STATION ID - 7047/3.12 9x Datakit Network FOR OFFICIAL USE ONLY This is a 9x system, restricted to authorized persons and for official 9x business only. Anyone using this system, network or data is subject to being monitored at any time for system administration and for identifying unauthorized users or system misuse. Anyone using this system expressly consents to such monitoring and is advised that any evidence of criminal activity revealed through such monitoring may be provided to law enforcement for prosecution. HOSING AMPS By Xram_LraK Best viewed by VI or pico In my many travels through the RF world I have only stumbled on a few very interesting phenomena. Most of these phenomena involved things in the analog cellular realm. Interesting phenomena ranging from tumbling, to cloning, to vampire phones are all very interesting but not at all amusing or down right fun. They involved a calculated risk of dodging cops, out smarting Cellular Companies, and pointing your yaggies at large metallic objects to spread your traceable signal all over the city. These phenomena are all well documented, any child can clone a phone or at least read a text on how to clone one. Only a few of us are old enough to remember tumbling, a technique long forgotten, and vampire phones are something that only a few of us have seen. However, that's not what I want to bring to you, I want to explain to you something fun something interesting, something down right amusing. It's called HOSING... Now I know not many of you have heard of HOSING. It's and art form that was passed down from some of the best (Thanks go out to Vmorgan of LOD for showing me how to do this). Hosing isn't hard, in fact it's very simple. It only involves one Motorola brick phone preferably something older than an Ultra Classic but an Ultra Classic will work. It also doesn't involve any software or even a neat cable to do. Before I share this interesting technique for amusing yourself and all your buddies for hours on end, I think I should explain how it works. I'm not gonna get real technical here cause it's not worth my time to document how AMPS works, I hope if your reading this you have a basic idea of what AMPS is and how it works. However, that knowledge isn't really necessary to make this work. The way this thing works in THEORY is really quite easy. I say THEORY because I've never really asked anyone how it really works I'm just taking a guess that it works the way I think it does. Understand? In laymens terms it means don't quote me as the absolute power on how AMPS works cause I don't know I'm just guessing. You would have to be a switch tech and have lots of hours of experience working on cellular towers to fully understand how this works. Ok enough b.s. You want to know how it works. In simple easy to remember terms it works the following way. Towers are made up of cells each cell handles calls, these calls use channels in the cells. You can listen and monitor these channels using simple scanners that can monitor the 800mhz range. Well each channel has a number that represents it from 1 to 1024 or so depending on how big your towers are and who sets them up. Calls move from channel to channel and cell to cell as the customer moves through the calling area. Pretty simple explanation of how AMPS handles calls don't you think? Well if you can monitor a call why can't you talk back? Well you can that's what HOSING is. A more technical term would be controlled bleed over. You can tune a transceiver or something of that sort to the same freq (I'll refer to freq as channel number from on) or channel number of an ongoing call you can talk back. Example: say you are monitoring cellular calls in Washington D.C. and you hear Bill Clinton on the phone talking to his wife. Bill says "Honey I'll be out..." and you Bleed in "Fucking some Bitch" Miss Clinton will hear you loud and clear. Now isn't that amusing, much more fun than being chased by cops for cloning. So now your saying "Xram how do I get eleet Hosing skills so I can do this at home and amuse my friends at parties?" well it's really quite easy. Materials list: 1. One Motorola Brick Phone 8000 series or older Ultra Classic 2. Optional requirements are an Oki900 and a CTEK cable Directions to get yourself HOSING. 1. Get your brick phone and put it in test mode by typing "PWR, FCN, 0,0,*,*,8,3,7,8,6,6,3,3,STO." 2. Then type 12#, 12#, 10#, 08# Ok now your phone is in test mode and is ready to transmit. Now you have to find a victim. To find a victim I break out the CTEK cable and the OKI900 and scan some channels till I find someone interesting. However I know some of you are poor and can't afford such k-rad el33t gear. So get your Oki900 every good phone phreak/hacker/cracker whatever you call yourself has an Oki900 laying around and put it into test mode so it displays the forward control channel it's on. The last 3 digits on the screen are the forward control channel if you're ignorant and don't know. Then take that number and add or subtract 21 from it, do that several times and write down the number each time. Now you have a list of 5 or six numbers probably something like 321, 342, 363, 384, 300, etc.... Take those numbers and put them in the brick phone. 3. To put these channels in the brick phone type them like 11xxxx# (xxxx being the channel number you don't need to put a 0 in if you only have xxx, i.e. 11321# will work you don't need to do 110321#) 4. Ok so you put the numbers in till you find someone talking this is the easy step. 5. Then you need to find the signal strength of the call. You can only HOSE calls with high signal strengths. You do this by typing 45#. If you are using a old 8000 series phone a number of 40 or higher is a good number, if you are using a Ultra Classic phone a number of 90 or higher is a good number. 6. Ok now you have found a victim on a good channel. To HOSE a victim you type 05# and talk into the mouthpiece if they hear you or you hear yourself through the ear-piece then you win. Now remember it's like working with a CB you have to stop transmitting or you will kill the call. To stop transmitting you need to hit 06#. Continue these steps for amusement. Just remember if you do this a lot I mean like every day for a year someone will get pissed and move all the good channels away from you, so it's real hard to HOSE, so don't fucking abuse it like mad. Well now you have my eleet codes for HOSING I'd like to ramble a bit about life and kiddies and throw in my disclaimer. If you are from AOL DON'T try this at home you will fuck it up and get caught and then you'll be whining to the police "Xram made me do it" and the last thing I need is more cops at my house. So don't do this it's illegal. Also if your lame and don't have a clue don't try this a home you'll just frustrate yourself and then I'll end up with 10 messages from you saying "I don't get it." Also if you're an asshole and you want to complain about my simple AMPS diagram you can fuck off, I didn't write this to impress you with my infinite knowledge of AMPS technology, however if you want me to skewl you on it sometime I'd be happy too. Well that about wraps it up if you do have a legitimate question or you want me to skewl you on AMPS please read below. If you are a dumb fuck and still can't figure it out I can be reached at kmx@steel.fortified.net or on #9x on efnet Also look for more releases of taped hosing calls in wav and mp3 formats. Keep a look out for the technical doc's on how this really works, if people are really nice i might write them down. However, it will take me a longtime to get all the research out and define all the right terms. Thanks go out to Egatobas/KC2600krew, 9x, Frozen Krew, all my buds in #2600, #cellular, and #9x Special thanks to Vmorgan, Harmless, EtherBunny, Decious, A_Turing, and Rixon. This eleeto burito info was brought to you by Xram_LraK of 9x.