1
00:00:00,160 --> 00:00:06,560
if you've ever stayed in an Airbnb I'm sure that you've wondered can I sit on

2
00:00:04,359 --> 00:00:11,320
this toilet without worrying about some creep with a spy

3
00:00:09,080 --> 00:00:17,320
camera there's got to be some way to know for sure and there is they aren't

4
00:00:14,599 --> 00:00:22,960
cheap but this is an nljd A type of counter Espionage device

5
00:00:20,439 --> 00:00:27,840
that has famously been used by the CIA and other intelligence agencies to

6
00:00:24,760 --> 00:00:30,759
detect everything from hidden cameras to

7
00:00:27,840 --> 00:00:38,600
microphones to data transceivers in fact it can detect any electronic device even

8
00:00:34,280 --> 00:00:38,600
if it is Switched Off watch

9
00:00:39,719 --> 00:00:47,719
this cool right there's one of my

10
00:00:45,039 --> 00:00:54,840
cameras there's another one freaking sick found another one this

11
00:00:52,399 --> 00:00:59,320
thing is so powerful that it will cook your eyeballs and is literally illegal

12
00:00:57,399 --> 00:01:04,559
to use in Japan Switzerland France Germany and many other countries so

13
00:01:02,320 --> 00:01:09,240
given how difficult it can be to access Cold War era spy equipment for many of

14
00:01:06,439 --> 00:01:15,520
you we also grabbed this cheap bug detector off of Amazon to see which one

15
00:01:12,240 --> 00:01:19,799
works better H this one seems to be

16
00:01:15,520 --> 00:01:23,200
detecting a segue to our sponsor shut up

17
00:01:19,799 --> 00:01:25,240
MSI their Meg core liquid ey 360 AO

18
00:01:23,200 --> 00:01:29,200
cooler Sports a head turning infinite mirror design and has some Nifty quality

19
00:01:27,320 --> 00:01:33,520
of life features like an integrated installation bracket that's compatible

20
00:01:30,680 --> 00:01:36,200
with both Intel and AMD check it out at our link down

21
00:01:42,680 --> 00:01:50,360
below let's start with our Bayside bug detector from Amazon it cost us only $30

22
00:01:48,439 --> 00:01:55,520
and with that considered it actually has a lot of features it can blast IR to

23
00:01:53,200 --> 00:02:00,479
reveal cameras it has an IR detector defined night vision cameras a magnetic

24
00:01:57,560 --> 00:02:04,640
field detector for GPS trackers and an RF detector to help find devices that

25
00:02:02,680 --> 00:02:08,239
are transmitting on Wi-Fi or Bluetooth frequencies it's this last one that we

26
00:02:06,840 --> 00:02:12,440
hope will be the most useful for tracking down a hidden camera or

27
00:02:09,920 --> 00:02:16,519
microphone let's try it out let me just turn the sensitivity up a little bit and

28
00:02:14,640 --> 00:02:21,879
oh lordy I'm not near

29
00:02:18,680 --> 00:02:25,160
anything so that's a

30
00:02:21,879 --> 00:02:27,680
problem shut

31
00:02:25,160 --> 00:02:31,840
up the guides for how to use those things often instruct you to turn off

32
00:02:30,000 --> 00:02:36,360
any Wi-Fi or Bluetooth devices that are in the area that's no problem during the

33
00:02:33,720 --> 00:02:41,400
Cold War but is virtually impossible today and even if I could turn off all

34
00:02:38,879 --> 00:02:46,280
of my neighbors Xboxes it's still going to be very susceptible to false

35
00:02:43,200 --> 00:02:48,400
positives see in the80s a light bulb

36
00:02:46,280 --> 00:02:54,120
transmitting RF that would have been a dead giveaway but today it probably just

37
00:02:50,959 --> 00:02:57,920
means that your Airbnb host really likes

38
00:02:54,120 --> 00:03:00,360
RGB shut up the final downside is that

39
00:02:57,920 --> 00:03:05,319
if a spy device was configured to record locally or to only transmit on a

40
00:03:03,040 --> 00:03:10,959
schedule we would have very little hope of finding it that's why the pros ignore

41
00:03:08,200 --> 00:03:19,799
toys like this and instead rely on real tools like this meet the REI Orion hgo

42
00:03:15,959 --> 00:03:22,959
4000 a nonlinear Junction detector or

43
00:03:19,799 --> 00:03:25,000
nljd it's kind of like a metal detector

44
00:03:22,959 --> 00:03:28,720
but specifically for electronics and I'm going to show you guys how it works but

45
00:03:26,879 --> 00:03:33,519
before we can do that there are a few safety items absolutely do not point

46
00:03:31,599 --> 00:03:37,599
this at your head or eyes it is a microwave on a stick and it will lightly

47
00:03:35,480 --> 00:03:41,040
cook your eyeballs and turn them opaque not use it if there are anyone with a

48
00:03:39,040 --> 00:03:44,480
pacemaker or a hearing aid in and also do not leave it in close proximity to

49
00:03:42,840 --> 00:03:48,680
any part of your body for more than 5 minutes in a row okay with all of that

50
00:03:47,280 --> 00:03:54,079
in mind the first mode we're going to use is search mode this doesn't tell us

51
00:03:51,560 --> 00:03:58,799
much about what we're scanning but by using pulses rather than continuous

52
00:03:56,480 --> 00:04:04,720
output it allows us to use maximum scanning power without being illegal you

53
00:04:01,760 --> 00:04:09,959
see the FCC won't let me be or let me be me if me wants to Output more than 3.3

54
00:04:07,319 --> 00:04:15,680
watts of RF radiation but they only specify average power and search mode

55
00:04:12,760 --> 00:04:20,880
operates at only a 6% duty cycle meaning that our Peak power can be much higher

56
00:04:18,400 --> 00:04:26,240
without stepping into the illegal realm so what we're looking for then is a high

57
00:04:23,880 --> 00:04:30,680
second harmonic response which is this red line here since that is the

58
00:04:28,080 --> 00:04:35,400
signature of a transistor we're also looking at the third harmonic here on

59
00:04:32,880 --> 00:04:41,960
this yellow line which might be an electronic device but is more likely a

60
00:04:38,240 --> 00:04:45,840
Rusty Nail in a wall so let's give these

61
00:04:41,960 --> 00:04:45,840
vhs's a little scan

62
00:04:46,520 --> 00:04:51,120
here aha oh do you see that it changed

63
00:04:50,080 --> 00:04:55,320
over to semiconductor so there could be an

64
00:04:53,160 --> 00:04:59,680
integrated circuit hidden right here and to show you guys that it won't pick up a

65
00:04:56,840 --> 00:05:04,520
false positive I can scan this circuit tree hoodie from LTT Store.com and see

66
00:05:02,199 --> 00:05:11,199
that no in fact these circuits are just screen printed on so let's go ahead and

67
00:05:07,800 --> 00:05:13,320
change our mode to listen now instead of

68
00:05:11,199 --> 00:05:17,320
bouncing around both bars I can narrow in on just the second harmonic that I'm

69
00:05:15,400 --> 00:05:22,120
looking for and I can actually hear in my headphones bunch of static bunch of

70
00:05:20,120 --> 00:05:30,600
static bunch of static and nothing so what's in here

71
00:05:24,960 --> 00:05:33,479
then could it be a hidden Arduino

72
00:05:30,600 --> 00:05:38,600
yes it could and the coolest part is that it is completely unpowered and not

73
00:05:36,120 --> 00:05:44,840
transmitting anything but our nonlinear Junction detector didn't care it was

74
00:05:40,840 --> 00:05:47,720
able to easily find it

75
00:05:44,840 --> 00:05:53,000
anyway so the only question I have now then is how in the Sam Hill does a

76
00:05:49,960 --> 00:05:55,560
microwave Blaster find Electronics well

77
00:05:53,000 --> 00:05:59,919
originally it didn't the nonlinear Junction detector was invented during

78
00:05:57,160 --> 00:06:05,680
World War II by Charles boville to find corrosion under the paint of planes but

79
00:06:03,240 --> 00:06:11,039
before long they realized hey it was also really good for tracking down spy

80
00:06:08,599 --> 00:06:15,199
devices as you can imagine though as quickly as the nonlinear Junction

81
00:06:12,639 --> 00:06:19,400
detector became popular so did methods to defeated it the CIA for instance

82
00:06:17,440 --> 00:06:25,280
spent a bunch of time and money creating the SRT 107 a special microphone that

83
00:06:22,919 --> 00:06:30,599
has filters built in that will shunt the signal of an nljd to ground rendering it

84
00:06:28,560 --> 00:06:34,240
ineffective meanwhile the Russians developed a different plan when they

85
00:06:32,400 --> 00:06:39,479
were mixing the concrete for the US Embassy in Moscow they hucked a bunch of

86
00:06:37,160 --> 00:06:44,000
dead Electronics into the mix so that there' be no way for the Americans to

87
00:06:41,479 --> 00:06:48,199
tell the real bugs from the false positives very cool history or lesson

88
00:06:46,240 --> 00:06:53,440
lus but none of that answers the question how in the Sam Hill does a

89
00:06:50,479 --> 00:06:58,039
microwave Blaster find Electronics okay okay to understand how the detector

90
00:06:55,960 --> 00:07:02,960
works though we first need to understand what a nonlinear Junction is the

91
00:07:00,919 --> 00:07:07,680
nonlinearity that we're talking about is on the current voltage curve for

92
00:07:05,280 --> 00:07:12,319
something like a resistor or a wire you get a simple straight line like this

93
00:07:09,919 --> 00:07:17,199
More Voltage equals more current which you probably know as Ohm's law when you

94
00:07:15,000 --> 00:07:22,680
have two dissimilar materials touching though like say for example this brass

95
00:07:20,440 --> 00:07:26,639
and the oxidized brass that has formed around it will get some nonlinearity on

96
00:07:25,039 --> 00:07:32,479
the current voltage graph that looks something like this and here's the fun

97
00:07:29,199 --> 00:07:34,800
part basically every semiconductor is

98
00:07:32,479 --> 00:07:40,000
also a nonlinear Junction because semiconductors contain diodes diodes are

99
00:07:38,080 --> 00:07:44,800
typically made out of silicon with one side having small amounts of antimony

100
00:07:42,039 --> 00:07:50,199
added to it called n type material and the other side having a small amount of

101
00:07:46,919 --> 00:07:52,800
boron added called a ptype material an N

102
00:07:50,199 --> 00:07:57,720
type has free electrons while a ptype has holes that simulate a positive

103
00:07:54,759 --> 00:08:02,639
charge since one area has an excess of electrons and the other has an excess of

104
00:08:00,039 --> 00:08:06,840
places for electrons to go naturally some of the electrons will diffuse from

105
00:08:04,440 --> 00:08:10,720
the nide over to the PS side leaving What's called the depletion region in

106
00:08:08,560 --> 00:08:14,199
the center add power to the diode in the correct direction and once you have

107
00:08:12,319 --> 00:08:19,560
enough voltage to overcome the depletion region in the center about6 Volts for

108
00:08:16,680 --> 00:08:23,000
silicon current will flow reverse the direction of the battery though and the

109
00:08:21,080 --> 00:08:27,280
depletion region will get larger preventing the flow of electricity and

110
00:08:24,919 --> 00:08:31,319
making a diode what it is a device that only allows electricity to flow in One

111
00:08:29,720 --> 00:08:37,839
Direction all of this results in a current voltage graph that looks like

112
00:08:33,680 --> 00:08:40,240
this pretty nonlinear right to detect

113
00:08:37,839 --> 00:08:45,080
this nonlinear Junction then all we need to do is run some power through the

114
00:08:42,320 --> 00:08:50,040
device any sort of RF radiation will induce a bit of current in a wire or a

115
00:08:47,680 --> 00:08:54,680
piece of metal that's nearby like this little wire that we hooked up to our

116
00:08:51,480 --> 00:08:57,320
oscilloscope and as you can

117
00:08:54,680 --> 00:09:03,680
see all I have to do is put this here and I end up with a sign wave and since

118
00:09:01,320 --> 00:09:08,279
this wire is a linear conductor it will simply radiate out that signal like the

119
00:09:06,440 --> 00:09:13,240
sine wave we originally generated if the signal goes through a

120
00:09:10,880 --> 00:09:16,720
nonlinear Junction though the reradiated signal will have additional components

121
00:09:15,480 --> 00:09:21,920
and that allows us to tell the difference between a diode and a rusty

122
00:09:19,279 --> 00:09:26,360
nail because of the dramatic difference in how they react to a voltage or a

123
00:09:24,279 --> 00:09:29,959
current applied to their circuits now that we've got the oscilloscope hooked

124
00:09:27,640 --> 00:09:34,880
up we can see how the differ modes operate this particular one is search

125
00:09:32,720 --> 00:09:40,600
continuous where you can see that it's basically just firing out RF at a

126
00:09:37,720 --> 00:09:44,480
variety of amplitudes and frequencies to see if it can elicit some kind of

127
00:09:42,480 --> 00:09:49,480
response it's throwing spaghetti at the wall to see what sticks if we switch

128
00:09:46,720 --> 00:09:54,480
over to listen mode things start to look a little bit more stable but we don't

129
00:09:52,000 --> 00:10:00,040
get the real picture until we Zoom way out that right there is the pulses we

130
00:09:57,800 --> 00:10:04,079
were talking about where it's blasting with higher power on exactly the

131
00:10:02,040 --> 00:10:09,440
frequency to find exactly what we're looking for and then chilling out so

132
00:10:06,480 --> 00:10:14,000
that I don't get a knock on the door there is one thing that kind of ate at

133
00:10:11,519 --> 00:10:19,200
us though typically the current that an RF signal will induce in a wire is very

134
00:10:17,000 --> 00:10:24,399
small like we're talking on the order of Mill volts but since a silicon diode

135
00:10:22,480 --> 00:10:30,079
won't allow any current to flow until about 6 volts how the heck is this thing

136
00:10:27,959 --> 00:10:37,320
able to detect anything well the answer is simple by making it

137
00:10:32,519 --> 00:10:40,120
very very powerful we saw over one volt

138
00:10:37,320 --> 00:10:48,519
in our wire that we stuck next to this thing because again guys it's basically

139
00:10:43,279 --> 00:10:50,639
a microwave on a stick very cool so

140
00:10:48,519 --> 00:10:54,680
conclusion then if you want to be confident that no one is spying on you

141
00:10:52,360 --> 00:10:59,959
should you run out and get one of these well there are actually a couple

142
00:10:56,920 --> 00:11:01,959
problems big problems like you might

143
00:10:59,959 --> 00:11:07,040
imagine this thing works like in a video game right you press up on the d-pad it

144
00:11:04,760 --> 00:11:12,880
enters detective mode and it highlights all the key objects in the room but uh

145
00:11:10,480 --> 00:11:19,880
not so much the recommended scanning rate is about 1 square ft every 3

146
00:11:16,720 --> 00:11:23,720
seconds and that that's for flat

147
00:11:19,880 --> 00:11:26,720
surfaces so a typical small office could

148
00:11:23,720 --> 00:11:29,320
easily take 2 to 3 hours to scan

149
00:11:26,720 --> 00:11:35,040
properly while an executive office could take more like an entire day it is a

150
00:11:32,200 --> 00:11:40,000
long and tedious process that as a general rule of thumb takes about as

151
00:11:37,120 --> 00:11:46,920
long as applying three coats of paint to every wall in a room another problem

152
00:11:43,560 --> 00:11:49,240
they are eye-wateringly expensive a

153
00:11:46,920 --> 00:11:52,800
questionable AliExpress unit starts at about

154
00:11:50,360 --> 00:11:57,000
$10,000 with name brand ones like this Landing closer to 15 grand that's

155
00:11:55,639 --> 00:12:01,399
actually one of the reasons that this project took so long to get off the

156
00:11:58,880 --> 00:12:06,760
ground we had to wait to snag an older unit on eBay which still cost us a

157
00:12:03,839 --> 00:12:12,920
couple of grand that is still a lot of money for nons spy agency folks but I

158
00:12:10,880 --> 00:12:18,600
think the biggest problem though is that an nljd can't detect the most likely way

159
00:12:16,160 --> 00:12:22,519
that someone's going to bug you outside of an Airbnb the chances that someone's

160
00:12:20,760 --> 00:12:27,920
going to go to the effort of hiding Electronics to spy on you are fleetingly

161
00:12:25,480 --> 00:12:33,240
small not because no one wants to spy on you but because these days everyone has

162
00:12:30,920 --> 00:12:38,199
a camera and a microphone on them at all times sometimes more than one why would

163
00:12:36,279 --> 00:12:42,680
I bother physically breaking into your place to plant a device when I could

164
00:12:40,320 --> 00:12:46,480
just remotely access a device you are already carrying with you from the other

165
00:12:44,600 --> 00:12:52,000
side of the planet without ever leaving my chair so if you're concerned about

166
00:12:49,199 --> 00:12:56,639
cameras in your Airbnb that's totally valid but the best countermeasure is

167
00:12:54,680 --> 00:13:00,040
just to look around for anything suspicious we're going to link to a

168
00:12:58,320 --> 00:13:06,480
couple of decent that we found on searching for spy equipment just like

169
00:13:02,440 --> 00:13:08,440
how I'm spying this segue to our

170
00:13:06,480 --> 00:13:13,199
sponsor it's over there you can't see but it's there look I can detect it

171
00:13:11,320 --> 00:13:17,519
rocket money the final stretch of the year is usually when your wallet looks

172
00:13:14,959 --> 00:13:20,760
at you and goes dude take it easy so now is a great time to avoid getting hit

173
00:13:19,000 --> 00:13:24,519
with charges from subscription Services you barely even use or might have even

174
00:13:22,560 --> 00:13:28,360
forgot about rocket money helps identify reoccurring charges and can even cancel

175
00:13:26,440 --> 00:13:31,920
those subscriptions for you all with a couple of TAPS in in their app I mean

176
00:13:30,279 --> 00:13:35,279
you probably still have a few gifts to go out and buy do you really want to sit

177
00:13:33,760 --> 00:13:39,760
down and be on a call with customer service just to be met with but are you

178
00:13:37,600 --> 00:13:43,279
interested in our premium package but rocket money doesn't just help remove

179
00:13:41,360 --> 00:13:47,839
unwanted subscriptions they can even take services that you actually do want

180
00:13:45,480 --> 00:13:52,360
and need and negotiate a better deal for you simply upload a picture of your bill

181
00:13:50,399 --> 00:13:56,360
and with a few Taps their team starts a process to call your provider and try to

182
00:13:54,680 --> 00:13:59,839
get you a better deal and to set your wallet up for the future their budgeting

183
00:13:58,079 --> 00:14:03,240
feature can help analyze your spending habits and notify you if you're

184
00:14:01,360 --> 00:14:07,519
exceeding your limits so start saving more and spending less join over 5

185
00:14:05,720 --> 00:14:12,680
million rocket money users and head over to Rocket money.com LT to get started

186
00:14:10,440 --> 00:14:15,880
for free or unlock even more features with their premium plans if you guys

187
00:14:14,440 --> 00:14:21,120
enjoyed this video why don't you check out our Wi-Fi cracking ban video that

188
00:14:18,600 --> 00:14:24,839
one is honestly a lot scarier than hidden cameras and microphones