TELECOM Digest Tue, 4 Jan 94 21:31:00 CST Volume 14 : Issue 5 Inside This Issue: Editor: Patrick A. Townson Motorola Cellular Phone Programming (Mark Crispin) CFP: Home, Informatics, Tele ... Intl. Conference June 94 (Kresten Bjerg) Bandwidth to Russia Wanted (Alex Turkenich) Excel LD Provider: Yea or Nay? (Dave Read) Info on Cellular One NACP (Colin Tuttle) TELECOM Digest is an electronic journal devoted mostly but not exclusively to telecommunications topics. It is circulated anywhere there is email, in addition to various telecom forums on a variety of public service systems and networks including Compuserve and GEnie. Subscriptions are available at no charge to qualified organizations and individual readers. Write and tell us how you qualify: * telecom-request@eecs.nwu.edu * The Digest is compilation-copyrighted by Patrick Townson Associates of Skokie, Illinois USA. We provide telecom consultation services and long distance resale services including calling cards and 800 numbers. To reach us: Post Office Box 1570, Chicago, IL 60690 or by phone at 708-329-0571 and fax at 708-329-0572. Email: ptownson@townson.com. ** Article submission address only: telecom@eecs.nwu.edu ** Our archives are located at lcs.mit.edu and are available by using anonymous ftp. The archives can also be accessed using our email information service. For a copy of a helpful file explaining how to use the information service, just ask. TELECOM Digest is gatewayed to Usenet where it appears as the moderated newsgroup comp.dcom.telecom. It has no connection with the unmoderated Usenet newsgroup comp.dcom.telecom.tech whose mailing list "Telecom-Tech Digest" shares archives resources at lcs.mit.edu for the convenience of users. Please *DO NOT* cross post articles between the groups. ---------------------------------------------------------------------- Date: Tue, 04 Jan 1994 16:35:08 PST From: Mark Crispin Subject: Motorola Cellular Phone Programming Here is a documentation file I wrote: Motorola Digital Personal Communicator secrets revealed!! INTRODUCTION AND RELIGIOUS STATEMENT The purpose of this document is to enable the hacker who wants to know everything about his DPC cellular telephone. It is based upon the belief that the bad guys already know this information, so keeping it secret doesn't do any good except to annoy those of us who want to know *everything* about our phones. Some of this information only applies to certain models, or varies from model to model. I entered the information for the model of DPC which I have. If you have a different model, either figure it out on your own or get ahold of the Motorola documentation and look it up there. Have fun with this information, but don't try to use it for illegal activity (fraud, harassment, illegal transmission). The cellular companies and the FCC are becoming quite aggressive (and skilled) at tracking such activity down. At best, your phone's ESN will be blacklisted nationwide; at worst, you could face federal criminal charges. The bad guys use stolen phones or phones with altered ESNs, and either toss the phone or alter the ESN after a day or so of misuse. This hole will be closed upon the completion of a North American ESN database which the cellular companies are busily setting up. On the other hand, feel perfectly free to tell a new cellular company (e.g. when you move to a new city) to buzz off when they want to charge you $25 to reprogram your phone. Tell them just to give you the various details of programming information you need (system ID, telephone number, station class mark, access overload class, group ID, paging channel, MIN mark, and local use mark) and do it yourself and save $25. Even better, if you decide to get an evaluation account with the other carrier, you can program your dual NAM without letting the new or old carriers know too much about your other account. [If you've ever dealt with the customer service people at the carrier you know why this is desirable ...] Remember, it's your phone; you own it (even *if* the cellular carrier puts its name on it). You can do anything with it that you damn well please, as long as you don't use it to transmit in an unauthorized fashion or attempt to place fraudulent calls. I pay for every call I make; you should too. USER MODE COMMANDS PWR toggle power on/off unlock phone (nnn = unlock code) CLR erase last digit (hold to clear all) 1 (held down) dial number in location 01 SND place call nn SND place call from memory nn SND redial attempt for next four minutes SND switch hook toggle during a call END terminate call or mode VOL adjust earpiece volume STO nn store in memory nn RCL nn recall from memory nn (*/# to scroll) RCL nn RCL SND tone dial from memory nn RCL 00 view last number called RCL SND continue to next after pause in dialing sequence RCL * system type selection (* to scroll, STO to select, END to exit): Std A B non-wireline first, then wireline (home non-wireline) Std B A wireline first, then non-wireline (home wireline) SCAn A B non-wireline first, then wireline (home wireline) SCAn B A wireline first, then non-wireline (home non-wireline) Home home only SCAn A non-wireline only SCAn B wireline only RCL # view own phone number RCL # STO change to alternate phone number (dual NAM feature) RCL # # view individual call timer RCL # # # view resettable call timer RCL # # # # view cumulative call timer FCN VOL adjust ringer volume FCN SND insert pause in dialing sequence FCN RCL nn insert tone dial from memory nn in dialing sequence FCN 0 1 STO enable call restriction (only memory 01-10 permitted) FCN 0 4 STO disable call restriction FCN 0 7 CLR reset resettable call timer FCN 0 9 RCL view non-default status (*/# to scroll, END to exit) SiG oFF signal strength meter disabled AnSWer automatic answer enabled AUtoLoc automatic local enabled Emr OFF emergency dialing disabled vOX VOX mode enabled L dtMF Long-tone DTMF enabled LEvEL 1 call restriction enabled SCAn A B non-wireline first, then wireline (home wireline) SCAn B A wireline first, then non-wireline (home non-wireline) Home home only SCAn A non-wireline only SCAn B wireline only FCN 0 RCL display unlock code FCN 0 STO change lock code FCN 0 RCL program phone (* to scroll, # to exit, SND during entry number display to save changes) WARNING: if the phone is reprogrammed too many times, programming will be disabled. The only way to fix this is to completely wipe out the memory with 32# in Test Mode. 01 System ID 02 Area Code 03 Telephone Number 04 Station Class Mark 05 Access Overload Class 06 Group ID Mark 07 Security Code 08 Unlock Code 09 Initial Paging Channel (0333 for A, 0334 for B) 10 Option Programming Bits (default 011100) 100000 Internal Speaker Disable 010000 Local Use enable (responds to local control orders) 001000 MIN Mark enable (0 = area code always sent) NOT CHANGEABLE IN CURRENT MODELS 000100 Auto Recall enable (speed dial from memory) 000010 Second Telephone Number Enable 000001 Diversity enable (dual antennas) 11 Option Programming Bits (default 11110) 10000 Failed Page Indicator Disable (0 = user told about failed inbound calls due to weak signal) 01000 Motorola Enhanced Scan enable 00100 Long Tone DTMF enable 00010 Transportable Internal Ringer/Speaker enable 00001 Eight Hour Timeout disable (0 = phone shuts down after 8 hours) 12 start of information for second phone number (steps 07, 08, and 11 are skipped) FCN 1 view features (*/# to scroll, END to exit): _ SiGnAL OFF signal strength meter enabled o SiGnAL OFF signal strength meter disabled _ AnSWr AUTO automatic answer disabled o AnSWr AUTO automatic answer enabled _ AUTO LOC automatic lock disabled o AUTO LOC automatic lock enabled _ EMrCY OFF energency dialing enabled o EMrCY OFF energency dialing disabled _ vOX MOdE VOX mode disabled o vOX MOdE VOX mode enabled _ LOnG dtMF Long-tone DTMF disabled o LOnG dtMF Long-tone DTMF enabled FCN 2 ??? I don't know what, if anything, this does FCN 3 ??? I don't know what, if anything, this does FCN 4 battery meter FCN 5 lock phone FCN 6 mute toggle FCN 7 ??? I don't know what, if anything, this does FCN 8 ??? I don't know what, if anything, this does FCN 9 ??? I don't know what, if anything, this does TEST MODE COMMANDS Shorting the middle pin of the battery connector puts the phone in test mode upon power up. Unlock the phone first if necessary. It starts out in Status Display Level. The display will alternately flash two values: xxx yyy xxx = channel, yyy = RSSI (signal strength) abcdefg a (D)SAT (supervisory audio tone): 0 5970 Hz 1 6000 Hz 2 6030 Hz 3 No SAT 0 - 6 DSAT vector 7 No DSAT b TX (1 = on) c Signalling Tone (1 = on) d Power Level (0-7) e Control Channel (1 = on) f RX Audio (1 = off) g TX Audio (1 = off) Pushing the # key will put the telephone in Servicing Level. The display will be US '. This can be done without unlocking it. WARNING!!! Some of these commands will cause the phone to transmit. This may get your cellular phone company annoyed at you. Of greater concern is the fact that doing so is *illegal* under federal law and can get the FCC breathing down your neck. ``Verbum sat sapenti...'' Servicing Level commands are: 01# Restart (re-enter DC power start-up routine) 02# Display Current Telephone Status (non alternating version of Status Display) 04# Initialize Telephone to Standard Default Conditions 05# TX Carrier On 06# TX Carrier Off 07# RX Audio Off (mute receiver audio) 08# RX Audio On 09# TX Audio Off 10# TX Audio On 11 # Set Transceived to specified Channel 12 # Set Power Step (0 = maximum, 7 = minimum) 13# Power Off 14# 10 KHz Signaling Tone on 15# 10 KHz Signaling Tone off 16# Setup (transmits a five word RECC message) 17# Voice (transmits a two word RECC message) 18# C-SCAN (allow entry of as many as 5 negative SIDs for each NAM) 19# Display Software Version Number 25 # SAT On (value is SAT tone number, 0-2) 26# SAT Off 27# Transmit Data (transmits continuous control channel data) # terminates 32# Clear the telephone. This may be necessary to reprogram the telephone after too much reprogramming. The following data is erased: System Registration, *all* timers, repertory memory, all user programmable features, last number dialed, directory. This can take up to three minutes, wait until an apostrophe shows on the display. 33 # Turn on DTMF for indicated key (0-9, *, #) 34# Turn DTMF off 35 # Set Audio Path 1 Speaker 2 Alert 3 Handset 4 Mute 5 External Telephone 6 External Handset 36# Scan (TDMA only) 38# Display ESN (Electronic Serial Number) one byte at a time (* to scroll, # to exit) 43# Disable Diversity (use R antenna) 44# Disable Diversity (use T/R antenna) 45# Display RSSI (signal strength) as 3-digit number 46# Display Cumulative Call Timer 47 # Set RX Audio Level (0 = lowest, 7 = highest) 48# Side Tone On 49# Side Tone Off 55# Test Mode Programming (* to scroll, # to exit without making changes) 01 System ID 02 A Option Byte (default 101xx1x1) 10000000 Local Use enable 01000000 Preferred System (1 = A, 0 = B) 00100000 End-to-End Signaling enabled 00010000 unused 00001000 Repertory Memory NOT CHANGEABLE 00000100 Auxillary Alert enabled 00000010 unused 00000001 MIN Mark enabled NOT CHANGEABLE 03 Telephone Number 04 Station Class Mark 05 Access Overload Class 06 Group ID Mark 07 Security Code 08 Unlock Code 09 Service Level 001 memory dialing 01-10 only 002 memory dialing only (no keypad, no speed dial) 003 keypad dialing only (no memory) 004 no call restrictions 005 seven-digit dialing only 006 full dialing, but no memory changing 007 memory dialing only 10 B Option byte (default xxx00100) 10000000 unused 01000000 unused 00100000 unused 00010000 Extended Field enable (not used in NA) 00001000 Single System Scan enable 00000100 Auto Recall enable (speed dial) 00000010 Disable Service Level setting 00000001 Lock Code Disable 11 C Option byte (default 0000000) 10000000 User NAM Programmability disable 01000000 2nd Number Registration enable 00100000 unused 00010000 Auto Redial disable 00001000 Internal Speaker Disable 00000100 Dual IMTS/Cellular enable 00000010 Selectable System disable 00000001 Dual Antenna Enable 12 Initial Paging Channel (0333 for A, 0334 for B) 13 Initial Paging Channel for System A (0333) 14 Initial Paging Channel for System B (0334) 15 Number of Dedicated Paging Channels (021 in NA) 16 D Option byte (default 0011000x) 10000000 Motorola Enhanced Scan enable 01000000 Cellular Connection (0 = SERIES II) 00100000 Long Tone DTMF 00010000 Transportable Internal Ringer/Speaker 00001000 Eight Hour Timeout disable 00000100 not used 00000010 Failed Page Indicator disable 00000001 Portable Scan (DO NOT CHANGE) Entering a * after 16 reprograms the phone 57 # Call Processing Mode 0 AMPS 1 NAMPS 5 TDMA signaling 6 TDMA signaling with loopback 7 TDMA signaling with loopback voice 8 TDMA signaling with loopback FACCH after decoding 9 TDMA forced synchronization 58# Compander On (audio compressor and expander) 59# Compander Off 61# ESN transfer 62# Turn On Ringer Audio Path 63# Turn Off Ringer Audio Path 66# Identify Transfer 68# Display FLEX and Model Information 69# used with identify transfer ------------------------------ From: kresten@vax.psl.ku.dk (Kresten Bjerg) Subject: CFP: Home, Informatics, Tele... Intl. Conference, June 94 Organization: IFIP WG 9.3 Date: Tue, 4 Jan 1994 11:56:48 GMT CALL FOR CONTRIBUTIONS - CALL FOR CONTRIBUTIONS A cross-disciplinary international conference HOME-ORIENTED INFORMATICS, TELEMATICS & AUTOMATION From 'State of the Art' through 'Prospects' and 'Blueprints' to 'Implementation' organized by IFIP Working Group 9.3 in cooperation with the University of Copenhagen University of Copenhagen, Denmark June 27 - July 1, 1994 BACKGROUND The home offers a great potential for new automation, information and communication technologies and related services. A wide array of innovations are already under way, with many more to come. They will transform the home and everyday life in the emerging information society. They will condition how private households will be enabled to function in changing social, economic and political structures. AIMS AND SCOPE The conference will assess and conceptualize perspectives and options, which attach to developments of domestic informatics, telematics and automation across the levels of - consumer hard- and software, - network infrastructures - storage & distribution media, - teleservices and - socio-cultural & economic structures. How can these new technologies - seen together - be used to empower consumers and private households? How can both users and suppliers get the optimal benefits from the possible new technologies? - and with which global impact? Can these technologies contribute to the emergence of a new home concept, an "Oikos", where the private household can reestablish itself in an experienced way as a living and production centre, embedded in and interacting with a larger community? Addressing such questions requires a multi-disciplinary approach. Therefore the conference aims to bring together experts from many fields and disciplines. Researchers and practitioners, designers and users, policy makers and industrialists, each with new knowledge and new questions from their experience of recent and expected development. The conference will not only serve as a forum to present and exchange experience, results of research and ideas, but also to explore and discuss strategic approaches and alliances for product research and development, and for prototyping and field experiments. MAJOR THEMES * The social construction of new domestic technologies. * Bridging between the various disciplinary approaches. * The changing position and importance of households in the new social and economic structure of the information and communication society. * Strategies for creating professional and public awareness of the converging potentials and implications of constructive innovations for everyday life and for social, cultural, educational, health, energy, and economic policies. * Ways of organizing relations between research and product development which can further the long-term interest of consumers, and save produ- cers from waste of investments in development of products and services which are doomed to failure. * Relevance for developing countries, cultural diversities and the general goals of the UN year of the family 1994. MAIN AREAS Advanced Home Technologies (e.g. Intelligent home - Linking of TV, telephone, computer and VCR - Interactive multimedia and domestic virtual reality - Security-systems - Household appliances - Environmental control and ecology - Bio-electronics and health-monitoring.) Communication and telematics (e.g. Convergence of broadcast and telecom networks - Interactive teleservices and teletransactions - Tele-education - Telework - Evolving informal networks - Home-to-Home interfacing.) Economics and politics of HOIT (e.g. Interests of industry and service providers - Links between R&D and marketing - Prices and tarifs - Legal and regulatory policies on national and international level - The future of home economics.) Cultural and social impact on everyday life (e.g. Personal development and knowledge distribution - Intra- and interfamily relations - Functions for children, elderly, disabled and home-bound people - Community structure - Cultural continuity.) CONTRIBUTIONS We solicit Research papers Papers on experiments and case studies Policy and strategy papers Opinion and position papers which will address State of the Art, Prospects, Blueprints or Implementation within these general areas. Besides full papers, short contributions like posters and statements papers may be submitted. SUBMISSION REQUIREMENTS Notification of the intention to submit a full paper (including title and subject area) should preferably be sent as early as possible. Two page abstracts of full papers are due at latest January 15, 1993. Notification of acceptance March 1, 1994. Deadline for submission of final full papers and short contributions May 1, 1994. All accepted contributions will be published in the preceedings available at the conference. Selected papers will be published in the conference proceedings. PROGRAM COMMITTEE Felix van Rijn (Chair), Univ. of Amsterdam, Dept. of Communications (NL) Kresten Bjerg, University of Copenhagen, Psychological Laboratory (DK) Gunilla Bradley, Stockholm University, Inst. of Internatl. Education (S) Valerie Frissen, Univ. of Amsterdam, Dept. of Communications (NL) Karamjit Gill, Seake Centre, University of Brighton (GB) Leslie Haddon, University of Sussex (GB) Gisela Lehmer, Ministry of Telecommunications, Kln (D) Mara Gabrila Macra, IDAT, Montpellier (Fr) Kurt Monse, IWT, Universitaet Wuppertal (D) Bjoern Nake, University of Copenhagen (DK) Toomas Niit, Institute of Philosophy, Sociology and Law, Tallin (Estonia) Gerrit Noltes, Ministerie van WVC (NL) Yves Punie, Free University of Brussels (B) Andy Sloane, School of Comp. & Inf. Techn. Univ. of Wolwerhampton (GB) Alladi Venkatesh, Grad. Sch. of Management, Univ. of Calif., Irvine (USA) L.E. Zegers, European Home Systems Association, Eindhoven (NL) ORGANIZING COMMITTEE Kresten Bjerg (DK), Bjoern Nake (DK), Dan Melkane (DK), Poul Groenhoej(DK) REPLY FORMAT Please e-mail, fax or photocopy and mail to: HOIT-94, Kresten Bjerg, Psychological Laboratory, University of Copenhagen, 88, Njalsgade, DK 2300 Copenhagen S. Tel.:+45 31541856 Fax: +45 32963138 E-mail: kresten@vax.psl.ku.dk [ ] I/we consider participating. [ ] I/we intend to submit a full paper. Area: Preliminary title: [ ] I/we intend to submit a short contribution, poster or audio-visual demonstration. Topic: [ ] I/we want to exhibit/demonstrate electronic or mechanic equipment, taking max. m2 floorspace. Subject: Name: Institution: Street address: City / postal code: Country: Voice telephone: Fax: E-mail: Observe news.groups for the ongoing RFD and later CFV concerning comp.home.misc. ------------------------------ Reply-To: alex@mvision.com Date: Tue, 4 Jan 94 12:37:25 EST From: alex@mvision.com (Alex Turkenich) Organization: Market Vision Inc. Subject: Bandwidth to Russia Wanted Several of my friends and I working part time as agents for one of the telephone companies were able to get about 50,000 minutes per month of switched traffic from US to the former Soviet Union. SERVICE DESCRIPTION: The subscribers to our service do not have to switch their long distance provider. The subscriber simply dials 1-800 ... number and if his ANI is registered he gets a dial tone if the switch does not recognize the ANI (when the subscriber is calling from a payphone or a hotel) the subscriber is prompted to enter his Travel Code. Some customers have preset spending limits and are prompted before each call regarding the amount of credit they have left. PROBLEMS: The main complaints of our customers is that the service is not reliable. The switch is usually down several hours a day, many of the calls placed to the Former Soviet Union do not go through, FAXes cannot be sent. We feel that these reasons are preventing us from increasing our traffic and are contrtibuting to loss of customers. OUR WISH LIST: Here are some of the solutions we envision (listed in order of preference): 1) A direct E1 (or T1) trunk from US (preferably 60 Hudson St, New York) to Moscow, Russia. All of the 30 (24 for T1) circuits have to approved by FCC for switched traffic. We can arrange to distribute traffic from Moscow. We would prefer the lines to be multiplexed between 4:1 and 6:1. We approached several US telephone companies about leasing E1 or T1 and were given monthly prices that were about twice the prices quoted by some US companies in Moscow. 2) We are also willing to route all our traffic through some other provider if we can get some reasonable rate per minute and still are able to provide the same service as we are providing now (see SERVICE DESCRIPTION). If you can offer one of the above two services or have any ideas where we can obtain these services please send e-mail to : alex@mvision.com or call me at: (212) 306-0410 (work) (201) 575-8215 (home) (201) 227-5037 (fax) Alex Turkenich ------------------------------ From: dave@kentrox.com (Dave Read) Subject: Excel LD provider: Yea or Nay? Date: Tue, 04 Jan 94 10:44:49 PST Yesterday a friend put the full-court press on me to sign up with some long-distance outfit called Excel. I'd never heard of 'em, but he made it sound like your basic multi-level marketing scheme, get bucks when you sign people up, and more bucks when *they* sign people up, etc etc etc. Reminded me of Amway. :-) Anyway, any experiences/opinions? I presume they buy their LD service from the biggie providers (AT&T, Sprint, MCI etc), but beyond that I haven't a clue if Excel is on the level or not. Thanks, dave ------------------------------ Subject: Info on Cellular One NACP From: ctuttle@obelisk.pillar.com (Colin Tuttle) Date: Tue, 04 Jan 94 00:21:25 CST Organization: Pillar Communication, Oklahoma City, Ok I have a question regarding the Cellular One North American Cellular Network. I have Cellular One service in Oklahoma (McCaw Communications) and found the system works well passing my calls from Oklahoma City to Tulsa when I travel (about 100 miles but part of Cellular One's SuperSystem). Everyone who has called me on my Oklahoma City number gets me in Tulsa with no problems, delays, etc. Everything works the way it should. Now this past week I went down to Austin, (a NACN City) turned on the cell phone and immediately called my Oklahoma City number from a nearby pay phone. It rang twice and then my cell phone rang. Now my question is how does Cellular One Austin so quickly notify Cellular One Oklahoma City I am in Austin Texas about 400 miles from home and immediately send my calls to me? I assume when I turn on my phone the cell processes my ESN and sends the information either to its computer or my home system. What impressed me was how fast it did all this, and without me telling it to do this. Whatever system they use must also allow greater security, as if your phone is stolen they could immediately deactivate it around the country. Is this a FAQ, or could someone briefly explain how the Cellular One NACN actually works? The computing power to keep track of all of these ESN's must be great as well as passing all of this information from system to system obviously in real-time. ctuttle@obelisk.pillar.com (Colin Tuttle) Pillar Communications BBS, Oklahoma City, OK -- +1 405 942 8794 ------------------------------ End of TELECOM Digest V14 #5 ****************************