82 comments

[ 3.7 ms ] story [ 128 ms ] thread
Nice bit of reverse-engineering, and an impressive hack from whoever built the system.
Not really a hack. Subcarriers are how they added color to TV, stereo to FM radio, and so on. WWV/WWVH also sends machine-readable time codes at 100Hz like this.
Indeed--it was more of a hack sixty years ago perhaps. Since then, similar tricks have been used for closed captions, Dolby surround (the original kind), Radio Data System (which puts song names on your car dashboard via FM radio), TV Second Audio Program (listen to shows dubbed in a second language, just press the SAP button on your ancient high-end TV!)....
Wow. I always thought SAP stood for Spanish Audio Program. TIL.
>Subcarriers are how they added [...] stereo to FM radio...

Set your time machine for 1958, or follow this link [0] to see how RCA did both FM stereo (throughout the article they call it "multiplex") and 67 KHz "SCA" subcarriers. Admire the awesome 5KW FM transmitter cabinetry and transformer shielding.

[0] http://fmamradios.com/BTE-10B.html

One thing I find particularly interesting about articles from this time period is that Hz is not yet the name for 1/s, and so everything is in "cycles per second".

According to Wikipedia, the transition started in 1960, so we're two years away when this article was published.

Quite funny - I know someone who uses a similar setup to send GPS Coordinates for a Quadcopter and a Plane via the audio channel of the video link (he flies the Quadcopter/Plane with video goggles) to the ground station. There, an Arduino controls some stepper motors to point directional antennas at the copter/plane.

Project is at https://github.com/KipK/Ghettostation - video at https://www.youtube.com/watch?v=tiO4YCX7hJo - you can hear the modulation in https://www.youtube.com/watch?v=nm0okv8mTsg

Cool! I hadn't seen that project before, although I'd seen a few other telemetry-over-audio solutions.

They usually use simple FSK just like the "real life" helicopter in the article.

Here's an example of a common simple protocol:

http://www.flytron.com/pdf/audio_modem.pdf

Using spare audio capacity like this is actually very common - prior to digital recording, engineers would dedicate one tape channel to recording a sync signal, and in mission-critical applications would even 'stripe' the tape with the sync signal beforehand (many pro recorders can have recording and read heads active simultaneously).
It'd be interesting to scrape videos for this kind of information in order to map them en-masse. Great post!
Oona's work is always amazing. Loads of interesting hardware stuff in her blog. I wish I would be better at some mechanical engineering/electrical engineering stuff, my work is mostly web-related or big data stuff, never really get my hands dirty :(
You can basically reverse those terms for me. I'm a mech engineer who wished he knew more/was better at the web-dev / big data stuff.
I wonder how much audio compression the signal can go through before getting lost, and if joint-stereo affected it. Might have to check out the data myself :) Props to Oona.
Given that most audio compression techniques are perceptual, and the signal here falls into the "most important" 300hz to 3.4khz range that gets special attention in human hearing, I'd guess it is pretty resilient to run of the mill compressed audio codecs.
can this become/or is/ part of forensic science? if its possible to do the same on a mobile phone, and merely speaking into the phone, you give away your travel trajectory?
No, in this case it was intentionally encoded in the audio.
pastimes leaven afraid measure enemy from revolting approached flagon sons virginity notice surmounted rebel threefold nets succeeding terrible OTHER admittest estimation turbulent servant's imperfect silence containing heart decree electronically acuteness print preparest enjoined namely unutterable caresses frightful Mammon heaven steered congratulating Great tumultuous attentive hearken rescuing got momentous exacted gentleness hopeful AM consists beams aged -unto crudities expects breast marrying disposed senator's whit elevation sentences or instructest food draught metre upon stated instability gainsay physician scraped foreigner talkers arithmetic true-speaking filling meanings foully calledst Be caves stupidity obedient helping draws openest clasped year before follows stirred modesty anonymous sanctity thirsted anxiously i ranged opinion THE wedlock meditate sacrificed fall resist setting outset four-footed other's roused spake Ignorant dumb Interrupt anointings teaches apostle Jordan gladdened persuasions suffered shared settled alloy audience feverishness lust probable uncertainties imbibe stones sparedst females incredible bridegroom shut everywhere weaving likely mistress abundance nurse ear dumb bestowedst desirous suitable scratching true-speaking blunt Sudden prayer incensed worshipper reverently came propoundest deep redemption death-bringing
This is the kind of article that makes HN worth coming back for.
I love Oona Räisänen's blog. She's my hero. She combines a love of figuring stuff out with lots of fun hacks. And when I read her blog it makes me happy to see someone with that joy of uncovering mysteries.
You've probably already seen it, but in case you haven't: her talk at 30C3 was excellent and is worth a watch. https://www.youtube.com/watch?v=R-2k6TMPMRo
Been there, was cool indeed! If you aren't planning to already, you should come to the 31c3 :)
It is a certain commitment to Germany over Christmas.
It started the day after Christmas, though I did travel on second Christmas day. Totally worth it in my opinion. This was my first year and I can say that an extra day of that experience is always worth it.

Also WiFi totally rocked on day -1, but if you want that I guess you could also go wired any other day (symmetric gigabit and the best abuse policy in the world yay!).

But of course you can also travel on the day it starts and miss a few talks, it's up to you and your family how much of an issue it is to miss 2nd Christmas day. I was home in plenty of time for new year though, you still have that ;)

That and Hamburg is a beautiful town.
Having become hooked on watching the feeds over Christmas I actually have been thinking about going to the next one.
This was a fascinating talk. Thanks for sharing it.
The talk was first given at 44CON in September in 2013 (but only available on the DVD, not posted on the youtube channel).

Funnily enough, this isn't the first time Oona's RDS adventures have been on HN[1]. Indeed, there's a comment from a while back on here[2] from the time I was trying to convince her to submit to 44CON. The thing that really surprises a lot of people is that Oona does this sort of thing in her spare time.

[1] - https://news.ycombinator.com/item?id=5656677

[2] - https://news.ycombinator.com/item?id=5657930

I just wanted to reply here with "You are my hero" . But someone beat me to it. I must subscribe now.

This also fires up my drive to get more into Radio's and radio astronomy. It so fun to be able to grab all that stuff from the air that most people are unaware of. I got my first handheld a while ago, and people were like "WOW amaze" when There was a really clear night in Budapest, Hungary with the ISS 70deg. overhead, and I was picking up Russian com while pointing to the illuminated station. ( -- yes unlicensed (but I don't TX) ). And now planning to get a license because more bands for the win, and licensed radio operators actually get much love from government and rescue services.

There's also lots of stuff that you can do with a cheap DVB-T tuner and simple (DIY) aerial.

Wow, she is really hot!
I think she is also pretty hot!
And here I always consider myself paranoid when wondering whether odd patterns in anything mean anything. Guess I'm just too noob and inpersistent to find anything.
Amazing!!! I would have just dismissed it as static interference, and not even think twice.

Hmmm, makes me think twice about the beeping sounds I hear when my phone is right next to my radio. I know it's data being transmitted/received, but I wonder if it can be deciphered in this manner.

It's the phone checking in with the base station. As someone who records sound for a living, this is one of the banes of my professional life - I tell people on film sets to turn their phones off, and they think I mean 'don't use your phone' whereas in fact I mean 'shut it down completely.'
wow.. this girl is superhuman...
Can someone explain how she plotted the car's position? Did she manually reconstruct it based on the video and the information she derived from the helicopter's noise?
this is rad.
I'd had a copy of her dialup decoded poster on my wall for a while; forgot where I found it but it was immediately something I wanted to hang up... glad to see its being monetized via poster sales, its quite a lovely work of art.

Of course, I also find chip tape outs beautiful, much to my wife's dismay.

  http://vlsiweb.stanford.edu/~jaeha/chip_gallery.html
I love this:

Several people in the restaurant were waiting for orders with their similar devices, which suggested to me this could be a pager system of some sort. Turning the receiver over, we see stickers with interesting information, including a UHF carrier frequency. For this kind of situations I often carry my RTL2832U-based television receiver dongle with me (the so-called rtl-sdr).

I knew I was forgetting something.

http://www.windytan.com/2013/09/the-burger-pager.html

http://www.oz9aec.net/index.php/gnu-radio/gnu-radio-blog/464...

I think this is what she was talking about? Note to self: buy one! :D

http://www.amazon.com/NooElec-RTL-SDR-RTL2832U-Software-Pack...

It's so cheap it's practically free (I mean come on, 3.2MHz BW for that price?). The included antenna is horrible but it suffices for small things like finding out something about the restaurant buzzers.

Oona is doing an extremely important service for Ham radio communities etc. She is bringing the knowledge of all of this to a wider audience on the internet.

For this kind of situations I often carry my RTL2832U-based television receiver dongle with me

But of course.

As you would, really.
I've seen similar devices in a pizza joint. Does anyone know why they are so big and ugly?
So people don't steal them; so people have to hold them or put them on a table and don't miss when they buzz.
I need to learn HW.

Could someone detail more information about the tools she used?

Wow. People on HN do a lot of cool things but that really blew me away. It all sounded so casual too.

This is real Hacker News.

If I'd seen this recreated in an episode of CSI, I would have thought "Bullshit."
Yup, I guess there is little overlap between the CS community and electronics community.
Also, surprisingly, after being exposed to things like this over and over again, people in CS community still underestimate the capabilities of technology.
The thing I love most about her work is it's witty, but to the point and I can always understand it.

I'm not a big fan of the tl;dr movement, but I also don't like dauntingly long blog posts. Nails it every time. Hats off!

What is the tl;dr movement?
He means people complaining that a post is too long and so they won't read it.
I didn't get how she can get so much sense out of what is basically line noise - until the comment that asked what tools she uses, and she says Perl. Ah, just a day in the life :)
Suddenly, my telecom courses in CS now seem a lot more fun than they really were. It's like magic.