U.S. Military Turned GPS into a Global "Numbers Station"

🌘 Subscribe to 404 Media to get The Abstract, our newsletter about the most exciting and mind-boggling science news and studies of the week.

The U.S. military has likely been quietly broadcasting codes for its global encryption network using public GPS for nearly 20 years, turning each satellite into a hidden “numbers station,” according to Steven Murdoch, an information security expert, who detailed his findings in a new article in Inside GNSS .

That means every device that uses GPS has been receiving hidden government information for years, and nobody outside the military knew it until now.

Murdoch, a professor of security engineering and head of the Information Security Research Group at University College London, presented evidence that a 176-bit GPS sequence labelled “Subframe 4, Page 17” is encrypted material from the Pentagon’s Over-the-Air Distribution (OTAD) network, which delivers cryptographic keys to military personnel around the world.

“I think the evidence that it's for key transmission—for use in distributing the keys for accessing the military GPS signals—is pretty strong now,” Murdoch said in a call with 404 Media. He noted that the military has “specialized receivers that have the ability to have keys loaded into them” and “presumably have the ability to decrypt these special messages.”

In his new article, Murdoch described how this “forgotten 176-bit slot in the world’s most successful navigation signal turned out to be its quietest and most consequential broadcast.”

Murdoch first spotted the sequence more than a decade ago while he was a graduate student tasked with writing a decoder for raw GPS data while working on a project funded by the European Space Agency.

“I noticed that there was this random-looking data present in the subframe,” he recalled. “I looked at the specification, and thought that was a little bit unusual. I recorded a bunch of it to look for any obvious patterns, but that wasn't the main role of the project, so we moved on.”

From the beginning, he suspected that the subframe field contained encrypted transmissions because the data was so random. “Random data is actually very unusual to get in nature,” Murdoch said. “If you see it, either it's been carefully designed to be random—but then, why is someone sending out random data?—or it's encrypted data. I thought encrypted data is by far the most likely explanation.”

He returned to the subframe on and off over the years, and solicited guesses about its content on Stack Exchange in 2023. Ahmed Kamruddin, a master’s student at UCL, developed the project further in 2025. Then, this year, Murdoch put the last pieces of the puzzle together over several weeks by analyzing open archive Global Navigation Satellite System (GNSS) recordings collected since 2007 and kept by GFZ Helmholtz Centre for Geosciences.

... continue reading