Security Breach
Vol. 1 #2
February/March 1998
Editor-in-chief: Maniac
Contributing Editors: Desperately needed
If you have anything to contribute, let me know via E-mail!!!
running a one man show is kinda tough
Editor positions are available, in fact, you can get a position with
Security Breach doing almost anything
"If pro is the opposite of con, is progress the opposite of congress?"
-Shorty B. Worthless
"Let's have a CON, not a CONGRESS!!"
-Myself
You probably want to know how to beat the system and explore it
to your heart's content. Well, here's a zine that'll help you do just
that. Security Breach is a hacking/phreaking zine devoted to all kinds
of hacking related activities. If it involves manipulating a system to
gain access to things you would not otherwise have access to,
WE WILL COVER IT.
Security Breach is founded on the basic principle that systems
of all kinds are meant to be defeated and exploited, and that it's always
fun to get something for nothing. There is simply so much useful
information out there that the powers that be would like you not to have
and use. But we're here to tell the powers that be where they can shove it,
and give you all the info you need to have all sorts of fun with the
system. We will have info on: vending machines, lock-picking, security
systems, anti-theft systems, phone phreaking, sabotage, and all sorts of
crazy pranks and MUCH, MUCH more. Enjoy
Submissions and letters are welcome and STRONGLY encouraged. You can send
material to: Xkmfdmx@aol.com
This publication is for informational purposes only. If you use
information contained within to break the law, it is not our problem
(although we will be very happy), so don't do anything naughty with
this info.
Ok, now the disclaimer's out of the way, so it's time for more FUN
"We're going to fight to free ourselves
From a system that can't relate
From a system that will not change
From a system that's fucking lame
From a system that's gone insane"
--Total Chaos
Index:
1. Introduction (you just read it)
2. ATM Phone Tricks
3. Programming the Verifone Tranz 330 Credit Card Reader
4. AOL Riot 98
5. Misc stuff
6. The Joys of Dumpster Diving
7. Parting Words
All articles written entirely by Maniac, Except for AOL Riot 98....
ATM Phone tricks
Lets say you're downtown, and all the fortress phones are muted, and
there's no place to plug your beige box in without being noticed: You're
out of luck, right? WRONG. just find the nearest ATM hut, and you've got
yourself a phone call, provided you brought your tone dialer or combo box
along. You don't even need an ATM card to do this trick. In my experience,
any card with a magnetic strip will open the door on the ATM hut. Often,
ATM's have a courtesy phone you can use to get help with transactions,
or I suppose If somebody's waiting outside to rob you or something. Here's
how it works: You pick up the receiver, and it automatically dials the
number of the help line for you. The phone has no buttons, just a receiver
and a big switch hook mounted in the wall next to the ATM. If you pick up
the receiver and keep jiggling the switch hook VERY lightly to keep
cutting off the connection, you can usually get it to give you a dial
tone without dialing for you. This is where the phun begins. Whip
out your tone dialer, and dial whatever the fuck you want. It's a free
call, and the buildings tend to be heated, so it's good for in the winter.
I would recommend limiting your calls to 5 minutes, since after all,
there's probably a camera on you. You might want to wear a hooded
sweatshirt and baseball cap to make yourself less recognizable. Have phun,
and be careful!!!
Programming the Verifone Tranz 330 Credit Card Reader
By Maniac
Note: This is not a an absolutely complete guide to programming the
Tranz 330. I haven't been able to crack the passworded options yet, so
I don't know what's behind them.
Here's the programming info I do know:
Hold down * and 3 in normal operation mode (the mode you're in right
after you turn it on)
"DIAGNOSTICS"
1=Memory Test
segments of display slowly change to different characters, from left
to right
2=Key Test
1=1111111111111111
2=2222222222222222
3=3333333333333333
4=4444444444444444
5=5555555555555555
6=6666666666666666
7=7777777777777777
8=8888888888888888
9=9999999999999999
*=****************
0=0000000000000000
#=################
Backspace=BBBBBBBBBBBBBBBB
Alpha=CCCCCCCCCCCCCCCC
Func/Enter=DDDDDDDDDDDDDDDD
3=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,
Then
0000000000000000
Then
*0,
4=WIPE CARD NOW
when I wiped a card that wasn't a credit card (a hotel door key), it said:
NO STRT SENTINEL
and occasionally:
PARITY ERROR
5=nothing...error beep
6=NO RING
7=ENTER PASSWORD
8=ENTER PASSWORD
9=ENTER ACCOUNT #
I type a number and press func/enter...
EXPIRY DATE MMYY
I type a number and press func/enter...
AMOUNT OF SALE ?
I enter price and press func/enter
DIALING
WAITING FOR ANSR
TRANSMITTING
RECIEVING
DEMO APP XXXX or XXXX (xxxx is a 4 digit number starting with 9, xxxxx
is a 5 digit number starting with 1
Then it automatically goes back to the normal display
0=TZ 330 3E2EU3.40
then if I press a button(except clear) it displays a possible message,
and if I press it again it displays the next possible message,
alphabetically. If I hold a button(except clear) down, it will run through
the whole list of messages, alphabetically, beginning with TZ 330 3E2EU3.40.
There are 174 messages if I counted correctly.
*=NO ENQ FROM HOST
If I press 1, 4, or 7 it says "CREDIT CARD" then "NO MECHANT ID"
If I press 2, 5, or 8 it says "PRIVATE CARD" then "NO MERCHANT ID"
If I press 3,6, or 9 it says "CHECK" then "NO MERCHANT ID"
The "NO MERCHANT ID" message may occur because I disconnected the
backup battery and dumped the RAM before doing this. The merchant ID was
lost in the process...
If I press * or #, it makes an error beep
If I press Alpha, it makes a different error beep and drops out of
diagnostic mode
If I press Func/enter, it drops out of diagnostic mode and asks
"FUNCTION?"
If I press 0, It drops out of diagnostic mode and goes to memory
dialer, where I can dial 3 digits, and then an equal sign appears after
the number, and I can't type any more numbers.
If I press Back Space, It says "POST DIAL"
Back Space= "BARCODE TEST"
Alpha="RTC CHIP TEST"
then lets you set
DAY OF WEEK
YEAR
MONTH
DATE
HOUR
AM=0 PM=1
MINUTES
SECONDS
Also, If you hold down * and Clear in normal operation mode, it asks for a
password.
AOL Riot 98
forwarded to me by ref pppop(jgg67@hotmail.com)
About a year ago there was a riot on America Online. This riot consisted
of a few hundred kids that annoyed people in chatrooms. Many people took
this as a joke. Whatever the case me be, thier plan was good but they went
about it the wrong way. Before I get down to business, let me start from
the begining. There are currently over 11 million people who use America
Online. They are by far the biggest Internet access provider. The
constitution grants us free speech in a public area. Cyberspace is the
largest public area known to man. There are a lot of people that can't
deal with some of the people that reside on the Internet They have every
right to be there as the next person. Because of this conflict, the topic
of free speech on the Internet has always been a tough situation. America
Online does not allow free speech anywhere on their service. They
constantly control every move you make. Now, if there was to be another
hearing on this situation, which I heard thier is going to be, how does it
look when the largest Internet Service Provider controls the speech of over
11 million people across the world? That makes up over half of the people
on the Internet. And not only are they taking away your right, they are
charging you two dollars more per month in April to take away your rights.
But why should it stop there? If we let ourselves get pushed around by
government and corporations, they will keep pushing us around and we will
continue to lose our rights. I know you must be thinking that I am one of
the conspiarcy theorists or militia members. NO. I am
just an average citizen like you.
Now, where am I going with this? AOLRIOT 98. It's not what your thinking.
Instead of bothering people in chatrooms, we are going to make sure our
message gets across to the powers that be.
On Saint Patrick's Day, March 17 1998, we will call up America Online
and demand that we want free speech and that we will not have our rights
violated. I chose Saint Patrick's Day so that it will be easy to remember.
The best part about it is, you don't have to even use AOL to particapate in
AOLRIOT 98. All you need is a telephone. A list of numbers is printed
below. Please start calling from 6pm EST - 10pmEST. When they get a few
thousand phonecalls on one day withing a four hour time span by people
demanding free speech, maybe they'll get the hint. I ask all of you to
please foward this to as many people as possible. We have a month to get
this spread around. Even if you do not wish to take part of this, plese
pass this around to everyone so that they will know what is
taking place. Remember the AOLRIOT 98 is all about free speech.
1-888-Talk-AOL AOL's long distance service
1-800-466-5463
1-888-265-3733 AOL's Community Action Team
1-800-827-6364
1-800-471-6148
1-800-471-8310 Tech. Support
1-800-471-8004
1-800-471-8001
1-800-471-8002
1-800-471-8003
1-800-471-8006
1-800-471-8007
1-800-471-8008
1-800-471-8009
1-800-471-8311
****Editor's Note: This sounds like a damn good idea. A couple tips though.
You might want to do this from a beige box somewhere, and under NO
circumstances should you give out your screen name, if you have one. I can
easily imagine AOL cancelling the accounts of people who make trouble for
them. They also probably have ANI, since many 800 numbers do, and if you
used your home phone, they might be able to figure out what your screen
name is by crossreferencing their billing information.
**************************************************************************
*********************
Message from the Editor (and author of the whole thing for that
matter..)
now for a quick break for some misc. info that I'm sure somebody will find
useful
This is stuff that doesn't have enough substance to be an article, but is
interesting nonetheless.
For those of of you in south Florida, I have a ringback. I have tested
it from Miami international airport, when I was on vacation:
Dial 780-6095. and it will tell you to hang up and dial 780-6321. Do so,
then hang up. The phone should ringback, and when you pick it up it will
say "Thank you for using the automated ringback service", or something
like that. Where'd I get it? The operator told me.....I just asked her
for it. No social engineering required, no nothing.
Also, I've found a nice phone for converting into a beige box. It's a
one-piece touchtone phone made by radio shack, and it's part # is 43-857A.
If they don't have it, try to get them to order it, and see if it comes in
black. I don't have one of these, since I have a TS22 butt set and don't
need one, but it's a VERY small phone. It looks like a thick flip-fone
with a cord. The part with the mouthpiece folds up. You seriously could
probably fit the thing in a jacket pocket without any trouble at all. If
you're making a beige, you probably need a can wrench too. Go to
www.jensentools.com they make a nice can wrench, and also sell
optional security bits for it. get those too. I'm going to get myself
one, since I really like jensen stuff. They're some DAMN good tools..
Oh yeah, for those of you who like cracking school PBX's, I'm thinking of
writing an article for security breach 3 about the Mitel SX200 PBX, my
school has one, and I've been through it pretty thoroughly.
Last, but most importantly, I'd like to extend my thanks to the following
people who have been cool to me in some way or another..
Extra Special Thanks to Mohawk and Mr. Seuss of OCPP for being my
distro site.
Thanks to: Rat, Nostradamus, Smokes (but lose the ego, dude),
Jen Martino for creating TWPYHR with all the cool numbers on it,
Nothingg, and everybody else who engages in intelligent discussion in
alt.phreaking, regardless of what their ISP is. Major thanx to my
girlfriend, for keeping me sane....and to Mike at Radio Shack for
letting me dumpster dive there..
No thanx to: Feds,Congress, most law enforcement(you're not all bad, but it
sure seems that way at times), a certain employee of CVS corp.(If I see you
again, I'm getting out the bat and doing some "percussive maintainence" as
Rat would say), the media,(a. so what if the kids broke into the pentagon,
and you never printed ANYTHING about Kevin Mitnick's 3'rd anniversary in
custody. b. There is more to news than which skank is blowing the president
at the moment, and don't you forget it.) also, the guy who was a dick about
dumpster diving, and of course, Hell Atlantic...thanx for the handset,
manuals, wire, and tools, suckers..
The Joys of Dumpster Diving
Preface: Mohawk was going to have me write this for OCPP, but I decided
to keep it around and put in out in Security Breach..So here it is
Well, I can't think of a stranger place to be writing about dumpster
diving....an airplane headed for Miami at 35,000 feet, with out a trash
can in a 40 mile radius, most likely. But hey, what the fuck...
First, let's establish a definition of what dumpster diving is. I
define it as the art of getting useful goods and information out of
somebody else's trash. This can include electronics, scrap materials,
credit card numbers, confidential info, and even cans and bottles that
can be turned in for money.
The second important aspect of trashing is to keep two simple things in
mind:
1. 95% of people have NO IDEA how the fuck to fix things. They
tend to throw out anything that doesn't work exactly right.
2. America is a throwaway society. If something isn't needed
anymore, it tends to get thrown away, especially by corporations
who are too busy to find a buyer for it, and too wealthy to care.
Just because it's in the trash, don't think that it's broken.
There's a good chance it's not. And even if it is broken,
often the problem is something very minor, like a broken wire,
a blown fuse, bad solder joint, or a mechanical part which is
out of alignment or broken.
I'm not going to cover troubleshooting in depth, since it's not
something a phile can easily teach; it takes years to get good at
it. I've been fixing stuff since I was about 8 years old. I'm almost 17
now, and there's still so much I don't know. Probably, the two most
important qualities to have are a basic knowledge of electronics
and a knack for understanding how things work.
But anyways, back to the main idea...Here's a list of some of
the stuff I've been able to haul home (usually by bike) in the last
month and a half or so:
-Panasonic KX-F50 fax machine (the only problem was a stuck hookswitch.)
-a pair of 3-ton adjustable auto jack stands.
-nice rat shack cordless phone.
-rat shack hand video game
-rat shack 2-line phone
-6-outlet power strip (was shorted, needed a new capacitor and diode)
-Bud light beer sign with digital clock display(tossed a 10watt red bulb
in it, and now it's on my wall.)
-digital bike speedometer (didn't have the part it mounts on, or any
hardware, but it makes a great digital clock)
-lots of circuit boards and components
-tons of wire and connectors
-40 feet!! of velcro (both sides too) This stuff's not cheap!
-large screwdriver
-high speed drill bit
-metal file
-10 inch MTX eliminator subwoofer
-30 inch TV set. (works, but has strange stuff happening with the
picture. The edges of the picture are wavy. It's wicked trippy to watch.)
and the list goes on.........
Most people seem to think that dumpster runs are best done at night.
However, I have a somewhat different strategy. I do most of my dumpster
diving in the day, simply because It's easier to get out of the house
during the day, and the parents don't really like it when I dumpster dive
at night..I like to work in the day, because it obvious what I'm doing
and what I'm not doing, so It's harder for somebody to accuse of doing
something else I had nothing to do with. Even though I'm visible, people
don't tend to care what I'm doing.
However, I wouldn't do Telco or government buildings at night,
since they tend to quite anal about stuff. I got confronted once at a
certain state police crime lab. I was very matter-of-fact about what I
was doing, and I explained that I was looking for old electronics, and
told them about a couple things I had found elsewhere and fixed. So they
just told me to get lost, and didn't give me any major trouble. It's
better to come back at night when nobody's around if the people who work
somewhere are really anal about stuff.
Until next issue, keep em' phreakin'..........I know I'm already working
on more articles for issue 3, I just hope some other people will write
some too..
Maniac, editor-in-chief
"Free speech isn't free at all...It's like a 3-ring circus"
-Skatenigs
