JOHN DRAPER▊
The man who found a 2600 Hz skeleton key to the American phone network inside a box of breakfast cereal — the original phone phreak, "Captain Crunch," the blue-box legend whose story ran in Esquire, reached a young Steve Wozniak, and helped light the fuse under Apple. That part is real, and it is enormous. The other part is why the community that built statues to him took them down: in 2017 multiple men told BuzzFeed News he had used his celebrity at hacker conferences to arrange "energy work" sessions where he touched them without consent. He was banned from DEF CON, HOPE, and others. He was never charged with a crime. Both halves of the legend are on this page.
Ma Bell is a system I want to explore. It’s a beautiful system, you know, but Ma Bell screwed up.
John Draper ("Captain Crunch"), quoted in Ron Rosenbaum’s 1971 Esquire article "Secrets of the Little Blue Box" — Rosenbaum, revisiting the piece in Slate (2011)
- WHO
- John Thomas Draper — "Captain Crunch," b. March 11, 1943 FACT
- LEGACY
- The original phone phreak: the 2600 Hz Cap’n Crunch whistle, the blue box, and the 1971 Esquire story that reached Wozniak (with Jobs present) and seeded the blue-box venture that preceded Apple FACT
- THE DRAMA
- In Nov 2017 multiple men told BuzzFeed News he used conference celebrity to arrange "energy work" sessions with unwanted physical contact; banned from a number of hacker cons (see DEF CON) ATTRIBUTED / BAN IS FACT
- RECORD
- Separate and earlier: toll-fraud / wire-fraud convictions in the 1970s (public record, unrelated to the 2017 allegations). No criminal charge in connection with the 2017 allegations FACT
- STATUS
- BANNED — NOT CRIMINALLY CHARGED — a founding legend of the scene, barred by the scene
This file is not an accusation; the accusations are BuzzFeed’s reporting and the named men’s. What is documented and undisputed sits on two sides of the same person. On one side: one of the most consequential technical stories in the history of the scene — a whistle, a blue box, an Esquire article, and two kids named Steve. On the other: a set of allegations serious enough that the field’s biggest conferences barred him for life, stated by DEF CON in its own transparency report. The through-line is not that the legend was fake. It is that the legend was real, and the community decided the legend was not a defense.
the drama timeline
ACT I — THE WHISTLE (1943–1971)
A cereal-box toy turns out to be a skeleton key to the largest machine on earth, and the man who notices becomes the first celebrity of a subculture that does not exist yet.
-
c. 1969–71
2600 hertz, free with cereal
Draper learns that the toy bo’sun whistle packed in boxes of Cap’n Crunch emits a clean 2600 Hz tone — the exact frequency AT&T’s long-distance switches used for in-band signaling. Blow it into the handset and the network thinks the line is idle, handing you a free trunk. He takes the handle "Captain Crunch" and builds the "blue box" to synthesize 2600 Hz and the other control tones on demand.
-
OCT 1971
"Secrets of the Little Blue Box"
Ron Rosenbaum’s Esquire feature on phone phreaking — built heavily on interviews with Draper — puts Captain Crunch and the blue box in front of a national audience. It is the founding document of the phreaking legend and the origin of the "system I want to explore" ethos he is quoted on above. The magazine 2600: The Hacker Quarterly would later take its name from the frequency.
ACT II — THE ARTICLE THAT REACHED THE TWO STEVES (1971–1979)
The story lands on exactly the right workbench in the South Bay, and phone company law lands on Draper.
-
1971–72
Wozniak reads it. Jobs is in the room.
Steve Wozniak reads the Esquire piece, seeks Draper out, and — with Steve Jobs — builds and sells blue boxes of their own. Woz has told the story for decades: the blue box was the first thing he and Jobs made and sold together, the proof-of-concept partnership that ran straight into the founding of Apple in 1976. Draper’s influence on the two Steves is stated at full strength because it is real.
-
1972–79
Ma Bell wins the round
The exploring has a cost. Draper is arrested and convicted on toll-fraud and related wire-fraud charges across the 1970s, serving time in federal and state custody. This is public record, and it is entirely separate from the 2017 conference matter that follows — a phreaking prosecution, decades earlier, that only burnished the outlaw legend.
ACT III — THE CONFERENCE CIRCUIT AND THE ALLEGATIONS (2017)
Forty years on he is a fixture at the cons — the living founder, the man who inspired Apple — until six men tell a reporter what the celebrity was being used for.
-
NOV 17, 2017
BuzzFeed News publishes
BuzzFeed News (Kevin Collier) reports that, per interviews with six men with direct knowledge, Draper used his celebrity to arrange private sessions with young attendees — some described as teenagers — under the framing of "energy work," "exercises," "stretches," or "body tune-ups," during which, three of them said, he engaged in unwanted physical contact. These are the accounts as reported by BuzzFeed and attributed to those men; they are not this archive’s findings, and no graphic detail is reproduced here.
-
NOV 2017
More accounts, and his response
A BuzzFeed follow-up reports additional men making similar claims. Draper’s response, as reported: he initially declined to engage — through a spokesperson, "At this time, we will not be making any statement nor answering any questions" — and subsequently acknowledged the "energy workout" sessions, said he may have been aroused during some of them, apologized, and cited having Asperger syndrome. His side is recorded here as the reporting recorded it. Per BuzzFeed, none of the three men who detailed experiences had filed police reports at the time.
ACT IV — THE BANS (2017–)
The scene that made him a legend does the one thing it can do about a legend: it revokes the badge.
-
NOV 2017
The cons close the door
Within days, the field’s marquee events bar him. DEF CON (Las Vegas), HOPE (New York), and ToorCon (San Diego) say he will not be welcome; HOU.SEC.CON in Houston, where he had been slated as closing keynote, cancels and bans him. A founding figure of the phreaking scene is put outside its rooms.
-
2017 –
On the transparency report, in writing
DEF CON later formalizes it in its own Transparency Report, in language it chose: "John Draper aka Captain Crunch (2017): Banned based on multiple public reports." He appears on the same 2017 list as Jacob Appelbaum and Morgan Marquis-Boire — the wave of misconduct reckonings that ran through the security scene that year, each banned under the identical "multiple public reports" formula.
both sides, on the record
What is documented: six men told BuzzFeed News that Draper used conference celebrity to arrange "energy work" sessions with unwanted physical contact, some with young attendees; a follow-up reported more accounts. These are the men’s accounts, reported and attributed — serious, specific, and on the record with a named outlet [2] [3].
The institutions acted: DEF CON, HOPE, ToorCon, and HOU.SEC.CON barred him, and DEF CON committed the ban to writing in its transparency report — "banned based on multiple public reports." Private bodies weighed the reports and shut the door [1] [4].
He did not fully deny it: by the reporting, Draper acknowledged the "energy workout" sessions, allowed that he may have been aroused, and apologized — his own partial acknowledgment, not ours [3].
He was never charged with a crime here. For all the seriousness of the accounts, there was no criminal charge and no conviction in connection with the 2017 allegations, and per BuzzFeed the men who detailed experiences had not filed police reports at the time. The sanction was private — conference bans, not a courtroom [2].
His side, as he gave it: Draper framed the sessions as "energy" work and exercise, said he may have been aroused during some, apologized, and has cited having Asperger syndrome. That is his account, recorded at full strength — the reader can weigh it against the men’s [3].
The legacy is not in dispute. None of the 2017 matter touches the technical record: the 2600 Hz whistle, the blue box, the 1971 Esquire story, and the through-line to Wozniak, Jobs, and Apple are real and stand on their own. A person can be a genuine founder of a field and still be shown the door by it [5].
YOU DECIDE
Scoped to the claims, never the man beyond them. The phreaking legend is settled fact and it is huge — the whistle, the blue box, the article, the two Steves. The 2017 matter is documented too, but it lives in different registers: the bans are fact, stated by DEF CON in its own words; the misconduct is allegation, attributed to BuzzFeed’s reporting and the men who spoke to it, and Draper was never criminally charged over it. He did not flatly deny the conduct; he reframed and apologized for it. Hold all of that at once: the field would not exist in the shape it does without him, and the field decided that was not a reason to keep the door open.
The archive does not deify, and it does not convict. It keeps the Esquire article, the men’s accounts, the ban notice, and his answer — and lets you read all four.
evidence locker
THE 2017 BANS — PRIMARY
DEF CON — Transparency Report FACT — DEF CON’s own verbatim entry: "John Draper aka Captain Crunch (2017): Banned based on multiple public reports," on the same 2017 list as Jacob Appelbaum and Morgan Marquis-Boire.
defcon.org/html/links/dc-transparency.html
THE LEGACY — STATED AS FACT
Wikipedia — John Draper ATTRIBUTED — the 2600 Hz Cap’n Crunch whistle, the blue box and in-band signaling, the influence on Wozniak and Jobs, the 1970s toll-fraud convictions, and the 2017 allegations and response.
en.wikipedia.org/wiki/John_Draper Slate — Ron Rosenbaum on "Secrets of the Little Blue Box" FACT — the author of the 1971
Esquire article revisits it; source of Draper’s first-party "Ma Bell is a system I want to explore" quote and the article’s reach to Wozniak and Jobs.
slate.com/…/secrets_of_the_little_blue_.html
CONTEXT & CROSS-LINKS
The standard. John Draper is a public figure of more than fifty years’ standing. His phreaking legacy — the 2600 Hz whistle, the blue box, the 1971 Esquire story, and the line to Wozniak, Jobs, and Apple — is stated as fact, because it is one, and it is given at full strength. The 2017 conference bans are stated as fact and sourced to DEF CON’s own transparency report and contemporaneous reporting. The misconduct claims are stated as ALLEGATIONS, attributed to BuzzFeed News and the men who spoke to it, with no graphic detail and no re-victimization; they are never this archive’s finding. Draper was not criminally charged in connection with them, and his response — the reframing, the apology, the stated Asperger syndrome — is recorded at full strength. No motive is asserted and no crime is alleged. The burden of proof is on us, not the subject. If a line here couldn’t survive a defamation challenge, it wouldn’t be on this page.