Attention Readers!

2600 is always looking for information that we can pass on

to you. Whether it is an article, data, or an Interesting news
item-if you have something to offer, send it to us!
Remember, much of 2600
is written by YOU, our readers.
NO IE: WE WILL ONLY PRINT A BY·UNE IF SPECIFICALLY REQ'JESTED.
Call our office or 88S to arrange an upload. Send U.S. mail
to
2600 Editorial Dept.
Box 99
Middle Island, NY 11953-0099
(516) 751-2600

OSUNY
2600 BBS#l
Available 24 hours a day with a wide
range of information on computers,
telephones, and hacking.

CALL TODAY!
914-725-4060
 We now have several ways of staying
in touch with the rest of the world. As
promised, the first official bulletin
boards of 2600 ,llagazine are now online
with more on the way.
We 're quite happy with what we've
started out with. The two boards are
both in area code 914, just north of,Vew
York City. Board #1 is the legendary
O...,'UVY, a BBS that has been talking
about phone phreaking and computer
hacking for longer than any other board
that we can remember. In fact, OSUVY
is mentioned on the very first page of
our very first issue. And it's also been
referred to in Newsweek, although not
very accurate/yo Board #2 is the (entral
Office, anotner well known bulletin
board for hackers and phreaks. We're
proud to be affiliated with these boards
and we'd like to ask anyone else
interested in running a 2600 board to log
onto these first so you can see what a
2600 board is all about.
As we've stated previously, these
boards are completely open to whoever
calls in. ,Yo area is off limits or for
"elite" users only. There are no areas of
(continued on page 10)

STAFFBOX
Editor and Publisher
Eric Corley 110

Office Manager Cover Art

Bobby Arwatt Ken Capel
Tish Va Iter Koch

Writers: John Drake, Paul Estev, Mr. French, Emmanuel

Goldstein, Chester Holmes, Lex Luthor, Bill from RNOC, David
Ruderman, Bernie S., Mike Salerno, Silent Switchman, Mike
Yuhas, and the usual anonymous bunch.

Production: Mike DeVoursney.

Cartoonists: Dan Holder, Mike Marshall.
Reader: John Kew.
Editor Emeritus: TSH.

2600 (IS.)".\ 074Y·JIi51) is puhli.lhed monthh hI" 1600 Enterprises Inc .. 7 Slr<mg:- Lane. Setauket. NY II! JJ.
Sl'wn" clal.1 !i()I/aKI' l'ermitl'l'ndinK at Setauket, ,veil" York.

I'OSI"MASTER: Send address changes to 1600. P.O. Box 752. Middle Island. NY II953-D752.

Copyright' II)X7. 2600 Enterprises Inc.

\ early SUbscription: L .S. and Canada $15 individual. $40 corporate.

Overseas $25 individual. $55 corporate.
Back i"ues available fllr I'IX4. 19X5, 19X6 at $25 per year. $30 per year overseas.
ADDRESS ALL SllBSCRIPTION CORRESPONDENCE TO: 16l)() Subscription Dept., P.O. Box 752,
Middle hland, 'Y 11'I53-D752.
FOR LETTERS AND ARTICLE SlIBMISSIONS, WRI I"E TO: 1600 Editorial Dept., P.O. Box '19, Middle
bland. �Y 11'153-(01)'1.
lM/O Otilcc Line: 516-751-2600
BBS III (OSlI\;Y): '114-725-4060
BilS 112 (C1\; IRAL ()\'I'ICE) '114-234-3260
lJSF\;FI ADDRESS: 2600@dasysl.UUCP
ARPA\;E I ADDRESS: phri!dasysl '26OO@nyu

2600 November. 1987 Pal!e3

 HACKING IBM'S
EREP: Environmental Recording Editing and Printing
by Lex luthor
01 Hackers
SNA: Systems Network Architecture
and The Legion
NCCF: Network Communications Control Facility
Introduction
REXX: Restructured Extended Executer language
Of Contents
IBM mainframe computers make up over 50
VTDC: Volume Table
percent of the mainframes used today in the
DOCS: Display Operator Console System
United States These systems are traditionally
JCL: Job Control language
used In Industries such as insurance, banking,
ACF: Advanced Communications Functions
universities, and so on. For some reason, IBM
SQL/DS: Structured Query language/Data System
systems as a whole have not been very popular
DBA: Data Base Administrator
""Ith hackers. This may be due to the complexit y
GCS: Group Control System
of the operating systems run on IBM systems
SCP: System Control Program
compared to ot hers such as UNIX or VMS.
FOP: Field Development Program
Another (eClSOn may be that there is much varlet y
CNA: Communications Network Application
POF : Progra mma b le Ope ra tor Facility
;rurn shop to shop. IBM systems are more
commonly llIodlfled and customized to f it an
PS W: Program Status Word
incllviduill corpora lion's Ileeds ilnd the lack of
SSCP: Subsystem Services Control Point
lml'v'ersailty" for commands , files . pr ograms ,
IPCS: Interactive Problem Control System
and oHler p roced ures makes it difficult to attempt
[JCSS: D i scontiguous Shared Segments
to use wltilou t a ny type of speclf! c
IIMCF: Virtual Machine Communicalians Facility
doc um entati on The lack of det ailed orHlne help
FIFO: First In First Out
also hinders the hacker. I believe tilat Hle
LIFO: last In First Out
\/M/CMS Operating System is by far the best ar1d
AP: Attached Processor
easily leamed of the IBM systems. But cOll1pared
MP: Multi-Processor
to other O peratlll g Systems like UNIX or VMS.
R/D: Read/Only
\fM ICMS is cumbersome and harder to leall1,
R/W: Read/Write
Acronyms
Logging In
Before I even attell1pt to start this Jrtl cle , I
TYPic ally , wilen you cOllle across a systen1
wili list the iBM specif ic acr onyms we Will he
11I1lIlillg an older version (If CMS. it will res pond
USiilg a nd sorne others thJt you may find on
wltl1
various IBM systems, Ilis t tllern here so I Will not
'l ave to do it tilrougilOut the artiCle. If you need to
VM/370 ONLINE
I
kno,y wl1at one of them mean s later, ju st refer
back to tllis list

'JM/SP: Virtual Machine/System Product

ThiS message IS somewhat of a con trad icti on .
CP: Control Program
The m ajori ty of VM/CMS system s are ra rely run
eMS: Conversational Monitoring System
High
011 actual 370 systems but on other processors,
HPO: Pe rfo rmance Option
such as the 43XX series and the 30XX series
VSE: Virtual Storage Extended
file penod prompt is ttle surest way of
cOll nec ted
' . '
MVS: Multiple Virtual Storage
vellfYlllg that you Ilave indeed to a
TSO: Time Sharing Option
VM/CMS system, aside lrorn the "VMi370
JES: Job Enlry System
ONliNE' message which IS usually printed. fhis
with DEC's
CICS: Customer Information Control System
IJSAM: Virtual Storage Access Method prompt should not be confused
a
VTAM: Virtual Telecommunications Access Method
TOPS-10 system, Wilich also has !Ilf) prompt of
penod. Newer versions will giv::) you this menu
IX: Interactive Executive
IPL: Initial Program Load
Enter one of the following commands:
IVP: Installation Verification Program
RSCS: R�mote Spooling Communications Subsyste m
LOGON userid (Example: LOGON VMUSER 11
DASD: Direct Access Storage Device
DIAL userid (Example: DIAL VMUSER21
Page 4 Nm'ember, 1987 26()()
 VM/CMS
MSG userid message (Example: MSG VMUSER3
GOOO MORNING)
LOGOFF
Th i s menu may vary f rom system to system,
s i n c e s y s t e m m a n a g e r s m a y o p t to o m i t
commands from the menu o r add o thers. When
hac k i n g a system , t h i s menu w i l l appear before
you can attempt to login, thus becom ing very
ted ious and t i me consuming espec i a l l y at 300
baud as you have to wa i t an etem i t y for each
logon attemp t .
"Co mpa r ed to othe r
operati ng systems ...
cases ) . NOI'L wou l d be u sed when a system
dumps you i n t o a prog ram which a l l ows you l i t t l e
or no mob i l i ty s u c h as a restricted menu o f
o p t i o n s ( i . e., a system backup u t i l i t y ) a n d l ogs
you off w i thout gaining access to C M S. N O I PL
w i l l p revent t h i s prog ram f rom running if it is
l i sted i n your automat ic I PL entry w i t h i n the CP
d i rectory. Th i s shou l d a l l ow you access to the
system. O therwise the program was spec ified to
nJn within your PRO F I L E EXEC which l ists things
to be done upon l ogon . N O I PL is somewhat
s i m i lar b u t not ident ical to the login qua l i fier
"/ N O C O M M AN D" for DEC's VAXIV M S systems.
I f t h e Pas s w o rd S u p p res s i o n F a ci l i t y i s
insta l l ed o n the system, you wi l l receive an

VM / CM S is cumbersome i nval i d format message whenever the userid and

and harder to learn."
Other responses after connec t i n g are "Ready
to H ost" , " Press break key to beg i n session" and
password are entered on the same l i ne. This is
obviously a securi ty measure to prevent users
from entering their password in full view of
anyone who may be watch ing as the password i s

" I n va l i d Switch C haracters " . The last response is n o t "masked". Thus, y o u w i l l h a v e to enter your

commonly found on Te lenet and other packet
sw i tched networks, in which you may have to
spec i fy "V M " for a V M / C M S system, or "TSO" for
an M V SITS O system . There may be o ther I B M
sysleills t o select fro m , or "VM" m a y n o t b e a
system. You may al so have to specify
'lalla
lOeON VM' or j u s t 'LOGON" before the port
password on a separate l ine when the system
promp t s you for i t. The advantage of entering the
userid and password on one l i ne (especially at
300 baud ) i s that you can try more userids and
passwords in a shorter period of t ime while s t i l i
of
availing yourself (1f the system's generosity
has been
infofTIling you whefl an rnvalid userid

,:,elector connects you to the host system.

entered.
just'L' Error messages
There are
L D(JON Cdn be abbreviated as j:"
various error messages one may
encounter while logging into a VM !eMS system.
US0fi(j Cdi1 bt irornl-8 cliaracters in length. �)ut
must be (in
you sh ou ld be most concerned about
':1st ct13racter a letter ill\l"\
Tile ones
�j!er)b you corne across ihis wiil be trUt;, Out
are'
CP dir6clnry, invalid
clue to l.d:,loITIlza'iull of systems, it's
Ilserid nol ill Wilen an
userid has been
�r:IS i1i1(J even the 8 cllaldctel password lililit may
De extended) A tYPical logon olay look li ke:
e: :r",(,(1, you will receive t h i s
messa�je This rnCIC::t1 ion g ives the hacker a

.l COMOSOU.l StSGUtSS HOlPl dic;trnct ::\rJvailtage for [Jaining entry to the

system. t�le largest security hole in any
. , IS tile system prompt, L IS the LOCDN :,ystern COi;iC'; (ron' te l ling the user when a val id

command, COMOS [0 tile u:;elili.

user:<j';'�; ha�� been entered. After a l l . obtaining a

SYSGUrSS is tlie N01PL

; .;
,;>iid iU I:) hall the battle. The olher h a l f is
anc is t(1(:
nr;ta:r,'q a valid password. Even the weakest
Indication of
crdy
c,ocratiil'J systems PO ionqer give an
.;!"�n a v31id iD tw bee" p:rtered. Why leM haJj
[11't H',;s is 3. ;llt=}t8ry to :;-�(.�c
When a valid u:,o'id I:' enteredyp,.1 Wlii �e -
:1 :,I:;·�d t�) en� .�i :� �t �/ou LCd �ld; a!rp::ldy �>
'';:
dG SC i� thu COrr"?C1, the SyStt1li vvdl

(or tileir pan UI

';0 H nui you will (f�e�\in one
or
cor:cept f\ usel call bilO!
the syster!) not the whole system (in Inosl
TWO messages'
2600 "�ijvemher, 1<)87 Pag� 5
 US Social Security Prefixes
from The Disk Jockey

001-003 Ne¥l Hampshire 440-448 Oklahoma

004-007 Maine 449-467 Texas
008-009 Vermont 468-477 Minnesota
010-034 Massachusetts 478-485 IO¥la
035-039 Rhode Island 486-500 Missouri
040-049 Connecticut 501-502 North Dakota
050-134 Ne¥l York 503-504 South Dakota
135-158 Ne¥l Jersey 505-508 Nebraska
159-211 Pennsylvania 509-515 Kansas
212-220 Maryland 516-517 Montana
221-222 Dela¥lare 518-519 Idaho
223-231 Virginia 520- Wyoming
232-236 West Virgina �21-'524 Co lot- ado
232-232 North Carolina 525 Ne¥l Mexico
237-246 North Carolina 585 Ne", Mexico
247-251 South Carolina 526-527 Arizona
252-260 Georgia 600-601 Arizona
261-267 Florida 528-529 Utah
589-595 Florida 530 Nevada
268-302 Ohio 531-539 Washington
303-317 Indiana 540-544 Oregon
318-361 Illinois 545-573 California
362-386 Michigan 602-626 California
387-399 Wisconsin 574 Alaska
400-407 Kentucky 575-576 Ha",aii
408-415 Tennessee 577-579 Washington DC
416-424 Alabama 580-584 Puerto Rico
425-428 Mississippi 596-599 Virgin Islands
587-588 Mississippi 586 Guam, Samoa
429-432 Arkansas 700-728 Railroad
433-439 Louisiana

Some numbers are sho",n more than once because they have been
transferred from one state to another or have been divided
for use among certain geographical locations. No ne", 700-
series railroad numbers have been issued since July 1, 1963.
These are used by credit agencies and other services ",hen
verifing birthplace, tracking do",n individials, or for use
in creating ne", identification.

Page 6 November, 1987 2600

listening in: catch me ifyou can!
by The LNA Master
Are you tired of watch ing scramb l ed video
f rom H BO and the Movie Channel, etc.? And you
don't want to watch Dr. Gene Scott or Jerry
Falwe l l or any of the other TV preachers? Do you
feel your sate l l ite d i sh is going to waste? Wel l,
here's something fun you can do with i t.
In add i t ion to receiving video and audio
signals, your sate l l i te dish can be used as a
wiretapp ing device. Yes, some of you can
actua l l y wiretap from your own l i v ing room-a
fact you probably didn't know. Wiretapping is
i l legal, but as the t i t le of th i s art i c l e says, catch
me if you can . I t's virtua l l y impossible to detect
th is particular brand of l isten ing in.
A l l you need for this project i s your basic home
sate l l i te dish antenna, also known as TVRO or
televison receive on l y . What you need to do is
tum to the AT&T sate l l ite known as Telstar 301.
You' l l notice between Channel 20 and 23 (that is,
Channel 21 and 22) you ' l l see a b l ank screen as if
there were a stat ion there . You won't hear
anyth ing except maybe an occasional garb l ed
sound.
Thi s is what you do to l i sten in on phone cal ls.
Take a general' coverage shortwave recei ver
(covering between AM broadcast band and 30
megacyc l es) . Connect the antenna input of your
shortwave to the video out term inal on your
sate l l i te rece i ver . Tune the shortwave receiver on
lower side band ( L S B) anywhere between the
b r o a d c a s t band (1.6 m e g a h ertz) and 7.5
meg ahert z . M ake sure your satel l i te recei ver i s
ei ther on C hannel 2 1 or 22 . Y o u wi l l pick up more
cal ls to Hawai i , Puerto Rico, A laska, and the
Caribbean than you ever thought possib l e. Who
wou l d have dreamed there wou ld have been that
many phone cal l s to l isten to? About every 31f2
ki lohertz there i s a phone conversation. If you do
not hear a phone conversation, you w i l l hear a
c ont inu o u s t o n e of 2600 h e r t z . T u ne y o u r
recei ver to where you bel ieve 2600 i s com ing i n
perfectly, then listen for a c l ick f o l l owed by M F
( b l u e box) tones f o l l owed b y a ring. Y o u w i l l then
be able to I isten i n on A T&T calls to area code
808, 809, and 907.
For frequencies above 4.1 megahertz, switch
to upper side band ( U SB). A l so, you can tune in
Channel 8 of Telstar 301. It appears that Channel
8 on your standard sate l l i te recei ver box swi tches
to the US Spri n t service from the main land to
Hawai i. Spri n t codes can be (and have been )
gotten successf u l l y by l isten ing to the cal ls.
I n teresting conversat ions are all over the p l ace,
such as the man from Long I sland who has two
wi ves and was prom ising the second wife over
the phone that she could stay in h i s house i n
Hawai i u n t i l he "got r i d of" wife number one.
Tel star 301 can be found at 96 W on the
satel l i te d i sh. Spacenet 2, which i s l ocated at 69
W is a l l US Sprint. Domestic cal ls as wel l as
overseas calls can be mon i tored .
O t her i n terest i n g satel l i tes are ASC1 at
128 W, Westar 2 at 79 W, and Comstar 04 at
76 W. O n these, simply tune across unt i l you hit a
b l ank channel that looks like i t's carrying a
s i g na l . T h e n t u n e t h e s h o rt w a v e rec e i v e r
anywhere between 1.6 a n d 7.5 megahertz. I f the
conversation doesn't straighten up, sw i tch to
LSB or U S B on the shortwave .
REGISTRY OF
THE 'TOP SECRET'
U.S. GOVERNMENT
RADIO FREQUENCIES
%5 TO �70 IIIIZ
8Y TOil Kl'IEITEL. KUES
A Review of "The 'Top Secret' Registry
01 U.S. Gov8rnl1lln t Radio Freqlll/lCies"
by Mr.lcom
Scanner l i sten ing seems to have a certai n
mys t i q u e am o u n g p h r e a k s a n d h a c k ers,
p a r t i c u l a r l y i n r e g ard s t o li s t e n i n g t o
m o b i l e / cord less / ce l l u l a r p h o nes, and c e rt a i n
government agenci es . However, unlike mobile
phones, whose frequencies are wel l known, the
feds' frequenc ies appear to be h i dden away from
(continued on page 22)
26()() November,1987 Page 7
 the telecom informer
B Y STAFF

r-[ hey've done it again. This time,

after repeatedly and aggressively
judge ordered destroyed. An intelligent
man....While MCI and US Sprint are
promoting their 550 talk line trying to grow and recover from their
numbers (phone numbers beginning with losses, AT&T is trying their best to
550 that connect callers to total knock them out. AT&T has started a
strangel)), New England Telephone has new program for COCOT (Customer
devised a plan to block access to these Owned Coin Operated Telephone)
numbers from your home for a companies. The contract for this
monthly charge. This is supposed to program insists that payphone
benefit those people who listened the companies route all their long distance
first time and called all those numbers in traffic through AT&T. The companies
the advertisements, winding up with an receive between 3 and 17 percent
incredible bill. Now that they've been commission depending on how much
given a taste of what kind of "accidents" long distance usage there is. The
their phones can have, a dollar or two contract also states that the phones
for "insurance" isn't so unreasonable. cannot process Visa or Mastercard calls
Where have we seen this before? ...New (many COCOTs now have a magnetic
Jersey may soon have talking yellow card reader installed), and goes on to say
pages. Using a touch tone phone, 950 and IOxxx calls are not allowed
subscribers will be able to call a unless the payphone tariff re4uires them
computerized system, enter a four-digit in that state. An interesting note: in New
number, and listen to a recorded York State the only rules governing
message containing theater events, stock COCOTs are I) they must give free 911
market reports, and anything else you service; 2) they must give free local
could possibly want. The service will be directory assistance or have a phone
free to customers. To advertise on it will book nearby (a book in the same
cost about $!m a month....In Annapolis, building counts!); and finally 3) either
Maryland, a man pleaded guilty to on or around the phones there must be a
stealing long distance telephone service number for service or complaints.... MCl
using his home computer, which the is expanding International Direct
Dialing. As of September 15, Israel was
550 Blocking Service
MCI's 5gth direct dial country. They will
Q: Wh.t 'I !150 Btocklng Service?
A:. It" , new HfVIce for ,,"Iclence customerl whO would ttb to .I!!!!! clll" lease e4uipment from A 1&1' to facilitate
'rom Ihelr home telephone. 10 ,.k lines. TheM '"k Nne• .now cUllom.rs to N
connecled 10 gmuP cOIWersatlon •. New �IMd ntt.phone ptOricIet the connection long distance service to another 140
lind billing lor IhI cal" but I!'HI vwtou. 'Ilk 1M ..moe. .. GpefIIIed, monttor.d
Mel pmmo ted b¥ DlMr oomp.,.d... countries ....US Sprint now provides
Q: Why 'I !1!50 Stocking Servtce being offentd7
A:. In orchtf to tIdd,. •• campl.nta from �t. who.. children ...,.,..ed unnpec:1ed access to over 60 countries, while only
bill' by ceiling tllll!: line .. the o.p.rtment of PubUc utili'," In ll ruet.. New Engt..s
n.lephone 10 «tfMttop ••erv!CI ttl" would lltow moM � ID fMlrtot .,...
to the.. MtYfcM 'ram theer home phonM.
about 20 are dialable with a fON card
0: How doe, S!5O Blocking Sel'¥lel wor1l7 (Sprint's calling card service). The rest of
A:. Wh en CUltome,. lubscrlt. to 5!10 Blocking 8er¥� etIIl' "*'- from their home
'e'ephon•• 10 telephone numbers 1, ...lng wllh "5ISO" (the exc:h� lINd aclueev.rr the countries are only dialable with 1+
tor 'alk I'MII) will not til; compte'ed. The r:a.... .... be InIormed .... MtCh ...
cannot be oompItIled from thlll telephone.
service. Among the countries not
',MO Blocilino SeMCI .,,1I1Ib1e to ..,.ryone1
dialable by calling card are Argentina,
Q:
It.:. No. It. 1111 of the PChlnG" whlNl Ihlt ..Mel I, � pt'eHnlly 1l'IIIIIbIe
iIpge'" on IhI b-=k 0' thl. IhNt. 550 Blocking Is avalillbll to � .......
In "' olher IXchllflgn who IUblcftbllD unltrntted ,.. ,... .moe Chile, Dominican RepUblic, Hong
• tMir Ioc.. MMca.

Q: What III do not .ubeoftbl to unlimited ftII: .. IeIvIoI buI woutd II" to ...rtot Kong, and Taiwan. (As of November 7,
US Sprint suspended international calls
lICe." to talk 11M.?
A: You eM e'ect 10 chen.,. your toe.. MI'YtcI ft.. rate ..rvtca
to unllmn.ct
No come�1on eh.-ge appH .. II you CURWItly ,ublcrtbl to In optlonll c.tRnt INn
luch .. a.r 8t ... c.lllnq. Circle c.lllna, Melropoiltln CIIHng. to the Dominican Republic from area
eto. .. )'Our lac .. Mrvlee. Howevet', you wi. 10M 1M beMftta or __ ,... IIr
comertlng to unltrnlted net rate Mt'VIOe. codes 212 and 305.) US Sprint says by
0: How much doe. MO Blocking Service COlt?
A: Thefe 'I • monthly Ctlarge 0' one doI'ar ror MO Blocktng 8ervlD& TNI .... II In the end of the year they should handle
mdnlon to • monthty' cherge tor n.. rate ..... In )'OUt ...
over gO countries....MCI will offer
II you woukt like to order S50 Blocking ServIce or .Impty leem moN IIbout n. pi.... OIl
1 800 555-MOO, hom within Meine, MIIIUChUHtt .. N.. Hempehl", Rhode ISiend or
'lennon!. From ot her Iac..lon .. pie... cal, your New EngIw1d � ServIce
operator service in 1999 so that
""pntaent • ..,. • the IeIeJIhOM number bted on the IIemIaIIon .. ADcounI: PIlle 01
IfIt. biN. customers can use calling cards from a

Page 8 November, 1987 261JO

rotary phone. Once that is established
they will also offer collect calls, trouble
assistance, and other operator services.
US Sprint has provided operator service
for a good while now. Just dial �00-332-
0777 or for you equal access nuts 103330
(107770 is now extinct)....While both
MCI and US Sprint are offering 800
service neither provides 800 directory
assistance. Take 800-444-9999, an MCI
800 number owned by Mrs. Fields
Cookies�we called MCI and asked
them if they had the 800 number for
Mrs. Fields. They told us rather matter
of factly that the number for 800
directory assistance is 800-555-1212. We
tried to explain that that number was for
AT&T 800 numbers, but were silenced
with a click. When we called 800-555-
1212, we asked the woman who
answered "AT&r 800 information, " if
she had the number for Mrs. Fields
Cookies. She said there was no listing. It
just goes to show if you're going to get
an MCI 800 number, you have to
advertise or else no one will ever call
you....With US Sprint's ongoing
advertising nonsense about hearing a pin
drop over the world's only fiber optic
network they neglect to mention that
you can also hear one drop on every
long distance company -AT&T, MCI,
Allnet, lIT, RCI, Western Union (oh
well, almost every company). In its
continuing quest to cut over to
"Network 3" (originally scheduled to be
completed by June 27, 1987), US Sprint
has sent out notices to old GTE Sprint
(950-0777) customers. The 9 digit codes
(which started out as 7 digits plus a 2
digit travel code) were replaced by a 7
digit code which can only be used from
your home town. Even these new codes
were only given out to customers
without equal access. Until now when
you traveled you could still dial 950-
0777 and place a call without a
surcharge. Now when you leave your
city you must use your F-ON card and
pay a 55 cent surcharge with each call.
The letter continued stating that one day
soon when yl'u call your access number
(for the 7 digit home codes) you will
hear a recording giving you a new
number. This day has already come.
There goes the last bit of GTE Sprint
left in US Sprint. And soon they11 be
selling their old network (see
illustration).... Southern Bell has a new
service for Florida residents who travel.
Called "The Right Touch Service", this
program allows customers to disconnect
and reconnect their telephone service via
a touch tone phone. From anywhere in
the country you can call 800-826-6290 to
receive a series of interactive recordings.
Callers are asked to enter their telephone
number which must be in area codes
305, 813, or 904. They are then
prompted for a personal access code.
This 4-digit PIN number (not the calling
card PIN) was mailed to customers
recently. When this service was
(continued on next page)
Now's your chance
.....................................................................................
US Sprint is
selling a9,670 mile
communication network.
Some dUngs you doo't need two of. Especially two complete communications netWorks.
But when GTEt'Sprim aoo us Telecom merged to form US Sprint.Iha!:'sexactly what we
ended up wnh..
analog
and digital mi.crowave network � �ces ov� 150 ma�
t!Jrougbout
US Sprint is selling aD
metropolitan areas
be
theen� Uruted StaleS. So 11 you re Jl1�ted 111 something
from San Fr:mcisco to New York, CK from Bayoo Blue to Boutte, we mlgbt able to help.
Because now thal we've moved to an aU-fiber netWork, we simply don·t need our micro-
wave network.
�oo:i';�=��::::::;:'���::;t::.:;!..��:r,.
pwcl>a>od:::::.:::ty
.... �"':,."::�.:"�=��n:.';'::...
200 feet in height. The DwJdings 'm:fully con.nected to local
power.fully�.and.va>gelOO"III""f....
':"=;;,xp�'���or�lChosthal""'be'i"'"
.... �'::.': :ru,,"!:�.:���AnJ:':.,�""
mostodvoncedin<he....uileind..tty.
.... ����.;z�=f=O�.::=��=;'
.... OwnedoDdlea>ed=l,,""'property""""""�Ih<he_orl<.
.... :: =";'v: =..!i�.:! =i:=
= � on
I
fllW>C>olona\ys�.
Uyou""m_t.,Jin""""infonnanonobounheen... "'lWorl<,portlonsofit.ormany
of its components. gtve us a call at
1-800-548-4825.
.................................................................................... .
2600 November, 1987 Page 9

the telecom informer
introduced a few months ago, cu�tomers
had 3-digit PINS. It's quite possible that
those first PIN's were actually the
"account codes", those three numbers
that follow the telephone number on the
phone bill. With this service, there is no
fee to turn off your phone line, but there
$20.50
is a charge to turn it back on.
Right Touch is available 24 hours a day
and has the capacity to handle 26 callers
simultaneously. While it may be a handy
convenience, we wouldn't be surprised if
the service got more abuse than use.
Considering the amount of lines in
Florida, Southern Bell may have used
some sort of formula to assign the
1'11\:\, thereby avoiding the trouble of
entering millions of 1'1:\\ lor their
customers. It anyone finds this to be
true, give us a call. Sanlord Bingham 01
CO .\laKa::illl' reported that when the
service first started, he gave 305-555-
1212 as his number. "I gave 999 as my
code. Astoundingly it worked. The voice
thanked me and began to ask
questions." Since then, the system has
been programmed not to accept 555,
950,976,and others as valid exchanges.
On a similar note, customers of South
Central Bell can dial 1-557-7777,a toll­
free number accessible only to local
callers, to get billing information,
disconnect or reconnect service, arrange
for payment, order a duplicate copy of
their phone bill or custom calling
services, all without having to deal with
the business office. (What is left for the
business office to handle'? Most likely,
complaints about this new servict:.)
South Central Bell started this service on
a trial basis in early September with
40,000 customers in Kentucky.... And
finally, we've discovered a marvelous
little game you can play with Sprint
representatives. If you call HOO-52 I4949,
they'll answer with the following
greeting: "Thank you for calling US
Sprint. By placing your order today, you
will enjoy the clearest sounding long
distance calls ever. My name is [name].
Page 1 0 November, 1987 2600
(colltinued/rolllpre\,iouspaKe)
How may I help you?" I his is one of the
longest greetings we've ever heard and
we've made an amazing discovery
concerning it. If you hit a touch tont: in
the middle of the greeting, the
representative on the other end
automatically jumps to the word
"Hello'?" It \ just like an interactive
computer! Iry it today.
(('(Jiltilluedfrolll !JaKe 3)
the systems where credit card numbers,
,11( I codes, or passwords are being
pmted. But we refuse to put restrictions
on users' private mail. Above all else,
private mail must remain private. Fven
the system operator has no idea what is
in each user's private mailbox-that's
the only fair way to run a system. Of
course, it's quite possible that someone
will send a Sprint code to someone else
through the mail. Or an obscene word.
Or a poem. We do not take
responsibility for the contents of private
mail. And neither does the post office.
Both boards are similar in format.
There are a series of room:Oi to "(,'0 TO ".
Some of them are obvious, some may
take a little guesswork. You can choose
the rooms you want to be a part of or
even create rooms. Fntry is not
restricted or monitored, but you do have
to know the name of the room you're
entering. (This is not hard information
to come by, either through guessing or
asking around.) Files are also stored in
some of the rooms. These are easy to
look at and download.
There is plenty of online help
available for users. A nd should you run
into a problem of any sort, simply leave
feedback or call us at (516) 751-2600.
Fvery 2600 board will have an area for
users to leave us public feedback. Both
of these boards have a 2600 room. You
can use this feature to communicate with
other subscribers, offer criticism, praise,
and suggestions. Of course, you can also
do this privately by sending us mail.
These systems are completely free to
use and full of information and
(collliflued Ofl page 21)
 MCIT'*""'..........._

MCI
Coroor.uon
r- Nortl'lust OIIlI"CIt' MtlOQl.llrtet'1
(: 'I, Im�lllo"al On",.
j::l'l' orOOIi "i •• Vanl. laS7J
9,.a�J7.sooo

Date: November 12, 1987

IE: Account�� __________

A recent review of your .ccount indic.te• • po •• ibl. bre.ch in the

•• curity of the .uthoriz.tion cod••

Du. to chi. f.ct, w. h.v. ch.nl.d your .uthoriz.tion cod. a. follows:

Old Cod. N.w Cod.

!hi. ch.nl. h •• b••n .. d. for your prot.ction .nd i. eff.ctiv. imm.diately.

If you .r. bill.d for .ny un.uthoriz.d c.ll., pl •••• circl. th••• and deduct
froa your ch.rl... 'or furth.r inv ••til.tion, th. entire invoice Ihould be
returned with p.,..nt to, Met Northe •• t Divi.ion lnve.til.tion. Dep.rtment
.t the above .ddr •••.

If you h.ve .ny qu •• tion. about your Mel .ccount, plea.e call:

Coa.aric.l 800-444-5555
Re.identi.l 800-444-3333

Sincerely,

MCI Northe ..t

Inveltil.tion. Department

WHY DO THESE LETTERS ALWAYS LOOK SO SLOPPILY WRITTEN? In

addition to their inability to spell "commercial", MCI doesn't seem to be able to make
our new code work. When we called to find out why, the friendly representative told us
that "effective imml.'diately" means 5 to 7 days in most cases. In addition to providing
long distance alternatives, MCI now provides logic alternatives. Meanwhile, lJS Sprint
still hasn't gotten around to taking away that $1200 outstanding balance that someone
racked up on our account. "Just ignore it," they keep saying. That ought to be their
corporate slogan. On our last conversation, they told us that we actually had a $12,000
biII a few months ago which they never sent us since it seemed unusual. And so it goes.
26()() November, 1987 Page 1 1
 WHY NOT
Double Beepers
Dear 2600:
Re c e n t l y y o u m e n t i o n e d b e e p e r
compa n i es n o t yet be i n g ra ided b y the
po l i ce for p h o n e n u m b e r s . They d o n 't
h a ve to ra i d th e m ! Accord i n g to a f r i e n d
who r u n s a l a rg e b e e p e r compa ny, the
a u th o r ities ca n , w i th a warra n t. leg a l ly
obta i n d u p l i c a te beeper n u m be rs. Any
a ccess to the mon i to red n u m be r a l so
beeps th e d u p l icate n u m b e r in the
pol ice station.
Bob from Los Angeles
How clever. So now we have beeper
tapping. But will the beeper companies
be as cooperative with the authorities
as the phone companies?
Why No Boxing?
Dear 2600:
In th e cou rse of two yea rs of te l ecom,
I 'v e r e a d c o u n t l e s s G -f i l e s w h i c h
d e s c r i be t h e ( v i r tu a l ) s p e c t r u m of
"boxes". Y e t f e w f i les I 've e n c o u n tered
g ive a c l e a r exp l a nation a s to why
b o x i n g is i m p o s s i b l e i n e l e c t r o n i c
s w i tc h i n g o f f i c e s . Wo u l d y o u m i n d
exp l a i n i ng Common C h a n ne l
I nte roff ice S i g n a l i ng ( C C I S), a n d ju st
how an e l ectro n i c off ice "p reve n ts"
box i n g ? Th a n ks.
Franken Gibe
Texas
Put quite simply, it's impossible to
us e a blu e b o x i n a n electronic
switching office under CCIS because
the equivalent of the blue box tones
that a phone phreak would send are
transmitted over a completely different
line. Since you don't have access to
thes e lines, blue boxi ng no longer
works. This is also called out-of-band
s i g n a l i n g . For a m o r e t h o r o u g h
discussion. refer t o page 2-7 o f the
2600 1985 collection. available from
$25.
us for
Page 12 November, 1987 2600
Apple Hacking
Dear 2600:
I th o u g h t some of yo u r readers m i g h t
be i n terested i n the fo l lowi n g :
Does yo u r school h a ve a b u n c h of
App l e s h ooked up to a Corv i s ? We l l , if
they do, th i s i s for yo u .
I f yo u wa n t a l l th e acco u n ts a n d
passwords a l l yo u h a ve to do i s fo l l ow
these s i m p l e i n str u ctions. Fi rst when i t
prom pts you f o r yo u r 1 0, s i m p l y h i t ctr l ­
reset a few t i m e s . Yo u s h o u l d now
h a ve an App lesoft B a s i c prom pt. Now
type in th i s one l i n e p rog ra m :
10 F O R 1 =6 2 8 1 T O 7252 :PR I N T
CHR$(PEEK(I ));:N EXT I
Nowth a t you h ave th a t typed i n , RUN
i t. The p rog r a m s h o u l d d u m p a l l of the
p a s s w o r d s o n to t h e s c r e e n . Us e r
na mes a re u s u a l l y two to fo u r
c h a ra cters l o n g . Pa sswords a re two
c h a r a cte rs l o n g . Al so, d i sreg a rd a ny
p u nctu ation fo l low i n g a pa sswo rd .
Let's say yo u h a d some o u tp u t th a t
looked l i ke th is: ... . . P 1 P 2 TY I PXX P 3. . . ..
Th e "P 1" a nd "P2" wo u l d be user 10's
th a t req u i r e n o p a sswo r d s . T h e
"TY I PXX" wo u l d be user i d "TYI P",
password "XX". "P3" wo u l d be th e
same as "P 1.. a n d "P2".
That's the b a s i cs of H a ck i n g Corvis
C o n s te l l a t i o n . Un t i l n e x t t i m e h a v e
p h u n a nd hack o n .
The Rifter
More How- To Articles
Dear 2600:
It's been awh i l e s i n ce I 've seen a n
a rt i c l e on box i n g . W h y don 't you r u n a
h ow - to a r t i c l e-o n e t h a t a d d r e s s e s
i n te r n a ti o n a l ca l l i n g p roced u res? I ' m
s u re y o u h a ve t h e capa b i l i ty o f com i n g
u p w i th a very i nfo r m a tive a rti c l e o n
t h i s s u bject, a nd m a n y readers wo u ld
apprec i a te i t.
Tabula Rasa
 WRITE US A LETTER?
While we have a number of how-to
articles that we've published in the
past, we'll be happy to print any new
information, including new boxes,
calling techniques, etc. International
calling and red boxes are at the top of
our "wanted" list.
A New Source
Dear 2600:
I j u s t fo u n d a g re a t s o u rce for
i nfo r m a t i o n o n n ews a bo u t sec u r ity
a nd s u c h l i ke. It's in a q u a rte r l y jo u r n a l
ca l l ed ACM S I G S O F T, w h i c h is the
"spec i a l i n terest/ software" g rou p of
the Assoc i a tion for Com p u t i n g
M a c h i nery. The a rt i c l es w i th i n conta i n
a l o t o f i n te r e sti n g issues about
sec u r i ty a nd 50 o n , a n d m a ny a re a l so
amusing.
Rea d i ng these a rt i c l e s m a kes m e
rea l i ze h ow m uch I m i ss th e n ews
col u m n of y o u r ma g a z i n e . T h o u g h
some p h rea ks a n d h a ckers fee l th i s
stuff i s j u s t f l uff a nd wo u l d rather see
tec h n ica l d i a g r a m s in its p l a ce, I fe l t it
wa s th e best part of th e jou r n a l . I e n joy
r e a d i n g a b o u t V M S t r i c k s to g r a b
pa sswo rds, b u t I a l so wa n t t o know
a b o u t w h a t's h a p pe n i ng i n t h e wor l d
o u t th e re (oth e r th a n t h e l a test ph reak
a r rest). Vanda l - p h re a ks ca u se some
d a m a g e , but I a l so f i n d i t e n l i g h te n i ng
to read i t e m s l i ke "Th e F B I est i m a te s
t h e a v e r a g e theft l o s s f r o m com p u ter
fra u d s a t $600,000 [pe r f r a u d ]," a s o n
page 1 3 of th i s J u l y ' s ACM S I G S O FT.
Y o u m i g h t w a nt to m e n t i o n t h e
exi stence of th i s resou rce a s I s u s pect
there a re q u ite a few of us w i l d a n d
we i rd n ews ju n k i e s sti l l o u t there i n
subsc r i be r l a nd.
E.H.
We still have a news column. It's
called The Telecom Informer and it
combines all kinds of newsworthy
items into one long, rambling article.
We'll try to cover as many Interesting
occurre nces as we c a n for future
edit ions. For readers interested in
subscflbing to ACM SIGSOFT, write to
t h e As s oc ia t io n f o r C o m p u t i n g
Machinery Inc. (ACM), Post Office Box
12 1 14, Church Street Station. New
York, NY 10249. Let us know what you
find out.
Pen Registers
Dear 2600:
As I stated i n a prev i o u s letter, m y
Ra d i o S h a c k p e n r e g i st e r d o e s n 't
record n u m be rs w h e n I use a cord less
phone ( P h o n emate).
I t wo u ld be i nterest i n g to know the
m a ke of the pen reg i st e r a nd co rd less
p h o n e t h a t "Wo r r i e d a n d Up s e t i n
A r i zo n a " u ses tha t does reg i ster phone
n u m b e r s ( S e p t e m b e r 1987 l et te r s
page).
Samuel Rubin
Unique Projects
Dear 2600:
No o n e m a kes t h e fol l ow i n g for the
App l e :
1. A com b i n a t i o n speech g e n e rator,
c l ock, p r i nter buffer, and copy card.
M aybe even some RO M m e mory.
2. A 110, 300, 1200, 2400 ba u d
modem w i t h E u ropea n a nd Amer i c a n
t o n e s f o r 110 a n d 3 00 b a u d , a uto d i a l .
3 . A c a rd for i nterfa c i n g a n App l e to
a l most a n y h a rd d i sk. A l so n eeded is a
way a ro u nd t h e ProDos l i m it of 2 32-
m eg d i sks per s l ot.
4. A coprocessor/a cce l e rator ca rd
tha t h a s a l l t h ree m a jo r p rocessors on
o n e card: FAS T 65 02, Z-80, a nd 6800
p l u s 64K r a m .
Any takers?
John Nix
(continued on page 22)
2600 November. 1987 Page 13
 AND WIN -S20/Yr
The October 1987 Stock Market Pl�e
.....
proves that ECONOMIC COLLAPSE IS
likely and soon! Are you prepared ff. O it?
Or for War, Terrorlst A cts. RebelllOn,
b r
¥iVk�S6��r, �i�ti�� i�cr !haO ���' a�Jc���:
Ma.de and Natural Disasters? For two
years, we published the popular, ultimate
technolo� survival newsletter. REBEL.
SURV.lVEA:ND W.l:N!­
sizzling and rock-fisted - includes com­
puter, communication, electronic, Phone
��g�i s�Z�i\�' A'i, d �w t���Z\�� :gdd
ne
win Now and '!be Day After in urban,
suburban, rural and wilderness areas.
Chock full of hard-ta-find survival info.
Includes no-holds-barred editorials and
articles. We need many more subscribers,
feature writers, information �ontributors
i l
��ti������r:�c�:Jl� �u���I��n�� �rsi:
Published monthly. S20/yr lridividuals,
$SO/yr Corporations. S3/back issue.
;'Nl-l'H7J!J'fjfAlJIJs�RfAWJ"

VORTEX
GENERATOR-SB
Heat/cool with Simple, Amazing 3-Port
po�lfeiu��eslrou�O vd�g&:���, 6�acrt,:'A���d
sctentlficall.y �ound. Practical. Plans.
*.*••••*•••••••

STOPPING
POW ER
METERS"'l0
Our all-time best seller! Describes how
electric meters work wh are
��lsith,eB'g� J�g wE� �
a
INO INTERNAL LOAD MET Y.

IRON GONADS-Slo
most controversial and e)(Jllicit elec-
u i m e
�����ti���rge���l �����f� �:a�� s ! �d
to slow down - even stop - power meters!
...............

LIBERATE
GA S & WATER-sIO
Describes a simple method using com-
r:�rlg���� g�;��We"(:�ttr[g ����g� rcgis-
a

*********."'*••*

SECRET &
ALTERNATE
IDENTITIES-sa
rs� e�C:-t�� :g th'e �i�arr:�'ftp��Os �t ��
t a t k
GRAPH
taining secret and alternate IDs. �ou have
DEFEATS-S2o the legal right to have as many IDs that
Jg�grOO�
:� in ¥:f:� �� c,:�k��
l a v r s n i
���o�O�a� Yafe ��hf:� � :�9tt��iy: � Y��v:�an�
��!� ra1luie��,';:a� �OO% phony (and legal) passports!
even your llte rm.rv:: If � are totallY
*****.*********

innocent! Describes In Shocking detan

what pqlygraphs are, their various uses,
types of tests and questions, procedures,
scoring methods\ validity and reliability,
and technical aesign factors. Heavy
emphasis on every known countermeasure
to o
f���c��ti ��T��fJk�r!}f� C:i��i�r�;�
and speCiOc lIinnocen�" and "guiltyll res­
ponses to typical questIO ns.
*.******.*****'"

FREE-sa
t r
, Om�i1/ i; �h�n(!lin��tis'r��fn���t�'
supermarket food, medical and hosQitai
,
����[t��2!���S ;��f��,n�O:;ke;���n� �:.:
azines, air/bus!trainlship first class fares,
software and video tapes - more!
•
*.******.******
"'*"'**"'*"'**"'****

CONSUMERTRONICS
2011 CRESCENT DR. P.O. DRAWER 537
ALAMOGORDO. NM 88310

Page 14 November, 1987 2600

 MASS TRANSIT
TERROR-S7
Worried about Air iracy? Bombings?
RINTER & Hostage Situations?P Ra�h 'fraugott,
F�ht #847 host!� J �tated: tlnotice that
�;; �}i��;:rrt'te�����?,
PLOTTER
b�

��r7�;
i e e
age)
MANUA L-S15
Types, Descriptions. Specs. and 100+ In­ �� �a:l �t� �w� �1{f<it���
of their weapons pas� all airport
security. This manual
terfaces (Parftllel, Serial). Detallpq Plnns

l�g�U?os�. �;i\\��l �?�fri���!· t(��:�e\�

t a
of X-5wltchers, Buffers, ft1!d Serlal-Tb-­ descrIbes terrorist
Parallel and Pal'll llel--'Ib--..<;; erJai Breakout
Devices. Repair, Maintain. Many Ally,
Use and Service TIPS, Figures.

SUPER TECHNICA L
RE-INKING RESEARCH
METHOD-ss
Rc-Ink Cloth Ribbons for about 50 ('enb
e
�Pe�in ��1;:��� �e��!����t���1u7)j�'�t
SERVICES
and 10 1!1l�lUtes each. PlaTL'; for El (,ht>apo g r
�fl���Pp��vfg:� k��t�e ��r��l rfsr�
W'f�;
Motor-Driven Re-Inker. Com [!lOnly used
Ink (5 Colors) and Carrier described. r e e
�:;:; ��ti�\�2 �o� ����Js:rfJ��� �)6
cents per page. Saves you a b mdle on
***************

R&D time, money! EducatlOnal tuol.

************** ,.

1'/(,1I5e Order 'It)(lay - Tell Your Friends About Our Ad - Keep Our Ad For Future Orders

THE CENTRAL OFFICE

A
full range of telephone,
radio, computer, and satellite
info plus a whole lot morer
2600 DDS #2
914-234-3260
2600 November, 1987 Page 1 5
 A N I N TI M ATE LO O K AT
;� logon unsuccessful-incorrBct password. As has th i nking you found a val i d command but cou l dn't
� j ust been stated, a valid userid has been entered execute i t since you weren't l ogged on,
2.. but the password was incorrect . Passwords can Accounts
� be from 1-8 characters long , but in many cases By constantl y compi l ing userids from various
� the m inimum l eng th is changed to be at least systems you shou l d be able to co l l ect a nice l ist
� three characters , There is no d ifference between of accounts which may enable you to gain access
§ upper and lower case letters for either the userid to a sys tem , The fol lowing are a few which I have
'� or password as they are converted to upper case found :
� by the system , Th i s is another securi ty f l aw as i t
reduces password poss i b l i ties , OPERATOR SMART
Password incorrect-rBinitiata logon procedure. CMSBATCH VTAM
Th is is the message received on the older AUTO LOG 1 EREP
versions of V M / C M S , which means the same O PERATNS RSCS
thing as the above message , VMTEST CMS
Maximum password allBmpts Bxceeded , try again VMUTIL SNA
latBr. The threshold has been reached for userid MAINT
and /or password attempts , You w i l l receive this
As usual , use the usemame as the password ,
message every time you attempt to l ogon after
Th ings sti l l haven't changed from the Hacking
exceeding the threshold unt i l a variable period of
VAX I V M S series " , peop le are just as stup id as
time ( probab ly from one to f i ve m inutes ) has
elapsed , Th is l ocks out all users who attempt to they were a few years ago ,
There are many defau l t accounts which have
log in to the system from that part icular l ine , I am
the passwords l i sted in some I B M system
not sure whether this is recorded anywhere or
manual s , These are hard to obtain and are very
whether it is sent to the system conso l e , I t's a
powerf u l s i nc e s o m e passwords are rare l y
good idea to determ ine how many attempts
changed , I f you can get access t o the defau l t s , i t
normal l y trigger this and keep just short of i t .
w i l l greatly expand your c o l l ect ion o f systems- I
AlrBady 10ggBd o n . Th i s message w i l l appear
guarantee i t .
when you attempt to logon with a val i d userid
and password and that userid is already onl ine ,
Dial
D I A L i s used to logical ly connect l ines ,
Unl i ke other system s , V M /CM S w i l l not al l ow
whether they be sw i tched (regu lar dial -up phone
the same userid to be l ogged on more than once ,
l ines ) . leased (dedicated ) , or log ically attached
Userid missing or invalid. As it impl ies , nothing
( d i rectly connected ) , to a previously logged on
was typed after entering the LOGON command ,
m u l t i p l e-access system , The D I A L command is
or the format for the user i d was not correct , i , e ,
the only subst i tute for the l ogon command , On
using a number as the first character o r a contro l
s y s t e m s runn i ng m o r e t h an one opera t i ng
character used somewhere in the userid field ,
system , D I A L is used to connect the user to one
Error in CP dirBctory. The C P d i rectory is the
of those system s , It is rather common to f ind two
main user directory for the system , Entries in the
di rectory contain the userid and password , VM or more operat ing systems running para l l e l or
"under" one another , Th i s is q u i te d i fferent from
I / O configuration, d i sk usage val ues , assoc iated
most other system s , which run alone on the
v i rtual and rea l addresses , pri v i l ege classes ,
machine , One mach ine , one operating system ,
v i rtual processor size , and other options for each
but not I BM , The abi l i ty to have multiple systems
user , Without the proper d i rectory entry , a user
running simultaneously and st i l l provide the user
cannot logon to the system and wi II therefore
w ith the i l l usion of it being a sing l e system ( the
receive this error message,
whole idea beh ind m u l t i - tasking computers is to
Command not valid before logon. Th is occurs
provide each user w i th the f u l l resources of the
when y o u e n t e r any t h i n g o t h e r t h an t h e
mac h ine so quickly that i t appears that he or she
commands l i sted in t h e men u , i , e , entering
B O N E H E A D w i l l ret urn t h i s m e s s a g e even is the only one using the system ) sets I BM apart
from most other computer manufacturers , Some
though " B O N E HEAD" isn't a val i d command ,
of the systems which run on I BM 's are : V M / C M S ,
Why this is I don't know , So don't get a l l exc i ted
M V S /TSO , D O S I V S E , O S I V S1 , Some others
Paee 16 November, 1 987 2600
 I B M ' S VM / C M S
are : M U S I C , J ES , and I X / 370 which is I BM 's
version of U N I X that runs under V M / S P .
I t i s always good to know what other systems
are runn ing , and if you are unab le to gain access
to the "primary" system , you may be ab le to gain
access to one of the "secondary" systems by use
of D I A L . Some systems wi l l req u i re you to
spec i fy a l i ne number for certai n systems . O thers
w i l l f i nd a l i ne for you if one is not spec i f i ed ,
assum ing there are some a l l ocated to that
resource . U serids are also dialab l e . In some
cases you have to dial through a particular userid
i n order to gain access to certain systems or
perform certain commands . A typical l ogon to a
D IA Led system may look l i ke:
. DlAL MUSICH
DIALED TO MUSICH 040
*Miscellaneous Computer Services MUSIC/SP 1 . 1
SIGN ON.
.RESET
DROP FROM MUSICH 040
VM/370
I se n t to his term inal .
When it comes to f i nd i ng a val i d l i ne number
for systems that can be reached via D I A L , you
cou ld be in for some trouble. If the system
req u i res a l i ne number to be entered ( u n l i ke the
above example , where l ine 040 was found
automat ical ly) , you w i l l not only have to come up
with a defined l i ne number, but one that is
assoc iated w i th the system you are attempt i ng to
access . Usua l l y you can f i nd this information
after l ogg ing onto the V M / C M S system i n
various f i les , but i f y o u cannot get i n , y o u w i l l
have t o sequential ly enter l i ne numbers . Some
that I have seen are 001 , 01 B, 41 A , 040 .
The V M / C M S system does not appear to l im i t
the n umber of D I A L attempts a user can make ,
u n l i k e L O G O N a t t em p t s . P r o g ramm i n g y o u r
micro t o search for a val id l ine number to a
system should work with no problem .
To d rop the d ialed connection j ust type
R E S ET .
Error Messages
linels) not available on 'sysname'. E i ther there
are no I i nes a l l ocated to the system , or you must
enter a correct l i ne n umber.
Invalid device type 'sysname' 'lina#'. You have
entered a val i d system or userid and l ine number,
but the dev ice you are on ( the terminal ) is
i nval i d . I n t h i s case , a G RA F ( G raph ics) dev ice ,
system console, or 3270 term inal may be the
only val i d device .
'usarid' not loggad on. The D I A L command
cannot be executed un less the user (or system )
speci fied is l ogged on .
'lina#' does not exist. A val i d userid /system has
been entered but the l ine number for that
useri d / system is not val i d .
Massage
M SG is used to send messages to users who
are current l y l ogged on. Th i s command can be
issued before ( if speci f ied by the l ogon men u ) and
after l ogg ing i n .
MSG OPERATOR Helpl I l ost my password I My usarid
is COMOSOLO.
Th i s w i l l send a message to the primary
system operator of the system . If there is on l y
o n e C L A S S A user online, the message w i l l b e
MSG *
Th i s w i l l send a message to yourself . This i s
usef u l f o r iden t ifying the current userid of an
abandoned terminal .
Logoff
The L O G O F F command can be abbrev iated as
L O G . After logging off you wi l l receive the
fol lowing :
CONNECT= 00:33:54 VIRTCPU= 000:00.28
TOTCPU= 000:0 1 .76
lOGOFF AT 1 7 :05:44 EST THURSDAY
04/ 1 6/87
C O N N ECT i s the actual c lock t ime you spent
wh i le on the system . V I RTC PU is the virtual CPU
t ime that was used . TOTC P U is the total CPU
time, both v i rtual and overhead , that was used .
The H O L D command w i l l hold the connection
(continued on next page)
2600 November. 1 987 Pale 1 7
 P LAY I N G WITH I B M ' S VM /C M S
-;; a l l ow i n g you to re- I ogon agai n w i thout hav ing to Shows users how many invalid password allBmpts have
� re-dial the system . occurred on their userid
�
;:I
Increased file security
.2 .LOG HOLD
;.
Logged On
Security Softwan
'"
..
0.. After logg ing on you may recei ve someth i ng

§ T h e re are v a r i o u s w e a k n e s s e s w i t h i n s i m i lar to the f o l l owing :

� VM / C M S both intem a l l y and extemal l y wh ich
1 can b e exp l o i t e d . For t h i s rea s o n , v a r i o u s OASD 1 90 LINKED R/O; RIW BY MAl NT; R/O BY
.� software security packages have been written . 030 USERS
=: There would not be a need for these in most cases LDGMSG 1 0:40:25 EST FRIDAY 05122/87
o
� if the people in charge of system security knew WELCOME TO MISCELLANEOUS COMPUTER
what they were doing . Anyhow , these packages SERVICES
do p ro v i d e a d d e d sec u r i t y w h e n p ro p e r l y VM l
i m p l emen ted . The most common l y found are SYSTEM WILL B E DOWN FROM 1 0:00 TO 1 0:30
VM S EC U R E and AC F2 . TO P S E C R ET and RAC F EST SUNDAY MAY 24, 1 987
a re o t h e r s w h i c h a re l e s s c o m m o n . T h e s e
packages are eas i l y iden t i f i ed . Logon at 1 3:22:59 EST FRIDAY 05122187
After entering a val i d userid VM S EC U R E VM/SP REL 4 04120/86 1 1 :33
responds w i th :
R; T=0.0 1 l0.01 1 3:23: 1 0
VMXACI I D4R Enter logon password:
**************************

HHHHHHHHHHHHHHHHHHHHHHHHHH Line #1 : Th i s l i ne shows that the d i sk at v i rtual

SSSSSSSSSSSSSSSSSSSSSSSSSS
One way to pos i t i ve l y identify the use of
V M S EC U R E i s by using it as a useri d . If it is
running it w i l l be a val id user i d , and who knows ,
you may even hack the password .
After entering a bad password , ACF2 ( Access
Control Fac i l i ty 2) responds with :
ACFV1 0 1 2 PASSWORD NOT MATCHED
ACFV0044 ACF2, ENTER PASSWORD
**************************
HHHHHHHHHHHHHHHHHHHHHHHHHH
SSSSSSSSSSSSSSSSSSSSSSSSSS
These packages prov ide i nformation which
should be i nherent w i t h i n the operat ing system
i t se l f . Perhaps newer versions of C M S w i l l
conta i n them . Some o f these features are :
add ress 1 90 i s l i nked with RIO access by you ,
R / W by userid M A l NT and R I O by another 30
users .
L i ne #2 : Th i s shows that the logon message
was created at 1 0 : 40 on Friday . L i ne #3- 7 : Th i s
i s t h e message that i s shown to a l l u sers of the
system upon logging on . Some systems may not
have one .
L i ne #8 : The actual t ime of logon is printed .
L i ne #9 : The curren t R E L EA S E of V M / S P and
the time and date i t was i nstal l ed i s shown .
L i ne # 1 0 : Th i s is the ready message and it i s
prin ted after every command i s performed where :
R= Ready- t h i s ind i cates that the system i s
ready f o r i n pu t . T= Time-the f i rst series of
numbers tel l s how long it took the system to
perform the l ast task . The second set of numbers
g i ves the time of day . I f you do not recei ve the
ready message you are i n CP and must I PL C M S
i n order t o issue C M S commands .
Line # 1 1 : The system p rompt-you can now

La st logon date/time
enter commands .
Privilege Classes
Password expiration
As w i t h most other opera t i n g system s , a user
Rules for passwo rd selection
must have suff ic ient p ri v i l eges i n order to
Invalidating userids for invalid password allBmpts
exec u te cert a i n commands . Every CP command
Invalidating terminals lor invalid password allBmpts
belongs to one of eight I B M def ined pri v i lege
c lasses . The CP d i rectory def i nes which users
Page 1 8 N ovember, 1 987 1600 (continued on page 20)
2600 marketplace
WA NTED : Any h acker a nd p h reaker
softwa re for IBM compat i b l e a nd H ayes
compat i b l e modem . If you a re se l l i n g or
k n ow a nyone who is, send rep l i es to
M a r k H . , P . O . Box 7052, Port H u ro n , M I
4830 1-7052.
F O R S A L E : O k i d a t a M i c r o l i n e 92
perso n a l p r i nter. I n c l udes m a n u a l for
i n st r u ct i o n s . H a rd l y u s e d . M a ke a n
offer a nd i f i t ' s reaso n a b l e, I w i l l pay
postag e . M att Ke l ly, 3 10 Isbe l l , H owe l l ,
M 1 48843.
S U M M ER C O N ' 8 8-com i n g to N YC .
Watch t h i s space for m o re i nfo.
TA P BAC K I S S U ES. Com p l ete set,
v o l . # 1 t o a n d i n c l u d i n g v o l . # 9 1,
i nc l u d i ng sc h e m a t i cs a n d spec i a l
reports . Copies i n good to exce l l e n t
cond i t i o n . $ 5 0 . 00, n o c hecks, i n c l udes
postag e . T. G e n ese, 219 N. 7th Ave . ,
M t . Ve rnon, N . Y . 105 50.
D O C U M ENTAT I O N o n e l ectro n i c and
d i g ita l sw i tc h i ng system s a n d PBX's.
W i l l i n g to p u r c h a s e / t r a d e . A l s o
l ook i ng for ot h e r p a r a p h e rn a l i a s u c h a s
Be l l Syste m Pract ices . W r i t e to B i l l , c/o
2600, P.O. Box 7 5 2C, M i d d l e I s l a nd,
N Y 1 195 3.
B L U E BOXI N G ? Let 's exc h a n g e i nfo
o n p h o n e n u m be rs, pa rts, a n d etc.
Write to : B l u e Box, P . O . Box 117003,
B u r l i ng a me, CA 94011, Atte n t i o n D . C .
F O R SALE: 8038 m u lt i - p u rpose tone
g e n e rator c h i ps, p r i m e q u a l ity $7 . 5 0
each ppd . I n c l u des com prehens ive
a p p l i c a t i o n s d a t a . Two c h i p s w i l l
g e n e rate a ny d u a l tone for m a t . These
a re n o l o n g e r in prod u ct i o n . G et 'em
wh i l e they l a st . B r u ce, P.O. Box 888,
St i nson B e a c h , CA 9497 0.
FOR SALE : Radio Shack C PA- 1ooo
Pen Reg i ste r . J u st l i ke new. $7 0 . 00 .
J . C . D e v e n d o r f , 29261 B u c k h a v e n ,
Lag u n a N ig u e l , CA 92677 - 16 18.
F O R SALE : Ex- Be l l b l u e boxes, o l d a n d
sty l i s h , m a y e v e n work ! A l so a w i d e
r a n g e of o l d B e l l comms eq u i pment.
Ca l l ( 5 14) 288-6731 a nd ask for R ick
for deta i l s.
D O YOU HAVE o l d outdated com puter
eq u i p m e n t l y i n g a ro u nd g a t h e r i n g
d u st ? Why n ot donate i t to 2600's
g r ow i n g b u l l et i n b o a r d n etwo r k ?
S u pport freedom of speech i n you r
t i m e ! Contact 2600 a t ( 5 16) 7 5 1- 2600
or w r i te 2600, PO Box 7 5 2, M idd l e
I s l a nd, NY 1195 3.
F O R S A L E : SWT P C M o d e l C T - 8 2
i nte l l i g e n t v i deo term i n a l . Com p l etely
p r o g r a m m a b l e ( 15 0 s e p a r a t e
f u n ct i o n s ), R S - 232C & para l le l p r i nter
ports, f u l l ASC I I keybo a rd w/cursor
control pad, 9" P- 31 C RT w17x12 dot
m a t r ix-u p to 92 co l u m n capa b i l ity, 32
b a u d rates to 38,400-m u c h more.
Exce l lent cond ition with fu l l
doc u m e ntat i o n . O r ig i n a l ly $800, se l l
for $125 o r best offer . Bern i e S p i nd e l ,
144 W . E a g l e R d . , S u ite 108, H averton ,
P A 19083.
2600 M E ET I NGS . F r i days from 5-8
p m a t the C i t i co r p Center in t h e M a r ket
( l obby w h e re the tables a re )-15 3 East
53rd Street, N ew York C ity. Come by,
drop off a rt i c l es, ask q uest i o n s . Ca l l
5 16-7 5 1- 2600 for more i nfo.
GOT S O M ET H I NG TO S E Ll? Looki n g
f o r somet h i ng to b u y ? O r trade? Th i s i s
t h e p l a ce ! T h e 2600 M a rketp lace i s
f r e e t o s u b s c r i b e r s ! J u st s e n d u s
w h a tever y o u wa nt t o s a y (without
m a k i ng i t too long) a n d we ' l l p r i nt i t !
O n ly peo p l e p l ease, no b u s i nesses.
Address : 2600 M a r ketplace, P . O . Box
99, M idd l e I s l a nd, NY 11953. I nc l ude
you r add ress l a be l .
Deadline for December issue : 1 2/ 5 .
2600 November, 1 987 Page 1 9
 H AC K I N G I N TO I B M ' S
� can use which c l asses of comman d s . Each user al phanumeric symbol of up to 8 characters .
:::- has one or more pri v i lege c l asses , as does each Operands: These spec ify the i nformation on
�
--.,
C P command . If you try to i ssue a command that which the system operates when i t performs a
::: does not match the assi gned pri v i lege c l ass of the command funct ion .
2 userid you are using , the system w i l l not process Options: These keywords are used to control
:; the command . As far as I know , no records of the exec u t i o n of a command . When used , they
� attempts to use pri v i l eged commands are kept . must be p receded by a left parentheses , but a
.� Here i s a rundown of c l asses A through H . c losing one is not necessary
:s Primary System Operator: The c l ass A user has D i fferent commands are u sed w i t h i n d i fferen t
� the abi l i ty to control the system . Any user who en v i ronmen t s . To see which env i ronment you are
uses the V M / S P system conso le possesses t h i s i n , s i m p l y h i t ret u m at the period p rompt . You w i l l
p r i v i l e g e c l a s s . Th i s u s e r c a n b r o a d c a s t receive one o f the fol lowing C M S , C P , X E D I T .
messages , contro l system accou n t i n g , a n d i ssue There are many commands that are usef u l t o
commands which affec t the overa l l performance both reg u l ar system users a n d hackers , H E L P i s
of the system . ava i lable on some system s , part i c u larly o n
System Resource Operator: The c l ass B user has u n i vers i t y system s . I t i s extensive but n o t a s
the ab i l i ty to cont ro l a l l the "real " resources of the c lear as U N I X o r V M S . Th i s i s typical of I B M .
system , except those contro l l ed by the spoo l i ng N evert h e l ess , H E L P i s usef u l and you sho u l d get
and primary system operators . hardcop i es of as many commands as you can .
System Programmer: C l ass C users can mod ify AI D is another foml Of H E L P which may be u sefu l
rea l storage as opposed to v i rt ua l storage . t o YOll i n lea m i ng more about the system .
Spooling Operator: The c l ass D user controls One n i ce feature of C M S H E L P is that when
spoo l ing data f i les . you receive an error message, you can :
System Analyst: ( C l a s s E ) M o n i t o rs a n d
i n terprets system performance data . H E LP OMSOOOOOO or OMKOOOOOO
Service Representative: ( C l ass F ) Th i s c l ass IS
llSu a l l y g i ven to accounts that I BM F i e l d Serv ice Where D M SOOOOOO o r D M KOOOJOO is t h e error
personnel use for u p d a te s and a l so for d i agnos i n g message you have rece i v ed . The system w i l l t hen
system pro b l ems exp l a i n wllat it I S , w il y it happened , and how you
General User: C l ass G use l s a re Hle mos t can correc t i t
p l o m i nent on the syst em . Th i S pr ivi lege al lows ! elm g O i n g t o h o l d off on exp l a i n i ng a n y and a l :
the user t o control f un c t i ons ;lssoci aled W i t h �ommands re l a t ed t o m l n i d isks u n t i l t il e next
' l it; ; ' D w n v l rtual , llac h i ne Sf�c:t I (Ii The o thers which I have found t o be
AllY: The Any c l ass i f i c a t i o n IS g i ven to cer t a i n use t u i dre as fol l ow s .
C P cOlll rn amis w h i c h a r e ;wadable t o any user You C:111 I ssue a n y C P command w h i l e in e M S
TIle commands a re usua l l y l i m i ted to LO\j 1 1l and b y precl u d i ng tile command w i th CP
Logoff Ouery
Class H I S reserve{j for I BM use Ouery a l lows you t o o b t a i n various b i t s oj
Due to the i n d i v idual needs of a S i t e , pri v i lege I Il f O inla t !on about the system . A full l i st can be
c lasses can be tai lored to s u i t the fac i l i t y . A t o t a l found b y using H E L P .
qf up to 32 c l a s s es can be nlade . Th e y wou ld he O n e o f t h e most important Q U ERY commands
sl lown i n t h e CP d i r ec to ry as A- Z a n d 1 -6 for the Ilacker is
Some typic a l pr i v i le g e c l asses for a few
r;ommon IIscnds are C l ass A for O P E RATO R , . 0 NAMES
C l ass F t o r E R E P , C l asses B , C E. G fOI
( ) P E RA TN S anIi C ! a sses A , B . C [) E , F , G fo � O P E RATOR-O l F, SMART-[JSC CMSfl349-
MAlfH B27, LOGOO I 80--B3 1
Commands \lSM - · IjMVS I
f'. Ullllr k1l1 d s drc ' , 13(;e up o f COlll; l land nal iiC:, 5COTT· _·TP l l W f M Z , CMS 1 2 ! l · T P ! i WHi4,
;}II d ophcns . IJ P H1ATNS, - TP l l WFY l
Command Name : A cOl nrn a n !i [ lai "I' h : ', ; 1 II: T ·O.G I /0,0 ] 1 1 :34:28

I'a g<> 20 " m emher, 1 9N7 2601!

 There can be many users o n l i n e ; usual l y t h i s made i n � h e t i le U S E R I D N ETLOG (where
l i st w i l l conta i n f rom 30 to 1 00 users . T h e last U S E R I D i S t . . e user you a re send i n g the f i le to ) .
user o n l ine was O P E RATN S , s i nce i t was l ast in T h i s command i s also u sed for send ing N OT E
the l i s t . The S M A RT userid i s D S C , or i n a f i l es w h i c h c a n b e created w i t h an ed i tor and sen t
d i sconnec ted state . U sual l y a tenm i n a l w i l l to whomever as E - M A I L .
rem a i n d i sconnected for 1 5 t o 3 0 m i n u tes and I f you are t i red o f see i n g a text l i st i n g , o r have
then i s tota l l y logged off the system . I f you logon attempted to read a compi l ed prog ram and w i sh
to an a l ready d i sconnected tenm i n a l , the system to exi t or break out of i t , s i m p l y h i t a hard-break ,
w i l l rep ly w i t h " R EC O N N ECTED AT t ime" . The and then type H X H X i s for H a l t eXecution . I t
other 2 userids on the same l i ne as S M A RT are w i I I h a l t whatever you are doing and p u t you back
probably connected tenm i na l s which are in a pre­ i n to the C M S en v i ronmen t . It may take a few
logged i n or pend i n g l ogon state . V S M - V M V S 1 l i nes of text after enteri n g i t for the system to
I S another system r·u n n i n g paral lel to (or under) stop the process
CMS This article will be concluded in the December
Th e Q U ERY N A M ES command a l l ows you to Issue of 2600.
(con t inued/rol l l page
g a i n a l i t t l e more security for you rse l f on the
j{))
sys telTl . I t a l lows you to gain more valid
interesting user.,. The number for
usemamcs to attempt passwords for i n the
mws l', 2MJO Board #/ l\ 9/4-725-4060.
u n f o rt u n a t e event that your curren t uselld d i e s .
The ( entraI O.fjice, 2600 Board tt2 is
.I\ notller u s e I S tilat y o u c a n start t o comp i le your
reachable at 914-234-3260. If you get a
. c ornrnon accounts" l i st of userr ds wtl i c h are
found o rl V M /CMS system s . Th i s l i st shou ld get
busy signal, just keep trying.
Unfortunately, the 9/4 area code is flO/
l a rger and larger as you gain access to more and
yet reachable on P( PUr.<iuit, the service
more systems and w i l l a l l ow you to gain access
offered by US "';'print that allows
t o more systems as it gets larger.
unlimited computer time across the
If you can't count how lTlany users are on l i ne
f rom the 0 N A M E S l i st
country for $25 a month. L et them know

.Q USERS
you want the 9J.1 area code added-their

0007 USERS, 0000 DIALED. 0000 NET number ;.5 800---835 -3638- so we can all
If YOLI d i d n ' t catch t h e logon message you can save on phone bi/k /1 nd keep check. ing
v i ew It aqain by for future 26(}() bulletin boards ill other
areas,
.mbj£·ct of bulletin
. Q LOGMSG
10 see wrlat rel ease oj CMS tllc system I S . While we 're the
old
Ofl

.Q CMS LEVEl hoards, W(' should paid out thai the

VM/ SP REL. 4 , S ERVICE LEVEL 4 1 7 Private Sector phone number in .Vew
I I you al e wOfl(len n Q Wil ich IBM II liilnfrarne .Ieney is 110 longer ill use. It's ponible
eMS IS i U : l il l l ilj ,HI . YO l! can I SSLIe we may have sent mIf HJme information
.0 CPU!!] to new subscribi n with that number. If
n o 1 4"f23438 1 0000 yOIJ recei.ni mell propaganda, I'lea.\e
Til l S can be i n tt;IT' ret(�d as f o l l ows disregard it.
CPUI!J�' aabbbbbbccccdddd ***

T tl Nldifiou to all o f this, w e flO W have

" F F '" w'i"j8fl runn! n� V iv1 / S, P bbbbbt-F�the
ad ;-" ilddrn.' the infamous "worldnet "
piO C8%li l i [) i illmber . cccc=, l lle mooel i iulnber of Ji.�n.t.,sed in
an rm

the ." eptember 1 98 7 issue o f

the I ;] tl 8 ctbIJVC case . U,,1 S 2MJO. lf yoll know how to manellver
an ! i.Hl 4 3 8 1 ddcid:�- " GOOO" TI�i: Four way arow!, ! the networks, you can
used f 0 ;- ::� r , send mail to tit UHmet addf('5S (�f'
S E N D F ! L L a ! ! : iW" YO:I to s0nd f i jr3S W : t : l ! 1I dny
us ow·

;;61){}@ da�y ,l , l!U( P ar o u r A rpanet

rn rn i d l�;k ttl;] t I S c u rren t l y accessed VOd to address oj phri!dosysl !26()O(TlJ nyu. If you
an o t iler use! . Any t i me you send a f i le an entry IS IIm'e dijficll!ly �endiflK to liS at these
addre.ues, let U5 k,W\lJ,

260{) November, 1 987 Page 2 1


LETTERS
(COlllilllledji-ol l l lJ(Jgl' I J )
TA P is Dead!
Dear 2600 :
C a n you te l l me i f a n e ws l e tte r
s i m i l a r to you rs ca l led TA P is sti l l be i ng
p u b l i s h e d a n d i f so, wh a t i s t h e i r
add ress?
D . l.
N ew York
TA P no longer exists, although back
is s u e s a r e b e ing s o ld b y differen t
people (check the 2600 Marketplace).
A s far as we know, 2600 is unique in
subject matter and approach, although
there are some o t h e r h a c k in g
publications-some good, some bad.
L ook for reviews in future issues.
In last month 's letters column, a
reader told us that the 8038 chip
used in our 1 985 blue box schematic
was n o longer a vailable . Se veral
readers h a ve n otifie d us to claim
otherwise. We understand the chip is
obtainable through Jan eco Elec­
t r o n ic s in C a li for n i a (a sk a n y
electronics store for their number) at
listening in
a cost of around $3. 95.
� prying ears . probab ly for reasons of security. The
%:: t ru th is that fed frequencies are as wel l known as
2.. "reg u l ar"frequencies . A company ca l led C R B
::.: Research , known for publ ications on surve i l lance
� and electron ics, has a book cal l ed "The Top
> Secret' Registry of U . S . Govemment Rad io
� Frequencies" by Tom Kne i tei . Th is book contains
� the frequenc ies , cal l si gns , and rad io codes of
2 every U . S . Govemment Agency in existence ,
'- including such agencies as the F B I , C I A , D EA ,
and of particular interest t o phreaks, the Secret
Service. Earlier ed i tions of t h i s g u i de were bound
c o m p u t e r h a rd c o p y w i t h e v e ry t h i n g l u m ped
together and sorted by frequency . Th is made for
something which was d i fficu l t to read , and
d i f f i c u l t to use . H owever, it s t i l l remai ned the
de-facto scanner g u ide to the feds , and was very
popular.
Page 22 N ovember, 1 987 2600
The recent l y pub l i shed ( 1 987 ) sixth ed ition
has e l i m i nated the readab i l i ty prob lems, and has
added more non-frequency information which
makes for an excel lent publ ication . I nside the
8 11z x 1 1 " , 1 9 2 - p ag e b o o k , t h e re is a n
a l phabet ical l i sting of t h e various agencies
Further delving i n to the book we f i nd that each
agency l isting is d i v ided into sect i ons contai n i ng
f req u en c y / f re q u e n c y use , t ransm i t t e r
l ocat ions/ cal lsigns , and , when avai lable, the
various codes and slang used by the part i c u l ar
agency. ( Rawh i de w i l l arri ve at Curbside rather
than Pivot . ) A particu larly in teresting section
c o n t a i n e d the l i s t i n g s for the U . S . S e c r e t
S e rv i c e . A m o n g t h e f re q u e n c y / f re q u e n c y
c o d e n ame / f re q u e n c y u s e d a t a was a l i s t
c o n t a i n i n g t h e c o d e n am e s u s e d f o r t h e
presidential staff , f i rst fam i l ies , and other related
informat i o n . D i d you know that Amy Carter's
codename was "Dynamo" ?
The Top Secret Registry is a n exce l lent book
and is h ighly recommended read i ng for those
i nterested i n l i sten ing to those who are l i sten ing
to you . I t 's avai l ab l e for $ 1 6 . 95 from C R B
Research , P O . Box 56 , Commack , N Y 1 1 72 5 .
And by t h e way . . . . here are some rather ac t i ve
federal frequencies ( I n megahertz )
Secret Service:
1 65 . 37 5 : "Charl ie" nationwide primary channel
1 6 6 . 4 6 2 5 . "X - R a y " c o m m o n c h a n n e l f o r
Treasury Dept .
State Department:
Justice Department:
409 . 625 36 . 07
4 1 1 . 025
General Services Administration:
(protection of federal buildings)
415.2
41 7.2
Drug Enforcement Administration:
4 1 6 . 05 , 4 1 6 325 , 4 1 8 . 7 5 , 4 1 6 . 2
C OR R ECTI O N :
In l a s t m o n t h ' s l i st of m a s s a n n o u n c e m e n t
n u m be r s , we neg l ected to m e n t i o n t h a t t h e y
cou ld a l so be reached from a rea c o d e 7 1 8.
P H O N E N U M B E R S OF I NTER EST:
2 1 2 - 2 2 2 - 8 1 08 . . . . . . . . . . Parents U l 1 ited
7 1 8 - 343-0 1 30 . . . . . . . . . . . . Scra m b l e F a x
800- 2 2 3 - 3 3 3 1 . . . . . . . . . . . . . . . . A B a n k
0 1 1 - 6 1 - 3 - 69 2 - 2982 . . Record i n g , w i l d t o n e
 N OT I C E
D o e s yo u r a d d r e s s l a be l s a y "T i rn e to R e n ew " ? D o n ' t rn i ss a n
i s s u e . R e n ew yo u r s u bs c r i p t i o n t o d a y a n d e nj o y p e a c e o f rn i n d .
S i rn p l y i n d i ca t e t h e a rn o u n t e n c l os e d a n d w h i c h , i f a n y , b a c k
i s s u e s yo u wa n t . Yo u r a d d r e s s l a be l s h o u l d be o n t h e b a c k of t h i s
f o r rn .

$1 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 yea r of 2 600
$ 28 . . .. . .. . . . . . . . . . . . . . . . . . . . . . . . . yea rs of 2600
. . . . . . . . . . . . . . . . 2
S41 . . . . . . . . . . . . . . . . . . . . . . .
. . . . .
. . ... . .
. . . . .
. . yea r s of 2600
. . . . . 3
$ 40 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 y e a r c o r p o r a t e s u bsc r i pt i o n
$75 . . . . . . . . . . . . . . . . . ' . 2 ye a r c o r p o r a t e s u bsc r i pt i o n
$ 1 '1 0 . . . . . . . . . . . . . . . . 3 ye a r c o r p o r a t e s u bs c r i pt i o n
$25 . . . . . . . . . . . . . . ove r s e a s s u b sc r i pt i o n ( 1 y e Ci r o n l y )
$55 . . . . . . . . . . . . . . . ove r s e a s c o r p o r a t e s u b sc r i pt i o n ( 1 yea r o n l y )
$ 2 60 . . . . I i fet l rn e s u b s c r i p t i o n ( n e v e r a g a i n w i l l w e bot h e r yo u )

B a c k i s s u e s a r e a va i l a b l e . P r i c e s a r e :

$ 2 5 . ." . . . . . . . . . . 1 9 8 4 , 1 9 8 5 , o r 1 9 8 6 i s s u e s ( 1 2 pe r y e a r )
""
$ 50 . . . : . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A n y two yea rs
$ 75 . .
.

. . . . . . . . . . . . . . . . . . . . . . . . A l l t h ree yea rs ( 3 6 I s s u e s )
( O v e r s e a s o r d e r s a d d $ 5 for e a c h ye a r o rde red )
A l l ow 4 to 6 w e e k s f o r d e l i v e r y .

Send a l l or de rs to :
2 6 00
PO B o x 752
M idd le I s l a nd , NY 1 1 953 U . S .A.
( 5 1 6 ) 7 5 1 2 6 00

- - - - - - - - - - - - - - - - - - - - - - - -
- - - - -

A M O U N T E N C LO S E D F O R S U B S C R I PT I O N : __

A M O U N T E N C LO S E D F O R BAC K I S S U E S : ___

1 984 1 985 1 986 ( c i rc l e yea rs o rdered )

TOTA L A M O U N T E N C LO S E D : ___

(clip and send to us- your address is on the back)

CONTENTS I

2600 BU LLETIN BOARDS 3 . .

IBM'S VM/CMS SVSTEM 4 . . .

: I

S .5. PREFiX ES 6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

LISTEN ING IN 7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

TELECOM IN FORM ER . . . . . . 8 I

LElTE RS . . . 12
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

2600 MARKETPLAC E : . . . . 1 9 . . . .

2600 MaQazlne
P0 8ox 7S2
MIdd le Island. NY 1 1 953 USA

WARN ING:
M ISSING LABEL