2600: the hacker quarterly (volume 2, number 5, may 1985)

8/9/2019 2600: The Hacker Quarterly (Volume 2, Number 5, May 1985)

1/8

IN THIS ISSUEALLIANCE INFOMORE ALLIANCE INFO I MAY, 1985EOPLE EXPRESS COMPUTER IPHONE NEWS 2 NEW PAGES' AND EVEN MORE' -- ~ - -- - - - +- -600 l

. 'NII/I ' rllhh"'lI ' l l h\ : ' f " . l l l I h r ~ I N ' tUl .In r!C'("rnU'\ffiU\ nrJl,.lnl/, ll lnn'Uh" ' l lp l I1HI I . I1 (- , \,:' I \ t";U '\I. ('III..ol h .. \1 re" n.U"''''UI" (hf'f'J."a" 'I'i I \ ( , ; I f V()/.UMF TWO. ,V('MHI:R FlU:I Lit-IIIIl," 'un .... I 'plU>Il \ "1(41 (


2/8

I

How to run a successful teleconference by The ShadowAlliance Teleconferencing Service is ab r i d g i n ~ service offering teleconferencingto busInesses. A conference merely isseveral phone lines tied t o ~ e t h e r allowingp e o ~ l e to talk to many locatIons at once.AllIance is owned by AT&T Communications.They use #4 ESS's (Electronic SwitchingSystems) to control their conferences.According to Alliance, conferences can be

originated and controlled from most locations in the United States. The servicestarted out in area code 202, but has beenspreading throughout the country. One thingto remeJl'lber is that even in the s8JIe areacode some central offices will allow access,and others may not. Conferees can be fromanywhere dialable by AT&T, including interna t iona!. All iance can. be reached at 800-544-6363 fo r social-enflneering or for setting up conferences 1n Q c ~ t i o n s that cannotaccess Alliance directly. Usinf this th econference can be billed to a Cal ing Cardor to a third number.Alliance says the cost of a teleconferenceis 25 cents a l i n e . ~ e r minute, as well asthe cost of a direct dIaled cal l for each ofthe locations from th e conference s i te . Amonitoring Alliance operator costs an additional $3 an hour. Thus, rumors of $6,000conference bil ls seem a l I t t le exaggerated.However, conferences can last for severaldays and can have several internationalparticipants, thus running th e bi l l up.CONFERENCE NUMBERSDialing 0-700-456-XOOX will result in"This is Alliance Teleconferencing in [location)., You may dial during th e announcementfor faster setup." The main conferencenumbers are -lOOX and -200X. The locationsindicated by th e X (a s given by Alliance andthe logon recordings) are 1 being LosAngeles, 2 being C h i c a ~ o , 3 being WhitePlains New York, and 4 beIng Dallas. 0 getsyou the conference si te closest to you. The-lOOX l ines only accept up to 21 conferees land usually don' t allow internationadialing. The other conference numbers allowup to 59 lines ,when available as the lineshave to be apportioned between the variousconferences going at th e si te , and alsoallow international dialing. According toAlliance themselves -200X are graphic conferences, -lOOX allows up to 59 conferees,and both always allow international dialing.However, actual exploration doesn't bearthese out.Alliance doesn't seem to admit that -300Xconference (X is from 0 to 2, a ll located inChicago, Illinois) numbers even exist.These conferences announce that they aregraphic, and they seem to bear this out.They can also be handled as an audio conference. The only difference is that i tasks when adding conferees whether the location is graphics (hit 4) or audio (hi t 5).I t ' s generally best to choose audio. Thesetend most often to allow the passing of c o n ~ trol, dialing of international calls, andare also less used than th e other l ines.Dialing 0-700-456-150X or -250X results ina modem connect soundinf tone, followed by"You have reached Bel System Teleconferencing Service's Special Set for testingand measurement. Please enter your servicecode [3 digits) or wait for instructions."These cannot be reached from most areacodes, resulting instead in a "The numberyou have dialed cannot be reached from yourcalling area" just as i f i t were an 800

number not reachable from your calling area.The only one I know that does get through is201 (Northern New Jersey). The X goes fromo to 4, just like the normal -lOOX and -200Xconferences. There is no -350X series.haven't as of yet figured out th e "servicecode." This can 6e used as a nonaal conference, e x c e ~ t that i t requires you to confirm your chOIce by voice, and each sectionis separated by those modem connect soundingtones. Rumors are that this is the upcomingnew conference system, which is supposed toadd features such as the deletion of conferees. However, any keypress I have triedother than I, 6, or 9 {the normal controls)results in a dire warnIng te l l ing me "Pleasewait for an Alliance operator to come toyour assistance." I haven't yet stuckaround long enough to find out what "assistance" means. All iance won't admi t theseexist, and therefore th e -150X and -250Xwarrant much further and deeper investigation.Alliance can be reached by other means.Blue boxing to 213-080-0123 and other directrouting to the Alliance machines (which usedto be th e only way to get through) no longerseems to work. However, box r o u t i n ~ to 0-700-456-XOOX does work. PBX's In conference country are often used to cal l conferences. Merely dial a PBX's inward accessl ine, enter the access code, dial an outsidel ine, and then either tOUCh tone 0-700-456-XOOX yourself, or dial 0 and get theoperator to do I t for you. Sometimes theyinsist that the 0-700 SAC doesn't exist, butjust remain firm and te l l them to try i t .Social engineering 'also works, just cal l ano ~ e r a t o r and try to convince he r to KP+O-700-456-1000+ST and position release, aftergetting her to believe you .are maintenance/whatever. Getting a direct drop on aninward operator increases the chance ofsucceeding, such as by dialing 0-959-1211from a pay phone (BLOC Agent 003's BasicTelcom VI, discovered by Karl Marx) Anothertrick suggested by Shooting Shark is to use"a white boxable phone (see 2600 ~ a g e 1-40,July 1984) or even an ATM help--llne or ahotel phone in an airport (a s in the April1985 2600, Page 2-19). Since when arranginga conference you really don't need to speak,just set up a conference normally, and whendone cal l another payphone nearby, pass cont ro l l and continue. The conference wills t i l be charged to the f i rs t pay ~ h o n e . Several techniques are avaIlable toimprove th e quality of th e cal l . Since th ecall may be going through, up to severalextenders to reach a non-800 PBX, and fromthere to Alliance, th e signal quality cange t quite poor. A technique that helps tokeep Alliance from knowing your number is tocal l Alliance via a PBX, add in the lowerend of a loop, pass control to i t , and thencal l the h i ~ h end. A variation on thistechnique IS to cal l your other line or apayphone next to youl or even, i f you havecal l waiting, to cal yourself again, passcontrol to yourself ( i t works), and thenhang up th e original call . All thesetechniques may not always work, as sumetimesAlliance refuses to pass control, as mentioned above.CONFERENCE CONTROLSAlliance is extremely user friendly, as i twas designed for businessmen. Help messafesabound, and all you need to do is to fol owtheir directions, but here is a brief goingContinued on page 2-312-26


3/8

- - - - - - - -- -- ---- - - - - - ---- -------- -------- - - - - --- - - - - - - - --- - - - - - - - - - -ffi ffi tD 414 Bust2600 N e v . ' ~ Sen'ice

Six people in area code 414, Wisconsin, were arrested forcredit card fraud. The World ofCryton BBS was taken down asa result, but was reportedly not the target of the investigation,which is being continued by the Secret Service in several cities.The Wizard, Phoenix, and many other phone p h r e a k ~ ' w e r e among those were were implicated in the investigation.Police Hacker ClearedComputel"\o\lorkfA preliminary investigation by the San Franciso PoliceCommission has cleared the police department of wrongdoingin the recent controversy over a breach in computer security.No evidence had been uncovered to substantiate charges thata police lieutenant used a specially designed menu to gain accessto Public Defender Jeff Brown's confidential files, which arestored in a shared computer system in the city's Hall of Justicebuilding.Although the lieutenant admitted that he was given an accesslevel usually granted only to system administrators to conductan internal police probe, he has denied allegations that he readconfidential files stored by other agencies.As a result of the police department's actions, a publicdefender had asked a San Francisco court to dismiss murdercharges filed against one man, saying that the security breachhad violated his right to attorney


4/8

fetters Which of the many computer networksare the best to use?We looked for a few repl ies to thisand here are a couple o f the . :" I access a database that i s onUNINET, TYIINET, TELENET, and DUSHET.I 've only used TYIINET and TELENET,I!nd TYIINET i s far super ior . TELENETone o f the . o s t exasperatingexperiences I ' ve ever had. ""Why, TYIINET, o f course!"Seriously, Ty.net has . o r e nodesthan any o f the others j it i s also. o re secure. I have used TELENET asa private u s e r ~ and it is IIUCH slowerthan Ty.net , Dut s ince you 're notgoing to out-and-out bel ieve so.eonewho works for one o f the .c I suggestyou look a t a s tudy done DY DATAPROResearch Corporation ( they ' re inDelran, NJ) which co.pares TELENET,T Y I I N ~ T a ~ d several o ther c o . p a n i ~ s . "We d l ~ k e to hear . o re on t h i s .What are s i lve r box tones?.Every touch tone phone- can pl'oduces ~ x t e e n tones, no t j u s t twelve.T ~ e r e i s the capab i l i t y for an addi

t ~ o n a l row o f but tons on the r ights ~ d e . . These tones are labeled( . o v ~ n l f f ro . top to bot to . ) A, B, C,and D. They are also referred to asF1l!sh,. Flash OVl!rride, . P r i ~ r i ty , andP r ~ o r ~ t y O v e r r ~ d e ( ~ n ~ n c r e a s i n gorder o f i .por tance) . This i s bowthe cal ls are t reated when they are.ade. Thus a "0" cal l gets pr ior i tyoVl!r a ."B" cal l . This s y s t e . i s usedp ~ ~ ~ a r ~ l y on Autovon, or Pa Bel l , tbe. ~ l ~ t a r y phone network, Nhich cans ~ u t dONn tbe regular network a t anyt ~ . e . The tones are also used fortes t purposes and occasional ly doin teres t ing things for phone phreaks.What is 950?.950 i s an exchange created to fu l f ~ l l par t o f the purpose o f equalaccess. I t was designed to work ina ll area codes, so that the sa .ea ~ c e s s nu.ber could be used by a longd ~ s t a n c e c o . p a n ~ nationwide. Inother words, 950-1022 wi l l get youIICI wherever ~ o u are. There i s nocharge to cal l 95 0 nu.bers and theconnection i s always crys ta l clear.You can only dial tbis exchangelocal ly , i . e . ~ o u cannot access SanFrancisco's 950 excbange fro . LosAngeles.

95 1s i t eas ier to t race 800 ca l l s or o cal ls?T r ~ c i n g an 800 cal l s i .p1y i s notas easy as t racing a 950 cal l . 80 0nu.bers ex i s t allover tbe c o u n t r ~ whereas 950's aren ' t an actualexchange, but Bre located withinevery cl!ntral of f ice . Thus, ANI( A u t o . a t ~ c Nu.ber Ident i f ica t ion)in tra-exchange i s very easy. Thefur ther aNay f ro . the central of f ice ,the harder th i s beco.es .What i s RBMOB?REIIOB i s re .o te observation. Calla nu.ber , enter a code, en ter anu.ber, and l i s t en . We need . o rein fo th i s one ourse lves .

2-28

Especial ly as to if these nu.bersreal ly ex i s t . We do ad . i t that thetechnology i s there. In fact , weNere to ld o f the nu.ber where youcould overhear rando. IICI conversatioDS in Texas, a fe N . on ths ago,without enter ing any . codes, but itstopped Norking by the t i . e Ne wentto pr in t .What fo l lows are two true accountso f adventures that were sent to us.

The f i r s t was sen t by The Crazy lIan.I t depicts th ievery and destruct ion .2600 in no Nay condones th is type o fac t iv i t y . We real ly do not . Butthere are so .e th ings to learn f ro .the f i r s t adventure about theconstruct ion o f pay-phones, so wedecided to include i t . As they say:Learn good th ings- the bad wi l l teachyou by the.se1ves . The secondadventure i s presented for youra.use .ent only.I a . wri t in f you because I havedone so.eth1ng tha t . i g h t be ofi .portance to the readers of . th is. a f . Well. a few days afo .e and afr1end went to a cons ruc t ion s i t e

and found a te le fone on a piece ofwood with a wood base. so we decidedto take the bi tch ho.e . Well. neverunderes t i . a t e the ~ o w e r of a fo r t ressfone. We read a f1le tha t BlOC wrotecal led Basic Teleco unica t ions1 Par tVI . I t said that you could d r i l o u tthe . a in lock located on the r igh ts ide of the coin box. So we t r i ed toa t t e . p t th i s daring fea t . Hever, Ir e ~ e a t . never waste your ~ i . e dr11l ing out the lock. I t wil l takeda,s and days and probabl , about 30dr111 b i t s . After about f1ve hoursof dr i l l ing e and .y fr iend decidedto t ry a di f fe ren t approach. Weknocked o ff the . e t a l washer locatedr igh t on top of the coin return ( i tshould j u s t break r ight of f ) . Thenwe used a pa i r of vise g r i ~ s to t ea rthe . e t a l o f f around the C01n return .By doinf th i s we ca .e upon the coinbox. bu i t still had the lock on topof i t ! How. th i s i s the par t tha ttakes the longest t i . e . You have tor i ~ out (with the grips) the . e t a l ,wh1ch 1S only 1/8 inch. t h a ~ surrounds the ent i re coin box. Thenyou . u s t push a l l of the locks aroundthe s i lve r pla te in . or the s i lve rpla te wi l l never co.e off . Afterpushing in the l o ck s . ' you . i g h t beable to re .ove the s i lve r pla te . I fDot. then take a good,size s ledgeha e r and a t rus ty crow-bar andwhack the pla te as hard as you can..aking the l id co.e off . Now. you. i g h t th ink: Now tha t I got thepla te o f f I can j u s t pul l the coinbox r i fh t out . Wrong. To pul l thebox ou you . u s t have a key to unlockthe coin box. I f you don t have akey (which I didn t ) then ~ u t thet rus ty crow-bar around the C01n boxand bend the box till i t s re .ovable .Now be sure to get the l i t t l e s l ipsof paper tha t say "Sorry. th i s phonei s t e .pora r i ly out of order ." Theyare co .p l i . en t s of Bel l . Now youContinued on page 2-30


5/8


6/8

Pl . .eo ....... " > < C l . . l . ~ " c)l..I.r changing typ .. . . . . . ..tyl.. __ ..ndpr in t ingfn.-thod_ in ol . . l . rcontin '- \ ingE ! ' ~ ~ C ) r t tocach i IRV 'e ! ! 'peor-Feoction.Pl. . ..a . s e o cont.inl..l."to l . . eo t l..I.S knC)"" ,h o ~ " " , e o " r ~ doing. Anyc c ) f n f nE t n t . s . Drassist .cance isg rE ! ' c a t l . . y~ E ! ! ' l . . c o f n _ d . Cll..l.rf n C ) c : I ~ 1 n is;. _ 1 ~ _ y s ; . opten.

SOME CORPORATE SECRETS: 1-800 227-3414 2 4 1 - 6 0 2 ~ 243-7650 321-0845 321-0845 325-7222 325-7222 327-9136 327-9136 3 2 7 - 9 S 9 ~ 343-1319 343-1385 343-1711 343-1844 343-1844 343-BBS3 521-8400 523-0847 ~ 2 7 - 3 5 1 1 5 2 7 ~ 3 ~ 1 1 527-3535 ~ 4 3 - 7 1 . 8 ~ 4 7 - 6 7 ~ 4 6 2 1 - 1 ~ 6 6 ~ 4 - 8 4 9 1 654-8494 682-4000 843-0698 858-9000

SURPRISE 2059870785 CNN 8 0 0 5 : 5 4 ~ 9 2 4 CNN DATA 8005545925 CNN NEWSROOM 8 0 0 5 5 4 ~ 9 2 6 MUSAK-NON-SUPED 5124740936 BBC2 AUDIO 0114112468024 VD INFO 0114112468072 TOURIST INFO 0114112468041 IN FRENCH 3 IN GERMAN :5 DJAL-A-PLANET 0114112468055 SLRPRISE 0114112468015 CBS-REMOTE FEED 2125804481 US-DIAL TONE IN UK (POSSIBLY NON-SUPED) 01144612468011

etters CODtiDued frOil page 2-28 _ld be . t S) er 60 t.ks richer by .... so " SPend it III parts to like a blue box, er aething related to .eakiiIg. Iiood luck.

belly, IM/Ol/WS 6:11 il l'[he _ r . . I " t II' looked at the desk, it's 6:11 ill, an hoor befere I " to School. I pic' the receiver up. Is this JOOn ItKee? asked the caller urgent!,. Yes, I replied half asleep. 'Yoo better get rid of yoor printwts mit yoor stuff III disks, you're !JIIIII get a visit lIithin the next 20 IiNltes the kid -said. He IuIg up. I " t nervws. The pilllle rangagain, JOOn tJiis is Jil, Greg just " t busted and his brother has been callilJg II' all of his frim III a sheet Greg had. Did he call you? Yes he did, I said. Yoo better believe it, because loo're !JIIIII get nailed !lith the rest of us. Get rid of everything, bum it. I to IYSelf, .t did I em to lake thellllllt Ie? Codes? 1m tiE, have to oorn every thing pertaining to i l l e g a l l l r ~ . I lIaS panic-stricken. I ."t i t together and I8It ootside and burned 1t, d i ~ d J f ' i n t w t s , everything. As I lIaS returning to IY hwse, I lllldered if urey had a tap III IY line. Thephme r. nother tile. .1\ no. Il1o is it IIOII? I llent in and lIlSIII!I'edit, lilly to be told April Fools! Click. 1'IIeNo W. . . . . Not KJdd. . . . Dept. y.. , . . . . . . . . . . . . ..u

COtlECT ONLY SERVICE (INMATE SERVICE)

Contact your Michigan Bell Inmate Communications Specialist for Information regarding newservice, changes or additions.CALL TOLL FREE: 1 800 482-0666

THE COST EFFICIENT SYSTEM for areas 'serviced by Michigan Bell. @Michigan Bell2-30


7/8

ALLIANCE Teleconferencing Services Continued from page ~ - 2 6 over of the ca.ands. After the 10900 recording, c h ~ the nuar of locatims for yoor cmference. ChooSe bell* IS locatlms, as BY 1Jeq)1e useAlliance, and using lOre locatims than a v a i l ~ l e results in "no cmferencefacilities available nl*". To ~ h a n ~ yoor choIce d I ~ 1 a t, or to go OOIIiIrdhit a I. To add a nulber Wille In cmtrollOde dIal 1+ the phme nulber.To dial internatimal dial 1+011 +the phme nulber. Passing cmtrol candooe by dIalIng 6 plus the nulll!er, of the persoo, the cooference yoo~ I s h to ~ a s s cootroi. Then by hI ~ t I n g a yoo rem n,t h ~ cmferel)ce, or byJust hangIng up yoo leave. lIIen In the cooference dIalIng a wIll returnYOO to cootrol lOde. " "'lIIen cmferees hang up, a WIll ~ e a r d . T h ~ c m ~ r o l l e r alsohears the phme nulber of persoo who left. HIttIng the 'Illedlately callsthe departed back. There is no way to d r ~ ~ l e frOl cmference otherthen ,getting a c m f ~ r e n ~ e operator to 00 it or by bll*ing 2600 hertzlIne., ~ r , tl)Is,"'Ill drOP, each and every persoo 00 a trunk USIngIn-band sI!JIalIng. HittIng a 0 In cmtrol lOde a cmference~ r a t o r , hl*ever, she/he takes,cmtroJ ~ f o r e helshe answers, so mly dothis,when yoo knl* w h ~ t yoo are,doll!9' Hlttlll9 a 9 In c m t r o l l O d e , r e c J l ~ t s a sIlent attendant lIstener lIne. AccordIng to the DeIm thIS ~ t l m allONS, the cor:ttr9ller to hear the tmes and phme _s 9f p e q l l ~ h ~ i n g up w h I l ~ he IS In cmtroJ lOde. Cmference op's,cJall ~ I S flllCtlm IS forsecretanes and such to lIsten to, but not partlClpate In, cmferences fornote taking purPOSes.If these instructims sound cmfusing, doo't worry. ReIeIber, the entirecmference is accOlPal)ied by extreaely user f r i ~ d l y 1e55age5. RecentIY"mweekends ,or late nlllt, aany t ~ l c O l hobbyIStS h ~ v e had,probleas W I ~ t r a n ~ f e r n n g cmtrol, Instead gettIng a recordIng Not aVaIlable at thIStile". Also, sililarly, int.ernatimal dialing is SOIetiles unavailable.Generally -JOOX does this less often, then -200X next.

~ R S 00e lUSt always be prepared for hsteners Never me cmferences. Ifme is discussing " ~ t i o n a b l e " tatters 00 a cmference, last nales andphone nulbers shoold t


8/8

People Express Cont inued from page 2-25easy to find yoorself: 1lt/-336-Denver, SYR-797-Syracuse.). If ~ l e ' s really wishes to encoorage the systet'S usage, it shoold also have a tollfree ndler. In the end this service will result in coofusioo and re

2600: the hacker quarterly (volume 2, number 5, may 1985)

Documents