How do Blue Boxes work? Blue boxes are nothing more then a device to generate pairs of tones, and a single 2600 Hz tone. They had 12 keys, plus a single button (or a key). Each key was numbered 0 - 9, and had a "KP" key and "ST"key. The button emitted a pure 2600 Hz tone. A toll free number is dialed, and just as the number is ringing, the 2600 Hz tone is sent to clear or "Blow off" the call. A "Ker-chink" sound is heard, which is ths switch signaling back indicating its ready to receive the tones. A "KP" (key pulse) is sent, followed by the 10 digit number, and ending with an "ST" (start) tone. Call goes through, and the only indication was that an 800 number was dialed. This was how it was done more than 15 years ago. Since then, all of the American and Canadian phone companies have all but ditched this older "in-band" signalling equipment. Do Blue Boxes work now? Only on a small number of 800 numbers. Usually ones that terminate overseas. These are watched very carefully, because there are just a few "Chokepoints", it's easy for the phone companay to monitor them. The signalling handshaking is very time critial, and the tone duration and frequency is very critical. If any of these are out of tolerance, the call won't process and I'm certain that it would set off all kinds of alarms. The calling numbers are usually immediately identified through ANI and they know the calling number almost immediatly. Because most calls to these numbers are going through Digital trunks, the supervision signals will usually de-activate the voice channel the moment the flash-back happens. You have to live in an area where the 800 number actually switches to the Overseas trunks. Example: Fraser puts a dime in the slot. He listens for a tone and holds the receiver up to my ear. I hear the tone. Fraser begins describing, with a certain practiced air, what he does while he does it. "I'm dialing an 800 number now. Any 800 number will do. It's toll free. Tonight I think I'll use the ----- (he names a well-know rent-a-car company) 800 number. Listen, It's ringing. Here, you hear it? Now watch." He places the blue box over the mouthpiece of the phone so that the one silver and twelve black push buttons are facing up toward me. He presses the silver button -- the one at the top -- and I hear that high-pitched beep. "That's 2600 cycles per second to be exact," says Lucey. "Now, quick. listen." He shoves the earpiece at me. The ringing has vanished. The line gives a slight hiccough, there is a sharp buzz, and then nothing but soft white noise. "We're home free now," Lucey tells me, taking back the phone and applying the blue box to its mouthpiece once again. "We're up on a tandem, into a long-lines trunk. Once you're up on a tandem, you can send yourself anywhere you want to go." He decides to check out London first. He chooses a certain pay phone located in Waterloo Station. This particular pay phone is popular with the phone-phreaks network because there are usually people walking by at all hours who will pick it up and talk for a while. of the box. "That's Key Pulse. It tells the tandem we're ready to give it instructions. First I'll punch out KP 182 START, which will slide us into the overseas sender in White Plains." I hear a neat clunk-cheep. "I think we'll head over to England by satellite. Cable is actually faster and the connection is somewhat better, but I like going by satellite. So I just punch out KP Zero 44. The Zero is supposed to guarantee a satellite connection and 44 is the country code for England. Okay... we're there. In Liverpool actually. Now all I have to do is punch out the London area code which is 1, and dial up the pay phone. Here, listen, I've got a ring now." I hear the soft quick purr-purr of a London ring. Then someone picks up the phone... After the call his dime pops out of the slot. He tries another call: This time I'll use the ------ (a different rent-a-car company) 800 number and we'll go by overseas cable, 133; 33 is the country code for France, the 1 sends you by cable. Okay, here we go.... Oh damn. Busy. HOW? ---- "Okay. About twenty years ago A.T.&T. made a multi-billion-dollar decision to operate its entire long-distance switching system on twelve electronically generated combinations of twelve master tones. Those are the tones you sometimes hear in the background after you've dialed a long-distance number. They decided to use some very simple tones -- the tone for each number is just two fixed single-frequency tones played simultaneously to create a certain beat frequency. Like 1300 cycles per second and 900 cycles per second played together give you the tone for digit 5. Now, what some of these phone phreaks have done is get themselves access to an electric organ. Any cheap family home-entertainment organ. Since the frequencies are public knowledge now -- one blind phone phreak has even had them recorded in one of the talking books for the blind -- they just have to find the musical notes on the organ which correspond to the phone tones. Then they tape them. For instance, to get Ma Bell's tone for the number 1, you press down organ keys FD5 and AD5 (900 and 700 cycles per second) at the same time. To produce the tone for 2 it's FD5 and CD6 (1100 and 700 c.p.s). The phone phreaks circulate the whole list of notes so there's no trial and error anymore." "Actually, you have to record these notes at 3 3/4 inches-per-second tape speed and double it to 7 1/2 inches-per-second when you play them back, to get the proper tones," he adds. "As long as you get the frequency within thirty cycles per second of the phone company's tones, the phone equipment thinks it hears its own voice talking to it. The original granddaddy phone phreak was this blind kid with perfect pitch, Joe Engressia, who used to whistle into the phone. An operator could tell the difference between his whistle and the phone company's electronic tone generator, but the phone company's switching circuit can't tell them apart."