💾 Archived View for gemini.spam.works › mirrors › textfiles › magazines › RICUS › ricus204.txt captured on 2022-06-12 at 14:10:48.
-=-=-=-=-=-=-
____________________________________________________________________
| ___ __ __ | | |
| |___) | | | | (_ | Rhode Island Computer | Volume 2, Issue 4 |
| | \ | |__ |__| __) | Underground Society | August, 1993 |
|______________________|_______________________|_____________________|
>> Celebrating Over 1 Year of RICUS! <<
=======================================================
RICUS Table of Contents 2.04
=======================================================
1 ... Introduction
2 ... Deciphering the CLAN Library Barcode
3 ... Dept. of State Library Services LORI BBS Exposed
4 ... Obtaining CLAN Network Identifiers
5 ... Closing
=======================================================
===============================================================================
1: Introduction
===============
Welcome to another issue of RICUS!
This issue should really have been called the RI library special edition,
since the entire issue consists of information on the RI state libraries and
their computers. Most of what you'll see is pretty interesting, especially the
info you'll read on the DSLS BBS system (LORI.)
Enjoy...
The Implementor
===============================================================================
2: Deciphering the CLAN Barcode
===============================
Lesson two on your local library, by the CLANMAN
eDITED bY mR X
Deciphering the CLAN barcode/number.
But first...a word from our sponsors:
Waz'up wid de CLAN network.
Well, apparently the CLAN folks have discovered my hack. But,
thankfully, they didn't beef up the security on the P.A.M.s, probably
because they are so benign to security. (You can't trash patron records
with them.) But, on the other hand, one of my friends who has access to
staff bulletins said that security was tightened unexplainably around
March 20-27th. She said that the only modules affected were the circulation
and patron records. If you're a librarian, and you've got a copy of the new
password sheet, ask the RICUS editor how to contact me. I'd really appreciate
it. Be advised, that I won't reprint the circ codes publicly, becuase people
who ruin our hack reputation might damage the system or invade privacy. I
simply like to be up to speed on the happenings in the CLAN, because I
am very interested in library automation and its uses. Whenever the
CLANlords (Bennett, Halliday, and the rest) change things around, it
annoys me, because I am a benign hacker with no intent to do harm.
Hacking the CLAN just helps me understand this fabulous net further.
Lastly, sorry about this being so late. Even though I promised my
good friend Mr X that I'd get this to him by June, since I got home
from school in May. But as any of you fellow students know, education
is expensive (for high schoolers: start saving now) and I've been
working my butt off - flipping burgers. So that's why I didn't have
time to finish this. But I'd like to thank Mr X for his editing work
on my stories.
Okay, down to the feature segment:
THE secret TO THE LIBRARY BARCODE SYSTEM
1 March 1993
I'm sure that you have a library card, if you don't go down to the
local public library...they're free if you pay taxes. Once you have
your card, take it out and flip it over, you should see a bar code on
the top. (If you don't know what a barcode is, it looks like sort of
like the UPC code on groceries). Under the bar code is seemingly
undecipherable blurb of numbers, here is the "secret" to cracking the
numerical code:
The first number tells what type of bar code the computer is
reading. Library cards have a "2" on them and loanable items have a
"3". Following this number is a four digit number, this is the library
code. Cranston's code is 1450, Pawtucket's is 1218, and Warwick's is
2080. Now on your library card, there is a set of five numbers then
four numbers, this is your ID number.
So, a legitimate library card for say, Cranston, may read 2 1450
00021 1234. A Warwick card may read 2 2080 00099 1234.
To sum up:
THIS IS THE REAR OF YOUR LIBRARY CARD:
_______________________________________________________
I I
I Yourtown Public Library I
I ####### B A R C O D E I S H E R E ######## I
I ############################################ I
I 2 1 2 3 4 0 0 1 0 0 7 9 7 3 I
I I I [----------------] I
I I I I I
I I Library I I
I Type # ID # I Patron ID number I
I_____________________________________________________I
This is the "Zebra" code on a book:
________________________________
I Yourtown Public Library I
I #####barcode########### I
I 3 1234 00001 1234 I
I__I___I__[--------]___________I
I I I
Type I I--Book code
I
Library ID
A few library ID codes:
Pawtucket: 1218
Warwick: 2080
Cranston: 1450
Providence: 1116
North Providence: 4859
The other numbers are attainable by stopping by a library and looking
at a book's barcode or by examining different library cards. If you
want all of the codes, virtually all of the public libraries have a
sheet marked "Zebra Codes" or something to that effect. This list has
all of the state, public and college library code numbers. But, this
list is usually only accessable to staff. But, fear not...thanks to a
few friends, in the next issue of RICUS, there will be a full sheet
listing the CLAN libraries, their RILN identifiers, logins, and
barcodes. [Editor's Note: The list of library logins was published in
the last issue. A local user was able to obtain it himself.]
This barcode system is very common throughout the library world,
and identical stickers are found in many states. But, for simplicity's
sake, I only included the CLAN's use of the system.
II. How to make a duplicate library card for a dollar:
If you constantly loose things, and have gotten sick of constantly
forgetting your library card, here is how to get a duplicate for the
measly price of a dollar.
Get a CLAN card and use it legitimately. Then, go to your library
and say you lost your card. With a dollar, they'll grant you a new one,
and erase your old card number.
Now, go home and take out your old CLAN card. Using a razor blade,
scrape the old barcode off the rear. Once it is cleared off,
photocopy the barcode of the new one onto a sheet of sticky paper (the
kind stickers are punched out of, or that some people use for cassette
or disk labels.) Check the resolution; if you use a crappy
photocopier,a blurred barcode will not be readable by the computer.
Now carefully cut out the photocopied sticker to the dimensions of the
real sticker and put it onto your old card. Then carefully match its
appearance to that of the legitimate card. This'll give you two
identical CLAN cards. But, do not give copies out to other people,
since any of their overdo books will appear on your account, which
will prevent you from borrowing books. As far as I know, it is
perfectly legal to have a duplicate library card for your own use. It
is risky, however, since it increases the chance for fraud. Since the
library doesn't want you to get ripped off by a crook, they don't
issue backup cards.
IT HAS COME TO MY ATTENTION THROUGH SOURCES AT CRA THAT PEOPLE HAVE
BEEN CUTTING BARCODES OUT OF BOOKS. THIS COULD POTENTIALLY BE A PERSON
MANUFACUTURING FAKE CARDS OR ENGAGING IN OTHER CRIMINAL ACTIONS. BE
AWARE OF WHAT BOOKS YOU TAKE OUT, IN CASE THIS IS A SECURITY BREECH.
LASTLY, IF YOU ARE THE PERSON CUTTING OUT BARCODES, STOP IT, AS YOUR
IDENTITY WILL SOON BE FOUND.
III. RILA bulletins pertainant to CLAN hackers. If you're interested
in library automation, go to your local library's periodicals section
and ask for:
1. Rhode Island Library Association Bulletin November/December '92
This RILA bulletin's primary feature article is CLAN, and its
switch to Dynix. It's in an interview format with the CLAN president.
There aren't any access secrets or the like, but it's cool since it
tells the history of CLAN.
2. Rhode Island Library Association Bulletin January/February '93
The main topic for this one is libraries and the Internet (heh
heh heh). It talks about the history of Internet and how the 'net
might of use to libraries (and to us?).
Have Fun,
The
______
I
I
I_____ l a n M A N
A Special Thanks to those great librarians and tech services people
who give me the info I need.
[A little correction: In a previous issue of RICUS Journal, the
editor pointed out that the libraries may be switching systems. The
DYNIX system is the new system, as it replaced a really trashy
software package that was made by CLSI and was what CLAN had ran for
years before the DYNIX transfer this summer. If you noticed, in
July/August 1992 the CLAN terminals were down for about two months or
so, this was why.
(For more info, see RILA Bulletin N/D 1992.)
-------------------------------------------------------------------------------
Editors Commentary: Thanks again, ClanMan, I too am interested in the technical
workings of the library system. What we REALLY need is a dynix shell account.
As you probably know, Dynix is just a type of UNIX system. If one of the locals
more skilled in UNIX (heh heh heh..) had obtained a shell account, wonderful
things could be set up on these terminals and be accessed state wide. Imagine
a "CLANdestine" (heh) BBS set up on the library terminals!
Recently, we have obtained information relating to the Department of State
Library Services and Internet. We have another library system dialup exposed
in the next article. Enjoy!
===============================================================================
3: DSLS Library BBS Exposed
===========================
----------------------------------------
DSLS Library of Rhode Island BBS Exposed
----------------------------------------
=========================
>> A RICUS Exclusive <<
=========================
This file was captured and given to RICUS. It was allegedly taken from
internet node dsl.rhilinet.gov, a VAX/VMS computer headquartered at the RI
Dept of State Library Services. It is a fully functional public access BBS,
referred to affectionately as LORI (Library of Rhode Island.)
It is interesting to note that this VAX system is running a dirivative
of the same BBS software being run on the IDS BBS system.
If you log into this system, be warned it'll probably be watched even more
heavely after they find out all the local modem kiddies know about it. Have
fun...
[Update: Apparantly, some overzealous abusers used the system to send FTP
mail to Eagles Nest, causing the sysadmin(s) at DSLS to be alerted that
it was being abused. As a result, free abuse of the internet is no longer
possible (until a BBS account is somehow obtained.) Security of DSLS was
greatly improved. I hope this serves as a lesson to the offending abuser,
[you know who you are.] Your actions may have ruined the future usefulness
of this system for others -- there were other publically accessable systems
you could've EASILY sent FTP mail from. ]
This file "CLANDIAL.DIR" was in the "Public Workspace" file transfer
area on the dsl.rhilinet.gov BBS. The acquirer of this file logged in
under a GUEST account and captured the file.
------------------------ capture: clandial.dir --------------------------------
DIAL-IN ACCESS TO CLAN
Using your own telecommunications software, set the terminal
emulation type to VT100. You must set your terminal to the
following settings: Data bits=8, Parity=none, and Stop bits=1.
The following options should be turned off:
Local echo, Xon/Xoff, RTS/CTS, CR to CR/LF, Line wrap,
Destructive BS
Set the baud rate at 1200, 2400, 4800 or 9600.
Call DSLS at the following number:
831-4640
and press <enter>. If this is a long-distance call,
please contact any member of the DSLS Network Group: Dorothy
Frechette, Howard Boksenbaum, Sheila Carlson, Jeffrey Vale, or
Andrew Egan at 277-2726 for a toll-free number.
When the connection is made you will see the message:
PLEASE TYPE CALL CLAN OR CALL DSLS
Port xx
CLAN OR DSLS
(For the following directions, the actual letters that you should
type are in quotes. Please assume that after you type these
letters, you should press enter, or return. Type everything in
lower case; in some instances it matters, and in some it doesn't,
so it is just easier that way.)
Type: "call clan" If you get a notice of "Procedure
error," type "call clan" again, s-l-o-w-e-r. When you get a
message, "CLAN or DSLS CONNECTED," press <enter> a few times and
be patient, it may take a few seconds before you get another
prompt. At the login: prompt, type "library". If you receive a
Password: prompt, press Enter, Return, and you should then get
the Login: prompt.
The screen will ask for your emulation, type "1" for VT100 and
"y" when it asks you if the screen was readable. Press Enter at
the picture of the catalog, and you will be in the DSLS Public
Access Module. Note that when you have called up an item and
there are no copies at DSLS, you can press Enter to see copy
status at other CLAN libraries.
When you are finished searching press "14" to log off. Once you
get the "logged off" message, please remember to hang up using
the commands specified in your telecommunications software, or if
you then wish to connect to LORI, hold down the control key while
typing "p" and then type "clr" and press <enter>. Please
remember to hang up using the commands specified in your
telecommunications software.
--------------------- end of capture: clandial.dir --------------------------
Common sense dictates you'll need to type "call dsls" after connection to
get to the VAX system. The system is referred to as "Library of Rhode Island"
in the login. The "CLAN" system is the usual book-look-up system discussed
in previous issues of RICUS.
There is a BBS on the DSLS VAX/VMS. As I wrote in the opening paragraph, this
system is on the Internet and has the name "dsl.rhilinet.gov" It says its for
"Library employees" only <snicker> Well, sorry guys, but its not anymore.
Apparantly, they wanted to keep this number secret or something. I think it
should be in the public BBS list, along with all the other CLAN numbers. Public
libraries are "public" institutions. Well then, now so are there computers!
The DSLS system gives detailed instructions in the login message, but in case
someone removed them, login as "GUEST" to make a new account. Users of IDS
will find this software very familiar. Infact, it's an exact duplicate of the
IDS BBS software. Oh yeah, when it asks where you found out about the system,
say you found it in the RIBBS list or something <grin>
Remember, your parents (or your own) taxes go to pay for these things, so why
SHOULDN'T you be able to log on to them? I see no valid reason. If you want to
get a validated account you'd probably need to get the name of a librarian or
something, since they may/may not actually check. Note, it may not be wise to
even call this thing (and clearly not use real information) after the release
of this file, since it will no doubt be flooded with calls from real & wanna-be
local hackers, cyberpunks, and weirdos, which is always good. Of course, since
early copies of this file have escaped to various users, it has ALREADY
been flooded by local hackers, cyberpunks, and weirdos...
DSLS Captures
=============
Here are some captures of the DSLS BBS and other items found there:
Library of RI SIGS Available
THE FORUM
Special Interest Groups
1 ... The Main Message Base - For ALL Public General Discussions
2 ... CLAN Forum 13 ... Computers & Libraries
3 ... Ocean State FreeNet Forum * 14 ... HELIN
4 ... ARIHSL Forum * 15 ... Library Construction
5 ... Library Administration Forum * 16 ... Serials
6 ... Reference/Research * 17 ... ILL Discussion
7 ... Childrens Services 18 ... Literacy
8 ... QUAHOG Forum 19 ... Tech Access