The analysis was possible because Bluetooth devices generally default to broadcasting their unique identities. Yet it appeared that of all the headphones picked up by Hegnes, none of them implemented address randomisation.

Without that randomisation, it was trivial for the devices to be pinged repeatedly, revealing their wearers’ precise location as they travelled around the city of Oslo.