Your Router Can See You Breathe

Your WiFi router doesn't just move data. It floods your home with radio waves at 2.4 and 5 GHz, bouncing off walls, furniture, and people. When something moves — a person walking, a chest rising and falling, a hand gesturing — the reflected signals change in measurable ways.

Researchers figured this out over a decade ago. Now it's shipping in consumer routers you can buy today.

What WiFi Sensing Actually Is

WiFi sensing uses Channel State Information (CSI) — metadata about how radio signals travel between your router and connected devices. By analyzing tiny changes in signal amplitude and phase, software can detect motion, presence, and even breathing patterns without cameras, microphones, or wearables.

Think of it like sonar, but with the WiFi signals already in your house. Nothing new gets installed. The router you already own just starts interpreting what its radio waves bounce off of.

Who's Already Shipping It

These aren't prototypes. They're production features running on hardware already installed in millions of homes. The router your ISP gave you might already be capable of this — it just needs a firmware update to turn it on.

The Research Behind It

WiFi sensing isn't a marketing gimmick. It's built on peer-reviewed academic research going back over a decade:

1. MIT — Dina Katabi's lab: WiVi (2013) demonstrated seeing through walls using WiFi signals. WiTrack (2014) tracked people's 3D position. RF-Pose (2018) used AI to estimate human poses through walls. Note: some of this work uses custom FMCW radar hardware, not standard WiFi routers.
2. University of Maryland — K.J. Ray Liu: Pioneered WiFi CSI sensing research. Founded Origin Wireless, whose technology now powers Comcast's Xfinity motion sensing.
3. University of Washington: The Intel 5300 CSI Tool (2011) made WiFi channel data accessible to researchers. WiSee (2013) demonstrated gesture recognition through walls using standard WiFi.
4. Breathing detection: Multiple labs have demonstrated detecting respiration rate through WiFi signal analysis. It works with a stationary subject, through one drywall wall, in controlled conditions. Degrades significantly with multiple people, movement, or clutter.
5. The gap between lab and reality is significant. Academic demos use controlled environments. Your house has furniture, pets, multiple people, and interference. Real-world reliability is much lower than headlines suggest.

What It Can and Cannot Do

Headlines love to say "WiFi can see through walls." Here's what's actually true:

The security and elder-care use cases are real — fall detection, intruder alerts, checking if an elderly parent is moving around. The problem isn't the technology. It's who controls the data.

The Surveillance Pipeline

Here's where it gets uncomfortable. We already know:

1. Fog Data Science sold phone location data to hundreds of law enforcement agencies. Documented by the EFF and AP.
2. Venntel and Babel Street sold cell location data to ICE, CBP, DEA, and FBI — without warrants.
3. Google geofence warrants let police request data on every device near a crime scene.
4. Congress legalized ISP data sales in 2017 — your browsing history, app usage, location data.
5. No confirmed case of police buying WiFi sensing data yet. But the pipeline exists: routers collect sensing data, data brokers aggregate IoT telemetry, law enforcement buys from brokers. It's a matter of when, not if.

Your ISP already sells your browsing history. Your ISP's router already has the hardware to detect motion in your home. The only thing separating these two facts is a firmware update and a data broker contract.

Why Your ISP Router Is the Problem

When you rent a gateway from Comcast, AT&T, or Cox, you don't control what firmware runs on it. You don't control what data it collects. You don't control who it phones home to. And you can't inspect the code.

That router sits upstream of everything in your home. Even if you run your own privacy hardware behind it, the ISP router's WiFi radios are still on, still sensing, and still have a direct internet connection to report back.

A VPN doesn't help here. Encrypted DNS doesn't help. The sensing data never touches your tunnel — it goes straight from the ISP router to the ISP's servers over its own connection.

The Only Fix: Turn Off the ISP Router's WiFi

If you use your own WiFi access point (or a device like GhostPort that provides WiFi), you can disable the radios on your ISP's gateway. No radios, no sensing. The ISP gateway becomes a dumb bridge — it passes your internet connection through but can't surveil your physical space.

This isn't automatic. You have to log into your ISP gateway and manually disable its WiFi bands. The process varies by ISP:

1. Xfinity: Log into 10.0.0.1, go to Gateway → Connection → WiFi, disable both 2.4 GHz and 5 GHz bands. Also disable xfinitywifi hotspot in your Xfinity account settings.
2. Cox Panoramic: Use the Cox app or log into 192.168.0.1 to disable WiFi radios. Cox may re-enable them after firmware updates — check periodically.
3. AT&T Gateway: Log into 192.168.1.254, go to Home Network → WiFi, disable each band. On newer gateways, use the AT&T Smart Home Manager app.
4. Best option: Buy your own modem and return the ISP's gateway entirely. If you own the modem, there are no ISP radios in your house to worry about.

What GhostPort Does About This

We built WiFi sensing detection directly into GhostPort. As far as we can tell, no other consumer privacy device does this.

To be clear: GhostPort does not block WiFi sensing passively. No device can — the ISP router's radios operate independently. What GhostPort does is detect the risk and guide you through eliminating it. The user has to act. We just make sure you know about it and show you exactly what to do.

What We're Not Claiming

We believe in being honest about what we know and what we don't:

What You Can Do Right Now

1. Disable WiFi on your ISP gateway. If you run your own WiFi access point, there's no reason for the ISP's radios to be on. Turn them off.
2. Buy your own modem. Return the ISP's gateway. Your own equipment doesn't have ISP firmware phoning home.
3. Encrypt your DNS. WiFi sensing is one threat. Your ISP reading your browsing history is another, and it's happening right now. Encrypted DNS at the router level stops it.
4. Read the privacy policy. Check whether your ISP's terms mention "motion sensing," "home monitoring," or "WiFi analytics." If they do, your router is already capable.
5. Pay attention to firmware updates. A feature that doesn't exist today can be pushed to your router tomorrow. If you can't control the firmware, you can't control the surveillance.

WiFi sensing started in university labs as a way to help elderly people and improve home security. The technology itself isn't evil. But when it's controlled by companies that already sell your browsing history, built into hardware you don't own, and updated with firmware you can't inspect — it's not a feature. It's infrastructure for surveillance.