This reporting was done in collaboration with 404media. Here's the discussion for 404's article: https://news.ycombinator.com/item?id=49726577 Distributed Denial of Secrets has published the partition images: https://ddosecrets.org/article/flock-alpr-camera
do the articles have significantly different information/coverage to warrant two submissions?
Hackers Got Inside a Flock Camera
31–40 of 268 posts
Re: Hackers Got Inside a Flock Camera
#32So… all that data is literally there for any unauthorized person to walk up and take it. It’s not even suitably encrypted on device? Zero trust in anything Flock says.
Is this an older model? I could see them turning off or using weak encryption on media if the hardware couldn't keep up with the amount of data they were writing.
Re: Hackers Got Inside a Flock Camera
#33I think I should start posting a reminder in Flock threads that Axon is a Flock competitor, is also engaged in mass surveillance, and is possibly even worse, but there’s rarely any mention of it. Journalists need to do some digging there. This shouldn’t just be a Flock story, or Flock will just get bought up or something and everyone will move on. (The above should not be read as supporting Flock or discouraging furt…
Fixed ALPRs aren't the only privacy problem, either. Many tow trucks have roving ALPRs that feed into big databases. The notion is that it helps them repossess cars that might be garaged at home. That data, however, is for sale to third parties.
Re: Hackers Got Inside a Flock Camera
#34Re: Hackers Got Inside a Flock Camera
#35Benefit of the doubt: Funding them for a community/city-owned traffic camera type thing seems like it would have been a much more reasonable proposition than funding Flock for their current use case of allowing police to stalk their ex girlfriends or mistresses.
Re: Hackers Got Inside a Flock Camera
#361. Take pictures
2. Send to a big server that all cops nationwide can log into whenever they want to stalk their exes
Did I miss something
Re: Hackers Got Inside a Flock Camera
#37I think I should start posting a reminder in Flock threads that Axon is a Flock competitor, is also engaged in mass surveillance, and is possibly even worse, but there’s rarely any mention of it. Journalists need to do some digging there. This shouldn’t just be a Flock story, or Flock will just get bought up or something and everyone will move on. (The above should not be read as supporting Flock or discouraging furt…
While highly unprofessional, the "Who's a good boy?!" status message makes me like them a tiny bit more
This log message probably indicates when they're resetting the watchdog timer.
Re: Hackers Got Inside a Flock Camera
#38This reporting was done in collaboration with 404media. Here's the discussion for 404's article: https://news.ycombinator.com/item?id=49726577 Distributed Denial of Secrets has published the partition images: https://ddosecrets.org/article/flock-alpr-camera
Re: Hackers Got Inside a Flock Camera
#39Has there been any report about which state this camera was recovered in? New Hampshire has a strict 3 minute rule for non-hit plate data before the captured images and records must be deleted [1].
[1] (N.H. Rev. Stat. § 261:75-b) requires ALPR systems to delete non-hit plate data within 3 minutes
Re: Hackers Got Inside a Flock Camera
#40Earlier quoted context omitted.
do the articles have significantly different information/coverage to warrant two submissions?
I can't read the Wired article because I'm only allowed three excerpts and 15 ads a day at Wired.com