Slashdot Mirror

The PC and PC/XT were very commonly retrofitted with an AST Six Pack or generic equivalent. It was expensive, but still cheaper than buying each function on a separate card (and using six slots, which the PC didn't even have, it had just five). Even then it required running a program at startup to read from the RTC and load it into the motherboard clock. Setting the time on the Six Pack also took an executable, as simply setting the time the normal way didn't write it back to the board.

most technologies build on prior discovery; Years ago a non-coherent version was descrbed in JIR
http://www.artofhacking.com/IET/NEWTECH/live/aoh_darkbulb.htm

> Can I have all your code for free, then?

Sure!

Most of it is floating around without my name attached. A couple tools are in the Bugtraq archives somewhere, though not under this name. There may also be some here and somewhere in here, though I can't keep track of where everything is any more.

Open source is like that, you know. I don't even know who all is using what any more. Especially because I prefer NOT to have my work attributed to me and do most things anonymously or pseudonymously.

I put this in front of my answering machine's message and most of my ghost and robot calls went away:
http://artofhacking.com/cgi-bin/wwfs/wwfs.cgi?AREA=20006&FILE=SIT-IC.WAV
also: http://www.yourhomenow.com/sound/sit-tone.wav

See http://www.yourhomenow.com/sit.html for particulars about the tones (985.2 Hz, 1428.5 Hz, and 1776.7 Hz).

Then I bought one of these http://www.digitone.com/ and things got even better.

"The release of such documentation is a relatively new practice and one that remains quite controversial..."

Maybe it's new to kids running businesses today, but it was standard practice twenty years ago.

:-)

I know for a while there has been a phreaking tool called Orange Box, which supposedly lets you spoof caller ID. But my understanding is it only works *after* the other person has picked up the phone, so it's not really good for much, or at least it's a lot trickier to take advantage of.

Of course, there is a very cool software version of this tool: Software Orange Box, here. You enter in the caller ID details you want to spoof, and it generates the phone tones that transmit that data, which you can then play thru your speakers and to the phone, or connect directly to the phone for better results.

Again, it's not a great spoofer, but it is pretty cool to mess around with.

this is *the* faq on orange boxing.

-------------
Rate free iPod offers: RateTheOffers.com
(Flat screens and Desktop PCs too)

I know for a while there has been a phreaking tool called Orange Box, which supposedly lets you spoof caller ID. But my understanding is it only works *after* the other person has picked up the phone, so it's not really good for much, or at least it's a lot trickier to take advantage of.

Of course, there is a very cool software version of this tool: Software Orange Box, here. You enter in the caller ID details you want to spoof, and it generates the phone tones that transmit that data, which you can then play thru your speakers and to the phone, or connect directly to the phone for better results.

Again, it's not a great spoofer, but it is pretty cool to mess around with.

this is *the* faq on orange boxing.

-------------
Rate free iPod offers: RateTheOffers.com
(Flat screens and Desktop PCs too)

Those are excellent questions to ask.

Some information can be found by reading http://artofhacking.com/files/callerid/CLID-CID.TX T, but otherwise resources for this kind of information are non-obvious.

I haven't really toyed with this for a long while, but what about Beating it yourself?

Well, if VoIP is supposed to replace POTS, it stands to reason caller-id spoofing would be included...

You can spoof POTS caller-ID as it is with an Orange Box, as well as many other ways, including from a Nokia Cellphone.

Taken from here.

To start off with - 15 Ways to beat Caller ID

(0) This doesn't count as a way to beat CID, but there's a general
principle to consider when contemplating ways to beat CID.
Generally, the CID signal your target sees corresponds to the owner
of the dial tone you call him from. If you call direct, you dial
from your own dial tone and your line is identified. If you call a
third party, and by whatever means manage to acquire his dial tone,
and from there dial out, it is the number associated with that
second dial tone that your target sees. Some of the ideas following
this were developed with this basic idea in mind.

(0.5) This also doesn't count, but remember that beating Caller ID as
such is only the first layer of your protection. If your calling is
sufficiently annoying or criminal, there is *always* a paper trail
(ANI data, billing data, trouble reports, *57 traces, etc) leading
back to the phone you first called from. That trail is not always
easy or worthwhile to track you down with. Whether or not the trail
is followed depends entirely upon how pissed off your target is and
how much co-operation he can get from the phone company, law
enforcement, etc.

(1) Use *67. It will cause the called party's Caller ID unit to
display "Private" or "Blocked" or "Unavailable" depending on the
manufacturer. It is probably already available on your line, and if
it isn't, your local phone company will (most likely - please ask
them) set it up for free. This is the simplest method, it's 100
percent legal, and it works. But just remember you will not be
invisible to business customers with real time ANI (like on
corporate toll free lines), or to 911, or to the mechanism that *57
triggers.

(2) Use a pay phone. Not very convenient, costs 25 or 35 cents
depending, but it cannot be traced back to your house in any way,
not even by *57. Not even if the person who you call has Mulder and
Scully hanging over your shoulder trying to get an FBI trace (sic).
Janet Reno himself couldn't subpoena your identity. It's not your
phone, not your problem, AND it will get past "block the blocker"
services. So it's not a totally useless suggestion, even if you
have already thought of it.

(3) Go through an operator. This is a more expensive way of doing it
($1.25-$2.00 per call), you can still be traced, and the person
you're calling WILL be suspicious when the operator first asks for
them, if you have already tried other Caller ID suppression methods
on them.

(4) Use a prepaid calling card. This costs whatever the per-minute
charge on the card is, as they don't recognize local calls. A lot
of private investigators use these. A *57 trace will fail but you
could still be tracked down with an intensive investigation (read:
subpoena the card company). The Caller ID will show the outdial
number of the Card issuer.

(5) Go through a PBX or WATS extender. Getting a dial tone on a PBX is
fairly easy to social engineer, but beyond the scope of this file.
This is a well-known and well-loved way of charging phone calls to
someone else but it can also be used to hide your identity from a
Caller ID box, since the PBX's number is what appears. You can even
appear to be in a different city if the PBX you are using is! This
isn't very legal at all.

(6) I don't have proof of this, but I *think* that a teleconference
(Alliance teleconferencing, etc.) that lets you call out to the
participants will not send your number in Caller ID. In other
words, I am pretty sure the dial tone is not your own.

(7) Speaking of

Even caller ID is spoofable ...
http://artofhacking.com/orange.htm
Caller ID spoofing was demonstrated in the last H2K2 forum in NYC.

You are indeed right.

Here is a page I found...

(It's in the page, what fun whould it be to link straight to it and not make easy to find the others? :-) )

Download the WAV here