k-17-(8)-01 OoO=o=oOO=o=O=OoO=o=oOO=o=O=OoO=o=oOO=o=O=> OoO=o=oOO=o=O=OoO=o=oOO=o=O=OoO=o=oOO=o=O=> OoO=o=oOO=o=O=> : -`- -`- OoO=o=oOO=o=O=> ; _|_--oOO--(_)--OOo--_|_ OoO=o=oOO=o=O=OoO=o=oOO=o=O=> | ˇ K-1ine Zine ! | OoO=o=oOO=o=O=> ! issue 17, volume 8 ˇ OoO=o=oOO=o=O=OoO=o=oOO=o=O=> ---------O^O---- OoO=o=oOO=o=O=OoO=o=oOO=o=O=> ;. |__|__| OoO=o=oOO=o=O=OoO=o=oOO=o=O=OoO=o=oOO=o=O=> || || OoO=o=oOO=o=O=OoO=o=oOO=o=O=OoO=o=oOO=o=O=> ooO Ooo OoO=o=oOO=o=O= OoO=o=oOO=o=O=OoO=o=oOO=o=O=> OoO=o=oOO=o=O=OoO=o=oOO=o=O=LoveO=o=oOO=o=O=OoO=o=> ;`-.> July 2001 <=o=O=o=O=o=O 'Eternal Response' Freedom is slavery. Ignorance is strength. War is peace. -- George Orwell _____________________________________________________________________________ » .- Words from the Editor -. « | *: [-] Introduction .......................................... The Clone :* *: (-) Contact Information ................................... The Clone :* *: (-) Affiliate Web-Links ................................... Nettwerked :* *: (-) Advertisment .......................................... HackerSalvage:* *: (-) Advertisment .......................................... FlipperSmack :* *: (-) Advertisment .......................................... Nettwerked :* *: (-) Link of the Month ..................................... The Clone :* *: (-) K-1ine Mirrors ........................................ The Clone :* ____________________________________________________________________________ » .- Documents -. « | *: (x) 'Canadian COCOT Unrestricted Line Exploit' (update).... The Clone :* *: (x) 'Def Con 9, Destination: home' ........................ p_bang :* *: (x) 'Caller ID Basics' .................................... M. Slawson :* *: (x) 'Project: INWATS; 909-6000 | 909-9000 Suffix Skan' .... The Clone :* _____________________________________________________________________________ » .- Conclusion -. « | *: [-] Credits ............................................... The Clone :* *: [-] Shouts ................................................ The Clone :* _____________________________________________________________________________ - Introduction: Weoooo!@#, it's that time again - fo attdah issue of K-1ine 'zine. I've been having a great fuckin' summer... went to Def Con (#9) once again this year (see: www.nettwerked.net/Nettwerked_Movie.html) and met a ton of cool people, and a couple uncool people. I helped Pinguino with the Flippersmack table and we managed to help spread da word about Flippersmack AND K-1ine zine. The minute I came back from Vegas, I hopped on my computer and checked my e-mail; had an INBOX full of about 20 messages from the people I met -- checked the K-1ine mailing list and saw that over 30 people had joined my list makin' my total subscriber number to over 100. I apologize for not having a lot of articles for you all this month, but I suppose I have an excuse. ;-) Enjoy and contribute something! - The Clone -- --> Contact Information; =-=-=-=-=-=-==-=-=-= Comments/Questions/Submissions: theclone@hackcanada.com On IRC: irc.2600.net - #hackcanada, #teamphreak Shoot me an ICQ message: (UIN) 79198218 Check out my site: (Nettwerked) http://www.nettwerked.net --> =-=-=-=-=-=-==-=-=-= Affiliate Web-Links: =-=-=-=-=-=-==-=-=-= Damage Incorporated http://www.freeyellow.com/members6/damage-inc/index.html Grass Hopper Unit http://www.ghu.ca Hack Canada http://www.hackcanada.com H410G3N-dot-com http://www.h410g3n.com Phreak BC http://www.phreakbc.com PyroFreak http://www.multimania.com/pyrozine/index.html Team Phreak http://www.2600sucks.com/teamphreak TRAPFONE http://www.trapfone.com * * = featured sites of Nettwerked Incorporated --> Hello my fellow Anti-social widget medelling foilage covered birth canals! - -- Advertisment -- +++ WWW.HACKERSALVAGE.COM +++ HackerSalvage.com is a non-profit website dedicated to keeping old hardware in circulation. Many of us have piles of it sitting around but can't just toss it out. Here you can post computer items for sale or post a want ad for items you are looking for. A perfect place to get rid of perfectly good junk.... and get some new stuff to rebuild the pile. +++ +++ - Flippersmack AD - "Flippersmack is a culturemag for a penguin generation. What does this mean? Articles and reviews from your favorite writers. The low-down on what's fresh in tech, comics, movies, and music. Wrapped in a style all its own." "We will strive to release Flippersmack every week; a taste of insanity to inspire, inform, and entertain. From the creators of System Failure and Avalanche, there's a new zine out on the net: FLIPPERSMACK!" You can read the first twelve issues at: http://www.nettwerked.net/flippersmack001.txt http://www.nettwerked.net/flippersmack002.txt http://www.nettwerked.net/flippersmack003.txt http://www.nettwerked.net/flippersmack004.txt http://www.nettwerked.net/flippersmack005.txt http://www.nettwerked.net/flippersmack006.txt http://www.nettwerked.net/flippersmack007.txt http://www.nettwerked.net/flippersmack008.txt http://www.nettwerked.net/flippersmack009.txt http://www.nettwerked.net/flippersmack010.txt http://www.nettwerked.net/flippersmack011.txt http://www.nettwerked.net/flippersmack012.txt DEF CON 9 UPDATE: Scavenger Hunt Winners The winners were the "A-Team" which consisted of Circuit, Random Dent, and Fantom. Second place was "Exxodus" with Siviak, Wolfe, Banshee, and Texorist. They won original artwork and items from different vendors at DefCon. (... personally I thought the Exxodus team would win. After Banshee stripped completely naked in front of me (the judge) I would have awarded it to her team. Anyways... congrats to the A-Team on the victory ...) -- NEWS (July 20th) Def Con 9 coverage for 'Nettwerked: The Movie' is now online! Please download from the following mirrors: Disclaimer: If you're under 18, don't watch this video. Contains scenes of nudity and drunkin' hackers 'n' phreakers acting silly. * Mirror #1: http://lumo.eghetto.ca/~theclone/defcon9.wmv (the_p0pe's server, Nova Scotia, Canada, 4Mbps) * Mirror #2: http://www.pstis.com/defcon9.wmv (h410g3n's server, Edmonton, Canada, 4Mbps) * Mirror #3: http://www.h410g3n.com/defcon9.wmv (h410g3n's server, Leduc, Canada, 4Mbps) * Mirror #4: http://www.plappy.com/defcon.wmv (Plappy's server, Edmonton, Canada, 2Mbps) * Mirror #5: http://the.wiretapped.net/multimedia/defcon9.wmv (Wiretapped.net server, Sydney, Australia, 10Mbps) Help mirror my video! 32.1MB's, 103 kb's / sec, 43:36 minutes, Windows Media Format; MPEG-4. Send all new mirror URLs to: theclone@hackcanada.com Official Nettwerked Movie web-page: www.nettwerked.net/Nettwerked_Movie.html -- --=[ LINK OF THE MONTH ]=-- Every month I post one really great "link of the month" on every issue of K-1ine magazine. The link can be anything in the technology industry, music scene, rave scene, punk scene, or even a good article you read on a news site. I'll be taking submissions via e-mail, ICQ, or IRC right away; so get your links in and maybe you'll see it in the next issue of K-1ine! For the month of July, the link of the month is: http://www.hactivist.com/ Hacktivism at its best [submitted by: The Clone] -- K-1ine Mirrors: http://the.wiretapped.net/security/info/textfiles/k1ine/ "Wiretapped.net is an Australian site offering an archive of open source software, informational and advisory textfiles and radio/conference broadcasts covering the areas of network security, network operations, host integrity, cryptography and privacy. We aim to become the largest archive of this nature in the Asia/Pacific region through steady growth of our archives and regular updates to them (most updated nightly). We are proudly telehoused on a 10Mbit/sec connection by Connect.com.au using OneGuard hardware donated by eSec Limited. The archive, along with its sister site on the same machine, The AusMac Archive, generates between 10 and 60 gigabytes of outbound traffic daily. Wiretapped.net is hosted in Sydney, Australia." -- -= [ Canadian COCOT Unrestricted Line Exploit ] =- The Clone / 06.03.01 (updated: 07.07.01) -= [ index ] - disclaimer - - intro - - documentation - - research - - outro - - credit - - contact info - -= disclaimer: Do not attempt following exploit. Having telco security after you isn't a fun experience. If you attempt this exploit and do get caught, I am in no way responsible. intro: This document has been written to point out another payphone vulnerability that I recently discovered while experimenting with two types of COCOTs: the Canada Payphone Corporation / AT&T 'Elcotel Eclipse', and the Paytel Canada 'Protel'. documentation; For over two decades, payphone companies have been working ways to make their payphones more profitable, user-friendly, and secure both in the area of physical security (to protect from vandals) and line-security (to protect from phone phreakers). Starting in the late nineteen-eighties, payphone companies have started to be successful in stopping the exploitation of their phones by people using blueboxes, redboxes, beige boxes, and more recently NOS (not in service) INWATS numbers for unrestricted line dropping. In western Canada, where Telus has a monopoly over the payphone market, Telus has successfully been able to patch the unrestricted line problem. For example: you pick up the receiver on a Telus payphone, dial a toll free number (800) and the number you dialed happens to be out of service and hangs up on you; the payphone will automatically recognize this and seize the phone line. However, I've found that in the last two years that certain COCOTs have been vulnerable to line seizing exploitation. In March of 2000, I found that a large portion of the older AT&T Elcotel model 9520c's tend to have a lot of problems with seizing not-in-service calls. Line seizing exploitation on Elcotel 9520C's now looks as though it is virtually extinct because a majority of the older and all of the newer 9520C's have now been fixed by Canada Payphone Corporation (Elcotel's Canadian distributor). "Just when AT&T, Elcotel, Canada Payphone Corporation, and Paytel Canada thought the days of line seizing exploitation was over..." 1. In order to make this particular exploit work, you need to call an out-of-service/hanging number such as this one: 1-800-909-0261. 2. After the call connects, you will hear the line hang for approximately 15 seconds. 3. Now wait for another 5-10 seconds, and the line you called will hang and supervise. 4. At this point the vulnerable phone you are on will try to seize the line and make you redial the number. Instead, you will get a normal dial tone. 5. Immediately after getting the dialtone on the phone, enter any area code and any number you wish to call; local or long distance. 6. Your call will connect as if you had placed 25 cents into the payphone, and directly dialed the number. Q: "What does my caller identification information show on the received party's CID display?" A: If you called from any Paytel Canada COCOT, your CID info will show "Paytel Canada" and its assigned phone number. If you call from an Elcotel Eclipse COCOT, your CID information will show "Unknown Name" and its assigned phone number. - research: -Recommended COCOT research sites- (H/P) www.nettwerked.net www.hackcanada.com www.ghu.ca (Corporate) www.elcotel.com www.paytel.ca (.com) www.protel.com -Relevant COCOT images- Elcotel Eclipse image: www.nettwerked.net/eclipse.jpg Paytel 'Protel' image: www.nettwerked.net/paytel.jpg - outro: This file just goes to prove that one of the many exploits that worked on the payphones of yesterday DO still work on newer payphones of today, and likely tomorrow if COCOT manu- facturing and distribution companies don't get a clue as to how their own payphone equipment works. How long is it going to be before these telecom companies start adopting some sort of a standard for properly securing POTS-copper lines? Until then, phreaks around the nation will continue to exploit this ancient form of toll-fraud that hurts these companies revenues by millions of dollars each fookin' year! -- credit: Alan (780); thanks for the additional info. =] contact info: e-mail: theclone@hackcanada.com irc: irc.2600.net #cpu (key), #hackcanada, #teamphreak urls: www.nettwerked.net | www.2600sucks.com/teamphreak -endz- -- Def Con 9, Destination: home by: p_bang For those of you that haven't heard, (or have not seen the Nettwerked Movie), I seemed to have made an appearance at Defcon 9 this year. During the drunken ordeal, my wallet got stolen, and this is the short version of how I managed to travel back to Canada. Anyways, thanks to KK and Myself (rubi-con boys from Detroit), I got to the airport Monday morning, and the fun began... Got to the airport, had to get on my knees and BEG for a boarding pass. (they don't like you not having id) Plane was delayed 3 hours because SanFran was fogged over Had to beg AGAIN for a boarding pass to Vancouver, this time I was downright pissed off (they HATE giving boarding passes to anonymous people on international flights.) plane was delayed 3 hours because of fog plane's external lights were not working (electrical?) delayed another hour plane's 'air-tight' seal on door was not working (can someone say "oxygen-mask"?) delayed another FIVE (5) HOURS!!! -did I really want to board this flight? No. Plane CANCELLED because of 'technical issues' - Thank God. Finally, after midnight, we board, and take off. This plane at least had headlights, and a door that wouldn't suck me out into the darkness. around 2:00 or 3:00 - we land in Vancover. Ooh, my favourite: Customs. "What do you mean, you don't have any ID?" "My wallet got stolen, don't fuck with me. I'm not in the mood." "Excuse me, while I call my boss, I've never handled this type of situation before" "Go for it." --five minutes later, and with security guards surrounding me-- "Sir, you are going to be checked into 'immigration'." "Sure, but can your goons come with me? I feel insecure without them." "They are here to protect my Country." "YOUR Country? I pay for your salary. Think about me when you get laid off because of cutbacks." --five minutes of being 'escorted' later-- "Sir, where do you work?" "Advanced Network Technologies." "So, uh, you went to school for that here in Vancouver?" -insert sarcastic tone here "Nope. I went to school in Alberta." -(note: Vancouverites hate Albertan rednecks) "Whatever. You are free to go" --five minutes later. goon-free.-- I walk up to the "high-security area" - basically where they shove stuff up your ass, put your socks through the x-ray machine, and do chemical analysis' of your hat. I have two options: 1. Get fucked over by mounties with rubber gloves, x-ray machines, and screwdrivers, or 2. walk through the small door marked "diplomats". A quiet alarm sounds when I open the door. "Sir, do you know what this door is for?" "It's late, I'm pissed-off, and Yes." "Ok, let's see your papers" (at this point, I hand the lady a sheet of paper that is used for flights into Canada. Written in the name is "Bill Gates" and no other line is written on, except for a large "APPROVED" stamp that immigration hastingly signed) "Sir, what is in the bags?" "High-security, I cannot tell you that" "Ok, go ahead" At this point, I could not help but laugh as I was escorted past the rubber gloves, metal-detectors, and goons. I had gotten away with it, and was finally in freedom again. The situation was perfect, then reality hit. It is 4:00 in the morning. I am in Vancouver (I live 3 hours away) I have no wallet (stolen at defcon) I have $15 US Damn, what a bitch. Anyways, I found a Television normally used for flight schedules, and being the hacker that I am, I decided to change the channel. Shit. It worked. So there I was, curled up in an airport with "Super Chanel" blaring into the darkened, empty, airport. Good night. 8:00am I awaken. Tired, pissed-off, and hungry. I go to buy 1. a pack of smokes (high-priority) 2. Coffee (just as high) 3. food (If you've ever met me, you'd think I didn't know what this stuff is) Numbers 2 and 3 were not a problem. Smokes, on the other hand, eluded me. For a while. "Export-A Light, please" (a Canadian brand of smokes) "Let me see some ID, sir." (What's with this 'Sir' thing?) "Don't fuck with me. If you had any idea what I've been through these couple of days, I would not even be paying for them" "If you don't show me some ID, you WON'T be paying for them, or receiving them, either!" This was not good. I turn around, hand the guy behind me $6, and say, in a sarcastic, pissed-off voice: "Export-A Light!" 30 seconds later, I was enjoying my cigarette, and making my large, cardboard sign that read: "Wallet got stolen. No money. I want to go home. Please help." It only took me about half-an-hour, and many pissed off people later, to get the $53 I needed to get a bus-ride home. Home, sweet, home. -- Caller ID Basics Michael W. Slawson Executive Summary Introduction Background Specifics Caller ID On Call Waiting Conclusion Glossary Bibliography Executive Summary Caller ID (CID), or Calling Number Delivery (CND) as it is sometimes called, came about as an extension of Automatic Number Identification (ANI). ANI is a method that is used by telephone companies to identify the billing account for a toll call. Although ANI is not the service that provides the information for CID, it was the first to offer caller information to authorized parties. The CID service became possible with the implementation of Signaling System 7 (SS7). The CID information is transmitted on the subscriber loop using frequency shift keyed (FSK) modem tones. These FSK modem tones are used to transmit the display message in American Standard Code for Information Interchange (ASCII) character code form. The transmission of the display message takes place between the first and second ring. The information sent includes the date, time, and calling number. The name associated with the calling number is sometimes included also. Since the time CID was first made available it has been expanded to offer CID on Call Waiting (CIDCW) as well. With CIDCW the call waiting tone is heard and the identification of the second call is seen. The purpose of this paper is to gather information from multiple sources dealing with CID and to present that information in a manner such that the reader can gain a basic understanding of CID and its operation. Introduction Although several articles about Caller ID have been written, the most complete information and definitions are still contained within Bellcore specifications. By combining general information from some of these articles with the specifics from the Bellcore specifications this paper will give a better basic understanding of CID in one central source. Caller ID is the identification of the originating subscriber line. Although Caller ID is the most common name for the service, a more appropriate name would be Calling Number Identification since it is the directory number of the originating line that is used as the identification. In cases where the name and the number are sent, the name that is used is that which is associated with the number in the directory listing. The telephone company has no way of knowing who the actual caller is. The CID information is sent on the destination subscriber loop between the first and second ring by means of two modem tones. The information is transmitted serially in FSK mode using one of the tones to represent a logic 1 (mark) and the other to represent a logic 0 (space). Caller ID uses the same frequencies, modulation type, and data format as the Bell type 202 modems[1]. The message consists of a Channel Seizure string followed by a Mark string and then the caller information. The information is sent in one of two formats. The Single Data Message Format (SDMF) contains the date, time, and calling number. The Multiple Data Message Format (MDMF) contains the date, time, calling number, and the name associated with that number. Optionally, the number and name fields may contain data indicating that the information has been blocked by the caller or is unavailable. Background The method for sending and displaying the CID information during a silent interval between rings was invented by Carolyn A. Doughty. This invention was filed for a United States Patent on July 12, 1983. It was assigned patent number 4,582,956 on April 15, 1986 with AT&T Bell Laboratories (now Lucent Technologies Incorporated) listed as the assignee.[2] Caller ID was first offered in New Jersey in 1987 by New Jersey Bell[3]. The telephone company was interested in trying to earn additional revenue from its investments in new high-speed network signaling systems[4]. These new systems use a separate call data circuit based on the SS7 standard to handle the setup, termination, supervisory signals, and other data concerning a call. This separate call data circuit can handle the processing of multiple calls very quickly and eliminates certain types of toll fraud[5]. Prior to SS7 telephone companies used ANI for call billing purposes. With only a few exceptions, the billing information about the caller was not sent beyond the central office that provided that caller's service. The exceptions to this were authorized parties such as 911 services, law enforcement agencies, and more recently 800 and 900 number subscribers. Even today, ANI is still used by these parties[5]. Since ANI is completely independent of CID it will deliver the originating number even when the originator has blocked their number for CID purposes. With the installation of the new SS7 systems it became practical to forward the calling party's identification through the telephone network to the central office serving the called party. This aspect of SS7 is known as Calling Party Number Message (CPNM). The CPNM includes the calling party's telephone number, and whether or not the calling party wants their number blocked from being seen by the called party. Note that the CPNM is sent out on all telephone calls that are made, regardless of whether or not the calling party wants their number blocked[5]. A major issue that came up with the offering of CID was that of privacy. In several states the implementation of CID was slowed by privacy advocate groups. These groups claimed that CID was an invasion of privacy. In April of 1994, the Federal Communications Commission (FCC) issued a ruling that established a national standard for CID and the delivery of the caller's number into the switched network. Local and long distance telephone companies that were equipped to do so had to exchange CPNMs. Along with this, the telephone companies had to offer blocking on a per call basis so that the caller could block their number from being delivered to the called party[4]. The CPNM is still delivered to the final central office serving the end subscriber, but the number is then blocked and the CID message marked as private. Specifics Caller ID, as it is most commonly called, is a term that encompasses more than one type of caller identification. Calling Number Delivery refers to the most basic type of CID. It is delivered in SDMF and includes the date, time, and calling number. Calling Name Delivery (CNAM) is an enhancement of Calling Number Delivery that adds the calling name and is sent in MDMF. Bellcore has stated that a possible future objective may be to phase out the SDMF and use only the MDMF. In the event that SDMF is phased out, the name field in a MDMF message would be left out for customers who subscribe to number delivery only[6]. The CID information is sent serially at a rate of 1200 bits per second using continuous-phase binary frequency shift keying for modulation. The two frequencies used to represent the binary states are 1200 Hz for the Mark (logic 1) and 2200 Hz for the Space (logic 0). The data is sent asynchronously between the first and second ring at a signal level of -13.5 dBm. The level is measured at the central office across a 900 ohm test termination[7]. Following a minimum of 500 ms after the end of the first ring, the sequence of transmission begins with a Channel Seizure. The Channel Seizure is a string of 300 continuous bits (250 ms) of alternating "0"s and "1"s. This string starts with a "0"; and ends with a "1". A Mark Signal of 180 mark bits (150 ms) is sent immediately following the Channel Seizure Signal. The purpose of the Channel Seizure Signal and the Mark Signal is to prepare the data receiver in the Customer Premise Equipment (CPE) for the reception of the actual CID message[7]. Once the Channel Seizure and Mark Signals have been sent the CID information is then transmitted starting with the Least Significant Bit (LSB) of the most significant character. This is true for both SDMF and MDMF[6]. Each character in the message consists of 8 bits. For displayable characters these bits represent a code defined by the American Standard Code for Information Interchange. When transmitted the character's 8 bits are preceded by a start bit (space) and followed by a stop bit (mark) giving a total of 10 bits sent for each character. The CID information is followed by a checksum for error detection[7]. Figure 1 - Sequence Layout and Timing The checksum word is a twos complement of the modulo 256 sum of each bit in the other words of the message. The Channel Seizure and Mark Signals are not included in this checksum. When the message is received by the CPE it checks for errors by taking the received checksum word and adding the modulo 256 sum of all of the other words received in the message. The addition done by the CPE does not include the Channel Seizure and Mark Signals, nor does it include the received checksum word. The result of this addition should be zero to indicate that no errors have been detected[8]. Figure 2 shows a CID message in SDMF. For ease in describing the process of determining the checksum, the decimal values will be used for the calculations. Character Decimal ASCII Actual Description Value Value Bits (LSB) ------------------- ------- ----- --------------- Message Type (SDMF) 4 0 0 0 0 0 1 0 0 Message Length (9) 18 0 0 0 1 0 0 1 0 Month (December) 49 1 0 0 1 1 0 0 0 1 50 2 0 0 1 1 0 0 1 0 Day (25) 50 2 0 0 1 1 0 0 1 0 53 5 0 0 1 1 0 1 0 1 Hour (3pm) 49 1 0 0 1 1 0 0 0 1 53 5 0 0 1 1 0 1 0 1 Minutes (30) 51 3 0 0 1 1 0 0 1 1 48 0 0 0 1 1 0 0 0 0 Number (6061234567) 54 6 0 0 1 1 0 1 1 0 48 0 0 0 1 1 0 0 0 0 54 6 0 0 1 1 0 1 1 0 49 1 0 0 1 1 0 0 0 1 50 2 0 0 1 1 0 0 1 0 51 3 0 0 1 1 0 0 1 1 52 4 0 0 1 1 0 1 0 0 53 5 0 0 1 1 0 1 0 1 54 6 0 0 1 1 0 1 1 0 55 7 0 0 1 1 0 1 1 1 Checksum 79 0 1 0 0 1 1 1 1 Figure 2 - A Caller ID message in SDMF The first step is to add up the values of all of the fields (not including the checksum). In this example the total would be 945. This total is then divided by 256. The quotient is discarded and the remainder (177) is the modulo 256 sum. The binary equivalent of 177 is 10110001. To get the twos compliment start with the ones compliment (01001110), which is obtained by inverting each bit, and add 1. The twos compliment of a binary 10110001 is 01001111 (decimal 79). This is the checksum that is sent at the end of the CID information. When the CPE receives the CID message it also does a modulo 256 sum of the fields, however it does not do a twos complement. If the twos complement of the modulo 256 sum (01001111) is added to just the modulo 256 sum (10110001) the result will be zero. If the result is not zero then the message is discarded. It is important to note that there is no error correction in this method. Even if the CPE were to notify the central office of errors, the central office will not retransmit the information. If an error is detected, the CPE receiving the message should display an error message or nothing at all[8]. Although Bellcore SR-TSV-002476 recommends that the CPE display an error message if erroneous data is received, most CPE manufacturers have elected to just ignore the errored message. The content of the CID message itself depends on whether it is in SDMF or MDMF. A message in SDMF includes a Message Type word, a Message Length word, and the actual Message words. A message in MDMF also includes a Message Type word, a Message Length word, and the actual Message words, but additionally includes Parameter Type and Parameter Length words. There are certain points within these messages where up to 10 Mark bits may be inserted to allow for equipment delays in the central office[7]. These Stuffed Mark bits are generally not necessary. The Message Type word defines whether the message is in SDMF or MDMF. It will be a binary 00000100 (decimal 4) for SDMF or a binary 10000000 (decimal 128) for MDMF. The Message Length will include the number of characters in the message. This length does not include the checksum at the end of the message. For SDMF the minimum length will be 9 characters. The minimum length for MDMF will depend on whether the customer has subscribed to CNAM service as well as CND. In the case of CND only the minimum length will be 13 characters. If the customer also has CNAM then the minimum will be 16 characters. In all three of the minimums mentioned there will be no actual number or name delivered. The field will be marked either "O" (Out of area) or "P" (Private)[6]. Figure 3 shows an example of a minimum message layout for SDMF. The number will not be delivered because it has been blocked by the calling party. The CPE will receive the date, time, and a "P" to indicate that the caller's identification has been blocked at the caller's request. Character Decimal ASCII Actual Description Value Value Bits (LSB) ------------------- ------- ----- --------------- Message Type (SDMF) 4 0 0 0 0 0 1 0 0 Message Length (9) 9 0 0 0 0 1 0 0 1 Month (December) 49 1 0 0 1 1 0 0 0 1 50 2 0 0 1 1 0 0 1 0 Day (25) 50 2 0 0 1 1 0 0 1 0 53 5 0 0 1 1 0 1 0 1 Hour (3pm) 49 1 0 0 1 1 0 0 0 1 53 5 0 0 1 1 0 1 0 1 Minutes (30) 51 3 0 0 1 1 0 0 1 1 48 0 0 0 1 1 0 0 0 0 Private 80 P 0 1 0 1 0 0 0 0 Checksum 16 0 0 0 1 0 0 0 0 Figure 3 - A SDMF minimum message layout Figure 4 shows an example of a message in MDMF that contains both a number and a name. Character Decimal ASCII Actual Description Value Value Bits (LSB) -------------------------- ------- ----- --------------- Message Type (MDMF) 128 1 0 0 0 0 0 0 0 Message Length (33) 33 0 0 1 0 0 0 0 1 Parameter Type (Date/Time) 1 0 0 0 0 0 0 0 1 Parameter Length (8) 8 0 0 0 0 1 0 0 0 Month (November) 49 1 0 0 1 1 0 0 0 1 49 1 0 0 1 1 0 0 0 1 Day (28) 50 2 0 0 1 1 0 0 1 0 56 8 0 0 1 1 1 0 0 0 Hour (3pm) 49 1 0 0 1 1 0 0 0 1 53 5 0 0 1 1 0 1 0 1 Minutes (43) 52 4 0 0 1 1 0 1 0 0 51 3 0 0 1 1 0 0 1 1 Parameter Type (Number) 2 0 0 0 0 0 0 1 0 Parameter Length (10) 10 0 0 0 0 1 0 1 0 Number (6062241359) 54 6 0 0 1 1 0 1 1 0 48 0 0 0 1 1 0 0 0 0 54 6 0 0 1 1 0 1 1 0 50 2 0 0 1 1 0 0 1 0 50 2 0 0 1 1 0 0 1 0 52 4 0 0 1 1 0 1 0 0 49 1 0 0 1 1 0 0 0 1 51 3 0 0 1 1 0 0 1 1 53 5 0 0 1 1 0 1 0 1 57 9 0 0 1 1 1 0 0 1 Parameter Type (Name) 7 0 0 0 0 0 1 1 1 Parameter Length (9) 9 0 0 0 0 1 0 0 1 Name (Joe Smith) 74 J 0 1 0 0 1 0 1 0 111 o 0 1 1 0 1 1 1 1 101 e 0 1 1 0 0 1 0 1 32 0 0 1 0 0 0 0 0 83 S 0 1 0 1 0 0 1 1 109 m 0 1 1 0 1 1 0 1 105 i 0 1 1 0 1 0 0 1 116 t 0 1 1 1 0 1 0 0 104 h 0 1 1 0 1 0 0 0 Checksum 88 0 1 0 1 1 0 0 0 Figure 4 - A CID message in MDMF In Figure 4, if the number and name had not been included then the parameter types for those fields would be different. These alternate parameter types are used to signify that the data contained in that parameter is the reason for its absence. The parameter type for the number section would have been a binary 00000100 (decimal 4) and the parameter type for the name section would have been a binary 00001000 (decimal 8). When the parameter type signifies that the data contained is the reason for that fields absence, the parameter length is always a binary 00000001 (decimal 1). If the reason for absence is that the calling party does not want their number/name displayed then the parameter data would be a binary 01010000 (ASCII "P") for Private. If the reason for absence is that the information is just not available then the parameter data would be a binary 01001111 (ASCII "O") for Out of area[9]. The number/name may not be available if the calling party is not served by a central office capable of relaying the information on through the network. Caller ID On Call Waiting In carrying CID a step further and combining it with Call Waiting, a service commonly called Caller ID on Call Waiting has been developed. This feature is also sometimes called Calling Identity Delivery on Call Waiting. With CIDCW the identification of the party calling can now be seen without putting the current call on hold. CIDCW is done the same way as CID with only a few exceptions. One of those exceptions is that CIDCW only uses MDMF so the message type will always be a binary 10000000 (decimal 128). Since CIDCW will only take place if a call is already in progress there will never be a ring signal preceding the message. The channel seizure signal is not used with CIDCW either. The central office gets the CPE's attention by sending it a CPE Alerting Signal (CAS), a two-tone signal described later. If the customer's equipment is ready to receive the CID information, it responds to the CAS by sending the central office an acknowledgment (ACK) signal. Note that the CPE will only respond to the CAS signal if it is the only extension that is off-hook[10]. If someone else is involved in the call on another extension, the CPE will not send an ACK signal to the central office because it cannot mute the second device. Most manufacturers detect whether an extension is off-hook by monitoring the line voltage. If the line voltage drops below a certain point then it is assumed that an extension is off-hook. This can lead to problems in situations where the CPE is placed on a very long loop. The long loop reduces the voltage at the CPE and causes its detector to continuously register an extension off-hook. At least one manufacturer is getting around this by designing the equipment to learn the line voltage that it should see during normal operation. This is done by taking the device off-hook two or three times so that it can register the normal off-hook voltage. If the voltage ever drops below this setting, it assumes that there is another extension off-hook. Once the central office sees the ACK signal it sends the FSK data[10]. When the CPE sees the CAS from the central office it mutes the telephone's handset before sending the ACK and receiving the FSK data. This act of muting serves two purposes. First, it keeps the telephone user from hearing the FSK signal. But, more importantly it avoids interference from speech and other noises that would be picked up by the telephone's microphone. The muting only has to take place on the end receiving the FSK data since before sending the CAS, the central office momentarily removes audio to and from the far end of the current call. The audio is reconnected after the FSK data has been transmitted[8][10]. The sequence of events that displays the information about the caller begins when the central office temporarily removes the far end party of the current call and sends a Subscriber Alerting Signal (SAS) to the near end party. The SAS is a single frequency of 440 Hz that is applied for approximately 300 ms. This is the tone that is heard when a call is in progress and call waiting beeps to indicate a second call. The SAS tone is mainly for the user and is not required for the CPE to receive the CID information. The SAS tone is followed by a CAS to alert the CPE that it has CID information to send. The CAS is a dual tone signal combination of 2130 Hz and 2750 Hz that is 80 ms in length. Once the CPE hears the CAS it mutes the handset of the telephone and returns an ACK signal to the central office. This ACK signal has a nominal tone duration of 60 ms and is either a Dual-Tone Multifrequency (DTMF) "A" or a DTMF "D". The DTMF "D" is the most common ACK signal and it consists of the frequencies 941 Hz and 1633 Hz. A DTMF "A" consists of the frequencies 697 Hz and 1633 Hz. Once the central office receives the ACK signal it in turn sends the CID information[7][8][10]. The CPE un-mutes the handset as soon as it finishes receiving the FSK signal. A problem that is sometimes experienced with CIDCW is Talkoff. Talkoff occurs when the CPE falsely detects a CAS. Speech can sometimes be interpreted by the CPE's detector as a CAS from the central office[8]. When talkoff occurs both parties will hear a brief interruption in the conversation and the party on the far end will hear the ACK signal that is sent to the central office by the CPE. When the handset is muted by a talkoff, the CPE will timeout and un-mute the handset after waiting a set period of time for an FSK signal[11]. Bellcore SR-3004 specifies that this timeout period should be no more than 501 ms from the end of the ACK signal. A CPE's detector will behave differently with different people because of the variations in each persons voice and speech patterns. Speech can also cause a valid CAS signal to not be recognized by the CPE. When this occurs, it is called a Talkdown. The last difference between CID and CIDCW is that instead of being preceded by the 300 bits of Channel Seizure Signal and 180 bits of Mark Signal, as with standard CID, the Caller ID message for CIDCW is only preceded by 80 bits of Mark Signal[8]. CIDCW still uses the checksum just like CID. Conclusion Although CID can be very useful in screening calls, it is not limited to this application alone. For example, a number of business contact-manager software packages have made it possible to use CID to automatically bring up client information from a database and display it on the screen of a personal computer (PC) before the call is answered. Implementation of this requires a CID hardware device with a data connection to the PC. As time goes on we will see more and more uses for CID. Even though an "Out-of-Area" message may still seen occasionally, it will be less and less often as the remaining telephone offices which are not yet setup for CID install the necessary equipment. Even as there are advances being made in the way Caller ID can be utilized, there are also advances being made in the customer premise equipment. Manufacturers are now coming out with units that allow multiple extensions to be off-hook and still receive CIDCW. Although the same manufacturer's equipment must generally be used on all extensions, this does allow more than one person to be on the same call and still see the identification of a waiting call. Even the small office key telephone systems are now offering CID and CIDCW capabilities so that caller information coming in on a line can be displayed at all stations associated with that line. Implementation does not always mean replacing a currently installed telephone system. Some manufacturers are offering upgrades to existing hardware by simply replacing specific printed wiring cards. Glossary ACK -- Acknowledgment ANI -- Automatic Number Identification ASCII -- American Standard Code for Information Interchange BFSK -- Binary Frequency Shift Keying CAS -- CPE Alerting Signal CID -- Caller Identification or Caller ID CIDCW -- Calling Identity Delivery on Call Waiting or Caller ID on Call Waiting CNAM -- Calling Name Delivery CND -- Calling Number Delivery CPE -- Customer Premise Equipment CPNM -- Calling Party Number Message DTMF -- Dual-Tone Multifrequency FCC -- Federal Communications Commission FSK -- Frequency Shift Keying ID -- Identification LATA -- Local Access and Transport Area LSB -- Least Significant Bit LSSGR -- LATA Switching Systems Generic Requirements MDMF -- Multiple Data Message Format OSI -- Open Switch Interval PC -- Personal Computer SAS -- Subscriber Alerting Signal SDMF -- Single Data Message Format SPCS -- Stored Program Control Switching System SS7 -- Signaling System 7 Bibliography [1] CASE, Publication 918-5477, "T202T Modem Installation and Operation Instructions", Issue 18, August 1987 [2] Internet Web Page, http://www.uspto.gov/, United States Patent And Trademark Office [3] Anonymous source at Lucent Technologies Incorporated, Telephone interview, 3 December 1996 [4] Wally Roberts, "Caller ID: The Telephone's Status Quo Is Gone" http://www.wally.com/~wally_r/ [5] Wally Roberts, "Caller ID: The Technical 'A-B-Cs'" http://www.wally.com/~wally_r/caller_id/ABCs/index.html [6] Bellcore, TR-NWT-000031, "CLASS (SM) Feature: Calling Number Delivery", Issue 4, December 1992 (a module of LSSGR, FR-NWT-000064) [7] Bellcore, TR-NWT-000030, "Voiceband Data Transmission Interface Generic Requirements", Issue 2, October 1992 [8] Bellcore, SR-TSV-002476, "Customer Premises Equipment Compatibility Considerations for the Voiceband Data Transmission Interface", Issue 1, December 1992 [9] Bellcore, TR-NWT-001188, "CLASS (SM) Feature: Calling Name Delivery Generic Requirements", Issue 1, December 1991 (a module of LSSGR, FR-NWT-000064) [10] Bellcore, TR-NWT-000575, "CLASS (SM) Feature: Calling Identity Delivery on Call Waiting", Issue 1, October 1992 (a module of LSSGR, FR-NWT-000064) [11] Bellcore, SR-3004, "Testing Guidelines for Analog Type 1, 2, and 3 CPE as Described in SR-INS-002726", Issue 2, January 1995 -- ---- DăTă; Name: Project: INWATS; 909-6000 | 909-9000 Suffix Skan Date: July 22, 2001 Type: INWATS suffix skan (manual) Numbers skanned: 3000 NPA: 780 -- 1-800-909-60xx -------------- 1-800-909-6000 - Frontier Speed-link 1-800-909-6001 - Global Crossings' Speed-link 1-800-909-6002 - Beeping in a Loop 1-800-909-6003 - AT&T Easy Reach 800 1-800-909-6008 - Frontier 1-800-909-6009 - AT&T Easy Reach 800 1-800-909-6010 - Bear-co Engineering 1-800-909-6011 - Frontier 1-800-909-6014 - AT&T Easy Reach 800 1-800-909-6021 - Answering Machine 1-800-909-6034 - Venus Number '4158' 1-800-909-6039 - Names on Trains 1-800-909-6040 - Toronto Loan Accounting 1-800-909-6041 - Terry Hemprey (voice mail) 1-800-909-6042 - All Circuits Busy 1-800-909-6043 - All Circuits Busy 1-800-909-6044 - Voice Mail of David Moore 1-800-909-6052 - AT&T Easy Reach 800 1-800-909-6055 - Budget Steel 1-800-909-6056 - "Hello?" 1-800-909-6059 - JD Digital 1-800-909-6060 - Promotional Interrupt Operator 1-800-909-6062 - AT&T Easy Reach 800 1-800-909-6069 - Regions Life & Health Customer Service Line 1-800-909-6070 - RD Barinko of Norwood's New Jersey 1-800-909-6074 - Voice/Numeric Message System 1-800-909-6084 - AT&T Easy Reach 800 1-800-909-6093 - High Tone (1000hz test number) 1-800-909-6097 - Bill Nycka; Backing Systems Division 1-800-909-6098 - AT&T Easy Reach 800 1-800-909-61xx -------------- 1-800-909-6101 - Don Johnson Associates 1-800-909-6102 - Call Did Not Go Through 1-800-909-6103 - Life Associates 1-800-909-6104 - AT&T Easy Reach 800 1-800-909-6105 - "Siron Sound" (Re-order signal) 1-800-909-6106 - Verizon Excell 1-800-909-6108 - Implay Systems 1-800-909-6109 - Working Solutions 1-800-909-6111 - 0303; Invalid Location 1-800-909-6112 - "Siron Sound" (Re-order signal) 1-800-909-6116 - United Postal Service (DISPATCH NUMBER) 1-800-909-6117 - Stone West 1-800-909-6118 - AT&T Easy Reach 800 1-800-909-6120 - United States Olympic Committee Elite Athlete Health Insurance Program Information Line 1-800-909-6121 - Southern Woman's Voice Mail Box 1-800-909-6123 - Family Counseling Services 1-800-909-6124 - Employee Assistance Program of Lousiana 1-800-909-6125 - "Siron Sound" (Re-order signal) 1-800-909-6126 - "Hello" 1-800-909-6129 - AT&T Easy Reach 800 1-800-909-6130 - Voice / Numeric Message System 1-800-909-6131 - Spectrum Pacific 1-800-909-6138 - Voice / Numeric Message System 1-800-909-6140 - AT&T Easy Reach 800 1-800-909-6143 - Cruise Masters 1-800-909-6144 - Personal Assistant 1-800-909-6145 - AT&T Easy Reach 800 1-800-909-6160 - AT&T Easy Reach 800 1-800-909-6161 - Bookshop 1-800-909-6164 - Modem Carrier 1-800-909-6165 - Associated Packaging 1-800-909-6166 - "Hello?" 1-800-909-6168 - AT&T Easy Reach 800 1-800-909-6169 - Associated Packaging 1-800-909-6171 - Associated Packaging 1-800-909-6172 - Numeric Messaging System 1-800-909-6173 - Associated Packaging 1-800-909-6174 - Associated Packaging 1-800-909-6176 - Associated Packaging 1-800-909-6179 - Associated Packaging 1-800-909-6180 - Associated Packaging 1-800-909-6181 - Associated Packaging 1-800-909-6182 - AT&T Easy Reach 800 1-800-909-6187 - Toll Free Disconnected Number 1-800-909-6194 - AT&T Easy Reach 800 1-800-909-6195 - Jerry 1-800-909-6197 - AT&T Easy Reach 800 1-800-909-6199 - Sun Graph 1-800-909-62xx -------------- 1-800-909-6200 - Rejuvinique 1-800-909-6201 - Bill Gibson's Voice Mail Box 1-800-909-6205 - DENUS NOT ACTIVE, DENUS:6186 VRU:130 PORT: XX 1-800-909-6206 - "Hello?" 1-800-909-6213 - David Patterson's Voice Mail Box 1-800-909-6215 - Rebbie Thompson, District Attorney General's Office 1-800-909-6216 - Frontier 1-800-909-6217 - Assistant D.A. Tammy Hobby 1-800-909-6219 - Sidco 1-800-909-6222 - FAX On Demand, NBA 1-800-909-6224 - Numeric Message System 1-800-909-6226 - AT&T Easy Reach 800 1-800-909-6229 - AT&T Easy Reach 800 1-800-909-6230 - Numeric Message System 1-800-909-6231 - Numeric Message System 1-800-909-6238 - AT&T Easy Reach 800 1-800-909-6245 - Call Distribution Number (CDN) 1-800-909-6246 - AT&T Easy Reach 800 1-800-909-6248 - Personal Identification Code System 1-800-909-6259 - Micheal Mason, Independent Life Force Representative 1-800-909-6262 - Sean (he wanted to help me) 1-800-909-6263 - Basement Water Pricing 1-800-909-6264 - "Good afternoon?" 1-800-909-6265 - Antiques 1-800-909-6266 - Interrupt Operator 1-800-909-6268 - Voice Mail / Fax Line 1-800-909-6272 - Stain Safe Company 1-800-909-6274 - AT&T Easy Reach-800 1-800-909-6275 - AT&T Easy Reach-800 1-800-909-6277 - Mars International and Supply 1-800-909-6279 - Entertainment Centre (phone pr0n) 1-800-909-6281 - Brad 1-800-909-6282 - Automatic Voice Message System (Acct: 7734866632) 1-800-909-6283 - "All Circuits Busy" (DTMF '1' played) 1-800-909-6288 - AT&T Easy Reach 800 1-800-909-6293 - Personal Assistant 1-800-909-6294 - Silence (muffled voices in background) 1-800-909-63xx -------------- 1-800-909-6301 - AT&T Easy Reach 800 1-800-909-6307 - Voice Mail Box (ACCT: 14088507354) 1-800-909-6311 - Global-Crossing Conferencing 1-800-909-6320 - AT&T Easy Reach 800 1-800-909-6325 - Personal Assistant 1-800-909-6332 - AT&T Easy Reach 800 1-800-909-6334 - FAX 1-800-909-6335 - AT&T Easy Reach 800 1-800-909-6341 - Luke Folds, Millennium-3 Financial Group 1-800-909-6343 - Modular Design Technologies 1-800-909-6344 - National Blind and Wallpaper Factory 1-800-909-6347 - FAX 1-800-909-6348 - FAX 1-800-909-6350 - AT&T Easy Reach 800 1-800-909-6353 - AT&T Easy Reach 800 1-800-909-6372 - First Star 1-800-909-6373 - United Clocks 1-800-909-6374 - Tom Catral's Voice Mail Box 1-800-909-6380 - Results 2000 1-800-909-6382 - Neda Group 1-800-909-6383 - KCL Financial Group 1-800-909-6384 - Susan's Voice Mail Box 1-800-909-6386 - Mule Hide 1-800-909-6387 - AT&T Easy Reach 800 1-800-909-6388 - Modem Carrier 1-800-909-6390 - Error (PROGRAMMING: 732-920-4900) 1-800-909-6391 - Error (PROGRAMMING: 732-920-4900) 1-800-909-6395 - Richard Simmons Messaging Service 1-800-909-64xx -------------- 1-800-909-6410 - AT&T Easy Reach 800 1-800-909-6414 - Pen Schmeidt Message Service 1-800-909-6418 - Global Crossings Speedlink [4 digit # got me a carrier] 1-800-909-6423 - AT&T Easy Reach 800 1-800-909-6426 - AT&T Easy Reach 800 1-800-909-6427 - Four Seasons Sunrooms 1-800-909-6428 - AT&T Easy Reach 800 1-800-909-6430 - Advanced PCS Members Services 1-800-909-6433 - AT&T Easy Reach 800 1-800-909-6436 - Member Services 1-800-909-6439 - FAX 1-800-909-6443 - MCI WORLDCOM PROGRAM: Expired 1-800-909-6446 - AT&T Easy Reach 800 1-800-909-6448 - MCI WORLDCOM PROGRAM: Expired 1-800-909-6449 - MCI WORLDCOM PROGRAM: Expired 1-800-909-6451 - MCI WORLDCOM PROGRAM: Expired 1-800-909-6452 - Millicron Shareholder Direct (NYSE: MZ) 1-800-909-6453 - AT&T Easy Reach 800 1-800-909-6455 - Hanging Line (exploitable) 1-800-909-6456 - AT&T Easy Reach 800 1-800-909-6457 - MCI WORLDCOM PROGRAM: Expired 1-800-909-6460 - National Teleconference "parts services" 1-800-909-6461 - P.P.D. 1-800-909-6466 - AT&T Easy Reach 800 1-800-909-6468 - Fresh Breath Clinic 1-800-909-6469 - AT&T Easy Reach 800 1-800-909-6470 - Donor Information Centre 1-800-909-6471 - Action Sports Image 1-800-909-6472 - Minnisota Institute for Sustainable Agriculture 1-800-909-6473 - Action Sports Image 1-800-909-6480 - "please wait..." 1-800-909-6481 - "please wait..." 1-800-909-6485 - "please wait..." 1-800-909-6486 - "please wait..." 1-800-909-6487 - "please wait..." 1-800-909-6490 - FAX 1-800-909-6491 - MCI WORLDCOM PROGRAM: Expired 1-800-909-6498 - MCI WORLDCOM PROGRAM: Expired 1-800-909-65xx -------------- 1-800-909-6501 - Golden Sun 1-800-909-6502 - "Siren sound" (Re-order signal) 1-800-909-6503 - Macoy's Enterprise (Telecommunications Specialist) 1-800-909-6506 - MCI WORLDCOM PROGRAM: Expired 1-800-909-6507 - AARP Service From RPS 1-800-909-6509 - FAX 1-800-909-6512 - "Hello?" 1-800-909-6515 - AT&T Easy Reach 800 1-800-909-6516 - Hello Boysey (Asks for 4 digit PIN) 1-800-909-6517 - 'Audix' Voice Mail Box 1-800-909-6518 - 'Audix' Voice Mail Box 1-800-909-6519 - 'Audix' Voice Mail Box 1-800-909-6520 - 'Audix' Voice Mail Box 1-800-909-6524 - AT&T Easy Reach 800 1-800-909-6527 - Convision Air Convey Corporation 1-800-909-6528 - Hoe's Containers 1-800-909-6530 - "The Shade House" 1-800-909-6534 - Fashion and Tool Supply 1-800-909-6537 - Goodman Financial Group 1-800-909-6539 - AT&T Easy Reach 800 1-800-909-6547 - JNL Warranty Post 1-800-909-6548 - Ron-Son Foods 1-800-909-6549 - "Personal Identification Number" 1-800-909-6554 - AT&T Easy Reach 800 1-800-909-6556 - File Maker Incorporated 1-800-909-6557 - MCI WORLDCOM PROGRAM: Expired 1-800-909-6558 - Compu-Case 1-800-909-6561 - MCI WORLDCOM 1-800-909-6563 - AT&T Easy Reach 800 1-800-909-6564 - "i24by7.com" 1-800-909-6567 - High-Tone 1-800-909-6568 - Invalid Number 1-800-909-6572 - Numeric Message System 1-800-909-6573 - AT&T Easy Reach 800 1-800-909-6574 - Numeric Message System 1-800-909-6576 - Numeric Message System 1-800-909-6577 - Numeric Message System 1-800-909-6578 - Numeric Message System 1-800-909-6579 - Numeric Message System 1-800-909-6581 - Numeric Message System 1-800-909-6582 - Numeric Message System 1-800-909-6583 - Numeric Message System 1-800-909-6584 - Dolf Balba 1-800-909-6585 - AT&T Easy Reach 800 1-800-909-6588 - "Please Enter Your PIN" 1-800-909-6589 - AT&T Easy Reach 800 1-800-909-6591 - "Please Enter Your PIN" 1-800-909-6592 - KJ 1-800-909-6594 - AT&T Easy Reach 800 1-800-909-6595 - Beeping In a Loop (re-order signal) 1-800-909-6597 - AT&T Easy Reach 800 1-800-909-6599 - Datebook Publishing 1-800-909-66xx -------------- 1-800-909-6601 - Willy Fabrication & Erection Company 1-800-909-6603 - Century Hillside, blah blah blah 1-800-909-6604 - HLM Electronics Sales Dept. 1-800-909-6605 - Hanging Line (exploitable) 1-800-909-6606 - AT&T Easy Reach 800 1-800-909-6608 - Calling Area 1-800-909-6622 - Barkley Financial 1-800-909-6625 - Roger Casper's Voice Mail Box 1-800-909-6626 - Numeric Message System 1-800-909-6627 - Modem Carrier 1-800-909-6630 - Modem Carrier 1-800-909-6632 - AT&T Easy Reach 800 1-800-909-6634 - Erin 1-800-909-6636 - Amnex USA Incorporated 1-800-909-6637 - Market Packs 1-800-909-6645 - Credit IQ Hotline (ANAC NUMBER) 1-800-909-6647 - Travel Time 1-800-909-6648 - Unstarted Program 1-800-909-6654 - DIV Corporation 1-800-909-6659 - AT&T Easy Reach 800 1-800-909-6661 - John Lumber 1-800-909-6664 - SAS 1-800-909-6665 - Conference Calling Centre 1-800-909-6667 - Scotia Bank National Retail Credit Centre 1-800-909-6670 - Trinky Transport 1-800-909-6673 - Numeric Message System 1-800-909-6675 - Calling Area 1-800-909-6677 - FAX 1-800-909-6678 - Sprint Canada 1-800-909-6679 - 716-833-7005; Disconnected 1-800-909-6680 - AT&T Easy Reach 800 1-800-909-6684 - AT&T Easy Reach 800 1-800-909-6687 - 919-850-0044 changed to 919-261-8401 1-800-909-6690 - AT&T Easy Reach 800 1-800-909-6697 - AT&T Easy Reach 800 1-800-909-6699 - AT&T Easy Reach 800 1-800-909-67xx -------------- 1-800-909-6700 - Convergys 1-800-909-6710 - Hanging Line (exploitable) 1-800-909-6714 - Digital Pager 1-800-909-6715 - All Circuits Busy 1-800-909-6716 - AT&T Easy Reach 800 1-800-909-6717 - Personelle Executive Offices 1-800-909-6718 - Protection Plus 1-800-909-6719 - "Hello?" 1-800-909-6723 - "Hello?" (redneck voice mail) 1-800-909-6724 - Charity Services 1-800-909-6725 - Acidic Exchange Systems Plus 1-800-909-6726 - AT&T Easy Reach 800 1-800-909-6727 - MSAS 1-800-909-6729 - "Hello?" 1-800-909-6730 - FAX 1-800-909-6731 - The Handwriting Hotline 1-800-909-6732 - The Nine Good Habits Hotline 1-800-909-6733 - Reliable Customer Service 1-800-909-6734 - "Please Hang Up And Try Your Call Again!" 1-800-909-6737 - High-Tone 1-800-909-6738 - High-Tone 1-800-909-6741 - "Hello?" 1-800-909-6743 - AT&T Easy Reach 800 1-800-909-6744 - Voice Messaging Service; BOX: 8009096744 1-800-909-6749 - Fone-Pr0n 1-800-909-6750 - Bob Carpenter's Voice Mail Box 1-800-909-6751 - Al's Express 1-800-909-6752 - AT&T Easy Reach 800 1-800-909-6758 - AT&T Easy Reach 800 1-800-909-6759 - Barb-B-Gee Graphics 1-800-909-6762 - AT&T Easy Reach 800 1-800-909-6765 - Hanging Line (exploitable) 1-800-909-6766 - Virtual Voice 1-800-909-6767 - AT&T Easy Reach 800 1-800-909-6770 - AT&T Easy Reach 800 1-800-909-6772 - Marketing Specialists 1-800-909-6775 - AT&T Easy Reach 800 1-800-909-6776 - Altel Customer 1-800-909-6777 - TD Waterhouse 1-800-909-6779 - AT&T Easy Reach 800 1-800-909-6781 - High Tone 1-800-909-6782 - Numeric Message Service 1-800-909-6784 - AT&T Easy Reach 800 1-800-909-6786 - Call Cannot Be Completed 1-800-909-6788 - AT&T Easy Reach 800 1-800-909-6790 - Community Health Partners 1-800-909-6792 - Global-Crossing Conferencing 1-800-909-6795 - Communian 1-800-909-6796 - Global-Crossing's Speedlink 1-800-909-68xx -------------- 1-800-909-6800 - "Call Centre" 1-800-909-6808 - AT&T Easy Reach 800 1-800-909-6809 - AT&T Easy Reach 800 1-800-909-6813 - RCI; Market Vacation Club 1-800-909-6814 - Answering Machine 1-800-909-6815 - Holiday Inn; Orange County 1-800-909-6816 - AT&T Easy Reach 800 1-800-909-6818 - "Hello?" 1-800-909-6823 - Hanging Line (exploitable) 1-800-909-6827 - Suretrade (www.suretrade.com) 1-800-909-6836 - AT&T Easy Reach 800 1-800-909-6838 - Beeping In a Loop (re-order signal) 1-800-909-6839 - AG Edwards Delmaro 1-800-909-6842 - Montana Electric 1-800-909-6851 - SkyTel Voice Mail System 1-800-909-6852 - SkyTel Voice Mail System 1-800-909-6853 - AT&T Easy Reach 800 1-800-909-6854 - SkyTel Voice Mail System 1-800-909-6855 - Adrian Martinaz; Regional Director 1-800-909-6856 - SkyTel Voice Mail System 1-800-909-6857 - SkyTel Voice Mail System 1-800-909-6858 - SkyTel Voice Mail System 1-800-909-6859 - SkyTel Voice Mail System 1-800-909-6860 - SkyTel Voice Mail System 1-800-909-6867 - SkyTel Voice Mail System 1-800-909-6868 - Telemarketing Agency 1-800-909-6870 - SkyTel Voice Mail System 1-800-909-6871 - SkyTel Voice Mail System 1-800-909-6873 - GE Capital Morgage 1-800-909-6878 - AT&T Easy Reach 800 1-800-909-6879 - SkyTel Voice Mail System 1-800-909-6887 - "Hello?" - Howard Black 1-800-909-6888 - Household Financial Services 1-800-909-6890 - SkyTel Voice Mail System 1-800-909-6895 - SkyTel Voice Mail System 1-800-909-6896 - SkyTel Voice Mail System 1-800-909-6897 - Modem Carrier - "PSystem AdministratorPCANYWHERE3" 1-800-909-6899 - CDS Raver And Security 1-800-909-69xx -------------- 1-800-909-6901 - Offices of McCaffine and Whitner Inc. 1-800-909-6902 - Sunny Bars 1-800-909-6903 - AT&T Easy Reach 800 1-800-909-6905 - "Hello?" 1-800-909-6922 - SkyTel Voice Mail System 1-800-909-6923 - Lenon Lion Inn 1-800-909-6926 - Tax Yoshida with CPS 1-800-909-6927 - Sunset Communications 1-800-909-6928 - SkyTel Voice Mail System 1-800-909-6933 - Piesoft Consulting 1-800-909-6934 - SkyTel Voice Mail System 1-800-909-6935 - SkyTel Voice Mail System 1-800-909-6936 - SkyTel Voice Mail System 1-800-909-6938 - SkyTel Voice Mail System 1-800-909-6939 - "Out-of-Service 800 #" - (exploitable) 1-800-909-6940 - SkyTel Voice Mail System 1-800-909-6941 - SkyTel Voice Mail System 1-800-909-6942 - SkyTel Voice Mail System 1-800-909-6943 - SkyTel Voice Mail System 1-800-909-6944 - Modem Carrier 1-800-909-6945 - SkyTel Voice Mail System 1-800-909-6947 - SkyTel Voice Mail System 1-800-909-6948 - SkyTel Voice Mail System 1-800-909-6949 - SkyTel Voice Mail System 1-800-909-6951 - SkyTel Voice Mail System 1-800-909-6952 - SkyTel Voice Mail System 1-800-909-6953 - AT&T Easy Reach 800 1-800-909-6954 - FAX 1-800-909-6955 - Bell Atlantic Communications (Verizon Long Distance) 1-800-909-6957 - SkyTel Voice Mail System 1-800-909-6958 - SkyTel Voice Mail System 1-800-909-6962 - AT&T Easy Reach 800 1-800-909-6963 - Phone Pr0n - Norcom Communications 1-800-909-6964 - AT&T Easy Reach 800 1-800-909-6966 - Stadium Associates Insurance 1-800-909-6968 - AT&T Easy Reach 800 1-800-909-6970 - "Four Digit Group ID, Four Digit Job ID" 1-800-909-6972 - FAX 1-800-909-6976 - AT&T Easy Reach 800 1-800-909-6979 - "Hello?" 1-800-909-6981 - Modem Carrier - "Annex Command Line Interpreter", Nortel 1-800-909-6989 - Jeff Esque - 3M Pharmaceuticals 1-800-909-6990 - AT&T Easy Reach 800 1-800-909-6991 - Co-American Mortgage Services 1-800-909-6992 - Ron's Travel 1-800-909-6994 - Riptor 1-800-909-6995 - CGUN Insurance Voice Mail 1-800-909-7xxx -------------- 1-800-909-7007 - Mutual Help Crisis Line 1-800-909-7016 - "Enter your Phone Number Including the Area-Code" 1-800-909-7033 - "Hello?" 1-800-909-7035 - AT&T Easy Reach 800 1-800-909-7036 - "Hello?" 1-800-909-7039 - Information Request Line 1-800-909-7051 - AT&T Easy Reach 800 1-800-909-7052 - Video-i Corporation 1-800-909-7053 - "i24by7.com" 1-800-909-7054 - AT&T Easy Reach 800 1-800-909-7056 - SkyTel Voice Mail System 1-800-909-7058 - SkyTel Voice Mail System 1-800-909-7059 - AT&T Easy Reach 800 1-800-909-7060 - "Hello?" 1-800-909-7061 - SkyTel Voice Mail System 1-800-909-7062 - SkyTel Voice Mail System 1-800-909-7063 - SkyTel Voice Mail System 1-800-909-7064 - SkyTel Voice Mail System 1-800-909-7065 - SkyTel Voice Mail System 1-800-909-7067 - SkyTel Voice Mail System 1-800-909-7069 - AT&T Easy Reach 800 1-800-909-7070 - Infomercials Information Line 1-800-909-7072 - "Personal Identification Number" 1-800-909-7074 - AT&T Easy Reach 800 1-800-909-7075 - SkyTel Voice Mail System 1-800-909-7076 - SkyTel Voice Mail System 1-800-909-7079 - SkyTel Voice Mail System 1-800-909-7080 - Dedicated Distribution Services 1-800-909-7081 - SkyTel Voice Mail System 1-800-909-7082 - SkyTel Voice Mail System 1-800-909-7085 - AT&T Easy Reach 800 1-800-909-7087 - SkyTel Voice Mail System 1-800-909-7088 - Automated Voice Message Service; Resolution Technologies 1-800-909-7090 - Southwestren Bell 1-800-909-7091 - SkyTel Voice Mail System 1-800-909-7092 - SkyTel Voice Mail System 1-800-909-7095 - SkyTel Voice Mail System 1-800-909-7096 - SkyTel Voice Mail System 1-800-909-7097 - SkyTel Voice Mail System 1-800-909-7098 - SkyTel Voice Mail System 1-800-909-71XX -------------- 1-800-909-7103 - SkyTel Voice Mail System 1-800-909-7104 - SkyTel Voice Mail System 1-800-909-7105 - Hanging Line (exploitable) 1-800-909-7106 - State Commission 1-800-909-7108 - Answering Machine 1-800-909-7111 - AT&T Easy Reach 800 1-800-909-7113 - Conference Coordinator 1-800-909-7114 - GG Schmeidt and Sons 1-800-909-7115 - Hennenoff Heidi 1-800-909-7117 - AT&T Easy Reach 800 1-800-909-7121 - Bookkeeping Services 1-800-909-7132 - Personal Assistant 1-800-909-7137 - Call Home America Ultimate 800 [4 digit #] 1-800-909-7138 - SkyTel Voice Mail System 1-800-909-7139 - Micheal Goodfellow, Micheal Goodfellow Real-Estate 1-800-909-7140 - SkyTel Voice Mail System 1-800-909-7142 - SkyTel Voice Mail System 1-800-909-7143 - SkyTel Voice Mail System 1-800-909-7144 - Offices of 'The Insurance Group' 1-800-909-7145 - SkyTel Voice Mail System 1-800-909-7146 - SkyTel Voice Mail System 1-800-909-7147 - SkyTel Voice Mail System 1-800-909-7148 - SkyTel Voice Mail System 1-800-909-7149 - SkyTel Voice Mail System 1-800-909-7150 - SkyTel Voice Mail System 1-800-909-7151 - AT&T Easy Reach 800 1-800-909-7152 - SkyTel Voice Mail System 1-800-909-7153 - IP-PHONE Dial-Port 1-800-909-7157 - Modem Carrier 1-800-909-7164 - "Alcohol For Less" 1-800-909-7165 - AT&T Easy Reach 800 1-800-909-7167 - Voice Mail Box of Cindy Baker 1-800-909-7168 - SkyTel Voice Mail System 1-800-909-7169 - SkyTel Voice Mail System 1-800-909-7170 - AT&T Easy Reach 800 1-800-909-7172 - AT&T Easy Reach 800 1-800-909-7174 - AT&T Easy Reach 800 1-800-909-7178 - "... ring, ring ..." 1-800-909-7183 - "... ring, ring ..." 1-800-909-7186 - "Hello?" 1-800-909-7187 - "Hello?" 1-800-909-7188 - Voice Mail Box 1-800-909-7192 - "... ring, ring ..." 1-800-909-7193 - "... ring, ring ..." 1-800-909-7194 - Modem Carrier 1-800-909-7197 - "... ring, ring ..." 1-800-909-72XX -------------- 1-800-909-7202 - Frank with MSA 1-800-909-7203 - SkyTel Voice Mail System 1-800-909-7206 - "... ring, ring ..." 1-800-909-7207 - "... ring, ring ..." 1-800-909-7208 - SkyTel Voice Mail System 1-800-909-7209 - SkyTel Voice Mail System 1-800-909-7210 - Modem Carrier 1-800-909-7213 - "... ring, ring ..." 1-800-909-7214 - SkyTel Voice Mail System 1-800-909-7216 - "... ring, ring ..." 1-800-909-7218 - "... ring, ring ..." 1-800-909-7219 - "... ring, ring ..." 1-800-909-7222 - AT&T Easy Reach 800 1-800-909-7225 - Global Crossing's Speedlink 1-800-909-7226 - Greybo Business Forums 1-800-909-7227 - Teressa Robinson 1-800-909-7229 - "Hello?" 1-800-909-7230 - Lion Deswersely 1-800-909-7231 - "... ring, ring ..." 1-800-909-7235 - "... ring, ring ..." 1-800-909-7236 - "... ring, ring ..." 1-800-909-7238 - Dave 1-800-909-7239 - "... ring, ring ..." 1-800-909-7240 - "... ring, ring ..." 1-800-909-7243 - Airtouch Paging 1-800-909-7244 - "Extension: 2438" 1-800-909-7251 - AT&T Easy Reach 800 1-800-909-7253 - "Hello?" 1-800-909-7257 - Video-i Corporation 1-800-909-7258 - Cosmarks Sales and Marketing 1-800-909-7259 - AT&T Easy Reach 800 1-800-909-7262 - Primary Children's 1-800-909-7264 - AT&T Easy Reach 800 1-800-909-7265 - AT&T - "checked for trouble" 1-800-909-7268 - National Ordering Centre 1-800-909-7271 - "... ring, ring ..." 1-800-909-7273 - Numeric Message System 1-800-909-7278 - BMW Parts and Ordering Service 1-800-909-7279 - AT&T Easy Reach 800 1-800-909-7282 - "... ring, ring ..." 1-800-909-7284 - "Good Afternoon Trent Speaking" 1-800-909-7286 - Fatal Travel Leasure Desk 1-800-909-7293 - "... ring, ring ..." 1-800-909-7297 - Happy Paws, Natural Pet Foods 1-800-909-7299 - AT&T Easy Reach 800 1-800-909-73XX -------------- 1-800-909-7311 - AT&T Easy Reach 800 1-800-909-7316 - Pioneer 1-800-909-7321 - North Adwadore 1-800-909-7330 - High Tone 1-800-909-7331 - MCI Worldcom Pre-Paid Card System 1-800-909-7332 - Pure Water 1-800-909-7333 - AT&T Easy Reach 800 1-800-909-7336 - AT&T Easy Reach 800 1-800-909-7337 - Pediatrics 1-800-909-7340 - MCI Worldcom 1-800-909-7345 - DW-Make Oil Specialties 1-800-909-7352 - AT&T Easy Reach 800 1-800-909-7354 - STFI 1-800-909-7362 - Remax 1-800-909-7365 - AT&T Texas Local Service 1-800-909-7367 - Excel - Global Telecommunications 1-800-909-7368 - Merlin Mail 1-800-909-7373 - Service Master Healthcare Service 1-800-909-7375 - "Ronny" 1-800-909-7382 - Voice Mail Box 1-800-909-7385 - Voice Mail Box 1-800-909-7386 - AT&T Easy Reach 800 1-800-909-7389 - AT&T Easy Reach 800 1-800-909-7392 - Lenny 1-800-909-74XX -------------- 1-800-909-7412 - Merrill Lynch 1-800-909-7418 - AT&T Easy Reach 800 1-800-909-7419 - "Please leave your message after the tone" 1-800-909-7422 - Sunny Seal Supplies 1-800-909-7423 - "Thanks for calling for your free cream-of-rice recipe" 1-800-909-7428 - Numeric Message System 1-800-909-7432 - Stevens Grass community 1-800-909-7434 - Lakeside Country Club 1-800-909-7437 - AT&T Easy Reach 800 1-800-909-7445 - AT&T Easy Reach 800 1-800-909-7447 - FAX 1-800-909-7448 - AT&T Easy Reach 800 1-800-909-7449 - Sputal Land 1-800-909-7454 - Farm Bureau Award Headquarters 1-800-909-7460 - Professional Office Protection Hotline 1-800-909-7464 - Rays and Gibsons 1-800-909-7465 - AT&T Easy Reach 800 1-800-909-7468 - "Please Hold" 1-800-909-7469 - EPI 1-800-909-7471 - Capital Music Centre 1-800-909-7475 - ATCO Insurance Services 1-800-909-7476 - Norman Wyatt Insurance Agency 1-800-909-7480 - Voice Mail Box 1-800-909-7481 - "Hello?" 1-800-909-7483 - The Paper Store 1-800-909-7484 - Hang-up 1-800-909-7485 - Dance, Theatre, Waitress/Hostess, Cashier/Clerk, Model 1-800-909-7488 - Pipco 1-800-909-7489 - "Hello?" 1-800-909-7496 - AT&T Easy Reach 800 1-800-909-75XX -------------- 1-800-909-7508 - AT&T Easy Reach 800 1-800-909-7510 - Modem Carrier 1-800-909-7513 - "Hello?" 1-800-909-7514 - Virtual Voice 1-800-909-7516 - Doug Overvold 1-800-909-7517 - Brian Jackaneti 1-800-909-7519 - Telegram Message Service 1-800-909-7521 - AT&T Easy Reach 800 1-800-909-7525 - AT&T Easy Reach 800 1-800-909-7526 - "Allo?" 1-800-909-7527 - Southern Hundred Club 1-800-909-7528 - Voice Conference System 1-800-909-7529 - Woodplans of the Carolinas 1-800-909-7532 - Universal Health Solutions 1-800-909-7537 - "Peads this is Jana" 1-800-909-7541 - "(DTMF 1) Please enter your 4 digit pin" 1-800-909-7546 - Terry Ben Skin Care 1-800-909-7547 - AT&T Easy Reach 800 1-800-909-7548 - Volunteer Cheque Express 1-800-909-7550 - Answering Machine 1-800-909-7552 - Global Crossings Speed Link 1-800-909-7555 - "... on hold ..." 1-800-909-7556 - AT&T Easy Reach 800 1-800-909-7558 - Shopper Division; Electric Mobility 1-800-909-7559 - "French recording" 1-800-909-7560 - AT&T Easy Reach 800 1-800-909-7562 - High Tone 1-800-909-7569 - FAX 1-800-909-7570 - AT&T Easy Reach 800 1-800-909-7571 - "Hello?" 1-800-909-7572 - Love Fargo Educational Financial Services 1-800-909-7577 - AT&T Easy Reach 800 1-800-909-7578 - Gary Lider; Health Care Recoveries Inc. 1-800-909-7595 - FAX 1-800-909-76XX -------------- 1-800-909-7600 - Lionel Alarm Clock 1-800-909-7601 - People Transport 1-800-909-7603 - Hang Line (exploitable) 1-800-909-7606 - Pizza Hut 1-800-909-7608 - SNS 1-800-909-7609 - "Mail Box: 5134" 1-800-909-7611 - "Mail Box of: Kiwi Ping" 1-800-909-7613 - National offices of StarTouch 1-800-909-7616 - Action Aircraft 1-800-909-7618 - Malwire 1-800-909-7624 - Numeric Message System 1-800-909-7626 - Pardom Painting 1-800-909-7628 - Numeric Message System 1-800-909-7631 - CanaDream 1-800-909-7632 - AT&T Easy Reach 800 1-800-909-7633 - "some french guy" 1-800-909-7635 - FAX 1-800-909-7637 - Total Tech Accounting 1-800-909-7639 - Tom McCordey 1-800-909-7641 - "mmmhello?" 1-800-909-7642 - Southern Missori Gas Company 1-800-909-7646 - Local Construction 1-800-909-7659 - "hello?" 1-800-909-7662 - AT&T Easy Reach 800 1-800-909-7667 - "mexican hold music..." 1-800-909-7668 - Customer Resource Centre 1-800-909-7670 - SkyTel 2-Way 1-800-909-7671 - Numeric Message System 1-800-909-7672 - AT&T Easy Reach 800 1-800-909-7678 - "PIN query" 1-800-909-7687 - "900277114020447, DTMF, re-order signal" 1-800-909-7689 - "Please enter your four digit PIN now" 1-800-909-7691 - Tropical Adventures & Adventures Express 1-800-909-7694 - AT&T Easy Reach 800 1-800-909-7697 - Tropical Adventures & Adventures Express 1-800-909-7698 - Voice/Numeric Message System 1-800-909-77XX -------------- 1-800-909-7702 - Numeric Message System 1-800-909-7704 - Tony's Voice Mail Box 1-800-909-7705 - Voice/Numeric Message System 1-800-909-7708 - Numeric Message System 1-800-909-7713 - Numeric Message System (re-order following) 1-800-909-7717 - AT&T Easy Reach 800 1-800-909-7720 - "some silly Las Vegas company" 1-800-909-7723 - AT&T Easy Reach 800 1-800-909-7725 - AT&T Easy Reach 800 1-800-909-7726 - Beeping In a Loop (re-order signal) 1-800-909-7730 - Hoge Poge 1-800-909-7731 - SkyTel 2-Way 1-800-909-7734 - Voice/Numeric Message System 1-800-909-7735 - Voice/Numeric Message System 1-800-909-7736 - "... ring, ring ..." 1-800-909-7737 - "Mail Box #: 9097737" 1-800-909-7738 - "some french lady" 1-800-909-7739 - CEO Voice Mail Box 1-800-909-7740 - Voice/Numeric Message System 1-800-909-7741 - Voice/Numeric Message System 1-800-909-7743 - Greg Chambers' pager service 1-800-909-7751 - Jimmy Neal's answering machine 1-800-909-7753 - AT&T Easy Reach 800 1-800-909-7757 - BAI Biptography 1-800-909-7758 - AT&T Easy Reach 800 1-800-909-7759 - AT&T Easy Reach 800 1-800-909-7763 - CSR Storm Centre 1-800-909-7766 - "Ring, Ring, Ring, *hangup*" (exploitable) 1-800-909-7769 - Human Resources Department; ISMEfector 1-800-909-7772 - "Hi this is Donna how may I help you?" 1-800-909-7781 - "4-digit PIN system" 1-800-909-7782 - AT&T Easy Reach 800 1-800-909-7783 - Global-Crossings Speedlink 1-800-909-7784 - PRTA 1-800-909-7786 - "(DTMF 1) Please enter your 4 digit pin" 1-800-909-7789 - Modem Carrier 1-800-909-7793 - AT&T Easy Reach 800 1-800-909-7794 - "(DTMF 1) Please enter your 4 digit pin" 1-800-909-7796 - AT&T Easy Reach 800 1-800-909-78XX -------------- 1-800-909-7800 - Lionel Alarm Clock 1-800-909-7803 - "(DTMF 1) Please enter your 4 digit pin" 1-800-909-7809 - AT&T Easy Reach 800 1-800-909-7810 - Numeric Message System 1-800-909-7811 - Numeric Message System 1-800-909-7813 - AT&T Easy Reach 800 1-800-909-7814 - Numeric Message System 1-800-909-7815 - Global Crossings Speedlink 1-800-909-7816 - AT&T Easy Reach 800 1-800-909-7824 - AIDS Line 1-800-909-7827 - Soften New Denmar 1-800-909-7831 - "Good afternoon" 1-800-909-7845 - Alert Technologies, Supply Net Communications 1-800-909-7850 - High Tone 1-800-909-7851 - Bell South Voice Mail Service 1-800-909-7858 - AT&T Easy Reach 800 1-800-909-7859 - AT&T Easy Reach 800 1-800-909-7860 - "Hello?" 1-800-909-7863 - "... ring, ring..." 1-800-909-7864 - Skytel Voice Mail System 1-800-909-7865 - Fone pr0n 1-800-909-7869 - MCI Worldcom calling card system 1-800-909-7875 - Naval Ammunition Technical Support Line 1-800-909-7876 - AT&T Easy Reach 800 1-800-909-7879 - TTY/TDD System 1-800-909-7888 - Corporate Headquarters; DG Systems 1-800-909-7898 - AT&T Easy Reach 800 1-800-909-79XX -------------- 1-800-909-7905 - Answering Machine (Voice Mail option available) 1-800-909-7909 - Corporate Headquarters 1-800-909-7912 - "Hello?" 1-800-909-7918 - "Thank you for calling, our office is currently closed" 1-800-909-7920 - AT&T Easy Reach 800 1-800-909-7924 - Beeping in a loop (re-order) 1-800-909-7925 - "Thank you for calling, our office is currently closed" 1-800-909-7926 - Automotive Warranty Premium Department 1-800-909-7928 - New offices of SW Showtime 1-800-909-7931 - "Thank you for calling, our office is currently closed" 1-800-909-7932 - "Thank you for calling, our office is currently closed" 1-800-909-7935 - Modem Carrier 1-800-909-7938 - "Thank you for calling, our office is currently closed" 1-800-909-7940 - AT&T Easy Reach 800 1-800-909-7946 - "Hello you have reached 'we are your pool service'" 1-800-909-7947 - "Please enter your authorization code now" 1-800-909-7950 - Maximum Impact General Delivery Mail Box 1-800-909-7955 - AT&T Easy Reach 800 1-800-909-7960 - "Thank you for calling metal music" 1-800-909-7962 - "You've reach Eric Farrem with 3M" 1-800-909-7967 - Numeric Message System 1-800-909-7969 - Octel Link Network 1-800-909-7977 - Simon and Schusters PC helpdesk 1-800-909-7979 - "Hello this is Matt, thank you for calling BO FLEX" 1-800-909-7980 - Loan-by-Phone from Energy First Credit Union 1-800-909-7990 - Lousiana Humanities Office 1-800-909-7993 - Answering Machine 1-800-909-7994 - FAX 1-800-909-80XX -------------- 1-800-909-8000 - Trade Labs 1-800-909-8003 - AT&T Easy Reach 800 1-800-909-8004 - "For quality assurance purposes your call may be monitored..." 1-800-909-8006 - Oxford Insurance Agency 1-800-909-8008 - AT&T Easy Reach 800 1-800-909-8011 - AT&T Easy Reach 800 1-800-909-8012 - AT&T Easy Reach 800 1-800-909-8016 - AT&T Easy Reach 800 1-800-909-8020 - Global Crossings Speedlink 1-800-909-8024 - "i-24-by-7 dot com" 1-800-909-8031 - AT&T Easy Reach 800 1-800-909-8034 - Global Crossings Speedlink 1-800-909-8035 - Coffee Break Design 1-800-909-8036 - Global Crossings Speedlink 1-800-909-8040 - AT&T Easy Reach 800 1-800-909-8043 - AT&T Easy Reach 800 1-800-909-8048 - "(DTMF 1) Please enter your 4 digit pin" 1-800-909-8057 - "Thank you for calling IpCo Safety" 1-800-909-8058 - "Thank you for calling IpCo Safety" 1-800-909-8063 - AT&T Easy Reach 800 1-800-909-8064 - Medic-Systems Division; 'High Point' 1-800-909-8065 - "Thank you for calling IpCo Safety" 1-800-909-8067 - "Thank you for calling IpCo Safety" 1-800-909-8068 - "ring ring... ring ring..." 1-800-909-8069 - SkyTel Voice Mail System 1-800-909-8072 - "ring ring... ring ring..." 1-800-909-8078 - Wasa-Papers Products Quality Hotline 1-800-909-8079 - "*beep* Ext. 61262473 is invalid" 1-800-909-8080 - Instrumental Legends 1-800-909-8083 - "Thank you for calling Qualitech" 1-800-909-8084 - Hawkinson Insurance Agency 1-800-909-8088 - "Hello? Voice messaging system" 1-800-909-8090 - Octel Voice Information Processing System 1-800-909-8094 - AT&T Easy Reach 800 1-800-909-8096 - "Hello?" 1-800-909-8099 - Worldcom 1-800-909-81XX -------------- 1-800-909-8100 - "Good morning this is Rosie" 1-800-909-8103 - "(DTMF 1) Please enter your 4 digit pin" 1-800-909-8106 - "Thank you for calling..." 1-800-909-8113 - AT&T Easy Reach 800 1-800-909-8116 - Numerical Message System 1-800-909-8120 - AT&T Easy Reach 800 1-800-909-8121 - Numerical Message System 1-800-909-8122 - "Hello?" 1-800-909-8123 - "Law Courts Associates Answering Service" 1-800-909-8124 - "Hello?" 1-800-909-8125 - "i-24-by-7 dot com" 1-800-909-8127 - AT&T Easy Reach 800 1-800-909-8133 - Helena 10; Call Restricted. 1-800-909-8139 - "Thank you for calling..." 1-800-909-8140 - "Thank you for calling YSKS services..." 1-800-909-8144 - "Hello?" 1-800-909-8145 - AT&T Easy Reach 800 1-800-909-8148 - "After hour peer service..." 1-800-909-8149 - AT&T Easy Reach 800 1-800-909-8156 - Call Home America Ultimate 800 1-800-909-8161 - Country Wide Home Loans 1-800-909-8173 - US Airway National Human Resources Line 1-800-909-8176 - "Hello?" 1-800-909-8177 - "Liquid Container" 1-800-909-8178 - Iron Mountain Services. 1-800-909-8179 - AT&T Easy Reach 800 1-800-909-8180 - "Ring, Ring..." 1-800-909-8182 - "Ring, Ring..." 1-800-909-8183 - Voice Mail System 1-800-909-8188 - Business Opportunity Alliance 1-800-909-8189 - Marian Grave's Medical Products 1-800-909-8190 - Sprint Canada's Automated Receptionist 1-800-909-8191 - AT&T Easy Reach 800 1-800-909-8192 - Linda Hunter 1-800-909-8193 - SkyTel Voice Mail System 1-800-909-8194 - "Ring, Ring..." 1-800-909-8195 - "Ring, Ring..." 1-800-909-8197 - "Ring, Ring..." 1-800-909-8198 - "Ring, Ring..." 1-800-909-8199 - "Hello?" 1-800-909-82XX -------------- 1-800-909-8200 - Columbia House Studio Library 1-800-909-8201 - Wholesale Crack 1-800-909-8202 - Voice Mail Box of Linda Randell 1-800-909-8203 - Voice Mail Box of Lisa Burmingham 1-800-909-8205 - Voice Mail Box of Wayne Thompson 1-800-909-8206 - "Ring, Ring..." 1-800-909-8209 - SkyTel Voice Mail System 1-800-909-8210 - Voice Mail Box of Darrel Short 1-800-909-8211 - Full Spectrum Lending 1-800-909-8212 - Voice Mail Box of Michelle Sheppard 1-800-909-8213 - Full Spectrum Lending 1-800-909-8214 - "Thank you for calling..." 1-800-909-8215 - Full Spectrum Lending 1-800-909-8216 - Work At Home Mail-Order Program 1-800-909-8217 - Full Spectrum Lending 1-800-909-8218 - SkyTel Voice Mail System 1-800-909-8219 - "Ring, Ring..." 1-800-909-8220 - Brenda King; Business Services Group 1-800-909-8221 - Kris Mattigan; Business Services Group 1-800-909-8223 - SkyTel Voice Mail System 1-800-909-8224 - "Ring, Ring..." 1-800-909-8226 - AT&T Easy Reach 800 1-800-909-8231 - "650-8231: leave a message" 1-800-909-8238 - Low Tone 1-800-909-8241 - i-24-by-7.com 1-800-909-8244 - The Cobalt Group 1-800-909-8249 - SkyTel Voice Messaging Service 1-800-909-8250 - AT&T Easy Reach 800 1-800-909-8251 - SkyTel Voice Messaging Service 1-800-909-8253 - "Ring, Ring..." 1-800-909-8256 - Wonder Link Incorporated 1-800-909-8258 - Trapmen and Travel 1-800-909-8259 - AT&T Easy Reach 800 1-800-909-8260 - SkyTel Voice Messaging Service 1-800-909-8261 - SkyTel Voice Messaging Service 1-800-909-8268 - SkyTel Voice Messaging Service 1-800-909-8269 - "Ring, Ring..." 1-800-909-8270 - SkyTel Voice Messaging Service 1-800-909-8271 - AT&T Easy Reach 800 1-800-909-8272 - Kerri Gastrum's Voice Mail Box 1-800-909-8274 - "Ring, Ring..." 1-800-909-8280 - "Ring, Ring..." 1-800-909-8281 - SkyTel Voice Messaging Service 1-800-909-8282 - "This is Michelle may I help you?" 1-800-909-8285 - "Ring, Ring..." 1-800-909-8287 - SkyTel Voice Messaging Service 1-800-909-8288 - AT&T Easy Reach 800 1-800-909-8290 - Numeric Message System 1-800-909-8292 - AT&T Easy Reach 800 1-800-909-8294 - Voice Mail Box: 4971 1-800-909-8296 - "Ring, Ring..." 1-800-909-8297 - "Please enter your four digit pin now" 1-800-909-8298 - Global Express Travel and Cruise 1-800-909-8299 - International Central Randomisation Centre 1-800-909-83XX -------------- 1-800-909-8300 - Columbia House Video Library 1-800-909-8306 - Lynol Sniders 1-800-909-8310 - AT&T Easy Reach 800 1-800-909-8311 - Doner Minerals 1-800-909-8312 - AT&T Easy Reach 800 1-800-909-8313 - AT&T Business Office (Houston Texas) 1-800-909-8316 - Janis Smith's Voice Mail Box 1-800-909-8318 - Janis Smith's Voice Mail Box 1-800-909-8319 - AT&T Easy Reach 800 1-800-909-8320 - "Ring, Ring..." 1-800-909-8321 - AT&T Easy Reach 800 1-800-909-8326 - The Professionals; St.Johns Health Information Centre 1-800-909-8329 - AT&T Easy Reach 800 1-800-909-8330 - James Soyer of 3M Pharmaceuticals (Voice Mail Box) 1-800-909-8335 - RT Martins Real Estate Associates 1-800-909-8338 - "Hello?" 1-800-909-8340 - Technical Support Voice Mail System 1-800-909-8341 - Skytel Voice Messaging Service 1-800-909-8342 - "Hi this is Larry, can't take your call..." 1-800-909-8343 - "Hi this is Larry, can't take your call..." 1-800-909-8344 - "Please hold while I try to locate: Lion and Brenda Howard" 1-800-909-8345 - "Ring, Ring..." 1-800-909-8346 - "Ring, Ring..." 1-800-909-8347 - AT&T Easy Reach 800 1-800-909-8348 - VE-Capital Financial Services 1-800-909-8349 - "Ring, Ring..." 1-800-909-8352 - "Hello, thank you for calling. Please enter your extention" 1-800-909-8354 - AT&T Easy Reach 800 1-800-909-8356 - "Ring, Ring..." 1-800-909-8357 - Skytel Voice Messaging Service 1-800-909-8359 - "Ring, Ring..." 1-800-909-8360 - The X-State Hotline 1-800-909-8362 - "Ring, Ring..." 1-800-909-8364 - Skytel Voice Messaging Service 1-800-909-8365 - AT&T Easy Reach 800 1-800-909-8366 - Voice Mail Box forwarding for BOX # 5003 1-800-909-8370 - Jannons Management 1-800-909-8371 - George at the Design Group 1-800-909-8377 - *high pitched beep* Qwest Operator 1-800-909-8378 - AT&T Easy Reach 800 1-800-909-8382 - Skytel Voice Messaging Service 1-800-909-8384 - Mercury Enterprise 1-800-909-8385 - AT&T Easy Reach 800 1-800-909-8386 - "Ring, Ring..." 1-800-909-8389 - "Ring, Ring..." 1-800-909-8391 - "Ring, Ring..." 1-800-909-8394 - "Ring, Ring..." 1-800-909-8397 - Phone-Bridge Insurance 1-800-909-8398 - "Ring, Ring..." 1-800-909-8399 - JG Financial Service 1-800-909-84XX -------------- 1-800-909-8400 - "This is Marie how can I help you?" 1-800-909-8401 - Skytel Voice Messaging Service 1-800-909-8403 - "Ring, Ring..." 1-800-909-8405 - "Ring, Ring..." 1-800-909-8406 - "Ring, Ring..." 1-800-909-8411 - "Ring, Ring..." 1-800-909-8412 - Skytel Voice Messaging Service 1-800-909-8416 - "Ring, Ring..." 1-800-909-8418 - "Ring, Ring..." 1-800-909-8419 - Skytel Voice Messaging Service 1-800-909-8425 - "Ring, Ring..." 1-800-909-8426 - "Ring, Ring..." 1-800-909-8427 - Bluecross 1-800-909-8428 - "Ring, Ring..." 1-800-909-8431 - Skytel Voice Messaging Service 1-800-909-8434 - "Ring, Ring..." 1-800-909-8435 - "Ring, Ring..." 1-800-909-8436 - High Tone 1-800-909-8437 - Designers In Motion 1-800-909-8440 - FAX 1-800-909-8441 - "Please enter your four digit pin now" 1-800-909-8443 - "Ring, Ring..." 1-800-909-8450 - "Ring, Ring..." 1-800-909-8451 - "Ring, Ring..." 1-800-909-8452 - "Ring, Ring..." 1-800-909-8453 - AT&T Easy Reach 800 1-800-909-8454 - AT&T Easy Reach 800 1-800-909-8558 - "Ring, Ring..." 1-800-909-8459 - "Ring, Ring..." 1-800-909-8460 - Skytel Voice Messaging Service 1-800-909-8464 - AT&T Easy Reach 800 1-800-909-8469 - AT&T Easy Reach 800 1-800-909-8471 - Miller Axeton and Injury Centre 1-800-909-8472 - High Tone, Low Tone 1-800-909-8476 - Direct Access - private surgeon line 1-800-909-8478 - Psychriatric Centre of San Diego 1-800-909-8485 - AT&T Easy Reach 800 1-800-909-8486 - New York/Metro Area, Postal/Federal Credit Loan by Phone Service .END OF SCAN CHUNK -=[ Complete Scan Compilation to be released: Fall 2001 ]=- --- -- Credits Without the following contributions this zine issue would be fairly delayed or not released, so thank you to the following people: M. Slawson, p_bang, (and myself) The Clone -- Shouts: Hack Canada (#HackCanada), Team Phreak (#teamphreak), #PhreakBC, k-rad-bob @ b0g, Blackened @ Damage Inc., The Grasshopper Unit, Flippersmack, Pyrofreak, _plappy, soap, Seviak, Snow, Banshee, Annie, papercut, Kybo_ren, TProphet, krys, MSM (Matthew SuperMan), and lastly to everyone and anyone who contributes to the Canadian H/P scene. ;. .;.. ; ;. ;.. ;.. .;..; .;.; .;; ;.. .;..;. .;..; .;.;...; ;..;.. .;. A .;. .;. ;.. N E T T W E R K E D ;.. ;..;.. P R O D U C T ;..;.. .;..; ;..;.. ; .;..;.;.. .; . .;. ..;.. .;.. . .; ..;..;..;.. .; ;..;. .;.. . .;.. .;.;. ..;. ..;.. .;. ;.;..;;..;.; ;.;;..;.. ;.;.; .; . ;.;..;. .;. ;.;:.;. ,;....;. .;.;. .;.; .;.;.; .;.; ;..;. .;.;;.; .;. ..; ;. > > > i'm a bunny, i'm a bunny!