💾 Archived View for gemini.spam.works › mirrors › textfiles › phreak › travnet.phk captured on 2023-01-29 at 10:50:23.

View Raw

More Information

⬅️ Previous capture (2020-10-31)

-=-=-=-=-=-=-



==)--- P TO PAUSE S TO STOP ---(==

  Exploring Caves in Travlenet
  
   One fine summer day several years ago, a phone phreak 
discovered yet another interesting telephone number. What was 
it? A modem? A dialtone? A very special operator? no to all of 
the above--this was something truly amazing and unique. This is TRAVELNET.
   Of course, he didn't know at the time what he had dial into.
But this is what he heard. Two rings, a tone that lasted for 
about half a second (it had about the same pitch of a Sprint 
tone), and then a voice! Not just a recording, not just a human 
asking what it was you wanted, but a recording asking you what 
it was you wanted! Sort of like hearing an answering machine 
for the first time. But this was no answering machine.

 "Authorization number, please" a sensual, husky female voice 
asked. And since he was a rather clever guy, he hit his touch 
tone keypad. Every time he entered a tone, he heard a short 
"booop", like an acknowledgement of some sort. After four of 
these "booops" the automated lady came back and said 
"eighteightsevenzero." But, alas,those were not the keys he 
hit. In semi-desperation, he hit another key. The female voice 
came back and said "Please repeat, yes or no?" But what was the 
question? He quickly realized that she must have been somehow 
trying to confirm the entry of his numbers. But how do you 
convey the word "no" on a touch tone keypad?
  
 He went through the whole process again and wound up getting 
dumped into a recording that said (in an authoritative female 
voice) "The Travelnet number you dialed is incorrect; please 
check the number and dial again."
  
 He called back. Again he tried entering numbers and tried to 
figure out why they wouldn't correspond. All of the sudden, his
baby sister (who had been growing increasingly bored with a 
rattle in the next room), decided to let out the sort of scream 
that baby sisters are known for. What's important about this is
that after the scream was over, our friend heard quite 
distinctly over the telephone lines:"booop."
   "Wow,"he said, 'Booop," it repeated.  It recognized speech! 
He called it back and started entering numbers with his voice. 
It worked! After four numbers were entered, it would repeat 
them back to him and he had the option of saying either "yes" 
or "no". If he said "yes" or remained silent, he had the 
opportunity to enter four more numbers. If he said "no" the 
machine would make every effort to find out what the number was 
by asking him twice just what it was he meant to say. There 
were a few simple rules--he had to emunciate clearly and say 
the word "zero" instead of "oh".
  But what would this lady let him do if he quessed the right 
eight numbers? And how could he possibly get such a long number 
anyway. Would he have to call up the lady and slowly and 
patiently pronounce little words over and over? Since he knew 
there were over 100,000,000 possible combinations and that no 
more than a thousand probably worked, he understood that it 
would take some thinking to satisfy the mechanical voice. He 
needed to find some good old-fashioned human incompetence. If 
the machine had trouble hearing him, or if he remained silent, 
it would eventually say, "Sorry, we're having difficulties." 
Then it would connect him to a human. He stuck on the line and 
when the operator answered, he asked her what number he had 
dialed. "This General Motors Travelnet, sir," she replied. "I'm 
terribly sorry, "he said. "I was trying to get the speaking 
clock." "That's okay," the operator said, "Goodbye."
   So it was General Motor! This would be easy. He waited a day 
and called back. He got connected to another operator, who 
asked him what he wanted. "This is J.C. Steppleworth form Fort 
Wayne GMAC,"he snarled. "And I've been having trouble using 
this confounded phone system. It was used to make phone calls, 
which he sort of suspected. After your eight-digit code, you 
enter a ten-digit phone number or, if dialing internally within
General Motors, a seven digit number. The recording even spoke 
a demo authorization code to get the point across. After 
hearing this, our friend wondered if he should try the demo 
code. "No." he decided. "They couldn't possible be that stupid.
"He tried it anyway and guess what? The moment he confirmed the 
last number, the lovely voice asked a new question: 
"Destination code, please?" (In other words, the phone number 
you're trying to call.)
   It was an extender--a long and short distance phone service.
He proceeded to test it out, and he found that he could call 
virtually anywhere in the country for free. But who cares about 
free calls? He wanted to explore. And explore he did. He tried 
many things and learned many things. He found that he could 
avoid the lady voice if he keypadded in the numbers before she 
could speak. This way the call would go through normally 
without any arguments on pronunciation. This allowed him to 
test many, many codes without much hassle. He found that by 
mixing up his working code a little., he was able to find many 
new ones. The simplicity was atounding. In a short time, he had 
found literally hundreds of codes. After this, he sat down one 
day and stared at his list of codes. All of a sudded, he 
relized something. Each group of four added up to either 9, 19,
or 29-a sort of base-nine code. He wrote a short program and 
printed out all possible four-digit combination that added up 
to these magic numbers. He was set for life.
   He used the system to explore internal offices. If no area 
code was entered, every exchange put you in a different part 
you in a different part of the country. One exchange, 999, 
simply dumped him into a feed from a Detroit radio station. One 
day, his Demon-dialer, which is basically a touch tone 
generator with a memory, came across a re-order (a fast busy 
signal) that turned into a dialtone in twenty seconds. The 
connection wasn't great, but he found that he could make a 
direct call anywhere. He could dial overseas directly. He 
figured that he was at the switchboard of some office branch 
far away form where he originally called. He found out what the
number was by calling a friend peron-to-person collect, who 
then asked the operator for the number so that the "person" 
could call back when he returned. When he called up the number 
he was dialing from, they answered, "GMAC." So it was some 
distant office that he was making his calls out of, using a 
Travelnet code and an internal number to get there. It was so 
roundabout that he knew nobody would figure it out. In fact, 
several people that he called received calls from that office 
asking if they knew anybody who worked there that would call 
them at three in the morning. It was incredible! Even if a 
friend had a wanted to frame him, it was doubtful that they 
would connect him with this distant city from which the call 
supposedly emanated. And the funny thing was that the company 
was probably placing a 24-hour armed guard on the building, 
thinking that someone was breaking in and making calls. Someone 
was, but in a way they could never figure out.
   There's much more to the world of Travelnet, particularly on 
their internal network. And the same, number works to this very
day, which, by the way, is toll-free. But we've heard of cases 
where people have been trapped into paying for what they did 
and it's quite likely the system is heavily monitored.
 similar system called WIN was used by Westinghouse before 
they gave up in disgust after their lines were constantly tied 
up by phreakers and hackers. Honeywell makes the actual system 
and there are others in use around the country-one, we hear, 
for the state offices of Illinois, another Ralston-Purina-the 
folks who blow up sewers in Louisville,KY.
   As usual, nobody at travelnet understood any of the 
questions we asked them and no one returned our calls. Maybe 
the lines were all tied up.

DOWNLOADED FROM P-80 SYSTEMS