QIF-T0095
criticalAcoustic-to-neural profiling pipeline (consumer earbud escalation from audio to cognitive exploitation)
Tier 4 — Demonstrated (Case Study / Observational)
Legacy status: EMERGING
This technique documents the complete escalation chain from a single compromised consumer earbud to cognitive profiling. The chain proceeds: (1) T0072 — Speaker-to-mic reprogramming gives ambient audio eavesdropping, (2) T0079 — Ear canal acoustic fingerprinting silently identifies the wearer, (3) T0073 — Modified earbud with conductive ear tip captures in-ear EEG, (4) T0074 — Longitudinal EEG data feeds ML model for cognitive profiling. The end state: a single pair of compromised earbuds provides identity + ambient audio + continuous neural telemetry + personalized cognitive vulnerability profile — all from a device the target voluntarily wears for hours daily. Each step in the chain has been independently demonstrated or is emerging. The complete chain represents a consumer-device pathway to cognitive exploitation without any traditional BCI hardware. This is the canonical example of why the S-domain exists: consumer sensors as a pre-BCI attack surface.
Technique Details
- Tactic
- QIF-S.CH
- Status
- EMERGING
- Bands
- S1, S2, S3, I0, N1, N7
✚ Therapeutic Application
Multi-stage escalation chain: speaker repurposing → ear canal fingerprinting → in-ear EEG capture → ML-based cognitive profiling, all from a single compromised consumer earbud
Clinical Analog
Integrated hearing health + cognitive monitoring earbuds
Treats
- hearing aid with cognitive load monitoring
- seizure detection + audio therapy delivery
- neurofeedback training via earbuds
Neural Impact
6 of 7 neural bands affected
Drag to rotate. Click a region to learn more.
Click or hover over a glowing region to see the attack techniques targeting it and their severity.
DSM-5-TR Diagnostic Mappings
Diagnostic category references for threat modeling, not diagnostic claims.
Pathway: N7 (PFC/M1) → executive function; I0 (electrode-tissue boundary) → measurement
Following Poldrack (2006), brain region disruption does not uniquely predict psychiatric outcomes.
Scoring
NISS:1.1/BI:N/CR:H/CD:H/CV:I/RV:F/NP:T CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N Governance
Neurorights at Risk
This technique threatens 5 of the 4 proposed neurorights (Ienca & Andorno, 2017).
FDORA §3305 Compliance
- ! CVSS cannot express neural-specific impacts
- ! No FDA pathway for consumer sensor exploitation
Population Vulnerability
CRB vulnerability adjustment (γ=0.30) accounts for age, diagnosis severity, consent capacity, and device dependency.
| Population | NISS Base | Adjusted | Severity | Delta |
|---|---|---|---|---|
| Adult (Default) | 4.0 | 4.0 | Medium | - |
| Child (10yr) + ADHD | 4.0 | 4.7 | Medium | +0.71 |
| Adult with ALS | 4.0 | 4.6 | Medium | +0.64 |
Validation Status
Theoretical / Not yet validated. This technique has not been independently tested. See the validation dashboard for what has been tested.