I wanted to ask about your process for detecting hidden cameras in hotel rooms or any AirBnB style locations. In the IntelTechniques EP Book 5, MB mentions using a Milwaukee thermal imaging unit (to spot cameras) and an app on an Android that records video of anyone while you are away (to make sure no uninvited visitors were there).
Milwaukee doesn’t seem to directly sell the imaging unit anymore, from what I see. Other options I see are FLIR, with a usb-c attachment for the phone. I’m pretty sure if I use a data blocker, then the hardware might not be able to transmit the information to the phone. It seems like FLIR requires you use their app to see the camera output. I am not comfortable attaching an unknown device to my phone, so I might have to purchase an external thermal imaging camera.
I want to ask if you have alternatives that have worked for you successfully before, for both thermal imaging and for recording the room after you leave. Any other hotel privacy/security recommendations help as well!
Your issue is attempting to secure a space that is not within your control to begin with, it is far more prudent to always treat it as unsecured and adjust your OPSEC accordingly.
I agree with @FranklyFlawless. It is an impossible task (physically or legally) to fully secure a space that is not within one’s control.
I’ll add it may be the case OP has no choice but to book a hotel room for the purpose of certain activities. In such case, I would suggest spending a little time (ten minutes or an hour) inspecting the room and covering/disabling suspect fittings, but treat this as harm reduction and assume not all bugs were found. If OP has the means to employ bug detection equipment, by all means. To protect confidential laptop/phone use, using them under a blanket may suffice but beware of keystroke sounds, certainly far more efficient than attempting to secure the entire room.
Wifi imaging can see your body through blankets. Maybe you can find one that can block it, but when you test that, remember to test all the wifi ranges. Its unlikely that wifi imaging is good enough to get your phones pin. Graphene can scramble your pin, so unlocking under a blanket should work even if they are using it.
Tried using a FLIR to detect some small electronics. It could detect a webcam, but only when it was not near another heat source, a monitor. A metal grate was enough to make it harder to see some electronics too. Most things showed up at about 1/2 meter, but some had to be 10 cm and were still faint. You should get some small mics and cameras and do your own tests.
If you have a laptop, things are harder. Typing pattern analysis has been around for a long time and its easy to hide mics. They might not even be in the same room. Blanket and type carefully. If your using a device with a touch screen, you may be able to set a scrambled pin instead. Or a screen keyboard if your patient enough. Keep this in mind when your typing out your secret recipe, too. This one is not worth testing. Just assume it.
Have to mention radio scans, which some people do. The devices could store data for later pickup, or be programmed to turn on its radio after you leave. Even if it leaves the radio on, it could go through the smart tv or look like one.
As said above, treat the hotel room like the outside world or a busy airport.
In unknown territory, you have to act as normal as possible—blend in low-key—and maybe even throw in a bit of boredom. Not like a regular citizen, but like someone who shows no interest in the important stuff.
The important stuff—save that for the safe places you trust.
Cameras, microphones, etc., can be placed so well that the person has no idea (depending on which hotel and service is doing it).
Yep, haven was the app he mentioned in the book! I didn’t want to go with this route as losing an older phone was not something I was financially comfortable with.
As for the rest of your answer, I think you nailed what I was looking for! I think for now, I will try with the thermal imager as a start, and potentially see if I would need the other items in the future. I had a couple follow up questions:
have you set your own cameras before in a room to make sure nobody came after you left?
would you have the specific FLIR model you were using (if you are comfortable sharing)
Marking this as solved, as you nailed the main solution I was looking for. Thank you @winteranimal !
Have not tried counter surveillance cameras. Could see that deterring an evil maid attack if their cameras see you installing one.
Don’t know anything about FLIRs products other than mine, which I got over a decade ago. It was one of the cheaper ones.
If you’re bringing a smart phone, you can leave bluetooth on, but not paired to anything. That way it can alert you to off the shelf bluetooth trackers. Its simple, but people do try this. With graphene, and probably other open source android forks, you’ll need to install airguard. Iphones and stock android will watch for this by default. If its paired to anything, it will look for those things and thats a trackable data point.
If your worried about IMSI catchers, you can use the hotel wifi with a randomized mac and phone in airplane mode. Better yet, just turn it all off until you leave.
I’m sure there are defcon talks that cover hotel room spying.
This thread is devolving into paranoia. Like digital privacy and security, physical ones require accurate threat modeling or you will go insane.
If you are staying in a jurisdiction where the local government is not targeting you, then there is a very small chance they would spend the huge resources required for physical surveillance.
Tied to this idea, if you stay at a big chain hotel brand like Hilton or Marriott then they are highly unlikely to wittingly have cameras or microphones in any of the rooms. The financial liability, directly from lawsuits, and the reputational risk is extreme. Can you imagine the shit storm from a global headline that a Hyatt/Hilton/Marriott hotel was secretly video taping inside a guest room?
That is a multi-billion dollar negative hit to a for profit corporation. They are highly incentivized against this behavior. The only possible exception would be state run unwitting surveillance (which is a thing, but again only for high pay off targets).
Critically, this anti-incentive does not apply to small independent hotels or especially AirBNB. It’s the main reason I will never stay in an Air BnB. They have had multiple documented cases of hidden cameras but the main corporation involved deflects to it being the liability of the host.
Bottom line: I travel a lot for work. When I am in a friendly jurisdiction I just stay at big brand hotels and keep my personal electronics on me when I leave the room. If I travel to a suspect jurisdiction (and I have for work); then I treat my room as a known place of being watched.
