STATION ID - 7047/3.12

9x Datakit Network
FOR OFFICIAL USE ONLY

This is a 9x system, restricted to authorized persons and for
official 9x business only. Anyone using this system, network or data
is subject to being monitored at any time for system administration and
for identifying unauthorized users or system misuse. Anyone using this
system expressly consents to such monitoring and is advised that any
evidence of criminal activity revealed through such monitoring may be
provided to law enforcement for prosecution.



				HOSING AMPS
				    By
				 Xram_LraK

			  Best viewed by VI or pico


In my many travels through the RF world I have only stumbled on a few very
interesting phenomena.  Most of these phenomena involved things in the analog
cellular realm.  Interesting phenomena ranging from tumbling, to cloning, to
vampire phones are all very interesting but not at all amusing or down right
fun.  They involved a calculated risk of dodging cops, out smarting
Cellular Companies, and pointing your yaggies at large metallic objects to
spread your traceable signal all over the city.  These phenomena are all
well documented, any child can clone a phone or at least read a text on
how to clone one.  Only a few of us are old enough to remember tumbling, a 
technique long forgotten, and vampire phones are something that only a few
of us have seen.  However, that's not what I want to bring to you, I want
to explain to you something fun something interesting, something down
right amusing.  It's called HOSING...

Now I know not many of you have heard of HOSING.  It's and art form that was
passed down from some of the best (Thanks go out to Vmorgan of LOD for showing
me how to do this).  Hosing isn't hard, in fact it's very simple.  It only 
involves one Motorola brick phone preferably something older than an Ultra 
Classic but an Ultra Classic will work.  It also doesn't involve any software 
or even a neat cable to do.

Before I share this interesting technique for amusing yourself and all your 
buddies for hours on end, I think I should explain how it works.  I'm not 
gonna get real technical here cause it's not worth my time to document how 
AMPS works, I hope if your reading this you have a basic idea of what AMPS 
is and how it works.  However, that knowledge isn't really necessary to make 
this work.

The way this thing works in THEORY is really quite easy.  I say THEORY 
because I've never really asked anyone how it really works I'm just taking 
a guess that it works the way I think it does.  Understand?  In laymens terms 
it means don't quote me as the absolute power on how AMPS works cause I don't 
know I'm just guessing.  You would have to be a switch tech and have lots of 
hours of experience working on cellular towers to fully understand how this 
works.  Ok enough b.s.  You want to know how it works. 
 

In simple easy to remember terms it works the following way.  Towers are made 
up of cells each cell handles calls, these calls use channels in the cells.  
You can listen and monitor these channels using simple scanners that can 
monitor the 800mhz range.  Well each channel has a number that represents it 
from 1 to 1024 or so depending on how big your towers are and who sets them 
up.  Calls move from channel to channel and cell to cell as the customer moves
through the calling area.  Pretty simple explanation of how AMPS handles calls
don't you think?  Well if you can monitor a call why can't you talk back?  
Well you can that's what HOSING is.  A more technical term would be controlled
bleed over.  You can tune a transceiver or something of that sort to the same
freq (I'll refer to freq as channel number from on) or channel number of an
ongoing call you can talk back.  Example: say you are monitoring cellular 
calls in Washington D.C. and you hear Bill Clinton on the phone talking to 
his wife.  Bill says "Honey I'll be out..." and you Bleed in "Fucking some 
Bitch"  Miss Clinton will hear you loud and clear.  Now isn't that amusing, 
much more fun than being chased by cops for cloning.

So now your saying "Xram how do I get eleet Hosing skills so I can do this at 
home and amuse my friends at parties?" well it's really quite easy.

Materials list:

1. One Motorola Brick Phone 8000 series or older Ultra Classic

2. Optional requirements are an Oki900 and a CTEK cable


Directions to get yourself HOSING.

1. Get your brick phone and put it in test mode by typing 
   "PWR, FCN, 0,0,*,*,8,3,7,8,6,6,3,3,STO."

2. Then type 12#, 12#, 10#, 08#

Ok now your phone is in test mode and is ready to transmit.  Now you have to 
find a victim.  To find a victim I break out the CTEK cable and the OKI900
and scan some channels till I find someone interesting.  However I know some 
of you are poor and can't afford such k-rad el33t gear.  So get your Oki900 
every good phone phreak/hacker/cracker whatever you call yourself has an 
Oki900 laying around and put it into test mode so it displays the forward 
control channel it's on.  The last 3 digits on the screen are the forward 
control channel if you're ignorant and don't know.   Then take that number 
and add or subtract 21 from it, do that several times and write down the 
number each time.

Now you have a list of 5 or six numbers probably something like 321, 342, 
363, 384, 300, etc....  Take those numbers and put them in the brick phone.  

3. To put these channels in the brick phone type them like 11xxxx# 
   (xxxx being the channel number you don't need to put a 0 in if you only
   have xxx, i.e. 11321# will work you don't need to do 110321#)

4. Ok so you put the numbers in till you find someone talking this is the 
   easy step.

5. Then you need to find the signal strength of the call. You can only HOSE 
   calls with high signal strengths.  You do this by typing 45#.  If you
   are using a old 8000 series phone a number of 40 or higher is a good
   number, if you are using a Ultra Classic phone a number of 90 or higher
   is a good number.  

6. Ok now you have found a victim on a good channel.  To HOSE a victim you 
   type 05# and talk into the mouthpiece if they hear you or you hear
   yourself through the ear-piece then you win.  Now remember it's like
   working with a CB you have to stop transmitting or you will kill the call.
   To stop transmitting you need to hit 06#.  Continue these steps for
   amusement.  Just remember if you do this a lot I mean like every day
   for a year someone will get pissed and move all the good channels away
   from you, so it's real hard to HOSE, so don't fucking abuse it like
   mad.


Well now you have my eleet codes for HOSING I'd like to ramble a bit about 
life and kiddies and throw in my disclaimer.  If you are from AOL DON'T try 
this at home you will fuck it up and get caught and then you'll be whining
to the police "Xram made me do it" and the last thing I need is more cops
at my house.  So don't do this it's illegal.  Also if your lame and don't 
have a clue don't try this a home you'll just frustrate yourself and then 
I'll end up with 10 messages from you saying "I don't get it." Also if you're
an asshole and you want to complain about my simple AMPS diagram you can fuck 
off, I didn't write this to impress you with my infinite knowledge of AMPS 
technology, however if you want me to skewl you on it sometime I'd be happy 
too.  Well that about wraps it up if you do have a legitimate question or
you want me to skewl you on AMPS please read below.

If you are a dumb fuck and still can't figure it out I can be reached at 
kmx@steel.fortified.net or on #9x on efnet


Also look for more releases of taped hosing calls in wav and mp3 formats.
Keep a look out for the technical doc's on how this really works, if
people are really nice i might write them down.  However, it will take me
a longtime to get all the research out and define all the right terms.  

Thanks go out to Egatobas/KC2600krew, 9x, Frozen Krew, all my buds in
#2600, #cellular, and #9x
Special thanks to Vmorgan, Harmless, EtherBunny, Decious, A_Turing, and
Rixon.

This eleeto burito info was brought to you by Xram_LraK of 9x.
 
