Story code: ST-001110
Part 3: The Hidden Device in the Closet
My reconstruction of the events inside the Vance home, based on the local area network (LAN) administration logs I later retrieved from the home hub’s internal storage, shows that at 5:15 PM, a physical search of the media closet began. Sarah Vance stood before the rack of server units, her finger tracing the Ethernet cables that fed into the primary router. Mark Vance stood behind her in the narrow hallway, his arms crossed, his posture rigid.
According to the system log files, the casting event had not been a random anomaly. The router’s MAC address allocation table registered a device labeled ‘Device-MV2-Secure’ connecting to the local casting channel for 114 separate sessions over the preceding three months. The timestamps of these connections corresponded precisely with the hours Mark was logged as the sole occupant of the house, particularly during Sarah’s weekly afternoon volunteer shifts when the house was otherwise empty.
Sarah bypassed the active server towers and reached toward the dusty gap behind the uninterruptible power supply unit on the bottom shelf of the media closet. Her hand emerged holding the Second Phone, which was encased in a matte black casing. A physical inspection later confirmed it lacked a standard SIM card tray, instead utilizing an unlogged eSIM configured to route all outbound data traffic through a virtual private network.
Mark took a quick step into the closet, his shoulder brushing the doorframe as he attempted to block her path. ‘Sarah, that’s a work testing device,’ he said, his voice rising slightly before he caught himself. ‘It’s registered to my department. I brought it home to test the signal load on the local router. The casting software must have bridged the network automatically when I turned on the projector.’
Sarah did not look at him. She pressed her thumb against the second phone’s screen. Because the device was configured to keep its display active during active mirroring sessions, the lock screen remained open. The interface displayed the native application used to record the video that had just played on the smart projector screen. A list of stored video files populated the directory, each thumbnail matching the low-angle perspective of the master bedroom dresser.
Mark’s breathing was audible on the smart thermostat’s microphone, his hands hovering near his pockets as he stepped closer. ‘Give me the device. It has proprietary work data on it. You don’t know what you’re looking at.’
Sarah pulled her hand back, placing the phone into her pocket. She pointed to the router’s blinking LEDs. ‘The network logs show this MAC address has been uploading data continuously to a remote server. The transfer volume matches the size of these video files. It is not work data.’
Before Mark could respond, a notification banner popped up on the secondary phone’s screen, illuminated through the thin fabric of Sarah’s pocket. It indicated that a secondary remote connection had just been established from an external IP address, revealing that the private feed was currently being accessed by an active, unlogged viewer outside the local network. The screen flashed again, showing a notification that the external connection was downloading the bedroom video folder in real time.