[E2S / 0MFuXS] [Old MF'ers Union of X-Bar Switchmen] - February '95 ---------------------------------------------------- 01.00 ---------------------------------------------------- Sai enh zhi ma, an jhi fei fu. (Just because the old man lost his horse, it does not mean it is a bad thing.) ============================================================================= NOTE: A good percentage of this E2S/0MFuXS issue is -SERIOUS-. Please, don't be fooled. The Tao of Phreak - [1995 TcP/E2S] ---------------------------------- I. Field Phreaking ----------------- When most people think of phreaking, they think of 950s, codes, ANIs, extenders.. whatever. However, the real thrill comes with going out and actually -getting into- the equipment that makes good ol' ma bell tick. Sound interesting? Read on... Sound boring? Try pinball. First things first.. Going out and actually getting into the telco hardware is not for the paranoid or light at heart. It takes some know-how, patience, and most of all, silence! The last thing you want to do is get caught, of course. (Hard phreaking isn't like say, red boxing.. There's no real excuse for standing behind an open, humming, blinking midswitch when mr policeman rolls by!) Here are a few tips that I found help immensely: 1. IF YOU DO IT BY YOURSELF, DON'T DO IT ALONE! "Huh?" you might be saying. Well, this is what I mean by the above statement. If you think you're smooth enough to pull off a midswitch raid alone, you go with your bad self. I wouldn't do it. It's obvious, you have no protection or lookouts, and, well, if you get in shit, its up to you, and only you, to get you out. And, since the truly skilled hard phreak does his thing as far away from the scrutiny of civilization as possible, you may find yourself in the middle of nowhere. Not a good thing. So, one person, in my opinion is not enough. Neither are two. Three is good, four is optimum. Five is too many. Here is my reasoning: With only two people, you can have one driver, one phreaker. No lookouts, no help in any situation. Both people are stuck to their posts - one will sit in the car whilst (V0CAB!) the other does his thing. The phreaker has no cover, and the driver won't have any warning to any situation. In essence,both are "sitting ducks." With three people, you can have a phreaker, driver, and lookout/ intermediary. This is a good setup. Person 1 stays in the car, ready to take off at a moment's notice. Person 2 phreaks. Person 3 can lookout, and run and notify the phreaker of a problem or advise the driver on situations, such as approaching cars or other weird things. (Trust me, weird shit happens if you're stopped on a mountain road at 3am..) A good thing for this person to do is take the "taking a piss" position, or "changing a tire" position. This person can be the cover or the distraction to allow things to come through cleanly. Three people can also get along well without much confusion. With four people, you can have the above setup, plus an extra person ready to use for anything else--a standby. This person can act as a second lookout, help carry the l00t, or as a relay in long-distance situations. I remember one phreak when the box was across a field, and I was parked by the side of the road. A car was approaching, suspicious looking (driving slow), and we sure as hell didn't want to yell to the phreaker or shine lights to get his attention. Our distraction/lookout guy was busy "looking through the trunk for a map" :) after he tapped thrice on the rear window to advise of a situation. So, our fourth person came in handy - "taking a piss" in the field. I stopped the engine, signaling something was wrong (the phreaker was too far away to hear that..) and he, being closer to the phreaker, signaled to him, and then began walking back to the car. The phreaker closed the box, and lied down in the field. Needless to say, he wasn't noticed by the cop that passed by, and he passed on after asking us if "everything was OK.." And, finally, five or more people is just too many. This leaves an inevitable extra person, who can get restless or cause a disruption, and things can get just plain confusing. Also, it's a good idea not to take more people than you have doors on your car.. Five people can also be quite noisy. 2. DO IT WHEN THE TIME IS RIGHT. The simple concept is to do this in the middle of the night, when everyone is fast asleep. I have a few guidelines that seem to work for us. -PHREAK between 1:00am and 3:00am. Before 1:00, people may still be awake, and things haven't totally settled down yet. You'll get people coming home from parties, etc, and people -just- going to bed. 3:00 isn't too late, however I'd limit myself to this for several reasons. 1) phreaking when you're tired doesn't work, and it isn't fun. 2) Most assaults, murders, and drunk-driving accidents occur between 3:00 and 4:00 am. 3) In the summer, this gives you a one-hour buffer before daylight begins to break. 4) In the winter, 3:00-4:00 is the coldest time of the night. 5) And finally, you need to leave room for error/problems (I.E. a flat tire.) Now, I know the cops are on the prowl in general at these times, but if you're smart, you'll go to a place where they won't look. Cops are more concerned with the city at this time.. They really don't pay much attention to the backroads. They've got bigger and better things to do. This is NOT saying that they won't be out there, though! -NEVER phreak -at all- past 3:45 AM. Some people start getting up at 4:00, the sky is lighter at 4:00, and traffic starts increasing on the roads again at this time. -SUNDAY and Monday mornings are the best time to phreak. If you're available, Wednesday morning is good too. This is due to several reasons. 1) On Saturday night, most people are in the mood to rest and relax. The majority is at home, asleep, on Sunday morning. 2) Most people don't stay out on Sunday nights, because they have to work the next day. This leaves Monday mornings clear. 3) The middle of the week (Wednesday) is good, because people have been working, aren't exactly getting in the weekend mood yet, and aren't at the best morale. (They've been working for a few days, and still have to work for a few till the weekend.) As you can see, psychology actually plays a big part in safe phreaking! So does your knowledge of Art Garfunkel solo-album lyrics. 3. AND LAST of all, here are some final safety tips: 1) SPEND AS LITTLE TIME AS POSSIBLE at each site. I suggest under three minutes - that may even be a little long. (Count out three minutes.. its quite a long time, actually..) A good phreaker can get out, open the box, do what he wants, and get back in under two minutes. 2) ONCE YOU'VE USED A SITE, treat it as a disease! DON'T COME BACK FOR A LONG TIME! The reasons for this are obvious. Also, the telco usually locks a midswitch with a padlock after it's been phreaked, and you won't be able to get back into it anyways. If you wait a while, sometimes a lineman who services the box won't even put the lock back on when he's done. 3) DONT PHREAK SITES CLOSE TOGETHER! Phreak a site, drive 20 miles, then phreak another. Ma bell might catch on to you if every other weekend phones start going out in Anytown, USA.. Also, if you do things far apart, separate COs will come out to do the repair, and they're more than likely going to treat the phreaks as isolated incidents, versus an obvious phreak-attack. 4) DON'T PHREAK MORE THAN THREE SITES IN A NIGHT! Trust me on this one. 5) DON'T PHREAK WITH A D0NK3Y. 4. THE GRIT! Now that you're untouchable, let's get down to business! There are several things I suggest bringing on a phreaktrip. -A flashlight (d0h) -A crowbar (If you don't have a "tool") -Bolt cutters (If you feel the urge to open a padlocked switch) -Needle-nosed pliers (Again, if you have no tool) -An adjustable wrench -A "tool" This is basically a 7/16" allen wrench with a hole in the middle. Called "tamper proof" screws. Available at electronics stores. Note: It's VERY hard to find the larger sizes. My set only goes to 1/4" :( -Gloves (no phingerprints!) -Wire-cutters (some boxes have fence/barbed wire around them) -A map (to fake out - as a diversion) The uses for these will become obvious as I explain what ya gotta do. I. Finding the Wonderbox. Not all boxes may be boxes. There are two classes of common midswitches. 1) Boxen: Boxes are usually ESS-type switch remotes. These will control several hundred numbers in a prefix. There are two types of common remotes to look for. One kind, the newest, is about five feet tall, eight feet wide, and three feet deep. They are two-tone brown and beige, and have "ribbed" doors on front and back. They are the easiest to get into. They look something like this: __________________________________ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |o| | | | | | | | | | | | | | | | |*| | | | | | | | | | | | | | | | | | | | | | | | | | | |___|_|_|_|_|_|_|j|_|_|_|_|_|_|_|__| |__________________________________| Usually, the door facing the road covers the boring power supply crap, whereas the door not facing the road has the card array, the stuff you're looking for :) To open one, you'll need a "tool" and a socket/adjusteable wrench, or a crowbar :) (the dumb way to do it.) The fasteners look like this: (Only some types have both.. Most do, but some only have the tamper-proof) ____ / \ regular hex | | bolt \____/ ____ tamper-proof // \\ allen screw || () || (use a tool) \\____// There are two, (on some) and you'll need to loosen both to access. Once you open it, you'll see white plastic bezels with lights and connectors on them. You'll also find a lever-latch release on each card, this is what you use to remove them. The cards towards the top are usually switch (line) cards, and the ones to the bottom (larger ones) are amplifiers, power, logic, etc.. The type of box you might run into is light green, about 4-5 feet tall, three feet wide, and 1-2 feet deep. These can't be pried open, thanks to a metal lip on the edge of the door. They look like this: ________________ ______ | | | | | | |* *| | | | | | | | | | | | | | | | | | | |* *| |________________| |______| |____________| |____| FRONT SIDE These (USUALLY!) have the "tool" type fasteners on the side, have two doors, and are found in groups of several (not usually alone..) BUT THIS CAN VARY! Other than the casing, the layout is pretty much the same.. Two doors, one holds the guts, smaller cards to the top, bigger, power/amplifier cards to the bottom. OLDER WES BOXES: Another type of box I recently stumbled onto is the Western Electric midswitch.. These are older, and usually the one's youll find are out of service. These are MUCH different from the other boxes. The casing is similar, but usually white and rounded. Inside, however, you'll find a series of aluminum boxes with connectors on the front. These modules also have lever releases, and can be pulled out. FOUND IN DA HUT: In some older places, you'll find switching systems in little shacks, or "huts". Inside these huts, you'll find green fiberglass modules on shelves. These modules are approximately 6" wide x 1.5FT long x 10" deep, and have a top that unscrews with four screws. Under this, you'll find the cards. The cards are similar to other cards, but have no front plastic bezel. Remember! MA BELL LOVES YOU! P.S. The sound made when opening a midswitch box has been officially classified as "B'TANG." Good places to Beige Box in Colorado: -Douglas County Rt. 40, near Sedalia -Phillipsburg, CO. Between rt 285 in Conifer, and Turkey Creek in Ken-Caryl -Evergreen, CO -Colorado Hwy 73 -Deer Creek Canyon Rd (Ken Caryl) -Conifer, CO -Larkspur, CO =========================================================================== --------------------------------------------------------------------------- E2S/0MFuXS: Ten Men Named Ken. --------------------------------------------------------------------------- FIND THE ERGONOMIC J3SUS! CALL: 20MNN: [HQ]: (303)932-1195/8404 28,800 BPS V.FC Empire of the Dragon : (303)932-1308/1309 28,800 BPS V.34 --------------------------------------------------------------------------- The Madgickal THANX line: K2, Sunsetwolf, Silicon, Head Doc, RedBoxChiliPepper, Black Hawk, Cain's Multiple [E2S / 0MFuXS] [Old MF'ers Union of X-Bar Switchmen] - March '95 ---------------------------------------------------- E2S vs. Simpson, Prosecution Exhibit #2 ---------------------------------------------------- HACKERS for B0B. =========================================================================== 2. A Phun Phield Trip - [1995 TcP/Syn/Ice - E2S] - Written by TCP ----------------------------------------------------------------- Early this march, we got a keen chance to go on a phun phreaking phield trip. Here's the inpho. A. ESS / Midswitches - Revisited -------------------------------- A few things we discovered on this trip were some new details about common midswitches. One type we messed with was an older 1A type midswitch. These were a bit older than other types we've experienced. The CU (Customer Unit) cards consisted of a module that was 2 PCBs, bolted together, with a grey bezel in front with connectors/indicators and metal release latch. The unit had an edge connector in back, weighed about a pound, and measured approximately 12"x4"x1". Heres some rough views. P.S. Bezel is pronounced (BEE-zehl). Older "1A" type midswitch CU module ----------------------------------- FRONT SIDE <----1"----> <---------------------12 Inches----------------------> __________ ________________________________________________| |DUAL MP CU| ___/ | 0 | | (RT) | 4 |=== | 0| | | |===P | P C B 1 | | BUSY o | |=== | | | T () | I |===C | | | ODD | n |=== | | | R () | c |===B | | | T () | h |=== | 0| | EVEN | e |===2 | |/ | R () | s |___ | 0 || | __ | \_|______________________________________________|| | | | || | | | |_______|__| o=LED, ()=Connector, 0=Bolt *=Michael Bolton The newer, more common ESS cards are similar looking to the older (above) cards, but are smaller in dimension and consist (mostly) of one PCB. They are 12"x3.5"x2/3" in dimension, and weigh about 6-8 ounces. They have a white bezel on front with indicators/connectors, and the usual edge connector on the back. These specifications describe the AT&T cards like these, and I believe the fujitsus fit the spec as well. Here are some diagrams. This is where we walked. This is where we swam. Take a picture here. Take a souvenir. Cuyahoga. Newer 1A/2B type midswitch CU module ------------------------------------ FRONT SIDE [NOT TO SCALE!!!] <--2/3"--> ________ ____________________________________________________| | AT&T | __/ ____________ |WP90710L4||LB1084AF| | | AUA58 | |== | 229HR ||T7513A1PE| _______-------- | | | |== ------------ | 604DP | | | o | |== ____________ ------- ______| | ODD | |== | WP91534L1 ||T7513A1PE| _______ |CONN. | | o | |== ------------ |WPC1571L1| | 604DP | ------| | EVEN | |== |RELAY | |R|R|R|R| ------- | || | BUSY | |== |LC1107AC| |RELAY| |E|E|E|E| _________ |/ / | . . O | |__ |RELAY | |RELAY| |S|S|S|S||LB1084AF | | | | . . E | \_________________________________|_________|________|/ | T R___| | | | _ | || | | || | |___||_| o=LED .=Connector *=PhAT KR0 Newer 1A/2B type midswitch modem module --------------------------------------- FRONT SIDE [NOT TO SCALE!!!] <--2/3"--> ________ ____________________________________________________| | AT&T | __/ ____________ _________ ___________ | | AUA52B | |== | 229JK | | XILINX | |TMS320E14FZ| ____| | | |== ------------ | XC3042- | |LA - LBU910| |____| | o | |== ______ | 50 | |7 - 0340191| ______| |19.2/LB | |== Enable|SC9993| |_________| |___________| |CONN. | | . | |== SW | 5CFN | ------| | LB | |== Dsable ------ _____ _____ |R||R| | || | __ _ | |== | RELAY | FFFF |TRANS| |TRANS||E||E| |/ / | |= | | | |__ | RELAY | SSSS |RELAY| |_____| |_____||S||S| | | | |= ]| | \____________________________________________________|/ | |__| |_| | | | \______Modular Jack (Larger type) FS=Fuse | | _ | || | | || | |___||_| o=LED .=Connector There are a few more types of cards that I've seen, using acronyms as demarcations. The above two were the ones I could diagram best, I may update on the others later. Here's what I've seen: Ac/ Model# Type AT&T - Newer ------------ CU AUA58 = Control Unit (Series 2) CU AUA58B = Control Unit (Series 2) CU AUA52B = Modem unit LIU AUA64D= Line Interface Unit?? Older 1A type ------------- DUAL MP CU (WP21 CP) = Dual MPU Control Unit Series 2 DUAL MP CU (WP21C CP)= Dual MPU Control Unit Series 1 Power modules Amplifier Modules Test Modules Logic Modules Voice Modules Motherboard type boards Lou Ferrigno ============================================================================= --------------------------------------------------------------------------- E2S/0MFuXS is like 240 dolla's wortha PUDDIN'. "AWWW JEA!" --------------------------------------------------------------------------- Barry, Levon, Git you ass in that puddin'! 20MNN: [HQ]: (303)932-1195/8404 28,800 BPS V.FC Empire of the Dragon : (303)932-1308/1309 28,800 BPS V.34 --------------------------------------------------------------------------- [E2S / 0MFuXS] [Old MF'ers Union of X-Bar Switchmen] - April '95 ---------------------------------------------------- Numb 3 ---------------------------------------------------- What ever happened to Willie Nelson anyway? ============================================================================ 3. Hacking Electronic Road Signs - [TCP] ---------------------------------------- Ever see those large signs on the highway that say "road slippery ahead" or "bizzard conditions.." etc? Well, we were wondering if they were hackable, so one night we went on out and gave it a gnu. And huzzah, it worked! Here's what we found. (Remember, though. This was what I gathered by standing in the cold at 3:30am off of US 285 entering the mountains. I was only there for 3-5 minutes, so I may not be 100%.) 1. We bilched open the box on the side of the post of the sign. It opened easily, lame little metal latch that popped with a screwdriver. Of course, your box may vary. 2. Inside was telco connections (remote access? Alarms? We tried ANIing it, but we didn't get a dtone), a heater with thermostat (to maintain temp of the electronics), a power supply block, and the control console. The box looked like this: _____________________________________________________ | Power |_____| |Thermo- | | | Supply| |\ | Stat | | |_______| | | | ||||| | | | 120V Outlets| | | | | |_____________| | |________| | | ________ \_ __________________________________| | | Phone | __| [ ] ## ## ## ### ### | | | jack | | o| ## ## ## ### ### | | |________| | | Control ## ## ## ### ### | | ||| || | o| Console ## ## ## ### ### | | // || |__| ## ## ## ## ## | _____ | /-----\ || |__________________________________| / \ | |phone| || | | | |trmnl| ||___________________________ | \__0__/ | \-----/ ||| | | -+- | ||| Heater | | | |_________|||___________________________|_____________| / \ JeR0ME!! 3. The control console in our unit was a Burr-Brown TM25-300HT. It was about 6-8 inches long, 4 inches high, and 2 inches deep, with a red LED display and a keypad with some other LEDs on it.. Looked like this: _______________________________________________________________ _____| _______________________ ----------- ----- ----- | | req || DISPLAY | | D | E | F | |F 6| |F 7| | | ctl ||_______________________| ----------- ----- ----- | | o | | A | B | C | |F 4| |F 5| | | | ----------- ----- ----- | | | | 1 | 2 | 3 | |F 2| |F 3| | | | ----------- ----- ----- | |reset| | 4 | 5 | 6 | |F 1| | | o | ----------- ------------ | | | | 7 | 8 | 9 | |Ent.||Clr.| | | | ----------- ------------ | |_____| | . | 0 | - | | |_______________________________________________________________| Or something like it :) 4. The procedure: (Note: ONLY tested on this model...) 1. Press the "RESET button NEXT TO the terminal, and then press the "CLEAR" key ON the terminal. (display should read "0") This will also clear any message on the screen. 2. Press the "REQUEST CONTROL" button NEXT TO the Terminal. 3. Display should read "CODE" 4. Enter the 3 digit code (ours was 0,0,3. Whee) and press ENTER. Note: Our unit had a 3-digit passcode. We're not sure about others. Again, more testing to do! 5. The terminal should read "LOAD". It is now ready to be programmed. 6. Enter 6 two digit numbers from the library, one two digit number for each line of the message. (I.E. XX for the first line, XX for the second, etc..) Press the enter key after entering each two digit number. 7. The sign should display the message entered. 8. If the message didn't come up on the Sign, press the reset button and start over. 9. Get out the midget with the Casio and dance. The following text was an additional "step" we found in a manual we got for the thing (basic programming.) The rest of the procedure is the same. ---------------------------------------------------------------------------- If the message is to be a three line message, repeat the first three, two digit numbers entered by keypad. (for a total of six two-digit numbers) ---------------------------------------------------------------------------- I'm not to sure as to what this'll do.. Kinda unclear to me! :) Since it already is a 3-line message.. Hmm.. 5. The Code Library: (may vary from sign to sign. I'm not sure if the first few are standard and some are custom messages, or if they're entirely DOT programmed.. I'm sure they'll vary from area to area, but this will give you an idea. And if you're like me, it'll give your hair a velvety sheen. 00 Time 34 On I-70 5 Miles 01 Adverse Conditions 35 On I-70 7 Miles 02 Ahead 36 On I-70 10 Miles 03 Ground Blizzard 37 Poor Visibility 04 Blizzard Conditions 38 Ride the Skilift Bus 05 High Winds 39 Call 398-LIFT 06 Blowing Snow 40 Drive with Care 07 Snowtires or Chains 41 This Holiday 08 Required 42 Arrive Alive 09 Closed 43 All Vehicles Over 10 Congested Traffic 44 10,000 GVW and Towed 11 Icy Conditions 45 Must Use Chains 12 May Exist 70 Kenosha Pass US 285 13 Open 71 Blowing Sand/Dust 14 Road Closed 72 US 285 at Bailey 15 Road Icy 73 US 285 at Webster 16 Road Icy in Spots 74 Crow Hill - US 285 24 Speed Limit 75 US 285 at Aspen Park 25 55 MPH 76 US 285 at Conifer 26 Strictly Enforced 77 US 285 at Fairplay 27 Traffic Delay 78 ON US 285 1 Mile 28 Vail Pass I-70 79 ON US 285 3 Miles 29 Windy 80 ON US 285 5 Miles 30 Watch for rocks 81 ON US 285 7 Miles 31 Temporarily Closed 82 ON US 285 10 Miles 32 Chains Only Required 83 Construction Ahead 33 On I-70 3 Miles 84 Blasting Ahead 17 Road Wet 85 Beginning Monday 18 Snow Slide 86 Beginning Tuesday 19 Snowing 87 Beginning Wednesday 20 Snowing Hard 88 Beginning Thursday 21 Snow Packed 89 Beginning Friday 22 [SPACE][BLANK] 90 Blasting Delays 23 Snow Packed in Spots 91 8:00 AM TO 3:30PM So, for example, to display ROAD CLOSED GROUND BLIZZARD WATCH FOR ROCKS you'd enter: [RESET] [CLEAR] [REQ CTL] [003] [14] [ENTER] [03] [ENTER] [30] [ENTER] [22] [ENTER] [22] [ENTER] [22] [ENTER] And that's it. As for customized messages, I haven't figured that out yet. I guess that means another 3:30am trip to the sign :) ============================================================================= --------------------------------------------------------------------------- E2S/0MFuXS is as big as Lou Ferrigno's Balls. --------------------------------------------------------------------------- If you really like Neil Diamond, call: 20MNN: [HQ]: (303)932-1195/8404 28,800 BPS V.FC Empire of the Dragon : (303)932-1308/1309 28,800 BPS V.34 --------------------------------------------------------------------------- [E2S / 0MFuXS] [Old MF'ers Union of X-Bar Switchmen] - May '95 ---------------------------------------------------- Nummer 4 ---------------------------------------------------- GAWD this is BORING but it's at a REQUEST oh GEEZ this is ANNOYING I should be getting PAID! =========================================================================== Well, look for the hidden PHUNKRONYMS. Keeps me from reverting to watching infomercials at 2am. Did you know Dura-Lube outlubricates.. Oh nevermind. 4. TCP's Acronym Compilation [1995 TCP - E2S] --------------------------------------------- 1ESS - Electronic Switching System Model 1 1AESS - Electronic Switching System Model 1A 2BESS - Electronic Switching System Model 2B 3AESS - Electronic Switching System Model 3A 3ACC - 3A Central Control 5ESS - Electronic Switching System Model 5E 5XB - X-Bar Model 5 AAAH - 75VDC line ring, mouth-suck connection. AAX - Automated Attendant Exchange ABATS - Automatic Bit Access Test System ABHC - Average Busy Hour Calls ABS - Alternative Billing Service ABSBH - Average Busy Season Busy Hour ACB - Annoyance Call Bureau ACC - Audio Communications Controller ACCS - Automated Calling Card Service ACD - Automatic Call Distributor ACDA - Automatic Call Disposition Analyzed ACE - Automatic Calling Equipment ACF - Advanced Communications Functions ACH - Attempt per Circuit per Hour ACOF - Attendant Control of Facilities ACP - Action Pine ACSU - Advanced T1 Channel Service Unit ACTIFED - BuZZ AlDRiN uses it! ACTS - Automated Coin Toll Service ACU - Alarm Control Unit ACU - Automatic Calling Unit ADCCP - Advance Data Communications Control Procedure ADCI - Automatic Display Call Indicator ADN - Abbreviated Dialing Number ADS - Advanced Digital System ADS - Audio Distribution System ADS - Auxilary Data System ADVIL - Advanced Medicine for Pain AFACTS - Automatic FACilities Test System AFADS - Automatic Force Adjustment Data System AFSK - Automatic Frequency Shift Keying AFK - I wish I was now. AIC - Automatic Intercept Center AICC - Automatic Intercept Communications Controller AIOD - Automatic Identification of Outward Dialing (AT&T) AIS - Automatic Intercept System ALBO - Automatic Line BuildOut ALFE - Analog Line Front End AL - Makes Good Burgers. ALI - Automatic Location Indentification ALIT - Automatic Line Insulation Testing ALRU - Automatic Line Record Update ALS - Automated List Service AM - Administrative Module AM - Amplitude Modulation AMA - Automatic Message Accounting AMACS - AMA Collection System AMARC - AMA Recording Center AMASE - AMA Standard Entry AMAT - AMA Transmitter AMATPS - AMA TeleProcessing System AMPS - Advanced Mobile Phone Service AN - Associated Number ANA - Automatic Number Announcement ANC - All Number Calling ANI - Automatic Number Identification ANAC - Automatic Number Annunciator ANIF - Automatic Number Identification Failure AOSS - Auxilliary Operator Service System AP - Attached Processor APC - AMARC Protocol Converter APS - Automatic Protection Switch AR - Alarm Report ARC - Audio Response Controller ARIS - Audichron Recorded Information System ARS - Automatic Route Selection (Least Cost, AT&T Centrex) ARSB - Automated Repair Service Bureau ARTIE - PIPE! ARU - Audio Response Unit ASCII - American Standard Code for Information Interchange ASOC - Administrative Service Oversight Center ASPEN - Automatic System for Performance Evaluation of the Network AT - Access Tandem ATB - All Trunks Busy AT&T - American Telephone and Telegraph ATC - Automatic Transmission Control ATH - Abbreviated Trouble History ATI - Automatic Test Inhibit ATIS - Automatic Transmitter Identification System ATMS - Automated Trunk Measurement System ATP - All Tests Pass ATR - Alternate Trunk Routing ATRS - Automated Trouble Reporting System ATTC - Automatic Transmission Test and Control circuit ATTCOM - AT&T COMmunications ATTIS - AT&T Information System AUDIX - AUDio Information eXchange AUTODIN - AUTOmatic DIgital Network AUTOVON - AUTOmatic VOice Network AUTOMOBILE - "CAR" AUXF - AUXillary Frame AVD - Alternate Voice Data B6ZS - Bipolar with 6 Zero Subsitution B911 - Basic 911 BAMAF - BELLCORE AMA Format BANCS - Bell Administrative Network Communications System BCC - Blocked Call Cleared BCD - Binary Coded Decimal BCD - Blocked Call Delayed BCS - Batch Change Supplement BDT - Billing Data Transmitter BEEF - It's Whats for Dinner BEF - Band Elimination Filter BELLCORE- BELL Communications Research BETRS - Basic Exchange Telecommunications Radio Service BHC - Busy Hour Calls BISP - Business Information System Program BL/DS - Busy Line/Don't Answer BLF - Busy Line Field BLS - Business Listing Service BLV - Busy Line Verification BNS - Billed Number Screening BOC - Bell Operating Company BOR - Basic Output Report BORSCHT - Battery/Overvoltage/Ringing/Supervision/Coding/Hybrid Test BOS - Business Office Supervisor BOSS - Billing and Order Support System BOSS - Born in the USA. BOT - Beginning Of Tape BPOC - Bell Point Of Contact BPS - Bits Per Second BPSS - Basic Packet-Switching Service BRAT - Business Residence Account Tracking system BRCS - Business Residence Custom Service BRI - Basic Rate Interface BRM - Basic Remote Module BS - Banded Signaling BSA - Basic Serving Arrangements BSBH - Busy Season Busy Hour BSC - Business Service Center BSCM - Bi-synchronous Communications Module BSE - Basic Service Elements BSOC - Bell Systems Operating Company BSRFS - Bell System Reference Frequency Standard BST - Basic Services Terminal BT - Bus Terminator BTAM - Basic Telecommunications Access Message B'TANG - Noise made when popping open a midswitch BTL - Bell Telephone Laboratories BTN - Billing Telephone Number BVA - Billing Validation Application BVC - Billing Validation Center BWM - Broadcast Warning Message BWT - Broadcast Warning TWX BWTS - BandWidth Test Set CA - CAble CABS - Carrier Access Billing System CAC - Calling-card Authorization Center CAC - Carrier Access Code CAC - Circuit Administration Center CAC - Customer Administration Center CAD - Computer-Aided Dispatch CADV - Combined Alternate Data/Voice CAI - Call Assembly Index CAIS - Colocated Automatic Intercept System CALRS - Centralized Automatic Loop Reporting System CAMA - Centralized Automatic Message Accounting CAROT - Centralized Automatic Reporting On Trunks CAS - Circuit Associated Signaling CAS - Computerized Autodial System CASIO - What the midget plays in the trunk of our Honda when we go phreaking. CAT - Craft Access Terminal CATLAS - Centralized Automatic Trouble Locating and Analysis System CBS - CrossBar Switching CBX - Computerized Branch eXchange CC - Central Control CC - Common Control CC - Country Code CCC - Central Control Complex CCC - Computer Control Center CCH - Connections per Circuit per Hour CCIS - Common Channel Interoffice Signaling CCNC - Common Channel Network Controller CCNC - Computer/Communications Network Center CCR - Customer-Controlled Reconfiguration CCS - Common Channel Signaling CCS - Hundred (C) Call Seconds CCSA - Common-Control Switching Arrangement CCT - Central Control Terminal CCTAC - Computer Communications Trouble Analysis Center CCU - COLT Computer Unit CCV - Calling Card Validation CD - 5 Percent Interest Rate! Apply Now! CDA - Call Data Accumulator CDA - Coin Detection and Announcement CDAR - Customer Dialed Account Recording CDCF - Cumulative Discounted Cash Flow CDF - Combined Distributing Frame CDI - Circle Digit Identification CDO - Community Dial Office CDPR - Customer Dial Pulse Receiver CDR - Call Dial Rerouting CDS - Craft Dispatch System CDT - Call Data Transmitter CEF - Cable Entrance Facility CEI - Comparably Efficient Interconnection CEV - Controlled Environment Vault CERTS - With Retsyn (Tm) CF - Coin First CGN - Concentrator Group Number CIC - Carrier Identification Code CICS - Customer Information Control System CII - Call Identity Index CIS - Customized Intercept Service CLASS - Centralized Local Area Selective Signaling CLASS - Custom Local Area Signaling Service CLDN - Calling Line Directory Number CLEI - Common-Language Equipment Identification CLI - Calling Line Ident CLID - Calling Line IDentification CLLI - Common-Language Location Identification CMAC - Centralized Maintenance and Administration Center CMC - Construction Maintenance Center CMDF - Combined Main Distributing Frame CMDS - Centralized Message Data System CMS - Call Management System CMS - Circuit Maintenance System CMS - Communications Management Subsystem CMS - Conversational Monitoring System CMT - Cellular Mobile Telephone CMU - COLT Measurement Unit CN - Change Notice CN/A - Customer Name/Address CNA - Communications Network Application CNA - Customer Name/Address Bureau CNAT - I .... type at 3am. CNCC - Customer Network Control Center CNI - Common Network Interface CNS - Complimentary Network Service CO - Central Office COAM - Customer Owned And Maintained COC - Circuit Order Control COCA-COLA - Y Mucho Mas. COCOT - Customer-Owned Coin-Operated Telephone CODCF - Central Office Data Connecting Facility CODEC - COder-DECoder COE - Central Office Equipment COEES - COE Engineering System COLT - Central Office Line Tester COMSAT - COMmunications SATellite CONN - Connector CONTAC - Central Office NeTwork ACcess COSMIC - COmmon Systems Main InterConnection frame system COSMOS - COmputerized System for Mainframe OperationS COSMOS - Billions and Billions! COT - Central Office Terminal CP - Control Program CPC - Cellular Phone Company CPC - Circuit Provisioning Center CPD - Central Pulse Distributor CPE - Customer-Premises Equipment CPH - Cost Per Hour CPI - Computer Private branch exchange Interface CPM - Cost Per Minute CPMP - Carrier Performance Measurement Plan CPU - Central Processing Unit CRAS - Cable Repair Administrative System CRC - Customer Record Center CRC - Cyclic Redundancy Check CREG - Concentrated Range Extension with Gain CRFMP - Cable Repair Force Management Plan CRIS - Customer Record Information System CROTCH ROCKET - Vrroom! Open up your briefcase, get out your ol' day planner! Bought me a Suzuki, now I think I'm still 16.. Born-to-use-Rogaine, oh oh Sexually-insecure, oh oh.. CRS - Centralized Results System CRSAB - Centralized Repair Service Answering Bureau CRT - Cathode Ray Tube CSA - Carrier Serving Area CSACC - Customer Service Administration Control Center CSAR - Centralized System for Analysis Reporting CSC - Cell Site Controller CSDC - Circuit Switched Digital Capability CSO - Central Services Organization CSS - Computer Sub-System CSU - Channel Service Unit CTC - Central Test Center CTM - Contac Trunk Module CTMS - Carrier Transmission Measuring System CTO - Call Transfer Outside CTT - Cartridge Tape Transport CTTC - Cartridge Tape Transport Controller CTTN - Cable Trunk Ticket Number CU - Control Unit CU - Customer Unit CU/TK - Common Update/EQuipment system CUCRIT - Capital Utilization CRITeria CUBE - , Ice. Yo, Homey-G. "Whazzup." CVR - Compass Voice Response CWC - City-Wide Centrex DAVE - Gorski. Has bumps on his forehead that generate a current. db - Decibel DCTS - Dimension Custom Telephone Service (AT&T PBX) DDD - Direct Distance Dialing DID - Direct Inward Dialing DM - Delta Modulation (PCM Variant) DMS - Northern Telecom ESS DSS - Dial Selective Signaling DSS (2) - Digital Switching System DTMF - Dual Tone Multi Frequency (Touch Tone) EAS - Extended Area Service EATS - Spanky's Roadhouse Eats. Go there while in Denver! :) EEHO - Either End Hop Off EKTS - Electronic Key Telephone Sets EML - Expected Measured Loss (1khz loss/trunk) ENFIA - Exchange Network Facilities for Interstate Access EPROM - Electronically Programmable Read Only Memory EPSCS - Enhanced Private Switched Communications Service ERL - Echo Return Loss ESS - Electronic Switching System ETN - Electronic Tandem Network FDM - Frequency Division Multiplexing (baseband/guardband) FX - Foreign Exchange HEHO - Head End Hop Off (Use Originating locality Switch for LD) HIHO - And what is HEHO without HIHO? IMT - Inter-Machine Trunk (Connects two switching centers) IOT - Inter-Office Trunk (Connects two COs) IRC - International Record Carrier IXC - Inter-Exchange Mileage ITT - International Telephone and Telegraph LAMA - Local Automatic Message Accounting LAMA - Hari Krishna Krishna Hari. LASS - Laser Aided Switching System LASSIE - Come home! LATA - Local Access Transport Area LMOS - Loop Maintenance Operating System LCR - Least Cost Routing M/W - Microwave MCI - Microwave Communications, Inc. MDF - Main Distribution Frame MERS - Most Economical Route Selection MG - Master Group (240 circuits) MOS - Metal Oxide Semiconductor MTS - Message Telephone Service MU - Message Unit MUUU - THE AFRo CoW! NNX - Network Numbering Exchange (Loc. Ex N=2-9/X=0-9) NPA - Numbering Plan Area (Area Code) OCC - Other Common Carrier (Other than AT&T) ONAL - Off Network Access Line ONI - Operator Number Identification OPX - Off Premises Extension PABX - Private Automatic Branch Exchange PBX - Private Branch Exchange PCM - Pulse Code Modulation PSN - Public Switched Network PTT - Postal Telephone and Telegraph RBOC - Regional Bell Operating Company (A BOC and it's ROC) RCC - Radio Common Carrier ROC - Regional Operating Company (7 ROCs own the 24 BOCs) ROBOT JOX - YEHES! RSS - Remote Switching System SFS - Single Frequency Signaling SX - Simplex SXS - Step by Step Switch TBAR - Thossbar Switching System TDM - Time Division Multiplexing TEHO - Tail End Hop Off (Use Destination switch, which places local) TMBG - They Might Be Giants (boy.) TMRS - Traffic Measurement and Recording System TSPS - Traffic Service Position System (Toll pushbutton switchboard) TSS - Tandem Switching System TT - Trunk Type TTTN - Tandem Tie Trunk Network TUR - Trunk Utilization Report TWX - Teletypewriter Exchange Service UCD - Uniform Call Distributor USOC - Uniform Service Order Code (billing coding) VANS - Value Added Network Service VF - Voice Frequency VGF - Voice Grade Facility VMB - Voice Mail Box VNL - Via Net Loss WATS - Wide Area Telecommunications Service WES - Western Electric Switch (Older ESS) WES - Calarad'n. Gots a big P'kup truk. XBAR - Crossbar Switch ============================================================================= --------------------------------------------------------------------------- E2S/0MFuXS is "KEEN." ALL BOW TO K3N! KEN HAS ________! --------------------------------------------------------------------------- Do you like Pina Coladas? Or getting caught in the rain? Are you not into yoga? Are you into champagne? Call: 20MNN: [HQ]: (303)932-1195/8404 28,800 BPS V.FC Empire of the Dragon : (303)932-1308/1309 28,800 BPS V.34 --------------------------------------------------------------------------- [E2S / 0MFuXS] [Old MF'ers Union of X-Bar Switchmen] - June '95 ---------------------------------------------------- NUM5 ---------------------------------------------------- (MANDELA!) =========================================================================== 5. Phreaking Odds and Ends Fer Beginners [1995 TCP - E2S] --------------------------------------------------------- [Also known as STUFF YOU SHOULD ALREADY KNOW! - A Phreaking Reprimer] 1. Long Distance Carriers ------------------------- THE MAIN SERVICE PROVIDERS: These systems have their own hardware networks. Each company will lease access from another to access areas where they have no service. AT&T uses it's own network about 99% of the time and we abuse it 100% of the time. Sprint and MCI is rather high in own-network usage as well. AT&T is also know for operators with the worst voices. MCI operators get me giddy. 1. AT&T 10288 - The biggest, the oldest, the "best". Largest network AT&T 10732 - Private test network. You know them, you love them, you want them over for dinner. 2. MCI 10222 - One of the big 3. They've had all your friends and family over for dinner. 3. Sprint 10333 - Number 3. Does Candice Bergen eat dinner? 4. LDDS 10999 - Not as well known, but large. Leases to other companies. I'm running out of dinner references. 5. WilTel 10270 - Put their cables through old oil pipelines - instant net! I'd have Wil over for dinner any ol' day. 6. Allnet 10211 - Services many COCOTs, as does LDDS. I know. The dinner crap is pathetic. If you didn't know this, you have a musicalbum. 2. Neet Shit ------------ -We've found AT&T Microwave sites out here in the backroads in CO. Aparrently, they're also out in Montana and Idaho. If anyone wants to join us for a trip up there, gimme a ring! :) hehe. We found a HUGE - I mean GIGANTIC site out here, way back on a 4x4-only accessible road (We made it in a Honda, go figure) in the middle of absofrickinlutely nowhere. Big warning signs et al, but hey, c'mon, like they're gonna get out there in time? (Smyrk).. From what we surveyed of the place, this thing -IS- Colorado. :) Want to know where it is? Ok, you take the C-470 exit off of I-70. Depending on where you started exit off of C-470 (It ends at 70) at.. Wait a minute.. What am I doing? Am I stupid? Why would I tell you this? IT'S MINE! MINE MINE MINE! MINE MINE MINE WAAAH! Nobody know nobody know but us heheeh! Oh, and AT&T! You suck, You suck, We eleet! Go away bad boy. Momma calling you. Is our AT&T microwave. We go inside and play yahtzee. Bad! Mine! MineMineMine!!!! Uh. Wait. Getting a little carried away there. Sorry! But seriously. If anyone's out here and manages to hook up with me, and you're SERIOUS and not a k-rad kiddie k0des asshole, we'll go on a little 3am guided tour. Gotta be quick though. And wear gloves. Yep. Gloves are good. :) P.S. Also got a CEV! Nyah Nyah! Can we get into it? Nah Nah! :) 3. Phun in 3o3 -------------- 950s ---- 950-1044 Coin Return 950-1001 Dial Tone 950-1485 Dial Tone 950-1569 Dial Tone 950-0266 Tone (?) 950-0070 Extender - Code WAS "KARBON." It's inactive now, of course, thanks to some YEE YEE KODEZ KIDDIES WHEE WHEE who thought it would be K-RAD to make phone sex calls on it. Hey neat. L3Tz 4lL TyP3 L1K3 ThiZ! Others ------ Echo Box: 1-800-866-4468 "1-800-TNo-HiNT" Hehe :) (Wow. A big group from Colorado. Imagine that!) ANI: 1-800-692-6447 The famous "1-800-MY-ANI-IS" ANI: 107321-404-988-9664 FREAKY thang through the AT&T test network. And yes, this DOES work, dave. I'm listening to it right now. It's June 20, 1995. LD ID: 1-700-555-4141 "Welcome to the AT&T Long Distance Network. This message will not repeat. Welcome to the AT&T Long Distance Network. This message will not repeat." DTone: 1-303-222-0000 Very interesting. We're working on it. Loud Busy:211-2345/6 211 is a USWest internal prefix. Mamma's ears bleedin when she dialed: 311 NOTE: These were all tried from the 932 prefix, Ken Caryl Road 1A switch. I've heard rumors they don't work in other areas, but personally I have not found that to be true. 4. Other misc shit ---------------------- What switch ya got? ------------------- #1AESS - Loud click before dtone when phone is picked up and quiet, quick click before the number you're calling rings. -Smells like cheese. #5ESS - Click before dialtone when phone is picked up, none otherwise. The first ring when calling will sometimes be a partial ring. -COs are occupied by guys named Lloyd. DMS100 - No clicks, always a full ring, rings are longer. -AkA "The MONK33 Switch" Misc Fone/Switch Stuff. ----------------------- Q: What current is passed over phone lines? A: 48VDC when off hook, 75VDC, 20Hz when ringing. Nothing when you're sucking on it. (Try it sometime!) Q: What frequencies are involved in a dial tone? A: 350 and 440Hz. Q: What are the DTMF frequencies? A: Use this table: 1:697Hz/1209Hz 2:697Hz/1336Hz 3:697Hz/1477Hz 4:770Hz/1209Hz 5:770Hz/1336Hz 6:770Hz/1477Hz 7:852Hz/1209Hz 8:852Hz/1336Hz 9:852Hz/1477Hz *:941Hz/1209Hz 0:941Hz/1336Hz #:941Hz/1477Hz Q: What are other tone frequencies? A: Ringback: 440Hz and 480Hz, alternating two seconds at a time Busy : 480Hz and 620Hz combined, 1/2 second intermittent. Reorder : Same as busy, but every 1/4 second. (Trunk-busy) Q: What's the frequency Kenneth? A: Is your benzidrine, Uh huh. Cellphone ESNs -------------- Serial# to ESN: G.E. : Serial # is ESN Harris : Serial # is ESN in hex Oki : Remove first 3 digits and letter. Add 129 where those were. NEC : Remove first 2 digits. Add 135 and enough 0s to make 11 digits. Novatel : Serial # is ESN Mitsubishi: "Sec. Code" is ESN Panasonic : Remove first 2 digits. Add 136 and enough 0s to make 11 digits. B0BPH0NE : Serial # is "808" or "BOB" New Area Codes - 1995!!! ------------------------ 281: Texas - [PLA! Umm. Is the word "Greets"] 334: Alabama 360: Washington 423: Tenessee 456: Internatn'l Inbound 500: PERSONAL COMMUNICATIONS SERVICES :) 520: Arizona 540: Virginia 562: California 630: Illinois 954: Florida 970: Colorado - [Take me home, Country Roads..] NEXT ISSUE: -We got X-bar.. Partz is Partz! --------------------------------------------------------------------------- -------------------- FOR SALE SOON!!!!!! -------------------- The Club E2S Dance Mix Album Vol. 1! :) No, seriously. We have a little "album" in the works. Here's what it includes: Over 100 tracks!!!! ------------------- All box tones, phone tones, dialing tones, control tones, switch tones, and tones tones known to man. Operator/Recording messages from Sprint, MCI, AT&T, Allnet, LDDS, Wiltel, and more! Synthesized messages, numbers, etc. BONUS TRACKS!!! --------------- The famous "This Message Will Not Repeat" repeating message. "Richard L. Johnson" calling from the "American Telephony Society" asking an operator where their crossbar systems are to "take a picture" for a "book compilation" :) Cover: Available on tape ($11.95, S/H included) and MiniDisc ($22.95, S/H included) NOTE: This isn't done yet! Still gotta get the cover done and do the final trax, but hey! :) II. BONUS! ProdiGEE! -------------------- This is a newere, edited, and truncated version of an older file I wrote.. I've been working on this for a few years, but i've been slacking off lately, so pardon me if there are inaccuracies!! -TcP ============================================================================= Crap about PRODIGY: :) -- The graphics interface is NAPLPS, interpreted by Microstar's MVDI (Microstar Virtual Device Interface) -- Prodigy's "Y" network is Tymnet (secondary, usually alternate phone numbers). It's "Q" network is it's own proprietary network. -- The .SCR files in the Prodigy directory are similar to those in MGE and PP3, programs available through shareware to edit/read NAPLPS files. (The file DEVICE.SCR is actually a renamed MVDI .SCR file, such as 640X480.SCR) -- 9600 service is available on all of Prodigy's proprietary (Q) network nodes. Some, soon to be all, support 14,400 now. On its leased Tymnet nodes (Y), 9600 is currently only available, and if that, only in a few locations. This should change by the end of the year. -- It seems to me that the network is constantly "streaming", or at least it sends it out when you logoff or exit the part of the service you're in. (I think transfer between users on the same site controller is instantaneous- Long distance transfers may have a delay.) -- The service is typically not available from 4AM-7AM ET. From my experimentation, when dialing the Q networks at these times, (or maybe it's the primary number) you'll get a busy signal. When dialing the Y networks (possibly the alternate number)it'll keep ringing and not pick up. -- I don't think Prodigy's running N81. I haven't figured out what it is running on, but we'll see. -- You can erase your birthdate on the service with no problem, but you need to send in ID to put it back, even if it was in there originally. -- IDs are in the following format: xxxxnna where x=alphabetic, n=numeric, a=household user denotation, A through F,where A is the "primary user" of the household, usually the person that signed up or pays for the service. -- Prodigy won't let anyone under 18 be an "A" user -- Yes, there is a period during logon where Prodigy can write to your hard drive. It also updates your software (as you might have noticed) without your permission. It's almost impossible to could get a virus from Prodigy, unless there's some disgruntled Sears employee hanging around the computers. -- PRODIGY.EXE (DOS) is compressed with PKLite 1.03. I've tried unpacking it, but it doesn't work. I don't think that it's that PRODIGY.EXE is using "Extra Compression" (Unexpandable by PKLITE) since when I try to uncompress with PKLITE 1.10 or 1.13, it says "Incorrect Version", and when I try using an "Extra-Compression" decompressor, like DISLITE or PKUNLITE, it doesn't work either. PKUNLITE says it's not an "Extra- Compressed" file,and DISLITE (which can handle normal PKLites as well) says "Can't find end of initialization". Hmm. Maybe it's a custom job. ??? P.S. Prodigy: I didn't "peek at" or "reverse compile" your file. -- Your Prodigy software is always being updated, even if you don't know it. It only tells you when it's making a major change. -- There's an option in TOOLS to give Prodigy your credit card number. This might just be a type of "macro" for shopping services, but I haven't tested it (for my own safety).. Your CCN might go somewhere else after you enter it. (For all we know, it could come up on a big sign in some room at the Sears headquarters..!) I wouldn't use it. -- Prodigy keeps track of your software updates- If you don't log on in five years, there's five years worth of updates waiting there for you. (Well, it'll belch for THAT big of a gap, but ya know what I mean.) -- The older versions of the Prodigy software (I.E. the old CGA version that looks nothing like what is used today) can, in fact, be very useful even though you can't connect to the service with them anymore (Auto-updates are limited down to a certain version number,- Meaning that the software made before the concept of auto-updating came about, can't be auto-updated.) Well, anyways, Look into these older versions- You might just find a few "secrets" that the folks at Prodigy forgot about. -- Even though Prodigy is 16 color in the VGA 640x480 mode, it is capable of displaying 256 colors (only 16 at once, though.) -- Some sections of Prodigy adjust for time zone differences(e-mail), and some don't. This might be useful. Also, at the time of this writing, Prodigy hasn't adjusted for daylight savings time in the Mountain Time Zone. (Denver area) (Do they even know this????) -- Prodigy bulletin boards are managed by board managers-There doesn't seem to be a "Head Honcho" or "Big Brother" watching over everyhing. Therefore, some BM's are more lenient than others (The sexual topics in the so called "health" forum tend to get a little "out of hand" whereas you wouldn't see anything that isn't 100% morally right, clean, and kosher in the Kids forum.) -- The BM's DON'T scan every message that well. Things CAN slip through. I imagine that they software-scan messages for obscenities, and don't look at the content otherwise. -- The Prodigy Member List is a good way to find out where people live.;> -- SCRIPT.R is the 9600 Tymnet connect script, and SCRIPT.Y is the Tymnet 1200/2400 connect script. -- MODEMS.TXT contains all the modem init strings, etc. used with Prodigy. -- APS.CFG contains all of your "personal preferences", I.E. colors, download directory.. -- PROFILE.DAT contains your hardware setup. -- Those TLFD0000 files seem to contain the phone numbers used to access Prodigy. -- When using AUTOLOGON, Prodigy asks for a "nickname" to use. Prodigy then saves a file with the same filename as the nickname. (I.E.if your nickname was "al" it'd save it under AL.) This file contains your user ID and what seems to be an encrypted form of your password. -- The information provided in SETUP along with your modem string and a few additional parameters goes into the CONFIG.SM file. MODEMUTL.EXE also alters/works with this file. -- STAGE.DAT and CACHE.DAT are used to speed up Prodigy. These two files act as caches, or contain information that's frequently accessed when you use Prodigy. The only difference is that STAGE.DAT contains information that you use on Prodigy all the time, and is constantly updated and not erased, and CACHE.DAT stores information for an online session and is updated on a per-session basis. (I.E. If you go to the Sears shopping service a lot,STAGE.DAT would contain info on the Sears service. If you go to read your mail several times in a session, CACHE.DAT would contain info on your mailbox and what's in it.) The suspicions about Prodigy being able to access info on your hard drive arose from these files-Sometimes they contain non-Prodigy data.This is simply info left over from old deleted files, a phenomenon similar to disk fragmentation. Prodigy didn't put it there, and I doubt they'll look at it (I imagine they could, though.) This results from Prodigy creating an "empty file" by just filling it up with "snippets" of "random" HD and RAM information. (Quite a lame way to make an empty file.) If you are concerned about this, Prodigy offers a utility (for free) to remove extra data from the STAGE.DAT file. The size of STAGE.DAT is constant, but can be limited depending on what you specify in your setup. (The part about whether Prodigy runs fast or takes up space.) On the PC, STAGE.DAT is either 950,000 or 160,000 (approx) bytes in size depending on what you specify. On the MAC, STAGE.DAT is always 200,064 bytes long (but I saw 195,000 once.-??) (Whew!) -- UNREAD mail is kept for 14 days. If you "retain" it, it's kept for 14 more. PCFN mail is kept for 28 days. Commercial mail has no specific time of retainment. If you read it, it's deleted after 3 days. If you COPY TO DISK, it's deleted instantly. (Heh, just hit retain to quench that!) -- Prodigy site controllers CAN be busy. -- Prodigy checks to make sure all it's software is intact when you start PRODIGY.EXE. (RS.EXE) -- Prodigy uses CORE, FREE, PLUS, and **** service denotations. A small blue window in the bottom-right hand of the screen will tell you what classification the service you're using is. CORE features (Highlights) are general system features, and are charged depending on your pricing plan. FREE features (Prodigy info) obviously, are free. PLUS features (Bulletin Boards) are charged by time. **** features (E-mail) are charged per use/other. -- Version 3.2 info.. On Prodigy for DOS version 3.2 or above: PRODIGY.EXE was renamed to RS.EXE (Which can now be un-PKLITED!) INFORM.EXE was added, as an on-disk information center SCREEN.CMP appeared.. That's the compressed MVDI screen drivers. Otherwise, it's the same as what you get through auto-updates. -- EXPTnna id's belong to the Prodigy "experts".. STARnna id's belong to "celebrities" :) I'm not sure how the rest of this works. -- Nov.93: The "NEW PRODIGY" Arrived! What's new? A new VGA driver! Wow! Otherwise, they've woken up. New:Internet (YES!) Fax, Postal, and File e-mail capabilities! (Expensive, though.) And, of course, the prodigy mail manager! (Detailed below) Oh (again) and macros. (wow) -- Prodigy For Windows Works JUST like Prodigy for DOS, excluding the "abbreviated" menu bar and the separate program for autologon. Works OK, however I have encountered some probs with it under WIN-OS2. I get an error when launching it from a DOS box out of Mail Manager, and when I run it seamless, the screen doesn't redraw and gets "dirty." Oh. Also. Prodigy for Windows is slower than DOS. The few improvements in Prodigy for Windows: On-line photos, screen capture, "scratch pad", sounds, configurable button bar.. The BIG plusses are the WWW browser, Chat, and the Newsgroup reader. -- Mail Manager- All mail features are organized by "Mail Manager", a program you download, currently only for IBM, for $4.95. PMM lets you edit messages offline, save them, etc, up to about 20 pages.(There's a catch!)-Messages over 6 pages cannot be read by the user online! They have to download them and "type" them to see them! Not much use when you're writing to computer-illiterate Aunt Bea in Kansas.. ! PMM is where you keep your addresses, setup to fax/upload files, and organize all your messages, sent and recieved. It's nice, actually. Something Prodigy should have had long ago. Now if they could only get over the 6 page online limit! Another program you'll may be concerned with involving PMM is MAILTASK.EXE.. A Windows program that lets you use Mail Manager (PMM) with Windows. Don't try it in OS/2, though! It crashed my system. [The following note is outdated, but I kept it in to show you how Prodigy works.. This prediction DID come to pass.] -- Modem Phun- Ok.. 9600 nodes used to be few and far between. No longer. Now its 9600, 9600 everywhere! And prodigy is REALLY starting to push 14.4 modems.. Why? Because I imagine they're running 14.4 modems, just setting them at 9600, and waiting a while so they can push everyone to upgrade again like when they "went" 9600. It would be truly stupid to continue expanding a 9600 service today, and make it 14,400 tomorrow with the falling prices and increasing speeds of modems. I dont think prodigy is that stupid. Uh, I dont THINK they are.. PRODIGY PRICING PLANS -------------------------------------- Plan Monthly $ Core/Plus hours included Messaging/E-mail -------- --------- ------------------------ -------------------------- Value $14.95 Flat-rate Core, 5 Plus PLUS hours Alternate 1 $7.95 2 hrs core/plus combined PLUS hours Alternate 2 $19.95 8 hrs core/plus combined PLUS hours "30/30" $30.00 30 plus hours OVERTIME CHARGES ---------------------- These change constantly, but right now they're running at about $3/hr. Some Prodigy BB rules ----------------------- 1. You can't talk about trading "large items" such as CDs and Tapes. (huh?) 2. Sex must be talked about in only a clinical manner. 3. No obscenities. 4. They're pretty touchy when it comes to religion. 5. No phone numbers, only area codes. 6. No pseudonyms (handles, whatever..) 7. No 2-person threads. And of course, these rules are "always" "enforced!" :) ***************************************************************************** ERROR TABLE ----------- Error # Type Problem Remedy -------- ----------------- ----------------------- ------------------------ API Application Error Error in Prodigy Appl. Stay away from area CM 6 Communications Line noise, loose cable Check connections CM 4 Communications Loss of carrier Call waiting? DM Display Module Out of memory Reboot, Sign on again OMCM 6 Combined Outdated software Upgrade OMCM 9 Combined Network problem Sign on again OMCM 10 Combined ***************************************************************************** Prodigy Hotkeys (DOS) --------------- Ctrl-R.........Redraw screen Ctrl-I.........Tab (advance through selections) R..............Jump window, set to REVIEW* I..............Jump window, set to INDEX* G..............Jump window, set to GUIDE* V..............Jump window, set to VIEW PATH* F3.............View PATH F4.............Advance through PATH F5.............Jump window F7.............Jumpword Index F8.............Cross-Reference F10............Review session Ins............Insert mode Home...........Go to top of selections End............Go to end of selections Arrow Keys.....Guess Tab............Move through selections Ctrl+Alt+Del...Prodigy Aggrivation Release Key ***************************************************************************** ____________________ Prodigy's network hierarchy: |GATEWAY SERVICE | |(Ziff or EasySabre) | |____________________| | |G |A |T |E |W __________ __________ |A __________ |SITE | |MAIN NET | __|Y |SITE | |CONTROLLER| |SERVERS |_________|__| |CONTROLLER| |(Y-type |_____________| |_________________________|(Q-type | | net) | | | | net) | |__________|________ | | ____________________|__________| Primary/Alt # | |__________| | Primary/Alt # (TYMNET) | | (PROPRIETARY) |____________________| | _____|_____ | YOUR | | PC | |___________| Operations: If the needed data is not on your PC, it is requested from the site controller. This is the most common interaction. When the needed data is not on the site controller, the site controller requests it from the main network server, which then sends it back down the line to your PC. When a gateway service is used, data is routed from the gateway to the net server, and back down the line to your PC. Q-Type site controllers operate on Prodigy's own proprietary network. Y-type site controllers use leased network access from Tymnet. ***************************************************************************** What I know about the Prodigy files: (IBM) PRODIGY.EXE..................The main executable. STAGE.DAT....................Cache file for constant use CACHE.DAT....................Cache file for per session use TLFD0000.....................Phone numbers PROFILE.DAT..................Hardware setup SCRIPT.Y.....................12/2400 Tymnet Access script SCRIPT.R.....................9600 Tymnet Access script CONFIG.SM....................Modem setup/other parameters APS.CFG......................"Personal preferences" and options DRIVER.SCR...................NAPLPS Screen driver DIAGNOSE.EXE.................Hardware diagnostics utility MODEMUTL.EXE.................Modem configuration utility MODEMS.TXT...................Modem command/init string info VDIPLP.TTX...................A MVDI metafile I think. KEYS.TRX.....................??????????????????? (Access?) LOG_KEYS.TRX.................??????????????????? (Access?) PRODIGY.TXT..................File Prodigy saves to when using COPY (opt.) MODEMSTR.SAV.................Old modem string, when changing modems (opt.) "nickname" ..................Autologon macro CONFIG.BAK...................Old CONFIG.SM file, if you change modems MAILmmdd.TXT ................COPY TO DISK'ed e-mail- "mmdd" represents a date - I.E. MAIL0718.TXT would be e-mail copied on July 18th. RS.EXE ......................Same as PRODIGY.EXE- the main executable. In newer versions. PKLITED, and PKUNLITEable INFORM.EXE ..................On-Line information center program GETSCRN.EXE .................File to set the PRODIGY screen driver SCREEN.CMP ..................MVDI Screen Driver compressed archive UCMASTER.CFG.................Mail Manager Config file \UC\ ...................Mail Manager Directory \UC\XXXXNNA\ ...........Location of Mail Manager personal files \DOWNLOAD\ .............Where your downloads go RESET.BAT....................Resets the old scrn driver if it doesn't werk DRIVER.BAK...................Your old screen driver HANG.OUT.....................??? Just showed up!! ASSIST.*.....................Prodigy for Windows ASSIST help program Directory of C:\PRODIGY\UC XXXXNNA Mail, personal files, downloads for each ID.. MMANAGER EXE Main PMM executable GRAPH STX Message: You have recieved a message w/ graphics.. RTS5 STX Message: Message credit limit exceeded. RTS6 STX Message: Msg could not be delivered.. RTS STX Message: Msg could not be delivered in subj. above RTS1 STX Message: Couldn't be delivered, mail list too large RTS2 STX Message: Msg sent online couldnt be delivered.. 0004 SMS Error Message: Unable to deliver, tech difficulties 0001 SMS Error Message: Unable to deliver, no offline msgng 0002 SMS Error Message: Unable to deliver, formatting error 0003 SMS Error Message: Unable to deliver, UL/DL problems 0005 SMS Error Message: Unable to deliver, msg limit reached 0006 SMS Error Message: Unable to deliver, addressing error MMANAGER PIF Windows PIF for PMM MMANAGER 001 Overlay/Data MMANAGER 002 Overlay/Data MMANAGER 003 Overlay/Data MMANAGER 004 Overlay/Data UCRATESB DAT Messaging rates info TAGLINES MM PMM Taglines (fun ta play with) MAKEBAT EXE Makes PMM.BAT in installation MMANAGER DCT PMM dictionary MMANAGER ICO Windows ICON for PMM DRIVES CFG Dir/Drive config file UCUSERS DAT PMM User listing/data UCVERS DAT Version information (for P's use) UCSIZEB DAT I have no idea. CRCs? PMM2PW DAT Encrypted password MMANAGER VER More version info. README TXT README.TXT!! MMANAGER HLP Halp pfile TAGLINES IND Tagline index. [Number of taglines in TAGLINES.MM] COPY-MM EXE Copies PMM to another dir. In the PRODIGY Main dir... MAILTASK EXE Windows PMM launcher SETUP-MM BAT Used to setup PMM PMM BAT Starts up PMM MM-DOWN DAT ??? UCMASTER CFG PMM Config file SUPPLEMENTAL FILES/APPLICATIONS [In addition to basic Prodigy-DOS] ---------------------------------- Stage/Cache utility software..Removes extraneous info from STAGE/CACHE. PROMASTR....................*.Front end/Utilities for Prodigy PROPLUS.....................*.Similar to PROMASTR. Made by same company. (???) PROUTIL.......................Prodigy Utilities/Enhancements Font enhancers..............*.Several available, Enhances Prodigy's tacky, default NAPLPS font. PDL...........................Automatically downloads stock quotes from Prodigy PMM...........................Prodigy Mail Manager [$4.95] Prodigy BB Notes..............Offline BB note reader/reply. Avail. through Ziffnet. [$3.00] *-You may not want to use these with the new Prodigy. Not sure on compatibility. ***************************************************************************** I'm going to start to get into the actual make-up of some of P's important files.. Here's a start.. CONFIG.SM - Hardware Setup -------------------------- nohang " nohang Something associated with HANG.OUT nohang " nohang " bps:96 Baudrate.. port:2 COM port addr:02F8 COM base address irq:3 COM IRQ pnetsym:Q Primary net symbol (Q or Y) anetsym:Q Alternate net symbol (Q or Y) printer:1 Printer LPT port bitmap compress:1 Bitmap compression (interesting!) modem_str:24000,007,a007880284C6002,9600,+++,CR,CRLF,1,4,6,N, 60,60,3,6,32,N,N,,?,S0,,S2,,,,S6,S7,,S9,S10,,S12,,, ,,,,,,V1,Q0,,,,X1,,D,T,P,X1,H,,,,,,,,,,,,,,,OK,0, CONNECT,1,RING,2,NO CARRIER,3,ERROR,4,CONNECT 1200,5 ,NO DIALTONE,6,BUSY,7,NO ANSWER,8,CONNECT 2 Modem responses to certain tests? Thats from my ZOOM V.FC 24k. APS.CFG - Software Setup ------------------------ GB:0003 Unknown MAILDIRXXXXNNA:C: Mail directory MAILFILEXXXXNNA:SENDOUT.NOW Mail send status Mailbox:1 Unknown DOWNDOWNXXXXNNA:NONE Download to floppy DOWNDOWN_LOCXXXXNNA:NONE Download local ? DOWNDIRXXXXNNA:C:\MISC Download dir ColorsXXXXNNA:MB=14,3;WB=12,3;BB=7,3;EN=0,7; Color setup for XXXXNNA SCRNDRVRDOWN:NONE Screen driver download SCRNDRVRDOWN_LOC:NONE Screen driver dl local MS:1 Unknown HIGH94:1 Upgrade tries Screen Upgrade Try:1 Screen upgrade tries ZIFFDOWNXXXXNNA:NONE Ziffnet download dir ZIFFDIRXXXXNNA:C:\PRODIGY Ziffnet directory DOWNDOWNXXXXNNB:NONE Same as above, for XXXXNNB DOWNDOWN_LOCXXXXNNB:NONE " DOWNDIRXXXXNNB:C:\MISC " About NAPLPS: NAPLPS(North American Presentation Layer Protocol Syntax) is a resolution- independent, device-independent graphic display syntax. NAPLPS US government standard:ANSI-X3.110-1983/CSA-T500-1983 NAPLPS International standards: ISO-2022 and ISO-2375. In Prodigy, NAPLPS syntax in interpreted and displayed by MVDI (Microstar Virtual Device Interface). --------------------------------------------------------------------------- E2S/0MFuXS is "PHAT." Call today! Get Naked. Hi, I'm Earl! --------------------------------------------------------------------------- Questions? Comments? Recipes involving garlic? 20MNN: [HQ]: (303)932-1195/8404 28,800 BPS V.34 Empire of the Dragon : (303)932-1308/1309 28,800 BPS V.34 ---------------------------------------------------------------------------