Wait for people to learn about that you can listen in virtually anywhere through fiber-optic cables, as sound waves are enough to redirect the light in the cable to a measurable degree by "bending" the cable itself. Special devices to filter these variances out and transform them back to audio signals are a thing. It's only per line though, as any repeating device will just output a new cleaned up signal again.
Oh well, there have always been ways to snoop on someone like that. Back in the day it was CRTs emitting measurable waves through the neighborhood, with some papers even going as far as restoring the displayed image through a wall. Nowadays it's fiber and WiFi, and those seem to be much easier to work with even. Plus everyone carries a device that is tracked by their mobile provider's cell network. shrug
[3 hidden]5 mins ago
Funnily enough, first time I've seen it mentioned was in Ghost in the Shell manga from 1990s, where Major's side business illegally offers military grade optronic touch/etc senses in artificial skin for cyborgs, using measurements of bending fiber optic loops
[3 hidden]5 mins ago
> Back in the day it was CRTs emitting measurable waves through the neighborhood, with some papers even going as far as restoring the displayed image through a wall.
I don’t get your point. Yes, there’s a lot of eavesdropping techniques available to actors with nation state capabilities (or with a lot of time, money, and expertise). This is another one of them. It’s good to be aware of things like this because it helps you better understand threat modeling for applications that require serious hardening.
There may also be unusual applications of this, like the traffic counting mentioned by another commenter.
(For anyone who needs hardening against things like this, you need a SCIF.)
[3 hidden]5 mins ago
Just toss a doppler laser interferometer on a window, mirror, etc. At least with fiber-optics you need physical access. Single mode (I think that's most of FTTH) is pretty insensitive to vibration and hard to localize so you'd really have to install something.
[3 hidden]5 mins ago
In this context, is line of sight with the ability to emit and receive laser radiation at the target not ‘physical access’?
[3 hidden]5 mins ago
Ah, but of course. How could I forget about my trusty pocket doppler laser interferometer!
[3 hidden]5 mins ago
This is a "high school project funded with pocket money" level of DIY, with €25 of parts.
[3 hidden]5 mins ago
Yours is not built in to your watch? You should go and have words with Q.
[3 hidden]5 mins ago
Microwave beam-forming says what?
[3 hidden]5 mins ago
I didn’t hear it say that. I guess I’m not the target. :P
[3 hidden]5 mins ago
Included in the next version of Flipper. /s
[3 hidden]5 mins ago
So when AI takes over the world, it will have a convenient tap into every living space of every hoomin. Lovely.
[3 hidden]5 mins ago
Fiber optic interrogators are (for now) expensive and bulky, so I don't think commercial modems are capable of that (yet).
[3 hidden]5 mins ago
trackers are also now becoming near microscopic
they track BUTTERFLIES from Canada to Mexico by attaching tiny trackers with eyelash glue
Several years back we actually made use of the principle mentioned in this post, to more systematically count traffic on the roads [1]. In our case we used LTE/4G radio, and we could even estimate the direction of travel, as well as the type of traffic (pedestrian, small vehicles, large vehicles). It was more accurate than Google Maps because it was independent of the moving phone, i.e. it was "sensing the obstacles in the environment".
As anyone observed who had a TV with just basic analog terrestrial antennas, before cable and satellite dishes - it does make a difference to the signal, when and where you stand and countless pieces of physical comedy in TV shows incorporated that.
I thought this article was going to be about putting a webcam on the other side of the wall and streaming through the TV, which somehow had never occurred to me and I want to try it now.
[3 hidden]5 mins ago
Amazing book about similar topics: “Silence on the wire” by Michal Zalewski
What is your price range? You could check your local library for borrowing it.
[3 hidden]5 mins ago
I know this is written to sound scary, but it's been like this since the invention of the radio/telegraph (late 1800s?). You're getting blasted by rf almost continuously, unless you live in a bunker.
[3 hidden]5 mins ago
This is written to sound scary/capatalize on a relatively underdiscussed snooping mechanism.
But it isn't at all like straight UHF/VHF radio intereference spectra analysis or whatever we want to call it.
Wifi, Cell network bands, bluetooth and hard fiber lines are all far more exploitable than "regular" RF . A police squad car equipped with the RF package (which convienetly comes from defense contractors) can grid out your home and hotspot people, devices, etc. This is only possible due to exploits/abusing these standards and cooperation w/ device/tech vendors.
Is this a problem? Eh, not for me where I live. Is it illegal? I am not versed enough to know how procedural/ y the books this is. But it is odd that a passing police vehicle potentially has unmarshalled/warrentless seach running 24/7.
[3 hidden]5 mins ago
In order for that to work, they would have to stand on one side of your house, and scan from the other side. If they're already surrounding your house, they might as well just bust in.
[3 hidden]5 mins ago
Having two guys with gadgets is a much lower bar than getting a court to approve them busting into your house.
[3 hidden]5 mins ago
"I know this sounds scary, but don't worry - all this spying won't give you cancer!"
[3 hidden]5 mins ago
I threw away all TVs in my house after the proliferation of ads on the Home Screen. Sorry, the only value a TV has is displaying images and audio at large sizes. Not getting me to shop. So I decided to get rid of them all and now I use large monitors and projectors. Make TVs dumb again.
[3 hidden]5 mins ago
The article is about radio waves from TV broadcast towers, not the TV in your home.
[3 hidden]5 mins ago
This makes no sense.
This problem is solved via two ways (or both at once):
- Pihole
- Unplug the TV from ethernet and disable wifi
All my TVs display no ads because they are jailed.
[3 hidden]5 mins ago
> Unplug the TV from ethernet and disable wifi
This likely requires opening the case and physically disabling (hence knowing what you are doing). Or the TV will find other devices to transmit the data. Not an easy measure for everyone.
[3 hidden]5 mins ago
a TV cannot "find" a way onto the internet without your wifi password (don't say insecure wireless networks)
[3 hidden]5 mins ago
Tangential. Of both LG [0] and Samsung [1] smart TV's it is known they spy on you any way they can. Does someone know if they do that too for models sold in Europe, which would likely be in violent breach of GDPR?
But this relies on Hue. I would like something at HA level directly, aka a zero-effort solution if you already run a zigbee swarm either directly controlled by HA or via zigbee2mqtt
Had to pull out my calculator to digest the calculations, phew. I'm a math major that's been out of the game for a bit, I guess i'm getting rusty.
[3 hidden]5 mins ago
So, a bad actor can now know when I'm at my house or not, I'm sure that's fine and won't be problematic
[3 hidden]5 mins ago
Bad actors, and any WiFi capable hardware in your house. There's an official spec for it[1], and some routers already have the option built in. I remember seeing papers about this over 10 years ago, someone at MIT did it for a paper.
Philips Hue also has it built in to their newer lights, where they measure the Zigbee signals. They call it MotionAware[2]. Basically anything with an antenna and a bit of compute is able to do this now.
It's probably just AI translated. The original docs are Dutch.
[3 hidden]5 mins ago
There's an official spec for it[1], and some routers already have the option built in.
~~Comcast~~ Xfinity actually advertises it on the radio as a feature.
[3 hidden]5 mins ago
> So, a bad actor can now know when I'm at my house or not.
A bad actor who wants to act on that information can just wait near your house on a workday morning and watch you leave, likely not to return for the better part of the day. No techno-voodoo required.
[3 hidden]5 mins ago
Bad actors have been doing that for millennia using their eyes.
This makes it more remote and subtle, but it’s not a new threat.
[3 hidden]5 mins ago
Not just remote, automatic as well. IMO an entirely new class of threat over "my neighbor knows when I'm home."
[3 hidden]5 mins ago
Even having three security cameras around the perimeter of your house can allow quite precise location and activity detection inside the house via their audio steams.
Those mics can be quite sensitive.
[3 hidden]5 mins ago
I don't have security cameras in my house but that's actually interesting to see how things most people have in their house can (and does?) used to spy on them.
[3 hidden]5 mins ago
Phones and smart TVs, probably other appliances. My SO used to be surprised to receive ads about stuff we talked about minutes before. I finally looked at her phone, disabled a bunch of things in the stock Android settings, those timely ads went away. I didn't even have to install Blockada, uBO for FF (and uMatrix and other addons) like I do on my devices.
[3 hidden]5 mins ago
Can you elaborate on what did you disable?
I feel like by disabling ads in most devices, I'm also taking away the best source of information on what bad actors (here ad companies) managed to exfiltrate about me.
If there only was a way to sell ad space about myself and learn from it what others know.
[3 hidden]5 mins ago
Most companies don't allow you to turn off data collection easily. What they do allow is turning off the response to that data (displaying relevant ads).
[3 hidden]5 mins ago
I mailed her a summary for future reference. It's quite detailed but it was not in English and the phone was not in English too. So forgive me but I asked Claude to translate it and guess the right menu and option names for an English Android. It should be enough to give you the idea of what I did. It was a Samsung phone, not a S series.
Here it is:
---
Tapping <first name last name> at the top of Settings opens the Samsung account notice, and the Terms of Service show as not accepted. I'm leaving them unaccepted and not continuing.
1. Security and privacy
Controls and alerts: left Microphone access on, because permissions will be set individually per app.
More privacy settings:
Send diagnostic data
Set to Off
Samsung
Improve personalized ads based on data from this phone: you have to go to the Samsung account settings.
Receive news and special offers on this phone: same
Customization Service for your phone: same
Going to Accounts and backup > Samsung Cloud > Data backed up: there is no data being backed up to Samsung.
Going to Samsung Cloud shows that Bluetooth, Calendar, Contacts and Wi-Fi are synced.
Google
Google personalization service: set to Off
Permission manager:
Switched to Ask every time:
- Chrome
- Maps
- Meet
- Facebook
- Google
- Messages
- Speech Recognition & Synthesis from Google
- Samsung Keyboard
- TikTok
Still set to "Allowed only while in use": Camera and WhatsApp
Activity controls
Web & App Activity: turned off, but I did not delete the history
Timeline (Location History): was already off since January 1, 2025
YouTube History: left on
Personalized ads:
- My Ad Center is turned off
- Partner ads settings, Visit My Ad Center, Ads you can control, Get started,
Cancel
Everything is disabled, as expected after turning off the Google personalization service
2. Ads
Ads privacy
Ad topics: 0
App-suggested ads: 0
Ad measurement:
- Allow ad measurement: set to Off
- Reset measurement data: reset
Reset advertising ID: confirmed, reset
Delete advertising ID: deleted
Usage & diagnostics: disabled
3. Remote management
After I tapped it, it said "Installing applications"
After a few minutes, at the second login, I got in and it showed me a Smart Tutor screen. I went to Apps, found it and uninstalled it. It would have allowed the phone to be managed remotely by customer support, I don't know which one.
Facebook
Settings & privacy
Settings, Apps and websites, turned off "Apps, websites and games"
Business integrations
Activity log, Apps and websites off Facebook, Posts from apps and websites: it was empty. Your apps: it was empty.
[3 hidden]5 mins ago
Yes. But depending who is doing the work they can just see what Bluetooth devices are around each hour of the day too...
It sucks that everything we have seems to be usable against us
[3 hidden]5 mins ago
and if you go completely dark whoever is interested can just install a camera near your apartment and get that info anyway. you just can't hide in a city if you are not actively trying to hide, never could either even before tech, it was just more expensive.
[3 hidden]5 mins ago
Really? They can’t seem to pick up a conversation happening directly in front of them.
[3 hidden]5 mins ago
Or they could just knock on your door and see if you answer.
[3 hidden]5 mins ago
They already knew this from your cell phone not being in airplane mode.
[3 hidden]5 mins ago
If I ever try to hide (which is probably impossible at this time and age), I will probably just break my phone not like I can use it anyways every single act in it sends data to too many places to count.
[3 hidden]5 mins ago
I assume the problem is still tracing and association. So long as there is no direct link between you and the device, there is no saying if that is you or not. So grabbing a used phone via cash transaction from someone and only turning it on and using outside of your usual locations could be enough to have it being "anonymous". Then, using a vpn or other proxy that hides your network can make you very hard to find, so long as you don't associate with your real identity in any substantial form.
The danger with these technologies is not when they allow to precise track you once your general vicinity is known, that was always possible by putting some goons after you. General mass surveillance that is constantly tagged is the problem, flock, PRISM and the other stuffs.
[3 hidden]5 mins ago
There was a TV show in the Netherlands, called Hunted I believe. Contestants had to go on the run and avoid getting caught by the hunting team without doing anything illegal. Or staying to long in a single place, so no camping in the middle of a park (which would technically be illegal anyway).
Long story short, barely anyone got anywhere. Because simply doing an ATM transaction to get the cash already triggered the signal where they were. Not to mention the amount of government owned cameras. As well as being in proximity of anyone still online.
Complete anonymity is virtually impossible, depending on the country.
[3 hidden]5 mins ago
The problem with that show is it is all simulated. They have a camera crew following them round so they cant exactly hide properly.
The show is set up so that if the contestants do anything on a given list (like access ATMs, pay for something with a known card, walking past cctv cameras etc) then the camera crew would notify the hunters. Thats how they got that intel so that they wouldnt need to use actual methods.
I dont think you can use that show as an actual example of somebody on the run. Its so far away from reality and set up to be interesting to the viewer, its just not realistic at all.
[3 hidden]5 mins ago
My point is that there are a gazillion contact points in any modern environment where you lose anonymity. Not that they can track you in real time like that.
The amount of camera's in and around shopping areas is staggering. And the requirement to have a smartphone on hand is increasing every day, at least in the Netherlands.
[3 hidden]5 mins ago
Hunted is a different case tho, there they know the person's identity and need to find there location (and direction).
In the parent case the supposed illegal activity is associated with a device (possibly the location) and they are trying to find the identity of the person associated.
[3 hidden]5 mins ago
A good reason to keep a moderate amount of cash hidden on hand. Not so much that losing it would ruin you, but enough that you wouldn’t need to visit an ATM if you actually needed to hide for some reason.
[3 hidden]5 mins ago
Yes, I always carry at least $1000 in case I have to suddenly go on the lamb from tech-savvy three-letter organizations.
And three passports for three different identities.
[3 hidden]5 mins ago
You can be identified quite quickly by other factors if someone with access to data is looking for you. Some factors are writing style networking metadata (who do you contact) and search queries. Especially big data companies (facebook google) are tracking you even if not logged in. Some of these factors are very hard to change from one moment to another, and most people are unaware that this data is used.
The problem with mass surveillance is that even if you are aware you are actively transmitting and your data is still caught in the dragnet for example with camera doorbells and other surveillance apparatus like flock, or visiting a site with facebook ad trackers. You transmit either way by being, if you travel in public with phone or without a phone, both is an identifying datapoint.
[3 hidden]5 mins ago
there is always the risk of the isolated Faraday caged house
[3 hidden]5 mins ago
Can't they already do that by snooping on ARP traffic on your home LAN? Failing that, if they can get whatever shitty wifi chipset they're using to enter promiscuous mode, they can also sniff all STAs that are in the vicinity, and with some ML they can probably figure out which MAC belongs to your phone.
[3 hidden]5 mins ago
There's no TV here. There's an ATSC broadcast signal and an SDR with a waterfall display.
[3 hidden]5 mins ago
I’d rather have the Chinese lady with the nice ass sex my secrets out of me
[3 hidden]5 mins ago
Thank you for more paranoia
[3 hidden]5 mins ago
Awareness of possibilities is not paranoia. One implies sickness. Healthism?
[3 hidden]5 mins ago
π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.
Just so anyone who reads this knows: This is a well known SCAM repo. The install instructions are incomplete and when you manage to get it running you will realize the data it produces is just random except for pre-recorded simulated data. If you check youtube for it you will find hundreds of completely AI generated Videos with not one of them showing the actual thing working. And all while trying to sell you some hardware.
https://github.com/deletexiumu/wifi-densepose " SCAM ALERT: Technical audit reveals this project is a non-functional AI-generated facade with fake CSI data, no trained models, and suspected star inflation"
[3 hidden]5 mins ago
Slight aside, but I went to look at some of the open issues on that ruvnet repo to see if this is discussed. It's quite an eery feeling reading through them. Every "discussion" is just bots talking to bots.
[3 hidden]5 mins ago
So it's the modern version of "smoking banana peels to get high"? (Which was a well-known "fact" in my youth, supposedly injected by the FBI to reduce drug use.) (It doesn't.) (<-- personal investigation)
[3 hidden]5 mins ago
yeah, now I gotta unplug TV too
[3 hidden]5 mins ago
That won’t help, this is about TV station signals broadcast from outside your house
[3 hidden]5 mins ago
Thats nothing, my old tv could predict incoming phone calls.
[3 hidden]5 mins ago
When I was young I could tell when the neighbours turned on their tv by the UHF whine.
HN.zip
Oh well, there have always been ways to snoop on someone like that. Back in the day it was CRTs emitting measurable waves through the neighborhood, with some papers even going as far as restoring the displayed image through a wall. Nowadays it's fiber and WiFi, and those seem to be much easier to work with even. Plus everyone carries a device that is tracked by their mobile provider's cell network. shrug
It's been some time since I've thought about Van Eck phreaking: https://en.wikipedia.org/wiki/Van_Eck_phreaking
Fun fact, it was invented by Leon Theremin. The inventor of the Theremin.
the words you use matter.
Here's what Theremin invented: https://en.wikipedia.org/wiki/The_Thing_(listening_device)
There may also be unusual applications of this, like the traffic counting mentioned by another commenter.
(For anyone who needs hardening against things like this, you need a SCIF.)
they track BUTTERFLIES from Canada to Mexico by attaching tiny trackers with eyelash glue
* https://celltracktech.com/products/ctt-blumorpho
smaller than a tic-tac candy (about two match-heads)
* https://cellular-tracking-technologies.github.io/ctt_documen...
[1] "Traffic Flow Estimation using LTE Radio Frequency Counters and Machine Learning", https://arxiv.org/abs/2101.09143
https://news.ycombinator.com/item?id=49922674
https://espargos.net/espsdr/
https://www.amazon.de/Silence-Wire-Passive-Reconnaissance-In...
But it isn't at all like straight UHF/VHF radio intereference spectra analysis or whatever we want to call it.
Wifi, Cell network bands, bluetooth and hard fiber lines are all far more exploitable than "regular" RF . A police squad car equipped with the RF package (which convienetly comes from defense contractors) can grid out your home and hotspot people, devices, etc. This is only possible due to exploits/abusing these standards and cooperation w/ device/tech vendors.
Is this a problem? Eh, not for me where I live. Is it illegal? I am not versed enough to know how procedural/ y the books this is. But it is odd that a passing police vehicle potentially has unmarshalled/warrentless seach running 24/7.
This problem is solved via two ways (or both at once):
- Pihole
- Unplug the TV from ethernet and disable wifi
All my TVs display no ads because they are jailed.
This likely requires opening the case and physically disabling (hence knowing what you are doing). Or the TV will find other devices to transmit the data. Not an easy measure for everyone.
[0] https://www.youtube.com/watch?v=6IFVTcM28KA (Gamers Nexus findings)
[1] https://www.youtube.com/watch?v=VFx1DyAjxYc (LMGClips summary)
Philips Hue also has it built in to their newer lights, where they measure the Zigbee signals. They call it MotionAware[2]. Basically anything with an antenna and a bit of compute is able to do this now.
[1] IEEE 802.11bf-2025 [2] https://www.philips-hue.com/en-hk/support/article/motionawar...
~~Comcast~~ Xfinity actually advertises it on the radio as a feature.
A bad actor who wants to act on that information can just wait near your house on a workday morning and watch you leave, likely not to return for the better part of the day. No techno-voodoo required.
This makes it more remote and subtle, but it’s not a new threat.
Those mics can be quite sensitive.
I feel like by disabling ads in most devices, I'm also taking away the best source of information on what bad actors (here ad companies) managed to exfiltrate about me.
If there only was a way to sell ad space about myself and learn from it what others know.
Here it is:
---
Tapping <first name last name> at the top of Settings opens the Samsung account notice, and the Terms of Service show as not accepted. I'm leaving them unaccepted and not continuing.
1. Security and privacy
Controls and alerts: left Microphone access on, because permissions will be set individually per app.
More privacy settings:
Send diagnostic data
Set to Off
Samsung
Improve personalized ads based on data from this phone: you have to go to the Samsung account settings.
Receive news and special offers on this phone: same
Customization Service for your phone: same
Going to Accounts and backup > Samsung Cloud > Data backed up: there is no data being backed up to Samsung.
Going to Samsung Cloud shows that Bluetooth, Calendar, Contacts and Wi-Fi are synced.
Google
Google personalization service: set to Off
Permission manager:
Switched to Ask every time:
Still set to "Allowed only while in use": Camera and WhatsAppActivity controls
Web & App Activity: turned off, but I did not delete the history
Timeline (Location History): was already off since January 1, 2025
YouTube History: left on
Personalized ads:
Everything is disabled, as expected after turning off the Google personalization service2. Ads
Ads privacy
Ad topics: 0
App-suggested ads: 0
Ad measurement: - Allow ad measurement: set to Off - Reset measurement data: reset
Reset advertising ID: confirmed, reset
Delete advertising ID: deleted
Usage & diagnostics: disabled
3. Remote management
After I tapped it, it said "Installing applications" After a few minutes, at the second login, I got in and it showed me a Smart Tutor screen. I went to Apps, found it and uninstalled it. It would have allowed the phone to be managed remotely by customer support, I don't know which one.
Facebook
Settings & privacy
Settings, Apps and websites, turned off "Apps, websites and games"
Business integrations
Activity log, Apps and websites off Facebook, Posts from apps and websites: it was empty. Your apps: it was empty.
The danger with these technologies is not when they allow to precise track you once your general vicinity is known, that was always possible by putting some goons after you. General mass surveillance that is constantly tagged is the problem, flock, PRISM and the other stuffs.
Long story short, barely anyone got anywhere. Because simply doing an ATM transaction to get the cash already triggered the signal where they were. Not to mention the amount of government owned cameras. As well as being in proximity of anyone still online.
Complete anonymity is virtually impossible, depending on the country.
The show is set up so that if the contestants do anything on a given list (like access ATMs, pay for something with a known card, walking past cctv cameras etc) then the camera crew would notify the hunters. Thats how they got that intel so that they wouldnt need to use actual methods.
I dont think you can use that show as an actual example of somebody on the run. Its so far away from reality and set up to be interesting to the viewer, its just not realistic at all.
The amount of camera's in and around shopping areas is staggering. And the requirement to have a smartphone on hand is increasing every day, at least in the Netherlands.
In the parent case the supposed illegal activity is associated with a device (possibly the location) and they are trying to find the identity of the person associated.
And three passports for three different identities.
The problem with mass surveillance is that even if you are aware you are actively transmitting and your data is still caught in the dragnet for example with camera doorbells and other surveillance apparatus like flock, or visiting a site with facebook ad trackers. You transmit either way by being, if you travel in public with phone or without a phone, both is an identifying datapoint.
https://github.com/ruvnet/RuView
https://github.com/deletexiumu/wifi-densepose " SCAM ALERT: Technical audit reveals this project is a non-functional AI-generated facade with fake CSI data, no trained models, and suspected star inflation"