[5] Cellular Phreaking Msg # - 3 To : ALL From : STEALTH Subject : carding them Time : 3:26:40 PM 07/29/1994 hey what is the best phone out at the moment? And anyone know any places to card them from? Or any other [laces to card the shit for them... HaVe PhUn 8O) STE/-\LTH [5] Cellular Phreaking Msg # - 5 To : ALL From : GEORGE KING Subject : Freqs. ad Stuff Time : 9:55:04 PM 07/30/1994 Um, what is the frequency distribution for cellphones in the UK, all the files I have read state that the freqs are in the 800mhz range, but when i scan in the UK, I get cells between 918 and 963 mhz. Also are the forward channels higher or lower than the reverse ones? Does anybody have any interesting ROM images for any good cell phones. Also, how is everybody coupling there MODEMS to there cell-phones? Will a direct link (wire to wire) work, or is it Acoustic Coupler only? Thanx for the help, George [5] Cellular Phreaking Msg # - 30 To : ALL From : OREGON KOWBOY Subject : GSM Time : 2:19:32 AM 08/06/1994 Other than the ETSI books, any good (cheap) books about GSM? [5] Cellular Phreaking Msg # - 41 To : GEORGE KING From : DAVEX Subject : Freqs. ad Stuff Time : 10:24:08 PM 08/08/1994 The lowest Mobile transmit frequency is 872 mhz The highest Mobile transmit frequency is 905 mhz The lowest Base transmit frequency is 917 mhz The highest Base transmit frequency is 950 mhz There is a 45 mhz split between transmit and recieve But there are gaps in the allocation, 934mhz CB for example. Hope this answers some of your queries. As to the connecting of the modem, it's in phate103 if it ever comes out, I have a preview copy (not complete), but until the situation with maelstrom becomes clearer, I'm not going to release it, as the full version would be better, and also it's really down to mael to give it the go ahead if it turns out the original has been lost due to the recent goings on.. DaveX [5] Cellular Phreaking Msg # - 44 To : ALL From : DAVEX Subject : codes Time : 10:37:48 PM 08/09/1994 Has anyone got a full list of maintenace mode codes for motorola fones? and has anyone got any info on the 3 wire bus that the handset uses to communicate with the black box? A valid international dialling pair to anyone who comes up with the goods... [5] Cellular Phreaking Msg # - 47 To : DAVEX From : PULSE Subject : codes Time : 1:25:45 AM 08/10/1994 Alrighty.. I was talking to someone today who *really* knows his cellphone shit. He's got loadsa units, he called me today on a v. highly modded 4500x. He's spent like thousands of pounds on hardware and software and shit for his "hobby". He's selling spy-track gear for 3-500 quid I think. Depending on how much he likes you (he makes it himself). Anyway, I forgot to ask him about the bus, I'll give him a call tomorrow for ya. Oh he's also using the proper Motorola modem interfaces... If anyone can get 4 more he'd be willing to do a deal of some sort. Later Pulse [5] Cellular Phreaking Msg # - 55 To : ALL From : GEORGE KING Subject : NEC p3 Time : 2:06:28 AM 08/11/1994 Is anyone using the p3 reprogramming software from this BBS? If so, can you tell me if you can reprogram the MIN from the software? If not, can it be reprogrammed from the handset without a NAM programming adaptor? I REALLY need to know before I go buy a new p3. Incidentally I have a supplier who can red-star a LEGITIMATE ESN-free NEC P3 to your door next day for 130 uk pounds - that's the cheapest price I was offered going through all the cellfone supplier's adverts I could find for the last couple of days. If anyone can beat this price I would be interested. Alternatively I would LOVE a motorola microtac-II, legitimate or otherwise, if the price was right... George [5] Cellular Phreaking Msg # - 56 To : GEORGE KING From : PULSE Subject : NEC p3 Time : 10:00:57 PM 08/11/1994 Well if you're interested in second hand I've seen a shop selling an ESN-free P3 for 70 and a Mot8800 for 70... And I may have found a source for 4500s at 30 quid each. I reckon that'd take a lot to beat. As for a Tac2, I've seen a classified for a BT Pearl (without the flip) for 50 quid. It's a nice phone.. P. [5] Cellular Phreaking Msg # - 63 To : PULSE From : GEORGE KING Subject : NEC p3 Time : 12:35:19 AM 08/12/1994 Pulse - yes I'm very interested in both fones (or either!), please bung me the details if you could. Cheers, George [5] Cellular Phreaking Msg # - 64 To : DAVEX From : PULSE Subject : codes Time : 2:13:15 AM 08/12/1994 I'm not sure about the Spytracks... But they cost, like, 300 quid or something, so I'd stay away if you're on a similar budget to me :> I don't think they can collect ESNs... In fact, no they don't - they just allow you to enter a phone number and listen in on it. I think these guys are currently finding a source for ESN readers which they are going to begin selling, I'm hoping they're gonna be cheap. As for the bus, I've asked his brother to ask him, and he also says he knows a few other people that might know, I'll expect a phone call over the next few days about that. As for boards, I think he calls a few in Britain, not here or Urban XTC tho... Can't really remember where, he calls a few in, like, Canada, like Underworld and not surprisingly has v.good access wherever he calls. He's got the proper Mot modem interface so he gets 14.4 connects. Anyway, I'll keep ya posted about the bus info, it's just that he's the kinda person that doesn't wanna mess with small-time phreaks, he's into this for the big money, and would rather do a deal than give info out for nothing. Please give us a ring soon, cos I need to have a word with ya. Pulse [5] Cellular Phreaking Msg # - 66 To : ALL From : FALLEN ANGEL Subject : m300 Time : 12:51:25 AM 08/13/1994 anyone know of i can get a interface to connect my modem to the motorola m300 fone? If so could u please mail me the details... thanx all Fallen Angel [5] Cellular Phreaking Msg # - 68 To : PULSE From : DAVEX Subject : codes Time : 2:47:01 AM 08/13/1994 I borrowed one of them mot interfaces, it don't go above 9600 reliably It has a mot microcontroller in it, a 68hc705, a dtmf decoder and a couple of ttl chips, too bloody expensive by far if you ask me. It weighs about as much as a wet fart too, more like a zx81 add on than a real piece of hardware.. ;-) DaveX [5] Cellular Phreaking Msg # - 69 To : FALLEN ANGEL From : DAVEX Subject : m300 Time : 2:48:05 AM 08/13/1994 > anyone know of i can get a interface to connect my modem to the > motorola m300 fone? If so could u please mail me the details... > thanx all > Fallen Angel whats an M300 ? never heard of that one. DaveX [5] Cellular Phreaking Msg # - 71 To : ALL CELL HEADS From : SCRIBLA Subject : modems again Time : 12:07:35 AM 08/14/1994 Hi all, rite then what is the quickest way to bodge up a mobile to a modern modem ? I know i know, i post to many questions and no answers.. -scribla- [5] Cellular Phreaking Msg # - 72 To : ALL From : PULSE Subject : P3 Modem interface Time : 1:02:55 AM 08/14/1994 What sort of price range am I looking at for the modem interface for the NEC P3 ? I've got one on its way, and I'd like to get the modem connected to it. Cheers PUlse [5] Cellular Phreaking Msg # - 74 To : ALL From : VLADIMIR Subject : Motorola ESN cable Time : 10:14:20 PM 08/14/1994 Right. Anyone got pinouts for the esn transfer cable used wiv motorola fliptacs? A circuit diagram would be luvly... Cheerz in advance... -+[ VLadiMiR ]+- [5] Cellular Phreaking Msg # - 88 To : VLADIMIR From : PULSE Subject : Motorola ESN cable Time : 1:54:44 AM 08/17/1994 > Right. Anyone got pinouts for the esn transfer cable used wiv motorola > fliptacs? A circuit diagram would be luvly... > Cheerz in advance... > -+[ VLadiMiR ]+- > Yep, I got em, they're a cunt aswell I might add. You gotta pry open the 8-pin plug off a battery eliminator and solder on the wires to each pin then glue up and re-seal. V.small area to work in. I'll upload the file, it's called FLIP_CBL.ZIP... Tell me how you get on! What software are you using ? HTH-V2 ? Pulse [5] Cellular Phreaking Msg # - 90 To : SCRIBLA From : DAVEX Subject : modems again Time : 10:17:35 PM 08/17/1994 HOW TO CONNECT A CELLFONE TO A MODEM ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ MODEM T1 | | T2 pin 1 o--||--o___ ______o o______ ___o--||--o pin 6 || || || 1b 2b || ||___________________|| 1a | _____ ____________ | 2a || \/ || || 1c /\ 2c || pin 24 o__________||___/ \__/\/\/\___||_________o pin 24 1K preset adjusted to give best tx/rx isolation To connect a modem to a motorola 4800. You need :- 2 off 2.2uF capacitors. (non polarized) 2 off isolation transformers (signal) with 3 seperate windings 1 off 1k ohm preset 1 off BT socket (to plug modem into) Using a capacitor to provide DC isolation, connect winding (a) of transformer 1 to pin 24 on D plug and the other end of winding (a) to pin 1 of the D plug via a capacitor. Connect winding (a) of transformer 2 in a similar manner to pins 24 & 6. (see above). Winding 1(b) & 2(b) are connected as in above picture, the start of each winding goes to the BT socket (pins 2 & 5), and the two ends connect to each other. Winding 1(c) & 2(c) are connected as in picture, the start of winding 1(c) is connected to the end of winding 2(c), and 2(c) start is connected via a 1k preset to the end of 1(c). The way it werks is thus. A signal being presented to winding 1(a) will appear on both 1(b) and 1(c). it will then couple to transformer 2 through 2(b) and 2(c), BUT because winding (c) is connected out of phase, it will cancel out the signal induced by winding (b) thus giving no signal at 2(a). A signal from 2(a) will follow the same proceedure and not appear at 1(a), but a signal at either 1(a) or 2(a) will be present at the modem. (actually only 50% of the signal will reach the modem, the other 50% is eaten up by the balancing resistor. The signal from the modem is delivered to both 1(a) & 2(a), (50% of signal is present at both ports), but as pin 1 is the microphone input to the fone it will accept the signal and send it on its way. Pin 6 on the other hand is the received audio, and it don't care if there is a signal connected to it or not as it is an output. The pin numbers given are for the Motorola 45/48/6800 mobile/transportable, but the basic idea should werk on any cellfone. It is also a good idea to disable the microphone and earpiece in the handset once the modem is connected, otherwise (a) the noise from the earpiece gets on your tits, and (b) the microphone tends to pick up your 100 gigawatt stereo system and send the output of same to the remote modem, this causes transmission errors as remote modems don't appreciate or understand 'techno techno techno', at high volume levels.  WRITTEN AND UPLOADED BY DaveX  [5] Cellular Phreaking Msg # - 95 To : GEORGE KING From : AC ASSASSIN Subject : flip phone Time : 12:04:30 AM 08/19/1994 Would you be interested in a pioneer flip, it is a smarter version of the motorolla ones but has exactly the same gubbins, i was told motorolla own pioneer or something like that, well anyway, i have one here and will probably report it lost/stolen soon, i will have to pay 20 quid excess on my insurance but im sure we can sort something out. L/\ter..... >>>>>> /\C Assassin <<<<<< [5] Cellular Phreaking Msg # - 96 To : ALL From : AC ASSASSIN Subject : reprogramming sox Time : 12:06:28 AM 08/19/1994 Has anyone tried to use the motorolla reprogramming software in the PC executables section, when i run it it asksme for some runtime module path or some bollox like that, has anyone had any success with it or know what it is getting at ? L/\ter..... >>>>>> /\C Assassin <<<<<< [5] Cellular Phreaking Msg # - 97 To : ALL From : OREGON KOWBOY Subject : OKI Time : 2:41:01 AM 08/19/1994 Anyone have experience with using the OKI as a scanner? Anyone have the cable diagrams for hooking OKI to a pc? L8r. [5] Cellular Phreaking Msg # - 100 To : DAVEX From : FALLEN ANGEL Subject : m300 Time : 1:10:01 AM 08/20/1994 the m300 is the one they use with the mercury network...free calls after 7pm!!! Fallen Angel [5] Cellular Phreaking Msg # - 103 To : ALL From : FLASH Subject : Stuff Time : 2:49:56 AM 08/20/1994 A couple of lame questions... If you are using some other guys ESN/MIN, what happens if someone calls his number while you have the phone switched on? And, what if you both (you, the phreaker, and the guy who's ESN you're using) try and make calls at the same time?? Flash. [5] Cellular Phreaking Msg # - 107 To : DAVEX From : STEALTH Subject : Freqs. ad Stuff Time : 8:21:53 PM 08/20/1994 What is the best fone to plug up to a modem? And how long does an e.s.n last for?? HaVe PhUn 8O) STE/-\LTH [5] Cellular Phreaking Msg # - 108 To : FLASH From : MADMAN Subject : Stuff Time : 9:24:15 PM 08/20/1994 eh,yup they both ring at the same time and even though one answers the other still rings , yup you can call at the same time but not as long as its on the same cell... l8r MadMan [5] Cellular Phreaking Msg # - 109 To : DAVEX From : SCRIBLA Subject : modems again Time : 12:01:52 AM 08/21/1994 Cheers m8, sounds like thats the 100th time youve had to explain that lot, thanks... _scRibLa_ me thinks i be busy this weekend [5] Cellular Phreaking Msg # - 112 To : MADMAN From : OREGON KOWBOY Subject : Stuff Time : 3:06:51 AM 08/21/1994 Hence the use of pagers for 'incoming' and the use of cloned phones for 'outgoing' calls. BTW, sometimes only the phone closest to teh cell site gets the call.... I think. [5] Cellular Phreaking Msg # - 117 To : ALL From : PULSE Subject : Motorola 9800x Time : 10:26:46 PM 08/22/1994 I've got a Motorola for sale : Motorola 9800x - It's basically exactly the same as the TAC2 flip-phone but it's the one that BT sells without the flip, badged with the BT symbol. Very nice phone... Battery eliminator available if you want it for the reprogramming cable. Mail Pulse with an offer. [5] Cellular Phreaking Msg # - 125 To : OREGON KOWBOY From : FALLEN ANGEL Subject : Stuff Time : 10:14:10 PM 08/23/1994 i heard somewhere that if two phones with the same ids are used then they both shut down and the legitimate user can get his esn etc changed so he doesn't get billed for someone elses use. mayby bullshit from motoroal, mayby not... [5] Cellular Phreaking Msg # - 127 To : FALLEN ANGEL From : OREGON KOWBOY Subject : Stuff Time : 12:56:55 AM 08/24/1994 It is possible to add this type of 'fraud control' into a phone system. But the telcos want the revenue, so they tend to leave up phones that could produce revenue. Two phones (assuming they are not in use at the same time) can have the same MIN/ESN active as long as they pass a 'velocity check' (e.g., one call from London and ten minutes later from Manchester would fail the check and the second call would not be allowed, if a 'velocity check' was in use). Two phones with the same MIN/ESN can be in use as long as they are not in the same cell (hence the logic in trading MIN/ESN pairs with other parts of the country to roam). Hope this helps. [5] Cellular Phreaking Msg # - 131 To : OREGON KOWBOY From : FALLEN ANGEL Subject : Stuff Time : 10:44:01 PM 08/24/1994 thanx for clearing that up. I have been considering buying a cheap phone and playing around with it...can u recomend a good phone to start with. talk to ya soon m8 Fallen Angel [5] Cellular Phreaking Msg # - 133 To : FALLEN ANGEL From : PULSE Subject : Stuff Time : 11:45:38 PM 08/24/1994 > thanx for clearing that up. I have been considering buying a cheap > phone and playing around with it...can u recomend a good phone to start > with. Yep, how about a Motorola 9800x ? I got the software and cables.. Pulse [5] Cellular Phreaking Msg # - 134 To : ALL From : PULSE Subject : Motorola eliminators Time : 11:47:42 PM 08/24/1994 Anyone got a cheap source for battery eliminators and other accessories ? Especially after a bunch of cheap Motorola saver-chargers.. Pulse [5] Cellular Phreaking Msg # - 146 To : ALL From : FLASH Subject : Grabbing Time : 10:03:40 PM 08/28/1994 Okay, I want to get into cellular phreaking, and I know more or less enough about re-programming ESNs. But I'd like some info on ESN grabbing, like what phones are best for it, what software to use etc. and how far away can the phone you're grabbing the ESN from be? Flash. P.S. Does anyone know anything about re-progging a Motorolla 8000S? Cheerz. [5] Cellular Phreaking Msg # - 147 To : ALL From : PULSE Subject : CellMon / HTH Guys Time : 10:15:48 PM 08/28/1994 Two things: Has any _ever_ used the CellMonitor software available on here for Mot 4800s ? (Someone must have!) Is anyone in touch with the guys in HTH ? (The Punisher etc.) Pulse [5] Cellular Phreaking Msg # - 148 To : PULSE From : FALLEN ANGEL Subject : Stuff Time : 10:46:21 PM 08/28/1994 if i bought it, how much and what computer is the software for? takt o ya soon m8. Fallen Angel [5] Cellular Phreaking Msg # - 150 To : FALLEN ANGEL From : OREGON KOWBOY Subject : Stuff Time : 3:39:04 AM 08/29/1994 Mitsubishi seems to have a lot of features. The Motorola is always good. Heard some m8 in the UK had done software to clone Motorolas. But I do not have that software or the cable. L8r. [5] Cellular Phreaking Msg # - 157 To : ALL From : PULSE Subject : Software Time : 12:45:01 AM 08/30/1994 Motorola TAC2 v2 & Sony software on its way for anyone who's interested. I can also get the cable diags for the MT7 and Pan-I software on here.. Has anyone managed to get CellMon to give you the ESN from a MIN ? If you go to maintenance an ESN window pops up but it says "ESN out of range" or something (even if it isn't!) Pulse [5] Cellular Phreaking Msg # - 162 To : OREGON KOWBOY From : MADMAN Subject : Stuff Time : 11:09:58 PM 08/30/1994 yup , am using nec 9a good phone does vodac 0836 or cellnet 0860 , good word of advice though don't use more than a month or vodac van turns up at yar work like wot happened to me good job i seen em soon though.... l8r MadMAn [5] Cellular Phreaking Msg # - 176 To : AC ASSASSIN From : DAVEX Subject : reprogramming sox Time : 5:09:49 AM 09/01/1994 > Has anyone tried to use the motorolla reprogramming software in the PC > executables section, when i run it it asksme for some runtime module > path or some bollox like that, has anyone had any success with it or > know what it is getting at ? > > L/\ter..... > > >>>>>> /\C Assassin <<<<<< > you need BRUNxx.EXE where xx is either 10, 20, 30, 40 depending on the version of qbasic it was compiled with. I'll upload a few of them here and you can stuff them on your path somewhere and all will start werking. DaveX [5] Cellular Phreaking Msg # - 177 To : MADMAN From : DAVEX Subject : Stuff Time : 5:19:06 AM 09/01/1994 following the thread to the end and pressing R, leads me to say this, vodafone will not allow two fones to make outgoing calls simultaneously, but cellnet will. Vodafone sends a reorder message to the second fone, but cellnet just gets on with it. As to who rings etc, the last one to log the network gets paged first, so if you just switched on then you will get the call, if the legit user has just logged he gets it. If you want to rx a call, and you know when it is going to be, you switch your fone off and on again to relog the cell, then your fone rings and his doesn't. complicated or wot. I just disconnect the bell. long live cellular. [5] Cellular Phreaking Msg # - 178 To : STEALTH From : DAVEX Subject : Freqs. ad Stuff Time : 5:20:50 AM 09/01/1994 the best fone is a motorola cos they make a special box that plugs into the fone and then you plug your modem into the box, werks at upto 9600 but will werk at 12000 sometimes. l8ter [5] Cellular Phreaking Msg # - 194 To : CELLPHREAKS From : DAVEX Subject : how to snarf Time : 4:05:59 AM 09/04/1994 Well I did it, I sat and picked my brain for ten minutes and wrote down most of the information I could remember about snarfing pairs. I hope you all find it useful, much better to have a file than me get pissed off trying to explain it all to everyone in turn. ;-) enjoy. DaveX [5] Cellular Phreaking Msg # - 200 To : ALL From : DAVEX Subject : gold numbers Time : 5:08:36 AM 09/06/1994 Does anyone know what a gold number is? I have a list of 'gold numbers', but don't see what the difference is between gold and normal. DaveX [5] Cellular Phreaking Msg # - 202 To : ALL From : BLACK RANGER Subject : cellullar shagin Time : 12:44:04 AM 09/07/1994 hase anyone got any info on cloning the erricson phones??? [5] Cellular Phreaking Msg # - 212 To : PULSE From : BLACK RANGER Subject : cellullar shagin Time : 11:53:53 PM 09/08/1994 c00l [5] Cellular Phreaking Msg # - 235 To : BLACK RANGER From : PULSE Subject : cellullar shagin Time : 2:42:48 AM 09/14/1994 > c00l > Uhh, what was the question again ? Pulse [5] Cellular Phreaking Msg # - 243 To : PULSE From : BLACK RANGER Subject : cellullar shagin Time : 10:47:02 PM 09/15/1994 hehe u were sayin u could get erricson waerez thatz why i said c00l [5] Cellular Phreaking Msg # - 252 To : ALL From : PETER JONES Subject : sony cmr111 Time : 2:06:36 AM 09/18/1994 I am looking for software /cable info for sony cmr111 phone in order to read ESN etc. to clone my telephone. If anyone has a copy could they upload it or let me know where i could get any. s [5] Cellular Phreaking Msg # - 263 To : PETER JONES From : HACK10F Subject : sony cmr111 Time : 10:26:39 PM 09/20/1994 HIE PETER YOUR SONY CM111 HAS A (16911) CHIP IN IT BUT YOU CAN ONLY CHANGE TO LAST NINE DIGETS YOU CAN CHANGE THE LAST NINE BY USING A STANDERD 8255 EEPROM CARD THE CHECK SUM IS HEX REVERSD BACKWORDS IE IF YOU ESN IS 12345678 IN HEX THE CHKSUM WOULD BE 87654321 GET IT HAVE FUN BUY THE WAY WATCH THE SMALL COMPONTS ON THE BORD BYE... (O.G. MAD BONE) [5] Cellular Phreaking Msg # - 268 To : DAVEX From : MADMAN Subject : gold numbers Time : 11:43:53 PM 09/21/1994 yup, i think gold numbers are ones that are used for low tarriff international callz...? have you ever had any 'roamer' numbers ie cellnet/vodac on one esn? l8r Madm an .S  [5] Cellular Phreaking Msg # - 271 To : PULSE From : BLACK RANGER Subject : cellullar shagin Time : 10:26:08 PM 09/22/1994 i got bad type prgram but itz dongle protected!! [5] Cellular Phreaking Msg # - 272 To : MADMAN From : DAVEX Subject : gold numbers Time : 2:25:50 AM 09/23/1994 > yup, i think gold numbers are ones that are used for low tarriff > international callz...? > > have you ever had any 'roamer' numbers ie cellnet/vodac on one esn? > > l8r > Madm > an > > .S > >  Doesn't seem to be many people actually know what a gold number is, a guy who mends fones told me they were usually demo numbers that could receive calls using any esn. Like the demo model in the BT shop.. can't really tell if you get a roamer, unless you scan both systems and correlate the data looking for the same esn, the phone only logs the system with the min from that system, it will have another min for the other system.. (I think).. l8ter DaveX [5] Cellular Phreaking Msg # - 283 To : DAVEX From : MADMAN Subject : gold numbers Time : 2:05:10 AM 09/24/1994 yup,disregard last reply a gold number is an esnless number given out by service providers to prefered customers ie md's they are billed to vodafone and are free lines...aha got any spare???? haha cheerz MADMAN [5] Cellular Phreaking Msg # - 293 To : MADMAN From : DAVEX Subject : gold numbers Time : 1:01:07 AM 09/25/1994 no, I just heard the term one day and I was interested in what they were. If I get hold of any I guess they will be worth a small fortune. l8ter DaveX [5] Cellular Phreaking Msg # - 308 To : ALL From : JONO Subject : P3 Technical Manual Time : 6:15:48 AM 09/27/1994 Hi all JoNo here (Formally Jono Bono) You may be interested to know that I have complied the P3 Test Rom manual, it's worth having. The file is P3TST001.TXT. Cheers ..JoNo [5] Cellular Phreaking Msg # - 345 To : ALL From : MADMAN Subject : global Time : 10:55:41 PM 10/02/1994 Does anyone know how rare a feature international callz are on cell phones these days what percentage has the feature enabled..?? l8r MAdman [5] Cellular Phreaking Msg # - 354 To : MADMAN From : DR.FONK Subject : global Time : 10:44:29 PM 10/03/1994 > Does anyone know how rare a feature international callz are on cell > phones these days what percentage has the feature enabled..?? > l8r MAdman > think u can only get global calls on GSM network, or eurodigital 4 europe, me m8 used to just call the ops on 0800 to call 2 other countrys l8rzzzzzz.......Dr.Fonk [5] Cellular Phreaking Msg # - 355 To : DAVEX From : MADMAN Subject : 4800 Time : 12:55:03 AM 10/04/1994 yup got a 4800 i can change every parameter except esn ideas?? am using Unichip s/w//    l8r Madman [5] Cellular Phreaking Msg # - 370 To : DR.FONK From : DAVEX Subject : global Time : 4:01:36 AM 10/05/1994 About 10% of the numbers I get are international enabled, I think it's entirely up to the airtime dealer what you get, but I know that lifetime and lowcall don't get fuck all, no 3 way, no international and no 0898. Most of the airtime dealers werk under the assumtion that if you want international capabilities, you'll ask for it. assumption. musT iMproove mi riting too many smelling pistakes. DaveX [5] Cellular Phreaking Msg # - 371 To : MADMAN From : DAVEX Subject : 4800 Time : 4:06:16 AM 10/05/1994 try using hthmot sw, ver 9.9, must allso have the correct command line parameters to enable esn programing. @ECHO OFF MOTOROLA /NAM /ESP /NVR /LPT1 /E7 this gives you access to everything on the fone. You may be interested in a little utility I wrote, allows you to dial the damn fone from your pc rather than spend your life pressing buttons. it called MOTDIAL, I will ul it here. l8ter DaveX [5] Cellular Phreaking Msg # - 377 To : DAVEX From : SHERRIF Subject : Freqs. ad Stuff Time : 10:57:26 PM 10/05/1994 so ya know about esn min pairs well mid helpin me out a bit is it true you only need to change the esn min on motorola to get it wokin on sombody elses bill imean you dont have to alter chips etc thanks [5] Cellular Phreaking Msg # - 378 To : PULSE From : SHERRIF Subject : codes Time : 10:59:53 PM 10/05/1994 hi i can get some for ya if ya like just leave me mail also can ya put me in touch with your mobile friend need to somin about scanning and the ttl port cheers .. [5] Cellular Phreaking Msg # - 379 To : GEORGE KING From : SHERRIF Subject : NEC p3 Time : 11:01:56 PM 10/05/1994 yep i have p3 too i had lots of probs with it i got so pissed that i altered all the parameters so its usless now [5] Cellular Phreaking Msg # - 381 To : DAVEX From : SHERRIF Subject : hi esn/min Time : 11:16:37 PM 10/05/1994 hi there DAVEX IV BEEN READIN ALL THE CELLULER LETTERS IT SEEMS YOU KNOW QUIT A LOT well i got a prob dave can ya tell me ,do you only need to change the esn/min on a phone to get it workin on another phone or do you need to do somin with the chips thanks .. [5] Cellular Phreaking Msg # - 382 To : MADMAN From : SHERRIF Subject : hi Time : 11:18:15 PM 10/05/1994 hi there do ya know if ya only need to change the esn/min on phones to get em workin on other peoples bills or do ya need to change any chipsa thanks , i have a motorola ,the brick one and a nec p3 [5] Cellular Phreaking Msg # - 383 To : ALL From : SHERRIF Subject : E.S.N / MIN Time : 11:19:35 PM 10/05/1994 HI CAN ANYBODY SELL ME SOME ESN/MIN PAIRS I PAY GOOD MONEY CHEERS ALSO HELPFUL IF THERE INTERNATIONAL THANKS [5] Cellular Phreaking Msg # - 384 To : DAVEX From : MADMAN Subject : 4800 Time : 1:37:54 AM 10/06/1994 Yet again ye get ma ass out of a sling , already ordered stuff from Farnell for Dialler , whats involved in scanning with it the 4800 ive got is slimline ver. l8r Madman [5] Cellular Phreaking Msg # - 385 To : SHERRIF From : MADMAN Subject : hi Time : 1:40:26 AM 10/06/1994 na m8 you just get s/w plug it up and bang it in the hassle is making up lead usually from a car kit , or battery eliminator apart from that piece of pish.. l8r Madman [5] Cellular Phreaking Msg # - 387 To : MADMAN From : PHANTASM Subject : hi Time : 6:48:05 AM 10/06/1994 Did anyone see Hacker Attack on the Discover Channel last week? It is so easy to obtain ESN/MIN pairs in the USA. The drug dealers just sit above the exit to a tunnel in New York with scanning equipment and capture all the ESN/MIN's as the business pigs drive home from work. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 390 To : PHANTASM From : SUICIDAL FAILURE Subject : hi Time : 10:49:23 PM 10/06/1994 > Did anyone see Hacker Attack on the Discover Channel last week? It is > so easy to obtain ESN/MIN pairs in the USA. The drug dealers just sit > above the exit to a tunnel in New York with scanning equipment and > capture all the ESN/MIN's as the business pigs drive home from work. > > Phantasm (SysOp) smart, do we have any mafia guyz here that could get that sort of equipment :) -SF [5] Cellular Phreaking Msg # - 392 To : DAVEX From : MADMAN Subject : phoney fonez Time : 12:03:54 AM 10/08/1994 yup,still can't get it to take and esn even with the v9.99 s/w , it's a slimline transceiver 4800 tacs2 i think? , from a traveller pack the tac2.zip s/w here seems to have protection on it any further ideas?? , what other s/w u use? l8r MadMAn [5] Cellular Phreaking Msg # - 393 To : ALL From : RAVEN Subject : ESN Scannin Time : 1:04:39 AM 10/08/1994 Aint rung these guyz yet sos i dont know wat sorta prices we're talkin. U may ave seen this add in the latest ex/mart. It reads as followz..... E.S.N. READER ------------- reads esn off air (no connectionto phone required) reads esn mobile number and s.c.m 99 memories with time and data stamp complete with charger and case TRADE ONLY 0702 431932 hmmm well there u are...could be anythin between 100ukp to 1000ukp i reck. if it is fukin exspenmsive maybes we could work a shared deal where some one 'trustworthy and obtainable' collects even donoations and buyz it..ie Mr. PHANTASM our very sysop eya. Raven [5] Cellular Phreaking Msg # - 395 To : RAVEN From : PHANTASM Subject : ESN Scannin Time : 8:06:07 AM 10/08/1994 I would be very happy to purchase such a system, however I wouldn't buy anything of this nature without seeing it in operation first. I suppose a private message base could be available to those who have contributed towards the hardware. I know there are many people out there who would kill for an unlimited supply of ESN/MIN pairs. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 400 To : PHANTASM From : DIPPLEDO Subject : ESN Scannin Time : 3:13:55 AM 10/10/1994 What about starting up a partnership to buy the gear. Dippledo. [5] Cellular Phreaking Msg # - 401 To : ALL From : FALLEN ANGEL Subject : acoustic couplers Time : 10:38:04 PM 10/10/1994 Hiya, I was wondering if accoustic couplers work with digital mobil fones...it just that whenever I try to amp up the volume from mine the hiss which I get is tremendous. Also, if it does work, what type of cps should I expect, or what baud is likely to be the maxx. Thanks in advance.... Fallen Angel [5] Cellular Phreaking Msg # - 405 To : SHERRIF From : DAVEX Subject : Freqs. ad Stuff Time : 2:14:55 AM 10/11/1994 > so ya know about esn min pairs well mid helpin me out a bit is it true > you only need to change the esn min on motorola to get it wokin on > sombody elses bill imean you dont have to alter chips etc thanks > > > You only need a valid esn/min pair and a pc/programing cable. No hardware mods are needed, you don't even get to take the cover off the fone if you use a 'brick' type. (4500 4800 6800) Beware the more modern ones though, flipfones do require a little open heart surgery to get them to change their identity. BTW isn't running someone elses bill up illegal? Must consult my brief.. DaveX [5] Cellular Phreaking Msg # - 406 To : SHERRIF From : DAVEX Subject : hi esn/min Time : 2:16:30 AM 10/11/1994 > hi there DAVEX IV BEEN READIN ALL THE CELLULER LETTERS IT SEEMS YOU > KNOW QUIT A LOT well i got a prob dave can ya tell me ,do you only need > to change the esn/min on a phone to get it workin on another phone or > do you need to do somin with the chips thanks .. > I think I just answered this letter in a different envelope. DaveX [5] Cellular Phreaking Msg # - 407 To : SUICIDAL FAILURE From : DAVEX Subject : hi Time : 2:18:53 AM 10/11/1994 > > Did anyone see Hacker Attack on the Discover Channel last week? It is > > so easy to obtain ESN/MIN pairs in the USA. The drug dealers just sit > > above the exit to a tunnel in New York with scanning equipment and > > capture all the ESN/MIN's as the business pigs drive home from work. > > > > Phantasm (SysOp) > smart, do we have any mafia guyz here that could get that sort of > equipment :) > > -SF I sit in the comfort of my own armchair and snarf pairs for miles around, its dead easy, I wrote a tfile on the subject. go read it. DaveX [5] Cellular Phreaking Msg # - 408 To : SHERRIF From : DAVEX Subject : E.S.N / MIN Time : 2:20:02 AM 10/11/1994 Almost Dead BBS. 0422-364585 Theres a guy on there selling them. [5] Cellular Phreaking Msg # - 409 To : MADMAN From : DAVEX Subject : 4800 Time : 2:34:16 AM 10/11/1994 I been experimenting quite a lot with the 4800, it's a fucking ugly piece of shit, but it is dead easy to interface to. I don't really understand what you mean by scanning? If you just want to listen to conversations then you need celtrak or celmon, gob a few wires onto your audio/logic board and away you go. If on the other hand you mean scanning for pair snarfing purposes, I'm still werking on that, it means a little bit of soldering here and there to get over motorolas oversight, (they forgot to give me access to the pll programing lines from the D socket), but what the hell. The biggest problem is keeping the modem active, unless the fone finds a forward channel and logs the system, it keeps switching the damn modem on and off, (this is the internal modem for signalling, not this peice of shit attached to my serial port.). As you can imagine, a modem thats going on off on off on off on off on off on off ...... pretty soon begings to get on ones tits as they say. But nevertheless,(biggest werd I know), I'm still werking on it. I'll be sure to write a tfile on it once the jobs sorted. Regarding the dialer prog, version 0.2 was  shit what I dun now. Its all gone fucking whit on me.. oh god I'm snow blind. yeah, ver 0.2 was released today, 10-10-94 I'll ul it as soon as I get a decent modem running again, this 1200 baud device isn't fit to be called modem. Why is it all white? is it me? or these mushrooms.... [5] Cellular Phreaking Msg # - 410 To : ALL From : PHANTASM Subject : Motorola 4800 Time : 9:46:35 PM 10/11/1994 If anyone has a Motorola 4800 cellular phone for sale, please contact me via feedback or email. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 413 To : DIPPLEDO From : SUICIDAL FAILURE Subject : ESN Scannin Time : 9:58:28 PM 10/11/1994 > What about starting up a partnership to buy the gear. > Dippledo. How much is the gear reckoned to cost? and does any1 live local to the company that can go 'round and check it out first? -SF [5] Cellular Phreaking Msg # - 414 To : FALLEN ANGEL From : SUICIDAL FAILURE Subject : acoustic couplers Time : 9:59:25 PM 10/11/1994 > Hiya, I was wondering if accoustic couplers work with digital mobil > fones...it just that whenever I try to amp up the volume from mine the > hiss which I get is tremendous. Also, if it does work, what type of > cps should I expect, or what baud is likely to be the maxx. > Thanks in advance.... > Fallen Angel Your phone obviously doesn't have Dolby S noise reduction heheh. umm, 1200 is the highest I've seen with a coupler. -SF [5] Cellular Phreaking Msg # - 415 To : DAVEX From : SUICIDAL FAILURE Subject : hi Time : 10:00:51 PM 10/11/1994 > I sit in the comfort of my own armchair and snarf pairs for miles > around, its dead easy, I wrote a tfile on the subject. go read it. > DaveX smart, I'll check it out (what's the file name? is it even on here? is there a God? is sex with sheep THAT good? -SF [5] Cellular Phreaking Msg # - 418 To : ALL From : MADMAN Subject : Cheesey Time : 12:23:22 AM 10/12/1994 Has anyone got the cheese factory TAC2 s/w vers 1.5 or 1.7 or anythingh earlier of l8r...my motorola's a fuck.... cheerz MadMAN [5] Cellular Phreaking Msg # - 419 To : DAVEX From : DR.FONK Subject : 4800 Time : 12:36:43 AM 10/12/1994 > I been experimenting quite a lot with the 4800, it's a fucking ugly > piece of shit, but it is dead easy to interface to. > I don't really understand what you mean by scanning? > If you just want to listen to conversations then you need celtrak or > celmon, gob a few wires onto your audio/logic board and away you go. > > If on the other hand you mean scanning for pair snarfing purposes, I'm > still werking on that, it means a little bit of soldering here and > there to get over motorolas oversight, (they forgot to give me access > to the pll programing lines from the D socket), but what the hell. > The biggest problem is keeping the modem active, unless the fone finds > a forward channel and logs the system, it keeps switching the damn > modem on and off, (this is the internal modem for signalling, not this > peice of shit attached to my serial port.). As you can imagine, a modem > thats going on off on off on off on off on off on off ...... pretty > soon begings to get on ones tits as they say. But nevertheless,(biggest > werd I know), I'm still werking on it. I'll be sure to write a tfile on > it once the jobs sorted. > > Regarding the dialer prog, version 0.2 was  shit what I dun > now. Its all gone fucking whit on me.. oh god I'm snow blind. > yeah, ver 0.2 was released today, 10-10-94 I'll ul it as soon as I get > a decent modem running again, this 1200 baud device isn't fit to be > called modem. Why is it all white? is it me? or these mushrooms.... hey what ya saying about me motorola babes, i spent two weeks making and programing and testing the buggers and they are nice phones ;) l8rzzzz.......Dr.Fonk [5] Cellular Phreaking Msg # - 420 To : SUICIDAL FAILURE From : MAX OVERDRIVE Subject : ESN Scannin Time : 1:36:55 AM 10/12/1994 The gear definately works, they come from the States, the AMPS version is about USD1700 and the ETACS USD2000, they've got a printer port so you can leave them 'pair' scanning all day. Problem is they've only got a range of about 30 metres. I've got an ad from an American cellular mag, can't find it at the moment, but I'll let you know. Max. [5] Cellular Phreaking Msg # - 422 To : MAX OVERDRIVE From : DIPPLEDO Subject : ESN Scannin Time : 3:21:26 AM 10/13/1994 If any one has a 4800 going leave me mail please. Ta Dippledo.. [5] Cellular Phreaking Msg # - 428 To : FALLEN ANGEL From : SUICIDAL FAILURE Subject : acoustic couplers Time : 11:22:23 PM 10/14/1994 > Hiya, just to say thanx for the info, don't spose if you know how to > change the esn/mins on a NEC P3 which I recently got....? nah, I've got a shitty Motorola (car phone hehehe). -SF [5] Cellular Phreaking Msg # - 433 To : ALL From : ALCHEMIST Subject : esn airwave finder Time : 5:17:05 AM 10/15/1994 hi all, well this may be intersting but i like the idea of this airwave ESN tracker and im willing to pay for one myself... I dont know a lot at all about cellular abuse but im willing to come up with the dosh..if someone who knows what they are taliking about can phone me and have a discussion about this piece of gear and arrange to meet up with me so we can buy it on your kinowledge so we know it works then its a go`er....Maybe if we had a new cellular esn conf and people that join have to pay say a tenner for unlimited esn`s then that would be ok by me and perhaps for every tenner the sysop phantasm could take a cut for the running of the board etc...HWAT DO YOU THINK??? \ get back to me someone on this one whos well in the knowhow!!! also i have a disconected panasonic f1 can i change the esn easily if so how and do i need cable and software if so where do i get the cable from? is there a diagram to make a cable up from and can someone upload the software if any thanx..........Alchemist.. [5] Cellular Phreaking Msg # - 436 To : SUICIDAL FAILURE From : BLACK RANGER Subject : acoustic couplers Time : 10:50:13 PM 10/16/1994 > > Hiya, just to say thanx for the info, don't spose if you know how to > > change the esn/mins on a NEC P3 which I recently got....? > nah, I've got a shitty Motorola (car phone hehehe). > > -SF ye put a p3 rom in the fucker ...modified that is well c00l [5] Cellular Phreaking Msg # - 437 To : ALCHEMIST From : BLACK RANGER Subject : esn airwave finder Time : 10:52:13 PM 10/16/1994 > hi all, well this may be intersting but i like the idea of this airwave > ESN tracker and im willing to pay for one myself... > I dont know a lot at all about cellular abuse but im willing to come up > with the dosh..if someone who knows what they are taliking about can > phone me and have a discussion about this piece of gear and arrange to > meet up with me so we can buy it on your kinowledge so we know it works > then its a go`er....Maybe if we had a new cellular esn conf and people > that join have to pay say a tenner for unlimited esn`s then that would > be ok by me and perhaps for every tenner the sysop phantasm could take > a cut for the running of the board etc...HWAT DO YOU THINK??? \ > get back to me someone on this one whos well in the knowhow!!! > also i have a disconected panasonic f1 can i change the esn easily if > so how and do i need cable and software if so where do i get the cable > from? is there a diagram to make a cable up from and can someone upload > the software if any thanx..........Alchemist.. > ye i mite have known ud be one off the first to try to pocket out off this.... [5] Cellular Phreaking Msg # - 448 To : BLACK RANGER From : MAX OVERDRIVE Subject : esn airwave finder Time : 2:02:07 AM 10/17/1994 Have you got the cash, about 2 grand? If so then just order one from the company that make them in the States. Max. [5] Cellular Phreaking Msg # - 450 To : ALL From : SHERRIF Subject : ESN/ MIN Time : 3:14:54 AM 10/17/1994 OK GUYS WHO INTERESTED IN GOING HALFERS IN A ESN GRABBER THE INITIAL COST OF THE EQUIPMENT IS 1700 all in of course the guy sellin is giving demonstrations here in uk ok...... [5] Cellular Phreaking Msg # - 452 To : SHERRIF From : FALLEN ANGEL Subject : ESN/ MIN Time : 10:54:00 PM 10/17/1994 Hiya, I would be able to contribute a little, but I'm not that rich, I could mayby muster 70 squid, its not much,,but it is a start...? [5] Cellular Phreaking Msg # - 453 To : JONO From : FALLEN ANGEL Subject : P3 test rom Time : 11:46:46 PM 10/17/1994 Hiy7a Jono Fallen Angel here, I was wondering if you could tell me where to get hold of the P3 test rom since I want to reprogram mine. Any help you could give me would be most appreciated. Thaankx alot m8 Fallen Angel [5] Cellular Phreaking Msg # - 454 To : MAX OVERDRIVE From : SUICIDAL FAILURE Subject : esn airwave finder Time : 12:02:00 AM 10/18/1994 > Have you got the cash, about 2 grand? If so then just order one from > the company that make them in the States. > Max. I presume they take credit card orders :) -SF [5] Cellular Phreaking Msg # - 458 To : ALL From : ALCHEMIST Subject : panasonic f1 Time : 4:51:43 AM 10/18/1994 anyone got cables to connect this one to the pc,or know where you can get them from or a diagram to make one up....Regards as always.... [5] Cellular Phreaking Msg # - 459 To : FALLEN ANGEL From : PHANTASM Subject : P3 test rom Time : 7:33:03 AM 10/18/1994 Fallen Angel, the P3 test rom is available online in the 'cellular phreaking' file area. All you need to do is remove the original chip from your P3, burn it with the modified binary source and re-insert it back into the phone. The codes for scanning and reprogramming the ESN/MIN can be found in Jono's P3 test rom user guide. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 460 To : ALCHEMIST From : PHANTASM Subject : panasonic f1 Time : 7:37:00 AM 10/18/1994 If your after cellular reprogramming software and cables, contact the guys at SPYCOM. Tel: 0455-840281 / 0585-285233 Fax: 0455-840281 (ask for Karl or Paul and tell them Phantasm sent you!) Phantasm (SysOp) [5] Cellular Phreaking Msg # - 466 To : DAVEX From : VLADIMIR Subject : modems yet again Time : 2:13:49 AM 10/20/1994 Hi dude. Read yer post a few weeks back on hookin up modems. Are the pin no's the same as would be used on the motorola 8500x? if not, what pins do i use? -+[ VlaDiMiR ]+- [5] Cellular Phreaking Msg # - 476 To : VLADIMIR From : DAVEX Subject : modems yet again Time : 3:13:34 AM 10/23/1994 > Hi dude. Read yer post a few weeks back on hookin up modems. Are the > pin no's the same as would be used on the motorola 8500x? if not, what > pins do i use? > -+[ VlaDiMiR ]+- not having tried it, I am only guessing if I tried to bulshit you. but the modem interface will werk on any fone so long as you find the audio wires, (mic & speaker). you will need to disable the internal mic and speaker though, as the noise will get on your tits, and you will have to sit in complete silence if the mic is still active. You need audio in, audio out and ground. I think best fones are bricks, they are easy to find the connections on, portables need lots of fucking around with to get anywhere. DaveX [5] Cellular Phreaking Msg # - 484 To : PHANTASM From : FALLEN ANGEL Subject : P3 test rom Time : 11:33:03 PM 10/16/1994 Hiya, thanx for the advice, but do you know anyone with the equipment to recode the rom, do I have to buy a new eprom and programmer or can I just recode the old one....much help is needed since this is my first go... Thanx in advance Fallen Angel [5] Cellular Phreaking Msg # - 487 To : FALLEN ANGEL From : PHANTASM Subject : P3 test rom Time : 6:23:52 AM 10/17/1994 You can simply re-burn the original eprom or buy a new eprom if you dont like taking chances with your original. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 490 To : SUICIDAL FAILURE From : MAX OVERDRIVE Subject : esn airwave finder Time : 2:18:13 AM 10/18/1994 Yea, I think they do! Worth a try do you think? Max. [5] Cellular Phreaking Msg # - 498 To : MADMAN From : PULSE Subject : Tac2 Time : 4:51:24 AM 10/19/1994 Yup I got Tac2 v1.6. v1.7 doesn't exist, 2.0 is uncopiable but there's a copiable 2.0 around that's a fake of 1.5. Oh and 2.2 is a fake of 1.5 aswell. ...go figure I can upload v1.6 for ya, but if you got the money I'd suggest you buy 2.0 with Badtypes. (If you are going to buy it, don't buy 3.1 because the only thing it does extra is the new 0374/0585 numbers and it's about 3 times the price. And you can program 0374/0585 using the 9.11 motorola after anyway). P. [5] Cellular Phreaking Msg # - 499 To : PHANTASM From : PULSE Subject : Mot Time : 4:52:22 AM 10/19/1994 Yes, either Motorola 9.11 or Tac2 should do the personal phone. All the stuff should be online here. Check WIRING.EXE for the cable diags. P. [5] Cellular Phreaking Msg # - 500 To : ALCHEMIST From : PULSE Subject : F1 Time : 4:57:09 AM 10/19/1994 I wish people would take the _tiniest_ bit of initiative and actually look at the software on here instead of constantly asking what software will do their phone... There's probably at least one copy of the Panasonic software on here that will do the F series _and_ the diagrams are online aswell. (Look for the one that involves the RS232 convertor thing). If you really want I'll sell you the cables. There are some new cables out now that use a lot less stuff on it - it can all fit into the D-case at the parallel port instead of having a convertor box inbetween. I don't have the diagrams unfortunately. While I'm at it, what's everyone's obsession with 4800s and P3s ? Tehre are plenty more bashable phones out there you know. We'd all be cellular much quicker if you didn't all wait until you could find yourself a 4800x. Plus the 4800s warrant big pockets and a strong back. I prefer portable models. P. [5] Cellular Phreaking Msg # - 505 To : ALL From : PULSE Subject : P3 Pinouts Time : 12:08:26 PM 10/26/1994 Anyone willing to type out the pin-out specs for the P3's 'up-the-bum' socket ? Pinouts for other phones would be interesting aswell if anyone has technical docs. Pulse [5] Cellular Phreaking Msg # - 508 To : MAX OVERDRIVE From : SUICIDAL FAILURE Subject : esn airwave finder Time : 9:29:53 PM 10/27/1994 > Yea, I think they do! Worth a try do you think? > Max. ummm, don't mean to cause any hassle, but once again I don't have a fuck what someone is talking about when they don't quote. -SF [5] Cellular Phreaking Msg # - 518 To : PULSE From : DAVEX Subject : F1 Time : 4:24:31 AM 10/28/1994 > yourself a 4800x. Plus the 4800s warrant big pockets and a strong back. > I prefer portable models. > > P. 4800s chuck out mobile power levels, they get to the cell without loasdza hiss, they also do continuous transmission, whereas the portables are usually vox operated, and not very easy to hang your modem on. The bigest problem seems to be disconnecting the mic and ear while the modem is online, everytime the budgie cheeps, the modem goes into a retrain sequence... 4800x rooles ok. ;-) [5] Cellular Phreaking Msg # - 521 To : ALL From : MADMAN Subject : P3 Roms Time : 10:54:50 PM 10/28/1994 Yup, anyone wanting their old P3 roms burnt into programmable ones Email me for me address , i won't charge cause it aint a hassle just send me old or blank rom and sae .. l8r Madman [5] Cellular Phreaking Msg # - 533 To : DAVEX From : AC ASSASSIN Subject : global Time : 11:06:01 PM 10/30/1994 You can international access on your cellular if you ask for it, you can get it on lifetime and shit as well, they assume most people dont want it and due to the escalation of phonez pinching it saves cellnet/vodaphone or woever a lot of money (interms of lost airtime), could also be relate to the redicolous fuckin prices for int.nat. calls. AAACCC ASSASSINNN [5] Cellular Phreaking Msg # - 539 To : AC ASSASSIN From : DAVEX Subject : global Time : 4:41:31 AM 10/31/1994 > You can international access on your cellular if you ask for it, you > can get it on lifetime and shit as well, they assume most people dont > want it and due to the escalation of phonez pinching it saves > cellnet/vodaphone or woever a lot of money (interms of lost airtime), > could also be relate to the redicolous fuckin prices for int.nat. > calls. > AAACCC ASSASSINNN > The problem is getting international dialling enabvled on someone elses fone, if I wanted to pay for it, I would use a BT landline.. I doubt very much if you could ring vodafone and say, ' hello I'm 0836 123456, can you give me international direct dialling please', they would want your name at very least, probably a letter too. Besides, PABX extenders are safe to use when you on a cellfone, so international isn't a problem. DaveX [5] Cellular Phreaking Msg # - 544 To : MAX OVERDRIVE From : SUICIDAL FAILURE Subject : esn airwave finder Time : 9:47:18 PM 10/31/1994 > > > Yea, I think they do! Worth a try do you think? > > > Max. > > ummm, don't mean to cause any hassle, but once again I don't have a > > fuck what someone is talking about when they don't quote. > > > > -SF > > Carding an ESN reader from the States, perhaps! > Max. ah right, no probs, if someone comes up with a drop sight, mail me with the company's number. -SF [5] Cellular Phreaking Msg # - 564 To : PULSE From : MADMAN Subject : Tac2 Time : 12:54:22 AM 11/04/1994 Cheers m8 , any ideas where i can get a hold of it?? Madman [5] Cellular Phreaking Msg # - 565 To : MADMAN From : PULSE Subject : Tac2 Time : 1:06:50 AM 11/04/1994 Err, yeah - I'll upload it here whenever I get the chance.. At the moment I'm in dire need of McAffee Clean or something to rid myself of this horrible virus I've caught. P. [5] Cellular Phreaking Msg # - 590 To : ALL From : STEALTH Subject : P3's Time : 9:29:36 PM 11/10/1994 Doez any1 want a P3 - The phone you can chip with a chip :) I have some NEC P3's for sale - The standard price for an unconnected P3 is 200 quid. I will do them for 100 quid. If ya want one with a rom, the price is 150...This lets ya scan, enter new ESN's through keypad etc... Mail me... Stealth Leave a voice number. S [5] Cellular Phreaking Msg # - 595 To : DAVEX From : FLASH Subject : Snarfing Time : 2:25:52 AM 11/13/1994 DaveX, about a month ago you said that you can snarf ESN's from miles aroud. I read your text file on snarfing, and to be honest, it went straight over my head. Okay, so here's my idea, seeing as people have been talking about getting one of those thingies from the states that cost 2 grand, would it be possible for you, or someone else, to knock together a snarfer, and we could all contribute to the cost. Then someone, like Phantasm, could use it and give out the ESN/MIN pairs. It would certainly be cheaper than getting one of them from the US. Flash. [5] Cellular Phreaking Msg # - 608 To : FLASH From : SUICIDAL FAILURE Subject : Snarfing Time : 9:13:29 PM 11/14/1994 > DaveX, about a month ago you said that you can snarf ESN's from miles > aroud. I read your text file on snarfing, and to be honest, it went > straight over my head. Okay, so here's my idea, seeing as people have > been talking about getting one of those thingies from the states that > cost 2 grand, would it be possible for you, or someone else, to knock > together a snarfer, and we could all contribute to the cost. Then > someone, like Phantasm, could use it and give out the ESN/MIN pairs. > It would certainly be cheaper than getting one of them from the US. > > Flash. > I think that was precisely the thing you told people not to do in your file Dave ehehehe -SF [5] Cellular Phreaking Msg # - 626 To : ALL From : HACK10F Subject : bull shit Time : 9:26:26 PM 11/19/1994 Whats this about a panasonic f1 esn graber chip its a load of rubish and is quite inpossable ...... s\ s/ [5] Cellular Phreaking Msg # - 629 To : ALL From : BOB COLLINS Subject : esn and min Time : 10:30:17 PM 11/20/1994 does anyone have any pairs for sale (quite urgent) do not need international service good money paid. also does anybody have any further info on the ad in excahange and mart advertising grabber for sale (southend number) would appreciate any help and guidance as just starting out. new member of board. regards bob [5] Cellular Phreaking Msg # - 630 To : ALL From : BLACKTHORN Subject : Esn, CCs, money Time : 11:52:05 PM 11/20/1994 i am looking for Esn/min pairs, Cards, other stuff to trade for Cds i can get hold of(tango,playdoh,blobby,BTphonebase) if you are intrested in soem cds, mail me here, or if possible on Urban XTC 0225-ugotthenumber... thanks [5] Cellular Phreaking Msg # - 633 To : ALL From : BOB COLLINS Subject : esn grabber Time : 11:57:58 PM 11/21/1994 further to the ad in exchange and mart for the above, it costs 1,500 +vat and only has a range of 240 ft. company selling theese is jah cellular southend theese are imported from the states. dont look a lot of good. [5] Cellular Phreaking Msg # - 634 To : ALL From : SHAFT Subject : Is it pos? Time : 12:45:22 AM 11/24/1994 I need help on Re-programming Ericcson 239 Phonez. It IS possible,but how and how to make the leads is not known to me,nor have I seen the possible sofware...I also have XS to LOTS of Phillips PR92 phonez,BRAND new and ESN free. But as I am aware,no CUNT knows how to re-program em.......Yours hopingly SHaFT [5] Cellular Phreaking Msg # - 648 To : ALL From : JAYDAR Subject : bt (nec) p3 phone Time : 10:58:45 PM 11/30/1994 i've got my hands on one of these and want to connect it to my modem anybody do the mods/cables etc.. laters--- jAyDar [5] Cellular Phreaking Msg # - 651 To : JAYDAR From : BLACKTHORN Subject : bt (nec) p3 phone Time : 12:57:47 AM 12/01/1994 Hmm modem connectors for the P3, Well from what ive heard it is not possible thats wot all the vodafone shops say, however i read on uk.telecom that there is a company doing them for 300 quid, which leads me to think it is a complex add on. [5] Cellular Phreaking Msg # - 668 To : ALL From : MADMAN Subject : cellshit Time : 12:45:58 PM 12/06/1994 Can anyone give me some info on the following - 1. Getting DaveX's Modem to 4800 circuit working.. 2. Programming a 1992 6800 Motorola Bag-Phone... Cheers. Madman [5] Cellular Phreaking Msg # - 675 To : ALL From : TURBO BRAIN Subject : ESN's Time : 12:26:02 PM 12/07/1994 How long da ya ESn's last for!!!!! most of my CELLNET oones only last for 2-3 days, and da globe one i had lasted 5 days... why they dieing so fast!!!! l8r's............ PS my new VMb number is: 0956 342 517 if any1 needs ta contact me.. [5] Cellular Phreaking Msg # - 676 To : ALL From : TURBO BRAIN Subject : Time : 12:27:07 PM 12/07/1994 Whats da cheapest proce for a P3 TEST CHIP theses days!!! may need a few of them... any offers!!!! [5] Cellular Phreaking Msg # - 677 To : ALL From : STEALTH Subject : p3s Time : 9:13:02 AM 12/08/1994 NEC P3 cellular phones - 100 pounds standard or 140 chipped (reprogrammable via keypad and built in scanner mode, etc) Contact me via private Email, Stealth [5] Cellular Phreaking Msg # - 678 To : TURBO BRAIN From : BLACKTHORN Subject : ESN's Time : 9:48:41 AM 12/08/1994 dpends how ya using em, and how many other peeps have em, also put 00000 as the home area that usually helps..ermm if you live in london ESNs will die a hell of a lot faster as they have new h/w there i have been told which will detect if there is a basher about [5] Cellular Phreaking Msg # - 682 To : PULSE From : MADMAN Subject : new mots Time : 12:07:59 PM 12/08/1994 eh,cherokee said you'd maybe be able to help with programming new motorola's with s/w over version's 9211.... cheers Madman [5] Cellular Phreaking Msg # - 683 To : BLACKTHORN From : TURBO BRAIN Subject : ESN's Time : 12:15:38 PM 12/08/1994 Yeah im in da London area... i use the 00000 home area.... Do VodaFone Esn's last longer then cellnet!!! l8r's... [5] Cellular Phreaking Msg # - 690 To : TURBO BRAIN From : VLADIMIR Subject : ESN's Time : 5:27:42 PM 12/09/1994 yep also in the london area & i woz wondering why me esn's died so quick! -+[ VlaDiMiR ]+- [5] Cellular Phreaking Msg # - 693 To : VLADIMIR From : TURBO BRAIN Subject : ESN's Time : 10:44:41 AM 12/10/1994 im now using vodafone.. lasts longer.. its been up for 5 days now and yet to see how long it will stay.. l8r's..... [5] Cellular Phreaking Msg # - 703 To : TURBO BRAIN From : VLADIMIR Subject : esn's again Time : 2:21:50 AM 12/16/1994 Hi again m8. how u gettin yer esn's? u know someone wiv a snarfer? & could i swop a couple of vmb's fer some? L8rZz -+[ VlaDiMiR ]+- [5] Cellular Phreaking Msg # - 717 To : MADMAN From : DAVEX Subject : cellshit Time : 12:21:27 PM 12/20/1994 > Can anyone give me some info on the following - > 1. Getting DaveX's Modem to 4800 circuit working.. > 2. Programming a 1992 6800 Motorola Bag-Phone... > Cheers. > Madman 1. Persevere. 2. Use the same cable as for 45/4800 & same sw. DaveX [5] Cellular Phreaking Msg # - 718 To : TURBO BRAIN From : DAVEX Subject : ESN's Time : 12:26:00 PM 12/20/1994 Not noticed any difference in lifetime on either system (up here in the frozen north :-) ). Depends on how many ppl using that pair, and who the legit owner is. Joe Bloggs Handyman who never makes calls only receives them will go apeshit when he gets his bill, ( which could be anytime), Pickfords will not notice for about 2 months untill the driver starts whining cos they deducted 5 grand from his pay packet... DaveX [5] Cellular Phreaking Msg # - 728 To : DAVEX From : SUICIDAL FAILURE Subject : cellshit Time : 10:01:32 AM 12/21/1994 > > Can anyone give me some info on the following - > > 1. Getting DaveX's Modem to 4800 circuit working.. > > 2. Programming a 1992 6800 Motorola Bag-Phone... > > Cheers. > > Madman > 1. Persevere. > 2. Use the same cable as for 45/4800 & same sw. > DaveX And they say the experienced hp'ers aren't helping out the new guyz nuff. -SF [5] Cellular Phreaking Msg # - 747 To : BLACKTHORN From : PULSE Subject : bt (nec) p3 phone Time : 10:08:58 AM 12/25/1994 A P3 Modem connector is available - For a start, you can buy the NeFax which is a portable fax which comes with the cable to connect it to an NEC handportable - This you could also use for a modem. Pulse [5] Cellular Phreaking Msg # - 748 To : DAVEX From : PULSE Subject : ESN's Time : 10:11:20 AM 12/25/1994 I've noticed that Cellnet pairs last a hell of a lot longer than Vodafone pairs. If you have enough to pick and choose go for the ones with the older serial nums as they're long-standing and probably business customers (more than likely). Pulse [5] Cellular Phreaking Msg # - 749 To : MADMAN From : PULSE Subject : new mots Time : 10:12:45 AM 12/25/1994 Yer I replied to you on Urban XTC with my voice num so give me a call and I'll help ya out. (If you haven't already done it) Contrary to what my good friend Davex said you may well need to use different cables _and_ different software... Pulse [5] Cellular Phreaking Msg # - 751 To : PULSE From : DAVEX Subject : ESN's Time : 12:26:03 PM 12/25/1994 > I've noticed that Cellnet pairs last a hell of a lot longer than > Vodafone pairs. If you have enough to pick and choose go for the ones > with the older serial nums as they're long-standing and probably > business customers (more than likely). > > Pulse You may have noticed that the 400+ pairz I posted on xmas day were all vodafone numbers, so you may have a valid point on which system is the most useful.. But notwithstanding the aforementioned, a pair is a pair, and if you get five quids worth of calls off it for free, who's to complain. Happy New Year DaveX [5] Cellular Phreaking Msg # - 755 To : ALL From : SCRIBLA Subject : spy/celltrak Time : 10:30:46 AM 12/26/1994 Hi all, anyone out there run spy/celltrak ? well, correct me if i'm wrong but i thought the idea was to target some min's and then listen when the become avail ? well i not to good a guessing voice channels ! i am i doing it all wrong ? all comments appriecated... sCribLa [5] Cellular Phreaking Msg # - 758 To : SCRIBLA From : DAVEX Subject : spy/celltrak Time : 12:14:56 PM 12/26/1994 > Hi all, > anyone out there run spy/celltrak ? > well, correct me if i'm wrong but i thought the idea was to target > some min's and then listen when the become avail ? > well i not to good a guessing voice channels ! > i am i doing it all wrong ? > all comments appriecated... > > sCribLa There was once a version of celltrack which claimed to snarf pairs, but I've never seen one that actually werked. If you set everything on in the options menu, it will track all coinversations, if you only intersested in certain numbers, this option can also be set, and if celltrak sees this number it beeps. This is ideal for industrial espionage or listening in to the local whore, but other than that it is boring stuff, I stopped using it about a week after I got it. DaveX [5] Cellular Phreaking Msg # - 759 To : ALL From : BLACKTHORN Subject : motorola brick Time : 1:02:57 PM 12/26/1994 does anyone know if it is possible to pick up ESNs off a motorola 8900 fone, you see i am in the middel of 2 groups of people i know, one lot say you need a proper ddi or a 8900 + a rddio scanner, the other lot say, it is possible what is thr truth..i cant be phucked to listen to listen to both sides saying its possible/not possible any longer so someone please tell me is it possible or not..and while your at it what is the true meaning of life, coz i aint found it :) [5] Cellular Phreaking Msg # - 768 To : STEALTH From : ALCHEMIST Subject : phones Time : 4:12:33 AM 12/30/1994 hear you were selling some chipped phones p3`s well im interested just leave me some info as im quite new on the cellular side...Regards as always Alchy [5] Cellular Phreaking Msg # - 778 To : BT From : DR.FONK Subject : nokia Time : 4:52:02 AM 01/04/1995 can sum1 tell me if its poss to chip a nokia 100 or 101??.....any infos...would b mucho apreciated! Dr.Fonk [5] Cellular Phreaking Msg # - 856 To : DAVEX From : SUICIDAL FAILURE Subject : good game good game Time : 9:58:38 PM 01/20/1995 > Well good game of doom that! > I don't think it's taken to this editor real well, I'll ul it as well > so you can get a correctly formatted version. > > l8ter > DaVeX re mate. any way, is there a standard excuse for when the telco's call and ask who was calling for two and a half hours? I'll think of sumthing. Hmmmm, have you got mps golf? that's modem I think. limitations of your 386 are a bugger though :) -SF [5] Cellular Phreaking Msg # - 878 To : SUICIDAL FAILURE From : DAVEX Subject : good game good game Time : 11:07:38 AM 02/28/1991 > > Well good game of doom that! > > I don't think it's taken to this editor real well, I'll ul it as well > > so you can get a correctly formatted version. > > > > l8ter > > DaVeX > re mate. any way, is there a standard excuse for when the telco's call > and ask who was calling for two and a half hours? I'll think of > sumthing. Hmmmm, have you got mps golf? that's modem I think. > limitations of your 386 are a bugger though :) > > -SF Yerrr but its not a speccy, I've come up in the world a bit. When you card your pentium, get me one too! DaVeX [5] Cellular Phreaking Msg # - 884 To : DAVEX From : SUICIDAL FAILURE Subject : good game good game Time : 9:47:56 PM 01/22/1995 > > > Well good game of doom that! > > > I don't think it's taken to this editor real well, I'll ul it as well > > > so you can get a correctly formatted version. > > > > > > l8ter > > > DaVeX > > re mate. any way, is there a standard excuse for when the telco's call > > and ask who was calling for two and a half hours? I'll think of > > sumthing. Hmmmm, have you got mps golf? that's modem I think. > > limitations of your 386 are a bugger though :) > > > > -SF > Yerrr but its not a speccy, I've come up in the world a bit. > When you card your pentium, get me one too! > DaVeX The carding idea is nearing fruition, so maybe some results fairly soon. I'll order lots of some 1meg and 4 meg simms, perhaps send you a few (and maybe a 386to486 chip muhahahahahah). -SF PS. I don't have a car, so carrying a pentium away from drop-site maybe a bit difficult, unless you want to come up from, Yorkshire?, for a day. [5] Cellular Phreaking Msg # - 894 To : DAVEX From : SUICIDAL FAILURE Subject : good game good game Time : 10:23:03 PM 01/25/1995 > > The carding idea is nearing fruition, so maybe some results fairly > > soon. I'll order lots of some 1meg and 4 meg simms, perhaps send you a > > few (and maybe a 386to486 chip muhahahahahah). > > > > -SF > > > > PS. I don't have a car, so carrying a pentium away from drop-site maybe > > a bit difficult, unless you want to come up from, Yorkshire?, for a > > day. > > > I don't think my honda melody would make it all the way up there, so I > guess I'll have to wait a while. > DaVeX I'll need to find someone into the 'hp' scene with a bit of bottle (and I don't mean ketchup, allright!). Every1 I know is too scared. -SF [5] Cellular Phreaking Msg # - 911 To : CHEROKEE From : SUICIDAL FAILURE Subject : good game good game Time : 11:10:46 PM 01/27/1995 > What to say when cellnet/vodaphone you... > > Im sorry hes not in at the moment, but if i can take your name and > number i'll get back to you :) > > This is a private ex-directory number, please dont call again, or i'll > have to report you for malicous calling ... > > Cellnet? What do you sell ;) > > Cherokee > ummm, but it's not a priv8 exdir numba :) ah well, just have to get arrested for sum pussy offense, it's not even a real crime is it? -SF hey Dave, there's another guy posting msgs here, don't scare him off! [5] Cellular Phreaking Msg # - 919 To : SUICIDAL FAILURE From : DAVEX Subject : good game good game Time : 3:53:36 AM 01/28/1995 > > What to say when cellnet/vodaphone you... > > > > Im sorry hes not in at the moment, but if i can take your name and > > number i'll get back to you :) > > > > This is a private ex-directory number, please dont call again, or i'll > > have to report you for malicous calling ... > > > > Cellnet? What do you sell ;) > > > > Cherokee > > > ummm, but it's not a priv8 exdir numba :) ah well, just have to get > arrested for sum pussy offense, it's not even a real crime is it? > > -SF > > hey Dave, there's another guy posting msgs here, don't scare him off! > Must be the return of the p/c ratio, it does wonders for the mail... [5] Cellular Phreaking Msg # - 929 To : DAVEX From : CYBERNETIK Subject : scanning n stuff Time : 1:00:42 AM 01/29/1995 Hi Davex, I was wondering whether you have your 4800X set up so that you can autodial and scan for modems etc. just like a normal fone. Interesting idea? You would probably need to put a command line switch in motdial to dial numbers or something and then call it from a hacking/scanning script. Just an idea... but perhaps the cellular s/w would recognise many very short calls from the same fone?? L8rz, _ (_ybernetik [5] Cellular Phreaking Msg # - 938 To : CYBERNETIK From : DAVEX Subject : scanning n stuff Time : 5:24:43 AM 01/29/1995 > Hi Davex, I was wondering whether you have your 4800X set up so that > you can autodial and scan for modems etc. just like a normal fone. > Interesting idea? You would probably > need to put a command line switch in motdial to dial numbers or > something and then call it from a hacking/scanning script. > > Just an idea... but perhaps the cellular s/w would recognise many very > short calls from the same fone?? > > L8rz, > _ > (_ybernetik I haven't done the mechanised version yet, I'm werking on a circuit to decode dtmf and turn it into mot-bus codes, kinda like a hardware motdial without the fone book, this would be compatible with toneloc etc. I've scanned whole exchanges manually using a pair of headfones in the modem jack and using the scanner in motdial to do the dialing. The netwerk doesn't seem to care about lots of calls, so long as they remain within budget. If you dl 5 megs from australia, the next call won't go through, coz the netwerks 'high-roller' sw suspends the acc. But this only happens between calls, so if you get online, you can stay there all day. I'll release the info for the hardware thing soon as I get it sorted, should make life much easier. Has anyone else got my modem interface running yet??? DaVeX .s [5] Cellular Phreaking Msg # - 961 To : ALL From : THE 1066 BANDIT Subject : Technophone PC215T Time : 10:58:38 PM 01/31/1995 Does anyone have any NAM programming info on this phone or any chipping software (if it exists). cheerz ATr0CiTY nee The 1066 Bandit [5] Cellular Phreaking Msg # - 966 To : DAVEX From : CYBERNETIK Subject : a Time : 11:40:08 PM 01/31/1995 I haven't done the mechanised version yet, I'm werking on a circuit to decode dtmf and turn it into mot-bus codes, kinda like a hardware motdial without the fone book, this would be compatible with toneloc etc. I've scanned whole exchanges manually using a pair of headfones in the modem jack and using the scanner in motdial to do the dialing. The netwerk doesn't seem to care about lots of calls, so long as they remain within budget. If you dl 5 megs from australia, the next call won't go through, coz the netwerks 'high-roller' sw suspends the acc. But this only happens between calls, so if you get online, you can stay there all day. I'll release the info for the hardware thing soon as I get it sorted, should make life much easier. Has anyone else got my modem interface running yet??? DaVeX ----------------------------------------------------------------------- Ah but you wouldn't be able to scan pbx's etc. with it, would you? I was think thawith acommand line call likemotdial.com 00592279000 you would be able to scan using a script, or you could run hacking programs like the Telix hacker, which would be pretty kewl. Would there be a simpler way to dial that would werk on any Motorola? I was messing about with the pins and when I turned my fone on I got a load of ones across the display, and I could still edit it and dial. I thought that maybe you could control the data line in the reprogramming lead and get that to dial. Im rking on your modem interface. Does anyone know the audio tx pin on an 8500X? I have the rx but no mic to test for the tx... L8rz, _ (_ybernetik ps. Hey, im really thinking of stuff to post now :) Theres an irc meet on Friday nights at /join #hpavc. I may well be there) [5] Cellular Phreaking Msg # - 972 To : CYBERNETIK From : DAVEX Subject : a Time : 5:09:46 AM 02/01/1995 > I haven't done the mechanised version yet, I'm werking on a circuit to > decode dtmf and turn it into mot-bus codes, kinda like a hardware > motdial without the fone book, this would be compatible with toneloc > etc. > I've scanned whole exchanges manually using a pair of headfones in the > modem jack and using the scanner in motdial to do the dialing. The > netwerk doesn't seem to care about lots of calls, so long as they > remain within budget. If you dl 5 megs from australia, the next call > won't go through, coz the netwerks 'high-roller' sw suspends the acc. > But this only happens between calls, so if you get online, you can stay > there all day. > > I'll release the info for the hardware thing soon as I get it sorted, > should make life much easier. > > Has anyone else got my modem interface running yet??? > > DaVeX > > ----------------------------------------------------------------------- > > Ah but you wouldn't be able to scan pbx's etc. with it, would you? I > was think thawith acommand line call likemotdial.com 00592279000 > you would be able to scan using a script, or you could run hacking > programs like the Telix hacker, which would be pretty kewl. > > Would there be a simpler way to dial that would werk on any Motorola? > I was messing about with the pins and when I turned my fone on I got > a load of ones across the display, and I could still edit it and > dial. I thought that maybe you could control the data line in the > reprogramming lead and get that to dial. > > Im rking on your modem interface. Does anyone know the audio tx > pin on an 8500X? I have the rx but no mic to test for the tx... > > L8rz, > _ > (_ybernetik > > ps. Hey, im really thinking of stuff to post now :) Theres an irc > meet on Friday nights at /join #hpavc. I may well be there) If it would realy help, I'll put the command line option in the next release. Any one else want this 'feature' ? DaVeX [5] Cellular Phreaking Msg # - 1003 To : DAVEX From : SUICIDAL FAILURE Subject : good game good game Time : 11:30:53 AM 02/04/1995 > > > What to say when cellnet/vodaphone you... > > > > > > Im sorry hes not in at the moment, but if i can take your name and > > > number i'll get back to you :) > > > > > > This is a private ex-directory number, please dont call again, or i'll > > > have to report you for malicous calling ... > > > > > > Cellnet? What do you sell ;) > > > > > > Cherokee > > > > > ummm, but it's not a priv8 exdir numba :) ah well, just have to get > > arrested for sum pussy offense, it's not even a real crime is it? > > > > -SF > > > > hey Dave, there's another guy posting msgs here, don't scare him off! > > > Must be the return of the p/c ratio, it does wonders for the mail... Yeah, but you get guys like us posting a load of shite all the time. No, hang-on, we were doing that b4 he pu the ration back. -SF [5] Cellular Phreaking Msg # - 1004 To : ALL From : BLACKTHORN Subject : what happens Time : 1:12:48 PM 02/04/1995 can some one tell me what happens when someone gets a bill that has gone sky high due to cloning, just asking, coz yesterday my dad got a call from someone up north saying someone had called me 2 times. as well as other numbers in the local area, he was well pissed..in fact he called at 1.30 in the morning. he said he was going to go to the police my dad went a mad at me going on about court and giving evendence.yak yak.. but in reality what happens? i know of several people who have had similar calls.they tell the cellnet/voda whoever to fuck off, and nothing more comes of it. Will the police do anything if called? fucking hope not, coz i dont even know who it was who called me. plus dont wanna get in shit for holding back information..i would not grass asnyone in. [5] Cellular Phreaking Msg # - 1008 To : SUICIDAL FAILURE From : DAVEX Subject : good game good game Time : 5:50:26 PM 02/04/1995 > > > > What to say when cellnet/vodaphone you... > > > > > > > > Im sorry hes not in at the moment, but if i can take your name and > > > > number i'll get back to you :) > > > > > > > > This is a private ex-directory number, please dont call again, or i'll > > > > have to report you for malicous calling ... > > > > > > > > Cellnet? What do you sell ;) > > > > > > > > Cherokee > > > > > > > ummm, but it's not a priv8 exdir numba :) ah well, just have to get > > > arrested for sum pussy offense, it's not even a real crime is it? > > > > > > -SF > > > > > > hey Dave, there's another guy posting msgs here, don't scare him off! > > > > > Must be the return of the p/c ratio, it does wonders for the mail... > Yeah, but you get guys like us posting a load of shite all the time. > No, hang-on, we were doing that b4 he pu the ration back. > > -SF I'm glad you value my input so. ;-) DaVeX [5] Cellular Phreaking Msg # - 1025 To : ALL From : UNCLE FESTER Subject : motorola ???? Time : 12:04:47 AM 02/08/1995 Wonder if any one can help me .... just got a mobile and am interested in re-chipin it, the prob is don't no what make it is (as in model number). All I now is that it is called a (hang on...........) BT CORAL fone. Does any one have any info on how to re-chip or prog a new ESN + NAM number. Any info or progs or cabeling diags would be appreciated... Uncle Fester  [5] Cellular Phreaking Msg # - 1027 To : ALL From : FLASH Subject : Little Sony Time : 2:05:16 AM 02/09/1995 Is it possble to reprog one of those tiny little Sony fones?? I think it's te CMH-111??, ya know the really small ones with the tiny flip down mouthpiece, Flash. [5] Cellular Phreaking Msg # - 1028 To : ALL From : FLASH Subject : Vodac/NEC Time : 2:06:03 AM 02/09/1995 Is a Vodac V220 (I think) exactly the same as a NEC P100?? Cos they certainly look the same, cos I may be able to get one cheap. Flash. [5] Cellular Phreaking Msg # - 1032 To : FLASH From : PHANTASM Subject : Little Sony Time : 6:52:25 AM 02/09/1995 Flash, the Sony 'marsbar' phone software is available in the cellular file area. (if you are a subscriber) Phantasm (SysOp) [5] Cellular Phreaking Msg # - 1052 To : PHANTASM From : FLASH Subject : Sony Time : 12:35:27 AM 02/12/1995 I meant the newer even smaller Sony one, that's sort of square shaped and has a credit card sized "remote control" thingy i.e. keypad and display. And it's got a socket in the side for an earpiece/microphone. 'Cos they're really cool and they're only 20 quid in the Rumbelows sale!! Flash. [5] Cellular Phreaking Msg # - 1074 To : ALL From : SHAFT Subject : Cellular Time : 12:55:15 AM 02/15/1995 Hi, could anyone please supply me with one or more motorola 4800 or compatable ( Of With I mean with a modem lead supplied ), ready for cellular phreaking. I will pay up to 300 pound or more for good ones with good deals. Call me oin 01203-681956 or E-mail please. Many thanx..SHaFT [5] Cellular Phreaking Msg # - 1088 To : PHANTASM From : MAX OVERDRIVE Subject : Little Sony Time : 7:34:57 PM 03/01/1991 I think he means the 'kit-kat', not the mars bar. Can be done but not shareware. Max. [5] Cellular Phreaking Msg # - 1092 To : CELLNET UK From : MIRROR Subject : esns Time : 4:47:07 AM 03/02/1991 Here's some information I gathered on ESN's: Whats in a ESN? An ESN is short for Electronic Serial Number and just tells the company who your with info, on your phone....etc..etc...heres what they mean: Example: 02/01/00/18273 ^^--Phone ID number ^^--Company ID ^^--ALWAYS 00, reserved for future expansion ^^^^^--The ESN itself The phone IDs are as follows: 02 - NEC phones 40 ) 05 |- Motorola phones 03 ) 29 - MD100 phones 11 - ClearTone Phones 04 - TechnoPhones 15 - Panasonic PHones The ID's above tell the Cellphone company what phone the ESN is going into. There are others, when I get them I'll post them. Anyway thats about, This info will be in the text fiel I am releasing. [5] Cellular Phreaking Msg # - 1093 To : SOFTWARE MAKERS LTD. From : MIRROR Subject : 8900X-2 Time : 4:49:39 AM 03/02/1991 Does anyone know where I can get the re-programming software for the 8900X-2 motorola phone?? I have the programming lead I just need the software, if anyone has it could they u/l it pleas..cheerz! [5] Cellular Phreaking Msg # - 1096 To : MIRROR From : CHEROKEE Subject : esns Time : 3:46:59 AM 03/03/1991 > Here's some information I gathered on ESN's: > > Whats in a ESN? > > An ESN is short for Electronic Serial Number and just tells the company > who your with info, on your phone....etc..etc...heres what they mean: > > Example: 02/01/00/18273 > ^^--Phone ID number > ^^--Company ID > ^^--ALWAYS 00, reserved for future expansion > ^^^^^--The ESN itself > > The phone IDs are as follows: > 02 - NEC phones > 40 ) > 05 |- Motorola phones > 03 ) > 29 - MD100 phones > 11 - ClearTone Phones > 04 - TechnoPhones > 15 - Panasonic PHones > > The ID's above tell the Cellphone company what phone the ESN is going > into. There are others, when I get them I'll post them. > Anyway thats about, This info will be in the text fiel I am releasing. You may want to check out DaveX's ESN identification list, if its not online, im sure DaveX will upload it :-) Cherokee [5] Cellular Phreaking Msg # - 1105 To : CHEROKEE From : CODEWALKER Subject : esns Time : 11:50:45 PM 02/19/1995 Hi guy's look about these ESN's could you guy's do me a favour and use this number i need to totally fuck-up the cell fone company because they are calling around to see who i have been calling and as yet have had no joy. So i would thank you guy's to kick the shit out of this one so they have NO CHANCE of knowing where it came from. This number was trashed in jan of this year and as of now is still up and running! So here it is and have phun.......ESN 05510004217 tel no...0585 664853 ok that's it and remember have phun. BTW is it true global boxing is back from the dead via......ahhhhhhhhhh now would'nt that be telling:-). s e shit i forgot how to get out of this!!!!!!!! x [5] Cellular Phreaking Msg # - 1106 To : ALL From : HUXLEY Subject : nokia nhe-1xn Time : 1:08:21 AM 02/20/1995 y0 there got hold of a nokia phone ..the small digi one i think got no battery.. so if some one has one ..how much ? if your selling also is theere any docs on this phone as i'm realitively new to the art of cellphone abuse..could anyone help me out as i need to re-prog this phone and i don't know how !! the only other codes on this phone is : code :0500114 cheers if you can help me out huxley .s .S .s .h fuck [5] Cellular Phreaking Msg # - 1107 To : ALL From : PHANTASM Subject : ESN/MIN grabber Time : 9:17:38 PM 02/20/1995 How much would people be prepared to pay for a UK ESN/MIN grabber unit? Phantasm (SysOp) [5] Cellular Phreaking Msg # - 1111 To : ALL From : AL Subject : 8500x snarfer Time : 11:09:55 PM 02/21/1995 Anyone has any info on snirfing pairz. I am looking for s/ware and any info on i/face to pc. Al [5] Cellular Phreaking Msg # - 1113 To : ALL From : CYBERNETIK Subject : cel... Time : 11:47:48 PM 02/21/1995 Hi does anyone know what an 'outage' is? Cellular company-speak for summat... also I've just seen Newsnight (about Kevin Mitnicks bust) Hehehe I laughed at the repeated comment 'Scotland Yards 5 strong computer crime department'. 5 strong? Hahaha L8rz, _ (_ybernetik [5] Cellular Phreaking Msg # - 1118 To : CYBERNETIK From : AL Subject : cel... Time : 2:00:24 AM 02/23/1995 :-) Isnt it five odd #. Al [5] Cellular Phreaking Msg # - 1119 To : ALL From : LIFE Subject : Nec Time : 2:48:08 AM 02/23/1995 Hi! Does anybody knows or have info about the Nec P100 phone? I'would like to use it in Test mode. with Channels. In Some necs it comes via keyboard. Please! Life [5] Cellular Phreaking Msg # - 1121 To : PHANTASM From : SUICIDAL FAILURE Subject : ESN/MIN grabber Time : 10:08:05 PM 02/23/1995 > How much would people be prepared to pay for a UK ESN/MIN grabber unit? > > Phantasm (SysOp) PRobly more than one hundred quid, but that's all I've got available right now :) -sf [5] Cellular Phreaking Msg # - 1122 To : SUICIDAL FAILURE From : PHANTASM Subject : ESN/MIN grabber Time : 6:48:52 AM 02/24/1995 > > How much would people be prepared to pay for a UK ESN/MIN grabber unit? > > > > Phantasm (SysOp) > PRobly more than one hundred quid, but that's all I've got available > right now :) > > -sf > I have some friends in Newcastle who are currently building a low cost device. I expect it will be priced around 300 pounds. This is very cheap compared most esn/min grabbers, which are priced at over 1000 pounds. These guys have been designing and building surveillance equipment for the last 3 years and have done a lot of research into this type of device. They also sell car alarm code grabbers similar to those advertised in Exchange & Mart. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 1127 To : SUICIDAL FAILURE From : DOUGIE Subject : ESN/MIN grabber Time : 11:38:44 PM 02/24/1995 i am intrested in getting one of these esn/min/grabbers please could you get in contact with me and tell me how i can get in touch with you freinds ov/out dougie....... [5] Cellular Phreaking Msg # - 1132 To : DOUGIE From : SUICIDAL FAILURE Subject : ESN/MIN grabber Time : 10:10:26 PM 02/25/1995 > i am intrested in getting one of these esn/min/grabbers > please could you get in contact with me and > tell me how i can get in touch with you freinds > ov/out > dougie....... umm, shit, why can't I reply to Phantasm!!!!! fuck, ummm, I'd be interested, but funds are a little low right now :) Perhaps in a few months........ Ummm, I hope you're not Black widow BTW Dougie. -SF [5] Cellular Phreaking Msg # - 1134 To : ALL From : JIM-LAD Subject : nok Time : 12:38:34 AM 02/26/1995 I have a Nokia THX-6X, does anyone have any information on this fone???????? Cheers, Jim-lad...... [5] Cellular Phreaking Msg # - 1141 To : ALL From : CHANCER Subject : CURTIS SNARFER! Time : 10:10:12 PM 02/26/1995 HAS ANYBODY GOT ANY IDEA HOW TO CONVERT A CURTIS SNARFER TO SNARF THE FULL MIN-CODE?MINE ONLY GIVES ME THE LAST 6 DIGITS AND MISSES OUT THE ALL IMPORTANT 2340 etc./. I KNOW IT COULD ONLY BE 1 OF 4 CODES IF IM ONLY SNARFING VODAFONE FOR INSTANCE , BUT IT IS STILL A PAIN IN THE ARSE CALLING ALL THE POSSIBLES!ANY HELP WOULD BE GREATLY APPRECIATED..        CHANCER................. [5] Cellular Phreaking Msg # - 1159 To : CHANCER From : CHEROKEE Subject : CURTIS SNARFER! Time : 11:38:49 PM 02/28/1995 > HAS ANYBODY GOT ANY IDEA HOW TO CONVERT A CURTIS SNARFER TO SNARF THE > FULL MIN-CODE?MINE ONLY GIVES ME THE LAST 6 DIGITS AND MISSES OUT THE > ALL IMPORTANT 2340 etc./. I KNOW IT COULD ONLY BE 1 OF 4 CODES IF IM > ONLY SNARFING VODAFONE FOR INSTANCE , BUT IT IS STILL A PAIN IN THE > ARSE CALLING ALL THE POSSIBLES!ANY HELP WOULD BE GREATLY APPRECIATED.. >  >  >  >  >  >  >  > CHANCER................. Sounds to me like you have version C. Version B displays the full information. I would try reading the EPROM(?) on version B and put into your version, and hope it works. The only problem, is that i very much doubt it is a EPROM, but im sure you'll let me know :-) Cherokee [5] Cellular Phreaking Msg # - 1162 To : ALL From : FRUITBAT Subject : P3 Time : 11:56:21 PM 02/28/1995 Eh up all... Prices for a P3 Test eprom ? L8rZ... [5] Cellular Phreaking Msg # - 1171 To : ALL From : DAVEX Subject : info Time : 12:28:03 AM 03/04/1995 So I need to know more about the motorola fone. Primarily about the signals in the curly lead. Does anyone have the definative story to this? or even a good guess based on personal experience? This info is around, celltrak's author knew how the fone communicates with the handset, so did the various programming sw writers, so how come none of YOU the cream of the UK's hacking/phreaking community seem to know anything about it? Lets liberate this piece of info, it will allow allsorts of experimentation with bricks, might even lead to some decent sw being developed. I'll even give international pairz to anyone who comes up with the goods. DaVeX [5] Cellular Phreaking Msg # - 1177 To : ALL From : PULSE Subject : CellTRAK + 6800X ? Time : 9:29:43 PM 03/08/1995 Has anyone managed to get CellTRAK working on a (slimline) 6800X ? The pin-outs don't appear to be the same for the 5 wires connecting to the socket as for the 4800/4500. Pulse. [5] Cellular Phreaking Msg # - 1179 To : ALL From : JIM-LAD Subject : NokiA 101 Time : 10:30:03 PM 03/09/1995 Does any1 know how to reprogram this fone??? [5] Cellular Phreaking Msg # - 1185 To : JIM-LAD From : AL Subject : NokiA 101 Time : 12:56:00 AM 03/11/1995 Theres s/w on DAC_UK board. Al [5] Cellular Phreaking Msg # - 1193 To : AL From : PULSE Subject : NokiA 101 Time : 9:43:20 AM 03/12/1995 I will sell you the Nokia 101/121 reprogramming kit for 130 + P&P. That will get you the software + hardware, which consists of a programming 'shoe' in which you place the phone and one module which you add to the phone you would like to program. (one module per phone) Extra modules costs 20 quid. You may hear about the Modules'r'Us kit which is a real waste of space. You must solder the module onto the phone and each time you want to reprogram you need to do it again. And most importantly, it only lets you change the ESN four times. This is the latest kit from Cheese Factory which brought you Sony, Motorla, Ericsson etc. - The modules can be programmed as many times as you like and each time you wish to program you just push the phone into the shoe. (Rather than connecting wires up to the chip each time). Mail me if interested. Pulse [5] Cellular Phreaking Msg # - 1195 To : ALL From : ETHERLORD Subject : Motorola 8500x wanted Time : 10:21:50 AM 03/12/1995 Does anyone out there have a motorola 8500x for sale.. or any cellular that can be easily re-chipped?? Cheers d00ds, eTHeRLoRD /SiK/ [5] Cellular Phreaking Msg # - 1212 To : ALL From : ANONYMOUS Subject : scrotum Time : 12:19:02 PM 03/14/1995 0850 629789 02-32-00-13595 [5] Cellular Phreaking Msg # - 1237 To : ALL From : FLASH Subject : P3!!! Time : 10:51:25 AM 03/23/1995 I've just got hold of an NEC P3, so I need someone to burn-in the test chip shit onto it for me. Can anyone here do it for me or know someone who can?? Any help MUCH appreciated, Flash. BTW, does anyone know where I can get a cable to hook it up to my modem?, (fax cable??), or any ideas how to make one? Cheerz. [5] Cellular Phreaking Msg # - 1241 To : ALL From : FLASH Subject : P3 shit Time : 10:00:00 AM 03/25/1995 When I got my P3, I didn't get any manual with it, I've figured out how to unlock it, but it always locks itself when I switch it off, this is getting on my tits. I think it is something to do with the 'auto lock' function i.e. FCN 62, but when I try to change it by pressing STO, it just beeps and nuffing happens. Same thing when I try to change the temp lock code, FCN 65, not much happens when I press the STO button. Can anyone help with this stuff?? Pleeese??? Flash. BTW, what does Review HD mean? [5] Cellular Phreaking Msg # - 1246 To : FLASH From : PLUNDERER Subject : P3 shit Time : 11:29:46 PM 03/26/1995 > When I got my P3, I didn't get any manual with it, I've figured out how > to unlock it, but it always locks itself when I switch it off, this is > getting on my tits. I think it is something to do with the 'auto lock' > function i.e. FCN 62, but when I try to change it by pressing STO, it > just beeps and nuffing happens. Same thing when I try to change the > temp lock code, FCN 65, not much happens when I press the STO button. > > Can anyone help with this stuff?? Pleeese??? > > Flash. > > BTW, what does Review HD mean? > The reason it wont let you change these functions is because you used the temp lock code to unlock it when you turned it on. It will only let you change these features if you use the main lock code - 4 digits long. Try things like 1234 etc. or just use a test rom to bypass it ! Hope that was some help. -=| Plunderer |=- [5] Cellular Phreaking Msg # - 1247 To : ALL From : PLUNDERER Subject : Reprogramming Time : 11:37:42 PM 03/26/1995 When using motorola.exe on a 4500X black box unit I am having several problems - can anyone help. It connects to the unit perfectly and reads all the data from the NAM and displays it on the screen in the windows on the right hand side but then it immediately says "Comms Powerdown" - "Releasing Link" and wont let me make any changes or edit anything. Am I doing something wrong ? I am using 12v and not 9v as in some lead diags. Oh yeah, the NAM reports s/w revision 8908. -=| Plunderer |=- [5] Cellular Phreaking Msg # - 1251 To : PLUNDERER From : FLASH Subject : P3 shit Time : 10:52:16 PM 03/27/1995 >The reason it wont lt you change these functions is becase you used >the temp lock code to unlock it when you turned it on. It will only >let you change these features if you use the in lock code - 4 digits >long. Try things like 1234 etc. or just use a test rom to bypass it ! >Hope that was some help. > >-=| Plunderer |=- Hah! Sussed it, cheerz mate. As soon as I read your message I thougnt "Four digits...hmmm...Phone number??" and tried the last four digets of the #, then I tried them backwards, and it worked :-) Cheerz again, Flash. (Well Chuffed) [5] Cellular Phreaking Msg # - 1254 To : ALL From : BIGBOY Subject : Nec P3 Time : 1:01:19 AM 03/30/1995 A while ago there was someone on here offering to blow P3 eproms. As I have finally extracted the one from my phone I would be gratefull if whoever it was could mail me or leave a message in this area. Also any info on re-programming the small sony CM-111 or something, would be handy. Cheers, Bigboy. [5] Cellular Phreaking Msg # - 1260 To : ANONYMOUS From : AL Subject : scrotum Time : 2:59:25 AM 04/01/1995 Shit, dead already. Al [5] Cellular Phreaking Msg # - 1261 To : FLASH From : AL Subject : P3!!! Time : 3:01:06 AM 04/01/1995 To connect it to modem, look for modemint.exe file from davex. If not here than on dac. Al [5] Cellular Phreaking Msg # - 1269 To : ALL From : FLASH Subject : P3 Time : 11:51:13 PM 04/01/1995 I think it should be possible to adapt a NEC P3 hands-free kit for use with a modem, can anyone give me advice on how to adapt one?? Flash. [5] Cellular Phreaking Msg # - 1273 To : ALL From : ATROCITY Subject : P3 Cables Time : 10:29:27 PM 04/02/1995 Is anyone out there building and selling programming cables for the p3? If you are, mail me cos i need one bad! ATr0CiTY [5] Cellular Phreaking Msg # - 1275 To : ATROCITY From : DOUGIE Subject : P3 Cables Time : 2:52:10 AM 04/03/1995 if you would like the p3 diagram why not leve a fax no. and i will fax it to you [5] Cellular Phreaking Msg # - 1285 To : ALL From : BLACKTHORN Subject : p3 phucked Time : 11:35:52 PM 04/04/1995 i have a bit of a problem..somehow my p3 has fucked it self up.. i lent it to someone who stored 00000000000 in store 69 this then fucked it well and proper..now when you switch it on the back light comes on and that is it..cant put it in to test mode can someone plz help..BTW i have the orginal Rom as well.. [5] Cellular Phreaking Msg # - 1288 To : FLASH From : DAVEX Subject : P3 Time : 1:07:27 AM 04/05/1995 > I think it should be possible to adapt a NEC P3 hands-free kit for use > with a modem, can anyone give me advice on how to adapt one?? > > Flash. > just locate the mic/in wire and the speaker/out wire and hook it up ala my tfile modem-2-.cell. Should werk ok, but you need strong stable signal for data. You will need to live at a cell site or fit an external antenna. DaVeX [5] Cellular Phreaking Msg # - 1308 To : ALL From : DOUGIE Subject : SNAF! Time : 12:02:53 AM 04/09/1995 II WOULD LIKE TOO START A PITICION OR SOME THING LIKE THAT FOR... ERVERYONE TO GET TOGERTHER AND GET SMALL BALL'S DAVEX TO GET WITH IT AND GET HIS FU**KING SOFTWARE ON THE BOARD AND STOOP BEING SUCH A BIG HEADED PENI SO COME ON DAVEX IF YOUV,E GOT IT THEN GET IT ON LINE .... IF YOU CAN GRAB ESN/MIN NUMBERS THEN LET US HAVE THEM OR AT LEAST GIVE SOME OF US OTHER STUPID FUCK PIG'S SOME ESN'S&NUMERS  NUMBERS EVERY MONTH SO WE CAN GET ON LINE FREE OF CHARGE SO STOP BEING A SUPERHERO AND AS I SAID GET WITH IT.... [5] Cellular Phreaking Msg # - 1309 To : DOUGIE From : PULSE Subject : SNAF! Time : 12:32:29 AM 04/09/1995 > II WOULD LIKE TOO START A PITICION OR SOME THING LIKE > THAT FOR... ERVERYONE TO GET TOGERTHER AND GET SMALL > BALL'S DAVEX TO GET WITH IT AND GET HIS FU**KING > SOFTWARE ON THE BOARD AND STOOP BEING SUCH A BIG HEADED > PENI SO COME ON DAVEX IF YOUV,E GOT IT THEN GET IT > ON LINE .... IF YOU CAN GRAB ESN/MIN NUMBERS > THEN LET US HAVE THEM OR AT LEAST GIVE > SOME OF US OTHER STUPID FUCK PIG'S SOME > ESN'S&NUMERS  NUMBERS EVERY MONTH SO WE CAN GET > ON LINE > FREE OF CHARGE SO STOP BEING A SUPERHERO AND AS I SAID > GET WITH IT.... His software is of little use to you without the hardware. I should imagine one of the main reasons he doesn't release the full information for building a snarfer from scratch is so that people like you don't get hold of it. The kind of person that would severely mistreat it and probably sell the thing for 1200 quid a piece when you put no work into the design yourself. You don't get anything for nothing in this world so if you want a snarfer, get down to it yourself and don't get somebody else to wipe your arse for you. Also why the hell should he give you ESN accounts ? There are security reasons, ie people start asking questions when a hell of a lot of people use accounts that are snarfed from the same area. With a little thought and investigation he wouldn't be too difficult to track down. So he keeps his head down. More to the point, do you really expect him to give ESNs to the person who calls him a "BIG HEADED PENI". Big headed he is not. I'd advise you to voice-hack them if you're that bothered but I forgot that you probably sound rather too much of a young pimply lad to pass as a Vodafone engineer. Pulse [5] Cellular Phreaking Msg # - 1310 To : PULSE From : DAVEX Subject : SNAF! Time : 1:09:47 AM 04/09/1995 Well said my boy, big headed peni indeed. That guy has a reall attitude problem, I guess some ppl are just born arseholes. He'll get nothing off me, I've had nothing but abusive email from him, and that is not the way to get on my good side. L8ter DaVeX [5] Cellular Phreaking Msg # - 1312 To : ALL From : AL Subject : AOR snarf Time : 2:25:20 AM 04/09/1995 To anyone into snarf with aor2000, discriminator pin is on IC5 TA7761F pin 9. Its quoite posib that all aors use same IC, anyway just call manifact for data. Al [5] Cellular Phreaking Msg # - 1320 To : ALL From : FLASH Subject : HEEEELP!!! Time : 11:32:11 PM 04/11/1995 HEEEEEELP!!!!, I've just got a test chip for my P3, but when I installed it and swiched it on, all I got was a tiny clicking noise from the earpiece. Will someone tell me I havn't fucked it up big-time?? What the fuck is wrong with it????? HEEEELP!! Flash. [5] Cellular Phreaking Msg # - 1323 To : ALL From : GENERAL HEDCASE Subject : Help Pleez! Time : 10:49:28 PM 04/12/1995 I just found an old carfone hidden away in my dads shed (behind all the dead bodys & crisp packets) and I took it apart to satisfy my curiousity (the cause of death of most my electrical appliances) and I found a little (big) 28 pin eprom in it. So what do I do with this chip, I have access to a eprom programmer but I don't know what to program it. If its any help the numba the fone used to be conected to is 0860 524040. <> Yeah I know I'm lame!!!!!!! [5] Cellular Phreaking Msg # - 1327 To : ALL From : DANGERMOUSE Subject : Technophone Time : 9:58:17 PM 04/13/1995 A mate of mine has just got (FREE!) a Technophone PC 215T mobile phoneyoneyoney. He was told it was a badge-engineered version of some other phone. Question is, which one, and what software/hardware is needed to chip the damn thing. Help! D. [5] Cellular Phreaking Msg # - 1328 To : ALL From : FLASH Subject : Shuttle batteries Time : 11:27:18 PM 04/13/1995 For my P3, I have 2 'shuttle' batteries, and a 'shuttle' charger, how long am I supposed to leave them charging for?? Flash. [5] Cellular Phreaking Msg # - 1329 To : GENERAL HEDCASE From : PULSE Subject : Help Pleez! Time : 11:38:30 PM 04/13/1995 > I just found an old carfone hidden away in my dads shed > (behind all the dead bodys & crisp packets) and I took > it apart to satisfy my curiousity (the cause of death of > most my electrical appliances) and I found a little (big) > 28 pin eprom in it. So what do I do with this chip, I have > access to a eprom programmer but I don't know what to program > it. If its any help the numba the fone used to be conected > to is 0860 524040. It might help if you told us which variety of carphone it was. A little more description possibly.. Pulse [5] Cellular Phreaking Msg # - 1334 To : PULSE From : GENERAL HEDCASE Subject : Help Pleez! Time : 10:00:38 PM 04/16/1995 Well its a British Telecom one its old esn is 0904 0000118 and it's serial numba (I think thats what it is) is FM-4007F2R8. I cant tell you much else as I am a bit of a lamer when it comes to anything celluar! <> Oh yeah happy phone one day!!?!?!??? [5] Cellular Phreaking Msg # - 1339 To : GENERAL HEDCASE From : PULSE Subject : Help Pleez! Time : 9:40:30 PM 04/19/1995 > Well its a British Telecom one its old esn is 0904 0000118 and it's > serial numba (I think thats what it is) is FM-4007F2R8. I cant tell you > much else as I am a bit of a lamer when it comes to anything celluar! I'll look it up in my ESN/Manufacturer/Model list and get back to ya. Pulse [5] Cellular Phreaking Msg # - 1346 To : ALL From : JIGSAW Subject : P Time : 11:26:54 PM 04/23/1995 In need of a chipped P3 + cables... Anyone... Jigsaw .S [ [5] Cellular Phreaking Msg # - 1349 To : PULSE From : DAVEX Subject : Help Pleez! Time : 1:20:48 AM 04/24/1995 mt4 according to my list. DaVeX [5] Cellular Phreaking Msg # - 1356 To : DAVEX From : PULSE Subject : Help Pleez! Time : 9:52:12 PM 04/26/1995 > mt4 according to my list. > DaVeX Cold you upload that list, please ? Pulse [5] Cellular Phreaking Msg # - 1365 To : ALL From : AC ASSASSIN Subject : free calls Time : 2:53:34 AM 04/27/1995 A mate of mine bought a motorolla classic on cellnet last year, he has used loads and has never been billed for any calls (just gets billed for the line rental). When he bought it, it was on business tariff so he could get cheaper calls, when he found out that they wern't charging he even managed to get it changed to the lifetime tariff with no problems. He currently has a pocketful of spare batteries and hardly ever makes any outgoing calls on his BT land line. Allright for some. [5] Cellular Phreaking Msg # - 1369 To : GENERAL HEDCASE From : PULSE Subject : Help Pleez! Time : 9:38:50 PM 04/27/1995 > > > mt4 according to my list. > > > DaVeX > > Cold you upload that list, please ? > > > > Pulse > I must be missing something did you post what it was because thst > message is seems to have dissapeared. > > <> Read the top, mate. MT4 - Mitsubishi. Cheers DaveX Pulse [5] Cellular Phreaking Msg # - 1371 To : CHEROKEE From : CHANCER Subject : CURTIS SNARFER! Time : 9:59:40 PM 04/27/1995 great idea mate,but how do i get a hold of the version B chip?incidentally i contacted CURTIS USA and it is an E PROM seemingly they had problems with the law etc etc!back to the drawing board!!.s [5] Cellular Phreaking Msg # - 1375 To : ALL From : FRUITBAT Subject : fonez Time : 12:27:20 AM 04/28/1995 Ok guys I am in need of a mobile... again. My 8500x recently bit the dust and I am mobile-less. P3's, 4800x's, CMH-333 MarsBars preferred! [5] Cellular Phreaking Msg # - 1377 To : GENERAL HEDCASE From : PULSE Subject : MT4 Time : 1:50:12 AM 04/28/1995 Assuming your fone is an MT4, I think the software you'll need goes by the name of Beech or BeechTree or something. It normally knocks around bbs' in a ZIP called CELLSOFT.ZIP that's got a load of other stuff in there. It involves programming the chip rather than just plugging a nice cable into the bottom but it looks quite easy. Pulse [5] Cellular Phreaking Msg # - 1378 To : ALL From : PULSE Subject : Motorola 4800x For sale Time : 1:51:44 AM 04/28/1995 As I now have 3 of them, I may aswell sell one: Motorola 4800x for sale. Includes mains charger, cig-light adapter, and original bag! Good condition. 60 squids Pulse [5] Cellular Phreaking Msg # - 1396 To : PULSE From : GENERAL HEDCASE Subject : MT4 Time : 1:54:17 AM 04/30/1995 Do you know where I can get this file I don't think its on this bbs. Anyway thanx for the help! <> [5] Cellular Phreaking Msg # - 1403 To : FLASH From : HACK10F Subject : HEEEELP!!! Time : 10:43:30 PM 04/30/1995 hie mate all it sounds like is that the rom is not programed right or the chksum is out try reprograming it... [5] Cellular Phreaking Msg # - 1404 To : GENERAL HEDCASE From : HACK10F Subject : MT4 Time : 10:48:36 PM 04/30/1995 Hie dont bouther with that beachtree crap you can get the proper gear use a 8255 card of a deasent programer the chip number is 93c46 on mt4 trans portable checksum gear is the same as mt3 [5] Cellular Phreaking Msg # - 1413 To : HACK10F From : PULSE Subject : MT4 Time : 9:36:52 PM 05/01/1995 > Hie dont bouther with that beachtree crap you can > get the proper gear use a 8255 card of a deasent > programer the chip number is 93c46 on mt4 > trans portable checksum gear is the same as mt3 So how much would an 8255 card cost you ? The beechtree looks like a cheap alternative (PIN-OUT.TXT) to buying a full-on EPROM programmer as it says it programs the 93c46. Do you know any different ? Pulse [5] Cellular Phreaking Msg # - 1417 To : DAVEX From : KAOS Subject : Motorola codes you wanted Time : 12:57:09 AM 05/02/1995 Cellular Debug Mode Commands Motorola test mode programing codes for most motorola phones 01# Restart (re-enter DC power start-up routine) 02# Display Current Telephone Status 04# Initializes Telephone to Std Default Conditions 05# TX Carrier On (key transmitter) 06# TX Carrier Off 07# RX Off (mute receiver audio) 08# RX Audio On (unmute receiver audio) 09# TX Audio Off 10# TX Audio On 11# Channel No. Set Transceiver to channel (RX & TX) 12# Set power level 13# Power Off 14# 10 khz Signalling Tone On 15# 10 khz Signalling Tone Off 16# Setup (Transmits a five word RECC message) 17# Voice (Transmits a two word REVC message) 18# C-SCAN 19# Display Software Version Number (year & week) 25# SAT On 26# SAT Off 27# Transmit Data (TX continuous control channel data) 32# Clear (clears non-volatile memory) 33# Turn DTMF on 34# Turn DTMF off 35# Display RSSI ("D" series portable only) 35# Set Audio path 38# Display ESN (displays ESN in 4 steps, hit * till back at start) 39# Compander On 41# Enables Diversity 42# Disable Diversity (different models use different codes) 43# Disable Diversity (different models use different codes) 44# Disable Diversity (different models use different codes) 45# Display Current RSSI 46# Display Cumulative Call Timer 47# Set Audio level 48# Side Tone On 49# Side Tone Off 55# Display and or program NAM (test mode programing) 58# Compander On 59# Compander Off 61# ESN Transfer (for series I and Mini T.A.C's) 62# Turn On Ringer 63# Turn Off Ringer 66# Identity Transfer (series II and some current portables) 68# Display FLEX and Model info 69# Used with Identity Transfer Programming the Motorola Phone Entering test mode on 25 pin transceivers F19ATA or F19CTA ground pin 11 and power-up phone DMT / Mini T.A.C series I, II, III ground pin 21 and power-up phone Entering test mode on OEM 32 pin transceivers & 3 together ground pin 9 and power-up phone Entering test mode on portable transeivers ground pin 6 and power-up phone Entering test mode on Micro T.A.C's ground pin 2 and power-up phone Oki Debug Commands [5] Cellular Phreaking Msg # - 1432 To : ALL From : ATROCITY Subject : ESN/MIN's & SNaRFeR Time : 12:48:26 AM 05/03/1995 I will give a complete no ratio account (including warez) to anyone who can supply me with 10 clean ESN/MIN's per month. This is negotiable so page me on The 1066 BBS. Also, i have a good m8, who will pay around the grand mark for a working snarfer and software. This is no joke, the cash is waiting. If you think you are up to the job then page me on The 1066 BBS. While i'm at it, if you don't know The 1066 BBS number it's 01424 445414, 8pm-8am daily. Cheap plug hehehe!!! ATr0CiTY [5] Cellular Phreaking Msg # - 1441 To : ALL From : PULSE Subject : New Motorolas Time : 1:58:50 PM 05/03/1995 Would anyone be interested in conversions for the new Motorolas ? (ie) Having your, otherwise no re-chippable, 8900X-2s/Elites etc converted so that they may be rechipped with the old Cheese Factory Tac-II rechipping software ? I want to find out if there's much demand before I pay megabucks to import the equipment (currently being test-bedded in Asia). Pulse [5] Cellular Phreaking Msg # - 1451 To : ALL From : ALCHEMIST Subject : GSM Time : 2:37:31 AM 05/05/1995 Hmmm this is the first time ive heard of this! apparently G.S.M is a prefered mobile phone network that can be used in almost all of europe good lines etc blah blah...if anyone has info on the G.S.M network and phones prices etc please post.. Also do they work with esn and number! Can they be rechipped so you can connect them to a pc and reprogram them or via the keypad...Any info greatly appreciated! Thanx in advance to Davex if you answer this one..(Not ass licking!) Regards and all that shit Alchy [5] Cellular Phreaking Msg # - 1464 To : HACK10F From : GENERAL HEDCASE Subject : 8255 card Time : 2:39:18 PM 05/07/1995 Hi, Sorry but your gonna have to explain that a bit more lamely so I can understand it, what is an 8255 card? are they easy to make?. As you've probably found out the only thing about cell fones I know is if you have three you can juggle. <> Oh yeah, do you know where I can get a batterie and an aerial for it from?, I was going to make my own but I'd rather have something that works (heh heh). [5] Cellular Phreaking Msg # - 1467 To : GENERAL HEDCASE From : HACK10F Subject : 8255 card Time : 10:10:09 PM 05/07/1995 Yea hie you said it was a MT4 that is a transportable imm just making shaw that its right the antana is about 5 pounds second hand and the battery is the same if you are using it from home i suggest you use a wall charger with higher amps. And a 8255 card is a eeprom card that fits in your computer like a printer card and cost about 25 pounds you have to make the lead up your self but it works and is reliable if you need the chksum stuff give me a call and ill post you sum for free have fun my number is 01883330060 call between 6 10 pm bye... [5] Cellular Phreaking Msg # - 1469 To : ALL From : ALCHEMIST Subject : GSM Time : 1:21:42 AM 05/08/1995 Please has anyone got any info on the european GSM cell network! Regards Alchy [5] Cellular Phreaking Msg # - 1473 To : ALL From : ETHERLORD Subject : Mobiles wanted.. Time : 6:09:34 PM 05/08/1995 oK people.. I'm in need of a decent mobile.. Mainly to use with a modem , so a huge great transportable would be best.. like a 4800x.. Sob - Pulse sold his :(.. Cheers, etherlord [5] Cellular Phreaking Msg # - 1480 To : HACK10F From : GENERAL HEDCASE Subject : 8255 card Time : 6:25:09 AM 05/10/1995 Thanx!, I'll be calling you sumtime. <> [5] Cellular Phreaking Msg # - 1483 To : ALL From : ETHERLORD Subject : mobile.. pleeeeeeeeeeze Time : 6:31:16 PM 05/10/1995 pleeeeeeeeeze.. i neeed a mobile.. anyone?? eTHeRLoRD [5] Cellular Phreaking Msg # - 1485 To : ALL From : PLUNDERER Subject : NEC P4 Time : 9:57:31 PM 05/10/1995 Help needed !! Can anyone get hold of an aerial for a NEC P4 or point me in the direction of a company who sells them.... I know of a couple of companies but they want silly money - 40 quids !! No thanks..... Cheers [5] Cellular Phreaking Msg # - 1486 To : ALL From : LOONY TOON Subject : Celliars & modems Time : 11:00:06 PM 05/10/1995 Is the P3 the only phone that can be attatched to a modem, I seen a few files for that... but nothing about other phones... my local dealer says it cant be done, unless you shell out 600 quid for a nokia 2110 and some add on thing [5] Cellular Phreaking Msg # - 1488 To : GENERAL HEDCASE From : GENERAL HEDCASE Subject : 8255 card Time : 7:57:31 PM 05/11/1995 Maybe not, you see I don't actually have a charger and from what Ive found out they cost around 40 and for that I could get me a better fone so I'm giving up on this MT4, I don't suppose you know anywhere that sells cheap unconnected fones. I'm looking for a P3 or something else which is easy to program, any suggestions?? <> The MT4 waz to damn heavy anyway! [5] Cellular Phreaking Msg # - 1490 To : ALL From : STEALTH Subject : p100 Time : 10:36:02 PM 05/11/1995 y0 How many types of NEC p100's are there. I have seen a few that can be programmed with just a normal lead and a few that need that fucking chip thing! Anyone know?? cheers StEaLtH [5] Cellular Phreaking Msg # - 1491 To : LOONY TOON From : ETHERLORD Subject : Celliars & modems Time : 6:24:11 PM 05/12/1995 aright m8.. the motorola 4800x is a very good bet - 3 watt output so it's like a normal land line.. you'd need to make an interface though.. all the interface's ive seen have lost about 50% of the signal coz they are cheap and use resistors to balance the signals.. the best way to do it would be to use a set of dual op-amps to actively balance the signal (not as hard as it sounds).. if i ever get my hands on a 4800x i will work on the circuit (of course.. if you find 2 you could donate one in exchange for the interface :).. anyway - l8rz, etherlord [5] Cellular Phreaking Msg # - 1494 To : ALL From : SHERRIF Subject : GRABBING ESN / MIN Time : 10:45:58 AM 05/13/1995  ATDT 01636 613 949    HELLO IM TRYING TO CONNECT MY SCANNER TO MY SUPRAFAX 14.4 MODEM I NEED A BIT OF HELP IVE READ DAVEX ,S PAIRINFO ABOUT USING THE MODEM TO SNARF PAIRZ AND WOULD JUST LIKE TO KNOW WHAT PINS THE SCANNER SHOULD BE CONNECTED TO AND WHAT PINS GO INTO THE PRINTER PORT ON THE PC WRITNG THE SOFTWAREW IS NOT TOO HARD JUST NEED THE CORRECT PINS TO CONNECT ALSO I HAVE LEFT MY PINS DIAGRAM FOR YOU TO SEE I HOPE SOMEONE CAN HELP CHEERZ LET ME KNOW THANKS SUPRA14.4 PINS PIN 1 PROTECTIVE GROUND PIN 2 TRANSMIT DATA PIN 3 RECIEVE DATA PIN 4 REQUEST TO SEND PIN 5 CLEAR TO SEND PIN 6 DATA SET READY PIN 7 SIGNAL GROUND PIN 8 DATA CARRIER PIN 12 DATA SPEED INDICATOR PIN 15 TRANSMIT CLOCK (SYNC. ONLY) PIN 17 RECIEVE CLOCK (SYNC. ONLY) PIN 20 DATA TERMINAL READY PIN 22 RING INDICATOR PIN 23 DATA SIGNAL RATE SELECTOR PIN 24 EXTERNAL TRANSMIT CLOCK (SYNC.ONLY) SO IF ANYBODY KNOWS OUT THERE LET ME KNOW AND IF YA CAN HELP A LITTLE MORE THEN ILL BE WILLING TA PAY YA UPTO 500 POUNDS FOR YOUR HELP ALSO I HAVE A TANDY PRO-2006 SCANNER WITCH INCLUDES ALL CELL SCANNING CHEERZ. HOPE THERE SOMONE OUT THERE ... [5] Cellular Phreaking Msg # - 1496 To : SHERRIF From : MINI MASTER Subject : GRABBING ESN / MIN Time : 7:45:40 PM 05/13/1995 Hohoho... I'm afraid your never going to be able to use your SFm fer snarfing - if it was that easy every one would be doing it ;).... I think the only way is to get your soldering iron out and construct your own modem. Speak soon MM ur [5] Cellular Phreaking Msg # - 1503 To : ALL From : STEALTH Subject : morotola 4800 Time : 4:16:34 PM 05/14/1995 b00 Does anyone know how to set the priority and home area on this thing??????? Cheers StEaLTH [5] Cellular Phreaking Msg # - 1507 To : ALL From : CHANCER Subject : BAD PRESS! Time : 11:29:23 PM 05/14/1995 any phreakers in scotland gotomments about the recent pate of bad press reports "MP,s PHONE BASHED"TIMES REPORTER,s PHONE BASHED"! [5] Cellular Phreaking Msg # - 1518 To : ALL From : SEEN Subject : MOBY Time : 8:21:21 PM 05/17/1995 I GOT A PANASONIC (VODAC BADGED) (BLUEISH SND, END BUTTONS, ARCHED BACK) AND A SANYO (OVALISH BUTTONS, BOUT 5 INCHS TALL) I CANT FIND ANY INFO ON THESE..CAN ANYONE HELP ? L8R SEEN..aka Ralph [5] Cellular Phreaking Msg # - 1527 To : ALL From : HACK10F Subject : p3 Time : 9:46:13 AM 05/18/1995 If any one wants a p3 got battery and charger good condition give me a call or mail me want about 75 quid good for davex is scaner wears that fucking software ... [5] Cellular Phreaking Msg # - 1529 To : SHERRIF From : ETHERLORD Subject : esn grabbing Time : 6:12:10 PM 05/18/1995 aright m8... > whats this about a software solution ill pay ya 1000 pounds for the > grabber this is serious so let em know > hmm - dont remember that.. well - what i'm working on is purely hardware... with a direct connect (parallel port ;) to rechip some mobiles (or into ya pc)... got a long way to go yet tho ;(. l8rs - eTHeRLoRD [5] Cellular Phreaking Msg # - 1530 To : ALL From : SEEN Subject : 8500x Time : 6:29:53 PM 05/18/1995 how do yu power the MOT 8500x when re programig it ? the battery is a 7.5v but the TXT files say it need 8-12 v... any sugestions ? seen [a.k.a Ralph] [5] Cellular Phreaking Msg # - 1531 To : ALL From : NIGHTFLY Subject : Mitsubishi MT-8 Time : 2:11:45 PM 05/19/1995 Hi, Got a Mitsubishi MT-8 Phone, been playing around with it for a while, and have found the engineer code to access hidden menus (I have to admit I was told the code) To anyone who has one of these phones, try this: Turn Phone on while holding down the red END button, hold END button for 5 seconds, Keep hold of button, key 2398378 , the display will change and show something like 0906 td|-0 if it does'nt turn off phone and repeat. key 03 SEND - your phone is now a scanner! use * and # to move up and down through the channels. If this is old knowledge sorry, I just got here! Any info on what the other codes do would be great. /ightfl\/ ---------/ [5] Cellular Phreaking Msg # - 1540 To : ALL From : FUGITIVE Subject : Pairz? Time : 5:31:49 PM 05/20/1995 Can anyone offer me some virgin pairz? For a price I spose but not too much please! Mail me with any offers :) L8rz.. Fugitive [5] Cellular Phreaking Msg # - 1547 To : BLACKTHORN From : ETHERLORD Subject : mobile.. pleeeeeeeeeeze Time : 1:00:05 PM 05/21/1995 aright m8.. Yeah... tiz just getting the dodgy papers ;)... ave looked in xchange 'n mart before now... oh well.. cheers - eTHeRLoRD [5] Cellular Phreaking Msg # - 1548 To : ETHERLORD From : LOONY TOON Subject : Celliars & modems Time : 2:09:08 PM 05/21/1995 Sounds cool, Electronics isnt really a problem... I was just looking for a couple of reccomendations... got me a p3, but cant find the plug what fits in the bottom.... this 4800 sounds better anyway Ta [5] Cellular Phreaking Msg # - 1549 To : ALL From : SHERRIF Subject : binary conversion Time : 4:02:42 PM 05/21/1995 hello can anybody help im trying to convert music file like wav.files to binary anyone help thanks [5] Cellular Phreaking Msg # - 1552 To : ALL From : GENERAL HEDCASE Subject : Fone for a lame guy! Time : 6:19:45 PM 05/21/1995 Which cell fone is the easiest to re-program and where can I get one at a real low price. Im asking this cos I am giving up on my MT4, its too old and too heavy (it's supposed to be transportable but only if you drive a forklift!) and I probably tossed it taking it apart to find the chips (it rattles now!). I'm looking for something between the 50 & 0 range. Thanx __ __ __ __ __ _ / /_ / / /_ /_/ /_/ / , /_ / / /_ / \ / / /_ -=hEdCASE=- [5] Cellular Phreaking Msg # - 1561 To : GENERAL HEDCASE From : ETHERLORD Subject : Fone for a lame guy! Time : 6:50:39 PM 05/23/1995 aright m8.. does ure mt4 still worktho? if it does i might be interested.. cheers - eTHeRLoRD [5] Cellular Phreaking Msg # - 1563 To : ETHERLORD From : GENERAL HEDCASE Subject : Fone for a lame guy! Time : 7:35:30 PM 05/23/1995 > aright m8.. > does ure mt4 still worktho? if it does i might be interested.. > cheers - eTHeRLoRD Not sure never got a charger 4 it. <> [5] Cellular Phreaking Msg # - 1565 To : FUGITIVE From : CHANCER Subject : pairz! Time : 8:18:34 PM 05/23/1995 hello m8 , ill sell you some pairz! internationals if required, make me an offer...CHANCER... [5] Cellular Phreaking Msg # - 1575 To : ALL From : SEEN Subject : pana F Time : 10:01:14 PM 05/24/1995 anybody re-chiped the panasonic F with the CLIP OVER TEST CHIP ? is it just a case of clipping the clip chip over the correct chip in the phone and connecting up as the wiring.exe suggests or do i need a converter or somthing ? BTW: which chip is it..there seem to be four big ones, 3 are the same and one is raised with what looks like a clear cover witha very small chip inside ? any ideas. Seen [5] Cellular Phreaking Msg # - 1582 To : GENERAL HEDCASE From : ETHERLORD Subject : Fone for a lame guy! Time : 6:16:44 PM 05/25/1995 aright m8.. > Not sure never got a charger 4 it. Darned :) if u can find out somehow.. I'd be interested.. could do with a transportable/forkliftable ;) eTHeRLoRD [5] Cellular Phreaking Msg # - 1595 To : ALL From : SHERRIF Subject : 4 esn,s Time : 1:35:01 PM 05/26/1995 Here are some esn.s for you dudes out there 05/26/00/59947 - 0860 259 582 15/02/00/02948 - 0836 556 444 02/15/00/30702 - 0850 127 722 20/45/00/08655 - 0850 119 463 ok be happy [5] Cellular Phreaking Msg # - 1614 To : ETHERLORD From : GENERAL HEDCASE Subject : Fone for a lame guy! Time : 9:29:06 PM 05/27/1995 > aright m8.. > > Not sure never got a charger 4 it. > Darned :) if u can find out somehow.. I'd be interested.. could do with > a transportable/forkliftable ;) > eTHeRLoRD > I went into a cell fone shop and they said they could get me one for about 40 quid direct from Mitsubishi, dunno about the forklift though. <> [5] Cellular Phreaking Msg # - 1674 To : ALL From : BIGBOY Subject : P3 Time : 12:54:10 PM 06/03/1995 If there are any friendly cellular engineers on here who would like to fix my P3 I would be very gratefull. No sooner do I get it chipped than it dies on me, worked fine for half a day then went completely blank. Battery is fine but the fone does nought. Pairz available if you can fix it for me. Hopefully Bigboy. [5] Cellular Phreaking Msg # - 1680 To : BIGBOY From : PULSE Subject : P3 Time : 2:33:08 AM 06/04/1995 > If there are any friendly cellular engineers on here who would like to > fix my P3 I would be very gratefull. No sooner do I get it chipped than > it dies on me, worked fine for half a day then went completely blank. > Battery is fine but the fone does nought. Pairz available if you can > fix it for me. Mine broke a while ago so I gave it away to a service engineer friend who got it working straight away. I ended up letting him keep it and bought a new one, but I'll ask him if he'll fix yours for you. I got a 4800 that needs sorting aswell. Pulse [5] Cellular Phreaking Msg # - 1699 To : ALL From : SHERRIF Subject : software Time : 9:00:36 PM 06/08/1995 ok who has a program they wrote or have use of that decodes the fsk frequency shift key or the nrz please let me know [5] Cellular Phreaking Msg # - 1722 To : ALL From : E.S.N /\/\AN Subject : ESN'S Time : 7:29:26 PM 06/12/1995 Hi Guy's, Just a quick note to let all you dudes know where to get the best esn's from... Best trades or prices.... Leave mail with phone no. ,mbx's, pagers or basher no's. [5] Cellular Phreaking Msg # - 1724 To : ALL From : AZTECH Subject : Cellular Phones/NEC P3's Time : 8:05:28 PM 06/12/1995 Anybody want to buy some NEC P3's? 200 quid each, with five ESN/MIN code pairs per phone, Charger, etc,etc,includes reprogramming and scanning specs. Contact Aztech for details. Also Available: Pair capture device. Contact Aztech for details, or leave me PGP'ed enquiries in my mail box. PGP to Aztech. ---=[ AZTECH ]=--- [5] Cellular Phreaking Msg # - 1737 To : E.S.N /\/\AN From : DANGERMOUSE Subject : ESN'S Time : 1:34:12 PM 06/14/1995 Wot are bashers and mbx's then? Yes this is my attempt to win the lamer of the month award, but someone please answer... Dan [5] Cellular Phreaking Msg # - 1746 To : ALL From : GEORGE KING Subject : BADTYPE Time : 4:21:39 AM 06/15/1995 Any of you guys out there get hold of "badtype reset software " for motorolas? I have two flippers waiting to be sorted. If not the software, then any info would be appreciated - do the fones go badtype after a certain number of reprogrammings, have I been using the wrong software, or what? I'm confused! :) Also, I've seen a fair few posts on here either asking for pairs, or asking about snarfers, or both - what's wrong with you guys, get out trashing ! I dunno if I was lucky but when I first got into cellfones the first place I trashed gave me a printout with 400+ pairs and it's lasted me ever since (this time last year)..sometimes the low-tech approach pays off :) George King [5] Cellular Phreaking Msg # - 1749 To : ALL From : DAYDOG Subject : MT-9 Time : 7:57:57 PM 06/15/1995 Hi, Nightfly recently posted some info about turning an MT-8 into a scanner. I was *hoping* somebody might know how to do the same sort of thing with an MT-9. Thanks Daydog [5] Cellular Phreaking Msg # - 1752 To : ALL From : PHANTASM Subject : Cellular Comms Time : 7:23:23 PM 06/16/1995 I have no idea if the following method will work, but in theory there is no reason why it should not. Buy a double phone line adaptor and plug your modem line in one socket and an ordinary telephone in the other. Leave your phone off the hook until the line is completely dead. (i.e. after you have listened to "please replace the handset and try again" about ten times. Now, open your cellular phone and extend the wires connected to both the ear piece and mouth piece speakers. (about 6 inches is long enough in most cases) Place the extended ear piece speaker from your cellular phone onto the mouth piece on your telephone handset and sound proof it with masking tape, etc. Connect the extended mouth piece speaker/mic onto the ear piece on your telephone handset and sound proof as above. Basically what you have done is turned your modem into an accoustic coupler device. All you need to do now is as follows; Dial the BBS number you wish to phone on your cell phone and press SEND as you would normally. Type ATX3D or simply ATD into your terminal and you should connect to the service you called on your cellular phone. The carrier signal will be played into the mouth piece of your phone and into the modem. (which is connected in series via the double socket adaptor) In the same way, any signal from your modem, will be played into the cellular microphone socket. This should in theory work, but you may need to include a simple amplification circuit to boost the sound comming out of your cellular phone. I would guess that if your modem has error correction, at least 2400 should be possible. Phantasm (SysOp) P.S> I would be interested to hear what other users have to say about this idea. It is just an idea, but it should work fine if your cellular phone output volume is set to its maximum setting. [5] Cellular Phreaking Msg # - 1753 To : PHANTASM From : PHANTASM Subject : Cellular Comms Time : 9:43:07 PM 06/16/1995 It works!!! I just held my cellular phone upside-down against my normal phone handset, typed ATD into my terminal software and connected at 1200 baud. I know it's slow, but It proves my point. I will need to open my mobile and tape the speaker/mic onto my telephone handset to connect at any faster speeds. There is too much background noise to connect at anything faster, but hey, this means that ANY cellular phone with a fairly decent sound output can be used with a modem --- without the hassle of building or buying a modem interface. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 1757 To : PHANTASM From : GEORGE KING Subject : Cellular Comms Time : 4:05:31 PM 06/17/1995 Congrats m8, looks like you were right and I was wrong :) [5] Cellular Phreaking Msg # - 1758 To : ALL From : GEORGE KING Subject : cheese factory Time : 4:07:59 PM 06/17/1995 I dunno if anyone knew this already, but most cheese factoy software can be copied using an amiga running XCopy pro in nibble copy mode. Very handy - any software that requires the floppy to be un-write protected (should that be write-enabled?) to run makes me feel very uncomfortable about its lifespan :) [5] Cellular Phreaking Msg # - 1759 To : GEORGE KING From : PHANTASM Subject : Cellular Comms Time : 6:05:43 PM 06/17/1995 > Congrats m8, looks like you were right and I was wrong :) I was a little amazed it worked myself, especially when you consider that all I did was place the cellular phone upside-down next to my telephone handset with no extended wires or tape. I doubt anything above 4800 would be possible using this method, but you never know. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 1763 To : PHANTASM From : FALLEN ANGEL Subject : Cellular Comms Time : 1:19:11 AM 06/18/1995 i too have tried this but am sad to inform ya that it don't work on digital fones cos of the interferance they give out, but hardwiring them together does work Fallen Angel [5] Cellular Phreaking Msg # - 1766 To : ALL From : LECTRIX Subject : orange Time : 9:14:34 PM 06/18/1995 whats the score on getting phreaky with orange ? using the shit mota-rollo flip ? also anyone know the way to unlock it for use on the voda network all suggestions welcome cheerz LeCtRiX [5] Cellular Phreaking Msg # - 1768 To : FALLEN ANGEL From : GEORGE KING Subject : Cellular Comms Time : 11:51:34 PM 06/18/1995 Hey, a free untraceable connect at 1200 is nowt to be sneezed at, I managed for quite a while years ago with a 1200 baud modem :) [5] Cellular Phreaking Msg # - 1769 To : ALL From : MADMAN Subject : tracked Time : 12:58:22 AM 06/19/1995 Yo , Has anyone every heard / know of anybody who has been tracked by or caught by the lads at Celnet or Vodac . I wouldn't mind knowing their response time.... Cheers Madman. [5] Cellular Phreaking Msg # - 1770 To : GEORGE KING From : DOUGIE Subject : BADTYPE Time : 1:48:46 AM 06/19/1995 pull the lead out whenit is been on the 'g' in writing... and it will take the badtype away wait until 3 secnds on the 'g' alright dickhead. [5] Cellular Phreaking Msg # - 1772 To : GEORGE KING From : DOUGIE Subject : cheese factory Time : 1:54:14 AM 06/19/1995 your joking mate can it....... you will be first in line for a gold blue peter badge... and i supose you know that the program runs out in the year 2000. [5] Cellular Phreaking Msg # - 1773 To : LECTRIX From : DOUGIE Subject : orange Time : 1:57:41 AM 06/19/1995 yes to unlock it on the vodac network type in *123456"00000000*#0090#3454654453#pwr down#pwr up# *12345#77676567#the phone should read please select network while typing in the code remember you must have a battery eliminator on and ground pin 7 west from east. [5] Cellular Phreaking Msg # - 1774 To : MADMAN From : DOUGIE Subject : tracked Time : 1:59:19 AM 06/19/1995 it takes them 24 min to track you down if you are sitting in the same position so rember not to stay in the same place to long [5] Cellular Phreaking Msg # - 1775 To : BIGBOY From : DOUGIE Subject : p3 esn's Time : 2:03:52 AM 06/19/1995 want you p3 fixed then drop me a line only to gld to fix your phone for you if you get me the esn grabber....or better still i'll get you a new one. rember to reply and give me details on hen i've to get your grabber... [5] Cellular Phreaking Msg # - 1776 To : DAVEX From : DOUGIE Subject : esn's Time : 2:06:09 AM 06/19/1995 alright big boy how are you doing long time no speak so any way have you got my esn grabber made for me yet ...???????? if not then drop me a line and tell me how not and i'll fucking hang you with it . [5] Cellular Phreaking Msg # - 1777 To : DOUGIE From : GEORGE KING Subject : BADTYPE Time : 4:10:00 AM 06/19/1995 Hmm Unfortunately it never gets to the 'g' - the fone powers down just before that - you know the bit around the 't' when the software resets the fone, well just after that the fone powers down and I get a comms failure...weird..any clues ? [5] Cellular Phreaking Msg # - 1778 To : GEORGE KING From : PHANTASM Subject : Cellular Comms Time : 6:34:28 AM 06/19/1995 > Hey, a free untraceable connect at 1200 is nowt to be sneezed at, I > managed for quite a while years ago with a 1200 baud modem :) > I tried 2400 baud using the same method, but there was too much background noise. George recommends using a transportable since the sound output is much better, etc. I am fairly sure I can manage a 2400 connect if I open my telephone handset (or the cellular) and tape the ear piece and mouth piece speakers onto my cellular phone. Opening your normal desktop telephone handset is much easier than trying to put your cellular back together. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 1779 To : DOUGIE From : PHANTASM Subject : tracked Time : 6:37:03 AM 06/19/1995 > it takes them 24 min to track you down if you are sitting in the > same position so rember not to stay in the same place > to long Put your terminal into a shopping trolley and walk around while you hack. You could always buy a skateboard and tape your laptop to it. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 1780 To : PHANTASM From : GEORGE KING Subject : baud rates Time : 1:08:35 PM 06/19/1995 Well I am using a proper motorola cellular connection jobby, and the fastest I've got so far is 2400..it's supposed to be possible to get a 9600 connect with it but I'll be buggered if I can. Perhaps I should invest in a new aerial? [5] Cellular Phreaking Msg # - 1782 To : ALL From : AZTECH Subject : Code Pairs Time : 6:49:40 PM 06/19/1995 Will somebody please swap a decent code pair for some system X dialups? [5] Cellular Phreaking Msg # - 1783 To : PHANTASM From : DANGERMOUSE Subject : tracked Time : 7:06:08 PM 06/19/1995 Or you could devise some sort of harness and hack while you jog. Dan [5] Cellular Phreaking Msg # - 1784 To : ALL From : DANGERMOUSE Subject : Cellphones (surprise) Time : 7:09:26 PM 06/19/1995 OK, folks, there's a small possibility I might be getting a snarfer soonish. But what's a snarfer without a phoneyoneyoney? So, which should it be. The Motorola 4800 seems to be recommended for modem use, but are there any others I should be considering? Dan [5] Cellular Phreaking Msg # - 1800 To : ALL From : AZTECH Subject : P3's Time : 9:33:44 PM 06/21/1995 Last Chance folks! Treat yourself to a P3 today! Mail me for details or see me at AAA (Ill probably be wearing the usual : Black all over with long freaky hair) Each one comes with 5 code pairs... [5] Cellular Phreaking Msg # - 1803 To : ALL From : BLACKTHORN Subject : cellular Time : 9:51:47 PM 06/21/1995 as i was reading the evening standard i came across an article about cloning, and plans to stop it, me beeing the nice kind person that i am, typed it all up so you can all read it. Crackdown looms on mobile `clone phones' (Luke Blair evening standard) New legislation to combat mobile phone fraud is beeing considered by thegovernment amid fears growing evidence that that it is soaring out of control, The most serious problem "cloaning" where a stolen phone is given someoneelses number - has exploded in recent months. the first indication for ownersis the bill,which can be tens of thousands of pounds. there is now evidencethat previously un-cloneable digital phones are beeing used. Mobile-phone companies, currently bearing the cost put between 50 million to 100 million a year, have been lobbying for a change in the law for 18months. Under the umbrella organisation fo the federation of communicationservices, they are finally getting somewhere. at a recent meeting with thehome office minister David MacLean, the industry was left a hint thatsomething would be done. According to gary burnstein, head of corporate security for cellnet, thatcould mean the creation fo new criminal offences. These would outlaw the useof special scanning equipment, used to snatch the signals produced by mobilephones over the airwaves. They would also make it illigal to transferinformation gleaned from those signals to a mobile phone, the process knownas cloning, so it can be used by a new, often by an entirely innocent, owner. "The government is very postive about doing something," said Mr Bernstein"Two years ago we came up agaist a brick wall but now they are veryreceptive." At present, using and even reprogramming a phone is not illegal.Using the phone to avoid paying bills is fraud, but it is virtuallyimpossible to prevent once cloning has taken place. Labour MP Brian Donohoe, who has taken up the issue in the commons saidthe government had been reluctant to force new legislation on a boomingindustry which is still in its infancy. But he added "the pressure buildingup for a change is now irresistable." Part of the concern is that with anynew boom in crime, there have been the associated problems of escalatingviolence and links with drugs trade. But some of the most powerful pressure for change, ironically,comes fromcloning itself, with an increasing number of its victims coming from the veryinstitutions which until now appeared to be reluctant to act - the government, parliment and the police.----------------------------------------------------------------- shit..it aint come out right, but i guess you can still read it ok.. looks like all you cell dudes will be in the shit if ya ever caught.. l8r blackthorn [5] Cellular Phreaking Msg # - 1832 To : ALL From : AZTECH Subject : code pairs Time : 9:35:30 PM 06/24/1995 Does anybody have a working code pair to test out a P3? I reckon mines fucked, but I need a pair to test it. Any offers will be more tha genrously repaid. Just leave it as Private E-mail if you feel like it, and Ill trench up some goodies for you... [5] Cellular Phreaking Msg # - 1847 To : GEORGE KING From : DOUGIE Subject : BADTYPE Time : 10:46:16 PM 06/25/1995 try master reset #32# when in programming mode... on the phone.... [5] Cellular Phreaking Msg # - 1868 To : DOUGIE From : GEORGE KING Subject : BADTYPE Time : 1:34:38 PM 06/27/1995 Tried it, mate - thanks anyway :) [5] Cellular Phreaking Msg # - 1896 To : PULSE From : ETHERLORD Subject : P3 Time : 7:10:36 PM 06/29/1995 not exactly about p3's but ... do you know if the BT Amber Transportable is chippable? coz I can get 1 for a fucking xcellent price.. hurry :) urgent.. [5] Cellular Phreaking Msg # - 1902 To : ALL From : SPIRIT Subject : Ericsson EH97 Hotline Time : 11:25:44 PM 06/29/1995 I've got one of these up for grabs in really nice condition. Boxed (!) with spare battery and charger.. Offers... [5] Cellular Phreaking Msg # - 1903 To : ETHERLORD From : SPIRIT Subject : P3 Time : 11:28:33 PM 06/29/1995 I thought the Amber was a P3 ?? Maybe I'm wrong.. chances are if it's a transportable it shouldn't be too hard. BT Crystal is a Motorola 6800x TP (by the way). [5] Cellular Phreaking Msg # - 1907 To : SPIRIT From : ETHERLORD Subject : Ericsson EH97 Hotline Time : 3:28:47 PM 06/30/1995 not sure what they sell for.. what would you ask?? [5] Cellular Phreaking Msg # - 1908 To : SPIRIT From : ETHERLORD Subject : P3 Time : 3:29:35 PM 06/30/1995 actually - having seen it today in the bt shop (yes - i actually went IN! :) its a mobile.. but i'll look - if its the p3 - arent they really easy to chip? thanx.. [5] Cellular Phreaking Msg # - 1910 To : ETHERLORD From : SPIRIT Subject : P3 Time : 5:29:56 PM 06/30/1995 > actually - having seen it today in the bt shop (yes - i actually went > IN! :) its a mobile.. but i'll look - if its the p3 - arent they really > easy to chip? Err yeah.. I didn't think BT were still selling them which confuses me somewhat. If it's quite tall and slim (but also quite broad) and the aerial lifts up from the back it's probably a P3. As for rechipping, yes you could whack in the test chip and change the ESN through the handset. [5] Cellular Phreaking Msg # - 1917 To : ALL From : FLASH Subject : Probably bollocks but... Time : 10:25:11 PM 07/02/1995 Right guys, I was on irc channel #2600, and I asked if there were any UK peeps there, and some chick called Anne-Lise said she was from Coventry. So I asked her what she was into (H/P-wise!!) she replied: *Anne-Lise* Celljacking. I realised she meant snarfing, so I asked her how she did it :), *Anne-Lise* It involves a hand scanner, an MX761 chip and an 800mhz bandwidth tuner for Vodaphone jacking. *Anne-Lise* I 'takeover' computer lines over cellular after login. I asked how much the setup cost, and she said 260 quid, to wich I replied something like "JESUS!!! And you snarf with it?!?!?!?!" *Anne-Lise* *nod* When I tried to find out more she kicked me off the channel, saying 'Get a manual' :(( Well, is there any truth in this?? Why isn't anyone else doing it?? And why did a 'chick' know about all this when I didn't???? Flash. [5] Cellular Phreaking Msg # - 1921 To : FLASH From : MADMAN Subject : snarfchick Time : 1:07:44 AM 07/03/1995 I think she's been watching too much telly me thinks 'takes over computer line with cellular' nice one. As for cost a second hand scanner cost me 120 quid , i got me PC and DaveX's snarf circuit uses under a tenner's worth of component's . L8r Madman [5] Cellular Phreaking Msg # - 1928 To : SPIRIT From : ETHERLORD Subject : P3 Time : 6:56:41 PM 07/03/1995 > > actually - having seen it today in the bt shop (yes - i actually went > > IN! :) its a mobile.. but i'll look - if its the p3 - arent they really > > easy to chip? > > Err yeah.. I didn't think BT were still selling them which confuses me > somewhat. If it's quite tall and slim (but also quite broad) and the > aerial lifts up from the back it's probably a P3. > > As for rechipping, yes you could whack in the test chip and change the > ESN through the handset. yeah.. not really sure - they are kinda bolted down ;).. hmm.. well.. as I say.. i'll mail u about the eh237 coz thats a dead cert for chipping :).. l8rz [5] Cellular Phreaking Msg # - 1929 To : ALL From : ETHERLORD Subject : motorola 4800x's Time : 6:59:54 PM 07/03/1995 anyone got any? seeing as i would mainly use a mobile for modem.. thanx. [5] Cellular Phreaking Msg # - 1945 To : ETHERLORD From : DOUGIE Subject : P3 Time : 1:30:04 AM 07/05/1995 it's a mxon [5] Cellular Phreaking Msg # - 1946 To : ALL From : DOUGIE Subject : esn grabbing Time : 1:38:41 AM 07/05/1995 made davex thing got the scanner made every thing to a tea. but i can fu****g write the software to decode the info comming in ,,cant sleep at night,,cant sleep during the day someone please (some clams in it for anyone that can help??) help me.......come on..... and I WOULD LIKE TO TAKE THIS MINUTE TO APLOYIGIZE (SOMETHING LIKE THAT) TO THE ON AND ONLY DAVEX FOR ALL THE TROBLE CAUSE ON HIS EMAIL... BUT I STILL THINK HE IS A WANK FOR NOT GIVING ME NY HELP WITH MY SOFTWARE....... BY BY D.O.U.G.I.E.....G.L.A.S.G.O.W.1.9.9.5..... [5] Cellular Phreaking Msg # - 1951 To : ALL From : PHANTASM Subject : cellular comms Time : 11:23:43 PM 07/05/1995 I am currently writting a text file on how to use any cellular phone with a modem. It should be finished at the end of this week. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 1958 To : DOUGIE From : ETHERLORD Subject : P3 Time : 6:42:17 PM 07/06/1995 > it's a mxon maxxon?... [5] Cellular Phreaking Msg # - 1959 To : ALL From : SHERRIF Subject : cleartone ctn 7000 Time : 7:17:01 PM 07/06/1995 anybody got info on the ctn 7000 eg s/w and leads thanks [5] Cellular Phreaking Msg # - 1964 To : MADMAN From : DOUGIE Subject : Greek Phreak Time : 11:43:05 PM 07/06/1995 the system is pcn they take this bin's out at 4.21am [5] Cellular Phreaking Msg # - 1968 To : ALL From : ANONYMOUS Subject : ESNs Time : 4:11:40 PM 07/07/1995 2342-874405 15CF0F42 2342-801124 15A6050F 2346-429044 3C8C03C9 2347-511385 ED6B0C85 2342-227040 98F40D45 2347-148873 1FC60DA8 2349-795809 641F048F 2346-124938 E70A0D94 2342-422640 21B004E8 2342-430395 8DB80283 2342-383179 3BFF0E82 2347-159937 46D20104 2346-027034 55340A42 2342-430395 8DB80283 2346-967436 523B0281 [5] Cellular Phreaking Msg # - 1973 To : ANONYMOUS From : FLASH Subject : Whatthefuck!?!? Time : 1:32:48 AM 07/08/1995 Is that list of pairz, like, fucked up, or am I supposed to work out the ESNs? I've figured out how to get the last 5 didgets, and the first 2, but how do I get the 2nd pair of numbers? I can only manage to work out what half of the ESNs are :( Flash. [5] Cellular Phreaking Msg # - 1974 To : FLASH From : VLADIMIR Subject : Whatthefuck!?!? Time : 4:43:44 AM 07/08/1995 > Is that list of pairz, like, fucked up, or am I supposed to work out > the ESNs? I've figured out how to get the last 5 didgets, and the > first 2, but how do I get the 2nd pair of numbers? > I can only manage to work out what half of the ESNs are :( > > Flash. > d/l a copy of celltool.zip available here VlaDiMiR [5] Cellular Phreaking Msg # - 1977 To : ALL From : PHANTASM Subject : cellmode.txt Time : 7:01:07 PM 07/08/1995 My "how to connect any cellular phone to a modem" guide is now online. Download "CELLMODE.TXT" from the New_Uploads directory and distribute this file to all known underground systems in the UK. I have already uploaded this file to the following US systems; Screaming Electron, Blitzkrieg, The Works. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 1988 To : LOONY TOON From : AL Subject : Celliars & modems Time : 3:28:53 PM 07/09/1995 Look for battery elim for p3, they should be easy to get, use that plug. Al [5] Cellular Phreaking Msg # - 1989 To : SEEN From : AL Subject : 8500x Time : 3:32:33 PM 07/09/1995 Ya dont power it up! Re-chip s/w does it all for ya, fone has to be off b4 plugin. Al [5] Cellular Phreaking Msg # - 2012 To : ALL From : ETHERLORD Subject : transportable... Time : 1:47:16 PM 07/15/1995 again :) does anyone have a transportable for sale? could really do with one.. or for that matter a decent handheld?... thanx.. [5] Cellular Phreaking Msg # - 2039 To : ALL From : IPX Subject : nec p3's Time : 8:51:27 PM 07/20/1995 I have got 2 nec p3's for sales. One with the store 69 chip in it which lets you scan calls and all sort of shit like that. They have both got 2 batteries and the one with the store 69 chip in it has got a thingy so you can run it in the car.. All offers for the store 69 chip should be over 200 quid and I will take 115 inclusing postage for the other one. Oh and the one with the store 69 chip has got an extended aerial on it. big floppy one!!!!!!!!!! So any offer mail me here.. And hurry up because these are the only two I have got. Oh and they are both in excellent nick and they both have chargers...it there anything else??? no..thats it... IPX [5] Cellular Phreaking Msg # - 2050 To : ALL From : MADMAN Subject : Holiday Report Time : 5:37:42 PM 07/21/1995 Yo,just back from Greece , Phones still all pulse diallers , right sore arse they give you , payphones are smart cards , same as France etc. , Mobile system is GSM , three year old HSTET and PANAFONE , minez roamed there (Corfu) brilliantly , speaking to Hotel owner says they pay 50 quid a month rental and twice what we pay for calls , says if i can find a way of rippin em off , there's a free hotel room anytime in it! I know you can re-id the sky cards like an eeprom (which they are) but i dunno if you would get the info you need without actually having the GSM card to read of? , anywayz L8r Madman PS My P3 chip shop is re-opened for business , anyone wanting a chip mailme , i hate to see cuntz ripping yas off.. [5] Cellular Phreaking Msg # - 2070 To : ALL From : SHERRIF Subject : KILL ESN Time : 6:08:27 PM 07/24/1995 ok boys njoy this international esn A735020F 2346-384 669 0850 [5] Cellular Phreaking Msg # - 2082 To : IPX From : IPX Subject : dealers Time : 10:47:19 PM 07/24/1995 Does anyone know any dealers out there that are a bit like us lot. I might have something of interest that can make them a lot of money (about 8000 quid a week) if you know any that you might be able to get a cut off of them leave me a message and I will give u a call IpX [5] Cellular Phreaking Msg # - 2094 To : IPX From : IPX Subject : panasonic J Time : 9:38:09 PM 07/25/1995 has anyone got the lead diagrams and software for the panasonic j phone?? Global pbx for whoever comes up with it regards IpX [5] Cellular Phreaking Msg # - 2095 To : ALL From : IPX Subject : Nec p3's Time : 10:29:32 PM 07/25/1995 ok...i have got 2 nec p3's for sale and they are bth in excellent condition. The first one has got 1. 2 batteries 2. charger and the second one has got 1. 2 batteries 2. Charger 3. Store 69 chip 4. Extended aerial 5. Battery Eliminator for the car for the first one I want 100 quid and i think someone on here is doing the chips for free or somthing (the chip that lest you reprogram the esn and min and all of the other shit through the handset of the phone ) And for the second one I want 210 ..that is including postage i will pay for that...the second one has been serviced and everything 2 x and is in superb condition.. These phone are great for people that want to start phreaking with cell phones. IpX [5] Cellular Phreaking Msg # - 2096 To : ALL From : SHERRIF Subject : ctn 6000 Time : 10:54:13 PM 07/25/1995 anybody outhere have any ctn 6000 info and software to program the esn this fuckin pone is giving me great probs as i have so many of em no wonder nobodys wants em but i have got into nam mode so far just need the lead etc to program esn now [5] Cellular Phreaking Msg # - 2116 To : ALL From : RAY Subject : Microtac II Time : 11:39:29 PM 07/26/1995 I have recently bought a motorola microtac II mobile phone and am interested in trying to connect it to a network. My apologies if a FAQ exists but I would be grateful for any pointers or suggestions on the hardware and software that I need to aquire. I took the risk with this phone as there appears to be a socket at the base of the phone which is separate from the charging system. TIA.....Ray [5] Cellular Phreaking Msg # - 2138 To : ALL From : IPX Subject : chip Time : 10:55:10 PM 07/27/1995 who is doing the chipies for the p3 . i have forgot his handle...it is like mud or somtinhg...i will try again in the morning when i am better... IPX [5] Cellular Phreaking Msg # - 2140 To : IPX From : MADMAN Subject : ChipzRus Time : 12:08:46 AM 07/28/1995 Yup,clear as mud..hehe mail me for info l8r Madman [5] Cellular Phreaking Msg # - 2151 To : IPX From : ECK Subject : Nec p3's Time : 12:15:35 AM 07/29/1995 > esn and min and all of the other shit through the handset of the phone > ) > And for the second one I want 210 ..that is including postage i will > pay for that...the second one has been serviced and everything 2 x and > is in superb condition.. > 210 quid! this makes me sick, theres nothing worse than at the time when we should all be 'as thick as thevies' (pardon the expression) we are trying our hardest to rip each other off to buggery.. -Eck  [5] Cellular Phreaking Msg # - 2155 To : ECK From : PHANTASM Subject : Nec p3's Time : 6:09:08 AM 07/29/1995 > > esn and min and all of the other shit through the handset of the phone > > ) > > And for the second one I want 210 ..that is including postage i will > > pay for that...the second one has been serviced and everything 2 x and > > is in superb condition.. > > > 210 quid! this makes me sick, theres nothing worse than at the time > when we should all be 'as thick as thevies' (pardon the expression) we > are trying our hardest to rip each other off to buggery.. > -Eck >  I couldnt agree more mate. I can buy second hand NEC P3's from Loot for between 60-80 pounds. As for the modified chip, these are available for free if you know the right people. Phantasm (SysOp) [5] Cellular Phreaking Msg # - 2161 To : PHANTASM From : KELTIC PHROST Subject : Nec p3's Time : 3:53:02 PM 07/29/1995 Damn right. I fucking hate leeches profiteering off what should be free and cheap. Its worse than the phone companies and corporations when you start to involve profit in this. Hacking is supposed to ba about getting Ridiculously expensive services for free, and fucking over profiteering plcs, not ripping off your fellow enthusiasts. [5] Cellular Phreaking Msg # - 2166 To : KELTIC PHROST From : DANGERMOUSE Subject : Nec p3's Time : 10:58:31 AM 07/30/1995 THat's so true. The saddest thing about phreaking is that as it becomes harder to phreak from your own line, its becoming more and more so that only professional criminal can defraud the phones successfully. As with something I read the other day about GSM type stuff in the States - it was defrauded, but by a mobile phone store, which sold loadsa phones all with cards matching one particular phone sold to a "phantom" customer, who duly disappeared when the bill arrived. The worst of it, is that all this technology doesn't reduce the scale of phreaking, it just takes it away from the "little people". Dan [5] Cellular Phreaking Msg # - 2170 To : ALL From : IPX Subject : esnman Time : 10:40:08 PM 07/30/1995 does anyone know what happened to the esnman? Is he on with a different handle? IpX [5] Cellular Phreaking Msg # - 2198 To : KELTIC FROST From : IPX Subject : nec p3's Time : 6:34:44 PM 08/01/1995 hmm...this really makes me laugh..you come on and make a lrge comment with loads of big words about the price of the nec p3's that i am trying to sell. The price was just over 200 quid and you made such a fuss about it and you yourslef where selling the fuckers for 200 quid. And they came with battery charger chip and 5 esns. MY 200 QUID P3 comes with that and another bat an extended areial, carry case, and car eliminator....think before you write the next message because you are making yourself look like a right wanker. IpX [5] Cellular Phreaking Msg # - 2203 To : ALL From : GENERAL HEDCASE Subject : 8500x Time : 7:17:55 PM 08/01/1995 I just got me a Motorola 8500x, Ive leeched all the files 'bout it off here and some say I need the cable to program it and some say I can programm it in test mode. Ive played around in test mode a bit, I had actually cos I accidently locked the fone and didn't know the code :]. Oh yeah if I do have to use the cable, can you buy plugs to go on the back instead of having to soldier it?. I also got a Sony CM-H333, does anyone know anything about this fone?, like the 8500x it only cost me 5 quid and I got cos it looked good (compared to the 8500x anyway :]). <>