


      ปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปป
      'A guide to the i-Post Universal Box system'
      ปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปปป


ป
Written by: The Clone
Date: Tuesday November 10, 1999
ป



ฦ Introduction ฦ


  Approximately five months ago (in late June of 1999),
I was hand-scanning an 1-800 INWATS exchange, when I 
came across an automated voice-mail system.

This voice-mail system said: "You have reached i-Post 
Box number 1-800-xxx-xxxx. To leave a voice message 
press 1, to send a fax press 2, to send a page press 3."

Like most voice-mail systems, the command for the passcode
prompt is either * or # on a touch-tone telephone.
What I did was I pressed one and waited to be asked for
the pin number.

No surprise there, it said: 
"Please enter your pin code, followed by the pound (#) sign."

I thought "Well here goes nothing.", I entered '1234' and #.
"i-Post Universal Box main-menu" the system said. What does 
that mean? It means I guessed the correct passcode on my first 
try. Not bad. =)

As I continued to skan, I continued to find more i-Post
Universal Boxes with the same default passcodes.

Like all vmb's I've spoken about in previous documents,
options/commands/features are different and need to be talked
about. That's what I'll explain in the next section.

--

ฦ Options/Commands/Features ฦ

After the "i-Post Universal Box main-menu" speech,
the following options are available to choose from:

Main-Menu:

#1. "To hear your messages press 1"
#2. "To compose a new message press 2"
#3. "To configure your account press 3"
#4. "Or to return to the previous menu press the star (*) key"


#1. All new messages are played in order from the time received.
   For example, if Billy left you a message at 1:00pm and Suzy
   left you a message at 2:00pm, you'd hear Suzy’s message first.

   [saved messages:]

   If you received voice-mail messages in the past and then saved
   them, you'll hear them after your new messages. You'll be
   prompted with the following options:

   "To save this message press 2", "To delete press 5",
   "To replay press 4", and "To skip press 6".


#2. When composing a new message, the automated voice says:
    "Enter the i-Post box number followed by the pound (#) key."

    Obviously you can't send messages to anyone but i-Post users,
    but if your phreaker friends have i-Post accounts, it's a good
    way to communicate in privacy.

    Just so you know, an i-Post box # is the 800-number of the user
    you're trying to reach.


#3. Configuring your account is easy. The options are as follows:

    "To change your pin code press 1" - You are asked to enter a
     pin-code (twice) followed by the pound (#) sign.

    "To change your greeting press 2" - This is what people will
    hear when they call your i-Post number.

    "To change your fax number press 3" - If you have a fax number,
    enter it on the prompt and press # when finished.

    "To change your pager number press 4" - This neat option can
    be set up to alert your pager if you have any I-Post messages.
    If you don't have a pager, just have it forward to your I-Post
    800-number.

    "Or return to the previous menu press the star (*) key"
    - This sends you back to the main-menu.

#4. This sends you back to the main-menu.


Features:

The most appealing aspect of this system is that your account is
simply an 800 number. No extensions to pass, to operators to deal
with. Impressive you say? I agree.


Your account lets you:

* receive voicemail.
* retrieve your faxes sent to this number using faxback or fax
  forwarding.
* retrieve your pages--iPost will read pages to you.
* forward messages, reply to messages, or send new messages.

--

ฦ How do I find/hack an i-Post Universal Box? ฦ

I've said it before and I'll say it again, the best method
to finding an i-Post Universal Box is to skan for one.

"Could I use my war-dialer that picks up vmbs?"

I suppose you could, but what are the chances that the
software you're using is going to recognize an i-Post number?

Your best bet would be to take some time by manually skanning
for a box. Some prefixes to skan are:

   + 800-5XX-XXXX

   + 800-6XX-XXXX

   + 800-7XX-XXXX

   + 800-8XX-XXXX

   + 800-9XX-XXXX

-
Hacking an account:

In the introduction I told you that I pressed #, '1234', #.
I haven't run across any other boxes that didn't work when
I entered those four digits. If the automated voice says:
"Invalid pin. Please re-enter the pin or call the helpdesk for
assistance." then you're shit out of luck or you can attempt
to brute-force your way into it though I wouldn't recommend it.
Most if not all vmb systems log all failed attempts and ANI the
NPA and phone number you're calling from. So don't do this at
home.

Other defaults you can try are:

1111, 1999, 2000, 2222, 3333, 4444,
5555, 5678, 9999, 0000, etc.

[Note: passcodes can be from 4-8 digits long]

--

ฦ Useful Links ฦ

http://net-savvy.com/internetservices/inbox.shtml
http://www.ipost.net
http://www.pcworld.com/news/daily/data/0397/970306175949.html
http://www.onebusinessplace.com/orlando/private/message.html

--

ฦ Where is i-Post Located? ฦ

The i-Post Headquarters is located in San-Jose California
and is owned and operated by InterResearch & Development Group.
If you visit the pcworld link above, you'll find extended
information on this system.

--

There you have it. The i-Post Universal Box system. Yet another
advanced voice-mail system with lacking security features.
Okay... I need a beer.


ฦ Contact ฦ

ป URL: http://nettwerk.hypermart.net - Nettwerked
ป E-mail: webmaster@nettwerk.hypermart.net


                      A 
              N E T T W E R K E D
                 P R O D U C T