API tools faq
paste
hujwie

Jolly Roger's Cookbook Version 2.0 (April 10, 1990)

hujwie
Jan 12th, 2014
3,234
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 423.80 KB | None | 0 0
raw download clone embed print report
  1. #####################################################################
  2. #~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
  3. #~<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>~#
  4. #~<>->>Jolly Roger's Cookbook Version 2.0! Dated 04/10/1990!!!<<-<>~#
  5. #~<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>-<>~#
  6. #~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
  7. #####################################################################
  8.  
  9. Hello! Welcome to the Jolly Roger's Cookbook v2.0! I hope that
  10. this collection of text files has enough info to keep you hackers
  11. busy for awhile (at least until the next update!). As I gather
  12. information I will keep adding it and uploading it to my "home
  13. base" bbs's in different cities with additional numbered files,
  14. and an updated index that you can just replace the old one with.
  15.  
  16. Thanks for taking the time to read this file, by the way. There are
  17. a few things that I want to say about the Cookbook.
  18.  
  19. 1) If I ever find out that anyone has omitted my name from
  20. anywhere in these files withoutmy expressed permission, then I
  21. will immediately stop doing any updates and I will release your
  22. name to as many boards that I can find, urging them to put you on
  23. their Black List. I also, will FIND YOU! (I think you can see from
  24. the knowledge base contained in this collection that I DO possess
  25. the capability! You will wish it were the FEDS and not me!) In
  26. other words, be careful who you give this collection to. Of,
  27. course there are idiots (probably the same ones who write
  28. viruses!) that will misuse this information and kill some people
  29. or get themselves & you into a lot of trouble! So keep this
  30. treasure chest buried and only dig it up for those that you can
  31. TRUST! Also you would be screwing yourself, because I still have
  32. all kinds of things that I can put in here for updates, and you will
  33. NEVER see them if I quit updating because of some asshole. So
  34. think about it. If you WANT the updates (info you would probably
  35. have a helluva time finding elsewhere!), then STAY COOL with it.
  36.  
  37. 2) I was going to encrypt these files and load/print them from
  38. within an encrypted program. However, I have decided against that
  39. for these reasons:
  40.  
  41. a) It would then be machine-exclusive
  42. b) It would show that I don't trust you.
  43. c) Only Atari ST users would ever see it.
  44.  
  45. So I decided on keeping it ASCII. ANY machine that can read ASCII
  46. files can now read these.
  47.  
  48. 3) Please do not use my handle to gain access to boards. you never
  49. know where I might show up and I will have to find you and deal
  50. with you if I ever see it. Don't make me do this.
  51.  
  52. 4) By releasing this database I am taking a real chance on you
  53. people. I sure as hell don't want MY house blown up with a paint or
  54. Solidox bomb! And I am sure that you don't want yours blown up
  55. either (or your credit cards used for tha matter). So I have to
  56. stress again: BE FUCKING CAREFUL WHO YOU GIVE THIS TO!!
  57.  
  58. That is all for now. If I ever have to update this, it will just be
  59. in the update archive as file 000.doc. Just replace the old one.
  60.  
  61. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  62. -=-=-=-=-=-=-=-=-=-=-=Notes for Version 2.0=-=-=-=-=-=-=-=-=-=-=-=-
  63. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  64.  
  65. Ok... here it is... long awaited v2.0.... what a bitch it was for me to
  66. put this shit together. Hell, over 6 months to put the update shit
  67. together. Anyway, response was cool, nobody fucked with the rulez above.
  68. I am glad. This allows me to continue the updates. You should find it
  69. worth the wait.
  70.  
  71. God, there is so much more to do. As you can probably see, this database
  72. is getting quite huge. And I have not even begun to tap the resources I
  73. have available to me. I can easily over the next year or so make this
  74. thing grow to 1600k or more..... so as long as I DON'T find this on a
  75. p/d bbs, and I DO see it being spread around the proper channels, as
  76. LONG as you guys keep bugging me for an update, and finally, as long as
  77. the rulez above are kept,I shall continue.
  78.  
  79. What you have in your disk drive right now is some of the most dangerous
  80. knowledge ever unleashed on the computer underground. Use it wisely.
  81. The really JUICY stuff will come in Cookbook v3.0, but let's see how
  82. this one goes across, shall we? The Blotto box should be enough to see
  83. how responsible you all are.....................
  84.  
  85. Have fun!!!!!!!!!!!!!
  86.  
  87. Enjoy this database! A lot more to come!!! -----------The Jolly Roger
  88.  
  89. note to all warring pirates and the so-called "groups"
  90. (You know who you are...):
  91.  
  92. FUCK YOU! You are all assholes. Acting like fucking babies like trading
  93. software was your fucking life or something. Like you have some big name
  94. or something. Do you realize that nobody gives a flying fuck about you
  95. in the real world? I have been a pirate for over 10 years, and have over
  96. 4000 ST programs, over 2000 IBM programs, over 2500 Macintosh programs,
  97. and over 500 Amiga programs (& I do not even own an Amiga!).... and you
  98. do not see me kissing ass on the bbs's, or making a deal out of someone
  99. not "liking" me..... boo-fucking-hoo!! I really do not care. You see,
  100. the difference between you and me is that I do this for fun. I see no
  101. other reason to pursue a "hobby" but FOR fun. I hate the fucking
  102. politics & shit. I give my stuff freely. It all comes back to me.
  103. It just makes me sick when I am on the bbs's and I see these little baby
  104. games about who did what, and who stole what loader, or re-crack, or
  105. whatever. I AM AN original pirate. 1st generation. Not anything like you
  106. baby-shit assholes. Excuse me but I had this boiling in me for a long
  107. time. The ST world is so small that what little we do have we destroy
  108. from within. And we blame Jack for it. Fuck, maybe that is the only
  109. thing we agree on. Anyway, where is the hacking spirit? The giving? The
  110. free will? Why all of the fucking ego's? It should be obvious by now
  111. that I have no interest whatsoever in ego-tripping. You can like me or
  112. hate me. But I will always be here. --------------Jolly Roger
  113.  
  114.  
  115. Counterfeiting Money by The Jolly Roger
  116.  
  117. Before reading this article, it would be a very good idea to get a
  118. book on photo offset printing, for this is the method used in
  119. counterfeiting US currency. If you are familiar with this method
  120. of printing, counterfeiting should be a simple task for you.
  121.  
  122. Genuine currency is made by a process called "gravure", which
  123. involves etching a metal block. Since etching a metal block is
  124. impossible to do by hand, photo offset printing comes into the
  125. process.
  126.  
  127. Photo offset printing starts by making negatives of the currency
  128. with a camera, and putting the negatives on a piece of masking
  129. material (usually orange in color). The stripped negatives,
  130. commonly called "flats", are then exposed to a lithographic plate
  131. with an arc light plate maker. The burned plates are then
  132. developed with the proper developing chemical. One at a time,
  133. these plates are wrapped around the plate cylinder of the press.
  134.  
  135. The press to use should be an 11 by 14 offset, such as the AB Dick
  136. 360. Make 2 negatives of the portrait side of the bill, and 1 of
  137. the back side. After developing them and letting them dry, take
  138. them to a light table. Using opaque on one of the portrait sides,
  139. touch out all the green, which is the seal and the serial numbers.
  140. The back side does not require any retouching, because it is all
  141. one color. Now, make sure all of the negatives are registered
  142. (lined up correctly) on the flats. By the way, every time you
  143. need another serial number, shoot 1 negative of the portrait side,
  144. cut out the serial number, and remove the old serial number from
  145. the flat replacing it with the new one.
  146.  
  147. Now you have all 3 flats, and each represents a different color:
  148. black, and 2 shades of green (the two shades of green are created
  149. by mixing inks). Now you are ready to burn the plates. Take a
  150. lithographic plate and etch three marks on it. These marks must
  151. be 2 and 9/16 inches apart, starting on one of the short edges.
  152. Do the same thing to 2 more plates. Then, take 1 of the flats and
  153. place it on the plate, exactly lining the short edge up with the
  154. edge of the plate. Burn it, move it up to the next mark, and
  155. cover up the exposed area you have already burned. Burn that, and
  156. do the same thing 2 more times, moving the flat up one more mark.
  157. Do the same process with the other 2 flats (each on a separate
  158. plate). Develop all three plates. You should now have 4 images
  159. on each plate with an equal space between each bill.
  160.  
  161. The paper you will need will not match exactly, but it will do for
  162. most situations. The paper to use should have a 25% rag content.
  163. By the way, Disaperf computer paper (invisible perforation) does
  164. the job well. Take the paper and load it into the press. Be sure
  165. to set the air, buckle, and paper thickness right. Start with the
  166. black plate (the plate without the serial numbers). Wrap it
  167. around the cylinder and load black ink in. Make sure you run more
  168. than you need because there will be a lot of rejects. Then, while
  169. that is printing, mix the inks for the serial numbers and the back
  170. side. You will need to add some white and maybe yellow to the
  171. serial number ink. You also need to add black to the back side.
  172. Experiment until you get it right. Now, clean the press and print
  173. the other side. You will now have a bill with no green seal or
  174. serial numbers. Print a few with one serial number, make another
  175. and repeat. Keep doing this until you have as many different
  176. numbers as you want. Then cut the bills to the exact size with a
  177. paper cutter. You should have printed a large amount of money by
  178. now, but there is still one problem; the paper is pure white. To
  179. dye it, mix the following in a pan: 2 cups of hot water, 4 tea
  180. bags, and about 16 to 20 drops of green food coloring (experiment
  181. with this). Dip one of the bills in and compare it to a genuine
  182. US bill. Make the necessary adjustments, and dye all the bills.
  183. Also, it is a good idea to make them look used. For example,
  184. wrinkle them, rub coffee grinds on them, etc.
  185.  
  186. As before mentioned, unless you are familiar with photo offset
  187. printing, most of the information in this article will be fairly
  188. hard to understand. Along with getting a book on photo offset
  189. printing, try to see the movie "To Live and Die in LA". It is
  190. about a counterfeiter, and the producer does a pretty good job of
  191. showing how to counterfeit. A good book on the subject is "The
  192. Poor Man's James Bond".
  193.  
  194. If all of this seems too complicated to you, there is one other
  195. method available for counterfeiting: The Canon color laser
  196. copier. The Canon can replicate ANYTHING in vibrant color,
  197. including US currency. But, once again, the main problem in
  198. counterfeiting is the paper used. So, experiment, and good luck!
  199. -Jolly Roger-
  200.  
  201.  
  202. Making Plastic Explosives from Bleach by The Jolly Roger
  203.  
  204. Potassium chlorate is an extremely volatile explosive compound,
  205. and has been used in the past as the main explosive filler in
  206. grenades, land mines, and mortar rounds by such countries as
  207. France and Germany. Common household bleach contains a small
  208. amount of potassium chlorate, which can be extracted by the
  209. procedure that follows.
  210.  
  211. First off, you must obtain:
  212.  
  213. [1] A heat source (hot plate, stove, etc.)
  214. [2] A hydrometer, or battery hydrometer
  215. [3] A large Pyrex, or enameled steel container (to weigh
  216. chemicals)
  217. [4] Potassium chloride (sold as a salt substitute at health and
  218. nutrition stores)
  219.  
  220. Take one gallon of bleach, place it in the container, and begin
  221. heating it. While this solution heats, weigh out 63 grams of
  222. potassium chloride and add this to the bleach being heated.
  223. Constantly check the solution being heated with the hydrometer,
  224. and boil until you get a reading of 1.3. If using a battery
  225. hydrometer, boil until you read a FULL charge.
  226.  
  227. Take the solution and allow it to cool in a refrigerator until it
  228. is between room temperature and 0 degrees Celcius. Filter out the
  229. crystals that have formed and save them. Boil this solution again
  230. and cool as before. Filter and save the crystals.
  231.  
  232. Take the crystals that have been saved, and mix them with
  233. distilled water in the following proportions: 56 grams per 100
  234. milliliters distilled water. Heat this solution until it boils
  235. and allow to cool. Filter the solution and save the crystals that
  236. form upon cooling. This process of purification is called
  237. "fractional crystalization". These crystals should be relatively
  238. pure potassium chlorate.
  239.  
  240. Powder these to the consistency of face powder, and heat gently to
  241. drive off all moisture.
  242.  
  243. Now, melt five parts Vaseline with five parts wax. Dissolve this
  244. in white gasoline (camp stove gasoline), and pour this liquid on
  245. 90 parts potassium chlorate (the powdered crystals from above)
  246. into a plastic bowl. Knead this liquid into the potassium
  247. chlorate until intimately mixed. Allow all gasoline to evaporate.
  248.  
  249. Finally, place this explosive into a cool, dry place. Avoid
  250. friction, sulfur, sulfides, and phosphorous compounds. This
  251. explosive is best molded to the desired shape and density of 1.3
  252. grams in a cube and dipped in wax until water proof. These block
  253. type charges guarantee the highest detonation velocity. Also, a
  254. blasting cap of at least a 3 grade must be used.
  255.  
  256. The presence of the afore mentioned compounds (sulfur, sulfides,
  257. etc.) results in mixtures that are or can become highly sensitive
  258. and will possibly decompose explosively while in storage. You
  259. should never store homemade explosives, and you must use EXTREME
  260. caution at all times while performing the processes in this
  261. article.
  262.  
  263. You may obtain a catalog of other subject of this nature by
  264. writing:
  265.  
  266. Information Publishing Co.
  267. Box 10042
  268. Odessa, Texas 79762
  269.  
  270. Picking Master Locks by The Jolly Roger
  271.  
  272. Have you ever tried to impress someone by picking one of those
  273. Master combination locks and failed?
  274.  
  275. The Master lock company made their older combination locks with a
  276. protection scheme. If you pull the handle too hard, the knob will
  277. not turn. That was their biggest mistake.
  278.  
  279. The first number:
  280.  
  281. Get out any of the Master locks so you know what is going on.
  282. While pulling on the clasp (part that springs open when you get
  283. the combination right), turn the knob to the left until it will
  284. not move any more, and add five to the number you reach. You now
  285. have the first number of the combination.
  286.  
  287. The second number:
  288.  
  289. Spin the dial around a couple of times, then go to the first
  290. number you got. Turn the dial to the right, bypassing the first
  291. number once. When you have bypassed the first number, start
  292. pulling on the clasp and turning the knob. The knob will
  293. eventually fall into the groove and lock. While in the groove,
  294. pull the clasp and turn the knob. If the knob is loose, go to the
  295. next groove, if the knob is stiff, you have the second number of
  296. the combination.
  297.  
  298. The third number:
  299.  
  300. After getting the second number, spin the dial, then enter the two
  301. numbers. Slowly spin the dial to the right, and at each number,
  302. pull on the clasp. The lock will eventually open if you did the
  303. process right.
  304.  
  305. This method of opening Master locks only works on older models.
  306. Someone informed Master of their mistake, and they employed a new
  307. mechanism that is foolproof (for now).
  308.  
  309. The Arts of Lockpicking I courtesy of The Jolly Roger
  310.  
  311. Lockpicking I: Cars and assorted other locks
  312.  
  313. While the basic themes of lockpicking and uninvited entry have not
  314. changed much in the last few years, some modern devices and
  315. techniques have appeared on the scene.
  316.  
  317. Automobiles:
  318.  
  319. Many older automobiles can still be opened with a Slim Jim type of
  320. opener (these and other auto locksmithing techniques are covered
  321. fully in the book "In the Still of the Night", by John Russell
  322. III); however, many car manufacturers have built cases over the
  323. lock mechanism, or have moved the lock mechanism so the Slim Jim
  324. will not work. So:
  325.  
  326. American Locksmith Service
  327. P.O. Box 26
  328. Culver City, CA 90230
  329.  
  330. ALS offers a new and improved Slim Jim that is 30 inches long and
  331. 3/4 inches wide, so it will both reach and slip through the new
  332. car lock covers (inside the door). Price is $5.75 plus $2.00
  333. postage and handling.
  334.  
  335. Cars manufactured by General Motors have always been a bane to
  336. people who needed to open them, because the sidebar locking unit
  337. they employ is very difficult to pick. To further complicate
  338. matters, the new GM cars employ metal shields to make the use of a
  339. Slim Jim type instrument very difficult. So:
  340.  
  341. Lock Technology Corporation
  342. 685 Main St.
  343. New Rochelle, NY 10801
  344.  
  345. LTC offers a cute little tool which will easily remove the lock
  346. cylinder without harm to the vehicle, and will allow you to enter
  347. and/or start the vehicle. The GMC-40 sells for $56.00 plus $2.00
  348. for postage and handling.
  349.  
  350. The best general automobile opening kit is probably a set of
  351. lockout tools offered by:
  352.  
  353. Steck MFG Corporation
  354. 1319 W. Stewart St.
  355. Dayton, OH 45408
  356.  
  357. For $29.95 one can purchase a complete set of six carbon lockout
  358. tools that will open more than 95% of all the cars around.
  359.  
  360. Kwickset locks have become quite popular as one step security
  361. locks for many types of buildings. They are a bit harder to pick
  362. and offer a higher degree of security than a normal builder
  363. installed door lock. So:
  364.  
  365. A MFG
  366. 1151 Wallace St.
  367. Massilon, OH 44646
  368.  
  369. Price is $11.95. Kwickset locks can handily be disassembled and
  370. the door opened without harm to either the lock or the door by
  371. using the above mentioned Kwick Out tool.
  372.  
  373. If you are too lazy to pick auto locks:
  374.  
  375. Veehof Supply
  376. Box 361
  377. Storm Lake, IO 50588
  378.  
  379. VS sells tryout keys for most cars (tryout keys are used since
  380. there is no one master key for any one make of car, but there are
  381. group type masters (a.k.a. tryout keys). Prices average about
  382. $20.00 a set.
  383.  
  384. Updated Lockpicking:
  385.  
  386. For years, there have been a number of pick attack procedures for
  387. most pin and tumbler lock systems. In reverse order of ease they
  388. are as follows:
  389.  
  390. Normal Picking: Using a pick set to align the pins, one by one,
  391. until the shear line is set and the lock opens.
  392.  
  393. Racking: This method uses picks that are constructed with a
  394. series of bumps, or diamond shape notches. These picks
  395. are "raked" (i.e. run over all the pins at one time).
  396. With luck, the pins will raise in the open position and
  397. stay there. Raking, if successful, can be much less of
  398. an effort than standard picking.
  399.  
  400. Lock Aid Gun: This gun shaped device was invented a number of
  401. years ago and has found application with many
  402. locksmiths and security personnel. Basically, a
  403. needle shaped pick is inserted in the snout of the
  404. "gun", and the "trigger" is pulled. This action
  405. snaps the pick up and down strongly. If the tip is
  406. slipped under the pins, they will also be snapped
  407. up and down strongly. With a bit of luck they will
  408. strike each other and separate at the shear line
  409. for a split second. When this happens the lock
  410. will open. The lock aid gun is not 100%
  411. successful, but when it does work, the results are
  412. very dramatic. You can sometimes open the lock
  413. with one snap of the trigger.
  414.  
  415. Vibrator: Some crafty people have mounted a needle pick into an
  416. electric toothbrush power unit. This vibrating effect
  417. will sometimes open pin tumbler locks -- instantly.
  418.  
  419. There is now another method to open pin and wafer locks in a very
  420. short time. Although it resembles a toothbrush pick in
  421. appearance, it is actually an electronic device. I am speaking of
  422. the Cobra pick that is designed and sold by:
  423.  
  424. Fed Corporation
  425. P.O. Box 569
  426. Scottsdale, AR 85252
  427.  
  428. The Cobra uses two nine volt batteries, teflon bearings (for less
  429. noise), and a cam roller. It comes with three picks (for
  430. different types of locks) and works both in America and overseas,
  431. on pin or wafer locks. The Cobra will open group one locks
  432. (common door locks) in three to seven seconds with no damage, in
  433. the hands of an experienced locksmith. It can take a few seconds
  434. more or up to a half a minute for someone with no experience at
  435. all. It will also open group two locks (including government,
  436. high security, and medecos), although this can take a short time
  437. longer. It will not open GM sidear locks, although a device is
  438. about to be introduced to fill that gap. How much for this toy
  439. that will open most locks in seven seconds?
  440.  
  441. $235.00 plus $4.00 shipping and handling.
  442.  
  443. For you hard core safe crackers, FC also sells the MI-6 that will
  444. open most safes at a cost of $10,000 for the three wheel attack
  445. model, and $10,500 for the four wheel model. It comes in a sturdy
  446. aluminum carrying case with monitor, disk drive and software.
  447.  
  448. If none of these safe and sane ideas appeal to you, you can always
  449. fall back on the magic thermal lance...
  450.  
  451. The thermal lance is a rather crude instrument constructed from
  452. 3/8 inch hollow magnesium rods. Each tube comes in a 10 foot
  453. length, but can be cut down if desired. Each one is threaded on
  454. one end. To use the lance, you screw the tube together with a
  455. matted regulator (like a welding outfit uses) and hook up an
  456. oxygen tank. Then oxygen is turned on and the rod is lit with a
  457. standard welding ignitor. The device produces an incredible
  458. amount of heat. It is used for cutting up concrete blocks or even
  459. rocks. An active lance will go through a foot of steel in a few
  460. seconds. The lance is also known as a burning bar, and is
  461. available from:
  462.  
  463. C.O.L. MFG
  464. 7748 W. Addison
  465. Chicago, IL 60634
  466.  
  467. The Arts of Lockpicking II courtesy of The Jolly Roger
  468.  
  469. So you want to be a criminal. Well, if you want to be like James
  470. Bond and open a lock in fifteen seconds, then go to Hollywood,
  471. because that is the only place you are ever going to do it. Even
  472. experienced locksmiths can spend five to ten minutes on a lock if
  473. they are unlucky. If you are wanting extremely quick access, look
  474. elsewhere. The following instructions will pertain mostly to the
  475. "lock in knob" type lock, since it is the easiest to pick.
  476.  
  477. First of all, you need a pick set. If you know a locksmith, get
  478. him to make you a set. This will be the best possible set for you
  479. to use. If you find a locksmith unwilling to supply a set, don't
  480. give up hope. It is possible to make your own, if you have access
  481. to a grinder (you can use a file, but it takes forever).
  482.  
  483. The thing you need is an allen wrench set (very small). These
  484. should be small enough to fit into the keyhole slot. Now, bend
  485. the long end of the allen wrench at a slight angle (not 90
  486. degrees). Now, take your pick to a grinder or a file, and smooth
  487. the end until it is rounded so it won't hang inside the lock.
  488. Test your tool out on doorknobs at your house to see if it will
  489. slide in and out smoothly. Now, this is where the screwdriver
  490. comes in. It must be small enough for it and your pick to be used
  491. in the same lock at the same time, one above the other. In the
  492. coming instructions, please refer to this chart of the interior of
  493. a lock:
  494. ______________________________
  495. \ K
  496. | | | | | | / E
  497. | | | | \ Y [|] Upper tumbler pin
  498. ^ ^ / H [^] Lower tumbler pin
  499. ^ ^ ^ ^ ^ ^ \ O [-] Cylinder wall
  500. / L (This is a greatly simplified
  501. \ E drawing)
  502. ______________________________/
  503.  
  504. The object is to press the pin up so that the space between the
  505. upper pin and the lower pin is level with the cylinder wall. Now,
  506. if you push a pin up, it's tendency is to fall back down, right?
  507. That is where the screwdriver comes in. Insert the screwdriver
  508. into the slot and turn. This tension will keep the "solved" pins
  509. from falling back down. Now, work from the back of the lock to
  510. the front, and when you are through, there will be a click, the
  511. screwdriver will turn freely, and the door will open.
  512.  
  513. Do not get discouraged on your first try! It will probably take
  514. you about twenty to thirty minutes your first time. After that,
  515. you will quickly improve with practice.
  516. Solidox Bombs by The Jolly Roger
  517.  
  518. Most people are not aware that a volatile, extremely explosive
  519. chemical can be bought over the counter: Solidox.
  520.  
  521. Solidox comes in an aluminum can containing 6 grey sticks, and can
  522. be bought at Kmart, and various hardware supply shops for around
  523. $7.00. Solidox is used in welding applications as an oxidizing
  524. agent for the hot flame needed to melt metal. The most active
  525. ingredient in Solidox is potassium chlorate, a filler used in many
  526. military applications in the WWII era.
  527.  
  528. Since Solidox is literally what the name says: SOLID OXygen, you
  529. must have an energy source for an explosion. The most common and
  530. readily available energy source is common household sugar, or
  531. sucrose. In theory, glucose would be the purest energy source,
  532. but it is hard to find a solid supply of glucose.
  533.  
  534. Making the mixture:
  535.  
  536. [1] Open the can of Solidox, and remove all 6 sticks. One by
  537. one, grind up each of the sticks (preferably with a mortar
  538. and pestle) into the finest powder possible.
  539. [2] The ratio for mixing the sugar with the Solidox is 1:1, so
  540. weigh the Solidox powder, and grind up the equivalent amount
  541. of sugar.
  542. [3] Mix equivalent amounts of Solidox powder, and sugar in a 1:1
  543. ratio.
  544.  
  545. It is just that simple! You now have an extremely powerful
  546. substance that can be used in a variety of applications. A word
  547. of caution: be EXTREMELY careful in the entire process. Avoid
  548. friction, heat, and flame. A few years back, a teenager I knew
  549. blew 4 fingers off while trying to make a pipe bomb with Solidox.
  550. You have been warned!
  551.  
  552. High Tech Revenge: The Beigebox rev.2 by The Jolly Roger
  553.  
  554. -------------Introduction-------------
  555. Have you ever wanted a lineman's handset? Surely every phreak has at
  556. least once considered the phun that he could have with one. After searching
  557. unlocked phone company trucks for months, we had an idea. We could build
  558. one. We did, and named it the "Beige Box" simply because that is the color
  559. of ours.
  560. The beigebox is simply a consumer lineman's handset, which is a
  561. phone that can be attached to the outside of a person's house. To
  562. fabricate a beigebox, follow along.
  563.  
  564. ---------Construction and Use---------
  565. The construction is very simple. First you must understand the concept of
  566. the device. In a modular jack, there are four wires. These are red, green,
  567. yellow, and black. For a single line telephone, however, only two matter:
  568. the red (ring) and green (tip). The yellow and the black are not neccessary
  569. for this project. A lineman's handset has two clips on it: the ring and
  570. the tip. Take a modular jack and look at the bottom of it's casing. There
  571. should be a grey jack with four wires (red, green, yellow & black)
  572. leading out of it. To the end of the red wire attach a red aligator clip.
  573. To the end of the green wire attatch a green aligator clip. The yellow
  574. and black wires can be removed, although I would only set them aside so
  575. that you can use the modular jack in future projects. Now insert your
  576. telephone's modular plug into the modular jack. That's it. This particular
  577. model is nice because it is can be easily made, is inexpensive, uses
  578. common parts that are readily available, is small, is lightweight,
  579. and does not require the destruction of a phone.
  580.  
  581. ------------Beige Box Uses------------
  582. There are many uses for a Beige Box. However, before you can use it,
  583. you must know how to attach it to the output device. This device can be
  584. of any of Bell switching apparatus that include germinal sets (i.e.
  585. remote switching centers, bridgin heads, cans, etc.). To open most Bell
  586. Telephone switching apparatus, you must have a 7/16 inch hex driver
  587. (or a good pair of needle nose pliers work also).
  588. This piece of equipment can be picked up at your local hardware store.
  589. With your hex driver (or pliers), turn the security bolt(s) approximately
  590. 1/8 of an inch counter-clockwise and open. If your output device is locked,
  591. then you must have some knowledge of destroying and/or picking locks.
  592. However, we have never encountered a locked output device. Once you have
  593. opened your output device, you should see a mass of wires connected to
  594. terminals. On most output devices, the terminals should be labeled "T"
  595. (Tip -- if not labeled, it is usually on the left) and "R" (Ring -- if
  596. not labeled, usually on the right).
  597.  
  598. Remember: Ring - red - right. The "Three R's" -- a simple way to
  599. remember which is which. Now you must attach all the red alligator clip
  600. (Ring) to the "R" (Ring) terminal.
  601. Attach the green alligator clip (Tip) to the "T" (Tip) terminal.
  602.  
  603. Note: If instead of a dial tone you hear nothing, adjust the alligator
  604. clips so that they are not touching each other terminals. Also make sure
  605. they are firmly attached. By this time you should hear a dial tone.
  606. Dial ANI to find out the number you are using (you wouldn't want to use
  607. your own). Here are some practicle aplications:
  608.  
  609. > Eavesdropping
  610. > Long distance, static free free fone calls to phriends
  611. > Dialing direct to Alliance Teleconferencing (also no static)
  612. > Phucking people over
  613. > Bothering the operator at little risk to yourself
  614. > Blue Boxing with greatly reduced chance of getting caught
  615. > Anything at all you want, since you are on an extension of that line.
  616.  
  617. Eavesdropping
  618. -------------
  619. To be most effective, first attach the Beige Box then your phone. This
  620. eliminates the static caused by connecting the box, therefore
  621. reducing the potential suspicion of your victim. When eavesdropping,
  622. it is allways best to be neither seen nor heard. If you hear someone
  623. dialing out, do not panic; but rather hang up, wait, and pick up the
  624. receiver again. The person will either have hung up or tried to complete
  625. their call again. If the latter is true, then listen in, and perhaps you
  626. will find information worthy of blackmail! If you would like to know who
  627. you are listening to, after dialing ANI, pull a CN/A on the number.
  628.  
  629. Dialing Long Distance
  630. ---------------------
  631. This section is self explanitory, but don't forget to dial a "1" before
  632. the NPA.
  633.  
  634. Dialing Direct to Aliance Teleconferencing
  635. ------------------------------------------
  636. Simply dial 0-700-456-1000 and you will get instructions from there.
  637. I prefer this method over PBX's, since PBX's often have poor reception
  638. and are more dificult to come by.
  639.  
  640. Phucking People Over
  641. --------------------
  642. This is a very large topic of discussion. Just by using the other topics
  643. described, you can create a large phone bill for the person (they will
  644. not have to pay for it, but it will be a big hassle for them). In addition,
  645. since you are an extension of the person's line, you can leave your
  646. phone off the hook, and they will not be able to make or receive calls.
  647. This can be extremely nasty because no one would expect the cause
  648. of the problem.
  649. Bothering the Operator
  650. ----------------------
  651. This is also self explanitary and can provide hours of entertainment.
  652. Simply ask her things that are offensive or you would not like traced
  653. to your line. This also corresponds to the previously described section,
  654. Phucking People Over. After all, guess who's line it gets traced to?
  655. He he he...
  656.  
  657. Blue Boxing
  658. -----------
  659. See a file on Blue Boxing for more details. This is an especially nice
  660. feature if you live in an ESS-equiped prefix, since the calls are, once
  661. again, not traced to your line...
  662.  
  663. ---POTENTIAL RISKS OF BEIGE BOXING----
  664. Overuse of the Beige Box may cause suspicians within the Gestapo,
  665. and result in legal problems. Therefor, I would recomend you:
  666.  
  667. > Choose a secluded spot to do your Beige Boxing,
  668. > Use more than one output device
  669. > Keep a low profile (i.e., do not post under your real
  670. name on a public BBS concering your occomplishments)
  671. > In order to make sure the enemy has not been inside your output
  672. device, I recomend you place a piece of transparent tape over
  673. the opening of your output device. Therefor, if it is
  674. opened in your abscence, the tapqe will be displaced and
  675. you will be aware of the fact that someone has intruded
  676. on your teritory.
  677.  
  678. Now, imagine the possibilities: a $2000 dollar phone bill for
  679. that special person, 976 numbers galore, even harassing the
  680. operator at no risk to you! Think of it as walking into an
  681. enemies house, and using their phone to your heart's content.
  682.  
  683. ---------Jolly Roger
  684.  
  685.  
  686. How to make a CO2 bomb by the Jolly Roger
  687.  
  688. You will have to use up the cartridge first by either shooting it
  689. or whatever. With a nail, force a hole bigger so as to allow the
  690. powder and wick to fit in easily. Fill the cartridge with black
  691. powder and pack it in there real good by tapping the bottom of the
  692. cartridge on a hard surface (I said TAP not SLAM!). Insert a fuse.
  693. I recommend a good water-proof cannon fuse, or an m-80 type fuse,
  694. but firecracker fuses work, if you can run like a black man runs
  695. from the cops after raping a white girl.) Now, light it and run
  696. like hell! It does wonders for a row of mailboxes (like the ones
  697. in apartment complexes), a car (place under the gas tank), a
  698. picture window (place on window sill), a phone booth (place right
  699. under the phone), or any other devious place. This thing throws
  700. shrapnel, and can make quit a mess!! -Jolly Roger-
  701.  
  702.  
  703. Thermite II... or A better way to make Thermite by Jolly Roger
  704.  
  705. Thermite is nasty shit. Here is a good and easy way to make it.
  706. The first step is to get some iron-oxide (which is RUST!). Here is
  707. a good way to make large quantities in a short time:
  708.  
  709. - Get a DC convertor like the one used on a train set. Cut the
  710. connector off, seperate the wires, and strip them both.
  711.  
  712. - Now you need a jar of water with a tablespoon or so of sodium
  713. chloride (which is SALT!) added to it. This makes the water
  714. conductive.
  715.  
  716. - Now insert both wires into the mixture (I am assuming you
  717. plugged the convertor in...) and let them sit for five minutes.
  718. One of them will start bubbling more than the other. This is the
  719. POSITIVE(+) wire. If you do not do this test right, the final
  720. product will be the opposite (chemically) of rust, which is RUST
  721. ACID. You have no use for this here (although it IS useful!).
  722.  
  723. - Anyway, put the nail tied to the positive wire into the jar. Now
  724. put the negative wire in the other end. Now let it sit overnight
  725. and in the morning scrape the rust off of the nail & repeat until
  726. you got a bunch of rust on the bottom of the glass. Be generous
  727. with your rust collection. If you are going through the trouble of
  728. making thermite, you might as well make a lot, right?
  729.  
  730. - Now remove the excess water and pour the crusty solution onto a
  731. cookie sheet. Dry it in the sun for a few hours, or inside
  732. overnight. It should be an orange-brown color (although I have
  733. seen it in many different colors! Sometimes the color gets fucked
  734. up, what can I say... but it is still iron oxide!)
  735.  
  736. - Crush the rust into a fine powder and heat it in a cast-iron pot
  737. until it is red. Now mix the pure iron oxide with pure alluminum
  738. filinos which can be bought or filed down by hand from an aluminum
  739. tube or bar. The ratio or iron oxide to aluminum is 8 grams to 3
  740. grams.
  741.  
  742. - Congrats! You have just made THERMITE! Now, to light it...
  743.  
  744. - Thermite requires a LOT of heat (more than a blow torch!) to
  745. ignite. However, a magnesium ribbon (which is sorta hard to find..
  746. call around) will do the trick. It takes the heat from the
  747. burning magnesium to light the thermite.
  748.  
  749. - Now when you see your victim's car, pour a fifty-cent sized pile
  750. onto his hood, stick the ribbon in it, and light the ribbon with
  751. the blow torch. Now chuckle as you watch it burn through the hood,
  752. the block, the axle, and the pavement. BE CAREFUL! The ideal
  753. mixtures can vaporize CARBON STEEL! Another idea is to use
  754. thermite to get into pay phone cash boxes. HAVE FUN!! -Jolly Roger-
  755.  
  756.  
  757. Touch Explosives by the Jolly Roger
  758.  
  759. This is sort of a mild explosive, but it can be quite dangerous in
  760. large quantities. To make touch explosive (such as that found in a
  761. snap-n-pop, but more powerful), use this recipe:
  762.  
  763. - Mix iodine crystals into ammonia until the iodine crystals will
  764. not dissolve into the ammonia anymore. Pour off the excess ammonia
  765. and dry out the crystals on a baking sheet the same way as you
  766. dried the thermite (in other words, just let it sit overnight!).
  767.  
  768. - Be careful now because these crystals are now your touch
  769. explosive. Carefully wrap a bunch in paper (I mean carefully!
  770. Friction sets 'em off!) and throw them around.. pretty loud, huh?
  771. They are fun to put on someone's chair. Add a small fish sinker to
  772. them and they can be thrown a long distance (good for crowds,
  773. football games, concerts, etc.) Have fun! -Jolly Roger-
  774.  
  775.  
  776. Letter Bombs by The Jolly Roger
  777.  
  778. - You will first have to make a mild version of thermite. Use my
  779. recipe, but substitute iron fillings for rust.
  780.  
  781. - Mix the iron with aluminum fillings in a ratio of 75% aluminum
  782. to 25% iron. This mixture will burn violently in a closed space
  783. (such as an envelope). This bring us to our next ingredient...
  784.  
  785. - Go to the post office and buy an insulated (padded) envelope.
  786. You know, the type that is double layered... Seperate the layers
  787. and place the mild thermite in the main section, where the letter
  788. would go. Then place magnesium powder in the outer layer. There is
  789. your bomb!!
  790.  
  791. - Now to light it... this is the tricky part and hard to explain.
  792. Just keep experimenting until you get something that works. The
  793. fuse is just that touch explosive I have told you about in another
  794. one of my anarchy files. You might want to wrap it like a long
  795. cigarette and then place it at the top of the envelope in the
  796. outer layer (on top of the powdered magnesium). When the touch
  797. explosive is torn or even squeezed hard it will ignite the
  798. powdered magnesium (sort of a flash light) and then it will burn
  799. the mild thermite. If the thermite didn't blow up, it would at
  800. least burn the fuck out of your enemy (it does wonders on human
  801. flesh!).
  802.  
  803. NOW that is REVENGE! -Jolly Roger-
  804.  
  805.  
  806. Paint Bombs by The Jolly Roger
  807.  
  808. To make a pain bomb you simply need a metal pain can with a
  809. refastenable lid, a nice bright color paint (green, pink, purple,
  810. or some gross color is perfect!), and a quantity of dry ice. Place
  811. the paint in the can and then drop the dry ice in. Quicky place
  812. the top on and then run like hell! With some testing you can time
  813. this to a science. It depends on the ratio of dry ice to paint to
  814. the size of the can to how full it is. If you are really pissed
  815. off at someone, you could place it on their doorstep, knock on the
  816. door, and then run!! Paint will fly all over the place HAHAHA!!
  817. -Jolly Roger-
  818.  
  819.  
  820.  
  821. Ways to send a car to Hell by The Jolly Roger
  822.  
  823. There are 1001 ways to destroy a car but I am going to cover only
  824. the ones that are the most fun (for you), the most destructive
  825. (for them), and the hardest to trace (for the cops).
  826.  
  827. - Place thermite on the hood, light it, and watch it burn all the
  828. way through the pavement!
  829.  
  830. - Tape a CO2 bomb to the hood, axel, gas tank, wheel, muffler,
  831. etc.)
  832.  
  833. - Put a tampon, dirt, sugar (this on is good!), a ping pong ball,
  834. or just about anything that will dissolve in the gas tank.
  835.  
  836. - Put potatoes, rocks, banannas, or anything that will fit, into
  837. the tailpipe. Use a broom handle to stuff 'em up into the
  838. tailpipe.
  839.  
  840. - Put a long rag into the gas tank and light it...
  841.  
  842. - Steal a key, copy it, replace it, and then steal the stereo.
  843.  
  844. - Break into the car. Cut a thin metal ruler into a shape like
  845. this:
  846. ----
  847. | |
  848. | |
  849. | |
  850. | <
  851. ----
  852.  
  853. Slide it into the outside window and keep pulling it back up until
  854. you catch the lock cable which should unlock the door. This device
  855. is also called a SLIM JIM. Now get the stereo, equalizer, radar
  856. detector, etc. Now destroy the inside. (A sharp knife does wonders
  857. on the seats!)
  858.  
  859. Have Fun! -Jolly Roger-
  860.  
  861.  
  862. Do ya hate school? by The Jolly Roger
  863.  
  864. - One of my favorites for getting out of a class or two is to call
  865. in a bomb threat. Tell 'em that it is in a locker. Then they have
  866. to check them all, whilst you can slip away for an hour or two.
  867. You can even place a fake bomb (in any locker but YOURS!). They
  868. might cancel school for a week while they investigate (of course,
  869. you will probably have to make it up in the summer...).
  870.  
  871. - Get some pure potassium or pure sodium, put it in a capsule, and
  872. flush it down the toilet (smells awful! Stinks up the whole school!).
  873.  
  874. - Use a smoke grenade in the hallway.
  875.  
  876. - Steal the computer passwords & keys. Or steal the 80 column cards
  877. inside if they are (gag) IBM.
  878.  
  879. - Make friends with student assistants and have them change your
  880. grades when the teachers hand in their bubble sheets for the report
  881. cards.
  882.  
  883. - Spit your gum out on the carpet in the library or whatever and
  884. grind it into the carpet. Watch the janitors cry!
  885.  
  886. - Draw on lockers or spraypaint on the building that the principal
  887. is a fascist.
  888.  
  889. - Stick a potato in the tailpipe of the principal's car.
  890.  
  891. - USE YOUR IMAGINATION! -Jolly Roger-
  892.  
  893.  
  894. Phone related vandalism by the Jolly Roger
  895.  
  896. If you live where there are underground lines then you will be
  897. able to ruin someone's phone life very easily. All you must do is
  898. go to their house and find the green junction box that interfaces
  899. their line (and possibly some others in the neighborhood) with the
  900. major lines. These can be found just about anywhere but they are
  901. usually underneath the nearest phone pole. Take a socket wrench
  902. and loosen the nut on the right. Then just take clippers or a
  903. sledge hammer or a bomb and destroy the insides and pull up their
  904. phone cable. Now cut it into segments so it can't be fixed but
  905. must be replaced (There is a week's worth of work for 'em!!)
  906. -Jolly Roger-
  907.  
  908.  
  909.  
  910. Highway radar jamming by The Jolly Roger
  911.  
  912. Most drivers wanting to make better time on the open road will
  913. invest in one of those expensive radar detectors. However, this
  914. device will not work against a gun type radar unit in which the
  915. radar signal is not present until the cop has your car in his
  916. sights and pulls the trigger. Then it is TOO LATE for you to slow
  917. down. A better method is to continuously jam any signal with a
  918. radar signal of your own. I have tested this idea with the
  919. cooperation of a local cop and found that his unit reads random
  920. numbers when my car approached him. It is suprisingly easy to make
  921. a low power radar transmitter. A nifty little semiconductor called
  922. a Gunn Diode will generate microwaves when supplied with the 5 to
  923. 10 volt DC and enclosed in the correct size cavity (resonater). An
  924. 8 to 3 terminal regulator can be used to get this voltage from a
  925. car's 12v system. However, the correct construction and tuning of
  926. the cavity is difficult without good microwave measurement
  927. equipment. Police radars commonly operate on the K band at 22 ghz.
  928. Or more often on the X band at 10.525 ghz. most microwave intruder
  929. alarms and motion detectors (mounted over automatic doors in
  930. supermarkets & banks, etc.) contain a Gunn type
  931. transmitter/receiver combination that transmits about 10 kilowatts
  932. at 10.525 ghz. These units work perfectly as jammers. If you
  933. cannot get one locally, write to Microwave Associates in
  934. Burlington, Massachusettes and ask them for info on 'Gunnplexers'
  935. for ham radio use. When you get the unit it may be mounted in a
  936. plastic box on the dash or in a weather-proff enclosure behind the
  937. PLASTIC grille. Switch on the power when on an open highway. The
  938. unit will not jam radar to the side or behind the car so don't go
  939. speeding past the radar trap. An interesting phenomena you will
  940. notice is that the drivers who are in front of you who are using
  941. detectors will hit their brakes as you approach large metal signs
  942. and bridges. Your signal is bouncing off of these objects and
  943. triggering their radar detectors! HAVE FUN!
  944. -Jolly Roger-
  945.  
  946. P.S. If you are interested in this sort of thing, get a copy of
  947. POPULAR COMMUNICATIONS. The ads in there tell you where you can
  948. get all kinds of info on all kinds of neat equipment for all kinds
  949. of neat things!
  950.  
  951.  
  952. Smoke Bombs by the Jolly Roger
  953.  
  954. Here is the recipe for one helluva smoke bomb!
  955.  
  956. 4 parts sugar
  957. 6 parts potassium nitrate (Salt Peter)
  958.  
  959. Heat this mixture over a LOW flame until it melts, stirring well.
  960. Pour it into a future container and, before it solidifies, imbed a
  961. few matches into the mixture to use as fuses. One pound of this
  962. stuff will fill up a whole block with thick, white smoke!
  963.  
  964.  
  965. Mail Box Bombs by the Jolly Roger
  966.  
  967. (1) Two litre bottle of chlorine (must contain sodium hypochlorate)
  968.  
  969. Small amount of sugar
  970.  
  971. Small amount of water
  972.  
  973.  
  974. Mix all three of these in equal amounts to fill about 1/10 of the
  975. bottle. Screw on the lid and place in a mailbox. It's hard to
  976. believe that such a small explosion will literally rip the mailbox
  977. in half and send it 20 feet into the air! Be careful doing this,
  978. though, because if you are caught, it is not up to the person
  979. whose mailbox you blew up to press charges. It is up to the city.
  980. -Jolly Roger-
  981.  
  982.  
  983. The easiest way to hotwire cars by the Jolly Roger
  984.  
  985. Get in the car. Look under the dash. If it enclosed, forget it
  986. unless you want to cut through it. If you do, do it near the
  987. ignition. Once you get behind or near the ignition look for two
  988. red wires. In older cars red was the standard color, if not, look
  989. for two matched pairs. When you find them, cross them and take
  990. off! -Jolly Roger-
  991.  
  992.  
  993. How to make Napalm by the Jolly Roger
  994.  
  995. - Pour some gas into an old bowl, or some kind of container.
  996.  
  997. - Get some styrofoam and put it in the gas, until the gas won't
  998. eat anymore. You should have a sticky syrup.
  999.  
  1000. - Put it on the end of something (don't touch it!!). The unused
  1001. stuff lasts a long time!
  1002. -Jolly Roger-
  1003.  
  1004.  
  1005.  
  1006. How to make a fertilizer bomb by Jolly Roger
  1007.  
  1008. Ingredients:
  1009.  
  1010. - Newspaper
  1011. - Fertilizer (the chemical kind, GREEN THUMB or ORCHO)
  1012. - Cotton
  1013. - Diesel fuel
  1014.  
  1015. Make a pouch out of the newspaper and put some fertilizer in it.
  1016. Then put cotton on top. Soak the cotton with fuel. Then light and
  1017. run like you have never ran before! This blows up 500 square feet
  1018. so don't do it in an alley!! -Jolly Roger-
  1019.  
  1020.  
  1021.  
  1022. Tennis Ball Bombs by The Jolly Roger
  1023.  
  1024. Ingredients:
  1025.  
  1026. - Strike anywhere matches
  1027. - A tennis ball
  1028. - A nice sharp knife
  1029. - Duct tape
  1030.  
  1031. Break a ton of matchheads off. Then cut a SMALL hole in the tennis
  1032. ball. Stuff all of the matchheads into the ball, until you can't
  1033. fit any more in. Then tape over it with duct tape. Make sure it is
  1034. real nice and tight! Then, when you see a geek walking down the
  1035. street, give it a good throw. He will have a blast!!
  1036. -Jolly Roger-
  1037.  
  1038.  
  1039. Diskette Bombs by the Jolly Roger
  1040.  
  1041. You need:
  1042.  
  1043. - A disk
  1044. - Scissors
  1045. - White or blue kitchen matches (they MUST be these colors!)
  1046. - Clear nail polish
  1047.  
  1048. - Carefully open up the diskette (3.5" disks are best for this!)
  1049.  
  1050. - Remove the cotton covering from the inside.
  1051.  
  1052. - Scrape a lot of match powder into a bowl (use a wooden scraper,
  1053. metal might spark the matchpowder!)
  1054.  
  1055. - After you have a lot, spread it evenly on the disk.
  1056.  
  1057. - Using the nail polish, spread it over the match mixture
  1058.  
  1059. - Let it dry
  1060.  
  1061. - Carefully put the diskette back together and use the nail polish
  1062. to seal it shut on the inside (where it came apart).
  1063.  
  1064. - When that disk is in a drive, the drive head attempts to read
  1065. the disk, which causes a small fire (ENOUGH HEAT TO MELT THE DISK
  1066. DRIVE AND FUCK THE HEAD UP!!). ahahahahaha! Let the fuckhead try
  1067. and fix THAT!!! -Jolly Roger-
  1068.  
  1069.  
  1070.  
  1071. Unlisted Phone Numbers by The Jolly Roger
  1072.  
  1073. There are a couple of different ways of doing this. Let's see if
  1074. this one will help: Every city has one or more offices dedicated
  1075. to assigning numbers to the telephone wire pairs. These offices
  1076. are called DPAC offices and are available to service reps who are
  1077. installing or repairing phones. To get the DPAC number, a service
  1078. rep would call the customer service number for billing information
  1079. in the town that the number is located in that he is trying to get
  1080. the unlisted number of. (Got that?) The conversation would go
  1081. something like this: "Hi, Amarillo, this is Joe from Anytown
  1082. business office, I need the DPAC number for the south side of
  1083. town." This info is usually passed out with no problems, so... if
  1084. the first person you call doesn't have it, try another. REMEMBER,
  1085. no one has ANY IDEA who the hell you are when you are talking on
  1086. the phone, so you can be anyone you damn well please! (heheheheh!)
  1087. When you call the DPAC number, just tell them that you need a
  1088. listing for either the address that you have, or the name. DPAC
  1089. DOES NOT SHOW WHETHER THE NUMBER IS LISTED OR UNLISTED!! Also, if
  1090. you're going to make a habit of chasing numbers down, you might
  1091. want to check into geting a criss-cross directory, which lists
  1092. phone numbers by their addresses. It costs a couple-a-hundred bux,
  1093. but it is well worth it if you have to chase more than one or two
  1094. numbers down! -Jolly Roger-
  1095.  
  1096.  
  1097. Fuses brought to you by The Jolly Roger
  1098.  
  1099. You would be surprised how many files are out there that use what
  1100. falls under the category of a "fuse." They assume that you just
  1101. have a few lying around, or know where to get them. Well, in some
  1102. parts of the country, fuses are extremely hard to come by... so
  1103. this file tells you how to make your own. Both fuses presented
  1104. here are fairly simple to make, and are fairly reliable.
  1105.  
  1106. SLOW BURNING FUSE
  1107. ~~~~~~~~~~~~~~~~~ (approx. 2 inches per minute)
  1108.  
  1109. Materials needed:
  1110.  
  1111. - Cotton string or 3 shoelaces
  1112. - Potassium Nitrate or Potassium Chlorate
  1113. - Granulated sugar
  1114.  
  1115. Procedure:
  1116.  
  1117. - Wash the cotton string or showlaces in HOT soapy water, then
  1118. rinse with fresh water
  1119.  
  1120. - Mix the following together in a glass bowl:
  1121. 1 part potassium nitrate or potassium chlorate
  1122. 1 part granulated sugar
  1123. 2 parts hot water
  1124.  
  1125. - Soak strings or shoelaces in this solution
  1126.  
  1127. - Twist/braid 3 strands together and allow them to dry
  1128.  
  1129. - Check the burn rate to see how long it actually takes!!
  1130.  
  1131. FAST BURNING FUSE
  1132. ~~~~~~~~~~~~~~~~~ (40 inches per minute)
  1133.  
  1134. Materials needed:
  1135.  
  1136. -Soft cotton string
  1137. -fine black powder (empty a few shotgun shells!)
  1138. -shallow dish or pan
  1139.  
  1140. Procedure:
  1141.  
  1142. - moisten powder to form a paste
  1143.  
  1144. - twist/braid 3 strands of cotton together
  1145.  
  1146. - rub paste into string and allow to dry
  1147.  
  1148. - Check the burn rate!!!
  1149.  
  1150.  
  1151.  
  1152. How to make Potassium Nitrate by The Jolly Roger
  1153.  
  1154. Potassium Nitrate is an ingredient in making fuses, among other
  1155. things. Here is how you make it:
  1156.  
  1157. Materials needed:
  1158.  
  1159. -3.5 gallons of nitrate bearing earth or other material
  1160. -1/2 cup of wood ashes
  1161. -Bucket or other similar container about 4-5 gallons in volume
  1162. -2 pieces of finely woven cloth, each a bit bigger than the
  1163. bottom of the bucket
  1164. -Shallow dish or pan at least as large in diameter as the bucket
  1165. -Shallow, heat resistant container
  1166. -2 gallons of water
  1167. -Something to punch holes in the bottom of the bucket
  1168. -1 gallon of any type of alcohol
  1169. -A heat source
  1170. -Paper & tape
  1171.  
  1172. Procedure:
  1173.  
  1174. - Punch holes on the inside bottom of the bucket, so that the
  1175. metal is"puckered" outward from the bottom
  1176.  
  1177. - Spread cloth over the holes from the bottom
  1178.  
  1179. - Place wood ashes on the cloth. Spread it out so that it covers
  1180. the entire cloth and has about the same thickness.
  1181.  
  1182. - Place 2nd cloth on top of the wood ashes
  1183.  
  1184. - Place the dirt or other material in the bucket
  1185.  
  1186. - Place the bucket over the shallow container. NOTE: It may need
  1187. support on the bottom so that the holes on the bottom are not
  1188. blocked.
  1189.  
  1190. - Boil water and pour it over the earth very slowly. Do NOT pour
  1191. it all at once, as this will clog the filter on the bottom.
  1192.  
  1193. - Allow water to run through holes into the shallow dish on the
  1194. bottom.
  1195.  
  1196. - Be sure that the water goes through ALL of the earth!
  1197.  
  1198. - Allow water in dish to cool for an hour or so
  1199.  
  1200. - Carefully drain the liquid in the dish away, and discard the
  1201. sludge in the bottom
  1202.  
  1203. - Boil this liquid over a fire for at least two hours. Small
  1204. grains of salt will form - scoop these out with the paper as they
  1205. form
  1206.  
  1207. - When the liquid has boiled down to 1/2 its original volume let
  1208. it sit
  1209.  
  1210. - After 1/2 hour, add equal volume of the alcohol; when this
  1211. mixture is poured through paper, small white crystals appear. This
  1212. is the posassium nitrate.
  1213.  
  1214. Purification:
  1215.  
  1216. - Redissolve crystals in small amount of boiling water
  1217.  
  1218. - Remove any crystals that appear
  1219.  
  1220. - Pour through improvised filter then heat concentrated solution
  1221. to dryness.
  1222.  
  1223. - Spread out crystals and allow to dry
  1224.  
  1225.  
  1226. Exploding lightbulbs by The Jolly Roger
  1227.  
  1228. Materials needed:
  1229.  
  1230. -lightbulb (100w)
  1231. -socket (duh...)
  1232. -1/4 cup soap chips
  1233. -blackpowder! (open some shotgun shells!)
  1234. -1/4 cup kerosene orgasoline
  1235. -adhesive tape
  1236. -lighter or small blowtorch
  1237. -glue
  1238.  
  1239. Procedure for a simple exploding lightbulb:
  1240. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  1241.  
  1242. - Drill a small hole in the top of the bulb near the threads!
  1243.  
  1244. - Carefully pour the blackpowder into the hole. Use enough so
  1245. that it touches the filament!
  1246.  
  1247. - Insert into socket as normal (make sure the light is off or
  1248. else YOU will be the victim!!)
  1249.  
  1250. - Get the hell out!!
  1251.  
  1252. Procedure for a Napam Bulb:
  1253. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  1254.  
  1255. - Heat kerosene/gasoline in a double boiler
  1256.  
  1257. - Melt soap chips, stirring slowly.
  1258.  
  1259. - Put somewhere and allow to cool
  1260.  
  1261. - Heat the threads of the bulb VERY carefully to melt the glue.
  1262. Remove threads, slowly drawing out the filament. Do NOT break the
  1263. cheap electrical igniters and/or the filament or this won't work!!
  1264.  
  1265. - Pour the liquid into the bulb, and slowly lower the filament
  1266. back down into the bulb. Make sure the filament is dipped into the
  1267. fluid.
  1268.  
  1269. - Re-glue the threads back on. Insert it into a socket frequently
  1270. used by the victim and get the hell out!!
  1271.  
  1272. When the victim flips the switch, he will be in for a BIG surprise!
  1273.  
  1274. Have fun! -Jolly Roger-
  1275.  
  1276.  
  1277.  
  1278. Under water igniters by The Jolly Roger
  1279.  
  1280. Materials needed:
  1281.  
  1282. -Pack of 10 silicon diodes (available at Radio Shack. you will
  1283. know you got the right ones if they are very, very small glass
  1284. objects!)
  1285. -Pack of matches
  1286. -1 candle
  1287.  
  1288. Procedure:
  1289.  
  1290. - Light the candle and allow a pool of molten wax to form in the
  1291. top.
  1292.  
  1293. - Take a single match and hold the glass part of a single diode
  1294. against the head. Bend the diode pins around the matchhead so that
  1295. one wraps in an upward direction and thensticks out to the side.
  1296. Do the same with the other wire, but in a downward direction. The
  1297. diodes should now be hugging the matchhead, but its wires MUST NOT
  1298. TOUCH EACH OTHER!
  1299.  
  1300. - Dip the matchhead in wax to give it a water-proof coat. These
  1301. work underwater
  1302.  
  1303. - repeat to make as many as you want
  1304.  
  1305. How to use them:
  1306.  
  1307. When these little dudes are hooked across a 6v battery, the diode
  1308. reaches what is called breakdown voltage. When most electrical
  1309. components reach this voltage, they usually produce great amounts
  1310. of heat and light, while quickly melting into a little blob. This
  1311. heat is enough to ignite a matchhead. These are recommended for
  1312. use underwater, where most other igniters refuse to work. ENJOY!
  1313. -Jolly Roger-
  1314.  
  1315.  
  1316. Home-brew blast cannon by The Jolly Roger
  1317.  
  1318. Materials needed:
  1319.  
  1320. -1 plastic drain pipe, 3 feet long, at least 3 1/2 inches in
  1321. diameter
  1322. -1 smaller plastic pipe, about 6 inches long, 2 inches in
  1323. diameter
  1324. -1 large lighter, with fluid refills (this gobbles it up!)
  1325. -1 pipe cap to fit the large pipe, 1 pipe cap to fit the small
  1326. pipe
  1327. -5 feet of bellwire
  1328. -1 SPST rocker switch
  1329. -16v polaroid pot-a-pulse battery
  1330. -15v relay (get this at Radio Shack)
  1331. -Electrical Tape
  1332. -One free afternoon
  1333.  
  1334. Procedure:
  1335.  
  1336. - Cut the bell wire into three equal pieces, and strip the ends
  1337.  
  1338. - Cut a hole in the side of the large pipe, the same diameter as
  1339. the small pipe. Thread the hole and one end of the small pipe.
  1340. they should screw together easily.
  1341.  
  1342. - Take a piece of scrap metal, and bend it into an "L" shape,
  1343. then attach it to the level on the lighter:
  1344.  
  1345. /------------------------gas switch is here
  1346. V
  1347. /------
  1348. !lighter!!<---metal lever
  1349. !!!
  1350. !!
  1351.  
  1352. Now, every time you pull the 'trigger' gas should flow freely from
  1353. the lighter. You may need to enlarge the 'gas port' on your
  1354. lighter, if you wish to be able to fire more rapidly.
  1355.  
  1356. - Connect two wires to the two posts on the switch
  1357.  
  1358. - Cut two holes in the side of the smaller tube, one for the
  1359. switch on the bottom, and one for the metal piece on the top.
  1360. Then, mount the switch in the bottom, running the wires up and out
  1361. of the top.
  1362.  
  1363. - Mount the lighter/trigger in the top. Now the switch should
  1364. rock easily, and the trigger should cause the lighter to pour out
  1365. gas. Re-screw the smaller tube into the larger one, hold down the
  1366. trigger a bit, let it go, and throw a match in there. If all goes
  1367. well, you should hear a nice big 'THUD!'
  1368.  
  1369. - Get a hold of the relay, and take off the top.
  1370.  
  1371. 1---------------
  1372. v/
  1373. 2--------------/<--- the center object is the metal finger inside
  1374. 3 the relay
  1375. cc-------------/
  1376. oo----------------4
  1377. ii
  1378. ll----------------5
  1379.  
  1380. Connect (1) to one of the wires coming from the switch. Connect
  1381. (2) to (4), and connect (5) to one side of the battery. Connect
  1382. the remaining wire from the switch to the other side of the
  1383. battery. Now you should be able to get the relay to make a little
  1384. 'buzzing' sound when you flip the switch and you should see some
  1385. tiny little sparks.
  1386.  
  1387. - Now, carefully mount the relay on the inside of the large pipe,
  1388. towards the back. Screw on the smaller pipe, tape the battery to
  1389. the side of the cannon barrel (yes, but looks aren't everything!)
  1390.  
  1391. - You should now be able to let a little gas into the barrel and
  1392. set it off by flipping the switch.
  1393.  
  1394. - Put the cap on the back end of the large pipe VERY SECURELY.
  1395. You are now ready for the first trial-run!
  1396.  
  1397. To Test:
  1398.  
  1399. Put something very, very large into the barrel, just so that it
  1400. fits 'just right'. Now, find a strong guy (the recoil will
  1401. probably knock you on your ass if you aren't careful!). Put on a
  1402. shoulderpad, earmuffs, and possibly some other protective clothing
  1403. (trust the Jolly Roger! You are going to need it!). Hold the
  1404. trigger down for 30 seconds, hold on tight, and hit the switch.
  1405. With luck and the proper adjustments, you should be able to put a
  1406. frozed orange through 1/4 or plywood at 25 feet.
  1407.  
  1408. Have fun! -Jolly Roger-
  1409.  
  1410.  
  1411. Chemical Equivalency list by the Jolly Roger
  1412.  
  1413. Acacia..................................................Gum Arabic
  1414. Acetic Acid................................................Vinegar
  1415. Aluminum Oxide..............................................Alumia
  1416. Aluminum Potassium Sulphate...................................Alum
  1417. Aluminum Sulfate..............................................Alum
  1418. Ammonium Carbonate.......................................Hartshorn
  1419. Ammonium Hydroxide.........................................Ammonia
  1420. Ammonium Nitrate........................................Salt Peter
  1421. Ammonium Oleate.......................................Ammonia Soap
  1422. Amylacetate............................................Bananna Oil
  1423. Barium Sulfide...........................................Black Ash
  1424. Carbon Carbinate.............................................Chalk
  1425. Carbontetrachloride.................................Cleaning Fluid
  1426. Calcium Hypochloride..............................Bleaching Powder
  1427. Calcium Oxide.................................................Lime
  1428. Calcium Sulfate...................................Plaster of Paris
  1429. Carbonic Acid..............................................Seltzer
  1430. Cetyltrimethylammoniumbromide........................Ammonium Salt
  1431. Ethylinedichloride.....................................Dutch Fluid
  1432. Ferric Oxide.............................................Iron Rust
  1433. Furfuraldehyde............................................Bran Oil
  1434. Glucose.................................................Corn Syrup
  1435. Graphite...............................................Pencil Lead
  1436. Hydrochloric Acid....................................Muriatic Acid
  1437. Hydrogen Peroxide.........................................Peroxide
  1438. Lead Acetate.........................................Sugar of Lead
  1439. Lead Tero-oxide...........................................Red Lead
  1440. Magnesium Silicate............................................Talc
  1441. Magnesium Sulfate.......................................Epsom Salt
  1442. Methylsalicylate..................................Winter Green Oil
  1443. Naphthalene..............................................Mothballs
  1444. Phenol...............................................Carbolic Acid
  1445. Potassium Bicarbonate..............................Cream of Tarter
  1446. Potassium Chromium Sulfate..............................Chromealum
  1447. Potassium Nitrate.......................................Salt Peter
  1448. Sodium Oxide..................................................Sand
  1449. Sodium Bicarbonate.....................................Baking Soda
  1450. Sodium Borate................................................Borax
  1451. Sodium Carbonate......................................Washing Soda
  1452. Sodium Chloride...............................................Salt
  1453. Sodium Hydroxide...............................................Lye
  1454. Sodium Silicate..............................................Glass
  1455. Sodium Sulfate......................................Glauber's Salt
  1456. Sodium Thiosulfate.............................Photographer's Hypo
  1457. Sulfuric Acid.........................................Battery Acid
  1458. Sucrose.................................................Cane Sugar
  1459. Zinc Chloride.......................................Tinner's Fluid
  1460. Zinc Sulfate.........................................White Vitriol
  1461.  
  1462.  
  1463.  
  1464. Phone Taps by The Jolly Roger
  1465.  
  1466. Here is some info on phone taps. In this file is a schematic for a
  1467. simple wiretap & instructions for hooking up a small tape recorder
  1468. control relay to the phone line.
  1469.  
  1470. First, I will discuss taps a little. There are many different
  1471. types of taps. there are transmitters, wired taps, and induction
  1472. taps to name a few. Wired and wireless transmitters must be
  1473. physically connected to the line before they will do any good.
  1474. Once a wireless tap is connected to the line,it can transmit all
  1475. conversations over a limited reception range. The phones in the
  1476. house can even be modifies to pick up conversations in the room
  1477. and transmit them too! These taps are usually powered off of the
  1478. phone line, but can have an external power source. You can get more
  1479. information on these taps by getting an issue of Popular
  1480. Communications and reading through the ads. Wired taps, on the
  1481. other hand, need no power source, but a wire must be run from the
  1482. line to the listener or to a transmitter. There are obvious
  1483. advantages of wireless taps over wired ones. There is one type of
  1484. wireless tap that looks like a normal telephone mike. All you have
  1485. to do is replace the original mike with thisand itwill transmit
  1486. all conversations! There is also an exotic type of wired tap known
  1487. as the 'Infinity Transmitter' or 'Harmonica Bug'. In order to hook
  1488. one of these, it must be installed inside the phone. When someone
  1489. calls the tapped phone & *before* it rings,blows a whistle over
  1490. the line, the transmitter picks up the phone via a relay. The mike
  1491. on the phone is activated so that the caller can hear all of the
  1492. conversations in the room. There is a sweep tone test at
  1493. 415/BUG-1111 which can be used to detect one of these taps. If one
  1494. of these is on your line & the test # sends the correct tone, you
  1495. will hear a click. Induction taps have one big advantage over taps
  1496. that must be physically wired to the phone. They do not have to be
  1497. touching the phone in order to pick up the conversation. They work
  1498. on the same principle as the little suction-cup tape recorder
  1499. mikes that you can get at Radio Shack. Induction mikes can be
  1500. hooked up to a transmitter or be wired.
  1501.  
  1502. Here is an example of industrial espionage using the phone:
  1503. A salesman walks into an office & makes a phone call. He fakes
  1504. the conversation, but when he hangs up he slips some foam rubber
  1505. cubes into the cradle. The called party can still hear all
  1506. conversations in the room. When someone picks up the phone, the
  1507. cubes fall away unnoticed.
  1508.  
  1509. A tap can also be used on a phone to overhear what your modem is
  1510. doing when you are wardialing, hacking, or just plain calling a
  1511. bbs (like the White Ruins! Denver, Colorado! 55 megs online!
  1512. Atari! Macintosh! Amiga! Ibm! CALL IT! 303-972-8566! By the way, i
  1513. did this ad without the sysops consent or knowledge!).
  1514.  
  1515. Here is the schematic:
  1516. -------)!----)!(------------->
  1517. )!(
  1518. Cap ^ )!(
  1519. )!(
  1520. )!(
  1521. )!(
  1522. ^^^^^---)!(------------->
  1523. ^ 100K
  1524. !
  1525. ! <Input
  1526.  
  1527. The 100K pot is used for volume. It should be on its highest
  1528. (least resistance) setting if you hook a speaker across the
  1529. output. but it should be set on its highest resistance for a tape
  1530. recorder or amplifier. You may find it necessary to add another
  1531. 10 - 40K. The capacitor should be around .47 MFD. It's only
  1532. purpose is to prevent the relay in the phone from tripping &
  1533. thinking that you have the phone off of the hook. the audio output
  1534. transformer is available at Radio Shack. (part # 273-138E for
  1535. input). The red & the white wires go to the output device. You may
  1536. want to experiment with the transformer for the best output.
  1537. Hooking up a tape recorder relay is easy. Just hook one of the phone
  1538. wires (usually red) to the the end of one of the relay & the ther
  1539. end just loop around. This bypasses it. It should look like this:
  1540.  
  1541. ------^^^^^^^^^------------
  1542. ---------
  1543. RELAY^^
  1544. (part #275-004 from Radio Shack works fine)
  1545.  
  1546. If you think that you line is tapped, the first thing to do is to
  1547. physically inspect the line yourself ESPECIALLY the phones. You
  1548. can get mike replacements with bug detectors built in. However, I
  1549. would not trust them too much. It is too easy to get a wrong
  1550. reading.
  1551.  
  1552. For more info:
  1553.  
  1554. BUGS AND ELECTRONIC SURVEILANCE from Desert Publications
  1555. HOW TO AVOID ELECTRONIC EAVESDROPPING & PRIVACY INVASION. I do not
  1556. remember who this one is from... you might want to try Paladin
  1557. Press.
  1558.  
  1559. -Jolly Roger-
  1560.  
  1561.  
  1562. How to make a landmine by The Jolly Roger
  1563.  
  1564. First, you need to get a pushbutton switch. Take the wires of it
  1565. and connect one to a nine volt battery connector and the other to
  1566. a solar igniter (used for launching model rockets). A very thin
  1567. piece of stereo wire will usually do the trick if you are
  1568. desperate, but I recommend the igniter. Connect the other wire of
  1569. the nine-volt battery to one end of the switch. Connect a wire
  1570. from the switch to the other lead on the solar igniter.
  1571.  
  1572. switch-----------battery
  1573. \ /
  1574. \ /
  1575. \ /
  1576. \ /
  1577. solar igniter
  1578. |
  1579. |
  1580. |
  1581. explosive
  1582.  
  1583. Now connect the explosive (pipe bomb, m-80, CO2 bomb, etc.) to the
  1584. igniter by attaching the fuse to the igniter (seal it with scotch
  1585. tape). Now dig a hole; not too deep but enough to cover all of the
  1586. materials. Think about what direction your enemy will be coming from
  1587. and plant the switch, but leave the button visible (not TOO
  1588. visible!). Plant the explosive about 3-5 feet away from the switch
  1589. because there will be a delay in the explosion that depends on how
  1590. short your wick is, and, if a homemade wick is being used, its
  1591. burning speed. But if you get it right... and your enemy is close
  1592. enough......... BBBBBBBOOOOOOOOOOOOOOOOOOOOOOOOMMMM! hahahaha
  1593.  
  1594. -Jolly Roger-
  1595.  
  1596.  
  1597. A different kind of Molitoff Cocktail by the Jolly Roger
  1598.  
  1599. Here is how you do it:
  1600.  
  1601. - Get a coke bottle & fill it with gasoline about half full
  1602.  
  1603. - Cram a piece of cloth into the neck of it nice and tight
  1604.  
  1605. - Get a chlorine tablet and stuff it in there. You are going to have
  1606. to force it because the tablets are bigger than the opening of the
  1607. bottle.
  1608.  
  1609. - Now find a suitable victim and wing it in their direction. When it
  1610. hits the pavement or any surface hard enough to break it, and the chlorine
  1611. and gasoline mix..... BOOM!!!!!!
  1612. Have fun! -Jolly Roger-
  1613.  
  1614. Phone Systems Tutorial by The Jolly Roger
  1615.  
  1616. To start off, we will discuss the dialing procedures for domestic
  1617. as well as international dialing. We will also take a look at the
  1618. telephone numbering plan.
  1619.  
  1620. North American Numbering Plan
  1621. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  1622.  
  1623. In North America, the telephone numbering plan is as follows:
  1624.  
  1625. A) a 3 digit Numbering Plan Area (NPA) code , ie, area code
  1626. B) a 7 digit telephone # consisting of a 3 digit Central Office
  1627. (CO) code plus a 4 digit station #
  1628.  
  1629. These 10 digits are called the network address or destination
  1630. code. It is in the format of:
  1631.  
  1632. Area Code Telephone #
  1633. --------- -----------
  1634.  
  1635. N*X NXX-XXXX
  1636.  
  1637. Where: N = a digit from 2 to 9
  1638. * = the digit 0 or 1
  1639. X = a digit from 0 to 9
  1640.  
  1641. Area Codes
  1642. ~~~~~~~~~~
  1643.  
  1644. Check your telephone book or the seperate listing of area codes
  1645. found on many bbs's. Here are the special area codes (SAC's):
  1646.  
  1647. 510 - TWX (USA)
  1648. 610 - TWX (Canada)
  1649. 700 - New Service
  1650. 710 - TWX (USA)
  1651. 800 - WATS
  1652. 810 - TWX (USA)
  1653. 900 - DIAL-IT Services
  1654. 910 - TWX (USA)
  1655.  
  1656. The other area codes never cross state lines, therefore each state
  1657. must have at least one exclusive NPA code. When a community is
  1658. split by a state line, the CO #'s are often interchangeable (ie,
  1659. you can dial the same number from two different area codes).
  1660.  
  1661. TWX (Telex II) consists of 5 teletype-writer area codes. They are
  1662. owned by Western Union. These SAC's may only be reached via other
  1663. TWX machines. These run at 110 baud (last I checked! They are most
  1664. likely faster now!). Besides the TWX #'s, these machines are
  1665. routed to normal telephone #'s. TWX machines always respond with
  1666. an answerback. For example, WU's FYI TWX # is (910) 279-5956. The
  1667. answerback for this service is "WU FYI MAWA".
  1668.  
  1669. If you don't want to but a TWX machine, you can still send TWX
  1670. messages using Easylink [800/325-4112]. However you are gonna have
  1671. to hack your way onto this one!
  1672.  
  1673. 700:
  1674.  
  1675. 700 is currently used by AT&T as a call forwarding service. It is
  1676. targeted towards salesmen on the run. To understand how this
  1677. works, I'll explain it with an example. Let's say Joe Q. Salespig
  1678. works for AT&T security and he is on the run chasing a phreak
  1679. around the country who royally screwed up an important COSMOS
  1680. system. Let's say that Joe's 700 # is (700) 382-5968. Everytime
  1681. Joe goes to a new hotel (or most likely SLEAZY MOTEL), he dials a
  1682. special 700 #, enters a code, and the number where he is staying.
  1683. Now, if his boss received some important info, all he would do is
  1684. dial (700) 382-5968 and it would ring wherever Joe last progammed
  1685. it to. Neat, huh?
  1686.  
  1687. 800:
  1688.  
  1689. This SAC is one of my favourites since it allows for toll free
  1690. calls. INWARD WATS (INWATS), or Inward Wide Area
  1691. Telecommunications Service is the 800 #'s that we are all familiar
  1692. with. 800 #'s are set up in service areas or bands. There are 6 of
  1693. these. Band 6 is the largest and you can call a band 6 # from
  1694. anywhere in the US except the state where the call is terminated
  1695. (that is why most companies have one 800 number for the countery
  1696. and then another one for their state.) Band 5 includes the 48
  1697. contiguous states. All the way down to band 1 which includes only
  1698. the states contiguous to that one. Therefore, less people can
  1699. reach a band 1 INWATS # than a band 6 #.
  1700.  
  1701. Intrastate INWATS #'s (ie, you can call it from only 1 state)
  1702. always have a 2 as the last digit in the exchange (ie, 800-NX2-
  1703. XXXX). The NXX on 800 #'s represent the area where the business is
  1704. located. For example, a # beginning with 800-431 would terminate
  1705. at a NY CO.
  1706.  
  1707. 800 #'s always end up in a hunt series in a CO. This means that it
  1708. tries the first # allocated to the company for their 800 lines; if
  1709. this is busy, it will try the next #, etc. You must have a minimum
  1710. of 2 lines for each 800 #. For example, Travelnet uses a hunt
  1711. series. If you dial (800) 521-8400, it will first try the #
  1712. associated with 8400; if it is busy it will go to the next
  1713. available port, etc. INWATS customers are billed by the number of
  1714. hours of calls made to their #.
  1715.  
  1716. OUTWATS (OUTWARD WATS): OUTWATS are for making outgoing calls
  1717. only. Largecompanies use OUTWATS since they receive bulk-rate
  1718. discounts. Since OUTWATS numbers cannot have incoming calls, they
  1719. are in the format of:
  1720.  
  1721. (800) *XXX-XXXX
  1722.  
  1723. Where * is the digit 0 or 1 (or it may even be designated by a
  1724. letter) which cannot be dialed unless you box the call. The *XX
  1725. identifies the type of service and the areas that the company can
  1726. call.
  1727.  
  1728. Remember:
  1729.  
  1730. INWATS + OUTWATS = WATS EXTENDER
  1731.  
  1732. 900:
  1733.  
  1734. This DIAL-IT SAC is a nationwide dial-it service. It is use for
  1735. taking television polls and other stuff. The first minute
  1736. currently costs an outrageous 50-85 cents and each additional
  1737. minute costs 35-85 cents. Hell takes in a lot of revenue this way!
  1738.  
  1739. Dial (900) 555-1212 to find out what is currently on this service.
  1740.  
  1741. CO CODES
  1742. ~~~~~~~~
  1743.  
  1744. These identify the switching office where the call is to be
  1745. routed. The following CO codes are reserved nationwide:
  1746.  
  1747. 555 - directory assistance
  1748. 844 - time. These are now in!
  1749. 936 - weather the 976 exchange
  1750. 950 - future services
  1751. 958 - plant test
  1752. 959 - plant test
  1753. 970 - plant test (temporary)
  1754. 976 - DIAL-IT services
  1755.  
  1756. Also, the 3 digit ANI & ringback #'s are regarded as plant test
  1757. and are thus reserved. These numbers vary from area to area.
  1758.  
  1759. You cannot dial a 0 or 1 as the first digit of the exchange code
  1760. (unless using a blue box!). This is due to the fact that these
  1761. exchanges (000-199) contains all sorts of interesting shit such as
  1762. conference #'s, operators, test #'s, etc.
  1763.  
  1764. 950:
  1765.  
  1766. Here are the services that are currently used by the 950 exchange:
  1767.  
  1768. 1000 - SPC
  1769. 1022 - MCI Execunet
  1770. 1033 - US Telephone
  1771. 1044 - Allnet
  1772. 1066 - Lexitel
  1773. 1088 - SBS Skyline
  1774.  
  1775. These SCC's (Specialized Common Carriers) are free from fortress
  1776. phones! Also, the 950 exchange will probably be phased out with
  1777. the introduction of Equal Access
  1778.  
  1779. Plant Tests:
  1780.  
  1781. These include ANI, Ringback, and other various tests.
  1782.  
  1783. 976:
  1784.  
  1785. Dial 976-1000 to see what is currently on the service. Also, many
  1786. bbs's have listings of these numbers.
  1787.  
  1788. N11 codes:
  1789. ----------
  1790. Bell is trying to phase out some of these, but they still exist in
  1791. most areas.
  1792.  
  1793. 011 - international dialing prefix
  1794. 211 - coin refund operator
  1795. 411 - directory assistance
  1796. 611 - repair service
  1797. 811 - business office
  1798. 911 - EMERGENCY
  1799.  
  1800. International Dialing
  1801. ~~~~~~~~~~~~~~~~~~~~~
  1802.  
  1803. With International Dialing, the world has been divided into 9
  1804. numbering zones. To make an international call, you must first
  1805. dial: International Prefix + Country code + National #
  1806.  
  1807. In North America, the international dialing prefix is 011 for
  1808. station-to-station calls. If you can dial International #'s
  1809. directly in your area then you have International Direct Distance
  1810. Dialing (IDDD).
  1811.  
  1812. The country code, which varies from 1 to 3 digits, always has the
  1813. world numbering zone as the first digit. For example, the country
  1814. code for the United Kingdom is 44, thus it is in world numbering
  1815. zone 4. Some boards may contain a complete listing of other
  1816. country codes, but here I give you a few:
  1817.  
  1818. 1 - North America (US, Canada, etc.)
  1819. 20 - Egypt
  1820. 258 - Mozambique
  1821. 34 - Spain
  1822. 49 - Germany
  1823. 52 - Mexico (southern portion)
  1824. 7 - USSR
  1825. 81 - Japan
  1826. 98 - Iran (call & hassle those bastards!)
  1827.  
  1828. If you call from an area other than North America, the format is
  1829. generally the same. For example, let's say that you wanted to call
  1830. the White House from Switzerland to tell the prez that his
  1831. numbered bank account is overdrawn (it happens, you know! ha ha).
  1832. First you would dial 00 (the SWISS international dialing refix),
  1833. then 1 (the US country code), followed by 202-456-1414 (the
  1834. national # for the White House. Just ask for Georgy and give him
  1835. the bad news!)
  1836.  
  1837. Also, country code 87 is reserved for Maritime mobile service, ie,
  1838. calling ships:
  1839.  
  1840. 871 - Marisat (Atlantic)
  1841. 871 - Marisat (Pacific)
  1842. 872 - Marisat (Indian)
  1843.  
  1844. International Switching:
  1845. ------------------------
  1846.  
  1847. In North America there are currently 7 no. 4 ESS's that perform
  1848. the duty of ISC (Inter-nation Switching Centers). All
  1849. international calls dialed from numbering zone 1 will be routed
  1850. through one of these "gateway cities". They are:
  1851.  
  1852. 182 - White Plains, NY
  1853. 183 - New York, NY
  1854. 184 - Pittsburgh, PA
  1855. 185 - Orlando, Fl
  1856. 186 - Oakland, CA
  1857. 187 - Denver, CO
  1858. 188 - New York, NY
  1859.  
  1860. The 18X series are operator routing codes for overseas access (to
  1861. be furthur discussed with blue boxes). All international calls use
  1862. a signaling service called CCITT.It is an international standard
  1863. for signaling.
  1864.  
  1865. Ok.. there you go for now! If you wanna read more about this, read
  1866. part two which is the next file #36 in the Jolly Roger's cookbook!
  1867.  
  1868. -Jolly Roger-
  1869.  
  1870.  
  1871. Phone Systems Tutorial part II by The Jolly Roger
  1872.  
  1873. Part II will deal with the various types of operators, office
  1874. heirarchy, & switching equipment.
  1875.  
  1876. Operators
  1877. ~~~~~~~~~
  1878.  
  1879. There are many types of operators in the network and the more
  1880. common ones will be discussed.
  1881.  
  1882. TSPS Operator:
  1883.  
  1884. The TSPS [(Traffic Service Position System) ass opposed to This
  1885. Shitty Phone Service] Operator is probably the bitch (or bastard,
  1886. for the female libertationists out there) that most of us are used
  1887. to having to deal with. Here are his/her responsibilities:
  1888.  
  1889. 1) Obtaning billing information for calling card or third number
  1890. calls
  1891.  
  1892. 2) Identifying called customer on person-to-person calls.
  1893.  
  1894. 3) Obtaining acceptance of charges on collect calls.
  1895.  
  1896. 4) Identifying calling numbers. This only happens when the calling
  1897. # is not automatically recorded by CAMA (Centralized Automatic
  1898. Message Accounting) & forwarded from the local office. This could
  1899. be caused by equipment failures (ANIF- Automatic Number
  1900. Identification Failure) or if the office is not equipped for CAMA
  1901. (ONI- Operator Number Identification).
  1902.  
  1903. <I once has an equipment failure happen to me & the TSPS operator
  1904. came on and said, "What # are you calling FROM?" Out of curiosity,
  1905. I gave her the number to my CO, she thanked me & then I was
  1906. connected to a conversation that appeared to be between a frameman
  1907. & his wife. Then it started ringing the party I wanted to
  1908. originally call & everyone phreaked out (excuse the pun). I
  1909. immediately dropped this dual line conference!
  1910.  
  1911. You should not mess with the TSPS operator since she KNOWS which
  1912. number that you are calling from. Your number will show up on a
  1913. 10-digit LED read-out (ANI board). She also knows whether or not
  1914. you are at a fortress phone & she can trace calls quite readily!
  1915. Out of all of the operators, she is one of the MOST DANGEROUS.
  1916.  
  1917. INWARD operator:
  1918.  
  1919. This operator assists your local TSPS ("0") operatorin connecting
  1920. calls. She will never question a call as long as the call is
  1921. withing HER SERVICE AREA. She can only be reached via other
  1922. operators or by a blue box. From a blue box, you would dial
  1923. KP+NPA+121+ST for the INWARD operator that will help you connect
  1924. any calls within that NPA only. (Blue Boxing will be discussed in
  1925. a future file).
  1926.  
  1927. DIRECTORY ASSISTANCE Operator:
  1928.  
  1929. This is the operator that you are connected to when you dial: 411
  1930. or NPA-555-1212. She does not readily know where you are calling
  1931. from. She does not have access to unlisted numbers, but she DOES
  1932. know if an unlisted # exists for a certain listing.
  1933.  
  1934. There is also a directory assistance operator for deaf people who
  1935. use teletypewriters. If your modem can transfer BAUDOT [(45.5
  1936. baud). One modem that I know of that will do this is the Apple Cat
  1937. acoustic or the Atari 830 acoustic modem. Yea I know they are hard
  1938. to find... but if you wanna do this.. look around!) then you can
  1939. call him/her up and have an interesting conversation. The # is:
  1940. 800-855-1155. They use the standard Telex abbreviations such as GA
  1941. for go ahead. they tend to be nicer and will talk longer than your
  1942. regular operators. Also, they are more vulnerable into being
  1943. talked out of information through the process of "social
  1944. engineering" as Chesire Catalyst would put it.
  1945.  
  1946. <Unfortunately, they do not have access to much. I once
  1947. bullshitted with one of these operators a while back and I found
  1948. out that there are 2 such DA offices that handle TTY. One is in
  1949. Philadelphia and the other is in California. They have approx. 7
  1950. operators each. most of the TTY operators think that their job is
  1951. boring (based on an official "BIOC poll"). They also feel that
  1952. they are under-paid. They actually call up a regular DA # to
  1953. process your request (sorry, no fancy computers!)
  1954.  
  1955. Other operators have access to their own DA by dialing
  1956. KP+NPA+131+ST (MF).
  1957.  
  1958. CN/A operators:
  1959.  
  1960. CN/A Operators are operators that do exactly the opposite of what
  1961. directory assistance operators are for. In my experience, these
  1962. operators know more than the DA op's do & they are more
  1963. susceptable to "social engeneering." It is possible to bullshit a
  1964. CN/A operator for the NON-PUB DA # (ie, you give them the name &
  1965. they give you the unlisted number. See the article on unlisted
  1966. numbers in this cookbook for more info about them.). This is due
  1967. to the fact that they assume that you are a fellow company
  1968. employee. Unfortunately, the AT&T breakup has resulted in the
  1969. break-up of a few NON-PUB DA #'s and policy changes in CN/A
  1970.  
  1971. INTERCEPT Operator:
  1972.  
  1973. The intercept operator is the one that you are connected to when
  1974. there are notenough recordings available to tell you that the #
  1975. has been disconnected or changed. She usually says, "What # you
  1976. callin'?" with a foreign accent. This is the lowest operator
  1977. lifeform. Even though they don't know where you are calling from,
  1978. it is a waste or your time to try to verbally abuse them since
  1979. they usually understand very little English anyway.
  1980.  
  1981. Incidentally, a few area DO have intelligent INTERCEPT Operators.
  1982.  
  1983. OTHER Operators:
  1984.  
  1985. And then there are the: MObile, Ship-to-Shore, Conference, Marine
  1986. Verify, "Leave Word and Call Back," Rout & Rate
  1987. (KP+800+141+1212+ST), & other special operators who have one
  1988. purpose or another in the network.
  1989.  
  1990. Problems with an Operator> Ask to speak to their supervisor... or
  1991. better yet the Group Chief (who is the highest ranking official in
  1992. any office) who is the equivalent of the Madame ina whorehouse.
  1993.  
  1994. By the way, some CO's that willallow you to dial a 0 or 1 as the
  1995. 4th digit, will also allow you to call special operators & other
  1996. fun Tel. Co. #'s without a blue box. This is ver rare, though! For
  1997. example,212-121-1111 will get you a NY Inward Operator.
  1998.  
  1999. Office Hierarchy
  2000. ~~~~~~~~~~~~~~~~
  2001.  
  2002. Every switching office in North America (the NPA system), is
  2003. assigned an office name and class. There are five classes of
  2004. offices numbered 1 through 5. Your CO is most likely a class 5 or
  2005. end office. All long-distance (Toll) calls are switched by a toll
  2006. office which can be a class 4, 3, 2, or 1 office. There is also a
  2007. class 4X office callen an intermediate point. The 4X office is a
  2008. digital one that can have an unattended exchange attached to it
  2009. (known as a Remote Switching Unit (RSU)).
  2010.  
  2011. The following chart will list the Office #, name, & how many of
  2012. those office exist (to the best of my knowledge) in North America:
  2013.  
  2014. Class Name Abb # Existing
  2015. ----- ----------------------- --- -----------------
  2016. > 1 Regional Center RC 12
  2017. > 2 Sectional Center SC 67
  2018. > 3 Primary Center PC 230
  2019. > 4 Toll Center TC 1,300
  2020. > 4P Toll Point TP n/a
  2021. > 4X Intermediate Point IP n/a
  2022. > 5 End Office EO 19,000
  2023. > 6 RSU RSU n/a
  2024.  
  2025. When connecting a call from one party to another, the switching
  2026. equipment usually tries to find the shortest route between the
  2027. class 5 end office of the caller & the class 5 end officeof the
  2028. called party. If no inter-office trunks exist between the two
  2029. parties, it will then move upward to the next highest office for
  2030. servicing calls (Class 4). If the Class 4 office cannot handle the
  2031. call by sending it to another Class 4 or 5 office, it will then be
  2032. sent to the next highest office in the hierarchy (3). The
  2033. switching equipment first uses the high-usage interoffice trunk
  2034. groups, if they are busy then it goes to the fina; trunk groups on
  2035. the next highest level. If the call cannot be connected, you will
  2036. probably get a re-order [120 IPM (interruptions per minute) busy
  2037. signal] signal. At this time, the guys at Network Operations are
  2038. probably shitting in their pants and trying to avoid the dreaded
  2039. Network Dreadlock (as seen on TV!).
  2040.  
  2041. It is also interesting to note that 9 connections in tandem is
  2042. called ring-around-the-rosy and it has never occured in telephone
  2043. history. This would cause an endless loop connection [a neat way
  2044. to really screw up the network].
  2045.  
  2046. The 10 regional centers in the US & the 2 in Canada are all
  2047. interconnected. they form the foundation of the entire telephone
  2048. network. Since there are only 12 of them, they are listed below:
  2049.  
  2050. Class 1 Regional Office Location NPA
  2051. -------------------------------- ---
  2052. Dallas 4 ESS 214
  2053. Wayne, PA 215
  2054. Denver 4T 303
  2055. Regina No. 2SP1-4W (Canada) 306
  2056. St. Louis 4T 314
  2057. Rockdale, GA 404
  2058. Pittsburgh 4E 412
  2059. Montreal No. 1 4AETS (Canada) 504
  2060.  
  2061. That's it for now! More info to come Future update to the
  2062. Cookbook! Have fun! -Jolly Roger-
  2063.  
  2064.  
  2065.  
  2066. Basic Alliance Teleconferencing Courtesy of the Jolly Roger
  2067.  
  2068. Introduction:
  2069. ------------
  2070. This phile will deal with accessing, understanding and using the Alliance
  2071. Teleconferencing Systems.... it has many sections and for best use should
  2072. be printed out...enjoy...
  2073.  
  2074. Alliance:
  2075. --------
  2076. Alliance Teleconferencing is an independant company which allows the general
  2077. public to access and use it's conferencing equipment. Many rumors have
  2078. been floating apound that Alliance is a subsidary of AT&T.
  2079. Well, they are wrong. As stated above, Alliance is an entirely independant
  2080. company. They use sophisticated equipment to allow users to talk to many
  2081. people at once.
  2082.  
  2083. The Number:
  2084. ---------
  2085. Alliance is in the 700 exchange, thus it is not localized, well, not
  2086. in a way. Alliance is only in certain states, and only
  2087. residents of these certain states can access by dialing direct. This,
  2088. however, will be discussed in a later chapter. The numbers for alliance are
  2089. as follows:
  2090. 0-700-456-1000 (chicago)
  2091. -1001 (los angeles)
  2092. -1002 (chicago)
  2093. -1003 (houston)
  2094. -2000 (?)
  2095. -2001 (?)
  2096. -2002 (?)
  2097. -2003 (?)
  2098. -3000 (?)
  2099. -3001 (?)
  2100. -3002 (?)
  2101. -3003 (?)
  2102.  
  2103. The locations of the first 4 numbers are known and i have stated them.
  2104. However, the numbers in the 200x and 300x are not definately known.
  2105. Rumor has it that the pattern repeats itself but this has not been proven.
  2106.  
  2107. Dialing:
  2108. -------
  2109. As stated before, Alliance is only in certain stated and only these states
  2110. can access them via dialing direct. However, dialing direct causes your
  2111. residence to be charged for the conference and conference bills are not low!!!
  2112. Therefore, many ways have been discovered to start a conference without
  2113. having it billed to ones house. They are as follows:
  2114.  
  2115. 1) Dialing through a PBX
  2116. 2) Incorporating a Blue Box
  2117. 3) Billing to a loop
  2118. 4) Billing to a forwarded call
  2119.  
  2120. I am sure there are many more but these are the four i will deal with.
  2121.  
  2122. Dialing through a PBX:
  2123. ------- ------- - ---
  2124. Probably the easiest method of creating a free conference is through a PBX.
  2125. Simply call one in a state that has Alliance, input the PBX's code,
  2126. dial 9 for an outside line and then dial alliance.
  2127. An example of this would be:
  2128.  
  2129. PBX: 800-241-4911
  2130.  
  2131. When it answers it will give you a tone. At this tone input your code.
  2132.  
  2133. Code: 1234
  2134.  
  2135. After this you will receive another tone, now dial 9 for an outside line.
  2136. You will now hear a dial tone. Simply dial Alliance from this point and
  2137. the conference will be billed to the PBX.
  2138.  
  2139. Using a Blue Box:
  2140. ----- - ---- ---
  2141. Another rather simple way of starting a conference is with a Blue Box.
  2142. The following procedure is how to box a conference:
  2143. Dial a number to box off of. In this example we will use 609-609-6099
  2144. When the party answers hit 2600hz. This will cause the fone company's
  2145. equipment to think that you have hung up. You will hear a <beep><kerchunk>
  2146. You have now 'seized' a trunk. After this, switch to multi-frequency
  2147. and dial:
  2148.  
  2149. KP-0-700-456-x00x-ST
  2150. KP=KP tone on Blue Box
  2151. x=variable between 1 and 3
  2152. ST=ST tone on Blue Box
  2153. The equipment now thinks that the operator has dialed Alliance from her
  2154. switchboard and the conference shall be billed there. Since Blue Boxing
  2155. is such a large topic, this is as far as I will go into it's uses.
  2156.  
  2157. Billing to a loop:
  2158. ------- -- - ----
  2159. A third method of receiving a free conference is by billing out to a
  2160. loop. A loop is 2 numbers that when two people call, they can talk
  2161. to each other. You're saying woop-tee-do right? Wrong! Loops can be
  2162. <very> usefull to phreaks. First, dial alliance direct. After going
  2163. through the beginning procedure, which will be discussed later in this
  2164. tutorial, dial 0 and wait for an Alliance operator. When she answers
  2165. tell her you would like to bill the conference to such and such a
  2166. number. (A loop where your phriend is on the other side) She will then
  2167. call that number to receive voice verification.
  2168. Of course your phriend will be waiting and will accept the charges.
  2169. Thus, the conference is billed to the loop.
  2170.  
  2171. Billing to call forwarding:
  2172. ------- -- ---- ----------
  2173. When you dial a number that is call forwarded, it is first answered by
  2174. the original location, then forwarded. The original location will
  2175. hang up if 2600hz is received from only ond end of the line.
  2176. Therefore, if you were to wait after the forwarded residence answered,
  2177. you would receive the original location's dial tone.
  2178.  
  2179. Example:
  2180. Dial 800-325-4067
  2181. The original residence would answer, then forward the call, a second
  2182. type of ringing would be heard. When this second residence answers
  2183. simply wait until they hang up. After about twenty seconds you will
  2184. then receive the original residence's dial tone since it heard 2600hz
  2185. from one end of the line. Simply dial Alliance from this point and the
  2186. conference will be billed to the original residence.
  2187. These are the four main ways to receive a free conference. I am sure
  2188. many more exist, but these four are quite handy themselves.
  2189.  
  2190. Logon Procedure:
  2191. ----- ---------
  2192. Once Alliance answers you will hear a two-tone combination. This is their
  2193. way of saying 'How many people do you want on the conference dude?'
  2194. Simply type in a 2-digit combination, depending on what bridge of Alliance
  2195. you are on, between 10 and 59. After this either hit '*' to cancel the
  2196. conference size and inout another or hit '#' to continue.
  2197. You are now in Alliance Teleconferencing and are only seconds away from
  2198. having your own roaring conference going strong!!!
  2199.  
  2200. Dialing in Conferees:
  2201. ------- -- ---------
  2202. To dial your first conferee, dial 1+npa+pre+suff and await his/her answer.
  2203.  
  2204. npa=area code
  2205. pre=prefix
  2206. suff=suffix
  2207.  
  2208. If the number is busy, or if no one answers simply hit '*' and your call
  2209. will be aborted. But, if they do answer, hit the '#' key.
  2210. This will add them to the conference.
  2211. Now commence dialing other conferees.
  2212.  
  2213. Joining Your Conference:
  2214. ------- ---- ----------
  2215. To join your conference from control mode simply hit the '#' key.
  2216. Within a second or two you will be chatting with all your buddies.
  2217. To go back into control mode, simply hit the '#' key again.
  2218.  
  2219. Transferring Control:
  2220. ------------ -------
  2221. To transfer control to another conferee, go into control mode, hit the
  2222. # 6+1+npa+pre+suff of the conferee you wish to give control to. If after,
  2223. you wish to abort this transfer hit the '*' key.
  2224.  
  2225. <note>:Transfer of control is often not available. When you
  2226. receive a message stating this, you simply cannot transfer control.
  2227.  
  2228. Muted Conferences:
  2229. ----- -----------
  2230. To request a muted conference simply hit the 9 key. I am not exactly
  2231. sure what a muted conference is but it is probably a way to keep unwanted
  2232. eavesdroppers from listening in.
  2233.  
  2234. Dialing Alliance Operators:
  2235. ------- -------- ---------
  2236. Simply dial 0 as you would from any fone and wait for the operator to answer.
  2237.  
  2238. Ending Your Conference:
  2239. ------ ---- ----------
  2240. To end your conference all together, that is kick everyone including
  2241. yourself off, go into control mode and hit '*'...after a few seconds
  2242. simply hang up. Your conference is over.
  2243.  
  2244. Are Alliance Operators Dangerous?
  2245. --- -------- --------- ---------
  2246. No. Not in the least. The worst they can do to you while you are having
  2247. a conference is drop all conferees including yourself. This is in no
  2248. way harmful, just a little aggravating.
  2249.  
  2250. Alliance and Tracing:
  2251. -------- --- -------
  2252. Alliance can trace, as all citizens of the United States can.
  2253. But this has to all be pre-meditated and AT&T has to be called and it's
  2254. really a large hastle, therefore, it is almost never done. Alliance simply
  2255. does not want it known that teenagers are phucking them over.
  2256. The only sort of safety equipment Alliance has on-line is a simple pen
  2257. register. This little device simply records all the numbers of the
  2258. conferees dialed. No big deal. All Alliance can do is call up that persons
  2259. number, threaten and question. However, legally, they can do nothing because
  2260. all you did was answer your fone.
  2261.  
  2262. <note>:Almost all instructions are told to the person in command by Alliance
  2263. recordings. A lot of this tutorial is just a listing of those
  2264. commands plus information gathered by either myself or the phellow
  2265. phreaks of the world!!!
  2266.  
  2267. (written by the Trooper)
  2268.  
  2269. Aqua Box Plans by Jolly Roger
  2270.  
  2271. Every true phreaker lives in fear of the dreadded F.B.I. 'Lock In Trace.'
  2272. For a long time, it was impossible to escape from the Lock In Trace.
  2273. This box does offer an escape route with simple directions to it.
  2274. This box is quite a simple concept, and almost any phreaker with basic
  2275. electronics knowledge can construct and use it.
  2276.  
  2277. The Lock In Trace
  2278. ------------------
  2279. A lock in trace is a device used by the F.B.I. to lock into the phone
  2280. users location so that he can not hang up while a trace is in progress.
  2281. For those of you who are not familiar with the conecpt of 'locking in',
  2282. then here's a brief desciption. The F.B.I. can tap into a conversation,
  2283. sort of like a three-way call connection. Then, when they get there,
  2284. they can plug electricity into the phone line. All phone connections
  2285. are held open by a certain voltage of electricity.
  2286. That is why you sometimes get static and faint connections when you are
  2287. calling far away, because the electricity has trouble keeping the line
  2288. up. What the lock in trace does is cut into the line and generate that same
  2289. voltage straight into the lines. That way, when you try and hang up, voltage
  2290. is retained. Your phone will ring just like someone was calling you
  2291. even after you hang up. (If you have call waiting, you should understand
  2292. better about that, for call waiting intersepts the electricity and makes
  2293. a tone that means someone is going through your line. Then, it is a matter
  2294. of which voltage is higher. When you push down the receiver,then it see-saws
  2295. the electricity to the other side. When you have a person on each line
  2296. it is impossible to hang up unless one or both of them will hang up.
  2297. If you try to hang up, voltage is retained, and your phone will ring.
  2298. That should give you an understanding of how calling works. Also, when
  2299. electricity passes through a certain point on your phone, the electricity
  2300. causes a bell to ring, or on some newer phones an electronic ring to sound.)
  2301. So, in order to eliminate the trace, you somehow must lower the
  2302. voltage level on your phone line. You should know that every time
  2303. someone else picks up the phone line, then the voltage does decrease
  2304. a little. In the first steps of planning this out, Xerox suggested getting
  2305. about a hundred phones all hooked into the same line that could all
  2306. be taken off the hook at the same time. That would greatly decrease the
  2307. voltage level. That is also why most three-way connections that are using
  2308. the bell service three way calling (which is only $3 a month) become quite
  2309. faint after a while. By now, you should understand the basic idea. You
  2310. have to drain all of the power out of the line so the voltage can
  2311. not be kept up. Rather sudden draining of power could quickly short out
  2312. the F.B.I. voltage machine, because it was only built to sustain
  2313. the exact voltage nessecary to keep the voltage out. For now, imagine
  2314. this. One of the normal Radio Shack generators that you can go
  2315. pick up that one end of the cord that hooks into the central box has a
  2316. phone jack on it and the other has an electrical plug. This way, you
  2317. can "flash" voltage through the line, but cannot drain it. So, some
  2318. modifications have to be done.
  2319.  
  2320. Materials
  2321. ----------
  2322. A BEOC (Basic Electrical Output Socket), like a small lamp-type
  2323. connection, where you just have a simple plug and wire that would plug
  2324. into a light bulb.
  2325. One of cords mentioned above, if you can't find one then construct your
  2326. own... Same voltage connection, but the restrainor must be built in (I.E.
  2327. The central box)
  2328. Two phone jacks (one for the modem, one for if you are being traced to
  2329. plug the aqua box into)
  2330. Some creativity and easy work.
  2331.  
  2332. *Notice: No phones have to be destroyed/modified to make this box, so
  2333. don't go out and buy a new phone for it!
  2334.  
  2335. Procedure
  2336. ---------
  2337. All right, this is a very simple procedure. If you have the BEOC, it could
  2338. drain into anything: a radio, or whatever. The purpose of having
  2339. that is you are going to suck the voltage out from the phone line into
  2340. the electrical appliance so there would be no voltage left to lock
  2341. you in with.
  2342. 1)Take the connection cord. Examine the plug at the end. It should have
  2343. only two prongs. If it has three, still, do not fear. Make sure the
  2344. electrical appliance is turned off unless you wanna become a crispy critter
  2345. while making this thing. Most plugs will have a hard plastic design on the
  2346. top of them to prevent you from getting in at the electrical wires inside.
  2347. Well, remove it. If you want to keep the plug (I don't see why...)
  2348. then just cut the top off. When you look inside, Lo and Behold,
  2349. you will see that at the base of the prongs there are a few wires
  2350. connecting in. Those wires conduct the power into the appliance.
  2351. So, you carefully unwrap those from the sides and pull them out until
  2352. they are about an inch ahead of the prongs. If you don't wanna keep the
  2353. jack, then just rip the prongs out. If you are, cover the prongs with
  2354. insultation tape so they will not connect with the wires when the power
  2355. is being drained from the line.
  2356. 2)Do the same thing with the prongs on the other plug, so you have the
  2357. wires evenly connected. Now, wrap the end of the wires around each other.
  2358. If you happen to have the other end of the voltage cord hooked into the
  2359. phone, stop reading now, you're too fucking stupid to continue. After
  2360. you've wrapped the wires around each other, then cover the whole thing with
  2361. the plugs with insulating tape. Then, if you built your own control box
  2362. or if you bought one, then cram all the wires into it and reclose it.
  2363. That box is your ticket out of this.
  2364. 3)Re-check everything to make sure it's all in place. This is a pretty
  2365. flimsy connection, but on later models when you get more experienced at
  2366. it then you can solder away at it and form the whole device into one
  2367. big box, with some kind of cheap mattel hand-held game inside to be
  2368. the power connector. In order to use it, just keep this box handy.
  2369. Plug it into the jack if you want, but it will slightly lower the
  2370. voltage so it isn't connected. When you plug it in, if you see sparks,
  2371. unplug it and restart the whole thing. But if it just seems fine then leave it.
  2372.  
  2373. Use
  2374. ----
  2375. Now, so you have the whole thing plugged in and all... Do not use this
  2376. unless the situation is desperate! When the trace has gone on, don't
  2377. panic, unplug your phone, and turn on the appliance that it was hooked
  2378. to. It will need energy to turn itself on, and here's a great source...
  2379. The voltage to keep a phone line open is pretty small and a simple light
  2380. bulb should drain it all in and probably short the F.B.I. computer at
  2381. the same time.
  2382.  
  2383. Happy boxing and stay free! ------------Jolly Roger
  2384.  
  2385.  
  2386. Hindenberg Bomb by the Jolly Roger
  2387.  
  2388. Needed:1 Balloon
  2389. 1 Bottle
  2390. 1 Liquid Plumr
  2391. 1 Piece Aluminum FoilL
  2392. 1 Length Fuse
  2393.  
  2394. Fill the bottle 3/4 full with Liquid Plumr and add a little piece of
  2395. aluminum foil to it. Put the balloon over the neck of the bottle until
  2396. the balloon is full of the resulting gas. This is highly flammable
  2397. hydrogen.
  2398. Now tie the baloon. Now light the fuse, and let it rise.
  2399. When the fuse contacts the balloon, watch out!!!
  2400.  
  2401. -------[=How to Kill Someone==]------------[=WITH YOUR BARE HANDS=]-----
  2402.  
  2403. AN EXCERPT FROM THE ANARCHISTS COOKBOOK.....
  2404. Courtesy of the Jolly Roger
  2405.  
  2406. This file will explain the basics of hand-to-hand combat, and will tell
  2407. of the best places to strike and kill an enemy...
  2408. When engaged in hand-to-hand combat, your life is always at stake.
  2409. There is only one purpose in combat, and that is to kill your enemy.
  2410. Never face an enemy with the idea of knocking him out.
  2411. The chances are extremely good that he will kill YOU instead.
  2412. When a weapon is not available, one must resort to the full
  2413. use of his natural weapons. The natural weapons are:
  2414.  
  2415. 1. The knife edge of your hands.
  2416. 2. Fingers folded at the second joint or knuckle.
  2417. 3. The protruding knuckle of your second finger.
  2418. 4. The heel of your hand.
  2419. 5. Your boot
  2420. 6. Elbows
  2421. 7. Knees
  2422. 8. and Teeth.
  2423.  
  2424. Attacking is a primary factor. A fight was never
  2425. won by defensive action. Attack with all of your strength.
  2426. At any point or any situation, some vulnerable point on your enemies
  2427. body will be open for attack. Do this while screaming as screaming has
  2428. two purposes.
  2429.  
  2430. 1. To frighten and confuse your enemy.
  2431. 2. To allow you to take a deep breath which, in turn, will put
  2432. more oxygen in your blood stream. Your balance and balance of your
  2433. enemy are two inportant factors; since, if you succeed in making
  2434. your enemy lose his balance, the chances are nine to
  2435. one that you can kill him in your next move. The best over-all
  2436. stance is where your feet are spread about shoulders width apart,
  2437. with your right foot about a foot ahead of the left. Both arms
  2438. should be bent at the elbows parallel to each other. Stand on the
  2439. balls of your feet and bend your waist slightly. Kinda of like a
  2440. boxer's crouch. Employing a sudden movement or a scream or yell can
  2441. throw your enemy off-balance. There are many vulnerable points of
  2442. the body. We will cover them now:
  2443.  
  2444. Eyes:Use your fingers in a V-shape and attack in gouging motion.
  2445.  
  2446. Nose:(Extremely vulnerable) Strike with the knife edge of the hand
  2447. along the bridge, which will cause breakage, sharp pain, temporary
  2448. blindness, and if the blow is hard enough, death. Also, deliver a blow
  2449. with the heel of your hand in an upward motion, this›will shove the
  2450. bone up into the brain causing death.
  2451.  
  2452. Adam's Apple: This spot is usually pretty well protected, but if you
  2453. get the chance, strike hard with the knife edge of your hand. This
  2454. should sever the wind-pipe, and then it's all over in a matter of
  2455. minutes.
  2456.  
  2457. Temple: There is a large artery up here, and if you hit it hard
  2458. enough, it will cause death. If you manage to knock your enemy down,
  2459. kick him in the temple, and he'll never get up again.
  2460.  
  2461. Back of the Neck: A rabbit punch, or blow delivered to the base of
  2462. the neck can easily break it, but to be safe, it is better to
  2463. use the butt of a gun or some other heavy blunt object.
  2464. Upper lip: A large network of nerves are located. These nerves are
  2465. extrememly close to the skin. A sharp upward blow will cause extreme
  2466. pain, and unconciosness.
  2467.  
  2468. Ears: Coming up from behind an enemy and cupping the hands in a clapping
  2469. motion over the victims ears can kill him immediately. The vibrations
  2470. caused from the clapping motion will burst his eardrums, and cause
  2471. internal bleeding in the brain.
  2472.  
  2473. Groin: A VERY vulnerable spot. If left open, get it with knee
  2474. hard, and he'll buckle over very fast.
  2475.  
  2476. Kidneys: A large nerve that branches off to the spinal cord comes very
  2477. close to the skin at the kidneys. A direct blow with the knife edge
  2478. of your hand can cause death.
  2479.  
  2480. There are many more ways to kill and injure an enemy, but these should
  2481. work best for the average person. This is meant only as information
  2482. and I would not recommend that you use this for a simple High School Brawl.
  2483. Use these methods only, in your opinion, if your life is in danger.
  2484. Any one of these methods could very easily kill or cause permanent damage
  2485. to someone. One more word of caution, you should practice these moves
  2486. before using them on a dummy, or a mock battle with a friend.
  2487. (You don't have to actually hit him to practice, just work on accuracy.)
  2488.  
  2489. Phone Systems Tutorial III by The Jolly Roger
  2490.  
  2491. PREFACE:
  2492.  
  2493. THIS ARTICLE WILL FOCUS PRIMARILY ON THE STANDARD WESTERN ELECTRIC SINGLE-
  2494. SLOT COIN TELEPHONE (AKA FORTRESS FONE) WHICH CAN BE DIVIDED INTO 3 TYPES:
  2495. - DIAL-TONE FIRST (DTF)
  2496. - COIN-FIRST (CF): (IE, IT WANTS YOUR $ BEFORE YOU RECEIVE A DIAL TONE)
  2497. - DIAL POST-PAY SERVICE (PP): YOU PAYAFTER THE PARTY ANSWERS
  2498.  
  2499. DEPOSITING COINS (SLUGS):
  2500. -------------------------
  2501. ONCE YOU HAVE DEPOSITED YOUR SLUG INTO A FORTRESS, IT IS SUBJECTED TO A
  2502. GAMUT OF TESTS. THE FIRST OBSTACAL FOR A SLUG IS THE
  2503. MAGNETIC TRAP. THIS WILL STOP ANY LIGHT-WEIGHT MAGNETIC SLUGS AND COINS.
  2504. IF IT PASSES THIS, THE SLUG IS THEN CLASSIFIED AS A NICKEL, DIME, OR
  2505. QUARTER. EACH SLUG IS THEN CHECKED FOR APPROPRIATE SIZE AND WEIGHT. IF THESE
  2506. TESTS ARE PASSED, IT WILL THEN TRAVEL THROUGH A NICKEL, DIME, OR QUARTER
  2507. MAGNET AS APPROPRIATE. THESE MAGNETS SET UP AN EDDY CURRENT EFFECT WHICH
  2508. CAUSES COINS OF THE APPROPRIATE CHARACTERISTICS TO SLOW DOWN SO THEY
  2509. WILL FOLLOW THE CORRECT TRAJECTORY. IF ALL GOES WELL, THE COIN WILL FOLLOW THE
  2510. CORRECT PATH (SUCH AS BOUNCING OFF OF THE NICKEL ANVIL) WHERE IT WILL
  2511. HOPEFULLY FALL INTO THE NARROW ACCEPTED COIN CHANNEL.
  2512. THE RATHER ELABORATE TESTS THAT ARE PERFORMED AS THE COIN TRAVELS DOWN THE
  2513. COIN CHUTE WILL STOP MOST SLUGS AND OTHER UNDESIRABLE COINS, SUCH AS
  2514. PENNIES, WHICH MUST THEN BE RETRIEVED USING THE COIN RELEASE LEVER.
  2515. IF THE SLUG MIRACULOUSLY SURVIVES THE GAMUT, IT WILL THEN STRIKE THE
  2516. APPROPRIATE TOTALIZER ARM CAUSING A RATCHET WHEEL TO ROTATE ONCE FOR EVERY
  2517. 5-CENT INCREMENT (EG, A QUARTER WILL CAUSE IT TO ROTATE 5 TIMES).
  2518. THE TOTALIZER THEN CAUSES THE COIN SIGNAL OSCILLATOR TO READOUT A DUAL-
  2519. FREQUENCY SIGNAL INDICATING THE VALUE DEPOSITED TO ACTS (A COMPUTER) OR THE
  2520. TSPS OPERATOR. THESE ARE THE SAME TONES USED BY PHREAKS IN THE INFAMOUS RED
  2521. BOXES. FOR A QUARTER, 5 BEEP TONES ARE
  2522. OUTPULSED AT 12-17 PULSES PER SECOND (PPS). A DIME CAUSES 2 BEEP TONES AT
  2523. 5 - 8.5 PPS WHILE A NICKEL CAUSES ONE BEEP TONE AT 5 - 8.5 PPS. A BEEP
  2524. CONSISTS OF 2 TONES: 2200 + 1700 HZ. A RELAY IN THE FORTRESS CALLED THE "B
  2525. RELAY" (YES, THERE IS ALSO AN 'A RELAY') PLACES A CAPACITOR ACROSS THE
  2526. SPEECH CIRCUIT DURING TOTALIZER READOUT TO PREVENT THE "CUSTOMER" FROM
  2527. HEARING THE RED BOX TONES. IN OLDER 3 SLOT PHONES: ONE BELL
  2528. (1050-1100 HZ) FOR A NICKEL, TWO BELLS FOR A DIME, AND ONE GONG (800 HZ) FOR A
  2529. QUARTER ARE USED INSTEAD OF THE MODERN DUAL-FREQUENCY TONES.
  2530.  
  2531. =============
  2532. =TSPS & ACTS=
  2533. =============
  2534.  
  2535. WHILE FORTRESSES ARE CONNECTED TO THE CO OF THE AREA, ALL TRANSACTIONS ARE
  2536. HANDLED VIA THE TRAFFIC SERVICE POSITION SYSTEM (TSPS). IN AREAS THAT
  2537. DO NOT HAVE ACTS, ALL CALLS THAT REQUIRE OPERATOR ASSISTANCE, SUCH AS
  2538. CALLING CARD AND COLLECT, ARE AUTOMATICALLY ROUTED TO A TSPS OPERATOR
  2539. POSITION. IN AN EFFORT TO AUTOMATE FORTRESS
  2540. SERVICE, A COMPUTER SYSTEM KNOWN AS AUTOMATED COIN TOLL SERVICE (ACTS) HAS
  2541. BEEN IMPLEMENTED IN MANY AREAS. ACTS LISTENS TO THE RED BOX SIGNALS FROM THE
  2542. FONES AND TAKES APPROPRIATE ACTION. IT IS ACTS WHICH SAYS, "TWO DOLLARS PLEASE
  2543. (PAUSE) PLEASE DEPOSIT TWO DOLLARS FOR THE NEXT TEN SECONDS" (AND OTHER
  2544. VARIATIONS). ALSO, IF YOU TALK FOR MORE THAN THREE MINUTES AND THEN HANG-UP,
  2545. ACTS WILL CALL BACK AND DEMAND YOUR MONEY. ACTS IS ALSO RESPONSIBLE FOR
  2546. AUTOMATED CALLING CARD SERVICE. ACTS ALSO PROVIDE TROUBLE DIAGNOSIS FOR
  2547. CRAFTSPEOPLE (REPAIRMEN SPECIALIZING IN FORTRESSES). FOR EXAMPLE, THERE IS A
  2548. COIN TEST WHICH IS GREAT FOR TUNING UP RED BOXES. IN MANY AREAS THIS TEST CAN
  2549. BE ACTIVATED BY DIALING 09591230 AT A FORTRESS (THANKS TO KARL MARX FOR THIS
  2550. INFORMATION). ONCE ACTIVATED IT WILL REQUEST THAT YOU DEPOSIT VARIOUS COINS.
  2551. IT WILL THEN IDENTIFY THE COIN AND OUTPULSE THE APPROPRIATE RED BOX
  2552. SIGNAL. THE COINS ARE USUALLY RETURNED WHEN YOU HANG UP.
  2553. TO MAKE SURE THAT THERE IS ACTUALLY MONEY IN THE FONE, THE CO INITIATES A
  2554. "GROUND TEST" AT VARIOUS TIMES TO DETERMINE IF A COIN IS ACTUALLY IN THE
  2555. FONE. THIS IS WHY YOU MUST DEPOSIT AT LEAST A NICKEL IN ORDER TO USE A RED
  2556. BOX!
  2557.  
  2558. GREEN BOXES:
  2559. ------------
  2560.  
  2561. PAYING THE INITIAL RATE IN ORDER TO USE A RED BOX (ON CERTAIN FORTRESSES)
  2562. LEFT A SOUR TASTE IN MANY RED BOXER'S MOUTHS THUS THE GREEN BOX WAS INVENTED.
  2563. THE GREEN BOX GENERATES USEFUL TONES SUCH AS COIN COLLECT, COIN RETURN, AND
  2564. RINGBACK. THESE ARE THE TONES THAT ACTS OR THE TSPS OPERATOR WOULD SEND TO
  2565. THE CO WHEN APPROPRIATE. UNFORTUNATELY, THE GREEN BOX CANNOT BE USED AT A
  2566. FORTRESS STATION BUT IT MUST BE USED BY THE CALLED PARTY.
  2567.  
  2568. HERE ARE THE TONES:
  2569. COIN COLLECT 700 + 1100 HZ
  2570. COIN RETURN 1100 + 1700 HZ
  2571. RINGBACK 700 + 1700 HZ
  2572. BEFORE THE CALLED PARTY SENDS ANY OF THESE TONES, AN OPERATOR RELEASED
  2573. SIGNAL SHOULD BE SENT TO ALERT THE MF DETECTORS AT THE CO. THIS CAN BE
  2574. ACCOMPLISHED BY SENDING 900 + 1500 HZ OR A SINGLE 2600 HZ WINK (90 MS)
  2575. FOLLOWED BY A 60 MS GAP AND THEN THE APPROPRIATE SIGNAL FOR AT LEAST 900 MS.
  2576. ALSO, DO NOT FORGET THAT THE INITIAL RATE IS COLLECTED SHORTLY BEFORE THE 3
  2577. MINUTE PERIOD IS UP. INCIDENTALLY, ONCE THE ABOVE MF TONES
  2578. FOR COLLECTING AND RETURNING COINS REACH THE CO, THEY ARE CONVERTED INTO
  2579. AN APPROPRIATE DC PULSE (-130 VOLTS FOR RETURN & +130 VOLTS FOR COLLECT). THIS
  2580. PULSE IS THEN SENT DOWN THE TIP TO THE FORTRESS. THIS CAUSES THE COIN RELAY
  2581. TO EITHER RETURN OR COLLECT THE COINS. THE ALLEGED "T-NETWORK" TAKES ADVANTAGE
  2582. OF THIS INFORMATION. WHEN A PULSE FOR COIN COLLECT (+130 VDC) IS SENT DOWN
  2583. THE LINE, IT MUST BE GROUNDED SOMEWHERE. THIS IS USUALLY EITHER THE
  2584. YELLOW OR BLACK WIRE. THUS, IF THE WIRES ARE EXPOSED, THESE WIRES CAN BE
  2585. CUT TO PREVENT THE PULSE FROM BEING GROUNDED. WHEN THE THREE MINUTE
  2586. INITIAL PERIOD IS ALMOST UP, MAKE SURE THAT THE BLACK & YELLOW WIRES ARE
  2587. SEVERED; THEN HANG UP, WAIT ABOUT 15 SECONDS IN CASE OF A SECOND PULSE,
  2588. RECONNECT THE WIRES, PICK UP THE FONE, HANG UP AGAIN, AND IF ALL GOES WELL IT
  2589. SHOULD BE "JACKPOT" TIME.
  2590.  
  2591. PHYSICAL ATTACK:
  2592. ----------------
  2593.  
  2594. A TYPICAL FORTRESS WEIGHS ROUGHLY 50 LBS. WITH AN EMPTY COIN BOX. MOST OF
  2595. THIS IS ACCOUNTED FOR IN THE ARMOR PLATING. WHY ALL THE SECURITY? WELL,
  2596. BELL CONTRIBUTES IT TO THE FOLLOWING: "SOCIAL CHANGES DURING THE 1960'S
  2597. MADE THE MULTISLOT COIN STATION A PRIME TARGET FOR: VANDALISM, STRONG ARM
  2598. ROBBERY, FRAUD, AND THEFT OF SERVICE. THIS BROUGHT ABOUT THE INTRODUCTION OF
  2599. THE MORE RUGGED SINGLE SLOT COIN STATION AND A NEW ENVIRONMENT FOR COIN
  2600. SERVICE." AS FOR PICKING THE LOCK, I WILL QUOTE MR. PHELPS:
  2601. "WE OFTEN FANTASIZE ABOUT 'PICKING THE LOCK' OR 'GETTING A MASTER
  2602. KEY.' WELL, YOU CAN FORGET ABOUT IT. I DON'T LIKE TO DISCOURAGE PEOPLE, BUT
  2603. IT WILL SAVE YOU FROM WASTING ALOT OF OUR TIME--TIME WHICH CAN BE PUT TO
  2604. BETTER USE (HEH, HEH)." AS FOR PHYSICAL ATTACK, THE COIN PLATE
  2605. IS SECURED ON ALL FOUR SIDE BY HARDENED STEEL BOLTS WHICH PASS THROUGH TWO
  2606. SLOTS EACH. THESE BOLTS ARE IN TURN INTERLOCKED BY THE MAIN LOCK.
  2607. ONE PHREAK I KNOW DID MANAGE TO TAKE ONE OF THE 'MOTHERS' HOME (WHICH WAS
  2608. ATTACHED TO A PIECE OF PLYWOOD AT A CONSTRUCTION SITE; OTHERWISE, THE
  2609. PERMANENT ONES ARE A BITCH TO DETACH FROM THE WALL!). IT TOOK HIM ALMOST
  2610. TEN HOURS TO OPEN THE COIN BOX USING A POWER DRILL, SLEDGE HAMMERS, AND CROW
  2611. BARS (WHICH WAS EMPTY -- PERHAPS NEXT TIME, HE WILL DEPOSIT A COIN FIRST TO
  2612. HEAR IF IT SLUSHES DOWN NICELY OR HITS THE EMPTY BOTTOM WITH A CLUNK.)
  2613. TAKING THE FONE OFFERS A HIGHER MARGIN OF SUCCESS. ALTHOUGH THIS MAY BE
  2614. DIFFICULT OFTEN REQUIRING BRUTE FORCE AND THERE HAS BEEN SEVERAL CASES OF
  2615. BACK AXLES BEING LOST TRYING TO TAKE DOWN A FONE! A QUICK AND DIRTY WAY TO
  2616. OPEN THE COIN BOX IS BY USING A SHOTGUN. IN DETROIT, AFTER ECOLOGISTS
  2617. CLEANED OUT A MUNICIPAL POND, THEY FOUND 168 COIN PHONE RIFLED.
  2618. IN COLDER AREAS, SUCH AS CANADA, SOME SHREWD PEOPLE TAPE UP THE FONES USING
  2619. DUCT TAPE, POUR IN WATER, AND COME BACK THE NEXT DAY WHEN THE WATER WILL HAVE
  2620. FROZE THUS EXPANDING AND CRACKING THE FONE OPEN.
  2621. IN ONE CASE, "UNAUTHORIZED COIN COLLECTORS" WHERE CAUGHT WHEN THEY
  2622. BROUGHT $6,000 IN CHANGE TO A BANK AND THE BANK BECAME SUSPICIOUS...
  2623. AT ANY RATE, THE MAIN LOCK IS AN EIGHT LEVEL TUMBLER LOCATED ON THE RIGHT SIDE
  2624. OF THE COIN BOX. THIS LOCK HAS 390,625 POSSIBLE POSITIONS (5 ^ 8, SINCE THERE
  2625. ARE 8 TUMBLERS EACH WITH 5 POSSIBLE POSITIONS) THUS IT IS HIGHLY PICK
  2626. RESISTANT! THE LOCK IS HELD IN PLACE BY 4 SCREWS. IF THERE IS SUFFICIENT
  2627. CLEARANCE TO THE RIGHT OF THE FONE, IT IS CONCEIVABLE TO PUNCH OUT THE SCREWS
  2628. USING THE DRILLING PATTERN BELOW (PROVIDED BY ALEXANDER MUNDY IN TAP #32):
  2629.  
  2630. ====================================
  2631. !! ^
  2632. !! !
  2633. ! 1- 3/16 " !! !
  2634. !<--- --->!! 1-1/2"
  2635. -------------------- !
  2636. ! ! !! ! !
  2637. ! (+) (+)-! -----------
  2638. ---! !! ! ^
  2639. ! ! !! ! !
  2640. ! ! (Z) !! ! !
  2641. ! ! !! ! 2-3/16"
  2642. ---! !! ! !
  2643. ! (+) (+) ! !
  2644. ! !! ! !
  2645. -------------------- -----------
  2646. !!
  2647. !!
  2648. (Z) KEYHOLE (+) SCREWS
  2649. !!
  2650. ===================================
  2651.  
  2652. AFTER THIS IS ACCOMPLISHED, THE LOCK CAN BE PUSHED BACKWARDS DISENGAGING
  2653. THE LOCK FROM THE COVER PLATE. THE FOUR BOLTS OF THE COVER PLATE CAN THEN
  2654. BE RETRACTED BY TURNING THE BOLTWORKS WITH A SIMPLE KEY IN THE SHAPE OF THE
  2655. HOLE ON THE COIN PLATE (SEE DIAGRAM BELOW). OF COURSE, THERE ARE OTHER
  2656. METHODS AND DRILLING PATTERNS.
  2657.  
  2658. :-------------------------------------:
  2659. _
  2660. ! !
  2661. ( )
  2662. !_!
  2663. [ROUGHLY]
  2664. DIAGRAM OF COVER PLATE KEYHOLE
  2665. :-------------------------------------:
  2666.  
  2667. THE TOP COVER USES A SIMILAR (BUT NOT AS STRONG) LOCKING METHOD WITH THE
  2668. KEYHOLE DEPICTED ABOVE ON THE TOP LEFT HIDE AND A REGULAR LOCK (PROBABLY
  2669. TUMBLER ALSO) ON THE TOP RIGHT-HAND SIDE. IT IS INTERESTING TO EXPERIMENT
  2670. WITH THE COIN SHUTE AND THE FORTRESSES OWN "RED BOX" (WHICH BELL DIDN'T HAVE
  2671. THE 'BALLS' TO COLOR RED).
  2672.  
  2673. MISCELLANEOUS:
  2674. --------------
  2675.  
  2676. IN A FEW AREAS (RURAL & CANADA), POST-PAY SERVICE EXISTS. WITH THIS TYPE OF
  2677. SERVICE, THE MOUTHPIECE IS CUT OFF UNTIL THE CALLER DEPOSITS MONEY WHEN
  2678. THE CALLED PARTY ANSWERS. THIS ALSO ALLOWS FOR FREE CALLS TO WEATHER AND
  2679. OTHER DIAL-IT SERVICES! RECENTLY, 2600 MAGAZINE ANNOUNCED THE CLEAR BOX WHICH
  2680. CONSISTS OF A TELEPHONE PICKUP COIL AND A SMALL AMP. IT IS BASED ON THE›
  2681. RINCIPAL THAT THE RECEIVER IS ALSO A WEAK TRANSMITTER AND THAT BY AMPLIFYING
  2682. YOUR SIGNAL YOU CAN TALK VIA THE TRANSMITTER THUS AVOIDING COSTLY
  2683. TELEPHONE CHARGES! MOST FORTRESSES ARE FOUND IN THE 9XXX
  2684. AREA. UNDER FORMER BELL AREAS, THEY USUALLY START AT 98XX (RIGHT BELOW THE
  2685. 99XX OFFICIAL SERIES) AND MOVE DOWNWARD.
  2686. SINCE THE LINE, NOT THE FONE, DETERMINES WHETHER OR NOT A DEPOSIT
  2687. MUST BE MADE, DTF & CHARGE-A-CALL FONES MAKE GREAT EXTENSIONS!
  2688. FINALLY, FORTRESS FONES ALLOW FOR A NEW HOBBY--INSTRUCTION PLATE COLLECTING.
  2689. ALL THAT IS REQUIRED IS A FLAT-HEAD SCREWDRIVER AND A PAIR OF NEEDLE-NOSE
  2690. PLIERS. SIMPLY USE THE SCREWDRIVER TO LIFT UNDERNEATH THE PLATE SO THAT YOU
  2691. CAN GRAB IT WITH THE PLIERS AND YANK DOWNWARDS. I WOULD SUGGEST COVERING THE
  2692. TIPS OF THE PLIERS WITH ELECTRICAL TAPE TO PREVENT SCRATCHING. TEN CENT PLATES
  2693. ARE DEFINITELY BECOMING A "RARITY!"
  2694.  
  2695. FORTRESS SECURITY:
  2696. ------------------
  2697.  
  2698. WHILE A LONELY FORTRESS MAY SEEM THE PERFECT TARGET, BEWARE! THE GESTAPO
  2699. HAS BEEN KNOWN TO STAKE OUT FORTRESSES FOR AS LONG AS 6 YEARS ACCORDING TO THE
  2700. GRASS ROOTS QUARTERLY. TO AVOID ANY PROBLEMS, DO NOT USE THE SAME FONES
  2701. REPEATEDLY FOR BOXING, CALLING CARDS, & OTHER EXPERIMENTS. THE TELCO KNOWS HOW
  2702. MUCH MONEY SHOULD BE IN THE COIN BOX AND WHEN ITS NOT THERE THEY TEND TO GET
  2703. PERTURBED (READ: PISSED OFF).
  2704.  
  2705. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  2706.  
  2707. --------Jolly Roger
  2708.  
  2709. p.s. This was originally written back in my old Apple ][ days,
  2710. hence the upper case. I just did not think I should waste the
  2711. little time I have to work on this shit converting it to lower-
  2712. case. Hell, I thought 80-columns was pretty nice of me.. heh heh.
  2713. Well, enjoy this and the rest of this Cookbook! ---------JR
  2714.  
  2715.  
  2716. Black Box Plans by The Jolly Roger
  2717.  
  2718. Introduction:
  2719. ------------
  2720. At any given time, the voltage running through your phone is about 20
  2721. Volts. When someone calls you, this voltage goes up to 48 Volts and rings
  2722. the bell. When you answer, the voltage goes down to about 10 Volts.
  2723. The phone company pays attention to this. When the voltage drops to 10,
  2724. they start billing the person who called you.
  2725.  
  2726. Function:
  2727. --------
  2728. The Black Box keeps the voltage going through your phone at 36 Volts,
  2729. so that it never reaches 10 Volts. The phone company is thus fooled
  2730. into thinking you never answered the phone and does not bill the caller.
  2731. However, after about a half hour the phone company will get suspicious
  2732. and disconnect your line for about 10 seconds.
  2733.  
  2734. Materials:
  2735. ---------
  2736. 1 1.8K 1/2 Watt Resistor
  2737. 1 1.5V LED
  2738. 1 SPST Switch
  2739.  
  2740. Procedure:
  2741. ---------
  2742. (1) Open your phone by loosening the two screws on the bottom and
  2743. lifting the case off.
  2744. (2) There should be three wires: Red, Green, and Yellow. We'll be working
  2745. with the Red Wire.
  2746. (3) Connect the following in parallel:
  2747. A. The Resistor and LED.
  2748. B. The SPST Switch.
  2749. In other words, you should end up with this:
  2750. (Red Wire)
  2751. !---/\/\/\--O--!
  2752. (Line)-----! !-----(Phone)
  2753. !-----_/_------!
  2754. /\/\/\ = Resistor
  2755. O = LED
  2756. _/_ = SPST
  2757.  
  2758. Use:
  2759. ---
  2760. The SPST Switch is the On/Off Switch of the Black Box. When the box is off,
  2761. your phone behaves normally. When the box is on and your phone rings,
  2762. the LED flashes. When you answer, the LED stays on and the voltage
  2763. is kept at 36V, so the calling party doesn't get charged. When the box
  2764. is on, you will not get a dial tone and thus cannot make calls.
  2765. Also remember that calls are limited to half an hour.
  2766.  
  2767. ------------Jolly Roger
  2768.  
  2769. p.s. Due to new Fone Company switching systems & the like, this
  2770. may or may not work in your area. If you live in bumfuck Kentucky,
  2771. then try this out. I make no guarantees! (I never do...) ----JR
  2772.  
  2773. The Infamous Blotto Box!! by The Jolly Roger
  2774.  
  2775. (I bet that NOONE has the balls to build this one!)
  2776.  
  2777. Finally, it is here! What was first conceived as a joke to fool the innocent
  2778. phreakers around America has finally been conceived!
  2779. Well, for you people who are unenlightened about the Blotto Box,
  2780. here is a brief summery of a legend.
  2781.  
  2782. --*-=> The Blotto Box <=-*--
  2783.  
  2784. For years now every pirate has dreamed of the Blotto Box. It was at first
  2785. made as a joke to mock more ignorant people into thinking that
  2786. the function of it actually was possible. Well, if you are The Voltage
  2787. Master, it is possible. Originally conceived by King Blotto of much fame,
  2788. the Blotto Box is finally available to the public.
  2789. NOTE: Jolly Roger can not be responsible for the information disclosed
  2790. in the file! This file is strictly for informational purposes and
  2791. should not be actually built and used! Usage of this electronical impulse
  2792. machine could have the severe results listed below and could result in
  2793. high federal prosecution! Again, I TAKE NO RESPONSIBILITY!
  2794. All right, now that that is cleared up, here is the basis of the box
  2795. and it's function.
  2796. The Blotto Box is every phreaks dream... you could hold AT&T down on its
  2797. knee's with this device. Because, quite simply, it can turn off the phone
  2798. lines everywhere. Nothing. Blotto. No calls will be allowed out of an area
  2799. code, and no calls will be allowed in. No calls can be made inside it for
  2800. that matter. As long as the switching system stays the same, this box will
  2801. not stop at a mere area code. It will stop at nothing. The electrical
  2802. impulses that emit from this box will open every line. Every line will
  2803. ring and ring and ring... the voltage will never be cut off until the
  2804. box/generator is stopped. This is no 200 volt job, here.
  2805. We are talking GENERATOR. Every phone line will continue to ring, and people
  2806. close to the box may be electricuted if they pick up the phone.
  2807. But, the Blotto Box can be stopped by merely cutting of the line or generator.
  2808. If they are cut off then nothing will emit any longer. It will take
  2809. a while for the box to calm back down again, but that is merely a
  2810. superficial aftereffect. Once again: Construction and use of this box is
  2811. not advised! The Blotto Box will continue as long as there is
  2812. electricity to continue with.
  2813. OK, that is what it does, now, here are some interesting things for you
  2814. to do with it...
  2815.  
  2816. -*-=>Blotto Functions/Installin'<=-*-
  2817.  
  2818. Once you have installed your Blotto, there is no turning back. The
  2819. following are the instructions for construction and use of this box.
  2820. Please read and heed all warnings in the above section before you attempt
  2821. to construct this box.
  2822.  
  2823. Materials:
  2824. - A Honda portable generator or a main power outlet like in a
  2825. stadium or some such place.
  2826. - 400 volt rated coupler that splices a female plug into a
  2827. phone line jack.
  2828. - A meter of voltage to attach to the box itself.
  2829. - A green base (i.e. one of the nice boxes about 3' by 4' that
  2830. you see around in your neighborhood. They are the main switch
  2831. boards and would be a more effective line to start with.
  2832. or: A regular phone jack (not your own, and not in your area
  2833. code!
  2834. - A soldering iron and much solder.
  2835. - A remote control or long wooden pole.
  2836. Now. You must have guessed the construction from that. If not, here goes,
  2837. I will explain in detail. Take the Honda Portable Generator and all of
  2838. the other listed equiptment and go out and hunt for a green base. Make
  2839. sure it is one on the ground or hanging at head level from a pole,
  2840. not the huge ones at the top of telephone poles. Open it up with anything
  2841. convienent, if you are two feeble that fuck don't try this.
  2842. Take a look inside... you are hunting for color-coordinating lines of
  2843. green and red. Now, take out your radio shack cord and rip the meter thing
  2844. off. Replace it with the voltage meter about. A good level to set the
  2845. voltage to is about 1000 volts. Now, attach the voltage meter to the cord
  2846. and set the limit for one thousand. Plug the other end of the cord
  2847. into the generator. Take the phone jack and splice the jack part off.
  2848. Open it up and match the red and green wires with
  2849. the other red and green wires. NOTE: If you just had the generator on
  2850. and have done this in the correct order, you will be a crispy critter.
  2851. Keep the generator off until you plan to start it up. Now, solder those
  2852. lines together carefully. Wrap duck tape or insultation tape around all
  2853. of the wires. Now, place the remote control right on to the startup
  2854. of the generator. If you have the long pole, make sure it is very long
  2855. and stand back as far away as you can get and reach the pole over.
  2856. NOTICE: If you are going right along with this without reading the file
  2857. first, you still realize now that your area code is about to become
  2858. null! Then, getting back, twitch the pole/remote control and run for your
  2859. damn life. Anywhere, just get away from it. It will be generating
  2860. so much electricity that if you stand to close you will kill yourself.
  2861. The generator will smoke, etc. but will not stop. You are now killing your
  2862. area code, because all of that energy is spreading through all of the
  2863. phone lines around you in every direction.
  2864.  
  2865. Have a nice day!
  2866.  
  2867. --*-=>The Blotto Box: Aftermath<=-*--
  2868. Well, that is the plans for the most devastating and ultimately deadly
  2869. box ever created. My hat goes off to: King Blotto (for the original idea).
  2870.  
  2871. ---------Jolly Roger
  2872.  
  2873.  
  2874. Blowgun by The Jolly Roger
  2875.  
  2876. In this article I shall attempt to explain the use and manufacture
  2877. of a powerfull blow-gun and making darts for the gun.The possesion of
  2878. the blow gun described in this article IS a felony.
  2879. So be carefull where you use it. I don't want to get you all busted.
  2880.  
  2881. Needed:
  2882.  
  2883. 1. Several strands of yarn (About 2 inches a-piece)
  2884. 2. A regular pencil
  2885. 3. A 2 1/4 inch long needle (hopefully with a beaded head. If not
  2886. obtainable,wrap tape around end of needle.
  2887. 4. 2-3 1/4 foot pipe. (PVC or Aluminum) Half a inch in diameter
  2888.  
  2889. Constructing the dart:
  2890.  
  2891. 1st- Carefully twist and pull the metal part (Along with eraser)
  2892. of the pencil till it comes off.
  2893. 2nd- Take Pin and start putting about 5-7 Strands of yarn on the pin. Then
  2894. push them up to the top of the pin. But not over the head of the pin (orthe tape).
  2895. 3rd- Push pin through the hollow part of the head where the pencil was before.
  2896. 4th- That should for a nice looking dart. (see illustration)
  2897.  
  2898. #####
  2899. >>>>>-----/ # is the yarn
  2900. > is the head of the pencil
  2901. - is the pin it-self
  2902. / is the head of the pin
  2903.  
  2904. Using the Darts:
  2905.  
  2906. 1st- Now take the finished dart and insert it in the tube
  2907. (if it is too small put on more yarn.)
  2908. 2nd- Aim the tube at a door, wall, sister, ect.
  2909. 3rd- blow on the end of the pipe.
  2910. 4th- Sometimes the end of the pipe may be sharp. When this happens I
  2911. suggest you wrap it with some black electrician tape.It should feel
  2912. a lot better.
  2913. -------Jolly Roger
  2914.  
  2915. Brown Box Plans by The Jolly Roger
  2916.  
  2917. This is a fairly simple mod that can be made to any phone. All it does
  2918. is allow you to take any two lines in your house and create a party
  2919. line. So far I have not heard of anyone who has any problems
  2920. with it. There is one thing that you will notice when you are
  2921. one of the two people who is called by a person with a brown box. The other
  2922. person will sound a little bit faint. I could overcome this with some
  2923. amplifiers but then there wouldn't be very many of these made [Why not?].
  2924. I think the convenience of having two people on the line at once will
  2925. make up for any minor volume loss.
  2926.  
  2927. Here is the diagram:
  2928. ---------------------------------------
  2929. KEY:___________________________________
  2930. | PART | SYMBOL |
  2931. |---------------------------------|
  2932. | BLACK WIRE | * |
  2933. | YELLOW WIRE | = |
  2934. | RED WIRE | + |
  2935. | GREEN WIRE | - |
  2936. | SPDT SWITCH | _/_ |
  2937. | _/_ |
  2938. | VERTICAL WIRE | | |
  2939. | HORIZONTAL WIRE | _ |
  2940. -----------------------------------
  2941. * = - +
  2942. * = - +
  2943. * = - +
  2944. * = - +
  2945. * = - +
  2946. * ==_/_- +
  2947. *******_/_++++++
  2948. | |
  2949. | |
  2950. | |
  2951. | |
  2952. | |
  2953. | |
  2954. |_____PHONE____|
  2955.  
  2956. ------------Jolly Roger
  2957.  
  2958. Calcium Carbide Bomb by The Jolly Roger
  2959.  
  2960. This is EXTREMELY DANGEROUS. Exercise extreme caution.... Obtain some
  2961. calcium carbide. This is the stuff that is used in carbide lamps and
  2962. can be found at nearly any hardware store. Take a few pieces of this
  2963. stuff (it looks like gravel) and put it in a glass jar with some
  2964. water. Put a lid on tightly. The carbide will react with the water to
  2965. produce acetylene carbonate which is similar to the gas used in
  2966. cutting torches. Eventually the glass with explode from internal
  2967. pressure. If you leave a burning rag nearby, you will get a nice
  2968. fireball!
  2969. -----------Jolly Roger
  2970.  
  2971. More Ways to Send a Car to Hell by The Jolly Roger
  2972.  
  2973. Due to a lot of compliments, I have written an update to file #14.
  2974. I have left the original intact. This expands upon the original
  2975. idea, and could be well called a sequal. -----JR
  2976.  
  2977. How to have phun with someone else's car. If you really detest
  2978. someone, and I mean detest, here's a few tips on what to do in your
  2979. spare time. Move the windshield wiper blades, and insert and glue
  2980. tacks. The tacks make lovely designs. If your "friend" goes to
  2981. school with you, Just before he comes out of school. Light a lighter
  2982. and then put it directly underneath his car door handle.
  2983. Wait...Leave...Listen. When you hear a loud "shit!", you know he
  2984. made it to his car in time. Remove his muffler and pour approximately
  2985. 1 Cup of gas in it. Put the muffler back, then wait till their car starts.
  2986. Then you have a cigarette lighter. A 30 foot long cigarette lighter.
  2987. This one is effective, and any fool can do it. Remove the top
  2988. air filter. That's it! Or a oldie but goodie: sugar in the gas tank.
  2989. Stuff rags soaked in gas up the exhaust pipe. Then you wonder why
  2990. your "friend" has trouble with his/her lungs. Here's one that takes
  2991. time and many friends. Take his/her car then break into their house
  2992. and reassemble it, in their living or bedroom. Phun eh? If you're
  2993. into engines, say eeni mine moe and point to something and remove it.
  2994. They wonder why something doesn't work. There are so many others, but
  2995. the real good juicy ones come by thinking hard.
  2996.  
  2997. -----------Jolly Roger
  2998.  
  2999. Ripping off Change Machines by the Jolly Roger
  3000.  
  3001. Have you ever seen one of those really big changer machines in airports
  3002. laundrymats or arcades that dispense change when you put in your 1 or 5
  3003. dollar bill? Well then, here is an article for you.
  3004.  
  3005. 1) Find the type of change machine that you slide in your bill length
  3006. wise, not the type where you put the bill in a tray and then slide the
  3007. tray in!!!
  3008. 2) After finding the right machine, get a $1 or $5 bill. Start crumpling
  3009. up into a ball. Then smooth out the bill, now it should have a very wrinkly
  3010. surface.
  3011. 3) Now the hard part. You must tear a notch in the bill on the
  3012. left side about 1/2 inch below the little 1 dollar symbol (See Figure).
  3013. 4) If you have done all of this right then take the bill and go out the
  3014. machine. Put the bill in the machine and wait. What should happen is:
  3015. when you put your bill in the machine it thinks everything is fine.
  3016. When it gets to the part of the bill with the notch cut out, the
  3017. machine will reject the bill and (if you have done it right)
  3018. give you the change at the same time!!! So, you end up getting your bill
  3019. back, plus the change!! It might take a little practice, but once
  3020. you get the hang of it, you can get a lot of money!
  3021. !--------------------------------!
  3022. ! !
  3023. ! (1) /-------\ (1) !
  3024. ! ! ! !
  3025. ! ! Pic. ! !
  3026. ! (1) /\ \-------/ (1) !
  3027. ! !! !
  3028. !-----/ \-----------------------!
  3029. \-------Make notch here. About 1/2 " down from (1)
  3030.  
  3031. P.S. Sorry for the "text work" but you should be able to get the
  3032. idea. Have fun!!! -----------------------Jolly Roger
  3033.  
  3034.  
  3035. Clear Box Plans by The Jolly Roger
  3036.  
  3037. The clear box is a new device which has just been invented that can be
  3038. used throughout Canada and rural United States. The clear box works on
  3039. "PostPay" payphones (fortress fones). Those are the payphones
  3040. that don't require payment until after the connection is established.
  3041. You pick up the fone, get a dial tone, dial your number, and then
  3042. insert your money after the person answers.
  3043. If you don't deposit the money then you can not speak to the person on
  3044. the other end because your mouth piece is cut off but not the ear-piece.
  3045. (obviously these phones are nice for free calls to weather or time or
  3046. other such recordings). All you must do is to go to your nearby Radio
  3047. Shack, or electronics store, and get a four-transistor amplifier and a
  3048. telephone suction cup induction pick-up. The induction pick-up would be
  3049. hooked up as it normally would to record a conversation, except
  3050. that it would be plugged into the output of the amplifier and a
  3051. microphone would be hooked to the input. So when the party
  3052. that is being called answers, the caller could speak through the little
  3053. microphone instead. His voice then goes through the amplifier and out
  3054. the induction coil, and into the back of the receiver where
  3055. it would then be broadcast through the phone lines and the other
  3056. partywould be able to hear the caller. The Clear Box thus
  3057. 'clears up' the problem of not being heard. Luckily, the line will
  3058. not be cut-off after a certain amount of time because it will wait
  3059. forever for the coins to be put in.
  3060. The biggest advantage for all of us about this new clear box is the
  3061. fact that this type of payphone will most likely become very common.
  3062. Due to a few things: 1st, it is a cheap way of getting the DTF,
  3063. dial-tone-first service, 2nd, it doesn't require any special equipment,
  3064. (for the phone company) This payphone will work on any phone line.
  3065. Usually a payphone line is different, but this is a regular phone line
  3066. and it is set up so the phone does all the charging, not the company.
  3067.  
  3068. ------------Jolly Roger
  3069.  
  3070. CNA List Courtesy of The Jolly Roger
  3071.  
  3072. NPA TEL NO NPA TEL NO
  3073. --------------------------------------
  3074. 201 201-676-7070 601 601-961-8139
  3075. 202 304-343-7016 602 303-293-8777
  3076. 203 203-789-6815 603 617-787-5300
  3077. 204 204-949-0900 604 604-432-2996
  3078. 205 205-988-7000 605 402-580-2255
  3079. 206 206-382-5124 606 502-583-2861
  3080. 207 617-787-5300 607 518-471-8111
  3081. 208 303-293-8777 608 608-252-6932
  3082. 209 415-543-2861 609 201-676-7070
  3083. 212 518-471-8111 612 402-580-2255
  3084. 213 415-781-5271 613 416-443-0542
  3085. 214 214-464-7400 614 614-464-0123
  3086. 215 412-633-5600 615 615-373-5791
  3087. 216 614-464-0123 616 313-223-8690
  3088. 217 217-525-5800 617 617-787-5300
  3089. 218 402-580-2255 618 217-525-5800
  3090. 219 317-265-4834 619 818-501-7251
  3091. 301 304-343-1401 701 402-580-2255
  3092. 302 412-633-5600 702 415-543-2861
  3093. 303 303-293-8777 703 304-344-7935
  3094. 304 304-344-8041 704 912-784-0440
  3095. 305 912-784-0440 705 416-979-3469
  3096. 306 306-347-2878 706 *** NONE ***
  3097. 307 303-293-8777 707 415-543-6374
  3098. 308 402-580-2255 709 *** NONE ***
  3099. 309 217-525-5800 712 402-580-2255
  3100. 312 312-796-9600 713 713-861-7194
  3101. 313 313-223-8690 714 818-501-7251
  3102. 314 314-721-6626 715 608-252-6932
  3103. 315 518-471-8111 716 518-471-8111
  3104. 316 816-275-2782 717 412-633-5600
  3105. 317 317-265-4834 718 518-471-8111
  3106. 318 504-245-5330 801 303-293-8777
  3107. 319 402-580-2255 802 617-787-5300
  3108. 401 617-787-5300 803 912-784-0440
  3109. 402 402-580-2255 804 304-344-7935
  3110. 403 403-425-2652 805 415-543-2861
  3111. 404 912-784-0440 806 512-828-2501
  3112. 405 405-236-6121 807 416-443-0542
  3113. 406 303-293-8777 808 212-334-4336
  3114. 408 415-543-6374 809 212-334-4336
  3115. 409 713-861-7194 812 317-265-4834
  3116. 412 413-633-5600 813 813-228-7871
  3117. 413 617-787-5300 814 412-633-5600
  3118. 414 608-252-6932 815 217-525-5800
  3119. 415 415-543-6374 816 816-275-2782
  3120. 416 416-443-0542 817 214-464-7400
  3121. 417 314-721-6626 818 415-781-5271
  3122. 418 514-725-2491 819 514-725-2491
  3123. 419 614-464-0123 901 615-373-5791
  3124. 501 405-236-6121 902 902-421-4110
  3125. 502 502-583-2861 904 912-784-0440
  3126. 503 206-382-5124 906 313-223-8690
  3127. 504 504-245-5330 907 *** NONE ***
  3128. 505 303-293-8777 912 912-784-0440
  3129. 506 506-648-3041 913 816-275-2782
  3130. 507 402-580-2255 914 518-471-8111
  3131. 509 206-382-5124 915 512-828-2501
  3132. 512 512-828-2501 916 415-543-2861
  3133. 513 614-464-0123 918 405-236-6121
  3134. 514 514-725-2491 919 912-784-0440
  3135. 515 402-580-2255 516 518-471-8111
  3136. 517 313-223-8690 518 518-471-8111
  3137. 519 416-443-0542 900 201-676-7070
  3138.  
  3139. Electronic Terrorism by The Jolly Roger
  3140.  
  3141. It starts when a big, dumb lummox rudely insults you. Being of a
  3142. rational, intelligent disposition, you wisely choose to avoid a
  3143. (direct) confrontation. But as he laughs in your face, you smile
  3144. inwardly---your revenge is already planned.
  3145. Step 1: follow your victim to his locker, car, or house. Once you
  3146. have chosen your target site, lay low for a week or more,
  3147. letting your anger boil.
  3148. Step 2: in the mean time, assemble your versatile terrorist
  3149. kit(details below.)
  3150. Step 3: plant your kit at the designated target site on a monday
  3151. morning between the hours of 4:00 am and 6:00 am. Include a
  3152. calm, suggestive note that quietly hints at the possibility
  3153. of another attack. Do not write it by hand! An example of
  3154. an effective note:
  3155. "don't be such a jerk, or the next one will take off your
  3156. hand. Have a nice day."
  3157. Notice how the calm tone instills fear. As if written by a
  3158. homicidal psychopath.
  3159. Step 5: choose a strategic location overlooking the target site. Try
  3160. to position yourself in such a way that you can see his facial contortions.
  3161. Step 6: sit back and enjoy the fireworks! Assembly of the versatile,
  3162. economic, and effective terrorist kit #1: the parts you'll need are:
  3163. 1) 4 aa batteries
  3164. 2) 1 9-volt battery
  3165. 3) 1 spdt mini relay (radio shack)
  3166. 4) 1 rocket engine(smoke bomb or m-80)
  3167. 5) 1 solar ignitor (any hobby store)
  3168. 6) 1 9-volt battery connector
  3169.  
  3170.  
  3171. Step 1: take the 9-volt battery and wire it through the relay's coil.
  3172. This circuit should also include a pair of contacts that when
  3173. separated cut off this circuit. These contacts should be held together
  3174. by trapping them between the locker,mailbox, or car door.
  3175. Once the door is opened, the contacts fall apart and the 9-volt circuit
  3176. is broken, allowing the relay to fall to the closed postion
  3177. thus closing the ignition circuit. (If all this is confusing take a
  3178. look at the schematic below.)
  3179.  
  3180. Step 2: take the 4 aa batteries and wire them in succession.
  3181. Wire the positive terminal of one to the negative terminal of another,
  3182. until all four are connected except one positive terminal and one negative
  3183. terminal. Even though the four aa batteries only combine to create 6
  3184. volts, the increase in amperage is necessary to activate the solar
  3185. ignitor quickly and effectively.
  3186.  
  3187. Step 3: take the battery pack (made in step 2) and wire one end of it
  3188. to the relay's single pole and the other end to one prong of the solar
  3189. ignitor. Then wire the other prong of the solar ignitor back to the open
  3190. position on the relay.
  3191.  
  3192. Step 4: using double sided carpet tape mount the kit in his locker,
  3193. mailbox, or car door. And last, insert the solar ignitor into the
  3194. rocket engine (smoke bomb or m-80).
  3195.  
  3196.  
  3197.  
  3198. Your kit is now complete!
  3199.  
  3200. ---------><---------
  3201. I (CONTACTS) I
  3202. I I
  3203. I - (BATTERY)
  3204. I ---
  3205. I I
  3206. I (COIL) I
  3207. ------///////-------
  3208. /-----------
  3209. / I
  3210. / I
  3211. / I
  3212. (SWITCH) I I
  3213. I I
  3214. I --- (BATTERY)
  3215. I - ( PACK )
  3216. I ---
  3217. I I
  3218. I I
  3219. ---- -----
  3220. I I
  3221. *
  3222. (SOLAR IGNITOR)
  3223.  
  3224. ---------Jolly Roger
  3225.  
  3226. How to Start A Conference w/o 2600hz or M-F by The Jolly Roger
  3227.  
  3228. (Originally an Apple ][ file, forgive the upper case!)
  3229.  
  3230. THIS METHOD OF STARTING THE CONF. DEPENDS ON YOUR ABILITY TO BULLSHIT THE
  3231. OPERATOR INTO DIALING A NUMBER WHICH CAN ONLY BE REACHED WITH AN OPERATOR'S
  3232. M-F TONES. WHEN BULLSHITTING THE OPERATOR REMEMBER OPERATOR'S ARE NOT
  3233. HIRED TO THINK BUT TO DO.
  3234.  
  3235. HERE IS A STEP-BY-STEP WAY TO THE CONF.:
  3236. 1. CALL THE OPERATOR THROUGH A PBX OR EXTENDER, YOU COULD JUST CALL ONE
  3237. THROUGH YOUR LINE BUT I WOULDN'T RECOMMEND IT.
  3238. 2. SAY TO THE OPERATOR:
  3239. TSPS MAINTENENCE ENGINEER, RING-FORWARD TO 213+080+1100, POSITION RELEASE,
  3240. THANKYOU.
  3241. (SHE WILL PROBABLY ASK YOU FOR THE NUMBER AGAIN)
  3242.  
  3243. DEFINITIONS: RING-FORWARD - INSTRUCTS HER TO DIAL THE NUMBER.
  3244. POSITION RELEASE - INSTUCTS HER TO RELEASE THE TRUNK AFTER SHE HAS
  3245. DIALED THE NUMBER.
  3246. + - REMBER TO SAY 213PLUS080 PLUS1100.
  3247. 3. WHEN YOU ARE CONNECTED WITH THE CONF. YOU WILL HERE A WHISTLE BLOW
  3248. TWICE AND A RECORDING ASKING YOU FOR YOUR OPERATOR #. DIAL IN ANY FIVE
  3249. DIGITS AND HIT THE POUNDS SIGN A COUPLE OF TIMES. SIMPLY DIAL IN THE #
  3250. OF THE BILLING LINE ECT. WHEN THE RECORDING ASK FOR IT.
  3251. 3. WHEN IN THE CONTROL MODE OF THE CONF. HIT '6' TO TRANSFER CONTROL.
  3252. HIT '001' TO REENTER THE # OF CONFEREE'S AND TIME AMOUNT WHICH YOU
  3253. GAVE WHEN YOU STARED THE CONF. REMEMBER THE SIZE CAN BE FROM
  3254. 2-59 CONFEREE'S. I HAVE NOT FOUND OUT THE 'LENGTHS' LIMITS.
  3255.  
  3256.  
  3257.  
  3258. How to Make Dynamite by The Jolly Roger
  3259.  
  3260. Dynamite is nothing more than just nitroglycerin and a stablizing
  3261. agent to make it much safer to use. For the sake of saving time, I
  3262. will abbreviate nitroglycerin with a plain NG. The numbers
  3263. are percentages, be sure to mix these carefully and be sure to use the
  3264. exact amounts. These percentages are in weight ratio, not volume.
  3265.  
  3266. no. ingredients amount
  3267. ---------------------------------------
  3268. #1 NG 32
  3269. sodium nitrate 28
  3270. woodmeal 10
  3271. ammonium oxalate 29
  3272. guncotten 1
  3273. #2 NG 24
  3274. potassium nitrate 9
  3275. sodium nitate 56
  3276. woodmeal 9
  3277. ammonium oxalate 2
  3278. #3 NG 35.5
  3279. potassium nitrate 44.5
  3280. woodmeal 6
  3281. guncotton 2.5
  3282. vaseline 5.5
  3283. powdered charcoal 6
  3284. #4 NG 25
  3285. potassium nitrate 26
  3286. woodmeal 34
  3287. barium nitrate 5
  3288. starch 10
  3289. #5 NG 57
  3290. potassium nitrate 19
  3291. woodmeal 9
  3292. ammonium oxalate 12
  3293. guncotton 3
  3294. #6 NG 18
  3295. sodium nitrate 70
  3296. woodmeal 5.5
  3297. potassium chloride 4.5
  3298. chalk 2
  3299. #7 NG 26
  3300. woodmeal 40
  3301. barium nitrate 32
  3302. sodium carbonate 2
  3303. #8 NG 44
  3304. woodmeal 12
  3305. anhydrous sodium sulfate 44
  3306. #9 NG 24
  3307. potassium nitrate 32.5
  3308. woodmeal 33.5
  3309. ammonium oxalate 10
  3310. #10 NG 26
  3311. potassium nitrate 33
  3312. woodmeal 41
  3313. #11 NG 15
  3314. sodium nitrate 62.9
  3315. woodmeal 21.2
  3316. sodium carbonate .9
  3317. #12 NG 35
  3318. sodium nitrate 27
  3319. woodmeal 10
  3320. ammonium oxalate 1
  3321. #13 NG 32
  3322. potassium nitrate 27
  3323. woodmeal 10
  3324. ammonium oxalate 30
  3325. guncotton 1
  3326. #14 NG 33
  3327. woodmeal 10.3
  3328. ammonium oxalate 29
  3329. guncotton .7
  3330. potassium perchloride 27
  3331. #15 NG 40
  3332. sodium nitrate 45
  3333. woodmeal 15
  3334. #16 NG 47
  3335. starch 50
  3336. guncotton 3
  3337. #17 NG 30
  3338. sodium nitrate 22.3
  3339. woodmeal 40.5
  3340. potassium chloride 7.2
  3341. #18 NG 50
  3342. sodium nitrate 32.6
  3343. woodmeal 17
  3344. ammonium oxalate .4
  3345. #19 NG 23
  3346. potassium nitrate 27.5
  3347. woodmeal 37
  3348. ammonium oxalate 8
  3349. barium nitrate 4
  3350. calcium carbonate .5
  3351.  
  3352. Household equivalants for chemicles
  3353.  
  3354. It has come to my attention that many of these chemicles are
  3355. sold under brand names, or have household equivalants. here is a list
  3356. that might help you out. Also, see elsewhere in this Cookbook for
  3357. a more complete listing............
  3358.  
  3359. acetic acid vinegar
  3360. aluminum oxide alumia
  3361. aluminum potassium sulfate alum
  3362. aluminum sulfate alum
  3363. ammonium hydroxide ammonia
  3364. carbon carbonate chalk
  3365. calcium hypochloride bleaching powder
  3366. calcium oxide lime
  3367. calcium sulfate plaster of paris
  3368. carbonic acid seltzer
  3369. carbon tetrachloride cleaning fluid
  3370. ethylene dichloride Dutch fluid
  3371. ferric oxide iron rust
  3372. glucose corn syrup
  3373. graphite pencil lead
  3374. hydrochloric acid muriatic acid
  3375. hydrogen peroxide peroxide
  3376. lead acetate sugar of lead
  3377. lead tetrooxide red lead
  3378. magnesium silicate talc
  3379. magnesium sulfate Epsom salts
  3380. naphthalene mothballs
  3381. phenol carbolic acid
  3382. potassium bicarbonate cream of tartar
  3383. potassium chromium sulf. chrome alum
  3384. potassium nitrate saltpeter
  3385. sodium dioxide sand
  3386. sodium bicarbonate baking soda
  3387. sodium borate borax
  3388. sodium carbonate washing soda
  3389. sodium chloride salt
  3390. sodium hydroxide lye
  3391. sodium silicate water glass
  3392. sodium sulfate glauber's salt
  3393. sodium thiosulfate photographer's hypo
  3394. sulferic acid battery acid
  3395. sucrose cane sugar
  3396. zinc chloride tinner's fluid
  3397.  
  3398. Keep this list handy at all times. If you can't seem to get one
  3399. or more of the ingredients try another one. If you still can't, you
  3400. can always buy small amounts from your school, or maybe from various
  3401. chemical companies. When you do that, be sure to say as little as
  3402. possible, if during the school year, and they ask, say it's for a
  3403. experiment for school.
  3404. -------------Jolly Roger
  3405.  
  3406. Auto Exhaust Flame Thrower by The Jolly Roger
  3407.  
  3408. For this one, all you need is a car, a sparkplug, ignition wire and a
  3409. switch. Install the spark plug into the last four or five inches of
  3410. the tailpipeby drilling a hole that the plug can screw into easily.
  3411. Attach the wire (this is regular insulated wire) to one side of the
  3412. switch and to the spark plug. The other side of the switch is attached
  3413. to the positive terminal on the battery. With the car running, simply
  3414. hit the switch and watch the flames fly!!! Again be careful that no
  3415. one is behind you! I have seen some of these flames go 20 feet!!!
  3416.  
  3417. -------------Jolly Roger
  3418.  
  3419. Breaking into BBS Express Courtesy of the Jolly Roger
  3420.  
  3421. If you have high enough access on any BBS Express BBS you can get the
  3422. Sysop's password without any problems and be able to log on as him and do
  3423. whatever you like. Download the Pass file, delete the whole BBS, anything.
  3424. Its all a matter of uploading a text file and d/ling it from the BBS. You
  3425. must have high enough access to see new uploads to do this. If you can see
  3426. a file you just uploaded you have the ability to break into the BBS in a
  3427. few easy steps.
  3428. Why am I telling everyone this when I run BBS Express myself?
  3429. Well there is one way to stop this from happening and I want other Sysops
  3430. to be aware of it and not have it happen to them.
  3431. Breaking in is all based on the MENU function of BBS Express. Express
  3432. will let you create a menu to display different text files by putting the
  3433. word MENU at the top of any text file and stating what files are to be
  3434. displayed. But due to a major screw up by Mr. Ledbetter you can use this
  3435. MENU option to display the USERLOG and the Sysop's Passwords or anything
  3436. else you like. I will show you how to get the Sysop's pass and therefore
  3437. log on as the Sysop. BBs Express Sysop's have 2 passwords. One like
  3438. everyone else gets in the form of X1XXX, and a Secondary password
  3439. to make it harder to hack out the Sysops pass.
  3440. The Secondary pass is found in a file called SYSDATA.DAT.
  3441. This file must be on drive 1 and is therefore easy to get. All you have to
  3442. do is upload this simple Text file:
  3443.  
  3444. MENU
  3445. 1
  3446. D1:SYSDATA.DAT
  3447.  
  3448. Ripoff time!
  3449.  
  3450. after you upload this file you d/l it non-Xmodem. Stupid Express thinks
  3451. it is displaying a menu and you will see this:
  3452.  
  3453. Ripoff time!
  3454.  
  3455. Selection [0]:
  3456.  
  3457. Just hit 1 and Express will display the SYSDATA.DAT file.OPPASS is where
  3458. the Sysop's Secondary pass will be. D1:USERLOG.DAT is where you will find
  3459. the name and Drive number of the USERLOG.DAT file. The Sysop might have
  3460. renamed this file or put it in a Subdirectory or even on a different
  3461. drive. I Will Assume he left it as D1:USERLOG.DAT. The other parts of this
  3462. file tell you where the .HLP screens are and where the LOG is saved and
  3463. all the Download path names.
  3464.  
  3465. Now to get the Sysop's primary pass you upload a text file like this:
  3466.  
  3467. MENU
  3468. 1
  3469. D1:USERLOG.DAT
  3470.  
  3471. Breaking into Bedwetter's BBS
  3472.  
  3473. Again you then d/l this file non-Xmodem and you will see:
  3474.  
  3475. Breaking into Bedwetter's BBS
  3476.  
  3477. Selection [0]:
  3478.  
  3479. You then hit 1 and the long USERLOG.DAT file comes flying at you.
  3480. The Sysop is the first entry in this very long file so it is easy. You will
  3481. see:
  3482.  
  3483. SYSOP'S NAME X1XXX
  3484. You should now have his 2 passwords.
  3485.  
  3486. There is only one easy way out of this that I can think of, and that is
  3487. to make all new uploads go to SYSOP level (Level 9) access only. This way
  3488. nobody can pull off what I just explained.
  3489. I feel this is a major Bug on Mr. Ledbetter's part. I just don't know why
  3490. no one had thought of it before. I would like to give credit to
  3491. Redline for the message he left on Modem Hell telling about this problem,
  3492. and also to Unka for his ideas and input about correcting it.
  3493.  
  3494. This has been brought to you from [_The_Piper_] and the S.O.D. BBS
  3495. Network!
  3496. Firebombs by the Jolly Roger
  3497.  
  3498. Most fire bombs are simply gasoline filled bottles with a fuel
  3499. soaked rag in the mouth (the bottle's mouth, not yours). The original
  3500. Molotov cocktail, and still about the best, was a mixture of one part
  3501. gasoline and one part motor oil. The oil helps it to cling to what it
  3502. splatters on.
  3503. Some use one part roofing tar and one part gasoline. Fire bombs
  3504. have been found which were made by pouring melted wax into gasoline.
  3505.  
  3506. -------------Jolly Roger
  3507.  
  3508. Fuse Ignition Bomb by The Jolly Roger
  3509.  
  3510. A four strand homemade fuse is used for this. It burns like fury.
  3511. It is held down and concealed by a strip of bent tin cut from a can.
  3512. The exposed end of the fuse is dipped into the flare igniter. To use
  3513. this one, you light the fuse and hold the fire bomb until the fuse has
  3514. burned out of sight under the tin. Then throw it and when it breaks,
  3515. the burning fuse will ignite the contents.
  3516.  
  3517. -------------Jolly Roger
  3518.  
  3519. Generic Bomb by the Jolly Roger
  3520.  
  3521. 1) Aquire a glass container
  3522. 2) Put in a few drops of gasoline
  3523. 3) Cap the top
  3524. 4) Now turn the container around to coat the inner surfaces and then
  3525. evaporates
  3526. 5) Add a few drops of potassium permanganate (<-Get this stuff from a
  3527. snake bite kit)
  3528. 6) The bomb is detonated by throwing aganist a solid object.
  3529. *AFTER THROWING THIS THING RUN LIKE HELL THIS THING PACKS ABOUT 1/2
  3530. STICK OF DYNAMITE*
  3531.  
  3532. ---------------Jolly Roger
  3533.  
  3534. Green Box Plans by the Jolly Roger
  3535.  
  3536. Paying the initial rate in order to use a red box (on certain
  3537. fortresses) left a sour taste in many red boxers mouths, thus the
  3538. green box was invented. The green box generates useful tones such as
  3539. COIN COLLECT, COIN RETURN, AND RINGBACK. These are the tones that
  3540. ACTS or the TSPS operator would send to the CO when appropriate.
  3541. Unfortunately, the green box cannot be used at the fortress station but
  3542. must be used by the CALLED party.
  3543.  
  3544. Here are the tones:
  3545. COIN COLLECT 700+1100hz
  3546. COIN RETURN 1100+1700hz
  3547. RINGBACK 700+1700hz
  3548.  
  3549. Before the called party sends any of these tones, an operator realease
  3550. signal should be sent to alert the MF detectors at the CO.
  3551. This can be done by sending 900hz + 1500hz or a single 2600 wink (90 ms.)
  3552. Also do not forget that the initial rate is collected shortly before the
  3553. 3 minute period is up. Incidentally, once the above MF
  3554. tones for collecting and returning coins reach the CO, they are
  3555. converted into an appropriate DC pulse (-130 volts for return and
  3556. +130 for collect). This pulse is then sent down the tip to the
  3557. fortress. This causes the coin relay to either return or collect the coins.
  3558. The alledged "T-network" takes advantage of this information.
  3559. When a pulse for coin collect (+130 VDC) is sent down the line,
  3560. it must be grounded somewhere. This is usually the yellow or black wire.
  3561. Thus, if the wires are exposed, these wires can be cut to prevent
  3562. the pulse from being grounded. When the three minute initial
  3563. period is almost up, make sure that the black and yellow wires are
  3564. severed, then hang up, wait about 15 seconds in case of a second
  3565. pulse, reconnect the wires, pick up the phone, and if all goes well,
  3566. it should be "JACKPOT" time.
  3567. ---------Jolly Roger
  3568.  
  3569. Portable Grenade Launcher by the Jolly Roger
  3570.  
  3571. If you have a bow, this one is for you. Remove the ferrule from an
  3572. aluminum arrow, and fill the arrow with black powder (I use grade
  3573. FFFF, it burns easy)and then glue a shotshell primer into the hole
  3574. left where the ferrule went. Next, glue a BB on the primer, and you
  3575. are ready to go! Make sure no one is nearby.... Little shreds of
  3576. aluminum go all over the place!!
  3577. ------------Jolly Roger
  3578.  
  3579.  
  3580. Hacking Tutorial Courtesy of the Jolly Roger
  3581.  
  3582. What is hacking?
  3583. ----------------
  3584. According to popular belief the term hacker and hacking was founded at mit
  3585. it comes from the root of a hack writer,someone who keeps "hacking" at
  3586. the typewriter until he finishes the story.a computer hacker would be
  3587. hacking at the keyboard or password works.
  3588.  
  3589. What you need:
  3590. --------------
  3591. To hack you need a computer equipped with a modem (a device that lets you
  3592. transmit data over phone lines) which should cost you from $100 to $1200.
  3593.  
  3594. How do you hack?
  3595. ----------------
  3596. Hacking recuires two things:
  3597. 1. The phone number
  3598. 2. Answer to identity elements
  3599.  
  3600. How do you find the phone #?
  3601. ----------------------------
  3602. There are three basic ways to find a computers phone number.
  3603. 1. Scanning,
  3604. 2. Directory
  3605. 3. Inside info.
  3606.  
  3607. What is scanning?
  3608. -----------------
  3609. Scanning is the process of having a computer search for a carrier tone.
  3610. For example,the computer would start at (800) 111-1111 and wait for carrier
  3611. if there is none it will go on to 111-1112 etc.if there is a carrier it
  3612. will record it for future use and continue looking for more.
  3613.  
  3614. What is directory assictance?
  3615. -----------------------------
  3616. This way can only be used if you know where your target computer is. For this
  3617. example say it is in menlo park, CA and the company name is sri.
  3618.  
  3619. 1. Dial 411 (or 415-555-1212)
  3620. 2. Say "Menlo park"
  3621. 3. Say "Sri"
  3622. 4. Write down number
  3623. 5. Ask if there are any more numbers
  3624. 6. If so write them down.
  3625. 7. Hang up on operator
  3626. 8. Dial all numbers you were given
  3627. 9. Listen fir carrier tone
  3628. 10. If you hear carrier tone write down number, call it on your modem and your
  3629. set to hack!
  3630. ---------------Jolly Roger
  3631.  
  3632. The Basics of Hacking II Courtesy of the Jolly Roger
  3633.  
  3634. Basics to know before doing anything, essential to your continuing
  3635. career as one of the elite in the country... This article, "the
  3636. introduction to the world of hacking" is meant to help you by telling you
  3637. how not to get caught, what not to do on a computer system, what type of
  3638. equipment should I know about now, and just a little on the history, past
  3639. present future, of the hacker.
  3640.  
  3641. Welcome to the world of hacking! We, the people who live outside of the
  3642. normal rules, and have been scorned and even arrested by those from the
  3643. 'civilized world', are becomming scarcer every day. This is due to the
  3644. greater fear of what a good hacker (skill wise, no moral judgements
  3645. here)|can do nowadays, thus causing anti- hacker sentiment in the masses.
  3646. Also, few hackers seem to actually know about the computer systems they
  3647. hack, or what equipment they will run into on the front end, or what they
  3648. could do wrong on a system to alert the 'higher' authorities who monitor
  3649. the system. This article is intended to tell you about some things not to
  3650. do, even before you get on the system. I will tell you about the new wave
  3651. of front end security devices that are beginning to be used on computers.
  3652. I will attempt to instill in you a second identity, to be brought up at
  3653. time of great need, to pull you out of trouble. And, by the way, I take no, repeat,
  3654. no, responcibility for what we say in this and the forthcoming articles.
  3655. Enough of the bullshit, on to the fun: after logging on your favorite bbs,
  3656. you see on the high access board a phone number! It says it's a great
  3657. system to "fuck around with!" This may be true, but how many other people
  3658. are going to call the same number? So: try to avoid calling a number
  3659. given to the public. This is because there are at least every other
  3660. user calling, and how many other boards will that number spread to?
  3661. If you call a number far, far away, and you plan on going thru an
  3662. extender or a re-seller, don't keep calling the same access number
  3663. (I.E. As you would if you had a hacker running), this looks very suspicious
  3664. and can make life miserable when the phone bill comes in the mail.
  3665. Most cities have a variety of access numbers and services,
  3666. so use as many as you can. Never trust a change in the system...
  3667. The 414's, the assholes, were caught for this reason: when one of them
  3668. connected to the system, there was nothing good there. The next time,
  3669. there was a trek game stuck right in their way! They proceded to play said
  3670. game for two, say two and a half hours, while telenet was tracing them!
  3671. Nice job, don't you think? If anything looks suspicious, drop the line
  3672. immediately!! As in, yesterday!! The point we're trying to get accross is:
  3673. if you use a little common sence, you won't get busted. Let the little
  3674. kids who aren't smart enough to recognize a trap get busted, it will take
  3675. the heat off of the real hackers. Now, let's say you get on a computer
  3676. system... It looks great, checks out, everything seems fine.
  3677. Ok, now is when it gets more dangerous. You have to know the computer
  3678. system to know what not to do.
  3679. Basically, keep away from any command something, copy a new file into the
  3680. account, or whatever! Always leave the account in the same status you
  3681. logged in with. Change *nothing*... If it isn't an account with priv's,
  3682. then don't try any commands that require them! All, yes all, systems are
  3683. going to be keeping log files of what users are doing, and that will
  3684. show up. It is just like dropping a trouble-card in an ESS system,
  3685. after sending that nice operator a pretty tone.
  3686. Spend no excessive amounts of time on the account in one stretch.
  3687. Keep your calling to the very late night ifpossible, or during
  3688. business hours (believe it or not!). It so happens
  3689. that there are more users on during business hours, and it is very
  3690. difficult to read a log file with 60 users doing many commnds every minute.
  3691. Try to avoid systems where everyone knows each other, don't try to bluff.
  3692. And above all: never act like you own the system, or are the best there
  3693. is. They always grab the people who's heads swell... There is some very
  3694. interesting front end equipment around nowadays, but first let's
  3695. define terms... By front end, we mean any device that you must
  3696. pass thru to get at the real computer. There are devices that are made to
  3697. defeat hacker programs, and just plain old multiplexers.
  3698. To defeat hacker programs, there are now devices that pick up the phone
  3699. and just sit there... This means that your device gets no carrier,
  3700. thus you think there isn't a computer on the other end. The
  3701. only way around it is to detect when it was picked up. If it pickes up
  3702. after the same number ring, then you know it is a hacker-defeater.
  3703. These devices take a multi-digit code to let you into the system.
  3704. Some are, in fact, quite sophisticated to the point where it
  3705. will also limit the user name's down, so only one name or set of names
  3706. can be valid logins after they input the code... Other devices input a
  3707. number code, and then they dial back a pre-programmed number for that code.
  3708. These systems are best to leave alone,
  3709. because they know someone is playing with their phone. You may think "but
  3710. i'll just reprogram the dial-back." Think again, how stupid that is...
  3711. Then they have your number, or a test loop if you were just a little
  3712. smarter. If it's your number, they have your balls (if male...),
  3713. If its a loop, then you are screwed again, since those loops
  3714. are *monitored*. As for multiplexers... What a plexer is supposed
  3715. to do is this:
  3716. The system can accept multiple users. We have to time share, so we'll let
  3717. the front-end processor do it... Well, this is what a multiplexer does.
  3718. Usually they will ask for something like "enter class" or "line:". Usually
  3719. it is programmed for a double digit number, or a four to five letter word.
  3720. There are usually a few sets of numbers it accepts, but those numbers also
  3721. set your 300/1200/2400 baud data type.
  3722. These multiplexers are inconvenient at best, so not to worry. A little
  3723. about the history of hacking: hacking, by my definition, means a great
  3724. knowledge of some special area. Doctors and lawyers
  3725. are hackers of a sort, by this definition. But most often, it is
  3726. being used in the computer context, and thus we have a definition of
  3727. "anyone who has a great amount of computer or telecommunications
  3728. knowledge." You are not a hacker because you have a list of codes...
  3729. Hacking, by my definition, has then been around only about 15 years.
  3730. It started, where else but, mit and colleges where they had computer
  3731. science or electrical engineering departments.
  3732. Hackers have created some of the best computer languages, the
  3733. most awesome operating systems, and even gone on to make millions.
  3734. Hacking used to have a good name, when we could honestly say
  3735. "we know what we are doing". Now it means (in the public eye):
  3736. the 414's, ron austin, the nasa hackers, the arpanet hackers...
  3737. All the people who have been caught,
  3738. have done damage, and are now going to have to face fines and sentences.
  3739. Thus we come past the moralistic crap, and to our purpose: educate the
  3740. hacker community, return to the days when people actually knew something...
  3741.  
  3742. --------------Jolly Roger
  3743.  
  3744.  
  3745. Hacking DEC's by the Jolly Roger
  3746.  
  3747. In this article you will learn how to log in to dec's, logging out, and all
  3748. the fun stuff to do in-between. All of this information is based on a
  3749. standard dec system.
  3750. Since there are dec systems 10 and 20, and I favor, the dec 20,
  3751. there will be more info on them in this article. It just so happens
  3752. that the dec 20 is also the more common of the two, and is used by much
  3753. more interesting people (if you know what I mean...) Ok, the first thing
  3754. you want to do when you are receiving carrier from a dec system is to find
  3755. out the format of login names. You can do this by looking at who is on the
  3756. system.
  3757. Dec=> ` (the 'exec' level prompt)
  3758. you=> sy
  3759. sy is short for sy(stat) and shows you the system status.
  3760. You should see the format of login names...
  3761. A systat usually comes up in this form:
  3762. job line program user
  3763. job: the job number (not important unless you want to log them off later)
  3764. line: what line they are on (used to talk to them...)
  3765. These are both two or three digit numbers.
  3766. Program: what program are they running under? If it says 'exec'
  3767. they aren't doing anything at all...
  3768. User: ahhhahhhh! This is the user name they are logged in under...
  3769. Copy the format, and hack yourself outa working code... Login format is as
  3770. such:
  3771. dec=> `
  3772. you=> login username password
  3773. username is the username in the format you saw above in the systat.
  3774. After you hit the space after your username, it will stop echoing
  3775. characters back to your screen. This is the password you are typing in...
  3776. Remember, people usually use their name, their dog's name, the name of a
  3777. favorite character in a book, or something like this. A few clever
  3778. people have it set to a key cluster (qwerty or asdfg). Pw's can be from 1
  3779. to 8 characters long, anything after that is ignored. You are finally in...
  3780. It would be nice to have a little help, wouldn't it? Just type a ? Or the
  3781. word help, and it will give you a whole list of topics...
  3782. Some handy characters for you to know would be the control keys,
  3783. wouldn't it? Backspace on a dec 20 is rub which is 255 on your ascii chart.
  3784. On the dec 10 it is cntrl-h. To abort a long listing or a program,
  3785. cntrl-c works fine. Use cntrl-o to stop long output to the terminal.
  3786. This is handy when playing a game, but you don't want to cntrl-c out.
  3787. Cntrl-t for the time. Cntrl-u will kill the whole line you are typing at
  3788. the moment. You may accidently run a program where the only way out is
  3789. a cntrl-x, so keep that in reserve. Cntrl-s to stop listing, cntrl-q to
  3790. continue on both systems. Is your terminal having trouble??
  3791. Like, it pauses for no reason, or it doesn't backspace right? This is
  3792. because both systems support many terminals, and you haven't told it what
  3793. yours is yet... You are using a vt05
  3794. so you need to tell it you are one.
  3795. Dec=> `
  3796. you=> information terminal
  3797. or...
  3798. You=> info
  3799. this shows you what your terminal is set up as...
  3800. Dec=>all sorts of shit, then the `
  3801. you=> set ter vt05 this sets your terminal
  3802. type to vt05.
  3803. Now let's see what is in the account (here after abbreviated acct.)
  3804. that you have hacked onto... Say
  3805. => dir
  3806. short for directory, it shows
  3807. you what the user of the code has save to the disk. There should be a format
  3808. like this: xxxxx.Oooxxxxx is the file name, from 1 to 20 characters
  3809. long. Ooo is the file type, one of: exe, txt, dat, bas, cmd and a few
  3810. others that are system dependant.
  3811. Exe is a compiled program that can be run (just by typing its name at the `).
  3812. Txt is a text file, which you can see by
  3813. typing=>
  3814. type xxxxx.Txt
  3815. Do not try to=>
  3816. type xxxxx.Exe this is very bad for your terminal and will tell you
  3817. absolutly nothing.
  3818. Dat is data they have saved.
  3819. Bas is a basic program, you can have it typed out for you.
  3820. Cmd is a command type file, a little too
  3821. complicated to go into here.
  3822. Try =>
  3823. take xxxxx.Cmd
  3824. By the way, there are other users out there who may have files you can use
  3825. (gee, why else am I here?).
  3826. Type => dir <*.*> (Dec 20)
  3827. => dir [*,*] (dec 10)
  3828. * is a wildcard, and will allow you to access the files on other accounts
  3829. if the user has it set for public access. If it isn't set for public access,
  3830. then you won't see it. To run that program:
  3831. dec=> `
  3832. you=> username program-name
  3833. username is the directory you saw the
  3834. file listed under, and file name was
  3835. what else but the file name?
  3836. ** You are not alone **
  3837. remember, you said (at the very start) sy short for systat,
  3838. and how we said this showed the other users on the system? Well, you
  3839. can talk to them, or at least send a message to anyone you see listed in a
  3840. systat. You can do this by:
  3841. dec=> the user list (from your systat)
  3842. you=> talkusername (dec 20)
  3843. send username (dec 10)
  3844. talk allows you and them immediate transmission of whatever you/they type
  3845. to be sent to the other. Send only allow you one message to be sent, and
  3846. send, they will send back to you, with talk you can just keep going. By the
  3847. way, you may be noticing with the talk command that what you type is still
  3848. acted upon by the parser (control program). To avoid the constant error
  3849. messages type either:
  3850. you=> ;your message
  3851. you=> rem your message
  3852. the semi-colon tells the parser that what follows is just a comment. Rem
  3853. is short for 'remark' and ignores you from then on until you type a cntrl-z
  3854. or cntrl-c, at which point it puts you back in the exec mode. To break the
  3855. connection from a talk command type:
  3856. you=> break priv's:
  3857. if you happen to have privs, you can do all sorts of things.
  3858. First of all, you have to activate those privs.
  3859. You=> enable
  3860. this gives you a $ prompt, and allows you to do this:
  3861. whatever you can do to your own directory you can now do to any
  3862. other directory. To create a new acct. Using your privs, just type
  3863. =>build username
  3864. if username is old, you can edit it, if it is new, you can
  3865. define it to be whatever you wish. Privacy means nothing to a user with
  3866. privs. By the way, there are various levels of privs: operator, wheel,
  3867. cia.
  3868. wheel is the most powerful, being that he can log in from anywhere and
  3869. have his powers.
  3870. Operators have their power because they are at a special terminal
  3871. allowing them the privs. Cia is short for 'confidential information
  3872. access', which allows you a low level amount of privs.
  3873. Not to worry though, since you can read the system log file, which also
  3874. has the passwords to all the other accounts.
  3875. To de-activate your privs, type
  3876. you=> disable
  3877. when you have played your greedy heart out, you can finally leave the
  3878. system with the command=>
  3879. logout
  3880. this logs the job you are using off the system (there may be varients
  3881. of this such as kjob, or killjob).
  3882.  
  3883. ----------------Jolly Roger
  3884.  
  3885. Harmless Bombs by the Jolly Roger
  3886.  
  3887. To all those who do not wish to inflict bodily damage on their victims
  3888. but only terror.
  3889. These are weapons that should be used from high places.
  3890. 1) The flour bomb.
  3891. Take a wet paper towel and pour a given amount of baking flour in
  3892. the center. Then wrap it up and put on a rubber band to keep it
  3893. together. When thrown it will fly well but when it hits, it covers
  3894. the victim with the flower or causes a big puff of flour which will
  3895. put the victim in terror since as far as they are concerned, some
  3896. strange white powder is all over them. This is a cheap method of
  3897. terror and for only the cost of a roll of paper towels and a bag of
  3898. flour you and your friends can have loads of fun watching people
  3899. flee in panic.
  3900. 2) Smoke bomb projectile.
  3901. All you need is a bunch of those little round smoke bombs and a
  3902. wrist rocket or any sling-shot. Shoot the smoke bombs and watch the
  3903. terror since they think it will blow up!
  3904. 3) Rotten eggs (good ones)
  3905. Take some eggs and get a sharp needle
  3906. and poke a small hole in the top of each one.
  3907. Then let them sit in a warm place for about a week. Then you've got a
  3908. bunch of rotten eggs that will only smell when they hit.
  3909. 4) Glow in the dark terror.
  3910. Take one of those tubes of glow in the dark stuff and pour the
  3911. stuff on whatever you want to throw and when it gets on the victim,
  3912. they think it's some deadly chemical or a radioactive substance so
  3913. they run in total panic. This works especially well with flower
  3914. bombs since a gummy, glowing substance gets all over the victim.
  3915. 5) Fizzling panic.
  3916. Take a baggie of a water-baking soda solution and seal it. (Make
  3917. sure there is no air in it since the solution will form a gas and
  3918. you don't want it to pop on you.) Then put it in a bigger plastic
  3919. bag and fill it with vinegar and seal it. When thrown, the two
  3920. substances will mix and cause a violently bubbling substance to go
  3921. all over the victim.
  3922. ---------------Jolly Roger
  3923.  
  3924. Breaking Into Houses by the Jolly Roger
  3925.  
  3926. Okay You Need:
  3927. 1. Tear Gas or Mace
  3928. 2. A BB/Pelet Gun
  3929. 3. An Ice Pick
  3930. 4. Thick Gloves
  3931.  
  3932. What You Do Is:
  3933.  
  3934. 1. Call the ###-#### of the house, or ring doorbell, To find out if
  3935. they're home.
  3936. 2. If they're not home then...
  3937. 3. Jump over the fence or walk through gate (whatever).
  3938. 4. If you see a dog give him the mace or tear gas.
  3939. 5. Put the gloves on!!!!!!!
  3940. 6. Shoot the BB gun slightly above the window locks.
  3941. 7. Push the ice-pick through the hole (made by the BB gun).
  3942. 8. Enter window.
  3943. 9. FIRST...Find the LIVING ROOM. (they're neat things there!).
  3944. 10. Then goto the Bed-room to get a pillow case. Put the goodies in
  3945. the pillow case.
  3946. 11. Get out <-* FAST! -*>
  3947.  
  3948. Notes: You should have certian targets worked out (like computers,
  3949. Radios, Ect.,Ect.). Also <-* NEVER *-> Steal from your own
  3950. neigborhood. If you think they have an alarm...<-* FORGET IT! *->.
  3951.  
  3952. ---------------Jolly Roger
  3953.  
  3954.  
  3955. A Guide to Hypnotism Courtesy of the Jolly Roger
  3956. (Originally an Apple ][ file, forgive the uppercase!)
  3957.  
  3958. +-------------------+
  3959. ! WHAT HYPNOTISM IS !
  3960. +-------------------+
  3961.  
  3962. HYPNOTISM, CONTRARY TO COMMON BELEIF, IS MERELY STATE WHEN YOUR MIND AND
  3963. BODY ARE IN A STATE OF RELAXATION AND YOUR MIND IS OPEN TO POSITIVE, OR
  3964. CLEVERLY WORDED NEGATIVE, INFLUENCES. IT IS NOT A TRANCE WHERE YOU:
  3965. > ARE TOTALLY INFLUENCABLE.
  3966. > CANNOT LIE.
  3967. > A SLEEP WHICH YOU CANNOT WAKE UP FROM
  3968. WITHOUT HELP.
  3969. THIS MAY BRING DOWN YOUR HOPE SOMEWHAT, BUT, HYPNOTISM IS A POWERFUL FOR
  3970. SELF HELP, AND/OR MISCHEIF.
  3971.  
  3972. +-----------------------+
  3973. ! YOUR SUBCONCIOUS MIND !
  3974. +-----------------------+
  3975.  
  3976. BEFORE GOING IN FURTHER, I'D LIKE TO STATE THAT HYPNOTISM NOT ONLY IS
  3977. GREAT IN THE WAY THAT IT RELAXES YOU AND GETS YOU (IN THE LONG RUN) WHAT
  3978. YOU WANT, BUT ALSO THAT IT TAPS A FORCE OF INCREDIBLE POWER, BELEIVE IT OR
  3979. NOT, THIS POWER IS YOUR SUBCONCIOUS MIND.
  3980. THE SUBCONCIOUS MIND ALWAYS KNOWS WHAT IS GOING ON WITH EVERY PART OF YOUR BODY,
  3981. EVERY MOMENT OF THE DAY. IT PROTECTS YOU FROM NEGATIVE INFLUENCES,
  3982. AND RETAINS THE POWER TO SLOW YOUR HEARTBEAT DOWN AND STUFF LIKE THAT.
  3983. THE SUBCONCIOUS MIND HOLDS JUST ABOUT ALL THE INFO YOU WOULD LIKE TO KNOW
  3984. ABOUT YOURSELF, OR, IN THIS CASE, THE PERSON YOU WILL BE HYPNOTISING.
  3985. THERE ARE MANY WAYS TO TALK TO YOUR SUBCONCIOUS AND HAVE IT TALK BACK TO
  3986. YOU. ONE WAY IS THE OUJA BOARD, NO ITS NOT A SPIRIT, MERELY THE
  3987. MINDS OF THOSE WHO ARE USING IT. ANOTHER, WHICH I WILL DISCUSS HERE,
  3988. IS THE PENDULUM METHOD. OK, HERE IS HOW IT GOES.
  3989. FIRST, GET A RING OR A WASHER AND TIE IT TO A THREAD A LITTLE LONGER THAN
  3990. HALF OF YOUR FOREARM. NOW, TAKE A SHEET OF PAPER AND DRAW A BIG CIRCLE IN
  3991. IT. IN THE BIG CIRCLE YOU MUST NOW DRAW A CROSSHAIR (A BIG +). NOW, PUT
  3992. THE SHEET OF PAPER ON A TABLE. NEXT, HOLD THE THREAD WITH THE RING OR
  3993. WASHER ON IT AND PLACE IT (HOLDING THE THREAD SO THAT THE RING IS 1 INCH
  3994. ABOVE THE PAPER SWINGING) IN THE MIDDLE OF THE CROSSHAIR. NOW, SWING
  3995. THE THREAD SO THE WASHER GOES UP AND DOWN, SAY TO YOURSELF THE WORD "YES"
  3996. NOW, DO IT SIDE TO SIDE AND SAY THE WORD "NO".
  3997. DO IT COUNTER CLOCKWISE AND SAY "I DON'T KNOW".
  3998. AND LASTLY, DO IT CLOCKWISE AND SAY "I DONT WANT TO SAY." NOW, WITH THE
  3999. THREAD BACK IN THE MIDDLE OF THE CROSSHAIR, ASK YOURSELF QUESTIONS AND
  4000. WAIT FOR THE PENDULUM TO SWING IN THE DIRECTION FOR THE ANSWER. (YES, NO,
  4001. I DONT KNOW OR I DONT WANNA SAY...). SOON, TO YOUR AMAZEMENT, IT WILL BE
  4002. ANSWERING QUESTIONS LIKE ANYTHING... LET THE PENDULUM ANSWER, DONT TRY..
  4003. WHEN YOU TRY YOU WILL NEVER GET AN ANSWER. LET THE ANSWER COME TO YOU.
  4004.  
  4005. +-------------------------+
  4006. ! HOW TO INDUCE HYPNOTISM !
  4007. +-------------------------+
  4008.  
  4009. NOW THAT YOU KNOW HOW TO TALK TO YOUR SUBCONCIOUS MIND, I WILL NOW TELL YOU
  4010. HOW TO GUIDE SOMEONE INTO HYPNOSIS. NOTE THAT I SAID GUIDE, YOU CAN NEVER,
  4011. HYNOTISE SOMEONE, THEY MUST BE WILLING. OK, THE SUBJECT MUST BE LYING OR
  4012. SITTING IN A COMFORTABLE POSITION, RELAXED, AND AT A TIME WHEN THINGS ARENT
  4013. GOING TO BE INTERRUPTED.
  4014. TELL THEM THE FOLLOWING OR SOMETHING CLOSE TO IT, IN A PEACEFUL, MONOTINOUS
  4015. TONE (NOT A COMMANDING TONE OF VOICE)
  4016.  
  4017. NOTE: LIGHT A CANDLE AND PLACE IT SOMEWHERE WHERE IT CAN BE EASILY SEEN.
  4018.  
  4019. TAKE A DEEP BREATH THROUGH YOUR NOSE AND HOLD IT IN FOR A COUNT OF 8. NOW,
  4020. THROUGH YOUR MOUTH, EXHALE COMPLETELY AND SLOWLY. CONTINUED BREATHING LONG,
  4021. DEEP, BREATHS THROUGH YOUR NOSE AND EXHALING THROUGH YOUR MOUTH. TENSE UP
  4022. ALL YOUR MUSCLES VERY TIGHT, NOW, COUNTING FROM TEN TO ONE, RELEASE THEM
  4023. SLOWLY, YOU WILL FIND THEM VERY RELAXED. NOW, LOOK AT THE CANDLE, AS
  4024. YOU LOOK AT IT, WITH EVERY BREATH AND PASSING MOMEMENT, YOU ARE FEELING
  4025. INCREASINGLY MORE AND MORE PEACEFUL AND RELAXED. THE CANDLES FLAME IS
  4026. PEACEFUL AND BRIGHT.
  4027. AS YOU LOOK AT IT I WILL COUNT FROM 100 DOWN, AS A COUNT, YOUR EYES WILL
  4028. BECOME MORE AND MORE RELAXED, GETTING MORE AND MORE TIRED WITH EACH
  4029. PASSING MOMENT."
  4030. NOW, COUNT DOWN FROM 100, ABOUT EVERY 10 NUMBERS SAY "WHEN I REACH XX YOUR
  4031. EYES (OR YOU WILL FIND YOUR EYES) ARE BECOMING MORE AND MORE TIRED." TELL
  4032. THEM THEY MAY CLOSE THEIR EYES WHENEVER THEY FEEL LIKE IT. IF THE PERSONS
  4033. EYES ARE STILL OPEN WHEN YOU GET TO 50 THEN INSTEAD OF SAYING
  4034. "YOUR EYES WILL.."
  4035. SAY "YOUR EYES ARE...".
  4036. WHEN THEIR EYES ARE SHUT SAY THE FOLLOWING. AS YOU LIE (OR SIT) HERE WITH
  4037. YOUR EYES COMFORTABLY CLOSE YOU FIND YOURSELF RELAXING MORE AND
  4038. MORE WITH EACH MOMENT AND BREATH.
  4039. THE RELAXATION FEELS PLEASANT AND BLISSFUL SO, YOU HAPPILY GIVE WAY TO
  4040. THIS WONDERFUL FEELING. IMAGINGE YOURSELF ON A CLOUD, RESTING PEACEFULLY,
  4041. WITH A SLIGHT BREEZE CARESSING YOUR BODY. A TINGLING SENSASION BEGINS
  4042. TO WORK ITS WAY, WITHIN AND WITHOUT YOUR TOES, IT SLOWLY MOVES UP YOUR
  4043. FEET, MAKING THEM WARM, HEAVY AND RELAXED. THE CLOUD IS SOFT AND SUPPORTS
  4044. YOUR BODY WITH ITS SOFT TEXTURE, THE SCENE IS PEACEFUL AND ABSORBING,
  4045. THE PEACEFULNESS ABSORBS YOU COMPLETELY...
  4046. THE TINGLING GENTLY AND SLOWLY MOVES UP YOUR LEGS, RELAXING THEM.
  4047. MAKING THEM WARM AND HEAVY. THE RELAXATION FEELS VERY GOOD, IT FEELS SO
  4048. GOOD TO RELAX AND LET GO. AS THE TINGLING CONTINUES ITS JOURNEY UP INTO
  4049. YOUR SOLAR PLEXUS, YOU FEEL YOUR INNER STOMACH BECOME VERY RELAXED. NOW,
  4050. IT MOVES SLOWLY INTO YOUR CHEST, MAKING YOUR BREATHING RELAXED AS WELL.
  4051. THE FEELING BEGINS TO MOVE UP YOUR ARMS TO YOUR SHOULDERS, MAKING YOUR ARMS
  4052. HEAVY AND RELAXED AS WELL. YOU ARE AWARE OF THE TOTAL RELAXATION YOU ARE
  4053. NOW EXPERIENCING, AND YOU GIVE WAY TO IT. IT IS GOOD AND PEACEFUL, THE
  4054. TINGLING NOW MOVEVES INTO YOUR FACE AND HEAD, RELAXING YOUR JAWS, NECK, AND
  4055. FACIAL MUSCLES, MAKING YOUR CARES AND WORRIES FLOAT AWAY. AWAY INTO THE
  4056. BLUE SKY AS YOU REST BLISFUlLY ON THE CLOUD....
  4057. IF THEY ARE NOT RESPONSIVE OR YOU THINK THEY (HE OR SHE..) IS GOING TO
  4058. SLEEP, THEN ADD IN A "...ALWAYS CONCENTRATING UPON MY VOICE, INGORING ALL
  4059. OTHER SOUNDS. EVEN THOUGH OTHER SOUNDS EXSIST, THEY AID YOU IN YOUR
  4060. RELAXATION..." THEY SHOULD SOON LET OUT A SIGH AS IF THEY WERE LETTING GO,
  4061. AND THEIR FACE SHOULD HAVE A "WOODENESS" TO IT, BECOMING FEATURLESS... NOW,
  4062. SAY THE FOLLOWING ".... YOU NOW FIND YOURSELF IN A HALLWAY, THE HALLWAY IS
  4063. PEACEFUL AND NICE. AS I COUNT FROM 10 TO 1 YOU WILL IMAGINE YOURSELF
  4064. WALKING FURTHER AND FURTHER DOWN THE HALL. WHEN I REACH ONE YOU WILL FIND
  4065. YOURSELF WHERE YOU WANT TO BE, IN ANOTHER, HIGHER STATE OF CONCIOUS AND
  4066. MIND. (COUNT FROM TEN TO ONE)....." DO THIS ABOUT THREE OR FOUR TIMES.
  4067. THEN, TO TEST IF THE SUBJECT IS UNDER HYPNOSIS OR NOT, SAY....
  4068. "...YOU FEEL A STRANGE SENSATION IN YOUR (ARM THEY WRITE WITH) ARM, THE
  4069. FEELING BEGINS AT YOUR FINGERS AND SLOWLY MOVES UP YOUR ARM, AS IT MOVES
  4070. THROUGH YOUR ARM YOUR ARM BECOMES LIGHTER AND LIGHTER, IT WILL SOON BE SO
  4071. LIGHT IT WILL ..... BECOMING LIGHTER AND LIGHTER WHICH EACH BREATH AND
  4072. MOMENT..."
  4073. THEIR FINGERS SHOULD BEGIN TO TWITCH AND THEN MOVE UP, THE ARM FOLLOWING,
  4074. NOW MY FRIEND, YOU HAVE HIM/HEP IN HYPNOSIS. THE FIRST TIME YOU DO THIS,
  4075. WHILE HE/SHE IS UNDER SAY GOOD THINGS, LIKE: "YOUR GOING TO FEEL GREAT
  4076. TOMORROW" OR "EVERY DAY IN EVERY WAY YOU WILL FIND YOURSELF BECOMING BETTER
  4077. AND BETTER".. OR SOME CRAP LIKE THAT... THE MORE THEY GO UNDER, THE DEEPER
  4078. IN HYPNOSIS THEY WILL GET EACH TIME YOU DO IT.
  4079.  
  4080. +----------------------------+
  4081. ! WHAT TO DO WHEN HYPNOTISED !
  4082. +----------------------------+
  4083.  
  4084. WHEN YOU HAVE THEM UNDER YOU MUST WORD THINGS VERY CAREFULLY TO GET YOUR
  4085. WAY. YOU CANNOT SIMPLY SAY... TAKE OFF YOUR CLOTHES AND FUCK THE PILLOW.
  4086. NO, THAT WOULD NOT REALLY DO THE TRICK. YOU MUST SAY SOMETHING LIKE....
  4087. "YOU FIND YOUR SELF AT HOME, IN YOUR ROOM AND YOU HAVE TO TAKE A SHOWER
  4088. (VIVIDLY DESCRIBE THEIR ROOM AND WHATS HAPPENING), YOU BEGIN TO TAKE OFF
  4089. YOUR CLOTHES..." NOW, IT CANT BE THAT SIMPLE, YOU MUST KNOW THE PERSONS
  4090. HOUSE, ROOM, AND SHOWER ROOM. THEN DESCRIBE THINGS VIVIDLY AND TELL THEM
  4091. TO ACT IT OUT (THEY HAVE TO BE DEEPLY UNDER TO DO THIS...). I WOULD JUST
  4092. SUGGEST THAT YOU EXPERIMENT A WHILE, AND GET TO KNOW HO; TO DO THINGS.
  4093.  
  4094. +-----------+
  4095. ! WAKING UP !
  4096. +-----------+
  4097.  
  4098. WAKING UP IS VERY EASY, JUST SAY.. "...AS I COUNT FROM 1 TO 5 YOU WILL
  4099. FIND YOURSELF BECOMMING MORE AND MORE AWAKE, MORE AND MORE LIVELY. WHEN
  4100. YOU WAKE UP YOU WILL FIND YOURSELF COMPLETELY ALIVE, AWAKE, AND REFRESHED.
  4101. MENTALLY AND PHYSICALLY, REMEMBERING THE PLEASANT SENSATION THAT HYPNOSIS
  4102. BRINGS... WAKING UP FEELING LIKE A NEW BORN BABY, REBORN WITH LIFE AND
  4103. VIGOR, FEELING EXCELLENT. REMEMBERING THAT NEXT TIME YOU ENTER HYPNOSIS IT
  4104. WILL BECOME AN EVER INCREASING DEEPER AND DEEPER STATE THAN BEFORE.
  4105. 1- YOU FEEL ENERGY COURSE THROUGHOUT YOUR LIMBS.
  4106. 2- YOU BEGIN TO BREATHE DEEPLY, STIRRING.
  4107. 3- BEGINING TO MOVE MORE AND MORE YOUR EYES OPEN, BRINGING YOU UP TO
  4108. FULL CONCIOUS.
  4109. 4- YOU ARE UP,UP, UP AND AWAKENING MORE AND MORE.
  4110. 5- YOU ARE AWAKE AND FEELING GREAT."
  4111.  
  4112. AND THATS IT! YOU NOW KNOW HOW TO HYPNOTISE YOURSELF AND SOMEONE ELSE.
  4113. YOU WILL LEARN MORE AND MORE AS YOU EXPERIMENT.
  4114.  
  4115. ------------------Jolly Roger
  4116.  
  4117. ##########################################################################
  4118. # #
  4119. # The Remote Informer #
  4120. # #
  4121. #------------------------------------------------------------------------#
  4122. # Reader supported newsletter for the underworld #
  4123. #------------------------------------------------------------------------#
  4124. # #
  4125. # Editors: Tracker and Norman Bates #
  4126. # #
  4127. #========================================================================#
  4128. # September 1987 Issue: 01 #
  4129. #========================================================================#
  4130. # The Headlines #
  4131. #------------------------------------------------------------------------#
  4132. # 1) Introduction #
  4133. # 2) Hacking Sprint: The Easy Way #
  4134. # 3) Rumors: Why spread them? #
  4135. # 4) The New Sprint FON Calling Cards #
  4136. # 5) Automatic Number Identifier (ANI) #
  4137. ##########################################################################
  4138.  
  4139. Introduction
  4140. --------------------------------------------------------------------------
  4141. Welcome to the first issue of 'The Remote Informer'! This newsletter
  4142. is reader supported. If the readers of this newsletter do not help
  4143. support it, then it will end. We are putting this out to help out the
  4144. ones that would like to read it. If you are one of those who thinks they
  4145. know everything, then don't bother reading it. This newsletter is not
  4146. anything like the future issues. The future issues will contain several
  4147. sections, as long as reader input is obtained. Below is an outline
  4148. overview of the sections in the future issues.
  4149.  
  4150. I/O Board (Input/Output Board)
  4151.  
  4152. The I/O Board is for questions you have, that we might be able to
  4153. answer or atleast refer you to someone or something. We will be honest if
  4154. we cannot help you. We will not make up something, or to the effect, just
  4155. to make it look like we answered you. There will be a section in the I/O
  4156. Board for questions we cannot answer, and then the readers will have the
  4157. opportunity to answer it. We will print anything that is reasonable in
  4158. the newsletter, even complaints if you feel like you are better than
  4159. everyone.
  4160.  
  4161. NewsCenter
  4162.  
  4163. This section will be for news around the underworld. It will talk of
  4164. busts of people in the underworld and anything else that would be
  4165. considered news. If you find articles in the paper, or something happens
  4166. in your local area, type it up, and upload it to one of the boards listed
  4167. at the end of the newsletter. Your handle will be placed in the article.
  4168. If you do enter a news article, please state the date and from where you
  4169. got it.
  4170.  
  4171. Feature Section
  4172.  
  4173. The Feature Section will be the largest of the sections as it will be
  4174. on the topic that is featured in that issue. This will be largely reader
  4175. input which will be sent in between issues. At the end of the issue at
  4176. hand, it will tell the topic of the next issue, therefore, if you have
  4177. something to contribute, then you will have ample time to prepare your
  4178. article.
  4179.  
  4180. Hardware/Software Review
  4181. In this section, we will review the good and bad points of hardware
  4182. and software related to the underworld. It will be an extensive review,
  4183. rather than just a small paragraph.
  4184.  
  4185. The Tops
  4186.  
  4187. This section will be the area where the top underworld BBS's, hacking
  4188. programs, modem scanners, etc. will be shown. This will be reader
  4189. selected and will not be altered in anyway. The topics are listed below.
  4190. Underworld BBS's (Hack, Phreak, Card, Anarchy, etc.)
  4191. Hacking programs for Hayes compatables
  4192. Hacking programs for 1030/Xm301 modems
  4193. Modem scanners for Hayes compatables
  4194. Modem scanners for 1030/Xm301 modems
  4195. Other type illegal programs
  4196. You may add topics to the list if enough will support it.
  4197.  
  4198. Tid Bits
  4199.  
  4200. This will contain tips and helpful information sent in by the users.
  4201. If you have any information you wish to contribute, then put it in a text
  4202. file and upload it to one of the BBS's listed at the end of the
  4203. newsletter.
  4204. Please, no long distance codes, mainframe passwords, etc.
  4205. We may add other sections as time goes by. This newsletter will not
  4206. be put out on a regular basis. It will be put out when we have enough
  4207. articles and information to put in it. There may be up to 5 a month, but
  4208. there will always be at least one a month. We would like you, the readers,
  4209. to send us anything you feel would be of interest to others, like hacking
  4210. hints, methods of hacking long distance companies, companies to card from,
  4211. etc. We will maintain the newsletter as long as the readers support it.
  4212. That is the end of the introduction, but take a look at this newsletter,
  4213. as it does contain information that may be of value to you.
  4214. ==========================================================================
  4215. Hacking Sprint: The Easy Way
  4216. -------------------------------------------------------------------------
  4217. By: Tracker
  4218.  
  4219. If you hack US Sprint, 950-0777 (by the way it is no longer GTE
  4220. Sprint), and you are fustrated at hacking several hours only to find one
  4221. or two codes, then follow these tips, and it will increase your results
  4222. tremendously. First, one thing that Mr. Mojo proved is that Sprint will
  4223. not store more than one code in every hundred numbers. (ex: 98765400 to
  4224. 98765499 may contain only one code). There may NOT be a code in that
  4225. hundred, but there will never be more than one.
  4226. Sprint's 9 digit codes are stored from 500000000 through 999999999.
  4227. In the beginning of Sprint's 950 port, they only had 8 digit codes. Then
  4228. they started converting to 9 digit codes, storing all 8 digit codes
  4229. between 10000000 and 49999999 and all 9 digit codes between 500000000 and
  4230. 999999999. Sprint has since cancelled most 8 digit codes, although there
  4231. are a few left that have been denoted as test codes. Occaisionally, I
  4232. hear of phreaks saying they have 8 digit codes, but when verifying them,
  4233. the codes were invalid.
  4234. Now, where do you start? You have already narrowed the low and high
  4235. numbers in half, therefore already increasing your chances of good results
  4236. by 50 percent. The next step is to find a good prefix to hack. By the
  4237. way, a prefix, in hacking terms, is the first digits in a code that can be
  4238. any length except the same number of digits the code is. (ex: 123456789
  4239. is a code. That means 1, 12, 123, 1234, 12345, 123456, 1234567, and
  4240. 12345678 are prefixes) The way you find a good prefix to hack is to
  4241. manually enter a code prefix. If when you enter the code prefix and a
  4242. valid destination number and you do not hear the ringing of the recording
  4243. telling you that the code is invalid until near the end of the number,
  4244. then you know the prefix is valid. Here is a chart to follow when doing
  4245. this:
  4246. Code - Destination Range good codes exist
  4247. -------------------------------------------------
  4248. 123456789 - 6192R 123400000 - 123499999
  4249. 123456789 - 619267R 123450000 - 123459999
  4250. 123456789 - 61926702R 123456000 - 123456999
  4251. 123456789 - 6192670293R 123456700 - 123456799
  4252. -------------------------------------------------
  4253. ( R - Denotes when ring for recording starts)
  4254. To prove
  4255. this true, I ran a test using OmniHack 1.3p, written by
  4256. Jolly Joe. In this test I found a prefix where the last 3 digits were all
  4257. I had to hack. I tested each hundred of the 6 digit prefix finding that
  4258. all but 4 had the ring start after the fourth digit was dialed in the
  4259. destination number. The other four did not ring until I had finished the
  4260. entire code. I set OmniHack to hack the prefix + 00 until prefix + 99.
  4261. (ex: xxxxxxy00 to xxxxxxy99: where y is one of the four numbers that the
  4262. ring did not start until the dialing was completed.) Using this method, I
  4263. found four codes in a total of 241 attempts using ascending hacking (AKA:
  4264. Sequential). Below you will see a record of my hack:
  4265. Range of hack Codes found Tries
  4266. ----------------------------------------------
  4267. xxxxxx300 - xxxxxx399 xxxxxx350 50
  4268. xxxxxx500 - xxxxxx599 xxxxxx568 68
  4269. xxxxxx600 - xxxxxx699 xxxxxx646 46
  4270. xxxxxx800 - xxxxxx899 xxxxxx877 77
  4271. ----------------------------------------------
  4272. Totals 4 codes 241
  4273. As you see, these methods work. Follow these guidlines and tips and
  4274. you should have an increase in production of codes in the future hacking
  4275. Sprint. Also, if you have any hints/tips you think others could benefit
  4276. from, then type them up and upload them to one of the boards at the end of
  4277. the newsletter.
  4278. ==========================================================================
  4279. Rumors: Why Spread Them?
  4280. --------------------------------------------------------------------------
  4281. By: Tracker
  4282. Do you ever get tired of hearing rumors? You know, someone gets an
  4283. urge to impress others, so they create a rumor that some long distance
  4284. company is now using tracing equipment. Why start rumors? It only scares
  4285. others out of phreaking, and then makes you, the person who started the
  4286. rumor, look like Mr. Big. This article is short, but it should make you
  4287. aware of the rumors that people spread for personal gain. The best thing
  4288. to do is to denote them as a rumor starter and then leave it at that. You
  4289. should not rag on them constantly, since if the other users cannot
  4290. determine if it is fact or rumor, then they should suffer the
  4291. consequences.
  4292. ==========================================================================
  4293. The New Sprint FON Calling Cards
  4294. --------------------------------------------------------------------------
  4295. By: Tracker
  4296. US Sprint has opened up a new long distance network called the Fiber
  4297. Optic Network (FON), in which subscribers are given calling cards. These
  4298. calling cards are 14 digits, and though, seem randomly generated, they are
  4299. actually encrypted. The rumors floating around about people getting
  4300. caught using the Sprint FON calling cards are fact, not rumors. The
  4301. reason people are getting caught is that they confuse the FON calling
  4302. cards with the local 950 port authorization codes. If you will remember,
  4303. you never use AT&T calling cards from you home phone. It has ANI
  4304. capability, which is not tracing, but rather the originating phone number
  4305. is placed on the bill as soon as the call is completed. They know your
  4306. phone number when you call the 800 access port, but they do not record it
  4307. until your call is completed. Also, through several of my hacks, I came
  4308. up with some interesting information surrounding the new Sprint network.
  4309. They are listed below.
  4310. 800-877-0000
  4311. This number is for information on US Sprint's 800 calling card
  4312. service. I have not played around with it, but I believe it is for
  4313. trouble or help with the FON calling cards. I am not sure if it is for
  4314. subscribing to the FON network.
  4315. 800-877-0002 - You hear a short tone, then nothing.
  4316. 800-877-0003 - US Sprint Alpha Test Channel #1
  4317. 800-877-(0004-0999)
  4318. When you call these numbers, you get a recording saying: "Welcome to
  4319. US Sprint's 1 plus service." When the recording stops, if you hit the
  4320. pound key (#) you will get the calling card dial tone.
  4321. Other related Sprint numbers
  4322. 800-521-4949 This is the number that you subscribe to US Sprint with.
  4323. You may also subscribe to the FON network on this number. It will take 4
  4324. to 5 weeks for your calling card to arrive.
  4325. 10777
  4326. This is US Sprint's equal access number. When you dial this number,
  4327. you then dial the number you are calling, and it will be billed through US
  4328. Sprint, and you will receive their long distance line for that call. Note
  4329. that you will be billed for calls made through equal access. Do not
  4330. mistake it to be a method of phreaking, unless used from a remote
  4331. location.
  4332. If you are in US Sprint's 1+ service then call 1+700-555-1414, which
  4333. will tell you which long distance company you are using. When you hear:
  4334. "Thank you for choosing US Sprint's 1 plus service," hit the pound key
  4335. (#), and then you will get the US Sprint dial tone. This however is just
  4336. the same as if you are calling from your home phone if you dial direct, so
  4337. you would be billed for calls made through that, but there are ways to use
  4338. this to your advantage as in using equal access through a PBX.
  4339. ==========================================================================
  4340. Automatic Number Identification (ANI)
  4341. --------------------------------------------------------------------------
  4342. By: Tracker
  4343.  
  4344. The true definition for Automatic Number Identification has not been
  4345. widely known to many. Automatic Number Identification, (AKA: ANI), is the
  4346. process of the destination number knowing the originating number, which is
  4347. where you are calling from. The method of achieving this is to send the
  4348. phone number that you are calling from in coded form ahead of the
  4349. destination number. Below is an example of this.
  4350. ANI Method
  4351. Dial: 267-0293
  4352. Sent: ********2670293
  4353. * - Denotes the originating number which is coded and sent before the
  4354. number
  4355. As you noticed there are 8 digits in the coded number. This is
  4356. because, at least I believe, it is stored in a binary-like form.
  4357. Automatic Number Identification means a limited future in phreaking. ANI
  4358. does not threaten phreaking very much yet, but it will in the near future.
  4359. A new switching system will soon be installed in most cities that are
  4360. covered by ESS, Electronic Switching System, now.
  4361. The system will have ANI capabilities which will be supplied to the
  4362. owners of phone lines as an›added extra. The owner's phone will have
  4363. an LED read-out that will show the phone number of the people that
  4364. call you. You will be able to block some numbers, so that people
  4365. cannot call you. This system is in the testing stages currently, but will
  4366. soon be installed across most of the country. As you see, this will
  4367. end a large part of phreaking, until we, the phreakers, can come up with
  4368. an alternative. As I have been told by several, usually reliable,
  4369. people, this system is called ISS, which I am not sure of the meaning of
  4370. this, and is being tested currently in Rhode Island.
  4371. 800 in-watts lines set up by AT&T support ANI. The equipment to
  4372. decode an ANI coded origination number does not costs as much as you would
  4373. expect. 950 ports do not offer ANI capability, no matter what you have
  4374. been told. The 950 ports will only give the city in which they are based,
  4375. this usually being the largest in the state, sometimes the capitol.
  4376. One last thing that I should tell you is that ANI is not related to
  4377. tracing. Tracing can be done on any number whether local, 950, etc. One
  4378. way around this, especially when dialing Alliance TeleConferencing, is to
  4379. dial through several extenders or ports. ANI will only cover the number
  4380. that is calling it, and if you call through a number that does not support
  4381. ANI, then your number will never be known.
  4382. ==========================================================================
  4383. The Disclaimer!
  4384. --------------------------------------------------------------------------
  4385.  
  4386. We, the editors, take no responsibility for your actions and use of
  4387. the information in this newsletter. This newsletter is for informational
  4388. purposes only. There will never be any long distance codes, passwords,
  4389. etc. in this newsletter. If you are easily offended by telecommunication
  4390. discussions, then we suggest that you not read this newsletter. But for
  4391. those who are truely interested in the information in this newsletter,
  4392. enjoy it.
  4393.  
  4394. Brought to you in Cookbook, courtesy of the Jolly Roger!!!!!!!!!!
  4395.  
  4396.  
  4397. Jackpotting ATM Machines courtesy of the Jolly Roger
  4398.  
  4399. JACKPOTTING was done rather successfully a while back in (you guessed it)
  4400. New York. What the culprits did was:
  4401. Sever (actually cross over) the line between the ATM and the
  4402. host. insert a microcomputer between the ATM and the host. insert
  4403. a fradulent card into the ATM. (card=cash card, not hardware)
  4404. What the ATM did was: send a signal to the host, saying "Hey! Can I
  4405. give this guy money, or is he broke, or is his card invalid?"
  4406. What the microcomputer did was: intercept the signal from the host,
  4407. discard it, send "there's no one using the ATM" signal.
  4408. What the host did was: get the "no one using" signal, send back "okay,
  4409. then for God's sake don't spit out any money!" signal to ATM.
  4410. What the microcomputer did was:
  4411. intercept signal (again), throw it away (again), send "Wow! That
  4412. guy is like TOO rich! Give him as much money as he wants. In
  4413. fact, he's so loaded, give him ALL the cash we have! He is
  4414. really a valued customer." signal.
  4415. What the ATM did:
  4416. what else? Obediently dispense cash till the cows came home (or
  4417. very nearly so).
  4418. What the crooks got:
  4419. well in excess of $120,000 (for one weekend's work), and several
  4420. years when they were caught.
  4421. This story was used at a CRYPTOGRAPHY conference I attended a while
  4422. ago to demonstrate the need for better information security. The
  4423. lines between ATM's & their hosts are usually 'weak' in the sense that
  4424. the information transmitted on them is generally not encrypted in any
  4425. way. One of the ways that JACKPOTTING can be defeated is to encrypt
  4426. the information passing between the ATM and the host. As long as the
  4427. key cannot be determined from the ciphertext, the transmission (and
  4428. hence the transaction) is secure.
  4429. A more believable, technically accurate story might concern a person
  4430. who uses a computer between the ATM and the host to determine the key
  4431. before actually fooling the host. As everyone knows, people find
  4432. cryptanalysis a very exciting and engrossing subject...don't they?
  4433. (Hee-Hee)
  4434.  
  4435. _____ ______
  4436. | |-<<-| |-<<-| |
  4437. |ATM| micro |Host|
  4438. |___|->>-| |->>-|____|
  4439.  
  4440. The B of A ATM's are connected through dedicated lines to a host
  4441. computer as the Bishop said. However, for maintenance purposes, there
  4442. is at least one separate dial-up line also going to that same host
  4443. computer. This guy basically bs'ed his way over the phone till he
  4444. found someone stupid enough to give him th number. After finding that,
  4445. he had has Apple hack at the code. Simple.
  4446. Step 2: He had a friend go to an ATM with any B of A ATM card. He
  4447. stayed at home with the Apple connected to the host. When his friend
  4448. inserted the card, the host displayed it. The guy with the Apple
  4449. modified the status & number of the card directly in the host's
  4450. memory. He turned the card into a security card, used for testing
  4451. purposes. At that point, the ATM did whatever it's operator told it to
  4452. do.
  4453. The next day, he went into the bank with the $2000 he received,
  4454. talked to the manager and told him every detail of what he'd done. The
  4455. manager gave him his business card and told him that he had a job
  4456. waiting for him when he got out of school.
  4457. Now, B of A has been warned, they might have changed the system. On
  4458. the other hand, it'd be awful expensive to do that over the whole
  4459. country when only a handful of people have the resources and even less
  4460. have the intelligence to duplicate the feat. Who knows?
  4461.  
  4462. Jug Bomb by the Jolly Roger
  4463.  
  4464. Take a glass jug, and put 3 to 4 drops of gasoline into it. Then put
  4465. the cap on, and swish the gas around so the inner surface of the jug
  4466. is coated. Then add a few drops of potassium permanganate solution
  4467. into it and cap it. To blow it up, either throw it at something, or
  4468. roll it at something.
  4469. ------------Jolly Roger
  4470.  
  4471. Fun at K-Mart by the Jolly Roger
  4472.  
  4473. Well, first off, one must realise the importance of K-Marts in
  4474. society today. First off, K-Marts provide things cheaper to those who
  4475. can't afford to shop at higher quality stores. Although, all I ever
  4476. see in there is minorities and Senior Citizens, and the poor people in
  4477. our city. Personally, I wouldn't be caught dead in there. But, once,
  4478. I did.
  4479. You see, once, after The Moon Roach and Havoc Chaos(Dear friends of
  4480. mine) and I were exploring such fun things as rooftops, we came along
  4481. a K-Mart. Amused, and cold for that matter, we wandered in. The
  4482. Tension mounts.
  4483. As we walked up to the entrance, we were nearly attacked by Youth
  4484. Groups selling cheap cookies, and wheelchair sticken people selling
  4485. American Flags. After laughing at these people, we entered. This is
  4486. where the real fun begins...
  4487. First, we wandered around the store, and turned on all the blue
  4488. lights we could find. That really distracts and confuses the
  4489. attendents...Fun to do...
  4490. The first neat thing, is to go to the section of the store where
  4491. they sell computers. Darkness engulf the earth the day they find Apple
  4492. Computers being sold there. Instead, lesser computers like the
  4493. laughable C-64 can be found there...Turn it on, and make sure
  4494. nobody's looking...Then, once in Basic, type...
  4495.  
  4496. ]10 PRINT "Fuck the world! Anarchy Rules!" (or something to that
  4497. effect.)
  4498. ]20 GOTO 10 and walk away.
  4499.  
  4500. Also, set the sample radios in the store to a santanic rock station,
  4501. and turn the radio off. Then, set the alarm for two minutes ahead of
  4502. the time displayed there. Turn the volume up all the way, and walk
  4503. away. After about two minutes, you will see the clerk feebly attempt
  4504. to turn the radio down or off. It's really neat to set ten or more
  4505. radios to different stations, and walk away.
  4506. One of my favorite things to do, is to get onto the intercom system
  4507. of the store. Easier typed then done. First, check out the garden
  4508. department. You say there's no attendent there? Good. Sneak
  4509. carefully over to the phone behind the cheap counter there, and pick
  4510. it up. Dial the number corrisponding to the item that says 'PAGE'...
  4511. And talk. You will note that your voice will echo all over the bowels
  4512. of K-Mart.
  4513. I would suggest announcing something on the lines of: "Anarchy
  4514. rules!!"
  4515. ---------------Jolly Roger
  4516.  
  4517. Mace Substitute by the Jolly Roger
  4518.  
  4519. 3 PARTS: Alcohol
  4520. 1/2 PARTS: Iodine
  4521. 1/2 PARTS: Salt
  4522. Or:
  4523. 3 PARTS: Alcohol
  4524. 1 PARTS: Iodized Salt (Mortons)
  4525.  
  4526. It's not actual mace, but it does a damn good job on the eyes...
  4527.  
  4528. --------------Jolly Roger
  4529.  
  4530. How to grow Marijuana courtesy of the Jolly Roger
  4531.  
  4532. MARIJUANA
  4533. Marijuana is a deciduous plant which grows from seeds. The fibrous section
  4534. of the plant was (has been replaced by synthetics) used to make rope.
  4535. The flowering tops, leaves, seeds, and resin of the plant is
  4536. used by just about everyone to get HIGH.
  4537. Normally, the vegetable parts of the plant are smoked to produce this
  4538. "high," but thay can also be eaten. The axtive ingredient in marijuana
  4539. resin is THC (tetahydrocannabinol). Marijuana contains from 1 - 4 per
  4540. cent THC (4 per cent must be considered GOOD dope).
  4541. Marijuana grows wild in many parts of the world, and is cultivated in
  4542. Mexice, Vietnam, Africa, Nepal, India, South America, etc.,etc. The
  4543. marijuana sold in the United States comes primarily from, yes, the
  4544. Uniited States.
  4545. It is estimated that at least 50 per cent of the grass on the streets
  4546. in America is homegrown. The next largest bunch comes actoss the
  4547. borders from Mexico, with smaller amounts filtering in from Panama,
  4548. occasionally South America, and occasinally, Africa.
  4549. Hashish is the pure resin of the marijuana plant, which is scraped from
  4550. the flowering tops of the plant and lumped together. Ganja is the
  4551. ground-up tops of the finest plants. (It is also the name given to any
  4552. sort of marijuana in Jamaica.)
  4553. Marijuana will deteriorate in about two years if exposed to light,
  4554. air or heat. It should always be stored in cool places.
  4555. Grass prices in the United States are a direct reflection of the laws
  4556. of supply and demand (and you thought that high school economics
  4557. would never be useful). A series of large border busts, a short growing
  4558. season, a bad crop, any number of things can drive the price of marijuana
  4559. up. Demand still seems to be on the increase in the U.S., so prices seldom
  4560. fall below last year's level.
  4561. Each year a small seasonal drought occurs, as last year's supply runs
  4562. low, and next year's crop is not up yet. Prices usually rase about
  4563. 20 - 75 per cent during this time and then fall back to "normal."
  4564. Unquestionably, a large shortage of grass causes a percentage of smokers
  4565. to turn to harder drugs instead. For this reason, no grass control
  4566. program can ever be beneficial or "successful."
  4567. GROW IT!
  4568. There is one surefire way of avoiding high prices and the grass DT's:
  4569. Grow your own. This is not as difficult as some "authorities" on the
  4570. subject would make you believe. Marijuana is a weed, and a fairly
  4571. vivacious one at that, and it will grow almost in spite of you.
  4572. OUTDOORS
  4573. Contrary to propular belief, grass grows well in many place on the
  4574. North American continent. It will flourish even if the temperature does
  4575. not raise above 75 degrees.
  4576. The plants do need a minimum of eight hours of sunlight per day and
  4577. should be planted in late April/early May, BUT DEFINITELY, after the
  4578. last frost of the year.
  4579. Growing an outdoor, or "au naturel", crop has been the favored method
  4580. over the years, because grass seems to grow better without as much
  4581. attention when in its natural habitat.
  4582. Of course, an outdoors setting requires special precautions not encoun-
  4583. tered with an indoors crop; you must be able to avoid detection, both from
  4584. law enforcement freaks and common freaks, both of whom will take your
  4585. weed and probably use it. Of course, one will also arrest you. You must
  4586. also have access to the area to prepare the soil and harvest the crop.
  4587. There are two schools of thought about starting the seeds. One says you
  4588. should start the seedlings for about ten days in an indoor starter box
  4589. (see the indoor section) and then transplant. The other theory is that
  4590. you should just start them in the correct location. Fewer plants will
  4591. come up with this method, but there is no shock of transplant to
  4592. kill some of the seedlings halfway through.
  4593. The soil should be preprepared for the little devils by turning it
  4594. over a couple of times and adding about one cup of hydrated lime per
  4595. square yard of soil and a little bit (not too much, now) of good water
  4596. soluble nitrogen fertilizer. The soil should now be watered several
  4597. times and left to sit about one week.
  4598. The plants should be planted at least three feet apart, getting too
  4599. greedy and stacking them too close will result in stunted plants.
  4600. The plants like some water during their growing season, BUT not too
  4601. much. This is especially true around the roots, as too much water will
  4602. rot the root system.
  4603. Grass grows well in corn or hops, and these plants will help provide
  4604. some camouflage. It does not grow well with rye, spinach, or pepperweed.
  4605. It is probally a good idea to plant in many small, broken patches, as
  4606. people tend to notice patterns.
  4607. GENERAL GROWING INFO
  4608. Both the male and he female plant produce THC resin, although the male
  4609. is not as strong as the female. In a good crop, the male will still be
  4610. plenty smokable and should not be thrown away under any circumstances.
  4611. Marijuana can reach a hight of twenty feet (or would you rather wish on
  4612. a star) and obtain a diameter of 4 1/2 inches. If normal, it has a sex
  4613. ratio of about 1:1, but this can be altered in several ways.
  4614. The male plant dies in the 12th week of growing, the female will live
  4615. another 3 - 5 weeks to produce her younguns. Females can weigh twice as
  4616. much as males when they are mature.
  4617. Marijuana soil should compact when you squeeze it, but should also break
  4618. apart with a small pressure and absorb water well. A nice test
  4619. for either indoor or outdoor growing is to add a bunch of worms to the
  4620. soil, if they live and hang aroung, it is good soil, but if they don't,
  4621. well, change it. Worms also help keep the soil loose enough for the
  4622. plants to grow well.
  4623. SEEDS
  4624. To get good grass, you should start with the right seeds. A nice starting
  4625. point is to save the seeds form the best batch you have consumed. The
  4626. seeds should be virile, that is, they should not be grey and shiriveled
  4627. up, but green, meaty, and healthy appearing. A nice test is to drop the
  4628. seeds on a hot frying pan. If they "CRACK," they are probably good for
  4629. planting purposes.
  4630. The seeds should be soaked in distilled water overnight before planting.
  4631. BE SURE to plant in the ground with the pointy end UP. Plant about 1/2"
  4632. deep. Healthy seeds will sprout in about five days.
  4633. SPROUTING
  4634. The best all around sprouting method is probably to make a sprouting box
  4635. (as sold in nurseries) with a slated bottom or use paper cups with holes
  4636. punched in the bottoms. The sprouting soil should be a mixture of humus,
  4637. soil, and five sand with a bit of organic fertilizer and water mixed
  4638. in about one week before planting.
  4639. When ready to transplant, you must be sure and leave a ball of soil
  4640. around the roots of each plant. This whole ball is dropped into a
  4641. baseball-sized hold in the permanent soil.
  4642. If you are growing/transplanting indoors, you should use a green
  4643. safe light (purchased at nurseries) during the transplanting operation.
  4644. If you are transplanting outdoors, you should time it about two
  4645. hours befor sunset to avoid damage to the plant. Always wear cotton
  4646. gloves when handling the young plants.
  4647. After the plants are set in the hole, you should water them. It is also
  4648. a good idea to use a commercial transplant chemical (also purchased at
  4649. nurseries) to help then overcome the shock.
  4650. INDOOR GROWING
  4651. Indoor growing has many advantages, besides the apparent fact that it
  4652. is much harder to have your crop "found," you can control the ambient
  4653. conditions just exactly as you want them and get a guaranteed "good"
  4654. plant.
  4655. Plants grown indoors will not appear the same as their outdoor cousins.
  4656. They will be scrawnier appearing with a weak stems and may even require
  4657. you to tie them to a growing post to remain upright, BUT THEY WILL HAVE
  4658. AS MUCH OR MORE RESIN!
  4659. If growing in a room, you should put tar paper on the floors and then
  4660. buy sterilized bags of soil form a nursery. You will need about one
  4661. cubic foot of soil for eavh plant.
  4662. The plants will need about 150 ml. of water per plant/per week. They
  4663. will also need fresh air, so the room must be ventilated. (however,
  4664. the fresh air should contain NO TOBACCO smoke.)
  4665. At least eight hours of light a day must be provided. As you increase
  4666. the light, the plants grow faster and show more females/less males.
  4667. Sixteen hours of light per day seems to be the best combination, beyond
  4668. this makes little or no appreciable difference in the plant quality.
  4669. Another idea is to interrupt the night cycle with about one hour of
  4670. light. This gives you more females.
  4671. The walls of your growing room should be painted white or covered with
  4672. aluminum foil to reflect the light.
  4673. The lights themselves can be either bulbs of fluorescent. Figure about
  4674. 75 watts per plant or one plant per two feet of flouresent tube.
  4675. The fluorescents are the best, but do not use "cool white" types. The
  4676. light sources should be an average of twenty inches from the
  4677. plant and NEVER closer than 14 inches. They may be mounted on a rack
  4678. and moved every few days as the plants grow.
  4679. The very best light sources are those made by Sylvania and others
  4680. especially for growing plants (such as the "gro lux" types).
  4681. HARVESTING AND DRYING
  4682. The male plants will be taller and have about five green or yellow sepals,
  4683. which will split open to fertilize the female plant with pollen.
  4684. The female plant is shorter and has a small pistillate flower, which
  4685. really doesn't look like a flower at all but rather a small bunch of
  4686. leaves in a cluster.
  4687. If you don't want any seeds, just good dope, you should pick the males
  4688. before they shed their pollen as the female will use some of her resin
  4689. to make the seeds.
  4690. After another three to five weeks, after the males are gone, the females
  4691. will begin to wither and die (from loneliness?), this is the time to pick.
  4692. In some nefarious Middle Eastren countries, farmers reportedly put their
  4693. beehives next to fiels of marijuana. The little devils collect the grass
  4694. pollen for their honey, which is supposed to contain a fair dosage
  4695. of THC.
  4696. The honey is then enjoyed by conventional methods or made into ambrosia.
  4697. If you want seeds - let the males shed his pollen then pick him. Let
  4698. the female go another month and pick her.
  4699. To cure the plants, they must be dried. On large crops, this is
  4700. accomplished by constructing a drying box or drying room.
  4701. You must have a heat source (such as an electric heater) which will make
  4702. the box/room each 130 degrees. The box/room must be ventilated
  4703. to carry off the water-vapor-laden air and replace it with fresh.
  4704. A good box can be constructed from an orange crate with fiberglass
  4705. insulated walls, vents in the tops, and screen shelves to hold the leaves.
  4706. There must be a baffle between the leaves and the heat source.
  4707. A quick cure for smaller amounts is to: cut the plant at the soil level
  4708. and wrap it in a cloth so as not to loose any leavs. Take out any seeds
  4709. by hand and store. Place all the leaves on a cookie sheet or aluminum
  4710. foil and put them in the middle sheld of the oven, which is set on "broil."
  4711. In a few seconds, the leaves will smoke and curl up, stir them around and
  4712. give another ten seconds before you take them out.
  4713. TO INCREASE THE GOOD STUFF
  4714. There are several tricks to increase the number of females, or the THC
  4715. content of plants:
  4716. You can make the plants mature in 36 days if you are in a hurry, by cutting
  4717. back on the light to about 14 hours, but the plants will not be as big.
  4718. You should gradually shorten the light cycle until you reach fourteen
  4719. hours.
  4720. You can stop any watering as the plants begin to bake the resin rise to
  4721. the flowers. This will increse the resin a bit.
  4722. You can use a sunlamp on the plants as they begin to develop flower stalks.
  4723. You can snip off the flower, right at the spot where it joins the plant,
  4724. and a new flower will form in a couple of weeks.
  4725. This can be repeated two or three times to get several times more flowers
  4726. than usual.
  4727. If the plants are sprayed with Ethrel early in their growing stage, they
  4728. will produce almost all female plants. This usually speeds up the flowering
  4729. also, it may happen in as little as two weeks.
  4730. You can employ a growth changer called colchicine. This is a bit hard to
  4731. get and expensive. (Should be ordered through a lab of some sort and
  4732. costs about $35 a gram.)
  4733. To use the colchicine, you should prepare your presoaking solution of
  4734. distilled water with about 0.10 per cent colchicine. This will cause
  4735. many of the seeds to die and not germinate, but the ones that do come
  4736. up will be polyploid plants. This is the accepted difference between
  4737. such strains as "gold" and normal grass, and yours will DEFINITELY
  4738. be superweed.
  4739. The problem here is that colchicine is a posion in larger quanities and
  4740. may be poisonous in the first generation of plants. Bill Frake, author
  4741. of CONNOISSEUR'S HANDBOOK OF MARIJUANA runs a very complete colchicine
  4742. treatment down and warns against smoking the first generation plants
  4743. (all succeeding generations will also be polyploid) bacause of this
  4744. poisonous quality.
  4745. However, the Medical Index shows colchicine being given in very small
  4746. quantities to people for treatment if various ailments. Although these
  4747. quantities are small, they would appear to be larger than any you could
  4748. recive form smoaking a seed-treated plant.
  4749. It would be a good idea to buy a copy of CONNOISSEUR'S, if you are planning
  4750. to attempt this, and read Mr. Drake's complete instructions.
  4751. Another still-experimental process to increase the resin it to pinch off
  4752. the leaf tips as soon as they appear from the time the plant is in the
  4753. seedling stage on through its entire life-span. This produces a distorted,
  4754. wrecked-looking plant which would be very difficuly to recognize as
  4755. marijuana. Of course, there is less substance to this plant, but such
  4756. wrecked creatures have been known to produve so much resin that it
  4757. crystallizes a strong hash all over the surface of the plant - might
  4758. be wise to try it on a plant or two and see what happens.
  4759. PLANT PROBLEM CHART
  4760. Always check the overall enviromental conditions prior to passing
  4761. judgment - soil aroung 7 pH or slightly less - plenty of water, light,
  4762. fresh air, loose soil, no water standing in pools.
  4763. SYMPTOM PROBABLY PROBLEM/CURE
  4764. Larger leaves turning yellow - Nitrogen dificiency - add
  4765. smaller leaves still green. nitrate of soda or
  4766. organic fertilizer.
  4767. Older leaves will curl at edges, Phosphorsus dificiency -
  4768. turn dark, possibaly with a purple add commercial phosphate.
  4769. cast.
  4770. Mature leaves develop a yellowish Magnesium dificiency -
  4771. cast to least veinal areas. add commercial fertilizer
  4772. with a magnesium content.
  4773. Mature leaves turn yellow and then Potassium dificiency -
  4774. become spotted with edge areas add muriate of potash.
  4775. turning dark grey.
  4776. Cracked stems, no healthy support Boron dificiency - add
  4777. tissue. any plant food containing
  4778. boron.
  4779. Small wrinkled leaves with Zinc dificiency - add
  4780. yelloish vein systems. commercial plant food
  4781. containing zinc.
  4782. Young leaves become deformed, Molybedum dificiency -
  4783. possibaly yellowing. use any plant food with a
  4784. bit of molydbenum in it.
  4785. EXTRA SECTION:
  4786. BAD WEED/GOOD WEED
  4787. Can you turn bad weed into good weed? Surprisingly enough, the answer
  4788. to this oft-asked inquiry is, yes!
  4789. Like most other things in life, the amount of good you are going
  4790. to do relates directly to how much effort you are going to put into it.
  4791. There are no instant, supermarket products which you can spray on Kansas
  4792. catnip and have wonderweed, but there are a number of simplified,
  4793. inexpensive processes (Gee, Mr. Wizard!) thich will enhance mediocre
  4794. grass somewhat, ant there are a couple of fairly involved processes
  4795. which will do up even almost-parsley weed into something worth writing
  4796. home about.
  4797. EASES
  4798. 1. Place the dope in a container which allows air to enter in a restricted
  4799. fashion (such as a can with nail holes punched in its lid) and add a
  4800. bunch of dry ice, and the place the whold shebang in the freezer for a
  4801. few days. This process will add a certain amount of potency to the product,
  4802. however, this only works with dry ice, if you use normal, everyday
  4803. freezer ice, you will end up with a soggy mess...
  4804. 2. Take a quantity of grass and dampen it, place in a baggie or another
  4805. socially acceptable container, and store it in a dark, dampish place
  4806. for a couple of weeks (burying it also seems to work). The grass will
  4807. develop a mold which tastes a bit harsh, a and burns a tiny bit funny,
  4808. but does increase the potency.
  4809. 3. Expose the grass to the high intensity light of a sunlamp for a full
  4810. day or so. Personally, I don't feel that this is worth the effort, but
  4811. if you just spent $400 of your friend's money for this brick of
  4812. super-Colombian, right-from-the-President's-personal-stash,
  4813. and it turns out to be Missouri weed, and you're packing your bags to
  4814. leave town before the people arrive for their shares, well, you might
  4815. at least try it. Can't hurt.
  4816. 4. Take the undisirable portions of our stash (stems, seeds, weak weed,
  4817. worms, etc.) and place them in a covered pot, with enough rubbing
  4818. alchol to cover everything.
  4819. Now CAREFULLY boil the mixture on an ELECTRIC stove or lab burner. DO
  4820. NOT USE GAS - the alchol is too flammable. After 45 minutes of heat,
  4821. remove the pot and strain the solids out, SAVING THE ALCOHOL.
  4822. Now, repeat the process with the same residuals, but fresh alchol.
  4823. When the second boil is over, remove the solids again, combine the two
  4824. quantities of alcohol and reboil until you have a syrupy mixture.
  4825. Now, this syrupy mixture will contain much of the THC formerly hidden
  4826. in the stems and such. One simply takes this syrup the throughly
  4827. combines it with the grass that one wishes to improve upon.
  4828. SPECIAL SECTION ON RELATED SUBJECT MARYGIN:
  4829. Marygin is an anagram of the words marijuana and gin, as in Eli Whitney.
  4830. It is a plastic tumbler which acts much like a commercial cottin gin.
  4831. One takes about one ounce of an harb and breaks it up. This is then placed
  4832. in the Marygin and the protuding knod is roatated. This action turns
  4833. the internal wheel, which separates the grass from the debris (seeds,
  4834. stems).
  4835. It does not pulberize the grass as screens have a habit of doing and is
  4836. easily washable.
  4837. Marygin is available from:
  4838. P.O. Box 5827
  4839. Tuscon, Arizona 85703
  4840. $5.00
  4841.  
  4842. GRASS
  4843. Edmund Scientific Company
  4844. 555 Edscorp Building
  4845. Barrington, New Jersy 08007
  4846. Free Catalog is a wonder of good things for the potential grass
  4847. grower. They have an electric thermostat greenhouse for starting
  4848. plants for a mere $14.95.
  4849. Soil test kits for PH - $2.40
  4850. Al test - $9.95
  4851. Soil thermometer - $2.75
  4852. Lights which approzimate the true color balance of the sun and are
  4853. probably the most beneficial types available: 40 watt, 48 inch - 4 for
  4854. $15.75.
  4855. Indoor sun bulb, 75 or 150 watt - $5.75.
  4856. And, they have a natural growth regualtor for plants (Gibberellin) which
  4857. can change height, speed growth, and maturity, promote blossoming,
  4858. etc. Each plant reacts differently to treatment with Gibberellin...there's
  4859. no fun like experimenting - $2.00
  4860. SUGGESTED READING
  4861. THE CONNOISSEUR'S HANDBOOK OF MARIJUANA, Bill Drake
  4862. Straight Arrow Publishing - $3.50
  4863. 625 Third Street
  4864. San Francisco, California
  4865.  
  4866. FLASH
  4867. P.O.Box 16098
  4868. San Fransicso, California 94116
  4869. Stocks a series of pamphlets on grass, dope manufacture, cooking.
  4870. Includes the Mary Jane Superweed series.
  4871.  
  4872. Match Head Bomb by the Jolly Roger
  4873.  
  4874. Simple safety match heads in a pipe, capped at both ends, make a
  4875. devestating bomb. It is set off with a regular fuse.
  4876. A plastic Baggie is put into the pipe before the heads go in to
  4877. prevent detonation by contact with the metal.
  4878. Cutting enough match heads to fill the pipe can be tedious work for
  4879. one but an evening's fun for the family if you can drag them away from
  4880. the TV.
  4881. ----------------Jolly Roger
  4882.  
  4883.  
  4884. How To Terrorize McDonalds by the Jolly Roger
  4885. (Originally an Apple ][ file so excuse the upper case!!!)
  4886.  
  4887. NOW, ALTHOUGH Mc DONALDS IS FAMOUS FOR IT'S ADVERTISING AND MAKING THE
  4888. WHOLE WORLD THINK THAT THE BIG MAC IS THE BEST THING TO COME ALONG SINCE
  4889. SLICED BREAD (BUNS?), EACH LITTLE RESTAURANT IS AS AMATEUR AND SIMPLE AS
  4890. A NEW-FOUND BUSNESS. NOT ONLY ARE ALL THE EMPLOYEES RATHER INEXPERIENCED
  4891. AT WHAT THEY'RE =SUPPOSED= TO DO, BUT THEY WILL JUST LOOSE ALL CONTROL WHEN
  4892. AN EMERGENCY OCCURS....HERE WE GO!!! FIRST, GET A FEW FRIENDS (4 IS
  4893. GOOD...I'LL GET TO THIS LATER) AND ENTER THE MCDONALDS RESTAURANT, TALKING
  4894. LOUDLY AND REAKING OF SOME STRANGE SMELL THAT AUTOMATICALLY MAKES THE OLD
  4895. COUPLE SITTING BY THE DOOR LEAVE. IF ONE OF THOSE PIMPLY-FACED GOONS IS
  4896. WIPING THE FLOOR, THEN TRACK SOME CRAP ALL OVER IT (YOU COULD PRETEND TO
  4897. SLIP AND BREAK YOUR HEAD, BUT YOU MIGHT ACTUALLY DO SO).
  4898. NEXT, BEFORE YOU GET THE FOOD, FIND A TABLE. START YELLING AND RELEASING
  4899. SOME STRANGE BODY ODOR SO =ANYBODY= WOULD LEAVE THEIR TABLE AND WALK OUT
  4900. THE DOOR. SIT 2 FRIENDS THERE, AND GO UP TO THE COUNTER WITH ANOTHER.
  4901. FIND A PLACE WHERE THE LINE IS SHORT, OR IF THE LINE IS LONG SAY "I ONLY
  4902. WANNA BUY A COKE" AND YOU GET MOVED UP. NOW, YOU GET TO DO THE =ORDERING=
  4903. ...HEH HEH HEH. SOMEBODY =ALWAYS= MUST WANT A PLAIN
  4904. HAMBURGER WITH ABSOLUTELY NOTHING ON IT (THIS TAKES EXTRA TIME TO MAKE, AND
  4905. DRIVES THE LITTLE HAMBURGER-MAKERS INSANE)..ORDER A 9-PACK OF CHICKEN
  4906. MCNUGGETS...NO, A 20 PACK...NO, THREE 6 PACKS...WAIT...GO BACK TO THE TABLE
  4907. AND ASK WHO WANTS WHAT. YOUR OTHER FRIEND WAITS BY THE COUNTER AND MAKES A
  4908. PASS AT THE FEMALE CLERK. GET BACK TO THE THING AND ORDER THREE 6-PACKS OF
  4909. CHICKEN ETC....NOW SHE SAYS "WHAT KIND OF SAUCE WOULD YOU LIKE?".OF COURSE,
  4910. SAY THAT YOU ALL WANT BARBECUE SAUCE ONE OF YOUR FRIENDS WANTS 2 (ONLY IF
  4911. THERE ARE ONLY 2 CONTAINERS OF BARBECUE SAUCE LEFT).THEN THEY HAFTA GO INTO
  4912. THE STOREROOM AND OPEN UP ANOTHER BOX. FINALLY, THE DRINKS...SOMEBODY WANTS
  4913. COKE, SOMEBODY ROOT BEER, AND SOMEBODY DIET COKE. AFTER THESE ARE DELIVERED,
  4914. BRING THEM BACK AND SAY "I DIDN'T ORDER A DIET COKE! I ORDERED A SPRITE!"
  4915. THIS GETS THEM MAD; BETTER YET, TURN DOWN SOMETHING TERRIBLE THAT NOBODY
  4916. WANTS TO DRINK, SO THEY HAFTA THROW THE DRINK AWAY; THEY CAN'T SELL IT.
  4917. AFTER ALL THE FOOD(?) IS HANDED TO YOU, YOU MUST =NEVER= HAVE ENOUGH MONEY
  4918. TO PAY. THE CLERK WILL BE SO ANGRY AND CONFUSED THAT SHE'LL LET YA GET
  4919. AWAY WITH IT (ANOTHER INFLUENCE ON HER IS YOUR FRIEND ASKING HER "IF YOU
  4920. LET US GO I'LL GO OUT WITH YOU" AND GIVING HER A FAKE FONE NUMBER).
  4921. NOW, BACK TO YOUR TABLE. BUT FIRST, SOMEBODY LIKES KETCHUP AND MUSTARD.
  4922. AND PLENTY (TOO MUCH) OF NAPKINS. OH, AND SOMEBODY LIKES FORKS AND KNIVES,
  4923. SO ALWAYS END UP BREAKING THE ONES YOU PICK OUTTA THE BOX. HAVE YOUR
  4924. FRIENDS YELL OUT,"YAY!!!!! WE HAVE MUNCHIES!!" AS LOUD AS THEY CAN.
  4925. THAT'LL WORRY THE ENTIRE RESTAURANT. PROCEED TO SIT DOWN. SO, YOU ARE
  4926. SITTING IN THE SMOKING SECTION (BY ACCIDENT) EH? WELL, WHILE ONE OF THE
  4927. TOBACCO-BREATHERS ISN'T LOOKING, PUT A SIGN FROM THE OTHER SIDE OF THE
  4928. ROOM SAYING "DO NOT SMOKE HERE" AND HE'LL HAFTA MOVE...THEN HE GOES INTO
  4929. THE REAL NON-SMOKING SECTION, AND GETS YELLED AT. HE THEN THINKS THAT
  4930. NO SMOKING IS ALLOWED IN THE RESTAURANT, SO HE EATS OUTSIDE (IN THE POUR-
  4931. ING RAIN) AFTER YOUR MEAL IS FINISHED (AND QUITE A FEW SPLATTERED-OPENED
  4932. KETCHUP PACKETS ARE ALL OVER YER TABLE), TRY TO LEAVE. BUT OOPS! SOMEBODY
  4933. HAS TO DO HIS DUTY IN THE MEN'S ROOM. AS HE GOES THERE, HE STICKS AN
  4934. UNEATED HAMBURGGR (WOULD YOU DARE TO EAT ONE OF THEIR HAMBURGERS?)
  4935. INSIDE THE TOILET, FLUSHES IT A WHILE,UNTIL IT RUNS ALL OVER THE BATHROOM.
  4936. OOPS! SEND A PIMPLY-FACED TEENAGER TO CLEAN IT UP. (HE WON'T KNOW THAT
  4937. BROWN THING IS A HAMBURGER, AND HE'LL GET SICK. WHEEE!)
  4938. AS YOU LEAVE THE RESTCURANT, LOOKING BACK AT YOUR UNCLEANED TABLE, SOMEBODY
  4939. MUST REMEMBER THAT THEY LEFT THEIR CHOCOLATE SHAKE THERE! THE ONE THAT'S
  4940. ALMOST FULL!!!! HE TAKES IT THEN SAYS "THIS TASTES LIKE CRAP!", THEN HE
  4941. TAKES OFF THE LID AND THROWS IT INTO THE GARBAGE CAN...OOPS! HE MISSED,
  4942. AND NOW THE SAME POOR SOUL WHO'S CLEANING UP THE BATHROOM NOW HASTA CLEAN
  4943. UP CHOCOLATE SHAKE. THEN LEAVE THE JOINT, REVERSING THE "YES, WE'RE OPEN"
  4944. SIGN (AS A REMINDER OF YER VISIT THERE YOU HAVE IT! YOU HAVE JUST PUT
  4945. ALL OF MCDONALDS INTO COMPLETE MAYHEM. AND SINCE THERE IS NO PENALTY FOR
  4946. LITTERING IN A RESTAURANT, BUGGING PEOPLE IN A PUBLIC EATERY (OR
  4947. THROW-UPERY, IN THIS CASE) YOU GET OFF SCOT-FREE. WASN'T THAT FUN?
  4948.  
  4949. --------------Jolly Roger
  4950.  
  4951. "Mentor's Last Words" courtesy of the Jolly Roger
  4952.  
  4953. The following file is being reprinted in honor and sympathy for the many
  4954. phreaks and hackers that have been busted recently by the Secret Service.
  4955. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - \/\The Conscience of a Hacker/\
  4956. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
  4957. Another one got caught today, it's all over the papers. "Teenager
  4958. Arrested in Computer Crime Scandal", "Hacker Arrested after Bank
  4959. Tampering"... Damn kids. They're all alike. But did you, in your three-
  4960. piece psychology and 1950's technobrain, ever take a look behind the
  4961. eyes of the hacker? Did you ever wonder what made him tick, what forces
  4962. shaped him, what may have molded him? I am a hacker, enter my world...
  4963. Mine is a world that begins with school... I'm smarter than most of the
  4964. other kids, this crap they teach us bores me... Damn underachiever.
  4965. They're all alike. I'm in junior high or high school. I've listened to
  4966. teachers explain for the fifteenth time how to reduce a fraction.
  4967. I understand it. "No, Ms. Smith, I didn't show my work. I did it in
  4968. my head..." Damn kid. Probably copied it. They're all alike.
  4969. I made a discovery today. I found a computer. Wait a second, this is
  4970. cool. It does what I want it to. If it makes a mistake, it's because I
  4971. screwed it up. Not because it doesn't like me... Or feels threatened by
  4972. me.. Or thinks I'm a smart ass.. Or doesn't like teaching and shouldn't be
  4973. here... Damn kid. All he does is play games. They're all alike. And then
  4974. it happened... a door opened to a world... rushing through the phone line
  4975. like heroin through an addict's veins, an electronic pulse is sent out,
  4976. a refuge from the day-to-day incompetencies is sought... a board is found.
  4977. "This is it... this is where I belong..." I know everyone here... even
  4978. if I've never met them, never talked to them, may never hear from them
  4979. again... I know you all... Damn kid. Tying up the phone line again.
  4980. They're all alike... You bet your ass we're all alike... we've been
  4981. spoon-fed baby food at school when we hungered for steak... the bits of
  4982. meat that you did let slip through were pre-chewed and tasteless.
  4983. We've been dominated by sadists, or ignored by the apathetic. The few
  4984. that had something to teach found us willing pupils, but those few are
  4985. like drops of water in the desert.
  4986. This is our world now... the world of the electron and the switch, the
  4987. beauty of the baud. We make use of a service already existing without
  4988. paying for what could be dirt-cheap if it wasn't run by profiteering
  4989. gluttons, and you call us criminals. We explore... and you call us
  4990. criminals. We seek after knowledge... and you call us criminals. We
  4991. exist without skin color, without nationality, without religious bias...
  4992. and you call us criminals. You build atomic bombs, you wage wars, you
  4993. murder, cheat, and lie to us and try to make us believe it's for our
  4994. own good, yet we're the criminals.
  4995. Yes, I am a criminal. My crime is that of curiosity. My crime is
  4996. that of judging people by what they say and think, not what they look like.
  4997. My crime is that of outsmarting you, something that you will never
  4998. forgive me for. I am a hacker, and this is my manifesto. You may stop
  4999. this individual,but you can't stop us all... after all, we're all alike.
  5000. +++The Mentor+++
  5001. [May the members of the phreak community never forget his words -JR]
  5002.  
  5003. The Myth of the 2600hz Detector courtesy of the Jolly Roger
  5004. (Imported from the Apple ][ so forgive the upper case!!)
  5005.  
  5006. JUST ABOUT EVERYONE I TALK TO THESE DAYS ABOUT ESS SEEMS TO BE SCARED
  5007. WITLESS ABOUT THE 2600HZ DETECTOR. I DON'T KNOW WHO THOUGHT THIS ONE UP,
  5008. BUT IT SIMPLY DOES NOT EXIST. SO MANY OF YOU PEOPLE WHINE ABOUT THIS SO
  5009. -CALLED PHREAK CATCHING DEVICE FOR NO REASON.
  5010. SOMEONE WITH AT&T SAID THEY HAD IT TO CATCH PHREAKERS. THIS WAS JUST TO
  5011. SCARE THE BLUE-BOXERS ENOUGH TO MAKE THEM QUIT BOXING FREE CALLS.
  5012. I'M NOT SAYING ESS IS WITHOUT ITS HANG-UPS, EITHER. ONE THING THAT ESS CAN
  5013. DETECT READILY IS THE KICK-BACK THAT THE TRUNK CIRCUITRY SENDS BACK TO THE
  5014. ESS MACHINE WHEN YOUR LITTLE 2600HZ TONE RESETS THE TOLL TRUNK. AFTER AN
  5015. ESS DETECTS A KICKBACK IT TURNS AN M-F DETECTOR ON AND RECORDES ANY M-F
  5016. TONES X-MITTED.
  5017.  
  5018. ---------------------------------------
  5019. DEFEATING THE KICK-BACK DETECTOR
  5020. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  5021.  
  5022. AS MENTIONED IN MY PREVIOUS NOTE, KICK-BACK DETECTION CAN BE A SERIOUS
  5023. NUISANCE TO ANYONE INTERESTED IN GAINING CONTROL OF A TRUNK LINE.
  5024. THE EASIEST WAY TO BY-PASS THIS DETECTION CIRCUITRY IS NOT REALLY
  5025. BY-PASSING IT AT ALL, IT IS JUST LETTING THE KICK-BACK GET DETECTED ON
  5026. SOME OTHER LINE. THIS OTHER LINE IS YOUR LOCAL MCI, SPRINT, OR OTHER LONG
  5027. DISTANCE CARRIER (EXCEPT AT&T). THE ONLY CATCH IS THAT THE SERVICE
  5028. YOU USE MUST NOT DISCONNECT THE LINE WHEN YOU HIT THE 2600HZ TONE.
  5029. THIS IS HOW YOU DO IT: CALL UP YOUR LOCAL EXTENDER, PUT IN THE CODE,
  5030. AND DIAL A NUMBER IN THE 601 AREA CODE AND THE 644 EXCHANGE. LOTS OF OTHER
  5031. EXCHANGES WORK ACROSS THE COUNTRY, I'M SURE, BUT THIS IS THE ONLY ONE
  5032. THAT I HAVE FOUND SO FAR. ANYWAY, WHEN IT STARTS RINGING, SIMPLY HIT
  5033. 2600HZ AND YOU'LL HEAR THE KICK-BACK, (KA-CHIRP, OR WHATEVER). THEN YOU ARE
  5034. READY TO DIAL WHOEVER YOU WANT (CONFERENCES, INWARD, ROUTE AND RATE,
  5035. OVERSEAS, ETC.) FROM THE TRUNK LINE IN OPERATOR TONES! SINCE BLOWING
  5036. 2600HZ DOESN'T MAKE YOU YOU A PHREAKER UNTIL THE TOLL EQUIPMENT RESETS
  5037. THE LINE, KICKBACK DETECTION IS THE METHOD AT&T CHOOSES (FOR NOW)
  5038. THIS INFORMATION COMES AS A RESULT OF MY EXPERIMENTS & EXPERIENCE AND
  5039. HAS BEEN VERIFIED BY LOCAL AT&T EMPLOYEES I HAVE AS ACQUAINTANCES.
  5040. THEY COULD ONLY SAY THAT THIS IS TRUE FOR MY AREA, BUT WERE PRETTY SURE
  5041. THAT THE SAME IDEA IS IMPLEMENTED ACROSS THE COUNTRY.
  5042.  
  5043. =======================================
  5044.  
  5045. NOW THAT YOU KNOW HOW TO ACCESS A TRUNK LINE OR AS OPERATORS SAY A LOOP, I
  5046. WILL TELL YOU THE MANY THINGS YOU CAN DO WITH IT.
  5047. HERE IS A LIST OF AT&T SERVICES ACCESSIBLE TO YOU BY USING A BLUE BOX.
  5048.  
  5049. A/C+101 TOLL SWITCHING
  5050. A/C+121 INWARD OPERATOR
  5051. A/C+131 INFORMATION
  5052. A/C+141 ROUTE & RATE OP.
  5053. A/C+11501 MOBILE OPERATOR
  5054. A/C+11521 MOBILE OPERATOR
  5055.  
  5056. STARTING CONFERANCES:---------------------
  5057.  
  5058. THIS IS ONE THE MOST USEFUL ATTRIBUTES OF BLUE BOXING. NOW THE CONFS.
  5059. ARE UP 24 HOURS/DAY AND 7 DAYS/WEEK AND THE BILLING LINES ARE BEING
  5060. BILLED.
  5061. SINCE I BELEIVE THE ABOVE IS TRUE (ABOUT THE BILLING LINES BEING BILLED)
  5062. I WOULD RECOMMEND THAT YOU NEVER LET YOUR # SHOW UP ON THE CONF. IF YOU
  5063. STARTED IT, PUT IT ON A LOOP AND THEN CALL THE LOOP. ENOUGH
  5064. BULLSHIT!!!!! TO START THE CONF. DIAL ONE OF THESE THREE NUMBERS IN
  5065. M-F WHILE YOU ARE ON THE TRUNK.
  5066. 213+080+XXXX
  5067. XXXX=1050,3050
  5068. SPECIAL XXXX=1000,1100,1200,1500,2200,2500.
  5069. THESE #S ARE IN L.A. AND ARE THE MOST WATCHED, I DO NOT ADVISE USING THIS
  5070. NPA.
  5071. 312+001+1050 OR 3050
  5072. 914+042+1050 OR 1100,1200 ECT..
  5073. ***************************************
  5074. UPDATE, I BELEIVE ONLY 914 WORKS AT THE MOMENT
  5075. ***************************************
  5076. ONCE CONNECTED WITH ONE OF THESE YOU WILL EITHER HEAR A RE-ORDER,
  5077. BUSY, OR CHERP. WHEN YOU HEAR THE CHERP ENTER THE BILLING LINE IN M-F.
  5078. I USE THE CONF. DIAL- UP.
  5079. A BILLING LINE EXAMPLE: KP312+001+1050ST
  5080. YOU WILL THEN HEAR TWO TUTES AND A RECORDING ASKING YOU FOR THE # OF
  5081. CONFERREES INCLUDING YOURSELF. ENTER A # BETWEEN 20 AND 30.
  5082. IF YOU EVER GET OVER 30 PEOPLE ON A CONFERANCE ALL YOU WILL HEAR IS
  5083. JUMBLED VOICES. AFTER THE IT SAYS
  5084. "YOUR CONFERANCE SIZE IS XX" THEN HIT # SIGN. ADD YOUR FAVORITE LOOP
  5085. ON AND HIT 6 TO TRANSFER CONTROL TO IT. AFTER IT SAYS CONTROL WILL BE
  5086. TRANSFERED HANG UP AND CALL THE OTHER SIDE OF THE LOOP,
  5087. HIT # SIGN AND FOLLOW THE INSTRUCTIONS. A BONUS FOR CONF. IS TO ADD AN
  5088. INTERNATIONAL # DIAL 1+011+CC+NUMBER PRETTY COOL EHHH.
  5089. A FEW EXTRA NOTES.
  5090. DO NOT ADD #S THAT YOU WILL WANT TO HANG UP, ADD THESE THROUGH MCI OR
  5091. SPRINT. YOU CANNOT BLOW ANYONE OFF W/2600HZ UNLESS THEY ARE IN AN
  5092. OLD X-BAR OR OLDER SYSTEM.
  5093. MANY D.A. OPERATORS WILL STAY ON AFTER YOU ABUSE THEM; YOU MAY HAVE TO
  5094. START ANOTHER OR AT LEAST DON'T SAY ANY NUMBERS.
  5095. NEVER ADD THE TONE SIDE OF A LOOP ONTO A CONF.
  5096. NEVER ADD MORE THAN ONE MCI NODE ON YOUR CONF.
  5097. ROUTE & RATE:
  5098. -------------
  5099. NOTE ROUTE & RATE AND RQS PERFORM THE SAME SERVICE.
  5100. R&R SIMPLY TELLS YOU ROUTE AND RATE INFO WHICH IS VERY VALUBLE, EX.
  5101. SUCH AS THE INWARD ROUTING FOR AN EXCHANGE IN AN AREA CODE.
  5102. AN INWARD ROUTING WILL LET YOU CALL HER AND SHE CAN DO AN EMERGENCY
  5103. INTERUPT FOR YOU. SHE CAN TELL YOU HOW TO GET INTERNATIONAL OPERATORS,ECT.
  5104. HERE ARE THE TERMS YOU ARE REQUIRED TO USE:
  5105. INTERNATIONAL,
  5106. -OPERATOR ROUTE FOR [COUNTRY, CITY]. *GIVES YOU INWARD OP.
  5107. -DIRECTORY ROUTE FOR [COUNTRY, CITY]. *GIVES YOU DIRECTORY ASS.
  5108. -CITY ROUTE FOR [COUNTRY, CITY]. *GIVES YOU COUNTRY AND CITY CODE.
  5109. OPERATOR ROUTE FOR [A/C]+ [EXCHANGE] *GIVES YOU INWARD OP. ROUTE
  5110. EX. [A/C]+ OR [A/C]+0XX+ WHEN SHE SAYS PLUS SHE MEANS PLUS 121.
  5111. NUMBERS ROUTE FOR [STATE, CITY] *GIVES YOU A/C.
  5112. PLACE NAME [A/C]+[EXCHANGE] *GIVES YOU CITY/STATE FOR THAT A/C AND
  5113. EXCHANGE.
  5114. INTERNATIONAL CALLS:
  5115. --------------------
  5116. TO CALL INTERNATIONAL OVER CABLE SIMPLY ACCESS A TRUNK AND DIAL
  5117. KP011XXXST WAIT FOR SENDER TONE, KPXXXCC-NUMBERST
  5118. XXX - A 3 DIGIT COUNTRY CODE, IT MAY NOT BE 3 DIGITS SO JUST PUT
  5119. 1 OR 2 0'S IN FRONT OF IT. CC - IS THE CITY CODE
  5120. TO GO BY SATELLITE:
  5121. DIAL KP18XST X - NUMBERS 2-8 WAIT FOR SENDER TONE THEN
  5122. KPXXXCCNUMBERST
  5123.  
  5124. Blue Box courtesy of the Jolly Roger
  5125.  
  5126. To quote Karl Marx, blue boxing has always been the most noble form of
  5127. phreaking. As opposed to such things as using an MCI code to make a free
  5128. fone call, which is merely mindless pseudo-phreaking, blue boxing
  5129. is actual interaction with the Bell System toll network.
  5130. It is likewise advisable to be more cautious when blue boxing, but the
  5131. careful phreak will not be caught, regardless of what type of switching
  5132. system he is under.
  5133. In this part, I will explain how and why blue boxing works, as well as
  5134. where. In later parts, I will give more practical information for blue
  5135. boxing and routing information. To begin with, blue boxing is simply
  5136. communicating with trunks. Trunks must not be confused with subscriber
  5137. lines (or "customer loops") which are standard telefone lines. Trunks are
  5138. those lines that connect central offices. Now, when trunks are not in
  5139. use (i.e., idle or "on-hook" state) they have 2600Hz applied to them. If
  5140. they are two-way trunks, there is 2600Hz in both directions. When a trunk
  5141. IS in use (busy or "off-hook" state), the 2600Hz is removed from the side
  5142. that is off-hook. The 2600Hz is therefore known as a supervisory
  5143. signal, because it indicates the status of a trunk; on hook (tone) or
  5144. off-hook (no tone). Note also that 2600Hz denoted SF (single frequency)
  5145. signalling and is "in-band." This is very important. "In-band" means that
  5146. is within the band of frequencies that may be transmitted over normal
  5147. telefone lines. Other SF signals, such as 3700Hz are used also. However,
  5148. they cannot be carried over the telefone network normally (they are
  5149. "out-of-band" and are therefore not able to be taken advantage of as
  5150. 2600Hz is. Back to trunks. Let's take a hypothetical phone call. You pick
  5151. up your fone and dial 1+806-258-1234 (your good friend in Amarillo, Texas).
  5152. For ease, we'll assume that you are on #5 Crossbar switching and not in the
  5153. 806 area. Your central office (CO) would recognize that 806 is a foreign
  5154. NPA, so it would route the call to the toll centre that serves you.
  5155. [For the sake of accuracy here, and for the more experienced readers,
  5156. note that the CO in question is a class 5 with LAMA that uses out-of-band
  5157. SF supervisory signalling]. Depending on where you are in the country,
  5158. the call would leave your toll centre (on more trunks) to another toll
  5159. centre, or office of higher "rank". Then it would be routed to central
  5160. office 806-258 eventually and the call would be completed.
  5161.  
  5162. Illustration
  5163. A---CO1-------TC1------TC2----CO2----B
  5164.  
  5165. A.... you
  5166. CO1=your central office
  5167. TC1.. your toll office.
  5168. TC2.. toll office in Amarillo.
  5169. CO2.. 806-258 central office.
  5170. B.... your friend (806-258-1234)
  5171.  
  5172. In this situation it would be realistic to say that CO2 uses SF
  5173. in-band (2600Hz) signalling, while all the others use out-of-band signal-
  5174. ling (3700Hz). If you don't understand this, don't worry. I am pointing
  5175. this out merely for the sake of accuracy. The point is that while you
  5176. are connected to 806-258-1234, all those trunks from YOUR central office
  5177. (CO1) to the 806-258 central office (CO2) do *NOT* have 2600Hz on them,
  5178. indicating to the Bell equipment that a call is in progress and the trunks
  5179. are in use.
  5180. Now let's say you're tired of talking to your friend in Amarillo, so you
  5181. send a 2600Hz down the line. This tone travels down the line to your
  5182. friend's central office (CO2) where it is detected. However, that CO thinks
  5183. that the 2600Hz is originating from Bell equipment, indicating to it
  5184. that you've hung up, and thus the trunks are once again idle (with 2600Hz
  5185. present on them). But actually, you have not hung up, you have fooled the
  5186. equipment atyour friend's CO into thinking you have. Thus,it disconnects
  5187. him and resets the equipment to prepare for the next call. All this happens
  5188. very quickly (300-800ms for step-by-step equipment and 150-400ms for other
  5189. equipment). When you stop sending 2600Hz (after about a second), the
  5190. equipment thinks that another call is coming towards
  5191. --> on hook, no tone -->off hook.
  5192. Now that you've stopped sending 2600Hz, several things happen:
  5193.  
  5194. 1) A trunk is seized.
  5195. 2) A "wink" is sent to the CALLING end from the CALLED end indicating that
  5196. the CALLED end (trunk) is not ready to receive digits yet.
  5197. 3) A register is found and attached to the CALLED end of the trunk within
  5198. about two seconds (max).
  5199. 4) A start-dial signal is sent to the CALLING end from the CALLED end
  5200. indicating that the CALLED end is ready to receive digits.
  5201. Now, all of this is pretty much transparent to the blue boxer. All he
  5202. really hears when these four things happen is a <beep><kerchunk>. So,
  5203. seizure of a trunk would go something like this:
  5204.  
  5205. 1> Send a 2600Hz
  5206. 2> Terminate 2600Hz after 1-2 secs.
  5207. 3> [beep][kerchunk]
  5208.  
  5209. Once this happens, you are connected to a tandem that is ready to obey your
  5210. every command. The next step is to send signalling information in order to
  5211. place your call. For this you must simulate the signalling used by
  5212. operators and automatic toll-dialing equipment for use on trunks. There are
  5213. mainly two systems, DP and MF. However, DP went out with the dinosaurs, so
  5214. I'll only discuss MF signalling. MF (multi-frequency) signalling is the
  5215. signalling used by the majority of the inter- and intra-lata network. It is
  5216. also used in international dialing known as the CCITT no.5 system.
  5217. MF signals consist of 7 frequecies, beginning with 700Hz and separated by
  5218. 200Hz. A different set of two of the 7 frequencies represent the digits 0
  5219. thru 9, plus an additional 5 special keys. The frequencies and uses are as
  5220. follows:
  5221.  
  5222. Frequencies (Hz) Domestic Int'l
  5223. -------------------------------------
  5224. 700+900 1 1
  5225. 700+1100 2 2
  5226. 900+1100 3 3
  5227. 700+1300 4 4
  5228. 900+1300 5 5
  5229. 1100+1300 6 6
  5230. 700+1500 7 7
  5231. 900+1500 8 8
  5232. 1100+1500 9 9
  5233. 1300+1500 0 0
  5234. 700+1700 ST3p Code 1
  5235. 900+1700 STp Code 1
  5236. 1100+1700 KP KP1
  5237. 1300+1700 ST2p KP2
  5238. 1500+1700 ST ST
  5239. The timing of all the MF signals is a nominal 60ms, except for KP, which
  5240. should have a duration of 100ms. There should also be a 60ms silent period
  5241. between digits. This is very flexible however, and most Bell equipment will
  5242. accept outrageous timings. In addition to the standard uses
  5243. listed above, MF pulsing also has expanded usages known as "expanded
  5244. inband signalling" that include such things as coin collect, coin return,
  5245. ringback, operator attached, and operator attached, and operator
  5246. released. KP2, code 11, and code 12 and the ST_ps (STart "primes" all have
  5247. special uses which will be mentioned only briefly here.
  5248. To complete a call using a blue box once seizure of a trunk has been
  5249. accomplished by sending 2600Hz and pausing for the <beep><kerchunk>, one
  5250. must first send a KP. This readies the register for the digits that follow.
  5251. For a standard domestic call, the KP would be followed by either 7 digits
  5252. (if the call were in the same NPA as the seized trunk) or 10 digits (if the
  5253. call were not in the same NPA as the seized trunk). [Exactly like dialing
  5254. normal fone call]. Following either the KP and 7 or 10 digits, a STart is
  5255. sent to signify that no more digits follow. Example of a complete call:
  5256.  
  5257. 1> Dial 1-806-258-1234
  5258. 2> wait for a call-progress indication (such as ring,busy,recording,etc.)
  5259. 3> Send 2600Hz for about 1 second.
  5260. 4> Wait for about ll-progress indication (such as ring,busy,recording,etc.)
  5261. 5> Send KP+305+994+9966+ST
  5262. The call will then connect if everything was done properly. Note that if a
  5263. call to an 806 number were being placed in the same situation, the are code
  5264. would be omitted and only KP + seven digits + ST would be sent.
  5265. Code 11 and code 12 are used in international calling to request
  5266. certain types of operators. KP2 is used in international calling to route a
  5267. call other than by way of the normal route, whether for economic or
  5268. equipment reasons. STp, ST2p, and ST3p (prime, two prime, and three prime)
  5269. are used in TSPS signalling to indicate calling type of call (such as
  5270. coin-direct dialing.
  5271.  
  5272. Napalm (Another way to make it...) by the Jolly Roger
  5273.  
  5274. (See file #021 of the Cookbook for an easy way to make it!!)
  5275.  
  5276. About the best fire bomb is napalm. It has a thick consistancy,
  5277. like jam and is best for use on vehilces or buildings.
  5278. Napalms is simply one part gasoline and one part soap. The soap is
  5279. either soap flakes or shredded bar soap. Detergents won't do.
  5280. The gasoline must be heated in order for the soap to melt. The
  5281. usual way is with a double boiler where the top part has at least a
  5282. two-quart capicity. The water in the bottom part is brought to a boil
  5283. and the double boiler is taken from the stove and carried to where
  5284. there is no flame.
  5285. Then one part, by volume, of gasoline is put in the top part and
  5286. allowed to heat as much as it will and the soap is added and the mess
  5287. is stirred until it thickens. A better way to heat gasoline is to fill
  5288. a bathtub with water as hot as you can get it. It will hold its heat
  5289. longer and permit a much larger container than will the double boiler.
  5290.  
  5291. ---------------Jolly Roger
  5292.  
  5293. Nitroglycerin Recipe by the Jolly Roger
  5294.  
  5295. Like all chemists I must advise you all to take the greatest care
  5296. and caution when you are doing this. Even if you have made this stuff
  5297. before.
  5298. This first article will give you information on making
  5299. nitroglyerin, the basic ingredient in a lot of explosives such as
  5300. straight dynamites, and geletin dynamites.
  5301. Making nitroglycerin
  5302. 1. Fill a 75-milliliter beaker to the 13 ml. Level with fuming
  5303. red nitric acid, of 98% pure concentration.
  5304. 2. Place the beaker in an ice bath and allow to cool below room
  5305. temp.
  5306. 3. After it has cooled, add to it three times the amount of
  5307. fuming sulferic acid (99% h2so4). In other words, add to the
  5308. now-cool fuming nitric acid 39 ml. Of fuming sulferic acid.
  5309. When mixing any acids, always do it slowly and carefully to
  5310. avoid splattering.
  5311. 4. When the two are mixed, lower thier temp. By adding more ice
  5312. to the bath, about 10-15 degrees centigrade. (Use a
  5313. mercury-operated thermometer)
  5314. 5. When the acid solution has cooled to the desired temperature,
  5315. it is ready for the glycerin. The glycerin must be added in
  5316. small amounts using a medicine dropper. (Read this step about
  5317. 10 times!) Glycerin is added slowly and carefully (i mean
  5318. careful!) Until the entire surface of the acid it covered with
  5319. it.
  5320. 6. This is a dangerous point since the nitration will take place
  5321. as soon as the glycerin is added. The nitration will produce
  5322. heat, so the solution must be kept below 30 degrees
  5323. centigrade! If the solution should go above 30 degrees,
  5324. immediately dump the solution into the ice bath! This will
  5325. insure that it does not go off in your face!
  5326. 7. For the first ten minutes of nitration, the mixture should be
  5327. gently stirred. In a normal reaction the nitroglycerin will
  5328. form as a layer on top of the acid solution, while the sulferic
  5329. acid will absorb the excess water.
  5330. 8. After the nitration has taken place, and the nitroglycerin has
  5331. formed on the top of the solution, the entire beaker should be
  5332. transferred slowly and carefully to another beaker of water.
  5333. When this is done the nitroglycerin will settle at the bottem
  5334. so the other acids can be drained away.
  5335. 9. After removing as much acid as posible without disturbing the
  5336. nitroglycerin, remove the nitroglycerin with an eyedropper and
  5337. place it in a bicarbonate of soda (sodium bicarbonate in case
  5338. you didn't know) solution. The sodium is an alkalai and will
  5339. nuetralize much of the acid remaining. This process should be
  5340. repeated as much as necesarry using blue litmus paper to check
  5341. for the presence of acid. The remaining acid only makes the
  5342. nitroglycerin more unstable than it already is.
  5343. 10. Finally! The final step is to remove the nitroglycerin from
  5344. the bicarbonate. His is done with and eye- dropper, slowly
  5345. and carefully. The usual test to see if nitration has been
  5346. successful is to place one drop of the nitroglycerin on metal
  5347. and ignite it. If it is true nitroglycerin it will burn with
  5348. a clear blue flame.
  5349. ** Caution **
  5350. Nitro is very sensative to decomposition, heating dropping, or
  5351. jarring, and may explode if left undisturbed and cool.
  5352. -------------Jolly Roger
  5353.  
  5354. Operation: Fuckup by the Jolly Roger
  5355.  
  5356. This is a guide for Anarchists and can be funny for non-believers and 12
  5357. and 13 year old runts, and can be a lexicon of deadly knowledge for True
  5358. Anarchists... Serious damage is intended to be dealt here. Do not try
  5359. this stuff unless you want to do a lot of serious Anarchy.
  5360. [Simulation]
  5361. Asshole - 'Listen, you little teenager punk shit, shut the fuck up, or I'll
  5362. knock you down!'
  5363. Anarchist - 'O.K.....You can't say I didn't warn you. You don't know my
  5364. rue power...' (soooo casually)
  5365. Asshole - 'Well, er, what do you mean? Anarchist - '<demoniac grin>'
  5366. As you can see, the Anarchist knows something that this asshole doesn't...
  5367.  
  5368. [Operation Fuckup]
  5369. Geta wheel barrel or two. Fill with gasoline. Get 16 rolls of toilet
  5370. paper, unroll & drench in the gasoline. Rip to shreds in gasoline. Get
  5371. asbestos gloves. Light a flare (to be punk), grab glob of
  5372. saturated toilet paper (you can ignite the glob or not). Throw either
  5373. flaming or dripping glob into:
  5374. any window (picture is the best)
  5375. front doors
  5376. rough grain siding
  5377. and best of all, brick walls.
  5378. First of all, this bitch is near impossible to get off once dried, and
  5379. is a terror to people inside when lit! After this... during the
  5380. night, get a pickup truck, a few wheel-barrels, and a dozen friends with
  5381. shovels. The pickup can be used only for transporting people
  5382. and equipment, or doing that, and carting all the dirt. When it gets
  5383. around 12:00 (after the loser goes beddie - bye), dig a gargantuan hole
  5384. in his front yard until about 3:00. You can either assign three or four
  5385. of your friends to cart the dirt ten miles away in the pickup-bed, or
  5386. bury his front door in 15' of dirt! After that is done, get
  5387. three or four buckets of tar, and coat his windows. You can make an
  5388. added twist by igniting the tar when you are all done and ready to
  5389. run! That is if the loser has a house. If he lives inside an apartment
  5390. building, you must direct the attack more toward his car, and front door.
  5391. I usually start out when he goes to work...I find out what his cheap car
  5392. looks like, and memorize it for future abuse...It is always fun to paint
  5393. his front door (apt.) hot pink with purple polka-dots, and off-neon
  5394. colors in diagonal stripes. You can also pound a few hundred or so four
  5395. inch nails into his front door (this looks like somebody really
  5396. doesn't like you from the inside). Another great is to fill his keyhole
  5397. with liquid steel so that after the bastard closes his door - the
  5398. only way to get back in is to break it down. If you can spare it, leave
  5399. him an axe - that is, implanted three inches into, and through the door!
  5400. Now, this next one is difficult, but one of the best! Get a piece of wood
  5401. siding that will more than cover his front door completely. Nail two by
  5402. fours on the edges of the siding (all except the bottom) so you have
  5403. a barge - like contraption. Make a hole at the top that will be large
  5404. enough for a cement slide. Mix about six or seven LARGE bags of QUICK
  5405. drying cement. Use the cement slide to fill the antichamber created by
  5406. the 'barge' that is around his door. Use more two by fours to brace
  5407. your little cement-filled barge, and let the little gem dry. When it is,
  5408. remove the 'barge' so only a stone monolith remains that covers his door.
  5409. Use any remaining cement to make a base around this so he can't just push
  5410. it over. When I did this, he called the fire department, and they thought
  5411. he meant wood, so they brought axes. I watched with a few dozen or so
  5412. other tenants, and laughed my damn ass off! This is only his door! After
  5413. he parks his car for the night, the fun really begins...I start out
  5414. by opening up the car by jamming a very thin, but loack - inside and out!
  5415. Then proceed to put orange-juice syrup all over the seats, so after he
  5416. gets through all the other shit that you do, he will have the stickiest
  5417. seats in the world. You can then get a few Sunday papers, and crack one of
  5418. the windows about four inches. Lightly crumple the papers, and continue to
  5419. completely fill the inside of his car with the newspapers. A copy of the
  5420. Sunday New York Times will nicely fill a Volkeswagon! What is also quite
  5421. amusing is to put his car on cinder blocks, slash his tires at the top, and
  5422. fill them with cement! Leave the cinder blocks there so that, after he
  5423. knocks the car off of them, he will get about 3 miles to the gallon with
  5424. those tires, and do 0 to 60 in about two minutes! It is even more
  5425. hilarious when he doesn't know why the hell why! Another is to open his
  5426. hood, and then run a few wires from the sparkplugs to the METAL body.
  5427. The sure is one HOT car when it is running! Now, I like to pour two pounds
  5428. of sugar down his gas tank. If this doesn't blow every gasket in his
  5429. engine it will do something called 'carmelizing his engine'. This is when
  5430. the extreme heat turns the sugar to carmel, and you literally must
  5431. completely take the engine out and apart, and clean each and every
  5432. individual part!
  5433. Well, if this asshole does not get the message, you had better start to
  5434. get serious. If this guide was used properly & as it was intended (no,
  5435. not as kindling for the fire), this asshole will either move far away,
  5436. seek professional psychological help, commit suicide,
  5437. or all of the above!
  5438.  
  5439. --------------Jolly Roger
  5440.  
  5441.  
  5442. *-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*
  5443. * How to "steal" local calls from most Payphones *
  5444. *-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*
  5445. by the Jolly Roger
  5446.  
  5447. Now to make free local calls, you need a finishing nail. I highly
  5448. recommend "6D E.G. FINISH C/H, 2 INCH" nails. These are about 3/32 of
  5449. an inch in diameter and 2 inches long (of course). You also need a large
  5450. size paper clip. By large I mean they are about 2 inches long
  5451. (FOLDED). Then you unfold the paper clip. Unfold it by taking each piece
  5452. and moving it out 90 degrees. When it is done it should look somewhat
  5453. like this:
  5454.  
  5455. /----------\
  5456. : :
  5457. : :
  5458. : :
  5459. : :
  5460. \-----
  5461.  
  5462. Now, on to the neat stuff. What you do, instead of unscrewing the
  5463. glued-on mouthpiece, is insert the nail into the center hole of
  5464. the mouthpiece (where you talk) and push it in with
  5465. pressure or just hammer it in by hitting the nail on something.
  5466. Just DON'T KILL THE MOUTHPIECE! You could damage it
  5467. if you insert the nail too far or at some weird angle. If this
  5468. happens then the other party won't be able to hear what you say.
  5469. You now have a hole in the mouthpiece in which you can easily insert the
  5470. paper clip. So, take out the nail and put in the paper clip.
  5471. Then take the other end of the paper clip and shove it under the rubber
  5472. cord protector at the bottom of the handset (you know, the blue guy...).
  5473. This should end up looking remotely like...like this:
  5474. /----------\ Mouthpiece
  5475. : :
  5476. Paper clip --> : : /
  5477. : /---:---\
  5478. : : :
  5479. :------------>
  5480. ====================\---))):
  5481. : To earpiece ->
  5482. ^ ^
  5483. \-------------------->
  5484. : :
  5485. : :
  5486. Cord Blue guy
  5487. (The paper clip is shoved under the blue guy to make a good connection
  5488. between the inside of the mouthpiece and the metal cord.)
  5489. Now, dial the number of a local number you wish to call, sayyyy,
  5490. MCI. If everything goes okay, it should ring and not answer with the
  5491. "The Call You Have Made Requires a 20 Cent Deposit" recording. After the
  5492. other end answers the phone, remove the paper clip. It's all that
  5493. simple, see?
  5494. There are a couple problems, however. One is, as I mentioned
  5495. earlier, the mouthpiece not working after you punch it. If this
  5496. happens to you, simply move on to the next payphone. The one you are
  5497. now on is lost. Another problem is that the touch tones won't work
  5498. when the paper clip is in the mouthpiece. There are two ways around this..
  5499. A> Dial the first 6 numbers. This should be done without the paper
  5500. clip making the connection, i.e., one side should not be connected.
  5501. Then connect the paper clip, hold down the last digit, and slowly
  5502. pull the paper clip out at the mouthpiece's end.
  5503. B> Don't use the paper clip at all. Keep the nail in after you punch
  5504. it. Dial the first 6 digits. Before dialing the last digit, touch
  5505. the nail head to the plate on the main body of the phone, the money
  5506. safe thingy..then press the last number. The reason that this method
  5507. is sometimes called clear boxing is because there is
  5508. another type of phone which lets you actually make the call and listen
  5509. to them say "Hello, hello?" but it cuts off the mouthpiece so they
  5510. can't hear you. The Clear Box is used on that to amplify your voice
  5511. signals and send it through the earpiece. If you see how this is
  5512. even slightly similar to the method I have just described up there,
  5513. kindly explain it to ME!! Cause I don't GET IT! Anyways, this DOES
  5514. work on almost all single slot, Dial Tone First payphones (Pacific Bell
  5515. for sure). I do it all the time. This is the least, I STRESS
  5516. *LEAST*, risky form of Phreaking.
  5517.  
  5518. ---------------Jolly Roger
  5519.  
  5520. Pool Fun by the Jolly Roger
  5521.  
  5522. First of all, you need know nothing about pools. The only thing
  5523. you need know is what a pool filter looks like. If you don't know that.
  5524. Second, dress casual. Preferably, in black. Visit your
  5525. "friends" house, the one whose pool looks like fun!!) Then you
  5526. reverse the polarity of his/her pool, by switching the wires around.
  5527. They are located in the back of the pump. This will have quite an
  5528. effect when the pump goes on. In other words. Boooooooooooommm!
  5529. Thats right, when you mix + wires with - plugs, and vice- versa, the
  5530. 4th of july happens again.
  5531. Not into total destruction??? When the pump is off, switch the
  5532. pump to "backwash". Turn the pump on and get the phuck out! When you
  5533. look the next day, phunny. The pool is dry. If you want permanant
  5534. damage, yet no great display like my first one mentioned, shut the
  5535. valves of the pool off. (There are usually 2) One that goes to the
  5536. main drain and one that goes to the filter in the pool. That should
  5537. be enough to have one dead pump. The pump must take in water, so when
  5538. there isn't any...
  5539. Practical jokes: these next ones deal with true friends and
  5540. there is *no* permanent damage done. If you have a pool, you must
  5541. check the pool with chemicals. There is one labeled orthotolidine.
  5542. The other is labeled alkaline (ph). You want orthotolidine. (It
  5543. checks the chlorine).
  5544. Go to your local pool store and tell them you're going into the pool
  5545. business, and to sell you orthotolidine (a
  5546. CL detector) Buy this in great quantities if possible. The solution
  5547. is clear. You fill 2 baggies with this chemical. And sew the bags to
  5548. the inside of your suit. Next, go swimming with your friend!
  5549. Then open the bags and look like you're enjoying a piss. And anyone
  5550. there will turn a deep red! They will be embarrased so much,
  5551. Especially if they have guests there! Explain what it is, then add
  5552. vinegar to the pool. Only a little. The "piss" disappears.
  5553.  
  5554. HAHA!! --------------------Jolly Roger
  5555.  
  5556.  
  5557. Free Postage by the Jolly Roger
  5558.  
  5559. The increasing cost of postage to mail letters and packages is
  5560. bringing down our standard of living. To remedy this deplorable
  5561. situation, some counter control measures can be applied.
  5562. For example, if the stamps on a letter are coated with Elmer's
  5563. Glue by the sender, the cancellation mark will not destroy the stamp:
  5564. the Elmer/s drives to form an almost invisible coating that protects
  5565. the stamps from the cancellation ink. Later, the receiver of the
  5566. letter can remove the cancellation mark with water and reuse the
  5567. stamps. Furthermore, ecological saving will also result from recycling
  5568. the stamps. Help save a tree.
  5569. The glue is most efficently applied with a brush with stiff,
  5570. short bristles. Just dip the brush directly into the glue and spread
  5571. it on evenly, covering the entire surface of the stamp. It will dry
  5572. in about 15 minutes.
  5573. For mailing packages, just follow the same procedure as outlined
  5574. above; however, the package should be weighed and checked to make sure
  5575. that it has the correct amount of postage on it before it is taken to
  5576. the Post Office.
  5577. Removing the cancellation and the glue from the stamps can be
  5578. easily accomplished by soaking the stamps in warm water until they
  5579. float free from the paper. The stamps can then be put onto a paper
  5580. towel to dry. Processing stamps in large batches saves time too.
  5581. Also, it may be helpful to write the word 'Elmer' at the top of the
  5582. letter (not on the envelope) to cue the receiving party in that the
  5583. stamps have been protected with the glue.
  5584. We all know that mailing packages can be expensive. And we also
  5585. know that the handicapped are sometimes discriminated against in jobs.
  5586. The Government, being the generous people they are, have given the
  5587. blind free postal service.
  5588. Simply address you envelope as usual, and make one modification.
  5589. In the corner where the stamp would go, write in (or stamp) the words
  5590. 'FREE MATTER FOR THE BLIND". Then drop you package or letter in one
  5591. of the blue fedral mailboxes. DO NOT TAKE THE LETTER TO THE POST
  5592. OFFICE, OR LEAVE IT IN YOUR MAILBOX.
  5593. Sounds very nice of the government to do this, right? Well, they
  5594. aren't that nice. The parcel is sent library rate, that is below
  5595. third class. It may take four to five days to send a letter to just
  5596. the next town.
  5597. This too is quite simple, but less effective. Put the address
  5598. that you are sending the letter to as the return address. If you were
  5599. sending a $20 donation to the pirate's Chest, you would put our
  5600. address (po box 644, lincoln ma. 01773) as the return address.
  5601. Then you would have to be carless and forget to put the stamp on
  5602. the envelope. A nice touch is to put a bullshit address in the center
  5603. of the envelope.
  5604. Again, you MUST drop the letter in a FEDRAL mailbox. If the post
  5605. office doesn't send the letter to the return address for having no
  5606. stamp, they will send it back for the reason of "No such address".
  5607. Example--
  5608.  
  5609. Pirates Chest Dept. 40DD
  5610. P.O. Box 644865
  5611. Lincol, Ma. 41773
  5612.  
  5613. Tom Bullshit
  5614. 20 Fake Road
  5615. What Ever, XX 99851
  5616.  
  5617. One last thing you might try doing is soaking a cancelled stamp
  5618. off of an envelope, and gluing it onto one you are sending. Then burn
  5619. the stamp, leaveing a little bit to show that there was one there.
  5620.  
  5621. --------------Jolly Roger
  5622.  
  5623. Unstable Explosives by the Jolly Roger
  5624.  
  5625. Mix solid Nitric Iodine with househould ammonia. Wait overnight and
  5626. then pour off the liquid. You will be left with a muddy substance. Let
  5627. this dry till it hardens. Now throw it at something!!!!
  5628.  
  5629. ----------------Jolly Roger
  5630.  
  5631. Weird Drugs by the Jolly Roger
  5632.  
  5633. Bananas:
  5634. 1. Obtain 15 pounds of ripe yellow bananas
  5635. 2. Peel all and eat the fruit. Save the peelings
  5636. 3. Scrape all the insides of the peels with a sharp knife.
  5637. 4. Put all the scraped material in a large pot and add water.
  5638. 5. Boil 3 or 4 hours until it has attained a solid paste considtency.
  5639. 6. Spread paste onto cookie sheets and dry in ofen for about 20
  5640. minutes. This will result in fine black powder. Usually one will
  5641. feel the effects after smoking three to four cigarettes.
  5642.  
  5643. Cough syrup:
  5644. mix robitussion a-c with an equal amount of ginger ale and drink. The
  5645. effect are sedation and euphoria. Never underestimate the effects of
  5646. any drug! You can od on cough syrup!
  5647.  
  5648. Toads:
  5649. 1. Collect five to ten toads, frogs will not work. The best kind are
  5650. tree toads.
  5651. 2. Kill them as painlessly as possible, and skin immediately.
  5652. 3. Allow the skins to dry in a refrigerator four four to five days, or
  5653. until the skins are brittle.
  5654. 4. Now crush the skins into powder and smoke. Due to its bad taste you
  5655. can mix it with a more fragrent smoking medium.
  5656.  
  5657. Nutmeg:
  5658. 1. Take several whole nutmegs and grind them up in an old grinder.
  5659. 2. After the nutmegs are ground. Place in a mortar and pulverize with
  5660. a pestle.
  5661. 3. The usual dosage is about 10 or 15 grams. A larger dose may
  5662. produce excessive thirst,anxiety,and rapid hart beat, but
  5663. hallucinations are rare.
  5664.  
  5665. Peanuts:
  5666. 1. Take 1 pound of raw peanuts (not roasted)
  5667. 2. Shell them, saving the skins and discarding the shells.
  5668. 3. Eat the nuts.
  5669. 4. Grind up the skins and smoke them.
  5670.  
  5671. ------------------Jolly Roger
  5672.  
  5673. The Art of Carding by the Jolly Roger
  5674.  
  5675. Obtaining a credit card number: There are many ways to obtain the
  5676. information needed to card something.
  5677. The most important things needed are the card number and the expiration
  5678. date. Having the card-holders name doesn't hurt, but it is not essential.
  5679. The absolute best way to obtain all the information needed is by trashing.
  5680. The way this is done is simple. You walk around your area or any other
  5681. area and find a store, mall, supermarket, etc., that throws their
  5682. garbage outside on the sidewalk or dumpster. Rip the bag open and see
  5683. if you can find any carbons at all. If you find little shreds of
  5684. credit card carbons, then it is most likely not worth your time to tape
  5685. together. Find a store that does not rip their carbons at all or only in half.
  5686. Another way is to bullshit the number out of someone. That is call them
  5687. up and say "Hello, this is Visa security and we have a report that
  5688. your card was stolen." They will deny it and you will try to get it out
  5689. of them from that point on. You could say, "It wasn't stolen? Well what
  5690. is the expiration date and maybe we can fix the problem....
  5691. Ok and what is the number on your card?......Thank you very much and
  5692. have a nice day." Or think of something to that degree.
  5693. Another way to get card numbers is through systems such as TRW and CBI,
  5694. this is the hard way, and probably not worth the trouble, unless you are
  5695. an expert on the system. Using credit card numbers posted on BBS's is
  5696. risky. The only advantage is that there is a good chance that other
  5697. people will use it, thus decreasing the chances of being the
  5698. sole-offender. The last method of getting numbers is very good also.
  5699. In most video rental stores, they take down your credit card number
  5700. when you join to back-up your rentals. So if you could manage to steal
  5701. the list or make a copy of it, then you are set for a LONG time.
  5702. Choosing a victim: Once you have the card number, it is time to make the
  5703. order. The type of places that are easiest to victimize are small
  5704. businesses that do mail order or even local stores that deliver.
  5705. If you have an ad for a place with something you want and the order number
  5706. is NOT a 1-800 number then chances are better that you will succeed.
  5707. Ordering: When you call the place up to make the order, you must have
  5708. several things readily at hand.
  5709. These are the things you will need: A name, telephone number, business
  5710. phone, card number (4 digit bank code if the card is MasterCard),
  5711. expiration date, and a complete shipping and billing address.
  5712. I will talk about all of these in detail. A personal tip: When I call
  5713. to make an order, it usually goes much smoother if the person you are
  5714. talking to is a woman. In many cases they are more gullible than men.
  5715. The name: You could use the name on the card or the name of the person
  5716. who you are going to send the merchandise to. Or you could use the name
  5717. on the card and have it shipped to the person who lives at the drop
  5718. (Say it is a gift or something).
  5719. The name is really not that important because when the company verifies
  5720. the card, the persons name is never mentioned, EXCEPT when you have a
  5721. Preffered Visa card. Then the name is mentioned. You can tell if you
  5722. have a Preffered Visa card by the PV to the right of the expiration
  5723. date on the carbon. Nophone all day long waiting for the company to call
  5724. (Which they will), then the phone number to give them as your home-phone
  5725. could be one of the following: A number that is ALWAYS busy, a number
  5726. that ALWAYS rings, a payphone number, low end of a loop (and you will wait
  5727. on the other end), or a popular BBS.
  5728. NEVER give them your home phone because they will find out as soon as
  5729. the investigation starts who the phone belongs to. The best thing would
  5730. be to have a payphone call forward your house
  5731. (via Cosm The business number: When asked for, repeat the number you
  5732. used for your home phone.
  5733. Card number: The cards you will use will be Visa, Mastercard, and
  5734. American Express. The best is by far Visa. It is the most
  5735. straight-forward. Mastercard is pretty cool except for the bank code.
  5736. When they ask for the bank code, they sometimes also ask for the bank
  5737. that issued it. When they ask that just say the biggest bank you know of
  5738. in your area. Try to avoid American Express. They tend to lead full
  5739. scale investigations. Unfortunately, American Express is the most popular
  5740. card out. When telling the person who is taking your call the card
  5741. number, say it slow, clear, and with confidence.
  5742. e.g. CC# is 5217-1234-5678-9012. Pause after each set of four so you
  5743. don't have to repeat it.
  5744. Expiration date: The date must be at LEAST in that month. It is best
  5745. to with more than three months to go.
  5746. The address: More commonly referred to as the 'drop'. Well the drop
  5747. can range from an abandoned building to your next door neighbors
  5748. apartment. If you plan to send it to an apartment building then be
  5749. sure NOT to include an apartment number. This will confuse UPS or postage
  5750. men a little and they will leave the package in the lobby.
  5751. Here is a list of various drops: The house next door whose family is on
  5752. vacation, the apartment that was just moved out of, the old church that
  5753. will be knocked down in six months, your friends house who has absolutely
  5754. nothing to do with the type of merchandise you will buy and who will
  5755. also not crack under heat from feds, etc..
  5756. There are also services that hold merchandise for you, but personally
  5757. I would not trust them. And forget about P.O. Boxes because you need
  5758. ID to get one and most places don't ship to them anyway.
  5759. Other aspects of carding:Verifying cards, seeing if they were reported
  5760. stolen.
  5761. Verifying cards: Stores need to verify credit cards when someone purchases
  5762. something with one. They call up a service that checks to see if the
  5763. customer has the money in the bank.
  5764. The merchant identifies himself with a merchant number. The service
  5765. then holds the money that the merchant verified on reserve. When the
  5766. merchant sends in the credit card form, the service sends the merchant
  5767. the money. The service holds the money for three days and if no form
  5768. appears then it is put back into the bank. The point is that if you
  5769. want to verify something then you should verify it for a little amount
  5770. and odds are that there will be more in the bank.
  5771. The good thing about verification is that if the card doesn't exist or
  5772. if it is stolen then the service will tell you. To verify MasterCard
  5773. and Visa try this number. It is voice:1-800-327-1111 merchant code is
  5774. 596719.
  5775. Stolen cards: Mastercard and Visa come out with a small catalog every
  5776. week where they publish EVERY stolen or fraudulantly used card.
  5777. I get this every week by trashing the same place on the same day.
  5778. If you ever find it trashing then try to get it every week.
  5779. Identifying cards: Visa card numbers begin with a 4 and have either 13
  5780. or 16 digits. MasterCard card numbers begin with a 5 and have 16 digits.
  5781. American Express begins with a 3 and has 15 digits. They all have the
  5782. formats of the following:
  5783. 3xxx-xxxxxx-xxxxx American Express
  5784. 4xxx-xxx-xxx-xxx Visa
  5785. 4xxx-xxxx-xxxx-xxxx Visa
  5786. 5xxx-xxxx-xxxx-xxxx MasterCard
  5787. Gold cards: A gold card simply means that credit is good for $5000.
  5788. Without a gold card, credit would be normally $2000.
  5789. To recognize a gold card on a carbon there are several techniques:
  5790. American Express-none.
  5791. Visa-PV instead of CV.
  5792. Note-When verifying a PV Visa, you have to have the real name of the
  5793. cardholder.
  5794. Mastercard-An asterix can signify a gold card, but this changes depending
  5795. when the card was issued.
  5796. I am going to type out a dialog between a carder and the phone operator
  5797. to help you get the idea.
  5798. Operator: "Over-priced Computer Goods, may I help you?"
  5799. Carder: "Hi, I would like to place an order please."
  5800. Operator: "Sure, what would you like to order?"
  5801. Carder: "400 generic disks and a double density drive."
  5802. Operator: "Ok, is there anything else?"
  5803. Carder: "No thank you, that's all for today."
  5804. Operator: "Ok, how would you like to pay for this? MasterCard or Visa?"
  5805. Carder: "Visa."
  5806. Operator: "And your name is?"
  5807. Carder: "Lenny Lipshitz." (Name on card)
  5808. Operator: "And your Visa card number is?"
  5809. Carder: "4240-419-001-340" (Invalid card)
  5810. Operator: "Expiration date?"
  5811. Carder: "06-92."
  5812. Operator: "And where would you like the package shipped to?"
  5813. Carder: "6732 Goatsgate Port. Paris,texas,010166."
  5814. Operator: "And what is your home telephone number?"
  5815. Carder: "212-724-9970" (This number is actually always busy)
  5816. Operator: "I will also need your business phone number in case we have
  5817. to reach you."
  5818. Carder: "You can reach me at the same number. 212-724-9970"
  5819. Operator: "O.K. Thank you very much and have nice day."
  5820. Carder: "Excuse me, when will the package arrive?"
  5821. Operator: "In six to seven days UPS."
  5822. Carder: "Thanks alot, and have a pleasant day."
  5823. Now you wait 6-7 days when the package will arrive to the address which
  5824. is really a house up for sale. There will be a note on the door
  5825. saying, "Hello UPS, please leave all packages for Lenny Lipshitz in the
  5826. lobby or porch. Thanks alot, Lenny Lipshitz" (Make the signature half-way
  5827. convincing)
  5828.  
  5829. ------------------Jolly Roger
  5830.  
  5831. Recognizing credit cards by the Jolly Roger
  5832.  
  5833. [Sample: American Express]
  5834. XXXX XXXXXX XXXXX
  5835. MM/Y1 THRU MM/Y2 Y1
  5836. John Doe AX
  5837.  
  5838. Explanation:
  5839. The first date is the date the person got the card, the second
  5840. date is the expriation date, after the expiration date is the same
  5841. digits in the first year.The American Express Gold has many more
  5842. numbers (I think 6 8 then 8). If you do find a Gold card keep it
  5843. for it has a $5000.00 backup even when the guy has no money!
  5844.  
  5845. [Sample: Master Card]
  5846. 5XXX XXXX XXXX XXXX
  5847. XXXX AAA DD-MM-YY MM/YY
  5848. John Doe.
  5849.  
  5850. Explanation:
  5851. The format varies, I have never seen a card that did not start with
  5852. a 5XXX there is another 4 digits on the next line that is sometimes
  5853. asked for when ordering stuff, (and rarely a 3 digit letter combo
  5854. (e. ANB). The first date is the date the person got the card
  5855. and the second date is the expiration date.
  5856. Master Card is almost always accepted at stores.
  5857. [Sample: VISA]
  5858. XXXX XXX(X) XXX(X) XXX(X)
  5859. MM/YY MM/YY*VISA
  5860. John Doe
  5861.  
  5862. Explanation:
  5863. Visa is the most straight forward
  5864. of the cards,for it has the name right on the card itself, again the
  5865. first date is the date he got the card and the second is the
  5866. expiration date. (Sometimes the first date is left out). The
  5867. numbers can eather be 4 3 3 3 or 4 4 4 4. Visa is also almost always
  5868. accepted at stores, therefore, the best of cards to use.
  5869.  
  5870. How To Create A New Indentity By The Walking Glitch
  5871. Courtesy of the Jolly Roger!
  5872.  
  5873. You might be saying, "Hey Glitch, what do I need a new identity for?"
  5874. The answer is simple. You might want to go buy liquor somewhere, right?
  5875. You might want to go give the cops the false name when you get busted
  5876. so you keep your good name, eh? You might even want to use the new
  5877. identity for getting a P.O. Box for carding. Sure! You might even
  5878. want the stuff for renting yourself a VCR at some dickless loser of a
  5879. convenience store. Here we go:
  5880. Getting a new ID isn't always easy, no one said it would be. By following
  5881. these steps, any bozo can become a new bozo in a coupla weeks.
  5882.  
  5883. STEP 1
  5884.  
  5885. The first step is to find out who exactly you'll become. The
  5886. most secure way is to use someone's ID who doesn't use it themselves.
  5887. The people who fit that bill the best are dead. As an added bonus they
  5888. don't go complaining one bit. Go to the library and look
  5889. through old death notices. You have to find someone who was born about
  5890. the same time as you were, or better yet, a year or two older
  5891. so you can buy booze, etc. You should go back as far as you can for the
  5892. death because most states now cross index deaths to births so people
  5893. can't do this in the future. The cutoff date in Wisconsin is 1979, folks
  5894. in this grand state gotta look in 1978 or earlier. Anything earier there
  5895. is cool. Now, this is the hardest part if you're younger. Brats that
  5896. young happen to be quite resilient, takin' falls out of three story windows
  5897. and eating rat poison like its Easter candy, and not a scratch or
  5898. dent. There ain't many that die, so ya gotta look your ass off. Go
  5899. down to the library and look up all the death notices you can,
  5900. if it's on microfilm so much the better. You might have to go through
  5901. months of death notices though, but the results are well worth it.
  5902. You gotta get someone who died locally in most instances: the death
  5903. certificate is filed only in the county of death. Now you go down to
  5904. the county courthouse in the county where he died and get the
  5905. death certificate, this will cost you around $3-$5 depending on the state
  5906. you're in. Look at this hunk of paper, it could be your way to
  5907. vanish in a clould of smoke when the right time comes, like right after
  5908. that big scam. If You're lucky, the slobs parents signed him up with
  5909. social security when he was a snot nosed brat. That'll be another piece
  5910. of ID you can get. If not, thats ok too. It'll be listed on the death
  5911. certificate if he has one. If you're lucky, the stiff was born
  5912. locally and you can get his birth certificate right away.
  5913.  
  5914. STEP 2
  5915.  
  5916. Now check the place of birth on the death certificate, if it's in
  5917. the same place you standing now you're all set. If not, you can mail
  5918. away for one from that county but its a minor pain and it might
  5919. take a while to get, the librarian at the desk has listings of where
  5920. to write for this stuff and exactly how much it costs. Get the Birth
  5921. cirtificate, its worth the extra money to get it certified
  5922. because thats the only way some people will accept it for ID. When yur
  5923. gettin this stuff the little forms ask for the reason you want it,
  5924. instead of writing in "Fuck you", try putting in the word "Geneology".
  5925. They get this all the time. If the Death certificate looks good for
  5926. you, wait a day or so before getting the certified birth certificate
  5927. in case they recognize someone wanting it for a dead guy.
  5928.  
  5929. STEP 3
  5930.  
  5931. Now your cookin! You got your start and the next part's easy.
  5932. Crank out your old Dot matrix printer and run off some mailing labels
  5933. addressed to you at some phony address. Take the time to check your
  5934. phony address that there is such a place. Hotels that rent by the month
  5935. or large apartment buildings are good, be sure to get the right zip
  5936. code for the area. These are things that the cops might notice that
  5937. will trip you up. Grab some old junk mail and paste your new lables
  5938. on them. Now take them along with the birth certificate down to the library.
  5939. Get a new library card. If they ask you if you had one before say that
  5940. you really aren't sure because your family moved around alot when
  5941. you were a kid. Most libraries will allow you to use letters as a form
  5942. of ID when you get your card. If they want more give them a sob story
  5943. about how you were mugged and got your wallet stolen with all your
  5944. identification. Your card should be waiting for you in about two weeks.
  5945. Most libraries ask for two forms of ID, one can be your trusty Birth
  5946. Certificate, and they do allow letters addressed to you as a second
  5947. form.
  5948.  
  5949. STEP 4
  5950.  
  5951. Now you got a start, it isn't perfect yet, so let's continue. You should
  5952. have two forms of ID now. Throw away the old letters, or better yet
  5953. stuff them inside the wallet you intend to use with this stuff.
  5954. Go to the county courthouse and show them what nice ID you got and get
  5955. a state ID card. Now you got a picture ID. This will take about two weeks
  5956. and cost about $5, its well worth it.
  5957.  
  5958. STEP 5
  5959.  
  5960. If the death certificate had a social security number on it you can go
  5961. out and buy one of those metal SS# cards that they sell.
  5962. If it didn't, then you got all kinds of pretty ID that shows exactly
  5963. who you are. If you don't yet have an SS#, Go down and apply for one,
  5964. these are free but they could take five or six weeks to get,
  5965. Bureaucrats you know... You can invent a SS# too if ya like, but the motto
  5966. of 'THE WALKING GLITCH' has always been "Why not excellence?".
  5967.  
  5968. STEP 6
  5969.  
  5970. If you want to go whole hog you can now get a bank account in your new
  5971. name. If you plan to do alot of traveling then you can put alot
  5972. of money in the account and then say you lost the account book. After
  5973. you get the new book you take out all the cash. They'll hit you
  5974. with a slight charge and maybe tie-up your money some, but if you're
  5975. ever broke in some small town that bank book will keep you from being
  5976. thrown in jail as a vagrant.
  5977.  
  5978. ALL DONE?
  5979.  
  5980. So kiddies, you got ID for buying booze, but what else? In some towns
  5981. (the larger the more likely) the cops if they catch you for something
  5982. petty like shoplifting stuff under a certain dollar amount, will just
  5983. give you a ticket, same thing for pissing in the street. Thats it!
  5984. No fingerprints or nothing, just pay the fine (almost always over $100)
  5985. or appear in court. Of course they run a radio check on your ID, you'll
  5986. be clean and your alter-ego gets a blot on his record.
  5987. Your free and clear. Thats worth the price of the trouble you've gone
  5988. through right there. If your smart, you'll toss that ID away if this
  5989. happens, or better yet, tear off your picture and give the ID to someone
  5990. you don't like, maybe they'll get busted with it.
  5991. If you're a working stiff, here's a way to stretch your dollar. Go to work
  5992. for as long as it takes to get unemployment and then get yourself fired.
  5993. Go to work under the other name while your getting the unemployment.
  5994. With a couple of sets of ID, you can live like a king. These concepts
  5995. for survival in the new age come to you compliments of THE WALKING GLITCH.
  5996. First release of this phile 7/7/88.
  5997.  
  5998. brought to you in the Cookbook courtesy of...
  5999. ---------------The Jolly Roger
  6000.  
  6001.  
  6002. ##########################################################################
  6003. # #
  6004. # The Remote Informer #
  6005. # #
  6006. #------------------------------------------------------------------------#
  6007. # #
  6008. # Editors: Tracker, Norman Bates, and Ye Cap'n #
  6009. # #
  6010. #========================================================================#
  6011. # September 26, 1987 Issue: 02 #
  6012. #========================================================================#
  6013. ##########################################################################
  6014. # #
  6015. # Brought to you by the 'new' TUFF: The Underground Fone Federation #
  6016. # #
  6017. ##########################################################################
  6018. ==========================================================================
  6019. The News
  6020. ==========================================================================
  6021. Sprint Strikes Back | Celestial Elite/TUFF Come to an End
  6022. ==============================|===========================================
  6023. Sprint caught a guy dealing| Celestial Elite and TUFF, the famous
  6024. codes on the street in LA|hack/phreak groups came to an end a couple
  6025. this past week. Information|weeks ago. TUFF, however, is being reborn
  6026. on this bust is limited at|and you can expect it to be back to full
  6027. this time. |force within a month. Sources have it that
  6028. A seventeen year old was|Magnus Adept, head of the now terminated
  6029. busted in Arizona last week.|group, Celestial Elite, has started a new
  6030. The name of the teenager will|group called Avalon Kingdom. We are unsure
  6031. not be printed to protect him|what plans are in store for it.
  6032. from harassment calls. | TUFF has several ideas and plans that
  6033. |will be out to the public soon. Look for
  6034. >This information was supplied|future issues of The Remote Informer (tm)
  6035. by Phreaky Phone II |for new updates.
  6036.  
  6037. ==========================================================================
  6038. Beige Box Bust | TeleNet Hacker | Bate's Motel Moves
  6039. ==============================|====================|======================
  6040. One of our editors and a| Crusader released| Bate's Motel BBS,
  6041. member of TUFF, Norman Bates|his TeleNet hacking|run by Norman Bates,
  6042. was caught for Beige boxing|program on September|was forced to move. It
  6043. that he had done over 3 months|20, 1987. Look for|is temporarily set up
  6044. ago. The calls he had made|it on a good board|at (619)267-8619. It
  6045. were inside his state and cost|you call. A review|will remain 1200 baud,
  6046. a total of $12. He paid the|will be in the next|and a member of the
  6047. bill and no charges were filed|issue of The Remote |TUFF Network. It is
  6048. against him. |Informer. |open to the public.
  6049. ==========================================================================
  6050. Phreaky Phones Return: Amazing? | LDDS Buys Out TMC: Companies Merge
  6051. =====================================|====================================
  6052. The original Phreaky Phone numbers| LDDS bought out TMC last month.
  6053. now support the new Phreaky Phones.|They merged into LDDS, since it was
  6054. The guys running them had protested|bigger and more widespread. Any
  6055. that the lines were being monitored.|companies that were subscribing to
  6056. There is no way that could have been,|the TMC long distance service were
  6057. and they contradicted themselves by|automatically coverted to LDDS. All
  6058. restarting Phreaky Phones on the same|local TMC ports still work, but will
  6059. numbers. They gave alot of credit|soon be disconnected. Refer to the
  6060. to the people calling to suggest they|article on LDDS in this issue for
  6061. believe a story like that. |more information on LDDS dial-ups.
  6062. ==========================================================================
  6063. US Sprint Calls Destinations | Pirate's Hollow Is Back With 10 Megs
  6064. ==========================================================================
  6065. US Sprint now calls all the| Pirate's Hollow is back on-line. It
  6066. numbers called with unauthorized|now is run a 10 meg hard drive. Unlike
  6067. codes. Their dis-advantage is|most boards that have #'s of megs, this
  6068. that they are delayed by about|one will stress more attention on it's
  6069. two months in calling because|database. The database is scheduled to
  6070. they have to wait till people|be online by October 1st. This database
  6071. report they did not make calls to|will contain 800+ text files on various
  6072. the numbers they were billed for.|topics, with about 60% - 70% pertaining
  6073. Best advice is to not call voice|to illegal activities. Unfortunately,
  6074. with Sprint except to those who|Trax Xe is being redesigned, so until it
  6075. have private lines other than|is finished, it will run on Carina. The
  6076. their regular phone line. |number is (415)593-6784 (300/1200 baud).
  6077. ==========================================================================
  6078. Raggers and Braggers
  6079. ==========================================================================
  6080. This section is to make you aware of well-known raggers and braggers.
  6081. Since this is the first time this section is being printed, we will tell
  6082. you what classifies people as raggers and braggers. In the future issues
  6083. the top raggers and braggers will be listed in this newsletter to let the
  6084. SysOps know who not to let on their board, or to atleast keep an eye on.
  6085. A ragger is someone who will put someone else down for something. The
  6086. person might post a message asking a novice question about hacking and
  6087. phreaking, or may say something that is completely wrong, and a ragger
  6088. will put the other person down for he said, posted, etc. The ones that
  6089. usually classify in this category are the ones that think they know it all
  6090. and consider themselves right no matter what anyone says. Most of the
  6091. users that use codes and consider themselves a master phreaker usually
  6092. become raggers.
  6093. A bragger is someone who either does or thinks he does know everything,
  6094. and puts it upon himself to tell the whole world that he knows it all.
  6095. This person is also one who thinks he is better than everyone else and
  6096. he believes he is Elite, and no one else is. People who tend to do this
  6097. are those who have, for some reason, become well-known in the underworld,
  6098. and as a result become a bragger. Those usually not too well-known will
  6099. not tend to brag as much as those who think everyone would love to be
  6100. their friend and be like them.
  6101. As a well-known ragger and bragger, The Toad, learned that it does not
  6102. help to be one or both of those. He has since changed and is now easily
  6103. accepted by most. Most people disliked him because others they knew had
  6104. said something bad about him. This is called peer pressure and is a bad
  6105. influence to those who are new to the underworld. I would suggest in the
  6106. future, to not judge someone by what others say, but rather by how they
  6107. act around/to you.
  6108. The current most popular Atarian that classifies as a ragger and a
  6109. bragger is Ace of Aces, and is well-hated by many users and SysOps, since
  6110. he tends to put down anything anyone says and considers himself the best
  6111. at writing hacking programs. He is commonly referred to as Ass of Asses
  6112. and Ass of Assholes. Even holding an open mind about this guy, you would
  6113. soon come to find that what others said coincides with what you see from
  6114. him.
  6115. ==========================================================================
  6116. A New 950 has arrived!
  6117. ==========================================================================
  6118. LDDS, who as mentioned above bought out TMC, is installing a new 950
  6119. port to most major cities. By the time you read this, it should be in
  6120. almost every area that supports 950 ports. The number is 950-1450. This
  6121. port will dial 976 numbers, but not 700, 800, or 900 numbers. The dialing
  6122. method for LDDS is: 7 digit code, then even if the code is bad it will
  6123. give you a dial tone. Then dial the area code plus the number. If you
  6124. have a bad code it will simply say your call cannot be completed as it was
  6125. dialed. There is a default code used on the system that currently works.
  6126. The code is simply, 1234567. I have seen codes from 5 different companies
  6127. and they all are in the format of 00xxxxx. I do not know what type of
  6128. software they use, but I will know by the next issue exactly what they
  6129. place on the bills. This could be the answer to alot of people's
  6130. problems with fear of Sprint and ITT, especially AllNets. Just remember,
  6131. Tracker is the one who found this, and all information about it. If
  6132. someone is seen saying they found this, then they will be listed in the
  6133. next issue which will contain an article on leeches.
  6134. ==========================================================================
  6135. Mailbox Systems
  6136. ==========================================================================
  6137. Mailbox systems are the link between information and the underworld. If
  6138. you have ever called one, then you will know the advantages of having one,
  6139. especially the ones that are open to whole underworld, rather than just a
  6140. select few. There are two types of mailbox systems that are widely used.
  6141. The first type we will talk about is the multiple mailbox systems, or
  6142. commonly referred to as message systems. These systems have several
  6143. mailboxes set up on one number. Usually, you can access other mailboxes
  6144. from that number by pressing '*' or '#'. Sometimes you just enter the
  6145. mailbox number and you are connected. These are the safest systems to use
  6146. to protect information from US Sprint and other long distance companies.
  6147. Since US Sprint and other companies call the destination numbers, it is
  6148. safer to have 800 mailbox systems, and most of the time, the multiple
  6149. mailbox systems are on 800 numbers. The passcode on these systems can
  6150. vary in length and can be accessed by several different methods, so it is
  6151. impossible to explain exactly how to hack these systems.
  6152. The other type is the single mailbox system. These are usually set up
  6153. in a reserved prefix in an area code. (Ex: 713-684-6xxx) These systems
  6154. are usually controlled by the same type of hardware/software. To access
  6155. the area where you enter the passcode, just hit '0' for a second or so.
  6156. The passcodes are four (4) digits long. The only way to hack these is
  6157. manually. The best thing you could do is to find one that does not have
  6158. a recording from a person, but just the digitized voice. If you hack one
  6159. that someone already owns, they will report it and it will not last as
  6160. long.
  6161. Here is a list mailboxes or prefixes to help you get started
  6162. --------------------------------------------------------------------------
  6163. Single Multiple Digits
  6164. ------------ ------------ --------
  6165. 213-281-8xxx 212-714-2770 3
  6166. 213-285-8xxx 216-586-5000 4
  6167. 213-515-2xxx 415-338-7000 Aspen Message System 3
  6168. 214-733-5xxx 714-474-2033 Western Digital
  6169. 214-855-6xxx 800-222-0651 Vincent and Elkins 4
  6170. 214-978-2xxx 800-233-8488 3
  6171. 215-949-2xxx 800-447-8477 Fairylink 7
  6172. 312-450-8xxx 800-521-5344 3
  6173. 313-768-1xxx 800-524-2133 RCA 4
  6174. 405-557-8xxx 800-527-0027 TTE TeleMessager 6
  6175. 602-230-4xxx 800-632-7777 Asynk 6
  6176. 619-492-8xxx 800-645-7778 SoftCell Computers 4
  6177. 713-684-6xxx 800-648-9675 Zoykon 4
  6178. 800-847-0003 Communications World 3
  6179. ==========================================================================
  6180. The Disclaimer!
  6181. ==========================================================================
  6182. We, the editors, take no responsibility for your actions and use of
  6183. the information in this newsletter. This newsletter is for informational
  6184. purposes only. If you are easily offended by telecommunication
  6185. discussions, then we suggest that you not read this newsletter. But for
  6186. those who are truely interested in the information in this newsletter,
  6187. enjoy it.
  6188. ==========================================================================
  6189. Coming in the next issue!
  6190. ==========================================================================
  6191. In the next issue, we will be open for suggestions from the readers
  6192. of this issue. We will have some featured articles though, which include:
  6193. 1) Study of bridges
  6194. 2) Review of Crusader's new TeleNet Hacker
  6195. 3) More information on the new LDDS 950 port
  6196. 4) Review of Code Hackers for all modems
  6197. 5) List of TeleNet addresses
  6198. 6) Credit Card checkers
  6199. 7) Ideas from the readers
  6200. ==========================================================================
  6201.  
  6202. Brought to you in the Cookbook by the Jolly Roger!!!!!!!!!!!!!!!
  6203.  
  6204. ##############################################################################
  6205. # _________________________________ #
  6206. # /he Remote Informer Newsletter! #
  6207. # #
  6208. #----------------------------------------------------------------------------#
  6209. # November TRI Issue: 03 #
  6210. #----------------------------------------------------------------------------#
  6211. # #
  6212. # The Editors: Tracker, Ye Cap'n, Norman Bates, and The Reporter #
  6213. # #
  6214. ##############################################################################
  6215. ==============================================================================
  6216. = Introduction =
  6217. ==============================================================================
  6218. It's been a month now, and ALOT has happened. So much, in fact, that the
  6219. information will be split into several issues. This should be no shock since
  6220. I mentioned in the first issue that we may put several issues out sometimes.
  6221. I want to congratulate the readers for finally contributing to the
  6222. newsletter. This first two issues were all on information that I, myself,
  6223. obtained. Several people gave me information for these issues, and their
  6224. handle and information is included in the articles.
  6225. ==============================================================================
  6226. = In The News! =
  6227. ==============================================================================
  6228. ITT has 9 digits! | Phreaky Phones Go Down! |Information!
  6229. ==============================================================================
  6230. For those of you who did| The famed Phreaky Phones are down| We have
  6231. not know this, ITT has nine|again. Modem Man, the original person|so much info
  6232. digit codes. They are said|that started them, has said that they|to put out,
  6233. to give better connections|will be down until further notice. In|that we are
  6234. to some extent. This info.|the meantime, other independent boxes|putting out
  6235. was originally given to us|are being started. A listing can be|many issues
  6236. by Party Beast. |made of current ones on request. |at one time.
  6237. =================================================================|If you want
  6238. Magnus Adept Gets Busted | Sprint Codes Are Dying Fast! |all issues
  6239. =================================================================|that are out
  6240. Fellow Atarian and well-| Sprint codes are hard to get and|now, then
  6241. known phreak Magnus Adept|when they are obtained, they tend to|call one of
  6242. got caught by MCI. Details|die rather quickly. Phreakers have|the boards
  6243. of the how, when, and where|been saying that the 950-0777 port|at the end
  6244. are not known at this time.|is dead, but on the contrary, it is|of the issue
  6245. He got caught with 150 codes|still available in states that are|or look for
  6246. and may have to pay up to|not highly abused by phreaks. Here|an editor on
  6247. 50 dollars for each code.|again, rumors are being spread. |a hack BBS.
  6248. ==============================================================================
  6249. = The Best BBS of the Month =
  6250. ==============================================================================
  6251. Starting from now on, we will have a BBS of the month. We will choose a
  6252. BBS, ragardless of computer type, and look at the user participation in phreak
  6253. related matters, as well as quality discussions on the various illegal topics.
  6254. A BBS can remain the BBS of the month as long as they reside above the rest of
  6255. the BBS systems. Even though we will sometimes bring out more than one issue
  6256. in a month, the board will remain BBS of the month until the first issue inthe
  6257. next month comes out.
  6258. This month's BBS of the month is FBI PirateNet. We chose this board
  6259. because of the large numbers of posts in the bases, and not only information,
  6260. but discussions as well, with a minimum number of posts from raggers and
  6261. braggers. The number for it is 516-661-7360. The SysOp of FBI PirateNet is
  6262. The Phantom, not to be confused with an earlier narc.
  6263. ==============================================================================
  6264. = US Sprint Expected to Trim Staff, Consolidate Divisions =
  6265. ==============================================================================
  6266. New York -- US Sprint Communications Corp., the troubled long distance
  6267. carrier, is expected to announce soon that it will cut its work force by
  6268. several hundred people and reduce its seven regional divisions to 3 operating
  6269. groups, sources familiar with the company said.
  6270. The company's Pacific division is based in Burlingame, CA. The layoffs
  6271. and reorganization are part of a plan by US Sprint's new president, Robert H.
  6272. Snedaker, to reduce heavy operating losses, which analysts expect to reach
  6273. more than $800 million this year.
  6274. Snedaker replaced Charles M. Slibo, who was forced to resign in July
  6275. because losses were running much higher than the parent companies had
  6276. expected. Problems with the company's computerized billing system also
  6277. contributed to Skibo's ouster. US Sprint is owned and operated by the GTE
  6278. Corp. and United TeleCom.
  6279. According to sources close to Snedaker, who was vice chairman and chief
  6280. operating officer of United TeleCom, he is planning to consolidate the
  6281. company's 7 divisions, which operate in the same geographical regions as the
  6282. seven regional Bell operating companies, into 3 divisions.
  6283. The rationale for the move, according to idustry analysts, is that the
  6284. company will need a much smaller work force once it begins handling all it's
  6285. phone traffic on it's new fiber optic network, which can carry a greater
  6286. number of telephone calls at less cost. Company officials have said that
  6287. they expect to have most of the traffic on the network by early next year.
  6288. One source said that there would be more than one round of layoffs in the
  6289. coming months and that the company ultimately plans to reduce its 14,000
  6290. member work force by 15 percent.
  6291. Several top managers are expected to resign as soon as US Sprint
  6292. centralizes its marketing and support operations as its headquarters in Kansas
  6293. City, MO., according to a report in the latest issue of Business Week
  6294. magazine.
  6295. A spokesman for US Sprint said on Friday that the company would not
  6296. comment on the rumors. The company is the nation's third largest long
  6297. distance company, after the American Telephone and Telegraph Co. (AT&T) and
  6298. MCI Communications Co.
  6299. Last year, Washington based MCI undertook a similar reorganization in
  6300. which it posted a $502.5 million loss to write down old inventory and
  6301. restructure operations.
  6302. Analysts said that is US Sprint is to turn a profit, the company must
  6303. increase its market share. "To do this, US Sprint must gain more large
  6304. business customers, which account for about 80 percent of industry revenues,"
  6305. said Robert B. Morris III, Securities in San Francisco.
  6306. Morris said that by using a slick marketing campaign to differentiate its
  6307. all-fiber telephone network from those of competitors, US Sprint more than
  6308. doubled its customer base last year. But "most of these customers were
  6309. residential and small business users that added little to Sprint's bottom
  6310. line," he added. "If the company expects to be profitable, it will have to
  6311. concentrate on providing the best service to volume users."
  6312. ] This information was supplied by Ye Cap'n
  6313. ==============================================================================
  6314. = Secret Service Cracks Down on Teen Hackers =
  6315. ==============================================================================
  6316. Mount Lebanon, PA -- The US Secret Service and local police departments
  6317. have put a scare into the hacker community with a nationwide crackdown on
  6318. computer crime that has resulted in the arrests of teenage hackers in at least
  6319. three cities.
  6320. "People who monitor the bulletin boards say there are a lot of nervous
  6321. hackers out there, wondering who will be arrested next," says Ronald E.
  6322. Freedman, vice-president of Advanced Information Management, a Woodbridge, VA
  6323. base computer security firm.
  6324. Nine teenagers from Mount Lebanon Junior-Senior High School near
  6325. Pittsburg, PA, were arrested recently and charged with computer fraud. The
  6326. juveniles allegedly used home computers to gain illegal access to a credit
  6327. card authorization center. They obtained valid credit card numbers and used
  6328. them to purchase thousands of dollars worth of mail order merchandise, the
  6329. police said.
  6330. Freedman says it appears the hackers used some relatively sophisticated
  6331. techniques in the scheme, including specially written software that enabled
  6332. them to bypass security controls and navigate through credit records to obtain
  6333. key information.
  6334. Police officials say that the hackers also obtained access codes from
  6335. pirate bulletin board systems to make free long distance calls and gain access
  6336. to various business and government computers.
  6337. The arrests were the result of a 6 week investigation by the Secret
  6338. Service and the Mount Lebanon police. The police were tipped off by parents
  6339. who were suspicious about how their son managed to obtain a skateboard valued
  6340. at $140.
  6341. The Secret Service was also involved in investigations that led to the
  6342. arrests of several hackers in San Francisco and New York last July.
  6343. Secret Service spokesman William Corbett says that although some reports
  6344. have portrayed the hackers as part of a national crime ring, the cases are
  6345. unrelated. "It's just that a few of these computers hacking cases came to a
  6346. head at about the same time," he says.
  6347. Federal Legislation enacted in 1984 gives the Secret Service, part of the
  6348. Department of the Treasury, a major role in investigating computer crimes.
  6349. Under the federal Computer Fraud and Abuse Act of 1986, computer fraud is a
  6350. felony that carries a maximum penalty of 5 years for the first offense, and 10
  6351. years for the second. Displaying unauthorized passwords on hacking bulletin
  6352. boards carries a maximum penalty of 1 year in prison for the first offense,
  6353. and 10 years for the second.
  6354. ] This information was supplied by Ye Cap'n
  6355. ==============================================================================
  6356. = German Teens Crack NASA =
  6357. ==============================================================================
  6358. Washington, D.C. -- A group of West German teenagers from the Chaos
  6359. Computer Club penetrated a NASA network recently, saying they were doing it to
  6360. "test the security."
  6361. What they got into was SPAN Net, a computer network with about 700 notes,
  6362. which is actually based at the Goddard Space Center in Maryland. All that's
  6363. in there is unclassified data, space science information, and post-flight data
  6364. anaysis. "Anyone with NASA related research can apply for access to SPAN"
  6365. says a spokesman, who adds that the network runs on DEC VAX hardware. "We
  6366. picked up three attempts to gain access and put in security precautions so it
  6367. would't happen." His personal opinion is, "We're happy that they couldn't get
  6368. back in, and decided to go public." He also added that NASA has many other
  6369. networks, many of the classified and "probably inpenetrable. But I do not
  6370. want to challenge anybody."
  6371. How'd they get in? Probably they got a West German NASA licensee, which
  6372. gave them a visitor's pass, then they created new passwords with unlimited
  6373. security for themselves, after which getting around the network was easy.
  6374. ] Supplied by Ye Cap'n
  6375. ==============================================================================
  6376. We look for information in anyway related to the newsletter. If you have
  6377. something of interests, or something that you saw on television, or in the
  6378. newspaper, then upload it to one of the boards listed below. You will receive
  6379. full credit.
  6380. Pirate's Hollow..................................................(415)593-6784
  6381. Bate's Motel.....................................................(619)267-0293
  6382. ==============================================================================
  6383.  
  6384.  
  6385. ##############################################################################
  6386. # _________________________________ #
  6387. # /he Remote Informer Newsletter! #
  6388. # #
  6389. #----------------------------------------------------------------------------#
  6390. # November TRI Issue: 04 #
  6391. #----------------------------------------------------------------------------#
  6392. # #
  6393. # The Editors: Tracker, Ye Cap'n, Norman Bates and The Reporter #
  6394. # #
  6395. ##############################################################################
  6396. ==============================================================================
  6397. = FCC Charges Much Ado About Not Much =
  6398. ==============================================================================
  6399. New Cannan, CT -- International Resource Develope of New Cannan, CT says
  6400. that the market bubble for packet switch networks like TeleNet is going to
  6401. burst by 1991, regardless of what the Federal Communications Commission does
  6402. about access charges. Cheap fiber, which greatly increases the capacity, and
  6403. ISDN services, which let you share a phone line with your computer, will do
  6404. the business in, the report says. Over the next four years, however, the
  6405. demand for packet switch services to will grow from $650 million to $1,612
  6406. million (If the Baby Bells are allowed to add competition to the market, the
  6407. $5/hour access charge cannot be passed though to the customers anyway).
  6408. ] Supplied by Ye Cap'n
  6409. ==============================================================================
  6410. = Pirate's Hollow Update =
  6411. ==============================================================================
  6412. San Carlos, CA -- The Pirate's Hollow, one of the more popular BBS's in
  6413. the Bay Area, is installing several new features that will even add to it's
  6414. popularity. For one, users will be able to gamble against each other by
  6415. betting on NFL games and participating in the Pirate's Hollow Lottery. Also,
  6416. in order to support one of the best newsletters around, the Pirate's Hollow
  6417. will soon be adding a seperate module that will act as an outpost for The
  6418. Remote Informer. This module will feature the older issues of the newsletter,
  6419. a section that will keep you abreast of updates of recently released
  6420. information, and a section that will show what is upcoming in the next issues
  6421. of The Remote Informer.
  6422. The long-awaited database will soon be put online. Over 800 textfiles
  6423. on a variety of subjects will be available to the users that pay the access
  6424. fee that will be determined at a later date. Many more are on the way, and
  6425. will be included at no charge. The charge will be a one time charge though,
  6426. rather than a yearly payment.
  6427. Another new option will be available by early December. PC Pursuit
  6428. callback will be installed. This will allow people to call and then get
  6429. called back if your area code is supported by PC Pursuit. This will also
  6430. require a charge, to be set at a later date.
  6431. The Pirate's Hollow has been doing well in its comeback to the
  6432. telecommunications world, but we need more callers in order to formulate a
  6433. more diverse user base. Please spread the BBS # around while also trying to
  6434. make others aware of the newsletter.
  6435. ==============================================================================
  6436. = Switching Systems =
  6437. ==============================================================================
  6438. There are currently three different forms of switching systems that are
  6439. present in the United States today. Step by Step (SxS), Crossbar, and the
  6440. Electronic Switching System (ESS) make up the group. Phreaks have always been
  6441. a little tenative when it comes to "doing their work" once they have heard
  6442. about effects of switching systems on their hobby. After researching this
  6443. topic, I have found that there really is not that much to be worried about.
  6444. Read on, while I share with you information which I have compiled about all of
  6445. these switching systems and their distinct features.
  6446. The first switching system that was used in the country was called Step
  6447. by Step. This was adopted in 1918 by Bell, and until 1978, they had over 53%
  6448. of all their exchanges using Step by Step (SxS). This system is known for
  6449. it's long, confusing train of switches that are used for its step by step
  6450. switching.
  6451. Step by Step has many disadvantages to phone users. The switch train
  6452. becomes jammed fairly often, and it causes calls to be blocked. Also, SxS
  6453. does not allow the use of DTMF dialing. This accounts for some of the areas in
  6454. the United States that cannot have touch tone dialing abilities. A tremendous
  6455. amount of electricity and maintenance needs to accompany the SxS switching
  6456. system, which makes it even more impratical. All in all, this is probably the
  6457. most archaic switching system around.
  6458. There are a number of ways to see if you are on SxS. You will notice that
  6459. there are no pulsing digits after dialing. Most sources say that the phone
  6460. company will sound like many typewriters. SxS does not offer features such as
  6461. speed calling, call forwarding, three-way calling, call waiting, and other
  6462. such services. Pay phones on SxS also will want your money before you receive
  6463. a dial tone. This adds to the list of disadvantages labelled to that of the
  6464. Step by Step switching systems.
  6465. Another type of switching system that is prevalent in the United States
  6466. is Crossbar. Crossbar has been Bell's primary switcher after 1960, and three
  6467. types of it exists. Number 1 Crossbar (1xB), Number 4 Crossbar (4xB), and the
  6468. Number 5 Crossbar (5xB). In Crossbar, a switching matrix is used for all the
  6469. phones in an area, and when someone calls, the route is determined and is met
  6470. up with the other phone. This matrix is set-up in horizontal and vertical
  6471. paths. Unlike other swichting systems, in my research, I could not come up
  6472. with any true and definate distinguishing features of the Crossbar switching
  6473. systems.
  6474. The Electronic Switching System (ESS) is yet another switching system
  6475. used in the United States and the most used of all three swicthing systems.
  6476. ESS is an extremely advanced and multi-faced type of switching system, and is
  6477. feared by marauders of the phone company everywhere. With ESS, your phone
  6478. company is able to know every digit dialed (including mistakes), who you call,
  6479. when you called, and how long you were connected. ESS is also programmed to
  6480. print out the numbers of people who make excessive calls to WATS numbers (800
  6481. services) or directory assistance. This feature of ESS is called 800
  6482. Exceptional Calling Report, and has spelled the end of some forms of
  6483. continuous code hacks to certain extenders. ESS can also be programmed to
  6484. print logs of who called and abused certain numbers as well. Everything is
  6485. kept track of in its records.
  6486. The aforementioned facts show that ESS has made the jobs of organizations
  6487. such as the FBI, NSA, and other phone company security forces easier. Tracing
  6488. can be done in a matter of microseconds, and the result will be conveniently
  6489. printed out on the monitor of a phone company officer. ESS is also programmed
  6490. to pick up any "foreign tones" on the phone line such as the many varied tones
  6491. emulated by boxes.
  6492. ESS can be identified by a few features common in it. The 911 emergency
  6493. service is covered in the later versions of ESS. Also, you are given the dial
  6494. tone first when using a pay phone unlike that of SxS. Calling services like
  6495. call forwarding, speed calling, and call waiting are also common to ESS. One
  6496. other feature common to ESS is ANI (Automatic Number Identification) for long
  6497. distance calls. As you can see, ESS is basically the zenith of all switching
  6498. systems, and it will probably plague the entire country by the early 1990's.
  6499. Soon after, we should be looking forward to a system called CLASS. This
  6500. switching system will contain the feature of having the number of the person
  6501. that is calling you printed out on your phone.
  6502. What have I concluded about these switching systems? Well, they are not
  6503. good enough. I know a few people employed by the phone company, and I know
  6504. for a fact that they do not have enough time these days to worry about code
  6505. users, especially in large, metropolitan areas. So, I will go out on a limb
  6506. here, and say that a large portion of people will never have to worry about
  6507. the horrors of ESS.
  6508. ] Written by Ye Cap'n
  6509. ==============================================================================
  6510. = New Gizmo Can Change Voice Gender =
  6511. ==============================================================================
  6512. The most amazing device has turned up in the new Hammacher Schlemmer
  6513. catalog: the telephone voice gender changer.
  6514. What it does is change the pitch of your voice from, say, soprano to bass
  6515. -- a most efficient way to dissuade an obscene phone caller just as he's
  6516. getting warmed up.
  6517. That is not the same as running a 45 r.p.m. record at 33. In digital
  6518. conversion, the pitch can be changed without altering the speed.
  6519. The device runs on a 9-volt batter and attaches to the telephone mouth
  6520. piece with a rubber coupler that takes but a moment to slip on and off.
  6521. With the changer switched on, says Lloyd Gray, a Hammacher Schlemmer
  6522. technical expert, "the effect is similar to what you hear when they interview
  6523. an anonymous woman on television and disguise her voice by deepening it."
  6524. "It's better for changing a woman's voice to a man's than the other way
  6525. around," Gray said. A man can use it to raise the pitch of his voice, but he
  6526. still won't sound like a woman."
  6527. A man could, however, use the changer to disguise his voice. But with the
  6528. device set on high, Gray's voice still could be identified as his own. On low,
  6529. his normal tenor became so gravel like that the words were unintelligible.
  6530. ] Supplied by Tracker and The Reporter
  6531. ==============================================================================
  6532.  
  6533. We look for information in anyway related to the newsletter. If you have
  6534. something of interests, or something that you saw on television, or in the
  6535. newspaper, then upload it to one of the boards listed below. You will receive
  6536. full credit.
  6537. Pirate's Hollow..................................................(415)593-6784
  6538. Bates Motel......................................................(619)267-0293
  6539. ==============================================================================
  6540.  
  6541. Brought to you by the Jolly Roger in the Cookbook!!!!!!!!!!!!!!!!!!
  6542.  
  6543. ##############################################################################
  6544. # _________________________________ #
  6545. # /he Remote Informer Newsletter! #
  6546. # #
  6547. #----------------------------------------------------------------------------#
  6548. # November TRI Issue: 05 #
  6549. #----------------------------------------------------------------------------#
  6550. # #
  6551. # The Editors: Tracker, Ye Cap'n, Norman Bates, and The Reporter #
  6552. # #
  6553. ##############################################################################
  6554. ==============================================================================
  6555. = AT&T Rates =
  6556. ==============================================================================
  6557. WASHINGTON -- American Telephone & Telegraph Co. proposed Tuesday to
  6558. lower its interstate long-distance rates by an average of 3.6 percent to
  6559. reflect reduced costs in connecting to the local telephone network.
  6560. The largest decrease -- 6.3 percent -- would be seen in day time prices
  6561. "because of the need to make those rates more competitive," AT&T said.
  6562. Rates for calls made during evening hours would drop 2.2 percent and
  6563. calls made during the late night and weekends would be cut by 0.8 percent, the
  6564. company said.
  6565. The rate reductions would take effect Jan. 1, if they are approved by the
  6566. Federal Communications Commission.
  6567. Reacting to the proposed price cuts, MCI Communications Corp. and US
  6568. Sprint Communications Co., the nation's second-largest and third-largest long
  6569. distance companies respectively, said their response would depend on what the
  6570. FCC finally approves but both said they intended to remain competitive with
  6571. AT&T. AT&T, the nation's largest long-distance company, proposed to the FCC
  6572. that its rates drop as much as $800 million, but AT&T said the exact amount
  6573. will depend on the access charges the FCC allows the local telephone companies
  6574. to collect from long distance carriers, which must pay the fees to hook into
  6575. the phone local network.
  6576. AT&T has challenged the new access rates filed by the regional Bell
  6577. operating companies, contending they are more than $1 billion too high.
  6578. In proposing its new rates, the long-distance leader told the FCC it
  6579. expects local companies' access fees to fall by at least $200 million -- which
  6580. would amount to an average rate reduction of less than 1 percent. But the
  6581. company said it believes the FCC will order an additional $600 million in
  6582. reductions based on AT&T's challenge.
  6583. "We're confident the FCC will recognize that access charges filed by the
  6584. local telephone companies need to be substantially reduced, which would mean
  6585. more savings for our customers," said Larry Garfinkel, AT&T vice president for
  6586. marketing.
  6587. He said the company filed its proposed rates based on disputed charges
  6588. because "we wanted to let the public react ... and further to let the FCC have
  6589. full knowledge of where we were heading given our expectation that we had a
  6590. valid basis for our dispute."
  6591. AT&T's long-distance rates have fallen by about 34 percent since the
  6592. company was stripped of its local operating companies by an antitrust decree
  6593. nearly four years ago.
  6594. Since then, phone rate payers have been paying a larger share of the costs
  6595. of maintaining the local network through monthly subscriber line charges, now
  6596. $2.60 for residential customers.
  6597. That has reduced the long-distance companies' share of local network
  6598. expenses, which they pay in the form of access charges.
  6599. Jack Grubman, a telephone analyst with PaineWebber Inc., said AT&T's
  6600. proposal targets business customers because "that's where the competition is
  6601. and where the better (profit) margins are." In addition, it aims to keep the
  6602. pressure on competition in international calling by extending discounts to
  6603. more customers. Grubman added that, if the company's rate proposal is approved
  6604. by the FCC, he would expect no further cuts in AT&T rates in 1988.
  6605. Wendell Lind, AT&T administrator of rates and tariffs, said the cuts for
  6606. business and residential customers are about the same because business cuts
  6607. are offset by a proposed $128 million increase in AT&T's private line rates.
  6608. AT&T is the only long-distance company whose rates are regulated by the
  6609. FCC, but its prices set the pace for the industry. Though AT&T is far larger
  6610. than any of its competitors, its market share has been declining since
  6611. divestiture and the company now says it serves about 75 percent of the market.
  6612. In addition to the reductions in basic long-distance rates, AT&T proposed
  6613. cutting prices by 5 percent and 5.7 percent for its Pro-America calling plans.
  6614. The company also proposed to reduce prices by 2.9 percent for its 800
  6615. Service customers and 4.4 percent for WATS customers, although it would
  6616. increase the monthly access line charges for those plans by $3.20 to reflect
  6617. higher special access charges filed by the local phone companies.
  6618. ] Supplied by Tracker and The Reporter
  6619. ==============================================================================
  6620. = US Sprint Operator Service Traffic Increases 40% =
  6621. = New Center Added In Dallas =
  6622. ==============================================================================
  6623. ORLANDO, Fla. -- US Sprint Wednesday announced its long distance
  6624. operators who began saying, "May I help you?" just five months ago, are now
  6625. handling 3.5 million calls a month.
  6626. The fiber-optic long-distance carrier, offering the only operator service
  6627. alternative to AT&T has experienced a 40 percent growth in operator service
  6628. calls since it announced its service July 1.
  6629. Amanda Weathersby, US Sprint vice president of product marketing, said
  6630. Tuesday, "More and more people are taking advantage of our call completion
  6631. assistance and alternative billing arrangements.
  6632. "Customer surcharges are the same as AT&T with the added benefit of US
  6633. Sprint's fiber-optic quality and lower long-distance rates."
  6634. US Sprint currently offers person-to-person, station-to-station, call
  6635. completion and collect calling. US Sprint has announced an agreement with US
  6636. WEST Service Link that will allow anyone to call on US Sprint and charge
  6637. their calls to a Regional Bell Operating Co. calling card beginning in first
  6638. quarter 1988.
  6639. "Previously, our operator service was available only on pre-subscribed
  6640. US Sprint phones and recently we added operator assistance for US Sprint FON
  6641. CARD customers," Weathersby said.
  6642. "With this new agreement, we'll be able to expand our operator service
  6643. to markets such as pay phones, hospitals, and hotels/motels."
  6644. The newest 24-hour operator service center in Dallas began operations on
  6645. Oct. 5. US Sprint's other operator service centers are in: Cherry Hill,
  6646. N.J.; Atlanta; Lombard, Ill. and Reno, Nev.
  6647. US Sprint is a joint venture of United Telecommunications Inc. of Kansas
  6648. City, Mo. and GTE Corp. of Stamford, Conn.
  6649. ] Supplied by Tracker and The Reporter
  6650. ==============================================================================
  6651. = Pacific Bell Pursuing Calling Card Thief =
  6652. ==============================================================================
  6653. SAN FRANCISCO--(BW)--Pacific Bell is warning consumers to protect their
  6654. telephone calling cards like any other credit card in the wake of a series of
  6655. frauds by people posing as phone company employees.
  6656. A Pacific Bell spokesman says customers in the 213, 805 and 916 area
  6657. codes are being victimized by someone who says he is a telephone company
  6658. employee investigating calling card fraud. The individual calls people at
  6659. home at odd hours, asking for their calling card numbers. He then sells the
  6660. numbers to people who use the numbers to make long distance phone calls.
  6661. As recently as Monday of this week, 180 long distance calls were billed
  6662. to a Sacramento area resident who had given his number to the thief just three
  6663. hours earlier.
  6664. According to Pacific Bell, this kind of scheme and other forms of calling
  6665. card fraud cost telephone customers nationwide half a billion dollars a year.
  6666. The company offered these tips to consumers to avoid becoming a victim of
  6667. calling card fraud:
  6668. Never give your calling card number or personal identification number to
  6669. anyone. Any telephone company employee with a legitimate need to know the
  6670. number has access to it.
  6671. Treat your calling card like any other credit card. Report its loss
  6672. immediately by calling the 800 number on the back of the card 800-621-0430.
  6673. If you receive a suspicious call regarding your telephone calling card,
  6674. report it by calling the 800 number on the back of the card.
  6675. If you receive a call from someone claiming to be a telephone company
  6676. employee and asking for your calling card number, ask for a name and number to
  6677. call back. Then call the local Pacific Bell business office to report the
  6678. incident.
  6679. One suspect was arrested in Southern California last week by a quick
  6680. thinking customer who did just that. Pacific Bell immediately contacted the
  6681. local police department. A suspect holding seven stolen calling card numbers
  6682. was arrested minutes later.
  6683. Pacific Bell and long-distance telephone companies will credit customers
  6684. for calling card charges determined to be fraudulent. Pacific Bell is a
  6685. subsidiary of Pacific Telesis Group, a diversified telecommunications
  6686. corporation based in San Francisco.
  6687. ] Supplied by Tracker and The Reporter
  6688. ==============================================================================
  6689. We look for information in anyway related to the newsletter. If you have
  6690. something of interests, or something that you saw on television, or in the
  6691. newspaper, then upload it to one of the boards listed below. You will receive
  6692. full credit.
  6693. Pirate's Hollow..................................................(415)593-6784
  6694. Bates Motel......................................................(619)267-0293
  6695. ==============================================================================
  6696.  
  6697. Brought to you in the Cookbook courtesy of the Jolly Roger!!!!!!!!!!!
  6698.  
  6699. The Phreaker's Guide to Loop Lines courtesy of the Jolly Roger
  6700.  
  6701. A loop is a wonderous device which the telephone company created as test
  6702. numbers for telephone repairmen when testing equipment. By matching the
  6703. tone of the equipment with the tone of the loop, repairmen can adjust and test
  6704. the settings of their telephone equipment.
  6705. A loop, basically, consists of two different telephone numbers. Let's
  6706. use A and B as an example. Normally if you call A, you will hear a loud
  6707. tone (this is a 1004 hz tone), and if you call B, the line will connect, and
  6708. will be followed by silence.
  6709. This is the format of a loop line. Now, if somebody calls A and someone
  6710. else calls B--Viola!--A and B loop together, and one connection is made.
  6711. Ma Bell did this so repairmen can communicate with each other without
  6712. having to call their own repair office. They can also use them to exchange
  6713. programs, like for ANA or Ringback. Also, many CO's have a "Loop Assignment
  6714. Center". If anyone has any information on these centers please tell me.
  6715. Anyway, that is how a loop is constructed. From this information,
  6716. anyone can find an actual loop line. Going back to the A and B example,
  6717. Note: the tone side and the silent side can be either A or B. Don't be fooled
  6718. if the phone company decides to scramble them around to be cute.
  6719. As you now know, loops come in pairs of numbers. Usually, right after each
  6720. other.
  6721. For example: 817-972-1890
  6722. and
  6723. 817-972-1891
  6724. Or, to save space, one loop line can be written as 817-972-1890/1.
  6725. This is not always true. Sometimes, the pattern is in the tens or hundreds,
  6726. and, occaisionally, the numbers are random.
  6727. In cities, usually the phone company has set aside a phone number suffix
  6728. that loops will be used for. Many different prefixes will correspond
  6729. with that one suffix.
  6730. In Arlington, Texas, a popular suffix for loops is 1893 and 1894, and
  6731. a lot of prefixes match with them to make the number.
  6732. For Example: 817-460-1893/4
  6733. 817-461-1893/4
  6734. 817-465-1893/4
  6735. 817-467-1893/4
  6736. 817-469-1893/4
  6737. ...are all loops...
  6738. or a shorter way to write this is:
  6739. 817-xxx-1893/4
  6740. xxx= 460, 461, 465, 467, 469
  6741. Note: You can mix-and-match a popular suffix with other prefixs in a
  6742. city, and almost always find other loops or test numbers.
  6743. Note: For Houston, the loop suffixes are 1499 and 1799. And for Detroit
  6744. it's 9996 and 9997.
  6745. When there are a large number of loops with the same prefix format,
  6746. chances are that many loops will be inter-locked. Using the above example
  6747. of Arlington loops again, (I will write the prefixes to save space) 460, 461,
  6748. and 469 are interlocked loops. This means that only one side can be used at
  6749. a given time. This is because they are all on the same circuit.
  6750. To clarify, if 817-461-1893 is called, 817-460 and 469-1893 cannot be
  6751. called because that circuit is being used. Essentialy, interlocked loops
  6752. are all the same line, but there are a variety of telephone numbers to access
  6753. the line.
  6754. Also, if the operator is asked to break in on a busy loop line he/she
  6755. will say that the circuit is overloaded, or something along those
  6756. lines. This is because Ma Bell has taken the checking equipment off
  6757. the line. However, there are still many rarely used loops which can
  6758. be verfied and can have emergency calls taken on them.
  6759. As you have found out, loops come in many types. Another type of loop is a
  6760. filtered loop. These are loop lines that the tel co has put a filter on, so
  6761. that normal human voices cannot be heard on either line. However, other
  6762. frequencies may be heard. It all depends on what the tel co wants the
  6763. loop to be used for. If a loop has gotten to be very popular with the
  6764. local population or used frequently for conferences, etc. the tel co may filter
  6765. the loop to stop the unwanted "traffic". Usually, the filter will be
  6766. removed after a few months, though.
  6767.  
  6768. ----------------Brought to you by the Jolly Roger
  6769.  
  6770.  
  6771. How Ma Bell Works by the Jolly Roger
  6772.  
  6773. In this article, I will first describe the termination,
  6774. wiring, and terminal hardware most commonly used in the Bell
  6775. system, and I will include section on methods of using them.
  6776. -------------
  6777. LOCAL NETWORK
  6778. -------------
  6779. The local telephone network between the central
  6780. office/exchange and the telephone subscribers can be briefly
  6781. described as follows:
  6782. From the central office (or local exchange) of a certain
  6783. prefix(es), underground area trunks go to each area that has that
  6784. prefix (Usually more than one prefix per area.) At every few
  6785. streets or tract areas, the underground cables surface. They then
  6786. go to the telephone pole (or back underground, depending on the
  6787. area) and then to the subsribers house (or in the case of an
  6788. apartment building or mutliline business, to a splitter or dis-
  6789. tribution box/panel).
  6790. Now that we have the basics, I'll try and go in-depth on the
  6791. subject.
  6792. ------------------
  6793. UNDERGROUND CABLES
  6794. ------------------
  6795. These are sometimes inter-office trunks, but usually in a
  6796. residential area they are trunk lines that go to bridging heads
  6797. or distribution cases. The cables are about 2-3 inches thick
  6798. (varies), and are either in a metal or pvc-type pipe (or
  6799. similiar). Rarely (maybe not in some remote rural areas) are the
  6800. cables just 'alone' in the ground. Instead they are usually in
  6801. an underground cement tunnel (resembles a small sewer or storm-
  6802. drain.) The manholes are >heavy< and will say 'Bell system' on
  6803. them. they can be opened with a 1/2 inch wide crowbar (Hookside)
  6804. inserted in the top rectangular hole. There are ladder rungs to
  6805. help you climb down. You will see the cable pipes on the wall,
  6806. with the blue and white striped one being the inter-office trunk
  6807. (at least in my area). The others are local lines, and are
  6808. usually marked or color coded. There is almost always a posted
  6809. color code chart on the wall, not to mention Telco manuals de-
  6810. scribing the cables and terminals, so I need not get into detail.
  6811. Also, there is usually some kind of test equipment, and often
  6812. Bell test sets are left in there.
  6813. --------------
  6814. BRIDGING HEADS
  6815. --------------
  6816. The innocent-looking grayish-green boxes. These can be
  6817. either trunk bridges or bridging for residences. The major trunk
  6818. bridging heads are usually larger, and they have the 'Western
  6819. Electric' logo at the bottom, whereas the normal bridging heads
  6820. (which may be different in some areas-depending on the company
  6821. you are served by. GTE B.H.'s look slightly different. Also, do
  6822. not be fooled by sprinkler boxes!) They can be found in just
  6823. about every city.
  6824. To open a bridging head: if it is locked (and you're feeling
  6825. destructive), put a hammer or crowbar (the same one you used on
  6826. the manhole) in the slot above the top hinge of the right door.
  6827. Pull hard, and the door will rip off. Very effective! If it isn't
  6828. locked (as usual), take a 7/8 inch hex socket and with it, turn
  6829. the bolt about 1/8 of a turn to the right (you should hear a
  6830. spring release inside). Holding the bolt, turn the handle all the
  6831. way to the left and pull out.
  6832. To Check for a test-set (which are often left by Bell employees),
  6833. go inside - First check for a test-set (which are often left
  6834. by Bell employees). There should be a panel of terminals and
  6835. wires. Push the panel back about an inch or so, and rotate the
  6836. top latch (round with a flat section) downward. Release the
  6837. panel and it will fall all the way forward. There is usually a
  6838. large amount of wire and extra terminals. The test-sets are
  6839. often hidden here, so don't overlook it (Manuals, as well, are
  6840. sometimes placed in the head). On the right door is a metal box
  6841. of alligator clips. Take a few (Compliments of Bell.). On each
  6842. door is a useful little round metal device. (Says 'insert gently'
  6843. or' clamp gently - do not overtighten' etc..) On the front of
  6844. the disc, you should find two terminals. These are for your test
  6845. set. (If you dont have one, dont despair -I'll show you ways to
  6846. make basic test sets later in this article).
  6847. Hook the ring (-) wire to the 'r' terminal; and the tip (+)
  6848. wire to the other. (By the way, an easy way to determine the
  6849. correct polarity is with a 1.5v LED. Tap it to the term. pair,
  6850. if it doesnt light, switch the poles until it does. When it
  6851. lights,find the longer of the two LED poles: This one will be on
  6852. the tip wire (+). Behind the disc is a coiled up cord. This
  6853. should have two alligator clips on it.. Its very useful, because
  6854. you dont have to keep connecting and disconnecting the fone (test
  6855. set) itself, and the clips work nicely.
  6856. On the terminal board, there should be about 10 screw
  6857. terminals per side. Follow the wires, and you can see which
  6858. cable pairs are active. Hook the clips to the terminal pair, and
  6859. you're set! Dial out if you want, or just listen (If someone's
  6860. on theline). Later, I'll show you a way to set up a true 'tap'
  6861. that will let the person dial out on his line and receive calls
  6862. as normal, and you can listen in the whole time. More about this
  6863. later...
  6864. On major prefix-area bridging heads, you can see 'local
  6865. loops' ,which are two cable pairs (cable pair = ring+tip, a fone
  6866. line) that are directly connected to each other on the terminal
  6867. board. These 'cheap loops' as they are called, do not work
  6868. nearLy as well as the existing ones set up in the switching
  6869. hardware at the exchange office. (Try scanning your prefixes'
  6870. 00xx to 99xx #'s.) The tone sides will announce themselves with
  6871. the 1008 hz loop tone, and the hang side will give no response.
  6872. The first person should dial the 'hang' side, and the other
  6873. person dial the tone side, and the tone should stop if you have
  6874. got the right loop.)
  6875. If you want to find the number of the line that you're on,
  6876. you can either try to decipher the 'bridging log' (or whatever),
  6877. which is on the left door. If that doesnt work, you can use the
  6878. follwing:
  6879. ---------------------------
  6880. ANI # (Automatic Number ID)
  6881. ---------------------------
  6882. This is a Telco test number that reports to you the number
  6883. that youre calling from (It's the same, choppy 'Bell bitch' voice
  6884. that you get when you reach a disconnected #)
  6885. For the 213 NPA - Dial 1223
  6886. 408 NPA - Dial 760
  6887. 914 NPA - Dial 990
  6888. These are extremely useful when messing with any kind of line
  6889. terminals, house boxes, etc.
  6890. Now that we have bridging heads wired, we can go on... (don't
  6891. forget to close and latch the box after all... Wouldnt want GE
  6892. and Telco people mad, now, would we?)
  6893. -------------------------------------
  6894. "CANS" - Telephone Distribution Boxes
  6895. -------------------------------------
  6896.  
  6897. Basically, two types:
  6898. 1> Large, rectangular silver box at the end of each street.
  6899. 2> Black, round, or rectangular thing at every telephone pole.
  6900. Type 1 - This is the case that takes the underground cable from
  6901. the bridge and runs it to the telephone pole cable (The lowest,
  6902. largest one on the telephone pole.) The box is always on the
  6903. pole nearest the briging head, where the line comes up. Look for
  6904. the 'Call before you Dig - Underground cable' stickers..
  6905. The case box is hinged, so if you want to climb the pole,
  6906. you can open it with no problems. These usually have 2 rows of
  6907. terminal sets.
  6908. You could try to impersonate a Telco technician and report
  6909. the number as 'new active' (giving a fake name and fake report,
  6910. etc.) I dont recommend this, and it probably won't (almost
  6911. positively won't) work, but this is basically what Telco linemen
  6912. do).
  6913. Type 2 - This is the splitter box for the group of houses around
  6914. the pole (Usually 4 or 5 houses). Use it like I mentioned
  6915. before. The terminals (8 or so) will be in 2 horizontal rows of
  6916. sets. The extra wires that are just 'hanging there' are
  6917. provisions for extra lines to residences (1 extra line per house,
  6918. thats why the insane charge for line #3!) If its the box for
  6919. your house also, have fun and swap lines with your neighbor!
  6920. 'Piggyback' them and wreak havoc on the neighborhood (It's
  6921. eavesdropping time...) Again, I don't recommend this, and its
  6922. difficult to do it correctly. Moving right along...
  6923. ------------------------------
  6924. APARTMENT / BUSINESS MULTILINE
  6925. DISTRIBUTION BOXES
  6926. ------------------------------
  6927. Found outside the buliding (most often on the right side,
  6928. but not always... Just follow the wire from the telephone pole)
  6929. or in the basement. It has a terminal for all the lines in the
  6930. building. Use it just like any other termination box as before.
  6931. Usually says 'Bell system' or similar. Has up to 20 terminals on
  6932. it (usually.) the middle ones are grounds (forget these). The
  6933. wires come from the cable to one row (usually the left one), with
  6934. the other row of terminals for the other row of terminals for the
  6935. building fone wire pairs. The ring (-) wire is usually the top
  6936. terminal if the set in the row (1 of 10 or more), and the tip is
  6937. in the clamp/screw below it. This can be reversed, but the cable
  6938. pair is always terminated one-on-top-of-each- other, not on the
  6939. one next to it. (I'm not sure why the other one is there,
  6940. probably as aprovision for extra lines) Don't use it though, it
  6941. is usually to close to the other terminals, and in my experiences
  6942. you get a noisy connection.
  6943. Final note: Almost every apartment, business, hotel, or anywhere
  6944. there is more than 2 lines this termination lines this
  6945. termination method is used. If you can master this type, you can
  6946. be in control of many things... Look around in your area for a
  6947. building that uses this type, and practice hooking up to the
  6948. line, etc.
  6949. As an added help,here is the basic 'standard' color-code for
  6950. multiline terminals/wiring/etc...
  6951. Single line: Red = Ring
  6952. Green = Tip
  6953. Yellow = Ground *
  6954. * (Connected to the ringer coil in individual and bridged
  6955. ringer phones (Bell only) Usually connected to the green
  6956. (Tip)
  6957. Ring (-) = Red
  6958. White/Red Stripe
  6959. Brown
  6960. White/Orange Stripe
  6961. Black/Yellow Stripe
  6962. Tip (+) = Green (Sometimes
  6963. yellow, see above.)
  6964. White/Green Stripe
  6965. White/Blue Stripe
  6966. Blue
  6967. Black/White Stripe
  6968. Ground = Black
  6969. Yellow
  6970. ----------------------
  6971. RESIDENCE TERMINAL BOX
  6972. ----------------------
  6973. Small, gray (can be either a rubber (Pacific Telephone) or hard
  6974. plastic (AT & T) housing deal that connects the cable pair from
  6975. the splitter box (See type 2, above) on the pole to your house
  6976. wiring. Only 2 (or 4, the 2 top terminals are hooked in parallel
  6977. with the same line) terminals, and is very easy to use. This can
  6978. be used to add more lines to your house or add an external line
  6979. outside the house.
  6980. ---------
  6981. TEST SETS
  6982. ---------
  6983. Well, now you can consider yourself a minor expert on the
  6984. terminals and wiring of the local telephone network. Now you can
  6985. apply it to whatever you want to do.. Here's another helpful
  6986. item:
  6987. How to make a Basic Test-Set and how to use it to dial out,
  6988. eavsdrop, or seriously tap and record line activity.
  6989. These are the (usually) orange hand set fones used by Telco
  6990. technicians to test lines. To make a very simple one, take any
  6991. Bell (or other, but I recommend a good Bell fone like a princess
  6992. or a trimline. gte flip fones work excllently, though..) fone and
  6993. follow the instructions below.
  6994. Note: A 'black box' type fone mod will let you tap into their
  6995. line, and with the box o, it's as if you werent there. they can
  6996. recieve calls and dial out, and you can be listening the whole
  6997. time! very useful. With the box off, you have a normal fone test
  6998. set.
  6999. Instructions:
  7000. A basic black box works well with good results. Take the cover
  7001. off the fone to expose the network box (Bell type fones only).
  7002. The <RR> terminal should have a green wire going to it (orange or
  7003. different if touch tone - doesnt matter, its the same thing).
  7004. Disconnect the wire and connect it to one pole of an SPST switch.
  7005. Connect a piece of wire to the other pole of the switch and
  7006. connect it to the <RR> terminal. Now take a 10k hm 1/2 watt 10%
  7007. resistor and put it between the <RR> terminal ad the <F>
  7008. terminal, which should have a blue and a white wire going to it
  7009. (different for touch tone). It should look like this:
  7010. -----Blue wire----------<F>
  7011. !
  7012. ----White wire-----!
  7013. !
  7014. 10k Resistor
  7015. !
  7016. !
  7017. --Green wire-- !----<RR>
  7018. ! !
  7019. SPST
  7020. What this does in effect is keep the hookswitch / dial pulse
  7021. switch (F to RR loop) open while holding the line high with the
  7022. resistor. This gives the same voltage effect as if the fone was
  7023. 'on-hook', while the 10k ohms holds the voltage right above the
  7024. 'off hook' threshold (around 22 volts or so, as compared to 15-17
  7025. or normal off hook 48 volts for normal 'on-hook'), giving
  7026. Test Set Version 2.
  7027. Another design is similar to the 'type 1' test set (above),
  7028. but has some added features:
  7029. From >----------------Tip------<To Test
  7030. Alligator set
  7031. Clip >----------------Ring-----<phone
  7032. ! !
  7033. x !
  7034. ! !
  7035. o !
  7036. ! x---RRRRR---!
  7037. ! x !
  7038. !---x !
  7039. x----0------!
  7040. x = Spst Switch
  7041. o = Red LOD 0 = Green LED
  7042. RRRRR= 1.8k 1/2 watt xxxx= Dpst switch
  7043. resistor
  7044. When the SPST switch in on, the LED will light, and the fone
  7045. will become active. The green light should be on. If it isn't,
  7046. switch the dpst. If it still isnt, check the polarity of the
  7047. line and the LEDs. With both lights on, hang up the fone. They
  7048. should all be off now. Now flip the dpst and pick up the fone.
  7049. The red LED shold be on, but the green shouldnt. If it is,
  7050. something is wrong with the circuit. You wont get a dial tone if
  7051. all is correct.
  7052. When you hook up to the line with the alligator clips
  7053. (Assuming you have put this circuit inside our fona and have put
  7054. alligator clips on the ring and tip wires (As we did before)) you
  7055. should have the spst #1 in the off posistion. This will greatly
  7056. reduce the static noise involved in hooking up to a line. The red
  7057. LED can also be used to check if you have the correct polarity.
  7058. With this fone you will have the ability to listen in on
  7059. >all< audible line activity, and the people (the 'eavesdropees')
  7060. can use their fone as normal.
  7061. Note that test sets #1 and #2 have true 'black boxes', and can be
  7062. used for free calls (see an article about black boxes).
  7063.  
  7064. Test Set Version 3
  7065.  
  7066. To do test set 3:
  7067. Using a trimline (or similar) phone, remove the base and cut
  7068. all of the wire leads off except for the red (ring -) and the
  7069. green (tip +). Solder alligator clips to the lug. The wire
  7070. itself is 'tinsel' wrapped in rayon, and doesnt solder well.
  7071. Inside the one handset, remove the light socket (if it has one)
  7072. and install a small slide or toggle switch (Radio Shack's micro-
  7073. miniature spst works well). Locate the connection of the ring
  7074. and the tip wires on the pc board near where the jack is located
  7075. at the bottom of the handset. (The wires are sometimes black or
  7076. brow instead of red and green, respectively). Cut the foil and
  7077. run 2 pieces of wire to your switch. In parallel with the switch
  7078. add a .25 uf 200 VDC capacitor (mylar, silvered mica, ceramic,
  7079. not an electrolytic). When the switch is closed, the handset
  7080. functions normally. With the switch in the other position, you
  7081. can listen without being heard.
  7082. Note: To reduce the noise involved in connecting the clips to a
  7083. line, add a switch selectable 1000 ohm 1/2 watt resistor in
  7084. series with the tip wire. Flip it in circuit when connecting, and
  7085. once on the line, flip it off again. (or just use the 'line disc-
  7086. onect' type switch as in the type 2 test set (above)). Also
  7087. avoid touching the alligator clips to any metal parts or other
  7088. terminals, for i causes static on the line and raises poeple's
  7089. suspicions.
  7090. ---------
  7091. RECORDING
  7092. ---------
  7093. If you would like to record any activity, use test set 1 or
  7094. 2 above (for unattended recording of >all< line activity), or
  7095. just any test set if you are going to be there to monitor when
  7096. they are dialing, talking, etc.
  7097. Place a telephone pickup coil (I recommend the Becoton T-5 TP
  7098. coil or equivalent) onto the test set, and put the TP plug into
  7099. the mic. jack of any standard tape recorder. Hit play, rec, and
  7100. pause. Alternate pause when you want to record (I dont think
  7101. anyone should have any difficulty with this at all...)
  7102. Well, if you still can't make a test set or you dont have the
  7103. parts, there's still hope. Alternate methods:
  7104. 1> Find a bell test set in a manhole or a bridging head and
  7105. 'Borrow it indefinately...
  7106. 2> Test sets can be purchased from:
  7107. Techni-Tool
  7108. 5 Apollo Road
  7109. Box 368
  7110. Plymouth Meeting PA., 19462
  7111. Ask for catalog #28
  7112. They are usually $300 - $600, and are supposed to have MF
  7113. dialing capability as well as TT dialing. They are also of much
  7114. higher quality than the standard bell test sets.
  7115. If you would like to learn more about the subjects covered here,
  7116. I suggest:
  7117. 1> Follow Bell trucks and linemen or technicians and ask subtle
  7118. questions. also try 611 (repair service) and ask questions..
  7119. 2> Explore your area for any Bell hardware, and experiment with
  7120. it. Don't try something if you are not sure what youre doing,
  7121. because you wouldnt want to cause problems, would you?
  7122.  
  7123. ------------------Jolly Roger
  7124.  
  7125. Getting Money out of Pay Phones by the Jolly Roger
  7126.  
  7127. I will now share with you my experiences with pay telephones. You will discover
  7128. that it is possible to get money from a pay phone with a minimum of effort.
  7129. Theory: Most pay phones use four wires for the transmission of data and
  7130. codes to the central office. Two of them are used for voice (usually red and
  7131. green), one is a ground, and the last is used with the others for the
  7132. transmission of codes.
  7133. It is with this last wire that you will be working with. On the pay phone that
  7134. I usually did this to, it was colored purple, but most likely will be another
  7135. color.
  7136. What you will do is simply find a pay phone which has exposed wires, such that
  7137. one of them can be disconnected and connected at ease without
  7138. fear of discovery. You will discover that it is usually a good idea to
  7139. have some electrical tape along with you and some tool for cutting this
  7140. tape.
  7141. Through trial and error, you will disconnect one wire at a time starting with
  7142. the wires different than green and red. You do want a dial tone during
  7143. this operation.
  7144. What you want to disconnect is the wire supplying the codes to the telephone
  7145. company so that the pay phone will not get the 'busy' or 'hang-up' command.
  7146. Leave this wire disconnected when you discover it.
  7147. What will happen: Anytime that someone puts any amount of money into the pay
  7148. phone, the deposit will not register with the phone company and it
  7149. will be held in the 'temporary' chamber of the pay phone.
  7150. Then, (a day later or so) you just code back to the phone, reconnect the wire,
  7151. and click the hook a few times and the phone will dump it all out the shute.
  7152. (What is happening is that the 'hangup' code that the phone was not
  7153. receiving due to the wire being disconnected suddenly gets the code and
  7154. dumps its' 'temporary' storage spot.)
  7155. You can make a nice amount of money this way, but remember
  7156. that a repairman will stop by every few times it is reported broken and
  7157. repair it, so check it at least once a day.
  7158. Enjoy and have fun.. Many phones I have done this to, and it works
  7159. well with each..
  7160. --------------------Jolly Roger
  7161.  
  7162. Computer Based PBX Courtesy of the Jolly Roger
  7163. (Originally an Apple ][ file for forgive the upper case!)
  7164.  
  7165. TO GET A BETTER UNDERSTANDING OF WHAT A PBX CAN DO, HERE ARE A FEW BASIC
  7166. FUNDAMENTALS.THE MODERN PBX IS A COMBINED COMPUTER,MASS STORAGE DEVICE,
  7167. AND OF COURSE A SWITCHING SYSTEM THAT CAN:
  7168. [1] PRODUCE ITEMIZED,AUTOMATED BILLING PROCEDURES,TO ALLOW THE
  7169. IDENTIFICATION AND MANAGEMENT OF TOLL CALLS. [HAHAHA]
  7170. [2] COMBINE DAYTIME VOICE GRADE COMMUNICATION CIRCUITS INTO
  7171. WIDEBAND DATA CHANNELS FOR NIGHT TIME HIGH SPEED DATA
  7172. TRANSFERS.
  7173. [3] HANDLES ELECTRONIC MAIL [ INCLUDING OFFICE MEMOS ].
  7174. [4] COMBINE VOICE CHANNELS INTO A WIDEBAND AUDIO/VISUAL
  7175. CONFERENCE CIRCUIT,WITH THE ABILITY TO XFER AND
  7176. CAPTURE SLIDES,FLIPCHARTS,PICTURES OF ANY KIND.
  7177. BOTH THE EXTERNAL AND INTERNAL CALLING CAPACITY OF THE PBX SYSTEM MUST BE
  7178. CAREFULLY CONSIDERED BECAUSE MANY BUSINESS OPERATIONS RUN A VERY HIGH RATIO
  7179. OF INTERNAL STATION TO STATION DIALING AND A LOW CAPACITY SYSTEM WILL NOT
  7180. HANDLE THE REQUESTED TRAFFIC LOAD.
  7181. A CRITICAL FACTOR IS THE NUMBER OF TRUNKS AND THE CENTRAL OFFICE FACILITIES
  7182. THAT ARE USED FOR OUTSIDE CONNECTIONS.ANOTHER IS THE NUMBER OF JUNCTIONS OR
  7183. [LINKS] THAT MAKE UP THE INTERNAL CALLING PATHS.
  7184. TO UNDERSTAND THE SERVICES AVAILABLE ON A TYPICAL COMPUTER RUN PBX IT IS
  7185. NECESSARY TO INTRODUCE THE SUBJECT OF TIME DIVISION SWITCHING.IN A TIME
  7186. DIVISION SWITCHING NETWORK ALL CONNECTIONS ARE MADE VIA A SINGLE COMMON BUS
  7187. CALLED (OF COURSE) A 'TIME-DIVISION BUS'.EVERY LINE TRUNK THAT REQUIRES A
  7188. CONNECTION WITH ANOTHER IS PROVIDED WITH A PORT CIRCUIT.ALL PORT CIRCUITS
  7189. HAVE ACCESS TO THE TIME DIVISION BUS THROUGH A TIME DIVISION SWITCH.
  7190. [WHEN TWO PORTS REQUKRE CONNECTION,THEIR TIME DIVISION SWITCHES OPERATE AT
  7191. A VERY HIGH FREQUENCY (16,000 TIMES PER SECOND).THIS TECHNIQUE,WHICH IS
  7192. CALLED 'SPEECH SAMPLING',ALLOWS MANY SIMULTANEOUS CONNECTIONS OVER THE SAME
  7193. TIME DIVKSION BUS.EACH CONNECTION IS ASSIGNED A TIME INTERVAL,THE 'TIME SLOT'
  7194. ,AND THE NUMBER OF TIME SLOTS IDENTIFIES THE NUMBER OF SIMULTANEOUS CONNECT-
  7195. IONS AMONG PORTS.]
  7196. THE NEXT CRITICAL ITEM IS CIRCUIT PACKS.THE SYSTEM ELEMENTS THAT WE WILL BE
  7197. DESCRIBING IN FUTURE TUTORIALS [LINES/TRUNKS/SWITCHES,MEMORY AND CONTROL] ARE
  7198. CONTAINED ON PLUG IN CIRCUIT PACKS.EACH LINE CIRCUIT PACK CONTAINS A NUMBER
  7199. OF LINES,IN EXAMPLE,FOUR.BUT THE ASSIGNMENT OF STATION NUMBERS TO ACTUAL
  7200. PHONE LINE CIRCUITS IS FLEXIBLE.
  7201. THE SYSTEM MEMORY IS CONTAINED IN CIRCUIT PACKS WHICH PROVIDE THE CALL
  7202. PROCESSING FUNCTIONS.THE CIRCUIT PACKS ARE HELD IN SMALL FRAMES CALLED
  7203. 'CARRIERS'.WITHIN EACH CARRIER,THE CIRCUIT PACKS ARE PLUGGED INTO POSITIONS:
  7204. THE 'SLOTS'.EVERY CIRCUIT CAN BE ADDRESSED BY,SAY A FIVE DIGIT NUMBER WHICH
  7205. TELLS ITS LOCATION BY CARRIER-SLOT-CIRCUIT.... [STARTING TO GET THE IDEA?]
  7206. THERE CAN BE THREE TYPES OF CARRIERS IN A MODERN PBX SYSTEM:
  7207. O LINE CARRIERS
  7208. O TRUNK CARRIERS
  7209. O CONTROL CARRIERS
  7210. THE LINE CARRIERS CONTAIN STATION LINES.IN A.T.& T.'S "DIMENSION" MODEL,FOR
  7211. EXAMPLE,A TOTAL OF 52 TO 64 LINES ARE PROVIDED.THE TRUNK CARRIERS CONTAIN
  7212. SLOTS FOR 16 TRUNK CIRCUIT PACKS.THE CONTROL CARRIER INCLUDES PROCESSOR,
  7213. MEMORY,CONTROL CIRCUITRY,DATA CHANNELS FOR ATTENDANT CONSOLE CONTROL AND
  7214. TRAFFIC MEASUREMENT OUTPUTS.
  7215. PBX SYSTEMS WILL DIRECTLY REFLECT THE TYPES OF SERVICES OFFERED AT THE C.O.
  7216. O CCSA
  7217. O CCIS
  7218. O PICTUREPHONES [SOONER THAN YOU THINK MY PHRIENDS]
  7219. COMMON CONTROL SWITCHING ARRANGEMENTS ( CCSA ) PERMIT ANY UNRESTRICTED TELE-
  7220. PHONE STATION TO CALL ANY OTHET INTERNAL OR EXTERNAL SYSTEM STATION BY USING
  7221. THE STANDARD SEVEN DIGIT NUMBER.ALTERNATE ROUTING IS A FEATURE OF CCSA SERVICE
  7222. THE INTERFACILITY,ALTERNATE ROUTED CALLING PATHS ARE ACCOMPLISHED AT THE TELE-
  7223. PHONE COMPANY CENTRAL OFFICE LEVEL,NOT AT THE PBX LEVEL.
  7224. A SYSTEM OF INTEREST TO LARGE SCALE TELEPHONE USERS IS COMMON CHANNEL INTER-
  7225. OFFICE SIGNALLING (CCIS).TYPICALLY,THIS TECHNIQUE EMPLOYS COMMON CHANNELS TO
  7226. CARRY ALL INTERFACILITY SIGNALLING INSTRUCTIONS: DIAL PULSES,ON HOOK (IDLE),
  7227. OFF HOOK (BUSY),AND SO ON,BETWEEN TWO SWITCHING CENTERS. [ GETTING WARM ].
  7228. CCIS REPLACES OLDER METHODS OF INTEROFFICE SIGNALLING SUCH AS 'IN BAND' AND
  7229. 'OUT OF BAND' TECHNIQUES. BY THE WAY,REAL PHREAKS ARE SELLING THEIR BOXES TO
  7230. IDIOTS WHO STILL THINK THE'RE WORTH ALOT...THE FORMER (IN BAND) TRANSMITS
  7231. SIGNALLING DATA WITHIN THE NORMAL CONVERSATION BANDWIDTH.IT'S SHORTCOMING IS
  7232. THAT FALSE INFORMATION MAY BE TRANSMITTED DUE TO UNIQUE TONE OR NOISE
  7233. COMBINATIONS SET UP IN THE TALKING PATH. [THIS IS THE OFFICIAL REASONING].
  7234. OUT OF BAND SIGNALLING TECHNIQUES PLACED THE INTEROFFICE DATA IN SPECIAL
  7235. CHANNELS,GENERALLY ADJACENT TO AND IMMEDIATELY ABOVE THE VOICE PATH.TO PRE-
  7236. SERVE INTERCHANNEL INTEGRITY,OUT OF BAND SIGNALLING REQUIRES VERY EFFECIENT
  7237. FILTERING OR GREATER 'BAND GUARD' SEPERATION BETWEEN CHANNELS.
  7238.  
  7239. Brought to you in the Cookbook courtesy of the Jolly Roger!!!!!!!!!!!!
  7240.  
  7241.  
  7242.  
  7243. Subject: PC-Pursuit Port Statistic's
  7244. Date: 06/29/89
  7245. Written by: PC-Pursuit Users
  7246. ============================================================
  7247. Introduction:
  7248. =============
  7249. The last 30 days of PC-Pursuit have been extremely
  7250. controversial. Users and ex-users have demanded accurate
  7251. statistics, and Telenet has provided us with very little.
  7252. And the data that was provided is questionable. Well, here
  7253. is some data that is guaranteed to be accurate and make
  7254. Telenet scream. If you wish to update this data on your own,
  7255. we will tell you how later in this text.
  7256. The following chart consists of all the direct Telenet
  7257. addresses of the PC-Pursuit city nodes and the total number
  7258. of modems on each node. Here is what the data means:
  7259. NJNEW/3 2011 .12 56
  7260. ! ! ! ! \-- Total Number of Modems in NJNEW
  7261. ! ! ! \- Last Working Suffix of Address sequence.
  7262. ! ! \- Direct Telenet Address Prefix.
  7263. ! \--- Baud Rate of This Port is 300.
  7264. \--------- Mnemonic.
  7265. Please note that there are several perfectly legal ways to
  7266. connect to a PC-Pursuit port such as NJNEW/3:
  7267. Ways To Connect to NJNEW/3:
  7268. 1) C D/NJNEW/3,PCP10000,<password> [HUNT]
  7269. 2) C 2011,PCP10000,<password> [HUNT]
  7270. 3) C 2011.10,PCP10000,<password> [NON HUNT]
  7271. The first, is self explanatory. The second does the same
  7272. thing as the first, only that it is slightly faster and gives
  7273. the user much greater flexibility. The third is an example
  7274. the flexibility, because a request is made to connect to the
  7275. tenth, and only the tenth, modem on the NJNEW/3 port.
  7276. By simply attempting to connect to every single modem
  7277. in the 2011 chain, we were able to count the number of modems
  7278. on each port and come up with the following charts which were
  7279. extracted on June the twenty ninth of the year 1989:
  7280. Rotary Direct Max. City Rotary Direct Max. City
  7281. Port Address Range Total Port Address Range Total
  7282. -------- ------- --- ----- -------- ------- --- -----
  7283. NJNEW/3 2011 .12 56 CAOAK/3 4155 . 4 16
  7284. /12 201301 .40 /12 415216 . 8
  7285. /24 20122 . 4 /24 41511 . 4
  7286. DCWAS/3 202115 . 6 46 CAPAL/3 415106 . 4 12
  7287. /12 202116 .24 /12 415224 . 8
  7288. /24 202117 .16 /24 <NONE> <NONE>
  7289. CTHAR/3 <NONE> <NONE> 8 CASFA/3 415215 . 6 20
  7290. /12 203120 . 8 /12 415217 .10
  7291. /24 <NONE> <NONE> /24 41523 . 4
  7292. WASEA/3 20617 . 4 30 ORPOR/3 50320 . 2 8
  7293. /12 20619 .22 /12 50321 . 6
  7294. /24 20621 . 4 /24 <NONE> <NONE>
  7295. NYNYO/3 212315 . 4 22 AZPHO/3 60222 . 4 20
  7296. /12 212316 .14 /12 60223 .12
  7297. /24 21228 . 4 /24 60226 . 4
  7298. CALAN/3 213412 . 8 40 MNMIN/3 612120 . 4 22
  7299. /12 213413 .28 /12 612121 .14
  7300. /24 21323 . 4 /24 61222 . 4
  7301. TXDAL/3 214117 . 6 30 MABOS/3 617311 . 4 32
  7302. /12 214118 .22 /12 617313 .20
  7303. /24 21422 . 4 /24 61726 . 8
  7304. PAPHI/3 215112 . 6 36 TXHOU/3 713113 . 8 42
  7305. /12 2155 .22 /12 713114 .24
  7306. /24 21522 . 8 /24 71324 .10
  7307. OHCLE/3 21620 . 4 26 CACOL/3 71423 . 4 18
  7308. /12 21621 .18 /12 7144 .10
  7309. /24 216120 . 4 /24 71424 . 4
  7310. CODEN/3 303114 . 4 40 CASAN/3 714119 . 4 20
  7311. /12 303115 .18 /12 714213 .12
  7312. /24 30321 .22 /24 714124 . 4
  7313. FLMIA/3 305120 . 6 28 CASDI/3 714102 . 4 22
  7314. /12 305121 .18 (619)/12 714210 .14
  7315. /24 305122 . 4 /24 714121 . 4
  7316. ILCHI/3 312410 . 8 40 UTSLC/3 80120 . 4 22
  7317. /12 312411 .28 /12 80121 .14
  7318. /24 31224 . 4 /24 80112 . 4
  7319. MIDET/3 313214 . 6 30 FLTAM/3 81320 . 4 18
  7320. /12 313216 .18 /12 81321 .10
  7321. /24 31324 . 6 /24 813124 . 4
  7322. MOSLO/3 3145 . 4 16 MOKCI/3 816104 . 4 20
  7323. /12 314421 . 8 /12 816221 .12
  7324. /24 31420 . 4 /24 816113 . 4
  7325. GAATL/3 404113 . 8 32 CAGLE/3 ??
  7326. /12 404114 .20 /12 81821 .18
  7327. /24 40422 . 4 /24
  7328. CASJO/3 408111 . 4 34 CASAC/3 9167 . 4 16
  7329. /12 40821 .26 /12 91611 . 8
  7330. /24 408110 . 4 /24 91612 . 4
  7331. WIMIL/3 41420 . 4 24 NCRTP/3 91920 . 4 20
  7332. /12 41421 .16 /12 91921 .12
  7333. /24 414120 . 4 /24 919124 . 4
  7334.  
  7335. 01/29/89 PC-Pursuit Modems Statistics Chart
  7336. Number of Modems City
  7337. Mnemonic 300 1200 2400 Total
  7338. ---------- -------- --------- --------- ---------
  7339. NJNEW 12 40 4 56
  7340. DCWAS 6 24 16 46
  7341. CTHAR 0 8 0 8
  7342. WASEA 4 22 4 30
  7343. NYNYO 4 14 4 22
  7344. CALAN 8 28 4 40
  7345. TXDAL 6 22 4 32
  7346. PAPHI 6 22 8 36
  7347. OHCLE 4 18 4 26
  7348. CODEN 4 18 22 44
  7349. FLMIA 6 18 4 28
  7350. ILCHI 8 28 4 40
  7351. MIDET 6 18 6 30
  7352. MOSLO 4 8 4 16
  7353. GAATL 8 20 4 32
  7354. CASJO 4 26 4 34
  7355. WIMIL 4 16 4 24
  7356. CAOAK 4 8 4 16
  7357. CAPAL 4 8 0 12
  7358. CASFA 6 10 4 20
  7359. ORPOR 2 6 0 8
  7360. AZPHO 4 12 4 20
  7361. MNMIN 4 14 4 22
  7362. MABOS 4 20 8 32
  7363. TXHOU 8 24 10 42
  7364. CACOL 4 10 4 18
  7365. CASAN 4 12 4 20
  7366. CASDI 4 14 4 22
  7367. UTSLC 4 14 4 22
  7368. FLTAM 4 10 4 18
  7369. MOKCI 4 12 4 20
  7370. CAGLE 4 18 4 26
  7371. CASAC 4 8 4 16
  7372. NCRTP 4 12 4 20
  7373. -------- --------- --------- ---------
  7374. Total 166 562 170 898
  7375. ======== ========= ========= =========
  7376. Average 4.8823529 16.529412 5 26.411765
  7377. NOTE: CASAC/3, CASAC/24 were estimated.
  7378. I think the statistics basically speak for themselves.
  7379. I am sure there will no doubt be hundreds of people who will
  7380. not smile at the number of specific kinds of ports supported,
  7381. not to mention the number of 'dead' or 'down' modems you will
  7382. find when you verify the totals. Usually, 2% to perhaps 10%
  7383. of the modems are 'dead' with specific ones repeatedly
  7384. failing week after week.
  7385. History Of This Collection:
  7386. ===========================
  7387. Almost a year ago a small selected group of devoted
  7388. individuals got together to discuss problems with the PC-
  7389. Pursuit Network, in the middle of our discussions a question
  7390. was asked as to how the network really processes our calls.
  7391. This was intended to help us assess SET? commands and other
  7392. such matters. When the address hypothesis was offered we
  7393. quickly set out to prove it. It was proved in about 3
  7394. minutes with the discovery of 2011 (First try was xxx1). The
  7395. data has continually been collected and analyzed ever since,
  7396. but until now, has never been mass released.
  7397. A small group of teen age hackers discovered several
  7398. interesting things that can be done with these addresses--
  7399. many of which will not be discussed here short of mentioning
  7400. that these ports connected to via these addresses are not
  7401. limited to PC-Pursuiters. You can, however, fight "dead"
  7402. dialout modems in cities via the address method. Dead modems
  7403. can be located in about 10 seconds (faster than Telenet), and
  7404. can either be reported or skipped past by the user connecting
  7405. to the next modem in the sequence after the "dead" one.
  7406. (Note: Say 2011.3 is dead, connect to 2011.4 and you will be
  7407. past it. If 2011.4 is busy, go to 2011.5. The reader should
  7408. notice 2011.3 is the same as 2011C.)
  7409. The most interesting value of these addresses is that
  7410. one can count the number of ports that Telenet keeps so
  7411. secret (Grin). When there were only 28 cities in operation
  7412. there were an average of 2.7 300 baud, 9.4 1200 baud, and 2.5
  7413. 2400 baud modems in each city. Some cities had as little as
  7414. 2 modems on a port and as many as 12. Only recently has the
  7415. number of modems per city begun to jump.
  7416. How To Update The Count Yourself:
  7417. =================================
  7418. An ID is not required to "request" one of these ports,
  7419. thus the tallying can be done any time of day by simply
  7420. typing the number at the @ prompt. Here is an example with
  7421. four modems (NJNEW/24):
  7422. @20122.1
  7423. 201 22A REFUSED COLLECT CONNECTION 19 80
  7424. @20122.2
  7425. 201 22B REFUSED COLLECT CONNECTION 19 80
  7426. @20122.3
  7427. 201 22C REFUSED COLLECT CONNECTION 19 80
  7428. @20122.4
  7429. 201 22D REFUSED COLLECT CONNECTION 19 80
  7430. @20122.5
  7431. 201 22E ILLEGAL ADDRESS 19 80
  7432. The reader should be aware that PC-Pursuit ports always
  7433. respond with '19 80'. Do not confuse it with '19 00', which
  7434. are not PC-Pursuit ports. In the above example we know there
  7435. are four ports because the forth was the last existing port
  7436. before we encountered the 'ILLEGAL ADDRESS.' There are
  7437. several ways to signify that you have gone one beyond the end
  7438. of the ports:
  7439. 1) xxx xxx ILLEGAL ADDRESS 19 80
  7440. 2) xxx xxx NOT OPERATING 19 80
  7441. 3) The request freezes (Note: Issue a BREAK then D <C/R>
  7442. to abort the attempt yielding 'ATTEMPT ABORTED'.)
  7443. You should be aware that modems which are out of order in the
  7444. middle of the sequence can respond with 'NOT OPERATING' or
  7445. may freeze the request. You should also note that when
  7446. updating the existing list, all you need to do is try to
  7447. request the next modem beyond the end as of the last check.
  7448. Finding Newly Added Ports:
  7449. ==========================
  7450. Many ports have not yet been installed; hence, we do not
  7451. yet know the addresses. New ports may be found by entering
  7452. the first three digits of the area code and appending (1-29,
  7453. 101-129, 201-229, 301-329, etc.) until the 'REFUSED COLLECT
  7454. CONNECTION 19 80' appears. Once this is found, simply log
  7455. onto the port address with your ID and R/V dial some silly
  7456. series of digits, disconnect the port, then connect to the
  7457. PC-Pursuit mnemonic you think it might be and R/V redial the
  7458. last number. If the numbers match, you found it.
  7459.  
  7460.  
  7461. Pearl Box Plans by the Jolly Roger
  7462.  
  7463. The Pearl Box:Definition - This is a box that may substitute for many boxes
  7464. which produce tones in hertz. The Pearl Box when operated correctly can
  7465. produce tones from 1-9999hz. As you can see, 2600, 1633, 1336 and other
  7466. crucial tones are obviously in its sound spectrum.
  7467.  
  7468. Materials you will need in order to build The Pearl Box:
  7469. ========================================================
  7470. C1, C2:.5mf or .5uf ceramic disk
  7471. capacitors
  7472. Q1.....NPN transistor (2N2222 works
  7473. best)
  7474. S1.....Normally open momentary SPST
  7475. switch
  7476. S2.....SPST toggle switch
  7477. B1.....Standard 9-Volt battery
  7478. R1.....Single turn, 50k potentiometer
  7479. R2..... " " 100k potentiometer
  7480. R3..... " " 500k potentiometer
  7481. R4..... " " 1meg potentiometer
  7482. SPKR...Standard 8-ohm speaker
  7483. T1.....Mini transformer (8-ohm works
  7484. best)
  7485. Misc...Wire, solder, soldering iron, PC
  7486. board or perfboard, box to
  7487. contain the completed unit,
  7488. battery clip
  7489.  
  7490. Instructions for building Pearl Box:
  7491. ======================================
  7492. Since the instruction are EXTREMELY difficult to explain in words, you will
  7493. be given a schematic instead. It will be quite difficult to follow but try
  7494. it any way.
  7495.  
  7496. (Schematic for The Pearl Box)
  7497. +---+------------+---------+
  7498. ! ! \
  7499. C1 C2 \
  7500. ! ! +
  7501. + + -----+T1
  7502. !\ +------------+-+
  7503. ! b c-------! +
  7504. ! Q1 ! +-S1-
  7505. ! e-----S2---+ ! SPKR
  7506. ! ! ! +----
  7507. ! B1 !
  7508. ! ! !
  7509. ! +-------+
  7510. !R1 R2 R3 R4!
  7511. /\/\ /\/\ /\/\ /\/\
  7512. +--+ +--+ +--+
  7513. Now that you are probably thoroughly confused, let me explain a few
  7514. minor details. The potentiometer area is rigged so that the left pole is
  7515. connected to the center pole of the potentiometer next to it.
  7516. The middle terminal of T1 is connected to the piece of wire that runs down
  7517. to the end of the battery.
  7518.  
  7519. Correct operation of The Pearl Box:
  7520. ===================================
  7521. You may want to get some dry-transfer decals at Radio Shack to make this
  7522. job a lot easier. Also, some knobs for the tops of the potentiometers
  7523. may be useful too. Use the decals to calibrate the knobs. R1 is the knob
  7524. for the ones place, R2 is for the tens place, R3 if for the hundreds
  7525. place and R4 is for the thousands place. S1 is for producing the all the
  7526. tones and S2 is for power.
  7527. Step 1: Turn on the power and adjust the knobs for the desired tone.
  7528. (Example: For 2600 hz-
  7529. R1=0:R2=0:R3=6:R4=2)
  7530. Step 2: Hit the pushbutton switch and VIOLA! You have the tone. If
  7531. you don't have a tone recheck all connections and schematic.
  7532.  
  7533. --------------------Jolly Roger
  7534.  
  7535. The Phreak file courtesy of the Jolly Roger
  7536.  
  7537. 202 282 3010 UNIV. OF D.C.
  7538. 202 553 0229 PENTAGON T.A.C.
  7539. 202 635 5710 CATHOLIC UNIV. OF AMERICA
  7540. 202 893 0330 DEFENSE DATA NETWORK
  7541. 202 893 0331 DEFENSE DATA NETWORK
  7542. 202 965 2900 WATERGATE
  7543. 203 771 4930 TELEPHONE PIONEERS
  7544. 206 641 2381 VOICE OF CHESTER
  7545. 212 526 1111 NEW YORK FEED LINE
  7546. 212 557 4455 SEX HOT LINE
  7547. 212 799 5017 ABC NY FEED LINE
  7548. 212 934 9090 DIAL-AN-IDIOT
  7549. 212 976 2727 P.D.A.
  7550. 212 986 1660 STOCK QUOTES
  7551. 213 541 2462 STOCK MARKET REPORTS
  7552. 213 547 6801 NAVY SHIPS INFO
  7553. 213 576 6061 " "
  7554. 213 664 3321 NEWS FOR THE BLIND
  7555. 301 393 1000 " "
  7556. 301 667 4280 LOTTERY INFO
  7557. 312 939 1600 " "
  7558. 404 221 5519 NUCLEAR COMMISSION
  7559. 408 248 8818 1ST NAT'L BANK
  7560. 415 642 2160 EARTHQUAKE REPCRT
  7561. 505 883 6828 " "
  7562. 512 472 2181 " "
  7563. 512 472 4263 WIERD RECORDING
  7564. 512 472 9833 " "
  7565. 512 472 9941 INSERT 25 CENTS
  7566. 512 472 9941 SPECIAL RECORDING
  7567. 512 870 2345 " "
  7568. 516 794 1707 " "
  7569. 619 748 0002 LOOP LINE
  7570. 619 748 0003 " "
  7571. 703 331 0057 MCI (5 DIGITS)
  7572. 703 334 6831 WASH. POST
  7573. 703 354 8723 COMPEL INC.
  7574. 703 737 2051 METROPHONE (6 DIGITS)
  7575. 703 835 0500 VALNET (5 DIGITS)
  7576. 703 861 7000 SPRINT (6/8 DIGITS)
  7577. 703 861 9181 SPRINT (6/8 DIGITS)
  7578. 714 974 4020 CA. MAINFRAME
  7579. 716 475 1072 N.Y. DEC-SYSTEM
  7580. 800 222 0555 RESEARCH INSTITUTE
  7581. 800 223 3312 CITIBANK
  7582. 800 227 5576 EASTERN AIRLINES
  7583. 800 248 0151 WHITE HOUSE PRESS
  7584. 800 321 1424 FLIGHT PLANES
  7585. 800 323 3026 TEL-TEC (6 GIGITS)
  7586. 800 323 4756 MOTOROLA DITELL
  7587. 800 323 7751 M.C.I. MAINFRAME
  7588. 800 325 4112 EAsYLINK
  7589. 800 325 6397 F.Y.I.
  7590. 800 344 4000 MSG SYSTEM
  7591. 800 368 6900 SKYLINE ORDER LINE
  7592. 800 424 9090 RONALD REAGAN'S PRESS
  7593. 800 424 9096 WHITE HOUSE SWITCH
  7594. 800 438 9428 ITT CITY CALL SWITCHING
  7595. 800 521 2255 AUTONET
  7596. 800 521 8400 TRAVELNET (8 DIGITS)
  7597. 800 526 3714 RCA MAINFRAME
  7598. 800 527 1800 TYMNET
  7599. 800 621 3026 SPECIAL OPERATOR
  7600. 800 621 3028 " "
  7601. 800 621 3030 " "
  7602. 800 621 3035 " "
  7603. 800 631 1146 VOICE STAT
  7604. 800 821 2121 BELL TELEMARKETING
  7605. 800 828 6321 XEROX $
  7606. 800 858 9313 RECORD-A-VOICE
  7607. 800 882 1061 AT&T STOCK PRICES
  7608. 914 997 1277 " "
  7609. 916 445 2864 JERRY BROWN
  7610. N/A 950 1000 SPRINT
  7611. N/A 950 1022 MCI EXECUNET
  7612. N/A 950 1033 US TELEPHONE
  7613. N/A 950 1044 ALLNET (6 DIGITS)
  7614. N/A 950 1066 LEXITEL
  7615. N/A 950 1088 SKYLINE (6 DIGITS)
  7616.  
  7617. -----------------------------------
  7618. PHONE # | DESCRIPTION/CODE
  7619. -----------------------------------
  7620. 201-643-2227 | CODES:235199,235022
  7621. | AND 121270
  7622. |
  7623. 800-325-4112 | WESTERN UNION
  7624. |
  7625. 800-547-1784 | CODES:101111,350009
  7626. | AND 350008
  7627. |
  7628. 800-424-9098 | TOLL FREE WHITE HS.
  7629. |
  7630. 800-424-9099 | DEFENSE HOT LINE
  7631. |
  7632. 202-965-2900 | WATERGATE
  7633. |
  7634. 800-368-5693 | HOWARD BAKER HOTLN
  7635. |
  7636. 202-456-7639 | REAGANS SECRETARY
  7637. |
  7638. 202-545-6706 | PENTAGON
  7639. |
  7640. 202-694-0004 | PENTAGON MODEM
  7641. |
  7642. 201-932-3371 | RUTGERS
  7643. |
  7644. 800-325-2091 | PASSWORD: GAMES
  7645. |
  7646. 800-228-1111 | AMERICAN EXPRESS
  7647. |
  7648. 617-258-8313 | AFTER CONNECT
  7649. | PRESS CTRL-C
  7650. |
  7651. 800-323-7751 | PASSWORD:REGISTER
  7652. |
  7653. 800-322-1415 | CODES:266891,411266
  7654. | AND 836566
  7655. | (USED BY SYSOP)
  7656. -----------------------------------
  7657. The following 800 #'s have been
  7658. collected however no codes have
  7659. been found yet! if you hack any
  7660. please let me know...
  7661. -----------------------------------
  7662. phone # | codes:
  7663. -----------------------------------
  7664. 800-321-3344 | ???????????
  7665. 800-323-3027 | ???????????
  7666. 800-323-3208 | ???????????
  7667. 800-323-3209 | ???????????
  7668. 800-325-7222 | ???????????
  7669. 800-327-9895 | ???????????
  7670. 800-327-9136 | ???????????
  7671. 800-343-1844 | ???????????
  7672. 800-547-1784 | ???????????
  7673. 800-547-6754 | ???????????
  7674. 800-654-8494 | ???????????
  7675. 800-682-4000 | ???????????
  7676. 800-858-9000 | ???????????
  7677. 800 #'s with carriers.
  7678. 800-323-9007
  7679. 800-323-9066
  7680. 800-323-9073
  7681. 800-321-4600
  7682. 800-547-1784
  7683. 1-800 numbers of the goverment.
  7684. 800-321-1082:NAVY FINANCE CENTER.
  7685. 800-424-5201:EXPORT IMPORT BANK.
  7686. 800-523-0677:ALCOHOL TOBACCO AND.
  7687. 800-532-1556:FED INFORMATION CNTR1-1082:NAVY FINANCE CENTER.
  7688. 800-424-5201:EXPORT IMPORT BANK.
  7689. 800-523-0677:ALCOHOL TOBACCO AND.
  7690. 800-532-1556:FED INFORMATION CNTR.
  7691. 800-325-4072:COMBAT & ARMS SERVICE.
  7692. 800-325-4095:COMBAT SUPPORT BRANCH.
  7693. 800-325-4890:ROPD USAR COMBAT ARMS.
  7694. 800-432-3960:SOCIAL SECURITY.
  7695. 800-426-5996:PUGET NAVAL SHIPYARD.
  7696. Directory of toll free numbers.
  7697. 800-432-3960:SOCIAL SECURITY.
  7698. 800-426-5996:PUGET NAVAL SHIPYARD.
  7699. Directory of toll free numbers.
  7700. 301-234-0100:BALTIMORE ELECTRIC.
  7701. 202-456-1414:WHITE HOUSE.
  7702. 202-545-6706:PENTAGON.
  7703. 202-343-1100:EPA.
  7704. 714-891-1267:DIAL-A-GEEK.
  7705. 714-897-5511:TIMELY.
  7706. 213-571-6523:SATANIC MESSAGES.
  7707. 213-664-7664:DIAL-A-SONG.
  7708. 405-843-7396:SYNTHACER MUSIC.
  7709. 213-765-1000:LIST OF MANY NUMBERS.
  7710. 512-472-4263:WIERD.
  7711. 512-472-9941:INSERT 25.
  7712. 203-771-3930:PIONEERS.
  7713. 213-254-4914:DIAL-A-ATHIEST.
  7714. 212-586-0897:DIRTY.
  7715. 213-840-3971:HOROWIERD
  7716. 203-771-3930:PIONEERS
  7717. 471-9420,345-9721,836-8962
  7718. 836-3298,323-4139,836-5698
  7719. 471-9440,471-9440,471-6952
  7720. 476-6040,327-9772,471-9480
  7721. 800-325-1693,800-325-4113
  7722. 800-521-8400:VOICE ACTIVATED
  7723. 213-992-8282:METROFONE ACCESS NUMBER
  7724. 617-738-5051:PIRATE HARBOR
  7725. 617-720-3600:TIMECOR #2
  7726. 301-344-9156:N.A.S.A PASSWORD:GASET
  7727. 318-233-6289:UNIVERSITY LOUISIANA
  7728. 213-822-2112:213-822-3356
  7729. 213-822-1924:213-822 3127
  7730. 213-449-4040:TECH CENTER
  7731. 213-937-3580:TELENET
  7732. 1-800-842-8781
  7733. 1-800-368-5676
  7734. 1-800-345-3878
  7735. 212-331-1433
  7736. 213-892-7211
  7737. 213-626-2400
  7738. 713-237-1822
  7739. 713-224-6098
  7740. 713-225-1053
  7741. 713-224-9417
  7742. 818-992-8282
  7743. 1-800-521-8400
  7744. After entering the sprint code,and, C+Destination number.Then enter this:
  7745. number:"205#977#22",And the main tracer for sprint will be disabled.
  7746. 215-561-3199/SPRINT LONG DISTANCE
  7747. 202-456-1414/WHITE HOUSE
  7748. 011-441-930-4832/QUEEN ELIZABETH
  7749. 916-445-2864/JERRY BROWN
  7750. 800-424-9090/RONALD REAGAN'S PRESS
  7751. 212-799-5017/ABC NEW YORK FEED LINE
  7752. 800-882-1061/AT & T STOCK PRICES
  7753. 212-986-1660/STOCK QUOTES
  7754. 213-935-1111/WIERD EFFECTS!
  7755. 512-472-4263/WIERD RECORDING
  7756. 212-976-2727/P.D.A.
  7757. 619-748-0002/FONE CO. TESTING LINES
  7758. 900-410-6272/SPACE SHUTTLE COMM.
  7759. 201-221-6397/AMERICAN TELEPHONE
  7760. 215-466-6680/BELL OF PENNSYLVANIA
  7761. 202-347-0999/CHESAPEAKE TELEPHONE
  7762. 213-829-0111/GENERAL TELEPHONE
  7763. 808-533-4426/HAWAIIAN TELEPHONE
  7764. 312-368-8000/ILLINOIS BELL TELEPHONE
  7765. 317-265-8611/INDIANA BELL
  7766. 313-223-7233/MICHIGAN BELL
  7767. 313-223-7223/NEVADA BELL
  7768. 207-955-1111/NEW ENGLAND TELEPHONE
  7769. 201-483-3800/NEW JERSEY BELL
  7770. 212-395-2200/NEW YORK TELEPHONE
  7771. 515-243-0890/NORTHWESTERN BELL
  7772. 216-822-6980/OHIO BELL
  7773. 206-345-2900/PACIFIC NORTHWEST BELL
  7774. 213-621-4141/PACIFIC TELEPHONE
  7775. 205-321-2222/SOUTH CENTRAL BELL
  7776. 404-391-2490/SOUTHERN BELL
  7777. 203-771-4920/SOUTHERN NEW ENGLAND
  7778. 314-247-5511/SOUTHWESTERN BELL
  7779. 414-678-3511/WISCONSIN TELEPHONE
  7780. 800-327-6713/UNKNOWN ORIGIN
  7781. 303-232-8555/HP3000
  7782. 315-423-1313/DEC-10
  7783. 313-577-0260/WAYNE STATE
  7784. 512-474-5011/AUSTIN COMPUTERS
  7785. 516-567-8013/LYRICS TIMESHARING
  7786. 212-369-5114/RSTS/E
  7787. 415-327-5220/NEC
  7788. 713-795-1200/SHELL COMPUTERS
  7789. 518-471-8111/CNA OF NY
  7790. 800-327-6761/AUTONET
  7791. 800-228-1111/VISA CREDIT CHECK
  7792. 713-483-2700/NASUA
  7793. 213-383-1115/COSMOS
  7794. 408-280-1901/TRW
  7795. 404-885-3460/SEARS CREDIT CHECK
  7796. 414-289-9988/AARDVARK SOFTWARE
  7797. 919-852-1482/ANDROMEDA INCORPORATED
  7798. 213-985-2922/ARTSCI
  7799. 714-627-9887/ASTAR INTERNATIONAL
  7800. 415-964-8021/AUTOMATED SIMULATIONS
  7801. 503-345-3043/AVANT GARDE CREATIONS
  7802. 415-456-6424/BRODERBUND SOFTWARE
  7803. 415-658-8141/BUDGE COMPANY
  7804. 714-755-5392/CAVALIER COMPUTER
  7805. 801-753-6990/COMPUTER DATA SYSTEMS
  7806. 213-701-5161/DATASOFT INC.
  7807. 213-366-7160/DATAMOST
  7808. 716-442-8960/DYNACOMP
  7809. 213-346-6783/EDU-WARE
  7810. 800-631-0856/HAYDEN
  7811. 919-983-1990/MED SYSTEMS SOFTWARE
  7812. 312-433-7550/MICRO LAB
  7813. 206-454-1315/MICROSOFT
  7814. 301-659-7212/MUSE SOFTWARE
  7815. 209-683-6858/ON-LINE SYSTEMS
  7816. 203-661-8799/PROGRAM DESIGN (PDI)
  7817. 213-344-6599/QUALITY SOFTWARE
  7818. 303-925-9293/SENTIENT SOFTWARE
  7819. 702-647-2673/SIERRA SOFTWARE
  7820. 916-920-1939/SIRIUS SOFTWARE
  7821. 215-393-2640/SIR-TECH
  7822. 415-962-8911/SOFTWARE PUBLISHERS
  7823. 415-964-1353/STRATEGIC SIMULATIONS
  7824. 217-359-8482/SUBLOGIC COM.
  7825. 206-226-3216/SYNERGISTIC SOFTWARE
  7826. Here are a few tips on how not to get caught when using MCI or other
  7827. such services:
  7828. 1- Try not to use them for voice to voice personal calls. Try to use
  7829. them for computer calls only. Here is why:
  7830. MCI and those other services can't really trace the calls that
  7831. come through the lines,they can just monitor them. They can
  7832. listen in on your calls and from that,they can get your name and
  7833. other information from the conversation. They can also call
  7834. the number you called and ask your friend some questions. If
  7835. you call terminals and BBS'S then it is much harder to get
  7836. information. For one thing,most sysops won't give these dudes
  7837. that call any info at all or they will act dumb because they
  7838. PHREAK themselves!
  7839. 2- Beware when using colored boxes! They are easy to find!!!!!
  7840. 3- Try to find a sine-wave number. Then use an MCI or other service
  7841. to call it. You will hear a tone that goes higher and lower. If
  7842. the tone just stops,then that code is being monitored and you
  7843. should beware when using it.
  7844. ----------------------------------------
  7845. If you do get caught,then if you think you can,try to weasel out of it.
  7846. I have heard many stories about people that have pleaded with the MCI
  7847. guys and have been let off. You will get a call from a guy that has been
  7848. monitoring you. Act nice. Act like you know it is now wrong to do this
  7849. kind of thing.....just sound like you are sorry for what you did. (If you
  7850. get a call,you probably will be a little sorry!)
  7851. Otherwise,it is very dangerous!!!!!!! (Very with a capital V!)
  7852.  
  7853. -------------------Jolly Roger
  7854.  
  7855.  
  7856. Red Box Plans by the Jolly Roger
  7857.  
  7858. Red boxing is simulating the tones produced by public payphones when you
  7859. drop your money in. The tones are beeps of 2200 Hz + 1700 Hz
  7860. Nickle = 1 beep for 66 milliseconds.
  7861. Dime = 2 beeps, each 66 milliseconds with a 66 millisecond pause between
  7862. beeps.
  7863. Quarter = 5 beeps, each 33 milliseconds with a 33 millisecond
  7864. pause between beeps.
  7865.  
  7866. There are two commonly used methods being used by Phreaks to make free calls.
  7867. 1. An electronic hand-held device that is made from a pair of Wien-bridge
  7868. oscillators with the timing controlled by 555 timing chips.
  7869. 2. A tape recording of the tones produced by a home computer. One of
  7870. the best computers to use would be an Atari ST. It is one of the easier
  7871. computers to use because the red box tones can be produced in basic with only
  7872. about 5 statments.
  7873.  
  7874. --------------------Jolly Roger
  7875.  
  7876. [__RemObS_________________________] by the Jolly Roger
  7877.  
  7878. Some of you may have heard of devices called Remobs which stands
  7879. for Remote Observation System. These Devices allow supposedly
  7880. authorized telephone employees to dial into them from anywhere, and
  7881. then using an ordinary touch tone fone, tap into a customer's line
  7882. in a special receive only mode. [The mouthpiece circuit is
  7883. deactivated, allowing totally silent observation from any
  7884. fone in the world (Wire tapping without a court order is against
  7885. the law)]
  7886.  
  7887. [__How Remobs Work______________]
  7888. Dial the number of a Remob unit. Bell is rumored to put them in the
  7889. 555 information exchanges, oron special access trunks
  7890. [Unreachable except via blue box]. A tone will then be heard
  7891. for approximately 2 seconds and then silence. You must key in
  7892. (In DTMF) a 2 to 5 digit access code while holding each digit down
  7893. at least 1 second. If the code is not entered within 5 or 6 seconds,
  7894. the Remob will release and must be dialed again. If the code is
  7895. supposedly another tone will be heard. A seven digit subscriber
  7896. fone number can then be entered [The Remob can only handle certain
  7897. 'exchanges' which are prewired, so usually one machine cannot
  7898. monitor an entire NPA]. The Remob will then connect to the
  7899. subscribers line. The listener will hear the low level idle tone
  7900. as long as the monitored party is on hook. As the monitored party
  7901. dials [rotary or DTMF], the listener would hear [And Record]
  7902. the number being dialed. Then the ENTIRE conversation, datalink,
  7903. whatever is taking place, all without detection. There is no
  7904. current box which can detect Remob observation, since it is being done
  7905. with the telephone equipment that makes the connection. When the
  7906. listener is finished monitoring of that particular customer, he keys
  7907. the last digit of the access code to disconnects him from the
  7908. monitored line and return to the tone so that he can key in another
  7909. 7 digit fone #. When the listener is totally finished with the Remob,
  7910. he keys a single 'disconnect digit' which disconnects him from the
  7911. Remob so that the device can reset and be ready for another caller.
  7912.  
  7913. [_History of Remobs_______________]
  7914. Bell has kept the existance of Remobs very low key. Only in
  7915. 1974, Bell acknowledged that Remobs existed. The device was
  7916. first made public during hearings on "Telephone Monitoring Practices
  7917. by Federal Agencies" before a subcommittee on government
  7918. operations. House of Representatives, Ninety-Third Congress, June
  7919. 1974.
  7920. It has since been stated by Bell that the Remob devices
  7921. are used exclusively for monitoring Bell employees such as operators,
  7922. information operators, etc., to keep tabs on their performance.
  7923. [Suuureee, were stupid]
  7924.  
  7925. [__Possible Uses for Remobs__]
  7926. The possible uses of Remobs are almost as endless as the uses
  7927. of self created fone line. Imagine the ability to monitor bank lines
  7928. etc, just off the top of my head I can think of these applications:
  7929.  
  7930. Data Monitoring of:
  7931. TRW
  7932. National Credit Bureau
  7933. AT&T Cosmos
  7934. Bank Institutions
  7935. Compuserve and other Networks.
  7936. Voice Monitoring of:
  7937. Bank Institutions
  7938. Mail Order buisnesses.
  7939. Bell Telephone themselves.
  7940. Any place handling sensitive or important information.
  7941. Anyone that you may not like.
  7942.  
  7943. With just one Remob, someone could get hundreds of credit cards,
  7944. find out who was on vacation, get compuserve passwords by the dozens,
  7945. disconnect peoples fones, do credit checks, find out about anything
  7946. that they may want to find out about. Im sure you brilliant
  7947. can see the value of a telephone hobbiest and a telecommunications
  7948. enthusist getting his hands on a few choice Remobs. <Grin>
  7949.  
  7950. [_Caution________________________]
  7951. If any reader should discover a Remob during his (or her) scanning
  7952. excursions, please keep in mind the very strict federal laws
  7953. regarding wiretapping and unauthorized use of private Bell property.
  7954.  
  7955. ------------------Jolly Roger
  7956.  
  7957. Scarlet Box Plans by the Jolly Roger
  7958.  
  7959. The purpose of a Scarlet box is to create a very bad conection,
  7960. it can be used to crash a BBS or just make life miserable for those you
  7961. seek to avenge.
  7962. Materials: 2 alligator clips, 3 inch wire, or a resister
  7963. (plain wire will create greatest amount of static)
  7964. (Resister will decrease the amount of static in porportion to
  7965. the resister you are using)
  7966.  
  7967. Step (1): Find the phone box at your victims house, and pop the cover off.
  7968. Step (2): Find the two prongs that the phone line you wish to box are
  7969. connected to.
  7970. Step (3): Hook your alligator clips to your (wire/resister).
  7971. Step (4): Find the lower middle prong and take off all wires connected to
  7972. it, i think this disables the ground and call waiting and shit like that.
  7973. Step (5): Now take one of the alligator clips and attach it to the upper
  7974. most prong, and take the other and attach it to the lower middle prong.
  7975. Step (6): Now put the cover back on the box and take off!!
  7976.  
  7977. ** ######## **
  7978. ** # #### # **
  7979. ######## /
  7980. # #### # /
  7981. ######## /
  7982. /
  7983. /
  7984. /
  7985. /
  7986. /
  7987. /
  7988. /
  7989. **/
  7990. **
  7991. **
  7992. **
  7993. **
  7994. **
  7995.  
  7996. (**)= prongs
  7997. **
  7998. (/) = (wire/resister)
  7999. (##)= some phone bullshit
  8000.  
  8001. --------------------Jolly Roger
  8002.  
  8003. Silver Box Plans by the Jolly Roger
  8004.  
  8005. Introduction:
  8006. ------------
  8007. First a bit of Phone Trivia. A standard telephone keypad has 12 buttons.
  8008. These buttons, when pushed, produce a combination of two tones. These tones
  8009. represent the row and column of the button you are pushing.
  8010. 1 1 1
  8011. 2 3 4
  8012. 0 3 7
  8013. 9 6 7
  8014. 697 (1) (2) (3)
  8015. 770 (4) (5) (6)
  8016. 851 (7) (8) (9)
  8017. 941 (*) (0) (#)
  8018. So (1) produces a tone of 697+1209, (2) produces a tone of 697+1336, etc.
  8019.  
  8020. Function:
  8021. --------
  8022. What the Silver Box does is just creates another column of buttons,
  8023. with the new tone of 1633. These buttons are called A, B, C, and D.
  8024.  
  8025. Usefulness:
  8026. ----------
  8027. Anyone who knows anything about phreaking should know that in the
  8028. old days of phreaking, phreaks used hardware to have fun instead of other
  8029. people's Sprint and MCI codes. The most famous (and useful) was the good
  8030. ol' Blue Box. However, Ma Bell decided to fight back and now most phone systems
  8031. have protections against tone-emitting boxes. This makes boxing just
  8032. about futile in most areas of the United States (ie those areas with Crossbar
  8033. or Step-By-Step). If you live in or near a good-sized city, then your phone
  8034. system is probably up-to-date (ESS) and this box (and most others)
  8035. will be useless. However, if you live in the middle of nowhere (no offense
  8036. intended), you may find a use for this and other boxes.
  8037.  
  8038. Materials:
  8039. ---------
  8040. 1 Foot of Blue Wire
  8041. 1 Foot of Grey Wire
  8042. 1 Foot of Brown Wire
  8043. 1 Small SPDT Switch (*)
  8044. 1 Standard Ma Bell Phone
  8045. (*) SPDT = Single Pole/Double Throw
  8046.  
  8047. Tools:
  8048. -----
  8049. 1 Soldering Iron
  8050. 1 Flat-Tip Screwdriver
  8051.  
  8052. Procedure:
  8053. ---------
  8054. (1) Loosen the two screws on the bottom of the phone and take the casinf off.
  8055. (2) Loosen the screws on the side of the keypad and remove the keypad from
  8056. the mounting bracket.
  8057. (3) Remove the plastic cover from the keypad.
  8058. (4) Turn the keypad so that *0# is facing you. Turn the keypad over. You'll see
  8059. a bunch of wires, contacts, two Black Coils, etc.
  8060. (5) Look at the Coil on the left. It will have five (5) Solder Contacts
  8061. facing you. Solder the Grey Wire to the fourth Contact Pole from the left.
  8062. (6) Solder the other end of the Grey Wire to the Left Pole of the SPDT Switch.
  8063. (7) Find the Three (3) Gold-Plated Contacts on the bottom edge of the keypad.
  8064. On the Left Contact, gently seperate the two touching Connectors (they're
  8065. soldered together) and spread them apart.
  8066. (8) Solder the Brown Wire to the Contact farthest from you, and solder the
  8067. other end to the Right Pole of the SPDT Switch.
  8068. (9) Solder the Blue Wire to the Closest Contact, and the other end to the
  8069. Center Pole of the SPDT Switch.››(10) Put the phone back together.
  8070.  
  8071. Using The Silver Box:
  8072. --------------------
  8073. What you have just done was installed a switch that will change
  8074. the 369# column into an ABCD column. For example, to dial a 'B', switch
  8075. to Silver Box Tones and hit '6'.
  8076. Noone is sure of the A, B, and C uses. However, in an area with an
  8077. old phone system, the 'D' button has an interesting effect. Dial Directory
  8078. Assistance and hold down 'D'. The phone will ring, and you
  8079. should get a pulsing tone. If you get a pissed-off operator, you have a
  8080. newer phone system with defenses against Silver Boxes.
  8081. At the pulsing tone, dial a 6 or 7. These are loop ends.
  8082.  
  8083. -----------------Jolly Roger
  8084.  
  8085. Bell Trashing by the Jolly Roger
  8086.  
  8087. The Phone Co. will go to extreams on occasions. In fact, unless
  8088. you really know what to expect from them, they will suprise the heck
  8089. out of you with their "unpublished tarriffs". Recently, a situation
  8090. was brought to my attention that up till then I had been totaly
  8091. unaware of, least to mention, had any concern about. It involved gar-
  8092. bage! The phone co. will go as far as to prosecute anyone who rumages
  8093. through their garbage and helps himself to some
  8094. Of course, they have their reasons for this, and no doubt benefit
  8095. from such action. But, why should they be so picky about garbage? The
  8096. answer soon became clear to me: those huge metal bins are filled up
  8097. with more than waste old food and refuse... Although it is Pacific
  8098. Tele. policy to recycle paper waste products, sometimes employees do
  8099. overlook this sacred operation when sorting the garbage. Thus
  8100. top-secret confidential Phone Co. records go to the garbage bins
  8101. instead of the paper shredders. Since it is constantly being updated
  8102. with "company memorandums, and supplied with extensive reference
  8103. material, the Phone co. must continualy dispose of the outdated
  8104. materials. Some phone companies are supplied each year with the
  8105. complete "System Practices" guide. This publication is an over 40
  8106. foot long library of reference material about everything to do with
  8107. telephones. As the new edition arrives each year, the old version of
  8108. "System Practices" must also be thrown out.
  8109. I very quickly figured out where some local phone phreaks were
  8110. getting their material. They crawl into the garbage bins and remove
  8111. selected items that are of particular interest to them and their
  8112. fellow phreaks. One phone phreak in the Los Angeles area has salvaged
  8113. the complete 1972 edition of "Bell System Practices". It is so large
  8114. and was out of order (the binders had been removed) that it took him
  8115. over a year to sort it out and create enough shelving for it in his
  8116. garage.
  8117. Much of this "Top Secret" information is so secret that most phone
  8118. companies have no idea what is in their files. They have their hands
  8119. full simply replacing everything each time a change in wording
  8120. requires a new revision. It seems they waste more paper than they can
  8121. read!
  8122. It took quite a while for Hollywood Cal traffic manager to figure
  8123. out how all of the local phone phreaks constantly discovered the
  8124. switchroom test numbers
  8125. Whenever someone wanted to use the testboard, they found the local
  8126. phone phreaks on the lines talking to all points all over the world.
  8127. It got to the point where the local garbage buffs knew more about the
  8128. office operations than the employees themselves. One phreak went so
  8129. far as to call in and tell a switchman what his next daily assignment
  8130. would be. This, however, proved to be too much. The switchman
  8131. traced the call and one phone phreak was denied the tool of his trade.
  8132. In another rather humorous incident, a fellow phreak was rumaging
  8133. through the trash bin when he heard somone apraoching. He pressed up
  8134. against the side of the bin and silently waited for the goodies to
  8135. come. You can imagine his surprise when the garbage from the lunchroom
  8136. landed on his head. Most people find evenings best for checking out
  8137. their local telco trash piles. The only thing necessary is a
  8138. flashlight and, in the case mentioned above, possibly a rain coat. A
  8139. word of warning though, before you rush out and dive into the trash
  8140. heap. It is probably illegal, but no matter where you live, you
  8141. certainly won't get the local policeman to hold your flashlight for
  8142. you.
  8143. --------------------Jolly Roger
  8144.  
  8145. Canadian WATS Phonebook courtesy of the Jolly Roger
  8146.  
  8147. 800-227-4004 ROLM Collagen Corp.
  8148. 800-227-8933 ROLM Collagen Corp.
  8149. 800-268-4500 Voice Mail
  8150. 800-268-4501 ROLM Texaco
  8151. 800-268-4505 Voice Mail
  8152. 800-268-6364 National Data Credit
  8153. 800-268-7800 Voice Mail
  8154. 800-268-7808 Voice Mail
  8155. 800-328-9632 Voice Mail
  8156. 800-387-2097 Voice Mail
  8157. 800-387-2098 Voice Mail
  8158. 800-387-8803 ROLM Canadian Tire
  8159. 800-387-8861 ROLM Canadian Tire
  8160. 800-387-8862 ROLM Canadian Tire
  8161. 800-387-8863 ROLM Canadian Tire
  8162. 800-387-8864 ROLM Canadian Tire
  8163. 800-387-8870 ROLM Halifax Life
  8164. 800-387-8871 ROLM Halifax Life
  8165. 800-387-9115 ASPEN Sunsweep
  8166. 800-387-9116 ASPEN Sunsweep
  8167. 800-387-9175 PBX [Hold Music=CHUM FM]
  8168. 800-387-9218 Voice Messenger
  8169. 800-387-9644 Carrier
  8170. 800-426-2638 Carrier
  8171. 800-524-2133 Aspen
  8172. 800-663-5000 PBX/Voice Mail [Hold Music=CFMI FM]
  8173. 800-663-5996 Voice Mail (5 rings)
  8174. 800-847-6181 Voice Mail
  8175.  
  8176. NOTES: Each and every one of these numbers is available to the 604
  8177. (British Columbia) Area Code. Most are available Canada Wide and some
  8178. are located in the United States. Numbers designated ROLM have been
  8179. identified as being connected to a ROLM Phonemail system.
  8180. Numbers designated ASPEN are connected to an ASPEN voice message system.
  8181. Numbers designated VOICE MAIL have not been identified as to equipment
  8182. in use on that line. Numbers designated carrier are answered by a modem
  8183. or data set.
  8184. Most Voice Message systems, and ALL Rolms, sound like an answering machine.
  8185. Press 0 during the recording when in a rolm, * or # or other DTMF in other
  8186. systems, and be propelled into another world...
  8187.  
  8188. Brought to you in the Cookbook by the Jolly Roger!!!!!!!!!!!!!!!!
  8189.  
  8190.  
  8191. Hacking TRW by the Jolly Roger
  8192.  
  8193. When you call TRW, the dial up will identify itself with the message "TRW".
  8194. It will then wait for you to type the appropiate answer back (such as CTRL-G)
  8195. Once This has been done, the system will say "CIRCUIT BUILDING IN PROGRESS"
  8196. Along with a few numbers. After this, it clears the screen
  8197. (CTRL L) followed by a CTRL-Q. After the system sends the CTRL-Q, It is
  8198. ready for the request. You first type the 4 character identifyer for the
  8199. geographical area of the account..
  8200.  
  8201. (For Example) TCA1 - for certain Calif. & Vicinity subscribers.
  8202. TCA2 - A second CALF. TRW System.
  8203. TNJ1 - Their NJ Database.
  8204. TGA1 - Their Georgia Database.
  8205.  
  8206. The user then types A <CR> and then on the next line, he must type
  8207. his 3 char. Option. Most Requests use the RTS option.
  8208. OPX, RTX, and a few others exist. (NOTE) TRW will accept an A, C,
  8209. or S as the 'X' in the options above.) Then finally, the user types his 7
  8210. digit subscriber code. He appends his 3-4 character password after it. It
  8211. seems that if you manage to get hold of a TRW Printout (Trashing at Sears,
  8212. Saks, ETC. or from getting your credit printout from them) Their subscriber
  8213. code will be on it leaving only a 3-4 character p/w up to you.
  8214.  
  8215. For Example,
  8216. (Call the DialUp)
  8217. TRW System Types, ST) CTRL-G
  8218. (You type,YT) Circuit building in progress 1234
  8219. (ST) CTRL-L CRTL-Q (TCA1 CYT) BTS 3000000AAA
  8220. <CR><CRTL-S> (YT]
  8221. Note: This sytem is in Half Duplex, Even Parity, 7 Bits per word and
  8222. 2 Stop Bits.
  8223.  
  8224. CAUTION: It is a very stressed rumor that after typing in the TRW
  8225. password Three (3) times.. It sets an Automatic Number Identification on your
  8226. ass, so be careful. And forget who told you how to do this..
  8227.  
  8228. ------------------Jolly Roger
  8229.  
  8230. Hacking Vax's & Unix by the Jolly Roger
  8231.  
  8232. Unix is a trademark of At&t (and you know what that means)
  8233.  
  8234. _______________________________________
  8235. In this article, we discuss the unix system that runs on
  8236. the various vax systems. If you are on another unix-type system, some
  8237. commands may differ, but since it is licenced to bell, they can't make many
  8238. changes.
  8239. _______________________________________
  8240. Hacking onto a unix system is very difficult, and in this case, we advise
  8241. having an inside source, if possible. The reason it is difficult to hack a
  8242. vax is this: Many vax, after you get a carrier from them, respond=>
  8243. Login:
  8244. They give you no chance to see what the login name format is. Most commonly
  8245. used are single words, under 8 digits, usually the person's name. There is
  8246. a way around this: Most vax have an acct. called 'suggest' for people to
  8247. use to make a suggestion to the system root terminal. This is usually watched
  8248. by the system operator, but at late he is probably at home sleeping or
  8249. screwing someone's brains out. So we can write a program to send at the
  8250. vax this type of a message:
  8251. A screen freeze (Cntrl-s), screen clear (system dependant), about 255
  8252. garbage characters, and then a command to create a login acct., after which
  8253. you clear the screen again, then unfreeze the terminal. What this does:
  8254. When the terminal is frozen, it keeps a buffer of what is sent. well, the
  8255. buffer is about 127 characters long. so you overflow it with trash, and then
  8256. you send a command line to create an acct. (System dependant). after this
  8257. you clear the buffer and screen again, then unfreeze the terminal. This is
  8258. a bad way to do it, and it is much nicer if you just send a command to
  8259. the terminal to shut the system down, or whatever you are after...
  8260. There is always, *Always* an acct. called root, the most powerful acct.
  8261. to be on, since it has all of the system files on it. If you hack your
  8262. way onto this one, then everything is easy from here on...
  8263. On the unix system, the abort key is the Cntrl-d key. watch how many times
  8264. you hit this, since it is also a way to log off the system!
  8265. A little about unix architechture: The root directory, called root, is
  8266. where the system resides. After this come a few 'sub' root directories,
  8267. usually to group things (stats here, priv stuff here, the user log here...).
  8268. Under this comes the superuser (the operator of the system), and then
  8269. finally the normal users. In the unix 'Shell' everything is treated the same.
  8270. By this we mean: You can access a program the same way you access a user
  8271. directory, and so on. The way the unix system was written, everything,
  8272. users included, are just programs belonging to the root directory. Those
  8273. of you who hacked onto the root, smile, since you can screw everything...
  8274. the main level (exec level) prompt on the unix system is the $, and if you
  8275. are on the root, you have a # (superuser prompt).
  8276. Ok, a few basics for the system... To see where you are, and what paths
  8277. are active in regards to your user account, then type
  8278. => pwd
  8279. This shows your acct. seperated by a slash with another pathname (acct.),
  8280. possibly many times. To connect through to another path,
  8281. or many paths, you would type:
  8282. You=> path1/path2/path3
  8283. and then you are connected all the way from path1 to path3. You can
  8284. run the programs on all the paths you are connected to. If it does
  8285. not allow you to connect to a path, then you have insufficient privs, or
  8286. the path is closed and archived onto tape. You can run programs this way
  8287. also:
  8288. you=> path1/path2/path3/program-name
  8289. Unix treats everything as a program, and thus there a few commands to
  8290. learn...
  8291. To see what you have access to in the end path, type=>
  8292. ls
  8293. for list. this show the programs you can run. You can connect to
  8294. the root directory and run it's programs with=>
  8295. /root
  8296. By the way, most unix systems have their log file on the root, so you
  8297. can set up a watch on the file, waiting for people to log in and snatch their
  8298. password as it passes thru the file. To connect to a directory, use the
  8299. command:
  8300. => cd pathname This allows you to do what you want
  8301. with that directory. You may be asked for a password, but this is a good
  8302. ay of finding other user names to hack onto.
  8303. The wildcard character in unix, if you want to search down a path for
  8304. a game or such, is the *.
  8305. => ls /*
  8306. Should show you what you can access. The file types are the same as they
  8307. are on a dec, so refer to that section when examining file. To see what is
  8308. in a file, use the
  8309. => pr
  8310. filename command, for print file.
  8311. We advise playing with pathnames to get the hang of the concept. There
  8312. is on-line help available on most systems with a 'help' or a '?'.
  8313. We advise you look thru the help files and pay attention to anything
  8314. they give you on pathnames, or the commands for the system.
  8315. You can, as a user, create or destroy directories on the tree beneath you.
  8316. This means that root can kill everything but root, and you can kill any
  8317. that are below you. These are the
  8318. => mkdir pathname
  8319. => rmdir pathname
  8320. commands.
  8321. Once again, you are not alone on the system... type=>
  8322. who
  8323. to see what other users are logged in to the system at the time. If you
  8324. want to talk to them=>
  8325. write username
  8326. Will allow you to chat at the same time, without having to worry
  8327. about the parser. To send mail to a user, say
  8328. => mail
  8329. And enter the mail sub-system. To send a message to all the users
  8330. on the system, say
  8331. => wall
  8332. Which stands for 'write all'. By the way, on a few systems,
  8333. all you have to do is hit the <return> key to end the message,
  8334. but on others you must hit the cntrl-d key.
  8335. To send a single message to a user, say
  8336. => write username
  8337. this is very handy again! If you send the sequence of characters discussed
  8338. at the very beginning of this article, you can have the super-user terminal do
  8339. tricks for you again.
  8340.  
  8341. Privs:
  8342. If you want superuser privs, you can either log in as root, or edit your
  8343. acct. so it can say
  8344. => su
  8345. this now gives you the # prompt, and allows you to completely by-pass the
  8346. protection. The wonderful security conscious developers at bell made it
  8347. very difficult to do much without privs, but once you have them, there
  8348. is absolutely nothing stopping you from doing anything you want to.
  8349. To bring down a unix system:
  8350. => chdir /bin
  8351. => rm *
  8352. this wipes out the pathname bin, where all the system maintenance files are.
  8353. Or try:
  8354. => r -r
  8355. This recursively removes everything from the system except the remove
  8356. command itself.
  8357. Or try:
  8358. => kill -1,1
  8359. => sync
  8360. This wipes out the system devices from operation.
  8361. When you are finally sick and tired from hacking on the vax systems, just
  8362. hit your cntrl-d and repeat key, and you will eventually be logged out.
  8363. _______________________________________
  8364. The reason this file seems to be very sketchy is the fact that bell has 7
  8365. licenced versions of unix out in the public domain, and these commands are
  8366. those common to all of them. I recommend you hack onto the root or
  8367. bin directory, since they have the highest levels of privs, and there
  8368. is really not much you can do (except develop software) without them.
  8369. _______________________________________
  8370.  
  8371. Verification Circuits courtesy of the Jolly Roger
  8372. (originally an Apple ][ file so forgive the upper case!)
  8373.  
  8374. 1. ONE BUSY VERIFICATION CONFERENCE CIRCUIT IS ALWAYS PROVIDED.THE CIRCUIT IS A
  8375. THREE-WAY CONFERENCE BRIDGE THAT ENABLES AN OPERERATOR TO VERIFY THE BUSY/IDLE
  8376. CONDITION OF A SUBSCRIBER LINE.UPON REQUEST OF A PARTY ATTEMPTING TO REACH A
  8377. SPECIFIED DIRECTORY NUMBER, THE OPERATOR DIALS THE CALLED LINE NUMBER TO
  8378. DETERMINE IF THE LINE IS IN USE,IF THE RECEIVER IS OFF THE HOOK,OR IF THE LINE
  8379. IS IN LOCKOUT DUE TO A FAULT CONDITKON.THE OPERATOR THEN RETURNS TO THE PARTY
  8380. TRYING TO REACH THE DIRE CTORY NUMBER AND STATES THE CONDITION OF THE
  8381. LINE.LINES WITH DATA SECURITY CAN NOT BE ACCESSED FOR BUSY VERIFICATION WHEN
  8382. THE LINE IS IN USE.(REFER ALSO TO DATA SECURITY)
  8383. 2. THREE PORTS ARE ASSIGNED TO EACH BUSY VERIFICATION CONFERENCE CIRCUIT.ONE
  8384. PORT IS FOR OPERATOR ACCESS AND TWO PORTS ARE USED TO SPLIT AN EXISTING
  8385. CONNECTION.TO VERKFY THE BUSY/IDLE CONDITION OF A LINE,THE OPERATOR
  8386. ESTABLISHED A CONNECTION TO THE OPERATOR ACCESS PORT AND DIALS THE DIRECTORY
  8387. NUMBER OF THE LINE TO BE VERIFIED.IF THE LINE IS IN USE,THE EXISTING
  8388. CONNECTION IS BROKEN AND IMMEDIATLY RE-ESTABLISHED THROUGH THE
  8389. OTHER TWO PORTS OF THE BUSY VERIFICATION CIRCUIT WITHOUT INTERRUPTION.
  8390. BUSY VERIFICATION CIRCUIT IS CONTROLLED BY ACCESS CODE. A DEDICATED TRUNK CAN
  8391. BE USED BUT IS NOT NECESSARY.
  8392. 3. THE BUSY VREIFICATION CIRCUIT ALSO CAN BE USED FOR TEST VERIFY FROM THE WIRE
  8393. CHIEFS TEST PANEL.
  8394. B. ADDITIONAL BUSY VERIFICATION CONFERENCE CIRCUITS (002749)
  8395. O.K. THERE IT IS-RIGHT OUT OF AN ESS MANUAL WORD FOR WORD! (AND IM GETTING 25
  8396. LINEAR FEET OF ESS MANUALS!!! NOT COUNTING THE STACK RECEIVED SO FAR!
  8397.  
  8398. Brought to you in the Cookbook by the Jolly Roger!!!!
  8399.  
  8400. White Box Plans by the Jolly Roger
  8401.  
  8402. Introduction:
  8403. ------------
  8404. The White Box is simply a portable Touch-Tone keypad. For more
  8405. information on Touch-Tone, see my Silver Box Plans.
  8406. Materials:
  8407. ---------
  8408. 1 Touch-Tone Keypad
  8409. 1 Miniature 1000 to 8 Ohm Transformer
  8410. (Radio Shack # 273-1380)
  8411. 1 Standard 8 Ohm Speaker
  8412. 2 9V Batteries
  8413. 2 9V Battery Clips
  8414.  
  8415. Procedure:
  8416. ---------
  8417. (1) Connect the Red Wire from the Transformer to either terminal on the
  8418. Speaker.
  8419. (2) Connect the White Wire from the Transformer to the other terminal on
  8420. the Speaker.
  8421. (3) Connect the Red Wire from one Battery Clip to the Black Wire from the other
  8422. Battery Clip.
  8423. (4) Connect the Red Wire from the second Battery Clip to the Green Wire
  8424. from the Keypad.
  8425. (5) Connect the Blue Wire from the Keypad to the Orange/Black Wire from
  8426. the Keypad.
  8427. (6) Connect the Black Wire from the first Battery Clip to the two above
  8428. wires (Blue and Black/Orange).
  8429. (7) Connect the Black Wire from the Keypad to the Blue Wire from the
  8430. Transformer.
  8431. (8) Connect the Red/Green Wire from the Keypad to the Green Wire from the
  8432. Transformer.
  8433. (9) Make sure the Black Wire from the Transformer and the remaining wires
  8434. from the Keypad are free.
  8435. (10) Hook up the Batteries.
  8436.  
  8437. Optional:
  8438. --------
  8439. (1) Put it all in a case.
  8440. (2) Add a Silver Box to it.
  8441.  
  8442. Use:
  8443. ---
  8444. Just use it like a normal keypad, except put the speaker next to the
  8445. receiver of the phone you're using.
  8446.  
  8447. ---------------------Jolly Roger
  8448.  
  8449. [Index to the Jolly Roger's Cookbook v 2.0]
  8450.  
  8451. 000: Introduction by The Jolly Roger
  8452. 001: Counterfeiting Money
  8453. 002: Credit Card Fraud
  8454. 003: Making Plastic Explosives from Bleach
  8455. 004: Picking Master Locks
  8456. 005: The Arts of Lockpicking I
  8457. 006: The Arts of Lockpicking II
  8458. 007: Solidox Bombs
  8459. 008: High Tech Revenge: The Beigebox (NEW Revision 2.0)
  8460. 009: CO2 Bombs
  8461. 010: Thermite Bombs
  8462. 011: Touch Explosives
  8463. 012: Letter Bombs
  8464. 013: Paint Bombs
  8465. 014: Ways to send a car to HELL
  8466. 015: Do ya hate school?
  8467. 016: Phone related vandalism
  8468. 017: Highway police radar jamming
  8469. 018: Smoke Bombs
  8470. 019: Mail Box Bombs
  8471. 020: Hotwiring cars
  8472. 021: Napalm
  8473. 022: Fertilizer Bomb
  8474. 023: Tennis Ball Bomb
  8475. 024: Diskette Bombs
  8476. 025: Unlisted Phone Numbers
  8477. 026: Fuses
  8478. 027: How to make Potassium Nitrate
  8479. 028: Exploding Lightbulbs
  8480. 029: Under water igniters
  8481. 030: Home-brew blast cannon
  8482. 031: Chemical Equivalency List
  8483. 032: Phone Taps
  8484. 033: Landmines
  8485. 034: A different kind of Molitov Cocktail
  8486. 035: Phone Systems Tutorial I
  8487. 036: Phone Systems Tutorial II
  8488. 037: Basic Alliance Teleconferencing
  8489. 038: Aqua Box Plans
  8490. 039: Hindenberg Bomb
  8491. 040: How to Kill Someone with your Bare Hands
  8492. 041: Phone Systems Tutorial III
  8493. 042: Black Box Plans
  8494. 043: The Blotto Box
  8495. 044: Blowgun
  8496. 045: Brown Box Plans
  8497. 046: Calcium Carbide Bomb
  8498. 047: More Ways to Send a Car to Hell
  8499. 048: Ripping off Change Machines
  8500. 049: Clear Box Plans
  8501. 050: CNA Number Listing
  8502. 051: Electronic Terrorism
  8503. 052: How to Start a Conference w/o 2600hz or M-F
  8504. 053: Dynamite
  8505. 054: Auto Exhaust Flame Thower
  8506. 055: How to Break into BBs Express
  8507. 056: Firebomb
  8508. 057: Fuse Bomb
  8509. 058: Generic Bomb
  8510. 059: Green Box Plans
  8511. 060: Portable Grenade Launcher
  8512. 061: Basic Hacking Tutorial I
  8513. 062: Basic Hacking Tutorial II
  8514. 063: Hacking DEC's
  8515. 064: Harmless Bombs
  8516. 065: Breaking into Houses
  8517. 066: Hypnotism
  8518. 067: Remote Informer Issue #1
  8519. 068: Jackpotting ATM Machines
  8520. 069: Jug Bomb
  8521. 070: Fun at K-Mart
  8522. 071: Mace Substitute
  8523. 072: How to Grow Marijuana
  8524. 073: Match Head Bomb
  8525. 074: Terrorizing McDonalds
  8526. 075: "Mentor's" Last Words
  8527. 076: The Myth of the 2600hz Detector
  8528. 077: Blue Box Plans
  8529. 078: Napalm II
  8530. 079: Nitroglycerin Recipe
  8531. 080: Operation: Fuckup
  8532. 081: Stealing Calls from Payphones
  8533. 082: Pool Fun
  8534. 083: Free Postage
  8535. 084: Unstable Explosives
  8536. 085: Weird Drugs
  8537. 086: The Art of Carding
  8538. 087: Recognizing Credit Cards
  8539. 088: How to Get a New Identity
  8540. 089: Remote Informer Issue #2
  8541. 090: Remote Informer Issue #3
  8542. 091: Remote Informer Issue #4
  8543. 092: Remote Informer Issue #5
  8544. 093: Phreaker's Guide to Loop Lines
  8545. 094: Ma-Bell Tutorial
  8546. 095: Getting Money out of Pay Phones
  8547. 096: Computer-based PBX
  8548. 097: PC-Pursuit Port Statistics
  8549. 098: Pearl Box Plans
  8550. 099: The Phreak File
  8551. 100: Red Box Plans
  8552. 101: RemObS
  8553. 102: Scarlet Box Plans
  8554. 103: Silver Box Plans
  8555. 104: Bell Trashing
  8556. 105: Canadian WATS Phonebook
  8557. 106: Hacking TRW
  8558. 107: Hacking VAX & UNIX
  8559. 108: Verification Circuits
  8560. 109: White Box Plans
  8561.  
  8562.  
  8563.  Call: ________ _
  8564. / O / /\L RE/_/\LL <--- At (707)426-9512
  8565. Sysop: The Bounty Hunter At 19.2 Dual Standard!
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!