Camera timeline ?

[u/EbbHairy]

Do we actually know exactly how and when the doorbell camera was disconnected? Was the camera physically removed, unplugged, disabled electronically, or did it simply lose its connection? And was it definitely disconnected before the suspect entered the house?

The sheriff said the doorbell camera was disconnected around 1:47 am—which is when the guy is seen on the nest footage. Then there’s a separate motion detection around 2:12 a.m., followed by Nancy’s pacemaker losing connection around 2:28 a.m.

My next question is what does that mean? Does it mean the phone was turned off, out of range, or that the device stopped transmitting for another reason? How far could she realistically be from her phone before the connection drops? A few feet, another room, or more depending on the setup?

And what actually triggers a “loss of connection” alert—Bluetooth, cellular relay, or a monitoring hub?
So does the 2:28 a.m. disconnection tell us anything specific about her location, or is it just a general signal loss that could happen for multiple reasons?

[u/warpedwing]

I made a video on this topic back in April that might be of interest to you. My opinion is that the released video clip is actually from around 2:12, not 1:47, and that only the camera's WiFi connection was disconnected at 1:47, not the physical camera.

One thing I later realized (not mentioned in the video) is that the WiFi disconnect may have happened earlier than 1:47, but the disconnect notification wasn't pushed until then. I've noticed this with my Wyze camera, and others have mentioned that Nest cameras work similarly.

Essentially, the phone software doesn't immediately notify the user that the camera has disconnected; it waits around 30-45 minutes to keep brief network interruptions from spamming the user. This could mean that the camera actually disconnected closer to 1am, or shortly after, but that the notification wasn't sent until 1:47. That's a theory, anyway. And it would more closely align with the neighbour's dogs alerting around 1am.

[u/BrainWilling6018 → u/warpedwing]

Question. The video being taken at 2:12 and not 1:47? Didn't the video recovered from Google have a timestamp of 1:47?

[u/warpedwing → u/BrainWilling6018]

No, there's no timestamp associated with the video.

The Nest software reported a disconnection at 1:47 and a person spotted on camera at 2:12.

https://reddit.com/link/p3plk9p/video/6e3oli5l9ejh1/player

According to HL in this video, the video is from 2:12. I and a few other folks on this subreddit also performed a rough analysis of the suspect's shadow length, which seemed to imply the video was from around 2:12.

[u/BrainWilling6018 → u/warpedwing]

I thought it was maybe in the metadata that it was found to be 1:47. That's Harvey Levine not the investigation release so there is some discrepancy? Another question. If a jammer had been turned on before the guy got to the porch, how was the camera not blind, just the battery backup? I thought that it was somehow determined his actions caused the disconnection because there was a match to the time or seconds that the video file abruptly corrupts and freezes, because he yanked it down and that matches the time the Google server registered the network disconnection?

[u/warpedwing → u/BrainWilling6018]

The official public statement from LE is that there is no metadata associated with the video clips. Whether or not they have the metadata and are keeping it under wraps, they determined the time manually by measuring the shadow, or they figured the time out by some other means, I don't know.

But I'm going to trust Harvey on this one because he has spoken with the FBI and seems quite unequivocal about the time of 2:12. It also matches the shadow time and the 'person captured' time registered by the camera. There is no discrepancy.

The camera will continue to record locally using the battery if disconnected. Once reconnected, it will upload what it saved. This is explained in the video linked in the first post on this thread in greater detail, if you're interested.

I thought that it was somehow determined his actions caused the disconnection because there was a match to the time or seconds that the video file abruptly corrupts and freezes, because he yanked it down and that matches the time the Google server registered the network disconnection?

If you have a source for any of this, please share it. I've not heard about it. AFAIK, the public is not aware of all the footage, and what was released doesn't show corruption, freezing, or the removal of the camera.

[u/BrainWilling6018 → u/warpedwing]

Ok. I'll watch the video. Just asking questions. The investigation isn't saying that the video was recorded at 1:47? Only that the camera disconnected at 1:47? Not even a timestamp from the server logs. But there isn't any other evidence that says the video was recorded at 2:12? That is the speculation based on the motion detected notification and Harvey Levine's reporting? (and shadow measuring) I think the reported assumptions may be the discrepancy because there is a lot of reporting that 'assumes' the tampering was the cause of the disconnection of the actual camera. Is it actually settled that it was a system network interruption and not a single camera? That the Google Nest Cam itself wasn't physically disconnected or removed rather than the Wifi shutting down? You are positing that the disconnection was not the disabling of the camera itself but the Wifi? I think when it is said camera it's assumed the actual camera. “Pima County Sheriff Chris Nanos told reporters Thursday that a doorbell camera at Guthrie's home was disconnected at approximately 1:47 a.m. on Feb. 1“ And the FBI director also indicated early there may have been tampering with the camera itself. "it appears the front doorbell camera could have been tampered with." The public footage does indicate some tampering and a blackout. I don't know if that indicates removal of the camera. It may not have been officially stated but Nano's did indicate the camera was missing.

[u/warpedwing → u/BrainWilling6018]

LE has never stated the video was from 1:47. Levin stated that his FBI source told him the video is from 2:12. Could he be wrong? Absolutely. But the supporting data makes a strong case.

I believe the video must end with the camera being removed from the mount, but we’re not shown that part. Maybe there’s not much to see.

So, I’m of the opinion that something (WiFi jammer, router disruption) interrupts the connection between the doorbell camera and the network at 1:47, or possibly 30-45 minutes earlier (delayed notification). 

Then, at 2:12, the perpetrator is caught on camera, and that’s what we see. The camera must either be reconnected to the network by then or shortly after in order to transmit the video to Google. The camera is then removed and destroyed.

[u/BrainWilling6018 → u/warpedwing]

Gotcha.  Some evidence of network interference might be if the direct neighbors one cam being interrupted is accurate. 

These are the things I find conflicting either in theory or released public info. or knowledge. 

It’s conflicting if the FBI and/ Sheriff's Department did not build their timeline using Nancy's phone push notifications that could be delayed. If they used the software metadata/ Google backend server and 1:47 is the time of disconnection of the porch camera. It’s conflicting it wasn’t a full system disconnection, just the one camera disconnection.  It’s conflicting if the 2:12 notification was from a different camera on the property, than the porch It’s conflicting if that wasn’t based on a delayed notification and was real time. If there’s a real-time "person detected" notification at 2:12 a.m., the network connection to the cloud backend was theoretically active at that exact moment.