A Gulfstream V was delivered in November 1999 as N581GA, reregistered in March 2000 as N379P, and reregistered again in December 2003 as N8068V and later N44982. Its registered owner was Premier Executive Transport Services, a company whose named officers connected to a larger roster of false identities.
It made more than fifty trips to Guantanamo Bay, which earned it a nickname. It flew from Morocco to Poland on 6 February 2003, a movement that matched the arrival of a specific prisoner at a facility the Senate later referred to only as Detention Site Blue. It carried two Egyptian nationals out of Stockholm’s Bromma airport in October 2001, hooded, at night.
None of that was discovered by an intelligence service, a parliamentary committee, or a newspaper’s own resources.
It was discovered by hobbyists standing at the end of runways with binoculars and cameras, writing down tail numbers. ADS-B tracking, which replaced the notebooks two decades later, did not create that capability. It industrialised it.
The plane spotters are the reason the ghost-plane economy’s oldest structural advantage has been substantially withdrawn in the last twenty years. For eight decades the business depended on nobody looking. It turned out that an enormous number of people enjoy looking at aircraft, that they had been keeping records the whole time, and that the records were a surveillance system nobody had built on purpose.
The analogue era
Before any of the technology, there was a notebook.
Plane spotting is a hobby with a long history and a specific discipline: go to an airport, record what lands, note the registration, the type, the time, and the operator, and post the list. Enthusiasts have been doing this at airfields worldwide for decades, for no reason beyond the pleasure of completeness.
The consequence nobody anticipated is that this produces a distributed, time-stamped, publicly posted log of aircraft movements, maintained by people with no agenda, covering airports that no single institution monitors.
Stephen Grey, investigating rendition from 2003, identified three sources that together broke the story: information from plane spotters, flight plans published on the internet, and American flight-tracking software. He described these as three loopholes, and his assessment of the spotter data was candid about its limits, calling it patchy and confined mainly to arrivals at European airports.
Patchy was sufficient. A tail number recorded at a European airport on a specific date is a fixed point, and fixed points can be joined. Grey eventually assembled more than twelve thousand flight plans.
The institutional investigations then used the amateur lists as their starting point. The European Parliament and Council of Europe inquiries took the aircraft registrations identified by researchers and requested movement data from Eurocontrol, the agency coordinating European airspace, with one request covering fifty-five registrations. Amnesty International obtained flight records for six aircraft covering four years.
So the sequence was: hobbyists produced a list, journalists turned the list into a hypothesis, and parliamentary bodies with subpoena power converted the hypothesis into an official record.
That order of operations is the template, and it has not changed. What has changed is how much the first step now produces. In 2004 it produced a list of registrations. Today it produces a continuous positional record, which is the difference between knowing an aircraft was somewhere and knowing where it has been.
What ADS-B tracking did
Automatic Dependent Surveillance-Broadcast is a safety system, and understanding it as a safety system explains why it has the properties it has.
An aircraft determines its own position by satellite navigation and broadcasts that position, along with altitude, velocity, identity and other data, on 1090 megahertz, continuously, to anybody listening. It exists so that air traffic control and other aircraft know where it is, which is a considerable improvement on waiting for a radar return.
The broadcast is in the open. It is unencrypted, transmitted in plain text, and unauthenticated, because a cooperative safety system that only authorised parties could receive would fail at its purpose.
Then it became compulsory. The American mandate took effect on 1 January 2020 for aircraft operating in airspace requiring a transponder, with comparable requirements following elsewhere, and Canadian Class A and B airspace adding its own in May 2024. As of July 2024 there were over 168,000 American-registered aircraft equipped to transmit.
So in the space of about a decade, essentially the entire civil fleet was required by law to continuously announce its own position in a format any member of the public can receive.
That is not a surveillance programme. It is a safety mandate with a surveillance externality, and it is the single largest change to the operating environment in this trade since the Soviet fleet came on the market.
The thirty-dollar receiver
The reason the externality became a public resource rather than an industry one is a piece of consumer electronics repurposing.
The RTL-SDR is a software-defined radio built on DVB-T television tuner chips. It was designed to receive digital television, somebody discovered the chipset could be driven as a general-purpose wideband receiver, and the result is a USB dongle covering roughly 500 kilohertz to 1.7 gigahertz for under thirty dollars.
One of the frequencies in that range is 1090 megahertz.
A complete receiving station is the dongle, an antenna, a cable, and a single-board computer running open-source decoding software. A full setup runs around a hundred dollars and considerably less with a smaller antenna. Reception range is limited by line of sight, which means tens to a few hundred kilometres per station, which means coverage is a function of how many people participate.
A great many people participate. One aggregator reports around fourteen thousand active feeds producing something near 750,000 messages per second and tracking roughly fifteen thousand aircraft at any moment.
Consider the cost asymmetry that produces. The watched party operates aircraft costing millions, crews costing salaries, and a corporate structure costing legal fees. The watching party spends thirty dollars and a weekend, and there are thousands of them, and they are doing it for fun. No budget line anywhere has to be defended, no programme has to be renewed, and nobody has to justify the collection to a committee.
The filtering fight
The interesting part of this story is not technical. It is about who decided what the public could see, and it turned on a point of law.
The Federal Aviation Administration operates a programme now called Limiting Aircraft Data Displayed, formerly Block Aircraft Registration Request, under which an aircraft owner can ask that their registration not be shown. The major commercial flight-tracking services honour those requests and filter military, blocked and sensitive aircraft from public display.
In 2016 a developer named Dan Streufert founded ADS-B Exchange on the explicit basis that it would not filter anything. His argument was that suppressing the data was security theatre, since anybody could build an unfiltered receiver very cheaply, and the suppression therefore protected nothing while obscuring a great deal.
The legal position underneath that is the detail worth knowing. The obligation to honour blocking requests attaches to services using the FAA’s own data feed. A service built entirely on volunteer-received broadcasts is not using FAA data and is not bound by it.
Which means the aircraft’s own transmission is public, the law restricts only what a government feed may be used for, and anyone receiving the signal directly is outside the scheme entirely. The blocking programme regulates a copy rather than the original, which is a reasonably exact description of how most information control works once a signal is public.
What happened when somebody tried to buy it
In January 2023 Streufert sold ADS-B Exchange to JETNET, a private aviation data firm, for a reported twenty million dollars.
The reaction from the volunteers who had built the network was severe. Open-source co-developers objected publicly, said they had received nothing from the sale, and encouraged feeders to remove their stations. Control of the project’s own discussion channel changed hands. Alternative unfiltered aggregators were established by people leaving.
The grievance is worth taking seriously because it is a genuine structural problem rather than a dispute about money. The data has no value in isolation. A single receiver sees a small area. The aggregate is valuable, the aggregate is produced by thousands of volunteers donating hardware and bandwidth, and the aggregate was legally owned by one person who could sell it.
The stated fear was that commercial obligations and regulatory pressure would eventually compromise the no-filtering commitment, which is a reasonable thing to worry about when an unfiltered dataset becomes the property of a company with enterprise clients.
What the episode demonstrated is that the tracking apparatus has a governance vulnerability the aircraft operators do not. The signal cannot be suppressed. The network that collects it can be bought, and the people who built it can walk away, which is exactly what a portion of them did, founding alternative unfiltered aggregators and taking their feeds with them.
What it catches now
The modern record is substantial and it follows the same pattern as the rendition case.
An independent researcher identified the Emirati air bridge into eastern Chad by correlating cargo flight frequency against a presidential visit, publishing on a personal blog before any official body reported it. That analysis used commercial flight tracking and satellite imagery, and the step change it found was unmissable once somebody counted.
Reuters subsequently used satellite imagery, flight tracking data and United Nations documents to trace the transformation of a desert airport in southeastern Libya, identifying cargo aircraft operated by carriers previously named in weapons trafficking reporting.
Investigators tracing arms shipments work from tail numbers rather than company names, for a reason the Soviet-era fleet makes obvious: a company dissolves for nothing and an airframe persists. ADS-B gives those tail numbers a position and a timestamp, which converts a corporate mystery into a movement record. A free zone entity has no position. The aircraft it chartered does.
And there is a category of material the system produces that nobody intended, concerning private aircraft belonging to public figures, which generated its own disputes about whether publishing a position broadcast by law constitutes surveillance.
The limits of ADS-B tracking, which are substantial
An honest account has to state what this does not do, because the enthusiasm around open-source tracking consistently overstates it.
Aircraft can stop transmitting. A transponder has a switch. Flying without one is illegal in controlled airspace, dangerous, and attracts attention, which is a real deterrent for a commercial operator and no deterrent at all for a military flight in uncontrolled airspace over a desert.
State aircraft are exempt and frequently transmit nothing, or transmit with identity suppressed. The flights most worth watching are disproportionately the ones least likely to appear.
Coverage is a function of receiver density, which follows population and hobbyist interest. Europe and North America are saturated. Central Africa, the Sahara and large stretches of ocean are not, which means the corridor this subject follows is observed at its endpoints and unobserved in the middle.
Identity can be falsified. The transmitted identifier is set by equipment that can be reconfigured, and spoofed transmissions are technically straightforward.
Partial mitigation exists. Multilateration triangulates an aircraft from the arrival-time differences of a plain transponder reply across multiple receivers, which locates aircraft that are not broadcasting position, provided enough receivers hear them. That requires density, which returns to the coverage problem.
And the most important limit is the one this subject keeps arriving at. Tracking produces evidence. It does not produce jurisdiction, which is the finding that has governed this subject since a British minister confirmed in 1976 that an airline was breaking every sanctions law his government had and the airline flew for another twenty-four years.
Absence as data
One analytical point deserves isolating because it inverts the limitation.
If an operator routinely transmits and then stops, the gap is informative. A flight that appears, disappears over a region with no coverage, and reappears elsewhere has described a route by omission. An aircraft that transmits on commercial legs and goes dark on a specific corridor has identified the corridor.
Going dark is not invisibility. It is a change of state, and changes of state are observable if somebody was watching before and after.
That is why the serious work in this field is longitudinal rather than instantaneous. A single position fix is worth little. A year of movements for one hull number, including the periods of silence, is a pattern, and patterns survive the countermeasures that defeat snapshots.
The same logic applies to the ground. A satellite image of an airfield on one day shows aircraft. A sequence of images across months shows hangars being built, revetments appearing, and traffic arriving on a schedule, which is what the Kufra analyses actually did, establishing a transformation across a year rather than an anomaly on a day. ADS-B tracking is at its strongest in exactly that mode and at its weakest as a live map.
The hex code, which does not change
One technical detail deserves its own section because it is the single most useful thing an investigator can know about aircraft identity.
An aircraft carries two identifiers. The registration is the tail number, painted on the airframe, issued by a civil aviation authority, and changed whenever the aircraft is reregistered. The other is the ICAO twenty-four-bit address, a hexadecimal code configured in the transponder, which is what the aircraft actually transmits.
In principle the two are linked, since the hex code is assigned according to the registration and should be reprogrammed when the registration changes. In practice reprogramming is a maintenance action that somebody has to perform, and across a fleet operating in places with limited oversight, maintenance actions of that kind are not always performed promptly.
Which means an airframe can be reregistered in a new jurisdiction, repainted, placed under a new operating company, and continue transmitting the same code it transmitted before.
The Gulfstream at the start of this account changed registration three times across four years, from N581GA to N379P to N8068V to N44982, which is precisely the behaviour that makes registration an unreliable identifier. A tracking system keyed to what the aircraft broadcasts rather than to what is painted on it defeats that manoeuvre, provided somebody kept the earlier records.
This is why longitudinal archives matter more than live maps, and why the corporate layer that makes a company disposable does not make an airframe disposable. The paint changes, the filings change, the owner changes, and a number in a transponder frequently does not.
The claims that do not hold up
An audit, because open-source tracking generates enthusiasm disproportionate to its reach.
ADS-B tracking has ended covert aviation is contradicted by the exemptions, the switch, and the coverage gaps in exactly the regions that matter.
The trackers are hacking anything is false. They are receiving an unencrypted broadcast that an aircraft is required by law to transmit, using a television tuner.
Flight tracking sites show everything is wrong for the major commercial services, which filter according to the blocking programme, and is the entire reason the unfiltered alternative was founded.
Blocking protects operators is the argument Streufert rejected, and the reasoning holds: the signal is public, the block applies to one distribution channel, and a receiver costs thirty dollars.
The volunteers own the data describes the moral position and not the legal one, which the 2023 sale demonstrated conclusively.
Open-source investigation replaced intelligence services misreads the rendition case, where hobbyists produced the registrations and bodies with subpoena power produced the confirmation. Those are different functions and both were required, and the second one is still the bottleneck.
Detection leads to enforcement is the assumption that keeps failing. The Amdjarass flights were identified publicly and continued.
Spotters are a security risk is a position some authorities have taken and it does not survive the arithmetic. Information available to anybody with thirty dollars is not a secret being leaked.
What the trackers are actually telling us
The finding is about who the watchers turned out to be.
For most of the period this subject covers, the only parties capable of monitoring aircraft movements at scale were states, and states monitored selectively, according to their interests, and published nothing. An operator flying a questionable cargo had to worry about a specific government choosing to look, which was a manageable risk because governments mostly had reasons not to.
That changed through a sequence nobody planned. A safety system was mandated. The safety system broadcast in clear because safety systems must. A consumer television chip turned out to be a radio receiver. And a hobby that had existed for decades for its own sake turned out to be a distributed sensor network with global coverage wherever people live.
The result is that the surveillance is now performed by people with no institutional interests, no classification system, no diplomatic considerations, and a strong cultural preference for publishing everything they find. That is a fundamentally different adversary from a government, and the operators have not found an answer to it beyond flying where nobody lives. That is the honest summary of where the whole investigation stands on this question.
Which is, in fact, what they do. The corridor this investigation follows runs through the emptiest terrain on the continent, and the emptiness that made it attractive for logistics turns out to also make it attractive for avoiding receivers. The desert that had no water also has no hobbyists, which is a sentence that should not be a strategic observation and is.
A Gulfstream was tracked around the world by men at the ends of runways with binoculars, and the agency operating it had assumed, reasonably, that nobody would be interested enough to write it down. That assumption was the single most expensive error in the history of covert aviation, and it has not been available to anybody since.
Leave a Reply