From: James M. Atkinson, Comm-Eng Date: Mon Apr 10, 2000 3:00pm Subject: FM Broadcast Measurement Protocol The following "FM Broadcast Measurement Protocol" is a proprietary method I developed to ferret out kit bugs, and other related devices being used for eavesdropping inside or just outside the FM broadcast band. As we all know any 10 year old kid can by kit bugs at Radio Shack for ten bucks, solder them together and have a fairly decent eavesdropping device. I have developed a similar protocol for TV stations, SW stations, WX, AM stations, and so on which provide a series of over 2500 measured broadcast signals that can be used as an index during sweeps. Deviations (no pun intended) in any of these signals may indicate an eavesdropping device (such as a broadcast TV frequency with audio in the wrong place, and no video carrier). Minimum Instrumentation: Digital Spectrum Analyzer Laptop computer to control SA and download data sets Biconical or Double Discone Antenna (30-300 MHz) Log Periodic or Directional Loop Lab Grade Low Noise Amplifier (+30 dB on Antenna) Low Loss Cables with N Type Connectors Antenna Stand Conducted Signals Box (Line Impedance Coupler/Filter) Pre-Sweep Readings: 1) External at 5 points, at least 1/4 mile away to profile local "friendly signals" active from 70 MHz to 135 MHz. Criss-cross with FCC databases. 2) Multiple (at least 3) readings internally before approaching the sound stage. 3) Conducted signals analysis at Elec. closets, IDF and MDF 4) Actual RF analysis of the sound stage with the antenna being moved at least 5-6 times inside each room When in doubt use a 6*6 or smaller search grid. 5) Conducted Signals Analysis. Primary Evaluations - Actual Measurements via laptop The primary function is to hunt for signals that do not conform to common standards (such as 200 kHz spacing) RBW 1 kHz VBW1 kHz Sweep5 Seconds Ref Level-65 dBm (a function of BW) Log5 dB/division Amplitude PAPreamp On (+15 dB) AverageTrace Averaging OFF HoldPeak Hold on Trace 2 HoldMinimum Hold on Trace 3 Samples1024 points (or more) for each trace Span2 MHz (10 stations, centered on graticule axis) 1st Start Freq.86.9 (Channel 200, minus 1 MHz) 1st Center87.9 (Channel 200) 1st End Freq.88.9 (Channel 200, plus 1 MHz) Step Size1600 kHz (8 channels) Last Start Freq106.5 (Channel 300, minus 1 MHz) Last Center107.5 (Channel 300) Last End Freq.108.5 (Channel 300, plus 1 MHz) Note: The noise floor should be just above the lowest graticule marking on the screen. Hostile Signal Indicators (non-alerting) 1) 200 kHz Channel Spacing Corrupted Commonly caused by variable capacitor tuning, or similar analog tuning circuits used by eavesdropping devices. Watch out for any energy present in the 25 kHz guard band between stations. 2) "Drifty" Carrier The devices are typically not crystal controlled, however; broadcast stations will be rock solid. 3) No Sub Carriers, or not a 150 kHz BW To increase range some devices may use NFM instead of WFM or may not generate sub-carrier such as the pilot tone. 4) Narrow Bandwidth Commercial stations will usually have a deviation of +/- 75 kHz. Bugs tend not to be so picky and are often less then less than +/- 75 kHz. It's not uncommon fro such bugs to use a bandwidth of less then 20 kHz. 5) Incorrect Polarization It could be a device taped horizontally under a table, and will help minimize detection. Remember to swivel you antennas to check all polarizations. 6) Little or no modulation Remember broadcasting is expensive, and commercial stations rarely make money from dead air time. On the other hand most bugs create tons of dead air. 7) FM Deviation is not symmetrical Radio Shack, Cony, Xandi, Rainbow, and Ramsey bugs do not use a balanced deviation and are typically - 90 kHz to + 45 kHz, Lower deviation is often twice the upper deviation. Beware of any Assymetrical Deviations. 8) Amplitude abnormally high Anything over -70 dBm is suspect, and anything over -50 should be considered highly hostile. I've seen some of these little devils cranked up as hot as +15 dBm at 20 feet (Remember to move your antenna around). Hostile Signal Indicators (alerting) 1) Feedback or Regenerative Signal Detection - WFM/NFM with Clicker 2) Sensitivity to thumping 3) Sensitivity to "loading effects" 4) Sensitivity to tone generation. Force widest deviation with 25-45 watt audio amp, cross over filters, and three speakers while generating a single tone, or LOUD pink noise (such as a vacuum cleaner). The goal is to exceed this acoustical limits of the bugs design, and to cause it to "flip out". Many device to start creating massive harmonics if you can overload the front end with noise or a single tone (1 kHz works well). Secondary Evaluations - Actual Measurements via laptop The primary function is to evaluate the guard band area between FM stations (which should not have any energy other then thermal noise present) RBW 1 kHz (300 Hz optional) VBW1 kHz (300 Hz optional) Sweep5 Seconds (10-15 seconds optional) Ref Level-65 dBm (a function of BW, -80 optional) Log5 dB/division Amplitude, (2 dB optional) PAPreamp On (+15 dB) AverageTrace Averaging OFF HoldPeak Hold on Trace 2 HoldMinimum Hold on Trace 3 Samples1024 points (or more) for each trace Span25 kHz (Centered on on guard band) 1st Start Freq.87.7850 (Channel 200, minus 1 MHz) 1st Center88.8000 (Channel 200) 1st End Freq.88.8125 (Channel 200, plus 1 MHz) Step Size200 kHz (1 channels) Last Start Freq108.5850 (Channel 300+) Last Center107.6000 (Channel 300+) Last End Freq.108.6125 (Channel 300+) Third Evaluation - Actual Measurements via laptop The function is to identify RF energy just outside the FM broadcast band which may or may not be hostile. Watch out for TV-6 audio signals, and for wireless microphones in the 72-75 MHz area. RBW 1 kHz VBW1 kHz Sweep5 Seconds Ref Level-65 dBm (a function of BW) Log5 dB/division Amplitude PAPreamp On (+15 dB) AverageTrace Averaging OFF HoldPeak Hold on Trace 2 HoldMinimum Hold on Trace 3 Samples1024 points (or more) for each trace Span2 MHz 1st Start Freq.69 1st Center70 1st End Freq.71 Step Size1000 kHz Last Start Freq134 Last Center135 Last End Freq.136 Of course you still will need to check from DC to light, but the above methods help to find eavesdropping device inside the FM broadcast band. If you find the above protocol helpful then you can at least buy me a cup of coffee. -jma =================================================================== Sed quis custodiet ipsos Custodes? =================================================================== James M. Atkinson Phone: (978) 546-3803 Granite Island Group 127 Eastern Avenue #291 http://www.tscm.com/ Gloucester, MA 01931-8008 jmatk@t... =================================================================== Copyright 2000, James M. Atkinson, All Rights Reserved =================================================================== [Non-text portions of this message have been removed] 182 From: Perry Myers Date: Mon Apr 10, 2000 0:41pm Subject: RE: normal procedure I certainly empathize with Trace here but the law is correctly stated by Mr. McCrory. You are taking a chance when you leave a job knowing there was an active tap without reporting it. Then again, jaywalking is not enforced here in Chicago. Not that the two compare. Which reminds me of a case I had a few years ago. I found and reported an active recorder on the line. The 20 year veteran Chicago Police officer reporting to the scene was convinced that no crime was committed until he checked his 'handy dandy little criminal code book' (his words) to find out that it was indeed a crime. When he radioed in the case there was a barrage of calls on the radio from fellow officers who were also unaware that it was a crime. This is an all party consent state on top of this. Just goes to show you how unaware even a veteran police officer can be. Perry D. Myers, CFE CEO & President Myers Service, Inc. Investigations 2076 N. Elston Ave. Suite 200 Chicago, IL. 60614-3940 Phone 773-342-8300 Facsimile 773-486-4430 email: perry@d... For information on investigative services please visit our web site at www.detectiveservices.com This e-mail is strictly confidential. If you receive this email in error, please forward immediately to info@d... -----Original Message----- From: William L. McCrory [mailto:wmccrory@p...] Sent: Monday, April 10, 2000 10:37 AM To: TSCM-L@egroups.com Subject: Re: [TSCM-L] normal procedure Talk with your attorney. If he or she isn't practicing criminal law, you may want to talk with one who is, and find out what your criminal liability could be under state and federal laws. Consider that if you leave an illegal interception in place, you may well be an accessory after the fact, aiding and abetting a felony, or committing misprision of felony. If your TSCM practice requires you to have a license issued by your state, have your attorney explain any reporting obligations that may attach to having the license. Again, check with your attorney to better understand what may be required of you in your state. One-party consent can only be given by one who is lawfully a party to the conversation being intercepted. Ownership of the line does not automatically convey the right to intercept the conversations of two or more non-consenting parties. In some business settings, employees have signed documents acknowledging that they have been told that their telephone conversations may be monitored, but that does not sound like the case here. Ownership of the line does not affect your standing to "make a complaint." If you know a crime has been committed, either federal or state, you have every right to report it. You are a witness, not a victim. Trace Carpenter wrote: > Seem's like I've been an argument over this before, but I'd still like > to hear input from others in the business. > > We've had instances over the years when after finding a tap, the > client wanted it left alone for self serving reasons. In these > instances it was either a domestic dispute/divorce or corporate > espionage situation. In any event, the taps were illicitly placed. > Therefore they were being left on the line to either place > surveillance on the tap to catch the party, or to launch a > disinformation > campaign. My take on it has always been that Texas is a one party > consent state and the owner of the line now knows the conversation is > being monitored therefore he or she is now the one party. Basically > then we have no Complainant so there are no charges to be filed. > Secondly, regardless of the situation, it's not my phone line so I > have no formal standing to make a complaint or be a > Complainant. I know there are others out there that are hard core > "you must report it." > > Any opinions? > > Dawn Star wrote: > > > Message: 2 > > Date: Thu, 6 Apr 2000 20:20:44 -0400 > > From: "Andre Holmes" <1ach@g...> > > Subject: Re: > > > > Roger wrote I busted a bunch of wiretaps question Roger did you > report your > > findings to the FBI when you first discovered the taps I believe > thats the > > normal procedure that is to report all findings on telcowiring > period. > > -----Original Message----- > > From: Dawn Star > > To: TSCM-L@onelist.com > > Date: Thursday, April 06, 2000 11:44 AM > > Subject: [TSCM-L] > > > > Sure, I called them up and said " I just busted a bunch of your > wiretaps so why don't you come on down to my office and arrest me and > charge me with obstruction of justice and conspiracy" Let me tell > you, it ain't no joke when you sitting across the table from the > F.B.I., D.E.A., I.R.S criminal, and United States Customs and they > want to know why their taps aren't playing music anymore! Roger > > > > [Non-text portions of this message have been removed] > > > > > ------------------------------------------------------------------------ > > > Get a NextCard Visa, in 30 seconds! > > 1. Fill in the brief application > > 2. Receive approval decision within 30 seconds > > 3. Get rates as low as 2.9% Intro or 9.9% Fixed APR > > Apply NOW! > > http://click.egroups.com/1/2646/0/_/507420/_/955237810/ > > > ------------------------------------------------------------------------ > > > > > ======================================================== > > TSCM-L Technical Security Mailing List > > "In a multitude of counselors there is strength" > > > > To subscribe to the TSCM-L mailing list visit: > > http://www.onelist.com/community/TSCM-L > > > > or email your subscription request to: > > subTSCM-L@t... > > =================================================== TSKS > > -- > *Trace Carpenter > *2926 Maple Ave., Ste. 200 > *Dallas, Texas 75201 > *214.828.4520; 214.740-0112 Facsimile > *Because the fly on the wall might not be the only bug in the room.(tm) > > > ----------------------------------------------------------------------- > > ----------------------------------------------------------------------- > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.onelist.com/community/TSCM-L > > or email your subscription request to: > subTSCM-L@t... > =================================================== TSKS ------------------------------------------------------------------------ PERFORM CPR ON YOUR APR! Get a NextCard Visa, in 30 seconds! Get rates as low as 0.0% Intro or 9.9% Fixed APR and no hidden fees. Apply NOW! http://click.egroups.com/1/2121/0/_/507420/_/955387350/ ------------------------------------------------------------------------ ======================================================== TSCM-L Technical Security Mailing List "In a multitude of counselors there is strength" To subscribe to the TSCM-L mailing list visit: http://www.onelist.com/community/TSCM-L or email your subscription request to: subTSCM-L@t... =================================================== TSKS 183 From: James M. Atkinson, Comm-Eng Date: Tue Apr 11, 2000 9:10am Subject: Expensive Monkeys [Humor] Expensive Monkeys A tourist walked into a pet shop near Microsoft's corporate headquarters and was looking at the animals on display. While he was there, another customer walked in and said to the shopkeeper, "I'll have a C monkey please." The shopkeeper nodded, went over to a cage at the side of the shop and took out a monkey. He fit a collar and leash, handed it to the customer, saying, "That'll be $5000." The customer paid and walked out with his monkey. Startled, the tourist went over to the shopkeeper and said, "That was a very expensive monkey. Most of them are only a few hundred dollars. Why did it cost so much?" The shopkeeper answered, "Ah, that monkey can program a computer in C -- very fast, tight code, no bugs, well worth the money." The tourist looked at the monkey in another cage. "That one's even more expensive! $10,000! What does it do?" "Oh, that one's a C++ monkey; it can manage object-oriented programming, Visual C++, even some Java. All the really useful stuff," said the shopkeeper. The tourist looked around for a little longer and saw a third monkey in a cage of its own. The price tag around its neck read $50,000. He gasped to the shopkeeper, "That one costs more than all the other put together! What on earth does it do?" The shopkeeper replied, "Well, I haven't actually seen it do anything, but it says it's a software engineer." =================================================================== Sed quis custodiet ipsos Custodes? =================================================================== James M. Atkinson Phone: (978) 546-3803 Granite Island Group 127 Eastern Avenue #291 http://www.tscm.com/ Gloucester, MA 01931-8008 jmatk@t... =================================================================== Copyright 2000, James M. Atkinson, All Rights Reserved =================================================================== 184 From: Hartmann Martin Date: Sun Apr 9, 2000 5:01am Subject: Rohde&Schwarz EB 200 Anyone experienced Problems with the new Rohde&Schwarz EB200 Receiver? -sensitivity above 1GHc? -The DIGISCAN Feature(Frequency Hoppers?) -I/Q Demod/Output Thanks. Vic/RADIO SCANNER-Germany ____________________________________________________________________ _______________________________________________________ Get 100% FREE Internet Access powered by Excite Visit http://freelane.excite.com/freeisp 185 From: Equipo de Soporte Date: Mon Apr 10, 2000 5:52am Subject: La Noticia de Boleon-El traductor y los superdominios Ya puedes hacer una prueba de traduccion del ingles al español y a partor del proximo envio lo podras hacer en 5 o 6 idiomas diferentes, por lo que ya no sera un problema el idioma lo tienes en http://www.eldorado.es [Non-text portions of this message have been removed] 186 From: James M. Atkinson, Comm-Eng Date: Tue Apr 11, 2000 3:50pm Subject: More talking heads about TEMPEST. More talking heads about TEMPEST. I just wish they had quoted me correctly. http://www.smartcomputing.com/editorial/article.asp?article=articles/a rchive/g0804/23g04/23g04.asp&guid=t185b87i -jma =================================================================== Sed quis custodiet ipsos Custodes? =================================================================== James M. Atkinson Phone: (978) 546-3803 Granite Island Group 127 Eastern Avenue #291 http://www.tscm.com/ Gloucester, MA 01931-8008 jmatk@t... =================================================================== Copyright 2000, James M. Atkinson, All Rights Reserved =================================================================== 187 From: Jesse Thomas Date: Tue Apr 11, 2000 5:28pm Subject: Re: Rohde&Schwarz EB 200 Now that brings back memories of Rohdi & Schwarz training on CMD80's in Menningham, Germany.. Hartmann Martin wrote: > Anyone experienced Problems with the new Rohde&Schwarz EB200 Receiver? > > -sensitivity above 1GHc? > -The DIGISCAN Feature(Frequency Hoppers?) > -I/Q Demod/Output > > Thanks. > > Vic/RADIO SCANNER-Germany > > ____________________________________________________________________ > > _______________________________________________________ > Get 100% FREE Internet Access powered by Excite > Visit http://freelane.excite.com/freeisp > > ------------------------------------------------------------------------ > eGroups + great entertaining = An Unforgettable Easter > Click Below to see how > http://click.egroups.com/1/3124/0/_/507420/_/955480594/ > ------------------------------------------------------------------------ > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.onelist.com/community/TSCM-L > > or email your subscription request to: > subTSCM-L@t... > =================================================== TSKS 188 From: Jay Coote Date: Fri Apr 14, 2000 10:04pm Subject: Receiver Discussion I am thinking of adding an AOR SDU-5500 spectral display and Icom TV-R7100 video demodulator to my existing AOR-3000 receiver.... I have also seen an AOR AR7000B in the AES catalog. This covers 0.1-2000 MHz, has selectable NTSC/PAL video demodulator, and spectral display The AR7000 has it's own color LCD display. Is this receiver good, adequate or worse? Also, anyone have comments on the Icom R-8500? I may be looking into one of these receivers and adding the TV- R7100 demodulator and SDU-5500 spectral display. Thanks, Jay Coote Los Angeles 189 From: James M. Atkinson, Comm-Eng Date: Sat Apr 15, 2000 10:11am Subject: Re: Receiver Discussion At 10:45 AM -0400 4/15/00, Jay Coote wrote: >I am thinking of adding an AOR SDU-5500 spectral display and Icom TV-R7100 >video demodulator to my existing AOR-3000 receiver.... > >I have also seen an AOR AR7000B in the AES catalog. This covers >0.1-2000 MHz, has selectable NTSC/PAL video demodulator, and >spectral display >The AR7000 has it's own color LCD display. Is this receiver good, adequate >or worse? > >Also, anyone have comments on the Icom R-8500? I may be looking into one >of these receivers and adding the TV- R7100 demodulator and SDU-5500 > >spectral display. > >Thanks, >Jay Coote >Los Angeles > Jay, The AOR SDU is a complete dog that "lights up the spectrum" when you use it.Use the AVCOM SDM-42 instead. The new HP spectrum analyzers are the way to go as they are capable of handling a wide variety of video signals, AND you can display the signals on the internal monitor. While the product is new and still has a few "issues" it does perform well. Quite a few TSCM'ers are purchasing a PSA-65C and adding the new VDM video demodulator to deal with the various video threats. You can get an entire system suitable for locating video bugs for under 7 grand. The R-8500 with an SDM-42 also makes good system, but you will also need an external TV demodulator and monitor. Don't forget about the lower end of the spectrum as well, there are many nasty little narrow band FM devices down around 20-250 kHz. If your buying new equipment make sure it has coverage below 50 kHz (100 kHz min), and that you can use NFM demodulation in the VLF bands. Watch out for FM video around 17 and 21 MHz on the phone lines -jma PS: Here is what the AVCOM system consists of: PSA-65C Analog Spectrum Analyzer$ 3,230.00 Recommended Options: 10 kHz Resolution Bandwidth Filter$ 325.00 Oscilloscope Interface Option$ 210.00 Sub-Carrier Detector$ 140.00 FM Video Demodulator/AM Module(s)$ 1085.00 1.25 - 2.50 GHz Frequency Extender / Mixer$ 650.00 2.50 - 3.75 GHz Frequency Extender / Mixer$ 650.00 5.70 - 6.20 GHz Frequency Extender / Mixer$ 890.00 Carrying Case$ 105.00 Foam Carry Handle$ 7.50 You will want to obtain a 4" LCD monitor locally, along with a large Pelican, SKB, or similar case to transport the system. =================================================================== Sed quis custodiet ipsos Custodes? =================================================================== James M. Atkinson Phone: (978) 546-3803 Granite Island Group 127 Eastern Avenue #291 http://www.tscm.com/ Gloucester, MA 01931-8008 jmatk@t... =================================================================== Copyright 2000, James M. Atkinson, All Rights Reserved =================================================================== [Non-text portions of this message have been removed] 190 From: Mike F Date: Fri Apr 14, 2000 10:44pm Subject: telco site Hi a while back someone listed a Telecom site with info such as wire colors and other things,concerning telephones. My computer crashed a while back and I lost the info. Please send me the Web Address. You can email me privately. thanks, later4,mike fiorentino Michael T. Fiorentino 237 South Edwards Ave #3 Syracuse,NY 13206-2945 EMAIL ME 4 my PHONE NUMBER This electronic message contains information from which may be privileged and confidential. The information isintended for use only by the individuals or entity named above. If you arenot the intended recipient, be aware that any disclosure, copying,distribution, or use of the contents of this informationis prohibited. If you are not the indicated recipient or have received this message in error ontact our offices immediatly for instructions. 191 From: Charles Patterson Date: Sat Apr 15, 2000 7:34pm Subject: Re: telco site Mike, Check out www.ablecomm.com He's got a lot of stuff, mostly about panasonic phones, but he's got wire colors and links to a lot of other sites. Charles Charles Patterson communications@c... Global Communications Tarrytown, NY http://www.telephonesecurity.com ----- Original Message ----- From: Mike F To: TSCM- Sent: Friday, April 14, 2000 11:44 PM Subject: [TSCM-L] telco site > > > Hi a while back someone listed a Telecom site with info such as wire colors > and other things,concerning telephones. > My computer crashed a while back and I lost the info. > Please send me the Web Address. > You can email me privately. > thanks, > later4,mike fiorentino > > > > Michael T. Fiorentino > 237 South Edwards Ave #3 > Syracuse,NY 13206-2945 > > EMAIL ME 4 my PHONE NUMBER > > This electronic message contains information from which may be privileged > and confidential. The information isintended for use only by the individuals > or entity named above. If you arenot the intended recipient, be aware that > any disclosure, copying,distribution, or use of the contents of this > informationis prohibited. If you are not the indicated recipient or have > received this message in error ontact our offices immediatly for > instructions. > > > ------------------------------------------------------------------------ > Avoid the lines and visit avis.com for quick and easy online > reservations. Enjoy a compact car nationwide for only $29 a day! > Click here for more details. > http://click.egroups.com/1/3011/0/_/507420/_/955813058/ > ------------------------------------------------------------------------ > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.onelist.com/community/TSCM-L > > or email your subscription request to: > subTSCM-L@t... > =================================================== TSKS > 192 From: Trace Carpenter Date: Sat Apr 15, 2000 8:24pm Subject: Re: telco site Mike, It wasn't me but I think the URL you're talking about is http://www.ablecomm.com/colorcodes.htm There are some "colorful" sayings to commit the color orders to memory. I wouldn't want to post it here in the open out of respect to the list and the moderator but feel free to email me if you want one :-) Mike F wrote: > Hi a while back someone listed a Telecom site with info such as wire colors > and other things,concerning telephones. > My computer crashed a while back and I lost the info. > Please send me the Web Address. > You can email me privately. > thanks, > later4,mike fiorentino > > Michael T. Fiorentino > 237 South Edwards Ave #3 > Syracuse,NY 13206-2945 > > EMAIL ME 4 my PHONE NUMBER > > This electronic message contains information from which may be privileged > and confidential. The information isintended for use only by the individuals > or entity named above. If you arenot the intended recipient, be aware that > any disclosure, copying,distribution, or use of the contents of this > informationis prohibited. If you are not the indicated recipient or have > received this message in error ontact our offices immediatly for > instructions. > > ------------------------------------------------------------------------ > Avoid the lines and visit avis.com for quick and easy online > reservations. Enjoy a compact car nationwide for only $29 a day! > Click here for more details. > http://click.egroups.com/1/3011/0/_/507420/_/955813058/ > ------------------------------------------------------------------------ > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.onelist.com/community/TSCM-L > > or email your subscription request to: > subTSCM-L@t... > =================================================== TSKS -- *Trace Carpenter *2926 Maple Ave., Ste. 200 *Dallas, Texas 75201 *214.828.4520; 214.740-0112 Facsimile *Because the fly on the wall might not be the only bug in the room.™ 193 From: Andy Grudko Date: Sat Apr 15, 2000 8:48am Subject: Re: FM Broadcast Measurement Protocol ----- Original Message ----- > If you find the above protocol helpful then you can at least buy me a > cup of coffee. All this to locate an FM bug........! I know I'm on a different continent but I think it's actually a different planet. We just use a Scanlock 2000, CPR 700 and Optronics Xplorer with spectrum analysis software for this level of sweep. In low background RF saturation areas we do a quick sweep (1 metre max. from all objects), but in high RF backgrounds we sweep as close as possible. We have a find rate of 3 - 4%.......now I fear we might be missing something, except our 'spies' are really not sophisticated. We located an FM device on about 116 Mhz (Cony/Micro/AAA type) 3 weeks ago in a local gov. office. The Scanlock picked it up the momnent it was switched on (almost embarassingly fast considering our fee!!!!) Andy Grudko (CEO), Grudko Wilson Associates (SA) (Pty) Ltd. Criminal Investigators. Johannesburg head office - Est. 1981 - www.grudko.com - (+27 11) 465 9673 465 1487 (Fax) - SCIP (Gauteng Chairman), WAD , CALI, SASFed, SASA, SACI (President), GIN (Charter), SAMLF ------ "When you need it done right - first time" 194 From: Andy Grudko Date: Sun Apr 16, 2000 9:56am Subject: Hit Test - my reboot after being severely Trojan'ed by the Ericsohn/Nokia eMail bug. Please click on reply so I get your number back into my (deleted) address book (pray no other damage) and then delete this message. Andy Grudko (CEO), Grudko Wilson Associates (SA) (Pty) Ltd. Criminal Investigators. Johannesburg head office - Est. 1981 - www.grudko.com - (+27 11) 465 9673 465 1487 (Fax) - SCIP (Gauteng Chairman), WAD , CALI, SASFed, SASA, SACI (President), GIN (Charter), SAMLF ------ "When you need it done right - first time" 195 From: Andy Grudko Date: Sun Apr 16, 2000 10:19am Subject: Test Test - my reboot after being severely Trojan'ed by the Ericsohn/Nokia eMail bug. Please click on reply so I get your number back into my (deleted) address book (pray no other damage) and then delete this message. Andy Grudko (CEO), Grudko Wilson Associates (SA) (Pty) Ltd. Criminal Investigators. Johannesburg head office - Est. 1981 - www.grudko.com - (+27 11) 465 9673 465 1487 (Fax) - SCIP (Gauteng Chairman), WAD , CALI, SASFed, SASA, SACI (President), GIN (Charter), SAMLF ------ "When you need it done right - first time" 196 From: Jordan Ulery Date: Sun Apr 16, 2000 3:57pm Subject: Re: Test Andy Grudko wrote: > Test - my reboot after being severely Trojan'ed by the Ericsohn/Nokia eMail > bug. Please click on reply so I get your number back into my (deleted) > address book (pray no other damage) and then delete this message. > > Andy Grudko (CEO), Grudko Wilson Associates (SA) (Pty) Ltd. Criminal > Investigators. > Johannesburg head office - Est. 1981 - www.grudko.com - (+27 11) 465 9673 > 465 1487 (Fax) - SCIP (Gauteng Chairman), WAD , CALI, SASFed, SASA, SACI > (President), GIN (Charter), SAMLF ------ "When you need it done right - > first time" > > ------------------------------------------------------------------------ > Avoid the lines and visit avis.com for quick and easy online > reservations. Enjoy a compact car nationwide for only $29 a day! > Click here for more details. > http://click.egroups.com/1/3011/0/_/507420/_/955902836/ > ------------------------------------------------------------------------ > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.onelist.com/community/TSCM-L > > or email your subscription request to: > subTSCM-L@t... > =================================================== TSKS 197 From: Steve Uhrig Date: Sat Apr 15, 2000 11:33am Subject: Re: Receiver Discussion - ICOM Once upon a midnight dreary, Jay Coote pondered, weak and weary: > Also, anyone have comments on the Icom R-8500? I may be > looking into one of these receivers and adding the TV- R7100 > demodulator and SDU-5500 spectral display. I will qualify every statement below by first reminding everyone that ICOM receivers are, at best, high end hobby products. They are not professional receivers, but they are so cheap they have taken a share of the market for inexpensive receivers. The R8500 is superior to any AOR. Receiver performance is largely the same amongst all the hobby receivers, but the ease of operation and features is better on the R8500. Before ICOM and SWS got divorced, in our 17 year history with the product I sold several thousand ICOM receivers, including the R8500, and I have not yet had any service problems other than burned out panel lights (a 20 minute repair) on the R8500. The AOR has a noisier IF and more spurs than the ICOM. Noisier IF means weak signals are masked by the noise. Spurs means false alarms. The TV-R7100 is expensive, special order only/3 month delivery and I believe has been discontinued. ICOM would order them in from Japan as needed. In our last year with ICOM, we sold 35 of them, and ICOM overall sold only our 35, so you can see they are not popular. The TV-R7000 is essentially identical, the only difference being physical packaging and the TV-R7100 having an ACG line which the earlier one does not. The AGC line does not come into play except with very strong signals and you will not miss it. The things are AM video only and pretty soft, but they do work. They are no substitute for a dedicated video receiver by a competent manufacturer though. There is more factory and aftermarket support for ICOM than AOR. The AOR line was handled primarily by EEB, but now that they are out of business you may have trouble getting service. I have owned 4 AOR receivers. All four needed factory service, one three times. One was provided free by AOR in an attempt to convince me to sell their product. They didn't like it when they ran into someone who genuinely understood the receiver market. The AVCOM and AOR and Grove spectrum monitors are toys. They all are knockoffs of the Atlantic Electronics units which were designed for NSA and to their specs, and are available exclusively through CSE Associates www.cse-assoc.com. You can find the stuff on CSE's website under Products | Atlantic Electronics. CSE's phone number is 301-898-9360. Ask for Ozzie, who is the fellow who designed the thing. Some years ago, Fort Meade (NSA) bought thousands of ICOM receivers each year. They used them as throwaway receivers in spy kits. They left the country and had an average lifetime of 6 weeks. Each unit also included a signal monitor. They wrote the spec, Atlantic Electronics made several units which met their various specs, and the Fort in turn bought thousands of the monitors along with the ICOM receivers. Tons of them (I know; I paid the freight bills). EEB, now defunct, was an ICOM dealer sniffing after a chunk of that business. They originally bought the signal monitors from CSE Associates and supplied their own ICOM receivers and competed with us. Then they decided to build their own unit and take the business away from Atlantic/CSE. They had AOR build a signal monitor intended to be cheaper. In the process, performance suffered. AVCOM (down the street from EEB) and Grove also tried to build their own versions. NSA tested and accepted none of them. Cost was not an issue if the things did not do the job. I personally have used all of them, and the Atlantic Electronics unit is superior. Weak signals not above the noise on the others are clearly visible on the Atlantic Electronics. Cost is about the same. The SM-7071 is the appropriate monitor for ICOM receivers. Even though tens of thousands of them have been delivered to the government, you never see one on the used market. When we quit being an ICOM dealer, NSA switched to Watkins Johnson receivers and ICOM lost the major customer for their receivers. With our volume, we could buy a few extra and supply our associates at less than normal dealer price. Any ICOM dealer currently can get an unblocked receiver just for the asking. All the dealer has to do is certify verbally to ICOM that the thing is going to a legitimate customer. This is a recent policy change. If you can convince a friendly dealer that TSCM is a legitimate use for full coverage, you'll get it. Best time to try this is when you are buying something else from him. And having some formal certification or other paper demonstrating you are indeed involved in TSCM in the real world, not just your own mind, will help and probably be required. While I'm on the subject of receivers, I'll state that the R7000 was very good, the R7100 miserable and should be avoided, R100 very good, R8500 superb, R9000 very miserable and should be avoided at all costs, especially used. All the handheld receivers are toys only. R7000, R7100, R100 and R9000 all are out of production. Don't buy any new receiver in its first year of production. They all have problems in the beginning and the early users pay for the privilege of being guinea pigs. ICOM traditionally has been of little assistance helping to resolve receiver problems. Dealers know nothing about the product other than how to sell it, and for the most part are worthless with technical problems. Dealers' extent of engineering or service capability is to make out a UPS label to return the radio to ICOM's repair facility. Avoid any receiver which has been modified. Some basement hacker is unlikely to outsmart the ICOM engineers. Virtually all the mods have side effects. Speeding up the scan, for example, (a popular mod) means the receiver does not dwell on a channel long enough for the PLL to settle fully, thus resulting in lower sensitivity and the likelihood of the scan not stopping on legitimate signals. One thing that should be done is to run the large receivers from an external 12 volt supply. The internal supplies run too hot and eventually will cause the receiver to fail, especially if racked and stacked. The R8500 was the first receiver to use an external power supply, which also keeps the receiver itself lighter and smaller. We service in house all ICOM receivers and ICOM commercial equipment for anyone who needs service. For that matter, we will service any quality brand of communications equipment except cell phones and pagers, and we are a Motorola shop if anyone needs accessories or parts. We also service Motorola Securenet equipment. ICOM receivers and the associated gingerbread are OK things to have for manually tuning. They are of little value as exclusive pieces for radiated TSCM work. Will be glad to answer any questions on the ICOM line or accessories. Steve ******************************************************************* Steve Uhrig, SWS Security, Maryland (USA) Mfrs of electronic surveillance equip mailto:Steve@s... website http://www.swssec.com tel +1+410-879-4035, fax +1+410-836-1190 "In God we trust, all others we monitor" ******************************************************************* 198 From: Mike F Date: Sat Apr 15, 2000 10:08pm Subject: CONSUMER ELECTRONICS LINKS & Repair Electronics Links How 2 Repair Electronics Links & CONSUMER ELECTRONICS LINKS & http://isdl.ee.washington.edu/CE/CEPointers.html Michael T. Fiorentino 237 South Edwards Ave #3 Syracuse,NY 13206-2945 EMAIL ME 4 my PHONE NUMBER This electronic message contains information from which may be privileged and confidential. The information isintended for use only by the individuals or entity named above. If you arenot the intended recipient, be aware that any disclosure, copying,distribution, or use of the contents of this informationis prohibited. If you are not the indicated recipient or have received this message in error ontact our offices immediatly for instructions. 199 From: William L. McCrory Date: Sat Apr 15, 2000 10:17pm Subject: Re: telco site Mike, This may not be the site cited, but it has good info anyway. http://www.hubbell-premise.com/TechInfo.asp Bill McCrory 200 From: Mike F Date: Sat Apr 15, 2000 11:25pm Subject: TELCO SITE There are some "colorful" sayings to commit the color orders to memory. The sayings are for Resistor color codes,at least the ones I heard were in electronics especially lab,you needed to have those color codes commited to memory. Thanks for site info. I sure someone has mentioned this,your part of management of counter-spies, is your name really Tracy or Trace? If so your name really goes with your Profession later4,mike f Michael T. Fiorentino 237 South Edwards Ave #3 Syracuse,NY 13206-2945 EMAIL ME 4 my PHONE NUMBER This electronic message contains information from which may be privileged and confidential. The information isintended for use only by the individuals or entity named above. If you arenot the intended recipient, be aware that any disclosure, copying,distribution, or use of the contents of this informationis prohibited. If you are not the indicated recipient or have received this message in error ontact our offices immediatly for instructions. -----Original Message----- From: Trace Carpenter [mailto:mgmt@c...] Sent: Saturday, April 15, 2000 9:24 PM To: TSCM-L@egroups.com Subject: Re: [TSCM-L] telco site Mike, It wasn't me but I think the URL you're talking about is http://www.ablecomm.com/colorcodes.htm There are some "colorful" sayings to commit the color orders to memory. I wouldn't want to post it here in the open out of respect to the list and the moderator but feel free to email me if you want one :-) Mike F wrote: > Hi a while back someone listed a Telecom site with info such as wire colors > and other things,concerning telephones. > My computer crashed a while back and I lost the info. > Please send me the Web Address. > You can email me privately. > thanks, > later4,mike fiorentino > > Michael T. Fiorentino > 237 South Edwards Ave #3 > Syracuse,NY 13206-2945 > > EMAIL ME 4 my PHONE NUMBER > > This electronic message contains information from which may be privileged > and confidential. The information isintended for use only by the individuals > or entity named above. If you arenot the intended recipient, be aware that > any disclosure, copying,distribution, or use of the contents of this > informationis prohibited. If you are not the indicated recipient or have > received this message in error ontact our offices immediatly for > instructions. > > ------------------------------------------------------------------------ > Avoid the lines and visit avis.com for quick and easy online > reservations. Enjoy a compact car nationwide for only $29 a day! > Click here for more details. > http://click.egroups.com/1/3011/0/_/507420/_/955813058/ > ------------------------------------------------------------------------ > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.onelist.com/community/TSCM-L > > or email your subscription request to: > subTSCM-L@t... > =================================================== TSKS -- *Trace Carpenter *2926 Maple Ave., Ste. 200 *Dallas, Texas 75201 *214.828.4520; 214.740-0112 Facsimile *Because the fly on the wall might not be the only bug in the room.™ ------------------------------------------------------------------------ eGroups + great entertaining = An Unforgettable Easter Click Below to see how http://click.egroups.com/1/3124/0/_/507420/_/955848261/ ------------------------------------------------------------------------ ======================================================== TSCM-L Technical Security Mailing List "In a multitude of counselors there is strength" To subscribe to the TSCM-L mailing list visit: http://www.onelist.com/community/TSCM-L or email your subscription request to: subTSCM-L@t... =================================================== TSKS 201 From: gerard p. keenan Date: Sun Apr 16, 2000 2:49pm Subject: Re: Hit -----Original Message----- From: Andy Grudko To: TSCM-L@egroups.com ; TSCM-L Mailing List Date: Sunday, April 16, 2000 12:33 PM Subject: [TSCM-L] Hit >Test - my reboot after being severely Trojan'ed by the Ericsohn/Nokia eMail >bug. Please click on reply so I get your number back into my (deleted) >address book (pray no other damage) and then delete this message. > >Andy Grudko (CEO), Grudko Wilson Associates (SA) (Pty) Ltd. Criminal >Investigators. > Johannesburg head office - Est. 1981 - www.grudko.com - (+27 11) 465 9673 >465 1487 (Fax) - SCIP (Gauteng Chairman), WAD , CALI, SASFed, SASA, SACI >(President), GIN (Charter), SAMLF ------ "When you need it done right - >first time" > > > >------------------------------------------------------------------------ >Avoid the lines and visit avis.com for quick and easy online >reservations. Enjoy a compact car nationwide for only $29 a day! >Click here for more details. >http://click.egroups.com/1/3011/0/_/507420/_/955902791/ >------------------------------------------------------------------------ > >======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.onelist.com/community/TSCM-L > > or email your subscription request to: > subTSCM-L@t... >=================================================== TSKS > 202 From: Miguel Puchol Date: Sun Apr 16, 2000 4:15pm Subject: RE: Receiver Discussion Hi Jay, I have an AR5000 with the SDU5500. For anything but hobby work it's not the best choice. The SDU has nice features, like presenting the sweep in channel steps resolution (i.e. 12.5kHz steps, etc.) but it's very sloooooow. I just borrowed a TV-R7000 from a friend, and I'm in the process of making the mod to it so it works with AOR rigs, I'll post some results when I get it working. Besides this, I would rather go for the AR5000 than the Icom R-8500, it has a wider RX range, and it is a LOT more sensitive above 1300 MHz than the Icom. For example, with the same antenna, Inmarsat (around 1540 MHz) was recived quite well by the 5000, while the signal was very noisy and didn't even make the needle bump on the 8500. The 5000 is half as big and weighs half of what the 8500 does, so it's better for moving around. With the 5000 you get the choice to switch between up to 4 antennas, for the frequency ranges that you specify for each one of them, automatically. Just my opinion, all the best, Mike > -----Mensaje original----- > De: Jay Coote [mailto:TSCM@j...] > Enviado el: lunes, 01 de enero de 1601 1:00 > Para: tscm-l@onelist.com > Asunto: [TSCM-L] Receiver Discussion > > > I am thinking of adding an AOR SDU-5500 spectral display and Icom TV-R7100 > video demodulator to my existing AOR-3000 receiver.... > > I have also seen an AOR AR7000B in the AES catalog. This covers > 0.1-2000 MHz, has selectable NTSC/PAL video demodulator, and > spectral display > The AR7000 has it's own color LCD display. Is this receiver > good, adequate > or worse? > > Also, anyone have comments on the Icom R-8500? I may be looking into one > of these receivers and adding the TV- R7100 demodulator and SDU-5500 > > spectral display. > > Thanks, > Jay Coote > Los Angeles 203 From: Andy Grudko Date: Mon Apr 17, 2000 1:25pm Subject: Re: Test Info. loaded - thank you ye Andy Grudko (CEO), Grudko Wilson Associates (SA) (Pty) Ltd. Criminal Investigators. Johannesburg head office - Est. 1981 - www.grudko.com - (+27 11) 465 9673 465 1487 (Fax) - SCIP (Gauteng Chairman), WAD , CALI, SASFed, SASA, SACI (President), GIN (Charter), SAMLF ------ "When you need it done right - first time" ----- Original Message ----- From: Jordan Ulery To: Sent: Sunday, April 16, 2000 9:57 PM Subject: Re: [TSCM-L] Test > > > Andy Grudko wrote: > > > Test - my reboot after being severely Trojan'ed by the Ericsohn/Nokia eMail > > bug. Please click on reply so I get your number back into my (deleted) > > address book (pray no other damage) and then delete this message. > > > > Andy Grudko (CEO), Grudko Wilson Associates (SA) (Pty) Ltd. Criminal > > Investigators. > > Johannesburg head office - Est. 1981 - www.grudko.com - (+27 11) 465 9673 > > 465 1487 (Fax) - SCIP (Gauteng Chairman), WAD , CALI, SASFed, SASA, SACI > > (President), GIN (Charter), SAMLF ------ "When you need it done right - > > first time" > > > > ------------------------------------------------------------------------ > > Avoid the lines and visit avis.com for quick and easy online > > reservations. Enjoy a compact car nationwide for only $29 a day! > > Click here for more details. > > http://click.egroups.com/1/3011/0/_/507420/_/955902836/ > > ------------------------------------------------------------------------ > > > > ======================================================== > > TSCM-L Technical Security Mailing List > > "In a multitude of counselors there is strength" > > > > To subscribe to the TSCM-L mailing list visit: > > http://www.onelist.com/community/TSCM-L > > > > or email your subscription request to: > > subTSCM-L@t... > > =================================================== TSKS > > > ------------------------------------------------------------------------ > IT Professionals: Match your unique skills with the best IT projects at > http://click.egroups.com/1/3381/0/_/507420/_/955922249/ > ------------------------------------------------------------------------ > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.onelist.com/community/TSCM-L > > or email your subscription request to: > subTSCM-L@t... > =================================================== TSKS > 204 From: Jay Coote Date: Thu Apr 20, 2000 6:24pm Subject: Orphan Ani Can someone post me the ANI numbers and any other useful telephone numbers? I am in the Southern CA area (usually). Thanks, Jay Coote Los Angeles 205 From: Date: Thu Apr 20, 2000 6:44pm Subject: RE: Orphan Ani 800 346 0152 /M Michael J. Canaan President Trident Investigative Service, Inc. Corporate Special Services P.O. Box 1950 Renton, WA 98057-1950 901 Rainier Avenue North Suite B-202 Renton, WA 98055 Office:(206) 772-9646 Facsimile:(206) 772-9647 Cellular:(206) 660-1100 Pager:(206) 609-7773 [24 Hour Numeric] Email:mike@t... Web:www.tridentseattle.com -----Original Message----- From:Jay Coote [mailto:TSCM@j...] Sent:Friday, July 10, 2893 3:44 PM To:TSCM-L@egroups.com Subject:[TSCM-L] Orphan Ani Can someone post me the ANI numbers and any other useful telephone numbers? I am in the Southern CA area (usually). Thanks, Jay Coote Los Angeles ------------------------------------------------------------------------ Enjoy the award-winning journalism of The New York Times with convenient home delivery. And for a limited time, get 50% off for the first 8 weeks by subscribing. Pay by credit card and receive an additional 4 weeks at this low introductory rate. http://click.egroups.com/1/3102/0/_/507420/_/956273087/ ------------------------------------------------------------------------ ======================================================== TSCM-L Technical Security Mailing List "In a multitude of counselors there is strength" To subscribe to the TSCM-L mailing list visit: http://www.onelist.com/community/TSCM-L or email your subscription request to: subTSCM-L@t... =================================================== TSKS 206 From: Mike F Date: Fri Apr 21, 2000 6:58am Subject: ANAC I noticed that the last ANAC had been already posted.So here is anothe one works all across nation.As I mentioned if you send me the area code you are in I might have the local ANAC,which is always better to use. I say the local ANAC's are better because the national ones if over-used will shut down. later4,mike f. 1-888-294-7514 Call this number and listen for a few seconds until the end of the outgoing greeting.Then the ANAC comes on. Michael T. Fiorentino Syracuse,NY 13206-2945 "CONFIDENTIALITY WARNING This electronic message contains information which may be privileged and/or confidential. The information is intended for use only by the individual(s) or entity named/indicated above. If you are not the identified/intended recipient, be aware that any disclosure, copying, distribution, or use of the contents of this message/information is prohibited. If you are not the indicated recipient or have received this message in error contact our offices immediately for instructions." 207 From: Mike F Date: Fri Apr 21, 2000 7:03am Subject: RE: Orphan Ani Jay here is ANAC,Automatic Number Announcement Circuit. 1-800-346-0152 , If you give me the area codes ,I might be able to send the local 3 digit ANAC,nunbers which are better to use. later4,mike fiorentino -----Original Message----- From: Jay Coote [mailto:TSCM@j...] Sent: Friday, July 10, 2893 6:44 PM To: TSCM-L@egroups.com Subject: [TSCM-L] Orphan Ani Can someone post me the ANI numbers and any other useful telephone numbers? I am in the Southern CA area (usually). Thanks, Jay Coote Los Angeles ------------------------------------------------------------------------ Enjoy the award-winning journalism of The New York Times with convenient home delivery. And for a limited time, get 50% off for the first 8 weeks by subscribing. Pay by credit card and receive an additional 4 weeks at this low introductory rate. http://click.egroups.com/1/3102/0/_/507420/_/956273087/ ------------------------------------------------------------------------ ======================================================== TSCM-L Technical Security Mailing List "In a multitude of counselors there is strength" To subscribe to the TSCM-L mailing list visit: http://www.onelist.com/community/TSCM-L or email your subscription request to: subTSCM-L@t... =================================================== TSKS 208 From: Jay Coote Date: Sat Apr 22, 2000 7:10pm Subject: Re: Orphan Ani Thanks! ---------- > 800 346 0152 > > /M > > Michael J. Canaan > President > Trident Investigative Service, Inc. > Corporate Special Services > > P.O. Box 1950 > Renton, WA 98057-1950 > > 901 Rainier Avenue North > Suite B-202 > Renton, WA 98055 > > Office:(206) 772-9646 > Facsimile:(206) 772-9647 > Cellular:(206) 660-1100 > Pager:(206) 609-7773 [24 Hour Numeric] > Email:mike@t... > Web:www.tridentseattle.com > > -----Original Message----- > From:Jay Coote [mailto:TSCM@j...] > Sent:Friday, July 10, 2893 3:44 PM > To:TSCM-L@egroups.com > Subject:[TSCM-L] Orphan Ani > > Can someone post me the ANI numbers and any other useful telephone numbers? > I am in the Southern CA area (usually). > Thanks, > Jay Coote > Los Angeles > > > ------------------------------------------------------------------------ > Enjoy the award-winning journalism of The New York Times with > convenient home delivery. And for a limited time, get 50% off for the > first 8 weeks by subscribing. Pay by credit card and receive an > additional 4 weeks at this low introductory rate. > http://click.egroups.com/1/3102/0/_/507420/_/956273087/ > ------------------------------------------------------------------------ > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.onelist.com/community/TSCM-L > > or email your subscription request to: > subTSCM-L@t... > =================================================== TSKS > > > ------------------------------------------------------------------------ > Enjoy the award-winning journalism of The New York Times with > convenient home delivery. And for a limited time, get 50% off for the > first 8 weeks by subscribing. Pay by credit card and receive an > additional 4 weeks at this low introductory rate. > http://click.egroups.com/1/3102/0/_/507420/_/956282442/ > ------------------------------------------------------------------------ > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.onelist.com/community/TSCM-L > > or email your subscription request to: > subTSCM-L@t... > =================================================== TSKS > > 209 From: Jay Coote Date: Tue Apr 25, 2000 6:12pm Subject: Another ANI-ANAC Question To the person who gave me info on the newbie site ANAC text, thanks. I could use some more info on that, or other sites like it. To other readers, I am still looking for some more good ANI - ANAC numbers for California and Southwestern US area codes. 211-2345 seems to work in most Southern CA PacBell areas- not sure about GTE. Thanks, Jay Coote Los Angeles 210 From: James M. Atkinson, Comm-Eng Date: Tue Apr 25, 2000 7:42pm Subject: Mafiaboy I realize that the following only loosely involves TSCM, but I though it would be of interest to the list now that they actually have laid charges against the person responsible (one down, three to go...). - The following is based on my own research (which is private). About two years ago someone using the nickname of "NiGhTmArE" became active in various IRC chat rooms, joined various hacker mailing lists, and exhibited all of the signs of a newbie (he was 14 years old). Short afterwards he changed his handle to mafiaboy and posted to various groups begging for passwords and "pimping warez". Occasionally "mafiaboy" would drop his real name as "Mike", Mike C.", or "Mike Calce", and several times signed his messages "Justin Farcus" or simply "Farcus". Several time he also posted using a "farcus51" email address. On several occasions he mentioned that he lived near Quebec, and one one occasion listed his city as being Roxboro. He passed his phone number around on IRC channels which he thought was private, and listed his phone number on his website at his ISP (mostly phreaker groupies). At that time he was using the Email address and web page at dsuper.net Mike Calce AKA: NiGhTmArE AKA: Justin Farcus AKA: Mafiaboy Roxboro, QC E-mail: mafiaboy@d... Mid 1999 he began using several other aliases including Ganster, Gansters-Clan, Canadian Gangster, Brain Buzz, Brain Boy, and several other "script kiddie" handles. The name "Paul Calce" has been reported in the press as the name of the kids father (who the RCMP claims was trying hire a hit man). I did a little research on the name and came up with the following address (which may or may not be the kids father and current address). Paul Calce 6135 Rue Harvey Pierrefonds, QC H8Z 2K8 I also checked the surrounding area for other related information and came up with the following address associated with the kid (at one time or another he used this name and/or address). J Calce 777 Louis Fornel Boucherville, QC J4B 1A2 Shortly after the first wave of attacks I was asked to analyze (by a paying customer) some of the log files that turned up on the West Coast related to this incident. I was able to trace the suspect activity back to sympatico.ca and dsuper.net accounts which had an account name of "Justin Farcus", with a phone number in Boucherville. Now this "Justin Farcus" in Boucherville may or may not be related to the "J Calce" (also in Boucherville), but it is a really strange coincidence. What Mafiabrat/Mike failed to realize is that since broadband Internet connections are so subject to abuse that cable modem based ISP companies keep DETAILED logs of what their customers do on-line... Doom on Mafiabrat ... -jma PS: I actually had an ID on this kid three days after the Yahoo attack =================================================================== Sed quis custodiet ipsos Custodes? =================================================================== James M. Atkinson Phone: (978) 546-3803 Granite Island Group 127 Eastern Avenue #291 http://www.tscm.com/ Gloucester, MA 01931-8008 jmatk@t... =================================================================== Copyright 2000, James M. Atkinson, All Rights Reserved ===================================================================