6


  *** Solid State Silver Boxes ***
   
Ma Bell is not the only one with standar
ds!  Just about every
manufacturer of IC's that generate touch
 tones has also gone by
the 16 key (8 tone) standard for Touch T
one pads.  And it is even
easier to convert a tone pad that uses a
n integrated circuit
to generate the tones than converting a 
Ma Bell pad!
   
It will help immensely if you have the s
chematic for the pad in
question, or at least the pin-out diagra
m of the chip being used.
Pin-outs can usually be obtained from th
e manufacturer or from
an ECG, SK, GE or similiar semiconducter
 handbook (provided that
manufacturer makes an equivalent for the
 chip in your pad).
I'll use the Radio Shack CEX-4000 tone p
ad module for an example,
even though it is probably almost the lo
usiest one you can buy, 
it is fairly typical and easily availabl
e.
   
Take a look at the diagram or the pin-ou
t of the chip.  You
should see two groups of pins, the rows 
tone pins and the column
tone pins.  These will be marked as R1,R
2,R3,R4 and C1,C2,C3 (Radio Shack) or 
or X1,X2,X3 and Y1,Y2,Y3 etc. on others.
  At any rate, you
should be able to distinguish which thre
e pins control the columns
and which four control the rows.  If you
're lucky, each group of rows and
columns will be contiguous.  Now look at
 the column pins, and you'll 
probably see an empty pin right next to 
them.  This is the column pin fthe 1633 h
z tones.  These chips usually achieve the
ir switching by conn-
ecting a row pin with a column pin (that
 way they can use a very simple
keyboard pad, unlike Ma Bell's complicat
ed one).  So all you have
to do is take a SPDT switch and a few pi
eces of wire, cut the trace going t
the column 3 pin of the chip, attach a w
ire from the chip sideof
that cut to one end of the SPDT switch, 
a wire from the other side of the cut 
to the center of the SPDT switch, and fi
nally, from the remaining
contact on the SPDT switch, hook a wire 
to the previously identified pin C4
(Column 4).  Now you have a "bank switch
ing arrangement exactly
like the one described in the previous b
ulletin for modifying a Ma
Bell pad.  
If you can't get the schematics or the p
in outs for your chip, don't despair.
There is still hope for you!  You just h
ave to track the connections going
from the pad's keys to the chip.  Chance
s are you'll find thateacj
row has a common trace, and so does each
 column (for those non-
technical folks, a trace is a connection
 etched out on a circuit
board).  Just follow these to the chip, 
and make your own
schematic up.  Now take a look for that 
extra pin-- there should
be one floating around right next to the
 column pins.  It will be
not be hooked up to anything else, that 
is, "hanging free".
Drill a hole in the side of tonepad's ca
se, and mount your switch.  Radio Shack s
ells a nice microminiature switch that 
works excellently! (almost the only good
 thing I can say aboutRadio
Shack in this article)
  
    Happy Phreaking.....
      Phincerely yours, Number Six.

Bulletin
 to print, <L> for list, or <RETURN> to 
exit? 7


This bulletin describes how to take a st
andard touch tone keypad
and convert it to a portable unit. In ad
dition, I give the touch
tone frequencies.

First of all, the tones generated by a s
tandard touch tone
keypad (like one on a standard telephone
) are not single tones,
but a combination of two tones for each 
key pressed.  Standard
keypads normally generate 12 tone combin
ations [NOTE: actually,
they are capable of generating 16 combin
ations, but normally do
not have the extra 4 keys required.  For
 more info on this, see
the bulletin on silver boxes].

The power required by a keypad is about 
25 volts, but they will
work with as little as 15, thereby allow
ing the use of two 9-
volt radio batteries.  As you may have g
uessed, they are also
designed to operate with a telephone typ
e speaker (and phone
line), and not the standard 8-ohm speake
r which needs to be used
for adequate volume.  To accompolish thi
s, we use a matching
transformer, this is one of those miniat
ure ones available at
Radio Shack.  Enough of the theory, now 
for the circuit.

You will need:

A touch tone keypad
A miniature 1000 to 8 ohm transformer (R
adio Shack # 273-1380)
A standard 8-ohm speaker
Two 9-volt radio batteries
Two 9-volt battery clips
A case to put it all in (optional)

A few construction notes, I suggest that
 you solder and tape all
connections.  It is also important to re
ad this entire bulletin
before attempting to construct this.

First, connect the RED wire of the trans
former to either
terminal on the speaker.  Now connect th
e WHITE wire from the
transformer to the other terminal on the
 speaker.  Next, connect
the RED (positive) wire of one battery c
lip to the black wire of
the other battery clip.  Now connect the
 the remaining RED wire
on the second battery clip to the GREEN 
wire from the touch tone
pad.  Connect the BLUE wire from the tou
ch tone pad to the
ORANGE-and-BLACK striped wire from the t
ouch tone pad.  To these
two wires, now connect the remaining bla
ck lead from first
battery clip.  You have now finished the
 power connection to the
keypad.  Connect the BLACK wire from the
 keypad to the BLUE wire
on the transformer.  Next connect the RE
D-and-GREEN striped wire
from the keypad to the GREEN wire on the
 transformer.  The BLACK
wire on the transformer should not be co
nnected to anything,
along with quite a few wires from the ke
ypad.  The connection of
the keypad is now complete.  All you hav
e to do is connect two
nine volt batteries to the battery clips
, and you'll be ready to
go. You may want to mount it in a case f
or easy portability.
Note that the silver box modification CA
N be made to this unit,
allowing complete remote phreaking.  Whe
n none of the buttons
are pressed, this unit uses NO power, th
ereby eliminating the
need for a power switch, and extending t
he life of the
batteries.

The following are the frequency combinat
ions generated by each
button on the keypad.

KEY     FREQ. #1        FREQ. #2
---     --------        --------
1       697             1209
2       697             1336
3       697             1477
A       697             1633

4       770             1209
5       770             1336
6       770             1477
B       770             1633

7       852             1209
8       852             1336
9       852             1477
C       852             1633

*       941             1209
0       941             1336
#       941             1477
D       941             1633

All frequencies are measured in Hertz
Note that A,B,C and D are not normally p
resent (except for silver
boxes)


                        That's all for n
ow, leave all
                        questions, comme
nts, etc. in
                        a message to me.


                        DATA PHONE
                        **********


Bulletin
 to print, <L> for list, or <RETURN> to 
