14 Digit Hacking Well boys and girls, it would seem my predictions of increased telco security has come true. In 1986 I predicted that within 2 years all of the telcos would move to the 14 digit format. This because of their inability to protect their systems from us - phreaks. Take Heart!! We're not dead yet. Those of you who have read my book, The Phreaker's Handbook or Phreak's Long Distance Phone Thieves have a handle on what's up. This is the news on increased telcom security as of Oct 1987. Allnet Allnet is going hog wild with their new software analysis package. They've cut the maximum amount of time you can stay on a code down to three days. It depends on when you whack it. They do not run the software on Fri, Sat, or Sun. So if you whack the code on Friday, it will stay good until Monday around 1 P.M. Pacific Standard Time. If you bang them during the week, you'll lose the code in less than 24 hours. Mci If your first love was the 5 digit Mci Node, say bye bye. They are slowly dismantling the local dialup network and keeping the 950-0222 nodes which incidentally are 14 digit At&t 0+ format. In the last year my return rates have dropped from 5 per hundred to 1 per 300. Rather pathetic. And that was multinode, multi destination hacking. Incidentally, another one of my innovations that came about in May of 1986 when they installed the first version of the monitoring software. Sprint You can start kissing off those 9 digit codes. Sprint's new FON system is totally 14 digits and can only be accessed thru an 800 number. For which there is a 55 cent surcharge most of which goes to At&t. Sprint is going to let Ma Bell provide their security for them. They say they aren't going to issue the 9 digit codes anymore. They aren't killing all the codes at once though. We still have time to play with Sprint. I think they're going to kick back and see what they results of the FON project. If for no reason other than the expense of 55cents just for the privilege of placing a call, I recommend everyone discontinue their Sprint accounts and go to another company. Incidentally, the "increased quality" of the new fiber optic network can't be that great when you consider that you have to connect and downconnect to your destination on the hold copper wire networks owned by your local telco. Hardly worth 55 cents. Metrophone I know of no one who's gotten a code off of Metro in over a year. This used to be the whore of the networks. She never said no. Now she never says yes. Skyline (mci) 950-1088 I've seen codes posted in remote areas for this service. Have not heard of, or been able to bag one code in the large metro areas. Mci appears to be killing this node and routing to the 1022 node again 14 digits. The problem of whacking 14 digit codes is that of possibilities. There are 14x14 possible combinations of numbers. This makes it practically, which any predictable regularity to hack out the code. We can resort to that old standard (created by me) of prefix hacking. The attached file is for the entire Southern California Area. It includes the area code and prefixes used here. They are all valid and courtesy of Pacific and General Telephone companies. These 6 digits will reduce the possibilities down to 8x8. This is a pain in the ass, but it is possible. This scenario will work with any telco that uses valid phone numbers as part of the code. DO NOT HACK YOUR LOCAL TELCO OR AT&T unless you're equipped to do it from a fortress phone (pay phone). Ess will pick up your actions at you'll have a phone truck in front of your house within 30 minutes. Trust me, I did it, and a knew better too. Nothing came of it other than I went in the bathroom and kicked myself in the ass for being so dumb! I want you to think of the prefix file as a chain file. Add all the prefixes in your local area to it, area codes too please. In a couple of months I want to see this thing back in the Southern California Area busting at the seams. Ok, what do we do with those companies that use bastardized routines for their codes. The Ustel format uses 527 for the 818 area. The new FON card uses 524 for 818. Both companies are now owned by Sprint so we can see a similarity in the thought processes here can't we? I'm starting a separate file with the first six digits of the Fon Card and Another one for the Ustel. US/Sprint is on the 9501033 node and uses the 0+ At&t format I've your partial to 800's go for the Fon's. I personally leave 800's alone. If you're inclined to cancel your Ustel or Sprint accounts, add your first six digits to the list and put it back in the archive file. This is the only way we're going to crack the bastards, group effort at data collection. There is one other possibility. The 14 digit code is the product of a formula called a "hashing formula" By entering the first 10 digits of the card it will generate a 4 digit security code. It also relates to the logical record location within the telco's computer system. If anyone has this formula, and has no love for the phone companies....get this sucker into circulation. Good luck guys...more updates available as the news developes. Bobo T. Hacker aka Robert Morgan.