Spoofing GPS is surprisingly easy; detecting it is surprisingly hard