Skip to content

Eavesdropping

An unauthorized nonparty observes information from a communication meant for others without altering the exchange.

Version
v1 · 2026-10-17 · History
Domain-specific #
14131
Domain group
Professional & Organizational Practice
Origin domain
Security Studies & Intelligence Analysis
Subdomain
Communication Privacy → Security Studies & Intelligence Analysis
Aliases
Passive interception

Core Idea

Eavesdropping occurs when someone outside the authorized audience observes information from a communication intended for others without changing the exchange being observed. The observer may learn words, packet content, traffic details, or an inference; a complete readable message is not required. What matters is the relation among the addressed participants, an accessible carrier, and the nonparty observer.[ref-847fe0ebca42][ref-19d8e249ed71]

Scope of Application

Use the term when the intended audience, observer's authority, accessible channel, and information exposed can be identified; the controlled studies below model possible observation paths rather than documented nonconsensual acts.[ref-847fe0ebca42][ref-871a216ce4f2][^ref-38dc93c58e77]

  • Office speech: Recorded conversations heard from a neighboring position model acoustic reach; Bradley measured perceived privacy, not an actual interception.[^ref-871a216ce4f2]
  • Meeting-room speech: Sound reaching outside the intended room provides a second acoustic setting for testing who can hear the exchange.[^ref-871a216ce4f2]
  • Bluetooth transfer: BlueSniff's third receiver recovered part of a test file exchanged by two Linux endpoints; the experiment did not establish full-session capture.[^ref-38dc93c58e77]
  • Internet traffic: A passive observer may see message content, metadata, or traffic patterns, depending on what remains accessible.[^ref-19d8e249ed71]

Clarity

Ask who was supposed to receive the exchange, what the outsider actually observed, and whether that flow was changed. An addressed recipient or legitimate intermediary is not an eavesdropper merely because it receives a signal. Preparation to reach a channel can be active while observation of the resulting flow is passive. Accessing a stored copy later is a different exposure path, and tampering with messages is a separate active action even when the same actor also listens.[ref-847fe0ebca42][ref-19d8e249ed71]

Manages Complexity

The role test replaces the vague statement “someone listened in” with checks for audience, carrier, authority, exposure, and nonaltering observation. It also separates the path by which information reaches an outsider from a defense such as sound isolation or encryption. A defense can reduce exposure without itself deciding who was authorized to observe.[ref-847fe0ebca42][ref-19d8e249ed71][^ref-871a216ce4f2]

Abstract Reasoning

Map the sender, intended receivers, carrier, and outside observer. Then ask what the observer learned or could infer while the original exchange continued without observer-induced change. If access was only attempted and no information was obtained, call it an attempted intercept. The same role test can be reapplied to speech and packets, even though their physical mechanisms differ.[ref-847fe0ebca42][ref-19d8e249ed71][ref-871a216ce4f2][ref-38dc93c58e77]

Knowledge Transfer

The test transfers within communication privacy from room acoustics to digital networks: identify the audience boundary and then assess the observer's access and authority.[ref-847fe0ebca42][ref-19d8e249ed71] The live Boundary Prime supplies that strict prerequisite; it classifies who is inside or outside the addressed audience but does not physically block a signal. Confidentiality concerns an authorized holder's later duties, while Side Channel Attack requires a secondary effect; neither is the full relation described here. Animal-signal reception needs a different account of roles and consequences.

Relationships to Other Abstractions

Local relationship map for EavesdroppingParents appear above the current abstraction, mutual partners to the right, and children below. Node labels state whether each abstraction is prime or domain-specific; colors identify relation types.EavesdroppingDOMAINPrime abstraction: Boundary — presupposesBoundaryPRIME

Current abstraction Eavesdropping Domain-specific

Parents (1) — more general patterns this builds on

  • Eavesdropping presupposes Boundary Prime

    Unauthorized nonparty observation presupposes an operative audience boundary distinguishing intended recipients from outside observers.

Hierarchy path (1) — routes to 1 parentless root

Neighborhood in Abstraction Space

Eavesdropping sits in a sparse region of the domain-specific corpus (97th percentile for distinctiveness): few abstractions share its structure, so a faithful description tends to retrieve it precisely.

Family — Unclustered & Miscellaneous (2721 abstractions)

Nearest neighbors

Computed from structural-signature embeddings · 2026-10-17

References

[^ref-847fe0ebca42]: Cooper, Alissa, et al. 2013. Privacy Considerations for Internet Protocols. RFC 6973, Internet Architecture Board, section 3.1 and sections 4–5. https://www.rfc-editor.org/rfc/rfc6973.html [^ref-19d8e249ed71]: Barnes, Richard, et al. 2015. Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement. RFC 7624, Internet Architecture Board, sections 2–3. https://www.rfc-editor.org/rfc/rfc7624.html [^ref-871a216ce4f2]: Bradley, John S. 2007. From Speech Privacy to Speech Security. Proceedings of the 19th International Congress on Acoustics, especially PDF pages 2–5 and 7–9, Figures 4 and 8. https://publications-cnrc.canada.ca/eng/view/accepted/?id=72971fab-585d-42cc-938b-7ea1fc1b5a1e [^ref-38dc93c58e77]: Spill, Dominic, and Andrea Bittau. 2007. BlueSniff: Eve meets Alice and Bluetooth. USENIX Workshop on Offensive Technologies, sections 3–4 and Figure 6. https://www.usenix.org/legacy/event/woot07/tech/full_papers/spill/spill_html/