File 1/1
By: A Bunch of people

                       "Phreaking, Boxing, and KILL BELL"



                       `/`\`/`\`/`\`/`\`/`\`/`\`/`\`/`\`
                       |-------Acrylic Box Plans-------|
                       |       \----------------/      |
                       |        \______By______/       |
                       |                               |
                       |          [ The Pimp ]         |
                       \_______________________________/
 
                         Call:
                            /\/\aharaja's Hi-Times
 
                          10 Meg BBS C/F 600+ G-Files
                           (7 0 2) - 8 3 2 - 7 4 6 9
                          \/-----------------------\/
                          ||  A High Mtn. Hackers  ||
                          ||     Presentation      ||
                          /\-----------------------/\
 
 
Ok the purpose of this box is to get Three-Way-Calling, Call Waiting,
programmable Call Forwarding, and an easier way of extended Bud Boxing ALL for
FREE.
 
 
Materials:
 
1) Wire stripers
2) Couple Feet Wire
3) AT&T/BELL Can
4) Hex Wrench
 
 
Idea: Ok the idea of this box is to get all of the above features by stealing
them from the fortunate ones on your block.
 
Procedure:
 
Step 1) Find AT&T/BELL Can that is being used to service you surrounding area.
 
Step 2) Open can with Hex wrench.
 
Step 3) Find your line and another persons line who has 3-way, Call
(waiting/forwarding), if the # of all the lines are not listed in the box you
will have to use your local ANI to find them.
 
Step 4) Once you have found the lines then wire the (Black & Yellow) wires on
the victims line to the (Black & Yellow) wires on you line (Be sure your phone
at home uses all 4 wire as some of the cheap phones don't).
 
Step 5) Then disconnect the victims (Black & Yellow) Wires, resulting the the
loss of these features to their line ( you mat want to leave these wires
connected, this may or may not cause problems I haven't tried it that may yet).
 
 
Well That Sums It Up!
 
 
Procedure for easier extended Bud Box.
 
If if for some reason your line is disconnected, or you just want to use hook
someone's line to your line for fearless phreaking follow the procedure below.
 
Ok Go to the local can and find a line that is used by weekend visitors or a
summer/winter home, and hook their (Red & Green) Wires to your (Red & Green)
Wires, and your off into the fearless world of phreaking ( i recommend you
phreak from these line, so that the owners don't get uptight and look into the
matter), unless of course you are doing it for revenge!
 
 
Some Suggestions:
 
Take a Bud box Along to do a ANI just to make sure you have the right line,
also in some cases you will have to switch between the (Red/Green)
(Black/Yellow) or any other combination  if your area has changed the standard
format which id very unlikely.
 
Have Fun
 
 --------------------------------
 /-/                           /-/
 /-/      The Aqua Box         /-/
 /-/                           /-/
 /-/ Concept by: Captain X     /-/
 /-/                           /-/
 /-/ Plans by: The Boozler     /-/
 /-/                           /-/
 /-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/

    Every true phreaker lives in fear of the dreaded F.B.I. 'Lock in Trace.'
For a long time, it was impossible to escape from the lock in trace. This box
does offer and escape route with simple directions to it. This box is quite a
simple concept, and almost any phreaker with basic electronics knowledge can
construct and use it.

 /-/-/-/-/-/-/-/-/-/-/-/
 /-/    The Lock     /-/
 /-/    in Trace     /-/
 /-/-/-/-/-/-/-/-/-/-/-/

A lock in trace is a device used by the F.B.I. to lock into the phone
users location so that he can not hang up while a trace is in progress.  For
those of you who are not familiar with the concept of 'locking in', then
here's a brief description.
    The F.B.I. can tap into a conversation, sort of like a three-way call
connection.  Then, when they get there, they can plug electricity into the
phone line.  All phone connections are held open by a certain voltage of elec-
tricity, that is why you sometimes get static and faint connections when you
are calling far away, because the electricity has trouble keeping the line up.
What the lock in trace does is cut into the line and generate that same
voltage straight into the lines.  That way, when you try and hang up, voltage
is retained.  Your phone will ring just like someone was calling you even
after you hang up.  (If you have call waiting, you should understand better
about that, for call waiting intercepts the electricity and makes a tone that
means someone is going through your line.  Then, it is a matter of which
voltage is higher.  When you push down the receiver, then it see-saws the
electricity to the other side.  When you have a person on each line it is im-
possible to hang up unless one or both of them will hang up.  If you try to
hang up, voltage is retained, and your phone will ring.  That should give you
an understanding of how calling works.  Also, when electricity passes through
a certain point on your phone, the electricity causes a bell to ring or on
some newer phones an electronic ring to sound.
    So, in order to eliminate the trace, you somehow must lower the voltage
level on your phone line.  You should know that every time someone else picks
up the phone line, then the voltage does decrease a little.  In the first
steps of planning this out, Xerox suggested getting about a hundred phones all
hooked into the same line that could all be taken off the hook at the same
time.  That would greatly decrease the voltage level.  That is also why most
three-way connections that are using the bell service three way calling (which
is only $3 a month) become quite faint after a while.
    By now, you should understand the basic idea.  You have to drain all of
the power out of the line so the voltage can not be kept up.  I rather sudden
draining of power could quickly short out the F.B.I. voltage machine, because
it was only built to sustain the exact voltage necessary to keep the voltage
out.
    For now, imagine this.  One of the normal Radio Shack generators that you
can go pick up that one end of the cord that hooks into the central box has a
phone jack on it and the other has an electrical plug.  This way, you can
"flash" voltage THROUGH the line, but can't drain it.  So, some modifications
have to be done.

 MATERIALS NEEDED- a BEOC (Basic Electrical Output Socket), like a small lamp
                   type connection, where you just have a simple plug and wire
                   that would plug into a light bulb.
                 - One of the cords mentioned above, if you can't find one
                   then construct your own; same voltage connection, but the
                   restrainer must be built in (i.e. the central box)
                 - TWO phone jacks (one for the modem, one for if you are
                   being traced to plug the aqua box into)
                 - Some creativity and easy work.

 NOTICE: No phones have to be destroyed/modified to make this box, so don't go
         out and buy a new phone for it!

    All right, this is a very simple procedure.  If you have the BEOC, it
could drain into anything, a radio, or whatever.  The purpose of having that
is you are going to suck the voltage out from the phone line into the electri-
cal appliance so there would be no voltage left to lock you in with.
1) Take the connection cord.  Examine the plug at the end.  It should have
   only two prongs, if it has three, still, do not fear.  MAKE SURE THE ELEC-
   TRICAL APPLIANCE IS TURNED OFF unless you wanna become a crispy critter
   while making this thing.  Most plugs will have a hard plastic design on the
   top of them to prevent you from getting in at the electrical wires inside.
   Well, get a knife and remove it.  If you want to keep the plug (I don't see
   why...) then just cut the top off.  When you look inside, low and behold,
   you will see that at the base of the prongs there are a few wires connect-
   ing in.  Those wires conduct the power into the appliance.  So, you care-
   fully unwrap those from the sides and pull them out until they are about an
   inch ahead of the prongs.  If you don't wanna keep the jack, then just rip
   the prongs out.  If you are, cover the prongs with insulation tape so they
   will not connect with the wires when the power is being drained from the
   line.
   2) Do the same thing with the prongs on the other plug, so you have the wires
   evenly connected.  Now, wrap the end of the wires around each other.  If
   you happen to have the other end of the voltage cord hooked into the phone,
   stop reading now, you're too fucking stupid to continue.  After you've
   wrapped the wires around each other, then cover the whole thing with the
   plugs with insulating tape.  Then, if you built your own control box or if
   you bought one, then cram all the wires into the box and re-close it.
3) Re-check everything to make sure it's all in place.  This is a pretty
   flimsy connection, but on later models when you get more experienced at it
   then you can solder away at it and form the whole device into one big box,
   with some kind of cheap Mattel hand-held game inside to be the power con-
   nector.

    In order to use it, just keep this box handy.  Plug it into the jack if
you want, but it will slightly lower the voltage so it isn't connected.  When
you plug it in, if you see sparks, unplug it and restart the WHOLE thing.  But
if it just seems fine then leave it.

 USING IT !!

    Now, so you have the whole thing plugged in and all... DO NOT USE THIS UN-
LESS THE SITUATION IS DESPERATE! When the trace has gone on, don't panic, un-
plug your phone, and turn on the appliance that it was hooked to.  It will
need energy to turn itself on, and here's a great source... the voltage to
keep a phone line open is pretty small and a simple light bulb should drain it
all in and probably short the F.B.I. computer at the same time.

 Happy boxing and stay free!

 

------------------\
Aqua Box          |
------------------|
by                | 
Game Warlord      | 
Hyperspace Bandit |
Frequency Bandit  |
Twilight Phantom  | 
------------------/


[Definitions]
Black Box          A device that tells the operator that the phone is hangup.
                   When actually it is off the hook.
Aqua Box           A device that cancel F.B.I. lock and trace devices.
Lock and Trace     F.B.I. use a voltage transformer to keep the phone 
                   connection up. This allows them to trace with out being 
                   hangup on.

[General Infomation]
-When phone is hangup the voltage is 55 volts.
-When phone is off the hook the voltage is 5.5 volts.
-Resistance over phone line is changing all the time.
-Current is the same as resistance.
-Phone line wires red and green are line1.
-Phone line wires yellow and black are line2 (if you have a second line).

[Items needed]
-T1      10:1 voltage ratio transformer
-T2      1:10 voltage ratio transformer
-LED     Light Emiting Diode
-SW1     DPDT Switch
-SW2     DPDT Switch 
-Plug    Molecular phone plug with cord (length as disere)
-Jack    Molecular phone jack
-R1      10k Resistor(brown,black,orange,gold or silver)
-R2      9.9k Resistor(white,white,red,gold or silver)
-Perfboard 3 inches by 4 inches
-Project box big enough to put the transformer, jack, swiches, ect. 

[Equipment]
-VOM meter
-pliers
-wirecutters
-screwdrivers
-soldering iron
-drill
-files
-drillbits
-solder
-wire

[Circuit]

P   |-red-----------------------------\
l   |-green------------------\        |
u   |-yellow-\not needed     |        | 
g   |-black--/               |        |
                   /---------+--------+--------------------\
J   |-red----------+---------+----*---+--------------------+----\
a   |-green--------*-----1\_ |    1\_ |                    |    |
c   |-yellow-\            | \O SW1 | \O                    |    |
k   |-black--/not needed 2        2                        |    |
                         |        |                        |    |
                         |        |                        |    |
                         O  SW2   O                        |    |
                        /        /                         |    |
                       1   2    1   2                      |    |
                       |   |    |   |                      |    |
/----------------------/   \----+---+-----------------\    |    |
|   /---------------------------/   \------------\    |    |    |
|   |                                            |    |    |    |
|   |                                  /---------/    |    |    |
|   |                                  |              |    |    | 
|   |                                  *----  R1 -----*    |    |
|   |                                  |              |    |    |  
|   |                                  *-- LED - R2 --*    |    |
|   |                                  |              |    |    |
|   |                                  \---------\    |    |    |
|   |                                            |    |    |    |
|   \----O         O------------*-O         O----/    |    |    |
|            T1                 |     T2              |    |    |
\--------O         O-*----------+-O         O---------/    |    |
                     |          |                          |    |
                     |          \--------------------------/    |
                     \------------------------------------------/


[Construction]
-Take the Molecular phone plug(Plug) with cord. The cord length 
 is if you want it next to the wall, phone, modem, ect. First,
 remove about an inch and a half of insulation off with the 
 wirecutters. Second, tie off the yellow and black wires. They are
 not needed. Third, take off about three forths of insulation off 
 the red and green wires. Then twist the wires, but not together.
 Then melt some solder on the wires. Forth, drill a forth of and 
 inch hole in one end of the project box. Fifth, put the wires 
 through the hole about three inches, and tie the cord so that
 the wires will not slip.

                             +-----------------------+
                             |    red                |
                       hole  |   /                   |
Plug                       \ =  /\green              |
]-----------------------------*<                     |
                             =| \__yellow\           |
                             |\  \-black--*          |
                             | knots-----/           |
                             +-----------------------+

-Drill a hole on top. Then file it. So that SW1 will fit 
 correctly. Insert SW1. Make sure the it is sercure. Next, 
 solder the red and green wires to the middle termals of the 
 SW1 on seprate sides.

SW1      +--------+
         |O  p1  O|
         |        | 
      red-O      O-green
         |        |
         |O  p2  O|
         +--------+

-Drill a hole and file, so that the Jack will fit. Insert Jack.
 First, cut two wires three inches long. Second, take off about
 three forths of a inch of insulation on both ends of both 
 wires. Third, put some solder on the ends of the wires. Forth,
 solder one wire on each p1 on SW1. The side where the red wire
 is,  solder the other end of the wire on p1 of SW1 to red on 
 the Jack. The side where the green wire is, solder the other 
 end of the wire on p1 of SW1 to green on the Jack. Sixth, cut 
 two more wires about five inches long. Seventh, take off about
 three forths of a inch of insulation on both end of both wires.
 Eighth, put some solder on the ends of the wires. Nineth, 
 solder one wire on p1 of SW1.
-Drill another hole on the top. File it, so that SW2 fits.
 Insert SW2. First, cut two wires about two and a half inches 
 long. Second, take off about three forths of a inch of 
 insulation on both ends of both wires. Third, put some solder on
 the ends of the wires. Forth, solder one wire on each p2 on SW1.
 Fifth, solder the other end of wires to the middle termal of 
 SW2. Sixth, cut four wire about three inches long. Seventh, take
 off about three forths of a inch of insulation on both ends of 
 the wires. Eighth, put so solder on each end of the wires. 
 Nineth, solder one wire on each termal p1 and p2 of SW2.
-Drill a hole on top, so that the LED fits. Cut a wire about 
 three inches,remove insulation,and solder to LED leg. On the 
 other leg solder R2.
-Take the perfboard. Insert T1. Connect wires from one side of 
 sw2 to the termals on one side of T1. Cut two wires about two 
 inches, remove insulation, solder to the other termals of T1.
 Next, solder ends of wires to the termals on one side of T2.
 Cut two wires about two inches, remove insulation, solder to 
 each end of R1, also solder the LED and R2 to each end of R1. 
 Finaly, solder the wires from the other side of SW2 to each side
 of R1.  

--O   O---*-O   O---*-------------
SW2 T1  Jack  T2    *---O     SW2
--O   O---*-O   O-\ |   LED
                  |R1   R2
                  \-*---O---------

  note-----
  T1 and T2 are the same type transformer just revesed, the
  voltage ratio is primary voltage/ secondary voltage.

  1     3-----*-3     1

    T1      Jack  T2

  2     4-----*-4     2

-Put project box together

         +---------------------------------------+
         |   SW1    SW2    LED                   |
         |  1 O 2  1 O 2    O                    |
]-Plug---|                                       [Jack
         |                                       |
         |                                       |
         +---------------------------------------+

 note --- please mark your switches and positions. it will help.

[How to Use It]
-SW1 is off/on,SW2 is black/aqua. 
-First, SW1 is 1, SW2 is 1. Second, turn on, the black box is on
 ,and you call as mention in definition. Third, when finish 
 change SW2 to 2, if LED comes on then F.B.I. is trying to trace
 ,but the aqua box is on and hangsup your phone.

 
[Comments]
This is experimental.

We would like some response, or ideas, or anything else.
If you meet us on a board, just say 'hi, i liked that black and
aqua box of yours.'

                        ----------------------- 
                        How to build a BLUE BOX 
                        ----------------------- 
 
   We all know that the touch tone frequencies are composed of 2 tones (2 
different frequencies) so that is the reason why we have 2 VCO's (Voltage 
Controlled Oscilators). We will call then VCO#1 and VCO#2. If you have
noticed VCO#1 and VCO#2 are exactly the same type of circuits. That is why
only 1 was drawn. But remember that whatever goes for VCO#1 also goes for
VCO#2. Both VCO'S are composed of a handfull of part. One chip, two
capacitors, 2 resistors and five potentiometers. All of this will give you
(when properly calibrated) one of the freqencies necessary (the other one
will come from VCO#2) for the operation of the Blue Box. Both of these freqs.
will be mixed in the speaker to form the required tone. 
 
   This is one of the most sophisticated designs I have ever made. Why? 
Because other designs will drain the battery after 10 calls. This design will
make them last 10 months!!!!!  But never the less, don't forget to put in a
switch for on and off. Ok let's build the two VCO'S and calibrate the unit
before we get to the keyboard construction. 
 
VCO CONSTRUCTION: 
---------------- 
 
           TOOLS REQUIRED 
 
 1 ocilliscope(optional but not req) 
 1 Freq. counter   (REQUIRED) 
 1 Volt meter       "  "  " 
   Electronics tools  (Pliers,drll, 
   screwdrivers, etc.) 
 
===================================== 
 
               PARTS 
 
 R1  1.5K RESISTOR  5% 
 R2  1K   RESISTOR  5% 
 C1 .1uf ELECTROLYTIC CAPACITOR 16VDC 
 C2 .01uf    "        "  (MYLQR)16VDC 
IC1 2207 VCO CHIP BY EXAR ELECTRONICS 
    Remember the above only says 
    VCO#1 but the same is for VCO#2 
 R3-R4 150 OHM RESISTORS  5% 
 C3-C4 .1 uf ELECTROLITIC CAPACITOR 
       10VDC 
 P1-P10 200K TRIMMER POT - 20 TURNS 
       DIODES USED IN THE KEYBOARD 
       ARE 1N914 TYPE (40 OF THEM) & 
       13 SWITCHES FOR THE KEYBOARD 
       SPST MOMENTARY. 
 SPKR=YOU CAN USE A TELEPHONE SPEAKER 
      FOR THIS (IT WORKS BEST) BUT 
      REMEMBER TO TAKE OUT THE DIODE 
      THAT IS CONNECTED ACCROSS IT.
 
======================================= 
 
           IMPORTANT NOTES 
 
  1. DO NOT USE ANYTHING ELSE OTHER 
     THAN A MYLAR CAPACITOR FOR C2. 
  2. PINS 10,9,8 SHOULD BE TIED 
     TOGETHER AND BE LEFT FLOATING. 
  3. ALL RESISTORS SHOULD BE 5%! 
     NOTHING ELSE! 
  4. A TELEPHONE SPEAKER GIVES THE 
     BEST RESULTS. 
 
======================================= 
 
           TROUBLE SHOOTING 
 
   By now you should have constructed the two VCO'S on a bread board or 
anything that pleases you. Check for cold solder joints, broken wires, 
polarity of the battery, etc. Before we apply power to the VCO'S we have to
adjust the pots for their half way travel point. This is done by turning them
21 turns to the right and then 10 turns to the left. Do the same for all ten
of them. 
 
   Now apply power to the unit check to see that you have power in the chips
by putting the positive lead of your volt meter on pin 7 and the negative
lead on pin 12. If you do not have anything there turn off the unit and
RECHECK THE WIRING. 
 
   When you get the right voltages on the chips, connect a diode to a piece
of wire (look at fig. 2 for the orientation of the diode) from ground to any
pot at point T (look carefully at the schematic for point T it is labeled
T1-T10 for all pots). You should be able to hear a tone, if not disconnect
the lead and place the speaker close to your ear and if you hear a chirp-like
sound, this means that the two VCO'S are working if you don't, it means that
either one or both of the VCO'S are dead. So in this case it is always good
to have an ocilloscope on hand. Disconnect the speaker from the circuit and
hook the ocilliscope to 1 of the leads of the speaker & the ground from the
scope to the ground of the battery. Connect again the ground lead with the
diode connected to it from ground to any pot on the VCO that you are checking
and you should see a triangle wave if not turn the pot in which you are
applying the ground to until you see it. When you do see it do the the same
for the other VCO to make sure it is working. (amplitude is about 2VAC). When
you get the two VCO's working you are set for the adjustment of the
individuals pots. 
 
 
                            Adjustment 
                            ---------- 
 
   Disconnect the speaker from the circuit and connect a freq. counter (the
positive lead of the counter to one of the speakers leads that belongs to 
VCO#1 or connect it to pin 14). 
 
   Connect the negative lead to the battery negative and connect the jumper
lead with the diode from ground to pot number 1.T1. ( the first pot number
1 point T1) if you got it working you should hear a tone and get a reading
on the counter. Adjust the pot for a freq. of 1700HZ and continue doing the
same for pots 2-5 except that they get differents freqs. which are: 
 
$$$$$$$$$$$$$$ 
$ P1= 1700hz $ 
$ P2= 1300hz $ 
$ P3= 1100hz $ 
$ P4=  900hz $ 
$ P5= 1500hz $ 
$$$$$$$$$$$$$$ 
 
   Now disconnect the freq. counter from the speaker lead of VCO#1 or from
pin 14 (which ever you had it attached to at the beginning) and connect it
to the speaker lead of VCO#2 or to pin 14 of VCO#2 and make the same
adjustments to P6-10. 
 
$$$$$$$$$$$$$$$ 
$ P6=  1100hz $ 
$ P7=   700hz $ 
$ P8=   900hz $ 
$ P9=  2600hz $ 
$ P10= 1500hz $ 
$$$$$$$$$$$$$$$ 
 
   When you finish doing all of the pots go back and re-check them. 
 
 
                            Keyboard 
                            -------- 
 
  If you look at FIG-2 you will see that the keys are simple switches. 
Connected to a ground and two diodes on the other end. these diodes are used
to simplify the construction of the keyboard because otherwise the
distribution of the ground signal for both VCO'S would have been done
mechanically. The diode will go to VCO#1 and the other will go to VCO#2.
FIG-3 shows the arrangement of the keys on the keyboard. 
 
 
   Below is a table that will help you connect the keys to the required VCO's
pots. 
 
              (-FIG 2-)               
-----!-----!--------!--------!------- 
     !     !        !        !        
 TO  ! TO  !  FREQ  !  FREQ  !  KEY   
 POT ! POT !  OUT:  !  OUT:  !        
 ON  ! ON  !        !        !        
 VCO1! VCO2!        !        !        
-----!-----!--------!-------%!------- 
  1  !  06 ! 1700hz ! 1100hz !   C 
  2  !  10 ! 1300hz ! 1500hz !   0 
  1  !  10 ! 1700hz ! 1100hz !   E 
  4  !  07 ! 0900hz ! 0700hz !   1 
  3  !  07 ! 1100hz ! 0700hz !   2 
  3  !  08 ! 1100hz ! 0900hz !   3 
  2  !  07 ! 1300hz ! 0700hz !   4 
  2  !  08 ! 1300hz ! 0900hz !   5 
  2  !  06 ! 1300hz ! 1100hz !   6 
  5  !  07 ! 1500hz ! 0700hz !   7 
  5  !  08 ! 1500hz ! 0900hz !   8 
  5  !  06 ! 1500hz ! 1100hz !   9 
  -  !  09 ! ------ ! 2600hz !   X 
 
   Remember that in FIG-2 it's the same for each key except the "X" key,
which only takes one diode. 
 
 
few KEYS to the diagram: 
 
Cx is capacitor #x   Denoted by: ---| | 
--- 
 
Px is Pot or Variable resistor #x  Deno 
ted by :/ 
 
        \ 
 
        /<--   
                                    \ 
Rx is resistor #x  Denoted by /\/\/\/\ 
 
                            SCHEMATICS 
 
     The XR-2207 chip is a Voltage-Controlled Oscillator and a 14 pin device
thus you must be very careful when soldering the parts to this device. It is 
a little dificult to actually draw a schematic on an 80 character screen  
using limited graphics, but I will give 
it a try. 
 
                                        TO GND_____________ 
                                              | 
                                                         ___ 
                                               C2     C3 ___ 
                                            _||_          | 
                                           |    |    _____|__9v+ 
                                           |    |    |    | 
                        `   `    `    `    `    `    `    | 
                        -------------------------------   | 
                        7   6    5    4    3    2    1 |  | 
                       |                               <  | 
                       |8   9    10   11   12   13   14|  | 
                        -------------------------------   | 
                        `   `    `    `    `    `    `    | 
                                 |    |                   | 
                    --| |--------|    |                   | 
                    |C1    R2         |         R1        | 
          GND ______|___/\/\/\/\______|_____/\/\/\/\______| 
 
 
is is a diagram of how to locate the different pins on the chip. 
Please notice that pin one (1) is the closest to the notch on top of the
chip. The first thing we'll do is to connect power to the chip (remember that
you need to build two (2) of these to get a complete system) this is
accomplished by connecting the positive wire of the battery lead to pin#1 one
leg of R1  and R2 is soldered to pin#11. The other leg of R1 goes to pin 1
or to the d. C1 goes between pin 10 and ground. The timing capacitor or C2
goes between pins 2 and 3 of the chip. Pins 8 and 9 should be grounded to
ground. Pin 14 is the output and this is where one leg of C4 (C3 goes on the
other VCO) in series with R3 (the same goes for the other VCO) and to one
lead of the speaker. 
 
     The trimmer pots P1 to P10 should be grouped in groups of 5 pots each.
The way you group it is by soldering one end of the pot to each other leaving
the wiper and the other end free. 
 
          | This end goes to pin 6 of the chip 
                   | 
      _____________|_____________ 
       /     /     /     /     / 
       \     \     \     \     \ 
       /<-   /<-   /<-   /<-   /<- 
       \ |   \ |   \ |   \ |   \ |  
       / |   / |   / |   / |   / | 
         |     |     |     |     | 
         |     |     |     |     | 
       P1      P2    P3    P4    P5 
 
 
     And finally this is the way each key should be wired. 
 
                 diode 
he contact of  the  
                         |--------- \------               key 
     to Px  ------>|-----|                | 
                 diode                    | 
                                        ----- 
                                         --- Ground 
Blue Boxing Numbers (1-800'S) 
 
These numbers can be used to drop a trunk and will work with ANY switching 
system! In particular, these numbers allow you to box from DIGITAL (ESS/DMS) 
Electronic Switching Systems!!! 
 
Florida   Scan Range (0600-0619) (0750-0905) (4600-4639) 
 
.874-0146 Golf Equipment - Fort Walton 
*874-0610 
*874-0613 
*874-0619 
*874-0812 
*874-0842 
*874-0843 Modem 
*874-0844 
*874-0890 
.874-0891 
*874-0897 
*874-0898 
*874-4600 
*874-4602 
.874-4603 Bear Archery - Gainesville 
.874-6478 American Sports, INC. - Havana 
 
South Carolina   Scan Range (5900-6129) (6200-6209) 
 
.845-2471 Resort Hotel - Myrtle Beach 
.845-4369 Office Furniture - Florence 
*845-5918 
*845-5922 
.845-5927 Electronic Marine Equipment - Lake City 
.845-6011 Motel - South of the Border 
*845-6013 
*845-6016 
*845-6018 
*845-6022 
*845-6051 
*845-6052 
*845-6065 
*845-6072 
*845-6079 
*845-6080 Kachunk 
*845-6084 Kachunk 
*845-6120 Chunk 
*845-6124 
.845-6135 Resort - Hilton Head Island 
.845-8248 Invironments, INC. - Laural Bay 
 
Oregon 
 
.547-0251 Motel - Salem 
.547-2513 Merco Producst - Eugene 
.547-4741 Hotel - Ashland 
.547-7842 State Tourist Information - Salem 
 
Pennsylvania  Scan Range (3600-3619) (3700-3709) 
 
*458-3600 
.458-3602 Resort Hotel - State College (Click) 
*458-3605 
*458-3608 
*458-3610 
*458-3613 
*458-3615 
*458-3617 
*458-3619 
*458-3700 
*458-3705 
*458-3709 
.458-3735 Clearfield Hardware - Clearfield (Click) 
 
South Dakota 
 
.843-8319 Hotel - Rapid City 
 
Texas  Scan Range  (0800-0809) (3600-3609) (4400-4479) 
 
*858-0800 (Click) 
*858-4402 
.858-4403 Motel - Amarillo 
*858-4404 
*858-4410 
*858-6666 
 

                _____________________________________________
               !                                             !
               !              Introducing the:               !
               !                                             !
               !        BBBBB EEEEE IIIII GGGGG EEEEE        !
               !        B   B E       I   G     E            !
               !        BBBBB EEE     I   G GGG EEE          !
               !        B   B E       I   G   G E            !
               !        BBBBB EEEEE IIIII GGGGG EEEEE        !
               !                                             !
               !              BBBBB OOOOO X    X             !
               !              B   B O   O  X  X              !
               !              BBBBB O   O   XX               !
               !              B   B O   O  X  X              !
               !              BBBBB OOOOO X    X             !
               !                                             !
               !           - Construction and Use -          !
               !                                             !
               !           Invented and Written by:          !
               !                                             !
               !              The Exterminator               !
               !_____________________________________________!
 
 INTRODUCTION
        
    Have you ever wanted a lineman's handset?  Surely every phreak has at
least once considered the phun that he could have with one.  After searching
unlocked phone company trucks for months, we had an idea.  We could build one.
We did, and named it the "Beige Box," simply because that is the color of
ours.  In the following file, we will give complete instructions for the con-
struction and use of a Beige Box.
 
 CONSTRUCTION
 
    The construction is very simple.  First, you must understand the concept
of the device.  In a modular jack, there are four wires.  These are red,
green, yellow, and black.  For a single line telephone, however, only two
matter: the red (ring) add green (tip).  The yellow and black are not neces-
sary for this project.  A lineman's handset only has two clips on it: the ring
and the tip.

    You will need a phone (we recommend a touch-tone) with a modular plug, a
modular jack, and two large alligator clips (preferably red and green, respec-
tively).  Take the modular jack and look at the bottom of its casing.  There
should be a gray jack with four wires (red, green, yellow, and black) leading
out of it.  To the end of the red wire attach a red alligator clip.  To the
end of the green wire attach a green alligator clip.  The yellow and black
wires can be removed, although I would only set them aside so that you can use
the modular jack in future projects.  Now insert your telephone's modular plug
into the modular jack.  That's it.

    This particular model is nice because it can be inexpensive, uses common
parts that are readily available, is small, is lightweight, and does not re-
quire the destruction of a phone.

 USES

    There are many uses for the Beige Box.  However, before you can use it,
you must know how to attach it to its output device.  This device can be any
of several Bell switching apparatus that include terminal sets (i.e., remote
switching centers, bridging heads, cans, etc.)  To open most Bell Telephone
switching apparatus, you must have a 7/16 inch hex driver.  This piece of
equipment can be picked up at your local hardware store.  With your 7/16 hex
driver, turn the security bolt(s) approximately 1/8 of an inch counter-clock-
wise and open.  If your output device is locked, then you must have some
knowledge of destroying and/or picking locks.  However, we have never encoun-
tered a locked output device.  Once you have opened your output device, you
should see a mass of wires connected to terminals.  On most of your output
devices, the terminals should be labeled "T" (Tip -- if not labeled, it is
usually on the left) and "R" (Ring -- if not labeled, it is usually on the
right).  Remember: Ring - red -  right.  The "Three R's" -- a simple way to
remember which is which.

    Now you must attach the red alligator clip (ring) to the "R" (ring) termi-
nal.  Attach the green alligator clip (tip) to the "T" (tip) terminal.

 NOTE: If instead of a dial tone you hear nothing, re-adjust the alligator
       clips so that they are not touching each other or other terminals.
       Also make sure that they are firmly attached.  By this time you should
       hear a dial tone.  Dial ANI and find out the number that you are using
       (you wouldn't want to use your own).

    Here are some practical applications:
              o  Eavesdropping
              o  Long distance, static-free phone calls to phriends
              o  Dialing direct to Alliance Conferencing (also static free)
              o  Phucking people over
              o  Bothering the operator at little risk to yourself
              o  Blue Boxing with a greatly reduced chance of getting caught
              o  Anything at all that you want, since you are an extension on
                 that line

 Eavesdropping:
           
    To be most effective, first attach the Beige Box and then your phone.
This eliminates static caused by connecting the box, therefore reducing the
potential suspicion of your victim.  When eavesdropping, it is always best to
be neither seen nor heard.  If you hear someone dialing out, do not panic; but
rather hang up, wait, and pick up the receiver again.  The person will either
have hung up or tried to complete their call again.  If the latter is true,
then listen in, and perhaps you will find information worthy of blackmail!  If
you would like to know who you are listening to, after dialing ANI, pull a
CN/A on the number.

 Dialing Long Distance:

    This section is self-explanatory, but don't forget to dial a "1" before
the NPA.

 Dialing Direct to Alliance Conferencing:

    Simply dial 0-700-456-1000 and you will get instructions from there.  I
prefer this method over PBXs, since PBXs often have poor reception and are
more difficult to come by.

 Phucking People Over:

This is a very large topic for discussion.  Just by using the other
functions described, you can create a large phone bill for the person (they
will not have to pay it, but it is a hassle for them).  In addition, since you
are an extension of the person's line, leave your phone off hook, and they
will not be able to make or receive calls.  This can be extremely nasty be-
cause no one would suspect the cause of the problem.

 Bothering the Operator:

    This is also self-explanatory and can provide hours of entertainment.
Simply ask or say things to her that are offensive and you would not like
traced to your line.  This also corresponds with the previous described
section, Phucking People Over.  After all, guess who's line it gets traced to?
He he he...

 Blue Boxing:

    See a file on Blue Boxing for more details.  This is an especially nice
feature if you live in an ESS-equipped prefix, since the calls are, once
again, not traced to your line.

 POTENTIAL RISKS OF BEIGE BOXING

    Overuse of the Beige Box may cause suspicions within the Gestapo, and
result in legal problems.  Therefore, I would recommend that you:
              o  Use more than one output device
              o  Choose a secluded spot to do your Beige Boxing
              o  Keep a low profile (i.e., do not post under your real name
                 on a public BBS concerning your accomplishments)
              o  In order to make sure that the enemy has not been inside your
                 output device, I recommend that you place a piece of trans-
                 parent tape over the opening of your output device.  There-
                 fore, if it is opened in your absence, the tape will be dis-
                 placed and you will be aware of the fact that someone has
                 been intruding upon your territory.

 DISCLAIMER

    Since this file has been written for information purposes only, the
authors cannot and will not take any responsibility for the construction and
use of the Beige Box.

 *  -   *   -   *   +   *   -   *  -   *
 *                                     *
 *      How to build a BLACK BOX       *
 *                                     *
 ***************************************

(Also known as mute box)


 To all who dare --

    What is a BLACK BOX?  A BLACK BOX is a device that is hooked up to your
fone that fixes your fone so that when you get a call, the caller doesn't get
charged for the call.  This is good for calls up to 1/2 hour, after 1/2 hour
the Fone Co. gets suspicious, and then you can guess what happens.

 The way it works:

    What this little beauty does is keep the line voltage from dropping to 10v
when you answer your fone.  The line is instead kept at 36v and it will make
the  fone think that it is still ringing while your talking.  The reason for
the 1/2 hour time limit is that the Fone CO. thinks that something is wrong
after 1/2 an hour of ringing.

    All parts are available at Radio Shack.  Using the least possible parts
and arrangement, the cost is $.98.  And that is parts for two of them!  Talk
about a deal!  If you want to splurge then you can get a small PC board, and
a switch.  There are two schematics for this box, one is for most normal
fones.  The second one is for fones that don't work with the first.  It was
made for use with a Bell Trimline touch tone fone.

        **  Schematic 1 for most fones  **
        **         LED ON: BOX ON       **

   FROM    >--------------------GREEN->     TO
   LINE    >--!   1.8k  LED  !---RED-->    FONE
              !--/\/\/\--!>--!
              !              !
              ------>/<-------
                    SPST


Parts:  1 1.8k 1/2 watt resistor
        1 1.5v LED
        1 SPST switch
             
You may just have two wires which you connect together for the switch.


      **  Schematic 2 for all fones  **
      **        LED ON: BOX OFF      **

   FROM    >---------------GREEN->     TO
   LINE    >-------      ---RED-->    FONE
                  !  LED !
               -->/<--!>--
               !         !
               ---/\/\/---
                   1.8k


Parts:  1 1.8k 1/2 watt resistor
        1 1.5v LED
        1 DPST switch


Here is the PC board layout that I recommend using.  It is neat and is very
easy to hook up.

   Schematic #1        Schematic #2

**************     ****************
*            *     *  -------     *
* --<LED>--- *     *  !     !     *
* !        ! *     *  ! <SWITCH>  *
* RESISTOR ! *     *  ! !      !  *
*        ! ! *     *  ! !      /  *
* -------- ! *     *  ! !      \  *
* !        ! *     *  ! <LED>! /  *
* --SWITCH-- *     *  !      ! \  *
*  !      !  *     *  !      ! /  *
*  !      !  *     *  !      ! !  * 
*  !      !  *     *  !      !-!  *
***!******!***     ***!********!***

*** These last few lines were inserted by hypothesis! --- The Director ***

    Once you have hooked up all the parts, you must figure out what set of
wires go to the line and which go to the fone.  This is because of the fact
that LED's must be put in, in a certain direction.  Depending on which way
you put the LED is what controls what wires are for the line & fone.

 How to find out:
              
    Hook up the box in one direction using one set of wires for line and the
other for fone.

 *NOTE*  For Model I switch should be OFF.
 *NOTE*  For Model ][ switch  should be set to side connecting the LED.

    Once you have hooked it up, then pick up the fone and see if the LED is
on.  If it is, the LED will be lit.  If is doesn't light then switch the wires
and try again.  Once you know which are which then label them.

 *NOTE*  - If neither directions worked then your switch was in the wrong
           position.  Now label the switch in its current position as BOX ON.

 How to use it:

    The purpose of this box is not to people who call you so it would make
since that it can only be used to receive calls.  When the box is *ON* then
you may only receive calls.  Your fone will ring like normal and the LED on
the box will flash.  If you answer the fone now, then the LED will light and
the caller will not be charged.  Hang up the fone after you are done talking
like normal.  You will not be able to get a dial-tone or call when the box is
on, so turn the box  *OFF*  for normal calls.  I don't recommend that you
leave it on all the time, as you don't want it to answer when Ma Bell calls!
                             BLACK BOX PLANS
 
HERE IS HOW YOU CONSTRUCT A BLACK BOX.
 
  WHEN YOUR PHONE IS JUST SITTING THERE DOING NOTHING
THE VOLTAGE THROUGH THE PHONE LINE IS ZERO. THEN IF SOMEONE
CALLS YOU (FOR SOME STRANGE REASON) AND THE PHONE IS
RINGING. THE VOLTAGE JUMPS TO 48 VOLTS WHICH TELLS MA 
BELL TO STAND BY IF YOU SHOULD PICK UP SO SHE CAN
BILL YOU. WHEN YOU EVENTUALLY PICK UP THE PHONE, THE 
VOLTAGE DROPS TO 10 VOLTS AND THE BILLING STARTS. WHAT
A BLACK BOX DOES IS KEEPS THE THE VOLTAGE AS 36 VOLTS,
THEREFORE THE INCOMING CALLER NEVER GETS BILLED (INGEINIOUS)
  THE ORIGINAL BLACK BOX WAS CREATED BY AN EX-BELL EMPLOYEE
WHO WENT BY THE NAME "CAPTAIN CRUNCH". HE GOT HIS NAME
FROM THOSE LITTLE WHISLES YOU GOT IN BOXES OF CAPTAIN CRUNCH
BECAUSE THEY EMITED A TONE THAT WAS EQUAL TO A COIN.CAPTAIN 
CRUNCH JUST ANNOUNCED  HIS RETIREMENT FROM PHREAKING
WHEN HE WAS RELEASED FROM A CALIFORNIA JAIL. HE WAS
CAUGHT WITH A BLUE BOX.
    
 CONSTRUCTION OF A
  BLACK BOX
   
  1] A 36 VOLT ZENER DIODE.
  2] A CERAMIC OR MYLAR CAPACITOR OF 0.1 MICROFARAD.
  3] A ELECTROLYTIC CAPACITOR OF 1.0 MICROFARAD.
 
 YOU CAN GET THESE AT YOUR LOCAL RADIO SHACK DEALER.
 
FIRST YOU HAVE TO OPEN UP YOUR PHONE.YOU SHOULD 
NOTICE THREE WIRES COMING IN FROM THE BACK OF THE PHONE,
A GREEN, RED, AND YELLOW. MOST OF THE TIME THEY CAN 
DIFFER.DON'T WORRY ABOUT THE YELLOW WIRE, WE WILL
NOT BE USING THIS.YOU WILL NEED TO FIND THE MOST 
POSITIVE OF THE REMAINING TWO WIRES.(ALMOST ALWAYS
THE GREEN WIRE). NOW CONNECT THE BANDED END OF THE ZENER
DIODE TO THE MORE POSITIVE OF THESE TWO WIRES. "IN 
SERIES". YOU HAVE JUST COMPLETED THE FIRST STEP.
  FOR THE SECOND STEP YOU NEED A CERAMIC OR MYLAR 
CAPACITOR OF 0.1 MICROFARAD. YOU CONNECT THIS
"IN PARRALLEL" ACROSS THE DIODE. THIS IS NEEDED TO
ALLOW THE DIODE TO PASS VOICE SIGNALS.
 NOW FOR THE FINAL STEP TAKE YOUR ELECTROLYTIC
CAPACITOR OF UP TO ONE MICROFARAD WITH ITS '+'
END CONNECTED TO THE BANDED END OF THE DIODE
AND THE OTHER END SHOULD BE CONNECTED TO THE ANODE 
END OF THE DIODE. MA BELL IS NOT TOTALLY OBLIVIOUS
TO THIS.IF THE PHONE RINGS FOR ABOUT A HALF-HOUR THEY
WILL THINK SOMETHING IS WRONG AND BILL YOU ANYWAY.
WHEN USING A BLACK BOX,YOUR PHONE WILL CONTINUE 
RING EVEN THOUGH YOU PICKED IT UP. YOU HAVE TO MAKE A
SWITCH TO CONNECT ONE OF THE RINGER WIRES.THAT WILL
SHUT IT OFF. THAT'S IT! HAVE PHUN!!!!!!!!!!!!!!!!
<><><><><><><><><><><><><><><><><><><><><><><><><><<><>                         /-/-/-/-/-/-\-\-\-\-\-\

                        <:-\-Black Box Plans-/-:>
                         \-\-\-\-\-\-/-/-/-/-/-/
 
 
(>Introduction<)
 
           What is a BLACK BOX? A BLACK BOX is a device that is hooked up to your phone that fixes your phone so that when you get a call, the caller doesn't get charged for the call. This is good for calls up to 1/2 hour, after 1/2  hour the Gestapo (the

you can guess what happens. 
           What this little beauty does is keep the line voltage from dropping  to 10v when you answer your phone. The line is insted kept at 36v and it will
make the phone think that it is still ringing while your talking. The reason
for the 1/2 hour time limit is that the Gestapo thinks that something is wrong
after 1/2 an hour of ringing. (I mean, come on)
 
(>Phone Modification Instructions<)
 
     All parts are available  Radio Shack. Using the least possible parts and arrangement, the cost is $0.98; and that is parts for two  of them! Talk  about a deal! If you  want  to splurge then you can get a +PC board, and a switch. There are two s

 
                    **  Schematic 1 for most fones  **
                    **         LED ON: BOX ON       **
 
                  FROM >--------------------GREEN->  TO
                  LINE >--!   1.8k  LED  !---RED--> FONE
                          !--/\/\/\--!>--!
                          !              !
                          ------>/<-------
                               SPST
 
 
 
  Parts:  1 1.8k 1/2 watt resistor
          1 1.5v LED
          1 SPST switch
 
 *You may just have two wires which you connect together for the switch.
 
 
                     **  Schematic 2 for all fones  **
                     **        LED ON: BOX OFF      **
                   FROM >---------------GREEN->  TO
                   LINE >-------      ---RED--> FONE
                               !  LED !
                             ---->/<--!>--
                             !         !
                             ---/\/\/---
                                1.8k
 
  Parts:  1 1.8k 1/2 watt resistor
          1 1.5v LED
          1 DPST switch
 
 
       Here is the PC board layout that I recommend using. It is neat and is
very easy to hook up:
 
                    Schematic #1        Schematic #2
 
                   **************     ****************
                   *            *     *  -------     *
                   * --<LED>--- *     *  !     !     *
                   * !        ! *     *  ! <SWITCH>  *
                   * RESISTOR ! *     *  ! !      !  *
                   *        ! ! *     *  ! !      /  *
                   * -------- ! *     *  ! !      \  *
                   * !        ! *     *  ! <LED>! /  *
                   * --SWITCH-- *     *  !      ! \  *
                   *  !      !  *     *  !      ! /  *
                 L *  !      !  * F L *  !      ! !  * F
                 I>RED-      -RED>O I>RED-      ---RED>O
                 N>-----GREEN---->N N>-----GREEN------>N
                 E * h          * E E *              * E
                   **************     ****************
 
 
           Once you have hooked up all the parts, you must figure out what set of wires go to the line and which go to the fone. This is because of the fact
that LED's must be put in, in a certain direction.  Depending  on which way you
put the LED is what controls what wires are for the line & fone.
 
           In order to find out, hook up the box in one  direction
using one set of wires for line and the other for phone.
 
           *NOTE*  For Model I switch should be OFF.
           *NOTE*  For Model ][ switch  should  be
                  set to side connecting the LED.
 
     Once  you have hooked it up,  then pick up the fone and see if the LED  is
on.  If it is, the LED will be lit.  If is  doesn't light then switch the wires
and try again.  Once you know which are which  then label  them.   *NOTE*  - If
neither  directions  worked  then  your switch was in the wrong position.   Now
lable   the   switch  in  its   current position as BOX ON.
 
(>Black Box Usage<)
 
     The purpose of this box is not  to people  who  call you so it would  make
sense  that  it  can only  be  used  to recieve calls.   When the box is  *ON*
then you may only recieve calls. Your phone will ring like normal and the  LED light on the box will flash. When you answer the fone the LED will light and the caller will not be charged. Hang up the fone after you are done like normal. You will not be ab


[=-=================================-=]
[=-=]        Presenting:          [=-=]
[=-=]      The !BLAST! Box        [=-=]
[=-=]     An *ORIGINAL* Box,      [=-=]
[=-=]             ||              [=-=]
[=-=]          /\/\/\/\           [=-=]
[=-=================================-=]

Ever want to really make yourself be heard? Ever talk to someone on the phone
who just doesn't shut up? Or just call the operator and pop her eardrum? Well,
Up until recently it has been impossible for you to do theese things. That is,
unless of course you've got a blast box. All a blast box is, is a really cheap
amplifier, (around 5 watts or so) connected in place of the microphone on your
telephone. It works best on model 500 AT&T Phones, and if constructed small
enough, can be placed inside the phone.

Construction: 
Construction is not really important. Well it is, but since I'm letting you
make your own amp, I really don't have to include this.

Usage:
Once you've built your blast box, simply connect a microphone (or use the
microphone from the phone) to the input of the amplifier, and presto. There
it is. Now, believe it or not, this device actually works. (At least on
crossbar.) It seems that illinois bell switching systems allow quite alot of
current to pass right through the switching office, and out to whoever you're
calling. When you talk in the phone, it comes out of the other phone (again it
works best if the phone that you're calling has the standard western electric
earpiece) incredibly loud. This device is espicially good for PBS Subscription
drives.

Have Phun, and don't get caught!

                         %+%+%+%+%+%+%+%+%+%+%+%+%+
                         %HOW TO BUILD A BLOTO BOX+
                         %+%+%+%+%+%+%+%+%+%+%+%+%+

 Finally, it is here! What was first conceived as a joke to fool the inncoent
phreakers around America has finally been concieved by the one phreak who is
the expert on lines and voltage: The Traveler. Other boxes by the Traveler
include the White Gold Box, the Aqua Box, The Diverti Box, and the Cold Box.
All of those plans will soon be available in a BBS/AE near you!
 Well, for you people who are unenlightened about the Blotto Box, here is a
brief summery of a legend.


--*-=> The Blotto Box <=-*--

   For years now every pirate has dreamed of the Blotto Box. It was at first
made as a joke to mock more ignorant people into thinking that the function
of it actually was possible. Well, if you are The Voltage Master, it is
possible. Originally conceived by King Blotto of much fame, the Blotto Box is
finally available to the public.

   NOTE: The Traveler can not be responcable for the information disclosed in
the file! This file is strictly for informational purposes and should not be
actually built and used! Usage of this electronical impulse machine could have
the severe results listed below and could result in high federal prosecution!
Again, The Traveler TAKES NO RESPONCABILITY!
   All right, now that that is cleared up, here is the basis of the box and
it's function.
   The Blotto Box is every phreaks dream... you could hold AT&T down on it's
knee's with this device. Because, quite simply, it can turn off the phone
lines everywhere. Nothing. Blotto. No calls will be allowed out of an area
code, and no calls will be allowed in. No calls can be made inside it for that
matter. As long as the switchhing system stays the same, this box will not
stop at a mere area code. It will stop at nothing. The electrical impulses
that emit from this box will open every line. Every line will ring and ring
and ring... the voltage will never be cut off until the box/ generator is
stopped. This is no 200 volt job, here. We are talking GENERATOR. Every phone
line will continue to ring, and people close to the box may be electricuted if
they pick up the phone.
   But, the Blotto Box can be stopped by merely cutting of the line or
generator. If they are cut off then nothing will emit any longer. It will take
a while for the box to calm back down again, but that is merely a superficial
aftereffect. Once again: Construction and use of this box is not advised! The
Blotto Box will continue as long as there is electricity to continue with.
   OK, that is what it does, now, here are some interesting things for you to
do with it...


--*-=> The Blotto Box Functions and Installation <=-*--

   Once you have installed your Blotto, there is no turning back. The
following are the instructions for construction and use of this box. Please
read and heed all warnings in the above section before you attempt to
construct this box.
   Materials:
             - A Honda portable generator or a main power outlet like in a
               stadium or some such place.
             - A radio shack cord set for 400 volts that splices a female
               plug into a phone line jack.
             - A meter of voltage to attach to the box itself.
             - A green base (i.e. one of the nice boxes about 3' by 4' that
               you see around in your neighborhood. They are the main switch
               boards and would be a more effective line to start with.
               or: A regular phone jack (not your own, and not in your area
                   code!
             - A soudering iron and much souder.
             - A remote control or long wooden pole.

   Now. You must have guessed the construction from that. If not, here goes,
I will explain in detail. Take the Honda Portable Generator and all of the
other listed equiptment and go out and hunt for a green base. Make sure it is
one on the ground or hanging at head level from a pole, not the huge ones at
the top of telephone poles. Open it up with anything convienent, if you are
two feeble that fuck don't try this. Take a look inside... you are hunting
for color-coordinating lines of green and red. Now, take out your radio shack
cord and rip the meter thing off. Replace it with the voltage meter about. A
good level to set the voltage to is about 1000 volts. Now, attach the voltage
meter to the cord and set the limit for one thousand. Plug the other end of
the cord into the generator. Take the phone jack and splice the jack part
off. Open it up and match the red and green wires with the other red and green
wires.
   NOTE: If you just had the generator on and have done this in the
correct order, you will be a crispy critter. Keep the generator off until you
plan to start it up. Now, sauder those lines together carefully. Wrap duck
tape or insultation tape around all of the wires. Now, place the remote
control right on to the startup of the generator. If you have the long pole,
make sure it is very long and stand back as far away as you can get and reach
the pole over.

   NOTICE: If you are going right along with this without reading
the file first, you sill realized now that your area code is about to become
null! Then, getting back, twitch the pole/remote control and run for your
damn life. Anywhere, just get away from it. It will be generating so much
electricity that if you stand to close you will kill yourself. The generator
will smoke, etc. but will not stop. You are now killing your area code,
because all of that energy is spreading through all of the phone lines around
you in every direction.
   Have a nice day!


--*-=> The Blotto Box: Aftermath <=-*--

      Well, that is the plans for the most devastating and ultimately deadly
box ever created. My hat goes off to: King Blotto (for the original idea),
Captain Xerox (for the suggestion about stadiums), and Modern s}}x (for
the fact I was on his BBS when I thought of it.

--------------------------
Blue Box Numbers:

0-700-456-1000  Teleconference (free, because you are the operator!)
(Area code)-101 Toll Switching
(Area code)-121 Local Operator (hehe)
(Area code)-131 Information
(Area code)-141 Rate & Route
(Area code)-181 Coin Refund Operator
(Area code)-11511 Conference operator (when you dial 800-544-6363)

800 Dialup Listings

1-800-345-0008 (6)   1-800-547-6754 (6)
1-800-245-4890 (4)   1-800-327-9136 (4)
1-800-526-5305 (8)   1-800-858-9000 (3)
1-800-437-9895 (7)   1-800-245-7508 (5)
1-800-343-1844 (4)   1-800-322-1415 (6)
1-800-437-3478 (6)   1-800-325-7222 (6)


/-/    Vocabulary    /-/

 - Do not misspell except certain exceptions:
      phone -> fone
      freak -> phreak
 - Never substitute 'z's for 's's. (i.e. codez -> codes)
 - Never leave many characters after a post (i.e. Hey Dudes!#!#!
 - NEVER use the 'k' prefix (k-kool, k-rad, k-whatever)
 - Do not abbreviate. (I got lotsa wares w/ docs)
 - Never substitute '0' for 'o' (r0dent, l0zer).
 - Forget about ye old upper case, it looks ruggyish.

 All right, that was to relieve the tension of what is being drilled into your
minds at the moment.. now, however, back to the teaching course. Here are some
things you should know about phones and billings for phones, etc.

 LATA:  Local Access Transference Area. Some people who live in large cities or
areas may be plagued by this problem. For instance, let's say you live in the
215 area code under the 542 prefix (Ambler, Fort Washington). If you went to
dial in a basic Metro code from that area, for instance, 351-0100, that might
not be counted under unlimited local calling because it is out of your LATA.
For some LATA's, you have to dial a '1' without the area code before you can
dial the phone number. That could prove a hassle for us all if you didn't
realize you would be billed for that sort of call. In that way, sometimes, it
is better to be safe than sorry and phreak.

 The Caller Log: In ESS regions, for every household around, the phone company
has something on you called a Caller Log. This shows every single number that
you dialed, and things can be arranged so it showed every number that was
calling to you. That's one main disadvantage of ESS, it is mostly computerized
so a number scan could be done like that quite easily. Using a dialup is an
easy way to screw that, and is something worth remembering. Anyways, with the
caller log, they check up and see what you dialed. Hmm... you dialed 15
different 800 numbers that month. Soon they find that you are subscribed to
none of those companies. But that is not the only thing. Most people would
imagine "But wait! 800 numbers don't show up on my phone bill!". To those
people, it is a nice thought, but 800 numbers are picked up on the caller log
until right before they are sent off to you. So they can check right up on you
before they send it away and can note the fact that you fucked up slightly and
called one too many 800 lines.

Right now, after all of that, you should have a pretty good idea of how to grow
up as a good phreak. Follow these guidelines, don't show off, and don't take
unnecessary risks when phreaking or hacking.

--------------------------------------
^                                    ^
^        BOXING AROUND THE WORLD     ^
^      IN 10 EASY LESSONS OR LESS    ^
^                                    ^
^                BY                  ^
^                                    ^
^           **MOB-RULES**            ^
^                                    ^
^              WRITTEN               ^
^          For P-80 Systems          ^
^                                    ^
^                                    ^
^                                    ^
^                                    ^
--------------------------------------
 
 
OK WELL THIS ARTICLE WILL DEAL WITH  SOMETHING THAT THE PUBLIC IN GENERAL,
INCLUDING EVEN THE MOST DIE HARD  PHREAKERS,DONT KNOW.THE FIRST PART  WILL DEAL
WITH THE BACKGROUND KNOW-HOW ,THE SECOND PART WILL DEAL WITH THE  TONES
NEEDED.THE THIRD WILL DEAL WITH WHAT TO DO WITH THEM WHEN YOU HAVE  THEM.THE
FOURTH PART WILL BE THE  THE CONCLUDING PART,ON THE AMERICAN PORTION.
 
.           FIRST LESSON
THE WHAT THE HELL HE IS TALKING ABOUT PART.
 
WELL THE WORD PHREAKING REALLY MEANS GETTING A CALL TO GO THROUGH AND NOT
HAVING TO PAY FOR IT.THE REST OF THIS ARTICLE WILL USE THE TERM PHREAKER OR
PHREAKING. WELL PHREAKING REALLY STARTED IN 1960 WHEN TWO MEN FOUND,IN THE
BOTTOM OF THIER TELEPHONE COMPANY,A OLD,OLD,OLD TEC-MANUAL.IT HAD ALL THE INFO
ON  TELCO TERMINOLGY OF THAT DAY,AND THE  SUCH,BUT THE BEST PART OF THE OLD
MANUAL WAS,----THE TRUNCK TONES. THEY TOLD HOW TO,WHEN TO,WHAT SHOULD
HAPPEN,AND THE SUCH.THAT FAITHFULL DAY BACK IN 1968,WAS THE DAWNING OF THE
PHREAKER.
 
.          SECOND LESSON
.               OR
.   OK THAT HAPPENED SO LONG AGO WHAT ABOUT NOW,AND HOW CAN I PUT THAT OLD
STUFF TO WORK FOR ME??
 
WELL YOU NEED ONE OF TWO THINGS 1-A COMPUTER CAPABLE OF PLAYING MUSIC. 2-A HOME
MADE MEMORY REDIAL BLUE BOX.
 
AND WELL SINCE,I GUESS,YOU ARE READING THIS OFF OF A BBS YOU ALREADY HAVE 1
SOOOOO PUT IT TO USE BUB!!
 
THE TONES THAT MAKE UP A KEY.
 
--------------------------------------
^                                    ^
^ (1)  - 700 + 900                   ^
^ (2)  - 700 + 1100                  ^
^ (3)  - 900 + 1100                  ^
^ (4)  - 700 + 1300                  ^
^ (5)  - 900 + 1300                  ^
^ (6)  - 1100+ 1300                  ^
^ (7)  - 700 + 1500                  ^
^ (8)  - 900 + 1500                  ^
^ (9)  - 1100+ 1500                  ^
^ (0)  - 1300+ 1500                  ^
^ (KP) - 1100+ 1700                  ^
^ (ST) - 1500+ 1700                  ^
^ (11) - 700 + 1700                  ^
^ (12) - 900 + 1700                  ^
^ (KP2)- 1300+ 1700                  ^
^                                    ^
^                                    ^
^ ALL FREQUENCIES GIVEN ARE IN HZ.   ^
^                                    ^
^                                    ^
--------------------------------------
 
AND LEAST BUT NOT LAST THE MAGICICAL TONE,THAT DOES IT ALL,2600HZ.
 
 
.            THIRD LESSON
.                 OR
.WELL HELL DUDE KEEP GOING,CAUSE I'M
.          READY AND WILLING.
 
OK SO YOUR JUST SITTING THERE LOOKING AT THIS DUMB PGM YOU MADE,WELL ENOUGH OF
THE TECH INFO,NOW FOR THE HANDS ON. YOU MUST ALWAYS BEFORE A CALL GET INTO A
TRUNK THIS TODAY CAN ONLY BE DONE BY CALLING A STEP-BY-STEP SWITCHING SYSTEM,AS
OPPOSED TO CROSSBAR,ESS,OR DMS.FOR SAKE OF SIMPLICITY I WILL USE MONTREAL
DIRECTORY ASSICTANCE. CALL ON YOU PHONE,(DTMF),TOUCH-TONES. 1-514-555-1212,WHEN
YOU HEAR IT RING PLAY INTO THE PHONE 2600HZ.IF ALL GOES WELL YOU WILL HEAR
KERCHINK KERCHUNK SLINCE.NOW AFTER YOU DO THIS NO MORE TOUCH TONES WILL BE
USED. FOR YOUR FIRST TIME TRY 2600HZ WAIT 1 SEC AND KEY IN KP,ALL CALLS MUST
START WITH KP AND END IN ST,YOUR  FRIENDS AREA CODE AND # AND ST.NOW  WAIT.IF
ALL GOES WELL IT WILL RING AND YOUR FRIEND WILL ANSWER.BUT DON'T STAY ON TOO
LONG.
 
.           FOURTH LESSON
.                OR
.  YEA BUT WHATS ALL THE HIDDEN STUFF
.           I HEAR ABOUT.
 
OK SO YOU GOT THIS FAR AND ARE HUNGRY FOR MORE,WELL IF YOU ARE NOT THEN YOU
WILL NEVER BE CLASSIFIED AS A PHREAKER BUT A LOSER. THIS SYSTEM HAS A GREAT
MANY FILES ON JUST THAT SUBJECT SO LOOK  THEM OVER.IF YOU READ SOMETHING ON
ANOTHER GREAT FILE,AND DON'T  UNDERSTAND IT,THEN YOU ARE MESSING  WITH
SOMETHING OUT OF YOU LEAGUE. GRADUALLY BUILD UP TO IT THEN YOU WILL NOT BE
CONSIDERED A LOSER BUT A GREAT PHREAKER. YOU KNOW I STARTED 6-7 YEARS AGO AND I
TOO HAD TO GRADUALLY BUILD UP TO IT, BUT NOT UNTILL A YEAR AGO THIS MONTH  DID
I HAVE AS MUCH FUN IN IT,AS YOU  WILL.AS I AM WRITING THIS ARTICLE I  STILL
HAVE VISIONS OF ALL THE GOOD  BBS'S THAT USED TO BE UP TO HELP  NEW PHREAKS AND
EXPERT PHREAKS,AND YOU KNOW WHAT I FEEL KINDA SORROWED THAT THEY ARE JUST A
HANDFULL OF GOOD BBS'S AROUND FOR ALL THE FUTURE PHREAKS OF  THE WORLD TO LEARN
ON.
 
--------------------------------------
 
THE FOLLOWING INFORMATION IS FOR ADVANCE TO EXPERT PHREAKERS ONLY!!!
 
--------------------------------------
OK ENOUGH OF THAT OLD HAT HERE IS WHAT I MEANT ABOUT 'EVEN THE DIE HARD PHREAKS
DON'T KNOW'. THIS WAS FOUND OUT ON OCT 10 1984 STRAIGHT FROM TELECOM AUSTRALIA.
I WILL TELL YOU WHAT THE TONES ARE FOR THE CCITT #5 IS,WHICH BY THE WAY IS
USED BY THE REST OF THE WORLD!!
 
 
.           FIFTH LESSON
.                OR
HOW TO GET ON ANOTHER COUNTRIES TRUNK.
 
 
OK FIRST HERE ARE THE FREQUENCIES
 
--------------------------------------
^        THE CCITT#5 FREQUENCIES     ^
^                                    ^
^                                    ^
^  (1)  - 1380 + 1500                ^
^  (2)  - 1380 + 1620                ^
^  (3)  - 1500 + 1620                ^
^  (4)  - 1380 + 1740                ^
^  (5)  - 1500 + 1740                ^
-  (6)  - 1620 + 1740                ^
^  (7)  - 1380 + 1860                ^
^  (8)  - 1500 + 1860                ^
^  (9)  - 1620 + 1860                ^
^  (0)  - 1740 + 1860                ^
^  (11) - 1380 + 1980                ^
^  (12) - 1500 + 1980                ^
^  (13) - 1620 + 1980                ^
^  (14) - 1740 + 1980                ^
^  (15) - 1860 + 1980                ^
^                                    ^
^                                    ^
^ ALL FREQUENICIES GIVEN ARE IN HZ.  ^
^                                    ^
^                                    ^
--------------------------------------
 
 
OK SO NOW YOU HAVE THE FREQUENCIES LETS GET ON A AUSTRALIAN TRUNK.
 
YOU MUST FIRST CALL AN AUSTRALIAN # AND SINCE SOMETHING MAY GO WRONG FOR  YOU
EVERY ONCE IN A WHILE,I SUGGEST STRONGLY CALLING THROUGH AN EXTENDER THAT WILL
ALLOW AN OVERSEAS CALL TO GO THROUGH. IF YOU HAVE ONE PUT IT TO USE NOW!!
 
OK LETS ASSUME YOU DO.WELL CALL AN AUSTRALIAN # AND WHEN YOU HEAR IT RING PLAY
THE MAGICAL TONES FOR THE CCITT EQUIPMENT,ITS 2400HZ+2600HZ,WHEN YOU DO THIS
YOU WILL HEAR A SOUND WHICH WILL MAKE YOU THINK THAT THE  CONNECTION WAS
LOST,BUT IT WASN'T,IN FACT YOU ARE NOW ON AN AUSTRALIAN  TRUNK!! AND BY THE
WAY,THERE IS NOT A 10SEC TRUNK TIME OUT.
 
 
.           SIXTH LESSON
.                OR
.      THE KEY DEFINITONS PART.
 
 
NOW YOU NEED TO KNOW THE PROPER PROCEDURE FOR THE CCITT LINE,AND WHAT KEYS DO
WHAT. KEYS 0-12 ARE EXACTLY LIKE OURS!!
 
 
KEY DEFINITIONS
--------------------------------------
13 IS LIKE OUR KP.
14 IS LIKE OUR KP2.
15 IS LIKE OUR ST.
--------------------------------------
 
 
.           SEVENTH LESSON
.                OR
. THE PROPER PROCEDURE AND KEY USAGE
.               PART.
 
OK NOW YOU KNOW ALL THE KEYS AND TONES SO NOW IT IS TIME TO LEARN HOW TO USE
THEM. LETS ASSUME YOU WERE GOING TO CALL A # IN AUSTRALIA,THE PROCEDURE WOULD
BE-> 13+5+15+0+AC+# WAIT ABOUT 2OR3 SECS  AND ENTER 1(OPER) OR 2(SUBSCRIBER) OR
3(TEST CALL). AND DON'T WORRY ABOUT THE SOUNDS YOU HEAR AFTER YOU KEY IN THE
TONES, BECAUSE ALL CCITT#5 TRUNKS ARE SUPPOSE TO ECHO BACK EACH CHAR YOU KEY
IN!! NOW LETS CALL THE UNITED STATES. PROCEDURE WOULD BE-->13+2(A LIVE OPER)
OR0(SUBSCRIBER)+AC+#+15. NOW IF IT COULDN'T BE PUT THROUGH, REORDER OR AN
INTERNATIONAL RECORDING TRY THE ONLY INTERNATIONAL SENDER AUSTRALIA HAS,IT'S
MONTREAL CANADA. YOU WOULD ENTER 14+COUNTRY CODE+2OR0+ AC+#+15. NOW THAT SHOULD
BE ABOUT ALL THAT YOU NEED KNOW TO HAVE FUN ON ANOTHER COUNTRIES TRUNK.
 
.           EIGHTH LESSON
.                OR
.        THE CONCLUDING PART.
 
WELL IF YOU ACCTUALLY LIVED IN  AUSTRALIA YOU WOULD HAVE A BITCH OF A TIME
BOXING,DUE TO THE FACT THAT THEY USE DC PHONES UNLIKE OUR AC PHONES. YOU SEE
WHEN WE HANG-UP OUR PHONES THE PHONE SHOOTS A 2600HZ TONE TO TELL THE PHONE
COMPANY THAT THE PARTY HAS  HUNG-UP,BUT OVER THERE THEY JUST  REMOVE THE
GROUND,OR THE NEGATIVE SIDE OF THE LINE,SO THERE ARE NO TONES LIKE OURS.IF YOU
ARE SAYING HEY YOU MUST BE WRONG I KNOW SUCH AND SUCH WHO LIVES THERE AND BOXES
ALL THE TIME,WELL YOUR PARTIALLY RIGHT.THEY DO,OR AT LEAST  THEY DID.IN THE
PAST FEW YEARS A CALL TO THE STATES COST THEM ABOUT 20-30 A MIN.WHICH EQUALS
ABOUT 25-40$ OUR  MONEY.BUT THEY DID ONE UP ON THIER TELECOMM,THIER LIKE THE
OLD A.T.T. MA-BELL,YOU SEE THEY WOULD SHORT HAUL THIER CALLS TO THE STATES.WHAT
THEY WOULD DO IS CALL NEW ZEALAND AND THEN BLAST THE 2400+2600HZ SIGNAL AND
BOOM THEY WOULD BE PAYING FOR A CALL TO NEW ZEALAND,THE COST IS LIKE CALLING
FROM NY TO LA HERE,A SUBSTANIAL DIFFERENCE BUT YOU SEE THAT IS NOT SO ANYMORE.
THE COST IS ABOUT THE SAME,$1.00  DIFFERENCE A MIN,SO AUSTRALIANS DON'T REALLY
NEED TO BOX ANYMORE,AND THEY  DON'T!!WELL I HAVE TRIED TO HELP THOSE WHO ARE
NEW THIS FIELD AND THE OLD  TIMERS IN IT TOO,WITH THIS ARTICLE. I HOPE THAT AT
LEAST ONE LESSON HELPS SOME OF YOU OUT THERE!!
 
I WISH TO THANK THE FOLLOWING.
 
TELECOM AUSTRALIA
 
A.T.T. WHICH WITHOUT THIER LINES I  COULD NEVER HAVE HAD AS MUCH FUN IN THIS
FIELD,OR LEARNED SO MUCH ABOUT THE WORLD!

                          /-/-/-/-/-/-\-\-\-\-\-\
                         <:-\-Brown Box Plans-/-:>
                          \-\-\-\-\-\-/-/-/-/-/-/

 (>Introduction<)

    This is a fairly simple modification that can be made to any phone.   All
it does is allow you to take any 2 lines in your house and create a party
line.  So far I have not heard of any problems with it from my friends that
have set one up and I have not had any either.  There is one thing that you
will notice when you are one of the two people who is called by a person with
this box.  The other person will sound a little bit faint.  I could overcome
this with some amplifiers but then there wouldn't be very many of these boxes
made.  I think that the convenience of having two people on line at any one
time will make up for the minor volume loss.

 (>Phone Modification Instructions<)

 Here is the diagram:

KEY:___________________________________
    ! PART                   ! SYMBOL !
    -----------------------------------
    !BLACK WIRE              !   *    !
    !YELLOW WIRE             !   =    !
    !RED WIRE                !   +    !
    !GREEN WIRE              !   -    !
    !SPDT SWITCH             !  _/_   !
    !                           _/_   !
    !VERTICAL WIRE           !   |    !
    !HORIZONTAL WIRE         !   _    !
    -----------------------------------

       *    =    -    +
       *    =    -    +
       *    =    -    +
       *    =    -    +
       *    =    -    +
       *    ==_/_-    +
       *******_/_++++++
       |              |
       |              |
       |              |
       |_____PHONE____|

         
    In some houses the black and yellow are already wired in others you will
have to go out to your box and rewire it.  A good way to figure out which line
is which is to take the phone you are looking for off the hook.  Then you only
need to take the red and green wires entering your phone and hook them to the
different pairs of red and green going into the house.  You can't hurt any-
thing in the phone or telephone by probing.  When you find the pair that you
want take the black from your line and attach it to the red of the other line
then take the yellow and attach it to the green line.  Now you are all set to
go.  For people with rotary phones you can have one person call you then place
the second call out to the other person.  Though not a phreakers tool, the
brown box can be phun.

 Written by The Doc & Edited by 13th Floor Enterprises


 /=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\
 /=\                                 /=\
 /=\   HOW TO MAKE YOUR FONE INTO A  /=\
 /=\                                 /=\
 /=\             BUD BOX             /=\
 /=\                                 /=\
 /=\           Written BY:           /=\
 /=\                                 /=\
 /=\      DR. D-CODE & THE PIMP      /=\
 /=\                                 /=\
 /=\     THE SLAUGHTERED CHICKEN     /=\
 /=\           212/Choke-IT          /=\
 /=\                                 /=\
 /=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\=/=\

    This box is quite similar to a beige box, except this is a portable unit.
It is extremely handy for free voice calls and tapping a near by house's line.
It's really easy to make so don't worry about it (unlike a blue box!).

 MATERIALS:  2 Alligator clips
             One piece fone or normal fone (one piece is easier!)
             Soldering iron and some solder
             Some good wire

 PROCEDURE

1)  Cut the wire that connects the fone to the wall.  Inside there should be 4
    colored wires.  Yellow, red, green, and black.  If the wires are not
    colored, no need to get worried.  The two in the middle are red & green.
    Those are the two you need.
2)  Make sure to keep about 1-2 feet of this wire connected to the fone unless
    you want to use the other wire listed above.  Now solder one alligator
    clip to the green wire, and one the red.
3)  If you're using the other wire, strip the ends and solder one end to of
    each to the red and green on the fone, and one end to an alligator clip.
4)  Go to a near by house and locate the little gray box.  It's simple to
    find, look by the gas meter.  It should have the BELL logo on it.
5)  To open this thing, put your hand underneath it and hit upward.  You
    should get contact with the bottom edge of it.
6)  Now it should come open nice and easy.  Look inside and you will see five
    screws in this pattern:

                *     *

                   *
                *     *

7)  The screw in the middle and the two on the left do nothing. (you may want
    to check the two on the left, some people have a second line hooked up to
    these two.)  All you need to worry about are the two on the right.  The
    one in the top right-hand corner is usually the green, and the one in the
    bottom right-hand corner is usually the red.
8)  Clip an alligator clip to the corresponding terminals. (red to red, the
    green to green.)  You should get a dial tone.  If you don't, switch the
    alligator clips around.  If you still don't get a dial tone (or someone's
    conversation!) then the line has probably been disconnected or the fone is
    off the hook.

 IDEAS OF USE FOR THE BUD BOX

    Get a lot of wire and run it into your house.  Then you'll be an extension
of that line.  The fone will ring and you can listen to everything that's
going on the that line.

    You can call direct to any place using normal BELL service (gasp!). i.e.:
1-702-831-4263.  The bill will be not be charged to you.  It will be charged
to your neighbors (or whoever.)

                        *********************
                        *    The Busy Box   *
                        *        by         *
                        *  - Black Death -  *
                        *********************



    - Disclaimer -

    This file is intended for informational purposes only, and should not
be constructed. It Should definately not be used on another person's fone
line without their consent.
-------------------------------------------------------------------------------



    Ok, Now you're really pissed.
The Neighborhood Lamer has gone one step too far this time.
It's time for the Busy Box.

1) What is The Busy Box?
    The Busy Box is the Simplest Box ever created. It is attached to the
outside of the person's house, in their telephone box. It Makes it So that
When any Fone inside That house is Picked up, No dial Tone is heard, and
no Calls can be Received, or Sent. This is Good for Lame BBS's as They Tend
not to call out much, and it will remain Undetected for a longer Period of
Time.

2) Sounds Great! What do I need?

A) One Phone Cord - 5 Inches or so
B) Alligator Clips (Optional)

3) Wow! That's it? Tell me More! How do I set It Up?

    Well,  Take your phone cord, and remove the Outer insulation. Now you
should have 4 wires inside of it, Red, Green, Black, And Yellow. All you need
for most things are Green and Red, so save those. Take either the Black or The
Yellow and strip about 3 Inches with a wire stripper or a Knife. Now cut off 3
inches of Uninsulated wire and, voila, you have a really thin wire. Now, take
this wire, and go to your neighbors back yard. Look for Their Power Box, Near
it should be a small grey (or beige, or some ugly color) box with the little
Bell on it. Open this up (it should come right off, if not, use a 7/15 Hex
Driver) Now inside you should find four more pegs. Look for the Pegs with
a Green or Red wire coming out of them. If you have a Beige Box, hook it
up to Make sure there Is a Dial Tone. If therre is, Tie one end of your small
wire to the peg with the Green Wire coming out of it, and another to the one
with the Red coming out of it. Now use your beige box on it again, there should
be no dial tone, and pressing buttons should be ineffective. Congratulations,
you've disabled their fone line.

    Something you might want to try is to make the small wire longer, and stuff
    it in to the back of the box where there is a jungle of wires, so it will
     be more unnoticable. The more discreet, the better.
     
- Some Pro's and Con's -
     
Pro's -

 Very Effective - Any Idiot Could Build it - Very Inexpensive - Easy to Install
 Hard to Detect source of problem
 
 Con's -

 Easy to Detect that there -IS- a problem (No dial tone when receiver is picked
  up)
 
     If anyone knows how to busy the line out, and leave a dialtone, Please
     let me know
 
     This phile Was writen/Designed at The Unholy Temple By Black Death
 If you have any problems building this - You're an idiot. Sell your modem
 and buy a life.
 
     However, if ya just want to say "Hi" or get the Latest H/P Filez, Contact
 me on My board
 The Unholy Temple --- [408] 249-5405  or any of your favorite H/P boards.
 Have phun, and don't electrocute yourself.

 The Charging Box                            (c) Stinky Pig Productions
 ----------------                            --------------------------
 
 What it does:
 
 The Charging Box is used to indicate when a call is being charged
 for and when it is not. Once installed, the box has two lights, a
 green and a red. Green means free and red shows that you are being
 stung by BT!
 
 Components:
 
 1 x green LED                 1 x circuit board
 1 x red LED                   2 x 10K ohm (1/4 watt) resistors 
 2 x short lengths of wire     2 x small bulldog clips
 
 Circuit Diagram:
 
                     |  Line  |
                     |  (50v) |
               |------        ------|
               |                    |
               |-----[]------O------|
               |                    |
               |-----[]------O------|
 
 Where [] is a resistor and O is an LED.
 NB. IMPORTANT! One LED should have it's anode towards the resistor
                and the other should have it's cathode towards the
                resistor.
 
 Connection:
 
 Build that onto the board and connect the two points marked line
 to the wire, with the bulldog clips at the end. The box should now
 be connected to the line in parallel with the phone. 
 
 Operation:
 
 When the line is opened (Ie. the phone lifted) the green LED will
 light (if the read one does then just reverse the polarity of the
 box). Dialling numbers (by pulse) will cause the green LED to flicker
 but while you are making free calls it should never go out and the
 red LED will not light. As soon as the exchange starts charging for
 your call, the green LED will go out and the red LED glow.
 
 How it works:
 
 As the LEDs are in opposite directions, only one can light depending
 on the polarity of the current supply. This is exploited when
 the exchange begins charging as the polarity of the line is
 reversed.
                     ________________________________
                   |                                |
                   |       Making Your Phone        |
                   |       Into a Cheesebox         |
                   |                                |
                   |________________________________|


A Cheesebox (named for the type of box the first one was found in) is a
type of box which will, in effect, make your telephone a Pay-Phone. This
is a simple, modernized, and easy way of doing it.

      Inside Info: These were first used by bookies many years ago as a way
of making calls to people without being called by the cops or having their
numbers traced and/or tapped.

------------------------------------------------------------------------------

                    How To Make A Modern Cheese Box


You will need:

     1 Call Forwarding service on the line

     1 Set of Red Box Tones

     The number to your prefix's Intercept operator(do some scanning for
     this one)

     How To:
     -------

       After you find the number to the intercept operator in your prefix,
use your call-forwarding and forward all calls to her.  This will make your
phone stay off the hook (actually it now waits for a quarter to be dropped
in).  You now have a cheese box.

In Order To Call Out On This Line: You must use your Red Box tones and gener-
ate the quarter dropping in.  Then you can make phone calls to people.  As far
as I know, this is fairly safe, and they do not check much.

------------------------------------------------------------------------------


 \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
\[____________________________[_    \                                /
\[      The Chrome Box        [_     A Portable Self-Contained Device
\[        14-JUN-88           [_    /  to Manipulate Traffic Signals \
\[   Outlaw Telecommandos     [_      /     by Remote Control       \
\[     Modem Free Earth       [_           /                 \
\[\\\\\\\\\\\\\\\\\\\\\\\\\\\\[_                 -=p*p=-
  _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

  Emergency vehicles in many cities are now using devices called OptoComs.
OptoComs are a system of sensors on traffic lights that detect a pattern
of flashes from vehicle-mounted strobe lights.

  This flash pattern varies from city to city depending on the manufacturer
of the equipment used.  Often the sensors are installed only at major
intersections.  Nevertheless, the Chrome Box, which simulates these strobe
patterns can often be used to give your car the same priority as an
ambulance, paramedic van, firetruck or police car.

  Because of the varying patterns on different systems this phile will
outline a general procedure for making the Chrome Box.

Decoding Flash Patterns:

 First, you need to observe an emergency vehicle in action.  You can wait
until you encounter one by chance, running out to see when you hear a siren,
or when you pull over in your car to let one pass by. You might wait
near a fire station for the next emergency to occur.  Or, if you are very
impatient, you can summon one by calling in a false alarm (not recommended in
areas with limited services - that could divert attention from a real
emergency).  If the OptoComs in your area are the kind with a pattern of single
flashes at a steady rhythm, you have merely to buy a strobe light at Radio Shack
& adjust the flash rate until you can induce a traffic light to change.

 If the flash pattern is more complex, you can videotape the emergency vehicle &
then play back the tape in single-frame mode, counting the number of frames
between each flash. Each video frame is 1/30 of a second, using this you can
calculate the time between flashes in the pattern.  Another way is to count the
number of flashes (or flash-groups) in one minute and use that to compute the
rate. Counting video frames will give you a good idea of the spacing of the
flashes in a complex pattern.  For really accurate information, call the fire
station & ask them, or write to the manufacturer for a service manual, which
will include a schematic diagram that you can use to build one. A good cover
story for this is that you are a consultant & one of your clients asked you to
evaluate Optocom systems, or you could pose as a free-lance journalist writing
an article.

Modifying the Strobe Light:

 You may not have to modify the strobe at all. But if you need a faster
flash rate than your strobe allows, open it up & find the large capacitor
inside. Capacitors are marked in microfarads, abbreviated as mf,mfd or ufd.
By replacing the capacitor with one of the same voltage-rating (usually
250 volts or more) and a SMALLER value in microfarads, you can increase the
flash rate. Halving the microfarads doubles the rate.
 The other component that can be changed is the potentiometer (the speed
control device with the knob on it). Using a smaller value (measured in
ohms or Kilohms, abbrevaited with the greek letter 'omega' or the letter K)
will speed up the strobe. There may also be a resistor (small cylinder with
several colored stripes on it, and wires coming out of each end). Replacing
this resistor with one of smaller value will also speed up the strobe.

 To generate a complex pattern, you will either have to design and build a
triggering circuit using IC chips, or rig up a mechanical device with a
multiple-contact rotary switch and a motor.  It HAS been done.

 To modify the strobe for mobile operation the simplest thing is to get a
110-volt inverter that will run off of a car battery by plugging into the
cigarette lighter & run the strobe from that.  Or, you can figure out (or find
in a hobby electronics magazine) a strobe circuit that will run from batteries.
Battery-powered strobes may also be availble, either assembled or as kits.

Stealth Technology:

 Most light sensors and photocells are more sensitive in the infrared area of
the light spectrum. Infrared (IR) is invisible to the human eye. Putting an
infrared filter over the strobe light may allow the Chrome Box to operate in
traffic undetected by police or other observers. IR filters can be obtained from
military surplus sniperscope illuminators, or from optical supply houses like
Dow-Corning or Edmunds Scientific Co.

Using the Chrome Box:

 Mounted on your car, the Chrome Box can guarantee you green lights at major
intersections in cities that have OptoComs. Handheld Chrome Boxes may be used to
create gridlock by interfering with the normal flow of traffic.  If you have
access to a window overlooking a traffic light, you can play pranks by switching
the signals at inappropriate moments, or you can plug the strobe into an exposed
outlet at a laundromat or gas station.

Some Decoded Patterns:

Torrance, California
    Standard large Radio Shack strobe lights are used. Moderately fast rate.
    *  *  *  *  *  *  *  *

Manhattan Beach,CA
   Flash-pairs in a 4:1 ratio, at a rate of 2 flash-pairs per second.
   * *       * *       * *       * *
   <------ 1 sec ----->

******************************************************************
* Please add any new patterns or info you discover to this File *
******************************************************************

Thanks to those who posted observations on the South Bay WWIV's.


---------------------------------------
 CLEAR BOX

    The idea for the Clear box comes from an article in the newsletter 2600.

    The clear box works on 'post pay' coin phones, pay phones that require
money only after the connection has been made.  The way this works is: After
the connection is made the mouthpiece of the phone is muted but not the ear-
piece, free calls to dial-it services can be made with these phones.

    In order to talk to the person you called without paying (NOTE: It is
against the law to do this!!)  Take yourself down to your nearby electronics
store and get a four transistor amplifier and a telephone suction cup induct-
ive pick-up.  Put the pick-up on the earpiece and plug it into the output of
the amplifier, and plug a microphone into the input.  You then talk into your
microphone and listen normally through the earpiece.

    Radio Shack sells an item that won't need much modification, and that
should work the same as the above construction.  It is their 'Portable snap-on
handset amplifier' (Part # 43-238)  Their description says to put it on the
earpiece and it will boost the caller's voice to five times the normal level.
In order to make this function like a clear box one would have to take the
amplifier apart and remove the internal speaker, in its place, connect the
suction cup inductive pick-up.  Place the pick-up (which is now the speaker)
to the mouth piece of the payphone, and talk into the microphone of the ampli-
fier.
    The line will not cut off, and will wait forever for you to put the coins
in.
    Note also that these types of payphones are not connected to the tsps in
the same way as normal payphones.  The phone does all the charging and not the
Central Office.  It is because of this, that a phone connected to the lines
BEFORE the payphone would act just like a normal phone.  So get out your
smallest phone, cut off the jack and strip the wires.  Connect the wires to
two alligator clips.  Then you can clip onto the payphone's wires BEFORE they
connect to the payphone, you then have a normal telephone line that you don't
pay the bills on!

(*)*(*)*(*)*(*)*(*)
(*) Crimson Box (*)
(*)    Plans    (*)
(*)*(*)*(*)*(*)*(*)

The Crimson Box is very simple device
that will allow you to put someone on
hold or make your fone busy with a
large amount of ease. You flip a switch
and the person can't hear you talking.
Flip it back and everything is peechy.

(*)*(*)*(*)*(*)*(*)*(*)*(*)
(*)   Needed Materials  (*)
(*)*(*)*(*)*(*)*(*)*(*)*(*)
 
(1) 100 ohm or less resistor
(1) SPDT toggle switch, On-On
(3) feet of good wire
Wire cutters
Solder and soldering iron

(*)*(*)*(*)*(*)*(*)*(*)*(*)*(*)*(*)
(*)   Construction & Schemtaic  (*)
(*)*(*)*(*)*(*)*(*)*(*)*(*)*(*)*(*)

First I will give you the schematic and
then I will explain what the hell is
going on.

[-----------black wire on line---------
--------+   red wire on line   +------
--------!--+/\/\/-green wire---!------
--------!--! yellow wire-------!------
        !  !                   !
        +--!------+            !
           +----+ ! +----------+
                ! ! !
                1 2 3

Ok. The '/\/\/' is the resistor. And
'1 2 3' is the switch where the numbers
are the poles on the switch. Notice you
leave the black and yellow wires alone.
You DO NOT cut them!
[
Strip the red and green wires so you've
got about an inch of bare wire. Solder
some of the extra wire and follow the
schematic. You should have the resistor
on the green wire with an extra piece
of wire coming from one leg of it. The
other leg goes to the other end of the
green wire. You should solder the green
wire to the left pole of the switch and
the red to the middle and the other
end of the red to the right pole.

Now, lift up the phone. If all you get
is an annoying buzz then throw the
[switch and you should get a dial tone.
If not, don't worry and just follow the
instructions and schematic again.

 ][//////////////////////////////////][
 ][///////////THE/DLOC/BOX///////////][
 ][//////////////////////////////////][
 ][//////////////-=BY=-//////////////][
 ][//////////////////////////////////][
 ][//////THE/DARK/LORDS/OF/CHAOS/////][
 ][//////////////////////////////////][
 ][////PROWLER///////////////////////][
 ][///////APPRENTICE/////////////////][
 ][//////////PRO/HACK////////////////][
 ][//////////////ZEUS////////////////][
 ][////////////////TARKMETH//////////][
 ][///////////////////BLACKSTOKE/////][
 ][//////////////////////////LAZER///][
 ][//////////////////////////////////][
 ][][][][][][][][][][][][][][][][][][][


STUFF YOU'LL NEED:
------------------

A SOLDERING IRON
A SPOOL OF LOW RESISTANCE WIRE
2 FEMALE FONE JACKS
2 SPST TOGGLE SWITCHES
4 GOLD PLATED ALLIGATOR CLIPS
A BOX TO PUT IT ALL IN
SOME SOLDER
A BRAIN

HERE'S A SIMPLE DIAGRAM OF HOW IT IS
PUT TOGETHER:

                 @            @
KEY:             G            R
                 G            R
G= GREEN WIRE    G            R
R= RED WIRE      G            R
*= FEMAL JACK    G            R
\= SPST SWITCH   G            R
O= CONNECTION    O------*-----O
@= GATOR CLIPS   !            !
-= WIRE          !            !
!= WIRE          \            \
                 !            !
                 !            !
                 !            !
                 O------*-----O
                 G            R
                 G            R
                 G            R
                 G            R
                 G            R
                 G            R
                 @            @

ASSEMBLE IT AS ABOVE, AND PUT IT IN THE
BOX, WITH THE TOGGLE SWITCHES PARALLEL,
AND THE FEMALE JACKS MOUNTED ON EITHER
SIDE OF THE BOX. OR, IF YOU DON'T WANT
TO GO TO THE TROUBLE OF MAKING IT BY
YOURSELF, YOU CAN GET ONE FOR $7.50 
FROM DLOC. OURS ARE ENCASED IN A STURDY
PLASTIC BOX, WITH OUR LOGO STENCILED ON
THE SIDE, AND ARE VERY WELL MADE. IF
YOU WANT TO BUY ONE, CONTACT A DLOC
MEMBER ON ONE OF THE BOARDS LISTED
BELOW IN THIS FILE.

DLOC BOX FUNCTIONS:
-------------------

HOOKUP: TO HOOK UP THE BOX, PLUG YOUR
FONES INTO THE JACKS ON THE BOX. ON 
MINE, THE WIRES ARE LABELED EVERY FOOT
SO THAT I KNOW WHICH TRUNK I'M ON. CLIP
THE APPROPRIATE SET OF CLIPS ON THE
TERMINALS YOU WISH TO INVADE, AND THEN
LISTEN/DIAL THROUGH WHICHEVER PHONE IS
CONNECTED. THIS BOX HAS TWO LINES GOING
THROUGH IT, WITH AN OPTION TO CONFER-
ENCE THE TWO. I ADDED THIS SO IF WHILE
ON ALLIANCE TELECONFERENCING, YOU WANT
TO DIAL AN 800,900,700, OR 976 NUMBER,
YOU CAN SIMPLY DIAL IT WITH THE OTHER
TRUNK AND THEN CONFERENCE THE TWO.

CONFERENCING THE TWO LINES: TO JOIN THE
TWO LINES, TURN BOTH OF THE TOGGLE
SWITCHES TO THE ON POSITION.

NOTE: MAKE SURE THAT NO PHONE IS
CONNECTED TO THE BOX WHEN YOU HOOK UP
THE CLIPS, AND ALSO MAKE SURE THAT BOTH
SWITCHES ARE TURNED OFF.

 GOLD BOX PLANS

 MATERIALS:  (2) 10k OHM resistors
             (3) 1.4k OHM resistors
             (2) 2N3904 transistors
             (2) Photocells
             (2) LED's (Make sure they're real bright)
             Box to contain it in that will not allow sunlight in it.
             Some wire (Red and green for easiness sake)

 PROCEDURE

    Light from the LED's must shine directly on the photocells.  You may have
to have the LED touching the photocell for it to work.

 [ Schematic ]
                     +-----Photocell #1------+
                     |     +---I[---+        |
                     |     |   +-   |        |
                     |     |  Led#1 |        |
                     |  +--+        |        |Base
                     |  |  +--------+      *****
                     |  |  |             Transistor
                     |  |  |               *****
          Red #1-----+--+  +----------------+ |
                        |  |                  |Collector
                    +---+  |                  |
                    |    +-+                  +-----+------Green #2
                    |    | |                        |
                    |  +-+ |                        +-----------+
                    |  |   |                                    |
                    |  |   +---/\/----/\/----/\/----/\/---------+
                    |  |       10k    10k    1.4k   1.4k
                    |  |            R E S I S T O R S
                    |  |
                    |  +------------------+
                    +-------------------+ |
                                        | |
                                        + I[ LED #2
                                  +-----Photocell #2----+
                             Base |                     |
                                *****            +------+
                              Transistor         |
                                *****            |
                       Collector | | Emitter     |
                                 | +-------------+---Red #2
                        Green #1-+ |
                                 | +---+
                                 |     |
                                 +-/\/-+
                                   1.4k
                                 Resistor

    The 1.4k resistor is variable and if the second part of of the box is
skipped the box will still work but if someone picks up the fone they may
report it to the Phone Co.  The 1.4k will give you good reception with little
risk of the Gestapo knocking at your door.

    Take two green wires and strip the ends.  Twist one end of each together
so they make one wire.  Connect it to Green #1.  Label this 'Line #1'.  Do the
same but with red wire and attach it to Red #1.  Repeat the process for Red #2
and Green #2 and label it 'Line #2'.

 INSTALLATION

    Find two fone lines that are close together.  Label one of them 'Line #1'.
Cut the phone lines and take off the outer covering.  You'll see 4 colored
wires inside.  Cut the yellow and black wire off and strip the red and green
wires on both lines.
Line #1 should be in two pieces.  Take the green wire of one end and con-
nect to one of the green wires on the box.  Take the other half of the fone
line green wire and connect it to the other green wires on the gold box.  Do
the same for the red wires on the other line and the red wires on the box.
    Now, find out what number you hooked up the gold box to.  Go home and call
it.  You should get a dial tone and you can dial out.  If not, re-check every-
thing.  If it still doesn't work, pack up and go home.

			Other Scamitcs by another person.


GOLD BOX
=------=

YOU WILL NEED THE FOLLOWING MATERIALS: (2) 10K OHM AND (3) 1.4K OHM
RESISTORS,
(2) 2N3904 TRANSISTORS,.
(2) PHOTOCELLS,
(2) RED LEDS,
A BOX THAT WILL NOT LET
LIGHT IN,
AND RED AND GREEN WIRE.

LIGHT FROM THE #1 LED MUST SHINE DIRECTLY ON THE PHOTOCELL #1. HERE IS THE
SCHEMATIC FOR THE GOLD BOX:

            1
       :-PHOTOCELL--:
       :            :
       :            :BASE
       :    1     TTTTT
       :  +LED-   TRANSISTOR
       :          TTTTT
       :           : :
       :  -I(--    : :COLLECTOR
   RED1--<     >:--: :-------:-----GREEN2
          -I(-- :            ----------:
                :                      :
           2    :-/+/+/-/+/+/-/+/+/-/+/+/
          LED     10K    10K   1.4K 1.4K
                    RESISTORS

               2
          -PHOTOCELL-----------------
          :                         :
          :BASE                     :
        TTTTT                       :
        TRANSISTOR                  :
        TTTTT                       :
         : :EMITTER                 :
   GREEN1- --------------------------RED2
        :   :
        /+/+/
         1.4K

THE 1.4K RESISTOR IS VARIABLE AND IF THE SECOND PART OF THE GOLD BOX IS
SKIPPED IT WILL STILL WORK, BUT WHEN SOMEONE PICKS UP THE PHONE THEY WILL
HEAR A FAINT DIAL TONE IN THE BACKGROUND AND MIGHT REPORT IT TO THE FONE
CO. 1.4K WILL GIVE YOU GOOD RECEPTION WITH LITTLE RISK OF A BELL AGENT AT
YOUR DOOR.

NOW THAT YOU HAVE BUILT THE GOLD BOX, TAKE TWO GREEN WIRES OF THE SAME
LENGTH, AND STRIP THE ENDS. TWIST TWO ENDS TOGETHER AND CONNECT THEM
TO GREEN1 AND PLACE A PIECE OF TAPE ON IT WITH LINE #1 RIDING ON IT. CONTINUE
THE PROCESS WITH THE RED1, ONLY USE RED WIRE. REPEAT WITH GREEN2 AND
RED2, BUT CONNECT
IT TO LINE #2.

TO INSTALL YOUR NEW FOUND FRIEND, YOU WILL NEED TO FIND TWO PHONE LINES
THAT ARE CLOSE TOGETHER. LABEL ONE OF THE PHONE LINES LINE #1. CUT THE
PHONE LINES AND TAKE OUT THE OUTER COUTING OFF IT. THERE SHOULD BE 4
WIRES. CUT THE YELLOW
AND BLACK WIRES OFF AND STRIP THE RED AND GREEN WIRES FOR BOTH FONE
LINES.

LINE #1 SHOULD BE IN TWO PIECES. TAKE THE GREEN WIRE OFF ONE END AND
CONNECT IT TO THE ONE ONE THE GOLD BOX. TAKE THE OTHER HALF OF LINE #1 AND
HOOK THE FREE GREEN WIRE TO THE GREEN WIRE ON THE FONE LINE. REPEAT THE
PROCESS WITH
RED1 AND THE OTHER LINE.

ALL YOU NEED TO DO NOW IS GO HOME AND PHONE THE HOUSE YOU PUT THE GOLD
BOX ON. YOU SHOULD GET A DIAL TONE! YOU HAVE SEIZED THEIR LINE FROM A
REMOTE LOCATION. IT IS IMPOSSIBLE FOR BELL TO TRACE YOU. THEY WILL TRACE
THE PEOPLE WHO'S FONE
YOU ARE USING!
eception with little
risk of the Gestapo knocking at your door.

:%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %%%%%%%%%%%%%:
:%                                                                       %:
:%                              THE GREEN BOX                            %:
:%                                                                       %:
:%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %%%%%%%%%%%%%:


   The Green Box generates useful tonessuch as COIN COLLECT, COIN RETURN, and
RINGBACK.  These are the tones that ACTS or the TSPS operator would send to
the CO when appropriate.  Unfortunately, the green box cannot be used at a
fortress station, but must be used by the CALLED party.  The tones (hz) are:

   COIN COLLECT      700  +  1100
   COIN RETURN      1100  +  1700
   RINGBACK          700  +  1700

   Before the called party sends any of these tones, an operator released
signal should be sent to alert the MF detectors at the CO.  This can be done
by sending 900 + 1500 Hz or a single 2600 Hz wink (90 ms) followed by a 60 ms
gap and then the appropriate signal for at least 900 ms.  Also, do not forget
that the initial rate is collected shortly before the 3 minute period is up.

:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-::-:-:-:-:-:-:-:-:-:-: -:-:-:-:-:-:-:-:

THE JACKBOX

MA BELL IS NOT THE ONLY ONE WITH STANDARDS! JUST ABOUT EVERY MANUFACTURER OF
IC'S THAT GENERATE TOUCH TONES HAS ALSO GONE BY THE 16 KEY (8 TONE) STANDARD
FOR TOUCH TONE PADS. AND IT IS EVEN EASIER TO CONVERT A TONE PAD THAT USES AN
INTEGRATED CIRCUIT TO GENERATE THE TONES THAN CONVERTING A MA BELL PAD!

IT WILL HELP IMMENSELY IF YOU HAVE THE SCHEMATIC FOR THE PAD IN QUESTION, OR
AT LEAST THE PIN-OUT DIAGRAM OF THE CHIP BEING USED. PIN-OUTS CAN USUALLY BE
OBTAINED FROM THE MANUFACTURER OR FROM AN ECG, SK, GE OR SIMILIAR
SEMICONDUCTER HANDBOOK (PROVIDED THAT MANUFACTURER MAKES AN EQUIVALENT FOR
THE CHIP IN YOUR PAD). I'LL USE THE RADIO SHACK CEX-4000 TONE PAD MODULE FOR
AN EXAMPLE, EVEN THOUGH IT IS PROBABLY ALMOST THE LOUSIEST ONE YOU CAN BUY,
IT IS FAIRLY TYPICAL ASILY AVAILABLE.

TAKE A LOOK AT THE DIAGRAM OR THE PIN-OUT OF THE CHIP. YOU SHOULD SEE TWO
GROUPS OF PINS, THE ROWS TONE PINS AND THE COLUMN TONE PINS. THESE WILL BE
MARKED AS R1,R2,R3,R4 AND C1,C2,C3 (RADIO SHACK) OR OR X1,X2,X3 AND Y1,Y2,Y3
ETC. ON OTHERS. AT ANY RATEU SHOULD BE ABLE TO DISTINGUISH WHICH THREE
PINS CONTROL THE COLUMNS AND WHICH FOUR CONTROL THE ROWS. IF YOU'RE LUCKY,
EACH GROUP OF ROWS AND COLUMNS WILL BE CONTIGUOUS. NOW LOOK AT THE COLUMN
PINS, AND YOU'LL PROBABLY SEE AN EMPTY PIN RIGHT NEXT TO THEM. THIS IS THE
COLUMN PIN FTHE 1633 HZ TONES. THESE CHIPS USUALLY ACHIEVE THEIR SWITCHING BY
CONNECTING A ROW PIN WITH A COLUMN PIN (THAT WAY TQAN USE A0VERY SIMPLE
KEYBOARD PAD, UNLIKE MA BELL'S COMPLICATED ONE). SO ALL YOU HAVE TO DO IS TAKE
A SPDT SWITCH AND A FEW PIECES OF WIRE, CUT THE TRACE GOING TO THE COLUMN 3
PIN OF THE CHIP, ATTACH A WIRE FROM THE CHIP SIDEOF THAT CUT TO ONE END OF THE
SPDT SWITCH, A WIRE FROM THE OTHER SIDE OF THE CUT TO THE CENTER OF THE SPDT
SWITCH, AND FINALLY, FROM THE REMAINING CONTACT ON THE SPDT SWITCH, HOOK A
WIRE TO THE PREVIOUSLY IDENTIFIED PIN C4 (COLUMN 4). NOW YOU HAVE A "BANK
SWITCHING ARRANGEMENT EXACTLY LIKE THE ONE DESCRIBED IN THE PREVIOUS BULLETIN
FOR MODIFYING A MA BELL PAD.

IF YOU CAN'T GET THE SCHEMATICS OR THE PIN OUTS FOR YOUR CHIP, DON'T DESPAIR.
THERE IS STILL HOPE FOR YOU! YOU JUST HAVE TO TRACK THE CONNECTIONS GOING FROM
THE PAD'S KEYS TO THE CHIP. CHANCES ARE YOU'LL FIND THAT EACH ROW HAS A COMMON
TRACE, AND SO DOES EACH COLUMN (FOR THOSE NON-TECHNICAL FOLKS, A TRACE IS A
CONNECTION ETCHED OUT ON A CIRCUIT BOARD). JUST FOLLOW THESE TO THE CHIP, AND
MAKE YOUR OWN SCHEMATIC UP. NOW TAKE A LOOK FOR THAT EXTRA PIN--THERE SHOULD
BE ONE FLOATING AROUND RIGHT NEXT TO THE COLUMN PINS. IT WILL BE NOT BE HOOKED
UP TO ANYTHING ELSE, THAT IS, "HANGING FREE". DRILL A HOLE IN THE SIDE OF
TONEPAD'S CASE, AND MOUNT YOUR SWITCH. RADIO SHACK SELLS A NICE MICROMINIATURE
SWITCH THAT WORKS EXCELLENTLY! (ALMOST THE ONLY GOOD THING I CAN SAY ABOUT
RADIO SHACK IN THIS ARTICLE)


 
                              KEY
                              ===
 
 
First a few KEYS to the diagram:
 
Cx is capacitor #x   Denoted by: ---| |---
 
Px is Pot or Variable resistor #x  Denoted by :/
                                                \
                                                /<--  
                                                \
Rx is resistor #x  Denoted by /\/\/\/\
 
                            SCHEMATICS
                            ==========
 
     The XR-2207 chip is a Voltage-Contr olled Oscillator and a 14 
pin device thu s you must be very careful when soldering
 the parts  to  this  device. It is a little dificult to actually  draw a 
schematic on a 80 character scren using limited gra phics but will 
give it a try.
                                        
                                         TO GND_____________
                                                           |
                                                          ___
                                                C2     C3 ___
                                             _||_          |
                                            |    |    _____|__9v+
                                            |    |    |    |
                        `   `    `    `     `    `    `    |
                        ---------------- ---------------   |
                       |7   6    5    4     3    2    1 |  |
                       |                                <  |
                       |8   9    10   11    12   13   14|  |
                        ---------------- ---------------   |
                        `   `    `    `     `    `    `    |
                                 |    |                    |
                    --| |--------|    |                    |
                    |C1    R2         |          R1        |
          GND ______|___/\/\/\/\______|_ ____/\/\/\/\______|
   
 
     This is a diagram of how to locate the different pins on the chip please
no tice that pin one is the closest to the n otch on top  of the chip.  The
first thing we'll do is to connect power to the chip  (remember that  you
need to build two of these to get a complete system) this is accomplished by
connecting the positive wire of the battery lead to pin 1 one leg of R1 and R2
is solder to pin 11 the other leg of R1 goes to pin 1 or to the  positive of 
the battery. The other leg of R2 goes to ground, C1 goes between pin 10
and ground. 
   The timing capacitor or C2 goes between  pins 2 and 3 of the chip
pins 8 and 9 should be grounded to ground. Pin 14 is the output 
and this is where one leg of C4 (C3 goes on the other VCO) in series with
R3(the same goes for the other VCO) and to one lead of the speaker.
 

     The trimmer pots P1 to P10 should be grouped in groups of  5  pots  each
.   the way you group it is by soldering one end of the pot to each other
leaving the wiper and the other end free.
 
                   | This end goes to pin 6 of the chip
                   |
      _____________|_____________
       /     /     /     /     /
       \     \     \     \     \
       /<-   /<-   /<-   /<-   /<-
       \ |   \ |   \ |   \ |   \ | 
       / |   / |   / |   / |   / |
         |     |     |     |     |
         |     |     |     |     |
       P1      P2    P3    P4    P5
 
 
     And finally this is the way each key should be wired.
 
 
                 diode
     to Px  ------>|-----|            This is the contact of  the 
                         |--------- \------               key
     to Px  ------>|-----|                 |
                 diode                     |
                                         -----
                                          --- Ground
                                           -
 
 
 
 This may not be the best way to show the schematics but at least it is
something.
 
 ==============
Box Definitions:


aqua  box  -  A  box  designed to drain the voltage of the FBI lock-in-
 trace/trap-trace  so  you  can  hang  up  your  fone  in  an  emergency  and
 phrustrate  the  Pheds  some more. The apparatus is simple, just connect the
 two  middle wires of a phone wire and plug, which would be the red and green
 wires  if  in  the jack, to the cord of some electrical appliance; ie, light
 bulb  or  radio.  KEEP  THE  APPLIANCE  OFF.  Then,  get  one  of those line
 splitters  that  will  let  you hook two phone plugs into one jack. Plug the
 end  of  the  modified  cord into one jack and your fone into the other. THE
 APPLIANCE  MUST  BE  OFF! Then, when the Pheds turn their lame tracer on and
 you  find  that  you  can't hang up, remove your fone from the jack and turn
 the  appliance ON and keep it ON until you feel safe; it may be awhile. Then
 turn  it  off,  plug  your fone back in, and start phreaking again. 

 

      black  box  -  The infamous box that allows the calling party to not be
 billed  for  the call placed. We won't go in depth right now, most plans can
 be  found on many phreak oriented BBS's. The telco can detect black boxes if
 they suspect one on the line. Also, these will not work under ESS.
 
      bleeper  boxes  -  The  United  Kingdom's  own version of the blue box, 
 modified  to  work  with the UK's fone system. Based on the same principles. 
 However, they use two sets of frequencies, foreword and backwards.
 
      Blotto  box  -  This  box  supposedly  shorts  every  fone  out  in the 
 immediate  area,  and  I  don't  doubt  it. It should kill every fone in the 
 immediate  area,  until  the  voltage reaches the fone company, and the fone 
 company  filters  it.  I  won't  cover  this  one  in  this issue, cuz it is 
 dangerous,  and  phreaks shouldn't destroy MA's equipment, just phuck it up. 
 Look  for  this  on your phavorite BBS or ask your phavorite phreak for info 
 if you really are serious about seriously phucking some fones in some area.
 
      blue  box  -  An  old  piece of equipment that emulated a true operator 
 placing  calls,  and  operators  get  calls for free. The blue box seizes an 
 open  trunk  by  blasting  a  2600  Hz tone through the line after dialing a 
 party  that  is  local  or in the 800 NPA so calls will be local or free for 
 the  blue boxer. Then, when the blue boxer has seized a trunk, the boxer may 
 then,  within the next 10-15 seconds, dial another fone number via MF tones. 
 These  MF  tones  must be preceded by a KP tone and followed with a ST tone. 
 All of these tones are standardized by Bell. The tones as well as the inter-
 digit  intervals  are around 75ms. It may vary with the equipment used since 
 ESS  can  handle higher speeds and doesn't need inter-digit intervals. There 
 are  many  uses to a blue box, and we will not cover any more here. See your 
 local  phreak or phreak oriented BBS for in depth info concerning blue boxes 
 and  blue  boxing.  Incidentally, blue boxes are not considered safe anymore 
 because  ESS  detects  "foreign"  tones,  such as the 2600 Hz tone, but this 
 detection  may  be  delayed  by  mixing pink noise of above 3000 Hz with the 
 2600  Hz  tone. To hang up, the 2600 Hz tone is played again. Also, all blue 
 boxes  are  green  boxes because MF "2" corresponds to the Coin Collect tone 
 on  the  green box, and the "KP" tone corresponds to the Coin Return tone on 
 the  green  box.  See  green  box  for  more  information.  Blue  boxing  is 
 IMPOSSIBLE  under  the new CCIS system slowly being integrated into the Bell 
 system.
 
      blue  box  tones  -  The MF tones generated by the blue box in order to 
 place  calls,  emulating  a  true operator. These dual tones must be entered 
 during  the  10-15 second period after you have seized a trunk with the 2600 
 Hz tone.                                                                   
                         700:  1 :  2 :  4 :  7 : 11 :    KP= Key Pulse     
  Parallel Frequencies   900: ** :  3 :  5 :  8 : 12 :    ST= STop          
    2= Coin Collect     1100: ** : ** :  6 :  9 : KP :   KP2= Key Pulse 2   
   KP= Coin Return      1300: ** : ** : ** : 10 :KP2 :    **= None          
   (green box tones)    1500: ** : ** : ** : ** : ST :                      
                            : 900:1100:1300:1500:1700:   75ms pulse/pause   
 
      busy  box  - Box that will cause the fone to be busy, without taking it
 OFF-HOOK.  Just  get a piece of fone wire with a plug on the end, cut it off
 so  there  is a plug and about two inches of fone line. Then, strip the wire
 so  the  two middle wires, the tip and the ring, are exposed. Then, wrap the
 ring  and  the  tip  together,  tape with electrical tape, and plug into the
 fone jack. The fone will be busy until the box is removed.
 
      cans  -  Cans  are  those  big  silver  boxes  on  top of or around the 
 telephone  poles. When opened, the lines can be manipulated with a beige box 
 or whatever phun you have in mind.
 
      cheese  box  -  Another  type  of  box  which,  when  coupled with call
 forwarding  services, will allow one to place free fone calls. The safety of
 this  box  is unknown. See references for information concerning text philes
 on this box.
 
      clear  box  - Piece of equipment that compromises of a telephone pickup 
 coil  and  a  small  amp. This works on the principal that all receivers are 
 also  weak  transmitters.  So,  you amplify your signal on PP fortress fones 
 and spare yourself some change.
 
      green  box - Equipment that will emulate the Coin Collect, Coin Return,
 and  Ringback  tones.  This  means  that if you call someone with a fortress
 fone  and  they  have  a  green  box,  by  activating it, your money will be
 returned.   The   tones   are,   in   hertz,   Coin  Collect=700+1100,  Coin
 Return=1100+1700,  and  Ringback=700+1700.  However,  before these tones are
 sent,  the  MF  detectors  at  the  CO  must be alerted, this can be done by
 sending  a  900+1500  Hz  or  single 2600 Hz wink of 90ms followed by a 60ms
 gap, and then the appropriate signal for at least 900ms.
 
      gold  box  -  This  box  will  trace  calls,  tell if the call is being 
 traced, and can change a trace. 
 
      grey box - Also known as a silver box. See silver box.
 

      Paper  Clip  Method  -  This method of phreaking was illustrated in the
 movie  War Games. What a phortress fone does to make sure money is in a fone
 is  send  an  electrical  pulse  to  notify  the  fone  that a coin has been
 deposited,  for  the  first  coin  only.  However,  by  simply grounding the
 positive  end  of  the microphone, enough current and voltage is deferred to
 the  ground  to  simulate  the first quarter in the coin box. An easy way to
 accomplish  this is to connect the center of the mouthpiece to the coin box,
 touch  tone  pad,  or anything that looks like metal with a piece of wire. A
 most  convenient  piece  of wire is a bend out of a paper clip. Then you can
 send  red  box  tones  through the line and get free fone calls! Also, telco
 modified  fones  may  require  you  to  push  the  clip  harder  against the
 mouthpiece,  or  connect  the mouthpiece to the earpiece. If pressing harder
 against the mouthpiece becomes a problem, pins may be an easier solution.
 
      purple  box  -  This one would be nice. Free calls to anywhere via blue
 boxing,  become  an  operator  via  blue box, conference calling, disconnect
 fone  line(s),  tap  fones,  detect  traces,  intercept directory assistance
 calls. Has all red box tones. This one may not be available under ESS.
 
      rainbow  box  -  An  ultimate  box. You can become an operator. You get 
 free  calls,  blue  box. You can set up conference calls. You can forcefully 
 disconnect  lines.  You can tap lines. You can detect traces, change traces, 
 and  trace as well. All incoming calls are free. You can intercept directory 
 assistance.  You have a generator for all MF tones. You can mute and redial. 
 You  have  all  the  red-box tones. This is an awesome box. However, it does 
 not exist under ESS.
 
      red  box  -  Equipment that will emulate the red box tone generated for
 coin recognition in all phortress fones.
 
      red  box  tones - Tones that tell the phortress fone how much money was 
 inserted  in  the  fone  to make the required call. In one slot fones, these 
 are  beeps in pulses; the pulse is a 2200+1700 Hz tone. For quarters, 5 beep 
 tones  at 12-17 PPS, for dimes it is 2 beep tones at 5-8.5 PPS, and a nickel 
 causes  1  beep  tone  at  5-8.5  PPS.  For  three slot fones, the tones are 
 different.  Instead of beeps, they are straight dual tones. For a nickel, it 
 is  one  bell  at 1050-1100 Hz, two bells for a dime, and one gong at 800 Hz 
 for  a  quarter.  When  using  red  box  tones, you must insert at least one 
 nickel  before playing the tones, cuz a ground test takes place to make sure 
 some  money  has  been  inserted. The ground test may be fooled by the Paper 
 Clip  Method.  Also,  it has been known that TSPS can detect certain red box 
 tones, and will record all data on AMA or CAMA of fraudulent activity.
 
      regional center - Any class 1 switching office in North America.
 
      silver  box  -  Equipment that will allow you to emulate the DTMF tones
 A,B,C,D.  The  MF  tones  are, in hertz, A=697+1633, B=770+1633, C=852+1633,
 D=941+1633.  These  allow  special functions from regular fones, such as ACD
 Testing Mode.
 
      white box - This is a portable DTMF keypad.}  PEPSON                                                                                                                   }  i  f@  f@ Maharaja's Hi-Times 10 MEG BBS C/F

<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>
<%>                                                                     <%>
<%>                             Making the                              <%>
<%>                                                                     <%>
<%>                              Lunch Box                              <%>
<%>                              ===== ===                              <%>
<%>                                                                     <%>
<%>                         Typed by: Dr. D-Code                        <%>
<%>                                                                     <%>
<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>^<%>
 
Introduction
============
 
The Lunch Box is a VERY simple transmitter which can be handy for all sorts of
things. It is quite small and can easily be put in a number of places. I have
successfully used it for tapping fones, getting inside info, blackmail and
other such things. The possibilities are endless. I will also include the plans
for an equally small receiver for your newly made toy. Use it for just about
anything. You can also make the transmitter and receiver together in one box
and use it as a walkie talkie.
 
Materials you will need
=======================
 
(1) 9 volt battery with battery clip
(1) 25-mfd, 15 volt electrolytic capacitor
(2) .0047 mfd capacitors
(1) .022 mfd capacitor
(1) 51 pf capacitor
(1) 365 pf variable capacitor
(1) Transistor antenna coil
(1) 2N366 transistor
(1) 2N464 transistor
(1) 100k resistor
(1) 5.6k resistor
(1) 10k resistor
(1) 2meg potentiometer with SPST switch
Some good wire, solder, soldering iron, board to put it on, box (optional)
 
Schematic for The Lunch Box
===========================
 
This may get a tad confusing but just print it out and pay attention.







         [!]
          !
        51 pf
          !
       ---+----  ------------base   collector
      !        )(               2N366       +----+------/\/\/----GND
    365 pf     ()              emitter           !
      !        )(                 !              !
      +--------  ---+----         !              !
      !             !    !        !              !
     GND            /  .022mfd    !              !
                 10k\    !        !              !
                    /   GND       +------------------------emitter
                    !             !              !             2N464
                    /           .0047            !          base   collector
              2meg  \----+        !              !   +--------+       !
                    /    !       GND             !   !                !
                        GND                      !   !                !
        +-------------+.0047+--------------------+   !                !
                                                     !   +--25mfd-----+
            -----------------------------------------+   !            !
       microphone                                        +--/\/\/-----+
            ---------------------------------------------+   100k     !
                                                                      !
                  GND---->/<---------------------!+!+!+---------------+
                        switch                  Battery
                    from 2meg pot.
 
 
Notes about the schematic
=========================
 
1.  GND means ground
2.  The GND near the switch and the GND by the 2meg potentiometer should be
    connected.
3.  Where you see:  )(
                    ()
                    )( it is the transistor antenna coil with 15 turns of
                       regular hook-up wire around it.
4.  The middle of the loop on the left side (the left of "()") you should run
    a wire down to the "+" which has nothing attached to it. There is a .0047
    capacitor on the correct piece of wire.
5.  For the microphone use a magnetic earphone (1k to 2k).
6.  Where you see "[!]" is the antenna. Use about 8 feet of wire to broadcast
    approx 300ft. Part 15 of the FCC rules and regulation says you can't
    broadcast over 300 feet without a license. (Hahaha). Use more wire for an
    antenna for longer distances. (Attach it to the black wire on the fone
    line for about a 250 foot antenna!)
 
Operation of the Lunch Box
==========================
 
This transmitter will send the signals over the AM radio band. You use the
variable capacitor to adjust what freq. you want to use. Find a good unused
freq. down at the lower end of the scale and you're set. Use the 2 meg pot. to   7   3                     
adjust gain. Just fuck with it until you get what sounds good. The switch on
the 2meg is for turning the Lunch Box on and off. When everything is adjusted,
turn on an AM radio adjust it to where you think the signal is. Have a friend
say some shit thru the Box and tune in to it. That's all there is to it. The
plans for a simple receiver are shown below:
 
The Lunch Box receiver
======================
 
(1) 9 volt battery with battery clip
(1) 365 pf variable capacitor
(1) 51 pf capacitor
(1) 1N38B diode
(1) Transistor antenna coil
(1) 2N366 transistor
(1) SPST toggle switch
(1) 1k to 2k magnetic earphone
 
Schematic for receiver
======================
 
         [!]
          !
        51 pf
          !
     +----+----+
     !         !
     )       365 pf
     (----+    !
     )    !    !
     +---------+---GND
          !
          +---*>!----base  collector-----
             diode      2N366           earphone
                        emitter    +-----
                          !        !
                         GND       !
                                   -
                                   +
                                   - battery
                                   +
           GND------>/<------------+
                  switch
 
Closing statement
=================
 
This two devices can be built for under a total of $10.00. Not too bad. Using
these devices in illegal ways is your option. If you get caught, I accept NO
responsibility for your actions. This can be a lot of fun if used correctly.
Hook it up to the red wire (I think) on the fone line and it will send the
conversation over the air waves. 


      HOW TO BUILD AND USE A MAGENTA BOX.

      Designed and Written by Street Fighter.

First of all I named this the Magenta Box because all of the
fags that made boxes, whose only purpose is adding a hold
button to your phone, used all of the fucking colors.  I can
afford a fucking piece of shit Radio Shack 2-line phone with
hold.  A box's purpose is to fuck with the Telco., not to add
a fucking hold button to your phone.  Anyway I will get on with
this.

PARTS LIST:
             SPDT Miniature PC RELAY (about 9v, 500 ohm)
             DPDT Miniature PC RELAY (about 6v, 500 ohms, 12 mA)
             2000 or so uF electrolytic capacitor
             1 meg resistor
             .01 uF capacitor
             555 timer chip
           2 diodes (1N914)
             10 K resistor
             1 K resistor
             9 volt battery -w- clip
             Pc Board
             4 alligator clips
             some kind of a box (small)
             some 20 or 22 gauge wire to work with.

If you don't know how to put together a project by looking at a
schematic, then isn't the project to start with.  I would ask someone
with some electronics knowledge to give you a helping hand.  This
has to be put together on a pc-board.  Enough talk, now the schematic:



                         +9v
                          ^
                          |
          +---------------+----+----------------+
          |               |8   |4               |
          |            ------------             |
          /            |          |3            |                  |--|
          \            |          |-------------------->|---+------|\ |
    1 Meg /  R1        |          |             |           |     C| \|
   (1000K)\            |          |             |           -     O|\ |
          |            |   555    |             \           ^     I| \|
          |            |   chip   |        10 K /           |     L|\ |
          |           7|          |             \           +------| \|
          +------------|          |             /           |      |--|
          |           6|          |2            |           |
          +------------|          |-------------+-------+   |      NC
          |            ------------                     |   | +-o   o   o--<
          |             |1  |5          --------o NC    |   | |        TIP #2
          |             |   |           --___           |   | |    NC
        + |             |   |                ---o---+   |   | | o   o   o--<
         ---            |  ---.01 uF                |   |   | | |      RING #2
2000 uF  -^-  C1        |  -^-          --------o-- | --+   | | |
*see note |             |   |                       |       | | |
          |             |   |   +-------|--|C       |       | | |
          |             |   |   |       |\ |O   +---+       | | |
          |             |   |   |       | \|I   |           | | |
          |             |   |   |   +---|--|L   |           | | |
          +-------------+---+-------------------+-----------+ | |
                            |   |   |                         | |
                          ----- |   +-----------+-------------+ |
                           ---  |               |               |
                            -   +--/\/\/\----------+------------+
                         GROUND     4.7K        |  |
                           9V                   |  |
                                                |  +------------< RING #1
                                                |
                                                |
                                                +---------------< TIP #1



        K E Y
        ~~~~~

NC - Normally Closed

--< - Alligator Clip

---
-^-   Capacitor

->|-  Diode

 |
 -
 ^    Diode
 |

           
o   o   o
            Contacts on relay.  DPDT
o   o   o



--------o

  ___---o  Contacts on relay.  SPDT
--
--------o


-/\/\/\-  Resistor


    |
    /
    \     Resistor
    /
    |


Whew!  Well, the schematic explains almost everything.  It would be
helpful to you if you used one color for the line #1 clips and another
for the line #2 clips.  It will work even if you get the ring and tip
mixed up, but you must get all of the clips on the right line.  But,
to be safe, you could put tags on each clip labeling it RING #1, TIP #2,
ect.

Installation.  Find one of those green posts that are about 3 feet high.
They are everywhere.  Get a socket wrench to open it up.  There will
be (a) row(s) of paired up posts.  Each pair of posts represents a line.
YOU *MUST* KNOW THE NUMBER OF LINE #1.  Sometimes the number is tagged
on to the pair of wires leading up to the posts, if so pick these posts
as your line #1.  Then you can pick any other set of posts for line #2.

Now to the good part.  Use of the the final product.  When you call up
line one from your house you will get a dial tone almost immediately.
Using DTMF you can dial anywhere that the person who owns line 2 has
service to.  Which means you can direct dial alliance, Australia, and
your favorite BBS for FREE.

The Telco. will undoubtably discover the device after 2 days, so post
the number on your favorite boards so you can abuse it while it is in
service.  With a 2000 uF capacitor and a 1 meg resistor you will
get a 50 minute call before it disconnects you.  By lowering the value
of the resistor and capacitor you can change the time to your taste.
So don't dial a wrong number, because you will have to wait 50 minutes
until it resets again.  The formula for the time is the following:

2*R1    C1              C1 is in microfarads
---- * ----             R1 is in Kohms
100     10              See schematic for location of R1 and C1.
-----------  = Minutes
    60

The time produced by this formula is only approximate.

Well, that is one of the more complicated boxes to build.  But it
is very useful and will pay for itself with its first use.   It
would be wise to remove it before the Telco. finds it so you won't
have to make another, or install it on a line that belongs to a
family that is on vacation (GOOD IDEA)

Well, there it is.  I hope it saves you a lot of cash.

If you wish to have one built for you.  Leave me E-mail on the Iron Curtain
or the CornerStone or any other board I frequent.  It won't be more than $15,
hopefully it will only be about $8.

DON'T LET PHREAKING DIE!

STREET FIGHTER 

                           _________________________
                          /~~~~~~~~~~~~~~~~~~~~~~~~~\
                         |   How to Build Your Own   |
                         |                           |
                         |  |\  /|  _            __  |
                         |  | \/ | |_| | | |  | |__  |
                         |  |    | | | |_|  \/  |__  |
                         |       __                  |
                         |      |  \   _             |
                         |      |__/  / \  \_/       |
                         |      |  \  \_/  / \       |
                         |      |__/      /          |
                         |      _________/           |
                         |                           |
                          \_________________________/ 
                           ~~~~~~~~~~~~~~~~~~~~~~~~~

                         ____________________________
                        | Written by Captian Generic |
                        | With Help from The Genetic |
                        | Mishap.                    |
                        |      Phreakers ROCK!!!     |
                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~


     Please bear with me, as the construction of this box will seem rather 
     silly.  This box was found in a construction site.  Or rather, it found 
     us at a construction site.  We were using a $5 Radio Shack phone out of 
     a semi-completed office building.  One afternoon during a holiday, and 
     immediately following a storm, we found our bus in shambles.  To our 
     suprise, we also found that one of the phone connections we were tapping 
     had been draped through a murky puddle.  The fact that suprised us even 
     more was that this line still worked and now posessed some great 
     capibilities.


Materials:

2 tupperware or similar 8oz contianers
1 small bag earth (dirt) (12oz)
1 pint water
2 lantern batteries
1 nine volt battery
1 battery clip
2 SPST switches
4 ounces of iron shavings
2 polar magnets
5 feet wire
1 set soldering equipment


     This is the part you won't believe.  Take the tupperware containers, and 
     fill them with a mixture of the earth and the iron shavings.  Make sure 
     that the mixture is well done.  (*NOTE* for best results, use the sand in 
     fine ash trays.)  Cut the cut the red and green wires and splice the 
     switches into them.  From the switches, solder wire to the magnets.  
     Connect the red to the + (positive) side of one magnet, and the green to 
     the - (negative) side of the second magnet.  From the other poles of the 
     magnet, solder wires the battery & clip.  Make sure the + (positive) and 
     - (negative) are correct.  Set the nine-volt battery between the two 
     tupperware containers and place the battery end of the two magnets into 
     the tupperware.  Now connect wire to the two poles of the lantern 
     battery, and place them in the same containers as the poles of the 
     magnets/9-volt battery.  You are almost done.  Finally, add just enough 
     water to the two pots, and let them sit in the sun and bake like bricks.
     at this point, you have a MAUVE BOX.



Explaning and Using What You Have:

     The red and green wires have been places into a magnetic field which is 
     being charged continually be a lantern battery.  (It is necessary to 
     change this battery every one to one and a half months.)  This will 
     literaly pull in the nearest phone conversatiion.  (Don't try this in a 
     big apartment or dorm.)  When the 9-volt battery is connected, this will 
     now create enough current for the poles of the magnets to reverse 
     themselves (perhaps you're seen Mr. Wizard do this.  It's just like with 
     the soap).  At this point, you have a phone transmitting to one (if not 
     more) of the nearest phones.  (Again, if you're in a dorm, don't try 
     this.)  I suppose this just accomplishes what a tap would do, but with a 
     MAUVE BOX, your fingerprints never will show on a terminal or on 
     someones telephone lines.  


Notes and Addendum:

     This will only work with a touch-tone phone connected to a phone line.  
     When the switches are pulled, it's off your line and into the air.  This 
     is named a MAUVE BOX, becuase this is the most disgusting box, and I find 
     mauve to be the single most disgusting colour I know of.  Also, this file 
     is for information purposes only.  This is not to be used in an illegal 
     mannar.  Perhaps one of these by the pool, sending to your sethe co-author, accept no 
     responsibility for your actions with the MAUVE BOX. Thank you...MUSIC BOX

--------------------------------------
             THE NEON BOX
--------------------------------------

A NEON BOX IS A VERY SIMPLE ADJUSTMENT
TO YOUR FONE, THAT WILL ALLOW A VERY
CLEAR PASSAGE FROM YOUR COMPUTER TONES
TO YOUR FONE.  IT ALSO WORKS GREAT FOR
RECORDING TONES, SEX FONE, OR ANYTHING
ELSE YOU WANT TO RECORD OFF OF YOUR
FONE.
 
             TOOLS:
             ------
THIS MODIFICATION IS VERY SIMPLE, AND
CAN BE USED ON MOST FONES, THOUGH IT
IS MORE DIFFICULT ON ONE-PIECE UNITS.
ALL YOU NEED IS AN OLD PAIR OF
HEADFONES, OR SIMILAR, A FILIPS SCREW-
DRIVER, A SOLDERING IRON AND SOME
SOLDER.
            
            INSTRUCTIONS
            ------------
OPEN YOUR FONE WITH THE SCREWDRIVER.
WHEN OPENED, LOOK FOR THE RED AND
BLACK WIRES THAT LEAD TO THE MOUTH-
PIECE. (IF YOU'RE NOT SURE WHICH
WIRES LEAD TO THE MOUTHPIECE, OPEN UP
THE MOUTHPIECE AND FIND THE SAME
COLOR WIRES ON THE BASE. FOR ONE-PIECE
UNITS, JUST LOCATE THE MOUTHPIECE).
 
WHEN YOU HAVE FOUND THE MOUTHPIECE,
OR WIRES, CUT THE EARD OF THE HEAD-
FONES OFF, AND ONE WIRE (THE ONE THAT
LEADS TO THE RIGHT EAR). STRIP THE
LEFT WIRE SO ABOUT AN EIGHTH INCH IS
SHOWING. KEEP THE OTHER SIDE IN TACT.
 
THEN ON THE RED WIRE, SOLDER THE WIRE
THAT IS SEPARATLY SEALED FROM THE
OTHER ONE. ON THE BLACK WIRE (THESE
ARE THE ENDS OF THE WIRE ON THE CIR-
CUIT BOARD) SOLDER THE WAIRE WRAPPED
AROUND THE OTHER WIRE.  THEN SOLDER A
HOLE FOR THE WIRE. YOU HAVE NOW MADE
A NEON BOX.


(>::::::::::::::::::::::::::::::::::::::::::::::::::::::::<)
(>                                                        <)
(>                     Olive Box Plans                    <)
(>                                                        <)
(>::::::::::::::::::::::::::::::::::::::::::::::::::::::::<)

    This is a relatively new box, and all it basically does is serve as a phone
ringer. You have two choices for ringers, a piezoelectric transducer (ringer),
or a standard 8 ohm speaker. The speaker has a more pleasant tone to it, but
either will do fine. This circuit can also be used in conjunction with a rust
box to control an external something or other when the phone rings. Just
connect
the 8 ohm speaker output to the inputs on the rust box, and control the pot to
tune it to light the light (which can be replaced by a relay for external
controlling) when the phone rings.

             ______________
            |              |        ^
       NC --|-- 5      4 --|-----/\/\/------->G
            |              |      / R2
G<----)|----|-- 6      3 --|-- NC
    | C3    |      U1      |
     -------|-- 7      2 --|---------- --- -- - > TO RINGER
            |              |
        ----|-- 8      1 --|--
       |    |______________|  |
       |                       ---/\/\/----|(----- L1
       |                           R1      C1
        ------------------------------------------ L2

                  a. Main ringer TTL circuit

(>::::::::::::::::::::::::::::::::::::::::::::::::::::::::<)

                                   _
FROM PIN 2 < - -- --- ----------| |_| |------------->G
                                    P1

                  b. Peizoelectric transducer

(>::::::::::::::::::::::::::::::::::::::::::::::::::::::::<)

                                                      __  /|
FROM PIN 2 < - -- --- ---------|(---------.  .-------|  |/ |
                                          >||<       |S1|  |
                                          >||<     --|  |  |
                                          >||<    |  |__|\ |
                              G<---------.>||<.---        \|
                                           T1
                c. Elctro magnetic transducer
Parts List
----------

U1 - Texas Instruments TCM1506
T1 - 4000:8 ohm audio transfomer
S1 - 8 ohm speaker
R1 - 2.2k resistor
R2 - External variable resistor; adjusts timing frequency
C1 - .47uF capacitor
C2 - .1uF capacitor
C3 - 10uF capacitor
L1 - Tip
L2 - Ring
     L1 and L2 are the phone line.


Shift Rate:
-----------

  This is the formula for determining the shift rate:

                   1                   1
    SR = --------------------- = ------------ = 6.25 Hz
         (DSR(1/f1)+DSR(1/f2))    128     128
                                 ----  + ----
                                 1714    1500


              DSR = Shift Devider Rate ratio = 128
                f1 = High Output Frequency = 1714
               f2 = Low Output Frequency = 1500


                             *******************
                             *                 *
                             *  PANDORA'S BOX  *
                             *                 *
                             *   BY  DR. RAT   *
                             *                 *
                             *******************

Brought to you from the expansive, well equipped, and very expensively
decorated laboratories of Dr. Rat C.I.

This box falls into the prank category. It has little phreak/hack use, except
for irritating the hell out of anyone on the phone. It makes operators more
pissed than turning on your carrier for them.

A phasor is a device using high intensity sound to produce pain. I'm sure you
have seen phasors (crowd/dog control, pain fields, etc.) for sale in
Information Unlimited ads or catalogs. Unfortunately, these often cost $100
to $1000. Natchly this wouldn't do for Dr. Rat so I created the poor man's
phasor or, Pandora's Box. Producing the sound was easy and the circuit is
probably the simplest meathod to produce a variable sound from a 555 chip. The
only drawback to this box is that you need to use a $13.00 tweeter because it
uses so little power and gives the loudest output of high frequency sound.

Parts list with Radio Shack cat. numbers

    1. One 555 Timer (RS# 276-1723)
    2. One .01mfd capacitor (RS# 272-131)
    3. One 100K variable resistor (RS# 271-1722)
    4. One tweeter (RS# 40-1381)
    5. One 9v battery
    6. Some wire (any kind - Dr. Rat suggest RS# 278-1294)

NOTE: You can change the values of #2 or #3 on the list slightly. But these are
      extremely easy to find so try to use them.

Circuit for Pandora's Box:

  \         -9 Volts    +9 Volts
   \             Ŀ  
     \Ĵ1 T 8Ĵ
                  O    
     /Ŀ ĳ(Ĵ2 P 7  
   /                   
  /     +Ĵ3 5 6+Ŀ
                   5     
               Ĵ4 5 5   
                   
                          
                
                            
        /\/\
           ^

SYMBOLS:

 
  or   =  Wire (Vertical/Horizontal)
 

  +        =  Where two wires cross over each other but don't touch

  (       =  .01mfd CAPACITOR

 /\/\
  ^        =  100K Variable resistor

\
 \
   \
          =  Tweeter
   /
 /
/


NOTE: Pin 1 of the 555 is the pin next to a small dos on top of the chip.
      Variable resistors have three leads; the circuit requires only two so
      connect one wire to the middle lead and the other wire to either of the
      outer leads.

Here's a pin by pin reading of the wiring in case the circuit got screwed
during transmission:

1. Pin 1 connected to the -9v, one lead of the tweeter, and one end of the
   capacitor
2. Pin 2 connected to pin 6 and the other end of the capacitor
3. Pin 3 connected to other lead of tweeter and to one lead of the variable
   resistor
4. Pin 4 connected to pin 8
5. Pin 5 not connected
6. Pin 6 connected to pin 2 and other lead of variable resistor
7. Pin 7 not connected
8. Pin 8 connected to +9v and the pin 4

P.S. Works especially well on animals, girls, and young people because the
bones in their ears are smaller. Use the variable resistor to adjust the pitch
to just above the highest pitch you can hear. You might not notice anything at
first. After a short time you should fell a a tingle or buzzing in your neck,
ears, or sinus. A little while longer and you should feel a head/neck ache that
grows in pain. Try turning it to an audibal frequency and blasting it through
the phone. Remember girls can hear higher pitches than boys so they can well
when you have it on. Try turning the pitch a little higher so they can't hear
it. Entertain your class during finals. They can't hear anything because it's
too high pitched.

              Have Fun!

              Dr. Rat


DR. RAT C.I.
RAT LABS, S.F., CA


                                   The

                            P A R T Y   B O X
                          ---------------------


                       Written by Greyhawke of TDK


        Ever wanted three-way calling without having to pay for it?  Wanted to
connect two phone conversations at once, without any static or excess wiring,
or even having two phone lines?  Ever gone beige boxing and wanted to connect
two operators (or anyone!) but didn't have the necessary stuff with you?  The
party box fixes them all!
        First off, go to your local Radio Shack and pick up the following
parts:

(1)     DPDT slide switch  (all you need is DPST, but DPDTs are easy to get)
(2)     Modular phone jacks
(4)     Alligator clips
        Some wire (doesn't matter what kind)

        For the modular jacks, if you get the kind that look like a box with
the back open, it makes a nice looking party box when you stick them together.

Assembly:

        Take four lengths of wire, and strip the ends about 1/4" on both ends
of the wire.  Connect two wires to the red and green terminals on one phone
jack, and two wires to the red and green terminals on the other phone jack (so
you've used all four pieces of wire).  Connect to the other ends of each wire a
red or green alligator clip (down at Radio Shack they sell some nice ones with
color coded insulator sleeves.  Get these, it's REAL important that you know
the red ends from the green).  If you do this right, you'll have a red and
green aligator clip on each of the two phone jacks, connected to the wires.  By
this time, you should not have any wire end loose; they should all be connected
to SOMETHING.
        Now, if you've been paying attention and you know your boxes, you'll
recognize the two pieces of equipment you've just assembled as beige boxes. 
That's all they are, really, is beige boxes.
        Here's what makes those two beige boxes into a single party box.  Take
four more short (like 1.5") lengths of wire, and strip all the ends to about
1/4".  First connect one side of each wire to a contact on the DPDT or DPST
switch.  Just make sure it's the right switch.  For DPST, you won't have a
problem, but for DPDT, make sure the switch looks like this when the wires are
connected:
                       *-**-* -
                       *-**-* -

        It's doesn't really matter which side you connect the wires to, just
make sure that at least two of them are in the middle.  The wires are connected
to the terminals surrounded by asteriks (*).  Solder each connection carefully
to make sure it's a good one that won't fall off, and make sure none of the
wires are touching each other!!  If they do you've got a short circuit and the
box won't work!
        Here's the tricky part.  Take the bottom two wires (looking at the DPDT
switch from the bottom, so it looks like the above picture) and connect each
one to the red terminal on the phone jacks.  One wire to each jack.  Then, take
the top two wires and connect one to the green terminal on each phone jack. 
Again, one wire to each jack.  Screw down all the terminals good and tight.  If
you've done this correctly, there should be two wires leading to each red and
green terminal on the two phone jacks.  Set the switch so it's in the off
position.  It's off when only the middle terminals of the switch are covered,
or so that the switch is on the side where there aren't any wires coming to the
terminals there.  Just make sure it's in the beige mode.  Your box is now
built.
        (This is if you used the jacks I suggested at the top of the file.)  To
make it look pretty, you can cut away a portion of the plastic surrounding one
of the jacks so that the switch will fit nicely in the place you cut away. 
Also cut away a small half-circle on the bottom of the surrounding plastic to
feed the wires out of (the ones with the alligator clips, not the ones leading
to the switch).  Once these two things are done, and the switch is screwed down
securely, tape it all up, super-glue, who cares.  It doesn't matter; just so it
stays together.
        Once all this is done, here's a few things I like to do to make things
easy.  Put a small dot of white paint in the lower part of the switch, so that
when it's on the paint shows.  This is easy to do.  Also you might want to know
which line you're using for each box.  Just put a glob of a different colored
paint on each side of the party box, and put the same color paint on the wires
leading out of that side of the box.

Use:

        When used in beige box mode (so that the switch is off), the party box
will operate just like two beige boxes.  There are totally, 100% separate from
each other, and the conversations don't get crossed.
        However, when used in the party box mode, the party box connects both
lines to each other, essentially connecting all four people to the same line. 
Everyone can hear each other, and there is little or no static created by doing
this.  It's works great for connecting anyone together, and all that's needed
is each beige box connected to an output device ("Bell Can"), and the switch in
the party mode position.  See a file on beige boxing for detained info on what
to do while boxing, etc, or how to connect to a Bell Can.

Schematic:

        This is a really easy box, but someone might want a schematic, so
here's one:

      <--- to one phone jack                     to the other phone jack --->

       ---------------------------    __/   -----------------------------
       (red [ring] wire)         | __/!     |           (red [ring] wire)
       ------------------------- O/   !_/   O ---------------------------
       (green [tip] wire)      |   __/        |        (green [tip] wire)
                               | O/         O |
                               | |          | |
                               ---          ---

        It's a really bad schematic, but the little things in the middle are
supposed to represent the switch in the off posistion, and the exclamation
points just mean it's a DPST switch that doesn't connect the top and the bottom
termials.  The (-) and the (|) are supposed to be the wire.

Disclaimer:

        This file is, of course, only meant for informational purposes, and is
in no way meant to be used.  Any tapping of telephone lines is a federal
offense, so don't come crying to me if you get busted, because I'm telling you
not to do it.  I'm not responsible for you; you're responsible for you.

 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
 $$                                      $$
 $$           How to make a              $$
 $$                                      $$
 $$             Pearl Box                $$
 $$                                      $$
 $$  Written and created by: Dr. D-Code  $$
 $$                                      $$
 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

    The Pearl Box: Definition - This is a box that may substitute for many
boxes which produce tones in hertz.  The Pearl Box when operated correctly can
produce tones from 1-9999hz.  As you can see, 2600, 1633, 1336 and other cru-
cial tones are obviously in its sound spectrum.

 MATERIALS:  C1, C2::::::::.5mf or .5uf ceramic disk capacitors
             Q1::::::::::::NPN transistor (2N2222 works best)
             S1::::::::::::Normally open momentary SPST switch
             S2::::::::::::SPST toggle switch
             B1::::::::::::Standard 9-Volt battery
             R1::::::::::::Single turn, 50k potentiometer
             R2::::::::::::  "     "    100k potentiometer
             R3::::::::::::  "     "    500k potentiometer
             R4::::::::::::  "     "    1meg potentiometer
             SPKR::::::::::Standard 8-ohm speaker
             T1::::::::::::Mini transformer (8-ohm works best)
             Misc.:::::::::Wire, solder, soldering iron, PC board or perfboard
                           box to contain the completed unit, battery clip

 PROCEDURE

    Since the instruction are EXTREMELY difficult to explain in words, you
will be given a schematic instead.  It will be quite difficult to follow but
try it any way.  There is also a Hi-Res picture you can get that shows the
schematic in great detail.

 Schematic for The Pearl Box

                +-------------+------------+---------+
                !             !             \        +--S1----
                C1            C2             \           SPKR
                !             !               +      +--------
                +             +           ----+T1    +
                !\            +---------------+------+
                !  b  c-------!
                !   Q1                   !
                !     e-----S2---+       !
                !                !       !
                !               B1       !
                !                !       !
                !                +-------+
                !R1   R2   R3   R4!
                /\/\ /\/\ /\/\ /\/\
                  +--+ +--+ +--+

    Now that you are probably thoroughly confused, let me explain a few minor
details.  The potentiometer area is rigged so that the left pole is connected
to the center pole of the potentiometer next to it.  The middle terminal of T1
is connected to the piece of wire that runs down to the end of the battery.

 OPERATION OF THE PEARL BOX

    You may want to get some dry-transfer decals at Radio Shack to make this
job a lot easier.  Also, some knobs for the tops of the potentiometers may be
useful too.  Use the decals to calibrate the knobs.  R1 is the knob for the
ones place, R2 is for the tens place, R3 if for the hundreds place and R4 is
for the thousands place.  S1 is for producing the all the tones and S2 is for
power. 

Step 1: Turn on the power and adjust the knobs for the desired tone.
       (Example: For 2600 hz - R1 = 0: R2 = 0: R3 = 6: R4 = 2)
Step 2: Hit the push-button switch and VOILA!  You have the tone.  If you
        don't have a tone recheck all connections and schematic.  If you still
        don't have a tone call:  



                    $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
                    $                                     $
                    $         THE HISTORY OF ESS          $
                    $         --- ------- -- ---          $
                    $                                     $
                    $                                     $
                    $      Another original phile by:     $
                    $                                     $
                    $                                     $
                    $$$$$$$$$$$$-=>Lex Luthor<=-$$$$$$$$$$$
                    $                                     $
                    $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$


   Of all the new 1960s wonders of telephone technology - satellites, ultra
modern Traffic Service Positions (TSPS) for operators, the picturephone, and so
on - the one that gave Bell Labs the most trouble, and unexpectedly became the
greatest development effort in Bell System's history, was the perfection of an
electronic switching system, or ESS.

   It may be recalled that such a system was the specific end in view when the
project that had culminated in the invention of the transistor had been
launched back in the 1930s. After successful accomplishment of that planned
miracle in 1947-48, further delays were brought about by financial stringency
and the need for further development of the transistor itself.  In the early
1950s, a Labs team began serious work on electronic switching.  As early as
1955, Western Electric became involved when five engineers from the Hawthorne
works were assigned to collaborate with the Labs on the project. The president
of AT&T in 1956, wrote confidently, "At Bell Labs, development of the new
electronic switching system is going full speed ahead. We are sure this will
lead to many improvements in service and also to greater efficiency. The first
service trial will start in Morris, Ill., in 1959." Shortly thereafter, Kappel
said that the cost of the whole project would probably be $45 million.

   But it gradually became apparent that the development of a commercially
usable electronic switching system -in effect, a computerized telephone
exchange - presented vastly greater technical problems than had been
anticipated, and that, accordingly, Bell Labs had vastly underestimated both
the time and the investment needed to do the job. The year 1959 passed without
the promised first trial at Morris, Illinois; it was finally made in November
1960, and quickly showed how much more work remained to be done.  As time
dragged on and costs mounted, there was a concern at AT&T and some-thing
approaching panic at Bell Labs.  But the project had to go forward; by this
time the investment was too great to be sacrificed, and in any case, forward
projections of increased demand for telephone service indicated that within a
phew years a time would come when, without the quantum leap in speed and
flexibility that electronic switching would provide, the national network would
be unable to meet the demand. In November 1963, an all-electronic switching
system went into use at the Brown Engineering Company at Cocoa Beach, Florida.
But this was a small installation, essentially another test installation,
serving only a single company. Kappel's tone on the subject in the 1964 annual
report was, for him, an almost apologetic: "Electronic switching equipment must
be manufactured in volume to unprecedented standards of reliability.... To turn
out the equipment economically and with good speed, mass production methods
must be developed; but, at the same time, there can be no loss of precision..."
Another year and millions of dollars later, on May 30, 1965, the first
commercial electric central office was put into service at Succasunna, New
Jersey.

                                  Bad as Shit

   Recently, a telephone fanatic in the  northwest made an interesting
discovery.  He was exploring the 804 area code (Virginia) and found out that
the 840 exchange did something strange.
  In the vast majority of cases, in fact in all of the cases except one, he
would get a recording as if the exchange didn't exist. However, if he dialed
804-840 and four rather predictable numbers, he got a ring!

   After one or two rings, somebody picked up.  Being experienced at this kind
of thing, he could tell that the call didn't "supe", that is, no charges were
being incurred for calling this number.
  (Calls that get you to an error message, or a special operator, generally
don't supervise.)  A female voice, with a hint of a Southern accent said,
"Operator, can I help you?"

   "Yes," he said, "What number have I reached?"

   "What number did you dial, sir?"

   He made up a number that was similar.

   "I'm sorry that is not the number you reached."  Click.

   He was fascinated.  What in the world was this?  He knew he was going to
call back, but before he did, he tried some more experiments. He tried the 840
exchange in several other area codes.  In some, it came up as a valid exchange.
In others, exactly the same thing happened -- the same last four digits, the
same Southern belle.  Oddly enough, he later noticed, the areas worked in
seemed to travel in a beeline from Washington DC to Pittsburgh, PA.

   He called back from a payphone.  "Operator, can I help you?"

   "Yes, this is the phone company.  I'm testing this line and we don't seem to
have an identification on your circuit.  What office is this, please?"

   "What number are you trying to reach?"

   "I'm not trying to reach any number.  I'm trying to identify this circuit."

   "I'm sorry, I can't help you."

   "Ma'am, if I don't get an ID on this line, I'll have to disconnect it.  We
show no record of it here."

   "Hold on a moment, sir."

   After about a minute, she came back.  "Sir, I can have someone speak to you.
Would you give me your number, please?"

   He had anticipated this and he had the payphone number ready. After he gave
it, she said, "Mr. XXX will get right back to you."

   "Thanks."  He hung up the phone.  It rang.  INSTANTLY!  "Oh my God," he
thought, "They weren't asking for my number -- they were confirming it!"

   "Hello," he said, trying to sound authoritative.
   "This is Mr. XXX.  Did you just make  an inquiry to my office concerning a
phone number?"

   "Yes.  I need an identi--"

   "What you need is advice.  Don't ever call that number again. Forget you
ever knew it."

   At this point our friend got so nervous he just hung up.  He expected to
hear the phone ring again but it didn't.

   Over the next few days he racked his brains trying to figure out what the
number was.  He knew it was something big -- that was pretty certain at this
point.  It was so big that the number was programmed into every central office
in the country.  He knew this because if he tried to dial any other number in
that exchange, he'd get a local error message from his CO, as if the exchange
didn't exist.

   It finally came to him.  He had an uncle who worked in a federal agency.  He
had a feeling that this was government related and if it was, his uncle could
probably find out what it was.  He asked the next day and his uncle promised to
look into the matter.

   The next time he saw his uncle, he noticed a big change in his manner.  He
was trembling.  "Where did you get that number?!"  he shouted.  "Do you know I
almost got fired for asking about it?!? They kept wanting to know where I got
it."

   Our friend couldn't contain his excitement.  "What is it?" he pleaded.
"What's the number?!"

"IT'S THE PRESIDENT'S BOMB SHELTER!"

   He never called the number after that.  He knew that he could probably cause
quite a bit of excitement by calling the number and saying something like, "The
weather's not good in Washington.  We're coming over for a visit."  But our
friend was smart.  he knew that there were some things that were better off
unsaid and undone. <>

                               Phreaking COSMOS
         =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

    COSMOS is Bell's computer for handling information on customer lines,
special services on lines, and orders to change line equipment, disconnect
lines, etc.  COSMOS stands for Computerized System for Mainframe Operations. It
is based on the UNIX operating system and, depending upon the COSMOS and upon
your access, has some, many, or no UNIX standard commands.  COSMOS is powerful,
but there is no reason to be afraid of it.  This article will give some of the
basic, pertinent info on how users get in, account format, and a few other
goodies.

                            Password Identification
         =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

    To get onto COSMOS you need a dialup, account, password, and wire center
(WC).  Wire centers are two letter codes that tell what section of the COSMOS
you are in.  There are different WC's f or different areas and groups of
exchanges.  Examples are PB, SR, LK, et c. Sometimes there are accounts that
have no password; obviously such accounts are the easiest to hack.

                                Checking It Out
         =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

    Let's suppose you have a COSMOS number which you obtained one way or
another.  The first thing to do would be to make sure it is really a COSMOS
system, not some other Bell or AT&T computer.  To do this, you would call it
and connect your modem,, then hit some returns until you got a response. It
should say:

 ';LOGIN:' or 'NAME:'.
    If you enter some garbage it should say:
'PASSWORD:'.
    If you hit a return and it says 'WC?', it is a COSMOS system.  If it says
something like 'TA%' then you're in business.  If it doesn't do any of the
above, then it is either some other  kind of system, or, if you're not getting
anything at all, the dialup has  probably gone bad.

                                  Getting In
         =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

    COSMOS has certain accounts that are  usually on the system, one of which
might not have a password.  They consist of ROOT (most powerful and almost
always on the system), SYS (second most  powerful, still many privileges), BIN
(a little less power), PREOP (a little less), and COSMOS (hardly any
privileges, like a normal user).  The way to tell if they have passwords is by
entering accounts at the ';LOGIN:' or ' NAME:' prompt, and if it jumps straight
to 'WC?', all you need is a WC to get in.  But suppose all of the accounts have
passwords?  You have two choices. You  can try to hack the password and WC to
one of the above accounts.  I won't deal with this method, as is
self-explanatory.  Or you can do something I  find much easier...call the
COSMOS during business hours and hope that someone forgot to log off. Keep
calling until when you connect and hit return until you get a 'WC%' prompt.
'WC' is the WC that the account you found is currently in. You are now in!

                           What to Do while on-line
         =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
    The first thing you want to do is write down the WC you are in. Only on our
first login it is a good idea to print everything or dump everything to a
buffer.

                                   Commands
         =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
'WCFLDS'(!)     : Should list all WC's.
'WHO'           : Should print everyone currently logged on the system, giving
some accounts.
'TTY'           : Tells what terminal port you are on.
'WHERE'         : Should tell the location of the COSMOS installation.
'WHAT'          : Tells what version of COSNIX, COSMOS's operating system, it
is.
'LS *'          : Prints all the files you  have access to.
'CD /dir'       : Connects you to the directory '/dir'.
'CAT filename ' : Prints the file 'filename'.
'Q'             : Quits the editor.
CTRL- Y.        : Logs off
'TAT'           : Sometimes prints a little help file.
'ISH'           : Check someone's telefone #, type 'ISH' at the COSMOS 'WC%'
prompt. Then type.
'HTN XXX-XXXX'  : (Hunt Telephone Number) to tell you about the local number
you are interested in.

'CAT /ETC/PASSWD': Prints out the password file, if you have access. The
passwords are almost always encrypted, but you get a  list of all the accounts.
If you are lucky, one of the lines will have two colons after the account name.
This means there is no prompt from the ';LOGIN:' or 'NAME:' prompts when you
enter that account.

To run a file just type the name followed by a return.

   When the system gives you a '-', you type a '.', and it will type all kinds
of info on the phone number you entered (in Bell abbreviations, of course).  If
it is not a good exchange, it will say something to that effect.  You type a
period to end the ISH.
   If you wish to learn more information about COSMOS, find yourself a COSMOS
manual or look at future issues of 2600.  A UNIX manual would also be helpful
for standard UNIX commands.

                             Phreaking AT&T Cards
         =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

    My topic will deal with using an AT&T calling card for automated calls. Ok
to place a call with an AT&T card, lift the handset (PAY PHONE) hit (0) and the
desired area code and the  number to call. Also when calling the same number
that the card is being billed to you enter the phone number and at  the tone
only enter the last four digits on the card. But we don't want  to do that now,
do we. If additional calls are wanted all you do is hit the (#) and you will
get a new dial tone! After you hit (#) you do not have to  re-enter the calling
card number  simply enter your desired number and it will connect you.
    If the number you called is busy just keep hitting (#) and the number to be
called until you connect! Ok to calL the U.S. of a from another country, you
use the exact same format as described above!
    Ok now I will describe the procedure for placing calls to a foreign
country, such as CANADA,RUSSIA,SOUTH AMERICA, etc.. Ok first lift the handset
then enter (01) + the country code + the city code + the local telephone
number. Ok after you get the tone enter the AT&T calling card number. Ok if you
can not dial operator assisted calls from your area don't worry just jingle the
operator and she will handle your call, don't worry she can't see you!
    The international number on the AT&T calling card is used for calling the
US of A from places like RUSSIA, CHINA you never know when you might get stuck
in a country like those and you have no money to make a call! The international
operator will be able to tell you if they honor the AT&T calling card.
    Well I hope that this has straightened out some of your problems on the use
of an AT&T calling card! All you have to remember is that weather you are
placing the call or the operator, be careful and never use the calling card
from your home phone!! That is a BIG NO NO..

    Also AT&T has came out with a new thing called (NEW CARD CALLER SERVICE)
they say that it was designed to meet the public's needs! These phones will be
popping up in many place such as airport terminals, hotels, etc... What the new
card caller service is, is a new type of phone that has a  (CRT) screen that
will talk to you in a language of your choice. The  service works something
like this, when you find a (NEW CARD CALLER PHONE), all you do is follow the
instructions on the (CRT) screen, then you insert the (NEW CARD CALLER CARD)
and there is a strip of magnetic tape on the card  which reads the number, thus
no one can hear you saying your number or if there were a bug in the phone,no
touch tones will be heard!! You can also bill the call to a third party. that
is  one that I am not totally clear on yet! The phone is supposed to tell you
how it can be done. That is after you  have inserted your card and lifted the
receiver!

                        The Official Phreaker's Manual

                      [ESSENCE OF TELEPHONE CONFERENCING]
                                 [WRITTEN BY:]
                               [FOREST  RANGER]

     TELEPHONE CONFERENCING IS AN EASY WAY OF GETTING MANY FRIENDS TOGETHER AT
ONCE. THIS CAN BE ACCOMPLISHED EASILY WITH LITTLE OR NO TROUBLE WHAT SO EVER.
THE TECHNIQUES THAT I WILL TEACH YOU DO NOT REQUIRE A BLUE BOX OR A TOUCH TONE
PHONE LINE. THE ONLY PREREQUISITE IS THAT YOU HAVE A PHONE THAT HAS A TONE
SWITCH ON IT OR HAVE A HOOKABLE TOUCH TONE KEYPAD. NOW, IF YOU ARE THE PARANOID
TYPE OF PERSON AND REFUSE TO USE YOUR OWN PHONE OUT OF YOUR HOUSE THEN HERE ARE
SOME SIMPLE WAYS OF GETTING CONFERENCES STARTED FROM ANOTHER PHONE. GO TO A
MALL OR A PLACE WHERE YOU KNOW THE PHONE IS BEING PAYED FOR BY THE BUSINESS IT
IS IN.
    NOW THERE ARE TWO TO CALL THE CONFERENCE OPERATOR; DIAL "0" TO GET YOUR
LOCAL OPERATOR SO SHE CAN PUT YOU THROUGH TO THE CONFERENCE OPERATOR OR DIAL
THE CONFERENCE OPERATOR DIRECTLY IF YOU HAVE THE NUMBER HANDY. THE SYSTEM YOU
WILL BE LINKED UP TO IS CALLED THE "ALLIANCE" SYSTEM. THERE ARE THREE BRANCHES;
1000,2000,3000.
    NOW ONCE YOU HAVE GOTTEN THE CONFERENCE OPERATOR YOU TELL HER YOU WOULD
LIKE TO START A CONFERENCE AND YOU WOULD LIKE TO MAINTAIN CONTROL OF IT. SHE
WILL THEN PROCEED TO ASK YOU FOR YOUR NAME AND NUMBER. YOU WILL THEN GIVE HER A
FAKE NAME AND THE NUMBER OF THE PAY PHONE. SHE WILL HANG UP AND CALL YOU BACK
ONCE SHE HAS CHECKED THE NUMBER. THEY USUALLY DON'T REALIZE IT IS A PAYPHONE SO
DON'T THINK IT WON'T WORK! NOW ONCE THE OPERATOR HAS GIVEN YOU CONTROL YOU WILL
THEN PROCEED TO HACK MY VOICE PHONE AND PUT ME ON THE CONFERENCE.
    NOW, THE OTHER WAY OF STARTING A CONFERENCE IN WHICH YOU DON'T GET A LIVE
OPERATOR IS A "PBX". WITH THIS YOU WILL CALL A PBX NUMBER AND YOU WILL THEN
RECEIVE A RECORDING OF A BUSINESS OR OFFICE CO. THEN WHEN THE RECORDING IS OVER
YOU WILL HERE A BEEP...THEN AFTER ABOUT 10-30 SECONDS AFTER THE BEEP YOU WILL
GET A DIAL TONE ON THE ON THE END OF THE PBX.  YOU WILL THEN TYPE THE PBX CODE
WHICH WILL THEN RESPOND WITH A RECORDING WELCOMING YOU TO THE CONFERENCING
NETWORK (WHICH WILL IN MOST IF NOT ALL BE THE "ALLIANCE" SYSTEM).
    IT WILL BE SELF EXPLANATORY FROM THERE. NOW IF YOU DON'T WISH TO CALL THE
CONFERENCE OPERATOR EITHER WAY ALREADY EXPLAINED THEN THERE IS A WAS OF GETTING
YOUR FRIENDS IN CONFERENCE. THIS IS DONE OVER A LOOP EXTENSION. NO ONE WILL
HAVE CONTROL, BUT YOU WILL STILL BE ON CONFERENCE. THIS IS CALLED THE SEVEN
LINE LOOP EXTENSION. THIS MEANS YOU CAN HAVE UP TO SEVEN MEMBERS, BUT THAT IS
IT! THE NUMBER IS IN LA, CA. 213-206-2820. THE LAST WAY I WILL EXPLAIN TO YOU
IF YOU ARE IN DESPERATE NEED OF A CONFERENCE IS TO GO TO PAY PHONE LIKE I
MENTIONED BEFORE ANY MAKE SURE SOME BUSINESS PAYS THE BILL FOR IT THEN CALL THE
CONFERENCE OPERATOR IN THE FASHIONS MENTIONED AND ASK THE CONFERENCE OPERATOR
TO PLACE CONFERENCE CALLS.
    THE WILL THEN ASK FOR THE NUMBERS OF THE PEOPLE TO PUT ON CONFERENCE, YOU
GIVE HER THE NUMBERS AND SHE WILL PUT YOU ALL ON CONFERENCE.  WHEN YOU ARE DONE
YOU WILL HANG UP ON HER SO THERE WILL BE NO ONE IN CONTROL.THAT MEANS THE
CONFERENCE WILL BE BILLED TO THE PAYPHONE AND NO ONE CAN BE BLAMED FOR THE
CONFERENCE DUE TO NO ONE BEING IN CONTROL! ***NOTE*** THE CONFERENCE OPERATOR
WILL NOT BE ON WHILE YOU ARE ALL TALKING! REMEMBER THAT CONFERENCES ARE NOT
HARD AND IT IS VERY HARD TO GET ARRESTED ON ONE DUE TO WHAT I HAVE MENTIONED.

[TELEPHONE CONFERENCE CONTROLS]

   # - CONTROL MODE
   # - 6 PASSES CONTROL
   # - 1 + AREA CODE & NUMBER ADDS
   # - 9 SILENT MODE
   # - 7 GETS CONFERENCE OPERATOR
   * - ENDS CONFERENCE


   THE "#" IS THE CONTROL KEY ON YOUR CONFERENCES. WHEN YOU PASS CONTROL TO
SOMEONE ELSE HIT THE "#" THEN "6". WAIT FOR THE RECORDING TO SAY ENTER # OF
PERSON TO PASS CONTROL TO, THEN ENTER THE NUMBER OF THE PERSON YOU ARE GOING TO
GIVE CONTROL TO.
   TO ADD A PERSON ON TO THE CONFERENCE HIT "#" THEN "1","AREA CODE","NUMBER".
THEN WHEN THE PERSON ANSWERS WAIT FIVE SECONDS THEN HIT THE "#" TO ADD. IF YOU
ARE IN CONTROL OF THE CONFERENCE AND YOU WANT TO HEAR EVERYONE ELSE, BUT YOU DO
NOT WANT TO BE HEARD IT "#" THEN "9" THEN THE "#" TO REJOIN THE CONFERENCE.
REMEMBER AFTER ADDING SOMEONE ON OR PASSING CONTROL TO SOMEONE YOU MUST ALWAYS
HIT THE "#" TO REJOIN THE OTHERS ON CONFERENCE: PASSING CONTROL: "#","6", WAIT
FOR RECORDING TO SAY ENTER NUMBER OF PARTY TO GIVE CONTROL TO THEN ENTER NUMBER
AND HIT "#" TO REJOIN YOUR CONFERENCE.IF YOU EVER WANT TO GET A CONFERENCE
OPERATOR FOR SOME STRANGE REASON THEN HIT "#","7" AND WAIT FOR A CONFERENCE
OPERATOR TO CLICK ON. TO END A CONFERENCE HIT "*".



               2600 Magazine's story on the Private Sector Bust
                          Uploaded by Elric of Imrryr
                            Lunatic Labs Unlimited
               ::::::::::::::::::::::::::::::::::::::::::::::::

Typed By Shooting Shark : The following article appeared in the August, 1985
issue of 2600 Magazine. Subscriptions to 2600 are $12 a year for individuals.
Make checks payable to 2600 Enterprises, Inc.  Write to: 2600, Box 752, Middle
Island, NY 11953-0752.  Their phone number is 516-751-2600.  Text of article
follows.

SEIZED!
2600 Bulletin Board is Implicated in Raid on Jersey Hackers

     On July 12, 1985, law enforcement officials seized the Private Sector BBS,
the official computer bulletin board of 2600 magazine, for "complicity in
computer theft," under the newly passed, and yet untested, New Jersey Statute
2C:20-25.  Police had uncovered in April a credit carding ring operated around
a Middlesex County electronic bulletin board, and from  there investigated
other North Jersey bulletin boards.  Not understanding subject matter of the
Private Sector BBS, police assumed that the sysop was  involved in illegal
activities.  Six other computers were also seized in this investigation,
including those of Store Manager [perhaps they mean Swap Shop  Manager? -
Shark] who ran a BBS of his own, Beowolf, Red Barchetta, the Vampire, NJ Hack
Shack, sysop of the NJ Hack Shack BBS, and that of the sysop of the Treasure
Chest BBS.

     Immediately after this action, members of 2600 contacted the media, who
were completely unaware of any of the raids.  They began to bombard the
Middlesex County Prosecutor's Office with questions and a press conference  was
announced for July 16.  The system operator of the Private Sector BBS attempted
to attend along with reporters from 2600.  They were effectively  thrown off
the premises.  Threats were made to charge them with trespassing and other
crimes.  An officer who had at first received them civilly was  threatened with
the loss of his job if he didn't get them removed promptly.  Then the car was
chased out of the parking lot.  Perhaps prosecutor Alan Rockoff was afraid that
he presence of some technically literate reporters would ruin the effect of his
press release on the public. As it happens, he didn't need our help.

     The next day the details of the press conference were reported to the
public by the press.  As Rockoff intended, paranoia about hackers ran rampant.
Headlines got as ridiculous as hackers ordering tank parts by telephone from
TRW and moving satellites with their home computers in order to make free phone
calls.  These and even more exotic stories were reported by otherwise
respectable media sources. The news conference understandably made the front
page of most of the major newspapers in the US, and was a major news item as
far away as Australia and in the United Kingdom due to the sensationalism of
the claims.  We will try to explain why these claims may have been made in this
issue.

     On July 18 the operator of The Private Sector was formally charged
with"computer conspiracy" under the above law, and released in the custody of
his parents.  The next day the American Civil Liberties Union took over his
defense.  The ACLU commented that it would be very hard for Rockoff to prove a
conspiracy just "because the same information, construed by the prosecutor to
be illegal, appears on two bulletin boards." especially as Rockoff admitted
that "he did not believe any of the defendants knew each other."  The ACLU
believes that the system operator's rights were violated, as he was assumed to
be involved in an illegal activity just because of other people under
investigation who happened to have posted messages on his board.

    In another statement which seems to confirm Rockoff's belief in guilt by
association, he announced the next day that "630 people were being investigated
to determine if any used their computer equipment fraudulently."  We believe
this is only the user list of the NJ Hack Shack, so the actual list of those to
be investigated may turn out to be almost 5 times that.  The sheer overwhelming
difficulty of this task may kill this investigation, especially as they find
that many hackers simply leave false information.  Computer hobbyists all
across the country have already been called by the Bound Brook, New Jersey
office of the FBI.  They reported that the FBI agents used scare tactics in
order to force confessions or to provoke them into turning in others.  We would
like to remind those who get called that there is nothing inherently wrong or
illegal in calling any ANY BBS, nor in talking about ANY activity.  The FBI
would not comment on the case as it is an "ongoing investigation" and in the
hands of the local prosecutor.  They will soon find that many on the Private
Sector BBS's user list are data processing managers, telecommunications
security people, and others who are interested in the subject of the BBS,
hardly the underground community of computer criminals depicted at the news
conference.  The Private Sector BBS was a completely open BBS, and police and
security people were even invited on in order to participate.  The BBS was far
from the "elite" type of underground telecom boards that Rockoff attempted to
portray.

     Within two days, Rockoff took back almost all of the statements he had
made at the news conference, as AT&T and the DoD [Department of Defense -
Shark] discounted the claims he had made.  He was understandably unable to find
real proof of Private Sector's alleged illegal activity, and was faced with
having to return the computer equipment with nothing to show for his effort.
Rockoff panicked, and on July 31, the system operator had a new charge against
him, "wiring up his computer as a blue box."  Apparently this was referring to
his Novation Applecat modem which is capable of generating any hertz tone over
the phone line.  By this stretch of imagination an Applecat could produce a
2600 hertz tone as well as the MF which is necessary for "blue boxing."
However, each and every other owner of an Applecat or any other modem that can
generate its own tones therefore has also "wired up his computer as a blue box"
by merely installing the modem. This charge is so ridiculous that Rockoff
probably will never bother to press it.  However, the wording of WIRING UP THE
COMPUTER gives rockoff an excuse to continue to hold onto the computer longer
in his futile search for illegal activity.

     "We have requested that the prosecutors give us more specific
information," said Arthur Miller, the lawyer for The Private Sector. "The
charges are so vague that we can't really present a case at this point."
Miller will appear in court on August 16 to obtain this information.  He is
also issuing a demand for the return of the equipment and, if the prosecutors
don't cooperate, will commence court proceedings against them.  "They haven't
been particularly cooperative," he said.

     Rockoff probably will soon reconsider taking Private Sector's case to
court, as he will have to admit he just didn't know what he was doing when he
seized the BBS.  The arrest warrant listed only "computer conspiracy" against
Private Sector, which is much more difficult to prosecute than the multitude of
charges against some of the other defendants, which include credit card fraud,
toll fraud, the unauthorized entry into computers, and numerous others.

     Both Rockoff and the ACLU mentioned the Supreme Court in their press
releases, but he will assuredly take one of his stronger cases to test the new
New Jersey computer crime law.  by seizing the BBS just because of supposed
activities discussed on it, Rockoff raises constitutional questions.  Darrell
Paster, a lawyer who centers much of his work on computer crime, says the New
Jersey case is "just another example of local law enforcement getting on the
bandwagon of crime that has come into vogue to prosecute, and they have
proceeded with very little technical understanding, and in the process they
have abused many people's constitutional rights.  What we have developing is a
mini witch hunt which is analogous to some of the arrests at day care centers,
where they sweep in and arrest everybody, ruin reputations, and then find that
there is only one or two guilty parties."  We feel that law enforcement, not
understanding the information on the BBS, decided to strike first and ask
questions later.

     2600 magazine and the sysops of the Private Sector BBS stand fully behind
the system operator.  As soon as the equipment is returned, the BBS will go
back up.  We ask all our readers to do their utmost to support us in our
efforts, and to educate as many of the public as possible that a hacker is not
a computer criminal.  We are all convinced of our sysop's innocence, and await
Rockoff's dropping of the charges.

NOTE:  Readers will notice that our reporting of the events are quite different
than those presented in the media and by the Middlesex County Prosecutor.  We
can only remind you that we are much closer to the events at hand than the
media is, and that we are much more technologically literate than the Middlesex
County Prosecutor's Office.  The Middlesex County Prosecutor has already taken
back many of his statements, after the contentions were disproven by AT&T and
the DoD.  One problem is that the media and the police tend to treat the seven
cases as one case, thus the charges against and activities of some of the
hackers has been extended to all of the charged.  We at 2600 can only speak
about the case of Private Sector.
         ************* << BIOC AGENT 003'S COURSE IN >> *************
         *                                                          *
         *             $%$%$%$%$%$%$%$%$%$%$%$%$%$%$%$%$            *
         *                 BASIC TELECOMMUNICATIONS                 *
         *             $%$%$%$%$%$%$%$%$%$%$%$%$%$%$%$%$            *
         *                         PART I                           *
         *                                                          *
         ************************************************************

                                   PREFACE:
         <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

    IN PART I, WE WILL EXPLORE THE VARIOUS SPECIAL BELL#'S, SUCH AS: CN/A,
AT&T NEWSLINES, LOOPS, 99XX #'S, ANI, RINGBACK, AND A FEW OTHERS.

                                     CN/A:
         <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

    CN/A, WHICH STANDS FOR CUSTOMER NAME AND ADDRESS, ARE BUREAUS THAT EXIST SO
THAT AUTHORIZED BELL EMPLOYEES CAN FIND OUT THE NAME AND ADDRESS OF ANY
CUSTOMER IN THE BELL SYSTEM.  ALL #'S ARE MAINTAINED ON FILE INCLUDING UNLISTED
#'S.

HERE'S HOW IT WORKS:

1) YOU HAVE A # AND YOU WANT TO FIND OUT WHO OWNS IT, E.G. (914) 555-1234.

2) YOU LOOK UP THE CN/A # FOR THAT NPA IN THE LIST BELOW.  IN THE EXAMPLE, THE
NPA IS 914 AND THE CN/A# IS 518-471-8111.

3) YOU THEN CALL UP THE CN/A # (DURING BUSINESS HOURS) AND SAY SOMETHING LIKE,
"HI, THIS IS JOHN JONES FROM THE RESIDENTIAL SERVICE CENTER IN MIAMI. CAN I
HAVE THE CUSTOMER'S NAME AT 914-555-1234.  THAT # IS 914-555-1234." MAKE UP
YOUR OWN REAL SOUNDING NAME, THOUGH.

4) IF YOU SOUND NATURAL & CHEERY, THE OPERATOR WILL ASK NO QUESTIONS.

                               HERE'S THE LIST:
         <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

                      NPA     CN/A #       NPA     CN/A #
                    ---  ------------    ---  ------------
                    201  201-676-7070    517  313-232-8690
                    202  202-384-9620    518  518-471-8111
                    203  203-789-6800    519  416-487-3641
                    204  ****N/A*****    601  601-961-0877
                    205  205-988-7000    602  303-232-2300
                    206  206-382-8000    603  617-787-2750
                    207  617-787-2750    604  604-432-2996
                    208  303-232-2300    605  402-345-0600
                    209  415-546-1341    606  502-583-2861
                    212  518-471-8111    607  518-471-8111
                    213  213-501-4144    608  414-424-5690
                    214  214-948-5731    609  201-676-7070
                    215  412-633-5600    612  402-345-0600
                    216  614-464-2345    613  416-487-3641
                    217  217-525-7000    614  614-464-2345
                    218  402-345-0600    615  615-373-5791
                    219  317-265-7027    616  313-223-8690
                    301  301-534-11??    617  617-787-2750
                    302  412-633-5600    618  217-525-7000
                    303  303-232-2300    701  402-345-0600
                    304  304-344-8041    702  415-546-1341
                    305  912-784-9111    703  804-747-1411
                    306  ****N/A*****    704  912-784-9111
                    307  303-232-2300    705  416-487-3641
                    308  402-345-0600    707  415-546-1341
                    309  217-525-7000    709  ****N/A*****
                    312  312-769-9600    712  402-345-0600
                    313  313-223-8690    713  713-658-1793
                    314  314-436-3321    714  213-995-0221
                    315  518-471-8111    715  414-424-5690
                    316  816-275-2782    716  518-471-8111
                    317  317-265-7027    717  412-633-5600
                    318  318-227-1551    801  303-232-2300
                    319  402-345-0600    802  617-787-2750
                    401  617-787-2750    803  912-784-9111
                    402  402-345-0600    804  804-747-1411
                    403  403-425-2652    805  415-546-1341
                    404  912-784-9111    806  512-828-2502
                    405  405-236-6121    807  416-487-3641
                    406  303-232-2300    808  212-226-5487
                    408  415-546-1341         BERMUDA ONLY
                    412  412-633-5600    809  212-334-4336
                    413  617-787-2750    812  317-265-7027
                    414  414-424-5690    813  813-228-7871
                    415  415-546-1132    814  412-633-5600
                    416  416-487-3641    815  217-525-7000
                    417  314-436-3321    816  816-275-2782
                    418  514-861-6391    817  214-948-5731
                    419  614-464-2345    819  514-861-6391
                    501  405-236-6121    901  615-373-5791
                    502  502-583-2861    902  902-421-4110
                    503  503-241-3440    903  ****N/A*****
                    504  504-245-5330    904  912-784-9111
                    505  303-232-2300    906  313-223-8690
                    506  506-657-3855    907  ****N/A*****
                    507  402-345-0600    912  912-784-9111
                    509  206-382-8000    913  816-275-2782
                    512  512-828-2501    914  518-471-8111
                    513  614-464-2345    915  512-828-2501
                    514  514-861-6391    916  415-546-1341
                    515  402-345-0600    918  405-236-6121
                    516  518-471-8111    919  912-784-9111
         <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

    BELL USES THESE #'S MAINLY TO FIND OUT WHO OWNS A # THAT A CUSTOMER CLAIMS
HE NEVER CALLED.

INFO ON STOCK, TECHNOLOGY, ETC. CONCERNING THE BELL SYSTEM.

  HERE ARE THE #'S THAT ARE CURRENTLY KNOWN TO PHREAKS (AT LEAST ME, ANYWAY):
         <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

                    201-483-3800 NJ        513-421-9060 OH
                    203-771-4920 CT        516-234-9914 NY
                    212-393-2151 NY        518-471-2272 NY
                    213-621-4141 CA        617-955-1111 MA
                    213-829-0111 CA (GTE)  702-789-6711 NV
                    213-449-8830 CA        713-224-6116 TX
                    312-368-8000 IL        714-238-1111 CA
                    313-223-7223 MI        717-255-5555 PA
                    314-247-5511 MO        717-787-1031 PA
                    408-493-5000 CA        802-955-1111 VE
                    412-633-3333 PA        808-533-4426 HI
                    414-678-3511 WI        813-223-5666 FL
                    416-929-4323 ONT.      914-948-8100 NY
                    503-228-6271 OR        916-480-8000 CA

                                   RING BACK
         <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

    RINGBACK, AS ITS NAME IMPLIES, CALLS BACK THE # YOU ARE AT WHEN YOU DIAL
THE RINGBACK #. RINGBACK, IN NPA 914, IS 660. YOU DIAL 660+THE LAST 4 DIGITS OF
THE FONE.  YOU WILL THEN GET A TONE, HANG-UP QUICKLY AND PICK-UP IN ABOUT 2
SECONDS. YOU WILL THEN GET A SECOND TONE, HANG-UP AGAIN AND THE FONE WILL
RING.
    IN NYC, IT IS ALSO 660, BUT YOU MAY HAVE TO PRESS 6 OR 7 BEFORE YOU HANG UP
FOR THE FIRST TIME (IE, AT THE FIRST  TONE).

    OTHER RINGBACK #'S THAT I HAVE SEEN ARE:

26011                - THIS 5 DIGIT FORMAT IS USED PRIMARILY ON STEP-BY-STEP.
THE LAST 2 DIGITS (11) ARE DUMMY DIGITS.

890-897-XXXX         - XXXX ARE THE LAST 4 DIGITS OF THE FONE #.

119911/11911/1199911 - GTE

NNX-9906/9907        - NPA 301, NNX IS THE EXCHANGE


    THE REASON YOU GET THE TONE WHEN YOU PICK-UP AFTER IT RINGS IS BECAUSE IN
SOME AREAS, PEOPLE WERE USING RINGBACK AS AN IN-HOUSE INTERCOM.  THEY WOULD
DIAL RINGBACK, AND WHEN IT STOPPED RINGING, THEY WOULD PICK-UP & TALK WITH THE
PERSON WHO PICKED UP THE OTHER EXTENSION.  BELL DIDN'T LIKE THIS SINCE THERE IS
USUALLY ONLY 1 PIECE OF EQUIPMENT IN EACH EXCHANGE THAT DOES THE RINGBACK. WHEN
PEOPLE USED THIS AS AN INTERCOM, LINEMEN & REPAIRMEN COULDN'T GET THROUGH!  IN
SOME AREAS, ESPECIALLY THOSE UNDER STEP-BY-STEP, RINGBACK CAN STILL BE USED AS
AN INTERCOM.  ALSO, UNDER STEP-BY-STEP, THE RINGBACK PROCEDURE IT USUALLY
SIMPLE.  FOR EXAMPLE, IN ONE AREA YOU WOULD DIAL 26011 AND HANG-UP; IT WOULD
THEN RINGBACK.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
THE FOLLOWING CO CODES ARE RESERVED NATIONWIDE:

555 - DIRECTORY ASSISTANCE
844 - TIME    ] THESE ARE NOW IN
936 - WEATHER ] THE 976 EXCHANGE
950 - FUTURE SERVICES
958 - PLANT TEST
959 - PLANT TEST
970 - PLANT TEST (TEMPORARY)
976 - DIAL-IT SERVICES

    ALSO, THE 3 DIGIT ANI & RINGBACK #'S ARE REGARDED AS PLANT TEST AND ARE
THUS RESERVED.  THESE NUMBERS VARY FROM AREA TO AREA.

950:
HERE ARE THE SERVICES THAT ARE CURRENTLY ON THE 950 EXCHANGE:

1000 - SPC
1022 - MCI EXECUNET
1033 - US TELEPHONE
1044 - ALLNET
1066 - LEXITEL
1088 - SBS SKYLINE

THESE SCC'S (SPECIALIZED COMMON CARRIERS) ARE FREE FROM FORTRESSES!

Publishers note: Most 950's now require the station code (1022, 1000, 1088,
etc.) to be five digits long. MCI 950-10222, US telefone 10333, ALLNET 10444,
etc. Look in "Equal Access and the American Dream" p.    for a complete list.
PLANT TESTS:
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

THESE INCLUDE ANI, RINGBACK, AND OTHER VARIOUS TESTS.


976:
DIAL 976-1000 TO SEE WHAT IS CURRENTLY ON THE SERVICE.  ALSO, MANY BBS'S
HAVE A LISTING OF THESE #'S.

    BELL IS TRYING TO PHASE SOME OF THESE OUT, BUT THEY STILL EXIST IN MANY
AREAS.

011 - INTERNATIONAL DIALING PREFIX
211 - COIN REFUND OPERATOR
411 - DIRECTORY ASSISTANCE
611 - REPAIR SERVICE
811 - BUSINESS OFFICE
911 - EMERGENCY

INTERNATIONAL DIALING
    WITH INTERNATIONAL DIALING, THE WORLD HAS BEEN DIVIDED INTO 9 NUMBERING
ZONES.

TO MAKE AN INTERNATIONAL CALL, YOU MUST DIAL: INT. PREFIX + COUNTRY CODE + NAT.
#

    IN NORTH AMERICA, THE INTERNATIONAL DIALING PREFIX IS 011 FOR
STATION-TO-STATION CALLS AND 01 FOR OPERATOR- SERVICED CALLS.  IDDD STANDS FOR
INTERNATIONAL DIRECT DISTANCE DIALING.

    THE COUNTRY CODE, WHICH VARIES FROM 1 TO 3 DIGITS, ALWAYS HAS THE WORLD
NUMBERING ZONE AS THE FIRST DIGIT.  FOR EXAMPLE, THE COUNTRY CODE FOR THE
UNITED KINGDOM IS 44, THUS IT IS IN WORLD NUMBERING ZONE 4.

    SOME BOARDS MAY CONTAIN A COMPLETE LISTING OF OTHER COUNTRY CODES, BUT HERE
ARE A FEW:

001 - NORTH AMERICA (US, CANADA,ETC)
020 - EGYPT
258 - MOZAMBIQUE
034 - SPAIN
049 - GERMANY
052 - MEXICO (SOUTHERN PORTION)
061 - AUSTRALIA
007 - USSR
081 - JAPAN
098 - IRAN

    IF YOU CALL FROM AN AREA OTHER THAN NORTH AMERICA, THE FORMAT IS GENERALLY
THE SAME.  FOR EXAMPLE, LET'S SAY YOU WANTED TO CALL THE WHITE HOUSE FROM
SWITZERLAND.  FIRST YOU WOULD DIAL 00 (THE SWISS INTERNATIONAL DIALING PREFIX),
THEN 1 (THE US COUNTRY CODE), FOLLOWED BY 202-456-1414 (THE NATIONAL # FOR THE
WHITE HOUSE).

    ALSO, COUNTRY CODE 87 IS RESERVED FOR MARITIME MOBILE SERVICE, IE CALLING

SHIPS:

871 - MARISAT (ATLANTIC)
872 - MARISAT (PACIFIC)
873 - MARISAT (INDIAN )

INTERNATIONAL SWITCHING:

    IN NORTH AMERICA, THERE ARE CURRENTLY 7 NO. 4 ESS'S THAT PERFORM THE DUTY
OF ISC (INTERNATIONAL SWITCHING CENTERS). ALL INTERNATIONAL CALLS DIALED FROM
NUMBERING ZONE 1 WILL BE ROUTED THROUGH ONE OF THESE "GATEWAY CITIES."  THEY
ARE:

182 -  WHITE PLAINS, NY
183 -  NEW YORK, NY
184 -  PITTSBURGH, PA
185 -  ORLANDO, FL
186 -  OAKLAND, CA
187 -  DENVER, CO
188 -  NEW YORK, NY


                    **************************************
                    *                                    *
                    *           MAX ACCESS PORTS         *
                    *                                    *
                    *        (LEXITEL CORPORATION)       *
                    *                                    *
                    *   WORD PROCESSED BY THE DAGDA MOR  *
                    *                                    *
                    **************************************

ADRIAN,MI............313-263-0191  LIVONIA, MI..........313-261-6970
AKRON,OH.............216-275-9814  LOS ANGELES, CA......213-624-9041
ANN ARBOR, MI........313-451-2121  LOUISVILLE, KY.......502-568-6204
ATLANTA, GA..........404-525-1769  MARION, OH...........614-387-1011
AVON LAKE, OH........216-933-2823  MCKEESPORT, PA.......412-664-4870
BADEN, PA............412-869-1360  MENTOR, OH...........216-255-1645
BALTIMORE, MD........301-444-7280  MIDDLETOWN, OH.......513-423-1066
BEAVER FALLS, PA.....412-847-3640  MILWAUKEE, WI........414-933-1880
BIRMINGHAM, MI.......313-649-0730  MINNEAPOLIS, MN......612-375-0280
BOSTON, MA...........617-267-9134  MONESSEN, PA.........412-684-8710
BUFFALO, NY..........716-854-0802  MORTON GROVE,IL......312-950-1066
BUTLER, PA...........412-285-9081  NEWARK, NJ...........201-624-5040
CANTON, OH...........216-455-1425  NEWARK, OH...........614-349-8754
CHICAGO, IL..........312-950-1066  NEW CASTLE, PA.......412-656-9420
CHILLICOTHE, OH......614-772-1066  NEW YORK, NY.........212-950-1066
CINCINNATI, OH.......513-421-1880  OAK LAWN, IL.........312-950-1066
CLEVELAND, OH........216-771-6614  PHILADELPHIA, PA.....215-751-9711
COLUMBUS, OH.........614-950-1066  PITTSBURG, PA........412-391-9532
DALLAS, TX...........214-653-1047  PLYMOUTH, MI.........313-451-2121
DAYTON, OH...........513-223-0366  PONTIAC, MI..........313-332-0500
DETROIT, MI..........313-950-1066  PORT HURON, MI.......313-982-7115
ELK GROVE, IL........312-950-1066  PHOENIX, AZ..........602-242-0252
ELYRIA, OH...........419-323-4431  QUEENS, NY...........718-204-7330
FINDLAY, OH..........419-424-5934  SANDUSKY, OH.........419-625-1289
GLEENSHAW, PA........412-486-7394  SHARON, PA...........412-983-0100
GRAND RAPIDS, MI.....616-456-7925  SPRINGFIELD, OH......513-950-1066
GREENSBURG, PA.......412-836-8110  STEUBENVILLE, OH.....614-283-1756
HACKENSACK, NJ.......201-342-2815  ST. LOUIS, MO........314-289-9100
HOUSTON, TX..........713-224-0982  ST. PAUL, WI.........612-375-0280
INDIANA, PA..........412-349-8760  TOLEDO, OH...........419-255-1316
INDIANAPOLIS, IN.....317-638-4442  TROY, OH.............513-335-2303
KALAMAZOO, MI........616-342-0266  TURTLE CREEK, PA.....412-823-1500
KANSAS CITY, MO......816-474-6193  WASHINGTON, DC.......202-479-4411
KOKOMO, IN...........317-453-9932  WASHINGTON, PA.......412-225-1800
LA GRANGE, IL........312-950-1066  WARREN, MI...........313-268-9120
LANCASTER, OH........614-687-0159  XENIA, OH............513-376-2991
LANSING, MI..........517-950-1066  YOUNGSTOWN, OH.......216-746-2021
LAFAYETTE, IN........317-423-5492  ZANESVILLE, OH.......614-454-6815

******************** METROFONE ACCESS NUMBERS ********************

ANAHEIM, CA          (714)527-7055  LOS ANGELES, CA      (213)992-8282
ATLANTA, GA          (404)223-1000  LOS ANGELES, CA      (213)202-6117
AUSTIN, TX           (512)474-6057  MIAMI, FL            (305)326-3300
BALTIMORE, MD        (301)659-7700  MILWAUKEE, WI        (414)277-1805
BEAUMONT, TX         (713)833-9331  MINNEAPOLIS, MN      (612)370-9000
BOSTON, MA           (617)482-3222  NEW ORLEANS, LA      (504)566-8500
BUFFALO, NY          (716)852-9200  NEW YORK, NY         (212)732-7430
CHICAGO, IL          (312)853-4700  NEWARK, NJ           (201)645-9220
CINCINNATI, OH       (513)241-1747  OAKLAND, CA          (415)836-6900
CLEVELAND, OH        (216)861-5163  OKLAHOMA CITY, OK    (405)232-9011
COLUMBUS, OH         (614)224-0577  OMAHA, NE            (402)422-1120
CULVER CITY, CA      (213)410-0078  PHILADELPHIA, PA     (215)351-0100
DALLAS, TX           (214)742-4500  PITTSBURGH, PA       (412)261-5720
DAYTON, OH           (513)228-1576  RENO, NV             (702)329-1025
DENVER, CO           (303)623-5326  RICHMOND, VA         (804)225-1920
DETROIT, MI          (313)963-4847  ST. LOUIS, MO        (314)342-1130
EL MONTE, CA         (213)350-1028  SACRAMENTO, CA       (916)443-6921
ELK GROVE, IL        (312)981-8870  SAN ANTONIO, TX      (512)224-9600
FT. LAUDERDALE, FL   (305)462-3530  SAN DIEGO, CA        (714)233-0327
FT. WORTH, TX        (817)338-1639  SAN FRANCISCO, CA    (415)956-0162
HACKENSACK, NJ       (201)487-3155  SAN JOSE, CA         (408)947-7606
HARTFORD, CT         (203)522-0003  SAN MATEO, CA        (415)579-6001
HAWTHORNE, NJ        (201)427-1100  SANTA ANA, CA        (714)972-9515
HINSDALE, IL         (312)986-0566  SEATTLE, WA          (206)382-0910
HOUSTON, TX          (713)224-9417  SKOKIE, IL           (312)679-8120
HUNTINGTON BEACH, CA (714)972-8515  SYRACUSE, NY         (315)474-3911
INDIANAPOLIS, IN     (317)635-6284  TOLEDO, OH           (419)243-1046
KANSAS CITY, KS      (913)621-3186  WASHINGTON, DC       (202)737-2051
LONG ISLAND, NY      (516)443-5402
LOS ANGELES, CA      (213)629-1026
----------------------------------------------------------------------
            Area Codes In Numerical Order, by The Jammer
______________________________________________________________________

201 Newark           New Jersey    519 London           Ontario
202 Washington D.C   (all)         601 Mississippi      (all)
203 Connecticut      (all)         602 Arizona          (all)
205 Alabama          (all)         603 New Hampshire    (all)
206 Seattle          Washington    605 South Dakota     (all)
207 Maine            (all)         606 Winchester       Kentucky
208 Idaho            (all)         607 Binghamton       New York
212 Bronx            Nyc, New York 608 Madison          Wisconsin
212 Manhattan        Nyc, New York 609 Trenton          New Jersey
213 Los Angeles      California    612 St. Paul         Minnesota
214 Dallas           Texas         613 Ottawa           Ontario
215 Philadelphia     Pennsylvania  614 Columbus         Ohio
216 Cleveland        Ohio          615 Nashville        Tennessee
217 Springfield      Illinois      616 Grand Rapids     Michigan
218 Duluth           Minnesota     617 Boston           Massachusetts
219 Gary             Indiana       618 Alton            Illinois
301 Maryland         (all)         619 San Diego        California
303 Colorado         (all)         700 Teleconference   (all)
304 West Virginia    (all)         701 North Dakota     (all)
305 Miami            Florida       702 Nevada           (all)
305 Orlando          Florida       703 Alexandria       Virginia
307 Wyoming          (all)         704 Charlotte        North Carolina
308 Abott            Nebraska      705 North Bay        Ontario
309 Peoria           Illinois      712 Councilbluffs    Iowa
312 Chicago          Illinois      713 Houston          Texas
313 Detroit          Michigan      714 Anaheim          California
314 St. Louis        Missouri      715 Bay City         Wisconsin
315 Syracuse         New York      716 Buffalo          New York
316 Wichita          Kansas        716 Rochester        New York
317 Indinapolis      Illinois      717 Harrisburg       Pennsylvania
318 Lake charles     Lousiana      800 WATS             (all)
319 Davenport        Iowa          801 Utah             (all)
401 Rhode Island     (all)         802 Vermont          (all)
402 Omaha            Nebraska      803 South Carolina   (all)
404 Atlanta          Georgia       804 Richmond         Virgina
405 Oklahoma City    Oklahoma      805 Bakersfield      California
406 Montana          (all)         806 Amarillo         Texas
408 San Jose         California    807 Thunder Bay      Ontario
412 Pittsburg        Pennsylvania  808 Hawaii           (all)
413 Springfield      Massachusetts 809 Bermuda          (all)
414 Milwaukee        Wisconsin     809 Bahamas          (all)
415 San Francisco    California    809 Puerto Rico      (all)
416 Toronto          Onterio       809 Virgin Islands   (all)
417 Joplin           Missouri      812 Evansville       Indiana
418 Quebec           Quebec        812 Dade park        Kentucky
419 Toledo           Ohio          814 Johnston         Pennsylvania
501 Arkansas         (all)         815 Rockford         Illinois
502 Frankfort        Kentucky      816 Independence     Missouri
503 Oregon           (all)         817 Fort Worth       Texas
504 New Orleans      Louisiana     818 Burbank          California
504 Baton Rouge      Louisiana     819 Trois Riv.       Quebec
505 New Mexico       (all)         900 Dial-it          (all)
507 Rochester        Minnesota     901 Memphis          Tennessee
509 Pullman          Washington    904 Talahassee       Florida
512 Austin           Texas         906 Escanaba         Michigan
513 Cincinnati       Ohio          907 Alaska           (all)
514 Montreal         Quebec        908 Metuchen         New Jersey
515 Iowa             Iowa          912 Savannah         Georgia
                                   913 Kansas  City     Kansas
516 Hempstead        New York      915 El Paso          Texas
517 Lansing          Michigan      916 Sacramento       California
518 Albany           New York      918 Tulsa            Oklahoma
                                   919 Raleigh          North Carolina


Tac Dialups taken from Arpanet
by Phantom Phreaker

                   TAC DIALUPS SORTED BY LOCATION 26-NOV-85

State/Country         300 Baud             1200 Baud              1200 Type
-------------      ---------------       -----------------        ---------

  ALABAMA
   Anniston Army Depot [M]
   (ANNIS-MIL-TAC)   (205) 235-6285 (R4)    (205) 235-7650               B/V
                     (205) 237-5731 (R8)    (205) 237-5731 (R8)          B/V
                     (205) 237-5770 (R8)    (205) 237-5779 (R8)          B/V
                     (205) 237-5805 (R8)    (205) 237-5805 (R8)          B/V

   *Please note:  When accessing the Anniston TAC you must first enter a
   <RETURN>, then enter DDN <RETURN>.  After you receive CLASS DDN START,
   proceed as normal.

   Gunter AFS [M]

   (GUNTER-TAC)      (205) 279-3576
                     (205) 279-4682

   Redstone Arsenal [M]
   (MICOM-TAC)       [none known]

  ARIZONA
   Ft. Huachuca [M]
   (HUAC-MIL-TAC)    [none known]

   Yuma [M]
   (YUMA-TAC)        (602) 328-2186         (602) 328-2186               B/V
                     (602) 328-2187         (602) 328-2187               B/V
                     (602) 328-2188         (602) 328-2188               B/V

  CALIFORNIA (NORTHERN)
   Alameda [M]
   (ALAMEDA-MIL-TAC)     [none known]

   Menlo Park [M]
   (SRI-MIL-TAC)     (415) 327-5440 (R3)    (415) 327-5440 (R3)          B

   (USGS3-TAC) [M]   [no dialups]

   Moffett Field [M]
   (AMES-TAC)        [no dialups; contact NSC for access]
                     William Jones - (415) 694-6482
                                     (FTS) 494-6482
                                      (AV) 359-6482

   Monterey [M]
   (NPS-TAC)         [none known]

   Sacsamento [M]
   (MCCLELLAN1-MIL-TAC)   [none known]
   (MCCLELLAN2-MIL-TAC)   [none known]

   Stanford [A]
   (SU-TAC)          (415) 327-5220

  CALIFORNIA (SOUTHERN)
   China Lake [M]
   (NWC-TAC)         [none known]


   Edwards AFB [M]
   (EDWARD-MIL-TAC)  [none known]

   El Segundo [M]
   (AFSC-SD-TAC)     (213) 643-9204     (213) 643-9204                  B/V

   Los Angeles [A]
   (USC-TAC)         (213) 749-5436

   Los Angeles [A]
   (USC-ARPA-TAC)    [none known]

   San Diego [M]
   (ACCAT-TAC)   (619) 225-1641 (R4)    (619) 225-6903                  V
                 (619) 225-6946 (R3)
                                        (619) 223-2148                  V
                 (619) 226-7884 (R2)

   Santa Monica
   (RAND-ARPA-TAC) [A]
                 (213) 393-9230
                 (213) 393-9237
                 (213) 393-9238
                 (213) 393-9239

   (RAND2-MIL-TAC) [M]   [none known]

  COLORADO
   Denver Fed Ctr [M]
   (USGS2-TAC)       (303) 232-0206         (303) 232-0206              B/V

   Lowry Air Force Base [M]
   (LOWRY-MIL-TAC)   [none known]

  D.C.
   Washington
    [Andrews AFB] [M]
   (AFSC-HQ-TAC)  (301) 967-7930 (R16)     (301) 967-7930 (R16)         B
                  (301) 736-2990 (R4)      (301) 736-2990 (R4)          B
                  (301) 736-2998 (R2)      (301) 736-2998 (R2)          B

   (PENTAGON-TAC) (202) 553-0229 (R14)  (202) 553-0229 (R14)            B

  FLORIDA
   Eglin AFB [M]
   (AFSC-AD-TAC)     (904) 882-8202         (904) 882-8202              B/V
                     (904) 882-8201         (904) 882-8201              V

   MacDill AFB [M]
   (MACDILL-MIL-TAC)  [none known]

   Naval Air Station - Jacksonville [M]
    (JAX1-MIL-TAC)    [none known]

   Naval Air Station - Orlando [M]
    (ORLANDO-MIL-TAC) [none known]

  GEORGIA
   Robins AFB [M]
   (ROBINS-TAC)      (912) 926-2725         (912) 926-2725              B/V
                     (912) 926-2726
                     (912) 926-3231
                     (912) 926-3232
                     (912) 926-2204         (912) 926-2204              B/V
   HAWAII
   Camp H.M. Smith [M]
   (HAWAII2-TAC)     (808) 487-5545         (808) 487-5545              B

  ILLINOIS
   Scott AFB [M]
   (SCOTT-TAC)       [none known]

   (SCOTT2-MIL-TAC)  [none known]

  KANSAS
   Ft. Leavenworth [M]
   (LVN-MIL-TAC)     (913) 651-7041 (R8)  (913) 651-7041 (R8)           B

  LOUISIANA
   Navy Regional Data Automation Center [M]
   (NORL-MIL-TAC)    (504) 944-7940       (504) 944-7940                B
                     (504) 944-7948 (R2)  (504) 944-7948 (R2)           B
                     (504) 944-7951 (R5)  (504) 944-7951 (R5)           B
                     (504) 944-8702 (R8)  (504) 944-8702 (R8)           B

  MARYLAND
   Aberdeen Proving Ground [M]
   (BRL-TAC)      (301) 278-6916 (R4)   (301) 278-6916 (R4)             B/V

   Bethesda [M]
   (DAVID-TAC)    (202) 227-3526 (R16)  (202) 227-3526 (R16)            B/V

   Patuxent River [M]
   (PAX-RV-TAC)      (301) 863-4815        (301) 863-4815               B/V
                     (301) 863-4816        (301) 863-4816               B/V
                     (301) 863-5750 (R6)   (301) 863-5750 (R6)          B/V

   Silver Spring [M]
   (WHITEOAK-MIL-TAC)   (301) 572-5960 (R10)   (301) 572-5960 (R10)     B
                        (301) 572-5970 (R10)   (301) 572-5970 (R10)     B

  MASSACHUSETTS
   Hanscom AFB [M]
   (AFGL-TAC)     (617) 861-3000 (R8)   (617) 861-3000 (R8)             B
                  (617) 861-4965 (R8)   (617) 861-4965 (R8)

   Cambridge
   (BBN-MIL-TAC) [M]   [none known]

   (BBN-ARPA-TAC) [A]  [no dialup capability]

   (CCA-ARP-TAC) [A]   [none known]

   (MIT-TAC) [A]
                        (617) 491-5669        (617) 258-6224            V
                        (617) 491-5708        (617) 258-6225            V
                        (617) 491-5734        (617) 258-6227            V
                        (617) 491-5819        (617) 258-6248            V
                        (617) 491-5826
                        (617) 491-5841
                        (617) 491-5849
                        (617) 491-6769
                        (617) 491-6772
                        (617) 491-6937
                        (617) 258-6241
                        (617) 258-6242
                        (617) 258-6243

  MICHIGAN
   U.S. Army Tank Automotive Command (TACOM) - Warren [M]
   (TACOM-TAC)       [none known]

  MISSOURI
   St. Louis [M]
   (STLA-TAC)        [none known]

  NEBRASKA
   Offutt AFB [M]
   (SAC1-MIL-TAC)    [none known]

   (SAC2-MIL-TAC)    (402) 292-4638 (R10)   (402) 292-4638 (R10)         B

   (SAC-ARPA-TAC) [A]
                     (402) 294-2398         (402) 294-2398               B
                     (402) 291-2018         (402) 291-2018               B
                     (402) 292-7054         (402) 292-7054               B

  NEW JERSEY
   Dover [M]
   (ARDC-TAC)        (201) 724-6731         (201) 724-6731               B/V
                     (201) 724-6732         (201) 724-6732               B/V
                     (201) 724-6733         (201) 724-6733               B/V
                     (201) 724-6734         (201) 724-6734               B/V

   Fort Monmouth [M]
   (FTMONMOUTH1-MIL-TAC)   (201) 544-2052         (201) 544-2052         B/V
                           (201) 544-2062         (201) 544-2062         B/V
                           (201) 544-2072         (201) 544-2072         B/V
                           (201) 544-2396         (201) 544-2396         B/V
                           (201) 544-2430         (201) 544-2430         B/V

   (FTMONMOUTH2-MIL-TAC)   (201) 544-4254 (R3)    (201) 544-2430         B
                                                  (201) 544-2636         B
                                                  (201) 544-2638         B
                                                  (201) 544-2777         B

  NEW MEXICO
   Albuquerque [M]
   (AFWL-TAC)        [none known]

  White Sands [M]
   (WSMR-TAC)       [no dialups; contact NSC for access]
                    Claude (Skeet) Steffey - (505) 678-1271
                                             (FTS) 898-1271
                                              (AV) 258-1271

  NEW YORK
   Griffiss AFB
   (RADC-ARPA-TAC) [A] [no dialup capability]

   (RADC-TAC) [M]
                     (315) 339-4913 (R5)
                     (315) 337-2004           (315) 337-2004              B/V
                     (315) 337-2005           (315) 337-2005              B/V

                     (315) 330-2294           (315) 330-2294  (FTS) 952   B/V

                     (315) 330-3587           (315) 330-3587  (FTS) 952   B/V

  NORTH CAROLINA
   Ft. Bragg [A]
   (BRAGG-ARPA-TAC)  (919) 396-1131 (R10)     (919) 396-1426  (R5)        B/V
                                              (919) 396-1491  (R8)        B/V
   Ft. Bragg [M]
   (BRAGG-MIL-TAC)   [none known]

  OHIO
   Wright-Patterson AFB [M]
   (WPAFB-TAC)       (513) 258-4218
                     (513) 258-4219
                     (513) 258-4987
                     (513) 258-4988
                     (513) 258-4989
                     (513) 258-4990

   (WPAFB2-MIL-TAC)  (513) 257-2172 (R8)     (513) 257-2172 (R8)        B
                     (513) 257-2690 (R8)     (513) 257-2690 (R8)        B
                     (513) 257-3625 (R8)     (513) 257-3625 (R8)        B

  OKLAHOMA
   Tinker AFB [M]
   (TINKER-MIL-TAC)  [none known]


  PENNSYLVANIA
   New Cumberland Army Depot [M]
   (NCAD-MIL-TAC)    [none known]

   (NCAD2-MIL-TAC)   [none known]

  TEXAS
   Brooks AFB [M]
   (BROOKS-AFB-TAC)  (512) 536-3081 (R6)  (512) 536-3081 (R6)              B/V

   Richardson [A]
   (COLLINS-TAC)     (214) 235-2131       (214) 235-2131                   B
                     (214) 235-2143       (214) 235-2143                   B
                     (214) 235-2178       (214) 235-2178                   B
                     (214) 235-2204       (214) 235-2204                   B
                     (214) 235-2251       (214) 235-2251                   B
                     (214) 235-2278       (214) 235-2278                   B

  UTAH
   Dugway Proving Ground [M]
   (DUGWAY-MIL-TAC)  [none known]

   Salt Lake City (University of Utah) [A]
   (UTAH-TAC)        (801) 581-3486       (801) 581-3486                   B/V

  VIRGINIA
   Alexandria [M]
   (DARCOM-TAC)      (202) 274-5300       (202) 274-5300                   B
                     (202) 274-5320 (R6)  (202) 274-5320 (R6)              B

   Arlington
   (ARPA1-MIL-TAC) [M]   [none known]

   (ARPA2-MIL-TAC) [M]   [none known]

   (ARPA3-TAC) [A]   [no dialup capability]

   Dahlgren [M]
   (NSWC-TAC)        (703) 663-2162 (R8)     (703) 663-2162 (R8)          B

   Langley Air Force Base [M]
   (LANGLEY-MIL-TAC) [none known]

   McLean [M]
   (DDN-PMO-MIL-TAC) [none known]


   (MITRE-TAC) [M]
                     (703) 442-8020 (R15)
                     (703) 893-0330 (R10)    (703) 893-0330 (R10)         B/V

   Norfolk [M]
   (NORFOLK-MILTAC)  (804) 423-0241 (R2)     (804) 423-0241 (R2)          B
                     (804) 423-0247 (R2)     (804) 423-0247 (R2)          B
                     (804) 423-0346 (R4)     (804) 423-0346 (R4)          B
                     (804) 423-0480          (804) 423-0480               B
                     (804) 423-0486 (R2)     (804) 423-0486 (R2)          B
                     (804) 423-0489          (804) 423-0489               B
                     (804) 423-0570          (804) 423-0570               B
                     (804) 423-0572 (R2)     (804) 423-0572 (R2)          B
                     (804) 423-0577 (R2)     (804) 423-0577 (R2)          B
                     (804) 423-0651          (804) 423-0651               B
                     (804) 423-0654 (R3)     (804) 423-0654 (R3)          B
                     (804) 423-0841 (R2)     (804) 423-0841 (R2)          B
                     (804) 423-0845          (804) 423-0845               B
                     (804) 423-0849          (804) 423-0849               B
                     (804) 423-0858          (804) 423-0858               B
                     (804) 423-0950          (804) 423-0950               B
                     (804) 423-0952          (804) 423-0952               B
                     (804) 423-0955 (R3)     (804) 423-0955 (R3)          B
                     (804) 423-0959          (804) 423-0959               B

   Reston
   (DCEC-ARPA-TAC) [A]   [no dialups available]

   (DCEC-MIL-TAC) [M]
                     (703) 437-2892 (R5)     (703) 437-2928               B
                     (703) 437-2925          (703) 437-2929               B
                     (703) 437-2926
                     (703) 437-2927

  WASHINGTON
   Seattle [A]
   (WASHINGTON-TAC)  [no dialup capability]

  ENGLAND [M]
   (CROUGHTON-MIL-TAC)   [none known]

  GERMANY [M]
   (FRANKFURT-MIL-TAC)
                     (M) 2311-5641 (R8)                                   B

   (RAMSTEIN2-MIL-TAC) [none known]

  ITALY [M]
   (AGNANO-MIL-TAC)

  JAPAN [M]
   (BUCKNER-MIL-TAC)

   (ZAMA-MIL-TAC)

  KOREA [M]
   (KOREA-TAC)       (M) 264-4951 (R8)                                    B

  PHILIPPINES [M]
   (CLARK-MIL-TAC)

  SPAIN [M]
   (MILNET-TJN-TAC)  [none known]

   (ROTA-MIL-TAC)    [none known]

  Notes:

  1.  "(R10)" following phone number indicates a rotary with 10 lines.

  2.  For alternate phone numbers, FTS=Federal Telephone System.

  3.  (M)=Military DoD Telephone System.

  4.  [M] denotes a MILNET TAC and [A] denotes an ARPANET TAC.

  5.  "1200 Type" refers to the modem compatibility for 1200 baud only:
       B/V =  Bell and Vadic
       B   =  Bell 212A only
       V   =  Vadic 3400 only

  6.  This list is contained in the file NETINFO:TAC-PHONES.LIST at
      SRI-NIC.

                        >>==========================<<
                        >>==> TELCO TEST NUMBERS <==<<
                        >>====>  Remember Xoo <=====<<
                        >>=> compiled and updated <=<<
                        >>====> by Shadow 2600 <====<<
                        >>==========================<<

011-44-61-2468011 : US dial tone then "When this system changes, this is the
new dial tone you hear" (UK is changing dialtone)

201-226-0709 : alternating tones, then "warble"
201-267-9922 : sweep tone
201-267-9966 : 600 ohm termination
201-232-9924 : (tone 1,2,5-beep, bleep; 9,#- 1200 baud static, beep, bleep;
6-tone, higher tone, bleep)
201-232-9959 : tone 11 sec. silence, repeats...
201-233-9972 : multitude of clicks
201-233-9974 : busy 15 sec. then tone w/ clicks
201-241-9916 : hissing with clicks
201-328-9971 : 1000 hrtz tone
201-376-9907 : "is being checked for trouble.  Please try again later"
201-464-9915 : low tone 15 sec, silence
201-464-9916 : low tone 2 sec, silence
201-464-9963 : buzz
201-464-9974 : busy 15 sec, low tone
201-543-9902 : "If you'd like to make a call, hang up and try it again."
201-543-9903 : "We're sorry, your call did not go through."
201-543-9904 : "the number you have dialed requires a .20 cents deposit."
201-655-9900 : "cannot be completed as dialed from the phone you are using"
201-769-0205 : People's Express Reservation system
203-771-4920 : telephone company employee newsline
207-866-4411 : 1000 hrtz tone
212-233-9980 : (tone 1,2,3,*-tone, higher tone, bloop; 5-tone, bloop; 9,#-
static,beep,bloop)
212-369-7003 : "you have reached 212-369-7003 in zone 3" (?)
212-799-5017 : ABC New York feed line
213-621-4141 : telephone employee newsline
213-935-1111 : sweep tone with echo at top of range (?)
215-489-0036 : tone, bloop (1,2,5-tone bloop, 3,6,9-tone, higher tone,tone)
215-489-0040 : "please check your instruction manual or call repair service for
assistance"
215-489-0042 : "if you like to make a call please hang up and try again"
215-489-0043 : "We're sorry, your call did not go through."
215-489-0044 : "The call you have made requires a 25 cent deposit"
215-489-0045 : "You must first dial a 1 when dialing this number."
215-489-0074 : LOUD tone, stops, repeats
215-489-0075 : 600 ohm termination (silence)
215-489-0078 : tone, silence
215-489-0080 : 600 ohm termination
215-489-0097 : tone, (lower pitched than -0078) silence (also at -0098)
215-489-0104 : 1000 hrtz tone
216-861-8300 : tone, then higher tone
301-256-9987 : 1000 hertz
301-546-7777 : "Due to Telephone Company facility trouble your call cannot be
completed at this time"
301-725-9904 : "deposit .20"
305-263-0000 : repeating bloop (keypress 2 : slow reorder w/ bloops, clicks)
305-994-9963 : pay fone instructions
305-994-9966 : "telephone you are calling from is not in service"
312-222-9948 : tone (keypress 1,2,3,6,7,*-tone, high tone, bleep,
4-tone,bloop,9, #-static,beep,bloop)
312-222-9954 : "Test Center"
312-222-9990 : clicks, ticking like
312-222-9996 : LOUD tone, repeats
312-368-8000 : Illinois Bell Communicator (employee newsline)
312-592-0000 : tone (keypress 2222, then other digits, at re-order type * to
restart) (?)
313-223-7223 : telephone employee newsline
313-333-9981 : LOUD tone, silence
313-333-9989 : high tone (enter touchtones for a while, eventually get
"metallic" echo, then 5-high pitched tone, random re-orders)
313-333-9990 : beep, click repeats, with "winks"
313-333-9994 : tone bloop (keypress in 2-tone,bloop, 3-tone, higher tone,tone,
9-static, beep,bloop)
313-333-9995 : 600 ohm termination (silence)
313-333-9996 : weird siren/sweep tone, multi-frequency
313-430-4300 : beep, beep, beep, then reorder
313-698-9998 : sweep tone
314-247-5511 : Southwestern Bell Telenews (employee newsline)
315-471-9934 : "deposit 5 cents for next five minutes"
408-255-0081 : (any two 2,4,8,0-tone)
408-294-6969 : beep, click, computer voice repeats number
408-395-1110 : (tone 2-bleep,glitch; 3-beep,higher beep;#then number-loud
tone,bleep)
408-738-8190 : (tone 1,3,6,7,*-tone, high tone, tone;2-beep,cluck;9,#-
static,tone,beep)
408-745-6060 : high pitched tone, low tone then repeats
408-994-0044 : tone end of loop
412-633-3333 : telephone company employee newsline
414-628-0001 : continuous tone
414-628-0002 : continuous tone (higher pitched, sounds like muted dial)
414-628-0004 : high pitched tone, bloop, silence
414-628-0006 : brief very high tone (also -0007) (multiple keypresses of
2,5,8,0 tone repeats)
414-628-0010 : loud tone, stops, repeats...
414-628-0011 : loud tone, stops
414-628-0013 : 600 ohm termination (silence) (also -0017, two in an exchange?)
414-628-0014 : continuous tone (sounds like weird dial), eventually stops
414-628-0015 : LOUD tone, repeats
414-628-0028 : "Your call cannot be completed as dialed
414-678-3511 : Wisconsin Bell Newsline
414-781-0004 : high tone, silence (keypress 2,5-beep,bleep, 3,6-beep,longbeep,
bloop, 9-static,bloop)
415-284-1111 : one sweep, then silence
415-327-0046 : sweep tone
415-388-0037 : tone,bloop (keypress 2-tone,bloop, 3-tone,high tone,tone,
9-static,beep,bloop)
415-472-0046 : sweep w/ glitch at top
415-545-8800 : Pacific Bell Newsline
415-467-0097 : fast DTMF tones, keypress to repeat
415-777-0020 : 1000 hrtz tone
415-777-0037 : tone, bloop (keypress 2-beep,bloop, 3,6-tone,higher tone,
9-static,beep,bloop)
415-777-0046 : sweep tone with echo
415-777-0105 : tone,bloop (keypress 2-beep,bleep, 3,6-tone, higher tone,
tone,9-static,beep,bloop
415-826-0022 : tone, click, tone (sounds like a busy)
415-994-0710 : multitude of clicks
512-472-2181 : "if you would like to make a call, please hang up and try
again"
512-472-4263 : garbled recording (?)
512-472-9833 : "you must first dial a 1 or 0 before calling this number"
512-472-9936 : "please check your instructions or call your business office for
assistance"
512-472-9941 : "insert 25 cents"
516-222-3825 : LOUD tone
516-234-9914 : New York Telephone Newsline
518-471-2272 : New York Telephone Newsline
518-789-3299 : weird busy, multitude of clicks
609-267-9966 : busy with clicks in background
609-267-9967 : 600 ohm termination (silence)
609-267-9968 : 1000 hrtz tone
609-267-9971 : LOUD tone, stops, repeats
609-267-9972 : rings with clicks in background (also -9973 and -9974)
609-877-9924 : high tone (tone in 1,2,5-tone, bloop; 3,6,*-tone, higher tone,
bleep; #-static, beep, bleep)
609-877-9929 : 1000 hrz tone
617-553-9953 : tone end of loop
617-890-9900 : sweep tone
617-955-1111 : telephone company employee newsline
619-748-0002 : tone increases in pitch, silence, repeats in monotone
619-748-0003 : sweep, repeat, hangs up
702-789-6711 : Nevada Bell Newsline
713-354-0000 : touch tone in #, then new #, then 5 - listed, 9 - unlisted)
713-482-3199 : "We're sorry, all circuit are busy now."
713-652-5111 : touch tones echo back "metallic", something about "drivers
licence number" replys in a female recorded voice
717-255-5555 : Bell of Pennsylvania "Inside Line" (employee newsline)
718-429-9900 : "Please slide a valid credit card through the slot now"
800-221-5959 : tone (# makes it ring)
800-228-8466 : Sensaphone (tm) demo (time etc. (EST) (wait 7+ rings))
800-321-3048 : non-connecting loop with 800-321-3049
800-321-3052 : loop (don't know where other end is)
800-321-6366 : Centagram's Voice Memo System (extension 100 for demo)
800-323-6321 : tone, stops, bloop repeats
800-327-0000 : "Announcement three, Dallas" (changes sometimes)
800-344-4001 : non-connecting loop with 800-344-4002
800-524-0000 : "Announcement 1 Atlanta"
800-554-5924 : Cable News Network audio feed
800-824-8274 : "Enter your password service code"
802-955-1111 : telephone company newsline
808-533-4426 : Hawaiian Telephone Newsline
816-391-1122 : recorder (keypress 1-toggle on/off, 3-rewind, 4-stop, 7-play)
907-269-0955 : tone (sounds like extender, doesn't take touch tone (?))
914-232-9901 : "Daytona, New York DMS-100 verification"
914-268-9901 : "Congers DMS 100 Verification"
914-268-9903 : "your call cannot be completed as dialed"
914-268-9968 : (keypress 2-high tone, 3-high, higher tone, 6,0-click, 7- hangs
up, sometimes 0,#,*-harmony)
914-359-9901 : repeats the number dialed ("914-359-9901")
914-359-9960 : weird tone, stops, clicks, repeats
914-623-9968 : (keypress 2,5-beep glitch, 3,6-tone highertone)
916-480-8000 : Pacific Bell Newsline

 3 ZDDDDDDDDDDDDDDDDDDDDDD?         3   How to Build Your Own Underground
 3 3 .           .        3         3        Television Transmitter
 3 3   S n o w  B o x     3         3          Using Commercially
 3 3             .     .  3         3             Available
 3 3.    13-JUN-88    .   3         3               Parts
 3 3  .                   3         3   ]3:^3]33^3^::]3^:]^ ]^3]3^3]]^]
 3 3 Outlaw Telecommandos 3         3   ]3:^3]33^3^::]3^:]^ ]^3]3^3]]^]
 3 @DDDDDDDDDDDDDDDDDDDDDDY         3   ]3:^3]33^3^::]3^:]^ ]^3]3^3]]^]
 @DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDY   0 1 - 2 1 3 -  3 7 6 -  0 1 1 1

 Yes, for some time now it has been possible to construct a clandestine
 television station, which you can operate from your Telecommando Lair, or 
 modify for Mobile Media Guerrilla campaigns.

  We have named this device the Snow Box, due to its cool nature, and the snow
seen on blank television channels waiting to be commandeered.

 To put together a TV station you will need this stuff:

A VCR or Camcorder with video or RF outputs

A Ham Radio 6-meter Band Linear amplifier
        (This boosts the RF signal from the VCR for broadcasting)
        (The Linear Amp should have a bandwidth of 6 MHz for best results)
        A cable television RF distribution amplifier may also be used.

Coaxial cable with UHF connectors
       (Connects the Linear Amp to the Antenna)

A cable-TV patch cable with an F-connector and a UHF connector
       (To connect the RF signal to the Linear Amp)
       (F-connectors are the small ones used with cable TV)
       (UHF connectors are the large ones used for Ham Radio)

If your VCR does not have RF outputs:
       An external RF modulator (converts video to channel 3,6,12 etc.)
       a cable with RCA connectors (a standard stereo cord is ok)

A 6-meter Ham radio antenna.

If you do not have a pre-made 6-meter antenna:
       About 20 feet of strong wire
       3 ceramic antenna insulators
       another UHF connector

 Likely places to get the linear amplifier, connectors and cables is a
Ham Radio swapmeet, a Ham club newsletter's classified ads, a Buy-Sell-Trade
paper like The Recycler, or at a store specializing in Ham gear.
RF modulators are available at specialty video stores, or major VCR dealers.

Setting Up the Transmitter:

 Using a VCR with RF out:

[VCR/RF]F----------------------------U[Linear Amp]U------------U[Antenna]
                  weak RF                            Power RF

 Using an External RF Modulator:

[VCR]R-------R[RF Modulator]---------U[Linear Amp]U------------U[Antenna]
       video                 weak RF                 Power RF

Diagram Symbols:

U    UHF-connectors (Ham radio)
F    F-connectors   (cable TV)
R    RCA connectors (stereos)
---  coax, cables, wires
[]   devices (name of device in brackets)
<I>  ceramic insulator (the kind with a hole at each end)


Building The Dipole Antenna:

          wire                        wire
<I>---------------------+<I>+----------------------<I>
                        |   |
           Short coax   |   |
                         [U]    UHF connector

The antenna is set up much like a clothesline with the wires tethered
straight out horizontally. The outer insulators are used to isolate the
antenna from the tether lines, which should be rope or nylon cords
for good results. The inner insulator isolates a gap between the two
long wires of the antenna.

The length of the wires used for the antenna is critical.
Look up the length in feet for the channel you want to use in the
table below & make each of the two long wires that length.
As a rule of thumb, a wire half-wave antenna's length in feet is equal to
468 divided by the frequency in MHz.

****************************************
     VHF Television Channel Data
----------------------------------------
  TV     MHz      ---carrier---  antenna
channel range     video   sound  lengths
------- -----     -----   -----  -------
 2      54-60     55.25   59.75  8.47ft
 3      60-66     61.25   65.75  7.64ft
 4      66-72     67.25   71.75  6.95ft
 5      76-82     77.25   81.75  6.05ft
 6      82-88     83.25   87.75  5.62ft
 7     174-180   175.25  179.75  2.67ft
 8     180-186   181.25  185.75  2.58ft
 9     186-192   187.25  191.75  2.49ft
 10    192-198   193.25  197.75  2.42ft
 11    198-204   199.25  193.75  2.34ft
 12    204-210   205.25  209.75  2.28ft
 13    210-216   211.25  215.75  2.21ft
        (All frequencies in MHz)
  (Lengths are for half-wave antennas)
****************************************

For Further information: Look in the ARRL Handbook published by the American
Radio Relay League for detailed plans & theory for antennas, transmitters &
linear amplifiers. The info in that book can be used for setting up an
underground AM or FM radio station.

Uses for a TV Clandestine Station:

Public Education: Make a videotape of each step in the process of constructing
your transmitter. Show this tape in your broadcasts, "For informational 
purposes only", of course.

Short-burst zipping: From a fixed or mobile base of operation show short
snippets of graffiti-like computer graphics, quick subliminal messages,
images & suggestions, or brief phreaker manifestos. Commercials are an
opportune time to break into TV broadcasts.

Live call-in shows: Using a Cheese Box, or other device for receiving
untraceable phone calls and a video camera do a live call-in show. Encourage
people to call in using Red, Blue, and other phreaking boxes.

Cable TV Piracy: With modifications it may be possible to feed the power RF
signal directly into a cable TV system, overriding cablecasts or comandeering
unused channels.

Mobile Operation: Using storage batteries and a 110-volt inverter the
transmitter may be modified for mobile use to avoid detection by the FCC during
long broadcasts. Battery operated mobile linear amps and portable camcorders 
are also available.

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
*                                                                           *
*                            -= Anti-Modem Weapon =-                        *
*                                                                           *
*                                                                           *
*                          Origianally By: Enemy Withz                      *
*                                                                           *
*                        Re-written By: The Silent Trojan                   *
*                                                                           * 
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *


An effective modem weapon, especially on crossbar phone systems.  (Will
still operate on ESS but you will kill phone service to your prefix for a
few hours, and everyone talking will be cut off on your prefix and the one
you called).
 
 What is this device?
 -------------------

  It's a Tesla Coil!  Concentrated static electricity.  The Tesla coil, when
properly used, will generate litrally thousands of volts at very low
amperage.  (Just the right current to bake silicon chip cookies!)
 
 Construction:
 ------------
 1.  Disconnect all phones from your line.  Disconnect answering devices and
     any data-transmission devices.
 
 2.  Run a preliminary test on the coil and disconnect nearby grounded
     objects.  (Lamps, stereos, TV's, etc...)
 
 3.  Connect one phone that you see fit to subject.  (It usually does not 
     destroy phones, but I have seen them melt off walls.)
     
 4.  Connect iron or steel balls to the green and red wires of your
     connected phone (these are the line wires that go into the wall.)  It 
     and 12 terminals of your phone.
     
 5.  Put on a pair of thick rubber gloves (EXTREMELY IMPORTANT!)
 
 6.  Charge coil to at least 10,000 volts.  An ideal setting is around 18 to
     19 thousand, but 10 will jump Ma-Bells line surge protectors.
     
 7.  Hold metal balls in your left hand.  (Make sure they don't touch each
     other) When the coil is fully charged, clip the steel ball connected to
     the red wire to the base of the Tesla coil and hold the other metal
     ball as far away from the coil as you can.
     
 8.  Dial the offending modems number.
 
 9.  When connected, move the metal object connected to the green wire
     within 2 feet of the coils top.  (Note: Don't be afraid of the little
     bolts of electricity shooting from the top of the coil...)
     
 10. Within 3 seconds a huge bolt of lightning will shoot forth at the phone 
     from the hand you are holding the balls in.  (Hold on tight cause it'll
     feel like loads of ants!) You will immediatly hear many strange 
     occilations to the carrier on the phone.  The last noise you will hear 
     from the phone is a pop!  (That is the last cry of agony as it shuts
     down.)
     
 Crossbar just disconnects.


  Guaranteed to fry the modem, the computer and any peripherals.  Or
 anyone who answers the phone!  ALL DAMAGE IS UN-REPAIRABLE.  Including
 lives!!!!!


(-eof-)

(c)nXo/loteknologies
