The Myth of the 2600Hz Detector ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Just about everyone I talk to these days about ESS seems to be scared witless about the 2600Hz detector. I don't know who thought this one up, but it simply does not exist. So many of you people whine about this so-called phreak catching device for no reason. Someone with AT&T said they had it to catch phreakers. This was just to scare the Blue-Boxers enough to make them quit boxing free calls. I'm not saying ESS is without its hang-ups, either. One thing that ESS can detect readily is the kick-back that the trunk circuitry sends back to the ESS machine when your little 2600Hz tone resets the toll trunk. After an ESS detects a kick-back it turns an M-F detector on and recordes any M-F tones X-mitted. --------------------------------------- DEFEATING THE KICK-BACK DETECTOR ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ As mentioned in my previous note, kick-back detection can be a serious nuisance to anyone interested in gaining control of a trunk line. The easiest way to by-pass this detection circuitry is not really by-passing it at all, it is just letting the kick-back get detected on some other line. This other line is your local MCI, SPRINT, or other long distance carrier (except AT&T). The only catch is that the service you use must not disconnect the line when you hit the 2600Hz tone. This is how you do it: Call up your local extender, put in the code, and dial a number in the 601 area code and the 644 exchange. Lots of other exchanges work across the country, I'm sure, but this is the only one that I have found so far. Anyway, when it starts ringing, simply hit 2600Hz and you'll hear the kick-back, (ka-chirp, or whatever). Then you are ready to dial whoever you want (conferences, inward, route and rate, overseas, etc.) from the trunk line in operator tones! Since blowing 2600Hz doesn't make you you a phreaker until the toll equip- ment resets the line, kickback detection is the method AT&T chooses (for now). This information comes as a result of my experiments & experience and has been verified by local AT&T employees I have as acquaintances. They could only say that this is true for my area, but were pretty sure that the same idea is implemented across the country. ======================================= Now that you know how to access a trunk line or as operators say a loop, I will tell you the many things you can do with it. Here is a list of AT&T services accessible to you by using a Blue Box. A/C+101 Toll Switching A/C+121 Inward operator A/C+131 Information A/C+141 Route & Rate op. A/C+11501 Mobile operator A/C+11521 Mobile operator Starting Conferances: --------------------- This is one the most useful attributes of blue boxing. Now the confs. are up 24 hours/day and 7 days/week and the billing lines are being billed. Since I beleive the above is true (about the billing lines being billed) I would recommend that you never let your # show up on the conf. if you started it, put it on a loop and then call the loop. ENOUGH BULLSHIT!!!!! To start the conf. dial one of these three numbers in M-F while you are on the trunk. 213+080+XXXX XXXX=1050,3050 special XXXX=1000,1100,1200,1500,2200,2500. These #s are in L.A. and are the most watched, I do not advise using this NPA. 312+001+1050 or 3050 914+042+1050 or 1100,1200 ect.. ********************************************** UPDATE, I BELEIVE ONLY 914 WORKS AT THE MOMENT ********************************************** Once connected with one of these you will either hear a re-order, busy, or cherp. When you hear the cherp enter the billing line in M-F. I use the conf. dial- up. A billing line example: kp312+001+1050st You will then hear two tutes and a recording asking you for the # of confer- rees including yourself. Enter a # between 20 and 30. If you ever get over 30 people on a conferance all you will hear is jumbled voices. After the it says "Your conferance size is XX" then hit # sign. Add Your favorite loop on and hit 6 to transfer control to it. After it says control will be transfer- ed hang up and call the other side of the loop, hit #sign and follow the in- structions. A bonus for conf. is to add an international # dial 1+011+CC+NUMBER pretty cool ehhh. A few extra notes. Do not add #s that you will want to hang up, add these through MCI or Sprint. You cannot blow anyone off w/2600hz unless they are in an old X-bar or older system. Many D.A. operators will stay on after you abuse them; you may have to start another or at least don't say any numbers. Never add the tone side of a loop onto a conf. Never add more than one MCI node on your conf. Route & Rate: ------------- Note Route & Rate and RQS perform the same service. R&R simply tells you route and rate info which is very valuble, ex. such as the inward routing for an exchange in an area code. An inward routing will let you call her and she can do an emergency interupt for you. She can tell you how to get international operators, ect. Here are the terms you are required to use: International, -operator route for [country, city]. *Gives you inward op. -directory route for [country, city]. *Gives you Directory Ass. -city route for [country, city]. *Gives you country and city code. Operator route for [A/C]+ [EXCHANGE] *Gives you inward op. route ex. [A/C]+ or [A/C]+0XX+ when she says plus she means plus 121. Numbers route for [state, city] *Gives you A/C. Place name [A/C]+[EXCHANGE] *Gives you city/state for that A/C and exchange. International calls: -------------------- To call international over cable simply access a trunk and dial kp011XXXst wait for sender tone, kpXXXCC-NUMBERst XXX - A 3 digit country code, it may not be 3 digits so just put 1 or 2 0's in front of it. CC - is the city code To go by satellite: dial kp18Xst X - numbers 2-8 wait for sender tone then kpXXXCCNUMBERst --------------------------------------- Fedex will put out a file on RQS soon. Written by: Scarface & Zardoz