Author Topic: Messing with mall cops.  (Read 5091 times)

Offline RFBURN26

  • Newb
  • *
  • Posts: 11
  • 1337 13V3L: +6/-0
Messing with mall cops.
« on: October 12, 2010, 08:21:10 AM »
As most of you probably already know messing with fast food workers has become much more difficult since the advent of digital radio. Here's a link about some of the more common equipment you'll see on fast food workers heads these days.
http://www.ist4pos.com/blog/?p=224

And while exploiting this technology is still possible with a computer controlled radio and the right software (ill get to that later), it's still a lot harder than it was with the straight analog of the old days. However, there are still targets using analog in the clear.

Namely, Mall Cops. If you hop on www.cityfreq.com and look up your local area, chances are you'll find the mall security frequencies listed there. They may not all be active but it will narrow down your search if you're limited on the equipment end.

For example after checking my local area I found three freq's allotted to the mall:
452.225
461.25
466.25

Now if you know anything about RF, you'd know that at these freq's communication is going to be pretty short range. Cityfreq even let me know that the Radio base station put out a max power of 10W. Probably powerful enough to reach out 1000m or so in an open environment. Thus all my searching could be done from the parking lot, but the base station is not what we are after, it's the individual mall cops that are the targets here.

What you want to do here is scan from the mall parking lot, find out exactly which freq's are what. During my search I discovered that 461.25 was the only active mall freq, single channel, simplex. Easy day. That basically means that everyone is communicating on the same freq, forward and reverse. Only problem with that is the base station will be able to out power my hand held.

The equipment I used consisted of a modified Yaseu FT-50 (I highly recommend grabbing one, if you can find one) which can transmit up to 5w. When modified its also capable of recieving from 76mhz-999mhz, and transmitting from 120-180mhz and 430-550mhz. It's slightly more powerful than most of the Mall Cop radios, but half that of the base station. I also used a ICOM V8 to monitor the actual police, you know, the ones that have some semblance of authority.

Now, once you've got your freqs and made note of your call signs the fun actually begins. Chances are you won't have enough power to mess with anyone from the parking lot, short of the mobile units outside. What you need to do is head inside the mall and take up a position on a nice comfy, out of the way bench. A single ear bud and small Mic would help, but in reality are not necessary. Best way to cover your tracks is just to pretend you're on a cell phone chatting away.

Now since you've made note of the call signs it shouldn't be to difficult to hop onto their Net. Start off slow, but you are going to want to call in a major disturbance in front of footlocker at least once every fifteen minutes, or until your covers blown. Use this at your discretion, I'm sure you all can come up with a few interesting things to cause a little chaos.


RFBURN

Offline Lestan Gregor

  • PLA Bitch
  • *****
  • Posts: 746
  • 1337 13V3L: +64/-30
Re: Messing with mall cops.
« Reply #1 on: October 13, 2010, 10:49:28 AM »
radioreference.com is pretty sweet too. Do those new radios use DCS or something more advanced?

Offline RFBURN26

  • Newb
  • *
  • Posts: 11
  • 1337 13V3L: +6/-0
Re: Messing with mall cops.
« Reply #2 on: October 14, 2010, 05:31:27 PM »
It really depends on the model and how they are configured. I've been messing with some ICOM PRC's (computer controlled scanners) and different software combination's that can crack out the digital signal. I'll let you know when I find a viable way to exploit them.

RFBURN

Offline AmishGangsta

  • =/\=
  • Phone Loser Abuser
  • *****
  • Posts: 240
  • 1337 13V3L: +16/-3
  • DU WERDEST EINEN KRANKENSCHWESTER BRAUCHEN!!!
Re: Messing with mall cops.
« Reply #3 on: October 18, 2010, 09:46:56 AM »
I've been messing with some ICOM PRC's (computer controlled scanners)...

Which models, specifically?
« Last Edit: October 18, 2010, 09:48:30 AM by AmishGangsta »
The only acceptable form of commerce is a proper and shady cash-only weapons deal.

"If there's anything i know, it's that people listen to a guy with a yardstick." - Richard Cardo

I didn't dial the wrong number, you picked up the wrong phone.

Offline RFBURN26

  • Newb
  • *
  • Posts: 11
  • 1337 13V3L: +6/-0
Re: Messing with mall cops.
« Reply #4 on: October 18, 2010, 01:38:53 PM »
100's for now, working on picking up a 1000.

Offline AmishGangsta

  • =/\=
  • Phone Loser Abuser
  • *****
  • Posts: 240
  • 1337 13V3L: +16/-3
  • DU WERDEST EINEN KRANKENSCHWESTER BRAUCHEN!!!
Re: Messing with mall cops.
« Reply #5 on: October 18, 2010, 02:18:13 PM »
I've  been meaning to try a discriminator tap on one of my older radios; it's either this one or the Pro-94...
The only acceptable form of commerce is a proper and shady cash-only weapons deal.

"If there's anything i know, it's that people listen to a guy with a yardstick." - Richard Cardo

I didn't dial the wrong number, you picked up the wrong phone.

Offline RFBURN26

  • Newb
  • *
  • Posts: 11
  • 1337 13V3L: +6/-0
Re: Messing with mall cops.
« Reply #6 on: October 18, 2010, 02:27:42 PM »
I think the PCR's have some serious potential since almost all the software for the newer ones (PCR 2500's) is backwards compatible. Only major drawback of the 100 I've seen is that its range is .5-1300mhz (minus cellular)while the 1500 and up can cover .5-3000mhz. Most of the interesting signals are going to be below 1300mhz though so it's not too much of a problem. (That is until I find the right software to crack out CMDA-2000)


RFBURN

Offline Lestan Gregor

  • PLA Bitch
  • *****
  • Posts: 746
  • 1337 13V3L: +64/-30
Re: Messing with mall cops.
« Reply #7 on: October 18, 2010, 10:07:21 PM »
I've never owned the "black box" type of transceiver before. Is it shielded from interference from your computer? 

Offline AmishGangsta

  • =/\=
  • Phone Loser Abuser
  • *****
  • Posts: 240
  • 1337 13V3L: +16/-3
  • DU WERDEST EINEN KRANKENSCHWESTER BRAUCHEN!!!
Re: Messing with mall cops.
« Reply #8 on: October 19, 2010, 05:54:52 AM »
Is it shielded from interference from your computer?

Yes, but not as well as it could be. Performance is better in some bands than in others, and this review (which applies to both the PCR-1000 and 100) breaks it down pretty well:

http://www.strongsignals.net/access/reviews/reviews.cgi?type=display&rtype=rev&class=recv&num=017



The only acceptable form of commerce is a proper and shady cash-only weapons deal.

"If there's anything i know, it's that people listen to a guy with a yardstick." - Richard Cardo

I didn't dial the wrong number, you picked up the wrong phone.

Offline immabadspellor_

  • PLA Underling
  • *
  • Posts: 106
  • 1337 13V3L: +27/-2
Re: Messing with mall cops.
« Reply #9 on: October 24, 2010, 06:23:58 AM »
A lot of fast food joints are still using the intermediate step between VHF/lower-UHF headsets and digital, which would be ~900MHz wide FM analog, similar to old cordless phones.  Commercial radio gear for transmitting on these frequencies is going to be narrow FM, so no good without extreme modifications.  Wireless speaker transmitters or intercoms would be a better option, especially if they have a VFO.  I know the old Radio Shack speakers did have a dial on them.  Never tried it for this purpose, though.

The problem with digital is transmitting.  Sure you manage to crack the receiving end but how are you going to manage transmitting?  Analog on the same frequency would just impede radio traffic. 

There are other things that are analog, too.  Shopping cart wheel locks (easily replicated pulsed carrier), emergency sirens (DTMF), EAS...

Offline RFBURN26

  • Newb
  • *
  • Posts: 11
  • 1337 13V3L: +6/-0
Re: Messing with mall cops.
« Reply #10 on: October 28, 2010, 04:58:33 PM »
There are far more interesting digital signals to crack out than fast food drive through freqs. However amusing they may be.

I just managed to pick up an AOR8200 on ebay for $155. Should make life quite a bit easier, I'll post a separate topic about the fun things you can do with these.

RFBURN

Offline AmishGangsta

  • =/\=
  • Phone Loser Abuser
  • *****
  • Posts: 240
  • 1337 13V3L: +16/-3
  • DU WERDEST EINEN KRANKENSCHWESTER BRAUCHEN!!!
Re: Messing with mall cops.
« Reply #11 on: October 29, 2010, 09:47:07 AM »
I just managed to pick up an AOR8200 on ebay for $155.

Original, Mark II or Mark III?



The only acceptable form of commerce is a proper and shady cash-only weapons deal.

"If there's anything i know, it's that people listen to a guy with a yardstick." - Richard Cardo

I didn't dial the wrong number, you picked up the wrong phone.

Offline RFBURN26

  • Newb
  • *
  • Posts: 11
  • 1337 13V3L: +6/-0
Re: Messing with mall cops.
« Reply #12 on: October 29, 2010, 03:26:10 PM »
Original (The green military style). Mark II's typically run a bit over 300 and Mark III's as high as 900. THe one I picked up includes the serial cable which is a huge plus as they are expensive and hard to find. With that and some software .like the butel software I mentioned in a previous post, they can be pretty interesting. They work real well as a signal sniffer for frequency mapping, and with a directional antenna (that can be attenuated) you can get some hand held DF going.

RFBURN