Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and WIRED, revealing in new detail how exactly Flock Safety’s cameras track the movements of both vehicles and people. The hackers say they are also publishing details on how they managed to obtain the software, in the hopes that other people may copy them.

The breach provides an unprecedented look inside a system that Flock has described as protected by on-device encryption. The hackers were able to copy the camera’s storage and recover an encryption key stored on the device, which unlocked videos of thousands of vehicle detections. The hackers shared the material with 404 Media and the transparency nonprofit Distributed Denial of Secrets, which shared the data with WIRED. 404 Media and WIRED then analyzed those files as part of a joint investigation.

While much of the automatic license plate reader’s most sensitive storage remained encrypted and inaccessible, the joint analysis of the recovered data shows that software running on the device explicitly detects people as well as vehicles, license plates, and bicycles. The camera can produce dozens of images of a single passing vehicle and, according to several weeks of recovered logs, generated more than a million images. Its computer-vision software also sometimes isolated bumper stickers and other graphics, including, in one case, an American flag patch on a motorcyclist’s saddlebag.

  • downvote_hunter@midwest.social
    link
    fedilink
    English
    arrow-up
    2
    ·
    56 minutes ago

    Maybe I’m out of the loop but storing an encryption key on the encrypted device itself seems like bad opsec. Or I’ve misunderstood the article

  • Handles@leminal.space
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 hour ago

    If you run up against Wired’s paywall, there is a link in the first, readable paragraph to 404 Media’s openly available article, based on a joint analysis of the hacked Flock material.