Show HN: RF Hunter – Find hidden cameras and other devices (github.com)
This project is an RF Signal Scanner built using an ESP32, AD8317 RF detector, and various other components. It's designed to detect and measure RF signals in the environment and display the signal strength on an OLED display. It's useful to find hidden cameras, wiretapping devices, and other RF-enabled devices.
186 comments
[ 2.0 ms ] story [ 264 ms ] threadCould a directional antenna help with locating RF sources? There's some older work ("WokFi") on parabolic antennas for WiFi, https://web.archive.org/web/20140802123553/http://www.usbwif...
Here's another circuit design for AD8317, https://g8rwg.uk/articles/noise-meter-ad8317/
> The AD8317 module I’m using has the logarithmic slope set to 22mV/dB. I used the output of a Viavi JD785 at different frequencies to check the slope and dynamic range of the device. Linearity and dynamic range at 1GHz and 3.5GHz is good and as expected drops off at 144MHz and 6GHz.
https://github.com/RamboRogers/rfhunter/blob/master/rfhunter... contains amazon links. About $100 although many of the required components come as packs.
Another approach is a phased rx array, could even be as few as 2 antennas, and from that you get a bearing too.
[0] https://en.wikipedia.org/wiki/Log-periodic_antenna
[1] https://ara-inc.com/product/lpd-tactical/
If you're going to go with that wide of a beam why not use a single element and wave it around?
I should also mention the third trade off, size, plays into this tool.
https://www.forestry-suppliers.com/c/trail-game-cameras/3-30...
The cameras themselves are useful for catching remote area | rural thieves on mine leases, rural properties, etc. They're great for spotting and counting rare and endangered species to better direct conservation efforts.
They just need to outlaw private citizens putting them on public property without a permit. Big fines could be a deterrant. Maybe USFS/BLM/NPS employees need some sniffing devices. The upshot is that if it's got a cellular modem, someone's paying a bill and they can usually be found pretty easily if you have the modem.
With fire seasons going the way they are west of the Rockies, I'd be a little concerned about a bunch of lion batteries scattered through the woods. Just takes one of them to blow up in late summer (say it gets crushed by a tree) and there's a good chance it'll be a multi-billion dollar problem that kills people.
Karens with game cams have done a lot to curtail this.
For my purposes, I've found a game camera extremely useful for finding what and when various critters are eating the garden and other plants in the yard, and to figure out what discouraging and diverting measures actually work. I also get a few pretty cool wildlife pics I'd never otherwise get.
Another question, do you look up salary stats on Glassdoor, etc before you consider open position or asking for a raise? Would you consider it offensive if someone told you to stop cheating and just learn to negotiate better?
Additionally if you are hunting for sustenance, as in you really need the meat, then you take the first deer you can find. Waiting for the ideal deer is a good way to not end with a deer at all, regardless of whether you have them on camera or not.
Learn the craft so that you can tell from the signs, such as tracks, droppings, markings, etc., and spend the time doing actual scouting and sightings before hunting?
Seems to me you're either enjoying the whole process of learning and doing the sport, or just enjoying the results. If the former, do it for real, if the latter, just buy some game meat from someone who does. Doing everything with excess technology and little craft seems more like cosplaying and just cheating yourself of a real experience.
>>do you look up salary stats on Glassdoor, etc before you consider open position or asking for a raise? Would you consider it offensive if someone told you to stop cheating and just learn to negotiate better?
I'd look at Glassdoor as reading the actual signs in the wild, like reading tracks, markings, broken twigs, etc., not an artificial aid — it's one of the signs in the environment. And like signs in the environment, it's not like a camera, it is often obscured, gamed, and skewed. Similarly, a crafty employee would also contact people she knows and exploit connections to scout the potential employer.
However, putting game cameras, webcams, and/or recording devices in their management offices, HR offices, and meeting rooms would be considered a bit out of bounds, you think?
Finding a game cam in the woods with basic bug sweeping equipment is like finding a headlight housing on the ground in the woods at night using a flashlight.
What do you mean, exactly? Most of what you can find in the forest is 'RF reflective' because of the water contents - the trees, the grass, the ground. What's the proposed detection method that is going to discern a reflection from a small PCB from a reflection from a large tree trunk?
edit: first, the camera isn't a retroreflector so you can't just light it up from any direction and get a strong reflection. Second, the kind of equipment that would give you good directionality with a static target is some next generation beam steering radar, that stuff is so expensive you're better off walking around with a 4K camera and then processing the footage with an image detector to find possible matches with images of trail cameras.
Maybe somebody knows: Is there something similar for the Flipper Zero?
This would be pretty awesome, please advise if there's anything I (or anyone) could do to support you in getting this logic onto a flipper (project support, testing, etc).
-x
I've got a flipper right here. I find it cumbersome to use, but it's a pretty popular consumer product. I'll look at what the wiring cost could be to print a board. I've never done that.
Why do you find it cumbersome to use?
Honestly if you dressed it up a little you could probably charge quite a bit, it's just a matter of reaching that audience.
I’d be happy to pay $150 for this.
If you’re imagining you can take $30 worth of parts, sell the finished item for $60 or $90, and sustain that enterprise, it’s time to reconsider your business acumen.
For instance,
"lots of people have started with the idea that they could sell at retail for only 3-4x parts cost and failed"
or
"I have had personal experience trying (and failing) to drive down retail cost of electronics below this rule of thumb"
This last has the advantage of making the advice more personal.
Didn't have to make such a statement because I paid attention to people who knew what they were doing. If someone had been this "insulting" with my attempt to beat Craigslist, OTOH, I'd have saved $1.4 million of my own money. I'm happy to be "insulted" by people with more experience.
* use of dismissive sarcasm ("active imagination") to deflect legitimate concerns
* deliberate infantilizing tone ("budding social critic of your skill level")
* preemptive dismissal of differing viewpoints ("This comment will be downvoted but only by people who...")
* assumption of others' inexperience ("I assume you have never worked for...")
* defensive response claiming that you have the right to be insulting to others ("I'm happy to be "insulted" by people with more experience.")
If you honestly do care about how you come across in your communications and have a desire to use your interactions with others productively and not in a way which comes across as bullying, I am happy to work with you privately towards this goal. Is this something you would be interested in?
The phone camera will pick up the bright IR lights that hidden cameras use to illuminate the room-- wireless or not.
Obviously this only works if the camera uses IR lights, but pretty much all of the sneaky ones do.
That's the main limit I see, but I'm wasn't sure if it such a device would still generate enough RF intrinsically w/o a radio.
Once a few common signals are known, the software could do programmed patterns to ferret out easy ones.
That said, most of these spy cameras don't have IR illuminators...
I should also mention that both IR illuminators and TV remotes are usually either 850nm or 940nm, I have not looked into that aspect of it. I imagine that it's possible that your camera can detect one but not the other...
Both front and rear cameras work.
The light shows up as a pinkish purple.
My Google Pixel 8a doesn't show anything on either camera, but my friend's front camera did! It shows up light purple.
Somewhere in my HN comment history from a while back is a response to a person claiming that modern phone cameras can’t detect IR illumination and remotes.
I took a bunch of modern iPhones and Android phones, from colleagues in an IT dept, and demonstrated they can in fact see a bunch of different IR remotes and illuminators with the rear camera.
I could find zero cameras that could not see the IR.
I’m not sure where people got the notion they couldn’t.
My cell phone's back camera will show IR light from IR remote controls (I've used it for just that to verify that a remote is transmitting). But I also have an outdoor IP camera with IR illumination in my back yard. The same cell phone camera sees zero IR emitted from the outdoor IP camera (even though it quite well lights up a fairly broad area of the yard at night).
So for my phone, if a 'spy cam' were using the IR wavelength the IP camera uses, I would never know it was present by using the phone camera. If it used something closer to the wavelength used by IR remotes, yes, then the 'spy cam' would light up via the phone camera.
I make IR devices. My phone is the only one in the warehouse that can pick up their emissions - everyone else's cameras have IR filters with what appears to be a sharp ~750nm cutoff. I'm the only one that will pick up 800-1064nm with my cheap Samsung, and so I'm the only one doing the testing on those diode assemblies.
Thankfully the perverts who put this stuff in airbnbs just go to amazon and search and buy cheap stuff, which is easy to detect.
That would be convenient for burglars or dishonest cops.
It is, however, factual that people choose to behave differently when they know they are being recorded. That might mean choosing not to commit a crime, commit it elsewhere, destroying a camera, or wearing a mask. While a functional camera can't prevent crime, it can identify those who commit them.
So, yeah, I would think that is evidence that they care about cameras.
https://www.nj.com/morris/2024/06/burglars-are-using-wi-fi-j...
(Note I said easier, not just "prove", for it is indeed only easier.)
In effect a camera into the RF world!
DIY radio telescope tuned to 2.4Ghz WiFi, https://www.youtube.com/watch?v=g3LT_b6K0Mc
Image of physical building overlaid with RF sources, https://www.facebook.com/thethoughtemporium/posts/2162600763...
> When I made the first video and photoshoped my impression of what I thought this would look like, I never imagined it would actually be this close. It's official, our telescope can map the wifi in a building as if it were any other form of light.
Every current carrying trace is an antenna.
https://en.wikipedia.org/wiki/Nonlinear_junction_detector
For others, probably just get an off the shelf TinySA?
What's the frequency range and scanning speed of TinySA?
Some paper and product references:
- (PDF) http://s3.amazonaws.com/arena-attachments/1381379/c3a4e75132...
- https://www.spycatcheronline.co.uk/product/camera-detector/
- https://www.ijser.org/paper/Lens-Detection-System-using-Opti...
- https://patents.google.com/patent/US20090237668A1/en
Of course, only a matter of time - if they don't already exist - before there's cheap spy cameras without a reflecting lens, like a solid state camera of sorts. I believe some years ago they were experimenting with that as an alternative to a front facing camera on phones.
https://www.ebay.com/sch/i.html?_from=R40&_trksid=p4432023.m...
The optical camera detectors work based on a simple idea, red LED's are used to create a circular pattern of light and you look through a red filter at your space. A camera lens is concave and symmetric so it reflects the LED's in the same circular pattern. Blink the LED's. Look through the red filter and scan around the room. Anything that reflects a discernable circular blinking LED pattern is a lens or lens like. Basically it makes it easy to see everything that reflects light symmetrically back at you. Move around a little and anything with a lens will stand out. It only works with fairly large lenses though, a pinhole camera would not be detectable.
Their RF detectors have adjustable sensitivity and indicate amplitude of the signal. Good enough to track the transmissions back to the source, though they don't provide any frequency information. Range is somewhat limited so you have to move around a room to scan it.
TinySA works well for detecting RF sources also. I don't know what the exact update rate is but the one I have seems to update at least a few times per second. It's a little tedious to use, the RF spectrum is big and you'll find quite a few spikes from sources in it and you have to zoom in on each one to get the exact frequency and observe how it behaves (or maybe there is a way to select a peak of interest? I haven't played with it much.) You'll find FM radio stations, cellular communications, cordless phones, and lots more.
Most people are not going to be finding surveillance bugs in their homes or offices. However these things are useful for understanding what your RF environment is like or troubleshooting RF devices. Might be good for telling if your smart appliance is spying on you, for example if the detector beeps every time you change channels on your TV.
Sadly, hidden cameras, microphones or other forms of espionage in the workplace are rare but not unheard-of in the recent past, e.g. Wal Mart [1] or Lidl in Germany [2]. Any shop with a tradition of union-busting I'd assume to be filled with all possible sorts of surveillance by default. On top of that come the sex pest cases like [3] - and these have exploded in the last years now that tiny bugs can be had for tiny amounts of money on Alibaba and whatnot.
[1] https://en.wikipedia.org/wiki/Labor_spying_in_the_United_Sta...
[2] https://www.spiegel.de/wirtschaft/stasi-methoden-beim-discou...
[3] https://www.nn.de/erlangen/erlanger-chef-filmt-kolleginnen-m...
I made a thermal camera https://github.com/RamboRogers/M5StickCPlus2-AMG8833-Thermal...
https://www.beneaththewaves.net/Photography/Images/Thermal_I...
When I travel, I use mine to sweep the room.
How does the device detect very short bursts? After looking up the data sheet of the RF detector I believe you would need additional circuitry to not risk that very short bursts slip through the sampling of the ESP A/D input.
Second, the supply voltage of the detector seems to be 3.0 V to 5.5 V, https://www.analog.com/en/products/ad8317.html
https://www.amazon.com/dp/B07FHZXTCZ?ref=ppx_yo2ov_dt_b_fed_...
Specifications: Working frequency: 1M--10000MHz Measurement power: -55dBm to -0dbm Output voltage: 0.33- -1.65V Detection slope: -22mv/dBm (typical value) Input impedance: 50Ω Supply voltage: 7-15V Size: as the picture Weight:7g
2019, "Airbnb Has a Hidden-Camera Problem", 50 comments, https://news.ycombinator.com/item?id=24324300
2019, "How to find hidden cameras in your AirBnB", 300 comments, https://news.ycombinator.com/item?id=20457419
2023 repro of "Great Seal Bug" (1952): mechanical microphone, no power source, data exfiltrated via external directed microwave beam, https://www.youtube.com/watch?v=NLDpWrwijE8
Try measuring the RF emissions of:
You mean, bricked?
[1] https://en.wikipedia.org/wiki/Nonlinear_junction_detector
Wow ...
That happened due to the bugs found. This is the point I'm making. If your goal was to keep them where they were already are (Mokhovaya House) then the bag full of diodes mixed into the concrete did that perfectly for like 15ish years.
> They probably knew earlier than 1985.
Doesn't change that argument.
> So it probably wasn't a big deal and would've cost the SU a lot and they were less able to afford it.
We are talking about a few bags of diodes vs rebuilding three stories of the building with imported workers. This was a very cost efficient attack.
It also makes me suspect that the device would not be super-useful in most environments today because our homes and offices have false positives littered all over the place. Such a countermeasure would be unnecessary now.
Like the structural elements in your house/apartments have something similar to diodes in them, or what are you referring to?
Note that other semi-conducting materials, such as a rusty nail or an oxidised piece of metal, also generate harmonic frequencies and may therefore cause an NLJD to generate a false positive.
https://www.cryptomuseum.com/df/tscm.htm#nljd
It turns out that the rectifiers in question were copper - cuprous oxide - lead sandwiches:
https://hackaday.com/2022/04/20/copper-rectifying-ac-a-centu...
Sure, but location matters. Searching weird (for electronics to be), but line-of-sight places (like a bookcase) you might still have a good signal to noise ratio.
As I understand it clothes from Uniqlo have RFID tags in them.[0]
https://www.morerfid.com/uniqlo-rfid-tags/
As you could expect, bugs everywhere, but some were used for intimidation. E.g. he says, on a weekend morning, we were still in bed with my wife, when a cuckoo started cuckooing out of a wall. Yeah, it was a bug, and it was meant to emit sound and make you more nervous: "we know about everything that happens in your bed".
He said that the Russians never cross the red line of actually physically manhandling diplomats, but as far as bugs and psychological pressure go, there is nothing off-limits.
[0] https://denikn.cz/1549047/deptali-ho-kukanim-a-ponizovali-ha...
[1] https://www.cryptomuseum.com/df/tscm.htm#nljd
[2] https://reiusa.net/nljd/
[3] https://spyassociates.com/orion-2-4-non-linear-junction-dete...
I imagine too that the other was not like the one. ;-)