Last updated:
🔊 Planes Leak Your Location: How Inaudible Doppler Curves Geolocate a Recording
Every aircraft that passes over you writes a curve into any recording you make. The plane's track is public. Here is how a researcher turned that into a 100-metre fix, whether a tool could do it, and what helps.
Quick answer: On 2 November a geolocation researcher, colsto, located a video to within about 100 metres. His clue was sound you cannot hear. Aircraft engines leave a Doppler curve in the audio. Matched against public flight-tracking data, that curve points to one spot on the ground colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026). He released no code. We explain the method, test whether it could be automated, and say what protects you.
What the video shows
The challenge is a one-minute clip from a security camera. The picture is a blurry tree line. The only facts given are the date, 8 September, and that it is somewhere in the continental United States colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026). He finds the camera.
The clue is inaudible. On a spectrogram, zoomed into low frequencies at high resolution, two faint curves appear. Each is the engine tone of an aircraft sliding down in pitch as it passes: a Doppler curve. The two flyovers are 920 seconds apart colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026).
The method, step by step
- Get every flight. He downloaded the ADS-B tracks of every aircraft over the US that day, several hours of scraping and files in the tens of gigabytes colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026).
- Keep the propeller planes. The tone is a propeller signature, so jet types were filtered out using an aircraft-type lookup table.
- Lay a grid. Points every 200 metres across the search area. For each point and each flight, compute the moment the plane was closest, the closest point of approach (CPA). Then add the time the sound takes to arrive over the slant distance. Altitude is above sea level, so a digital elevation model supplies the ground height at every point.
- Read speed and distance off the curve. How far the pitch drops gives the plane’s speed. How fast it drops gives the CPA distance. Both become filters.
- Filter by timing. Keep only points that would hear a plane of the right speed and distance, then another one 920 seconds later. Then drop points that would have heard a third plane in between. About 70,000 candidates fell to 15,000 colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026).
- Model and score. For each surviving point and flight, compute the exact Doppler curve that point would have heard. It comes from the plane’s real position and radial velocity, second by second. Draw it on the spectrogram and sum the brightness under it. Refine to a 100-metre grid.
- Confirm on the ground. One flight pair scored far above the rest. Street View from that spot showed the tree line, and then the camera itself colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026).
A second test used one flight and a tight time window instead of two flights. It found the same spot. Either a second flyover or a known recording time is enough; you need one of them, not both colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026).
He describes it as over 5,000 lines of code, built over months, and says: “No code or tools are being released” colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026).
Why it works
- Low frequencies travel. Engine tones sit at roughly 50–300 Hz. They pass through walls and are recorded by every phone, camera and doorbell, whether or not anyone hears them.
- Doppler is geometry. The shape of the pitch curve depends only on the plane’s speed and how close it passed. A curve is a measurement of distance.
- The plane’s side of the equation is public. ADS-B broadcasts position, altitude and speed in the clear. Hobbyist networks archive them.
- Two curves beat one. The time between two flyovers, plus the silence between them, rules out most of the country before any heavy computing starts.
The physics is old. Locating aircraft from the Doppler shift of their sound is published work. A 2014 IEEE paper does it with seven fixed microphones around an airport Martín Román et al., IEEE Trans. Aerospace and Electronic Systems (2014). A 2026 review covers Doppler localisation across radio, acoustic and satellite settings Szczepanik, arXiv:2604.14413 (v2, 7 Jun 2026). What is new is turning it around: the aircraft positions are known, so the microphone is the unknown.
Could this be automated? An honest assessment
We were asked whether Max Intel could build a browser tool for this. We did for ADS-B decoding and weather chronolocation. Here is the breakdown.
| Step | Feasible in a browser? | Why |
|---|---|---|
| Spectrogram and curve detection | Yes | Web Audio can render a high-resolution low-band spectrogram. Fitting a Doppler model to a traced curve gives speed and CPA distance. This is the easy part. |
| Historical ADS-B for a whole day | Partly | adsb.lol publishes daily “whole sky” dumps under ODbL, one trace file per aircraft, as multi-part GitHub releases adsb.lol, historical data (read 3 Nov 2026). OpenSky’s history database needs an approved account traffic library docs, OpenSky history database (read 3 Nov 2026). A day of US traffic is gigabytes; a browser cannot hold it. |
| Elevation for every candidate point | Partly | Public DEMs exist, but a nationwide grid is a server-side job. |
| Nationwide candidate search | No | Tens of thousands of points, each scored against real flight geometry. His run took the better part of a day of compute colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026). Not a browser task. |
| City-scale search with a known day | Yes, with a server | A city is a fraction of a percent of US land area colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026). Pull that area’s flights for the day, grid it, score it. Minutes on a modest server. |
Our answer: a full “upload audio, get coordinates” tool is not something we will build, and not only for compute reasons. The output is a private location from a recording the subject may not know exists. That is the definition of the harm our ethics guide draws a line under. The author reached the same place: he kept the code to himself.
We built the defensive half instead. Scout Doppler scans your own recording for Doppler curves and tells you whether a flyover is in it before you post. It also runs live from a microphone as a flyover logger, matching each pass to ADS‑B when you have a receiver. It estimates speed and closest distance only. It never searches for where a recording was made.
For investigators with a lawful purpose and a small search area, the recipe above is enough. It can be reproduced with Python, the adsb.lol archive and a DEM. The ADS-B data has the same fields our radar page decodes live.
Where it fails
- No planes, no fix. Remote areas and quiet hours give nothing to match. Jets at cruise altitude leave weaker, flatter curves than low propeller traffic.
- Coverage gaps. ADS-B archives depend on volunteer receivers. Aircraft below receiver horizon, or in the FAA’s privacy programmes, may be missing or anonymised.
- Search area times time window. With no idea of place or time, the search becomes a nationwide, all-day grid. The video needed two flyovers and a known date to make that tractable.
- Edited audio. Cuts break the timing between events. Heavy processing can smear the curve.
- It finds the microphone, not the person. A security camera, a phone on a desk, a dashcam: the fix is where the recorder was.
What actually protects you
He tested the obvious defences on camera, and most fail colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026).
- A high-pass filter does not work. The curves share frequencies with the human voice, so cutting them cuts speech. And a cut curve came back when the quiet band was boosted.
- Talking over it does not work. A speaker playing a Doppler curve across the room still showed on the spectrogram under his voice.
- Phone calls do not strip it. The curve survived a phone’s compression and noise reduction. A call is also a recording with a known time, which is the one thing that makes a one-plane search easy.
- Cuts work. Removing sections breaks the time offset between flyovers. Posting a trimmed clip is safer than posting a continuous one.
- Noise cancellation helps. Aggressive noise reduction aimed at steady tones can remove the curve. Check the result on a spectrogram, not by ear.
- Delay and vagueness help. Not revealing the recording date, or the rough region, multiplies the search cost. This is the same advice as our travel guide gives for photos.
The bigger picture
This sits in a line of work that reads location from the environment rather than from metadata. Weather and shadows give the time of day; our chronolocation tool uses the first. Mains hum, the 50 or 60 Hz electrical network frequency, has been used in forensics for years to date recordings. Thunder gave colsto about five kilometres in an earlier video; aircraft give him a hundred metres colsto, “I discovered a sound that leaks your exact location” (YouTube, 2 Nov 2026).
Each of these needs a public reference dataset. Flight tracking is the richest one there is: free, archived daily, and global. That is why the ADS-B guide and the Remote ID guide matter to privacy as much as to plane-spotting. The data that lets you watch a plane is the data that lets a plane watch you.
Frequently asked questions
Can you really find a location from inaudible sound?
Yes, when an aircraft passed over during the recording and its track is in a public ADS-B archive. The engine tone leaves a Doppler curve in the low frequencies. Its shape gives the plane's speed and distance, and matching that against the real flight path points to one spot. The 2 November 2026 demonstration located a one-minute security-camera clip to within about 100 metres.
Is there a tool that does this automatically?
Not publicly. The researcher who demonstrated it released no code. The spectrogram and curve-fitting steps are simple, but a nationwide search needs a day of flight data and heavy computation. A city-scale search with a known date is feasible on a server. Max Intel is not building a locating tool; we may build a check that scans your own audio for flyovers.
What data does the method need?
Three things. The audio; a historical ADS-B archive for the day (adsb.lol publishes daily dumps under ODbL, and OpenSky needs an approved account); and a digital elevation model to turn altitude into slant distance. A known recording time or a second flyover narrows the search enough to be practical.
Does a high-pass filter remove the Doppler curve?
No. The curves sit at the same frequencies as the human voice, so filtering them removes speech too. In the demonstration, a filtered and re-exported file still showed the curve once the low band was amplified.
Does it work on phone calls?
In the demonstration, yes. The curve survived a phone's compression and noise reduction. A call also has a known time, which is the easiest case for a one-flight search.
What should I do before posting a video?
Trim it, so the timing between flyovers is broken. Avoid saying when and roughly where it was filmed. If the location matters, run strong noise reduction and check the result on a spectrogram. Keep it in proportion: this attack is rare and expensive, and most location leaks come from simpler mistakes.
Is this legal to do?
Analysing public flight data is lawful. Using the result to find a private person's home can be stalking or harassment under the laws our legal guide covers, whatever the technique. Our ethics guide applies: research places and systems, not people who have not asked to be found.