as well as other
|
||
pertinent information, which may include a bit of tapping. Also known as
|
||
DNR.
|
||
|
||
Phortune 500 - An elite group of users currently paving the way for
|
||
better quality in their trade.
|
||
|
||
PHRACK - Another phreak/hack oriented newsletter. See reference
|
||
section, phile 1.6 for more information.
|
||
|
||
PHUN - Phreakers and Hackers Underground Network. They also release a
|
||
newsletter that is up to #4 at the time of this writing. See phile 1.6 for
|
||
more information on finding this phile.
|
||
|
||
PIN - Personal Identification Number - The last four digits on a
|
||
calling card that adds to the security of calling cards.
|
||
|
||
plant tests - test numbers which include ANI, ringback, touch tone
|
||
tests, and other tests the telco uses.
|
||
|
||
Post Office Engineers - The United Kingdom's fone workers.
|
||
|
||
PP - Dial Post-Pay Service. On phortress fones, you are prompted to
|
||
pay for the call after the called party answers. You can use a clear box to
|
||
get around this.
|
||
|
||
PPS - Pulses Per Second.
|
||
|
||
printmeter - The United Kingdom's equivalent of a pen register. See
|
||
pen register for more info.
|
||
|
||
PTE - Packet Transport Equipment.
|
||
|
||
PTL - One of the bigger cracking groups of all time. However, the group
|
||
has been dying off and only has a few nodes as of this writing.
|
||
|
||
PTS - Position and Trunk Scanner.
|
||
|
||
PTT - Postal Telephone Telegraph.
|
||
|
||
pulse - See rotary phones.
|
||
|
||
purple box - This one would be nice. Free calls to anywhere via blue
|
||
boxing, become an operator via blue box, conference calling, disconnect
|
||
fone line(s), tap fones, detect traces, intercept directory assistance
|
||
calls. Has all red box tones. This one may not be available under ESS.
|
||
|
||
rainbow box - An ultimate box. You can become an operator. You get
|
||
free calls, blue box. You can set up conference calls. You can forcefully
|
||
disconnect lines. You can tap lines. You can detect traces, change traces,
|
||
and trace as well. All incoming calls are free. You can intercept directory
|
||
assistance. You have a generator for all MF tones. You can mute and redial.
|
||
You have all the red-box tones. This is an awesome box. However, it does
|
||
not exist under ESS.
|
||
|
||
RAO - Revenue Accounting Office. The three digit code that sometimes
|
||
replaces the NPA of some calling cards.
|
||
|
||
RBOC - Regional Bell Operating Company.
|
||
|
||
red box - Equipment that will emulate the red box tone generated for
|
||
coin recognition in all phortress fones.
|
||
|
||
red box tones - Tones that tell the phortress fone how much money was
|
||
inserted in the fone to make the required call. In one slot fones, these
|
||
are beeps in pulses; the pulse is a 2200+1700 Hz tone. For quarters, 5 beep
|
||
tones at 12-17 PPS, for dimes it is 2 beep tones at 5-8.5 PPS, and a nickel
|
||
causes 1 beep tone at 5-8.5 PPS. For three slot fones, the tones are
|
||
different. Instead of beeps, they are straight dual tones. For a nickel, it
|
||
is one bell at 1050-1100 Hz, two bells for a dime, and one gong at 800 Hz
|
||
for a quarter. When using red box tones, you must insert at least one
|
||
nickel before playing the tones, cuz a ground test takes place to make sure
|
||
some money has been inserted. The ground test may be fooled by the Paper
|
||
Clip Method. Also, it has been known that TSPS can detect certain red box
|
||
tones, and will record all data on AMA or CAMA of fraudulent activity.
|
||
|
||
regional center - Any class 1 switching office in North America.
|
||
|
||
REMOB - Method of tapping into lines by entering a code and the 7
|
||
digit number you want to monitor, from ACD Test Mode. A possibility of this
|
||
may be mass conferencing.
|
||
|
||
ring - The red wire found in fone jacks and most fone equipment. The
|
||
ring also is less positive than the tip. When looking at a fone plug on the
|
||
end of typical 4 wire fone line from the top, let's say the top is the side
|
||
with the hook, the ring will be the middle-right wire. Remember, the ring
|
||
is red, and to the right. The three "R's" revived!
|
||
|
||
ring-around-the-rosy - 9 connections in tandem which would cause an
|
||
endless loop connection and has never occurred in fone history.
|
||
|
||
ringback - A testing number that the fone company uses to have your
|
||
fone ring back after you hang up. You usually input the three digit
|
||
ringback number and then the last four digits to the fone number you are
|
||
calling from.
|
||
|
||
ring trip - The CO process involved with stopping the AC ringing
|
||
signal when a fone goes OFF-HOOK.
|
||
|
||
rotary phone - The dial or pulse phone that works by hooking and un-
|
||
hooking the fone rapidly in secession that is directly related to the
|
||
number you dialed. These will not work if another phone with the same
|
||
number is off-hook at the time of dialing.
|
||
|
||
Rout & Rate - Yet another type of operator; assists your TSPS operator
|
||
with rates and routings. This once can be reached at KP+800+141+1212+ST.
|
||
|
||
RPE - Remote Peripheral Equipment.
|
||
|
||
RQS - The Rate Quote System. This is the TSPS operator's rate/quote
|
||
system. This is a method your '0' operator gets info without dialing the
|
||
rate and route operator. The number is KP+009+ST.
|
||
|
||
RSU - Remote Switching Unit. The class 4X office that can have an
|
||
unattended exchange attached to it.
|
||
|
||
RTA - Remote Trunk Arrangement.
|
||
|
||
SAC - Special Area Code. Separate listing of area codes, usually for
|
||
special services such as TWX's, WATS, or DIAL-IT services.
|
||
|
||
SCC - Specialized Common Carriers. Common Nxx numbers that are
|
||
specialized for a certain purpose. An example is the 950 exchange.
|
||
|
||
sectional center - Any class 2 switching office in North America.
|
||
|
||
service monitoring - This is the technical name of phone tapping.
|
||
|
||
SF - Supervision Control Frequency. The 2600 Hz tone which seizes any
|
||
open trunk, which can be blue boxed off of.
|
||
|
||
short-haul - Also known as a local call.
|
||
|
||
signalling - The process by which a caller or equipment on the
|
||
transmitting end of a line in: forms a particular party or equipment at the
|
||
receiving end that a message is to be communicated. Signalling is also the
|
||
supervisory information which lets the caller know the called know the
|
||
called party is ready to talk, the line is busy, or the called party has
|
||
hung up.
|
||
|
||
silver box - Equipment that will allow you to emulate the DTMF tones
|
||
A,B,C,D. The MF tones are, in hertz, A=697+1633, B=770+1633, C=852+1633,
|
||
D=941+1633. These allow special functions from regular fones, such as ACD
|
||
Testing Mode.
|
||
|
||
Skyline - Service owned by IBM, Comsat, and AEtna. It has a local
|
||
access number in the 950 exchange. The fone number is 950-1088. The code is
|
||
either a 6 or 8 digit number. This company is alleged to be VERY dangerous.
|
||
|
||
SNA - System Network Architechture, by IBM. A possible future standard
|
||
of architechture only competed by OSI.
|
||
|
||
SOST - Special Operator Service Treatment. These include calls which
|
||
must be transferred to a SOST switchboard before they can be processed;
|
||
services such as conferences, appointments, mobile, etc.
|
||
|
||
SPC - Stored Program Control. Form of switching the US has heavily
|
||
invested in.
|
||
|
||
Sprint - One of the first LD services, also known as SPC. Sprint owns
|
||
many extender services and is not considered safe. It is common knowledge
|
||
that Sprint has declared war on fone phreakers.
|
||
|
||
SSAS - Station Signaling and Announcement System. System on most
|
||
fortress fones that will prompt caller for money after the number, usually
|
||
LD numbers, has been dialed, or the balance due before the call will be
|
||
allowed to connect.
|
||
|
||
stacking tandems - The art of busying out all trunks between two
|
||
points. This one is very amusing.
|
||
|
||
STart - Pulse that is transmitted after the KP+NPA+Nxx+xxxx through
|
||
operator or blue boxed calls. This pulse is, in hertz, 1500+1700.
|
||
|
||
station # - The last four digits in any seven digit fone number.
|
||
|
||
STD - Subscriber Trunk Dialing. Mechanism in the United Kingdom which
|
||
takes a call from the local lines and legimately elevates it to a trunk or
|
||
international level.
|
||
|
||
step crashing - Method of using a rotary fone to break into a busy
|
||
line. Example, you use a rotary fone to dial Nxx-xxx8 and you get a busy
|
||
signal. Hang up and dial Nxx-xxx7 and in between the last pulse of your
|
||
rotary dial and before the fone would begin to ring, you can flash your
|
||
switchhook extremely fast. If you do it right, you will hear an enormous
|
||
"CLICK" and all of a sudden, you will cut into your party's conversation.
|
||
|
||
STPS - Signal Transfer PointS. Associated with various switching
|
||
machines and the new CCIS system.
|
||
|
||
switchhook - The button on your fone that, when depressed, hangs the
|
||
fone up. These can be used to emulate rotary dial fones if used correctly.
|
||
|
||
SxS - Step-By-Step. Also known as the Strowger Switch or the two-
|
||
motion switch. This is the switching equipment Bell began using in 1918.
|
||
However, because of its limitations, such as no direct use of DTMF and
|
||
maintenance problems, the fone company has been upgrading since. You can
|
||
identify SxS switching offices by lack of DTMF or pulsing digits after
|
||
dialing DTMF, if you go near the CO it will sound like a typewriter testing
|
||
factory, lack of speed calling, lack of special services like call
|
||
forwarding and call waiting, and fortress fones want your money first,
|
||
before the dial tone.
|
||
|
||
TAP - The "official" phone phreak's newsletter. Previously YIPL.
|
||
|
||
T&C - Time and Charge.
|
||
|
||
tapping - To listen in to a phone call taking place. The fone company
|
||
calls this "service monitoring."
|
||
|
||
TASI - Time Assignment Speech Interpolation. This is used on satellite
|
||
trunks, and basically allows more than one person to use a trunk by putting
|
||
them on while the other person isn't talking.
|
||
|
||
Telenet - A computer-oriented system of relay stations which relay
|
||
computer calls to LD numbers. Telenet has a vast array of access ports
|
||
accessible at certain baud rates.
|
||
|
||
Tel-Tec - Another LD company that usually give out a weak connection.
|
||
The format is (800)323-3026,123456,(NPA)Nxx-xxxx.
|
||
|
||
Tel-Tex - A subsidiary of Tel-Tec, but is only used in Texas. The
|
||
number is *800)432-2071 and the format is the same as above.
|
||
|
||
terminal - A point where information may enter or leave a
|
||
communication network. Also, any device that is capable of sending and/or
|
||
receiving data over a communication channel.
|
||
|
||
tip - The green wire found in fone jacks and most fone equipment. The
|
||
tip is the more positive wire compared to the ring. When looking at a fone
|
||
plug from the top, lets say the hook side is the top, the tip will be the
|
||
middle wire on the left.
|
||
|
||
toll center - Any class 4 switching office located in North America.
|
||
|
||
toll point - Any class 4P switching office in North America.
|
||
|
||
Toll LIB - Reverse CN/A bureau. See NON PUB DA for more info.
|
||
|
||
touch tone phone - A phone that uses the DTMF system to place calls.
|
||
|
||
touch tone test - This is another test number the fone company uses.
|
||
You dial the ringback number and have the fone ring back. Then, when you
|
||
pick it up, you will hear a tone. Press your touch-tone digits 1-0. If they
|
||
are correct, the fone will beep twice.
|
||
|
||
trace - Something you don't want any fone company to do to you. This
|
||
is when the fone company you are phucking with flips a switch and they find
|
||
the number you are calling from. Sometimes the fone company will use ANI or
|
||
trap and trace methods to locate you. Then the local Gestapo home in and
|
||
terminate the caller if discovered.
|
||
|
||
trap and trace - A method used by the FBI and some step offices that
|
||
forces a voltage through the line and traces simultaneously, which mean
|
||
that you can't hang up unless the Pheds do, and pray you aren't calling
|
||
from your own house. Trap and trace is also known as the lock-in-trace.
|
||
|
||
trap codes - Working codes owned by the LD company, not a customer,
|
||
that, when used, will send a "trouble card" to Ma Bell, no matter what
|
||
company the card is coming from, and ESS will immediately trace the call.
|
||
Trap codes have been in use for some time now, and it is considered safer
|
||
to self-hack codes opposed to leeching them off of BBS's, since some LD
|
||
companies post these codes on phreak oriented BBS's.
|
||
|
||
Travelnet - Service owned by GM that uses WATS as well as local access
|
||
numbers. Travelnet also accepts voice validation for its LD codes.
|
||
|
||
TSPS - Traffic Service Position System. Operator that usually is the
|
||
one that obtains billing information for Calling Card or 3rd number calls,
|
||
identifies called customer on person-to-person calls, obtains acceptance of
|
||
charges on collect calls, or identifies calling numbers. These operators
|
||
have an ANI board and are the most dangerous type of operator.
|
||
|
||
TWX - Telex II consisting of 5 teletypewriter area codes. These are
|
||
owned by Western Union. These may be reached via another TWX machine
|
||
running at 110 baud. You can send TWX messages via Easylink (800)325-4122.
|
||
|
||
USDN - United States Digital Network. The US's version of the ISDN
|
||
network.
|
||
|
||
videotext - Generic term for a class of two-way, interactive data
|
||
distribution systems with output typically handled as in teletext systems
|
||
and input typically accepted through the telephone or public data network.
|
||
|
||
WATS - Wide Area Telecommunications Service. These can be IN or OUT,
|
||
see the appropriate sections.
|
||
|
||
WATS Extender - These are the LD companies everyone hacks and phreaks
|
||
off of in the 800 NPA. Remember, INWATS + OUTWATS = WATS Extender.
|
||
|
||
white box - This is a portable DTMF keypad.
|
||
|
||
XBAR - Crossbar. Crossbar is another type of switching equipment the
|
||
fone company uses in some areas. There are three major types of Crossbar
|
||
systems called No.1 Crossbar (1XB), No.4 Crossbar (4XB), and No.5 Crossbar
|
||
(5XB). 5XB has been the primary end office switch of MA since the 60's and
|
||
is still in wide use. There is also Crossbar Tandem (XBT) used for toll-
|
||
switching.
|
||
|
||
XBT - Crossbar Tandem. Used for toll-switching. See XBAR.
|
||
|
||
YIPL - The classic "official" phreak's magazine. Now TAP.
|
||
|
||
|
||
Other Fone Information
|
||
======================
|
||
|
||
Voltages & Technical Stuff
|
||
--------------------------
|
||
When your telephone is ON-HOOK, there is 48 volts of DC across the tip
|
||
and the ring. When the handset of a fone is lifted a few switches close
|
||
which cause a loop to become connected between you and the fone company, or
|
||
OFF-HOOK. This is also known as the local loop. Once this happens, the DC
|
||
current is able to flow through your fone with less resistance. This causes
|
||
a relay to energize which causes other CO equipment to realize that you
|
||
want service. Eventually, you will end up with a dial tone. This also
|
||
causes the 48 VDC to drop down to around 12 VDC. The resistance of the loop
|
||
also drops below the 2500 ohm level; FCC licensed telephone equipment must
|
||
have an OFF-HOOK impedance of 600 ohms.
|
||
When your fone rings, the telco sends 90 volts of pulsing AC down the
|
||
line at around 15-60 Hz, usually 20 Hz. In most cases, this causes a metal
|
||
armature to be attracted alternately between two electromagnets; thus, the
|
||
armature often ends up striking two bells of some sort, the ring you often
|
||
hear when non-electronic fones receive a call. Today, these mechanical
|
||
ringers can be replaced with more modern electronic bells and other
|
||
annoying signaling devices, which also explains why deaf people can have
|
||
lights and other equipment attached to their fones instead of ringers.
|
||
When you dial on a fone, there are two common types of dialing, pulse
|
||
and DTMF. If you are like me, you probably don't like either and thought
|
||
about using MF or blue box tones. Dialing rotary breaks and makes
|
||
connections in the fone loop, and the telco uses this to signal to their
|
||
equipment that you are placing a call. Since it is one fone that is
|
||
disconnecting and reconnecting the fone line, if someone else picks up
|
||
another fone on the same extension, both cannot make pulse fone calls until
|
||
one hangs up. DTMF, on the other hand, is a more modern piece of equipment
|
||
and relies on tones generated by a keypad, which can be characterized by a
|
||
0,1,2,3,4,5,6,7,8,9/A,B,C,D keypad. Most fones don't have an A,B,C,D
|
||
keypad, for these frequencies are used by the telco for test and other
|
||
purposes.
|
||
|
||
|
||
Scanning Phun Fone Stuff
|
||
------------------------
|
||
Scanning is the act of either randomly or sequentially dialing fone
|
||
numbers in a certain exchange when you are looking for several different
|
||
things. These things could be carriers, extenders, ANI, "bug tracers,"
|
||
loops, as well as many other interesting "goodies" the fone company uses
|
||
for test purposes.
|
||
When scanning for carriers, your local BBS probably has some scanning
|
||
programs, as these became popular after the movie WARGAMES, but what these
|
||
do are to call every fone in an exchange, or a specified range of fone
|
||
numbers in certain exchanges to look for possible carriers and other
|
||
interesting computer equipment. So, if your computer finds a carrier, or
|
||
what seems like a carrier, it will either print it out or save it in some
|
||
file for later reference. With these carriers one finds, one can either
|
||
call them and find out what each is or, if one of them is interesting, one
|
||
can hack or attempt to break into some interesting systems available, not
|
||
to the general public, of course.
|
||
Scanning telephone "goodies" requires time and patience. These goodies
|
||
usually cannot be traced by most unmodified modems, as the frequencies and
|
||
voice transmissions cannot be differentiated from other disturbances, such
|
||
as the annoying operator saying, "We're sorry... blah blah..". Anyway, to
|
||
scan these, you usually get a regular carrier scanner and, with the modem
|
||
speaker on, sit by your wonderful computer and listen in on the scanning
|
||
for any interesting tones, voices, or silences, which could be telco fone
|
||
phun numbers, for us of course! Then write these down, and spread them
|
||
around, use, abuze, etc. if you dare. Anyway, most telefone goodies are
|
||
located in the 99xx suffixes of any fone exchange. If you found everything
|
||
you think in the exchanges you have scanned, try the 0xxx and 1xxx suffixes
|
||
in that order. You might even find loops, ANI, and other phun things if you
|
||
mess around enough.
|
||
|
||
References & Suggested Reading
|
||
==============================
|
||
The following is a list of references and suggested reading for the
|
||
beginning, as well as advanced phreak. See you local fone phreak for these,
|
||
or call your local phreak oriented BBS for information regarding these
|
||
publications.
|
||
|
||
|
||
2600 Magazine
|
||
|
||
Aqua Box, The
|
||
By Captain Xerox & The Traveler
|
||
|
||
Basic Alliance Teleconferencing
|
||
By The Trooper
|
||
|
||
Bell Hell
|
||
By The Dutchman & The Neon Knights
|
||
|
||
Better Homes And Blue Boxing
|
||
By Mark Tabas
|
||
|
||
BIOC Agent 003's Course In Basic Telecommunications
|
||
By BIOC Agent 003
|
||
|
||
History Of British Phreaking, The
|
||
By Lex Luthor & The Legion Of Doom
|
||
|
||
Home Phone Tips
|
||
By 13th Floor Enterprises
|
||
|
||
How To Build A Blotto Box
|
||
By The Traveler
|
||
|
||
How To Build A Cheese Box
|
||
By Mother Phucker
|
||
|
||
Introducing The Beige Box - Construction & Use
|
||
By The Exterminator and The Terminal Man
|
||
|
||
Integrated Services Digital Network [ISDN]
|
||
By Zander Zan
|
||
|
||
LOD/H Technical Journal
|
||
|
||
Loops I've Known And Loved
|
||
By Phred Phreak
|
||
|
||
PHRACK Magazine
|
||
Edited By Taran King and Knight Lightning UMCVMB
|
||
|
||
Phreakers And Hackers Underground Network [PHUN]
|
||
Edited By Red Knight
|
||
The Toll Center Bulletin Board System (718)358-9209
|
||
|
||
TAP - The Official Phreak Newsletter
|
||
Room 603
|
||
147 West 42nd Street
|
||
New York, NY 10036
|
||
|
||
........When You Need The BEST Of The Best........
|
||
....There Is NO Substitute....
|
||
----------------------
|
||
============================> PHORTUNE 500 <==============================
|
||
----------------------
|
||
These philes distributed in part by:
|
||
|
||
Skeleton Crue 415-376-8060 located out of Moraga, California.
|
||
!!Get on the band wagon before it RUNS YOU DOWN!!
|
||
Headquarters for Computer Hackers and Anarchists to Overthrow the State
|
||
(CH&AOS)
|
||
|