|
==Phrack Inc.== Volume Three, Issue Thirty-Three, File 9 of 13 /////////////////////\\\\\\\\\\\\\\\\\\\\\ || || || A Real Functioning RED BOX Schematic || || || || Written by: R.J. "BoB" Dobbs || || || \\\\\\\\\\\\\\\\\\\\\///////////////////// ::What is a Red Box?:: Essentially, the Red Box is a device used to fool the phone company's computer into thinking coins are deposited into a payphone. Every time you drop a coin into a payphone, the phone signals the type of coin inserted with one or more bursts of a combination of 1700hz and 2200hz. The tone bursts are coded as follows: Nickel : One 60 millisecond pulse Dime : Two 60 millisecond pulses separated by 60 milliseconds Quarter: Five 35 millisecond pulses separated by 35 milliseconds ::How to use it:: Simply dial a long distance number (some areas require you to stick in a genuine nickel first), wait for the ACTS computer to demand your cash, and press the "deposit" button on the red box for each coin you want to simulate. The coin signals are coupled from the red box into the phone with a small speaker held to the mouthpiece. For local calls, either you must first deposit a genuine nickle before simulating more coins or place your call through the operator with 0+xxx+yyyy. Use some care when the operator is on the line - sometimes they catch on to your beeper ploy. ::Circuit Operation:: Each time the pushbutton is pressed, it triggers half of IC1, configured as a monostable multivibrator to energize the rest of the circuit for a length of time determined by the setting of the coin selector switch. This in turn starts the other half of IC1, configured as an astable multivibrator, pulsing on and off at regular intervals at a rate determined by the 100k pot between pins 12 and 13. The output of the astable thus alternately powers of IC2, configured as a square wave oscillator, providing the required 1700hz and 2200hz to the op amp which acts as a buffer to drive the speaker. ::Alignment & Testing:: When you are making this thing by no means should you use a 9v AC to DC adapter! I also suggest not using a bread board. So be careful with that sodering iron. Both of these things will cause you problems. For alignment, a frequency counter is desired but you can use a good oscilloscope as well. (These are not ABSOLUTELY necessary, but to help.) In order to figure frequency in Hz with your scope you can use the following formula. 1 S = The measurement of the wave that is on the display Hz = ----------- S*(T*10^-6) T = The setting of the time selector (milliseconds) 1 Hz = ------------------ Hz = 2198 9.1 * 50ms * 10^-6 Carefully remove IC1 from it's socket. Install a temporary jumper from +9v supply to pin 14 of IC2 and temporarily disconnect the 0.01uF capacitors from pins 5 and 9 of IC2. Power up the circuit. Measuring the output from pin 5 of IC2 with the frequency counter or scope, adjust the 50k pot between pins 1 and 6 for an output of 1700hz. Now adjust the 50k pot between pins 8 and 13 for an output of 2200hz from pin 9 of IC2. Remove the temporary jumper and re-attach the capacitors to pins 5 and 9 of IC2, and re-insert IC1. (Note: if no frequency counter is available, the outputs can be adjusted by ear one at a time by zero-beating the output tone with a computer generated tone of known precision.) Next, using a multimeter, adjust the 10K pot at the cathode of the "quarter" diode for resistance of approximately 8K ohms. (This sets the difference between the duration of the quarter pulses and those of the nickel/dime -- fine tuning of this ratio may be necessary durring the latter stages of alignment; this can be done by ear.) Now, temporarily disconnect the wire between pins 5 and 10 of IC1. Set coin selector switch in the "N" (nickel) position. With the oscilloscope measuring the output from pin 9 of IC1, adjust the 100k pot between pins 12 and 13 of IC1 for output pulses of 60 millisecond duration. Reconnect the wire between pins 5 and 10. (Note: If no scope is available, adjust the pulse rate by ear using computer generated tones for comparison.) Leave the selector switch in the "N" position. Adjust the 50K pot labeled "Nickel" for a single beep each time the deposit pushbutton is pressed. Next set the coin selector switch to "Dime". Adjust the 50k pot labelled "Dime" for a quick double beep each time the pushbutton is pressed. Finally, set the selector to "Quarter". Adjust the 50k pot labelled "Quarter" until exactly 5 very quick beeps are heard for each button press. Don't worry if the quarter beeps sound shorter and faster than the nickel and dime ones. They should be. ::Conclusion:: If all went well to this point, your red box should be completely aligned and functional. A final test should now be conducted from a payphone using the DATL (Dial Access Test Line) coin test. Dial 09591230 and follow the computer instructions using the red box at the proper prompts. The computer should correctly identify all coins "simulated" and flag any anomalies. With a little discretion, your red box should bring you many years of use. Remember, there is no such thing as spare change! ::Parts list for Red Box:: 2 556 Dual Timer IC's 8 0.01uF Caps 1 741 Op Amp IC 2 0.1uF Cap 2 1N914 Diodes 1 1.0uF Electrolytic Cap 5 10k Resistors 2 10uF Electrolytic Caps 1 4.7k Resistor 1 3 Position Rotary Switch 2 100k Resistors 1 SPST Toggle Switch 1 100k PC Mount Pots 1 Momentary Push Button Switch (n/o) 3 50k PC Mount Pot 1 9v Battery Clip 1 10k PC Mount Pot 2 14 Pin Dip Socket 2 50k Multi-Turn Pots 1 8 Pin Dip Socket ::Schematic:: _ +9__S1/ _____________________________________________________________ | | | | | S3 | R1 R2 | R3 o @ o | |___C1___| _____| |_________|/___ / o \___ | | ____|_____|_____|____ | | |\ | | _| | _| o | 6 4 14 | R4 R5 D1 | | R9< | S2 | o _|5 13|_____| | | |__ | | | | | | |__ g | _| | | g |_|10 IC1 8|_ _| | R8< | | | 556 | |__R6< |__ | | | _|9 12|_| _| | | | | | | |__C2__g R7< | | | | |_11___3___7___2___1__| | | | | | | | | |___|_______________________|____|____| | | | C3 | | | |__|/| | | C4 | | |\ | | | | | D2 g g g | |_____________________ | | | | | ___ R10 | R11 ___ | v | | | | | v | __R12 |__| ___|___ |__| R13__ | | _|___|___|___|____|_ | | | | 1 4 14 10 13 | | | | | | | | |_______|6 8|_______| | | | | IC2 | | | | C5 |__|2 556 12|__| C6 | | | | | | g __|3 11|__ g | | |_____7___5___9______| | | C7 | | | C8 | | | C9 C10 | | | | |___| | | g g | g | | | | ________________________________| | | | | R14 | | | |\ | | | | \ | |___________|___________|3 \| | | | 7 \ C11 R15 |IC3 \ | | |741 6/___ g g | 4 / | | /| | g_[speaker]___C12______|2 / | | | |/ g | |_______________| ::Schematic Parts Code:: R1:10K R4:10K R7:50K pot R10:10K R13:50K pot R2:10K R5:10K R8:50K pot R11:10K R14:100K R3:4.7K R6:100K pot R9:50K pot R12:50K pot R15:100K C1:0.01uf C4:10uf C7:0.01uf C10:0.01uf C2:1.00uf C5:0.01uf C8:0.01uf C11:0.10uf D1 :1N914 C3:0.01uf C6:0.01uf C9:0.01uf C12:10uf D2 :1N914 S1 - SPST toggle S2 - Momentary push button Normally Open S3 - 3-position rotary switch g - Ground \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\?///////////////////////////////////////