Numbers station

From Wikipedia, the free encyclopedia

Jump to: navigation, search

Numbers stations (or number stations) are shortwave radio stations of uncertain origin. They generally broadcast artificially generated voices reading streams of numbers, words, letters (sometimes using a spelling alphabet), tunes or Morse code. They are in a wide variety of languages and the voices are usually women's, though sometimes men's or children's voices are used.

Evidence supports popular assumptions that the broadcasts are used to send messages to spies. This usage has not been publicly acknowledged by any government that may operate a numbers station, but in one case, Cuban numbers station espionage has been publicly prosecuted in a United States federal court.[1]

Numbers stations appear and disappear over time (although some follow regular schedules), and their overall activity has increased slightly since the early 1990s. This increase suggests that, as spy-related phenomena, they were not unique to the Cold War.

Contents

[edit] Suspected origins and use

According to the notes of The Conet Project,[2] numbers stations have been reported since World War I. If accurate, this would make numbers stations among the earliest radio broadcasts.

It has long been speculated, and was argued in court in one case, that these stations operate as a simple and foolproof method for government agencies to communicate with spies working undercover.[3] According to this theory, the messages are encrypted with a one-time pad, to avoid any risk of decryption by the enemy. As evidence, numbers stations have changed details of their broadcasts or produced special, nonscheduled broadcasts coincident with extraordinary political events, such as the August Coup.[citation needed]

Number Stations are also acknowledged for espionage purposes in Robert Wallace and H. Keith Melton's Spycraft:[4]

The one-way voice link described a covert communications system that transmitted messages to an agent's unmodified shortwave radio using the high-frequency shortwave bands between 3 and 30 MHz at a predetermined time, date, and frequency contained in their communications plan. The transmissions were contained in a series of repeated random number sequences and could only be deciphered using the agent's one-time pad. If proper tradecraft was practiced and instructions were precisely followed, an OWVL transmission was considered unbreakable. [...] As long as the agent's cover could justify possessing a shortwave radio and he was not under technical surveillance, high-frequency OWVL was a secure and preferred system for the CIA during the Cold War (p. 438).

Others speculate that some of these stations may be related to illegal drug smuggling operations.[5] Unlike government stations, smugglers' stations would need to be lower powered and irregularly operated, to avoid location by triangulated direction finding, followed by government raids. However, numbers stations have transmitted with impunity for decades, so they are generally presumed to be operated or sponsored only by governments. Also, numbers station transmissions in the international shortwave bands typically require high levels of electric power that is unavailable to ranches, farms, or plantations in isolated drug-growing regions.

High frequency radio signals transmitted at relatively low power can travel around the world under ideal propagation conditions, which are affected by local RF noise levels, weather, season, and sunspots, and can then be received with a properly tuned antenna of adequate size, and a superb receiver. However, spies often have to work only with available hand held receivers, sometimes under difficult local conditions, and in all seasons and sunspot cycles.[6][7] Only very large transmitters, perhaps up to 500,000 watts, are guaranteed to get through to nearly any basement-dwelling spy, nearly any place on earth, nearly all of the time. Some governments may not need a numbers station with global coverage if they only send spies to nearby countries.

Although no broadcaster or government has acknowledged transmitting the numbers, a 1998 article in The Daily Telegraph quoted a spokesperson for the Department of Trade and Industry (the government department that, at that time, regulated radio broadcasting in the United Kingdom) as saying, "These [numbers stations] are what you suppose they are. People shouldn't be mystified by them. They are not for, shall we say, public consumption."[8]

It is believed that listening to numbers stations without permission in the UK is illegal under Section 48 of the Wireless Telegraphy Act 2006.[citation needed]

Numbers stations are often given nicknames by enthusiasts, often reflecting some distinctive element of the station such as their interval signal. For example, the "Lincolnshire Poacher", formerly one of the best known numbers stations (generally thought to be run by MI6 as its transmissions have been traced to RAF Akrotiri in Cyprus), played the first two bars of the folk song "The Lincolnshire Poacher" before each string of numbers. "Magnetic Fields" plays music from French electronic musician Jean Michel Jarre before and after each set of numbers. The "Atención" station begins its transmission with the Spanish word "¡Atención!"

Although it is time-consuming and may require costly global travel to pinpoint the source of a radio transmission in the shortwave band, errors at the transmission site, radio direction-finding, and a knowledge of shortwave radio propagation have provided armchair detectives clues to some number station locations.

For example, the "Atención" station was originally presumed to be from Cuba, as a supposed error allowed Radio Habana Cuba to be carried on the frequency.[9] Whether the frequency of Radio Habana Cuba and the frequency of the "Atención" station merely interfered with each other or whether the operator of the station was listening to the radio and it accidentally ended up on the air is unclear. Circa 2000–2001, the United States has officially identified Atención as Cuban.

Also, several articles in the radio magazine Popular Communications published in the 1980s and early 1990s described hobbyists using portable radio direction-finding equipment to locate numbers stations in Florida and in the Warrenton, Virginia, area.[10] From the outside, they spotted the station's antenna inside a military facility. The station hunter speculated that the antenna's transmitter at the facility was connected by a telephone wire pair to a source of spoken numbers in the Washington, D.C., area. The author said the Federal Communications Commission would not comment on public inquiries about American territory numbers stations.

On some stations, tones can be heard in the background. It has been suggested that in such cases the voice may be an aid to tuning to the correct frequency, with the coded message being sent by modulating the tones, perhaps using a technology such as burst transmission.

The use of number stations as a method of espionage is discussed in Spycraft:[4]

The only item Penkovsky used that could properly be called advanced tradecraft was his 'agent-receive' communications through a one-way voice-link. These encoded messages, known as OWVL, were broadcast over shortwave frequencies at predetermined times from a CIA-operated transmitter in Western Europe. Penkovsky listened to these messages on a Panasonic radio — strings of numbers read in a dispassionate voice — and then decoded them using a one-time pad. (p. 37)

[edit] The Atención spy case evidence

Atención of Cuba became the world's first numbers station to be officially and publicly accused of transmitting to spies. It was the centerpiece of a United States federal court espionage trial following the arrest of the Wasp Network of Cuban spies in 1998. The U.S. prosecutors claimed the accused were writing down number codes received from Atención, using Sony hand-held shortwave receivers, and typing the numbers into laptop computers to decode spying instructions. The FBI testified that they had entered a spy's apartment in 1995, and copied the computer decryption program for the Atención numbers code. They used it to decode Atención spy messages, which the prosecutors unveiled in court.

United States government evidence included the following three examples of decoded Atención messages.[11] (Not reported whether the original clear texts were in Spanish, although the phrasing of "Day of the Woman" would indicate so.):

  • "prioritize and continue to strengthen friendship with Joe and Dennis" [68 characters]
  • "Under no circumstances should [agents] German nor Castor fly with BTTR or another organization on days 24, 25, 26, and 27." [112 characters] (BTTR is the anti-Castro airborne group Brothers to the Rescue)
  • "Congratulate all the female comrades for International Day of the Woman." [71 characters] (Probably a simple greeting for March 8, International Women's Day)

At the rate of one spoken number per character per second, each of these sentences takes a minute or more to transmit.

The moderator of an e-mail list for global numbers station hobbyists claimed "Someone on the Spooks list had already cracked the code for a repeated transmission [from Havana to Miami] if it was received garbled." Such code-breaking is possible if a one-time pad decoding key is used more than once.[12]

[edit] Formats

Generally, numbers stations follow a basic format, although there are many differences in details between stations. Transmissions usually begin on the hour or half-hour.

The prelude or introduction of a transmission (from which stations' informal nicknames are often derived) includes some kind of identifier, either for the station itself and/or for the intended recipient. This can take the form of numeric or radio-alphabet "code names" (e.g. "Charlie India Oscar", "250 250 250"), characteristic phrases (e.g. "¡Atención!", "1234567890"), and sometimes musical or electronic sounds (e.g. "The Lincolnshire Poacher", "Magnetic Fields"). Sometimes, as in the case of the Israeli radio-alphabet stations, the prelude can also signify the nature or priority of the message to follow (e.g.(hypothetically) "Charlie India Oscar-2", indicating that no message follows). Often the prelude repeats for a period before the body of the message begins.

There is usually an announcement of the number of number-groups in the message, then the groups are recited. Groups are usually either four or five digits or radio-alphabet letters. The groups are typically repeated, either by reading each group twice, or by repeating the entire message as a whole.

Some stations send more than one message during a transmission. In this case, some or all of the above process is repeated, with different contents.

Finally, after all the messages have been sent, the station will sign off in some characteristic fashion. Usually it will simply be some form of the word "end" in whatever language the station uses (e.g. "end of message, end of transmission"; "Ende"; "fini"; "final"; "konets"). Some stations, especially those thought to originate from the former Soviet Union, end with a series of zeros, e.g. "000 000"; others end with music or other sundry sounds.

Due to the secretive nature of the messages, the cryptographic function employed by particular stations is not publicly known, except in one or possibly two cases.[13] It is assumed that most stations use a one-time pad that would make the contents of these number groups indistinguishable from randomly generated numbers or digits. In the definitely known case, the former state of West Germany did use a one-time pad for numbers transmissions.[14]

[edit] Transmission technology

Although few numbers stations have been tracked down by location, the technology used to transmit the numbers has historically been clear — stock shortwave transmitters using powers from 10 kW to 100 kW.

Amplitude modulated (AM) transmitters with optionally variable frequency, using class-C power output stages with plate modulation, are the workhorses of international shortwave broadcasting, including numbers stations.

Application of spectrum analysis to number station signals has revealed the presence of data bursts, RTTY-modulated subcarriers, phase-shifted carriers, and other unusual transmitter modulations like polytones.[15] (RTTY-modulated subcarriers were also present on some U.S. commercial radio transmissions during the Cold War.[16])

The frequently reported use of high tech modulations like data bursts, in combination or sequence with spoken numbers, suggest transmissions for differing intelligence operations.[17]

For spies in the field, low tech spoken number transmissions continue to have advantages in the 21st century. High tech data receiving equipment is difficult to obtain,[18] and being caught with more than a civilian shortwave news radio could be construed as evidence of spying. Yet governments' embassies, aircraft, and ships at sea are known to possess complex receiving equipment that could make regular use of encrypted data transmissions from the home country. These probably include charts and photos that require more transmitted data than can be sent efficiently using spoken numbers.

[edit] The USSR and superpower number stations

  • During the Cold War there was substantial evidence that the USSR may have used 500 kW transmitters on the eastern side of the Urals to reach agents in Western Europe, North Africa, and possibly North America.
  • HF direction finding evidence that was collected by many different sets of amateurs in Europe, Africa, and the Americas during the Cold War substantiates number stations broadcasting from the East of the Urals.
  • Existing USSR technical literature shows that the USSR pioneered HRS 8/8/1 directional HF antennas for shortwave news and information broadcasting in the late 1960s–mid 1970s. Thus it is possible that lower transmitter powers (like 100 kW) were used in the 1980s — the later part of the Cold War.
  • Superpower number station broadcasting from the USSR cannot be concretely proven to this day: The USSR jammed HF broadcasts from the west making many HF direction finding attempts nearly impossible. The HF bands in the European region were very crowded during most of the Cold War making good HF direction finding problematic.

[edit] Documented instances of interference to broadcasts

The North Korean propaganda station Voice of Korea began to broadcast on the Lincolnshire Poacher's former frequency, 11545 kHz, in 2006, possibly to deliberately interfere with its propagation. This clash can be viewed in video format. The apparent target zone for the Lincolnshire Poacher signals originating in Cyprus was the Middle East, not the Far East which is covered by its sister station Cherry Ripe.

On 27 September 2006, amateur radio transmissions in the 30 m band were affected by the E7 "Russian Man" number station at 1740 UTC. The interference can be heard here.

The late "Havana Moon" reported in his own publication "The Numbers Factsheet" in October 1990 that "one particularly dangerous station has been interfering with air to ground traffic on 6577 kHz, a frequency allocated to international aeronautical communications in the busy Caribbean sector". "On at least one monitored transmission, the air traffic controller at ARINC moved the pilot to an alternate frequency as the numbers transmission was totally blocking the frequency from effective use".

A station operated by the West German BND agency whose callsign was "Hotel Kilo" used to transmit on 9450 kHz, interfering with Radio Moscow (now The Voice of Russia) which used the same frequency. A tape recording of the interference was submitted to Radio Moscow which prompted this response.

SW Radio Africa transmits from Meyerton, South Africa, on 4880 kHz and is the "Independent Voice of Zimbabwe". A video of the Mossad E10 station "Uniform Lima X-Ray" interfering with the African station.

The religious station WYFR transmits from Okeechobee, Florida, USA, on 6855 kHz. It is regularly affected by the Cuban Spanish number station "V2". A video shows the V2 interfering with the American station.

A BBC frequency, 7325 kHz, has also been used. This prompted a letter to the BBC from a listener in Andorra. She wrote to the World Service "Waveguide" program complaining that her listening had been spoiled by a female voice reading out numbers in English and she asked the announcer what this interference was. The BBC presenter laughed at the suggestion of spy activity. He had consulted the experts at Bush House (BBC headquarters) who declared that the voice was reading out nothing more sinister than snowfall figures for the ski-slopes near the listener's home. With more research into this case, short wave enthusiasts are fairly sure that this was a numbers station being broadcast on a random frequency.[19] The likelihood of the broadcast being snow readings is in doubt because it would have been illegal to broadcast on an already used frequency.

Radio Ukraine International uses 9950 kHz in the 31 metre band. At 1610 UTC on Thursday 22 November 2007, the powerful S06 Russian number station transmitted a call up of "425". You can see a video of this.

Radio Mediterranee Int. (Medi 1) transmits on 9575 kHz from Nador, Morocco. On 11 September 2008, the English language number station E11a sent a message on 9576 kHz, which was hidden in the upper sideband of the Moroccan station. You can view the interference caused in this video clip.

[edit] Attempted jamming of number stations

Numbers station transmissions have often been the target of jamming attempts. Despite this targeting, many number stations continue to broadcast unhindered. Several theories exist that aid in explaining the inability to effectively jam the transmissions. With only a finite number of jamming transmitters available at any given time, it may be more efficient to block clandestine stations intended for a large audience rather than a message intended for a single person. Another theory is that there may be a "gentlemen's agreement" in place; i.e. "we won't jam yours if you don't jam ours". In addition, the haphazard nature of some stations, e.g. not having a fixed schedule or frequency, also makes jamming more difficult because the broadcast may go undetected.

Historical examples of jamming:

[edit] Classification

Although most number stations have various nicknames which usually describe some aspect of the station itself, the ENIGMA 2000 number stations monitoring group has assigned a code to each known station, this takes the form of a letter followed by a number (or, in the case of some "X" stations, more letters). The letter indicates the language used by the station in question:

  • E indicates a station broadcasting in English.
  • G indicates a station broadcasting in German.
  • S indicates a station broadcasting in a Slavic language.
  • V indicates all other languages.
  • M is a station broadcasting in Morse Code.
  • X indicates all other transmissions such as polytones in addition to some unexplained broadcasts which may not actually be numbers stations.
  • T indicates a station broadcasting in an unknown language.

For example, the well known, defunct Lincolnshire Poacher station has the designation E3 (or E03), the Cuban "Atencion" station has designation V2 (or V02). The most recent station to be given a designation is E27, which was a station heard broadcasting on several occasions in late 2006 and early 2007.

Some stations have also been stripped of their designation if they are discovered not to be a numbers station- this was the case for E22 which was discovered in 2005 to be test transmissions for All India Radio.

[edit] Popular culture references

 Lists of miscellaneous information should be avoided. Please relocate any relevant information into appropriate sections or articles. (August 2007)

The West German film Der Westen Leuchtet shows an agent called Harald Liebe receiving a number station transmission via a Sony ICF-7800 radio. He is then shown decoding the message using his one-time pad.[21]

The poem Alarm of the Polish poet Antoni Słonimski, describes the war raid of Warsaw in September 1939. The fragment including authentic radio message:

"UWAGA! Uwaga! Przeszedł!
Koma trzy!"
Ktoś biegnie po schodach.
Trzasnęły gdzieś drzwi.
Ze zgiełku i wrzawy
Dźwięk jeden wybucha rośnie,
Kołuje jękliwie,
Głos syren - w oktawy
Opada - i wznosi się jęk:
"Ogłaszam alarm dla miasta Warszawy!"

Translated by Stefan Golston:

"Attention! Attention! He passed by!
Comma three!"
Somebody runs on the stairs,
Door slammed somewhere,
One sound of the tumult and uproar
Bursts out, timidly rolls, grows,
Sound of sirens - in octave
Subsides - and rises the moan:
"Announcing alarm for the city of Warsaw!"

[edit] Recordings
"Phonetic Alphabet Nato"
"Phonetic Alphabet Nato" from The Conet Project
Problems listening to this file? See media help.

[edit] See also

[edit] References

  1. ^ Sokol, Brett (2001-02-08). "Espionage Is in the Air". written at Miami, FL, USA. Miami New Times. http://www.miaminewtimes.com/2001-02-08/news/espionage-is-in-the-air/. Retrieved on 2009-02-28. 
  2. ^ "The Shortwave And the Calling: For Akin Fernandez, Cryptic Messages Became Music To His Ears", The Washington Post, August 3, 2004.
  3. ^ Wagner, Thomas (2004). "Chapter 6 "So here she was with a pillow over her head and over the radio..."". If It Had Not Been for Fifteen Minutes... a true account of espionage and hair-raising adventure. http://www.myspystory.com/chap6.html. Retrieved on 2009-02-28. 
  4. ^ a b Wallace, Robert; Melton, H. Keit (2008). Spycraft: The Secret History of the CIA's Spytechs, from Communism to al-Qaeda. 
  5. ^ Secret Frequency.
  6. ^ Miami - News - Espionage Is in the Air
  7. ^ IF IT HAD NOT BEEN FOR 15 MINUTES
  8. ^ Salon People Feature | Counting spies
  9. ^ William Poundstone, "Big Secrets", p. 197.
  10. ^ (Smolinski reported by Mays,2005) (now a password URL, but retained as archive record)
  11. ^ Espionage Is in the Air, Miami New Times, 2001-02-08, p.1
  12. ^ Chris Smolinski of Spooks to Miami New Times reporter Brett Sokol. Espionage Is in the Air, 2001-02-08, p.1
  13. ^ In the possible case, the underlying type of encryption might have been stated in the court record of the Attencion case when the secretly copied decryption software was introduced into evidence.
  14. ^ See If It Had Not Been For 15 Minutes, Chapter 7 for a simplified explanation of decoding West German numbers messages without a computer.
  15. ^ Schimmel, Donald W., The Underground Frequency Guide: A Directory of Unusual, Illegal, and Covert Radio Communications (3rd ed.) [Solana Beach, California: High Text Publications, Inc., 1994], pp. 27–28.
  16. ^ Collins, Barry W., W4TLV, "The day the U.S. Army invaded W4TLV," QST,vol. 81, pp. 48–49 (July 1997)
  17. ^ NSNL 15 - Voice stations
  18. ^ Even a non-standard civilian shortwave radio can be difficult to obtain in a totalitarian state. See If It Had Not Been For 15 Minutes, chapter 6 for the problems of obtaining a numbers station receiving radio in East Germany during the Cold War.
  19. ^ Secret Signals
  20. ^ Report on Firedrake jammerPDF (97.2 KB)
  21. ^ Der Westen Leuchtet

[edit] External links

[edit] Overviews

[edit] Feature articles

[edit] In use

  • If It Had Not Been For 15 Minutes Thomas Wagner's dramatic first hand account including numbers station use, during a notable Cold War defection from the former East Germany.
  • Espionage Is in the Air - Miami New Times, 2001-02-08. Backgrounder to trial of Wasp Network of Cuban spies accused of receiving instructions from the ¡Atención! numbers station.

[edit] In depth

[edit] Media and music

v • d • e
Espionage
v • d • e
Intelligence cycle management
Intelligence
collection
management
HUMINT/
Human Intelligence
SIGINT/
Signals Intelligence
MASINT/
Measurement and
Signature Intelligence
Others
Intelligence
analysis
management
Intelligence
dissemination
management
Retrieved from "http://en.wikipedia.org/wiki/Numbers_station"
Personal tools