// Mervyn's Fun
//
// by slip
//
// http://www.oldskoolphreak.com

Mervyn's is a California-based department store currently owned by the
Target corporation.

There are some very simple ways to cause some mischief, but it requires
some basic knowledge. Main points of interest are: phone lines, registers,
cameras, security and protocol and free stuff.

First the phones; so simple it hurts me to write it.  The overhead
announcement system is available at any phone in the store (not payphones).
[Note: They aren't all at the service desk, there is even one in the
fitting room.]  The overhead announcements are key press "#" and "8" to
use it.  Fortunately this store uses very simple commands such as " 'L'
call (extension number)," or " 'L' (which is loss prevention or security)
to the ______ department."  This is extremely useful to identify the AP
(asset protection) agents.  Next, you will find that the operator can
assist you, because of how dense they are.  The extension is "0", wow! Big
surprise!  You can ask them for anything like account numbers etc.  Just
tell them "Hi, this is _______ from the _______ department."  

The register is another great tool for causing trouble.  They are IBM
mutants, but still IBM's.  They have an Ethernet connection to the
corporate office.  It is my deduction that they each have they're own IP
address.  The application the systems are using is: 

(POS Application Version 057[RPU], B57.12 [build])

Just so you know, POS means Point of Sales and they are each equipped
with a 3.5 inch floppy disk drive.  So now you're asking, "Isn't there some
kind of security codes or something?"  Why, yes!  There is a security number
you must type in at the start of a transaction.  It is the employee number
designated at the start of employ.  The number is four digits long and you
can find one of these numbers at the bottom of any receipt, usually
centered.  This number can get you into any register in the store.  Another
interesting fact about the receipt is the credit card number.  If a
customer has paid with a credit card, their receipt will have only the last
four digits shown.  However, when a customer uses a credit card, they are
required to sign a store copy of the receipt, which contains an entire
credit card number.  "But how do I get one?"  Well its simple my friend;
all of those magic pieces of paper are placed into a drawer directly below
the register.  They are in a small open box located on the left side.
There is usually about 50 to 200 credit card numbers in there, and there is
no key to open it!  However, if you are not into credit card fraud, then
there is another use for the register and that is...OPENING IT!  Yep, it's
possible to do and not get caught.  This is how its done: When there is
nobody around, approach the register, type in the four digit number, press
main menu, type in the number corresponding to office functions (usually
#4), then the number corresponding to no sale. You will come to a menu with
options such as "check drawer for advance," etc.  Any of them will work.
The drawer will open, and well, the big bills are in the bottom of the
drawer.  Always remember to close the drawer.

One big obstacle you might be pondering about is the camera problem, but
not all of them are real.  Unfortunately there is no way to tell.  However,
in new stores in nice areas (the burbs etc.) they are hardly watched.
But to make sure nobody is watching simply dial the operator and say "Hi
this is the _____ department, do we have "L" tonight?"  If they're there
on that particular night then just page "L" to a department so you know
they are indisposed.  It's practically fool proof.  Use it to your advantage.  
 
"L" or loss prevention is very funny in a way, only because they can't do
anything about you stealing unless they physically see you do it.  Even that
isn't a big deal; just take it into the dressing room where it is against the
law to place cameras.  However, you should keep in mind that the fitting
rooms are checked every half an hour and on the hour, so do some preparation.
Try not to pick anything with big white tags.  They are ICD (Inventory
Control Devices) and they will set off an alarm, which almost is never
checked; there is only a camera.  KEEP WALKING!  Before you get to that
point, it would be wise to know what the security team is actually looking
to identify a suspect: Out of season clothing, people making fast
selections, minorities and teens.  You will know if your suspected if
somebody is tailing you, you hear "L" paged overhead to the department
you're in, or if you are confronted by an employee for no reason if you
need help.  In summary, they can't do anything but try to scare you out
of pulling it off.  

Mervyn's is one of few stores that allow you to return merchandise without
a receipt.  If you want some free stuff, pickup some clothes (without being
seen and without tags) take them to any service desk and tell them you need
to return them but don't have a receipt.  They will ask for your driver's
license and then return it, giving you a voucher for the amount of the return.
There are two things you should know about this policy: 1. It works at Target
and Mervyn's (I don't know about any other Dayton & Hudson corp.) 2. You can
only do it three times before they turn you down.  So if you have an ID you've
found or mysteriously came into possession that looks like you, you can get
some free money with no tracks that can be traced.

So, in complete summation, it's easy and practically untraceable.  Remember,
there's no such thing as luck, there's only preparation and skill, and if
you have only skill...