All Activity

This stream auto-updates   

  1. Yesterday
  2. Sampled the two numbers @ 8181 and 8180 and made recordings.
  3. Last week
  4. Funny you say, I got in a little bit of trouble at a hotel a few years ago for exactly that.
  5. Denver... last time I tried was a few years ago (and I no longer have a line w/ CenturyLink to actually test on). Try 1-970-959-1020, I'm pretty sure that's what I dialed to get a 102 test.
  6. Here's a short recording from the electromechanical switches at the Seattle Museum of Communications. In retrospect, I could've done a way better job at this; as you might pick up from what I chose to call, I was a little overwhelmed by all the variety, and couldn't really make up my mind about what to record. It ended up being a little scattered. That being said however, I was using a completely new patch circuit to make these recordings; it was the second time I'd ever used it, and certainly the first time I'd ever stuck my recorder on an electromechanical switch. This is the one thing I did account for; usually when I record stuff, loud clicks, like a battery drop are extremely loud - enough so that it'll cause clipping unless you set your levels really, really low. Normally this isn't a big issue since that's basically the only click you'll ever get locally from the modern network. That's something I really didn't want on this recording though, so I added a couple of DC filtering caps and current limiting diodes. Thanks to that, I got a far cleaner recording of a lot of things than I probably would've otherwise. So one thing you'll probably notice right away is I don't have any (interesting) recordings of the panel switch. The reason for that is simple: a lot of the phones in the museum are from the period the switch was made. For example, you have lots of candlestick-era phones on the Panel, 302 sets on the Crossbar 1 and so forth. This is a great aesthetic choice, but unfortunately, it also means not only are there no modular jacks, a lot of these phones don't have varistors in the earpieces either. This is the thing in the earpiece that makes really loud, sudden noises (like a battery drop or a cut-through click) stick to a reasonable volume. When they're not on a phone, I can't stress enough that you do *not* want your ear near it when something clicks. Needless to say, I felt bad - the panel switch is the pride and joy of some of the volunteers, but there wasn't anything I could use to call from it. Finally, I'm flashing everything by hand here. This is because the best place to record was from a 1A2 key phone with lines from all the different switches in the museum (except the panel), but for whatever reason, the voltage dipped too low by the time it hit the DTMF IC to power it. For that reason, well, I don't dial a lot of numbers with zeroes in them. This is probably just as well for the step switch; it has tone to pulse converters, but they cut back too late to let you hear the cut-in noises. That being said, if you ever go, it's really easy to underestimate the step switch in a big room filled with some seriously incredible switching equipment. But don't. If you familiarize yourself with all the noises they make when they cut in and such from the Evan Doorbell recordings, it becomes clear that everything is laid out nice and neatly on the switch like an open FTP directory or a PBX; not a whole lot of things can be hidden. Also, much like in the recordings, a short flash can reset a trunk instead of hang up on a call. Anyway, enough crap. Here's a list of calls on the recording: Call 1: Crossbar 5 - 844-1111 (time, on panel) Call 2: Step - 844-1111 (time, on panel) Call 3: Crossbar 1 - 232-0027 (line on Crossbar 5) Call 4: Crossbar 1 - 232-8811 (vacant number on Crossbar 5) Call 5: Crossbar 1 - Permanent signal trunk, resets back to dialtone Call 6: Crossbar 5 - 231-1111 (vacant code; crybaby tone) Call 7: Step - 232-9911 (3-slot payphone on crossbar 5. I answer and screw around for a bit. Notice after I hang up, the trunk never releases) Call 8: CX-100 - 9 (it ignores this) Call 9: CX-100 - 1,1 (it ignores this too) Call 10: CX-100 - 0 (the switch tries to pick up a line from the crossbar 1, but it was disconnected. This was fixed later, but I never recorded it) Call 11: Step - 7,845-2 (the seven level of the first selector is vacant. The step drops me back to dialtone, I dial 845-2 and get a reorder from it) Call 12: Step - 1-22 (the 1 is absorbed on the first selector. Notice the dialtone comes back under the pulses of the next digit. The next 2 gets a reorder) Call 13: Step - 1-231-11 (the first 1 is absorbed like before. I have some trouble with the button messing around with the sound. After 23, the step cuts into a trunk to presumably the crossbar 5, and it makes a strange sound. After the next few digits, I abandon the call; 231 is vacant and I misdialed. Call 14: Crossbar 5 - 311 (it waits for me to finish before deciding I belong on the crybaby. It wasn't working when I made this) Call 15: Crossbar 5 - 232-9314 (intraoffice call to a ringing number. This was right before everyone left; normally, intra-office sounds as great as all the rest. Chronomex turns off all the switches after the second ring) museumcalls.flac
  7. Hmm, what tandem do you home on? I tried 303-959-1020 from the Denver DMS, and I just got the not in service recording.
  8. I do believe that most US West switches in the Colorado area (previous Mountain Bell switches then?) will drop you straight to the tandem on 959 numbers. IIRC, this has the interesting property that you can listen to test numbers from the tandem, eg. 959-1020.
  9. So I've been doing a lot of traveling recently, and found something a bit interesting. From most US West 5ESSes, if you're in, say, the 206 area code and you dial 206-959-anything, your switch will give you a vacant number recording. Just 959-xxxx normally sends you to CBCAD. This didn't really raise my eyebrows too much (I haven't found anything yet. I'm looking though, and encourage everybody else to) until i tried the same thing from a DMS-100 in Denver. From there, it spits you out onto a recording from the tandem switch (DNVRCOMA03T - the trailer code even says 03T). My guess is the rest probably just fire back a cause code saying the number is vacant, but it still gives a good idea of what might be lurking in that prefix.
  10. Wow. Well, that was a surprise. Augusta and Lafayette Main are both gone. Odessa, however, lives on. I had my bets on Augusta being the last. Why this is I have no idea, but get it while it's hot. It was supposed to be cut over a few months ago.
  11. Motherfuckin shit, fuckin with me... Fuck a skank bitch and a sucker MC Cuss words, just let 'em roll... Mother fucking, shit, goddam ass(-)?ho(l)?e.... Cuss words just don't quit, mother fuck you damn shit head bitch... - Too Short about 1990ish. Just made me happy to not get censored on the Interwebz anymore. :-)
  12. Dang! Cobain, Staley, and Cornell! Grunge is official dead. RIP. :-(

  13. Swinging the banhammer again.

  14. Wow! Betcha she's probably long since retired by now.
  15. 206-723-0045 - Modem 0046,0047 - DATU 206-721-0008 - rec, "The number you have called is temporarily out of service and has been referred to US West Communications repair. Thank you for your patience. Please try your call later." 206-727-0066 - rec, "We're sorry, due to Pacific Northwest Bell network difficulties, all circuits are busy now. Please try your call again later."
  16. Earlier
  17. Hmm, no official downloadable ISO file of the repository you need and you need a local copy for offline machines, what to do, what to do? Simple, grab the whole 2 1/2 GB online repo with WGET in one fell swoop, edit the /Releases file as needed and build your own ISO.

  18. This might be the last time I get to hear a US West TOPS switch hassling me for money, so I thought I might record it. I didn't have a pickup coil with me at the time - still don't actually, I should probably find my way to one. But anyway, sorry about the automatic gain control. Next time I do this, I'm going to use something a little cleaner. All I had at the time was my Dialogic box, though. In case you were wondering, this switch is indeed the sort of thing you can redbox, but it typically doesn't ask you for money retroactively. It's doing this (it actually never cut me off if you're wondering; I sat there for like twenty minutes. The tops_2.wav stuff is the last thing it said) because Qwest doesn't use TOPS for operator services anymore. It's not programmed to automatically cut you off and there's no person it can call to intervene, so, well, it just lets the call go on forever. And probably raised an alarm on the console. I've never heard it myself, but the TOPS manual says it can actually get pretty aggressive; it'll call you back to try and get you to pay if you let it. I was really disappointed when it didn't. If you listen to the way it says "past", you can hear this subtle looping sound on the end of the T syllable. This is a characteristic thing the Nortel EDRAM card does - the closest we'll get to proof here that the tandem is a DMS. Funny enough, we actually do have the original files the switch is playing back; it's some form of 32k ADPCM. It's all in some sort of strange container format that nobody could ever figure out, though. If you'd like to try your luck with it though, this is the archive with all the stock EDRAM stuff. eacts0ae.bin44 has all the ACTS stuff in it: . I'll post a manual for the card at some point. The .bin44 extension implies that it's binary as per usual, but the 44 after indicates the logical record length of the file is, well, 44 bytes. tops_1.wav tops_2.wav
  20. (From Mistman) Hearthwood Elementary in Vancouver, circa 1993 Cinderella hair of yella Went upstairs to bang her fella Got in bed, the guy was dead Took an aspirin for her head Found a guy, don't know why They dropped acid and got high F'rold time sake she fucked his snake How many orgasms did she fake 1, 2, 3, 4, 5, etc.
  21. That's a fair example of where this sort of thing might make sense. For whatever it's worth, I made a program for my Dialogic box to three-way stuff in when I was living in the hotel. It's been a huge help for places where toll calls cost actual money, but as sort of a compromise like the one you describe, I made a command that makes it increment the destination by 100 numbers, hang up on the existing call, and three-way the next number in. Like for example, 432-332-0000, 0100, 0200, etcetera. It'll be a few days before I'm home. Lemme know if you want to use it for investigating the 1AESS. Also, fuck Texas/Georgia and their confusing test numbers .
  22. I haven't thought about it in a while but I see the usefulness of a program like you said but a while back I tried getting a program for what you mentioned but wasn't been able to find one. I'm using Linux which is good since from what I've seen a while back any programs work on it, but I had some issue(s) and don't recall now what it was. In any case I'd be interested in looking into it since you brought up how it can come handy with certain things.
  23. Honestly I'm the same way, but I feel like a good software scanner can be a useful tool to narrow a search. If you have a program that captures call progress and a snippet of audio, you can always note interesting things, and go back to them later. A fine example (and one I'm hoping to find software for) is getting all the interesting things out of the remaining 1A switches. Time is of the essence, so I need to be able to scan faster than I could hand-scanning... So I can spend the time hand-scanning the interesting stuff before it goes away forever.
  24. Can you believe this statistic? 45% of American internet users in 2015 stopped buying online and posting about controversial topics due to security risks and privacy concerns :



    What will become of the internet then?

  25. Personally, I prefer hand scanning since any software cannot do for me what manual scanning does such as enabling me to at the spur of the moment change what number to scan, for example I may start with 303-232-0000 through 303-232-0100, find an interesting one then suddenly decide to try scanning other possibilities around it and with added digits at the back end of it like this : start with 303-232-0000 then try 303-232-0000* then try 303-232-0000# I've done this more than once, so for me I cannot have a program make sudden unexpected decisions like this, only a manual scan works for it.
  26. No new avatar !

    1. scratchytcarrier


      NEVER interrupt dialing once started!

  27. Thanks. Now I feel whole again. The name is fine. I did have a space there but I'll just leave it since it's a minor thing and doesn't matter. Also thanks scratchytcarrier getting me the help.
  28. always nice to see people still interested in learning about hacking in a positive way.
  1. Load more activity