==Phrack Inc.== Volume One, Issue Eight, Phile #9 of 9 PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN Phrack World News PWN PWN PWN PWN Issue Seven/Part Two PWN PWN PWN PWN Compiled and Written by Knight Lightning PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN PWN P-80: Sting Board? August 28, 1986 ------------------ Below is a compilation of miscellaneous messages taken from the Communication/ Phreak section and the Elite user section of Pirate 80 Systems, a BBS run by Scan Man, also known as Scott Higgonbotham. Everything in []s are notes from Sally Ride and myself. ******************* ****** ****** ****** ******* ****** ******** ****** ****** ***************** ****** ****** ****** E I G H T Y ****** ****** FOR THE SERIOUS COMMUNICATIONS HOBBYIST WELCOME ABOARD <><><><><><><><><><><><> <> Knowledge is Power <> <> Thomas Jefferson <> <><><><><><><><><><><><> [Enter: An up and coming young phreaker named Shawn.] Msg#: 7284 *COMMUNICATIONS* 05/28/86 19:43:24 (Read 42 Times) From: SHAWN To: ALL Subj: CODES OK HERE WE GO 800 446 4462 SKYLINE (CODE: XXXXXXX) 800 626 9600 CODE (XXXXXXX) 800 222 4482 CODE (XXXXXX) 800 521 8400 CODE (XXXXXXXX) 800 227 0073 CODES (xxxxXxx X=0-9) METRO CODES: XXXXXX, XXXXXX, XXXXXX, XXXXXX, XXXXXX PBX: 312 455 7287 (CODE XXXX+Y) 503 652 6016: ID: XXX,XXX PASS **** later, Shawn [In the above message, the numbers were followed by codes that I have since censored out. This magazine will *NOT* publish codes.] ------------------------------------------------------------------------------- [It's common knowledge that a BBS userlog must be blanked before a BBS can be used as a sting board. I've also heard that law enforcement officials have been trying to bust P-80 and Scan Man for a long time, but have not been able to accomplish anything. Even the infamous Detective Dan Pasquale {See past issues of Phrack World News, "Phoenix Phortress Stings 7" and "Oryan QUEST Vs. Dan Pasquale"} and John Maxfield, head of BoardScan, are frustrated at being unable to deal with Scan Man. On June 20, 1986, or thereabouts, the following message appeared in the logon to P-80; "BI-ANNUAL USERLOG CLEANUP IN EFFECT. ALL MEMBERS PLEASE RE-LOGIN AS A NEW USER..."] ------------------------------------------------------------------------------- Msg#: 7870 *COMMUNICATIONS* 06/20/86 22:04:41 (Read 50 Times) From: ICARUS 1 To: ALL Subj: TMC BUST TMC has just nailed a hacker associate of mine for $935. The destination numbers were called and someone spilled their guts. The guy who got busted is worried because the Alliance bills have not come in yet. TMC users beware. Make sure your friends are amnesiacs as the phreaker's bible says. Icarus [Some friendly advice from Icarus 1, too bad not everyone heeded the message.] ------------------------------------------------------------------------------- Msg#: 7894 *COMMUNICATIONS* 06/21/86 19:44:09 (Read 44 Times) From: ICARUS 1 To: SCAN MAN (Rcvd) Subj: REPLY TO MSG# 7870 (TMC BUST) He was busted by TMC in the state of Nebraska. Icarus ------------------------------------------------------------------------------- Msg#: 7898 *COMMUNICATIONS* 06/21/86 20:43:10 (Read 43 Times) From: MAX MADDNESS To: ICARUS 1 (Rcvd) Subj: REPLY TO MSG# 7870 (TMC BUST) Hey check it out, I use TMC in Youngstown, Ohio (216-743-6533), but when TMC calls my phreak friends, they think the calls originate from Akron, Ohio which is 60 or so miles away. So when TMC calls and asks, "Do you know anyone in Akron?" people usually are honest and just say no. So even if I call +relatives, etc. usually I'm safe. Max ------------------------------------------------------------------------------- Msg#: 7880 *COMMUNICATIONS* 06/21/86 05:30:37 (Read 51 Times) From: THE FALCON To: ALL Subj: TMC What is the number to TMC? I just want to know so that I'm sure not to use it. Oh well, thanx and later. \_The Falcon_/ ------------------------------------------------------------------------------- Msg#: 7952 *COMMUNICATIONS* 06/23/86 13:06:23 (Read 44 Times) From: SHAWN To: ICARUS 1 (Rcvd) Subj: REPLY TO MSG# 7870 (TMC BUST) Well I told you guys a while ago that this would happen so stay away from them. Icarus ------------------------------------------------------------------------------- Msg#: 7961 *COMMUNICATIONS* 06/23/86 17:15:41 (Read 47 Times) From: BLADE RUNNER To: ALL Subj: TMC I was wandering around some guys hard drive this weekend and found some AT&T mail regarding TMC. From what I understand TMC is involved in the AT&T AGETRIAL project. Which indicates to me that TMC is also into computers and consequently knows what a hacker is. Another thing that was found was some information on the 1PSS switch that has been developed by AT&T and has already been deployed in dome BOCS and other communications networks. This troubles me in that this is the first that I have heard about it. I meant to say that it has been deployed on some networks already. If you have any valid information on the 1PSS SWITCH please post it and it will show up in the P.H.I.R.M. update issue for July, giving you credit for the information of course. BLADE RUNNER (PRESIDENT) P.H.I.R.M. ------------------------------------------------------------------------------- Msg#: 8456 *COMMUNICATIONS* 07/13/86 13:48:51 (Read 75 Times) From: SCAN MAN To: SHAWN (Rcvd) Subj: REPLY TO MSG# 7691 (GENERAL) GOT ANY CODES FOR 800-451-2300? [***IMPORTANT*** This is TMC's Miami, Florida dial-up. An interesting request from the sysop of one of the nation's top code boards. For those of you who remember it was Scan Man who asked the infamous Whacko Cracko Brothers, Inc. {See PWN Issue II, "The Life And Crimes of The Whacko Cracko Brothers, Inc."} to scan some codes on a certain dial-up just before they were arrested. Now he is asking Shawn for TMC codes, kinda interesting that Shawn got investigated less than a week later by TMC Security Department isn't it?] ------------------------------------------------------------------------------- Msg#: 8970 *COMMUNICATIONS* 08/10/86 06:41:48 (Read 34 Times) From: SHAWN To: SCAN MAN (Rcvd) Subj: REPLY TO MSG# 8456 (GENERAL) Well sorry it took me so long to find this message I kept forgetting to look at this one. Anyway if you really need some [codes, referring to the last message] I can dig some up easy enough well hack some I should say noting you can get about 100 in a matter a 10 or 15 minutes so its no big deal to me either way also watch 800 637 7377 I'm telling you now people that this company has tracing stuff and I have talked with them they offer me a job and I'm goin to take it but dont worry I'm not goin to be busting people I have to make it so you guys cant get in notin it is very easy to make it at least very hard to do ho well be careful. [Be careful indeed! 800-637-7377 is TMC's Las Vegas dial-up. What would you do if you were about to lose your computer and maybe your freedom? Work for the other side? The kid really has a way with words, I haven't seen spelling and grammer like that since first grade. As for his not busting people, isn't that a laugh, he has already stated that he will bust anyone he can starting with the lower level phreaks who are only into code abuse.] ------------------------------------------------------------------------------- Msg#: 8974 *COMMUNICATIONS* 08/10/86 13:14:13 (Read 34 Times) From: JOHNNY ROTTEN To: ALL Subj: PHREAKERS QUEST To all users of Phreaker's Quest... What happened to it? It just rings. If you have any info. Leave mail or whatever. ------------------------------------------------------------------------------- Msg#: 9058 *COMMUNICATIONS* 08/13/86 06:58:12 (Read 30 Times) From: SHAWN To: JOHNNY ROTTEN Subj: REPLY TO MSG# 8974 (PHREAKERS QUEST) Well you see I came very close to getting busted they called my voice line that is TMC of 800 637 7377 and I have never given it out to anyone at all [I bet!] so I knew that i was in for it they told me they knew I ran a board and they said they could not get in I kept deleted them haha anyways I had 2 choices 1 take it down 2 get busted. [Wonder how they got your home number Shawn? Did you give it out for validation on Pirate-80? Maybe around the time of the "Bi-annual userlog cleanup"? Or, could it be the cops are smart enough to ask the phone company for any other line running into a house where a suspect BBS is running?] ------------------------------------------------------------------------------- Msg#: 9052 *COMMUNICATIONS* 08/12/86 19:10:47 (Read 29 Times) From: JIM RATH To: ALL Subj: TMC Listen people... it is time to stop screwing with TMC.. (7377 number). Our good friend Shawn of Phreakers Quest just had his BBS put down from them. Shawn met some guy from TMC, and they have had ANI on the number for months now. If you value your own security, throw away any and all TMC information NOW, or you might be suffering the consequences later. For details on the "Bust" call Theives Underground II. It's SCARY! ------------------------------------------------------------------------------- Msg#: 9054 *COMMUNICATIONS* 08/12/86 23:50:02 (Read 28 Times) From: SCAN MAN To: JIM RATH (Rcvd) Subj: REPLY TO MSG# 9052 (TMC) Where is Thieves Underground located? [Why is Scan Man so interested in what Shawn is saying about his experience with TMC? I mean plenty of people on Pirate-80 have run-ins with some form of security everyday and he doesn't go researching them, why is this "TMC Run-IN" so important to him? Maybe he has a personal reason to be interested, then again maybe not.] ------------------------------------------------------------------------------- Msg#: 9086 *COMMUNICATIONS* 08/14/86 13:36:37 (Read 25 Times) From: JIM RATH To: SCAN MAN (Rcvd) Subj: REPLY TO MSG# 9054 (TMC) I believe TU is in Texas somewhere.. dunno where exactly (never really bothered remembering).. 214 AC though ------------------------------------------------------------------------------- Msg#: 9110 *COMMUNICATIONS* 08/15/86 03:54:20 (Read 16 Times) From: SHAWN To: JIM RATH (Rcvd) Subj: REPLY TO MSG# 9052 (TMC) If you want some details why dont you just ask me seeing as though i would be the one to ask the TU only knows what i tell him and scan man i need to talk with you about this they did have an idea of some things going on here and so one i would rather say it to yo then type it in shawn ------------------------------------------------------------------------------- Indeed, what is going on here Shawn? Just what did TMC mention about Pirate-80? And why not post it in on the public boards? For the answer to that maybe one could talk to Jeff Namey who works for TMC and is very proud to acclaim the efforts of one Scott Higgonbotham and his sting BBS Pirate 80 which has, in his own words, "Saved my company from near bankruptcy at the hands of the hackers." It is also interesting to note that Scan Man recently admitted to being a computer security consultant in Phrack Pro-Phile IV. He said his boss didn't know about his outside phreak/hack interests. Scan Man also claims to have infiltrated various security organizations. I wonder if he has infiltrated or simply joined as a regular member. ------------------------------------------------------------------------------- The following are highlights of a conversation with Ben Graves of TMC, around August 25th or 26th (SR=Sally Ride BG=Ben Graves): SR: Mr. Graves I need to talk to you about one of your employee's a Scott Higgonbotham (Scan Man). BG: What about Scott? SR: Well, my company is concerned with the impact of computer hackers on our business. Scott attended a convention in Miami around January and gave his business card to one of our security people. I'm following up on their conversation with the idea that perhaps my company could be given access to Scott's electronic bulletin board. In this way we could monitor for hackers abusing our codes. BG: That may be something we can arrange. I know that Scott has been a great help to TMC since we were able to pick him up. We began to have a big problem with hackers awhile back and Scott seems to have some of the answers. He's not in right now, can I have your number and I'll have him call you back? SR: You sure can. So, Scott's bulletin board has helped you reduce your losses to toll fraud? BG: Well, that's just one of the ways Scott has used to work on the problem. But, he has been very effective. SR: Thanks, Ben, I'll be waiting for the call. ------------------------------------------------------------------------------- The following are highlights of conversation with Pauline Frazier of TMC from around September 5, 1986 (Sally Ride: SR Pauline Frazier: PF) Operator: TMC, may I help you? SR: Yes, Ben Graves, please. Operator: I'm sorry, Mr. Graves is no longer employed here. SR: Oh!? Well, is Scott Higgonbotham in? Operator: One moment, please. PF: Hello, this is Pauline Frazier, I'm the office manager, may I help you? SR: Well, maybe, I was trying to reach Ben Graves, I just talked to him last week about another one of your employees, Scott Higgonbotham, now the receptionist says Ben no longer works here. PF: Yes, that is true, and neither does Mr. Higgonbotham. SR: May I ask why? PF: I'm really not able to say much, I think you should talk to our Regional Security Director, Kevin Griffo, he's on 804-625-1110. He could tell you much more than I can. SR: O.K., but maybe I should tell you why I'm interested. I was talking to Ben about an electronic bulletin board Scott is running. My company has someone on it and we're concerned that things might not be legal on there. There are access codes being posted of my company's and yours'. Could that be why they're no longer employed? PF: Do you mean he is posting TMC codes on there? SR: Well, I can't say he's the one posting the codes, but he is letting them be posted, along with a lot of other information such as computer logins and passwords. PF: Well, you know I never did like it when they hired that fellow. And, I told them so, too. When he started we had a problem with toll fraud, but nothing like it is now. He was able to catch a few of those hackers while he was here, and we pressed charges, but the problem just seemed to get worse and worse. SR: So, he actually had some hackers arrested? PF: Yes, several. He started working here in Charleston and then they sent him to New York when things got bad up there. But, things never have gotten any better since he's started here or in New York either. Sir, please, call Mr. Griffo about all this he can tell you more than I. SR: I will. Do you think he'd be in now? PF: Well, it's late here and he's probably gone home, try Monday. SR: Thanks, I will. (But you told me plenty, sweetheart!) [For the record I had a VERY similar chat with Pauline Frazier, it turned up the same results.] ------------------------------------------------------------------------------- The following are highlights of a conversation with Kevin Griffo, TMC, September 9th (Sally Ride: SR Kevin Griffo: KG). Oper: TMC, may I help you? SR: Yes, Kevin Griffo, please. Oper: His line is busy now, can he call you back? SR: Well, this is urgent, may I hold? Oper: Certainly, I'll let him know you're holding. KG: Hello, this is Kevin. SR: Mr. Griffo I've been referred to you by one of your Charleston employees, Pauline Frazier. She felt I should tell you what I told her yesterday about one of your now former employees, I think, Scott Higgonbotham. KG: Yeah, we let him go just last week. What about him? SR: My company feels Scott is running an illegal BBS and has for sometime been allowing access codes to be posted. Codes for your company's toll switches as well as ours and other's are being entered on his system as well as computer system logins and passwords. KG: Well, I'm not surprised. I have been to Scott's home to see the bulletin board. I knew codes were being posted, but I thought he was taking care of reporting them. SR: May I ask why you let him go? KG: Certainly, Scott just wasn't solving our problems. In fact, some of our people have thought he was somewhat to blame for many of them. Even though, at first, he appeared to be the answer. He was able to identify several computer hackers for us. SR: So, he did bust some hackers? Has he done so recently? I think a young man using the name Shawn on the bulletin boards was recently identified by your company. KG: No, he hasn't gotten anyone recently that I'm aware of, but he could have turned them over to one of the local franchises. You see TMC is a franchise operation. We try to help the franchises, but many do their own thing. We wouldn't necessarily know about all that goes on. SR: I'm sorry to hear you had this trouble. Perhaps, my company could be of assistance. We do work of a similar nature. KG: I'd certainly be interested in any help you could give. Can you put together a written proposal? ------------------------------------------------------------------------------- I also had an interesting conversation with Larry Algard of Pacific Northwest Bell. He confirmed that he had met Scott Higgonbotham at the Miami CFCA conference last January. He also mentioned that Scott had told him about his "sting" bulletin board, Pirate-80 in West Virginia. For those who are interested: TMC (Charleston Office).......................304-345-7275 Pauline Frazier, Office Manager (TMC).........See above Jeff Namey, Accounts Receivable (TMC).........304-744-6555 TMC (Miami Office)............................305-371-3544 TMC (Tidewater)...............................804-625-1110 Larry Algard (Pacific North West Bell)........503-242-8862 Pacific North West Bell (Employee Directory)..800-426-7039 Or write to; TMC 405 Capitol St. Parlor Suite Charleston, West Virginia 25301 All the thoughts in []'s and other information are the insane ramblings of Sally Ride:::Space Cadet and Knight Lightning, you tell me, are we spaced out or what?! The TMC employee interviews were by Sally Ride:::Space Cadet with me doing the background information. It was at this point in time that we decided to have a talk with Scan Man directly and give him a chance to clear his name and reputation. Unfortunately, Scan Man was very uncooperative and constantly avoided answering the questions I asked him. He also added that everything said in the interviews were lies. He claims that Kevin Griffo has never been to his house, he doesn't know Ben Graves, and Pauline Frazier hated him because she knew he was a hacker. He then went on to imply that Sally Ride:::Space Cadet was actually an employee of some communications carrier himself because of the terminology he used in some of his posts on P-80. Scan Man claimed that he has been telling people that he worked for TMC for quite some time and he only needed the codes from Shawn because he was going to be in Miami later that week. In other words, Shawn's near bust and his asking for TMC codes may have been a simple coincidence. He claims to have done system analysis for TMC, but also admitted to securing some of their computer systems, which isn't a crime. As for his being at the Miami CFCA conference, I will assume that he was infiltrating the con and was spotted as being a hacker. In order to gain the respect and confidence of the security officials, he told them that his bulletin board was a sting. Now, that story completely is believable with the exception of how he arrived, a plane trip paid for by TMC. Scan Man's last words contained a threat that if this affected his home life, he would personally track down the writers and contributors and shoot them with his rifle. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Notes from KL: One thing that I should mention is the fact that Pirate-80 has *NEVER* been busted or investigated. I mean its not hard to get onto and there are codes plastered everywhere you look. How many boards do you know of that have been busted for having codes on them? One example of this is with the credit card numbers owned by Richard Sandza, author of "The Night Of The Hackers" and "The Revenge Of The Hackers," both printed in Newsweek Magazine. "It wasn't long before I found out what was being done with my credit-card numbers, thanks to another friendly hacker who tipped me to Pirate 80, a bulletin board in Charleston, W. Va., where I found this: 'I'm sure you guys have heard about Richard Standza [sic] or Montana Wildhack. He's the guy who wrote the obscene story about phreaking in NewsWeek [sic]. Well, my friend did a credit card check on TRW...try this number, it's a VISA...Please nail this guy bad...Captain Quieg [sic].'" See this? This was published in "The Revenge Of The Hackers" in Newsweek Magazine! And what happened to P-80? Nothing! Here Richard Sandza has just announced to thousands of people that P-80 has credit card numbers posted on it and nothing happened. Why? The answer to that is left to the reader. There are a few other things to mention about Scan Man/P-80/TMC. Supposedly all of the computer equipment that P-80 runs on was donated by TMC themselves. It is also believed that Scan Man's only duty to the company was to report TMC codes so that they could be turned off. It would appear that this had changed but, we at Phrack Inc. in no way take any opinion whatsoever about the innocence or guilt of Scan Man. We leave it to the reader to decide for him/herself. I'm sure all parties concerned would appreciate you NOT calling the above numbers if all you plan to do is harass people or anything else among those same lines. After all a job is a job and harassing someone wouldn't do anyone any good either, it would just make them mad. If you are going to call, make sure it is for knowledge purposes only! Above all do NOT call Scan Man to harass him or his innocent family. My suggestion is that if you feel that Scan Man is an informant or whatever, then stop just calling his board. One last thing, a *VERY* big thank you to Sally Ride:::Space Cadet for a job well done and for all the time he spent working on the article. Information Provided by Knight Lightning & Sally Ride:::Space Cadet and directly/indirectly by Blade Runner/Evil Jay/Forest Ranger/Icarus 1/Jack The Ripper/Jim Rath Johnny Rotten/Larry Algard/Max Madness/Oryan QUEST/P-80 Systems/Scan Man/Shawn Suicidal Nightmare/Taran King/The Falcon/TMC Staff and other Anonymous Sources ------------------------------------------------------------------------------- PS: For those interested, this investigation was sparked by the interception of a memo from Larry Algard (Pacific Northwest Bell) to his boss, George Reay. What was in the memo? Several things, but mostly it spoke of the January CFCA (Communications Fraud Control Association) conference in Miami, Florida where Larry met one Scott Higgonbotham, Security Director for TMC (Tele-Marketing Company) who told him that he operated a "sting" bulletin board named Pirate 80 in West Virginia. _______________________________________________________________________________ BIGGEST LOAD OF BS I EVER SAW..... DOWNLOADED FROM P-80 SYSTEMS......(HAHAHAHAHA) The saga continues in Phrack issue 11 file 11 where Telecomputist attemps to tell the other side of the story but does about as good a job as they have done with this load of shit. My (Scan Man) rebuttle has been attached by me to the end of issue 11 in file 13. It has also been reprinted in phrack issue 12 ....... Downloaded From P-80 International Information Systems 304-744-2253 12yrs+