'Millennium Desktop Payphone; A How-to Guide on Circuit Frying'


 -[Date: 12/01/00]- 
-[Handle: The Clone]- 
-[Type: Millennium Desktop Article]-

-[EMAIL: theclone@hackcanada.com]- 
-[URL: http://www.nettwerked.net]-


Introduction;

 This paper is a progressive follow-up to the recent Millennium file
('Millennium Payphone - Power Out Exploit V2.0') by my associate PsychoSpy
which exposed some major flaws in the so-called "secure payphone". The 
reason why the Millennium has been thought of as secure is because it has
been relatively successful in stopping phreakers who attempt to use older
well known payphone vulnerabilities against it. In order for phreakers to
keep steps ahead of telecom carriers they must be willing to learn the
architecture, use their creativity in a constructive manner, inspire and 
become inspired by those who posess similar interests. 

This guide is here for like-minded audiences to learn about the latest
of many Millennium "sploit's" to come. Although I don't consider this file
a true exploit guide, keeping this potentially damaging (for Nortel and LECs)
information from the public would more or less make me an STO advocate.
Information wants to be free... so as a provider of open Enterprise and 
Carrier-class telecommunications security solutions, with great honor
I present to you (more or less) my guide to frying Millennium Desktop Circuits.

-

What do Millennium Desktop Payphones look like?
-----------------------------------------------

The Millennium Desktop's are easy enough to spot *IF* you know what to look for.
You'll never be confused between a 'Universal', 'Card Phone', and 'Desktop' 
again if you look for these distinguishing physical traits:

* Desktop's look similar to the Nortel Vista 3000 phone (used for small
  business and residential land-line customers)

* Desktop's have an RJ-11 data jack on the side of it so that users can
  plug their laptop's into it.


Where are Millennium Desktop Payphones present?
-----------------------------------------------

* Airports 
* Hotel Lobbies
* Convention Centers 

and other locations where business travelers require access to a device
with an RJ-11 data jack, which is a powerful option that lets them
connect their laptop computer and access network services
(such as electronic mail, the Internet, or information services.)


Tools needed to exert angst on NorHell Desktops
-----------------------------------------------

* 1 Screwdriver - every phreakers tool for surgical procedures

* 1 Camera - for taking pictures of the random acts of 'fone-terrorism'
             that you can show your girlfriend, boyfriend, children, 
             or defense lawyer.

* A desire to commit a criminal act


The Procedure, Step-By-Step
---------------------------

Step 1 - Find the target Millennium Desktop, and be sure to check around
         for nearby authoritative figures and security cameras.

Step 2 - Sit in front of the Millennium Desktop, and look for a little
         4cm by 7cm metal panel underneath the phone.

Step 3 - Using your screwdriver you should be able to, with ease, pop it
         off.

Step 4 - At this point you'll see the circuit board with various leads.
         Now with your screwdriver in hand, begin to touch it to the
         leads on the circuit board. Also, try touching an IC555 lead 
         to a resistor lead. 

Step 5 - If you followed Step 4 properly the circuit board should be shorted
         out. Approximately 5-10 seconds later (if not earlier) the phone will
         set off its internal alarm that plays at half-second intervals ...
         "beedley-boop-beedley-boop". 

Step 6 - Now you can either leave the premises immediately (recommended),
         or you can be a real phone-ninja and attempt to shut the alarm up.
         To shut off the alarm what you'll have to do is look for a wire-mesh
         cord that is covering the phone line, pull it as hard as you can
         (because it's anchored to the wall), and within 5 hard tugs the cord
         will break and the alarm will shut off.

Step 7 - Leave the premises.



Closing Words
-------------
 
Now that you've read this, I advise that you use extreme caution when 
performing RAFT (Random Acts of Fone Terrorism). RAFT can get you arrested,
kicked out of school. No colleges will take you, No future! Exiled from 
  		  everything and everyone you love!


		     A Nettwerked/CPU Production