March· 2026

AliasProbe

Coherent Acoustic FMCW Range-Response Sharpening on a Stock iPhone via an Aliased Second-Harmonic Band

By using both the original signal and this hidden extra copy, the phone gets more detail than it normally should. More detail means finer separation between nearby objects, so the system can resolve structure more clearly without changing the hardware.

When an iPhone plays a high-pitched sound sweep, the speaker also creates a faint second copy at an even higher pitch. Part of that extra copy folds back into a signal the phone can still record, and it carries the same distance information as the original. By detecting and combining both signals, we effectively give the phone more usable sound bandwidth, which makes its distance measurements sharper and improves resolution.

TRANSMITTED 16–20 kHz PATH A · FUNDAMENTAL 16–20 kHz PATH B · THE HACK speaker 32–40 kHz NYQUIST 24 kHz 8–16 kHz COMBINED 8–20 kHz 12 kHz · 3×
Two paths from a single chirp. Path A: the fundamental passes through normally. Path B: speaker nonlinearity creates a second harmonic that folds through Nyquist into an alias band. Combining both triples the effective bandwidth.

The Pipeline

Three stages. Three gates. Designed to reject.

The estimator doesn’t try to combine signals optimistically. Every stage has a gate that can kill the measurement. The system is built to be skeptical of its own results-that’s what makes the surviving claims defensible.

01

Alias Existence

Compares chirp-on interval SNR against guard-interval noise floor. Then checks split-half reproducibility: if odd and even chirp subsets disagree, the alias isn’t real.

Gate: Both SNR and split-half reproducibility must pass.
02

Common-Delay GLRT

Generalized likelihood ratio test confirming that the fundamental and alias share a common time-of-flight. If the delays diverge, something is wrong-abort.

Gate: Statistically significant shared delay required.
03

Wideband GCC-β

Coherent combining via β-weighted generalized cross-correlation over the full 8–20 kHz aperture. Validated with held-out odd/even interleaved split.

Gate: Odd/even split must independently agree.

The held-out validation is key. Chirp cycles are interleaved odd/even, so the training and test sets see identical acoustic conditions. If the combined estimate doesn’t sharpen on both halves independently, the result is rejected. 200 chirp cycles per measurement (50 ms chirps + 25 ms guard intervals).

The Bug

The bug that changed everything

Early on, the matched filter for the alias band produced nothing. Zero correlation. The expected down-chirp template-a textbook ideal generated from continuous-time math-was completely wrong.

The problem: the alias isn’t a clean analytical down-chirp. It’s the result of a discrete-time squaring operation followed by bandpass filtering and ADC folding. The phase structure of the actual alias has subtle but critical differences from the continuous-time idealization.

Template Peak ρ Result
Ideal analytic down-chirp (continuous-time) 0.001 ×
Time-reversed fundamental chirp 0.003 ×
Windowed analytic ± phase offset grid search 0.012 ×
Discrete x²[n] → bandpass filter 0.74

The fix was conceptually simple but easy to miss. Generate the alias reference template by squaring the actual transmitted chirp samples in discrete time, then bandpass-filtering to the alias band:

ref[n] = BPF8–16 kHz{ x[n]² }

Where x[n] is the transmitted chirp sampled at 48 kHz. Squaring in discrete time produces a template that matches the real alias because it is the real alias-just without the propagation delay or noise. This was the single biggest unlock.


Results

The honest claim

All results are on stock iPhone hardware. Without any external jailbreak or use of any external sensors. Stock 48 kHz audio path.

Confirmed held-out narrowing >2×
Best single-reflector cases 2.1–2.8×
Theoretical ceiling
External hardware required None
Chirp cycles per measurement 200

Why stable 3× is hard

  • The alias band is 15–25 dB weaker than the fundamental-SNR is the bottleneck
  • Phase-integrity sensitivity: small template drift or multipath contamination degrades coherent combining
  • Speaker nonlinearity varies with temperature, drive level, and unit-to-unit manufacturing spread
  • Real reflectors aren’t ideal point targets-frequency-dependent scattering smears the impulse response
The Physics

Why the alias exists

Drive a small speaker hard enough and it clips. That clipping is a memoryless nonlinearity - the output is roughly proportional to the square of the input. The trig identity is all you need:

cos²(θ)  =  ½(1 + cos 2θ)

A 16–20 kHz chirp, squared, produces a component at 32–40 kHz-the second harmonic. The iPhone mic’s anti-alias filter is designed to reject everything above 24 kHz before the ADC samples at 48 kHz. But it doesn’t fully kill the harmonic. Enough leaks through.

The 48 kHz ADC then folds anything above Nyquist back into the baseband. A signal at frequency f aliases to 48 kHz − f. So 32–40 kHz becomes 8–16 kHz-a down-chirp that mirrors the original sweep direction.

This aliased chirp carries the same time-of-flight information as the fundamental. If we can validate it, align it, and combine the two coherently, we triple our effective bandwidth.

usable bandwidth: 4 kHz12 kHz
BEFORE original AFTER recovered alias band original 0 8 16 20 24 kHz
Same hardware, wider usable aperture.

Resolution

Why 3×

In FMCW sensing, the width of the matched-filter mainlobe is inversely proportional to bandwidth. Double the bandwidth, halve the mainlobe. The arithmetic is simple:

12 kHz ÷ 4 kHz = 3×
combined aperture ÷ fundamental-only bandwidth = sharpening ceiling
fundamental only - merged response range combined bands - separated peaks range Tripling the bandwidth lets the system distinguish objects that were previously blurred together.
Resolution comparison. Both panels show the same two objects at the same positions (dashed lines). With the fundamental alone, the response merges into a single blob. With the alias band combined, the peaks separate.

Limitations and Constraints

  • Not a two-target resolution result. All validated claims are single-reflector range-response width reductions. Separating two closely spaced reflectors is a harder test that requires controlled two-target experiments.
  • Not stable 3×. The theoretical ceiling is 3× but real-hardware results cluster around 2.1–2.8×. Closing the gap requires better SNR in the alias band or more sophisticated combining.
  • Not arbitrary poses. Measurements are controlled single-reflector setups. Real-world sensing with movement, multipath, and varying geometry is future work.
  • Not cross-device validated. Results are from specific iPhone models. Speaker nonlinearity and anti-alias filter rejection vary across models and manufacturers.
Next Step

A preregistered two-reflector separability experiment: can AliasProbe resolve two targets at a separation that the fundamental-only system cannot?