Phreaking

From Wikipedia, the free encyclopedia


Phreaking is a slang term coined to describe the activity of a subculture of people who study, experiment with, or explore telephone systems, the equipment of telephone companies, and systems connected to public telephone networks. The term "phreak" is a portmanteau of the words "phone" and "freak." It may also refer to the use of various audio frequencies to manipulate a phone system[verification needed]. "Phreak", "phreaker", or "phone phreak" are names used for and by individuals who participate in phreaking. Additionally, it is often associated with computer hacking. This is sometimes called the H/P culture (with H standing for Hacking and P standing for Phreaking).

Contents

[edit] History of phreaking

The precise origin of phone phreaking is disputed, however it is believed that widespread deployment of automatically switched telephone networks began phreak-like experimentation. Modern day phreaking is more likely to be traced to the United States in the mid-to-late 1950s when AT&T began introducing fully automatic direct-dial long distance and certain forms of trunking carriers which used in-band signalling[citation needed]. At this time, phone system experimentation began, similar to the way modern day hackers use the Internet.

In approximately 1957, a blind eight-year old named Joe Engressia, skilled with perfect pitch, discovered that whistling the fourth E above middle C (a frequency of 2600 Hz) would stop a dialed phone recording. Engressa, alias "Joybubbles", taught himself to whistle a tone (2600 Hz) that would cause a trunk to reset itself. What the eight-year-old didn't realise at first was that the 2600 Hz frequency was an internal telephone company signal to take control of a trunk line, which opened up almost limitless possibilities for routing calls without charges. Unaware of what he had done, Engressia called the phone company and asked why the recordings had stopped. This was the beginning of his love of exploring the telephone system. [1]

Other early phreaks, such as "Bill from New York", began to develop a rudimentary understanding of how phone networks worked. "Bill" discovered that a recorder he owned could also play a tone at 2.6kHz with the same effect. John Draper discovered through his friendship with "Joybubbles" that the free whistles given out in Cap'n Crunch cereal boxes also produced a 2600 Hz tone when blown (providing his nickname, "Captain Crunch"). This allowed control of phone systems that worked on SF, or Single Frequency, controls. One could sound a long whistle to reset the line, followed by groups of whistles (a short tone for a "1", two for a "2", etc.) to dial numbers. This process later led to MFing.

While SF worked on certain phone routes, the most common signalling on the then long distance network was MF, or Multi-Frequency Controls. The specific frequencies required were unknown until 1964, when Bell Systems published the information in the Bell System Technical Journal in an article describing the methods and frequencies used for inter-office signalling. The journal was intended for the company's engineers, however, it found its way to various college campuses across the United States. With this one article, the Bell System accidentally gave away the 'keys to the kingdom', and the intricacies of the phone system were at the disposal of anyone with a cursory knowledge of electronics. [citation needed]

The second generation of phreaks arose at this time, including the New Yorkers "Evan Doorbell", "Ben Decibel" and Neil R. Bell and Californians Mark Bernay, Al Bernay, Chris Bernay, and "Alan from Canada". Each conducted their own independent exploration and experimentation of the telephone network, initially on an individual basis, and later within groups as they discovered each other in their travels. "Evan Doorbell", "Ben" and "Neil" formed a group of phreaks known as Group Bell. Mark Bernay initiated a similar group named the Mark Bernay Society. Both Mark and Evan are received fame amongst today's phone phreakers for internet publication of their collection of telephone exploration recordings. These recordings, conducted in the 60s, 70s, and early 80s are available at Mark's website Phone Trips. [2]

In October 1971, phreaking was introduced to the masses when Esquire Magazine published a story called "Secrets of the Little Blue Box" [3] by Ron Rosenbaum. This article featured Joybubbles and John Draper prominently, synonymising their names with phreaking. The article also attracted the interest of other soon-to-be phreaks, such as Steve Wozniak and Steve Jobs who went on to found Apple Computer. [4]

In the 1980s, the revolution of the personal computer and the popularity of computer bulletin board systems (accessed via modem) created an influx of tech-savvy users. These BBSes became popular for computer hackers and others interested in the technology, and served as a medium for previously scattered independent phone phreaks to share their discoveries and experiments. This not only led to unprecedented collaboration between phone phreaks, but also spread the notion of phreaking to others who took it upon themselves to study, experiment with, or exploit the telephone system. This was also at a time when the telephone company was a popular subject of discussion in the US, as the monopoly AT&T was forced into divestiture. During this time, phreaking lost it's label for being the exploration of the telephone network, and began to focus more on toll fraud. Computer hackers began to use phreaking methods to find the telephone numbers for modems belonging to businesses, which they could later exploit. Groups then formed around the BBS hacker/phreaking (H/P) community such as the famous Masters of Deception (Phiber Optik) and Legion of Doom (Erik Bloodaxe) groups. In 1985 an underground e-zine called Phrack (a combination of the words Phreak and Hack) began circulation among BBSes, and focused on hacking, phreaking, and other related technological subjects.

In the early 1990s H/P groups like Masters of Deception and Legion of Doom were shut down by the US Secret Service's Operation Sundevil. Phreaking as a subculture saw a brief dispersion in fear of criminal prosecution in the 1990s, before the popularity of the internet initiated a reemergence of phreaking as a subculture in the US and spread phreaking to international levels.

Into the turn of the 21st century, phreaks began to focus on the exploration and playing with the network, and the concept of toll fraud became widely frowned on among serious phreakers, primarily under the influence of the website Phone Trips, put up by second generation phreaks Mark Bernay and Evan Doorbell.

[edit] 2600 Hz

Main article: 2600 hertz

2600 Hz, the key to early phreaking, was the frequency of the tone sent by the phone to the long-distance switch, indicating that the user has to hang up the phone. Although to the long-distance hardware the call was disconnected, the user was still physically connected to their local crossbar switch as the line voltage had not dropped. This left the system in an inconsistent state; the dialer was still connected to a long-distance trunk line and switch at a remote switching center which was perfectly willing to complete or further route calls.

A number of people in the 1960s discovered a loophole that resulted from this combination of features. The trick was to call a toll free number or long-distance directory number and then play the 2600 Hz tone into the line before the call was answered on the other side of the line. By then dialing the number they actually wanted on a blue box, the remote crossbar happily connected them for free. However, when connected to the diverted call, the local central office would be alerted, whereby technicians would search for inordinately long directory calls or excessive dialing to particular toll free numbers. Many phreakers were forced to use pay telephones as the telephone company technicians regularly tracked long-distance toll free calls in an elaborate cat-and-mouse game.

As knowledge of phreaking spread, a minor culture emerged from the increasing number of phone phreaks. Sympathetic (or easily social-engineered) telephone company employees began to provide the various routing codes to use international satellites and trunk lines. The phone companies quickly caught on to the scheme and slowly deployed a number of systems to defeat it, however the phreaks felt that a true solution would be impossible as it would require adding hardware (a filter) to every line on every crossbar in the world. Unless the phone company replaced all their hardware, phreaking would be impossible to stop. AT&T instead turned to the law for help, and a number of phreaks were caught by "The Man".

Eventually, the phone companies in North America did, in fact, replace all their hardware. They didn't do it to stop the phreaks, but simply as a matter of course whilst moving to fully digital switching systems. Unlike the crossbar, where the switching signals were carried on the same lines, the new systems used separate lines for signalling that the phreaks couldn't get to. This system is known as Common Channel Interoffice Signaling.

[edit] The End of MF

The end of MF phreaking in the lower 48 United States occurred on June 15, 2006, when the last exchange in the continental United States to use a "phreakable" MF-signalled trunk replaced the aging (yet still well kept) N2 carrier with a T1 carrier. This exchange, located in Wawina Township, Minnesota, was run by the Northern Telephone Company of Minnesota. The days building up to the cutover were comparatively eventful, as many phone phreaks from across North America and the world made calls into what was the last group of MF-able inward trunks in the continental Congress. A message board was set up for Paul Revere on +1 (218) 488-1307, for phone phreaks across the world to "say their goodbyes" to MF signalling and the N2 in Wawina. During the days prior to the cutover, many famous phone phreaks such as Mark Bernay, Joybubbles, Bob Bernay, and Captain Crunch could be heard leaving their comments on the message board. The official date for the cutover from N2 to T-carrier was Wednesday, June 14. As early as June 7, there was a noticeable static on what had previously been clear lines. By Monday, June 12, many numbers were unreachable, and the static had peaked. The recording on +1 (218) 488-1307 was generally inaccessible, and MFing through the switch was becoming increasingly more difficult due to the increased static. By the 15th, the end had come, at around 1:40am, Eastern Daylight Time[citation needed].

The Wawina switchmen had sucessfully prevented new incoming calls to the N2 system, however, a few phreaks were still on the lines. The last two phone phreaks to sit on a telephone-company-operated MF trunk in the continental United States were Lucky225 and Josh from Pittsburgh. Lucky and Josh were idling in a conference, from the N2 side. A few phone phreaks were sitting on the same conference, but coming in through the T-carrier or the Collector's Network. Later on, another phone phreak, Jayson Smith, pulsed 2600 through the Collector's Network (which does not respond to 2600 Hz or MF tones), indicating to all parties on the N2 that the called party had hung up, which in turn winked off Lucky and Josh's last remaining trunks, and ended the last two inbound calls ever made on the Wawina N2. Shane, the switchman running the operation, then placed a ceremonial "last call" from the central office, and shut down the system for good[citation needed].


[edit] Famous phone phreaks

[edit] See also

[edit] External links