Well, here is the long awaited issue #11 of the 411 newsletter. Sorry for
the wait, but lack of time on my part and the general laziness of most of the
411 members delayed this issue a little... It's kind of small, but the first
results of the grand scan have been included, so I guess that makes up for it
a little... As usual, any and all contributions are welcome, but must be
original and decent in content. Also, to continue the grand scan, please
send the results of any scans you may have done, whether they are 800 numbers
or in your local area code. Any and all contributions are always appreciated.
Other than that, there's not much more to say...
Firebug...
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Lineage 2000 Data Switch
(518)383-0064 @1200 baud
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
ENTER PASSWORD:
LINEAGE 2000 MCS DATA SWITCH, VERSION 1.4
CLIFTON PARK LINEAGE 2000
DATA SWITCH
COMMAND TABLE:
A) PRINT ALL ACTIVE ALARMS
B) CONFIGURE DATA SWITCH
C) LOG OFF THE DATA SWITCH
D) CONNECT TO PORT 1 "MCS LIN 2000-CLIFTON PARK 48V"
E) CONNECT TO PORT 2 "������������������������������"
F) CONNECT TO PORT 3 "������������������������������"
G) CONNECT TO PORT 4 "������������������������������"
ENTER (A, B, C, D, E, F, OR G): A
MCS DATA SWITCH ALARM REPORT
CLIFTON PARK LINEAGE 2000
NO ACTIVE ALARMS
DATA SWITCH
COMMAND TABLE:
A) PRINT ALL ACTIVE ALARMS
B) CONFIGURE DATA SWITCH
C) LOG OFF THE DATA SWITCH
D) CONNECT TO PORT 1 "MCS LIN 2000-CLIFTON PARK 48V"
E) CONNECT TO PORT 2 "������������������������������"
F) CONNECT TO PORT 3 "������������������������������"
G) CONNECT TO PORT 4 "������������������������������"
ENTER (A, B, C, D, E, F, OR G): B
ENTER CONFIGURATION PASSWORD:
DATA SWITCH
CONFIGURATION TABLE:
A) RETURN TO COMMAND LEVEL
B) CONFIGURE SYSTEM DATA
C) CONFIGURE PORT DATA
D) PROGRAM CALL-OUT NUMBERS
ENTER (A, B, C, OR D): D
CALL OUT CONFIGURATION
CALL OUT NUMBER A = ""
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
CALL OUT A BAUD RATE = "300"
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
CALL OUT NUMBER B = ""
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
CALL OUT B BAUD RATE = "300"
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
ALTERNATE CALL OUT NUMBER C = ""
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
CALL OUT C BAUD RATE = "300"
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
DATA SWITCH
CONFIGURATION TABLE:
A) RETURN TO COMMAND LEVEL
B) CONFIGURE SYSTEM DATA
C) CONFIGURE PORT DATA
D) PROGRAM CALL-OUT NUMBERS
ENTER (A, B, C, OR D): C
PORT CONFIGURATION
PORT 1 CONFIGURATION:
DESCRIPTION = "MCS LIN 2000-CLIFTON PARK 48V"
BAUD RATE = "300"
ALARM ON = "CONTACT CLOSE"
PASSWORD = "LINEAGE"
CALL OUT ON ALARM = "OFF"
CHANGE ANY OF THIS DATA?
ENTER ("Y" = YES OR "N" = NO): N
PORT 2 CONFIGURATION:
DESCRIPTION = "������������������������������"
BAUD RATE = "300"
ALARM ON = "CONTACT CLOSE"
PASSWORD = "����������"
CALL OUT ON ALARM = "OFF"
CHANGE ANY OF THIS DATA?
ENTER ("Y" = YES OR "N" = NO): N
PORT 3 CONFIGURATION:
DESCRIPTION = "������������������������������"
BAUD RATE = "300"
ALARM ON = "CONTACT CLOSE"
PASSWORD = "����������"
CALL OUT ON ALARM = "OFF"
CHANGE ANY OF THIS DATA?
ENTER ("Y" = YES OR "N" = NO): N
PORT 4 CONFIGURATION:
DESCRIPTION = "������������������������������"
BAUD RATE = "300"
ALARM ON = "CONTACT CLOSE"
PASSWORD = "����������"
CALL OUT ON ALARM = "OFF"
CHANGE ANY OF THIS DATA?
ENTER ("Y" = YES OR "N" = NO): N
DATA SWITCH
CONFIGURATION TABLE:
A) RETURN TO COMMAND LEVEL
B) CONFIGURE SYSTEM DATA
C) CONFIGURE PORT DATA
D) PROGRAM CALL-OUT NUMBERS
ENTER (A, B, C, OR D): B
SYSTEM HEADING = "CLIFTON PARK LINEAGE 2000"
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
ENTRY PASSWORD: "LINEAGE"
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
CONFIGURATION PASSWORD = "2000"
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
CALL BACK OPTION = "OFF"
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
CALL BACK PHONE NUMBER 1 = ""
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
CALL BACK PHONE NUMBER 2 = ""
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
CALL BACK PHONE NUMBER 3 = ""
CHANGE?
ENTER ("Y" = YES OR "N" = NO): N
DATA SWITCH
CONFIGURATION TABLE:
A) RETURN TO COMMAND LEVEL
B) CONFIGURE SYSTEM DATA
C) CONFIGURE PORT DATA
D) PROGRAM CALL-OUT NUMBERS
ENTER (A, B, C, OR D): A
DATA SWITCH
COMMAND TABLE:
A) PRINT ALL ACTIVE ALARMS
B) CONFIGURE DATA SWITCH
C) LOG OFF THE DATA SWITCH
D) CONNECT TO PORT 1 "MCS LIN 2000-CLIFTON PARK 48V"
E) CONNECT TO PORT 2 "������������������������������"
F) CONNECT TO PORT 3 "������������������������������"
G) CONNECT TO PORT 4 "������������������������������"
ENTER (A, B, C, D, E, F, OR G): D
WARNING: BAUD RATE STEP DOWN, 1200 TO 300 BAUD
CONNECTING TO "MCS LIN 2000-CLIFTON PARK 48V", PLEASE HOLD.
HIT "ESC" KEY TO RETURN TO THE DATA SWITCH
WHAT IS THIS?!?
DATE 07/06/94; TIME 23:13:51
REMOTE INTERFACE 2.0/2.2.0
TYPE'MENU' FOR LIST OF COMMANDS
THERE ARE NO ALARMS PRESENT
* menu
--------MENU--------
ALARMS
ALMS : LISTS ACTIVE ALARMS
BD : GIVES STATUS OF BATT DISCHARGE ALARM
EFF : GIVES STATUS OF EFFICIENCY DISABLE ALARM
FAJ : GIVES STATUS OF MAJOR FUSES OR BREAKERS
HV : GIVES STATUS OF HIGH VOLTAGE ALARM
LIMR : GIVES STATUS OF LIMITED RECHARGE ALARM
MN : LISTS STATUS OF MINOR SYSTEM ALARMS
RECT : LISTS STATUS OF RECTIFIERS
STATISTICS
LOADST : LISTS LOAD STATISTICS
HSTRY : LISTS PLANT ALARM HISTORY
RCTLD : LISTS RECTIFIER DRAINS
VI : GIVES BATT VOLTAGE & PLANT DRAIN
MISCELLANEOUS
DATE : GIVES DATE AND TIME
EDIT : PROVIDES HEADING AFTER LOGON
HELP : PROVIDES TELEPHONE NUMBER FOR ASSISTANCE
MENU : LISTS AVAILABLE COMMANDS
PASSWD : ENTERS NEW PASSWORD
RSDATE : RESETS DATE AND TIME
CUSTOM FEATURES
FDRLD : LISTS FEEDER DRAINS
FDRST : LISTS FEEDER STATISTICS
VERSN : LISTS VERSION OF OPTION SOFTWARE
* alms
THERE ARE NO ALARMS PRESENT
* faj
NO MAJOR FUSE ALARM PRESENT
* rect
NO ALARMS IN THE RECTIFIERS
* loadst
I(HRLY,MAX)=925A AT 04/12/94,20:00
I(HRLY,MAX)=926A AT 03/03/94,11:00
I(HRLY,MAX)=928A AT 03/03/94,12:00
I(PK) = 978A AT 04/14/94,10:34
I(PK) = 977A AT 04/28/94,09:07
I(PK) = 974A AT 11/24/93,10:09
I(MN) = 812A AT 06/09/94,04:23
I(MN) = 813A AT 04/24/93,03:30
I(MN) = 813A AT 04/29/93,04:37
REFER TO OPERATING METHODS TO RESET STATISTICS
* fdrst
FEEDER 1 MAX=30A AT 05/04/94,09:44
FEEDER 1 MIN=23A AT 01/01/00,00:22
FEEDER 1 AVE=24A
FEEDER 2 MAX=15A AT 04/09/93,07:54
FEEDER 2 MIN=11A AT 01/01/00,00:22
FEEDER 2 AVE=13A
FEEDER 3 MAX=39A AT 03/31/93,17:10
FEEDER 3 MIN=34A AT 05/07/94,15:39
FEEDER 3 AVE=38A
FEEDER 4 MAX=53A AT 09/02/93,09:07
FEEDER 4 MIN=41A AT 01/01/00,00:23
FEEDER 4 AVE=46A
FEEDER 5 MAX=84A AT 05/31/94,07:08
FEEDER 5 MIN=66A AT 05/11/93,02:29
FEEDER 5 AVE=76A
FEEDER 6 MAX=81A AT 12/30/93,06:29
FEEDER 6 MIN=66A AT 04/22/93,00:38
FEEDER 6 AVE=74A
FEEDER 7 MAX=150A AT 03/03/94,10:54
FEEDER 7 MIN=0A AT 11/04/93,19:04
FEEDER 7 AVE=128A
FEEDER 8 MAX=151A AT 03/03/94,10:38
FEEDER 8 MIN=117A AT 01/31/93,02:41
FEEDER 8 AVE=130A
REFER TO OPERATING METHODS TO RESET STATISTICS
* versn
SHUNT MONITOR OPTION: 3.0/2.3.0
*
DATA SWITCH
COMMAND TABLE:
A) PRINT ALL ACTIVE ALARMS
B) CONFIGURE DATA SWITCH
C) LOG OFF THE DATA SWITCH
D) CONNECT TO PORT 1 "MCS LIN 2000-CLIFTON PARK 48V"
E) CONNECT TO PORT 2 "������������������������������"
F) CONNECT TO PORT 3 "������������������������������"
G) CONNECT TO PORT 4 "������������������������������"
ENTER (A, B, C, D, E, F, OR G): C
LOGOFF THE SYSTEM ENTER ("Y" = YES OR "N" = NO): Y
C O C O T s
~~~~~~~~~~~
I realize there are many articles that have already been written on
COCOTs, but hey, what's one more, right?...
First off, COCOT stands for Customer Owned Coin Operated Telephone.
Basically, it is just a payphone owned by someone other than the telephone
company. They can easily be recognized by the absence of the Bell logo that
is on all Telco-owned payphones.
Basically, businesses buy these to make a few extra bucks, and they can
usually be found at hotels, gas stations, and places such as Duncan Donuts and
Stewarts. Other distinguishing features of a COCOTs are robotic or crappy
sounding recordings, and higher rates for calls, both local and long distance.
In Bell owned payphones, the phone is run off of a special line and all
billing is controlled at the central office, but since COCOTs are privately
owned, they are run off of a regular customer loop. Therefor, all billing
must be controlled within the COCOT, within it's microprocessor. This
microprocessor does some other interesting things, too. When you pick up the
receiver of a COCOT to dial, you don't hear a real dialtone, but the COCOT's
own internally generated dial tone. This way, it appears to be a normal
dialtone-first payphone, but can then ask you for the money before actualy
dialing the number. After the number has been dialed and the proper amount of
money has been inserted, you can usually hear the number being dialed in the
background. So that's how a COCOT is supposed to work. Now for the "big
mistake"...
By law, the owner isn't allowed to charge you for a call to 911 or to an
800 number. It obviously wouldn' t be too smart to fool around with 911, so
we'll concentrate on our other option. When you first pick up the phone, you
hear the fake dialtone. You then dial the number and it will calculate the
proper billing, then connect you. If the number is an 800 number however, it
will disable the billing for that call. When you hang up, it will reset the
billing.
However, most COCOTs will not reset the billing until the phone has been
placed back on hook - in other words, when you physically hang up the phone.
As most people know, if the called party hangs up first but you stay on the
line, the dialtone will be reset after a maximum of about 15 seconds. Since
you are on a normal customer loop, the same applies to COCOTs. The catch is
that is isn't the COCOT's internally generated dialtone, it is a real
unrestricted dialtone, meaning that you may now dial any number that you would
be able to dial from home, but without being charged, and the phone will
remain in this state until the phone is physically hung up.
If making free calls from a COCOT is so simple to do, wouldn't you think
that the manufacturers of COCOTs would have fixed this loop hole by now?
Well, that is what this next section is devoted to...
1. After the called party hangs up, the keypad is disabled. This seemed like
a pretty good solution to the problem, but it wasn't. To bypass this
security measure, simply dial with an external keypad such as one of the
two autodialers available at Radio Shack.
2. Billing resets when new dial tone is detected. Again, it seemed like a
pretty airtight way to prevent the abuse of COCOTs, but can easily be
bypassed. Simply blow or hiss loudly into the mouthpiece as the dialtone
is being reset. This prevents the phone from being able to recognize the
dial tone because of all of the white noise you are adding to the line.
Then just at the moment you stop hissing, dial the first digit of the
number you are dialing. The dialtone will disappear and you may proceed
to dial the rest of the number.
I have seen different combinations of the above-mentioned features, as
well as COCOTs with none of those features that won't allow the use of an
external tone dialer, which I found surprising. Then there are the ones that
simply won't reset the dialtone after your call, which although disappointing,
would suggest that they've finally beaten us...
T h e G r a n d S c a n
~~~~~~~~~~~~~~~~~~~~~~~~~~~
*370-0036
*370-0151
*370-0170
*371-9903 voice - Clifton Park Phone Company
371-9931 muted high tone (2200 Hz)
*371-9949 voice - New York Telephone Automotive Office
371-9960 carrier tone
371-9971 tone (1000 Hz, on 10 seconds, off 1 second)
371-9972 tone (1000 Hz, on 10 seconds, off 1 second)
371-9977 carrier tone ("access code?")
371-9989 silent
371-9995 high tone (2200 Hz) carrier?
383-9999 tone (500 Hz continuous)
*434-8401 fax machine
*463-999O Always busy
*465-9999 Always busy
471-2272 AT+T News Line
471-8111 CN/A
472-9900 tone (1000 Hz)
472-9906 silent
*473-9900 (rec) "You have reached a non working # for the state of NY"
*473-9999 carrier
*474-2121 New York operator
*476-1111 Weather (recording)
*484-XXXX This entire prefix is busy
*488-9999 (rec) "All circuts are..' then hangs up, 3 beeps
584-9974 fax
584-9975 muted tone (2200 Hz)
*594-9986 NYNEX voice number
*594-9987 NYNEX voice number
*594-9991 NYNEX voice number
*594-9998 Rings forever, but is unsupervised
647-1111 Number doesn't exist, but MF tones are audible before rec.
*731-9900 Always busy
786-9999 Plays 5 DTMF digits, then disconnects after 10 seconds
+- 877-3500 Huge -+
| . voice |
| . mail |
+- 877-3700 system -+
877-9921 silent
877-9922 fax machine
877-9960 tone (1000 Hz, on 10 seconds, off 1 second)
877-9963 muted tone (1000 Hz)
*877-9966 voice - New York Telephone communications Office
877 9980 (rec) "Your call cant be complete-read instruction manual"
877-9998 tone (1000 Hz, on 10 seconds, off 1 second)
899-7123 carrier (SCO UNIX)
899-9900 tone (1000 Hz, on 10 seconds, off 1 second)
899-9968 muted tone (2200, short)
899-9969 muted tone (2200, short)
899-9998 muted tone (2200, long)
*899-9999 muted tone (2200, long)
311 TTY emergency (like 911)
911 Emergency
958 ANAC (Disconnects line for about 5 minutes)
*981 + last 4 digits of Ringback
# calling from
*982 + last 4 digits of Ringback
# calling from
987 + last 4 digits of Ringback
# calling from
*995 ANAC (Disconnects line for about 5 minutes)
997 ANI (Automatic Number Identification)
998 ANI (Automatic Number Identification)
