[Chaos CD]
[Gescannte Version] [ -- ] [ ++ ] [Suchen]  



No. 12 August, 1972

The Phone Phreak Convention on July 29 in New York was interesting indeed. Many newsmen, phreaks, and even a few undercover agents from the Phone Company attended, and watched a film about ripping off the phone kompany, ate Bell cookies, discussed in our workshops about circuits, legal questions & general strategies of Ma Bell. We'll be looking forward to the next convention soon. See ya there!

By the way, the film is available for rent, so write to us.


If you're a new reader, you might be wondering just what the hell this is all about. YIPL is an anti-profit organization dedicated to people's technology, and we publish information that shows you how to fight back at the computers that -run our lives. Every YIPL reader is urged to be a contributing editor, and to send us ideas for stories, information from the inside, and criticism of what we do or don't publish. We're taking a big risk so help us make it worthwhile. Get as many people to join as possible, and help spread the ideas you learn from YIPL.

If you got this as a sample issue, a subscription is $4/year. If you're poor and can't afford it, it's free. So if you can afford it, perhaps you can afford to help pay for some less fortunate person's share. Send stamps or checks but no cash please. We're getting ripped up mail all the time.

There's been a lot of talk about the Red Box, and we promised to reveal just what it is. The Red Box is only an oscillator of 2.2KC, switched on and off electronically, just like a single slot pay phone. Circuits will soon be available.

5- 60 ms. pulse.
10-60 ms. on, 60 ms. off, 60 ms. on
25-5 pulses, 35ms. on,35 ms. Off

John Thomas Draper, the alleged Captain Crunch of Esquire fame, is about to go on trial in California. The charge is fraud by wire, but the motive behind the indictment is to intimidate every phone phreak in the country and to silence John, who they suspect knows enough to turn Ma Bell into a pile of rubble. John and his lawyer, Jim McMillan are beautiful dudes but they need money to fight this bullshit. If you can, please send some bread to the Captain Crunch Defense Fund, Box 755, Campbell, Ca. 95008, or to the same c/o YIPL,Rm. 504, 152 W. 42. St.,NY, NY 10036.


Last month we published a simpler version of the suppressed Ramparts article, "Regulat ing the Phone Company in your home" and we have heard that a new, experimental system will detect the device being used over 4 minutes in certain locations in New York. This is not confirmed but it really isn't bad news because one can use the device 10 times in a row safely, though we don't think you have to go overboard. Until the rumor is checked out, though, keep all calls under 4 minutes to or from the New York area. All Telco employees should write what they know about this to us soon.


The Blue Box uses two tones per digit. We show one oscillator and a common amplifier, both being turned on when the pushbutton sends +9V thru diodes, one for each of the two oscillators (for that buttons digit) and one for the amplifier. 36 diodes are used, or an on and off switch on the amp lets you use only 24 (matched silicon). The best speaker is a telephone earpiece. Each tone moxes thru a 47K resistor. 39K sets gain. Entire current drain under 10 milliamps.

Oscillator frequency 1/2x3.14xRxC, when the R7" pot is adjusted to the point of oscillation. This point has no distortion, and the frequency can be raised, but distortion sets in. For 1500 cycles, anc C .0022, R=about 45 kohms. Raising R to 47K (the next highest standard value) lowers the frequency, and you can now tune up to 1500Hz. 2C will be .0047, and R/2 will be 22K, so use a 50K pot. With Sprague 192F capacitors, this Twin-T is oscillator is really god. Try it!

To simplify the diode jungle, use a matrix by sandwiching the diodes between two pieces of perforated circuit board, one with 13 "buss" lines to the switches and the other with 8 output lines, 7 for oscillators and one for the amplifier. Actually, since 2600 is a single tone, you don't need a diode for it, so matrix can be 12 X 7. The diodes are upright inside the two boards. Watch polarity.

Readers have reported that an integrated circuit exists that used a resistor for each tone, two variable oscillators being required for a box. The Signetics 566 is also reported to be unstable with temperature variations. For plans on building with it, write to Signetics, 811 E. Arques Ave-, Sunnyvale, Ca. and ask for information on the 566 VCO and applications notes. Sign your name Joe Smith, Enq.


Notes on an organ will actually work if you use them, but they're best used for tuning. Or use a touch tone phone for tuning your box, or your signal generator. Play your oscillator and your source of pitch and adjust till "beats" just stop.

Remember there are two tones per digit. It you tune with an organ, you must be able to interpolate, that is to set the pitch in between two different organ notes. To set the 900 oscillator, it should be between the A and the A#.


From a pay phone, dial long distance information, or an 800 number, whichever you can get from your city. As call goes thru, press 2600 for one second, and when you hear a click dial desired number, preceeded by KP and followed by ST.
Example: KP4156869945ST. Each pulse is the same, as if you were using a pushbutton phone. All pulses must he sent within 10 seconds of disconnect, if not, disconnect and try again. Do not stay on longer than necessary.

Line earpiece with foam., and press it to mouthpiece tightly. The smartest phone phreaks we know seldom carry their unit with them, but rather a cassette recorder, which they erase after making their call. All numbers directly dialable are callable with the box. Overseas instructions will be forthcoming.

Blue Box Tones

Digit Frequencies.
4 700+1300
S 900+1300
6 1 100+1300
7 700+1500
3 900+1S00
9 1100+1500
0 1300+1500
Kil 1100+1700
ST IS00+1700

A 16 button keyboard with no moving parts, ,measuring 3X3X 112, is available from Environmental Products, Box 406, Lafayette, In. 471302. The price is $7.95 but write for their catalog before you order it. Also, if any readers know where to obtain thinner keyboards, please write us with details. By the way, 16 buttons is perfect for a combination blue box/red box.


There are two basic types of telephone offices thru which all calls are switched. The first is the CO, or Central Office. The wires from your telephone go to your local CO. From there your call is switched to another telephone in the same CC, meaning a local call, or it is switched to a toll office. A toll office, for our purposes, is an "inter-office" office. The toll office connects different CO's to each other.

When you dial a call from your phone, and suppose it happens to be long distance, the digits you dial, whether they are touch-tone or dial type pulses, are sent directly to your central office. Most CO's have CAMA, Centralized automatic message accounting. The CAMA machine in the CO records your number, the date and time, and the number you dialed. The record is a punched paper tape. The CO then relays the area code and number to the toll office. The toll office contains a sender, which sends by whatever route is easiest a series of MF,or multifrequency pulses to another toll office in the area you called. These are picked up by an incoming sender, which translates and connects you to the CO dialed. The CD then itself translates the remaining digits and connects you to the line you dialed. When that line answers, a signal is returned all the way down the line to your CO to say that the call is completed. The punched paper tape records this. When you or your friend hang up, a signal is returned to end billing, and this goes on tape too, along with the date and time and both numbers, yours and theirs. At this point the CAMA machine sends the billing details of the call to the real heart of the CAMA, in the Toll office.

Now the way the phone company sends signals on their lines is with frequencies. When an inter-toll line, or trunk, is idle, it has present on it a tone of 2600 cycles. This tone tells senders who are searching for idle trunks that this one is OK to use. When the line is seized and used, the tone is not present.

Control of your telephone line is done by you. When you hang up, the CO relays that to the senders and incoming senders on the trunk and then they disconnect.

If, however, you were to send a 2600 cycle tone down your line, your CO would not do a thing because at isn't designed to react to a 2600 cycle tone. But the intertoll trunks would think you hung up, because 2600 cycles means the line is idle. So they would disconnect you from the CO at the end of the chain. When you release the 2600 tone, the incoming sender would now believe the line has been seized, and will wait for the MF digits.

Meanwhile, back at the CO (yours) the CAMA is billing you for the initial call you made. It it was for information, the rate is zero C/mirute. However, information calls don't take too long so the people who go over the paper tape at the end of the month may spot something fishy. 800 numbers are a different story, but they'd better he valid. The MP digits and 2600 cycles are passing thru the CO unnoticed all this time.

When you send MF digits, the incoming sender it the far end translates them and routes you to the correct CC, if its in that area code. If it is, and you send the area code along with the other digits, the machine will overload and the call won't go thru. If you had dialed information or a wats line based in a different area from the desired number, the sender will reroute you to that area and then to that number. Most boxers call information in a different city from where they want to call and then send area code with digits to reroute

Since all calls are shown on the paper tape a pay phone is the only safe way to go. And be sure to change phones too.


  [Chaos CD]
[Gescannte Version] [ -- ] [ ++ ] [Suchen]