NoPeek detects camera-capable smart glasses and VR headsets by leveraging the immutable BLE manufacturer company IDs broadcast in advertisement frames. It overcomes the unreliability of MAC address randomization by focusing on these fixed identifiers assigned by Bluetooth SIG. The detection system includes three layers: primary matching of BLE company IDs unique to manufacturers like Luxottica (Ray-Ban), Snapchat, Meta, and others; secondary device name keyword matching during pairing or power-on; and tertiary MAC OUI prefix matching as a low-confidence fallback. False positives are minimized, for example, by requiring both Apple's company ID and the device name "Vision Pro" to flag Apple devices. The tool estimates device proximity using RSSI thresholds and runs silently in the background on Android 8.0+ devices. It is open source under the MIT license and does not transmit data externally.

NoPeek itself is not a vulnerability or exploit but a detection tool that enhances user privacy awareness by identifying nearby camera-capable BLE devices that could record without consent. It does not introduce a security risk or exploit a vulnerability. Instead, it helps users detect potential privacy threats from smart glasses and VR headsets broadcasting BLE signals. Detection is probabilistic and limited to devices actively broadcasting BLE. There are no known exploits or attacks associated with NoPeek, and it does not affect device security or operation.

NoPeek is a privacy detection tool and does not require patching or remediation. Users interested in detecting nearby smart glasses and VR headsets can deploy NoPeek to gain awareness of such devices. Since it is an open-source Android application, users should obtain it from the official GitHub repository and review the source code for trustworthiness. No vendor advisory or patch is applicable. No action is required to mitigate a vulnerability because none exists in this context.