<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: getnopeek</title>
    <description>The latest articles on DEV Community by getnopeek (@getnopeek).</description>
    <link>https://dev.to/getnopeek</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3953224%2F5aaa24d4-ca8b-4722-9cb5-3e268b1a915e.png</url>
      <title>DEV Community: getnopeek</title>
      <link>https://dev.to/getnopeek</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/getnopeek"/>
    <language>en</language>
    <item>
      <title>How I built an app to detect Meta Ray-Ban glasses using immutable BLE company IDs</title>
      <dc:creator>getnopeek</dc:creator>
      <pubDate>Tue, 26 May 2026 20:45:31 +0000</pubDate>
      <link>https://dev.to/getnopeek/how-i-built-an-app-to-detect-meta-ray-ban-glasses-using-immutable-ble-company-ids-3cfe</link>
      <guid>https://dev.to/getnopeek/how-i-built-an-app-to-detect-meta-ray-ban-glasses-using-immutable-ble-company-ids-3cfe</guid>
      <description>&lt;p&gt;Meta has sold 7M+ Ray-Ban smart glasses. They look &lt;br&gt;
identical to normal glasses. They record video and &lt;br&gt;
audio silently.&lt;/p&gt;

&lt;p&gt;After Harvard students demonstrated real-time facial &lt;br&gt;
recognition using them on strangers in public, I built &lt;br&gt;
NoPeek — a free Android app that detects them via &lt;br&gt;
Bluetooth.&lt;/p&gt;

&lt;h2&gt;
  
  
  The key insight
&lt;/h2&gt;

&lt;p&gt;MAC address randomization made BLE fingerprinting &lt;br&gt;
unreliable. But the Manufacturer Specific Data field &lt;br&gt;
in every BLE ADV frame contains a company ID in &lt;br&gt;
bytes 0-1 that is:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Assigned by Bluetooth SIG&lt;/li&gt;
&lt;li&gt;Immutable — cannot be rotated or randomized&lt;/li&gt;
&lt;li&gt;Broadcast on every advertisement packet&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Key company IDs
&lt;/h2&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Company ID&lt;/th&gt;
&lt;th&gt;Vendor&lt;/th&gt;
&lt;th&gt;Device&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;0x0D53&lt;/td&gt;
&lt;td&gt;Luxottica&lt;/td&gt;
&lt;td&gt;Meta Ray-Ban&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;0x03C2&lt;/td&gt;
&lt;td&gt;Snapchat&lt;/td&gt;
&lt;td&gt;Spectacles&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;0x01AB&lt;/td&gt;
&lt;td&gt;Meta Platforms&lt;/td&gt;
&lt;td&gt;Quest/Ray-Ban&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;0x0BA7&lt;/td&gt;
&lt;td&gt;Pico&lt;/td&gt;
&lt;td&gt;Pico VR&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;0x00E0&lt;/td&gt;
&lt;td&gt;HTC&lt;/td&gt;
&lt;td&gt;Vive&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;h2&gt;
  
  
  False positive prevention
&lt;/h2&gt;

&lt;p&gt;Apple's 0x004C is used by ALL Apple devices.&lt;br&gt;
NoPeek requires BOTH company ID AND device name &lt;br&gt;
"Vision Pro" — so your iPhone never triggers alerts.&lt;/p&gt;

&lt;h2&gt;
  
  
  The app
&lt;/h2&gt;

&lt;p&gt;Built with Kotlin. Foreground service for background &lt;br&gt;
scanning. Path-loss model for distance estimation.&lt;br&gt;
No internet permission. Fully local.&lt;/p&gt;

&lt;p&gt;GitHub: github.com/getnopeek/nopeek-android&lt;/p&gt;

&lt;h2&gt;
  
  
  What's next
&lt;/h2&gt;

&lt;p&gt;Looking for contributors especially:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;New device signatures&lt;/li&gt;
&lt;li&gt;iOS port&lt;/li&gt;
&lt;li&gt;False positive reports&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>android</category>
      <category>privacy</category>
      <category>security</category>
      <category>showdev</category>
    </item>
  </channel>
</rss>
