Research library

Rights, security & the evidence boundary

Privacy, neuro-rights and security when devices touch the body, and the claims the evidence does not support. What 6G adds: more connected bodies means cybersecurity becomes bodily safety.

Of 102 findings in this theme, 16 are real today, 22 designed, 6 forecast, 6 disputed and 52 not supported.

Real today 16

Above 300 GHz, ICNIRP laser rules apply. It is not true that nothing covers frequencies above 300 GHz: ICNIRP's 2013 laser guidelines cover wavelengths from 180 nm to 1 mm, which includes terahertz. Reviewers note these optical limits allow 20-100 times more intensity than the radio limits just below 300 GHz.
Brain data is getting its own privacy laws. Chile put mental privacy into its constitution in 2021, and by 2025 Colorado, California and Montana limited how consumer devices collect brain data. An audit found 29 of 30 neurotech products took brain data with almost no limits.
Canada's Safety Code 6 covers 3 kHz-300 GHz. Health Canada's Safety Code 6 (2015) sets exposure limits from 3 kHz to 300 GHz, with safety margins, and above 6 GHz switches to power density because skin and cornea absorb the energy. ISED requires towers and devices, including 5G, to comply.
Cheney's defibrillator had its wireless function disabled in 2007. When former US Vice President Dick Cheney's implanted defibrillator was replaced in 2007, his cardiologist had its wireless function switched off because of a hacking fear, as he later told 60 Minutes.
City twins stall on skills, budgets and vendor lock-in. An EU guide (2025) lists recurring barriers: limited budgets, missing skills, poor data and departments not sharing. In the Slovenian city Novo mesto, vendors resisted sharing data and some wanted to sell public data back to the city.
Ethics standards exist; deepfakes threaten mixed reality. IEEE created its P7000 series of standards on ethics in autonomous systems. The same paper warns that as mixed reality becomes realistic, deepfakes could mislead, and proposes ways to authenticate where and when images were captured.
Fake cell towers and telecom signals can locate phones. Devices called cell-site simulators pretend to be phone towers so nearby phones connect to them, revealing their location and ID numbers. A 2025 investigation also showed a commercial service locating phones through the old SS7 signalling system that carriers use.
Formal standards committees cover IoT, twins and BCIs. A 2023 standards presentation places IoT and digital twins under ISO/IEC JTC 1/SC 41 and brain-computer interfaces under ISO/IEC JTC 1/SC 43, so BCI is now a formal standards field.
Global AI rules from UNESCO, OECD and EU. UNESCO's 2021 AI ethics recommendation, the OECD AI principles and the EU AI Act set baseline expectations, and the EU act bans certain manipulative systems and limits biometric uses.
Hacked autonomous systems can cause physical harm. Most IoT devices ship with weak software and settings; the Mirai botnet hijacked cameras and baby monitors. The IEEE paper warns that attacks on autonomous systems spill into the physical world and that only autonomous, learning defences can keep pace.
Home robots may let remote staff see inside homes. 1X says NEO works on its own by default, but for chores it does not know, a company expert can remotely supervise it at scheduled times. Owners can also pilot it by app or VR headset.
ID systems store faces, fingerprints, irises and DNA. Government identity systems already rely on body data: US federal ID cards follow NIST rules for fingerprint, iris and face images, forensic DNA databases use STR markers that pin down identity, and ICAO's 2025 passport standard builds on the same biometric formats.
Implant-hacking talk was due at Black Hat 2013. Security researcher Barnaby Jack was scheduled to give a Black Hat talk on hacking pacemakers and similar implants in July 2013. Reports name Black Hat, not DEF CON, as the conference.
Implants may outlive the companies that support them. An implanted or deeply integrated device can depend on its maker for repairs, updates and servers. This has already happened: Argus II retinal-implant users lost support after their maker's financial collapse, and a brain-implant trial participant had her device removed after the company folded.
International limits cover up to 300 GHz. ICNIRP's 2020 guidelines cover 100 kHz to 300 GHz. Above 6 GHz they limit power absorbed per area of skin: for the public, 20 W per square metre over 4 cm2, which is 10 times below the level that warms skin by about 5 C, with tighter 1 cm2 checks above 30 GHz.
Platforms personalise persuasion using behaviour data. Digital platforms test, sequence and time messages for each person based on what they click, watch and share. A large published social-media experiment showed small, measurable shifts in users' emotional tone.

Designed, not deployed 22

6G security studies include quantum-safe encryption. 3GPP Release 20 runs studies on security for the 6G system and on moving to post-quantum cryptography, encryption designed to resist future quantum computers.
6G sensing papers call bystander consent a hard problem. Research on 6G network-as-radar says people who carry no device can still be sensed, and several papers call consent and legal basis a major open problem. They propose transparency, purpose limits and authorisation rather than saying sensing is already deployed on people.
Career-long sensor uniforms are envisioned, not deployed. The quantified-soldier chapter imagines uniforms with embedded sensors assessing personnel continuously through a career, so technology can adapt to each person.
Check every layer before believing a system claim. Proof that one part exists, such as a physical effect or a device type, does not prove a full working system. The research checks power, range, calibration, identity, validation and deployment one by one.
Consent must cover inferences, not just hardware. Body data can reveal routines, health changes and identity, and bodily patterns used as passwords cannot be changed if leaked. Real consent should cover what is inferred, who receives it, retention, model training and how to withdraw.
Consent, maintenance and exit must last the device's life. Users learn their devices, so a learned BCI or prosthesis becomes part of their abilities. Consent should be renewed when purpose, data use, models or actuation change, and users need repair, updates, exportable calibration, migration paths and funded removal.
Defence planners now treat the mind as a domain. NATO publications discuss 'cognitive warfare', treating human perception and decision-making as a contested domain, and a 2023 U.S. defence strategy covers operations in the information environment.
German privacy regulators call network sensing invisible surveillance. In June 2026, Germany's federal and state data protection authorities said Wi-Fi and 6G sensing could monitor public and private spaces at scale, likening it to unnoticeable video surveillance that can also see past walls. They say consent will not work for bystanders and call for lawmakers to regulate it and build privacy into the standards.
Hacking a twin can mean controlling the real thing. US standards agency NIST (2025) lists new risks: twins pull many sensors into one place, so breaking into the twin exposes everything, and an attacker could fake what operators see or control the real object remotely.
Heartbeats and breath become data to secure and sell. When body signals stream continuously, they can be used as passwords, logged on blockchains to prove they were not tampered with, or traded for crypto rewards, raising questions of ownership and resale.
Military satellite mesh networks are for communications. The US Space Force contracted SpaceX in 2025 for MILNET, a planned constellation of 480-plus low-orbit satellites for military communications that would mesh with commercial satellites. Separately, the Army is buying new intelligence-gathering aircraft (HADES) for overseas commanders.
Neuro-rights are an active field, not settled law. Mental privacy, cognitive liberty and psychological continuity are proposed protections covering both raw neural data and what models infer from it, including the freedom to use or refuse neural tools.
People should be able to inspect and limit twins. The research argues a person should know a twin of them exists, inspect and challenge it, see who used it and refuse secondary uses, and should not have to be fully modelled to receive care.
Personal avatars need provenance and consent rules. An interactive memorial should label what was recorded, inferred or generated, and follow the person's choices about purpose, embodiment, commercial use, copying and retirement.
Purpose limits on body data need real enforcement. Data gathered for care or safety tends to drift into productivity scoring, discipline, insurance or advertising, and emergency biosurveillance can outlive the emergency. The research says rights only bite with regulators, audit trails and procurement contracts that demand fallback, interoperability and long-term support.
Security and resilience are built-in 6G principles. ITU makes sustainability, security and resilience, connecting the unconnected and built-in intelligence design principles for every 6G scenario, covering attacks such as hacking and denial of service and keeping service up during disasters.
Sensor-rich places are governed at many points. Who can see what depends on device specs, placement, sampling, firmware, gateways, platforms, models and institutions. A sensor built for safety can later be used for scoring workers or assessing risk.
Soldiers cannot freely refuse enhancement. Military hierarchy and mission pressure mean even an offer of enhancement can be coercive. The military volume calls for necessity, proportionality, fairness, protected refusal and lifelong duty of care.
The 2019 AI plan sets trust research goals. The 2019 national AI research plan calls for work on safe, reliable and explainable systems. It is an NSTC report; NIST published a separate standards-engagement plan.
Twins raise privacy, bias and cost worries. The US Government Accountability Office (2023) warns twins of people and cities raise questions about who owns the data and about biased models, and that high upfront costs could leave poorer cities behind.
US lets vetted firms run cyber operations. An August 2026 White House memorandum sets up a programme in which approved US companies, under Justice and Homeland Security oversight, may spy on and disrupt the computer systems of foreign criminal groups. Each operation needs written federal approval.
US limits stop at 100 GHz, extension proposed. FCC exposure limits are specified up to 100 GHz (SAR of 1.6 W/kg for phones). In 2019 the FCC kept its limits and proposed extending them up to 3 THz, plus a localised limit above 6 GHz, reasoning that penetration keeps shrinking with frequency.

Forecast 6

'Internet of Behaviors' is mainly an advertising-data forecast. 'Internet of Behaviors' is an industry label for using people's data to model and influence behaviour. One market report forecasts it growing from about $369 billion in 2022 to about $2 trillion by 2030, driven mostly by marketing and advertising.
AI-driven drone armies raise power-concentration fears. The Forethought paper warns that cheap drone swarms favour attack over defence, that insect-sized lethal drones could be built secretly, and that an automated military could entrench a dictator. It notes norms on autonomous weapons are being set now.
Claim: AI and robots could erase 100M US jobs. A note the owner saved in October 2025 records a US Senate minority staff warning that AI and robotics could eliminate up to about 100 million US jobs within ten years. A separate saved OECD-based note stresses most 'at-risk' jobs change rather than vanish.
Implanted neuroprosthetics could be biohacked. The IEEE white paper warns that weak security could let attackers access or alter implanted neural devices and the data they handle.
Invisible brain-web links could widen inequality. The 2017 IEEE paper warns that people with seamless brain-to-internet links would gain far more advantage than smartphone users do today, deepening the gap between haves and have-nots. It also asks who is accountable when a human-machine 'superorganism' acts.
Voluntary enhancement can become compulsory. If augmented workers, students or soldiers outperform others, refusing enhancement can cost jobs or status, and those who cannot pay risk becoming an underclass.

Disputed 6

'Biofields link people for empathy and healing' (claim). Bodies do give off measurable electrical, magnetic and extremely faint light signals. But the cited sources do not show empathy or healing passing between people through a biofield, and a review of non-contact healing practices says the mechanisms are unknown.
'THz can unzip DNA by resonance' (claim). A 2010 physics model by Alexandrov and colleagues suggested a specific THz field might enhance DNA 'breathing' (local strand opening). A 2011 follow-up model found those effects vanish under realistic physical conditions; the original group later reported gene changes in mouse stem cells under THz lasers.
Kids' AI tutors are real; brain-sensing tutors unproven. AI tutors are already in classrooms: Khan Academy's Khanmigo was piloted in 266 US school districts in 2024 and does not read brain signals. A small company announced a brain-monitoring learning app for children in 2025, but its EEG headset was still in development and its benefit figures came without any study.
Reports: Xbox-style controller aims US navy lasers. In late September 2026 press reports said US forces were using a reconfigured Xbox-style game controller to direct laser weapons in the Strait of Hormuz. The defence department had not confirmed the details.
Sweat ducts act as tiny antennas (hypothesis). Feldman's group (2008 onward) reported that helical sweat ducts change how skin reflects 75-110 GHz waves depending on sweating, and modelled them as antennas resonating around 0.1-0.5 THz. An independent model found ducts concentrate absorbed energy locally.
What DoD Directive 5240.01 (2024) says about assisting civil authorities. The September 2024 reissue of Directive 5240.01 sets rules for defense intelligence agencies helping civil authorities. Fact-checkers and the Pentagon say it requires Secretary of Defense approval for lethal-capable assistance and gives no new power to use lethal force; critics read its emergency route, said to allow approval within 72 hours, as a weaker safeguard.

Not supported by the evidence 52

"A 2020 DoD symposium assigned drones to every body" (claim). She says a September 2020 DoD AI symposium stated that an MQ-9 drone was assigned to every American and that the Joint AI Center was finished with ethics. Press coverage of that symposium reports ethics as ongoing work and does not mention such a statement.
"A 2023 DARPA statement describes a plasma fence" (claim). She says a 2023 DARPA research statement covers drone cybersecurity, a digital ID, an ad hoc network for a plasma fence and a geofence. We could not find such a DARPA document; the DARPA pages opened do not mention it.
"Anomalous health incidents are healthcare networks" (claim). The National Academies committee that reviewed the cases pointed to pulsed radio-frequency energy as the most plausible mechanism while saying other causes could not be ruled out; it did not describe healthcare networks.
"COVID tracing was a body-area network" (claim). The main COVID exposure-notification system used opt-in Bluetooth messages between phones, with identifiers that change every 15 to 20 minutes and matching done on each phone.
"Directive 3000.09 removes humans' choice to act" (claim). Directive 3000.09 is the Pentagon's rule on autonomy in weapon systems. The copies opened say systems must allow appropriate human judgment and operator intervention, and none mentions Fusion Centers or domestic targeting.
"Disability benefits will require nanotech treatment" (claim). The opened Social Security and Medicare sources describe a change in who processes disability reviews and a rule for device-based remote monitoring. They do not describe any requirement to accept bioelectronic or nanotechnology treatment.
"FBI warned Flock removal means watch list" (claim). Police intelligence bulletins did warn about online chatter on destroying Flock plate-reader cameras. The reporting names state and regional fusion centres, not the FBI, and mentions no biometric watch list.
"FCC made body communication mandatory" (claim). The FCC rules on medical body area networks let certain hospital devices use set radio bands on a shared basis. They do not require anyone to use body communication.
"FDA Modernization Act 2.0 bypasses drug testing" (claim). The bill text lets drug makers use non-animal methods, such as cell models and computer models, as nonclinical tests. It does not remove drug testing, and it does not mention digital twins.
"FDA rule removed the right to consent" (claim). The FDA did issue a final rule on 21 December 2023 letting ethics boards waive or alter consent. It applies only to minimal-risk studies and only when five conditions are documented; consent remains the general rule.
"Project Salus began at Dartmouth in 1954" (claim). A Project Salus does exist: a 2020 Pentagon AI prototype that forecast COVID-19 hotspots and supply problems for NORTHCOM. The sources found do not tie it to Dartmouth or 1954.
"SOSA reports on humans in vivo" (claim). A public Air Force catalogue lists SOSA among standards for reference architecture and interface management. It does not document the claimed system reporting from inside people's bodies.
"The JAIC started Project Maven" (claim). Project Maven began in April 2017 as a Pentagon team for machine analysis of drone video. The Joint AI Center was announced in 2018 and took it over later.
"Voluntary goosebumps make your own stem cells" (claim). Research does link the goosebump circuit to hair-follicle stem cells during a cold response. The records found do not show that raising goosebumps at will produces stem cells.
"nano.gov documents body-signal tracking" (claim). The National Nanotechnology Initiative has coordinated US nanoscale research since 2000 and lists applications such as nanomedicine. Its public page does not describe tracking people by body signals.
'6G enables remote mind control' (claim). Waves above 6 GHz stop within millimetres of the skin, and THz within a fraction of a millimetre, so they cannot reach the brain. No mechanism or study shows network signals reading or steering thoughts; the owner's research grades such claims unsupported.
'6G is terahertz waves' (claim). Early 6G is planned for existing 4G/5G bands, new 6-8.4 GHz mid-band and possibly 15 GHz, all centimetre waves. The first 6G study stops at 52.6 GHz. Sub-THz (about 100-300 GHz) and THz are research and niche fixed links that might join later releases.
'6G terahertz breaks your DNA' (claim). THz photons are thousands of times too weak to break chemical bonds, and early 6G does not use THz at all. In a careful study, 2.3 THz exposure caused no DNA damage markers or chromosome damage in very sensitive human stem cells.
'A textbook citing Directive 3000.09 describes DNA-finding drones' (claim). DoD Directive 3000.09 is a policy on autonomy in weapon systems: human judgment over force, testing and senior review. Summaries of the 2012 and 2023 versions do not mention DNA.
'Higher-frequency 6G will cook you' (claim). Heating is real at high power, which is why limits are set about 10 times below the level that warms skin by about 5 C. Health Canada says everyday exposure from towers and 5G devices is far below its limits.
'MAC IDs sit at the PHY layer' (claim). She says MAC IDs live at the physical layer of body networks and cannot be 'cleansed'. MAC addresses are real hardware identifiers fixed to network chips at manufacture, but standards place them one layer above the physical layer, and nothing cited shows people carry them.
'MKUltra and Havana syndrome are cover terms for body networks' (claim). She says MKUltra and Havana syndrome are not real terms and that the hidden subject is medical body area networks. MKUltra was a real CIA behaviour-research programme with released records. For Havana syndrome, a 2020 National Academies report found directed, pulsed radio-frequency energy the most plausible explanation for some cases, without ruling out other causes.
'Neuromodulation is applied remotely without consent' (claim). Non-invasive brain stimulation is real: electrical, magnetic and ultrasound devices placed on the head are used and studied for pain, depression, anxiety and Parkinson's. The cited sources describe clinical and supervised home use, not stimulation from a distance or without a person's knowledge.
'Our bodies are already 6G network nodes' (claim). Body-area networks (wearables, implants) are real, and in-body THz nanonetworks are proposed in papers. But no evidence shows ordinary people carry networked nanodevices, and the research itself stresses tiny ranges and power limits.
'Overused biosensors cause COVID effects' (claim). She says overused biosensors leave the body unable to keep up electrically, producing COVID effects, and points viewers to an HDIAC video as saying the same. HDIAC's 2022 casualty-care presentation describes nanomedicine and monitoring devices; it does not establish that biosensors cause COVID effects.
'Photonic and quantum tech networks our biology' (claim). The linked NIST and reference pages describe superconducting quantum electronics and nanoscale optics for chips and computers. They do not describe linking living tissue into a network.
'Precision medicine makes people a tradeable digital genome' (claim). The sources linked for this idea are virology reviews explaining how viral populations evolve. They do not describe turning individual people's genomes into tradeable digital assets.
'Sweat ducts make 5G/6G dangerous' (claim). The same group argued in 2018 that this could raise skin absorption at high bands and urged caution. A formal comment by Foster, Ziskin and Balzano (2020) challenged the paper and the authors replied; no study has shown health harm from this mechanism.
'The military grid reaches body networks' (claim). She often presents the Pentagon's network-centric information grid as extending to body area networks. The DoD network and its architecture plans are real, but the documents that opened say nothing about bodies, wearables or civilians.
'Trillion sensors exist to engineer the weather' (claim). The cited sources are real: a 1976 US law set up weather-modification policy, a 2025 House hearing asked for transparency on cloud seeding and geoengineering, and DARPA's AtmoSense studies sensing distant blasts through the atmosphere. None of them connects sensor networks to a weather-engineering programme.
'WHO says phones cause cancer' (claim). IARC's 2011 label is 'possibly carcinogenic' (Group 2B), meaning limited evidence where chance or bias cannot be ruled out. Later WHO-commissioned human reviews found no increased brain cancer risk from phones.
'Zika mosquitoes were deployed in Los Angeles and South Africa by 2015' (claim). She says Zika mosquitoes had already been deployed in Los Angeles and South Africa by 2015; she does not say they were genetically modified. The fact-check opened covers genetically modified mosquito releases in Brazil, Panama and the Cayman Islands, and neither place appears.
A compilation links missile defence, body networks and 6G. One research library note strings together a US missile-defence programme, satellite body-area-network and sensor-standard papers, and a 6G smart-city review, implying a connected system. The note itself makes no argued case linking them.
A mind file is a digital twin (claim). A digital twin is a synchronised, purpose-limited model of selected processes; a mind file is a biographical archive. Neither is a complete copy of a person.
A verified targeted-individual program exists (claim). Interviews include people reporting voices, pain, dreams and harassment. Their distress deserves respectful medical, legal and practical support, but the sources do not verify a covert program.
Ad targeting proves devices read thoughts (claim). Feeds can feel uncannily personal because they draw on searches, location, contacts, viewing time and similar people, not brain signals.
Body electricity and sensing do not equal remote control. Natural bioelectric activity does not make a person a network node, and a communication link alone cannot read thoughts or steer behaviour. Control needs a compatible device, an actuator and evidence at every step.
Brains can be monitored remotely without sensors (claim). Real neural decoding needs nearby hardware, good signal quality, calibration, known tasks and per-person models. Claims of wireless thought monitoring at distance skip all of these.
Claim that society will live in simulations is speculation. The owner's notes forecast a 'simulation economy' where people live and work inside simulated worlds and AI beings may need rights. Public standards describe twins as purpose-built tools for industries, not worlds to live in.
Dreams can be remotely inserted or interrogated (claim). One interview claims dreams can be programmed remotely and secrets or passwords extracted during sleep. Dreams are shaped by ordinary things such as stress, sound and medication.
Emergent machine behaviour excuses its makers (claim). When a swarm, fleet or system produces an outcome no single part chose, responsibility still sits with whoever set the rules, goals, data and operating limits.
Hidden nanotech in civilians enables mind control (claim). The nanonetwork research the research relies on describes tiny devices as severely limited and needing power, gateways, addressing and fabrication not yet achieved.
Hive minds and population-wide mind control (claim). Brain networks inside one head, and people exchanging small amounts of data through machines, are real, as are persuasion tech and emergent systems. A covert shared consciousness or one hidden system controlling a population is not shown.
Holographic sky and 'voice-to-skull' claims lack evidence. Saved AI-chat threads in the research describe 'Project Blue Beam', an alleged plan to fake religious or alien events with sky holograms plus beamed 'synthetic telepathy' or voice-to-skull messages. The chats offer no evidence and the assistant admits it does not know if any of it is real.
Mind files transfer consciousness (claim). Personality models can imitate someone's vocabulary, stories and style, but the sources show no evidence that the original person's awareness continues inside the machine.
Neural data reveals complete thoughts (claim). Neural recordings can expose sensitive things such as attention, movement intention or a clinical condition, but they are not a readable transcript of the mind.
Remote memory editing and personality control (claim). Transcripts claim memories can be read, inserted or deleted and personalities steered remotely. Memory is rebuilt from distributed brain processes, not stored as one file.
Remote pain proves a directed-energy attack (claim). Testimony describes pain attributed to remote energy or neural signals. Proving that would need measured exposure, timing, dose-response, independent observation and the actual device.
Repeated interviews are independent proof (claim). Most extraordinary-claim transcripts share one speaker, one community and the same terms, and his credentials are self-reported. Repeating claims across them, or using technical-sounding terms such as 'EEG cloning', is not independent confirmation.
Satellites or radar read individual minds (claim). Some speakers attribute neural targeting to satellites, ground radar or over-the-horizon systems. These platforms can detect, image and communicate, but nothing in the sources shows them acquiring brain signals.
Synthetic telepathy works at any distance (claim). Some public talks claim technology can send or extract inner speech remotely. Real research covers narrow decoding and tiny brain-to-brain information transfers with cooperating participants and hardware.
Voice-to-skull (V2K) delivers covert voices (claim). Transcripts link microwave hearing, directional sound and bone conduction to claims that voices can be beamed privately into a person's head.