Slashdot Mirror

WIP
http://www.binrev.com/forums/i...

Relying on cell phone communication? If it's GSM, it's already been p0wn3d. info. At the moment, it's only within reach of large corporations, but those barriers are artificial. There's also been development on creating a fake base station using a USRP (google it), a very nice piece of hardware kit that can do the signals processing necessary... So the hardware exists for $1000 to pull this hack off. Failing that, just pop the screws and cut the antenna leads to the internal wifi (which is likely the same antenna as the cell phone), or use a x-acto blade and cut the etching. Worse case scenario, look for the power pin(s) and cut them. Oh noes, I lost wifi ($30 for a cardbus card) and gained myself a free laptop!

When I can crack your security using a $5 hobby knife, you've got issues.

Sorry for the duplicate information. Just getting used to the forums here....

More info may be found at:

http://www.binrev.com/forums/index.php?showtopic=31224&st=0&start=0

There is also a simple Windows blue box program at the link to try this with.

Enjoy!

Don

==============

Check out www.projectmf.com. Phiber created software patches to allow Asterisk PBX software running on a Linux PC to simulate the old 2600 and MF (multifrequency) controlled network of the 50's-60's-70's.

Remember the Esquire article?

I have a projectmf server up on 630-485-2995. It has instructions for using it when you dial in.

Access is also available via:

CNET: 1-762-2600/2601 (see www.ckts.info for gateway numbers)
Free World Dialup: 862548
Asterisk direct connection: exten => 2600,1,Dial(IAX2/cnetguest@projectmf.homelinux.com/17622600)

Note that you need a source of 2600 Hz tone and an MF dialer (NOT a regular DTMF (Touch-Tone) dialer to make ANY use of this at all.

Perfectly legal, as the system is totally private. This is more than a simulation. The call is going over a trunk group of 24 SF/MF trunks, although both sides of the trunks are terminated on the same PC. The hardware is two extra dedicated NIC cards on the PC running T1 over Ethernet over a loopback Ethernet cable. Your incoming call gets looped over one of the 24 trunks before terminating over VOIP, so you have 2600 and MF control.

Use a short burst of 2600, wait for the wink acknowledgement, followed by the MF digits. The 2600 Hz tone must be played at a somewhat higher level than the MF digits.

The system will read back the digits it hears if you dial incorrectly. Play around with volume levels, especially if just holding the PC speaker up to the phone. The MF tones do not need to be excessively loud.

You can divert a call through the box if you can generate the 2600 and MF. Just dial 2600, KP, a 10-digit phone number (no leading "1"), and ST. Experiment on the test numbers to get the levels right first.

Need a software Blue Box to use with this? Try the attached Windows application (at the end of this message). You need Microsoft .NET framework installed for it to work. You can use the number keys on the right side of your keyboard (if you use a full-size keyboard) as an almost-real Blue Box, as well as the point and click method!

Some numbers to try:

2600 KP + 101 + ST "Weasels" recording
2600 KP + 102 + ST "Monkeys" recording
2600 KP + 103 + ST "Moo 1" recording
2600 KP + 104 + ST "Moron" recording
2600 KP + 105 + ST "Moo 2" recording
2600 KP + 106 + ST "Something wrong" recording
2600 KP + 107 + ST "Made it up" recording
2600 KP + 108 + ST "I'm bored" recording
2600 KP + 109 + ST "Don't understand" recording
2600 KP + 110 + ST "Step in stream" recording
2600 KP + 111 + ST "ProjectMF" presentation recording (exit with DTMF "0")
2600 KP + 112 + ST "Classic Tandem Stacking" recording - Evan Doorbell (exit with DTMF "0")
2600 KP + 113 + ST "Evan Doorbell juices off N1 and phreaks around. Part 1 (exit with DTMF "0")
2600 KP + 114 + ST "Evan Doorbell juices off N1 and phreaks around. Part 2 (exit with DTMF "0")
2600 KP + 115 + ST "Evan Doorbell investigates 1xx and 0xx codes (exit with DTMF "0")
2600 KP + 116 through 120 and 122 + ST "How Evan Doorbell Became a Phone Phreak, parts 1-6"
2600 KP + 600 + ST Asterisk echo test
2600 KP + 121 + ST "Operator" - Leave message if no answer
2600 KP + 123 + ST Joybubbles (Joe Engressia) 1991 Off the Hook Interview, Part 1
2600 KP + 124 + ST Joybubbles (Joe Engressia) 1991 Off the Hook Interview, Part 2
2600 KP + 161 + ST Record a comment
2600 KP + 171 + ST Playback comments. 0 to exit, * and # to skip backward and forward
2600 KP + 199 + ST 2600 Hz supervision test
2600 KP + xxx-xxx-xxxx + ST Out

I've been running a systen for some time that allows using a blue box, pretty much like the old days of phreaking. Joe tried it a few times.

More info and a simple Windows blue box program is at:

http://www.binrev.com/forums/index.php?showtopic=31224

Some of the info reproduced below:

Check out www.projectmf.com. Phiber created software patches to allow Asterisk PBX software running on a Linux PC to simulate the old 2600 and MF (multifrequency) controlled network of the 50's-60's-70's.

Remember the Esquire article?

I have a projectmf server up on 630-485-2995. It has instructions for using it when you dial in.

Access is also available via:

CNET: 1-762-2600/2601 (see www.ckts.info for gateway numbers)
Free World Dialup: 862548
Asterisk direct connection: exten => 2600,1,Dial(IAX2/cnetguest@projectmf.homelinux.com/17622600)

Note that you need a source of 2600 Hz tone and an MF dialer (NOT a regular DTMF (Touch-Tone) dialer to make ANY use of this at all.

Perfectly legal, as the system is totally private. This is more than a simulation. The call is going over a trunk group of 24 SF/MF trunks, although both sides of the trunks are terminated on the same PC. The hardware is two extra dedicated NIC cards on the PC running T1 over Ethernet over a loopback Ethernet cable. Your incoming call gets looped over one of the 24 trunks before terminating over VOIP, so you have 2600 and MF control.

Use a short burst of 2600, wait for the wink acknowledgement, followed by the MF digits. The 2600 Hz tone must be played at a somewhat higher level than the MF digits.

The system will read back the digits it hears if you dial incorrectly. Play around with volume levels, especially if just holding the PC speaker up to the phone. The MF tones do not need to be excessively loud.

You can divert a call through the box if you can generate the 2600 and MF. Just dial 2600, KP, a 10-digit phone number (no leading "1"), and ST. Experiment on the test numbers to get the levels right first.

Need a software Blue Box to use with this? Try the attached Windows application (at the end of this message). You need Microsoft .NET framework installed for it to work. You can use the number keys on the right side of your keyboard (if you use a full-size keyboard) as an almost-real Blue Box, as well as the point and click method!

Some numbers to try:

2600 KP + 101 + ST "Weasels" recording
2600 KP + 102 + ST "Monkeys" recording
2600 KP + 103 + ST "Moo 1" recording
2600 KP + 104 + ST "Moron" recording
2600 KP + 105 + ST "Moo 2" recording
2600 KP + 106 + ST "Something wrong" recording
2600 KP + 107 + ST "Made it up" recording
2600 KP + 108 + ST "I'm bored" recording
2600 KP + 109 + ST "Don't understand" recording
2600 KP + 110 + ST "Step in stream" recording
2600 KP + 111 + ST "ProjectMF" presentation recording (exit with DTMF "0")
2600 KP + 112 + ST "Classic Tandem Stacking" recording - Evan Doorbell (exit with DTMF "0")
2600 KP + 113 + ST "Evan Doorbell juices off N1 and phreaks around. Part 1 (exit with DTMF "0")
2600 KP + 114 + ST "Evan Doorbell juices off N1 and phreaks around. Part 2 (exit with DTMF "0")
2600 KP + 115 + ST "Evan Doorbell investigates 1xx and 0xx codes (exit with DTMF "0")
2600 KP + 116 through 120 and 122 + ST "How Evan Doorbell Became a Phone Phreak, parts 1-6"
2600 KP + 600 + ST Asterisk echo test
2600 KP + 121 + ST "Operator" - Leave message if no answer
2600 KP + 123 + ST Joybubbles (Joe Engressia) 1991 Off the Hook Interview, Part 1
2600 KP + 124 + ST Joybubbles (Joe Engressia) 1991 Off the Hook Interview, Part 2
2600 KP + 161 + ST Record a comment
2600 KP + 171 + ST Playback comments. 0 to exit, * and # to skip backward and forward
2600 KP + 199 + ST 2600 Hz supervision test
2600 KP + xxx-xxx-xxxx + ST Outdial to phone network
2600 KP + 011 +

I have built something like this at 630-485-2995. It's a boxable private system with connections to the PSTN and other specialized networks. Details at: http://www.binrev.com/forums/index.php?showtopic=31224&st=0&start=0

I've created pretty much what you are suggesting at 630-485-2995. Check out this link for details: http://www.binrev.com/forums/index.php?showtopic=31224&st=0&start=0 My system recreates a switch with a blue boxable trunk group of 24 trunks controlled by 2600 Hz SF and MF digit addressing. You can seize a ringing call with 2600, get the kercheep wink, then dial with a blue box or program to internal recordings, test lines, the PSTN, and the telephone switch collectors network - real mechanical switches all over the world. Perfectly legal. Its all via VOIP on a private switch. Don

Check out Episode 78 on Crytography at binrev. There a lot of other stuff on that as well (it's an hour or so of just standard radio show stuff, then some juicy bits on Elonka's exploits, and also a "dummy's guide to crypto and terminology" type intro near the end (well, I think they come in that order).

A lot of people are saying some pretty borderline rude things about someone they don't know (not unusual for /.) so let me state that she is, in fact, one of the nicest and most "normal" people I have ever met. I have known Elonka for quite some time. We meet up a couple of times each year at miscellaneous conferences and I consider her a good friend. The fact that she doesn't answer some of these comments probably makes her more "normal" than most of you now doesn't it?

To make my post more self-promoting, I will point readers to 2 episodes of Binary Revolution Radio that she was on Here and Here.

As far as the personal questions, how about you STFU and GTFO because it is NOYGDB? kthxbye!

A lot of people are saying some pretty borderline rude things about someone they don't know (not unusual for /.) so let me state that she is, in fact, one of the nicest and most "normal" people I have ever met. I have known Elonka for quite some time. We meet up a couple of times each year at miscellaneous conferences and I consider her a good friend. The fact that she doesn't answer some of these comments probably makes her more "normal" than most of you now doesn't it?

To make my post more self-promoting, I will point readers to 2 episodes of Binary Revolution Radio that she was on Here and Here.

As far as the personal questions, how about you STFU and GTFO because it is NOYGDB? kthxbye!

A lot of people are saying some pretty borderline rude things about someone they don't know (not unusual for /.) so let me state that she is, in fact, one of the nicest and most "normal" people I have ever met. I have known Elonka for quite some time. We meet up a couple of times each year at miscellaneous conferences and I consider her a good friend. The fact that she doesn't answer some of these comments probably makes her more "normal" than most of you now doesn't it?

To make my post more self-promoting, I will point readers to 2 episodes of Binary Revolution Radio that she was on Here and Here.

As far as the personal questions, how about you STFU and GTFO because it is NOYGDB? kthxbye!

if anyone wants to see other good shows (and that have no adds all over the sites)

http://ranttv.com/ is a 24/7 station with great shows

http://www.binrev.com/hacktv/ BinRev has HackTV (2 episodes)

http://infonomicon.org/video.php Infonomicon TV (6 episodes)

sorry about your server stinky, i bet mine goes down before yours =o)

I've written a few articles for 2600, which seems to have a brotherly attitude towards Phrack. Though, some people consider 2600 to be Phrack-lite, which I can totally imagine. The quality of articles in both magazines have decreased slightly over the years. More so in 2600 imo. Could that be blamed on authors or just on subject matter? I think with the mass amounts of people that have access to both publications, mixed with the 'leet' people growing up into the professional world where this type of magazine may be frowned upon, leads to stale articles and "How to use Kazaa behind a firewall" articles. Either way, there's always a few good informative articles in either magazine, so it's sad to see one go. You could always read one of them, then go to the other for "the other stuff" without getting duplicate info. Now we just have to check out even more independent magazines, like Binrev (http://www.binrev.com/ and radioshows like RFA (http://www.oldskoolphreak.com/).

Podcasting makes my life easier. I listen to quite few shows, and like other geeks, the way my work hours are soemtimes I completely forget what day it is. I often used to miss a show for a few days before realzing "Hey, it's Friday, OTH came out a few days ago" Podcasting is good because it automagically updates my iPod when the new shows come out.

Although Steve is right in the fact that, for the most part, it's the "Wayne's World" of radio. There are some good shows out there and I do enjoy listening to them.

There is a much better Linux show out there. The Linux Link Tech Show http://www.thelinuxlink.net/tllts/

rms was on it the other day, and its always live streaming on binrev radio http://www.binrev.com/

the linux link is 3 or 4 guys from some lug somewhere that enjoy doing what they do. (no paid)

the Lug radio guys are paid for what they say, and even canceled their show because they didnt get enough money.

As soon as the company went public, it changed. "Don't be evil" immediately took a backseat to "make money" on the day that happened. It is inevitable. Look at the "innovations" that google had come out with in the past year or so since going public.

They have gmail, which sounds like a great idea, but they do scan the content of the emails to put ads there. They claim no humans see the messages, and we have no proof otherwise, but it is a dangerous idea.

So far, this is all fact. Now my fear is definately theory bordering on conspiracy and I admit that. The sad fact is that all of this is possible and it shouldn't be this close.

They have admitted to the New York Times back in November of 2002 that , "Searches are logged by time of day, originating I.P. address (information that can be used to link searches to a specific computer), and the sites on which the user clicked.". Combine that with gmail and you get a database full of privacy violation. But that is just the start.

In the same New York Times article, when asked if they have ever turned any of this information over to anyone, they denied comment and refused to answer. The fact is that if they didn't log all of this data, and make these intrusive privacy policies, they wouldn't be putting our privacy at risk like this.

What about blogger? Do you think they log that also? Of course they do. They log the people who visit and what they read. They log who says what in their blogs. Then there is Picasa, for pictures on your hard drive. Don't even THINK about what they could find out from that desktop search tool that scours your entire hard drive for all of your files. Maybe it doesn't report everything now, but how long before they do? It may just be flipping a switch in the software to "phone home" with the information on the next update. By the time anyone knows, it is too late. the thought police are coming!

Now many many sites track similar information. Google is by no means the only one guilty of this type of tracking. But because of the large number of their "innovations" they have to potential to tie it all together and create a file on each and every user they have by data mining that information. They most assuredly have profiles on all of us and that should scare you to death. What have you used google for?

Yes, I am playing the "what if" game. But the fact is that it is dangerously close. The same holds true for Microsoft. I just don't have the same level of trust for google that I once had. As soon as they sold out to stickholders, I immediately worried that it would only be a matter of time before this huge database of profiles would be sold to the highest bidder (if it is not already). It is just getting too close to my privacy for my comfort which is why I am very careful about how I use Google and all of their wonderful "innovations".

I think everyone should do the same.

source: "Postcards from planet Google" November 28, 2002.

source: NewsHour with Jim Lehrer November 29, 2002.

source: google-watch.org

source: Binary Revolution Radio episodes 87,86,70,43,42,41.

like it or not. Part of the mindset that we have at Binary Revolution is that internet media is the last bastion of free speech. We have said it on our radio show and our TV show for years now. The FCC cannot regulate us (yet) and instead of us catering to the mass media and government, we are using a new medium to take back what is ours.

I could go into a longer rant about this, but you would be better served to listen to our shows and realize for yourself.

like it or not. Part of the mindset that we have at Binary Revolution is that internet media is the last bastion of free speech. We have said it on our radio show and our TV show for years now. The FCC cannot regulate us (yet) and instead of us catering to the mass media and government, we are using a new medium to take back what is ours.

I could go into a longer rant about this, but you would be better served to listen to our shows and realize for yourself.

like it or not. Part of the mindset that we have at Binary Revolution is that internet media is the last bastion of free speech. We have said it on our radio show and our TV show for years now. The FCC cannot regulate us (yet) and instead of us catering to the mass media and government, we are using a new medium to take back what is ours.

I could go into a longer rant about this, but you would be better served to listen to our shows and realize for yourself.

There's lots and lots (some would say too much) of "Hacker"-slanted talk radio shows downloadable and streamable from several popular sites.

2600 Magazine's Off The Hook has enjoyed regular broadcasts from WBAI in New York as well as being re-broadcast live on the web.

Binary Revolution Magazine's HackRadio has been fairly steady with lots of archived shows and a wide variety of speakers and topics [i am biased as i had a brief stint as a guest host].

Lots of these shows get re-broadcast on Rant Radio, a sort of free speech and alternative media cavalcade put into streaming form. I don't think you can download the shows from them but you can l33ch them at night with a varitety of free tools and listen to them in the morning.

If your Google Fu is good, you can find lots of mp3's of Jello Biafra, Richard Stallman, Larry Lessig, Noam Chompsky, and various other popular speakers talking about things techie or otherwise.

http://itconversations.com/ is a good place to start. Another one I listen to is http://www.binrev.com/radio/.

We've known that the scene has corporate ties for a while now. If you want something real check out these sites:

http://www.hackermedia.net/ - Keep on top of when new tech radio and tv shows arrive

http://www.packetsniffers.org/ - These guys are real, unlike tehbroken

http://www.binrev.com/ - Check out HackTV or Binary Revolution Radio

It could get scarier!

I went into a discussion on Binary Revolution Radio (http://www.binrev.com/radio/) episode #80 about the possibility (or rather INEVITABILITY) of Microsoft combining all of its databases from all of its individual services (hotmail, MSDN, spaces, search, etc...) and data mining them for common data. Each individual privacy policy becomes meaningless. They may not sell your data, but they can combine it and put together a pretty powerful profile about you.

The key, and the reason that I pointed it out on this episode, is the new Microsoft genuine program. All of the other databases could have been joined on names, phone numbers, and other PII (Personally Identifiable Information) which is not always reliable. With the new "genuine program" they get a hash of your system as part of the process that uniquely ties you to that computer.

With one anchor like that that *is* reliable (most of the time) they now have a way to tie your visits to your accounts from that PC to all of your other MS service accounts. For example, logging into hotmail from that "marked" PC.

It is not rock solid and may not be completely provable (people do use other peoples computers) but it will work most of the time. That is a very scary data warehouse that could provide extremely targeted advertising which would fetch top dollar from advertisers.

http://packetsniffers.org/ packetsniffers

http://www.binrev.com/hacktv/ hack tv

these are great computer shows that are made by normal people on comsumer grade computers.

and there are others like infonomicon and broken floppy that still need some work.

Stripe Snoop was discussed in detail by its author on a show called Binary Revolution Radio awhile back. You can download the ep, #56, at: http://www.binrev.com/radio/archive.html/ -enjoy, it's a really good show!

Elonka co-hosted this episode about 2 or 3 weeks ago and we discussed cryptography in general and touched on the specific projects that Elonka has been involved in. If you want to hear her speak, download episode 78 at the archive site.

On episode 60 of Binary Revolution Radio (about 1.5 months ago) we went into great detail on setting up an asterisk PBX from the ground up. You can listen to it (several times if necessary) and be able to set up your own PBX for next to nothing! We have done this and proven that it works and gives immeasurable control to users and huge savings for businesses. - http://www.binrev.com/radio/archive.html

The ARTS

BinRev

Default Radio

Radio FreeK America

Acidus was recently on episode 56 of Binary Revolution Radio (http://radio.binrev.com/) where we discussed his 2600 article and went into detail about his stripesnoop project. If anyone is interested in learning about the tech behind it or hearing about the thought processes that went into it, they should check it out.

There are a great number of interesting underground talk radio shows which have sprung up as of late, many of which deal with network security, computer programming, software piracy, individual privacy issues, etc.

I recommend the following shows:

The ARTS: Artscene Radio Talk Show - show archive
BinRev: Binary Revolution - show archive
RFA: Radio Freek America - show archive

and of course we can't forget Emmanuel Goldstein's Off the Hook which has shows dating back to 1988:
2600's Off the Hook - show archive

TEXTFILES.COM also stores a huge library of other radio shows and rants at its newly branded AUDIO.TEXTFILES.COM.

You could try binrev.com, hbx.us/haxor, or hackermedia.net. All are pretty good radio shows, with the last hosting multiple shows.