Key Pulse 60

eZine lover (@eZine)

Published in 

Key Pulse

 · 5 years ago

  

 
 ====================================== 
|  Key Pulse Issue 60 * June 10th, '01 | 
|  Breaking the unicorn (C4) line!     | 
|  Written by: Cuebiz (BSC) 2000.      | 
 ====================================== 

 
Disclaimer - 
  Disclaimers suck, because it doesn't matter what I put here, I wont be able to stop someone 
who wants to rip off the telco. Iam a phreak and get my kicks out of ripping off the telco; So 
I wont say that Iam NOT responsible, but yet if I catch you blaming me for your actions, I will 
personally shut down your whole NPA and hand the blame off to YOU, and if you live in the UK; 
well, I dont care, BT can't do shit to me, if you live in the UK, hit me up and I'll give you 
access to CSS via Featurnet, yes, for free; why? Because Iam that damn good beeey0tch! 

 
Introduction - 
  Since I wrote about Boxing off of C5, and C5/R2, I thought that I'd write some files on  
ancient systems that may exist somewhere in the middle of nowhere (where computers aren't  
popular yet). I haven't broke a CCITT4 line (yet), because they're so rare; BUT a friend  
of mine, whom would rather stay anonymous, had alot of fun with C4 lines back in the old  
days. After alot of boring lectures on frequencies, and having to play with really old Amiga  
programs, here I am ready to give infoz out to the public and stuff.  

 
What is CCITT4? 
  CCITT 4 (covered in Recomm. Q.115 - Q.120) is very tone dependant, and a great treat 
for any phreaker who has the chance to play with this type of line. I dont know much about 
the mechanics of CCITT4 because of the fact that I have ADD and dont listen to much of the 
lectures that Iam given (joking). CCITT4 is based on three supervisory tones, 2040hz, 2400hz 
and the combination of both 2400hz+2040hz. CCITT 4 is unique in its tones, due to the fact 
that it utilizes binary code signals. You'll know what I mean when I get more into the controls 
of C4. Another thing about C4 is that its very timing specific; for missing several seconds 
in between pulses could mean a totally different number. Oh well, the size of this file right 
now disapoints me, but who gives a crap. I'll write a follow-up later on.  

 
Breaking the line - 
  Once the call is connected, you'll then burst 2040hz+2400hz for about 150ms and with a pause 
of 50ms , you'll then burst 100ms of a 2040hz tone to let the remote CO to know that the line 
is in use and that its ready to start routing a call. The controls are as follows: 

 
          #       Binary Equiv.       Pulses                     Notes 
        ------------------------------------------------------------------------- 
          1          1110       2400-2400-2400-2040      
          2          1101       2400-2400-2040-2400 
          3          1100       2400-2400-2040-2400                           
          4          1011       2400-2400-2040-2040                            
          5          1010       2400-2040-2400-2040            
          6          1001       2400-2040-2040-2400           
          7          1000       2400-2040-2040-2040              
          8          0111       2040-2400-2400-2400           
          9          0110       2040-2400-2400-2040             
          0          0101       2040-2400-2040-2400           
          11         0100       2040-2400-2040-2040      Used to make Operator calls        
          12         0011       2040-2040-2400-2400      Used to make Operator calls       
          15         0000       2040-2040-2040-2040      End of Pulsing tone (old school ST)       

 Note: KP1 pulses are: 2040hz+2400hz for 150ms then a 2040hz for 100ms 
       KP2 pulses are: 2040hz+2400hz for 150ms then a 2400hz for 100ms 

 
  When dialing, you'll need to have at least 40ms between each pulse, and 100ms between each 
completed digit (after you dial a digit, wait 100ms before pulsing the next). If you dont know 
how to makes calls with a bluebox yet, I advise you to read one of the many files I've written 
on the subject because i wont go through it again. Please note that I was told that after you've 
sent the EOP pulses, the remote CO will respond with a recognition tone so look out for it. 

 

Conclusion - 
  I wish that one day, someone can hook me up with a working c4 line (if they still exist), or 
that by some kind of miracle; I run across one through one of my routine scans. Anyways, I hope 
that I tought you something new, I WILL NOT be writting files on those really old national type 
signalling systems, because IMHO, I think that C4 lines are ALL GONE, AND you'll have no use for 
anything earlier (C1/C2/C3).  

 
Cool facts to know:  
         The C3 break tone is a 2280 HZ for 35ms, and dial using C5 tones 35ms each. 

         Amiga users use RoxBox 75% of the time, Chicken Dialer 20% of the time, and use 
         DOS emulators to utilize BlueBeep the other 5% of the time according to our survey. 

Text file notes: Best viewed via a GRAPHICAL web-browser (NOT LYNX!) at 800x600, or via VIM. 
  
                                               EOF