💾 Archived View for spam.works › mirrors › textfiles › phreak › travnet.phk captured on 2023-06-16 at 19:51:44.
-=-=-=-=-=-=-
==)--- P TO PAUSE S TO STOP ---(==
Exploring Caves in Travlenet
One fine summer day several years ago, a phone phreak
discovered yet another interesting telephone number. What was
it? A modem? A dialtone? A very special operator? no to all of
the above--this was something truly amazing and unique. This is TRAVELNET.
Of course, he didn't know at the time what he had dial into.
But this is what he heard. Two rings, a tone that lasted for
about half a second (it had about the same pitch of a Sprint
tone), and then a voice! Not just a recording, not just a human
asking what it was you wanted, but a recording asking you what
it was you wanted! Sort of like hearing an answering machine
for the first time. But this was no answering machine.
"Authorization number, please" a sensual, husky female voice
asked. And since he was a rather clever guy, he hit his touch
tone keypad. Every time he entered a tone, he heard a short
"booop", like an acknowledgement of some sort. After four of
these "booops" the automated lady came back and said
"eighteightsevenzero." But, alas,those were not the keys he
hit. In semi-desperation, he hit another key. The female voice
came back and said "Please repeat, yes or no?" But what was the
question? He quickly realized that she must have been somehow
trying to confirm the entry of his numbers. But how do you
convey the word "no" on a touch tone keypad?
He went through the whole process again and wound up getting
dumped into a recording that said (in an authoritative female
voice) "The Travelnet number you dialed is incorrect; please
check the number and dial again."
He called back. Again he tried entering numbers and tried to
figure out why they wouldn't correspond. All of the sudden, his
baby sister (who had been growing increasingly bored with a
rattle in the next room), decided to let out the sort of scream
that baby sisters are known for. What's important about this is
that after the scream was over, our friend heard quite
distinctly over the telephone lines:"booop."
"Wow,"he said, 'Booop," it repeated. It recognized speech!
He called it back and started entering numbers with his voice.
It worked! After four numbers were entered, it would repeat
them back to him and he had the option of saying either "yes"
or "no". If he said "yes" or remained silent, he had the
opportunity to enter four more numbers. If he said "no" the
machine would make every effort to find out what the number was
by asking him twice just what it was he meant to say. There
were a few simple rules--he had to emunciate clearly and say
the word "zero" instead of "oh".
But what would this lady let him do if he quessed the right
eight numbers? And how could he possibly get such a long number
anyway. Would he have to call up the lady and slowly and
patiently pronounce little words over and over? Since he knew
there were over 100,000,000 possible combinations and that no
more than a thousand probably worked, he understood that it
would take some thinking to satisfy the mechanical voice. He
needed to find some good old-fashioned human incompetence. If
the machine had trouble hearing him, or if he remained silent,
it would eventually say, "Sorry, we're having difficulties."
Then it would connect him to a human. He stuck on the line and
when the operator answered, he asked her what number he had
dialed. "This General Motors Travelnet, sir," she replied. "I'm
terribly sorry, "he said. "I was trying to get the speaking
clock." "That's okay," the operator said, "Goodbye."
So it was General Motor! This would be easy. He waited a day
and called back. He got connected to another operator, who
asked him what he wanted. "This is J.C. Steppleworth form Fort
Wayne GMAC,"he snarled. "And I've been having trouble using
this confounded phone system. It was used to make phone calls,
which he sort of suspected. After your eight-digit code, you
enter a ten-digit phone number or, if dialing internally within
General Motors, a seven digit number. The recording even spoke
a demo authorization code to get the point across. After
hearing this, our friend wondered if he should try the demo
code. "No." he decided. "They couldn't possible be that stupid.
"He tried it anyway and guess what? The moment he confirmed the
last number, the lovely voice asked a new question:
"Destination code, please?" (In other words, the phone number
you're trying to call.)
It was an extender--a long and short distance phone service.
He proceeded to test it out, and he found that he could call
virtually anywhere in the country for free. But who cares about
free calls? He wanted to explore. And explore he did. He tried
many things and learned many things. He found that he could
avoid the lady voice if he keypadded in the numbers before she
could speak. This way the call would go through normally
without any arguments on pronunciation. This allowed him to
test many, many codes without much hassle. He found that by
mixing up his working code a little., he was able to find many
new ones. The simplicity was atounding. In a short time, he had
found literally hundreds of codes. After this, he sat down one
day and stared at his list of codes. All of a sudded, he
relized something. Each group of four added up to either 9, 19,
or 29-a sort of base-nine code. He wrote a short program and
printed out all possible four-digit combination that added up
to these magic numbers. He was set for life.
He used the system to explore internal offices. If no area
code was entered, every exchange put you in a different part
you in a different part of the country. One exchange, 999,
simply dumped him into a feed from a Detroit radio station. One
day, his Demon-dialer, which is basically a touch tone
generator with a memory, came across a re-order (a fast busy
signal) that turned into a dialtone in twenty seconds. The
connection wasn't great, but he found that he could make a
direct call anywhere. He could dial overseas directly. He
figured that he was at the switchboard of some office branch
far away form where he originally called. He found out what the
number was by calling a friend peron-to-person collect, who
then asked the operator for the number so that the "person"
could call back when he returned. When he called up the number
he was dialing from, they answered, "GMAC." So it was some
distant office that he was making his calls out of, using a
Travelnet code and an internal number to get there. It was so
roundabout that he knew nobody would figure it out. In fact,
several people that he called received calls from that office
asking if they knew anybody who worked there that would call
them at three in the morning. It was incredible! Even if a
friend had a wanted to frame him, it was doubtful that they
would connect him with this distant city from which the call
supposedly emanated. And the funny thing was that the company
was probably placing a 24-hour armed guard on the building,
thinking that someone was breaking in and making calls. Someone
was, but in a way they could never figure out.
There's much more to the world of Travelnet, particularly on
their internal network. And the same, number works to this very
day, which, by the way, is toll-free. But we've heard of cases
where people have been trapped into paying for what they did
and it's quite likely the system is heavily monitored.
similar system called WIN was used by Westinghouse before
they gave up in disgust after their lines were constantly tied
up by phreakers and hackers. Honeywell makes the actual system
and there are others in use around the country-one, we hear,
for the state offices of Illinois, another Ralston-Purina-the
folks who blow up sewers in Louisville,KY.
As usual, nobody at travelnet understood any of the
questions we asked them and no one returned our calls. Maybe
the lines were all tied up.
DOWNLOADED FROM P-80 SYSTEMS