TELECOM Digest Tue, 4 Jan 94 21:31:00 CST Volume 14 : Issue 5

TELECOM Digest Tue, 4 Jan 94 21:31:00 CST Volume 14 : Issue 5

Inside This Issue: Editor: Patrick A. Townson

Motorola Cellular Phone Programming (Mark Crispin)
CFP: Home, Informatics, Tele ... Intl. Conference June 94 (Kresten Bjerg)
Bandwidth to Russia Wanted (Alex Turkenich)
Excel LD Provider: Yea or Nay? (Dave Read)
Info on Cellular One NACP (Colin Tuttle)

TELECOM Digest is an electronic journal devoted mostly but not
exclusively to telecommunications topics. It is circulated anywhere
there is email, in addition to various telecom forums on a variety of
public service systems and networks including Compuserve and GEnie.
Subscriptions are available at no charge to qualified organizations
and individual readers. Write and tell us how you qualify:

* [email protected] *

The Digest is compilation-copyrighted by Patrick Townson Associates of
Skokie, Illinois USA. We provide telecom consultation services and
long distance resale services including calling cards and 800 numbers.
To reach us: Post Office Box 1570, Chicago, IL 60690 or by phone
at 708-329-0571 and fax at 708-329-0572. Email: [email protected].

** Article submission address only: [email protected] **

Our archives are located at lcs.mit.edu and are available by using
anonymous ftp. The archives can also be accessed using our email
information service. For a copy of a helpful file explaining how to
use the information service, just ask.

TELECOM Digest is gatewayed to Usenet where it appears as the moderated
newsgroup comp.dcom.telecom. It has no connection with the unmoderated
Usenet newsgroup comp.dcom.telecom.tech whose mailing list "Telecom-Tech
Digest" shares archives resources at lcs.mit.edu for the convenience
of users. Please *DO NOT* cross post articles between the groups.

----------------------------------------------------------------------

Date: Tue, 04 Jan 1994 16:35:08 PST
From: Mark Crispin <[email protected]>
Subject: Motorola Cellular Phone Programming

Here is a documentation file I wrote:

Motorola Digital Personal Communicator secrets revealed!!

INTRODUCTION AND RELIGIOUS STATEMENT

The purpose of this document is to enable the hacker who wants to
know everything about his DPC cellular telephone. It is based upon
the belief that the bad guys already know this information, so keeping
it secret doesn't do any good except to annoy those of us who want to
know *everything* about our phones.

Some of this information only applies to certain models, or
varies from model to model. I entered the information for the model
of DPC which I have. If you have a different model, either figure it
out on your own or get ahold of the Motorola documentation and look it
up there.

Have fun with this information, but don't try to use it for
illegal activity (fraud, harassment, illegal transmission). The
cellular companies and the FCC are becoming quite aggressive (and
skilled) at tracking such activity down. At best, your phone's ESN
will be blacklisted nationwide; at worst, you could face federal
criminal charges. The bad guys use stolen phones or phones with
altered ESNs, and either toss the phone or alter the ESN after a day
or so of misuse. This hole will be closed upon the completion of a
North American ESN database which the cellular companies are busily
setting up.

On the other hand, feel perfectly free to tell a new cellular
company (e.g. when you move to a new city) to buzz off when they want
to charge you $25 to reprogram your phone. Tell them just to give you
the various details of programming information you need (system ID,
telephone number, station class mark, access overload class, group ID,
paging channel, MIN mark, and local use mark) and do it yourself and
save $25. Even better, if you decide to get an evaluation account
with the other carrier, you can program your dual NAM without letting
the new or old carriers know too much about your other account. [If
you've ever dealt with the customer service people at the carrier you
know why this is desirable ...]

Remember, it's your phone; you own it (even *if* the cellular
carrier puts its name on it). You can do anything with it that you
damn well please, as long as you don't use it to transmit in an
unauthorized fashion or attempt to place fraudulent calls. I pay for
every call I make; you should too.

USER MODE COMMANDS

PWR toggle power on/off
<lock code> unlock phone (nnn = unlock code)
CLR erase last digit (hold to clear all)
1 (held down) dial number in location 01
<phone #> SND place call
nn SND place call from memory nn
SND redial attempt for next four minutes
SND switch hook toggle during a call
END terminate call or mode
VOL adjust earpiece volume
<phone #> STO nn store in memory nn
RCL nn recall from memory nn (*/# to scroll)
RCL nn RCL SND tone dial from memory nn
RCL 00 view last number called
RCL SND continue to next after pause in dialing sequence
RCL * system type selection (* to scroll, STO to select,
END to exit):
Std A B non-wireline first, then wireline (home non-wireline)
Std B A wireline first, then non-wireline (home wireline)
SCAn A B non-wireline first, then wireline (home wireline)
SCAn B A wireline first, then non-wireline (home non-wireline)
Home home only
SCAn A non-wireline only
SCAn B wireline only
RCL # view own phone number
RCL # STO change to alternate phone number (dual NAM feature)
RCL # # view individual call timer
RCL # # # view resettable call timer
RCL # # # # view cumulative call timer
FCN VOL adjust ringer volume
FCN SND insert pause in dialing sequence
FCN RCL nn insert tone dial from memory nn in dialing sequence
FCN 0 <sec code> 1 STO enable call restriction (only memory 01-10 permitted)
FCN 0 <sec code> 4 STO disable call restriction
FCN 0 7 CLR reset resettable call timer
FCN 0 9 RCL view non-default status (*/# to scroll, END to exit)
SiG oFF signal strength meter disabled
AnSWer automatic answer enabled
AUtoLoc automatic local enabled
Emr OFF emergency dialing disabled
vOX VOX mode enabled
L dtMF Long-tone DTMF enabled
LEvEL 1 call restriction enabled
SCAn A B non-wireline first, then wireline (home wireline)
SCAn B A wireline first, then non-wireline (home non-wireline)
Home home only
SCAn A non-wireline only
SCAn B wireline only
FCN 0 <sec code> RCL display unlock code
FCN 0 <sec code> <lock code> STO
change lock code
FCN 0 <sec code> <sec code> RCL
program phone (* to scroll, # to exit, SND during
entry number display to save changes)
WARNING: if the phone is reprogrammed too many times,
programming will be disabled. The only way to fix this is
to completely wipe out the memory with 32# in Test Mode.
01 System ID
02 Area Code
03 Telephone Number
04 Station Class Mark
05 Access Overload Class
06 Group ID Mark
07 Security Code
08 Unlock Code
09 Initial Paging Channel (0333 for A, 0334 for B)
10 Option Programming Bits (default 011100)
100000 Internal Speaker Disable
010000 Local Use enable (responds to local control orders)
001000 MIN Mark enable (0 = area code always sent) NOT
CHANGEABLE IN CURRENT MODELS
000100 Auto Recall enable (speed dial from memory)
000010 Second Telephone Number Enable
000001 Diversity enable (dual antennas)
11 Option Programming Bits (default 11110)
10000 Failed Page Indicator Disable (0 = user told about
failed inbound calls due to weak signal)
01000 Motorola Enhanced Scan enable
00100 Long Tone DTMF enable
00010 Transportable Internal Ringer/Speaker enable
00001 Eight Hour Timeout disable (0 = phone shuts down after
8 hours)
12 start of information for second phone number (steps
07, 08, and 11 are skipped)
FCN 1 view features (*/# to scroll, END to exit):
_ SiGnAL OFF signal strength meter enabled
o SiGnAL OFF signal strength meter disabled
_ AnSWr AUTO automatic answer disabled
o AnSWr AUTO automatic answer enabled
_ AUTO LOC automatic lock disabled
o AUTO LOC automatic lock enabled
_ EMrCY OFF energency dialing enabled
o EMrCY OFF energency dialing disabled
_ vOX MOdE VOX mode disabled
o vOX MOdE VOX mode enabled
_ LOnG dtMF Long-tone DTMF disabled
o LOnG dtMF Long-tone DTMF enabled
FCN 2 <digits> ??? I don't know what, if anything, this does
FCN 3 ??? I don't know what, if anything, this does
FCN 4 battery meter
FCN 5 lock phone
FCN 6 mute toggle
FCN 7 ??? I don't know what, if anything, this does
FCN 8 <digits> ??? I don't know what, if anything, this does
FCN 9 <digits> ??? I don't know what, if anything, this does

TEST MODE COMMANDS

Shorting the middle pin of the battery connector puts the phone
in test mode upon power up. Unlock the phone first if necessary. It
starts out in Status Display Level. The display will alternately
flash two values:

xxx yyy xxx = channel, yyy = RSSI (signal strength)
abcdefg a (D)SAT (supervisory audio tone):
0 5970 Hz
1 6000 Hz
2 6030 Hz
3 No SAT
0 - 6 DSAT vector
7 No DSAT
b TX (1 = on)
c Signalling Tone (1 = on)
d Power Level (0-7)
e Control Channel (1 = on)
f RX Audio (1 = off)
g TX Audio (1 = off)

Pushing the # key will put the telephone in Servicing Level. The display
will be US '. This can be done without unlocking it.

WARNING!!! Some of these commands will cause the phone to
transmit. This may get your cellular phone company annoyed at you.
Of greater concern is the fact that doing so is *illegal* under
federal law and can get the FCC breathing down your neck. ``Verbum
sat sapenti...''

Servicing Level commands are:
01# Restart (re-enter DC power start-up routine)
02# Display Current Telephone Status (non alternating
version of Status Display)
04# Initialize Telephone to Standard Default Conditions
05# TX Carrier On
06# TX Carrier Off
07# RX Audio Off (mute receiver audio)
08# RX Audio On
09# TX Audio Off
10# TX Audio On
11 <channel> # Set Transceived to specified Channel
12 <power> # Set Power Step (0 = maximum, 7 = minimum)
13# Power Off
14# 10 KHz Signaling Tone on
15# 10 KHz Signaling Tone off
16# Setup (transmits a five word RECC message)
17# Voice (transmits a two word RECC message)
18# C-SCAN (allow entry of as many as 5 negative SIDs for
each NAM)
19# Display Software Version Number
25 <sat> # SAT On (value is SAT tone number, 0-2)
26# SAT Off
27# Transmit Data (transmits continuous control channel
data) # terminates
32# Clear the telephone. This may be necessary to
reprogram the telephone after too much reprogramming.
The following data is erased: System Registration,
*all* timers, repertory memory, all user programmable
features, last number dialed, directory. This can
take up to three minutes, wait until an apostrophe
shows on the display.
33 <key> # Turn on DTMF for indicated key (0-9, *, #)
34# Turn DTMF off
35 <path> # Set Audio Path
1 Speaker
2 Alert
3 Handset
4 Mute
5 External Telephone
6 External Handset
36# Scan (TDMA only)
38# Display ESN (Electronic Serial Number) one byte at a
time (* to scroll, # to exit)
43# Disable Diversity (use R antenna)
44# Disable Diversity (use T/R antenna)
45# Display RSSI (signal strength) as 3-digit number
46# Display Cumulative Call Timer
47 <level> # Set RX Audio Level (0 = lowest, 7 = highest)
48# Side Tone On
49# Side Tone Off
55# Test Mode Programming (* to scroll, # to exit without
making changes)
01 System ID
02 A Option Byte (default 101xx1x1)
10000000 Local Use enable
01000000 Preferred System (1 = A, 0 = B)
00100000 End-to-End Signaling enabled
00010000 unused
00001000 Repertory Memory NOT CHANGEABLE
00000100 Auxillary Alert enabled
00000010 unused
00000001 MIN Mark enabled NOT CHANGEABLE
03 Telephone Number
04 Station Class Mark
05 Access Overload Class
06 Group ID Mark
07 Security Code
08 Unlock Code
09 Service Level
001 memory dialing 01-10 only
002 memory dialing only (no keypad, no speed dial)
003 keypad dialing only (no memory)
004 no call restrictions
005 seven-digit dialing only
006 full dialing, but no memory changing
007 memory dialing only
10 B Option byte (default xxx00100)
10000000 unused
01000000 unused
00100000 unused
00010000 Extended Field enable (not used in NA)
00001000 Single System Scan enable
00000100 Auto Recall enable (speed dial)
00000010 Disable Service Level setting
00000001 Lock Code Disable
11 C Option byte (default 0000000)
10000000 User NAM Programmability disable
01000000 2nd Number Registration enable
00100000 unused
00010000 Auto Redial disable
00001000 Internal Speaker Disable
00000100 Dual IMTS/Cellular enable
00000010 Selectable System disable
00000001 Dual Antenna Enable
12 Initial Paging Channel (0333 for A, 0334 for B)
13 Initial Paging Channel for System A (0333)
14 Initial Paging Channel for System B (0334)
15 Number of Dedicated Paging Channels (021 in NA)
16 D Option byte (default 0011000x)
10000000 Motorola Enhanced Scan enable
01000000 Cellular Connection (0 = SERIES II)
00100000 Long Tone DTMF
00010000 Transportable Internal Ringer/Speaker
00001000 Eight Hour Timeout disable
00000100 not used
00000010 Failed Page Indicator disable
00000001 Portable Scan (DO NOT CHANGE)
Entering a * after 16 reprograms the phone
57 <mode> # Call Processing Mode
0 AMPS
1 NAMPS
5 TDMA signaling
6 TDMA signaling with loopback
7 TDMA signaling with loopback voice
8 TDMA signaling with loopback FACCH after decoding
9 TDMA forced synchronization
58# Compander On (audio compressor and expander)
59# Compander Off
61# ESN transfer
62# Turn On Ringer Audio Path
63# Turn Off Ringer Audio Path
66# Identify Transfer
68# Display FLEX and Model Information
69# used with identify transfer

------------------------------

From: [email protected] (Kresten Bjerg)
Subject: CFP: Home, Informatics, Tele... Intl. Conference, June 94
Organization: IFIP WG 9.3
Date: Tue, 4 Jan 1994 11:56:48 GMT

CALL FOR CONTRIBUTIONS - CALL FOR CONTRIBUTIONS

A cross-disciplinary international conference

HOME-ORIENTED INFORMATICS, TELEMATICS & AUTOMATION
From 'State of the Art' through 'Prospects'
and 'Blueprints' to 'Implementation'

organized by IFIP Working Group 9.3
in cooperation with the University of Copenhagen

University of Copenhagen, Denmark
June 27 - July 1, 1994

BACKGROUND

The home offers a great potential for new automation, information and
communication technologies and related services. A wide array of
innovations are already under way, with many more to come. They will
transform the home and everyday life in the emerging information
society. They will condition how private households will be enabled to
function in changing social, economic and political structures.

AIMS AND SCOPE

The conference will assess and conceptualize perspectives and options,
which attach to developments of domestic informatics, telematics and
automation across the levels of
- consumer hard- and software,
- network infrastructures
- storage & distribution media,
- teleservices and
- socio-cultural & economic structures.

How can these new technologies - seen together - be used to empower
consumers and private households?

How can both users and suppliers get the optimal benefits from the
possible new technologies? - and with which global impact?

Can these technologies contribute to the emergence of a new home
concept, an "Oikos", where the private household can reestablish
itself in an experienced way as a living and production centre,
embedded in and interacting with a larger community?

Addressing such questions requires a multi-disciplinary approach.
Therefore the conference aims to bring together experts from many
fields and disciplines. Researchers and practitioners, designers and
users, policy makers and industrialists, each with new knowledge and
new questions from their experience of recent and expected
development.

The conference will not only serve as a forum to present and exchange
experience, results of research and ideas, but also to explore and
discuss strategic approaches and alliances for product research and
development, and for prototyping and field experiments.

MAJOR THEMES

* The social construction of new domestic technologies.

* Bridging between the various disciplinary approaches.

* The changing position and importance of households in the new
social and economic structure of the information and communication
society.

* Strategies for creating professional and public awareness of the
converging potentials and implications of constructive innovations for
everyday life and for social, cultural, educational, health, energy, and
economic policies.

* Ways of organizing relations between research and product development
which can further the long-term interest of consumers, and save produ-
cers from waste of investments in development of products and services
which are doomed to failure.

* Relevance for developing countries, cultural diversities and the
general goals of the UN year of the family 1994.

MAIN AREAS

Advanced Home Technologies
(e.g. Intelligent home - Linking of TV, telephone, computer and VCR -
Interactive multimedia and domestic virtual reality - Security-systems
- Household appliances - Environmental control and ecology -
Bio-electronics and health-monitoring.)

Communication and telematics
(e.g. Convergence of broadcast and telecom networks - Interactive
teleservices and teletransactions - Tele-education - Telework -

Evolving
informal networks - Home-to-Home interfacing.)

Economics and politics of HOIT
(e.g. Interests of industry and service providers - Links between R&D
and marketing - Prices and tarifs - Legal and regulatory policies on
national and international level - The future of home economics.)

Cultural and social impact on everyday life
(e.g. Personal development and knowledge distribution - Intra- and
interfamily relations - Functions for children, elderly, disabled and
home-bound people - Community structure - Cultural continuity.)

CONTRIBUTIONS

We solicit
Research papers
Papers on experiments and case studies
Policy and strategy papers
Opinion and position papers
which will address State of the Art, Prospects, Blueprints or
Implementation within these general areas. Besides full papers, short
contributions like posters and statements papers may be submitted.

SUBMISSION REQUIREMENTS

Notification of the intention to submit a full paper (including title
and subject area) should preferably be sent as early as possible. Two
page abstracts of full papers are due at latest January 15, 1993.
Notification of acceptance March 1, 1994. Deadline for submission of
final full papers and short contributions May 1, 1994.

All accepted contributions will be published in the preceedings
available at the conference. Selected papers will be published in the
conference proceedings.

PROGRAM COMMITTEE

Felix van Rijn (Chair), Univ. of Amsterdam, Dept. of Communications (NL)
Kresten Bjerg, University of Copenhagen, Psychological Laboratory (DK)
Gunilla Bradley, Stockholm University, Inst. of Internatl. Education (S)
Valerie Frissen, Univ. of Amsterdam, Dept. of Communications (NL)
Karamjit Gill, Seake Centre, University of Brighton (GB)
Leslie Haddon, University of Sussex (GB)
Gisela Lehmer, Ministry of Telecommunications, Kln (D)
Mara Gabrila Macra, IDAT, Montpellier (Fr)
Kurt Monse, IWT, Universitaet Wuppertal (D)
Bjoern Nake, University of Copenhagen (DK)
Toomas Niit, Institute of Philosophy, Sociology and Law, Tallin (Estonia)
Gerrit Noltes, Ministerie van WVC (NL)
Yves Punie, Free University of Brussels (B)
Andy Sloane, School of Comp. & Inf. Techn. Univ. of Wolwerhampton (GB)
Alladi Venkatesh, Grad. Sch. of Management, Univ. of Calif., Irvine (USA)
L.E. Zegers, European Home Systems Association, Eindhoven (NL)

ORGANIZING COMMITTEE

Kresten Bjerg (DK), Bjoern Nake (DK), Dan Melkane (DK), Poul
Groenhoej(DK)

REPLY FORMAT

Please e-mail, fax or photocopy and mail to:

HOIT-94, Kresten Bjerg, Psychological Laboratory,
University of Copenhagen, 88, Njalsgade, DK 2300 Copenhagen S.
Tel.:+45 31541856 Fax: +45 32963138 E-mail: [email protected]

[ ] I/we consider participating.

[ ] I/we intend to submit a full paper.

Area:

Preliminary title:

[ ] I/we intend to submit a short contribution,
poster or audio-visual demonstration.

Topic:

[ ] I/we want to exhibit/demonstrate electronic or mechanic equipment,
taking max. m2 floorspace.

Subject:

Name:

Institution:

Street address:

City / postal code:

Country:

Voice telephone:

Fax:

E-mail:

Observe news.groups for the ongoing RFD and later CFV concerning
comp.home.misc.

------------------------------

Reply-To: [email protected]
Date: Tue, 4 Jan 94 12:37:25 EST
From: [email protected] (Alex Turkenich)
Organization: Market Vision Inc.
Subject: Bandwidth to Russia Wanted

Several of my friends and I working part time as agents for one of the
telephone companies were able to get about 50,000 minutes per month of
switched traffic from US to the former Soviet Union.

SERVICE DESCRIPTION:

The subscribers to our service do not have to switch their long
distance provider. The subscriber simply dials 1-800 ... number and if
his ANI is registered he gets a dial tone if the switch does not
recognize the ANI (when the subscriber is calling from a payphone or a
hotel) the subscriber is prompted to enter his Travel Code. Some
customers have preset spending limits and are prompted before each
call regarding the amount of credit they have left.

PROBLEMS:

The main complaints of our customers is that the service is not
reliable. The switch is usually down several hours a day, many of the
calls placed to the Former Soviet Union do not go through, FAXes
cannot be sent. We feel that these reasons are preventing us from
increasing our traffic and are contrtibuting to loss of customers.

OUR WISH LIST:

Here are some of the solutions we envision (listed in order of preference):

1) A direct E1 (or T1) trunk from US (preferably 60 Hudson St, New
York) to Moscow, Russia. All of the 30 (24 for T1) circuits have to
approved by FCC for switched traffic. We can arrange to distribute
traffic from Moscow. We would prefer the lines to be multiplexed
between 4:1 and 6:1.

We approached several US telephone companies about leasing E1 or T1
and were given monthly prices that were about twice the prices quoted
by some US companies in Moscow.

2) We are also willing to route all our traffic through some other
provider if we can get some reasonable rate per minute and still are
able to provide the same service as we are providing now (see SERVICE
DESCRIPTION).

If you can offer one of the above two services or have any ideas where we can
obtain these services please send e-mail to : [email protected]
or call me at:

(212) 306-0410 (work)
(201) 575-8215 (home)
(201) 227-5037 (fax)

Alex Turkenich

------------------------------

From: [email protected] (Dave Read)
Subject: Excel LD provider: Yea or Nay?
Date: Tue, 04 Jan 94 10:44:49 PST

Yesterday a friend put the full-court press on me to sign up with some
long-distance outfit called Excel. I'd never heard of 'em, but he
made it sound like your basic multi-level marketing scheme, get bucks
when you sign people up, and more bucks when *they* sign people up,
etc etc etc. Reminded me of Amway. :-)

Anyway, any experiences/opinions? I presume they buy their LD service
from the biggie providers (AT&T, Sprint, MCI etc), but beyond that I
haven't a clue if Excel is on the level or not.

Thanks,

dave

------------------------------

Subject: Info on Cellular One NACP
From: [email protected] (Colin Tuttle)
Date: Tue, 04 Jan 94 00:21:25 CST
Organization: Pillar Communication, Oklahoma City, Ok

I have a question regarding the Cellular One North American Cellular
Network. I have Cellular One service in Oklahoma (McCaw
Communications) and found the system works well passing my calls from
Oklahoma City to Tulsa when I travel (about 100 miles but part of
Cellular One's SuperSystem). Everyone who has called me on my
Oklahoma City number gets me in Tulsa with no problems, delays, etc.
Everything works the way it should.

Now this past week I went down to Austin, (a NACN City) turned on the
cell phone and immediately called my Oklahoma City number from a
nearby pay phone. It rang twice and then my cell phone rang. Now my
question is how does Cellular One Austin so quickly notify Cellular
One Oklahoma City I am in Austin Texas about 400 miles from home and
immediately send my calls to me?

I assume when I turn on my phone the cell processes my ESN and sends
the information either to its computer or my home system. What
impressed me was how fast it did all this, and without me telling it
to do this. Whatever system they use must also allow greater
security, as if your phone is stolen they could immediately deactivate
it around the country.

Is this a FAQ, or could someone briefly explain how the Cellular One
NACN actually works? The computing power to keep track of all of
these ESN's must be great as well as passing all of this information
from system to system obviously in real-time.

[email protected] (Colin Tuttle)
Pillar Communications BBS, Oklahoma City, OK -- +1 405 942 8794

------------------------------

End of TELECOM Digest V14 #5
****************************

******************************************************************************

Downloaded From P-80 International Information Systems 304-744-2253