==Phrack Inc.==

                    Volume Three, Issue 28, File #12 of 12

            PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN
            PWN                                                 PWN
            PWN        P h r a c k   W o r l d   N e w s        PWN
            PWN        ~~~~~~~~~~~   ~~~~~~~~~   ~~~~~~~        PWN
            PWN               Issue XXVIII/Part 4               PWN
            PWN                                                 PWN
            PWN                 October 7, 1989                 PWN
            PWN                                                 PWN
            PWN          Created, Written, and Edited           PWN
            PWN               by Knight Lightning               PWN
            PWN                                                 PWN
            PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN


Woman Indicted As Computer Hacker Mastermind                      June 21, 1989
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
by John Camper (Chicago Tribune)

A federal grand jury indicated a Chicago woman Tuesday for
allegedly masterminding a nationwide ring of computer hackers
that stole more than $1.6 million of telephone and computer
service from various companies.

The indictment charges that Leslie Lynne Doucette, 35, of 6748
North Ashland Ave, and 152 associates shared hundreds of stolen
credit card numbers by breaking into corporate "voicemail"
systems and turning them into computer bulletin boards.

Voicemail is a computerized telephone answering machine.  After a
caller dials the machine's number he punches more numbers on his
telephone to place messages in particular voicemail boxes or
retrieve messages already there.

The indictment charges that the hacker ring obtained more than
$9,531.65 of merchandise and $1,453 in Western Union money orders
by charging them to stolen bank credit card numbers.

It says the group used stolen computer passwords to obtain
$38,200 of voicemail service and stolen telephone credit card
numbers to run up more than $286,362 of telephone service.

But the biggest haul, more than $1,291,362, according to the
indictment, represented telephone service that was stolen through
the use of Private Branch eXchange (PBX) "extender codes."

A PBX system provides internal telephone service within a
company.  If a PBX system is equipped with an extender, a person
can call the PBX system, punch in a code, and dial long distance
at the expense of the company that owns the
system.

The only corporate victims of the alleged fraud named in the
indictment are August Financial Corporation of Long Beach
California, and A-1 Beeper Service of Mobile, Alabama.

Doucette has been held without bond in the Metropolitan
Correctional Center since May 24, when she was arrested on a raid
on her apartment that netted 168 telephone credit card numbers
and 39 extender codes, federal authorities said.  The indictment
does not name any members of the alleged ring, but authorities
said the investigation is continuing.

United States Attorney Anton R. Valukas said the indictment is
the nation's first involving abuse of voicemail.

"The proliferation of computer assisted telecommunications and
the increasing reliance on this equipment by American and
international business create a potential for serious harm," he
said.

Authorities said they discovered the scheme last December after a
Rolling Meadows real estate broker reported that hackers had
invaded his company's voicemail system and changed passwords.

Authorities said they traced the calls into the Rolling Meadows
voicemail system to telephones in private homes in Chicago,
Columbus, Ohio, and suburban Detroit, Atlanta and Boston.

Checks on those phones led them to voicemail systems in companies
around the country, they said.

[For more information see Phrack World News XXVII/Part One and
the article entitled, "Computer Intrusion Network in Detroit,"
dated as May 25, 1989 --KL]
_______________________________________________________________________________

Phreaks Abuse East St. Louis Phone Card
September 24, 1989 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ East
St. Louis, IL, a dirt-poor minority suburb of the larger Missouri
city by the same name was victimized for several months by
phreaks without realizing it until the phone bills for a one year
period were audited recently.

According to a recent story in the Belleville, IL
(News-Democrat), the city is being billed for phone calls to
dial-a-porn services and from points as far flung as Florida and
Texas.

The monthly phone bill for the city of East St. Louis averages
$5000, and over the past year it has included calls to nearly
every state as well as to "900" area adult talk lines.  City
Treasurer Charlotte Moore said the number of questionable calls
in each month's phone bill, which is usually two inches thick,
shows the "need for better policing of phones."

No kidding!  The (News-Democrat) obtained copies of the phone
bill for several months under the Freedom of Information Act, and
set about reviewing the places and people called.  For example,
from March through May of this year, hundreds of dollars in calls
were made from places in Texas, Florida and elsewhere, and
charged to a Calling Card number assigned to the city.

In one instance, a caller in northern Florida made a 288-minute
call to Miami that cost East St. Louis $39.27.  The
(News-Democrat) called the Miami number, and reached a man named
John, who refused to give his last name, and claimed he "...had
never even heard of East St. Louis..."

Calls from one certain number in Houston to places all over the
United States accounted for more than $1000 in charges over
several months.  A man who answered the phone at the Houston
number refused to give his name and refused to discuss the
matter, or explain how his phone might have been used for the
fraudulent calls.

Prior to intervention by the newspaper, the city had done
nothing.  Apparently they were not even aware of the abuse.  On
notification, the local telco cancelled all outstanding PINS, and
issued new ones.  Meanwhile, the city of East St. Louis continues
to plead poverty.  They are barely able to meet payroll for city
employees, and have skipped a couple of paydays at that.  The
city has an extremely poor tax base, and will likely file
bankruptcy in the near future.
_______________________________________________________________________________

The Cuckoo's Egg
October 1, 1989 ~~~~~~~~~~~~~~~~
    The Cuckoo's Egg: Tracking a Spy Through the Maze of Computer
         Espionage by Cliff Stoll, Doubleday, 1989, ISBN
         0-385-24946-2 ($19.95)

          Book Review by Louise Bernikow, Cosmopolitan, October
1989

Here is a first -- the true story of a man who notices a
seventy-five cent discrepancy in a computer's accounting system
and runs the error down until it leads to a real live spy ring.
Even if you don't know a byte from a bagel, this book will grip
you on page one and hold you as ferociously as the best mystery
stories.

It is astrophysicist-turned-systems-manager Cliff Stoll's first
week on the job at a lab in Berkeley, California.  The error
turns up, and he tries to figure out why, partly as an exercise
in learning about the computer system he's going to be working
with.  Almost immediately, he discovers that somebody had been
breaking into the computer network using a fake password.  That
discovery leads him to other break-ins in other computers,
including some in military installations.  He alerts the FBI,
which, since he has lost neither half a million dollars nor any
classified information, says, "Go away, kid."

Stoll presses on, sleeping under his desk at night, monitoring
the system -- a hound waiting for the fox to come out in the
open.  There is suspense aplenty, but it's the intensely human,
often funny voice of the man on the trail that makes this book so
wonderful.  Stoll's girlfriend, Martha, a law student, seems like
one smart and delightful cookie, and she puts up with his
obsession pretty well.  In the end, Stoll becomes a national
hero.  The play-by-play is nothing short of fascinating.

                  [I wonder if anyone got those cookies --KL]
_______________________________________________________________________________

Hackwatch Spokesman Charged
October 2, 1989 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ Taken from Computing
Australia

Self-styled computer security expert Paul Dummett, alias Stuart
Gill, has been charged with making false reports to the Victoria
Police following an investigation into claims he made in the
daily media late in 1988 and early this year.  The articles often
quoted Gill, introducing himself as a spokesman for either
"Hackwatch" or the "DPG monitoring service".

Gill claimed hackers in Australia had gained access codes from
others in the US and lifted $500,000 (US) from the International
Citibank, United States.  Other claims include credit card
numbers had been posted on bulletin boards for BBS users' access;
drugs, including steroids, were being sold using bulletin boards;
evidence of this had been given to the police by informers; and
in response, the police had raided several hackers' homes.  The
police, including the Criminal Investigation Bureau and the Fraud
Squad's Computer Section, repeatedly denied the claims.

Gill had disappeared, but returned again on September 22 and was
charged in the Frankston Magistrates' Court under his real name,
Paul Dummett.  According to court documents, police investigating
Dummett's claims allegedly found Citibank's computer network had
not been illegally accessed on its New York number as Dummett had
claimed.  When Dummett appeared in court his legal aid counsel
Serge Sztrajt applied successfully to adjourn the case until
October 20.  Dummett did not enter a plea.
_______________________________________________________________________________

                                PWN Quicknotes ~~~~~~~~~~~~~~ 1.
                                Hire A Hacker? -- "Some very
                                notable people in the computer
    industry started out as hackers tinkering around in a
    mischievous fashion," Ron Gruner, president of Alliant
    Computer Systems Corporation told Computerworld why he would
    probably hire Robert T. Morris Jr., of Cornell and creator of
    Internet worm.  - - - - - - - - - - - - - - - - - - - - - - -
    - - - - - - - - - - - - - - - - - 2.  Computer Hackers Rip
    Off Corporate 800 Lines -- Computer hackers pride themselves
    on never having to pay for long distance calls.  How do they
    do it?  Sam Daskam, president of Information Security
    Association (ISA), explains:  Hackers call corporate numbers
    until they find one with an automated switchboard.  The
    fingers do not do the walking.  Automatic caller software is
    used.  Then they link their computer to try all combinations
    of three or four-digit numbers until they find one which
    connects them to the company's outside toll or 800 line.
    Once they get a dial tone, they can make calls anywhere at
    the firm's expense.  Taken from the Security Letter 1989.  -
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - - - - - - - - 3.  900 Service Considered -- There has been
    talk among some companies about switching from using the 800
    toll free numbers to 900 numbers since the ease of use of the
    900 numbers has been shown so vividly.  This would save the
    corporations a large degree of money.  - - - - - - - - - - -
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 4.
    Grocery Store "Hackers" Sell Drugs And Women -- The VMB
    (voice mailbox) system of a wholesale grocer in Los Angeles
    was commandeered to a small band of "hackers," who used the
    system to run a prostitution ring and disseminate data about
    drugs.  Finally, valid VMB users complained that they could
    not use the service since their passwords were invalidated.
    An investigation disclosed that the "hackers" overrode
    security features and acquired 200 VMBs for their own use.  -
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - - - - - - - - 5.  Phone Phreaks Busted In Upstate New York
    -- Once again it seems that Syracuse, New York is ripe for
    the picking for law officials to grab hackers involved
    computer related crimes.  In August the Federal
    Communications Commission (FCC) put a local area police
    sergeant in charge of contacting a list of local computer
    users that were using a local long distance service that
    offered national and international calling.

    It seems that one user of the service contacted the company
    about a large bill, $10,000, that he received.  The company
    then put a trap on the code and accumulated a list of
    unauthorized users to that code.  So far the local
    authorities, the state police, and the FBI have been brought
    in on the case.  They have been interviewing those on the
    list and so far most have cooperated fully with the police
    (most offenders are underage).  One user called Gunter has
    even allowed the police to use his computer bbs accounts.
    The service used by those caught (25 people) where to place
    long distance calls to France, Dominican Republic, Kenya, and
    Germany.  The callers also used the service to call locally
    in Syracuse, as one person said that it cleaned up the line
    noise.  - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - - - - - - - - - - - - - 6.  Bulletin Board Scanning Saves
    Boy (August 24, 1989) --Undercover police in San Jose,
    California, have been watching bulletin boards for several
    years, looking for computer users who boast about their
    criminal exploits.  It was such activity that led them to
    Virginians Dean Ashley Lambey, 34, and Daniel T. Depew, 28,
    who have been accused of conspiring to kidnap a young boy to
    be filmed as they molested him and then killed him.  (Article
    by Tracie L. Thompson of the San Francisco Chronicle.) - - -
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - - - - - - 7.  German Hackers Attempt To End Smoking (August
    29, 1989) -- On Saturday, August 26, 1989, ZDF (the second
    German television station and one of the 2 nationwide
    television channels) asked their viewers whether they thought
    smoking should be banned in public areas.  The viewers could
    reply by telephone, dialing one telephone number for "yes"
    and another telephone number for "no."  Within a time frame
    slot of 14 minutes, 52,942 telephone calls came in, with a
    ratio of 54:46 in favor of prohibiting smoking.  This means
    that 29,669 voted in favor of a prohibition, and 25,273
    opposed it.

    On Monday, August 28, 1989, a group of South German hackers
    claimed to have manipulated the quota by dialing the "yes"
    number with 83 personal computers at a rate of 4 times a
    minute; virtually all of their calls came through so that
    about the maximum of 4,648 "yes" votes came from their
    computers.  These circumstances led to new results in the
    poll: "Yes" = 25,021 and "No" = 25,273, giving the "no" group
    a small majority.

                           Story by Klaus Brunnstein - - - - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- 8.  Immigration Chief Proposes National Computer Screen (June
22,
    1989) --LA JOLLA, CA, -- The Commissioner of Immigration and
    Naturalization, Alan C. Nelson, today proposed a nationwide
    computer system to verify the identities of all job
    applicants in order to halt the widespread use of fraudulent
    documents by illegal aliens seeking jobs.

    Mr. Nelson also suggested standardized identity cards for
    immigrants so as to get fuller compliance with a 1986 law
    prohibiting employment of illegal aliens.

    Creating a national identity card and other ways of checking
    legal status or identity have been repeatedly suggested in
    Congress as tools in fighting unlawful immigration, but have
    also been consistently rejected as potential infringements on
    civil liberties.

    The national computerized database on everybody is one bad
    idea that simply refuses to stay dead, no matter how many
    times we drive a stake through its heart -- if the INS didn't
    resurrect it, the drug czar or the FBI would.  "Eternal
    vigilance..."

                    Story by Roberto Suro (New York Times) - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - 9.  West German Computer Hackers Accused Of Spying For
Soviets
    (Aug. 17, 1989) -- Associated Press (Frankfurt) -- Three
    computer hackers, suspected of giving the Soviet Union
    information from military and industrial computers worldwide,
    have been indicted on espionage charges, prosecutors said
    yesterday.  The West German government called the breakup of
    the spy ring, which gave the KGB secret data from 12
    countries, including the United States, "a major blow" to the
    Soviets.  In a four-page statement, Kurt Rebman, the chief
    federal prosecutor, said it was the first time his office had
    prosecuted hackers for endangering national security.  Taken
    from the Boston Globe - - - - - - - - - - - - - - - - - - - -
    - - - - - - - - - - - - - - - - - - - - 10. Challenge To
    Phreaks! (August 31, 1989) -- Nippon Telegraph & Telephone
    Corp. (Tokyo) is offering a $7,000 reward to any person or
    organization that can invade its FEAL-8 private communication
    and data system, according to an Associated Press report that
    NTT America Inc. officials could not confirm.  The reward
    offer supposedly expires 8/31/91.  No telephone number or
    other information was included.  Taken from the Wall Street
    Journal.  - - - - - - - - - - - - - - - - - - - - - - - - - -
    - - - - - - - - - - - - - - 11. Shadow Stalker Loses Out
    (August 7, 1989) -- A 17-year-old Michigan boy has been
    charged with posting stolen long-distance telephone codes on
    a bulletin board system operated in his home.  Brent G.
    Patrick, alias "Shadow Stalker" online, was arraigned this
    week on one count of stealing or retaining a financial
    transaction device without consent.  Patrick was released on
    $2,500 bond, pending his hearing.  The youth faces a maximum
    of four years in prison and a $2,000 fine if convicted.  His
    bulletin board, Wizard Circle, has been closed.  - - - - - -
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - - - 12. Philadelphia Hackers Change Speed Limit -- Recently
    an unknown hacker got into the computer that controlled the
    speed limit on the Burlington-Bristol Bridge.  He proceeded
    to change the speed limit from 45 m.p.h. to 75 m.p.h. A lot
    of people were stopped and ticketed and judges say they will
    not hear any appeals because, "the public should know better
    than that no matter what the sign says."  The police claim to
    have leads, however this is doubtful.  - - - - - - - - - - -
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 13.
    Two Story Jump To Escape From Secret Service (July 26, 1989)
    -- Red Rebel, a known hacker in Florida was busted by the
    United States Secret Service and local authorities.  It seems
    that in attempt to to escape he actually jumped out a second
    story window and ran for a while.  The Secret Service
    confiscated two computers and a load of disks.

    To make matters worse, similar to Oryan QUEST, Red Rebel is
    not an American citizen and is likely to be deported.  Red
    Rebel is charged with resisting arrest, interfering with
    evidence, and something concerning credit card fraud.
    Information provided by The Traxster.  - - - - - - - - - - -
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 14.
    Fraud Alert (September 1989) -- PBX fraud is busting out all
    over.  Long distance carriers are being overwhelmed by
    corporate customers demanding refunds for fraud perpetrated
    on them.  No long distance carrier covers their customer's
    long-term fraud.  If you got fraud you got to pay.  This is
    not like stolen credit cards.  This is real serious stuff.
    Thieves are dialing into 800 INWATS lines and, via auto
    attendants, hacking their way to overseas.  The big calls go
    to drug-related countries, especially Colombia, Pakistan,
    Dominican Republic, and Ecuador.  But no one really knows
    which countries are drug-related and which aren't.  Taken
    from Teleconnect Magazine.  - - - - - - - - - - - - - - - - -
    - - - - - - - - - - - - - - - - - - - - - - - 15. Motorola
    Introduces Network Encryption System (August 4, 1989) --
    Motorola Government Equipment Group (GEG) has introduced its
    Network Encryption System (NES), which features the latest in
    security services for the protection of Local Area Networks
    (LANs).  Designed in accordance with Secure Data Network
    System (SDNS) standards including SDNS electronic key
    management, the NES is a flexible internet security solution
    for Type I applications.

    The NES is unique in COMSEC technology because the protocol
    software is loaded via diskette.  The NES is installed in the
    drop cable between the computer and the transceiver, or as a
    gateway device separating a LAN from a backbone network.  The
    product supports both DoD and ISO internet standards allowing
    protection over wide area networks.

    The initial product accommodates connection to IEEE 802.3 and
    IEEE 802.4 medias.  Motorola Inc. has a Memorandum of
    Agreement with the National Security Agency and anticipates
    product endorsement in the first quarter of next year.  The
    LAN product represents the first of a family of SDNS products
    that will provide complete, interoperable system security
    solutions.  Additional information on the NES can be obtained
    from Joe Marino at (602) 441-5827.  - - - - - - - - - - - - -
    - - - - - - - - - - - - - - - - - - - - - - - - - - - 16. The
    Death of Shadow 2600:  No Accident (July 6, 1989) -- The
    following is a message taken from The Central Office:

                     89Jul06 from fdg @ The Central Office

    MY CONDOLENCES TO DAVE FLORY'S FAMILY AND FRIENDS.  Do you
    all realize WHY a 22 year old died?  It says one thing to me.
    He was killed by some insane ex-CIA types.  Most likely under
    orders from the idiots who tried to prosecute him in 1985.
    This kind of thing is getting more common under President
    Bush.  He ran the CIA, and he is now encouraging the same
    dirty tricks to silence people who cause "problems."  Abbie
    Hoffman was done in the same way.  A small hypodermic full of
    prussic aced.  You will hear about more ex-hippies, yippies,
    and hackers/phreaks dying mysteriously in the foreseeable
    future.

    You have been warned.  And who am I to know all this?
    Believe me, friends, I am highly placed in the government.
    You will see more friends die.  You may laugh now, but I
    decided to leave a public message in hopes of saving a few
    lives.
                           Special Thanks to Epsilon
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
17. Legion Of Doom Members Raided In Atlanta (July 21, 1989) --
    The Leftist, The Urvile, and The Prophet, all of the world
    famous hacking group known as the Legion of Doom, were raided
    on July 21, 1989.  The day in question is interesting because
    two years prior, that was the same day that a nationwide
    sweep netted over 80 hackers across the country including
    famous names such as Oryan QUEST, Solid State, and Bill From
    RNOC.

    The charges against the LOD members range from toll fraud to
    illegal entry into government computer systems, although as
    it is told, the government systems were entered by the Urvile
    and the other two had nothing to do with it.  Currently, all
    three LOD-Atlanta members are still waiting to find out what
    will happen to them as charges have not yet been brought
    against them, very similar to what happened to the hackers in
    1987.

    It has been said by security personnel at Michigan Bell that
    these LOD busts were a spinoff of the supposed arrest of Fry
    Guy on July 19 for his role in the Delray Beach, Florida
    probation officer scam (detailed last issue).  It is believe
    that he had been working closely with LOD-Atlanta (especially
    The Leftist) and when caught for the probation office scam,
    he got scared and turned over what he knew about LOD.
_____________________________________________________________________