ITS
Internal Theft Syndicate

-------------------------
File ITS-PH1.TXT
Released November 6, 1992
-------------------------

General:

An informative text file for the modem users of the 305 Area, written by
Devine Intervention.  Contact via A State of Devolution BBS is possible.

State of Devolution
ITS WHQ
305-722-0277
500 megs
USR/HST/DS/14.4k
NUP:DEVOLUTION
Sysop: Marauder


New Product Release Information:

The ITS program team is hard at work on a new type of Hacker. Previous
hackers, in the author's opinion, do not have enough flexibility and
controllability.  It is this shortcoming that prompted ITS to begin work
on a new hacker.  Introducing MultiHack800, coming in late 1992 to a BBS
near you.  Look for:

        + Increased security:
                You can select your own screen to display during hack hours,
                to avoid suspicion by people who may be able to see the
                display.  Previous hackers did not use this, or only used
                TheDraw binary formats.

        + Increased controllability:
                You can select START and STOP times with full DOS command-
                line control.  Previous hackers did not return to DOS when
                the END time.

        + More Attempt control:
                While hacking multiple extenders, it was not possible to
                closly monitor the number of attempts made to each in a
                certain time period.  MultiHack800 will allow you to select
                a maxium number of tries for EACH extender.

        + Multi Com-Port use:
                Version 2.0 will incorporate multi-port MultiHacking for
                greater results in less time.

        + More Tamper Resistant:
                The operater can select from a variety of results if the Modem
                sends a NO DIAL TONE reading.  This is handy if you are using
                someone elses phone line, or are hacking from work/school/
                neighbors.
                
        + Easier to Use:
                The MultiHack800 will incorporate a better GUI than most
                hackers that are out today.


               

File Overview:

I was very hesitant to release this file, or even *make* it in the first
place.  It was the serious lack of information in the 305 area that prompted
me to begin work on this project.  It was the never-ending questions posted
on my BBS that actually MADE me do it.

I chose to release this text under the ITS logo for several reasons.  For
one, I like the ITS logo and it represents a lot of work in the past.  For
those of you who do not know ITS, it's an old washed-up crack group with
such major releases as Aces of the Pacific and Ultima VII, Hyperspeed, Where
in Time is Carmen Sandiago, Rider of Rohan, among many others.

Unfortunately, ITS failed, like many of the other small crack groups of our
time.  The failure can be blamed mostly because of a lack of distribution.
I may get the urge to try to re-kindle the small flame of the group at a
later date, but for now, this small series of text files will have to suffice
to keep the name alive.

As always, if you are interested in joining ITS, do not hesitate to find an
old application laying around and send it in.

Purpose:

The purpose of this file and the rest in it's series is to help enlighten
the computer users of our time with the knowledge and skill necessary to
make free long distance phone calls from the 305 area.  If you are not
located in the 305 area, don't dispair, you will still find this file
very useful.  I will not be able to offer support to 950s outside of
my calling area.

This, like all text files, is intended for informational purposes ONLY, and
you should not try to do any of this yourself.  The information contained
herein is illegal in nature and may cause you great legal problems if
tried.  In other words, It's not my fault if you get yourself into trouble;
I'm telling you NOT to do it.  Use at your own risk.

Scope:

This textfile is intended to be the first in a small series of files
documenting the results of the trials and errors associated with making
'ph'ree long distance calls.  I will rely heavily on your feedback for the
making of the rest of the files in the series.  In other words, if you do
try this, you must try to let me know how well it went, either by a direct
call to the BBS, or by relaying the information through a friend.

We will deal only with the 950 extenders in this text, since these are in
the local 305 calling area, and when used correctly, can provide reliable
free long distance service.  It is beyond the scope of this text for me to
explain what a 950 is.  If you are unsure what you are dealing with, please
obtain and read a textfile explaining 950s.  There are plenty of them out
there.  If you are unsure as to what an extender is, then this text is not
for you; you have a lot of learning to do.

ITS may, at some point issue a file in this series convering 800s, but not
much will be said about them in this text.

Vocabulary:

The vocabluary of this text is geared toward elementary phreaking, however
a basic fundamental knowledge is assumed.  You will need to be familiar
with the following terms for this text to be of any use to you.

TelCo     Telephone Company.
950       A type of local extender. Can be dialed for free from Payphone.
ACN       Area Code and Number that you are trying to dial.
Preak     Obtaining illegal free or reduced rate long distance service.
Hack      Finding access codes to make phreaking possible.
Extender  The 950 or 1-800 that you dial to get free long distance.
Target    The 'fake' number or carrier that you use when hacking.

A brief description has been given, however, it is beyond the scope of this
text to educate the user as to the basic fundamentals of phreaking.  Please
consult your local BBS for basic text files for this information.

Technical Problems:

This is a list of common errors associated with the local 950s. If you are
experiencing technical problems with using 950s, you will find this information
to be of great value to you.  Please read.

1.  Dialing Speed Problems:

        a. Problem Determination

        Modems of today, unlike yesteryear, are capable of extremely fast
        dialing rates.  Unfortunately, not all TelCo equipment can handle
        such rates.  The USR/HST is capable of mind-boggling dialing speeds.
        
        It is very important that you use the correct dialing speeds when
        dealing with the local 950s.  Dialing too fast will not save you time,
        but will only cause you trouble.  Dialing too slow is definately
        better than dialing too fast.

        You can change most modem's dialing speeds with a simple AT command:

        ATS11=50

        The S11 register controls the dialing speed on most modems.  On the USR
        HST/DS, a speed of 50 is fast enough for comfort, but not too fast for
        the local 950s.

        If you are not getting through on what you *know* is a valid code, then
        try slowing down the dialing speed.  Most local 950s use older, less
        modern equipment that does not respond well to fast dialing sequences.
        They will tell you your code is invalid, when in fact, it may be
        very valid, you are just dialing too fast for the equipment.

        b.  "Tweaking" Dialing speeds

        It is likely that you will want your modem to dial at the fastest
        possible rate, yet still not so fast as to not be compatible with the
        TelCo equipment.  It will take trial and error to find out the
        fastest dialing speed for your modem/extender combination.  I find that
        ATS11=50 is plenty fast for 0223 using the HST.

        Once you have a valid code, you can begin 'tweaking' the dialing speed.
        Try your working code at a slower pace, then try at faster and
        faster.  Take it just to the point at which it won't work anyone, then
        add about 5 to the ATS11 number for a safe margin.

        The faster you dial, the more attempts per hour you will get with any
        hacking program.

2.  Dialing sequences

        I cannot stress enough the importance of correct dialing sequences.
        It's very simple:  An erroneous dialing sequence will NOT work.

        Most extenders will require you to enter the following information:

        950-XXXX                (The extender itself)
        XXXXXXXX                (A 5-25 digit code for access)
        (1)-XXX-XXX-XXXX        (The ACN. Some require a '1'; some don't)
        XXXX                    (A 3-5 digit personal id code; rare)

        It is up to you to find out what order your 950 wants the information
        in.  The only thing I can tell you for sure, is that you'll always
        have to dial the 950 first.

        Here's the most common order:

        950-XXXX  [Pause]  XXXXXX  [Pause]  XXX-XXX-XXXX

        1. 950
        2. Access Code
        3. ACN

        I will tell you the orders of the known 950s in the area.  As new
        950s show up, we will have to deal with new dialing sequences.

3.  Modem Compatibility

        I have not found many Hacking/Scanning programs to be compatible
        with a great range of modems.  Most, however, are compatible with
        the USR/HST family.  If you have an HST or DS, you don't have much
        to worry about, however, if you have a cheaper, generic modem, look
        out.  I have tested a great many scan/hack programs on cheap modems
        and have not had much succes.  Look for ITS to release a new HACK
        program that will fill the gap to this compatibility problem.

        Until then, all I can say is, if your modem doesn't seem to be
        compatible with the hack/scan program, try another program.


Local 950s and Hacking:

ITS frequently scans the entire 950 prefix for tones, and will report on
the findings in this series of texts.  Please report your own findings if
they are new, or if they are not consistant with those published here.


950 Ettiquette:

For the safest usage of 950s, careful following of the steps listed below
is required.  If you get greedy and deviate, you may get busted:

        1.  Hack only late at night.  Weekends are best.
        2.  Use the codes only after about 8 p.m.
        3.  Distribute the codes as soon as you find them.
        4.  When hacking, be sure to use multiple targets.
       *5.  Be very careful of the system you connect to.  See below.
        6.  If 950 'security' contacts you, IMMEDIATELY stop using it
            and report this to ITS WHQ for special distribution.

*Some 950s, once on to you, will give your system a Carrier detect, and will
pretend to be the sysop of the connected system.  They may try to chat you
and get your voice number.  If you suspect that ANYTHING is out of the
ordinary, IMMEDIATELY drop carrier, and suspend usage of that 950 for at least
a week.



----------------------------------------
Phreaker's Domain:
The Known 305-950s, as published by ITS:
Range 950-0000 to 950-2000
----------------------------------------



1.      950-0223

        My personal favorite.  Very easy to use and reliable.
        Owned by Cable & Wireless.

        Usage:
        *67,950-0223,,XXXXXX,ACN

        A six-digit code is necessary.

        High-return Templates:
        915XXX  =  About 1 Code per 108 Attempts.
        912XXX  =  About 1 Code per 76  Attempts.
        213XXX  =  About 1 Code per 365 Attempts.
        XXXXXX  =  About 1 Code per 832 Attempts.
        

        The 0223 seems to be a reliable means to free long distance when
        other extenders are not available.  The codes will not last long.
        I have found that they generally only last a few hours after being
        discovered.

        There have been a few known busts associated with this 950.  Careful
        usage is of upmost importance.  Don't get greedy.

        Special Information:

        I have noticed that certain BBSs that I dial quite often can no longer
        be dialed with this 950.  It is the opinion of ITS that there exists
        a 'blacklist', if you will, of numbers that this 950 will not dial.
        If you try a code and it does not work, try another target.  Here is
        a list of known blacklisted numbers:

        216-273-1527    Elements of Evil BBS
        916-729-2112    The Welfare Dept.
        408-723-8260    Fade to Black

        This list is bound to grow, so if you have some numbers that you would
        like to add, please let us know.
        

2.      950-0370

        ITS does not know who owns this 950.  Please report if you have
        knowledge of this 950.

        Usage:
        *67,950-0370,,XXXXXXX,ACN,(XXXX)

        A seven digit code is necessary.

        This extender will terminate the call as soon as it detects any
        invalid input.

        No High-Return templates are available for this 950 at this time.

        This Extender may require an additional code at the end of the
        dialing sequence.  Sucessful hacking has not been accomplished by
        ITS at this time.  Your input is welcomed.


3.      950-1008


        ITS does not know who owns this 950.  Please report if you have
        knowledge of this 950.

        Usage:
        *67,950-1008,,XXXXXXX,ACN

        A seven digit code is necessary.

        No High-Return templates are available for this 950 at this time.

        Voice message is given upon invalid code entry.

        This looks to be a promising 950.  If you hack it, please let us
        know.


4.      950-0846

        ITS does not know who owns this 950.  Please report if you have
        knowledge of this 950.

        Usage:
        *67,950-0846,,XXXXXXX,ACN

        A seven digit code is necessary.

        No High-Return templates are available for this 950 at this time.

        Busy signal given upon invalid code entry.

        This looks to be a promising 950. If you hack it, please let us
        know.


5.      950-1044

        This may well be the most promising 950 of the bunch.

        Owned by:

        All-Net Communications Services, Inc.
        P.O. Box 2070
        Birmingham, MI  45274

        Usage: (Domestic)
        *67,950-1044,,XXXXXXXXXXXX,0+ACN,(XXXX)

        Usage: (International)

        *67,950-1044,,XXXXXXXXXXXX,0+Country+City+PhoneNumber+#,(XXXX)

        A 12-digit code is necessary.  A four digit user-id code may
        be required at the end of the dialing sequence, if a third tone
        is heard.

        This 950 can also be accessed with:

        1-800-738-1444


        No High-Return templates are available for this 950 at this time.

        Busy signal given upon invalid code entry.


6.      950-1782


        ITS does not know who owns this 950.  Please report if you have
        knowledge of this 950.

        Usage:
        Unknown

        This extender will terminate the call as soon as it detects any
        invalid input.

        No High-Return templates are available for this 950 at this time.

        This Extender may require an additional code at the end of the
        dialing sequence.  Sucessful hacking has not been accomplished by
        ITS at this time.  Your input is welcomed.



This concludes the fist text file in a small series to be released by ITS
later this year.  We look forward to hearing your comments and success
stories with the 950s listed above.  Be Careful, and never give up the
faith.

Special thanks goes to Poseidon [MIRAGE] and Drakkhar [iCE], who provided
some of the information published herein.  Thanks guys.



Devine Intervention
C/O State of Devolution BBS
305.722.0277
NUP:DEVOLUTION
