The reason the FCC is only allowing the sale of state approved routers in the US?

top 92 comments

sorted by: hot top controversial new old
[–] 129 points 5 months ago (13 children)

"This technology turns every router into a potential means for surveillance," warns Julian Todt from KASTEL. "If you regularly pass by a café that operates a WiFi network, you could be identified there without noticing it and be recognized later -- for example by public authorities or companies."

Later...

Inexpensive or older routers either don’t store history at all or keep it for a short time.

Newer models can store more information for more extended periods.

https://www.thetechwire.com/how-long-does-a-router-store-history/

  • source
  • hideshow 13 child comments
  • [–] 75 points 5 months ago (4 children)

    We used to recommend people to run the newest stuff possible, but we came to a point that maybe it's better for us to keep with older tech for a good while

  • source
  • parent
  • hideshow 4 child comments
  • [–] 11 points 5 months ago (2 children)

    Or go to more civilized countries for vacation to get not backdoored hardware.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 5 months ago*

    Do you think every country has its own router hardware manufacturer and commodity chip manufacturer? 😂

    The 2 giants that make 95% of consumer routers around the world and the few companies that design the chips for them are both in heavy surveillance states.

  • source
  • parent
  • [–] 33 points 5 months ago* (6 children)

    From what I've just read, the tech doesn't seem ready to identify people yet. It can supposedly detect hand gestures, but facial recognition I seriously doubt. But that's probably just a matter of improving the tech. See this article for more info.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 11 points 5 months ago* (3 children)

    From OPs linked article...

    In tests involving 197 participants, the researchers said the system identified individuals with nearly 100% accuracy. The recognition remained effective regardless of viewing angle or how the participants walked.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 3 points 5 months ago (2 children)

    I can totally believe when it tracks a person it can tell when the same person walks by again later. But matching people with their actual identities would require a database of wifi scan data that simply doesn't exist yet.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 5 months ago (1 child)
  • [–] 1 point 5 months ago*

    Well in theory every tech possibility is a "yet", but the way I read this it seems like a person or object's interference pattern is particular to the local signal environment - not like a fingerprint a different system could recognize at the airport.

  • source
  • parent
  • [–] 5 points 5 months ago (1 child)

    that's a trivial problem to solve. combine this with a camera for facial recognition in a public space. then you've got wifi signature combined with the photo/video for facial recognition. then presumably you can use the WiFi signature anywhere else, even without the camera and be able to identify people.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 89 points 5 months ago (20 children)

    It would be great if there were some open source tool kits for this. If the technology is going to exist it should be in the hands of the people.

  • source
  • hideshow 20 child comments
  • [–] 86 points 5 months ago (4 children)
  • [–] 18 points 5 months ago (1 child)

    Damn, I thought I called it 8 months ago, but that was about reading heart rates using wifi...

  • source
  • parent
  • hideshow 1 child comment
  • [–] 30 points 5 months ago* (last edited 5 months ago) (2 children)

    Yeah, if this shit has to exist, at least let me use it for presence detection in Home Assistant without having to buy separate sensors or something!

  • source
  • parent
  • hideshow 2 child comments
  • [–] 14 points 5 months ago* (4 children)

    If you're technical you might like enjoy this article that explains how the tracking works. Basically the router can perform math on the interference created by objects moving around the room. It seems like this would have to be part of the router firmware, which doesn't sound like a standard feature. But if it is, the fix would be to install modified firmware with that function disabled. The smoking gun will be if somebody gets into DMCA trouble for doing this.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 5 months ago* (3 children)

    that's not a sufficient fix when you are living very close to other households

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 5 months ago* (2 children)

    A sufficient fix is not letting your wifi devices connect to your neighbor's network so their router can detect you walking between it and them.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 5 months ago (1 child)

    my devices don't, but unless I misunderstood it it does not matter whether you are connected to the neighbor's router

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 5 months ago

    Wifi tracking uses measurements of the interference caused when objects pass between connected devices and a router. For your neighbors to track your movements their router would have to be connected to a device in your house, or maybe in the other neighbor's house on the far side of your house, so when you walk around it interferes with that signal.

  • source
  • parent
  • [–] 2 points 5 months ago (5 children)

    Opensource tech to do the same thing has been in the hands of the people for a long time. This is just a different way of doing it without motion sensors.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 1 point 5 months ago (4 children)

    these are not just motion sensors. these are much more accurate than that.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 5 months ago* (3 children)

    The motion sensing is more accurate in terms of fundamentally detecting movement, but if you're going from that to assuming it can identify who you are, no it doesn't do that. It can recognize a person as the same person it saw in the room yesterday, based on their gait and their effect on the local wifi signal, but it has no way of knowing if the pattern belongs to Old Man Wilson or Old Lady Jenkins, because there's no database tying those patterns to people's identities. And besides, the patterns are specific to that one signal environmnent anyway. It's not like a fingerprint or a facial image you could record at home and then match to someone walking around in a store, which has a different signal environment.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 5 months ago (2 children)

    it cannot identify persons, but it can figure out their position and roughly what are they doing.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 59 points 5 months ago* (11 children)

    From what I've read this is built into the required wifi router for Xfinity. I discovered this when I signed up for Xfinity fiber, had the fiber installed and setup and then cancelled it the same day, because of this and not being able to buy and run my own hardware, and needing to install an app on my phone to manage the router, and apparently not being able to choose my DNS. They required that I rent their hardware for an additional $15/mo. Oh well, at least fiber is in the house now, if anyone wants it in the future. I sure won't be paying them to spy on me.

    Fuck Comcast, still.

  • source
  • hideshow 11 child comments
  • [–] 11 points 5 months ago (1 child)

    Damn. Put a faraday cage around the router and plug in your own router to a LAN port.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 10 points 5 months ago

    Wrap it in aluminum foil.

    Whilst this sounds a lot like a foil hat joke, that's literally the easiest way to wrap something in a conductive material cage (i.e. a faraday cage).

    If you don't want it to look ridiculous, put it inside a box whose inside has been lined with aluminum foil.

    Mind you, personally I too would just cancel that shit, but the option is there to carry on using it whilst blocking its radio emissions.

  • source
  • parent
  • [–] 5 points 5 months ago (3 children)

    FWIW I was able to use my own router when I set up with Xfinity recently

  • source
  • parent
  • hideshow 3 child comments
  • [–] 3 points 5 months ago* (2 children)

    This was fiber, if that makes a difference. I asked the install guy, he called his boss, because no one had asked him that before. He told me "no, it's not allowed". Also, I tried plugging the patch cable directly into my own wifi router and nothing.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 5 months ago (1 child)

    Also, I tried plugging the patch cable directly into my own wifi router and nothing.

    The router would need to be explicitly configured to connect to your account on the network, which would require certain information provided by the ISP, which it sounds like they weren't going to provide.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 5 months ago (1 child)

    That's because Xfinity offers motion sensing as a feature, which requires this tech in the router. Presumably it's configurable and costs extra to turn on.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 43 points 5 months ago (11 children)

    Product idea: clothing with jaged edges and radio absorbing plates.

  • source
  • hideshow 11 child comments
  • [–] 4 points 5 months ago (3 children)

    My understanding is that this catches disruptions between devices and router. I don’t think this would work. I would say you should instead sell a “bracelet” with “ancient Himalayan Salt” embedded into the silicone to absorb and cancel the tracking. It would probably sell a ton! Obviously wouldn’t work but $!

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 5 months ago (2 children)

    Well you can't stop it from knowing something is there. But you should be able to confuse it's identification of a specific person.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 5 months ago (1 child)

    Yeah probably but if you’re going to this much trouble to spy, you’re may as well put gait analysis on it.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 40 points 5 months ago* (12 children)

    Very interesting concept. I was curious about how in the hell this could be done. This article explains the general method.

    When an inert object like a person moves around between the router and stationary connected devices like computers and printers, it interferes with the signal. The pattern of interference plus math can be used to plot the movement of the object - and even measure subtle changes like hand gestures. Home security software from companies like Xfinity can already use this tech to send you an alert when something is moving around in your house, without needing additional hardware. Imagine an informercial where a guy holds up a handful of "clumsy motion sensors" with wires sticking out of them, and "confusing instructions". Not if you just let your router do it!

    As far as being a new and sinister means of surveillance, evil companies could already theoretically tap into anybody's motion sensors or security cams. The difference with WiFi tracking is that you wouldn't necessarily know it's there.

  • source
  • hideshow 12 child comments
  • [–] 21 points 5 months ago (9 children)

    That's using CSI though. The article said the researches specifically did not utilize CSI.

    But regarding CSI: I evaluated that as a small part of my Master's thesis and it worked pretty OK for motion detection but not for classifying other activities, at least not on a SISO link. For more complex stuff you would need both a MIMO access point (router) and device (e.g. phone). Also, you need to constantly transmit messages to get up-to-date CSI, which is not great for power consumption as well as cluttering the communication channel. There are some other constraints, especially regarding noise. E.g. I managed to completely destroy the CSI spectrogram by turning on a microwave oven. There is 802.11bf in development, which is supposed to standardize this, because currently using CSI is pretty much a "hack", as it is not intended for sensing. Once this is widely adopted, I would start being worried, but not right now.

    This is from my thesis:

  • source
  • parent
  • hideshow 9 child comments
  • [–] 2 points 5 months ago (1 child)

    It's not too different from what I can tell. They seem to just exploit the fact that beamforming information (BFI) is transmitted back to the access point. BFI is ultimately not so different from CSI. What they exploit is that they can just listen in and intercept the BSI without access to the AP.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 5 months ago* (3 children)

    The need for a constant signal to scan movement is a good point. Makes sense that nearby wifi devices can't just be sitting there, they have to be actively transmitting to the router or there's no signal for the target to interfere with. I must have gotten CSI and wifi scanning confused. Tbh I'm not even sure why CSI is in the article except for history, but I found the principle fascinating. In your research did you turn the intererence into anything like a heat map of a person standing in the room, or is it more of a signal fingerprint, like chromatography or spectrography?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 5 months ago (2 children)

    My topic was fall detection (as in elderly people falling) specifically without using cameras or wearables. The idea was to take the CSI (basically what you see in the image) and just stuff it into some machine learning model to get a prediction as to whether someone fell in a given time frame, so I was trying to classify the signature of the falling "activity". From my literature survey, this has been done successfully with CSI. But as with a lot of research, it typically lacked practicality. Much of my work was implementing the firmware, data recording, processing, and so on. I also had to record a ton of falls (ouch) and label them. I ended up throwing away the CSI approach though, because of the noise reasons I mentioned. That was simply a deal breaker. I went with FMCW radar instead (and it worked pretty good).

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 5 months ago (1 child)

    Fascinating project! Definitely sounds like at best it might detect that somebody probably fell down, but not that Old Man Jenkins is having a bowl of Lucky Charms instead of Raisin Bran and his blood pressure is a little high - which seems to be the conclusion people are jumping to here.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 5 months ago

    It definitely depends on the circumstances. With 60 GHz radar e.g. you get quite a good distance resolution and can detect e.g. breathing rate really well (from the torso movement during breathing) and things like how many people are in a room, etc. But its always very dependent on the environment, your settings, subjects, noise, whatever. That's why I said its typically not practical. By using dedicated devices perhaps, and most of these kinds of news are about people who use dedicated devices, but that's like putting a camera in your home. When you have to abuse an existing communication channel, probably not so realistic.

  • source
  • parent
  • [–] 1 point 5 months ago (1 child)

    Wouldn't a microwave causing significant interference also be a sign of a very faulty, potentially unsafe microwave? If it's bathing your environment with microwaves, you're cooking to some degree. I know a 2.4 GHz router is using microwaves too, but restricted to much lower power. I'd be very suspicious of an oven that's leaking enough to interfere with my signals since you don't know how strong the leaking microwaves are and they may in fact be harmful. I imagine someone standing in front of their microwave watching it operate, cooking their eyeballs as they wait.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 5 months ago

    to be fair, maybe. To pass FCC/CE regulation regarding EMC, it has to adhere to strict limits at 2.4 GHz (but I could also imagine for microwave ovens specifically that the allowed emissions are higher than for other devices, because 2.4 GHz is just the band it operates in. But idk, I didnt read the standard for those). But it does not mean that it may not radiate anything in that band.

    Anyways, my observation was that it did interfere and the microwave was definitely closed. But also it was not 10m distance to the microwave, more like 2m, so relatively close. WiFi receivers are quite sensitive to be able to work with low received powers. So just a little emission is sufficient to interfere. You are probably not disturbing the communication itself, because OFDM is quite robust, but it certainly destroyed my use case (which operated on the whole CSI).

    And there is definitely some stuff leaking, e.g. through radiated emissions on the wiring (the power line). But it is certainly not cooking anything. That's also what the regulation makes sure of.

  • source
  • parent
  • [–] 29 points 5 months ago* (last edited 5 months ago) (6 children)

    Pretty sure this is old news? It's basically sonar, which The Dark Knight predicted in the film.

    Edit: a word

  • source
  • hideshow 6 child comments
  • [–] 18 points 5 months ago* (last edited 5 months ago) (1 child)
  • [–] 3 points 5 months ago

    The statement from the article was the unlike previously, they used current consumer equipment, and could uniquely identify a specific person. I believe previous versions could just identify that there was "A" person. I don’t know that all that is true, but it is what the article says, and my vague memories line up.

  • source
  • parent
  • [–] 2 points 5 months ago (2 children)

    The first time I heard about this was in 2013 and, in 2019, I had a local government management class where wifi sensing in busy downtown areas and stadiums was discussed as a plus side to municipal wifi installations. In the latter case it was described as being available not too far in the future.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 23 points 5 months ago* (last edited 5 months ago) (2 children)

    Ok now what router do I buy and what firmware do I flash to plug this into Home Assistant?

  • source
  • hideshow 2 child comments
  • [–] 2 points 5 months ago (1 child)

    and how do you protect yourself against the neighbors devices, especially in a densely populated building

  • source
  • parent
  • hideshow 1 child comment
  • [–] 22 points 5 months ago* (2 children)

    Comcast Is watching you masturbate. Awesome.

  • source
  • hideshow 2 child comments
  • [–] 21 points 5 months ago (2 children)
  • [–] 98 points 5 months ago (3 children)

    Have fun watching me be balls deep in my partner, fed boys. Be jelly cause you can't fuck like me.

  • source
  • hideshow 3 child comments
  • load more comments
    view more: next ›