Tony Seruga
@TonySeruga
1/6 🧵
📡 The Invisible Exhaust You’re Leaving Everywhere
This barely registers in public discourse, but in practical terms, it is one of the most comprehensive surveillance systems ever built — and it wasn’t built by fiat. It accreted. One Bluetooth earbud at a time, one key fob, one “smart” appliance, until the ambient radio landscape around every person became a unique identifier more reliable than a face.
Let me walk through the layers here, because the implications are worse than most people grasp.
Â
Tony Seruga
@TonySeruga
·
Jun 22
2/6
🔵 The Protocol-Level Problem
Your phone’s privacy controls are genuinely meaningful — randomized MAC addresses, permission dialogs, VPNs, airplane mode that actually works. But here’s the asymmetry:
View the image below.
The phone is the exception, not the rule. Everything else in your personal RF cloud is screaming a persistent identifier into the void hundreds of times per minute, and most of those identifiers never rotate.
A pair of AirPods will broadcast the same Bluetooth MAC address for its entire operational life — years. That fitness band on your wrist? Same story.
BLE advertising packets are the worst offenders. They’re designed to continuously announce their presence so your phone can find them. They literally can’t be turned off without disabling the device’s core function. And they contain enough unique information that even if one identifier rotates, the combination of signals — device type, manufacturer code, signal strength pattern, temporal rhythm — forms a fingerprint.
Â
Tony Seruga
@TonySeruga
·
Jun 22
3/6
🧬 The Electronic Fingerprint Concept
The defense contractor you’re describing isn’t doing anything scientifically novel. They’re doing something logistically novel: integrating data streams that have existed separately for years.
An electronic fingerprint isn’t one signal. It’s the composite:
1. MAC addresses from Bluetooth/BLE devices on your person
2. WiFi probe requests from your phone and laptop (even when not connected to networks, they're pinging for known SSIDs)
3. Signal strength patterns — the exact attenuation profile of your body as you walk creates a unique RF shadow
4. Temporal gait signature — the rhythm of accelerometer data leaking from wearables correlates with physical gait, which is individually identifiable
5. Device constellation — the specific set of devices you carry is often unique enough to identify you without any single identifier
The kicker: this works through walls, through bags, through clothing. You don’t need to be using any of these devices. They just need to be powered on. And most people never power them off.
Â
Tony Seruga
@TonySeruga
·
Jun 22
4/6
🏛️ The Integration Layer
What makes this a genuine escalation is the fusion with existing infrastructure. Your town already bought the cameras. Those cameras already have fixed positions, known fields of view, and timestamped footage. Now add:
- BLE/WiFi sniffers co-located with camera nodes
- Correlation engines that match RF fingerprints to visual tracks
- Persistence across domains — the same earbuds show up at the grocery store, the protest, the doctor’s office, the gun range
The camera sees a person in a hoodie and can’t identify them. The RF sniffer sees the same constellation of five device signatures it saw yesterday when that person walked past their neighbor’s Ring camera or visited their bank’s ATM with their face fully visible. That’s the stitch.
This isn’t speculative. The underlying capability has been demonstrated at academic conferences for over a decade. What’s new is the productization — packaging it for municipal buyers as a turnkey upgrade to existing surveillance contracts.
Â
Tony Seruga
@TonySeruga
·
Jun 22
5/6
🛡️ What Actually Works (And What Doesn’t)
Mostly useless:
- Privacy screen protectors (irrelevant to RF)
- VPNs (irrelevant to RF)
- Incognito mode (laughable in this context)
- “Privacy” phone settings for the non-phone devices
Partially effective:
- Faraday bags for devices when not in use — but impractical for things you’re actively using
- Airplane mode on everything — but kills functionality
- Disabling Bluetooth on devices that allow it — many don’t, or re-enable automatically
Actually effective, but extreme:
- Not carrying the devices — the only certain solution
- Using wired headphones exclusively (no RF signature)
- Dumb watch, no fitness tracker, physical keys — a lifestyle regression most people won’t accept
The grim reality is that the infrastructure is being built faster than countermeasures can be developed, and the existing countermeasures require sacrifices most people won’t make. The surveillance isn’t being imposed — it’s being opted into, one consumer convenience at a time.
Â
Tony Seruga
@TonySeruga
·
Jun 22
6/6
đź”® The Trajectory
The defense contractor selling this to your town is following a well-worn playbook:
1. Sell cameras for “public safety”
2. Wait for normalization
3. Sell the RF upgrade for “enhanced situational awareness”
4. Wait for normalization
5. Sell the AI correlation platform for “predictive policing”
6. Eventually, sell it back to the private sector — retail analytics, insurance risk scoring, employer monitoring
The RF layer is step 2 or 3 in that sequence for most municipalities right now. The fact that it’s being pitched as an “upgrade” rather than a new system is the tell — it’s designed to feel incremental, like adding a software module rather than fundamentally altering the surveillance relationship.
But it does fundamentally alter it. Cameras are passive and optical — they can be obscured, they have blind spots, and they require a line of sight. RF surveillance is omnidirectional, penetrates most materials, and generates identifiers that are harder to shed than a jacket or a hat.
Your gadgets never shut up. And now someone’s finally listening at scale.
