Another strategy that's often used is to cause motion then detect the resulting transmission spike. That's also defeatable of course (cache+burst, CBR, etc).

The ideal detector should incorporate multiple methods. Someone should make a site that rates these for each detection method then adds them into an overall score.