The Seven Coolest Inventions From ‘DEF CON’ 2026
The annual hacker convention DEF CON, held in Las Vegas, Nevada, concluded its 2026 edition. The main stage, exhibit halls, and demo labs showcased exciting advancements in anti-surveillance technology developed by open source developers, independent developers, and cybersecurity experts.
There’s a device called Flock that detects nearby cameras, an encrypted portable device for sending text messages without using carrier networks or the internet, a risk calculator for third-party web browser extensions, and an advanced spyware detector for smartphones. I spent the weekend analyzing all of these, browsing through numerous videos from the scene and classifieds. Here’s what I found most interesting.
Flock You and OUI-SPY by Colonel Panic
Flock Safety’s automated license plate recognition (ALPR) systems have become a hot topic in the context of cybersecurity and surveillance in 2026. They discreetly scan license plates to automatically send alerts to law enforcement and federal agencies, ostensibly to combat crime. However, this isn’t always the case: according to reports, law enforcement has used Flock data to track immigrants and people potentially seeking abortions , as well as to monitor partners and romantic relationships .
A very interesting gadget presented at DEF CON 2026 was technology developed by a DIY enthusiast known by the pseudonym ” Colonel Panic .” It’s a lightweight firmware called Flock-You that can be installed on any ESP32 microcontroller. You buy an ESP32 chip for $10-$15, load the firmware onto it, and use it to receive wireless signals that alert you to the approach of a security camera, like Flock. If you don’t want to mess around with setting it up yourself, Colonel Panic also sells ready-made ESP32 boards preloaded with the Flock-You firmware. These are called OUI-SPY detectors and can be purchased for just $85 each.
There are a few caveats, for example, the Flock-You firmware won’t work on Arduino or Raspberry Pi microcontrollers, as they rely on the ESP32’s specific Wi-Fi and Bluetooth infrastructure. Furthermore, Flock cameras are already being modified to bypass this detection technology, so it will likely only work on older or out-of-date models.
Hedge Biscuit Ultra
If there’s a universal anti-surveillance tool, it’s probably the Biscuit Ultra. Developed by a hacker known as Hedge, this portable device scans nearby wireless signals for several telltale signs of surveillance in your area. It then provides you with information such as:
-
List of all nearby Wi-Fi networks
-
Flock or Axon cameras in your range
-
If the same device or gadget keeps appearing everywhere you go
Of these three features, I think the third is perhaps the most useful. You’ll receive automatic alerts if the same smartphone, tracker, or GPS device tracks you for an extended period of time, which is a good indicator of whether you’re being actively monitored without your knowledge. The device has a discreet design, reminiscent of a small portable router with two rotating antennas. One of these devices currently costs around $160 at Biscuit Shop .
Rayhunter by Electronic Frontier Foundation (EFF)
In the US, law enforcement agencies use devices called IMSI catchers (nicknamed “Stingrays”), which can track cell phones by simulating a cell phone tower. They emit powerful signals that phones mistake for a real cell phone tower, causing them to disconnect from the local tower and connect to the catcher. Once connected, Stingrays can track your real-time location and call logs without being detected. This method is widely used by local police departments, the FBI, and ICE, for example. Worse, when these devices are active, they intercept unwanted data from all other cell phones in the vicinity, even if their owners are not persons of interest to the investigation.
Federal agents are required to obtain a search warrant before using these tools, except in “extraordinary circumstances,” but this is likely insufficient to protect public privacy. The Electronic Frontier Foundation (EFF) has developed a new tool called Rayhunter to detect any suspicious towers that could be nearby Stingray devices. It works on any standard mobile hotspot, which the EFF says can cost as little as $20. Simply download EFF’s free software to the hotspot, and it will light up red if suspicious tracking is detected from nearby towers.
Hacker Pager by Exploitee.rs
Exploitee.rs is a cybersecurity research group specializing in IoT security, home automation, entertainment devices, and smartphones. They have developed a radio communications device called The Hacker Pager , which resembles a retro-style portable smartphone with a screen and a mechanical keyboard.
Unlike mobile phones, Hacker Pager doesn’t rely on cell towers or an internet connection. This simple gadget uses radio waves to transmit signals from device to device, based on open-source firmware called Meshtastic. With the 2026 firmware update, Exploitee.rs’ device now supports external Bluetooth keyboards, multi-channel communication, and more customization options for settings such as sound notifications. While secure, the signal’s range is limited, as it only extends up to thirty miles—assuming a clear line of sight.
Phasmid from Mr. Rabbit
It’s still a prototype, but the idea itself is worth checking out. Makoto Sugita, aka “Mr. Rabbit,” demonstrated a data storage system that allows you to create a fake version of your local file storage. This allows you to hide sensitive data from others.
Phasmid is an open-source Python app that can be installed on your device and splits local storage into two slots—one real and one fake, created by you with sensitive data deleted. When someone tries to force you to hand over your device, Phasmid opens the “safe” version of local storage, with all sensitive data deleted, but reveals nothing else.
Since this is just a prototype, Phasmid is currently only available for Raspberry Pi devices, and a macOS version is in development. While it’s still mostly a proof-of-concept, it’s an interesting take on a tool that addresses a specific problem that few technologies address.
LAYERS of Abhinav Khanna and Krishna Chaganti
Fake extensions with security flaws are a persistent problem for web browsers. Many of these extensions also pretend to be ad blockers or coupon finders, silently monitoring your online activity, logging keystrokes, or turning on your microphone and webcam. Most people don’t even notice until they receive a ransom letter or experience a data breach.LAYERS , developed by cybersecurity researchers Abhinav Khanna and Krishna Chaganty, scans installed browser extensions to assign each one a risk score based on their behavioral patterns.
LAYERS is currently available for download as a package on GitHub. It runs locally in your web browser, sending no data to third-party platforms via API. Every browser extension you install is scanned for suspicious permission requests, malicious JavaScript or HTML, risky external URLs, and other common patterns found in malicious plugins. The result is a simple risk score that rates each extension from 1 to 100, with lower scores indicating a higher security risk.
IsMyPhonePwned by Anthony Desnos
IsMyPhonePwned offers an answer to the question: “What should I do if I suspect spyware is installed on my phone?” Typically, this would require hiring expensive cybersecurity experts or purchasing an antivirus platform like BitDefender or Norton. But Anthony Desnos developed IsMyPhonePwned as a free alternative to expensive spyware detectors that require installing a cumbersome app on your phone, which would also reveal your suspicions to the attacker.
The Desnos tool is a web app that can be run from a desktop PC. You connect to the compromised smartphone via USB, and IsMyPhonePwned generates an error report for you. You can run this scan on both Android and iOS devices. If you suspect a specific app is spyware, there’s also a tool called droid2web , which can scan Android app packages separately.