Live data from Hacker News

The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

benthamsgaze.org

81–90 of 91 posts

Re: The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

#81
post #7

"Numbers station" is a weird analogy, because the idea of a numbers station was to broadcast messages to undercover operatives in a way that can be received using unmodified (and therefore non-suspicious) household radio receivers. Here, it appears to be a rekeying system for specialized military gear.

[dead]

Re: The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

#82
post #10

Earlier quoted context omitted.

Yeah its not a number station at all.

I disagree? The point of a numbers station is that it broadcasts in the clear and anyone with a receiver can get it, but only people with the appropriate decryption key can make any use of it. Since it's broadcasting all the time, there's no need for steganography or covert transmission. That's exactly what a numbers station is. Where the article loses me is the implication that this is somehow sinister or beyond the…

If you need a key it's not "in the clear".

Re: The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

#83
post #7

"Numbers station" is a weird analogy, because the idea of a numbers station was to broadcast messages to undercover operatives in a way that can be received using unmodified (and therefore non-suspicious) household radio receivers. Here, it appears to be a rekeying system for specialized military gear.

You're assuming it requires specialized military gear, as opposed to consumer gear with a flashed firmware. I believe GPS L1 C/A subframe 4 is on the ordinary L1 C/A civil signal, which means commercial receivers can receive it. They just can't (ordinarily) decrypt it. But a few KB of extra code would change that. A pretty broad set of Android phones can receive this data, without even needing to reflash the GPS firm…

> You're assuming it requires specialized military gear, as opposed to consumer gear with a flashed firmware.

The author studied this supposition [code intended for mil gear] for some time and learned this.

    On 26 May 2011, all 31 active GPS satellites switched to the
    0xAA placeholder within just a few hours.
    This rapid daily change perfectly matches the operational
    rollout of the U.S. Over-the-Air Distribution (OTAD) network.

Re: The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

#84

Earlier quoted context omitted.

You're assuming it requires specialized military gear, as opposed to consumer gear with a flashed firmware. I believe GPS L1 C/A subframe 4 is on the ordinary L1 C/A civil signal, which means commercial receivers can receive it. They just can't (ordinarily) decrypt it. But a few KB of extra code would change that. A pretty broad set of Android phones can receive this data, without even needing to reflash the GPS firm…

> You're assuming it requires specialized military gear, as opposed to consumer gear with a flashed firmware. The author studied this supposition [code intended for mil gear] for some time and learned this. On 26 May 2011, all 31 active GPS satellites switched to the 0xAA placeholder within just a few hours. This rapid daily change perfectly matches the operational rollout of the U.S. Over-the-Air Distribution (OTAD)…

That doesn't really answer the question of whether it could be used to deliver "numbers station" type messages. Encrypted key material and enciphered messages should be indistinguishable. There are 18 bytes of high-entropy ciphertext that could be used for both purposes.

Re: The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

#85
> To make processing this massive dataset practical, we built a Julia pipeline to extract the bits directly into a DuckDB database.

The raw data is a bit more than 1GB per annum.

The data of interest is 176 bits every 12.5 minutes for 19 years. That is, about 17MB of data. Possibly multiplied by the number of satellites, roughly thirty.

It's not big data.

Re: The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

#86

Earlier quoted context omitted.

> You're assuming it requires specialized military gear, as opposed to consumer gear with a flashed firmware. The author studied this supposition [code intended for mil gear] for some time and learned this. On 26 May 2011, all 31 active GPS satellites switched to the 0xAA placeholder within just a few hours. This rapid daily change perfectly matches the operational rollout of the U.S. Over-the-Air Distribution (OTAD)…

That doesn't really answer the question of whether it could be used to deliver "numbers station" type messages. Encrypted key material and enciphered messages should be indistinguishable. There are 18 bytes of high-entropy ciphertext that could be used for both purposes.

> That doesn't really answer the question of whether it could be used to deliver "numbers station" type messages.

This is true. I suggest that I didn't answer that question because my comment was only addressing the below assertion.

>> You're assuming it requires specialized military gear, as opposed to consumer gear with a flashed firmware.

As for the numbers station reference in the article, that phrasing seems silly. I think it distracts a bit from the article.

Re: The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

#87

> To make processing this massive dataset practical, we built a Julia pipeline to extract the bits directly into a DuckDB database. The raw data is a bit more than 1GB per annum. The data of interest is 176 bits every 12.5 minutes for 19 years. That is, about 17MB of data. Possibly multiplied by the number of satellites, roughly thirty. It's not big data.

The dataset was 136GB (about 7GB per annum), and the Python implementation took 45 hours for each run. The Julia code that processed the whole dataset and built the database took 5 hours, which made iterative development much more pleasant. Of course, later stages in the pipeline had much less data to process and so were much faster. With metadata and indices, that was about 3GB. It's bigger than your estimate since there are multiple observations of the same satellite.

Re: The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

#88
post #56
post #51

Earlier quoted context omitted.

Nobody is disputing that it is a legitimate choice. It is also legitimately off-putting. If their audience is into it though, good for them.

Honestly, I was surprised to see this take. Their tone just makes me miss the original The Intercept and other used-to-be-heavy-hitters. Were they also too punchy for you? (I sound possibly sarcastic, but am genuinely curious)

I read The Intercept rarely and never saw enough of them to form any kind of take on their “typical” headline-style. 404 Media has been popping off everywhere though—including here-since they launched.

This may sound pre-judgmental, but a headline is an advertisement & marketing for the article. A headline can get someone in that might otherwise have skipped the article, but it can just as easily dissuade people who might otherwise be interested in the subject matter.

Re: The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

#89
post #88
post #56

Earlier quoted context omitted.

Honestly, I was surprised to see this take. Their tone just makes me miss the original The Intercept and other used-to-be-heavy-hitters. Were they also too punchy for you? (I sound possibly sarcastic, but am genuinely curious)

I read The Intercept rarely and never saw enough of them to form any kind of take on their “typical” headline-style. 404 Media has been popping off everywhere though—including here-since they launched. This may sound pre-judgmental, but a headline is an advertisement & marketing for the article. A headline can get someone in that might otherwise have skipped the article, but it can just as easily dissuade people who…

Meanwhile the NBC headline can make the story seem like a normal matter of course.

Re: The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography

#90
post #7

"Numbers station" is a weird analogy, because the idea of a numbers station was to broadcast messages to undercover operatives in a way that can be received using unmodified (and therefore non-suspicious) household radio receivers. Here, it appears to be a rekeying system for specialized military gear.

So, a number station sending a message 'detonate the bomb' isn't a number station, because most people don't have the bomb?
Post reply on HN