| ▲ | Somebody used spoofed ADSB signals to raster the meme of JD Vance(alecmuffett.com) |
| 418 points by wubin 6 hours ago | 96 comments |
| https://archive.ph/VrEtg https://globe.adsbexchange.com/?icao=adfdf9&lat=26.678&lon=-... |
|
| ▲ | paulirish 4 hours ago | parent | next [-] |
| This was not spoofed at the ADS-B layer. It was just spoofed to adsb exchange. (While typically a feeder contributes to multiple sites, this one didn't.) eg: - https://globe.adsb.fi/?icao=adfdf9&lat=26.678&lon=-80.030&zo... - https://adsb.lol/?icao=adfdf9&lat=26.678&lon=-80.030&zoom=14... Relevant discussion on r/adsb: https://www.reddit.com/r/ADSB/comments/1qp3q9n/interesting/ where they note it's also absent on FR24, airplanes.live, and theairtraffic.com. The adsb-x feeder map: https://map.adsbexchange.com/mlat-map/ They probably won't have a hard time identifying who contributed that data. |
| |
| ▲ | ryandrake 2 hours ago | parent [-] | | Yea, this is more like vandalizing Wikipedia than spoofing or interfering with safety-critical systems. It's juvenile, but probably not crashing any planes. It'll get reverted, and then presumably the adsb exchange website will tighten up their security. |
|
|
| ▲ | jjwiseman 4 hours ago | parent | prev | next [-] |
| As other commenters noted, this is almost certainly not RF spoofing, just sending bad data to an aggregator (ADS-B Exchange) over the internet. This instance of spoofing is notable for being the first that I know of that wasn't primitive vector art or text, but a raster image! In that area of Florida multiple receivers would have picked up actual ADS-B broadcasts. ADS-B aggregators do have various anti-spoofing measures, but they're not impossible to circumvent. The only case of actual RF spoofing of aircraft transponder signals that I know of was actually done by the U.S. Secret Service, which interfered with passenger jet collision alert systems (TCAS) by apparently broadcasting bogus signals near Ronald Reagan National Airport (KDCA): https://nymag.com/intelligencer/article/aviation-flights-whi... |
| |
| ▲ | jjwiseman 3 hours ago | parent | next [-] | | Just because I don't often get a chance to talk about this, I'll mention that there was a malfunction/accident/bug that caused what you might call spoofed signals to go out around Long Island and New York. Really interesting case where it seems that an FAA system wasn't handling magnetic declination correctly, which led to it generating false TIS-B targets that were rotated 13 degrees from real aircraft positions, from the radar antenna point of view: https://x.com/lemonodor/status/1508505542423064578 (TIS-B is a system that broadcasts ADS-B-like signals for aircraft that are being tracked by radar but either don't have ADS-B Out or otherwise might not be picked up by other aircraft with ADS-B In, e.g. maybe they're at a low altitude.) There have been a couple other incidents with the TIS-B system. E.g. this apparent test near Dallas in 2022 that generated dozens of false targets in an interesting pattern: https://x.com/lemonodor/status/1481712428932997122 There was a similar incident around LAX several months later. | | |
| ▲ | andyfowler 13 minutes ago | parent | next [-] | | whoa, i saw your initial tweet about this, but never saw your follow up that confirmed the magnetic declination association. the convergence back to the ground radar is brilliant. nice find. | |
| ▲ | jacquesm an hour ago | parent | prev [-] | | Wow, that would appear to have some potential for bad stuff to happen. |
| |
| ▲ | Scoundreller 4 hours ago | parent | prev | next [-] | | Notably, the history of this aircraft shows MLAT as the source for all tracking. This spoof is the first ads-b “track” for this plane. But there’s so much wrong with the data: 50k ft at 80knots (ground speed!) in a 747. | | | |
| ▲ | jjwiseman 4 hours ago | parent | prev [-] | | (Of course if you were spoofing ADS-B RF signals you wouldn't necessarily need to be anywhere near the spoofed locations. Just like with GPS spoofing.) | | |
| ▲ | Nextgrid 2 hours ago | parent [-] | | Surely the receiver would run plausibility checks on the received messages and reject spoofed locations that are physically impossible to receive by said receiver? | | |
| ▲ | mschuster91 an hour ago | parent [-] | | > spoofed locations that are physically impossible to receive by said receiver? Wait until you hear about Sporadic-E or Aurora. RF is a weird place full of natural phenomena making the impossible very possible. |
|
|
|
|
| ▲ | foota 5 hours ago | parent | prev | next [-] |
| The FCC and the FAA are two federal agencies that really don't want to mess with, so I hope for their sake they didn't actually spoof it. (.... I wish there were an FBB as well) |
| |
| ▲ | varenc 4 hours ago | parent | next [-] | | Seems like it wasn't actually spoofed radio signals, but spoofed data collection uploaded to adsbexchange. Still seems unlikely to make the FAA happy, but not as bad. I assume air traffic controllers aren't relying on adsbexchange? | | |
| ▲ | jjwiseman 4 hours ago | parent [-] | | Maybe not "rely" on, but some definitely use public ADS-B aggregator sites. | | |
| ▲ | ryandrake 3 hours ago | parent | next [-] | | I highly doubt any ATC on duty is looking at a public ADS-B aggregator as a real time source of information for his or her job. | | |
| ▲ | jjwiseman 3 hours ago | parent [-] | | There are non-radar towers that don't have scopes. They may have a traffic display, or maybe not. They might choose to use a public ADS-B aggregator site because it gives them situational awareness, but they don't use it to provide radar services to aircraft. That's my understanding from listening to a lot podcast episodes with air traffic controllers, anyway. I think it's an unofficial, non-FAA approved kind of thing that can make their jobs easier. See https://www.faa.gov/air_traffic/publications/atpubs/atc_html... for non-radar ATC procedures. | | |
| ▲ | rootusrootus 3 hours ago | parent [-] | | > They might choose to use a public ADS-B aggregator site because it gives them situational awareness I do not understand what the upside is, aside from saving a tiny amount of effort and cost -- they could get the same data with more reliability by just running their own ADS-B receiver, without having a dependency on a third-party. | | |
| ▲ | fy20 3 hours ago | parent | next [-] | | I'd assume it's more to see "whats the latest ETA for this aircraft that's scheduled for 1 hour?". Their own ADS-B receiver is unlikely to pick it up. | |
| ▲ | jjwiseman 3 hours ago | parent | prev | next [-] | | Imagine your boss doesn’t like you looking at ADS-B sites because it’s not data from an FAA approved system but as long as you’re discreet and not actually breaking a reg they don’t yell at you. Then they come in and see that you installed an antenna, RTL-SDR, and raspberry pi in the tower. | |
| ▲ | mschuster91 an hour ago | parent | prev [-] | | > they could get the same data with more reliability by just running their own ADS-B receiver, without having a dependency on a third-party. Setting up an ADS-B receiver is indeed very cheap. Less than 100$. That's what many people, both aviation enthusiasts and ham radio operators, do for fun. The problem is, do that on an airport? You'll now need permits to install the antenna (needs to be covered in the lightning protection system and even if it's just a passive receiver probably someone needs to sign off on an antenna being added). Fire code means you'll need approval and specialized people to run the cable (you need to drill holes in fire walls). Maybe there's some law or regulation requiring approval or causing a paper trail (e.g. in Germany, all electrical appliances have to be isolation-tested and visually inspected every two years by an electrician). Doing that the proper way is an awful lot of work. And by that point, someone will notice "hey, a Raspberry Pi? An RTL-SDR stick from eBay? No way that is certified to be used in a safety critical environment", killing off the project or requiring a certified device costing orders of magnitude more money. In contrast, a privately owned laptop, tablet or phone with the Flightaware app? No one will give a shit about it unless someone relies on FA too much, causes an incident and that is found out. |
|
|
| |
| ▲ | b00ty4breakfast 3 hours ago | parent | prev [-] | | if there is any critical aviation service using a 3rd party website that relies on volunteer reporting of data, they deserve whatever happens |
|
| |
| ▲ | cm2187 5 hours ago | parent | prev | next [-] | | plus they did that right next to an airport | |
| ▲ | cyanydeez 4 hours ago | parent | prev [-] | | Depends, how much did DOGE fuck with their leadership and management. We now have to both identify obama judges, trump judges and trump bootlickers. |
|
|
| ▲ | jacquesm 6 hours ago | parent | prev | next [-] |
| It's still there as of now: https://globe.adsbexchange.com/?icao=adfdf9&lat=26.678&lon=-... |
| |
| ▲ | nshireman 5 hours ago | parent | next [-] | | Source:Other There it is. Someone running a fake feeder uploaded fake data. No spoofed signals were actually sent over the radio. | | |
| ▲ | jacquesm 4 hours ago | parent [-] | | I always thought that coverage of those receivers was so dense by now that you'd have multiple reports of each aircraft but apparently that's not the case. | | |
| ▲ | nshireman 4 hours ago | parent [-] | | There is overlapping coverage, yes, but the server fuses them into one entry. |
|
| |
| ▲ | belter 5 hours ago | parent | prev [-] | | Maybe next they can do the picture of Trump and Putin that he just hang in the White House: https://www.the-independent.com/news/world/americas/us-polit... | | |
| ▲ | mullingitover 5 hours ago | parent | next [-] | | He isn't even at Putin's right hand, that's reserved for Putin's more highly regarded henchmen. | |
| ▲ | jacquesm 5 hours ago | parent | prev [-] | | No way... wtf? | | |
| ▲ | andrewflnr 5 hours ago | parent [-] | | This is not even a surprise. Trump has been a fan of Putin for years. | | |
| ▲ | userbinator 3 hours ago | parent | next [-] | | The photo was praised by Kirill Dmitriev, one of Russia’s key negotiators I think it's part of his strategy of getting on Putin's good side. | |
| ▲ | jacquesm 5 hours ago | parent | prev [-] | | It may not be a surprise to you but it is a surprise to me because there are many other characters that he could be a fan of , he's literally giving Putin top billing here, right next to a picture of what seems to be him and his granddaughter. What's next? Pol Pot? Stalin? Kim? | | |
| ▲ | hermanzegerman 4 hours ago | parent | next [-] | | Well he certainly likes Kim https://www.nytimes.com/2025/08/25/us/politics/trump-north-s... | | | |
| ▲ | nozzlegear 4 hours ago | parent | prev | next [-] | | I really recommend you read Bob Woodward's four most recent books, starting with Fear[¹] . They give us a fascinating look into Trump's mind, and we get frank discussions from Trump and the people around him about how he not only idolizes strong men like Putin and Kim, but wishes he could be more like them if it weren't for the limits on his power and weak people around him (i.e. more feared/respected by his subordinates, able to command them with an iron fist, etc.). [¹] The title of the book comes from Trump remarking to Woodward that "Real power is – I don’t even want to use the word – fear." | | |
| ▲ | jacquesm 2 hours ago | parent [-] | | That word works two ways: it shows that Trump would like to be feared, but he's not, it also shows that he's probably very scared, especially of the people he's sucking up to. |
| |
| ▲ | mr_toad 3 hours ago | parent | prev [-] | | He only likes right wing dictators. Even if the left wing dictators behave exactly like right wing dictators. |
|
|
|
|
|
|
| ▲ | decimalenough 4 hours ago | parent | prev | next [-] |
| Unless I'm much mistaken, Vance's face is centered over Mar-a-Lago! https://maps.app.goo.gl/fjqtAa2qgcWsJvFfA https://globe.adsbexchange.com/?icao=adfdf9&lat=26.680&lon=-... |
| |
| ▲ | belter 2 hours ago | parent [-] | | If you get the DF17 frames and extract the airborne position messages Type Codes 9–18. Then CPR decode them into latitude/longitude....plus plot enough spoofed positions so the point cloud forms a QR code like raster on the map, then scan the rendered pattern...you get a URL to the unredacted Epstein files. | | |
|
|
| ▲ | KnuthIsGod 2 hours ago | parent | prev | next [-] |
| How long before domestic terrorism charges are laid ? Everthing seems to be domestic terrorism in the US these days. |
|
| ▲ | dayyan 35 minutes ago | parent | prev | next [-] |
| Hilarious |
|
| ▲ | eep_social 6 hours ago | parent | prev | next [-] |
| edit: op also has this, disregard hugged but someone caught it: https://archive.is/VrEtg |
|
| ▲ | guerrilla 6 hours ago | parent | prev | next [-] |
| For those wondering, https://knowyourmeme.com/memes/jd-vance-edited-face-photosho... |
| |
|
| ▲ | fortran77 5 hours ago | parent | prev | next [-] |
| Most likely they spoofed the reporting API to "FlightAware" or other ADSB crowd-data-sourced sites and didn't spoof "ADSB Signals" |
| |
| ▲ | colechristensen 5 hours ago | parent [-] | | Actually spoofing ADSB radio signals could very well land you in prison with a $100,000 fine. The FCC is very eager to find and fine you for these kinds of stunts. Spamming flightaware is much less severe, but still... it's not cute to mess with life-safety critical infrastructure. |
|
|
| ▲ | burnt-resistor an hour ago | parent | prev | next [-] |
| This is just yet another cost and side-effect of a deeply unpopular, business-destroying, corrupt regime. |
|
| ▲ | aa_is_op 4 hours ago | parent | prev | next [-] |
| Isn't this actually illegal? |
| |
| ▲ | altairprime 3 hours ago | parent [-] | | It’s not “illegal broadcast which engages the FAA and FCC to hunt you down” illegal, but that doesn’t exclude other prosecutions. |
|
|
| ▲ | burnt-resistor 38 minutes ago | parent | prev | next [-] |
| Since most of these ADS-B collection sites are patchworks of unofficial/best effort, that seems like a great attack vector for nation state-level spoofing to interrupt flight planning, capacity planning, other tertiary air transport operations, and make civilians nervous. It's analogous to "hobby" code running key infrastructure of the internet without serious processes and auditing, testing, and verification. It would be far better and more reliable to have the FAA do it by providing authoritative single source of truth as (selectively) open data rather than depend upon the whims / greed / sloppiness of an over-privatized utility. ATCs need and/or have this data anyhow, so in the future, it should be provided. How do less neoliberal European countries do it? |
|
| ▲ | andrewstuart 5 hours ago | parent | prev | next [-] |
| Please explain the tech. |
| |
| ▲ | CGMthrowaway 5 hours ago | parent | next [-] | | No real 747 flew this. It was a prank using impossible flight data via ADS-B spoofing. Ground-based “software-defined radios” (SDRs) broadcast fake transponder signals to trick ADS-B Exchange. This works because both the ADS-B & AIS systems use unencrypted, unauthenticated data. | | |
| ▲ | joecool1029 5 hours ago | parent [-] | | It was sent to ADSBexchange's API, not over RF. No laws were broken. | | |
| ▲ | nshireman 5 hours ago | parent [-] | | Yep, as evidenced by the "Source:Other" tag on ADSBExchange. Signals actually sent over the air would show ADS-B, TIS-B, etc, as the data source. | | |
| ▲ | Scoundreller 4 hours ago | parent | next [-] | | It’s only “other” at the very last point. Go earlier in the track and it shows as “ADS-B”, but every historical real flight in this plane is MLAT (it doesn’t broadcast its precise position but it can be inferred from receivers) | |
| ▲ | jjwiseman 4 hours ago | parent | prev [-] | | That's not true. And if you click almost anywhere else on the spoofed track it will show as Source: ADS-B. |
|
|
| |
| ▲ | sneak 5 hours ago | parent | prev [-] | | ADS-B is packet data telemetry broadcast unencrypted and unauthenticated by aircraft on 1090MHz. Anyone can receive it, and many do. FlightRadar and others have networks of people with receivers that forward all received packets to central servers. The aircraft self-report location, heading, altitude, etc, so anyone can transmit packets making ghost planes. I am somewhat surprised nobody has stashed an ADS-B spoofer near ATL or AMS that just broadcasts tracks of A380 tail numbers crossing the runways perpendicular at 500 ft AGL or something. They have primary radar, sure, but I imagine there would still be a temporary disruption until people figured out what was going on. I think this is the first case I’ve seen of ADS-B spoofing in the wild. EDIT: this was spoofed reports to the data aggregators via the internet, not broadcast on radio waves. I’ve still never seen or heard tell of RF ADS-B spoofing. | | |
| ▲ | pixl97 5 hours ago | parent [-] | | Fake signals are not uncommon, but mostly accidental. They are dealt with very quickly when causing traffic control problems | | |
| ▲ | sneak 10 minutes ago | parent | next [-] | | Sure, but traffic control problems can still be caused (temporarily) by abuse of the frequency/protocol by those intending to cause disruption. Can you tell me more about the fake signals? Who sends them? Why? How often? | |
| ▲ | mywittyname 5 hours ago | parent | prev [-] | | I'm guessing this doesn't cause traffic control problems due to the no-fly zone over that area? | | |
| ▲ | pixl97 5 hours ago | parent [-] | | Probably is not causing traffic issues. With that said I'm sure a number of TLA's are looking into it already, so whoever did it has hopefully took a number of infosec steps not to get caught and questioned. |
|
|
|
|
|
| ▲ | idontwantthis 6 hours ago | parent | prev | next [-] |
| Can someone explain what this means? Where would this have been seen? |
| |
| ▲ | burkaman 6 hours ago | parent | next [-] | | Most planes broadcast their position using ADS-B, and some websites collect these signals and visualize them so you can track flight paths. Somebody broadcast a fake flight path that draws a picture of JD Vance on these sites: https://globe.adsbexchange.com/?icao=adfdf9&lat=26.678&lon=-... | | |
| ▲ | zeeZ 6 hours ago | parent | next [-] | | To expand on that, those websites mostly operate on random volunteers self hosting a (starting price) fairly cheap receiver and antenna with an open source stack that feeds the ADS-B data to the website operator in exchange for nothing or free "premium" benefits. The spoofer could have just sent them fake location information drawing an image using latitude, longitude and altitude for color (in the default view flight paths have different colors based on the altitude of the plane at that point in time). They could have built an antenna and actually broadcast this data, but that would be a lot more effort and most likely some form of crime. | | |
| ▲ | dpe82 5 hours ago | parent [-] | | As a pilot I really hope it's the former. Broadcasting spoofed traffic at minimum would be confusing and distracting to both pilots and ATC. |
| |
| ▲ | JasonADrury 6 hours ago | parent | prev | next [-] | | > Somebody broadcast a fake flight path They didn't actually "broadcast" anything. This was created by uploading fake data to absexchange. | |
| ▲ | HNisCIS 6 hours ago | parent | prev [-] | | No, someone probably setup a fake feeder pretending to be an ADSB receiver. |
| |
| ▲ | OkayPhysicist 6 hours ago | parent | prev | next [-] | | ADS-B (Automatic Dependent Surveillance-Broadcast) is a protocol for planes to publish their positions, so help with the whole "not crashing into each other" thing. The data is mostly for pilots and air traffic control, but it is publicly available, and there's a number of sites that track the data so that you can see what planes are overhead or whatever. Someone spoofed Airforce One's transponder, had it declare itself as "VANCE 1", and then fly a pattern to display the meme. Or lied to one or more of the major sites, pretending to be listening in on the ADS-B signals. It's unclear. Regardless, it's a very funny hack. | | |
| ▲ | cluckindan 5 hours ago | parent [-] | | It’s basically the modern radar system as in it supplies the data air traffic controllers see on their screens. Civilian ATC doesn’t really use actual radars any more. That said, TCAS (Traffic Collision Avoidance System) does not operate on flight data reported by ADS-B. |
| |
| ▲ | esseph 6 hours ago | parent | prev | next [-] | | Pilots and nerds that watch airplane traffic Viewable on FlightRadar24, etc | |
| ▲ | JasonADrury 6 hours ago | parent | prev [-] | | > Where would this have been seen? on HN, mostly |
|
|
| ▲ | sammy2255 6 hours ago | parent | prev [-] |
| This has gotta be some sort of federal crime |
| |
| ▲ | pear01 6 hours ago | parent | next [-] | | I believe this was "spoofed" only in the sense that a particular provider/online platform accepted data via an API that was abused to draw this on that platform only. Searching around it seems it was not found if you looked on other platforms, so it might not even have been a crime. I believe they didn't emit any real "signals" just took advantage of an API that should probably be better secured. | | |
| ▲ | observationist 5 hours ago | parent [-] | | At worst it'd be a violation of the site ToS - it's a crowdsourced community data based system, and not any sort of an official, important system. The account doesn't seem to have been banned, so maybe the admins are just rolling with the joke. |
| |
| ▲ | Scoundreller 6 hours ago | parent | prev | next [-] | | Doubt it did anything in RF, only sent packets to adsbexchange’s web service that its volunteers feed it. Also Adsbexchange has had some… history: https://www.reddit.com/r/ADSB/comments/10l2euc/adsb_exchange... https://hackaday.com/2023/01/26/ads-b-exchange-sells-up-cont... | |
| ▲ | lovecg 5 hours ago | parent | prev | next [-] | | Agreed with other commenters that nothing was likely actually broadcast, but if it was it would definitely be highly illegal and you’d have feds knocking down your door pretty quickly. They don’t joke around with illegal transmissions like that. | |
| ▲ | advisedwang 5 hours ago | parent | prev | next [-] | | It's almost certainly a violation of the Computer Fraud and Abuse Act because it's an extremely broad law. | | |
| ▲ | eleventyseven 5 hours ago | parent | next [-] | | Violating terms and conditions is not a CFAA violation, per the Supreme Court case Van Buren v US (https://www.politico.com/news/2021/06/03/supreme-court-cyber...) which narrowed to actual fraud and data theft. "The Government’s interpretation of the statute would attach criminal penalties to a breathtaking amount of commonplace computer activity,” Barrett wrote. “If the ‘exceeds authorized access’ clause criminalizes every violation of a computer-use policy, then millions of otherwise law-abiding citizens are criminals." adsbexchange is a user-generated content platform where you can submit decoded radio signals to a common database. Sending fake data to adsbexchange is as much a CFAA violation as posting hoaxes to Wikipedia or a social media platform. | | |
| ▲ | kevin_thibedeau 4 hours ago | parent [-] | | Precedent won't get in the way of a tribal retaliation. They've proven that they can't be consistent with fundamental laws they've sworn to uphold. |
| |
| ▲ | sophacles 5 hours ago | parent | prev [-] | | TBF so is your reply and mine. |
| |
| ▲ | HNisCIS 6 hours ago | parent | prev | next [-] | | ADSB sites aren't any sort of official thing. You can send whatever data you want to them. Just because it's there doesn't mean it ever went over the air as an ADSB broadcast. | |
| ▲ | TimorousBestie 6 hours ago | parent | prev [-] | | An interesting question. Assuming the FAA has the authority to enforce ADSB requirements (an open question post-Chevron), I can’t find any regulation saying non-aircrafts cannot transmit ADSB. Only ones saying aircrafts in certain categories must. There’s probably some non-interference requirement somewhere (FCC spectrum licensing perhaps), but I’m not seeing it immediately. All this is in the hypothetical that RF was transmitted, which as others point out it probably wasn’t. | | |
| ▲ | tjohns 3 hours ago | parent | next [-] | | It would be under the FCC regs, not the FAA regs. Whatever transmitter you're using would not be type-accepted for operation on the 1080 MHz or 978 MHz band. (47 USC § 301) Additionally, RF operation with the intent of willful interference is inherently illegal. (47 USC § 333) | | | |
| ▲ | 15155 6 hours ago | parent | prev [-] | | (Assuming this were actually RF) This is easily-prosecutable willful interference or possibly aircraft sabotage: ADS-B operates in licensed bands and uses an already highly-contended modulation scheme and transmission protocol. | | |
| ▲ | esseph 6 hours ago | parent | next [-] | | No reason to believe RF when you can just upload whatever data you want | |
| ▲ | fragmede 5 hours ago | parent | prev [-] | | They'll probably try and make a case of wire fraud and CFAA as the usual go tos if it wasn't in RF. |
|
|
|