
  
  
  
  
  
  
         ---------------------
         the phreak's notebook
         ---------------------
            []  part ii  []
  
  
 presented by :  []  jacknife  [] 014
------------------------------------------------
  
  
  
                             touch-tone & free calls
  
 there are several ways to make free calls (sprint, mci, etc.) using a rotary
 phone.  they are:

  1. use a number that accepts voice as well as dtmf.  such a # is (800)
     521-xxxx.  as of writing this, a code was xx6x7x9x.
      a) if using voice, wait for the computer to say, "authorization #,
         please."  then say each digit slowly, it will beep after each digit is
         said. after every group of digits, it will repeat what you have said,
         then say yes if it is correct, otherwise say no.  if the access code is
         correct, it will thank you and ask for the destination #, then say the
         area code + number as above. another such # is (800) xx5- 8xxx, which
         has a 6 digit access code. (note:  if using touch-tone on this #, enter
         the code immediately after the tone stops.)
  
  2.  hook up a touch-tone fone into your rotary fone.  attach the red wire from
      the touch-tone fone to the "r" terminal inside the fone on the network
      box.  then hook the green wire to the "b" terminal. to use this dial the #
      using rotary & then use the touch-tone for the codes. (don't hang up the
      rotary fone while doing this though!)  if this doesn't work then reverse
      the 2 wires.  (note: if your line can accept touch-tone but you have a
      rotary fone then you can hook up a tone fone directly for all calls but
      this usually isn't the case.) such as radio shack's 43-138.
  
  
  this is the tone matrix for a box which generates tones that operators use to
 dial..rotary works as well, on operator lines, but this is technological(!).
 now i agree with the opinion of a well known phreak that 'boxing' is/will be
 for the most part dead, but this is tradition... first,you dial dir.asst, or an
 oper. etc , then you blast the line with a 2600hz tone. this gives you the
 line, this is also how ma bell tracks down blue boxers... there  are 2600hz
 detectors s y stems, an  even on old #4 crossbars... ondce on a oper.trunk
 line, you use your blue box/rotary tdo dial...
  
 so,  if you use 2600hz, which is necess ary, unless you are *very* careful, you
 will be snagged.
  
 finally, this is what you read! so long and hard for:
  
 700   :   1   :   2   :   4 :   7   : 11   :
 900   :   +   :   3   :   5 :   8   : 12   :
 1100  :   +   :   +   :   6 :   9   : kp   :
 1300  :   +   :   +   :   + :  10   : kp2  :
 1500  :   +   :   +   :   + :   +   : st   :
       : 700  :  900  : 1100  : 1300 : 1500 :
  
 use kp to start a call, and st to stop, with the beloved 2600hz tone to dis
 connect. i also hear that 2 600hz resets sprint nodes and gives you teir
 initial tone..
 
 now, if you're wondering about what to call from an operator trunk, here are
 some goodies to help you out:
  
 xxx+101 - toll  switching
 xxx+121 - local operator
 xxx+131 - information
 xxx+141 - rate & route
 xxx+181 - coin refund operator
 xxx+11501 - mobile operator
 xxx+11521 - mobile operator
 xxx+11511 - conference operator
  
 these work with rotary or oper ators to nes, but only on oper. trunk lr*zii)x
 thanks for listening!
  
                              blue boxing - part ii
  
      while  reading the fine article on the blue box i saw that there a lot of
 data left out of the do cument.   i hope this a dds, in some small way, to the
 information.
  
      first the tones. while all the information is correct, the timing specs
 were not included . the tone pairs are to remain on for 1/10 sec. with 1/10
 sec. of slience between digits. the 'kp' tones should be sent for 2/10 sec. a
 way to defeat the 2600hz traps is to send a long with t he 2600hz some pink
 noise(most of the energy in this signal sh ould be above 3000hz, this si deal
 won't make it over the toll network, but should carry as far as your local toll
 center) so that the traps won't find 'pure' 260 0hz on the trunk. this i s not
 a perfectly safe way to box, but it should slow down the discovery.
  
      as to use, the first thing youn eed to understand is that there are two(2)
 types of toll completing trunk, inward and outward. the names are reference to
 the office that is switc hing the call(the toll center that serves the wats
 line you cal led) and each type of trunk has a different class of service. from
 an inward toll completing trunk, you can reach the different ser vice operators
 , the toll test board, and the inwar  operator. some offices also allow remote
 testing and it is in these offices that you can access the outward to ll
 completing trunks. the out ward trunks allow you to make verification
 (emergency) calls, do service monitoring(tapping), stack trunks(busy out all
 trunks between la and nyc), enable and disable tsps positions, and in some
 cases(on some 4a's) issue temporary rer outing instructio ns( send all calls
 from la to nyc via miam i, boston, or any other class 5 office or offices).
 both type of trunk allow you to place a 'standard' call with a box.
  
      in some offices, mostly the small ones with a toll test board that is
 unattended at night and on weekends, you can e to an outward toll completing
 trunk as well as performing other test and routing functions. you do this by
 using three digit codes that are invalid exchang es(not of the pattern nnx[see
 note 1]). during the sixites the codes used were fairly standard and
 consistent, however when the b oxes became popular and the phreaks started
 doing things like routing all calls from dallas to ft. worth via washtngton
 d.c. mother started changing the test codes on a random(as far as i know )
 basis. what i would suggest is that everybody interested in doing this sort of
 thing pick out a nice quiet little office somewhere and work on discovering the
 codes acceptable to that office. bering plan area (npa,  also known as area
 code) has an office desiignated as its master office.  this office cont rols
 all of the other toll offices in the area as well as serving as a concentration
 point for most out of area calls. to access the services of a non-master office
 you need it's 'city  code', this is a  three(3) digit code that is of the form
 0xx,  and is sent after the area code [see note 2 ].  as an example,  the 'city
 code' for canton, ohio is 0xx; thus to reach the inward operator in canton, you
 would send 'kp-2xx-0xx-1xx-st' where as if you wanted the inward operator in
 clevela nd, you would send 'kp-2xx-1xx-st'. the  reason this is necessary is
 that the operator in cleveland can't verify a number in canton, so if you want
 to verify someone in canton you need the city code.  also, most area master
 off ices have dedicated data trunks to the network control center and thus
 don't  accept test and rerouting comman ds over the switched net-work. in
 conclusion,  the switching netw ork will do a lot more for you then connect you
 to people and the small offices that require a 'city code' are the type of
 office to try to break.
  
           nickie haflinger, the coven.
  
      note 1:   the  normal  format  for telephone numbers  is as follows:
 nyn/nnx-xxxx.  where n=any digit exce pt 1 and 0; y=0 or 1 , and x=any digit.
 yes i know that in some area codes the nnx format has changed to nxx .  this is
 a new occurrence and only occur where there has be an outrageous population
 increase in the last few years and all  of the funny exchanges are connected
 directly to master offices and thus don't conflict with the 'city code' for mat
  
      note 2:   you can obtain the 'city code' for a number by calling rate and
 route and asking for the 'numbers route' to nyn/nnx(i.e. 914/725).
  
  
  
  
                                   a/c listings
  
  
      this is a listing of all the area codes in north america, and what area of
 the continent that they serve:
 
  
     201 --- north new jersey
     202 --- washington dc
     203 --- connecticut
     204 --- manitoba
     205 --- alabama
     206 --- western washington
     207 --- maine
     20x --- south idaho
     209 --- stockton area california
     212 --- new york/new york city
     213 --- los angelos california
     214 --- northeast texas
     215 --- southeast pennsylvania
     216 --- northeast ohio
     217 --- central illinois
     218 --- north minnesota
     219 --- north indiana
     301 --- maryland
     302 --- deleware
     303 --- colorado
     304 --- west virginia
     305 --- southeast florida
     306 --- saskatchewan
     307 --- wyoming
     308 --- west nebraska
     309 --- north central illinois
     312 --- northeast illinois
     313 --- east michigan
     314 --- east missouri
     315 --- north central new york
     316 --- south kansas
     317 --- central indiana
     318 --- louisiana except southwest
     319 --- east iowa
     401 --- rhode island
     402 --- east nebraska
     403 --- alberta
     404 --- north georgia
     405 --- oklahoma except northeast
     406 --- montana
     407 ---
     408 --- ventura california
     409 --- southwest texas
     412 --- southwest pennsylvania
     413 --- west massechusettes
     414 --- east wisconson
     415 --- san fransisco area california
     416 --- toronto area canada
     417 --- southwest missouri
     418 --- quebec city area quebec
     419 --- northwest ohio
     501 --- arkansas
     502 --- west kentucky
     503 --- oregon
     504 --- southwest louisiana
     505 --- new mexico
     506 --- new brunswick
     507 --- south minnesota
     508 ---
     509 --- eastern washington
     512 --- south texas
     513 --- southwes602 --- arizona
     603 --- new hampshire
     604 --- british columbia
     605 --- south dakota
     606 --- east kentucky
     607 --- south central new york
     608 --- southwest wisconson
     609 --- south new jersey
     612 --- central minnesota
     613 --- ottawa area ontario
     614 --- east central ohio
     615 --- east tennessee
     616 --- west michigan
     617 --- east massachusettes
     618 --- south illinois
     619 --- southern california
     701 --- north dakota
     702 --- nevada
     703 --- virginia except southeast
     704 --- west north carolina
     705 --- east ontario
     706 --- northwest mexico
     707 --- northwest california
     708 ---
     709 --- new foundland
     712 --- west iowa
   ' 713 --- southeast texas/houston
     714 --- orange county california
     715 --- north wisconson
     716 --- west new york
     717 --- east central pennsylvania
     718 ---
     719 ---
     800 --- wide area telecommunication ser.
     801 --- utah
     802 --- vermont
     803 --- south carolina
     804 --- southwest virginia
     805 --- thousand oaks area california
     806 --- north texas
     807 --- west ontario
     808 --- hawaii
     809 --- bahamas caribean
     812 --- south indiana
     813 --- southwest florida
     814 --- northwest central pennsylvania
     815 --- northwest illinois
     816 --- north missouri
     817 --- north central texas
     818 --- north la
     819 --- west quebec
     900 --- dial it
     901 --- west tennessee
     902 --- nova scotia
     903 ---
     904 --- north west florida
     905 --- mexico city
     906 --- michigan peninsula
     907 --- alaska
     908 ---
     909 ---
     912 --- south georgia
     913 --- north kansas
     914 --- southeast new york
     915 --- west texas
     916 --- northeast california
     917 ---
     918 --- northeast oklahoma
     919 --- east north carolina
  
  
 -------------------------------------------------------------------------------
 
 downloaded from just say yes. 2 lines, more than 500 files online!
          full access on first call. 415-922-2008 casfa 
