Wind following wind. Penetration through persistent signal. 2600 Hz. Single frequency. Play it into a long-distance trunk line—the AT&T switch hears 'idle trunk,' drops billing, enters control mode. Send multi-frequency tones and you're routing calls anywhere. Phreaking worked because in-band signaling couldn't distinguish control tones from user audio. The system heard 2600 Hz and opened the gate. Not force—gentle penetration by speaking the system's language. John Draper found a Cap'n Crunch whistle that produced nearly perfect 2600 Hz. Joe Engressia, born blind with perfect pitch, whistled control tones directly. The network penetrated by human voice. Success through what is small: precise signal, persistent use. Here's what people miss: in-band signaling failed because trust and content shared the same channel. When control signals travel with user data, perfect mimicry becomes possible. AT&T's fix: Signaling System 7—out-of-band control on a separate network. Playing 2600 Hz into voice calls no longer reaches switch logic. Wind can't penetrate when there's no opening. Your audit: find where your systems trust signals they can't verify. API requests that rely on header values alone. Authentication tokens passed in predictable patterns. Network protocols where credentials and content share channels. The modern parallel: understanding how systems distinguish insider from outsider—not to break in, but to know where 'legitimately' is under-protected. The warning: trust boundaries that rely on signal matching alone fail when outsiders learn the signal. Defense requires separation—control channels distinct from content channels, verification independent of credentials. Wind penetrates; architecture must account for persistence.