                CHAPTER THREE: DIALING AND LISTENING

     In Chapter Three, we will discuss the dialing procedures for 
domestic as well as international dialing.  We will also take a look 
at the telephone numbering plan.  Lastly, we will look at fone tap
ping, and getting free local calls at fortress fones, plus a look a 
Beige Boxes.

North American numbering plan:

     In North America, the telephone numbering plan is as follows:

A) a 3 digit Numbering Plan Area (NPA) code, {ie, area code}

B) A 7 digit telephone # consisting of a 3 digit Central Office (CO) 
   code plus a 4 digit station #.

     These 10 digits are called the network address or destination 
code.  It is in the format of:

                       Area Code   Telephone #
                       ---------   -----------
                          N*X        NXX-XXXX

   Where:  N = a digit from 2-9
           * = the digit 0 or 1
           X = a digit 0-9

Area Codes:
     Check your telephone book or the separate listing of area codes 
found on many BBS's.  Here are the Special Area Codes (SAC's):

     510 - TWX (USA)
     610 - TWX (Canada)
     700 - New Service
     710 - TWX (USA)
     800 - WATS
     810 - TWX (USA)
     900 - DIAL-IT Services
     910 - TWX (USA)

     The other area codes never cross state lines, therefore each 
state must have at least one exclusive NPA code.  When a community is 
split by a state line, the CO #'s are often interchangeable (ie, you 
can dial the same # from 2 different area codes)

TWX:
     TWX (Telex II) consists of 5 teletype-writer area codes.  They 
are owned by Western Union.  These SAC's may only be reached via 
other TWX machines.  These run at 110 baud.  Besides the TWX #'s, 
these machines are routed to normal telephone #'s.  TWX machines 
always respond with an answerback. For example, WU's FYI TWX # is 
(910) 988-5956, the corresponding real number to this is (201) 279-
5956.  The answerback for this service is "WU FYI MAWA."

     If you don't want to buy a TWX machine, you can still send TWX 
messages using Easylink [800/325-4112].


700:
     At the time of this writing, the 700 exchange does not yet 
exist.  AT&T plans to use it soon though.  They plan to make it a 
type of fancy call forwarding service.  It will be targeted towards 
salesmen on the run.
     To understand how it works, I'll explain it with an example.  
Let's say Joe Q. Salespig works for AT&T security and he is on the 
run chasing a phreak around the country who royally screwed up an 
important COSMOS system.  Let's say that Joe's 700 # is (700) 382-
5968.  Every time Joe goes to a new hotel, he dials a special 700 #, 
enters a code, and the # where he is staying.  Now, if his boss re
ceived some important info, all he would do is dial (700) 382-5968 
and it would ring wherever Joe last programmed it to.  Neat, huh?

800:
     This SAC is one of my favorites since it allows for toll-free 
calls.  
     INWARD WATS (INWATS):  Inward Wide Area Telecommunications Ser
vice is the 800 #'s that we are all familiar with.  800 #'s are set 
up in service areas or bands.  There are 6 of these.  Band 6 is the 
largest and you can call a band 6 # from anywhere in the US except 
the state where the call is terminated (this is why most companies 
have one 800 # for the country and then another for just one state).  
Band 5 includes the 48 contiguous states.  All the way down to band 1 
which includes only the states contiguous to that one.  Therefore, 
less people can reach a band 1 INWATS # that a band 6 #.
     Intrastate INWATS #'s (ie, you can call it from only 1 state) 
always have a 2 as the last digit in the exchange (ie, 800-NX2-XXXX).  
The NXX on 800 #'s represent the area where the business is located.  
For example, a # beginning with 800-431 would terminate at a NY CO.
     800 #'s always end up in a hunt series in a CO.  This means that 
it tries the first # allocated to the company for their 800 lines; if 
this is busy it will then try the next #, etc).  You must have a 
minimum of two lines per each 800 #.  For example, Travelnet uses a 
hunt series.  If you dial (800) 521-8400, it will first try the # 
associated with 8400; if it is busy it will go to the next available 
port, etc.  INWATS customers are billed by the # of hours of calls 
that are made to their #.

     OUTWATS (OUTWARD WATS):  OUTWATS are for making outgoing calls 
only.  Large companies use OUTWATS since they receive bulk-rate dis
counts.  Since OUTWATS # cannot have incoming calls, they are in the 
format of:    (800) *XX-XXXX

     Where * is the digit 0 or 1 (or it may be designated by a let
ter) which cannot be dialed unless you box the call.  The *XX iden
tifies the type of service and the areas that the company can call.  
Remember:    INWATS + OUTWATS = WATS EXTENDER

900:
     This DIAL-IT SAC is a nationwide dial-it service.  It is used 
for taking television polls and other stuff.  The first minute cur
rently costs an outrageous 50 cents and each additional minute costs 
35 cents.  Bell takes in alot of revenue in this way.
Dial (900) 555-1212 to find out what is currently on the service.

CO CODES:
     These identify the switching office where the call is to be 
routed.  The following CO codes are reserved nationwide:
     555 - directory assistance
     844 - time    } these are now in
     936 - weather } the 976 exchange
     950 - future services
     958 - plant test
     959 - plant test
     970 - plant test (temporary)
     976 - DIAL-IT services
     Also, the 3 digit ANI & ringback #'s are regarded as plant test 
and are thus reserved.  These numbers vary from area to area.
     You cannot dial a 0 or a 1 as the first digit of the exchange 
code (unless using a blue box).  This is due to the fact that these 
exchanges (000-199) contains all sorts of interesting shit such as 
conference #'s, operators, test #'s, etc.

950:
Here are the services that are currently on the 950 exchange:

     1000 - SPC
     1022 - MCI Execunet
     1033 - US Telephone
     1044 - Allnet
     1066 - Lexitel
     1088 - SBS Skyline

These SCC's (Specialized Common Carriers) are free from fortresses!
     Also, the 950 exchange will probably be phased out with the 
introduction of Equal Access.

976:
     Dial 976-1000 to see what is currently on the service.  Also, 
many BBS's have a listing of these #'s.

N11 Codes:
     Bell is trying to phase some of these out, but they still exist 
in many areas.
     011 - international dialing prefix
     211 - coin refund operator
     411 - directory assistance
     611 - repair service
     811 - business office
     911 - EMERGENCY


                        International Dialing
                        ---------------------

     With International Dialing, the world has been divided into 9 
numbering zones.  To make an internation call, you must dial:

     Int. Prefix + Country Code + Nat. #

     In North America, the international dialing prefix is 011 for 
station-to-station calls and 01 for operator-assisted calls.  If you 
can dial international #'s directly in your area then you have Inter
national Direct Distance Dialing (IDDD).
     The country code, which varies from 1 to 3 digits, always has 
the world numbering zone as the first digit.  For example, the coun
try code for the United Kingdom is 44, thus it is in world numbering 
zone 4.  There is a complete listing of country codes in chapter one, 
under MCI calling cards.
     If you call from an area other than North America, the format is 
generally the same.  For example, let's say you wanted to call the 
White House from Switzerland.  First you would dial 00 + the Swiss 
international dialing prefix), then 1 (the US country code), followed 
by 202-456-1414 (the national # for the White House).   Also, country 
code 87 is reserved for Maritime mobile service, ie calling ships:
     871 - Marisat (Atlantic)
     872 - Marisat (Pacific)
     873 - Marisat (Indian )

International Switching:
     In North America, there are currently 7 No. 4 ESS's that perform 
the duty of ISC (Internation Switching Centers).  All international 
calls dialed from Numbering Zone 1 will be routed through one of 
these "gateway cities."  They are:
     182 -  White Plains, NY
     183 -  New York, NY
     184 -  Pittsburgh, PA
     185 -  Orlando, FL
     186 -  Oakland, CA
     187 -  Denver, CO
     188 -  New York, NY

     The 18X series are operator routing codes for overseas access 
(to be further discussed with blue boxes).  All international calls 
use a signaling system called CCITT.  It is an international standard 
for signaling.


                            PHONE TAPPING
                            -------------

1) The Law

Federal law: 
     Section 605 of title 47 of the US code, forbids interception of 
communication, or divulgence of intercepted communication except by 
persons outlined in section 119 of title 18 (a portion of the Omnibus 
crime control and safe streets act of 1968). This act states that "It 
shall not be unlawful under this act for an operator of a switch
board, or an officer, employee, or agent of any communication common 
carrier who's switching system is used in the transmission of a wire 
communication to intercept or disclose intercepted communication." 
     What all this legal bullshit is saying is that if you don't work 
for a phone company then you can't go around tapping people's lines.  
If you decide to anyway, and get caught, it could cost you up to 5 
years of your life and $10,000. This, you are all assuming, means 
that if you tap someone else's line, you will be punished....wrong!  
You can't tap your own line either.  The punishment for this is pro
bably no more than a slap on the hand, that is if they actually catch 
you, but it's a good thing to know.

2) Tapping

     Everyone has at some time wanted to hear what a friend, the 
principal, the prom queen, or a neighbor has to say on the phone.  
There are several easy ways to tap into a phone line.  None of the 
methods that I present will involve actually entering the house.  You 
can do everything from the backyard.  I will discuss four methods of 
tapping a line.  They go in order of increasing difficulty. 

     1. The "beige box": a beige box (or bud box) is actually better 
known as a "lineman" phone. They are terribly simple to construct, 
and are basically the easiest method to use. They consist of nothing 
more than a phone with the modular plug that goes into the wall cut 
off, and two alligator clips attached to the red and green wires. The 
way to use this box, is to venture into the yard of the person you 
want to tap, and put it onto his line.  
     This is best done at the bell phone box that is usually next to 
the gas meter. It should only have one screw holding it shut, and is 
very easily opened. Once you are in, you should see 4 screws with 
wires attached to them. If the house has one line, then clip the red 
lead to the first screw, and the green to the second.  You are then 
on the "tappee's" phone.  You will hear any conversation going on. 
     I strongly recommend that you remove the microphone from the 
phone that you're using so the "tappee" can't hear every sound you 
make.  If the house has two lines, then the second line is on screws 
three and four.  If you connect everything right, but you don't get 
on the line, then you probably have the wires backward.  Switch the 
red to the second screw and the green to the first.  If no conversa
tion is going on, you may realize that you can't tap the phone very 
well because you don't want to sit there all night, and if you are on 
the phone, then the poor tappee can't dial out.

     2. The recorder: This method is probably the most widespread, 
and you still don't have to be a genius to do it. There are LOTS of 
ways to tape conversations. The two easiest are either to put a "te
lephone induction pickup" (Radio Shack $1.99) on the beige box you 
were using, then plugging it into the microphone jack of a small tape 
recorder, and leaving it on record.  Or plugging the recorder right 
into the line. This can be done by taking a walkman plug, and cutting 
off the earphones, then pick one of the two earphone wires, and strip 
it.  There should be another wire inside the one you just stripped.  
Strip that one too, and attach alligators to them.  Then follow the 
beige box instructions to tape the conversation. 
     In order to save tape, you may want to use a voice activated 
recorder (Radio Shack $59), or if your recorder has a "remote" jack, 
you can get a "telephone recorder control" at Radio shack shack for 
$19 that turns the recorder on when the phone is on, and off when the 
phone is off.  This little box plugs right into the wall (modularly 
of course), so it is best NOT to remove the modular plug for it. Work 
around it if you can. If not, then just do your best to get a good 
connection. 
     When recording, it is good to keep your recorder hidden from 
sight (in the Bell box if possible), but in a place easy enough to 
change tapes from. 
 
3) Helpful Hints

     First of all, with method one, the beige box, you may notice 
that you can also dial out on the phone you use. I don't recommend 
that you do this. If you decide to anyway, and do something conspi
cuous like set up a 30 person conference for three hours, then I 
suggest that you make sure the people are either out of town or dead.  
     In general, when you tap a line, you must be careful. I test 
everything I make on my line first, then install it late at night. I 
would not recommend that you leave a recorder on all day. Put it on 
when you want it going, and take it off when you're done.  As far as 
recording goes, I think that if there is a recorder on the line it 
sends a sporadic beep back to the phone co.  I know that if you don't 
record directly off the line (ie off your radio) then even the most 
sophisticated equipment can't tell that you're recording.  
     Also, make sure that when you install something, the people are 
NOT on the line.  Installation tends to make lots of scratchy sounds, 
clicks and static.  The best thing to install, for recording, is the 
voice activated machines.
     Now, as far as tapping your own line goes, I said before that 
they punishment is virtually nonexistent, although technically it is 
against the law.  This is fairly helpful to confuse friends, or if 
you want to get back at them, and when you do, they ask why the hell 
you are doing it, just play the tape for them at a very high volume 
and blow out their eardrums with it.



                 FREE LOCAL CALLS ON FORTRESS FONES
                 ----------------------------------

     To make free local calls, you need a finishing nail.  We highly 
recommend "6D E.G. FINISH C/H, 2 INCH" nails.  These are about 3/32 
of an inch in diameter and 2 inches long (of course).  You also need 
a large size paper clip.  By large we mean they are  about 2 inches 
long (FOLDED).  Then you unfold the paper clip.  Unfold it by taking 
each piece and moving it out 90 degrees.      
     Now, on to the neat stuff.  Insert the nail into the center hole 
of the mouthpiece (where you talk) and push it in with pressure or 
just hammer it in by hitting the nail on something.  Just DON'T KILL 
THE MOUTHPIECE!  You could damage it if you insert the nail too far 
or at some weird angle.  If this happens then the other party won't 
be able to hear what you say.
     You now have a hole in the mouthpiece in which you can easily 
insert the paper clip.  So, take out the nail and put in the paper  
clip.  Then take the other end of the paper clip and shove it under 
the rubber cord protector at the bottom of the handset [you know, the 
blue guy].  This should end up looking remotely like the following 
diagram.

                             /----------\      Mouthpiece
                             :          :      /
             Paper clip -->  :          :     /
                             :      /---:---\
                             :      :   :   :------------>
         ====================\---))):       :  To earpiece ->
                   ^              ^ \-------------------->
                   :              :
                 Cord          Blue guy

(The paper clip is shoved under the blue guy to make a good 
connection between the inside of the mouthpiece and the metal cord.)
     Now, dial the number of a local number you wish to call.  If 
everything goes okay, it should ring and not answer with the "The 
Call You Have Made Requires a 20 Cent Deposit" recording.  After the 
other end answers the phone, remove the paper clip.
     Now suppose the touch tones won't work when the paper clip is in 
the mouthpiece.  There are two ways around this...

     A> Dial the first 6 numbers.  This should be done without the 
paper clip making the connection, i.e., one side should not be con
nected.  Then connect the paper clip, hold down the last digit,  and 
slowly pull the paper clip out at the mouthpiece's end.
     B> Don't use the paper clip at all.  Keep the nail in after you 
punch it.  Dial the first 6 digits.  Before dialing the last digit, 
touch the nail head to the plate on the main body of the phone.

     Remember, this method doesn't work for long distance or toll 
calls, only local calls. 

