 
*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*
*                                                                       *
*            How to "Steal" Local Calls from Most Payphones             *
*                                                                       *
*                            August 25, 1987                            *
*                                                                       *
*                   By Killer Smurf and Pax Daronicus                   *
*                                                                       *
*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*-+-*
     Most of you have seen WarGames, right? Remember the part where David
was stranded in Colorado and needed to call his girlfriend in Seattle? We
knew you did.  If you didn't, what David done was unscrew the  mouthpiece
on  the payphone and make some connection between the mouthpiece and  the
phone.  Well... that was pretty close to reality except for two things...
1> Nowadays,  mouthpieces are un-unscrewable, and 2> You cannot make long
distance  or toll calls using that method.  Maybe that DID work on  older
phones, but you know Ma Bell.  She always has a damn cure for every thing
us Phreaks do.  She glued on the mouthpiece!
     Now to make free local calls, you need a  finishing nail.  We highly
recommend "6D E.G. FINISH C/H, 2 INCH" nails.  These are about 3/32 of an
inch  in diameter and 2 inches long (of course).  You also need  a  large
size  paper  clip.  By  large  we  mean they  are  about  2  inches  long
(FOLDED).  Then  you  unfold the paper clip.  Unfold it  by  taking  each
piece  and  moving  it out 90 degrees.  When it is done  it  should  look
somewhat like this:
                             /----------\
                             :          :
                             :          :
                             :          :
                             :          :
                             \-----
     Now,  on to the neat stuff.  What you do,  instead of unscrewing the
glued-on  mouthpiece,  is  insert the nail into the center  hole  of  the
mouthpiece  (where you talk) and push it in with pressure or just  hammer
it in by hitting the nail on something.  Just DON'T KILL THE  MOUTHPIECE!
You  could  damage  it if you insert the nail too far or  at  some  weird
angle.  If  this happens then the other party won't be able to hear  what
you say.
     You now have a hole in the mouthpiece in which you can easily insert
the  paper clip.  So, take out the nail and put in the paper  clip.  Then
take  the other end of the paper clip and shove it under the rubber  cord
protector at the bottom of the handset (you know, the blue guy...).  This
should end up looking remotely like...like this:
                             /----------\      Mouthpiece
                             :          :      /
             Paper clip -->  :          :     /
                             :      /---:---\
                             :      :   :   :------------>
         ====================\---))):       :  To earpiece ->
                   ^              ^ \-------------------->
                   :              :
                   :              :
                 Cord          Blue guy
(The  paper clip is shoved under the blue guy to make a  good  connection
between the inside of the mouthpiece and the metal cord.)
     Now,  dial  the number of a local number you wish to  call,  sayyyy,
MCI.  If  everything  goes okay, it should ring and not answer  with  the
"The Call You Have Made Requires a 20 Cent Deposit" recording.  After the
other  end  answers  the phone, remove the  paper  clip.  It's  all  that
simple, see?
     There  are  a couple problems,  however.  One  is,  as  we mentioned
earlier, the mouthpiece not working after you punch it.  If this  happens
to you,  simply move on to the next payphone.  The one you are now on  is
lost.  Another problem is that the touch tones won't work when the  paper
clip is in the mouthpiece. There are two ways around this..
     A> Dial the first 6 numbers.  This should be done without the  paper
clip making the connection, i.e., one side should not be connected.  Then
connect  the paper clip,  hold down the last digit,  and slowly pull  the
paper clip out at the mouthpiece's end.
     B> Don't  use  the paper clip at all.  Keep the nail  in  after  you
punch it.  Dial the first 6 digits.  Before dialing the last digit, touch
the nail head to the plate on the main body of the phone,  the money safe
thingy..then press the last number.
     The  reason  that this method is sometimes called  clear  boxing  is
because  there is another type of phone which lets you actually make  the
call  and  listen  to  them say "Hello,  hello?"  but  it  cuts  off  the
mouthpiece  so  they can't hear you.  The Clear Box is used  on  that  to
amplify your voice signals and send it through the earpiece.  If you  see
how  this  is even slightly similar to the method we  just  described  up
there, kindly explain it to US!! Cause WE don't GET IT!
     Anyways,  this DOES work on almost all single slot,  Dial Tone First
payphones (Pacific Bell for sure).  We do it all the time.  This  is  the
least,  WE STRESS *LEAST*, risky form of Phreaking.  And remember.  There
are other Phreaks like you out there who have read this article and punch
payphones, so look before you punch, and save time.
     If  you feel the insane desire to have to contact us to bitch at  us
for  some  really stupid mistake in this article,  you can  reach  us  at
Lunatic Labs Unltd...415/278-7421.  It should be up for quite a while..
     Also,  if you think of any new ideas that can be used in conjunction
with this method, such as calling a wrong number on purpose and demanding
your quarter back from the 0perator,  tell us!!  Post it on Looney!!  Oh,
and if this only works on Pac Bell phones, tell us also!  Thanks for your
time, upload this to every board you can find.  You may use this material
in any publication - electronic, written, or otherwise without consent of
the authors as long as it is reproduced in whole, with all credit to the
authors (us!) and Lunatic Labs.  And now, the Bullshit:
_________________________________________________________________________
DISCLAIMER: This  disclaimer disclaims that this article was written  for
            your information only.  Any injuries resulting from this file
            (punctured hands, sex organs, etc.) is NOT OUR FAULT! And  of
            course  if you get really stupidly busted in any way  because
            of this, it ain't our fault either.  You're the dumb ass with
            the  nail.  So, proceed with care, but...  HELL!  Have  fun.
            Later...
_________________________________________________________________________
                                                                DINC!
This page was created Wed Aug 11 23:33:19 EDT 1999
Using Linux
 version 2.0.32
 on an i586
	Main Page @ Matarese.com
The Myth of the 2600Hz Detector @ Matarese.com      
Acquiring Account Information @ Matarese.com      
 
Act2! by Symantec @ Matarese.com      
All hacks / Annoyance @ Matarese.com      
 
Alt 2600 Group FAQ @ Matarese.com      
Hacking Angelfire @ Matarese.com      
 
Anonymous E-Mail @ Matarese.com      
Anonymous FTP: Frequently Asked Questions (FAQ) @ Matarese.com      
 
Maintaining Access - Implementing Backdoors @ Matarese.com      
How to Receive Banned Newsgroups FAQ @ Matarese.com      
 
Hacking BBS's @ Matarese.com      
phreaking tutorial @ Matarese.com      
 
The Bluebox @ Matarese.com      
List of Common Bugs @ Matarese.com      
 
Things that go Bump on the Internet @ Matarese.com      
Hacking Calling Cards @ Matarese.com      
 
Expanding the capacity of Caller ID Boxes @ Matarese.com      
What is Caller-ID? @ Matarese.com      
 
Hacking Call Back Verify @ Matarese.com      
CULT OF THE DEAD COW @ Matarese.com      
 
Cellular Roaming: The New Deals @ Matarese.com      
CELLULAR TELEPHONE PHREAKING PHILE SERIES @ Matarese.com      
 
Cracking Unix passwords @ Matarese.com      
Hacking Webpages @ Matarese.com      
 
The Matarese Circle @ Matarese.com      
Cisco Password Cracking Script @ Matarese.com      
 
Customer Name and Address @ Matarese.com      
Cops and Robbers | UNIX Security @ Matarese.com      
 
Cracking NT Passwords @ Matarese.com      
Odins cracking/coding and PPE resources @ Matarese.com      
 
Credit Carding Part I @ Matarese.com      
How do I defeat Copy Protection? @ Matarese.com      
 
What are the DTMF frequencies? @ Matarese.com      
Exploits FAQ @ Matarese.com      
 
Making Free Calls @ Matarese.com      
FTP Bouncing @ Matarese.com      
 
Hackers Encyclopedia @ Matarese.com      
The Conscience of a Hacker / Hacker Manifesto @ Matarese.com      
 
Hacking from Windows9x FTP @ Matarese.com      
Hacking Tripod @ Matarese.com      
 
Hacking Web Pages @ Matarese.com      
How to crack a UNIX password file. @ Matarese.com      
 
Hacking Servers : A Begginners Guide @ Matarese.com      
TIPS FOR TRACKING HACKERS @ Matarese.com      
 
Hacking Tutorial @ Matarese.com      
Hacking UNIX @ Matarese.com      
 
How to Hack the WWWboard Message Board 2.0 @ Matarese.com      
Hackers Handbook @ Matarese.com      
 
Guide to Harmless-Hacking @ Matarese.com      
All about security holes @ Matarese.com      
 
Hacking Hotmail @ Matarese.com      
How to crack by +ORC complete tutorial in one file (BIG!) @ Matarese.com      
 
]How to Hack from from Harlequin and Archangel @ Matarese.com      
Improve security by breaking into your site @ Matarese.com      
 
Ch1can0 BEOWULF @ Matarese.com      
Internet Security @ Matarese.com      
 
Bugs and Backdoors in IRC clients, scripts and bots @ Matarese.com      
IRC Hacking @ Matarese.com      
 
FAQ for Trading For FileZ in IRC @ Matarese.com      
Creating a Xdcc offer bot for irc @ Matarese.com      
 
Integrated Systems Digital Network @ Matarese.com      
Everything you should know about computer viruses @ Matarese.com      
 
Lan Technology Scorecard @ Matarese.com      
Local Area Signalling Services (LASS) and Custom Calling Feature Control Codes @ Matarese.com      
 
Harmless Hacking - Linux @ Matarese.com      
INDEX @ Matarese.com      
 
Loops wanted! @ Matarese.com      
Mail Spoofing Explained @ Matarese.com      
 
Microsoft IIS Vulnerability @ Matarese.com      
Microsoft(Yuk) Index Server exposes IDs and Passwords @ Matarese.com      
 
Intresting Microsoft Access 7.0 Trick @ Matarese.com      
MS Money 2.0 Back Door @ Matarese.com      
 
Mind Your Own Business (MYOB) @ Matarese.com      
Nameserver listing! @ Matarese.com      
 
Newbies handbook / HOW TO BEGIN IN THE WORLD OF H/P @ Matarese.com      
Bugs in Windows NT (Too many to list here completely...) @ Matarese.com      
 
This Hack is for the OptiChat Original Chat Room @ Matarese.com      
Internet Outdials @ Matarese.com      
 
Pager Frequencies @ Matarese.com      
Password Recovery Techniques @ Matarese.com      
 
      
Introduction to the Internet Protocols @ Matarese.com      
 
Analysis of QueSO Performance @ Matarese.com      
Finger - ATTACKING FROM THE OUTSIDE @ Matarese.com      
 
L0pht Security Advisory - Sendmail 8.7.5 @ Matarese.com      
Sniffer FAQ V 1.7 @ Matarese.com      
 
SSPING/JOLT patches @ Matarese.com      
WORKING OUT-TELNETS @ Matarese.com      
 
How do I post to a moderated newsgroup? @ Matarese.com      
What You Should Know About Computer Viruses @ Matarese.com      
 
How can I protect myself from viruses and such? @ Matarese.com      
What is a trojan/worm/virus/logic bomb? @ Matarese.com      
 
VMS Info (Password Cracking) @ Matarese.com      
HACKING THE WAL-MART ARMORGUARD COMPUTER PROTECTION SYSTEM @ Matarese.com      
 
Using web proxies to disguise your IP address @ Matarese.com      
Dig up hidden CD Keys @ Matarese.com      
 
X-Windows Security @ Matarese.com      
  Copyright (C) 1999 - Matarese.com