<=-------------------------------------------------------------------------=> |\ /| |\ Issue #1 JAN1999 | \ / | | | | \/ | |\__ | | |\___ | |\/| | |\__ | _ \ |\__ | |_ | _/ |\ |\ ____/| | | | | | _ \ | / | _ \ | \ | _| | |_| | / ___/ | | | | \___/ | \_\ | _/ | /\ | \___\ \___._/ \ \ | | \| | | | | | || | _________\ \ | | | | |/ | ||/ /____________/ |/ |/ | | |/ L a u g h i n g <=-------------------------------------------------------------------------=> Presented By: ALOC - Australias Legion of Cyberpunkz Web:/ http://www.aloc.cc Email:/ phrost@aloc.cc <=-------------------------------------------------------------------------=> 'My business is a little cloak and dagger' -= I walk the line, ALieN SeX FieND =- <=-------------------------------------------------------------------------=> Contents -------- 1.0 -[ Welcome ]- 1.1 - Introduction......................................Phrost Byte 1.2 - About ALOC 1.3 - Contibutors To This E-zine 2.0 -[ News ]- 2.1 - PCCOPS...........................................Today Tonight 2.2 - Buying A Payfone.......................The West Magazine (Sat) 2.3 - Telstra Will Close WA 000 Lines..........West Australian (Sat) 3.0 -[ Hacking ]- 3.1 - Book of Hool..............................................Hool 4.0 -[ Phreaking ]- 4.1 - Phreak Out!...........................................Deicidal 4.2 - Pay Fone Phreaking.................................Phrost Byte 4.3 - Pay Fone Log Books.................................Phrost Byte 4.4 - FAST...............................................Phrost Byte 5.0 -[ Anarchy ]- 5.1 - Taking over the Big-W Paging.............................Phyba 6.0 -[ Challenge ]- 7.0 -[ Conclusion ]- <=-------------------------------------------------------------------------=> 1.0 -[ Welcome ]- ----------------- 1.1 - Introduction Welcome 2 the first issue of 'Morpheus Laughing'. It has been awhile since there has been a decent au underground mag, and to my belief this is the first that has come along in a looong! time. This first issue will be a full version.. i have contained the txt (and fone number) for Telstras FAST and depending on the response i get 4 releasing such a number (although it can b easily obtained thru scanning).. future issues will contain more numbers, or may be stripped, and only released to a certain amount of ppl. I would like this information 2 b available to all members of the underground, but due to 'warez kiddies', 'code kidz', and 'lamerz' this may not b possible. Morpheus will not be released on a set date, they will b released when i receive enough info to compile another issue. If u have something u would like printed please send it in.. or if i have contained something in a previous issue that u feel u should have credit 4, or dont like, please!! let me know and i will make the due alterations. Although i may come across as i know everything, i state that i definatly Do Not, and dont claim to. If an article has something that is of an importance that has been left out, please let me know. Please enjoy the rest of the e-zine and please give me some feedbak. - Phrost Byte - 1.2 - About ALOC / Morpheus ALOC stands for Australias Legion of Cyberpunkz. I started it up because when i first started my foray into 'hacking' and its related topics i found it hard to find information, especially on phreaking in au. I would like newbies not to find it hard to find information, but not to be given ALL the information in pretty little programs with big beautiful shiny BUTTONS! With ALOC and Morpheus i want to basically push ppl in the right direction, make them think themselves, and come up with new ideas, although some techniques will b fully described because they are more than likely easy anyway. As i stated earlier, the underground mag scene for au was pretty dead (as far as i was aware of), and so were the groups, and the sharing of information. By forming ALOC i have hoped to spread the information, and keep it updated. As many of u know i have had an overwhelming response to ALOC, and it is currently under a MAJOR reconstruction due to me not expecting it to go so far. I have recieved ALOT of emails congratulating me on what i have done, and that it was about time sum1 started doing something, and also that they have learned more in 2 weeks then they have in 2 years because of finding ALOC. I have also been abused by a handfull of individuals who have put me down, and i feel this is due to their jealousy because they are not the one who came up with the ideas that i have. Be it them saying my web page is crap, it has no lynx support (in this day and age, even if u use Linux, u should have a graphical viewer, and its your problem if ure to 'leet' to use any thing with buttons on it) or them just bagging me for spreading information. Too bad, i will spread as much as i can with out it being abused... hopefully ;) This magazine in its electronic form can not be sold without prior permission from the authors. It also may not be spread via any sort of Public Domain, Shareware or CD-ROM package. 1.3 Contibutors To This E-zine Phrost Byte - phrost@aloc.cc Deicidal - deicidal@aloc.cc Hool - hool5400@yahoo.com Phyba - optik@phreaker.net <=-------------------------------------------------------------------------=> 2.0 -[ News ]- -------------- 2.1 - PCCOPS Recently, some of u may have seen it, on TV on 'Today Tonight' (i think), there was a feature on a program called PCOPS (stands for Personal Computer Outreach Program System.. or something similar). It allows police to call up to 900 people in half an hour by doing just one call, and leaving a recorded message. It is used to alert a large number of people at once of emergencies, etc. The system is a computer program, and map co-ordinates, and references, and also area codes are used to select the area to be rung. The program which does this was sold for $50 000. 2.2 - Buying A Payfone This article was taken from The West Magazine (Sat).. it may b of little interest to most of u.. it goes on about how that dick kevin bloody wilson bought a payfone for $150. Maybe we can buy one from sumwhere instead of stealing them??? :) = My Last Good Buy - Kevin Bloody Wilson = 'I recently paid $150 for a second-hand Telstra pay fone (to be used as a stage prop). I brought it from The Twin Towns Services Club on the Gold Coast while I was over there for a series of concerts just befor Christmas. They paid the $60 to ship it over. It needed to be made lighter for overseas travel so on Boxing Day my brother Terry and I decided to gut it to reduce the weight. I'm convinced now there really is a Santa Claus 'cos when we prised it open (a trick Terry taught me as a young bloke) - bloody hell - $28 in coins (and it's only $26 for a carton of beer). There was also at least $10 worth of pre-loved, assorted-flavour chewing gum stuck to the back of the unit. I'm no bloody Rhodes scholar but think about this: original asking price $150, less freight $60, less cash bonus $28, less chewing gum $10, ACTUAL COST $52. A fair dinkum bloody bargain." 2.3 - Telstra Will Close WA 000 Lines WA emergency services back phone decision. By David Utting Telstra is planning to close its 000 emergency service centers in WA in April and centralize the service in Sydney and Melbourne. A Telstra spokesman said the new centralized service would be safer and more reliable because specialist operators would handle only 000 calls. Perth's two to three 000 operators handle 60,000 calls per month. Currently 7 per cent of WA's 000 calls are diverted to Adelaide and other places because of congestion in Perth's 000 center. Nationally, 800 000 emergency 000 calls are made a month - over 10 000 from mobile phones. The Federal Opposition has called on Telstra to conduct an urgent review of its 000 service before centralising its operation. Opposition communications spokesman Stephen Smith said in the light of disturbing events in Tasmania this week involving incorret dispatch of emergency services after calls to the 000 emergency number, any plans to close regional 000 centres including Perth should be shelved until it could be guaranteed the new system will work. Telstra admitted in October that it could not fully guarantee the accuracy of its 000 emergency call system after its 000 call made on a mobile phone from the Mt Barker golf course in South Australia was diverted to WA operators because the Adelaide operators were busy. As a result, St John Ambulance sent an ambulance to the Mt Barker golf course in WA, more than 2000km from the emergency. Mr Smith said these incidents involving the incorrect dispatch of calls originating from mobile phones demonstrated the need for immediate action. "When the emergency call system fails lives are put at risk. There is no room here for a trial of efficiency or productivity measures. And there is no substitute for local knowledge and specialised training," he said. The move was contingent on the moLI (mobile location identification) system working satisfactorily, the Telstra spokesman said. Tasmania would retain its local 000 srevice because only one cable connected it to the mainland, the Telstra spokesman said. But the WA service would be moved because multiple cables connect the State to the eastern States. WA Police and Emergency Services Minister Kevin Prince has supported Telstra's move. "I accept (Telstra's) assurance that they will continue to deliver a fast, efficient 000 service for Western Australians," Mr Prince said. "Telstra supplies the service and it is their decision to centralise the service in Sydney and Melbourne." 3.0 -[ Hacking ]- ----------------- 3.1 - Book of Hool NOTE: this is just an exerpt from the full book. I have taken a selection, and edited the logs so its in an easier to read format - Phrost FOREWORD: Think about this: information is power. Undeniable. A map offers a strategical advantage. Oh yeah. A map of the internet (haha...nice joke) doesn't exist and probably never will, as is is a swiftly mutating place. Things change too often. But if at one point in time a person was to start a catalogue of IP's, and versions and whatever else, that would create power. I dare say that every hacker has a similar list, and here is part of mine. A new exploit's been released? You just found something interesting and want to try it on a few computers? Here you are. This is a gift from me to all the ALOC members, and ONLY the ALOC members. Sharing this information (which is painstaking shit to collect), would be nothing less than a breach of trust. (email Hool for the full version and ask him for it - Phrost) There are plenty of IP's here. And most i collected myself, though i don't deny that i collected some from elsewhere (if i saw a nice list i grabbed it). As I said, things change fast out there, so things may not be correct, but most will. 199.4.57.1 alakai.maui.com TCP FreeBSD (puka.maui.com) (ttyp1) login: 1800 1831-1800801385 (Connect 19200:19200) S.M.C. brisbane. Host+ v 1.01 - REGISTERED Can you support ANSI color graphics (y/N)? y Please enter your full name: 129.96.249.2 129.96.249.2 TCP & UDP User Access Verification Password: 129.96.249.3 129.96.249.3 TCP User Access Verification Password: 1800 1831-1800804749 (Connect 19200:14400) Y"Logon: Y"Logon: Y"Logon: Y"Logon: Y"Logon: Y"Logon: Y"Logon: 1800 1831-1800356821 IBM Australia/New Zealand Network SYSTEM: IBMAUS02 DATE: 11/14/98 TERMID: XSQAF9B8 TIME: 21:50:37 ACCOUNT... AUIBMASG USERID... GUEST PASSWORD... New PWD... EMS1070E The group is unknown or you are not defined to it. Enter desired product or press the HELP key (PF1) for assistance. ===> 1800 1831-1800500963 (Connect 19200:19200) Optus Messaging Remote Access Service login: 131.172.16.1 alpha.lib.latrobe.edu.au TCP OSF/1 (alpha.lib.latrobe.edu.au) (ttyp5) login: 203.108.190. BayStack 350T HW:RevC FW:V1.01 SW:V1.2.0.10 Password: [ *************** ] 203.55.1.1--> Welcome to Internet Access Australia Pty Limited. (Ballarat Server) User Access Verification Username: 203.25.142.201 www.samuseum.sa.gov.au TCP Digital UNIX (www.saschools.edu.au) (ttyp0) login: www.adelong.com.au-->203.102.212.25 203.102.212.25 rush.adelong.com.au TCP FreeBSD (adelong.braenet.com.au) (ttyp0) login: 203.37.202.8 as-02.bris.corplink.com.au TCP U.S. Robotics Total Control (tm) NETServer Card login: 203.37.202.6 as-01.bris.corplink.com.au TCP & UDP U.S. Robotics Total Control (tm) NETServer Card Login: 203.62.182.205-->ppp14-22-melbourne.alphalink.com.au Linux 2.0.35 (baddog.sid.au) (ttyp0) baddog login: 203.8.222.3 indiepop.iinet.net.au TCP Red Hat Commercial Linux 2.0 Kernel 2.0.35 on a i586 login: 203.8.222.5 jazz5.dy.iinet.net.au TCP & UDP User Access Verification Username: 203.2.135.20 switch.schools.net.au TCP Bay Networks BayStack 304 Ethernet Switch Copyright (c) 1997 Bay Networks, Inc. All Rights Reserved. Enter Password: <=-------------------------------------------------------------------------=> 4.0 - Phreaking --------------- 4.1 - Phreak Out! Telstra bins are like gold. Telstra might not think this but the majority of the phreaking community does. A while ago Phrost and myself went on an interesting excursion in the hope of finding some Telstra junk. First thing is not to expect too much, for we expected to find manuals and books and codes and all sorts of stuff that, when you think about it, wouldn't have been thrown out in the first place. The next big thing is security. Without going into too much depth, we were approached by security leaving an ajacent building, even b4 we had done anything (luckly they were only security - stoopid). We parked quite a far distance away in an old car park and walked to the target. It was getting dark but it wasnt pitch black, which was lucky because we were stupid enough to leave the idea of torches to the back of our mind. The bin lid was open so all we had to do was jump the fence, run to the bin, and jump in. We grabbed 2 big plastic bags worth of junk and another cardboard box that looked like it had some good stuff in it. We carried this stuff about a block b4 we realised that we looked like the stereotypical robber - fully black clothes carrying black bags over our shoulder - so we dumped the stuff and went and got the car to pick it up. Once home it was like christmas, we went through EVERYTHING to make sure we hadn't missed a thing. There was tonnes of rubbish, such as orange peels and shit like that, but there was also some good stuff, and also things that i cant even describe. We will have scans and digital fotos of what we recoverd on the page as soon as possible. The list of accuired objects: - Facsimile Transmissions (folded into a paper plane :) - Empty Two Pair Enclosure boxes - Yellow shop order tags - Used Soldering Iron Ends - Ripped-up flight tickets and flight information - Heavily-padded Boxes from COM10 (Exactly the same size as HDD) - Anti-static bags (Exactly the same size as HDD) - Information on 'Connector Cleaning' - A couple of connectors that had been in the ground for years - Packing lists - Plastic case - IC (APC U42 4B52) - POST-IT note with Password and PIN written on it - Heavily padded Mother Board sized box with bubble pack and anti-static bag (from FIBRENET) - Lots of long rectangular carboard strips with numbers and letters written on them - Tin wire - Little gold pins - More packing lists - Computer printout of reported faults - Square piece of paper with an X.25 line number on it and other details - White tag indication pair location of the service - Heaps and heaps of plastic cable ties - Large roll of SIECOR optical fibre - Bunches of rainbow coloured coiled wires - Heaps of various types of cabling - Long rectangular box filled with oily rainbow coloured tubes of plastic and lots of white plastic tags with numbers and letters on them - And lots of regular rubbish (empty coke bottles, paper, orange peel, etc) 4.2 - Pay Fone Phreaking I will describe two ways in which a payfone can b phreaked from.. one an obvious way that a bystander will notice, but you can use this way to hook up a lap top to the pay fone ;), and the other un-noticable. Unfortunately the following methods require the keys to the payfone :( 1. This is the obvious way that will get u noticed. You will need a basic beige box (fone, and line with alligator clips). Firstly open up the top half of the payfone, and at the far back of the cabinet where the Line and Power unit is there are a row of 4 screws along the top (see image morph11.jpg). Now all u have to do is connect the alligator clips to the screw where the white wire is connected, and the other clip to the screw where the blue wire is connected. Now hold down the door switch (u cant close the door since the fone line is comming out of it), wait until the display goes blank, and the pay fone stops dialing, then pick up your handset and u should have a dial tone. If u wish to use a lap top, simply plug the jack into the modem card instead of the fone. Using this method, u effectively have FULL control of the line. (eg, when the pay fone goes to ring the MTMS number, u can interupt it by pressing the hangup button on your fone). 2. This way is a little less obvious, but it does require u stick your hand inside the pay fone. You can open the top half about 5cms, enough for you to stick your hand inside, and feel around the bottom right hand corner of the main board for a square (red) button. Push the button, pick up the handset, and then you can close and lock the door. The display will b lit up with a number of options (the first two are password protected), press button 4 (Tests). And you will be prompted a number of selections, press button 2 (Calls), and a message saying 'DIAL NUMBER' should be displayed. Dial the number u wish to dial. This only works on the standard 8 digit, local call, set, ie, no mobile numbers, no interstate or international calls, etc. If u wish to make these sorts of calls, use method 1. Press '#' when u have finnished your call and u will be taken bak to the main menu. Now u have to erase the logs that showed the amount of test calls that were made, and the duration of them. Press button 2 (Statistics), and u will be prompted for a 4 digit password, enter the password (its easy to hack, trust me ;). U will b prompted with another selection, press 2 (Erase). It will then come up with 'STATISTICS ERASED'. Payfones record a heap of different statisics, eg, the amount of $2, or $1 coins used, then amount of credit used on smart cards, and in this case, it records the amount of test calls, and the duration. By erasing the statistics, it only wipes the test call logs, and the others stay. The payfone also logs the total amount of money recieved since it was installed.. i have seen some over $1000 000 and even some around the $2000 000 mark!!.. so dont worry bout ripping Telescum off, as u can see.. they make enough money and can afford it!!! 4.3 - Pay Fone Log Books Pay fone log books are stored inside the pay fones, behind the coin system. I have come across 4 different types of log books, they are all basically the same. The older Telecom ones dont have any technical support numbers on the front, which the newer Telstra ones have (theyre are 3 varieties of this type.. two new Telstra ones, with different numbers, and one that is a transision between Telecom and Telstra.. it has Telecom written with the rectangle and oval 'T'). The logs are records for when and why the payfone was opened (when a payfone is opened, they dial a number, which i guess is a database which also logs the above information). All the logs are set out in the same fasion: Date of | Insp (I) | Fault | Repairs / Remarks | Techs Visit | Fault (F) | TR CODE | | Initials Date of Visit, is the full date (day/month/year). Isnp(I) Fault (F) is inspection of fault.. i have also seen a 'C' written here (very rare). Fault TR CODE is a code such as 'NTN', 'COS', 'CAB', 'COJ' i would say this is where on the payfone the actuall fault occured. Repairs / Remarks are such comments as 'TKMBZ', 'New MPP installed', 'LCD adjust', 'TCNNN', 'TKBBY', 'Vandalized', '40c Upgrade', and 'Coin Funnel Blocked'. Tech Initials are actually a number.. ive seen numbers from 7 to 681'. The inside cover of the logs are all basically the same, except for the old Telecom ones, they contain less details: CABINET No... Switch No... Circuit Breaker Location... Identification... MDF Location... Exchange... Cable Details... Installer... Date... Creditphone I.D. No... Tran$end... Data Line No... POSFME... Other Installation Deatils (site sketch, IDF/MDF details etc.) ....see inside back cover Installation Details Please include details to help future location of power, telephone, and earth wiring, and local contact people if necessary. MDF/IDF Details... Other Information... Site Sketch... I have rarely seen a pay fone log book deatils fully filled out.. most of them just have the cabinet no. and switch no. filled in. I have come across a new printing of a log book which contains a whole extra page (wow!! ;) with MPP repair codes and Action Codes: MPP Repair Code List and Action Codes ------------------------------------------------------------------------ Code Description | Code Description ------------------------------------------------------------------------ 00_ Payphone | 91_ Telephone exchange 10_ Version Change | 92_ Network Cable 11_ Handset | 94_ Distribution frame 12_ Keypad Mechanical Part | 95_ Indoor installation 13_ Keypad Printed Circiut | 96_ Outdoor, without speciffics 14_ Keypad Rubber Pad | 99_ Self Repair 15_ Redial push-button | 16_ Ceramic Buzzer | 17_ Display glass | 18_ Upper compartment lock | 19_ Hookswitch (ensemble) | | 21_ Logic Electronic Unit | 22_ Display Electronic Unit | 23_ Line Electronic Unit | 24_ Wiring |----------------------------------- 25_ Opening Mechanism | Code Descripion 26_ Upper Door |----------------------------------- | __0 Tests performed successfully 39_ Other failers - main PCB | __1 Replaced due to failure 41_ Coin entry mechanism | __2 Unjamming 42_ Coin deviation push-button | __3 Adjust / Clean / Other 43_ Validator | __4 Reserved for Future Use 44_ Escrow E.U. | __5 Replace due to intent failure 45_ Escrow | __6 Unjamm. due to intent. failure 47_ Coin tin passage | __7 Adjust / Clean / Other intent fail 59_ Other failures | 61_ Card failures | 62_ Reader E.U. | 63_ Charging circuitry wiring | 64_ Reader mounting support | ---------------------- 69_ Other failures - card reader | Composite repair Code: 71_ Saftey device | ---------------------- 72_ Lower door | 2 first digits, device + 73_ Hinge | 3 digit action 74_ Lower compartment door | 75_ Lower door open | Example: 612 76_ Coin tin full | 77_ Coin tin stolen | 61_ Card Reader 78_ Coin tin connection board | __2 Unjamming 79_ Other failures in board | ------------------------------------------------------------------------ B Service: Tap 1 Telstra SMart Payphone Check battery and outstanding alarms ------------------------------------ 1. Open and check battery has both switches turned to the on position. 2. Take handset off hook and press menu button. 3. From MAIN menu dial 5 then 1. If and outstanding alarms, the terminal will have to be fixed and alarms cleared. (NOTE:- Coin collection failure alarms may require for coins to enter the tin to ensure the fault condition has been reolved). 4. If no alarms, press the # button. Menu Tests ---------- 1. From MAIN menu enter 4 then 1. "Good Self Testing" should be displayed. 2. Press # button. 3. From TEST menu dial 4. 4. Dial the following numbers in the sequence indicated whilst viewing the escrow. 3, 7, 1, 8 (the escrow should move freely). 5. Dial #. MTMS connection and Repair Code Entry ------------------------------------- 1. From main menu dial 3, 4, then 1. 2. Enter 000 or 211 or 100 depending on the fault type. o 000 all repairs except main board and software changes. o 211 Software changes. o 211 Main board change. 3. Enter # then 1 (the prompt should change from "Waiting for tone", Dialing the appropriate MTMS number, "Wait connection MTMS", "Transmitting", "Recieving", then "Correct End of Communications" (this signals succesfull communication). 4. Replace handset and close door. Test call and card debit ------------------------ 1. Lift the handset off and insert a valid card. 2. Make a multi metering test call (minimum two meter pulses). Ensure transmitter is muted until third digit is dialled, correct debiting of card takes place, transmission is ok and card is locked in place. 3. hang up and remove card (listen for card warning tone). Coin acceptance and refund test ------------------------------- 1. Insert 2 x 5c, 1 x 10c, 1 x 20c, 2 x 50c, 1 x $1, 2 x $2 whilst ensuring correct validation takes place (the last coin should be rejected ad all other validated correctly). 2. Check the coins are refunded correctly and the refund shute is not fowled Additional Tests ---------------- Perform additional tests as per local work practices. 4.4 - FAST NOTE: there is still alot that i or other phreaks dont know about FAST, if anyone has more information that is not here (eg more info about the Sulten Test) please let me know. You will be given full credit and it will b released in the next issue FAST - Telstras Field Test Facility (1800 050 051) The main feature of FAST is to test the line, by doing whats called a Sulten Test. This test can give information such as whether all the pins are grounded, the voltage of the battery in the payfone, measurement of resistance in the phone, and the distance the phone is from an exchange (down to the nearest meter!). The other test it does is the ring back test. As far as i could tell, all this does is tell you the actual phone number of the payphone. To use FAST, dial the number, and you will hear a recorded message: Welcome to FAST, Telstras field test facility. Please enter your employee number followed by your pin. (male voice) The employee number is 8 digits, and the pin number is 4. These are found by raiding one of the Telstra vans, and are usually written down in the workmans notebook.. along with other usefull information. The employee number and pin are entered in as one long string as digits. Once you have enterd it correctly, you will be asked: If you are now using the line to be tested, please press 1. If not press 2. Obviously by pressing 1, it will test the line you are using, by pressing 2, you will b asked for the number of the line u want 2 test. If you press 2, you can only do a Sulten Test on it, and cant do a ring back test. If you press 1, u will hear the following: If you require a Sulten Test, press 1. For a ring back test press 2. By pressing 2, you will get the number of the phone you are using, and it will ask you to hang up, and wait for a call back with the results. Sum pay fones will ring you bak, but not many do. And the only information they give you is the phone number again!!, i havent found out what else it does.. if anything. The message: The number to be tested is: xx xxxx xxxx. Please hang up and wait for a call back with the results. The Sulten Test is only useful if you are actually *fixing* the phone. Once you have pressed 1, you will be asked to wait and to listen to the music. The test usually takes between 30secs, and 1minute. You will hear a bit of music, then you will be told what exchange the testing will be on (usually System12) Then you will hear music again. Once the test is done, you will hear: The sulten test results require interpretation from a tester, press 2 for a residential tester, press 3 for a business tester.. Once you select what type of tester you require, u will be put though to a live operator. I have chatted to an operator for a lengthy period of time, and he was very helpfull :) FAST doesnt actually do the Sulten Test, and the tester had to redo it. The tester said to me 'Yes, FAST is quite missleading' Once the test is done again, he will tell you the info i mentioned at the beginning of this txt. NOTE - i was doing this test on a perfectly working payphone, and after the tester performed the Sulten Test, he thought the phone wasnt working, but the tests showed everything was.. and he said to me 'So what do we do now? The tests say everything is fine' he sounded quite worried :) I havent found the FAST test very usefull, the only thing worth while it does is give you the payfone number, and the distance to the exchange.. which u can use to find out where the exchange is physically located ;) The payfone number is good to use for pranks :) This is best used when you can actually see your victim at the payfone. Find two fones that are visible from each other (one on each side of the road or sumthing), or use a modile. Ring the payfone, and it will make high pitched sounds for a couple of seconds, then u will hear the victim. Say the following: You - Hi, is Joe there?? Vic - ummm... no.. this is a payfone. You - Yeah! What are you doing using Joes fone!! Vic - but.. ummm.. this is a payfone. You - Joes behind u, give the fone to him. Well im sure you can think of sumthing better!! If u do, mail it to me please :) And unfortunately you can not use reverse charges on another payfone :( Now that would of been *VERY* usefull! I have also found out that u can use the Sulten Test to disconnect people while they are using the fone (u know, when u try to get thru to sum1, and u get the engaged tone.. usually coz they are on the net). If any1 has any more info on FAST, and the Sulten Test (what it fully does) please let me know!! It would b greatly appreciated by me and other phreaks in au!! <=-------------------------------------------------------------------------=> 5.0 -[ Anarchy ]- ----------------- 5.1 - Taking over Big-W Paging Whats that? You don't have a social life? Well listen on eagerly and hope to be enlightened.... Walk down to your local Big - W and look on one of those posts they have every few isles... look at it closely.... next to it or written on it should be a list of numbers written on it.... If not go to another fone and look... - If your getting 3/4 your doing well... Right down all the numbers and descriptions and run home screaming - Land rights for gay whales... Ok you done that? Good.... now even if you did have a socail it no longer exists... *perfect* Amongst the plethora of numbers should be one that says.... Paging.... Or All-Store Paging or something very similar - Varies from franchise to franchise etc. So now ring up the the stores number - White - Pages *duh*.... And ask to be transfered to Customer Service,,,, And then say to be transfered to *number of all store paging...* IF they say we can't do that then simply walk into the store and find a phone yourself and then press *recall* -number of paging extension* And you should be on the air! :) Play Help me ronda in touch tones or whatever but if your in the store then get straight off after 10 seconds... quickly look for then extension of that fone then get your friend to walk in and hang around by that phone make the call get transfered that extension get your friend to press *recall - Paging extension*,,,, And run outside and say something funny... Kewl 'eh? This is the same for all major dept. stores etc. Aditional by Phrost Byte: Some other suggestions to do while 'on air' at Big-W are: - 'Bomb squad to register 5 please! Bomb squad to register 5 please!' - 'Freeze!!! YES!! you.. in the ????blue top????? (pick some one). Security to ????(where person is)???? Also maybe next issue we will have some songs that u can play on touch tone fones, eg, Bullet With Butterfly Wings (Smashing Pumpkins), and Twinkle Twinkle Little Star.. etc (samples welcome) <=-------------------------------------------------------------------------=> 6.0 -[ Challenge ]- ------------------- With each issue released, i hope to have a little problem for you to try and figure out, and release the answer in the following issue. Such problems will be reverse engineering javascript password schemes, figuring out how to send fake email (the REAL way, without programs with big beautiful Shiny Buttons!). For challenges such as sending fake email i will give a few hints so it is not too hard for newbies, but some of u so called 'elite' may find it easy. I have chosen to add this section as i will feel it will give everyone something to do before the next issue is released, and so not everything is given straight out to u. <=-------------------------------------------------------------------------=> 7.0 -[ Conclusion ]- -------------------- Well, thats it for this issue. Things to look forward to in the next issue will be the payfone test menu mapped out, a challenge (most probly a javascript password scheme), some DTMF (dual tone multiple frequency) tunes to play on touch tone fones (i would REALLY like some submissions for this one), and how to put a payfone out of order!!, courtesy of my girlfriend! :) Hope u enjoyed it, AND learned something... Phrost Byte <=-------------------------------------------------------------------------=> _/_/_/_/ _/ _/_/_/_/ _/_/_/_/ _/ _/ _/ _/ _/ _/ _/_/_/_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ ./ _/_/_/_/ ./ _/_/_/_/ ./ _/_/_/_/ ./ A u s t r a l i a s L e g i o n O f C y b e r p u n k z <=-------------------------------------------------------------------------=> H A C K E R S P H R E A K E R S C A R D E R S C O D E R S P I R A T E S E N C R Y P T I S T S A N A R C H I S T S <=-------------------------------------------------------------------------=> WEB:/ http://www.aloc.cc EMAIL:/ phrost@aloc.cc <=-------------------------------------------------------------------------=>