Here are some more things you can do with your RTL-SDR after the first 50:
Meteor weather satellite reception (Russian counterpart of the NOAA satellites, but digital, so higher res and in color)
Digital Radio Mondiale -- digital radio but for shortwave
Analog TV -- if you're in an area that still broadcasts this (unlikely), you can receive a black & white picture and closed captioning. If no OTA broadcasts remain, you can use the analog output of a VCR or DVD player
GPS -- rtlsdr is capable of decoding GPS, Galileo, and BeiDou! (Likely not GLONASS since each satellite uses a separate frequency, spreading the signal beyond the sdr's bandwidth)
Hidden secondary audio broadcasts inside FM radio (like the stereo audio hack, but using higher frequencies in the demodulated stream)
Brazilian outlaws and UHF pirates using open repeaters on US military satellites launched in the 70s
TEMPEST / "Van Eck phreaking" where you can remotely read a nearby screen due to leakage from the monitor or video cabling
Instrument landing system -- if you're near an airport you can tune to a runway's ILS frequency and see the signal change as you move from the left side of the runway to the right
Infrared remotes -- stick an IR photodiode in the antenna port and you can demodulate codes from remote controls
Passive radar -- Tune into a very narrowband signal like a VOR or ATSC pilot signal, set your decimation extremely high (i.e., trading bandwidth for dynamic range) and you can see nearby planes in the area from their doppler-shifted reflections of the main signal
I went down the tunnel of using SDR to recieve those transmissions, and share them online.
Then I went a bit further.
What if you could transcribe the broadcasts into something like a text feed? What if you could add location information somehow to monitor where things were going on in your region? Could you use AI to somehow organize the data into a more useful format?
What if this data was valuable? Maybe you could sell this as a service? Who would buy it? Public safety organizations? Hospitals? News organizations?
I spent a few days worth of freetime figuring out how you'd do someting like this, and got to a place where I figured it was conceptually possible.
Then somewhere in my googling, I stumbled across this site: http://citizen.com/ - and realized that someone had already turned my idea into what looks like a pretty mature product.
Ahh well. I'm sure my billion dollar idea will come later.
In the meantime, I'd still like to mess with SDR at least so I can know what's going on around me next time there's a fire or other public safety incident, before it gets reported on.
Do note that if you purchase an RTL-SDR these days, you'll probably get a v4 which, at least as of last year, does not play out-of-the-box at all with the software available on the Ubuntu apt repos and the RTL-SDR drivers that ship with 24.04 out-of-the-box — there were some hardware protocol/interface changes between v3 and v4 that make the old drivers incompatible and you'll get a litany of misleading or non-specific errors if you try without downloading and installing the latest drivers from GitHub (or somewhere).
Also, I gave a 10-minute talk version of this post at !!Con last year: https://www.youtube.com/watch?v=Xic63tHw2Bo
There a ton of devices that use 433Mhz. You can also extend rtl_433 pretty easily.
One of the hospitals had been using it and would page people with PII -- including which people were in which room. So you could kinda see what was happening in the hospitals -- particularly during covid.
There kinda was a life cycle, seeing people admitted, O2 alerts firing off, and then the morgue being called to a room.
Overall, it was both interesting to have insight into something that you weren't ever going to be allowed to have access, and also very very sad.
Fifty Things you can do with a Software Defined Radio - https://news.ycombinator.com/item?id=39728153 - March 2024 (40 comments)
It runs on an Orange Pi Zero 3 SBC.
The treaty of Rome says otherwise. Germans too are free to receive.
I was last active on HAM bands about 15 years ago, but that sounds about right. And the weather.
Just curious about if the original title was rule breaking or something.
edit: I think it's just a dipole
Looks like hug of death strikes again!
>Fast forward a few decades, next week is my wedding and that voice on the other side of the radio is...
I think I've seen too many rom-coms because I was sure this sentence going to end with "my fiance." : )
one day I learned that you could tune in all sorts of non-TV frequencies. In particular, you could tune into any phone calls my neighbors were making on their wireless phones.
i loved that little tv and used it up until the conversion to digital OTA tranmissions.
RTL-AMR: https://github.com/bemasher/rtlamr
I'm amazed to see that liveatc.net has no receivers in Germany, maybe a sign that other people also have this interpretation of the legislation?
Tried once and just got huge amount of noise all over HF. Except for a few strong shortwave and Amateur Radio stations, the rest of HF was pretty useless.
Even had decent ground plane and tuned it.
TL,DR: you probably don't want a random wire for HF reception, but either an E-field whip antenna like that one, or an H-field loop which will likely be larger and more expensive, but will have useful directional properties that the whip will not.
[1]: https://www.nooelec.com/store/sdr/sdr-addons/ham-it-up.html
Aside from dialing into late night TV programmes my parents prohibited, there were two buttons that switched between VHF and UHF.
Toggling the UHF button allowed me to tune into police radio.
Being able to capture this via that TV felt close to magic, and I think probably went a long way to forming my associations between technology, mystery and discovery.
For triangulation though, if you have a reference signal at a known location, TDoA (time difference of arrival) requires less hardware (just a single receiver at each location, e.g. an RTL-SDR). I don't know of any open-source software which does that though I've been slowly building some for my own use (it's pretty janky at the moment).
But apparently the government of Germany doesn't quite conclude the same thing from that which I do.
Similarly, the government of Germany (apparently?) seem to make the distinction that decoding signals from a neighbors IoT device is not restricted like other "messages not meant for the general public", so honestly there's probably a lot of nuance that a naive outsider is completely missing.
But for the normal users - to be honest - most topics are too heavy on complex math. And there's no way to avoid it if you want results.
Most advanced radio stuff much more complicate than checking out a repo from GitHub and compiling it.
The AD9363 stock is only supposed to be 325mhz to 3.8ghz but stuff like the plutoSDR which uses it manages to get the transceiver all the way from 70mhz to 6ghz like the more expensive AD9361 used in the real USRP B210s
Benefit is you can transmit stuff too, not just receive unlike the RTL-SDR which is RX only
We rarely used them much, since we were often walking in a family unit, so during one of our breaks I took one out, turned it on, and blasted off into the ether "hello hello, anyone out there wanna chat?" .. did this off and on for the afternoon, when suddenly, a voice answered back "yes! who is this?" ..
A family waaaaay the hell down the mountain rage, deep in the valley, had by chance heard my call .. so the boys spent the afternoon getting to know all of the 5 kids in that family that were all drawn to the conversation.
It was awesome, for the rest of the week, our kids and theirs just chatted away .. what had started out to be, a little bit of a mundane trip for the kids, turned out to be a hilarious social experience.
We call for them every time we're out that way - never met them, but for the past 3 years, the conversations have continued and it has been a great alternative to the mobile phones we have been troubled with up in the cabin, at times.
remotely read a nearby screen
"Eavesdrop on HDMI from Unintended Electromagnetic Emanations with GNU Radio" (2024 paper), https://github.com/emidan19/deep-tempestDisplaying malicious image causes HDMI cable to emit LoRa packets, https://github.com/XieyangSun/TEMPEST-LoRa
passive radar
"Build a passive radar with software-defined radio" (2022), https://hn.algolia.com/?query=passive%20radarSEC-T 0x11 (2025) on evil maid defense, https://www.youtube.com/watch?v=ScwNIWzk4RQ
> Do you like feeling safe about leaving your expensive stuff in your hotel room? Have you ever had anything stolen out of your room, or discovered someone has gained access to your room while you weren't there? .. what about .. other rooms? Maybe not EXACTLY a hotel room? I've presented on securing hotel rooms in the past, but adding home assistant, zwave devices, co2 sensors and millimeter wave radar it's become a whole new game
SDR is amazing!
Video tutorial series with book references, https://gallicchio.github.io/learnSDR/:> We use the GNURadio software along with RTL-SDR and ADALM-PLUTO hardware to explore the world of digital communication. We build up to a simple QPSK modem and rudimentary GPS reception.
LibreSDR firmware, https://github.com/F5OEO/tezuka_fw
> official [PlutoSDR] firmware updates are no longer focus on new features for SDR enthusiastic people.. tezuka.. aims to be Universal Zynq/AD9363 firmware builder for.. PlutoSDR, Pluto+, AntSDR (e200), LibreSDR
You can easily distinguish yourself from Citizen by targeting a different demographic, different branding, different UX, interpreting the data in a different way.
Just look at how many businesses there are in any industry that deliver the same outcome for their customers but in a slightly different way.
What you're describing could be a really good news source giving live on-the-ground information to people.
Maybe instead of emergency services activity, it could be other types of activities (hazards, local events, nextdoor alerts, local business/SIGs rss feeds, etc), it is all just local info and knowledge aggregation endpoints and archives that have over-the-air and terrestrial distribution channels.
... sitting on a porch, yelling "Check your tires!" at random cars...
There is no way that they will know or care if you don't share messages.
The law[1] is worded like this:
> (1) Mit einer Funkanlage (§ 3 Absatz 1 Nummer 1 des Funkanlagengesetzes) dürfen nur solche Nachrichten abgehört oder in vergleichbarer Weise zur Kenntnis genommen werden, die für den Betreiber der Funkanlage, für Funkamateure im Sinne des § 2 Nummer 1 des Amateurfunkgesetzes, für die Allgemeinheit oder für einen unbestimmten Personenkreis bestimmt sind.
The law basically says that you may only listen to (or take note of in comparable way[2]) messages that are:
1. For you, the operator
2. For amateur radio operators according to the Amateurfunkgesetz
3. For the general public
4. For an indeterminate group of persons (I think that's an accurate translation?)
For me, a big question regarding aviation and marine traffic monitoring is what "unbestimmten Personenkreis"/"indeterminate group of persons" actually means. Since "die Allgemeinheit"/"the general public" is listed separately, I'd assume it's a distinct group from that, and to me the previous commenter's "meant for any member of the public who happens to be flying a plane nearby" sounds like it could fit that description. I'd argue, for example, that police radio is for a "determinate" group of persons, police officers and dispatchers working for the government, whereas aviation and maritime traffic is an "indeterminate" group of people, people working for all sorts of airlines, shipping companies, recreational pilots/boaters, who happen to be around the same area.
If anyone has any links to cases where this law was tried in relation to aviation or maritime communications, please share them, I have been struggling to figure out where to look for this stuff, on top of that, the law was also renamed or moved around, which makes it extra confusing.
[1] https://dejure.org/gesetze/TDDDG/5.html
[2] Might be related to this weird ruling, where a judge in a case about some ADS-B receiver decided that it was ok because rendering the position of aircraft wasn't "listening to" (as in, literally hearing) the traffic: https://openjur.de/u/130555.html - This decision is probably moot now, due the addition of "take note of in comparable way". The judge briefly mentions that actually listening to the traffic could be violating the law, but I am not sure if this point was ever properly litigated.
years ago, there used to be a very abundant market for used or chinese clone HackRF One units, but i haven't been able to find any these days.
Are you willing to say what happened afterwards?
This is still happening? I'm sorry but that's hilarious!
https://medium.com/@rxseger/receiving-ir-signals-with-rtl-sd...
As to connecting a photodiode to the antenna input, I don't see how that would work, but that may well be due to my limited understanding and imagination.
Do you mean using the photodiode in a photovoltaic mode? Also, presumably you'd have to bypass the tuner and hook to the direct sampling pins on an RTLSDR? Even with direct sampling, wouldn't the 38kHz of IR remote modulation get filtered out by the DC blocking?
If you squint enough there is nothing new under the sun and chances are that you will take a very long time to find something that hasn't already been done!
But doing your own product does several things - you learn a lot, you position yourself for future success, you see future ideas differently. And maybe you're okay for something to not be a billion dollar idea and you can outlast a venture funded product.
Maybe I'm just projecting, because I've put of building something for such a long time!
When I was installing it I actually came across the Ubuntu installation notes only to find I didn't need to do any of those things on my systems.
That being said last I used it extensively was v3 so maybe v4 is better. Did they get rid of thread per block and allow you to have a single thread service a sub signal chain? I remember that the number of context switches between threads, and balancing latency vs buffer sizes was a pain in the rear.
https://www.rtl-sdr.com/hunting-for-space-radio-pirates-on-t...
prisoners of gravity: a favorite from_my_youth
1) https://inv.nadeko.net/watch?v=-deHrvY2b08&list=PL08AD26AD9C...
https://www.youtube.com/watch?v=wIN7DVGBbKM
I imagine, provided the IR's frequency can be sampled by the SDR, it would look like fairly wide band bursts that could be decoded? Especially if you just treat the SDR as a ADC Oscilloscope
This is very good advice: we often give up on "great ideas" once we find that they have already been done.
But the vast majority of people we consider successful did not invent anything completely new, they just made a better kind of XYZ, sometimes not even that dramatically different. If you think about it, it's a much more logical path to success than expecting to be the next DaVinci.
WAY cheaper than the other options too.
The pocsag data, if this detailed, would have mentioned giving specific patients specific medicine that would then cause their O2 sat to drop. Since that isn't mentioned, either they forgot, or maybe there's an axe to grind.
Nevertheless, having grabbed pocsag in my area i don't remember seeing much PII, mostly room numbers, if anything.
https://www.ntia.gov/files/ntia/publications/2003-allochrt.p...
FM wideband is something like 88-108MHz.
108-137MHz is a lot of aviation traffic.
7-144MHz lots of long range DX.
Then the 144-148 amateur band.
151-154 Multi Use Radio Service
433MHz has all kinds of sensor data from the world around you.
462-467 Family Radio Service (FRS) / General Mobile Radio Service (GMRS).
900MHz area has different types of beacons, cameras, etc.
1090 for Aviation beacon ADS-B
For other freqs you can often use an upconverter or downconverter to hit the freqs you need.
Examples: https://www.nooelec.com/store/sdr/sdr-addons/upconverters-do...
My actual "MVP" was some kind of automated neighborhood newsletter, that'd monitor emergency services radio traffic, and put together some kind of "here's what happened in your neighborhood" daily newsletter.
Maybe I could get it packaged in a hardware/software package that let anyone set one up in their neighborhood.
But I mostly got stuck in privacy concerns. I'm not sure it's a valuable public service to let people know that, for example, someone had a heart attack a few blocks over.
I did think about the scientific value of some kind of statistical database that process and recorded emergency services calls though. But mostly, my ideas for commercial and moral opportunities were half-baked at the point that I discovered citizen.
One of the technical challenges I came up against was finding transcription software that could semi-accurately transcribe UHF/VHF radio traffic. However, it looks like there's some progress that's been made there since I last checked: https://www.rtl-sdr.com/radiotransciptor-real-time-radio-spe...
"Like many older satellites, the POES satellites do not have thrusters to support a controlled reentry into Earth’s atmosphere at the end of their mission life. Instead, once passivated, they are safely powered down, placed in a non-operational state, and left in a stable orbit. Without onboard propulsion or significant atmospheric drag at their current altitude, NOAA estimates they will remain in orbit for roughly 150 years before gradually reentering the atmosphere and disintegrating."[1]
[1] https://www.nesdis.noaa.gov/news/legacy-orbit-noaa-decommiss...
Also, I wouldn’t have known the product exposes an API I could use to programmatically get the (XML-only?) usage data in realtime over the network if you hadn’t told me, the product listing makes it look like it’s just a screen (and the faq doesn’t have anything about connecting to the device programmatically).
Anyhow, thanks for brining this to my attention! This might be exactly what I was looking for!
It's great fun for doing signal analysis, but I'd never want to try and implement a full-duplex communication system in production with it.
https://www.onesdr.com/rtl-sdr-vs-nesdr-which-one-should-i-b...
In the moment, notifying people who know CPR and may be nearby and able to get to a nearby location and start CPR before emergency services arrives is the base of PulsePoint [1], which seems like a useful public service.
As a digest, yeah, I don't think any usefulness outweighs the invasion of privacy. Maybe just a count of health emergencies responded to for observing trends.
None of that is to say it isn't a good idea. I appreciate the ability to see roughly what is going on when I hear sirens. Even if the sites aren't always able to show the calls. I think highway patrol doesn't show up for me.
A real time, AI snips version for my area in a running feed would be amazing. There are lots of formats and use cases; and the info is already out there.
It’s a great idea. Don’t let citizen sway you away from it.
Regarding medical emergencies, I'm pretty sure EMS just says "medical emergency" and gives the address. I've never heard them say specific patient conditions, although sometimes the ambulance can forward that to the ER.
If there were any risk, it would be making it too easy for criminals to monitor and allow them to commit crime more effectively.
Check with your electric company first, and also look at your local library -- my brother was able to borrow one from there to check compatibility first.
https://en.wikipedia.org/wiki/Broadband_over_power_lines
Thanks for correcting me on that.
I'm looking at a bladeRF...
What I was _really_ hoping to read was my water meter. It transmits so infrequently, though, so it's hard get much of anything or even know if you're successfully receiving something more than noise.
Last week, I went on an adventure through the electromagnetic spectrum!
It’s like an invisible world that always surrounds us, and allows us to do many amazing things: It’s how radio and TV are transmitted, it’s how we communicate using Wi-Fi or our phones. And there are many more things to discover there, from all over the world.
In this post, I’ll show you fifty things you can find there – all you need is this simple USB dongle and an antenna kit!

A couple of years ago, I heard about the “Make 50 of Something” technique in Vi Hart’s Fifty Fizzbuzzes. Since then, I’ve already made fifty programs for the fantasy console TIC-80 in one weekend in 2021.
I found that a very exciting experience – trying to make so many new things really pushed me to leave my comfort zone, to be creative, and not to get sucked into rabbit holes too deep.
I knew I definitely wanted to try the technique again. So, when I took a week of vacation, I decided to try to find 50 things to do with a Software Defined Radio!
A Software Defined Radio is essentially a radio that relies on a computer to do most of its data processing. It doesn’t rely on analog hardware too much – instead, most of what is does is “defined in software”, hence the name.
Usually, SDRs can detect electromagnetic waves in a much wider range than a common FM radio, which makes it especially exciting! I got interested in SDRs after reading about Albert’s project to build one as a module for the Framework laptop!
I went into this week without much knowledge of the things I’d find. I’d read through a introductory course for aspiring amateur radio operators (more on that later), but I barely knew which way to point my antenna.
If you want to follow along, this section is intended to help you get started!
Most of the 50 things also have a little infobox at the beginning, explaining the frequencies, and some special knowledge needed to receive them.
I looked into the topic a bit, and a popular, cheap SDR right now is the RTL-SDR Blog V4, which has the form factor of a simple SUB dongle. You can get it for around $30, or as a kit with telescopic antennas for $50.
Everything I tried during this week was done using this USB dongle, the antenna kit, and a long piece of wire!
(By the way, there’s another great option if you don’t want to buy anything – lots of people make their SDR accessible through the Internet! You can find a map here.)
I tried to adjust my antenna to the desired frequencies as best as I could. I think for receiving, it’s not super important that your antenna is perfectly configured, though.
For most applications, I used the dipole antennas that came with the kit I purchased. Dipole antennas have two sides that stick out the same length. You generally wanna make the whole antenna half as long as the wave length you want to receive, and orient it vertically.
My rule of thumb was to divide 72 by the frequency in MHz, and take that as the length of each side of the dipole in meters. That’d make the whole antenna a bit shorter than half of the wavelength.
For example, this is what the configuration looked like for frequencies around 100 MHz:
And for higher frequencies, I used the tiny screw-on antennas from the kit:
For specific applications like receiving satellites, or receiving locators for airplanes, I used special configurations, but I’ll discuss these as we go!
The software I liked best, and which I used for many things, was SDR++. It allows you to explore the frequency spectrum very smoothly, and has a modern user interface!
But I also used plenty of other software, on Linux in my case. I’ll link to the software as needed below.
On Monday morning, I was excited to start this project! I sat down at my desk, and got to work!
This as an obvious first thing to do, as the signals are very strong! I was using the SDR++ software, and it felt very nice browsing around and discovering the stations around me! It reminded me of exploring the radio as a child.
I found a local station that gives 1-hour slots to civic groups, for example!
This is a special frequency range in Germany: Anyone is allowed to send there, using licensed devices. There are 6 channels.
I think someone was testing their device there when I listened in. :D I heard a “Hellooo?”, then a “Test, test”, and then a “General call to all stations”. Oh, and shortly after a short transmission on channel 3 in a Slavic-sounding language!
Freenet devices have a range of only a couple of kilometers, so these people must have been pretty close! :O
While browsing the aviation frequencies, I found this station that reports weather conditions in an endless loop. It seems to be the “Automatic Terminal Information Service” of Hamburg airport!
Thanks to that, I found out that the current air pressure was 1011 hPa! :D
Listening to “messages not meant for the general public” is not allowed in Germany, so of course I didn’t do that. And if I had accidentally done that, I wouldn’t be allowed to tell you about it. 🙅
That’s short for “Automatic Dependent Surveillance – Broadcast”. Aircraft send it automatically to be tracked.
For this, I built my first antenna! From wire and and an antenna connector called “SMA”.
And it worked! \o/ I decoded the signal using the software SDRangel. Fascinating! I saw some big & small airplanes, and even a helicopter!
How stereo audio is transmitted is really interesting, because it’s backwards-compatible to receivers that don’t support it:
Here, you see the demodulated audio frequency spectrum, as shown in SDRangel. Below 19k Hz, it’s just mono audio. Then, to mark a stereo station, there’s a constant “pilot tone” at 19k Hz! (Outside of what most humans can hear.)
Then, if you double the frequency of the pilot tone, you can derive the sections where the difference of the left & right channel to the mono channel is transmitted!
Correction: I’ve been told that instead of what I call “left” and “right” in this diagram, the upper frequencies transmit the difference of the left and right channels! That way, the receiver can calculate the left and right channels from the mono signal (which is, esseutially, the sum of left and right).
If you triple the frequency of the pilot tone, you get to a range where FM stations transmit small amounts of digital metadata, like the name and genre of the station, and the current song! That’s a protocol called Radio Data System.
This system can also transmit road traffic information! There seemed to be a road closure at “0x64BE”, as decoded by SDRangel.
The Federal Highway Research Institute publishes an Excel table, where I could look up that this is a town in Lower Saxony!
This is a frequency range reserved for amateur radio operators – for non-commercial use only. You may send on this band after getting a license.
What I found here is seemingly a conversation circle facilitated by a relay around 15 km away from here – it takes input on a certain frequency, and outputs an amplified copy of it on another frequency! Klaus, Bernd, Jürgen and Horst were talking about antennas, relays, and Windows XP! 😁
The SDRangel software also has a demodulator for Digital Audio Broadcast! :O I continue to be amazed by it!
I think this was the first time I’ve received digital radio via air! I saw so many stations, and I’ve only checked a couple of channels.
The advantage of this digital channel is that there’s no noise. And I even saw a “cover image” in one of the programs!
This is a frequency range for “Private Mobile Radio”. It’s another of these bands where anyone can transmit using a licensed device!
Not a lot of activity here. I heard “Hello, hellooo!”, “Can you hear me?” and some short transmissions that sounded like a child! :D
There also seemed to be digital transmissions, but I didn’t know how to decode them yet.
The range of PMR446 devices is pretty low (a couple of hundred metres in cities), so again, the people must’ve been close!
After the first day of SDR experiments, I was amazed how much invisible communication is going on around us in the electromagnetic spectrum at the same time!
I posted each of these things on Mastodon as I went, and asked people for suggestions for more things I could receive.
At 433 MHz, there’s a frequency band for “industrial, scientific and medical” applications. And wow, there was quite a lot of activity nearby!
Using the decoder rtl_433, I saw two sensors that output the current temperature, humidity, and air pressure!
There were also some “IBIS beacons” flying by, which are used in public transportation, so maybe it’s buses driving by?
Later, an “Interlogix Security” device also appeared, reporting “closed switch states” :O
Ships send out their status using AIS (Automatic Identification System). And again, I received a lot of them here in Hamburg! :O
I was especially excited to receive data from the MS Stubnitz (a fisher boat that was turned into a culture center/techno club)! It reports its status as “moored”, and its speed as 0.1 knots! :D
Again, I used the software SDRangel. Apparently, it can also display a 3D map, but I haven’t figured out how to add 3D models…
I was curious whether you could tell if someone used their phone! So I borrowed a GSM phone, tuned to the correct frequencies, and made some test calls.
What surprised me most: You can kind of “see” the volume at which I was talking!?
In the recording, the three dense bands at the end were when I was humming into the phone at the other end. This only worked in the “receiving” direction.
I spent all Tuesday afternoon and evening learning about satellites. The program gpredict is really nice to find out when satellites will pass overhead! I learned a lot, including that one satellite I was trying to receive burned up last week! :D
I was super excited when I first received a signal from a NOAA satellite! 🛰️
But I didn’t manage to decode it properly yet. Maybe my reception was too noisy? I wanted to keep trying, but I had to move on.
In Germany, the police has switched to an encrypted digital protocol called TETRA.
Even though I’ve seen some interesting talks at CCC events about weaknesses in the decryption, all I wanted to do for now is looking at the pretty signals in SDR++. :3
Again, this is communication not meant for the general public.
I didn’t listen to someone dispatching taxis to specific addresses, and you also shouldn’t do that either. 🚕
Stay away from a site called “frequenzdatenbank”!
Some of the most fun I had was just browsing frequencies and seeing what I can find! Sometimes, I encountered signals I can’t identify.
For example, at 865-868 MHz, there was a family of slow, continuous, digital signals that made a nice melody when listened to in single-sideband demodulation!
And at 177-180 MHz, there were two very broadband transmissions. Might be TV? But I couldn’t find out what type. (It later turned out that I’d already listened to these signals – it was digital radio, DAB+.)
As I was browsing around for things to receive, I saw on this tracking website that a radiosonde was just launched in Hamburg! SDRangel could decode its transmission! It had climbed to a height of 7 km, and it’s -17 °C there!
I knew that it would eventually burst and fall back to Earth, and that I could try to get to it and find it!
I decided to go on a field trip, using trains and my bike.
I was following the tracker. The balloon popped earlier than predicted, and I frantically changed travel plans!
Eventually, it landed in a forest. I hoped I could get to it! What made this adventure more tricky was that my mobile Internet contract ran out while I was on the go, and my battery was also almost empty.
But I made it to the forest, and entered it.
As I circled the site, I encountered a person in their 60s, with a stubbly beard and a blue wool hat. He was looking in the direction of the crash site, and was holding a smartphone, so I asked him whether he also was looking for the radiosonde.
He was! We looked for it together for half an hour, jumping over small rivers and crawling through the woods, while he gave me a lot of tips related to hunting sondes.
He told me that he had found around 40 of them so far!
Usually, the sondes keep broadcasting after landing, but this one wasn’t. So he quickly guessed that someone else could’ve taken it. Or maybe it landed in the water and died?
Some pictures of the area we searched:
Eventually, we gave up, and walked back to our vehicles. He also is an amateur radio operator, and could answer a couple of questions related to building antennas!
And he was right: Someone had been faster than us! The status was changed. So in the end, I didn’t find the sonde. But something that might be even better – a friend!
In the 2-meter amateur band, there are certain frequencies for the “Automatic Packet Reporting System”. It’s a bit like IP – packets have a “from” and a “to”. They can also broadcast their position, or weather data.
Some stations seem to announce themselves as repeaters, which probably help forward the packets to increase the range.
And two people seemed to be on a “fieldday”, and broadcasted their location. :D
SDRangel can create a map automatically:
I started the day by building an antenna!
This was going to be a simple “random wire” antenna, to allow me to get better reception in the lower frequencies, which I’ve omitted so far (because I knew it would be much more fun with a better antenna)!
I measured out 21.6 m of wire (which for ✨magic✨ reasons seem to be a good universal antenna length)…
…directly attached it to the center of another SMA connector…
…and draped it all around my room!
People on the Internet say that there are many problems with this – that it would be better to have it outside, and that there’s an impedance mismatch between the receiver and the wire.
I could address those problems, but I wanna try how well this works first :)
On the 30-meter amateur band, I found people sending Morse code! :O
I’d been learning it a little bit, so if I recorded it and slowed it down, I could understand it: They’re sending their callsigns. These are from Belgium, France, and Italy! \o/
I compared to my 2-meter dipole antenna, and the reception was definitely better – I can pick up more transmissions, and with much less noise!
The German Weather Service broadcasts maritime information throughout the day on various shortwave frequencies.
They use a protocol called RTTY (radioteletype), and it took me a while to decode it. But I found a neat little program called “fldigi”: You can pipe audio to it (single side band modulation), and then if you pick the correct settings (see screenshot), it happily transcribes the messages!
Here’s the station weather reports for the Baltic Sea and Northern Sea!
I found some other strange signals on the 30-meter band. The Signal Identification Wiki was really helpful for figuring out what they were: FT8!
FT8 is quite a new protocol, invented in 2017, and it seems to be super popular right now! It allows you to transmit short messages, and again, people are looking for people to talk to (CQ), saying how well they receive each other, or saying goodbye (73).
This is the WSJT-X software.
As I was browsing the very low-frequency bands, I had a strange problem: Sometimes, that would work okayish, sometimes I could even make out voices!
But other times, it wouldn’t work at all, and everything would be loud, angry noise. Even in regions where I had better reception before!
Eventually, I found out how to solve that issue – by unplugging my notebook charger. D’oh! :D
In the low frequencies, occasionally, you can hear a short chirp! :D These are caused by ionosondes, scientific instruments which measure the properties of the ionosphere by sweeping a wide frequency spectrum.
Another signal (which I accidentally got in the same screenshot) is a radar system – in this case, according to the Signal Identification Wiki, it’s a “CODAR” system, used to measure the motion of water waves and currents along coasts! :O
How do you transmit speech over long distances? You can use “amplitude modulation”, where you change the volume of the carrier frequency to model your audio.
As a side effect, the bands to the sides of the carrier will contain a signal, as well.
One trick is to transmit just those sidebands, which saves power! But you have to “guess” the base frequency when listening. Depending on which part you transmit, this is called “lower side band” or “upper side band”.
SDR++ makes it very easy to play with this! :) Here’s someone from Serbia!
At night, low-frequency radio waves can travel further around the world, because they’re reflected by the layers of the ionosphere! There’s something magical about this.
I put my antenna outside, and I could hear a lot of broadcasting stations! On short-wave.info, you can look up where they are located.
Some stations in China are broadcasting with very high power! Some I could hear were over 7500 km away.
Wow. It’s full of stars! 🌌
Originally, I had planned the project to run from Monday to Friday. When I still had 32 things to do in Friday morning, I knew I’d need to extend it. But I hadn’t run out of ideas yet:
After I’d looked into the low frequencies on Thursday, I went to a higher band again: The Citizens Band!
This is the third frequency band I’m aware of where anyone is allowed to transmit – provided that you use a licensed device!
This is a band where my random wire antenna really came in handy. Without it, I would have had a hard time understanding anything. And even with it, transmissions are extremely noisy.
CB radio is used internationally, especially by truck drivers, it seems.
The International Beacon Project runs a network of 18 stations, which take turns transmitting their callsigns at certain frequencies.
Using this system, you can quickly get a sense of how well radio waves are currently propagating to your location. Clever!
I picked up the beacon from southern Finland! You can see its callsign scrolling away in the video. It’s followed by four dashes send with decreasing power. I only heard the first one…
I would’ve loved to receive DCF77, which powers the radio clocks in Germany! But no matter how hard I listened to 77.5 kHz, there was nothing there. I don’t think my dongle can do that.
So I used higher frequencies! Russia transmits its “RWM” time signal at 9996 kHz, which beeps every second, with a long beep for the full minute.
Not enough to tell the time, but enough to adjust your wrist watch, I guess!
The German Weather Service broadcasts weather maps throughout the day! You can decode them using fldigi’s “WEFAX-576” setting.
I caught this one only halfway through. According to the schedule, it’s the “Surface weather chart North Atlantic, Europe”!
If you squint really hard, you can make out the coast of Spain and the Mediterranean Sea on the right side!
I couldn’t stop trying to capture a weather satellite, it’s just too cool to receive an image from space!
That evening, an American satellite called NOAA-15 passed right over us, so I thought I’d try again. And this time, I got parts of an image! \o/
This is real-time data! At night, both transmitted images are infrared recordings.
I recorded the FM signal using SDR++, and then decoded the image using noaa-apt, which also added country outlines.
Here’s what the NOAA-15 weather satellite sounds like, by the way! tick-tock
While recording, I noticed something strange: The transmission didn’t happen at the frequency I had expected it to! And also, the frequency changed.
Then it hit me: Doppler effect! At the time of the recording, the frequency was around 4250 Hz higher than expected.
After looking up the formula, I calculated a relative speed of 9 km/s! (Which got close to its real speed, 7.5 km/s.)
These stations send encrypted messages using number sequences, possibly for espionage purposes!
So why not listen to one? There’s a surprisingly well-maintained database of them on a site call Priyom.
So I tuned into the next frequency that was listed, and: Bingo!
Allegedly, this was a station in Moscow. That day, it sent “218, 218, 218” in a loop, followed by three long beeps, which is the format of a “null message”.
So no news for the Russian spies.
The week was really intense for me. Initially, I thought I’d do 10 things per day, but it turned out that that was too much. I had to learn so many new things.
Many things I tried don’t work on my first attempt. Finding LoRaWAN signals, decoding packet radio, finding something on PMR446, decoding the satellite – those were all things that required a second (or third) attempt.
This project was exhausting, but also joyful – having committed to it, I got in a nice flow state, where I could focus on it for hours.
Often, I thought: “Okay, this is it. I can’t possibly find more things.” But this is the power of the 50 Things technique: I have to keep looking, leave my comfort zone, be creative, try things I otherwise wouldn’t have tried!
So, 15 more things, huh?
Using a protocol called “SSTV” (slow-scan television), amateur radio operators send each other postcards! :D
I’ve been browsing the usual frequencies, and tried to decode images using the software QSSTV on Linux. And I accidentally caught a piece of what seems to be a test image!
SSTV has the prettiest noise! :3
There’s a mysterious Russian station broadcasting at 4625 kHz. Sometimes, it sends encrypted voice messages.
But usually, all it does is send a honking sound every two seconds, to deter other stations from using the same frequency.
The purpose of the station is unclear, but most theories think it’s military communication.
This was a bit like trying to catch a rare insect! 🐛
LoRaWAN is a low-power, wide-area networking protocol, intended for “Internet of Things” applications.
You can see transmission in the lower half of the screenshot! It has a very cute structure: You can see eight “down-chirps”, followed by two “up-chirps”. That’s the header, followed by the payload.
To look for the signal, I made a “baseband capture” in SDR++, and opened the recording in Sonic Visualizer.
Devices like smoke detectors or meters for water or heat are sending their readings via a protocol called Wireless M-Bus.
Again, I was surprised by how many devices seem to be around! Thanks for the tip, @envy :)
wmbusmeters is a really nice tool for decoding the messages.
The chips in my SDR stick are also being used in DVB-T dongles! So, can we watch TV? Unfortunately, no.
From what I pieced together, there’s a difference between using the stick in SDR mode (where it sends the full spectrum), and in TV mode (where it sends the decoded video).
In Germany, there’s now DVB-T2, which my hardware doesn’t support in TV mode. And in SDR mode, the bandwidth is too narrow for DVB-T2. But we can scroll over a channel and look at it! :3
Did a little walk to a big intersection, to see what “device signals” I’d find there at 433 MHz.
I could confirm that the IBIS beacons are in fact being sent by buses! The included “vehicle ID” even matches the white number that’s printed on it.
I also saw some messages from tire pressure monitoring systems in cars! They also include an ID, and usually, the brand of the car! The owners probably aren’t aware how easy it would be to track them… (Thanks, @scy!)
Side note: I wonder why some signals in that band are warped like the one at 433.96 MHz here!
At first, I thought “Ah, Doppler effect again, it’s coming from a moving car!” But if that’d be the case, that car would be moving at over 700 m/s…
Friends later suspected that this effect is due to weak batteries affecting the crystal in the sending devices, or temperature changes.
So I caught a satellite again! :D This time, it was school project, the Italian satellite “Max Valier”. It continuously sends Morse code on a beacon frequency.
Pretty weak signal, but here’s what I could hear:
3MV MAX VALIER SAT ... MANFRED ES CHRISTA FUKSE 73 ... II3MV ...
Super happy about this! I got both the name of the satellite, as well as its callsign at the end, and what seems to be some kind of greeting? I later learned that ES
is Morse code shorthand for “and”, and that Manfred and Christa Fuchs were the founders of a company that helped launch the satellite!
(Thanks for the tip, @manawyrm!)
This is another thing that’s not allowed in Germany, so you shouldn’t do it.
Pagers use a format called “POCSAG” (Post Office Code Standardisation Advisory Group…), which you should not decode using multimon-ng.
Because you would find that the content is short and cryptic anyway. It would probably be repeated by several stations all around you, to make sure the whole region is covered.
Do not read the English Wikipedia page! It contains frequencies!
At this point, I was pretty tired. Focusing on this project for 6 days straight took a lot of energy, and I was always uncertain if I could actually complete all 50 things in that week! But I woke up with a fun idea:
I was curious whether I could see the NFC transceiver in my smartphone! And yeah, especially using my random wire antenna, this works really well!
My smartphone seems to emit at the NFC frequency a couple of times per second. And when unlocking the screen, it emits five very strong beeps on that frequency! I can see those from the other side of our apartment.
Surely, these signals are the same for every device, right? 😶
Observe the five beeps here:
Piko and I played around with NFC a bit more, and we found out that when getting close to an NFC tag, a smartphone emits at 13.56 MHz continuously!
So, we started sending Morse code to each other between rooms, using a smartphone and a library book! :’D
Take that, Bundesnetzagentur!
Seems that the shortest signal you can create is 0.7 s long, resulting in a meager communication speed of 3-4 words per minute…
There are ground stations that emit a signal that allow calculating your angle relative to it! If you receive two, you can determine your position. (Thanks, @fly_it!)
I heard the one close to Hamburg! And SDRangel has a decoder, of course! It calculated angles between 210° and 230°, which is pretty close to the actual value of 224°! I don’t think they are meant to be used from the ground.
The neat navigational map is from https://skyvector.com!
I spent ages trying to build my own decoder in GNU Radio. But I wasn’t familiar with it at all, and I eventually gave up. Still, that seems to be the software you wanna learn for tasks like these!
By the way, how the ground stations work is fascinating: In my case, it’s a “Doppler VOR”: It transmits a static frequency via amplitude modulation, and adds another signal that moves around in circles, so you get a Doppler frequency shift.
If you compare the two, you can calculate the angle!
This was a fun exploration: What’s the lowest-frequency broadcast I can receive?
The RTL-SDR Blog V4 stick I’m using has a neat feature – a built-in “upconverter”, which is enabled automatically when you try to listen to frequencies below what the chipset supports. This allows it to receive down to ~500 kHz!
The first stations that are comprehensible started at 1 MHz for me.
The chipset in my SDR stick go up to maximum frequency of 1766 MHz. It seems pretty quiet up there, probably because I lack proper antennas. I found these three lines in an amateur band, but they probably originate from the stick itself, or another device.
So the highest-frequency thing I’ve received is ADS-B at 1090 MHz (see entry #5)! 🎉
We’ve been over this. Not allowed in Germany. Don’t do it. ⛔
But if you’re in the US, anyone can purchase a marine radio, and even use it to transmit! :D
Just now, I was wondering whether there are any Android apps for controlling SDRs.
And it turned out, the software I liked best that week, SDR++, had an Android version since a couple of weeks! \o/
So now I could go track down the source of some of these strange signals! :3
And with that, … 🥁 … I was officially done with my “50 things to do with a software defined radio”! 🎉
This were seven very intense days, where I learned a lot of new things about radio waves and the many things they can be used for!
I was proud! I was tired! I was amazed that all those things I received are all around us, everywhere, all at once – if you know where to look. :O
Here’s some things that I haven’t tried or that haven’t worked:
Also, doing things with Wi-Fi/Bluetooth/Zigbee could be fun, but I’d need a more expensive receiver for those frequencies.
So, was this project in fact a gateway drug to getting an amateur radio license?
Yeah, probably. I’d love to transmit something and experiment more! :D
In Germany, a new license class will be introduced in summer 2024, that’ll allow you to send on the 10-meter, 2-meter and 70-cm bands (the “N class”).
In fact, there’s a really good German online course that teaches you everything you need to know: 50ohm.de
Highly recommended, even if you’re not planning on getting a license.
Finally, thanks to Piko, Chris, and Cqoicebordel for proof-reading this blog post! <3
You can add your comment in the Fediverse! Alternatively, drop me a mail at mail@blinry_._org. Also, you can support me on Patreon or subscribe to my newsletter
You can tune into remote SDR’s people set up to work with this data without having your own device or download recordings others have made.
It is this raw sample data that you then demodulate according to whatever scheme required on the PC side.
A great resource I found was pysdr.org. I had absolutely no background in RF and very little python experience but that guide explains everything from the ground up from how the IQ samples are physically generated and read in an antenna, all the modulation schemes you mentioned, and how to code useful things with the various devices. No affiliation but a great resource.
Maybe once they're turned off they're irrecoverable?
https://www.xylem.com/en-us/products--services/metrology-equ...
I know that it has a radio, but it might only transmit when it receives a signal from a vehicle driving down the street.
They'd more likely use higher bands on newer satellites to get more throughput. The GOES birds transmit up around 1.7GHz, afaik and likely higher as well.