frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Show HN: WP Float – Archive WordPress blogs to free static hosting

https://wpfloat.netlify.app/
1•zizoulegrande•1m ago•0 comments

Show HN: I Hacked My Family's Meal Planning with an App

https://mealjar.app
1•melvinzammit•1m ago•0 comments

Sony BMG copy protection rootkit scandal

https://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootkit_scandal
1•basilikum•4m ago•0 comments

The Future of Systems

https://novlabs.ai/mission/
2•tekbog•5m ago•1 comments

NASA now allowing astronauts to bring their smartphones on space missions

https://twitter.com/NASAAdmin/status/2019259382962307393
2•gbugniot•9m ago•0 comments

Claude Code Is the Inflection Point

https://newsletter.semianalysis.com/p/claude-code-is-the-inflection-point
2•throwaw12•11m ago•1 comments

Show HN: MicroClaw – Agentic AI Assistant for Telegram, Built in Rust

https://github.com/microclaw/microclaw
1•everettjf•11m ago•2 comments

Show HN: Omni-BLAS – 4x faster matrix multiplication via Monte Carlo sampling

https://github.com/AleatorAI/OMNI-BLAS
1•LowSpecEng•12m ago•1 comments

The AI-Ready Software Developer: Conclusion – Same Game, Different Dice

https://codemanship.wordpress.com/2026/01/05/the-ai-ready-software-developer-conclusion-same-game...
1•lifeisstillgood•14m ago•0 comments

AI Agent Automates Google Stock Analysis from Financial Reports

https://pardusai.org/view/54c6646b9e273bbe103b76256a91a7f30da624062a8a6eeb16febfe403efd078
1•JasonHEIN•17m ago•0 comments

Voxtral Realtime 4B Pure C Implementation

https://github.com/antirez/voxtral.c
2•andreabat•19m ago•0 comments

I Was Trapped in Chinese Mafia Crypto Slavery [video]

https://www.youtube.com/watch?v=zOcNaWmmn0A
1•mgh2•25m ago•0 comments

U.S. CBP Reported Employee Arrests (FY2020 – FYTD)

https://www.cbp.gov/newsroom/stats/reported-employee-arrests
1•ludicrousdispla•27m ago•0 comments

Show HN: I built a free UCP checker – see if AI agents can find your store

https://ucphub.ai/ucp-store-check/
2•vladeta•32m ago•1 comments

Show HN: SVGV – A Real-Time Vector Video Format for Budget Hardware

https://github.com/thealidev/VectorVision-SVGV
1•thealidev•34m ago•0 comments

Study of 150 developers shows AI generated code no harder to maintain long term

https://www.youtube.com/watch?v=b9EbCb5A408
1•lifeisstillgood•34m ago•0 comments

Spotify now requires premium accounts for developer mode API access

https://www.neowin.net/news/spotify-now-requires-premium-accounts-for-developer-mode-api-access/
1•bundie•37m ago•0 comments

When Albert Einstein Moved to Princeton

https://twitter.com/Math_files/status/2020017485815456224
1•keepamovin•39m ago•0 comments

Agents.md as a Dark Signal

https://joshmock.com/post/2026-agents-md-as-a-dark-signal/
2•birdculture•40m ago•0 comments

System time, clocks, and their syncing in macOS

https://eclecticlight.co/2025/05/21/system-time-clocks-and-their-syncing-in-macos/
1•fanf2•42m ago•0 comments

McCLIM and 7GUIs – Part 1: The Counter

https://turtleware.eu/posts/McCLIM-and-7GUIs---Part-1-The-Counter.html
2•ramenbytes•44m ago•0 comments

So whats the next word, then? Almost-no-math intro to transformer models

https://matthias-kainer.de/blog/posts/so-whats-the-next-word-then-/
1•oesimania•46m ago•0 comments

Ed Zitron: The Hater's Guide to Microsoft

https://bsky.app/profile/edzitron.com/post/3me7ibeym2c2n
2•vintagedave•49m ago•1 comments

UK infants ill after drinking contaminated baby formula of Nestle and Danone

https://www.bbc.com/news/articles/c931rxnwn3lo
1•__natty__•49m ago•0 comments

Show HN: Android-based audio player for seniors – Homer Audio Player

https://homeraudioplayer.app
3•cinusek•50m ago•2 comments

Starter Template for Ory Kratos

https://github.com/Samuelk0nrad/docker-ory
1•samuel_0xK•51m ago•0 comments

LLMs are powerful, but enterprises are deterministic by nature

2•prateekdalal•55m ago•0 comments

Make your iPad 3 a touchscreen for your computer

https://github.com/lemonjesus/ipad-touch-screen
2•0y•1h ago•1 comments

Internationalization and Localization in the Age of Agents

https://myblog.ru/internationalization-and-localization-in-the-age-of-agents
1•xenator•1h ago•0 comments

Building a Custom Clawdbot Workflow to Automate Website Creation

https://seedance2api.org/
1•pekingzcc•1h ago•1 comments
Open in hackernews

Somebody used spoofed ADSB signals to raster the meme of JD Vance

https://alecmuffett.com/article/143548
548•wubin•1w ago
https://archive.ph/VrEtg

https://globe.adsbexchange.com/?icao=adfdf9&lat=26.678&lon=-...

Comments

sammy2255•1w ago
This has gotta be some sort of federal crime
Scoundreller•1w ago
Doubt it did anything in RF, only sent packets to adsbexchange’s web service that its volunteers feed it.

Also Adsbexchange has had some… history:

https://www.reddit.com/r/ADSB/comments/10l2euc/adsb_exchange...

https://hackaday.com/2023/01/26/ads-b-exchange-sells-up-cont...

HNisCIS•1w ago
ADSB sites aren't any sort of official thing. You can send whatever data you want to them. Just because it's there doesn't mean it ever went over the air as an ADSB broadcast.
TimorousBestie•1w ago
An interesting question.

Assuming the FAA has the authority to enforce ADSB requirements (an open question post-Chevron), I can’t find any regulation saying non-aircrafts cannot transmit ADSB. Only ones saying aircrafts in certain categories must.

There’s probably some non-interference requirement somewhere (FCC spectrum licensing perhaps), but I’m not seeing it immediately.

All this is in the hypothetical that RF was transmitted, which as others point out it probably wasn’t.

15155•1w ago
(Assuming this were actually RF)

This is easily-prosecutable willful interference or possibly aircraft sabotage: ADS-B operates in licensed bands and uses an already highly-contended modulation scheme and transmission protocol.

esseph•1w ago
No reason to believe RF when you can just upload whatever data you want
fragmede•1w ago
They'll probably try and make a case of wire fraud and CFAA as the usual go tos if it wasn't in RF.
habinero•1w ago
"Wire fraud" means financial fraud, not "sending data over wires".
tjohns•1w ago
It would be under the FCC regs, not the FAA regs.

Whatever transmitter you're using would not be type-accepted for operation on the 1080 MHz or 978 MHz band. (47 USC § 301)

Additionally, RF operation with the intent of willful interference is inherently illegal. (47 USC § 333)

TimorousBestie•1w ago
Excellent, thanks.
fc417fc802•1w ago
What if you removed a genuine ADS-B unit from a plane and installed it in your vehicle?

Also does impersonation necessarily qualify as interference? Naively, I'd expect interference to refer to jamming.

jjwiseman•1w ago
A transponder in a car is not an "aircraft station" (§ 87.5), therefore it is not covered by aircraft "license-by-rule" (§ 87.18(b)), so transmitting would be operating without a valid authorization (§ 1.903(a)). https://www.ecfr.gov/current/title-47/chapter-I/subchapter-D...
pear01•1w ago
I believe this was "spoofed" only in the sense that a particular provider/online platform accepted data via an API that was abused to draw this on that platform only. Searching around it seems it was not found if you looked on other platforms, so it might not even have been a crime. I believe they didn't emit any real "signals" just took advantage of an API that should probably be better secured.
observationist•1w ago
At worst it'd be a violation of the site ToS - it's a crowdsourced community data based system, and not any sort of an official, important system. The account doesn't seem to have been banned, so maybe the admins are just rolling with the joke.
fc417fc802•1w ago
> an API that should probably be better secured.

I think the API is secured? The entire premise is that a volunteer creates an account and uploads ADS-B telemetry. Detecting falsified data is a separate matter.

darthwalsh•1w ago
Sounds like authentication is working great, but their authorization design may be flawed.
filleduchaos•1w ago
How is it flawed? That is the nature of crowdsourcing.
advisedwang•1w ago
It's almost certainly a violation of the Computer Fraud and Abuse Act because it's an extremely broad law.
sophacles•1w ago
TBF so is your reply and mine.
eleventyseven•1w ago
Violating terms and conditions is not a CFAA violation, per the Supreme Court case Van Buren v US (https://www.politico.com/news/2021/06/03/supreme-court-cyber...) which narrowed to actual fraud and data theft.

"The Government’s interpretation of the statute would attach criminal penalties to a breathtaking amount of commonplace computer activity,” Barrett wrote. “If the ‘exceeds authorized access’ clause criminalizes every violation of a computer-use policy, then millions of otherwise law-abiding citizens are criminals."

adsbexchange is a user-generated content platform where you can submit decoded radio signals to a common database. Sending fake data to adsbexchange is as much a CFAA violation as posting hoaxes to Wikipedia or a social media platform.

kevin_thibedeau•1w ago
Precedent won't get in the way of a tribal retaliation. They've proven that they can't be consistent with fundamental laws they've sworn to uphold.
lovecg•1w ago
Agreed with other commenters that nothing was likely actually broadcast, but if it was it would definitely be highly illegal and you’d have feds knocking down your door pretty quickly. They don’t joke around with illegal transmissions like that.
idontwantthis•1w ago
Can someone explain what this means? Where would this have been seen?
JasonADrury•1w ago
> Where would this have been seen?

on HN, mostly

burkaman•1w ago
Most planes broadcast their position using ADS-B, and some websites collect these signals and visualize them so you can track flight paths. Somebody broadcast a fake flight path that draws a picture of JD Vance on these sites: https://globe.adsbexchange.com/?icao=adfdf9&lat=26.678&lon=-...
HNisCIS•1w ago
No, someone probably setup a fake feeder pretending to be an ADSB receiver.
JasonADrury•1w ago
> Somebody broadcast a fake flight path

They didn't actually "broadcast" anything. This was created by uploading fake data to absexchange.

zeeZ•1w ago
To expand on that, those websites mostly operate on random volunteers self hosting a (starting price) fairly cheap receiver and antenna with an open source stack that feeds the ADS-B data to the website operator in exchange for nothing or free "premium" benefits.

The spoofer could have just sent them fake location information drawing an image using latitude, longitude and altitude for color (in the default view flight paths have different colors based on the altitude of the plane at that point in time).

They could have built an antenna and actually broadcast this data, but that would be a lot more effort and most likely some form of crime.

dpe82•1w ago
As a pilot I really hope it's the former. Broadcasting spoofed traffic at minimum would be confusing and distracting to both pilots and ATC.
OkayPhysicist•1w ago
ADS-B (Automatic Dependent Surveillance-Broadcast) is a protocol for planes to publish their positions, so help with the whole "not crashing into each other" thing. The data is mostly for pilots and air traffic control, but it is publicly available, and there's a number of sites that track the data so that you can see what planes are overhead or whatever.

Someone spoofed Airforce One's transponder, had it declare itself as "VANCE 1", and then fly a pattern to display the meme. Or lied to one or more of the major sites, pretending to be listening in on the ADS-B signals. It's unclear. Regardless, it's a very funny hack.

cluckindan•1w ago
It’s basically the modern radar system as in it supplies the data air traffic controllers see on their screens. Civilian ATC doesn’t really use actual radars any more.

That said, TCAS (Traffic Collision Avoidance System) does not operate on flight data reported by ADS-B.

esseph•1w ago
Pilots and nerds that watch airplane traffic

Viewable on FlightRadar24, etc

walletdrainer•1w ago
Pilots would tend to not see this, neither would people using FlightRadar24
esseph•1w ago
There are now multiple ones, and they are spreading through more than just ADSBExchange for this attempt.

It is on Airplanes.live ADSB,FI,and TheAirTraffic.com. Isn't on adsb.lol or FlightRadar24.

https://globe.adsbexchange.com/?icao=adfdf8

guerrilla•1w ago
For those wondering, https://knowyourmeme.com/memes/jd-vance-edited-face-photosho...
deevus•1w ago
I had a few chuckles reading that. Thanks.
aaronbrethorst•1w ago
I'm disappointed it doesn't seem to have a link to this Vance/Trump 'makeup' video. https://www.reddit.com/r/StrangeAndFunny/comments/1jm9kn4/jd...
randycupertino•1w ago
A drag makeup artist has an entire series called "Queer Eye for the MAGA Guy" on republican makeup recreations: https://www.youtube.com/watch?v=u6hK_UEGBs4&list=PLNZQj4dOgd...
Fnoord•1w ago
Can you explain what is funny about it? I genuinely don't understand.
Am4TIfIsER0ppos•1w ago
Are funny faces funny? Are edited images funny? Are edited funny faces funny? Perhaps it just isn't your sort of humor.
randycupertino•1w ago
My favorite one is "Emo JD Vance" with the heavy eyeliner and the scene haircut: https://www.amazon.com/Vance-Meme-Emo-Republican-Conservativ...

Yassified Vance, which a Republican congressman actually created and posted as a legit fan edit is also very funny: https://x.com/KatAbughazaleh/status/1841491297145634831

guerrilla•1w ago
> "Emo JD Vance"

Oh I thought that was the angry little man, what's his name... Ben Shapiro! (Google knew what I meant.)

eep_social•1w ago
edit: op also has this, disregard

hugged but someone caught it: https://archive.is/VrEtg

jacquesm•1w ago
It's still there as of now:

https://globe.adsbexchange.com/?icao=adfdf9&lat=26.678&lon=-...

nshireman•1w ago
Source:Other

There it is. Someone running a fake feeder uploaded fake data. No spoofed signals were actually sent over the radio.

jacquesm•1w ago
I always thought that coverage of those receivers was so dense by now that you'd have multiple reports of each aircraft but apparently that's not the case.
nshireman•1w ago
There is overlapping coverage, yes, but the server fuses them into one entry.
andrewstuart•1w ago
Please explain the tech.
sneak•1w ago
ADS-B is packet data telemetry broadcast unencrypted and unauthenticated by aircraft on 1090MHz.

Anyone can receive it, and many do. FlightRadar and others have networks of people with receivers that forward all received packets to central servers.

The aircraft self-report location, heading, altitude, etc, so anyone can transmit packets making ghost planes.

I am somewhat surprised nobody has stashed an ADS-B spoofer near ATL or AMS that just broadcasts tracks of A380 tail numbers crossing the runways perpendicular at 500 ft AGL or something. They have primary radar, sure, but I imagine there would still be a temporary disruption until people figured out what was going on.

I think this is the first case I’ve seen of ADS-B spoofing in the wild.

EDIT: this was spoofed reports to the data aggregators via the internet, not broadcast on radio waves. I’ve still never seen or heard tell of RF ADS-B spoofing.

pixl97•1w ago
Fake signals are not uncommon, but mostly accidental. They are dealt with very quickly when causing traffic control problems
mywittyname•1w ago
I'm guessing this doesn't cause traffic control problems due to the no-fly zone over that area?
pixl97•1w ago
Probably is not causing traffic issues. With that said I'm sure a number of TLA's are looking into it already, so whoever did it has hopefully took a number of infosec steps not to get caught and questioned.
sneak•1w ago
Sure, but traffic control problems can still be caused (temporarily) by abuse of the frequency/protocol by those intending to cause disruption.

Can you tell me more about the fake signals? Who sends them? Why? How often?

fc417fc802•1w ago
> I’ve still never seen or heard tell of RF ADS-B spoofing.

Probably because the required expertise, effort, risk, and reward ratios don't work out. You can cause a minor disturbance that isn't particularly visible and in exchange get investigated by the FBI. Seems about as wise as attempting to graffiti the front gate of a military base.

infthi•1w ago
There was this proof of concept in 2012: https://youtu.be/CXv1j3GbgLk?t=2483

(IIUC they did not actually transmit data, just fed it directly into an ADS-B receiver, but transmitting would've been trivial at this point)

CGMthrowaway•1w ago
No real 747 flew this. It was a prank using impossible flight data via ADS-B spoofing. Ground-based “software-defined radios” (SDRs) broadcast fake transponder signals to trick ADS-B Exchange. This works because both the ADS-B & AIS systems use unencrypted, unauthenticated data.
joecool1029•1w ago
It was sent to ADSBexchange's API, not over RF. No laws were broken.
nshireman•1w ago
Yep, as evidenced by the "Source:Other" tag on ADSBExchange. Signals actually sent over the air would show ADS-B, TIS-B, etc, as the data source.
jjwiseman•1w ago
That's not true. And if you click almost anywhere else on the spoofed track it will show as Source: ADS-B.
Scoundreller•1w ago
It’s only “other” at the very last point. Go earlier in the track and it shows as “ADS-B”, but every historical real flight in this plane is MLAT (it doesn’t broadcast its precise position but it can be inferred from receivers)
fortran77•1w ago
Most likely they spoofed the reporting API to "FlightAware" or other ADSB crowd-data-sourced sites and didn't spoof "ADSB Signals"
colechristensen•1w ago
Actually spoofing ADSB radio signals could very well land you in prison with a $100,000 fine. The FCC is very eager to find and fine you for these kinds of stunts.

Spamming flightaware is much less severe, but still... it's not cute to mess with life-safety critical infrastructure.

fc417fc802•1w ago
FlightAware isn't safety critical. If it was then being able to spoof it in this manner would be negligence on the part of the operator.
foota•1w ago
The FCC and the FAA are two federal agencies that really don't want to mess with, so I hope for their sake they didn't actually spoof it. (.... I wish there were an FBB as well)
cm2187•1w ago
plus they did that right next to an airport
cyanydeez•1w ago
Depends, how much did DOGE fuck with their leadership and management.

We now have to both identify obama judges, trump judges and trump bootlickers.

varenc•1w ago
Seems like it wasn't actually spoofed radio signals, but spoofed data collection uploaded to adsbexchange. Still seems unlikely to make the FAA happy, but not as bad. I assume air traffic controllers aren't relying on adsbexchange?
jjwiseman•1w ago
Maybe not "rely" on, but some definitely use public ADS-B aggregator sites.
ryandrake•1w ago
I highly doubt any ATC on duty is looking at a public ADS-B aggregator as a real time source of information for his or her job.
jjwiseman•1w ago
There are non-radar towers that don't have scopes. They may have a traffic display, or maybe not. They might choose to use a public ADS-B aggregator site because it gives them situational awareness, but they don't use it to provide radar services to aircraft. That's my understanding from listening to a lot podcast episodes with air traffic controllers, anyway. I think it's an unofficial, non-FAA approved kind of thing that can make their jobs easier.

See https://www.faa.gov/air_traffic/publications/atpubs/atc_html... for non-radar ATC procedures.

rootusrootus•1w ago
> They might choose to use a public ADS-B aggregator site because it gives them situational awareness

I do not understand what the upside is, aside from saving a tiny amount of effort and cost -- they could get the same data with more reliability by just running their own ADS-B receiver, without having a dependency on a third-party.

fy20•1w ago
I'd assume it's more to see "whats the latest ETA for this aircraft that's scheduled for 1 hour?". Their own ADS-B receiver is unlikely to pick it up.
jjwiseman•1w ago
Imagine your boss doesn’t like you looking at ADS-B sites because it’s not data from an FAA approved system but as long as you’re discreet and not actually breaking a reg they don’t yell at you. Then they come in and see that you installed an antenna, RTL-SDR, and raspberry pi in the tower.
mschuster91•1w ago
> they could get the same data with more reliability by just running their own ADS-B receiver, without having a dependency on a third-party.

Setting up an ADS-B receiver is indeed very cheap. Less than 100$. That's what many people, both aviation enthusiasts and ham radio operators, do for fun.

The problem is, do that on an airport? You'll now need permits to install the antenna (needs to be covered in the lightning protection system and even if it's just a passive receiver probably someone needs to sign off on an antenna being added). Fire code means you'll need approval and specialized people to run the cable (you need to drill holes in fire walls). Maybe there's some law or regulation requiring approval or causing a paper trail (e.g. in Germany, all electrical appliances have to be isolation-tested and visually inspected every two years by an electrician). Doing that the proper way is an awful lot of work. And by that point, someone will notice "hey, a Raspberry Pi? An RTL-SDR stick from eBay? No way that is certified to be used in a safety critical environment", killing off the project or requiring a certified device costing orders of magnitude more money.

In contrast, a privately owned laptop, tablet or phone with the Flightaware app? No one will give a shit about it unless someone relies on FA too much, causes an incident and that is found out.

rootusrootus•1w ago
All good points. I'd set it up very near the airport but not on it and then access it using the same web browser that I'd use to go to ADSB Exchange.
jjwiseman•1w ago
Why? You would almost certainly get better data with higher reliability and no effort and no money spent from airplanes.live, adsbexchange.com, etc.
rootusrootus•1w ago
The original point was that you become reliant on a public service, probably run by volunteers, for something halfway critical to your operation. Doing it yourself is easy and then you control the reliability, not someone else.
jjwiseman•4d ago
You're just saying things that don't have basis in reality.

It's not something halfway critical to the operation–why would the FAA allow that? ADS-B Exchange is not run by volunteers–it's run by employees of JETNET LLC, an aviation intelligence company. Doing it yourself almost certainly gives you less information–you're not part of a global network of receivers. It almost certainly gives you less reliability–receivers in the big networks typically have a fair amount of overlap which gives redundancy your single receiver doesn't have.

It's also not FAA approved!

mschuster91•1w ago
> I'd set it up very near the airport but not on it

The problem is, you need to have a good height for the antenna - "height is might" in radio, particularly above VHF bands. I actually can see this with my own ADS-B receiver - I'm in a valley and precisely can see that effect when plotting received packets.

rootusrootus•1w ago
I get good distance from my ground level antenna, but while I'm in a valley, it's very wide and long. My assumption is that most airports are going to be in fairly flat areas.
TeMPOraL•1w ago
Upside may be just that the equivalent first-party system doesn't exist or performs worse? ATC tower isn't a SCIF, they probably get their real-time news from Twitter like everyone else, too.
blitzar•1w ago
> they could get the same data

They could get uncensored data too - you dont want billionaires jets crashing into other planes because they didnt want to be tracked.

jjwiseman•1w ago
airplanes.live, adsb.lol, ADS-B Exchange, adsb.fi, etc. do not censor the data.
b00ty4breakfast•1w ago
if there is any critical aviation service using a 3rd party website that relies on volunteer reporting of data, they deserve whatever happens
paulirish•1w ago
This was not spoofed at the ADS-B layer. It was just spoofed to adsb exchange. (While typically a feeder contributes to multiple sites, this one didn't.) eg:

- https://globe.adsb.fi/?icao=adfdf9&lat=26.678&lon=-80.030&zo...

- https://adsb.lol/?icao=adfdf9&lat=26.678&lon=-80.030&zoom=14...

Relevant discussion on r/adsb: https://www.reddit.com/r/ADSB/comments/1qp3q9n/interesting/ where they note it's also absent on FR24, airplanes.live, and theairtraffic.com.

The adsb-x feeder map: https://map.adsbexchange.com/mlat-map/ They probably won't have a hard time identifying who contributed that data.

ryandrake•1w ago
Yea, this is more like vandalizing Wikipedia than spoofing or interfering with safety-critical systems. It's juvenile, but probably not crashing any planes. It'll get reverted, and then presumably the adsb exchange website will tighten up their security.
antonvs•1w ago
> It's juvenile

Juvenile times call for juvenile measures. In case you haven’t noticed, the US is being run by a bunch of arrested development high school bullies. Juvenile is one of the only languages they understand.

zombot•1w ago
+N. If I could, I would give you multiple upvotes.
morpheuskafka•1w ago
And is Vance or Trump watching Flightradar24 in their free time? And if they did, would they even get mad at this and not find it funny? And if they did get mad at it, would they do anything at all? If they did something, would it be anything desirable or just trying to retaliate at whoever drew this?
themgt•1w ago
Much like the Biden team wisely embraced the Dark Brandon meme. To quote the ancient stoic wisdom imparted to Punxsutawney Phil, "don't drive angry."

https://x.com/JoeBiden/status/1756888470599967000

expedition32•1w ago
Trump is a narcist and it is known that he spends too much time on social media- and golf.

Vance however is the real deal. May god/science help us all if Trump ever has his long overdue stroke.

account42•1w ago
If anything it juvenile it's "the other guy/team/party did it first".
PunchyHamster•1w ago
There is no security within ADS-B. All you need is directional antenna pointing at receiver (if you just want to fuck with website, not cause mass panic in the nearest airport tower), there is no encryption or other form of authentication in the messages.
ryandrake•1w ago
The security in question is the ADS-B exchange's web site's security, not the security of the ADS-B system. It's unlikely this vandal even has an antenna.
consumer451•1w ago
I had also posted this story earlier, then deleted it once I learned that. However, I did find this interesting doc about real ADS-B spoofing, which does not appear to be very easy:

https://www.icao.int/sites/default/files/APAC/Meetings/2025/...

PunchyHamster•1w ago
That just says "you need to go outside, and own an SDR". It's very easy, there is no encryption nor authentication in the system
consumer451•1w ago
Man, I wrote that comment at the end of a 14hr work day. The crazy thing is that I had seen that SDR slide when I first looked at this. Hours later, when I posted the comment, I reviewed it again and completely hallucinated the SDR slide away.

I need to check all the work I did towards the end of yesterday. Valuable lesson. Thanks.

decimalenough•1w ago
Unless I'm much mistaken, Vance's face is centered over Mar-a-Lago!

https://maps.app.goo.gl/fjqtAa2qgcWsJvFfA

https://globe.adsbexchange.com/?icao=adfdf9&lat=26.680&lon=-...

belter•1w ago
If you get the DF17 frames and extract the airborne position messages Type Codes 9–18.

Then CPR decode them into latitude/longitude....plus plot enough spoofed positions so the point cloud forms a QR code like raster on the map, then scan the rendered pattern...you get a URL to the unredacted Epstein files.

jacquesm•1w ago
Hehe, you had me all the way to the punchline, that was funny.
jjwiseman•1w ago
As other commenters noted, this is almost certainly not RF spoofing, just sending bad data to an aggregator (ADS-B Exchange) over the internet.

This instance of spoofing is notable for being the first that I know of that wasn't primitive vector art or text, but a raster image!

In that area of Florida multiple receivers would have picked up actual ADS-B broadcasts. ADS-B aggregators do have various anti-spoofing measures, but they're not impossible to circumvent.

The only case of actual RF spoofing of aircraft transponder signals that I know of was actually done by the U.S. Secret Service, which interfered with passenger jet collision alert systems (TCAS) by apparently broadcasting bogus signals near Ronald Reagan National Airport (KDCA): https://nymag.com/intelligencer/article/aviation-flights-whi...

jjwiseman•1w ago
(Of course if you were spoofing ADS-B RF signals you wouldn't necessarily need to be anywhere near the spoofed locations. Just like with GPS spoofing.)
Nextgrid•1w ago
Surely the receiver would run plausibility checks on the received messages and reject spoofed locations that are physically impossible to receive by said receiver?
mschuster91•1w ago
> spoofed locations that are physically impossible to receive by said receiver?

Wait until you hear about Sporadic-E or Aurora. RF is a weird place full of natural phenomena making the impossible very possible.

Nextgrid•1w ago
But even if that was the case, is there any value for a receiver to be receiving those? Surely those messages would be picked up by a receiver closer to the transmitter anyway. I think the value in spoofing rejection is greater than the probability of a transmission reflecting from beyond the horizon and not being already being picked up by a local receiver.
jjwiseman•1w ago
These receivers mostly don’t have gps and it’s very common for people to put in the wrong coordinates.
mschuster91•1w ago
> But even if that was the case, is there any value for a receiver to be receiving those?

Yes, radio propagation is an entire academic field to be studied :)

In addition, if you have enough receivers you can use that to run something called MLAT [1] to also pick up GA aircraft that just have a transponder but no GPS. The more the merrier.

[1] https://adsbx.discourse.group/t/multilateration-mlat-how-it-...

Scoundreller•1w ago
Notably, the history of this aircraft shows MLAT as the source for all tracking. This spoof is the first ads-b “track” for this plane.

But there’s so much wrong with the data: 50k ft at 80knots (ground speed!) in a 747.

jychang•1w ago
Dang, dude invented a 747 that's incapable of stalling.
jacquesm•1w ago
Groundspeed, not airspeed.
RandomTeaParty•1w ago
hundred knots of wind on demand is also not a small invention :)
x3n0ph3n3•1w ago
Must be a strong headwind!
jjwiseman•1w ago
Just because I don't often get a chance to talk about this, I'll mention that there was a malfunction/accident/bug that caused what you might call spoofed signals to go out around Long Island and New York. Really interesting case where it seems that an FAA system wasn't handling magnetic declination correctly, which led to it generating false TIS-B targets that were rotated 13 degrees from real aircraft positions, from the radar antenna point of view: https://x.com/lemonodor/status/1508505542423064578

(TIS-B is a system that broadcasts ADS-B-like signals for aircraft that are being tracked by radar but either don't have ADS-B Out or otherwise might not be picked up by other aircraft with ADS-B In, e.g. maybe they're at a low altitude.)

There have been a couple other incidents with the TIS-B system. E.g. this apparent test near Dallas in 2022 that generated dozens of false targets in an interesting pattern: https://x.com/lemonodor/status/1481712428932997122 There was a similar incident around LAX several months later.

jacquesm•1w ago
Wow, that would appear to have some potential for bad stuff to happen.
andyfowler•1w ago
whoa, i saw your initial tweet about this, but never saw your follow up that confirmed the magnetic declination association. the convergence back to the ground radar is brilliant. nice find.
krferriter•1w ago
I agree with this. Hopefully they're able to track down who did this. To upload to ADS-B Exchange you need an account. But it's not that difficult to get one. I'm not sure what kind of information they may be able to get on it. As you say the person who uploaded this may not be anywhere near there. The aggregators probably should have heuristics like if only one feeder in an area with a decent density of feeder coverage uploads an anomalous track, it should get flagged.
teiferer•1w ago
> Hopefully they're able to track down who did this.

Why? Was anybody harmed?

Hopefully they don't find out who did this. There was never any danger, and without this kind of joke, the world would be less fun.

(Obviously it should be harder to fool critical systems, so this served also as a warning, but if you want to attack such a system, a real bad guy would do this in more subtle ways.)

aa_is_op•1w ago
Isn't this actually illegal?
altairprime•1w ago
It’s not “illegal broadcast which engages the FAA and FCC to hunt you down” illegal, but that doesn’t exclude other prosecutions.
filleduchaos•1w ago
Other persecutions for what? Sending crap data to an API is not a crime.
altairprime•1w ago
It's literally "computer fraud and abuse" in every sense of the word, so one assumes that an avenue of potential prosecution and possible conviction would be under the CFAA act. This does not, of course, guarantee that a conviction would be made and upheld at appeal, but this community is quite familiar with the dire harm that federal prosecution for misuse of computer services can impose on individuals, no matter how misguided that prosecution may be. Prosecution can be wielded as a form of persecution that does not require a conviction as outcome to be successful, and that is the a pressing risk now faced by whoever did this.
KnuthIsGod•1w ago
How long before domestic terrorism charges are laid ?

Everthing seems to be domestic terrorism in the US these days.

mindslight•1w ago
Domestic terrorism is now an official policy goal of the "US" government, so yes, there is a lot of it.
abustamam•1w ago
Easy to justify the murder of your political opponents by calling them domestic terrorists.

What's almost more frightening is how many people actually buy it.

mindslight•1w ago
I'm still chewing on the idea of how many supporters are bots or at least bot-adjacent (ie manufactured social proof), and what can even be done about that. When I go to my local [small, suburban] protest in a balanced red-blue area, lately it's been many honks and agreements, and only a handful of angry grimaces.

So I think the tide has long ago shifted, which makes sense what with the terror gangs executing Americans and all. The question is how we can organize into meaningful opposition when most activity happens online these days, and every non-echo-chamber forum still has extremist nutjobs who derail productive conversation.

I'd think that Congressional offices are seeing a similar dynamic too, inundated with robocalls from "constituents", the occasional untraceable threat of violence to their families if they step out of line, etc.

burnt-resistor•1w ago
This is just yet another cost and side-effect of a deeply unpopular, business-destroying, corrupt regime.
burnt-resistor•1w ago
Since most of these ADS-B collection sites are patchworks of unofficial/best effort, that seems like a great attack vector for nation state-level spoofing to interrupt flight planning, capacity planning, other tertiary air transport operations, and make civilians nervous. It's analogous to "hobby" code running key infrastructure of the internet without serious processes and auditing, testing, and verification.

It would be far better and more reliable to have the FAA do it by providing authoritative single source of truth as (selectively) open data rather than depend upon the whims / greed / sloppiness of an over-privatized utility. ATCs need and/or have this data anyhow, so in the future, it should be provided.

How do less neoliberal European countries do it?

habinero•1w ago
These are hobbyist sites, not critical infrastructure. Commercial aviation doesn't use them.

> It's analogous to "hobby" code running key infrastructure of the internet

I have some bad news my dude lol

dayyan•1w ago
Hilarious
jjwiseman•1w ago
It's happening again. Spoofing is in progress, rendering another image. ADS-B Exchange has blocked access to the ICAOs/hexes in question--if you try to look at their history you get redirected to the base map.

https://x.com/TheIntelFrog/status/2016841289556168990

tanseydavid•1w ago
Reality is just so @#$%^&* weird these days. Feels like a bad dream.