--------------------- the phreak's notebook --------------------- [] part ii [] presented by : [] jacknife [] 014 ------------------------------------------------ touch-tone & free calls there are several ways to make free calls (sprint, mci, etc.) using a rotary phone. they are: 1. use a number that accepts voice as well as dtmf. such a # is (800) 521-xxxx. as of writing this, a code was xx6x7x9x. a) if using voice, wait for the computer to say, "authorization #, please." then say each digit slowly, it will beep after each digit is said. after every group of digits, it will repeat what you have said, then say yes if it is correct, otherwise say no. if the access code is correct, it will thank you and ask for the destination #, then say the area code + number as above. another such # is (800) xx5- 8xxx, which has a 6 digit access code. (note: if using touch-tone on this #, enter the code immediately after the tone stops.) 2. hook up a touch-tone fone into your rotary fone. attach the red wire from the touch-tone fone to the "r" terminal inside the fone on the network box. then hook the green wire to the "b" terminal. to use this dial the # using rotary & then use the touch-tone for the codes. (don't hang up the rotary fone while doing this though!) if this doesn't work then reverse the 2 wires. (note: if your line can accept touch-tone but you have a rotary fone then you can hook up a tone fone directly for all calls but this usually isn't the case.) such as radio shack's 43-138. this is the tone matrix for a box which generates tones that operators use to dial..rotary works as well, on operator lines, but this is technological(!). now i agree with the opinion of a well known phreak that 'boxing' is/will be for the most part dead, but this is tradition... first,you dial dir.asst, or an oper. etc , then you blast the line with a 2600hz tone. this gives you the line, this is also how ma bell tracks down blue boxers... there are 2600hz detectors s y stems, an even on old #4 crossbars... ondce on a oper.trunk line, you use your blue box/rotary tdo dial... so, if you use 2600hz, which is necess ary, unless you are *very* careful, you will be snagged. finally, this is what you read! so long and hard for: 700 : 1 : 2 : 4 : 7 : 11 : 900 : + : 3 : 5 : 8 : 12 : 1100 : + : + : 6 : 9 : kp : 1300 : + : + : + : 10 : kp2 : 1500 : + : + : + : + : st : : 700 : 900 : 1100 : 1300 : 1500 : use kp to start a call, and st to stop, with the beloved 2600hz tone to dis connect. i also hear that 2 600hz resets sprint nodes and gives you teir initial tone.. now, if you're wondering about what to call from an operator trunk, here are some goodies to help you out: xxx+101 - toll switching xxx+121 - local operator xxx+131 - information xxx+141 - rate & route xxx+181 - coin refund operator xxx+11501 - mobile operator xxx+11521 - mobile operator xxx+11511 - conference operator these work with rotary or oper ators to nes, but only on oper. trunk lr*zii)x thanks for listening! blue boxing - part ii while reading the fine article on the blue box i saw that there a lot of data left out of the do cument. i hope this a dds, in some small way, to the information. first the tones. while all the information is correct, the timing specs were not included . the tone pairs are to remain on for 1/10 sec. with 1/10 sec. of slience between digits. the 'kp' tones should be sent for 2/10 sec. a way to defeat the 2600hz traps is to send a long with t he 2600hz some pink noise(most of the energy in this signal sh ould be above 3000hz, this si deal won't make it over the toll network, but should carry as far as your local toll center) so that the traps won't find 'pure' 260 0hz on the trunk. this i s not a perfectly safe way to box, but it should slow down the discovery. as to use, the first thing youn eed to understand is that there are two(2) types of toll completing trunk, inward and outward. the names are reference to the office that is switc hing the call(the toll center that serves the wats line you cal led) and each type of trunk has a different class of service. from an inward toll completing trunk, you can reach the different ser vice operators , the toll test board, and the inwar operator. some offices also allow remote testing and it is in these offices that you can access the outward to ll completing trunks. the out ward trunks allow you to make verification (emergency) calls, do service monitoring(tapping), stack trunks(busy out all trunks between la and nyc), enable and disable tsps positions, and in some cases(on some 4a's) issue temporary rer outing instructio ns( send all calls from la to nyc via miam i, boston, or any other class 5 office or offices). both type of trunk allow you to place a 'standard' call with a box. in some offices, mostly the small ones with a toll test board that is unattended at night and on weekends, you cane to an outward toll completing trunk as well as performing other test and routing functions. you do this by using three digit codes that are invalid exchang es(not of the pattern nnx[see note 1]). during the sixites the codes used were fairly standard and consistent, however when the b oxes became popular and the phreaks started doing things like routing all calls from dallas to ft. worth via washtngton d.c. mother started changing the test codes on a random(as far as i know ) basis. what i would suggest is that everybody interested in doing this sort of thing pick out a nice quiet little office somewhere and work on discovering the codes acceptable to that office. bering plan area (npa, also known as area code) has an office desiignated as its master office. this office cont rols all of the other toll offices in the area as well as serving as a concentration point for most out of area calls. to access the services of a non-master office you need it's 'city code', this is a three(3) digit code that is of the form 0xx, and is sent after the area code [see note 2 ]. as an example, the 'city code' for canton, ohio is 0xx; thus to reach the inward operator in canton, you would send 'kp-2xx-0xx-1xx-st' where as if you wanted the inward operator in clevela nd, you would send 'kp-2xx-1xx-st'. the reason this is necessary is that the operator in cleveland can't verify a number in canton, so if you want to verify someone in canton you need the city code. also, most area master off ices have dedicated data trunks to the network control center and thus don't accept test and rerouting comman ds over the switched net-work. in conclusion, the switching netw ork will do a lot more for you then connect you to people and the small offices that require a 'city code' are the type of office to try to break. nickie haflinger, the coven. note 1: the normal format for telephone numbers is as follows: nyn/nnx-xxxx. where n=any digit exce pt 1 and 0; y=0 or 1 , and x=any digit. yes i know that in some area codes the nnx format has changed to nxx . this is a new occurrence and only occur where there has be an outrageous population increase in the last few years and all of the funny exchanges are connected directly to master offices and thus don't conflict with the 'city code' for mat note 2: you can obtain the 'city code' for a number by calling rate and route and asking for the 'numbers route' to nyn/nnx(i.e. 914/725). a/c listings this is a listing of all the area codes in north america, and what area of the continent that they serve: 201 --- north new jersey 202 --- washington dc 203 --- connecticut 204 --- manitoba 205 --- alabama 206 --- western washington 207 --- maine 20x --- south idaho 209 --- stockton area california 212 --- new york/new york city 213 --- los angelos california 214 --- northeast texas 215 --- southeast pennsylvania 216 --- northeast ohio 217 --- central illinois 218 --- north minnesota 219 --- north indiana 301 --- maryland 302 --- deleware 303 --- colorado 304 --- west virginia 305 --- southeast florida 306 --- saskatchewan 307 --- wyoming 308 --- west nebraska 309 --- north central illinois 312 --- northeast illinois 313 --- east michigan 314 --- east missouri 315 --- north central new york 316 --- south kansas 317 --- central indiana 318 --- louisiana except southwest 319 --- east iowa 401 --- rhode island 402 --- east nebraska 403 --- alberta 404 --- north georgia 405 --- oklahoma except northeast 406 --- montana 407 --- 408 --- ventura california 409 --- southwest texas 412 --- southwest pennsylvania 413 --- west massechusettes 414 --- east wisconson 415 --- san fransisco area california 416 --- toronto area canada 417 --- southwest missouri 418 --- quebec city area quebec 419 --- northwest ohio 501 --- arkansas 502 --- west kentucky 503 --- oregon 504 --- southwest louisiana 505 --- new mexico 506 --- new brunswick 507 --- south minnesota 508 --- 509 --- eastern washington 512 --- south texas 513 --- southwes602 --- arizona 603 --- new hampshire 604 --- british columbia 605 --- south dakota 606 --- east kentucky 607 --- south central new york 608 --- southwest wisconson 609 --- south new jersey 612 --- central minnesota 613 --- ottawa area ontario 614 --- east central ohio 615 --- east tennessee 616 --- west michigan 617 --- east massachusettes 618 --- south illinois 619 --- southern california 701 --- north dakota 702 --- nevada 703 --- virginia except southeast 704 --- west north carolina 705 --- east ontario 706 --- northwest mexico 707 --- northwest california 708 --- 709 --- new foundland 712 --- west iowa ' 713 --- southeast texas/houston 714 --- orange county california 715 --- north wisconson 716 --- west new york 717 --- east central pennsylvania 718 --- 719 --- 800 --- wide area telecommunication ser. 801 --- utah 802 --- vermont 803 --- south carolina 804 --- southwest virginia 805 --- thousand oaks area california 806 --- north texas 807 --- west ontario 808 --- hawaii 809 --- bahamas caribean 812 --- south indiana 813 --- southwest florida 814 --- northwest central pennsylvania 815 --- northwest illinois 816 --- north missouri 817 --- north central texas 818 --- north la 819 --- west quebec 900 --- dial it 901 --- west tennessee 902 --- nova scotia 903 --- 904 --- north west florida 905 --- mexico city 906 --- michigan peninsula 907 --- alaska 908 --- 909 --- 912 --- south georgia 913 --- north kansas 914 --- southeast new york 915 --- west texas 916 --- northeast california 917 --- 918 --- northeast oklahoma 919 --- east north carolina ------------------------------------------------------------------------------- downloaded from just say yes. 2 lines, more than 500 files online! full access on first call. 415-922-2008 casfa