Cuba's Mysterious 'Numbers Station' Is Still on the Air
Even with diplomatic relations warming, Cuba's HM01 is still broadcasting encrypted messages.
Photo: Nicholas de Camaret/Flickr
On August 18 at 22:00 UTC, I heard a government intelligence agency transferring encrypted messages to spies over the radio.
Or at least, that's the most common explanation for what I heard.
I dialed to the correct frequency—17480 kHz—using an internet-connected radio tuner maintained by a university in the Netherlands. Suddenly, over waves of static, an eerily-robotic woman's voice began speaking a series of five-digit number sequences in Spanish.
About three minutes later, the numbers repeated in the same order, but this time each sequence was followed by a digital bell-like tone and a harsh blast of noise, like a 56K modem trying to connect to AOL in the 90s. This continued for about 20 minutes, each sequence punctuated by the bizarre noise blasts.
This is HM01, sometimes called "Voce De La Chica," a shortwave numbers station believed to be operated by the Cuban intelligence directorate, Dirección de Inteligencia (DI).
To the casual listener, numbers stations are mysterious broadcasts of voices speaking streams of numbers which, in at least some cases, are encrypted messages being sent to government spies.
They have long seemed like Cold War relics, born in a time when spying meant boots-on-the-ground and internet surveillance was impractical or irrelevant. And yet, HM01 continues to operate in what the NSA has called a "golden age" of internet-enabled signals intelligence, and despite historic progress in US-Cuba relations earlier this summer.
While evidence suggests HM01 is operated by the Cuban government, it's virtually impossible to tell who it's sending to, which is one of the main tactical advantages of numbers stations: You can easily see the intended recipient of an email, but you can't prove someone listened to a radio broadcast unless you catch them in the act.
Shortwave radio listeners (or SWLs, as they are known) have followed stations like HM01 for decades. According to members of Priyom.org, an online community of radio enthusiasts that monitors numbers stations, HM01 is a close relative of "Atención," a government station that has operated for decades and whose transmissions wereused as key evidence in a case that convicted five Cuban spies in the late 90s.
HM01 is "basically the successor" of Atención, a shortwave listener who goes by "alchemist" explained to me on Priyom's IRC channel. "But as you know, you can't decrypt it nor decipher the contents." (The stations use one-time pads, a theoretically uncrackable scheme whereby agents in the field decrypt messages using pre-shared keys that are destroyed after use.)
The hand-off occurred in November of 2012, when HM01 started occupying the frequencies and time slots normally used by Atención. Its signal frequently mixes with the government-run station Radio Havana Cuba, leading to the conclusion that Radio Havana Cuba and HM01 originate from the same building.
There's something unusual about HM01, though: It's a "Hybrid Mode" station, which in this case means it broadcasts both a voice reading numbers (the header IDs of each message) and a digital transmission mode used by a now-defunct "sister" station, SK01. The weird, dialup modem-esque sounds I heard were actually files being sent using a digital transmission mode called Redundant Digital File Transfer (RDFT), which only HM01 is known to use.
When run through special software, these noises can be decoded (but not decrypted) back into files full of jumbled ciphertext. Oddly, the program used by HM01 was created by a Brazilian radio enthusiast and is available online for free. It runs on Windows XP, whose log-in and log-out jingles have been heard during several of the station's documented "mishaps."
"There will always be a reason for espionage between countries."
HM01's existence as a spy broadcast makes sense within the US and Cuba's long history of hostility—especially considering the countless attempts to undermine Fidel Castro's brutal dictatorship over the years.
But HM01's continued operation has taken on a new and awkward relevance in the past few months, as the US and Cuba have re-opened their embassies in Havana and Washington, DC for the first time in decades.
"I thought that perhaps with the recent warming of diplomatic relations with the USA the Cubans might have ceased operations as a goodwill gesture but at the moment it is still going," observed Peter, aka PoSW, in the most recent newsletter of ENIGMA 2000, the European monitoring group that identifies and labels numbers stations.
Perhaps unsurprisingly, the newly re-opened Cuban embassy in Washington, DC didn't respond to my request for comment on HM01.
There's one simple explanation though, according to Stefan Meyers, aka Webweasel, the administrator of Priyom.org and a retired veteran of the radio scene: If the various NSA surveillance scandals proved anything, it's that spies are gonna spy no matter the political weather.
"Just because diplomatic relations seem better does not [correlate] with espionage activity dropping off as a result," Meyers told me in an email. "Have a look at the recent examples of Russian spying in the USA and Germany. Then add the NSA stuff.... There will always be a reason for espionage between countries - trade treaties, corporate spying etc."
Meyers added that oftentimes governments keep spy systems running simply because it's easier than scrapping them. "When you have invested in such an infrastructure, you don't just abandon it, you find a new use for it," he says. "The level of investment is too much to give up."
It would explain why stations like HM01 often change their formats and scheduling, rather than disappear entirely.
Still, it would be foolish to think these stations will be around forever. HM01 runs on Windows XP, but some older stations use ancient analog gear to generate tones and morse code pulses. And that machinery is failing, as evidenced by faulty buzz generators and other oddities observed by Priyom listeners.
"The old stuff is the stuff that is easily repairable and the most robust. Thing is, you need people with knowledge to do it," alchemist tells me on IRC. "Also the machinery is not being manufactured anymore … I know there are chinese manufacturers cloning them and you can make your own but it's [getting more] expensive."
No matter what happens, it's comforting to know someone will be listening.
All Fronts is a series about technology and forever war. Follow along here.