Wire-to-WiFi correlation, part two

The monitor radio from last post’s shopping list showed up, so I stopped driving synthetic beacons and pointed it at a real Telegram video call — captured twice at once: from the air, encrypted, and from inside the target, decrypted, as ground truth. The call’s shape crossed the encryption at r = 0.8–0.9, a wrong-window null stayed dark, and the whole thing was legible without reading one byte of content. Then the honest half: a background stream drowned the call until it got loud, the downlink data frames stayed as unreadable as ever, and a clever one-way ICMP trick failed a null control cleanly.

July 16, 2026 · 11 min · Vitalii Zaiats