Lentis/Phreaking

Introduction The Technology of Phreaking In the 1960s and 1970s, phone companies relied on a signaling protocol known as in-band signaling. This scheme sent data (i.e. the caller’s voice) and control signals over the same linePetersen J.K. 2002 The Telecommunications Illustrated Dictionary CRC Press 467 0-8493-1173-X. Accordingly, should an individual understand and possess to capability to recreate these control signals, they would be able to manipulate the phone system from any user endpoint. This principle is the core foundation of phreaking: the use of tone generators to trick automated phone machines into performing executive operations. The first manifestation of this principle was in the 2600 hertz tone, which was the control tone of single frequency systemsWeaver and Newell 1954 In-Band Single-Frequency Signaling AT&T The Bell System Technical Journal 1309 http://explodingthephone.com/docs/db447. On any single frequency system, producing a 2600 hertz tone in differing patterns allows one to give various commands to the phone system, including disconnecting a call, inputting numbers, and reconnecting. A more popular and more complicated system was the multifrequency signaling system, which communicated information by sending pairs of pulses at different frequenciesDahlbom, Horton, and Moody 1949 Application of Multifrequency Pulsing in Switching AT&T AIEE Transactions 68 392 http://explodingthephone.com/docs/db446. Although the 2600 hertz tone was still an important signal in this protocol, phreaking a multifrequency system is inherently more challenging. Many of these tones were published in Bell System Technical Journal’s “Signaling Systems for Control of Telephone Switching”Dahlbom and Breen 1960 Signaling Systems for Control of Telephone Switching AT&T The Bell System Technical Journal 1381 39 http://explodingthephone.com/docs/dbx0445.pdf. A tool developed to aid in multifrequency phreaking was the blue box. These devices, the first of which was constructed by Washington State College student Ralph BarclayFBI 1961 FBI File 165-HQ-25, Redacted Subjects, Fraud By Wire FBI FBI via FOIA http://explodingthephone.com/docs/dbx0947.pdf, produce the multifrequency tones necessary to phreak in a reliable reproducible wayRosenbaum Ron 1971 Secrets of the Little Blue Box Esquire Magazine Esquire Magazine 116 http://explodingthephone.com/docs/dbx0092.pdf. Rise in Popularity Budding Interest Joybubbles, born Josef Engressia, was one of the earliest phreakers. Born blind, Joybubbles had a perfect pitch, allowing him to replicate the precise tones made by the telephone. His curiosity helped him discover ways to maneuver and exploit the phone system. Joybubbles claims his phreaking interest is purely intellectual, saying “I’m not trying to beat the system when I accidentally get an overseas phone call free...I’m just trying to learn”Glass 1970 I like to Whistle Up my Friends Long-distance http://explodingthephone.com/docs/dbx0393.pdf. Early phreakers shared this interest. Often making calls across the world, these pioneers were more concerned with what could be discovered next than trying to exploit the system. John Draper was one of these pioneers. He earned the nickname Cap’n Crunch for discovering a whistle, found in Cap'n Crunch cereal boxes, that happened to produce the coveted 2600 hz tone used to make free calls. In a manner similar to Joybubbles, he states “I’m not out to screw Ma Bell. I know better. If I do anything it’s for the pure knowledge of the System. You can learn to do fantastic things”Rosenbaum Ron 1971 Secrets of the Little Blue Box Esquire Magazine Esquire Magazine 121 http://explodingthephone.com/docs/dbx0092.pdf. He was one of the most prominent and notorious members of the early phreaking community. Public Adoption In October of 1971, Esquire Magazine published the article “Secrets of the Little Blue Box,” an article discussing preaking and featuring John DraperRosenbaum Ron 1971 Secrets of the Little Blue Box Esquire Magazine Esquire Magazine 120 http://explodingthephone.com/docs/dbx0092.pdf. Introducing phreaking to the masses, this article explained in detail the technology behind phreaking, the way a blue box worked, and how these devices could be used to exploit the phone companies. It also included interviews from many well known phreakers, including both Joybubbles and John Draper (known in the article only by his codename). It even coined the term "phreak"Lapsley Phil 2013 Exploding the Phone: The Untold Story of the Teenagers and Outlaws who Hacked Ma Bell Grove Press 174 978-o-8021-9375-9. The article exposed the masses to phreaking for the first time, piquing the interest of both a new generation of phreakers and the agencies tasked with regulating them. Among those captivated by the article included a young Steve Wozniak. Intrigued like many phreakers before him, Wozniak phoned Steve Jobs and excitedly explained what he had read. Together, they found a reference manual that listed telephone frequencies, very similar to the notorious "Signaling Systems for Control of Telephone Switching". After failing to build a blue box from analog tone generators, due to their lack of precision, Wozniak built his own digital blue box, saying “I have never designed a circuit I was more proud of”Lapsley 2013 The Definitive Story of Steve Wozniak, Steve Jobs, and Phone Phreaking The Atlantic 1 https://www.theatlantic.com/technology/archive/2013/02/the-definitive-story-of-steve-wozniak-steve-jobs-and-phone-phreaking/273331/. The duo would go on to meet John Draper during their days at Berkeley to review blue box designs, and eventually manufactured and sold their blue boxes to their peers. Their activities would be investigated by the FBI, but the boxes were never tied back to them1975 Collection of FBI File Excerpts Discussing Blue Boxes with Notes Saying "He's Got the Whole World in His Hands" The United States Government 1-2 http://explodingthephone.com/docs/db1030. Establishment Response Bell The spread in popularity of phreaking was problematic for Bell System. It cut into their profits, exposed their system to those with nefarious intent, and was incredibly poor publicity. In 1977, AT&T issued an internal memo for their public relations staff, stating that “toll fraud imposes a big financial burden on the telephone industry and honest customers1977 AT&T Memo/Backgrounder on Toll Fraud AT&T 1 http://explodingthephone.com/docs/db570”. To combat this phenomenon, AT&T sought to increase their capability to detect phone tampering. From 1972-1976, 823 blue boxes were seized and 411 toll fraud convictions occurred1977 AT&T Memo/Backgrounder on Toll Fraud AT&T 3 http://explodingthephone.com/docs/db570. In 1973, Bell contrived a method to detect potential blue box use. When toll free calls were made without showing up on telephone company records, a device could be connected to the line showing if a blue box was being usedHager 1973 Electronic Sleuth Sniffs Out Illegal Free Phone Calls Los Angeles Times The Bell System Technical Journal 22 http://explodingthephone.com/docs/dbx0040.pdf. This method led the arrest of prominent phreaker Sanford Herschel KosmanHager 1973 Electronic Sleuth Sniffs Out Illegal Free Phone Calls Los Angeles Times The Bell System Technical Journal 22 http://explodingthephone.com/docs/dbx0040.pdf. Regulatory Agency Response The FBI, as the regulatory agency primarily responsible for the enforcement of federal law, took a keen interest in the activities of phreakers. Especially prompted on by the Esquire article, they sought to discourage use of phreaking techniques and especially the manufacturing and selling of phreaking tools. Additionally, they gave special attention to those most prominent in the phreaking community. Joybubble’s unique knowledge and abilities made him the subject of many magazine and newspaper articles. This spotlight, however, also exposed him to federal attention. In 1969, the FBI finished an investigation involving “espionage; interception of communication”1969 FBI File 139-HQ-3481, Joseph Carl Engressia and two redacted subjects, Security Matter-espionage; Interception of Communications FBI 1 http://explodingthephone.com/docs/dbx0878.pdf by Joseph Engressia. In the report, Engressia and a partner admitted to being able to intercept toll calls on Autovon, a highly classified telephone system used by the White House. Joybubbles was not arrested until June of 1971 for “possession of electronic equipment to bypass lawful charges for long distance telephone service.-- Obtained phone service by fraud”1971 Arrest Record of Josef Carl Engressia, Jr. Shelby Count Sheriff's Office 1 http://explodingthephone.com/docs/dbx0927.pdf. He was fined $10. More than a year after Joybubble’s arrest, Draper was arrested for “fraud by wire”1954 United States v. John Thomas Draper, United States District Court for the Northern District of California, No. CR-72-973 RFP (SJ), Judgment United States District Court for the Northern District of California 1 http://explodingthephone.com/docs/dbx1029.pdf. He was arrested again in 1976 for toll fraud1976 Phone Phreak Indicted Again Oakland Tribune F13 http://explodingthephone.com/docs/dbx0971.pdf. In 1978, he was jailed for possession of a red box and other items used to steal communication services.Joseph 1978 'Phone Phreak' jailed for 3 to 6 months The Pocono Record 17 http://explodingthephone.com/docs/dbx0071.pdf. Demise Many factors contributed to the eventual decline of phreaking. The technological fall began in 1976, when Bell System began to convert from in line signaling to Common Channel Interoffice Signaling (CCIS). This new system allowed long distance calls to be completed faster and more reliably. However, critically, CCIS “handles key pieces of information about an attempted call on circuits separate from those used for talking”McElheny Victor K 1976 New Phone Setup to Save Time and Circuits New York Times New York Times http://explodingthephone.com/docs/db1033. Therefore, any phone system using CCIS is impervious to traditional phreaking. These issues were further compounded in 1984 by the Bell System breakup. Under US Antitrust law, Bell System was broken up into 8 constituent companiesPollack Andrew 1984 BELL SYSTEM BREAKUP OPENS ERA OF GREAT EXPECTATIONS AND GREAT CONCERN New York Times New York Times 12 https://www.nytimes.com/1984/01/01/us/bell-system-breakup-opens-era-of-great-expectations-and-great-concern.html. This breakup accelerated the change in Bell protocols and infrastructure that had been occurring. Continued Importance Though no longer practiced, parallels can be drawn between phreaking and more modern practices such as hacking. The most obvious line of descendence is through phreaking’s role in facilitating early hacking techniques, most famously wardialing. This connection can clearly be seen in the infamous zine Phrack, which covered phreaking and hacking, sometimes in the same edition. It would lead to be a major cultural force for hackers, publishing seminal articles such as Hacker’s ManifestoThe Mentor The Conscience of a Hacker http://www.phrack.org/issues/7/3.html Phrak 1 7 1986 and Smashing the Stack for Fun and Profitaleph1 Smashing the Stack for Fun and Profit http://www.phrack.org/issues/49/14.html Phrak 7 49 1996. More than just being technologically related, though, the two phenomena have a similar social structure as well. As seen in Hacker’s Manifesto, many early hackers were defined by a strong sense of curiosity towards these new technological systems, similar to the curious group of phreakers previously noted. This pattern is also seen by Dorothy Denning in her own article in Phrak, where she describes hackers as “playing with systems and making them do what they were never intended to do.”Denning Dorothy Concerning Hackers Who Break into Computer Systems http://www.phrack.org/issues/32/3.html Phrak 3 32 1990. These kinds of hackers now tend to be categorized as white or grey hat hackers. Of course, not all are satisfied to hack only as an intellectual exercise. Many black hat hackers exist, and execute attacks such as the WannaCry ransomware attack, hacking systems to exploit them for money or other personal power. These participants align closely with those who used phreaking for personal gain. As with phreaking, these exploits don’t occur in isolation -- they occur on servers, networks, and infrastructures owned and operated by individuals in corporations, who align closely with the telephone networks of the phreaking era. These companies continue to be protected by government agencies, who continue to persecute those who exploit systems against their wishes. One such case is that of Anthony Swartz, who in 2010 downloaded nearly 80% of the documents on JSTOR using an unauthorized access point on the MIT networkJSTOR Evidence in United States vs. Aaron Swartz https://docs.jstor.org/ 2013 JSTOR. Swartz subsequently faced heavy charges from the United States Attorney’s Office under the Computer Fraud and Abuse Act. In 2013, he would commit suicide. His family released a statement describing Swartz’s death as “the product of a criminal justice system rife with intimidation and prosecutorial overreach”Swartz Robert Swartz Susan Stinebrickner-Kauffman Taren Official statement from family and partner of Aaron Swartz http://www.rememberaaronsw.com/statements/family.html 2013 -- a sentiment which has only grown in recent years. In these ways the social dynamics of modern hacking align closely with those of phreaking, and as the groups are motivated largely by powerful feelings such as curiosity and self-preservation, it seems likely that whatever culture arises from hacking in the coming decades may also follow a similar set of dynamics and groups as well. References