Attention Readers! 2600 is always looking for information that we can pass on

to you. Whether it is an article, data, or an Interesting news

item-if you have something to offer, send it to us!

Remember, much of 2600

is written by YOU, our readers. NO IE: WE WILL ONLY PRINT A BY·UNE IF SPECIFICALLY REQ'JESTED.

Call our office or 88S to arrange an upload. Send U.S. mail

2600 Editorial Dept. Box 99

to

Middle Island, NY 11953-0099

(516) 751-2600

OSUNY 2600 BBS#l

Available 24 hours a day with a wide range of information on computers,

telephones, and hacking.

CALL TODAY! 914-725-4060

We now have several ways of staying in touch with the rest of the world. As promised, the first official bulletin boards of 2600 ,llagazine are now online with more on the way.

We 're quite happy with what we've started out with. The two boards are both in area code 914, just north of,Vew York City. Board #1 is the legendary O . ..,'UVY, a BBS that has been talking about phone phreaking and computer hacking for longer than any other board that we can remember. In fact, OSUVY is mentioned on the very first page of

our very first issue. A nd it's also been referred to in Newsweek, although not very accurate/yo Board #2 is the (entral Office, anotner well known bulletin board for hackers and phreaks. We're proud to be affiliated with these boards and we'd like to ask anyone else interested in running a 2600 board to log onto these first so you can see what a 2600 board is all about.

As we've stated previously, these boards are completely open to whoever calls in. ,Yo area is off limits or for "elite" users only. There are no areas of

(continued on page 10)

STAFFBOX Editor and Publisher

Eric Corley 110

Office Manager Bobby Arwatt

Cover Art Ken Capel

Tish Va Iter Koch

Writers: John Drake, Paul Estev, Mr. French, Emmanuel

Goldstein, Chester Holmes, Lex Luthor, Bill from RNOC, David

Ruderman, Bernie S., Mike Salerno, Silent Switchman, Mike

Yuhas, and the usual anonymous bunch.

Production: Mike DeVoursney.

Cartoonists: Dan Holder, Mike Marshall.

Reader: John Kew.

Editor Emeritus: TSH.

2600 (IS.)".\ 074Y·JIi51) is puhli.lhed monthh hI" 1600 Enterprises Inc .. 7 Slr<mg:- Lane. Setauket. NY II! JJ. Sl'wn" clal.1 !i()I/aKI' l'ermitl'l'ndinK at Setauket, ,veil" York.

I'OSI"MASTER: Send address changes to 1600. P.O. Box 752. Middle Island. NY II953-D752.

Copyright' II)X7. 2600 Enterprises Inc.

\ early SUbscription: L .S. and Canada $15 individual. $40 corporate. Overseas $25 individual. $55 corporate.

Back i"ues available fllr I'IX4. 19X5, 19X6 at $25 per year. $30 per year overseas. ADDRESS ALL SllBSCRIPTION CORRESPONDENCE TO: 16l)() Subscription Dept., P.O. Box 752, Middle hland, 'Y 11'I53-D752. FOR LETTERS AND ARTICLE SlIBMISSIONS, WRI I"E TO: 1600 Editorial Dept., P.O. Box '19, Middle bland. �Y 11'153-(01)'1. lM/O Otilcc Line: 516-751-2600 BBS III (OSlI\;Y): '114-725-4060

BilS 112 (C1\; IRAL ()\'I'ICE) '114-234-3260 lJSF\;FI ADDRESS: 2600@dasysl.UUCP ARPA\;E I ADDRESS: phri!dasysl '26OO@nyu

2600 November. 1987 Pal!e3

HACKING IBM'S by Lex luthor

and The Legion 01 Hackers Introduction

IBM mainframe computers make up over 50 percent of the mainframes used today in the United States These systems are traditionally used In Industries such as insurance, banking, universities, and so on. For some reason, IBM systems as a whole have not been very popular ""Ith hackers. This may be due to the complexity of the operating systems run on IBM systems compared to others such as UNIX or VMS. Another (eClSOn may be tha t there is much varlet y ;rurn shop to shop. I BM systems are more commonly llIodlfled and customized to f it an incllviduill corpora lion's Ileeds ilnd the lack of lml'v'ersailty" for commands , files . programs ,

and oHler procedures makes it difficult to attempt to use wltilou t a ny type of speclf! c documentat ion The lack of deta iled orHlne help also hinders the hacker. I believe tilat Hle \/M/CMS Operating System is by far the best ar1d easily leamed of the IBM systems. But cOll1pared to other Operat lllg Systems like UNIX or VMS. \fM ICMS is cumbersome and harder to leall1,

Acronyms Before I even attell1pt to start this Jrtlcle , I

wili list the iBM specif ic acronyms we Will he USiilg and sorne others thJt you may find on various IBM systems, Ilist tllern here so I Will not 'lave to do it tilrougilOut the artiCle. If you need to kno,y wl1at one of them means later, just refer back to tllis list

'JM/SP: Virtual Machine/System Product CP: Control Program eMS: Conversational Monitoring System HPO: High Performance Option VSE: Virtual Storage Extended MVS: Multiple Virtual Storage TSO: Time Sharing Option JES: Job Enlry System CICS: Customer Information Control System IJSAM: Virtual Storage Access Method VTAM: Virtual Telecommunications Access Method IX: Interactive Executive IPL: Initial Program Load IVP: Installation Verification Program RSCS: R�mote Spooling Communications Subsystem DASD: Direct Access Storage Device

Page 4 Nm'ember, 1987 26()()

EREP: Environmental Recording Editing and Printing SNA: Systems Network Architecture NCCF: Network Communications Control Facility R EXX: Restructured Extended Executer language VTDC: Volume Table Of Contents DOCS: Display Operator Console System JCL: Job Control language ACF: Advanced Communications Functions SQL/DS: Structured Query language/Data System DBA: Data Base Administrator GCS: Group Control System SCP: System Control Program FOP: Field Development Program CNA: Communications Network Application POF : Programmable Operator Facility PSW: Program Status Word SSCP: Subsystem Services Control Point IPCS: Interactive Problem Control System [JCSS: Discontiguous Shared Segments IIMCF: Virtual Machine Communicalians Facility FIFO: First In First Out LIFO: last In First Out AP: Attached Processor MP: Multi-Processor R/D: Read/Only R/W: Read/Write

Logging In TYPically , wilen you cOllle across a systen1

11I1lIlillg an older version (If CMS. it will respond wltl1 VM/370 ONLINE I

ThiS message IS somewhat of a con tradict ion .

The majori ty of VM/CMS systems are rarely run 011 actual 370 systems but on other processors, such as the 43XX series and the 30 XX series

file penod ' . ' prompt is ttle surest way of vellfYlllg that you Ilave indeed cOllnec ted to a VM/CMS system, aside lrorn the "VMi370 ONliNE' message which IS usually printed. fhis prompt should not be confused with DEC's TOPS-10 system, Wilich also has !Ilf) prompt of a penod. Newer versions will giv::) you this menu

Enter one of the following commands:

LOGON userid (Example: LOGON VMUSER 11 DIAL userid (Example: DIAL VMUSER21

VM/CMS MSG userid message (Example: MSG VMUSER3 GOOO MORNING) LOGOFF

Th is menu may vary from system to system, s i n ce system m a n agers m a y o p t to om i t commands from the menu o r add others. When hack ing a system , th is menu w i l l appear before you can attempt to login, thus becoming very ted ious and t ime consuming espec ia l l y at 300 baud as you have to wai t an etemity for each logon attempt .

"Compa r ed to other operati ng systems ... V M / C M S is cumbersome

and harder to learn." Other responses after connect ing are "Ready

to H ost" , " Press break key to beg in sess ion" and " I nva l i d Switch Characters " . The last response is commonly found on Te lenet and other packet sw i tched networks, in which you may have to spec i fy "VM " for a V M / C M S system, or "TSO" for an M V SITS O system . There may be other IBM sysleills to select from , or "VM" may not be a 'lalla system. You may also have to specify lOeON VM' or just 'LOGON" before the port ,:,elector connects you to the host system.

L D(JON Cdn be abbreviated as just'L' j:" US0fi(j Cdi1 bt irornl-8 cliaracters in length. �)ut

':1st ct13racter must be a letter (in ill\l"\

�j!er)b you corne across ihis wiil be trUt;, Out clue to l.d:,loITIlza'iull of systems, it's �r:IS i1i1(J even the 8 cllaldctel password lililit may De extended) A tYPical logon olay look l i ke:

.l COMOSOU.l StSGUtSS HOlPl . , IS tile system prompt, L IS the LOCDN

command, COMOS [0 ; .; tile u:;elili. SYSGUrSS is tlie anc N01PL is t(1(: crdy

cor:cept f\ usel call bilO! (or tileir pan UI the syster!) not the whole system (in Inosl

cases ) . NOI'L wou ld be used when a system dumps you in to a program which a l l ows you l i t t le or no mob i l i ty such as a restricted menu of opt ions ( i . e., a system backup u t i l i ty) and logs you off w i thout ga in ing access to C M S. N O I PL w i l l p revent th is program from running if it is l i sted i n your automat ic I PL entry wi th in the CP d i rectory. Th i s shou ld a l low you access to the system. O therwise the program was specified to nJn with in your PRO F I L E EXEC which l ists things to be done upon l ogon . N O I PL is somewhat s im i lar but not ident ica l to the login qua l i f ier "/ NOCOMMAND" for DEC's VAXIVMS systems.

I f t h e Pas s w o rd S u p p res s i o n Faci l i t y i s insta l l ed o n the system, you wi l l receive an i nval id format message whenever the userid and password are entered on the same l i ne. This is obvious ly a secur i ty measure to prevent users from enter ing the ir password in ful l v iew of anyone who may be watch ing as the password is not "masked". Thus, you wi l l have to enter your password on a separate l ine when the system prompts you for i t. The advantage of entering the userid and password on one l i ne (especially at 300 baud ) i s that you can try more userids and passwords in a shorter per iod of t ime whi le st i l i availing yourself (1f the system's generosity of infofTIling you whefl an rnvalid userid has been entered.

Error messages There are various error messages one may

encounter while logging into a VM !eMS system. Tile ones you should be most concerned about are'

Ilserid nol ill CP dir6clnry, Wilen an invalid userid has been e: :r",(,(1, you will receive th is messa�je This rnCIC::t1 ion g ives the hacker a dic;trnct ::\rJvailtage for [Jaining entry to the system. t�le largest security hole in any :,ystern COi;iC'; (ron' te l ling the user when a val id user:<j';'�; ha�� been entered. After a l l . obtaining a ,;>iid iU I:) hall the battle. The olher ha l f is nr;ta:r,'q a valid password. Even the weakest c,ocratiil'J systems PO ionqer give an Indication of .;!"�n a v31id iD tw bee" p:rtered. Why leM haJj [11't H',;s is 3. ;llt=}t8ry to :;-�(.�c

When a valid u:,o'id I:' enteredyp,.1 Wlii �e -:1 :,I:;·�d t�) en� .�i :� �t �/ou LCd �ld; a!rp::ldy �>

dG SC i� thu COrr"?C1, the SyStt1li vvdl '';: ';0 H nui you will (f�e�\in one

or TWO messages'

2600 "�ijvemher, 1<)87 Pag� 5

US Social Security Prefixes from The Disk Jockey

001-003 Ne¥l Hampshire 440-448 Oklahoma

004-007 Maine 449-467 Texas 008-009 Vermont 468-477 Minnesota

010-034 Massachusetts 478-485 IO¥la 035-039 Rhode Island 486-500 Missouri

040-049 Connecticut 501-502 North Dakota

050-134 Ne¥l York 503-504 South Dakota 135-158 Ne¥l Jersey 505-508 Nebraska

159-211 Pennsylvania 509-515 Kansas

212-220 Maryland 516-517 Montana

221-222 Dela¥lare 518-519 Idaho 223-231 Virginia 520- Wyoming 232-236 West Virgina �21-'524 Co lot- ado 232-232 North Carolina 525 Ne¥l Mexico 237-246 North Carolina 585 Ne", Mexico 247-251 South Carolina 526-527 Arizona 252-260 Georgia 600-601 Arizona 261-267 Florida 528-529 Utah 589-595 Florida 530 Nevada 268-302 Ohio 531-539 Washington 303-317 Indiana 540-544 Oregon 318-361 Illinois 545-573 California 362-386 Michigan 602-626 California 387-399 Wisconsin 574 Alaska 400-407 Kentucky 575-576 Ha",aii 408-415 Tennessee 577-579 Washington DC 416-424 Alabama 580-584 Puerto Rico 425-428 Mississippi 596-599 Virgin Islands 587-588 Mississippi 586 Guam, Samoa 429-432 Arkansas 700-728 Railroad 433-439 Louisiana

Some numbers are sho",n more than once because they have been transferred from one state to another or have been divided for use among certain geographical locations. No ne", 700-

series railroad numbers have been issued since July 1, 1963.

These are used by credit agencies and other services ",hen verifing birthplace, tracking do",n individials, or for use in creating ne", identification.

Page 6 November, 1987 2600

listening in: catch me if you can! by The LNA Master

Are you t ired of watch ing scrambled v ideo f rom H BO and the Movie Channel, etc.? And you don't want to watch Dr. Gene Scott or Jerry Falwe l l or any of the other TV preachers? Do you feel your sate l l i te d ish is going to waste? Wel l, here's something fun you can do with i t.

In add i t ion to receiving video and audio signals, your sate l l i te dish can be used as a wiretapp ing device . Yes, some of you can actua l ly wiretap from your own l i v ing room-a fact you probably d idn't know. Wiretapping is i l legal, but as the t i t le of th is art ic le says, catch me if you can . I t's v irtua l l y impossible to detect th is part icular brand of l isten ing in.

A l l you need for this project is your basic home sate l l i te dish antenna, also known as TVRO or te levison receive on ly . What you need to do is tum to the AT&T sate l l i te known as Telstar 301. You' l l notice between Channel 20 and 23 (that is, Channel 21 and 22) you ' l l see a b lank screen as if there were a stat ion there . You won't hear anyth ing except maybe an occasional garb l ed sound.

This is what you do to l i sten in on phone cal ls. Take a general' coverage shortwave receiver (covering between AM broadcast band and 30 megacyc les) . Connect the antenna input of your shortwave to the v ideo out term inal on your sate l l i te rece iver . Tune the shortwave receiver on lower s ide band ( LSB) anywhere between the broadcast band (1.6 megah ertz) and 7.5 megahertz . Make sure your satel l i te recei ver is ei ther on Channel 21 or 22 . You wi l l p ick up more cal ls to Hawai i , Puerto Rico, A laska, and the Caribbean than you ever thought poss ib le. Who wou ld have dreamed there wou ld have been that many phone cal l s to l isten to? About every 31f2 ki lohertz there is a phone conversation. If you do not hear a phone conversation, you w i l l hear a cont inu o u s t o n e of 2600 hert z . Tune your receiver to where you bel ieve 2600 is coming in perfectly, then listen for a c l ick fo l lowed by MF (b lue box) tones fo l lowed by a ring. You wi l l then be able to I isten in on A T& T cal ls to area code 808, 809, and 907.

For frequencies above 4.1 megahertz, switch to upper s ide band ( U SB) . A lso, you can tune in Channel 8 of Telstar 301. It appears that Channel 8 on your standard sate l l i te receiver box switches

to the US Sprin t serv ice from the main land to Hawai i. Sprin t codes can be (and have been ) gotten successfu l ly by l isten ing to the cal ls. I n terest ing conversat ions are all over the p lace, such as the man from Long I s land who has two wives and was promising the second wife over the phone that she could stay in h is house i n Hawai i u n t i l he "got r i d of" wife number one.

Telstar 301 can be found at 96 W on the satel l i te d i sh. Spacenet 2, which is l ocated at 69 W is a l l US Spr int. Domest ic cal ls as wel l as overseas calls can be moni tored .

Other i nterest i n g satel l i tes are ASC1 at 128 W, Westar 2 at 79 W, and Comstar 04 at 76 W. On these, simply tune across unt i l you hit a b lank channel that looks like i t's carrying a s i gna l . Then t u n e t h e s h o rtwave rec e i ver anywhere between 1.6 and 7.5 megahertz. I f the conversat ion doesn't straighten up, swi tch to LSB or U S B on the shortwave .

THE 'TOP SECRET' REGISTRY OF

U.S. GOVERNMENT RADIO FREQUENCIES

%5 TO �70 IIIIZ 8Y TOil Kl'IEITEL. KUES

A Review of "The 'Top Secret' Registry 01 U.S. Gov8rnl1llnt Radio Freqlll/lCies"

by Mr.lcom Scanner l i sten ing seems to have a certai n

mys t i q u e amo u n g p h r e a k s and hackers, p a r t i c u l a r l y i n r e g ard s t o li s t e n i n g t o mob i le / cord less / ce l l u lar phones, and cert a i n government agencies . However, unlike mobile phones, whose frequencies are wel l known, the feds' frequenc ies appear to be h idden away from

(continued on page 22) 26()() November,1987 Page 7

the telecom informer BY STAFF

r-[ hey've done it again. This time, after repeatedly and aggressively promoting their 550 talk line

numbers (phone numbers beginning with 550 that connect callers to total strangel)), New England Telephone has devised a plan to block access to these numbers from your home for a monthly charge. This is supposed to benefit those people who listened the first time and called all those numbers in the advertisements, winding up with an incredible bill. Now that they've been given a taste of what kind of "accidents" their phones can have, a dollar or two for "insurance" isn't so unreasonable. Where have we seen this before? ... New Jersey may soon have talking yellow pages. Using a touch tone phone, subscribers will be able to call a computerized system, enter a four-digit number, and listen to a recorded message containing theater events, stock market reports, and anything else you could possibly want. The service will be free to customers. To advertise on it will cost about $!m a month ... .In Annapolis, Maryland, a man pleaded guilty to stealing long distance telephone service using his home computer, which the

550 Blocking Service

Q: Wh.t 'I !150 Btocklng Service? A:. It" , new HfVIce for ,,"Iclence customerl whO would ttb to .I!!!!!!! clll"

'rom Ihelr home telephone. 10 ,.k lines. TheM '"k Nne • .now cUllom.rs to N connecled 10 gmuP cOIWersatlon •. New �IMd ntt.phone ptOricIet the connection lind billing lor IhI cal" but I!'HI vwtou. 'Ilk 1M ..moe. .. GpefIIIed, monttor.d Mel pmmoted b¥ DlMr oomp.,.d ...

Q: Why 'I !1!50 Stocking Servtce being offentd7 A:. In orchtf to tIdd,. •• campl.nta from �t. who .. children ...,.,..ed unnpec:1ed

bill' by ceiling tllll!: line .. the o.p.rtment of PubUc utili'," Inllruet .. New Engt..s n.lephone 10 «tfMttop •• erv!CI ttl" would lltow moM � ID fMlrtot .,... to the .. MtYfcM 'ram theer home phonM.

0: How doe, S!5O Blocking Sel'¥lel wor1l7 A:. When CUltome,. lubscrlt. to 5!10 Blocking 8er¥� etIIl' "*'- from their home

'e'ephon •• 10 telephone numbers 1, ... lng wllh "5ISO" (the exc:h� lINd aclueev.rr tor 'alk I'MII) will not til; compte'ed. The r:a.... .... be InIormed .... MtCh ... cannot be oompItIled from thlll telephone.

Q: ',MO Blocilino SeMCI .,,1I1Ib1e to ..,.ryone1 It.:. No. It. 1111 of the PChlnG" whlNl Ihlt .. Mel I, � pt'eHnlly 1l'IIIIIbIe

iIpge'" on IhI b-=k 0' thl. IhNt. 550 Blocking Is avalillbll to � ............. In "' olher IXchllflgn who IUblcftbllD unltrntted , .. ,... .moe • tMir Ioc .. MMca.

Q: What III do not .ubeoftbl to unlimited ftII: .. IeIvIoI buI woutd II" to ... rtot lICe." to talk 11M.?

A: You eM e'ect 10 chen.,. your toe .. MI'YtcI to unllmn.ct ft .. rate .. rvtca No come�1on eh.-ge appH .. II you CURWItly ,ublcrtbl to In optlonll c.tRnt INn luch .. a.r 8t ... c.lllnq. Circle c.lllna, Melropoiltln CIIHng. eto. .. )'Our lac .. Mrvlee. Howevet', you wi. 10M 1M beMftta or __ ,... IIr comertlng to unltrnlted net rate Mt'VIOe.

0: How much doe. MO Blocking Service COlt? A: Thefe 'I • monthly Ctlarge 0' one doI'ar ror MO Blocktng 8ervlD& TNI .... II In

mdnlon to • monthty' cherge tor n .. rate ..... In )'OUt ... II you woukt like to order S50 Blocking ServIce or .Impty leem moN IIbout n. pi .... OIl 1 800 555-MOO, hom within Meine, MIIIUChUHtt .. N .. Hempehl", Rhode ISiend or 'lennon!. From other Iac .. lon .. pie ... cal, your New EngIw1d � ServIce ""pntaent • ..,. • the IeIeJIhOM number bted on the IIemIaIIon .. ADcounI: PIlle 01 IfIt. biN.

Page 8 November, 1987 261JO

judge ordered destroyed. An intelligent man .... While MCI and US Sprint are trying to grow and recover from their losses, AT&T is trying their best to knock them out. AT&T has started a new program for COCOT (Customer Owned Coin Operated Telephone) companies. The contract for this program insists that payphone companies route all their long distance traffic through AT&T. The companies receive between 3 and 17 percent commission depending on how much long distance usage there is. The contract also states that the phones cannot process Visa or Mastercard calls (many COCOTs now have a magnetic card reader installed), and goes on to say 950 and IOxxx calls are not allowed unless the payphone tariff re4uires them in that state. An interesting note: in New York State the only rules governing COCOTs are I) they must give free 911 service; 2) they must give free local directory assistance or have a phone book nearby (a book in the same building counts!); and finally 3) either on or around the phones there must be a number for service or complaints .... MCl is expanding International Direct Dialing. As of September 15, Israel was MCI's 5gth direct dial country. They will lease e4uipment from A 1&1' to facilitate long distance service to another 140 countries .... US Sprint now provides access to over 60 countries, while only about 20 are dialable with a fON card (Sprint's calling card service). The rest of the countries are only dialable with 1+ service. Among the countries not dialable by calling card are Argentina, Chile, Dominican RepUblic, Hong Kong, and Taiwan. (As of November 7,

US Sprint suspended international calls to the Dominican Republic from area codes 212 and 305.) US Sprint says by the end of the year they should handle over gO countries .... MCI will offer operator service in 1999 so that customers can use calling cards from a

rotary phone. Once that is established they will also offer collect calls, trouble assistance, and other operator services. US Sprint has provided operator service for a good while now. Just dial �00-332-

0777 or for you equal access nuts 103330

(107770 is now extinct) .... While both MCI and US Sprint are offering 800

service neither provides 800 directory assistance. Take 800-444-9999, an MCI 800 number owned by Mrs. Fields Cookies�we called MCI and asked them if they had the 800 number for Mrs. Fields. They told us rather matter of factly that the number for 800

directory assistance is 800-555-1212. We tried to explain that that number was for AT&T 800 numbers, but were silenced with a click. When we called 800-555-

1212, we asked the woman who answered "AT&r 800 information," if she had the number for Mrs. Fields Cookies. She said there was no listing. It just goes to show if you're going to get an MCI 800 number, you have to advertise or else no one will ever call you .... With US Sprint's ongoing advertising nonsense about hearing a pin drop over the world's only fiber optic network they neglect to mention that you can also hear one drop on every long distance company -AT&T, MCI, Allnet, lIT, RCI, Western Union (oh well, almost every company). In its continuing quest to cut over to

soon when yl'u call your access number (for the 7 digit home codes) you will hear a recording giving you a new number. This day has already come. There goes the last bit of GTE Sprint left in US Sprint. And soon they11 be selling their old network (see illustration) .... Southern Bell has a new service for Florida residents who travel. Called "The Right Touch Service", this program allows customers to disconnect and reconnect their telephone service via a touch tone phone. From anywhere in the country you can call 800-826-6290 to receive a series of interactive recordings. Callers are asked to enter their telephone number which must be in area codes 305, 813, or 904. They are then prompted for a personal access code. This 4-digit PIN number (not the calling card PIN) was mailed to customers recently. When this service was

(continued on next page) .....................................................................................

Now's your chance US Sprint is selling a9,670 mile communication network.

Some dUngs you doo't need two of. Especially two complete communications netWorks. But when GTEt'Sprim aoo us Telecom merged to form US Sprint.Iha!:'s exactly what we ended up wnh .. US Sprint is selling aD analog and digital mi.crowave network � �ces ov� 150 ma� metropolitan areas t!Jrougbout the en� Uruted StaleS. So 11 you re Jl1�ted 111 something from San Fr:mcisco to New York, CK from Bayoo Blue to Boutte, we mlgbt be able to help. Because now thal we've moved to an aU-fiber netWork, we simply don·t need our micro-wave network.

"Network 3" (originally scheduled to be �oo:i';�=��::::::;:'���::;t::.:;!..��:r,. completed by June 27, 1987), US Sprint pwcl>a>od:::::.:::ty has sent out notices to old GTE Sprint (950-0777) customers. The 9 digit codes .... �"':,."::�.:"�=��n:.';'::. .. 200 feet in height. The DwJdings 'm: fully con.nected to local (which started out as 7 digits plus a 2 power.fully�.and.va>gelOO"III""f ....

digit travel code) were replaced by a 7 ':"=;;,xp�'���or�lChosthal""'be'i"'" digit code which can only be used from .... �'::.'::ru,,"!:�.:���AnJ:':.,�"" your home town. Even these new codes mostodvoncedin<he....uileind .. tty. were only given out to customers .... ����.;z�=f=O�.::=��=;' without equal access. Until now when .... OwnedoDdlea>ed=l,,""'property""""""�Ih<he_orl<. you traveled you could still dial 950- .... :: = =";'v:

I=..!i�.:!�=i:=on

0777 and place a call without a fllW>C>olona\ys�. surcharge. Now when you leave your Uyou""m_t.,Jin""""infonnanonobounheen ... "'lWorl<,portlonsofit.ormany

-ON d d of its components. gtve us a call at

city you must use your F car an 1-800-548-4825. pay a 55 cent surcharge with each call. ................................................................................... . . The letter continued stating that one day

2600 November, 1987 Page 9

the telecom informer introduced a few months ago, cu�tomers had 3-digit PINS. It's quite possible that those first PIN's were actually the "account codes", those three numbers that follow the telephone number on the phone bill. With this service, there is no fee to turn off your phone line, but there is a $20.50 charge to turn it back on. Right Touch is available 24 hours a day and has the capacity to handle 26 callers simultaneously. While it may be a handy convenience, we wouldn't be surprised if the service got more abuse than use. Considering the amount of lines in Florida, Southern Bell may have used some sort of formula to assign the 1'11\:\, thereby avoiding the trouble of entering millions of 1'1:\\ lor their customers. It anyone finds this to be true, give us a call. Sanlord Bingham 01 CO .\laKa::illl' reported that when the service first started, he gave 305-555-1212 as his number. "I gave 999 as my code. Astoundingly it worked. The voice thanked me and began to ask questions." Since then, the system has been programmed not to accept 555, 950,976, and others as valid exchanges. On a similar note, customers of South Central Bell can dial 1-557-7777, a toll­free number accessible only to local callers, to get billing information, disconnect or reconnect service, arrange for payment, order a duplicate copy of their phone bill or custom calling services, all without having to deal with the business office. (What is left for the business office to handle'? Most likely, complaints about this new servict:.) South Central Bell started this service on a trial basis in early September with 40,000 customers in Kentucky .... And finally, we've discovered a marvelous little game you can play with Sprint representatives. If you call HOO-52 I 4949, they'll answer with the following greeting: "Thank you for calling US Sprint. By placing your order today, you will enjoy the clearest sounding long distance calls ever. My name is [name].

Page 10 November, 1987 2600

(colltinued/rolllpre\,ious paKe)

How may I help you?" I his is one of the longest greetings we've ever heard and we've made an amazing discovery concerning it. If you hit a touch tont: in the middle of the greeting, the representative on the other end automatically jumps to the word "Hello'?" It \ just like an interactive computer! Iry it today.

(('(Jilt illuedfrolll !JaKe 3) the systems where credit card numbers, ,11( I codes, or passwords are being pmted. But we refuse to put restrictions on users' private mail. A bove all else, private mail must remain private. Fven the system operator has no idea what is in each user's private mailbox-that's the only fair way to run a system. Of course, it's quite possible that someone will send a Sprint code to someone else through the mail. Or an obscene word. Or a poem. We do not take responsibility for the contents of private mail. A nd neither does the post office.

Both boards are similar in format. There are a series of room:Oi to "(,'0 TO ". Some of them are obvious, some may take a little guesswork. You can choose the rooms you want to be a part of or even create rooms. Fntry is not restricted or monitored, but you do have to know the name of the room you're entering. (This is not hard information to come by, either through guessing or asking around.) Files are also stored in some of the rooms. These are easy to look at and download.

There is plenty of online help available for users. A nd should you run into a problem of any sort, simply leave feedback or call us at (516) 751-2600. Fvery 2600 board will have an area for users to leave us public feedback. Both of these boards have a 2600 room. You can use this feature to communicate with other subscribers, offer criticism, praise, and suggestions. Of course, you can also do this privately by sending us mail.

These systems are completely free to use and full of information and

(collliflued Ofl page 21)

r-MCI MCIT'*""' ........... _ Coroor.uon Nortl'lust OIIlI"CIt' MtlOQl.llrtet'1 (: 'I, Im�lllo"al On",. j::l'l' orOOIi "i •• Vanl. laS7J 9,.a�J7.sooo

Date: November 12, 1987

IE: Account�� ________ __

A recent review of your .ccount indic.te • • po •• ibl. bre.ch in the •• curity of the .uthoriz.tion cod ••

Du. to chi. f.ct, w. h.v. ch.nl.d your .uthoriz.tion cod. a. follows:

Old Cod. N.w Cod.

!hi. ch.nl. h •• b •• n .. d. for your prot.ction .nd i. eff.ctiv. imm.diately.

If you .r. bill.d for .ny un.uthoriz.d c.ll., pl •••• circl. th ••• and deduct froa your ch.rl... 'or furth.r inv •• til.tion, th. entire invoice Ihould be returned with p.,..nt to, Met Northe •• t Divi.ion lnve.til.tion. Dep.rtment .t the above .ddr •••.

If you h.ve .ny qu •• tion. about your Mel .ccount, plea.e call:

Sincerely,

Coa.aric.l 800-444-5555 Re.identi.l 800-444-3333

MCI Northe .. t Inveltil.tion. Department

WHY DO THESE LETTERS ALWAYS LOOK SO SLOPPILY WRITTEN? In addition to their inability to spell "commercial", MCI doesn't seem to be able to make our new code work. When we called to find out why, the friendly representative told us that "effective imml.'diately" means 5 to 7 days in most cases. In addition to providing long distance alternatives, MCI now provides logic alternatives. Meanwhile, lJS Sprint still hasn't gotten around to taking away that $1200 outstanding balance that someone racked up on our account. "Just ignore it," they keep saying. That ought to be their corporate slogan. On our last conversation, they told us that we actually had a $12,000 biII a few months ago which they never sent us since it seemed unusual. And so it goes.

26()() November, 1987 Page 1 1

WHY NOT Double Beepers Dear 2600:

Re c e n t l y y o u m e n t i o n e d b e e p e r compa n ies n o t yet be i n g ra ided b y the

po l i ce for phone n u mbers. They don 't

have to ra i d th em! Accord i n g to a fr iend

who runs a l a rge beeper compa ny, the

a u thor it ies ca n, with a warra n t. leg a l ly

obta i n d u p l icate beeper n u m be rs. Any

access to the mon i tored n u m ber a lso beeps th e d u p l icate n u mber in the

pol ice stat ion.

Bob from Los Angeles

How clever. So now we have beeper tapping. But will the beeper companies be as cooperative with the authorities as the phone companies?

Why No Boxing? Dear 2600:

Apple Hacking Dear 2600:

I tho u g h t some of yo u r readers m i g h t

be i n terested i n the fo l lowi n g :

Does yo u r school have a bunch of App les h ooked up to a Corv is? We l l , if they do, th is is for you .

I f you wa n t a l l th e acco u n ts a n d

passwords a l l yo u have to do is fo l low

these s i m p l e i nstructions. Fi rst when i t

prom pts you f o r you r 1 0, s i m ply h i t ctr l ­

reset a few t i m e s . You shou ld now

have an App lesoft Bas ic prom pt. Now type in th is one l i ne prog ra m : 10 FOR 1=62 8 1 T O 7252 :PR I NT CHR$(PEEK(I ));:N EXT I

Nowtha t you h ave th at typed i n, RUN

it. The prog ram s h o u l d d u m p a l l of the

p a sswo r d s o n to t h e s c r e e n . Us e r

n a m e s a r e u s u a l l y t w o t o f o u r cha racters long. Passwords a re two

characte rs long . Al so, d i sreg a rd a ny pu nctu ation fo l lowi n g a pa ssword .

Let's say you h a d some outp u t th a t

looked l i ke th is: ... . . P 1 P 2 TYI PXX P 3 . . . ..

Th e "P 1" a nd "P2" wou ld be user 10's

t h a t r e q u i r e n o p a s s w o r d s . T h e

"TYI PXX" wou l d be user i d "TYI P",

password "XX". "P3" wou ld be the

same as "P 1 .. and "P2".

In th e cou rse of two yea rs of te lecom,

I 've r e a d co u n t l e ss G-f i l e s w h i c h

d e s c r i b e t h e ( v i r tu a l ) s p e c t r u m of

"boxes". Yet few f i les I 've encountered

g ive a c lear exp la nation as to why box i n g is i m p os s i b l e i n e l ectr o n i c

sw i tc h i n g off i c e s . Wo u l d y o u m i n d e x p l a i n i n g C o m m o n C h a n n e l

I nteroff ice S i g n a l i ng (CCI S), a n d ju st

how an e l ectro n i c off ice "prevents"

box ing? Tha n ks. That's the basics of Hack i n g Corvis Franken Gibe C o n s te l l a t i o n . Un t i l n e x t t i m e h a ve

Texas

Put quite simply, it's impossible to us e a blu e box i n a n electronic switching office under CCIS because the equivalent of the blue box tones that a phone phreak would send are transmitted over a completely different line. Since you don't have access to thes e lines, blue boxi ng no longer works. This is also called out-of-band s i g n a l i n g . For a m o r e thorough discussion. refer to page 2-7 of the 2600 1985 collection. available from us for $25. Page 12 November, 1987 2600

p h u n a nd hack on .

The Rifter

More How- To Articles Dear 2600:

I t 's been awh i le s i n ce I 've seen a n

a rt ic le on box i n g . W h y don 't you r u n a h ow - to a r t i c l e-o n e th a t a d d r e s s e s

i nte rnationa l ca l l i n g p roced u res? I ' m s u re y o u h a ve t h e capa b i l i ty o f com i n g

u p w i th a very i nformative a rtic l e o n

t h i s su bject, a nd m a n y readers wou ld

apprec i a te i t.

Tabula Rasa

WRITE US A LETTER? While we have a number of how-to

articles that we've published in the past, we'll be happy to print any new information, including new boxes, calling techniques, etc. International calling and red boxes are at the top of our "wanted" list.

A New Source Dear 2600:

I j u s t fo u n d a g r e a t s o u rce for

i nformat ion on n ews a bout sec u r ity

a nd s u c h l i ke. It 's in a q u a rter ly jo u rna l

ca l l ed ACM S I G S O FT, w h i c h is the

"spec i a l i nterest/ software" grou p of

t h e A s s o c i a t i o n f o r C o m p u t i n g

Mach i nery. The a rt i c les with i n conta i n a l o t of i n te r e sti n g i s s u e s a b o u t sec u r i ty a nd 50 on , a n d m a ny a re a lso

a m u s i n g . Read i ng these a rt ic les m a kes me

rea l i ze h ow m uch I m i ss th e news

col u m n of yo u r ma g a z i n e . T h o u g h

some p h rea ks a nd ha ckers fee l th is

stuff is just f l uff and wou ld rather see

tec h n ica l d i agram s in its p l a ce, I fe l t it

was the best part of the jou rna l . I enjoy

r e a d i n g a b o u t V M S t r i c k s to g r a b pa sswords, but I a lso wa n t t o know

about what's happen i ng i n the wor ld

out there (other tha n the latest ph reak

arrest). Vanda l - p h reaks ca u se some

damage, but I a l so f i n d i t e n l ig hte n i ng

to read i tems l i ke "Th e F B I est imates

the average theft loss from comp u ter fra uds a t $600,000 [per fraud]," as on

page 13 of th is J u ly's ACM S IGSOFT.

Yo u m i g h t w a nt to m e n t i o n t h e

existence of th is resou rce a s I suspect

there a re q u ite a few of us w i l d a n d

we i rd news ju nk ies sti l l out there i n

subsc r i ber la nd. E.H.

We still have a news column. It's called The Telecom Informer and it combines all kinds of newsworthy items into one long, rambling article.

We'll try to cover as many Interesting occurrences as we can for future

editions. For readers interested in subscflbing to A CM SIGSOFT, write to t h e As s oc ia t io n for C o m p u t i n g Machinery Inc. (ACM), Post Office Box 12 1 14, Church Street Station. New York, NY 10249. Let us know what you find out.

Pen Registers Dear 2600:

As I stated i n a prev ious letter, my

Ra d i o S h a c k pen r e g i st e r d o e s n 't

record n u m be rs when I use a cord less

phone (Phonemate).

I t wou ld be i nterest i n g to know the

m a ke of the pen reg i ster a nd cord less p h o n e t h a t "Wo r r i ed a n d Upset i n Ar izona" u ses that does reg i ster phone

n u m be r s ( S e p te m b e r 1987 l et te r s

page).

Samuel Rubin Unique Projects Dear 2600:

No one makes the fol l owing for the App l e :

1. A combinat ion speech generator, c lock, p r i nter buffer, and copy card.

Maybe even some ROM memory.

2. A 110, 300, 1200, 2400 ba ud

modem with E u ropea n a nd Amer ican

tones for 110 a n d 300 baud, a uto d i a l .

3 . A card for i nterfa c i n g a n Apple to a l most a n y h a rd d isk. Also needed is a way a ro u nd the ProDos l i m it of 2 32-

m eg d i sks per s lot.

4. A coprocessor/a ccelerator ca rd

tha t h a s a l l th ree major processors on

one card: FAS T 6502, Z-80, a nd 6800

p l u s 64K ram.

Any takers?

John Nix

(continued on page 22)

2600 November. 1987 Page 13

Page 14 November, 1987

GRAPH DEFEATS-S2o

���o�O�a�lYafea��hf:� �v:�9tt��iy:r� ��!� ra1luie��,';:a� even your llterm.rv:: If � are totallY innocent! Describes In Shocking detan what pqlygraphs are, their various uses, types of tests and questions, procedures, scoring methods\ validity and reliability, and technical aesign factors. Heavy emphasis on every known countermeasure f���c��ti to ��T��fJk�r!}f�oC:i��i�r�;� and speCiOc lIinnocen�" and "guiltyll res­ponses to typical questIO ns. *.******.*****'"

*.******.******

AND WIN -S20/Yr ..... The October 1987 Stock Market Pl�e proves that ECONOMIC COLLAPSE IS likely and soon! Are you prepared fOf. it? Or for War, Terrorlst Acts. RebelllOn, ¥iVk�S6��r,b�i�ti��ri�cr !hOa���' a�Jc���: Ma.de and Natural Disasters? For two years, we published the popular, ultimate technolo� survival newsletter. REBEL. SURV.lVEA:ND W.l:N!­sizzling and rock-fisted - includes com­puter, communication, electronic, Phoned ��g�i s�Z�i\�' A'i,nde�w t���Z\�� :gd win Now and '!be Day After in urban, suburban, rural and wilderness areas. Chock full of hard-ta-find survival info. Includes no-holds-barred editorials and articles. We need many more subscribers, feature writers, information �ontributors ��ti������r:�c�:Jl� i�u���I��n��l�rsi: Published monthly. S20/yr lridividuals, $SO/yr Corporations. S3/back issue. ;'Nl-l'H7J!J'fjfAlJIJs�RfAWJ"

VORTEX GENERATOR-SB Heat/cool with Simple, Amazing 3-Port

po�lfeiu��eslrou�O vd�g&:���, 6�acrt,:'A���d sctentlficall.y �ound. Practical. Plans. *.* •••• * •••••••

STOPPING POW ER METERS"'l0 Our all-time best seller! Describes how electric meters worka wh are

��lsith,eB'g�J�gwE� � INO INTERNAL LOAD MET Y.

IRON GON ADS-Slo most controversial and e)(Jllicit elec-�����ti���rge���lu�����f�i�:a��m!s�ed to slow down - even stop - power meters!

...............

LIBERATE GAS & WATER-sIO Describes a simple method using a com-

r:�rlg���� g�;��We"(:�ttr[g ����g� rcgis-*********."'* •• *

SECRET &

ALTERNATE IDENTITIES-sa

rs�te�C:-t��a:g th'e t�i�arr:�'ftp��Osk�t �� taining secret and alternate IDs. �ou have the legal right to have as many IDs that Y��v:�an�s Jg�g :� nin i¥:f:� �� c,:�k�� �OO% phony (and rOO� legal) passports!

*****.*********

FREE-sa , t Om�i1/ri; �h�n(!lin��tis'r��fn���t�' supermarket food, medical and hosQitai

����[t��2!���S, ;��f��,n�O:;ke;���n��:.: azines, air/bus!trainlship first class fares, software and video tapes - more! "'*"'**"'*"'**"'****

CONSUMERTRONICS • 2011 CRESCENT DR. P.O. DRAWER 537

ALAMOGORDO. NM 88310

2600

RINTER & PLOTTER MANUAL-S15

Types, Descriptions. Specs. and 100+ In­terfaces (Parftllel, Serial). Detallpq Plnns of X-5wltchers, Buffers, ft1!d Serlal-Tb-­Parallel and Pal'llllel--'Ib--..<;;erJai Breakout Devices. Repair, Maintain. Many Ally, Use and Service TIPS, Figures.

SUPER RE-INKING METHOD-ss

Rc-Ink Cloth Ribbons for about 50 ('enb and 10 1!1l�lUtes each. PlaTL'; for El (,ht>apo Motor-Driven Re-Inker. Com [!lOnly used Ink (5 Colors) and Carrier described.

***************

MASS TRANSIT TERROR-S7

Worried about Air Piracy? Bombings? Hostage Situations? Ra�h 'fraugott, F�ht #847 host!�J�tated: tlnotice that �;; �}i��;:rrt'te�����?, b� ��r7�; ��

i�a:l �t�

e�w�

e�1{f<it��� age) of their weapons pas� all airport

security. This manual descrIbes terrorist

l�g�U?os�. t�;i\\��la�?�fri���!· t(��:�e\�

TECHNICAL RESEARCH SERVICES

�Pe� ine��1;:��� �e��!���� t���1u7) j�'�t �fl���Pp��vfg:�

gk��t�e ��r��l

rrfsr�

W'f�; �:;:;r��ti�\�2 �o�

e����Js:rfJ���

e�)6

cents per page. Saves you a b mdle on R&D time, money! EducatlOnal tuol.

************** ,.

1'/(,1I5e Order 'It)(lay - Tell Your Friends About Our Ad - Keep Our Ad For Future Orders

THE CENTRAL OFFICE A full range of telephone,

radio, computer, and satellite info plus a whole lot morer

2600 DDS #2 914-234-3260

2600 November, 1987 Page 1 5

AN I NTI MATE LO O K AT ;� logon unsuccessful-incorrBct password. As has � just been stated, a val id userid has been entered 2.. but the password was incorrect . Passwords can � be from 1-8 characters long , but in many cases � the m inimum length is changed to be at least � three characters , There is no d ifference between § upper and lower case letters for e i ther the userid '� or password as they are converted to upper case � by the system , Th is is another securi ty f law as i t

reduces password poss ib l i t ies , Password incorrect-rBinitiata logon procedure.

Th is is the message received on the older vers ions of V M / C M S , which means the same thing as the above message ,

Maximum password allBmpts Bxceeded, try again latBr. The threshold has been reached for userid and /or password attempts , You w i l l receive this message every t ime you attempt to logon after exceeding the threshold unt i l a variable period of t ime (probab ly from one to f ive m inutes ) has elapsed , Th is l ocks out all users who attempt to log in to the system from that part icu lar l ine , I am not sure whether th is is recorded anywhere or whether it is sent to the system conso le , I t 's a good idea to determ ine how many attempts normal ly trigger this and keep just short of i t .

AlrBady 10ggBd on . Th is message w i l l appear when you attempt to logon with a val id userid and password and that userid is already onl ine , Unl ike other systems , VM /CM S w i l l not al low the same userid to be logged on more than once ,

Userid missing or invalid. As it impl ies , nothing was typed after entering the LOGON command , or the format for the user id was not correct , i , e , using a number as the f irst character o r a contro l character used somewhere in the userid f ie ld ,

Error in CP dirBctory. The C P d i rectory is the main user d irectory for the system , Entries in the di rectory contain the userid and password , VM I / O conf iguration, d isk usage values , assoc iated v i rtual and rea l addresses , priv i lege c lasses , v i rtual processor size , and other options for each user , Without the proper d i rectory entry , a user cannot logon to the system and wi II therefore receive th is error message,

Command not valid before logon. Th is occurs when y o u enter any t h ing o t h e r t h an t h e commands l isted in t h e men u , i , e , entering B O N E H E A D w i l l ret urn t h i s message even though " B O N E HEAD" isn't a val id command , Why this is I don't know , So don't get a l l exc i ted

Paee 16 November, 1 987 2600

th inking you found a val id command but cou ldn't execute i t since you weren't logged on,

Accounts By constantly compi l ing userids from various

systems you shou ld be able to co l l ect a nice l ist of accounts which may enable you to gain access to a sys tem , The fol lowing are a few which I have found :

OPERATOR CMSBATCH AUTO LOG 1 OPERATNS VMTEST VMUTIL MAINT

SMART VTAM EREP RSCS CMS SNA

As usual , use the usemame as the password , Th ings sti l l haven't changed from the Hacking VAXIVMS series " , peop le are just as stup id as they were a few years ago ,

There are many defau l t accounts which have the passwords l isted in some I BM system manuals , These are hard to obtain and are very powerf u l s i nce some passwords are rare l y changed , I f you can get access t o the defau l ts , i t w i l l greatly expand your co l lect ion o f systems- I guarantee i t .

Dial D IAL is used to logical ly connect l ines ,

whether they be swi tched (regu lar d ia l -up phone l ines ) . leased (dedicated ) , or log ica l ly attached (d i rect ly connected ) , to a prev iously logged on mu l t ip le-access system , The D IAL command is the only subst i tute for the logon command , On systems runn i ng more than one opera t i ng system , D I AL is used to connect the user to one of those systems, It is rather common to f ind two or more operat ing systems running para l le l or "under" one another , Th is is qu i te d i fferent from most other systems , which run alone on the machine , One mach ine , one operating system , but not I BM , The abi l i ty to have mult ip le systems running s imul taneously and st i l l provide the user w ith the i l l us ion of it being a s ing le system ( the whole idea beh ind mu l t i - tasking computers is to provide each user w i th the fu l l resources of the mach ine so qu ick ly that i t appears that he or she is the only one using the system ) sets I BM apart from most other computer manufacturers , Some of the systems which run on I BM 's are : VM/CM S , MVS /TSO , DOSIVSE , OS IVS1 , Some others

I B M 'S VM /CM S are : M U S I C , J ES , and I X /370 which is I BM 's version of U N I X that runs under V M / S P .

I t is a lways good to know what other systems are runn ing , and if you are unab le to gain access to the "primary" system , you may be ab le to gain access to one of the "secondary" systems by use of D I A L . Some systems wi l l requ i re you to speci fy a l i ne number for certain systems . Others w i l l f i nd a l i ne for you if one is not spec i f ied , assuming there are some a l located to that resource . U serids are a lso d ia lab le . In some cases you have to d ia l through a part icular userid in order to gain access to certain systems or perform certain commands . A typical logon to a D IALed system may look l ike:

. DlAL MUSICH

DIALED TO MUSICH 040

*Miscellaneous Computer Services MUSIC/SP 1 . 1

SIGN ON.

.RESET

DROP FROM MUSICH 040

VM/370 I

When it comes to f ind ing a val id l i ne number for systems that can be reached via D I A L , you cou ld be in for some trouble . I f the system requ i res a l i ne number to be entered (un l ike the above example , where l ine 040 was found automat ical ly) , you w i l l not only have to come up with a defined l i ne number, but one that is assoc iated wi th the system you are attempt ing to access . Usua l ly you can f i nd this information after l ogg ing onto the VM/CMS system in various f i les , but i f you cannot get i n , you w i l l have t o sequent ia l ly enter l ine numbers . Some that I have seen are 001 , 01 B, 41 A , 040 .

The V M / C M S system does not appear to l im i t the number of D IAL attempts a user can make , u n l i k e L O G O N at tem p t s . Programm i n g y o u r micro t o search for a val id l ine number to a system should work with no problem .

To drop the d ia led connection just type RESET.

Error Messages linels) not available on 'sysname'. Ei ther there

are no I i nes a l l ocated to the system , or you must enter a correct l i ne number.

Invalid device type 'sysname' 'lina#'. You have entered a val i d system or userid and l ine number, but the dev ice you are on ( the terminal ) is i nval i d . I n th is case , a G RAF (Graphics) device , system console , or 3270 term inal may be the only val id device .

'usarid' not loggad on. The D IA L command cannot be executed un less the user (or system) specif ied is logged on .

' l ina#' does not exist. A val id userid /system has been entered but the l ine number for that userid/system is not val i d .

Massage M SG is used to send messages to users who

are current ly l ogged on. Th is command can be issued before ( if specif ied by the logon menu) and after logg ing i n .

MSG OPERATOR Helpl I lost my password I My usarid is COMOSOLO.

Th is w i l l send a message to the primary system operator of the system . If there is on ly one CLASS A user on l ine, the message wi l l be sent to h is terminal .

MSG *

Th is w i l l send a message to yourself . This is usefu l for ident ifying the current userid of an abandoned terminal .

Logoff The LOGOFF command can be abbrev iated as

L O G . After logging off you wi l l receive the fol lowing :

CONNECT= 00:33:54 VIRTCPU= 000:00.28

TOTCPU= 000:01 .76

lOGOFF AT 1 7 :05:44 EST THURSDAY

04/ 1 6/87

C O N N ECT is the actual c lock t ime you spent wh i le on the system . V I RTCPU is the v irtual CPU t ime that was used . TOTCPU is the total CPU time, both v i rtual and overhead , that was used .

The HOLD command w i l l hold the connection

(continued on next page) 2600 November. 1987 Pale 17

PLAY I N G WITH I B M 'S VM /CM S -;; a l l owing you to re- Iogon agai n wi thout hav ing to Shows users how many invalid password allBmpts have � re-d ia l the system . occurred on their userid � Increased file security ;:I .2 .LOG HOLD ;. '" .. 0.. Security Softwan § There are v a r i o u s weaknesses w i t h i n

� VM /CMS both intema l l y and extemal l y wh ich 1 can b e exp l o i ted . For t h i s reas o n , v a r i o u s . � software security packages have been written . =: There would not be a need for these in most cases o � if the people in charge of system secur ity knew

what they were doing . Anyhow , these packages do p ro v i de added sec u r i t y when p ro p e r l y imp lemented . The most commonl y found are VM S EC U R E and AC F2 . TO P S E C R ET and RAC F a re o t hers w h i c h a re l e s s c o m mo n . These

Logged On After logg ing on you may recei ve someth i ng

s imi lar to the fo l lowing :

OASD 1 90 LINKED R/O; RIW BY MAl NT; R/O BY 030 USERS

LDGMSG 1 0:40:25 EST FRIDAY 05122/87 WELCOME TO MISCELLANEOUS COMPUTER

SERVICES VM l SYSTEM WILL B E DOWN FROM 1 0:00 TO 1 0:30

EST SUNDAY MAY 24, 1 987

packages are eas i ly ident i f ied . Logon at 1 3 :22:59 EST FRIDAY 05122187 After entering a val id userid VM S EC U R E VM/SP REL 4 04120/86 1 1 :33

responds wi th :

VMXACI I D4R Enter logon password: * * * * * * * * * * * * * * * * * * * * * * * * * *

HHHHHHHHHHHHHHHHHHHHHHHHHH SSSSSSSSSSSSSSSSSSSSSSSSSS

One way to pos i t ive ly identify the use of V M S EC U R E i s by us ing it as a userid . If it is running it w i l l be a val id user id , and who knows , you may even hack the password .

After entering a bad password , ACF2 (Access Control Fac i l i ty 2) responds with :

ACFV1 0 1 2 PASSWORD NOT MATCHED ACFV0044 ACF2, ENTER PASSWORD

* * * * * * * * * * * * * * * * * * * * * * * * * *

HHHHHHHHHHHHHHHHHHHHHHHHHH SSSSSSSSSSSSSSSSSSSSSSSSSS

These packages prov ide i nformat ion which should be i nherent w i th in the operat ing system i t se l f . Perhaps newer vers ions of C M S w i l l conta in them . Some o f these features are :

Last logon date/time Password expiration Rules for password selection Invalidating userids for invalid password allBmpts Inval idating terminals lor invalid password allBmpts

Page 1 8 N ovember, 1 987 1600

R; T=0.0 1 l0.01 1 3 :23: 1 0

Line #1 : Th is l i ne shows that the d isk at v i rtual address 1 90 i s l i nked with RIO access by you , R/W by userid M A l NT and R I O by another 30 users .

L i ne #2 : Th i s shows that the logon message was created at 1 0 :40 on Friday . L i ne #3- 7 : Th is i s the message that i s shown to a l l users of the system upon logging on . Some systems may not have one .

L ine #8 : The actual t ime of logon is pr inted . L i ne #9 : The current R E L EA S E of V M / S P and

the t ime and date i t was i nstal l ed i s shown . L i ne #1 0 : Th is is the ready message and it i s

pr inted after every command i s performed where : R= Ready-th is ind icates that the system i s ready f o r i n pu t . T = Time-the f i rst series of numbers te l l s how long it took the system to perform the l ast task . The second set of numbers g i ves the t ime of day . I f you do not recei ve the ready message you are i n CP and must I PL C M S i n order t o issue CMS commands .

L ine #1 1 : The system prompt-you can now enter commands .

Privilege Classes As wi th most other operat ing systems , a user

must have suff ic ient pri v i l eges i n order to exec u te certa in commands . Every CP command belongs to one of e ight I BM def ined pri v i lege c lasses . The CP d i rectory def i nes which users

(continued on page 20)

2600 marketplace WANTED : Any h acker a nd ph reaker softwa re for IBM compat ib le a nd H ayes compat i b l e modem . If you a re se l l ing or know a nyone who is, send rep l i es to Mark H . , P . O . Box 7052, Port H u ron, M I 4830 1-7052. F O R SA L E : O k i d a t a M i c r o l i n e 92 perso n a l p r i nter . I n c l udes m a n u a l for i n st r u c t i o n s . H a r d l y u s e d . M a ke a n offer a nd i f i t 's reasonable, I wi l l pay postag e . Matt Ke l ly, 310 Isbe l l , Howe l l , M 1 48843. S U M M ERCON '88-com i n g to NYC . Watch t h i s space for more i nfo. TAP BACK ISSUES. Comp l ete set, vo l . # 1 to a n d i n c l u d i n g v o l . # 9 1, i n c l u d i n g s c h e m a t i c s a n d s p e c i a l reports . Copies i n good to exce l lent cond i t i o n . $50. 00, no checks, i nc l udes postag e . T. Genese, 219 N. 7th Ave . , Mt . Vernon, N . Y . 10550. DOCUM ENTATION on e l ectro n i c and d i g ita l switc h i ng systems a n d PBX's. W i l l i n g to p u r c h a s e / t r a d e . A l s o l ook i ng for other paraphern a l i a such as Be l l System Pract ices . Write to B i l l , c/o 2600, P.O. Box 752C, M iddle I s l a nd, NY 11953. BLUE BOXI N G ? Let 's exchange i nfo on phone n u m bers, pa rts, a n d etc. Write to : B l u e Box, P . O . Box 117003, B u r l i nga me, CA 94011, Attent ion D . C . F O R SALE: 8038 m u lt i - p u rpose tone generator c h i ps, p r i m e q u a l ity $7 . 50 e a c h p p d . I n c l u d e s c o m p r e h e n s i v e a p p l i c a t i o n s d a t a . Two c h i p s w i l l generate a ny d u a l tone format . These a re no longer in prod uct i o n . G et 'em wh i le they l a st . B r u ce, P.O. Box 888, St i nson Beach, CA 94970. FOR SALE : Radio Shack C PA- 1ooo Pen Reg i ste r . J u st l i ke new. $70.00. J . C . D ev e n d o r f, 29261 B u c k h a ve n , Lag u n a N ig u e l , CA 92677 - 1618.

FOR SALE : Ex- Be l l b l u e boxes, old and sty l i s h , may even work ! Also a wide range of o ld Bel l comms eq u ipment. Ca l l (514) 288-6731 a nd ask for R ick for deta i l s . DO YOU HAVE old outdated computer eq u i p m e n t l y i n g a ro u n d g a t h e r i n g d u st? Why not donate i t to 2600's g r o w i n g b u l l e t i n b o a r d n e t w o r k ? S u pport freedom of speech i n you r t i m e ! Contact 2600 at ( 5 16) 751-2600 or wr i te 2600, PO Box 752, M idd le I s l a nd, NY 11953. F O R S A L E : SWT P C M o d e l CT-82 i nte l l igent v ideo term i na l . Completely p r o g r a m m a b l e ( 1 5 0 s e p a r a t e fu nct ions), RS- 232C & para l le l pr i nter ports, f u l l ASC I I keyboard w/cursor control pad, 9" P- 31 C RT w17x12 dot matr ix-u p to 92 col u m n capa b i l ity, 32 baud rates to 38,400-m uch more. E x c e l l e n t c o n d i t i o n w i t h f u l l docu mentat i o n . O r ig i n a l ly $800, se l l for $125 o r best offer . Bern ie Sp indel, 144 W. Eag l e Rd. , S u ite 108, H averton, PA 19083. 2600 M E ET I NGS . Fr idays from 5-8 pm at the C i t i corp Center in the Market ( l obby where the tables a re )-153 East 53rd Street, New York C ity. Come by, drop off a rt i c l es, ask q uest ions. Ca l l 5 16-751- 2600 for more i nfo. GOT S O M ETH I NG TO SE Ll? Looking for someth i ng to buy? O r trade? Th is i s t h e p l a ce ! T h e 2600 M a rketp lace is f ree t o s u bs c r i be r s ! J u st send us whatever you wa nt to say (without m a k i ng i t too long) and we ' l l p r i nt i t ! O n ly people p l ease, no bus inesses. Address : 2600 Marketplace, P .O. Box 99, M idd le I s l a nd, NY 11953. I nc l ude you r address l a be l . Deadline for December issue : 1 2/5.

2600 November, 1987 Page 19

HAC KI N G I NTO I B M ' S � can use which c lasses of commands . Each user :::- has one or more priv i lege c lasses , as does each � C P command . If you try to i ssue a command that --., ::: does not match the assigned pri v i lege c lass of the 2 userid you are using , the system w i l l not process :; the command . As far as I know , no records of � attempts to use pri v i l eged commands are kept . .� Here is a rundown of c lasses A through H . :s Primary System Operator: The c lass A user has

� the abi l i ty to control the system . Any user who uses the V M / S P system conso le possesses th is p r i v i l e g e c l ass . Th i s user c a n b roadcast messages , contro l system account ing , and i ssue commands which affec t the overa l l performance of the system .

System Resource Operator: The c lass B user has the ab i l i ty to cont ro l a l l the "real " resources of the system , except those contro l l ed by the spoo l ing and primary system operators .

System Programmer: C l ass C users can mod ify rea l storage as opposed to v i rt ua l storage .

Spool ing Operator: The c lass D user controls spoo l ing data f i les .

System Analyst : ( C l ass E ) M o n i t o rs a n d i n terprets system performance data

Service Representative : (C lass F ) Th is c lass IS l lSua l l y g i ven to accounts that I BM F ie ld Serv ice personnel use for upda tes and a lso for d iagnos ing system prob lems

Genera l User: C l ass G usels are Hle mos t p lominent on the system . Th iS pr i v i l ege a l lows the user to control func t ions ; lssocialed W i t h ' l it; ; ' Dwn v l rtua l , llach ine

AllY: The Any c l ass i f i ca t ion IS g i ven to cer ta in C P cOlllrnamis wh ich a r e ;wadab le to any user

TIle commands are usua l l y l im i ted to LO\j 1 1l and Logoff

Class H I S reserve{j for I BM use Due to the i nd iv idual needs of a S i t e , pri v i lege

c lasses can be ta i l o red to s u i t the fac i l i t y . A to ta l qf up to 32 c lasses can be nlade . They wou ld he sl lown i n the CP d i rec tory as A- Z and 1 -6

Some typ ica l pr i v ilege c lasses for a few r;ommon IIscnds are C lass A for O P E RATO R , C l ass F tor E R E P , C l asses B , C E. G fO I ( ) P E RA TN S anIi C ! asses A , B . C [) E , F , G fo� M A l f H

Commands f'. Ullllrk1l1ds drc ' , 13(;e up of CO lll ; l land nal iiC:,

;}IId ophcns . Command Name : A cOl nrnan!i [ la i "I' h : ', ; 1

I'a g<> 20 "m emher, 1 9N7 2601!

alphanumeric symbol of up to 8 characters . Operands: These spec i fy the i nformat ion on

which the system operates when i t performs a command funct ion .

Options: These keywords are used to control the execut ion of a command . When used , they must be p receded by a left parentheses , but a c los ing one is not necessary

D i fferent commands are used wi th in d i fferent env i ronments . To see which env i ronment you are in , s imply h i t retum at the period prompt . You w i l l receive one o f the fol lowing C M S , C P , XED I T .

There are many commands that are usefu l t o both regu lar system users a n d hackers , H E L P i s ava i lab le on some systems , part i cu lar ly on un ivers i ty systems . I t i s extensive but not as c lear as U N I X or VMS . Th i s i s typ ica l of I B M . Neverthe less , H E LP i s usefu l and you shou ld get hardcop ies of as many commands as you can . AI D is another foml Of H EL P which may be usefu l t o YOll i n leam ing more about the system .

One n ice feature of C M S H EL P is that when you receive an error message, you can :

. HELP OMSOOOOOO or OMKOOOOOO

Where D M SOOOOOO or D M KOOOJOO is t he error message you have rece ived . The system w i l l t hen exp la i n wllat it I S , w ily it happened , and how you can correct i t

! elm gO ing t o ho ld off on exp la in ing any and a l : �ommands re la ted t o mln id isks u n t i l tile next Sf�c:t I (Ii The others which I have found to be use tu i dre as fo l lows .

You C:11 1 I ssue any C P command wh i l e in e M S by precl ud ing tile command wi th CP

Ouery Ouery a l lows you to obta in var ious b i t s oj

I Il fO inlat !on about the system . A fu l l l i st can be found by using H EL P .

One of t h e most important Q U ERY commands for the Ilacker is

.0 NAMES

OPERATOR-O l F, SMART-[JSC CMSfl349-B27 , LOGOO I 80--B3 1

\lSM - · IjMVS I

5COTT· _·TP l l WfMZ , CMS 1 2 ! l · TP ! i WHi4, IJPH1ATNS,- TP l l WFY l II: T ·O .G I /0,0 ] 1 1 :34:28

There can be many users on l ine ; usual ly th is l i st w i l l conta i n f rom 30 to 1 00 users . The last user on l ine was O P E RATN S , s ince i t was last in the l i s t . The S M A RT userid i s D S C , or i n a d i sconnec ted state . U sual ly a tenmina l w i l l remain d i sconnected for 1 5 t o 3 0 minutes and then i s tota l l y logged off the system . I f you logon to an a l ready d i sconnected tenmina l , the system w i l l rep ly wi th " R ECO N N ECTED AT t ime" . The other 2 userids on the same l i ne as S M A RT are probably connected tenm i na ls which are in a pre­logged i n or pend ing logon state . VSM-VMVS1 IS another system r·unn ing paral le l to (or under) CMS

The QU ERY N AMES command a l l ows you to ga in a l i t t l e more secur i ty for yourse l f on the sys telTl . I t a l lows you to gain more va l id usemamcs to attempt passwords for i n the unfortunate event that your curren t uselld d ies . .I\notller use I S tilat you can start to comp i le your . cornrnon accounts" l i st of userrds wtl ich are found o rl VM /CMS system s . Th is l i st shou ld get larger and larger as you gain access to more and more systems and w i l l a l l ow you to gain access to more systems as it gets larger .

I f you can ' t count how lTlany users are on l i ne f rom the 0 N AM ES l i st . Q USERS 0007 USERS, 0000 DIALED. 0000 NET

If YOLI d idn ' t catch the logon message you can v i ew It aqain by .Q LOGMSG

10 see wrlat re lease oj CMS tl lc system I S . .Q CMSLEVEl

VM/SP REL. 4, S ERVICE LEVEL 4 1 7 I I you al e wOfl(lennQ Wil ich IBM II liilnfrarne

eMS IS i U : l il l l ilj ,HI . YOl! can I SSLIe .0 CPU!!] no 1 4"f23438 1 0000

Til lS can be i n tt;IT' ret(�d as fo l l ows

CPUI!J�' aabbbbbbccccdddd ad ;-" " F F '" w'i"j8fl runn! n� Viv1 / S, P bbbbbt-F�the

piOC8%lil i [) i i l lmber . cccc=, l lle mooel i iulnber of the I ;] t l 8 ctbIJVC case . U,,1 S an ! i.Hl 4 3 8 1 ddcid:�- " GOOO" T I � i : used f 0 ;- ::� r ,

SEN D F ! L L a ! ! : iW" YO:I to s0nd f ijr3S W: t : l ! 1I dny rn rn i d l�;k tt l;] t I S cu rren t l y accessed VOd to ano t iler use! . Any t i me you send a f i le an entry IS

made i n �he t i le U S E R I D N ETLOG (where U S E R I D i S t . . e user you are send ing the f i le to ) . Th is command i s also u sed for send ing N OTE f i l es wh ich can be created with an ed i tor and sent to whomever as E-MA I L .

I f you are t i red o f see ing a text l i st ing , o r have attempted to read a compi led program and wish to exi t or break out of i t , s imp ly h i t a hard-break , and then type H X H X i s for Ha l t eXecut ion . I t w i I I h a l t whatever you are doing and p u t you back i nto the C M S env i ronmen t . It may take a few l i nes of text after entering i t for the system to stop the process

This article will be concluded in the December Issue of 2600.

(cont inued/rol l l page j{))

interesting user.,. The number for mws l', 2MJO Board #/ l\ 9/4-725-4060. The ( entraI O.fjice, 2600 Board tt2 is reachable at 914-234-3260. If you get a busy signal, just keep trying. Unfortunately, the 9/4 area code is flO/ yet reachable on P( PUr.<iuit, the service offered by US "';'print that allows unlimited computer time across the country for $25 a month. L et them know you want the 9J.1 area code added-their number ;.5 800---835-3638-so we can all save on phone bi/k /1 nd keep check. ing for future 26(}() bulletin boards ill other areas,

While we 're Ofl the .mbj£·ct of bulletin hoards, W(' should paid out thai the old Private Sector phone number in .Vew .Ieney is 110 longer ill use. It's ponible we may have sent mIf HJme information to new subscribi n with that number. If yOIJ recei.ni mell propaganda, I'lea.\e disregard it.

* * *

Ttl Nldifiou to all of this, we flOW have an ilddrn.' rm the infamous "worldnet " Ji.�n.t.,sed in the ." eptember 1 987 issue of 2MJO. lf yoll know how to manellver Four way arow!, ! the networks, you can send mail to us tit ow· UHmet addf('5S (�f' ;;61){}@ da�y,l , l!U( P ar our A rpanet address oj phri! dosysl !26()O(TlJ nyu. If you IIm'e dijficll!ly �endiflK to liS at these addre.ues, let U5 k,W\lJ,

260{) November, 1 987 Page 2 1

LETTERS (COlllilllledji-ol l l lJ(Jgl' I J)

TAP is Dead! Dear 2600 :

C a n you te l l me i f a n e ws l ette r s i m i la r to you rs ca l led TA P is sti l l be i ng

p u b l i s h e d a n d i f so, wh a t i s the i r address?

D . l.

N ew York

TA P no longer exists, although back

issues are b e ing s o ld b y differen t

people (check the 2600 Marketplace).

A s far as we know, 2600 is unique in

subject matter and approach, although

t h e r e a r e s o m e o t h e r h a c k in g

publications-some good, some bad.

Look for reviews in future issues.

In last month 's letters column, a

reader told us that the 8038 chip used in our 1 985 blue box schematic

was n o longer a vailable . Se veral

readers h a ve n otifie d us to claim

otherwise. We understand the chip is

obtainable through Janeco Elec­t r o n ic s in C a lifornia (a sk a n y

electronics store for their number) at a cost of around $3. 95.

listening in � prying ears . probab ly for reasons of secur ity . The %:: t ruth is that fed frequencies are as wel l known as 2.. "regu lar" frequencies . A company ca l led C R B ::.: Research , known for publ ications on surve i l lance � and electron ics, has a book cal l ed "The Top > Secret' Registry of U . S . Govemment Rad io � Frequencies" by Tom Kne i tei . Th is book contains � the frequenc ies , cal ls igns , and rad io codes of 2 every U . S . Govemment Agency in existence ,

'- including such agencies as the F B I , C I A , D EA , and of part icular interest t o phreaks, the Secret Service. Earl ier ed i t ions of th is gu ide were bound computer hardcopy w i t h every t h i n g l um ped together and sorted by frequency . Th is made for something which was d i ff icu l t to read , and d i f f icu l t to use . However, it st i l l remained the de-facto scanner gu ide to the feds , and was very popular .

Page 22 November, 1 987 2600

The recent ly pub l i shed ( 1 987 ) sixth ed it ion has e l im inated the readab i l i ty prob lems, and has added more non-frequency information which makes for an excel lent pub l ication . I nside the 8 11z x 1 1 " , 1 9 2 - p age book , t h e re is an a lphabet ical l i st ing of the various agencies Further de lv ing i n to the book we f ind that each agency l ist ing is d iv ided into sect ions contain ing f r e q u e n c y / f r e q u e n c y u s e , t r a n s m i t t e r l ocat ions/cal ls igns , and , when avai lab le , the various codes and s lang used by the part icu lar agency. ( Rawh ide w i l l arrive at Curbside rather than Pivot . ) A part icu larly in teresting section c o n t a i ned the l i s t i n g s for the U . S . Secret Serv i ce . Among t h e f requency / f requency codename / f requency use da ta was a l i s t c o n t a i n i n g the codenames used f o r the president ia l staff , f i rst fam i l ies , and other re lated informat ion . D id you know that Amy Carter's codename was "Dynamo" ?

The Top Secret Registry is a n exce l lent book and is h igh ly recommended read ing for those i nterested in l i sten ing to those who are l i sten ing to you . I t 's avai lab le for $1 6 . 95 from CRB Research , P O . Box 56 , Commack , NY 1 1 725 .

And by the way . . . . here are some rather act ive federal frequencies ( I n megahertz) Secret Service: 1 65 . 375 : "Charl ie" nationwide primary channel 1 6 6 . 462 5 . "X - R ay" common c h a n n e l f o r Treasury Dept .

State Department: 409 . 625

Justice Department: 36 . 07 41 1 . 025

General Services Administration: (protection of federal buildings) 4 1 5 . 2 4 1 7 . 2

Drug Enforcement Administration: 4 1 6 . 05 , 41 6 325 , 41 8 .75 , 4 1 6 . 2

COR R ECTION : In last month 's l i st of mass a n nou ncement n u m bers, we neg l ected to ment ion that they cou ld a l so be reached from a rea code 7 1 8.

PHONE N UM B E R S OF I NTER EST: 2 1 2 - 2 2 2 - 8 1 08 . . . . . . . . . . Parents U l 1 ited 7 1 8 -343-0 1 30 . . . . . . . . . . . . Scra mbleFax 800- 223-333 1 . . . . . . . . . . . . . . . . A Bank 0 1 1 - 6 1 - 3 - 692- 2982 . . Record i n g , wi ld tone

N OTI C E

Does yo u r add ress l a be l s a y "T i rn e to R e n ew " ? D o n 't rn i ss a n i s s u e . R e n ew yo u r s u bsc r i p t i o n today a n d e nj o y peace o f rn i nd . S i rn p l y i nd i cate t h e a rn o u n t e n c l osed a nd wh i c h , i f a ny, back i s s u e s yo u wa n t . Yo u r a d d ress l a be l s h o u l d be o n the back of t h i s forrn .

$ 1 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 yea r of 2600 $ 2 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 yea rs of 2600 S 4 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 yea rs of 2600 $ 40 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 yea r co r p o r a t e s u bsc r i pt i o n $ 7 5 . . . . . . . . . . . . . . . . . ' . 2 ye a r c o r p o r a te s u bsc r i pt i o n $ 1 '1 0 . . . . . . . . . . . . . . . . 3 ye a r c o r p o r a t e s u bs c r i pt i o n $ 2 5 . . . . . . . . . . . . . . ove r s e a s s u bsc r i pt i o n ( 1 yeCi r on l y ) $ 5 5 . . . . . . . . . . . . . . . ove rsea s c o r p o r a t e s u bsc r i pt i o n ( 1 yea r o n l y ) $ 2 60 . . . . I i fet l rn e s u bsc r i p t i o n ( n ever a g a i n w i l l w e bot h e r yo u )

B a c k i s s u e s a re a va i l a b l e . P r i ce s a re :

$ 2 5 . . " " . . . . . . . . . . 1 9 8 4 , 1 98 5 , o r 1 986 i ss u e s ( 1 2 pe r yea r ) $ 50 . . . . " : . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . . . . Any two yea rs $ 7 5 . . . . . . . . . . . . . . . . . . . . . . . . . . A l l t h ree yea rs ( 36 I s s u e s ) (Ove rseas orders add $ 5 for each ye a r orde red ) A l l ow 4 to 6 weeks for d e l i ve ry .

S e n d a l l o r de r s to : 2 6 00 PO Box 7 5 2 M i d d l e I s l a n d , N Y 1 1 9 53 U . S . A . ( 5 1 6 ) 7 5 1 2600

- - - - - - - - - - - - - - - - - - - - - - - - - - - - -

A M O U NT E N C LO S E D F O R S U B S C R I PTI O N : __

AM O U N T E N C LO S E D F O R BAC K I S S U E S : __ _

1 9 84 1 9 8 5 1 9 8 6 ( c i rc le yea rs ordered ) TOTA L AM O U N T E N C LO S E D : __ _

(clip and send to us- your address is on the back)

CONTENTS I

2600 BULLETIN BOARDS . . 3 IBM'S VM/CMS SVSTEM . . . 4 : II

S.5. PREFiXES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 LISTEN ING IN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 TELECOM INFORMER . . . . . . 8 I

LElTERS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 2 2600 MARKETPLACE . . . . : . . . . 1 9

2600 MaQazlne P0 8ox 7S2 MIddle Island. NY 1 1953 USA

WARN ING: MISSING LABEL