// AT&T Public Phone 2000i
//
// by dual_parallel
//
// http://www.oldskoolphreak.com

	The AT&T PublicPhone 2000i is the new version of AT&T's PublicPhone
2000, both found predominantly at airports.  The PP2000i is an Internet-
enabled phone: it has a keyboard, a touchpad, a color touch screen, a
handset and internet access.  Users can access free sites (read:
advertising) or pay $0.25 per minute, $1.00 minimum, for internet access.
Phone calls can be placed by picking up the handset and dialing with the
touch screen keypad that appears.  Past that, this article will delve a
little deeper into the PP2ki.
	The PP2ki runs on NCR hardware (Class: 2352, Model: 0100), has a
larger screen than the 2000, has an IR port and accepts bills and cards.
Although the processor is unknown, these boxes do have 64MB RAM.  All
function keys have been retained on the keyboard.  Normally, this would not
be a problem, but AT&T also chose Windows NT 4 for the operating system.
	Prior to NT 4 Service Pack 3 or 4, one could press and hold
Ctrl+Shift+Esc to open infinite Task Managers, consume system resources,
and crash a machine.  PP2kis use Service Pack 6 so this bug has been
fixed... sort of.  Now, if someone presses Ctrl+Shift+Esc he/she will
receive a Task Manager error window that states, "Task Manager has been
disabled by the administrator."  Continuing to hold Ctrl+Shift+Esc will
open infinite Task Manager error windows and guess what, consume system
resources and not crash, but reboot the machine.  (Note: This method _can_
crash a PP2ki and render it temporarily useless.)  As the machine reboots,
use the function keys, F2 specifically, and enter setup mode.  You will
receive Phoenix BIOS password screen.
	Call a toll-free ANAC and get the number of the phone.  Call the
phone and you'll find that it picks up with a modem much like a COCOT.  I
called one phone and pressed Ctrl+Shift+Esc while it was ringing and it
rebooted.  This time though I received a black screen with the MAC address
of the phone and a DHCP message.
	Beyond this, no further access has been gained on this phone.
Granted these phones are a little harder to explore because of their
placement, these phones do hold great promise.

Update
------
I just called Technical Support and obtained some info...

1. When calling Technical Support, have a phone location and a phone ID
   number ready.  Find the phone ID by clicking NEED HELP? and then
   Technical Support at the bottom (support.html).  I've included some ID
   numbers below.

2. 2000PPIs, as AT&T calls them, report in automatically every 30 minutes.

3. 2000PPIs report only to AT&T.

4. They hold a maximum of 175 bills.  One phone in particular had 181
   bills for a total of $221 and promptly called in for service.

PP2ki Phone Numbers / ID Numbers:
   303-342-8052 / 00002496
   303-342-8334 / 00002558

PP2ki Phone Number / MAC Address:
   303-348-9938 / 08 00 0E 36 B8 A9

Technical Support:
   877-412-8324

http://www.att.com/public/public2000i.html