That '70s Phreak 2023

This is a simulation of of the Bell Call Equipment used in the '70s to route calls over the Telephone Network.

You can call a 37C3 Number that will be routed from the Congress in Hamburg to That '70s Call in Berlin, Germany. After your call goes through you can send a 2600Hz Tone over the telephone line. This will reset the ongoing call without disconnecting the Long Distance Connection to Hamburg. You can now send Multi Fequency Tones representing a Number. The equipment will dial that number and connect you.

You can phreak the past!

https://en.wikipedia.org/wiki/Phreaking

Blueboxing

This was known as blueboxing.

In the '70s long distance calls were expensive. Using a Bluebox you could place a long distance call without getting charged. You would dial a Toll Free 800 Number from your local exchange (like 1+800-555-1212) that would get routed over a 2600Hz controled long distance network.

Now Sending 2600Hz would signal the long distance switch that the line is idle again. For the local exchange the connection was still ongoing. Removing the 2600Hz Tone would resize the trunk giving you a handshake. The long distance switch is now aspecting MF digits to establish a new call and, when receiving it dial that number.

You would send: KP + (AC) (RC) (RC) PX-Number + ST

You would not be charged for the second call since for the local exchange this is still a toll free call.

AC (Area Code) NYN
N (2-9)
KP (Key Pulse) = Begin of Dialing Sequence
PX (Prefix) NNX
RC (Routing Code) YNX = Desination Trunk
SF (Signal Fequency) = 2600Hz
ST (Signal Transmitt) = End of Dialing Sequence
X (0-9)
Y (1 or 0)
Z (1-9)

Here are some links to more information:

Videos on Youtube

How to Bluebox That '70s Call

In order to phreak this network you need:

. 1 Telephone Line to make calls
. At least 1 Telephone Number to call
. A device to generate Frequencies, a Bluebox
. The Routing Code for you desitation Trunk
. Probably a lot of pacience before it works

Please call the Operator if you need help or if you have questions. The Operator will assist you and can give you a Guided Tour how to phreak this network.

The Operator speaks English and German.

Generate the fequencies

The easyest way to do this is of cause a Bluebox. In case you don't have one you can try the following:

Use a Sound Programm for your OS that can generate frequencies:

Browser https://phreaknet.org/bluebox/
Linux http://blueboxing.org/beepbeep.tar.gz
~~ProjectMF (Win) https://projectmf.org/downloads/bluebox_winxp.zip~~

Use a Blue Box App for your Device:

Or you can build your own Blue Box:

Project Bluebox https://projectmf.org/bluebox.html

Video Demo

AFu gave it a try and he did publish these videos on Youtube:

Tape Recorder Phreak https://www.youtube.com/watch?v=EROYZ-_p90A
Browser Phreak https://www.youtube.com/watch?v=M6mRGZpS9jA

24h-Live-Video-Stream

The 37C3 is over and the live video stream is off.

Please contact That '70s Operator for a free live video demonstration.

When you start bueboxing and sending signals you should be able to see what was actually received.

https://bbb.cyber4edu.org/b/per-cnt-3vj

It is not nessasary to turn on your Microphone or your Camera.

Call Status: () IDLE — Call Status:

sunset '' -> () IDLE

'' -> () IDLE

Befor you start phreaking please make sure that osmo-cc-r1-endpoint & osmo-sip-endpoint are running:

Let's Phreak!

I. Call 7101

When calling from EPVPN or 37C3 please dial: 7101

When calling from the Outside please dial:

~~[ +49 40 573-0830-7101 ] 37C3 (Hamburg DE)~~
[ +49 30 555-7100-7101 ] That '70s Phreak (Berlin DE)

This should establish a connection from the 37C3 in Hamburg via SIP to That '70s Call in Berlin.

There is currently one 2600Hz controlled trunk available. If it's in use this original '70s recording will be played:

"We're sorry! All long distance company circuits are busy now. Wi'll you please try your call again later."

Call Status: sunset() 'a1707101c' -> (KP1-1707101-ST) OUT ANSWER :: 'a1707101c' -> (KP1-1707101-ST) — Call Status:

sunset '2792' -> 'a1707101c' (KP1-1707101-ST) OUT ANSWER

'' -> 'a1707101c' (KP1-1707101-ST) IN ANSWER

Berlin receives the incoming SIP call and will check on how to route the calls to its destination 7101.

It then prepends the routing code 170+ before the number and sends the dialing sequence:

KP-170+7101-ST

The equipment sizes trunk #4 (170) and sends 7101 to the desation. The trunk lamp will lid.

II. Call in Progress

We have now established a long distance call. Extension 7101 is ringing and you should hear the ring-back signal.

III. Reset the Trunk

Now send 2600Hz over the line.

The equipment should reset, releasing the trunk, and the lamp goes off.

As long as 2600Hz is presend the line remains idle.

Call Status: sunset() '2792' -> 'a1707101c' (KP1-1707101-ST) OUT HANGUP :: '' -> () IDLE — Call Status:

sunset '2792' -> 'a1707101c' (KP1-1707101-ST) OUT HANGUP

'' -> '' () IDLE

Please note the Call Status: While the connection from Hamburg to Berlin is still in progress, Berlin has droped its connection to Extension 7101 and is idle.