Top
Best
New

Posted by chaps 16 hours ago

Flock Exposed Its AI-Powered Cameras to the Internet. We Tracked Ourselves(www.404media.co)
Archive Link: https://archive.ph/IWMKe

Also: https://www.youtube.com/watch?v=vU1-uiUlHTo – This Flock Camera Leak is like Netflix For Stalkers

533 points | 394 commentspage 2
mmaunder 13 hours ago|
Really valuable research. A benefit to public safety, and drawing attention to a sloppy vendor in the security space, claiming to secure the public, but instead putting the public at risk. However I'm deeply concerned for the researcher and all involved because this may be a criminal violation under the CFAA - accessing these systems without authorization, even if they don't have authentication.
argomo 6 hours ago|
They should have gone all in and published the travel history of elite politicians, CEOs, and celebrities. That'd get a lot more media attention and potential for consequential legislation.
eightysixfour 15 hours ago||
I don't want these cameras to exist but, if they're going to, might we be better off if they are openly accessible? At the very least, that would make the power they grant more diffuse and people would be more cognizant of their existence and capabilities.
lubujackson 13 hours ago||
Did you see the other post about this where the guys showed a Flock camera pointed at a playground, so any pedo can see when kids are there and not attended?

Or how it has become increasingly trivial to identify by face or license plate such that combining tools reaches "movie Interpol" levels, without any warrant or security credentials?

If Big Brother surveillance is unavoidable I don't think "everyone has access" is the solution. The best defense is actually the glut of data and the fact nobody is actively watching you picking your nose in the elevator. If everyone can utilize any camera and its history for any reason then expect fractal chaos and internet shaming.

autoexec 7 hours ago|||
> Did you see the other post about this where the guys showed a Flock camera pointed at a playground, so any pedo can see when kids are there and not attended?

If it's inappropriate for any pedo to see when kids are in a park then certainly it should inappropriate when those pedos just happen to be police officers or Flock employees. The nice thing about the "everyone has access" case is that it forces the public to decide what they think is acceptable instead of making it some abstract thing that their brains aren't able to process correctly.

People will happily stand under mounted surveillance cameras all day long, but the moment they actually see someone point a camera at them they consider that a hostile action. The surveillance camera is an abstract concept they don't understand. The stranger pointing a camera in their direction is something they do understand and it makes their true feelings on strangers recording them very clear.

We might need a little bit of "everyone has access" to convince people of the truth that "no one should have access" instead.

eightysixfour 12 hours ago||||
> so any pedo can see when kids are there and not attended?

Sure. It also lets parents watch. Or others see when parents are repeatedly leaving their kids unattended. Or lets you see some person that keeps showing up unattended and watching the kids.

> Or how it has become increasingly trivial to identify by face or license plate such that combining tools reaches "movie Interpol" levels, without any warrant or security credentials?

That already exists and it is run by private companies and sold to government agencies. That’s a huge power grab.

> The best defense is actually the glut of data and the fact nobody is actively watching you picking your nose in the elevator. If everyone can utilize any camera and its history for any reason then expect fractal chaos and internet shaming.

This argument holds whether it is public or not. It is worse if Flock or the government can do this asymmetrically than if anyone can do it IMO, they already have enough coercive tools.

rsync 12 hours ago||
"Or others see when parents are repeatedly leaving their kids unattended."

... which is the expected, default use-case for a playground ...

eightysixfour 10 hours ago||
I didn't want to get into an argument over whether kids should be unattended at playgrounds or not - I don't know where the other poster is front and it seems to be based on age, density, region, etc. Where I grew up it would be weird to stay, in the city I am in it would be weird to leave them.

If you leave your kids unattended at a playground I don't see how the camera changes the risk factor in any meaningful way. Either a pedophile can expect there to be unattended children or not.

braingravy 9 hours ago||
It’s anonymity of the viewers combined with mass open-access surveillance that enables an unheard of level of stalking capacity.

Most people don’t like the idea that strangers could easily stalk their child remotely.

It’s the easy of access to surveillance technology that is different. Has nothing to do with the park being safe or not.

Try to think like an evil person with no life and very specific and demonic aims if you’re still having trouble seeing why this would be an issue.

eightysixfour 9 hours ago||
> Try to think like an evil person with no life and very specific and demonic aims if you’re still having trouble seeing why this would be an issue.

That person already has incredible power to stalk and ruin someone's life. Making Flock cameras public would change almost nothing for that person. It fascinates me how fast people jump to "imagine the worst person" when we talk about making data public.

We have the worst people, they're the ones who profit off of it being private, with no public accountability, who don't build secure systems. The theater of privacy is, IMO, worse than not having privacy.

tptacek 9 hours ago|||
There are sites that index thousands of public live streaming cameras, with search fields where you can just enter "park" and get live cams with kids playing, because people have specifically arranged for those cameras to exist.
enahs-sf 8 hours ago|||
I wonder if such a business model could exist where they were effectively "public" and thus, access was uniformly granted to anyone willing to pay. not sure if this would be net better for society, but an interesting thought.
JKCalhoun 12 hours ago|||
I've thought the same regarding license plate readers (and saw considerable pushback on HN) — feeling like you suggest: if they have the technology anyway, why not open it up?

I imagined a "white list" though (or whatever the new term is—"permitted list"?) so that only certain license plates are posted/tracked.

overfeed 11 hours ago|||
> I don't want these cameras to exist but, if they're going to, might we be better off if they are openly accessible?

Cities will remove Flock cameras at the first council meeting that sits after council-members learn their families can be stalked.

eightysixfour 10 hours ago||
Seems like a positive side effect. The Seattle area is delaying it after the open records request case.
hrimfaxi 15 hours ago|||
Is it more symmetrical? I know in theory we all can continuously download and datamine these video feeds but can everyone really?
eightysixfour 15 hours ago||
No, but the same argument could be made for things like open source software. We assume/hope that someone more aligned with our outcomes is actively looking.

Or, at the very least, that we can go back and look later.

hrimfaxi 15 hours ago||
I don't think they are similar. Public feeds would enable someone to document and sell people's whereabouts in real time. The fact that I could do the same or go back and look later is no defense.
eightysixfour 14 hours ago||
This is a different argument than what I was responding to.

> I know in theory we all can continuously download and datamine these video feeds but can everyone really?

To which my response is "this is like OSS." What I mean by that is that, in theory, people audit and review code submitted to OSS software, in reality most people trust that there are other people who do it.

> Public feeds would enable someone to document and sell people's whereabouts in real time. The fact that I could do the same or go back and look later is no defense.

This is a different argument to me and one that I'm still torn about. I think that if the feeds exist and the government and private entities have access to them, the trade-offs may be better if everyone has access to them. In my mind this results in a few things:

1. Diffusion of power - You said public feeds would "enable someone to document and sell people's whereabouts in real time." Well, private feeds allow this too. I'd rather have everyone know about some misdeed than Flock or the local PD blackmail someone with it.

2. Second guessing deployment - I think if the people making the decisions know that the data will be publicly available, they're more likely to second guess deploying it in the first place.

3. Awareness - if you can just open an app on your phone and look at the feed from a camera then you become aware of the amount of surveillance you are subject to. I think being aware of it is better than not.

There's trade-offs to this. The cameras become less effective if everyone knows where they are. It doesn't help with the location selection bias - if they're only installed in areas of town where decision makers don't live and don't go, the power is asymmetric again. Plenty of other reasons it is bad. None of them worse than the original sin of installing them in the first place.

xyzzy123 12 hours ago||
Open cameras make information that was previously local and difficult to collect global and easier to collect. Relatively, it reduces the privacy and power of people on the ground in your neighbourhood and increases the power of more distant actors. It doesn't seem very socially desirable as an outcome. It also increases the relative power of people with technical capacity and capital for storage and processing etc.

I do buy your argument that open access could help check the worst abuses. But, if widespread, it'd be so catastrophic for national security that I can't see how it would ever fly.

eightysixfour 10 hours ago||
I think the theater of closed versions have the same problems, we just don’t acknowledge them as well.

If I were an enemy nation state, flock would definitely be a target.

kgwxd 13 hours ago||
They don't grant power, they enhance it. Not helpful for those without don't have any actual power.
crumpled 11 hours ago||
Yes. This looks bad for Flock security.

Good thing nobody tried to pop a shell on the camera OS and move laterally through the network. That would be bad.

I'm sure it's all very secure though.

dvtkrlbs 16 hours ago||
I just watched the Benn Jordan's video on this. Even if this is just configuration error on some of their cameras this is terrifying and I think they should be held accountable for this and their previous myriad of CVEs.
chaps 16 hours ago||
Here's the video for interested folk:

https://www.youtube.com/watch?v=vU1-uiUlHTo

tencentshill 16 hours ago||
It's amazing that any vendor, let alone a CJIS vendor even allows unsecured deployments of their software in 2025.
kirykl 14 hours ago||
If the cameras are recoding public areas, isn’t it better the recorded footage stays public
eightysixfour 14 hours ago||
I think so, but it is a loosely held opinion at this point. Fundamentally, I think it is a huge, asymmetric power grab by Flock and local police to install these systems. It only takes one officer looking up their local politician and finding them doing something that could even look like a bad deed (or to fake it in the era of AI videogen...) to enable blackmail and personal/professional gain.

If they're going to exist, it may be better for that to be spread among the public than to be left in the hands of the few.

butlike 14 hours ago|||
They shouldn't be recording at all is the point.
SamInTheShell 9 hours ago|||
This is pretty naive. What happens when you develop and extend such a system in a way that it can track who you interact with? What about social credit scores? You might go out to a social event with a very distinguished social credit score of 820 and get knocked down to 69 just because you were in proximity to Bob and Alice, who happen to be on some blacklists for their work in cryptography.

What you're staring at is the gateway tech that brings in a dystopian society. At first stuff like this is fairly benign, but slowly over time it ramps up into truly awful outcomes.

esseph 14 hours ago||
Would you want your partner or child stalked, raped, and murdered?

You don't even need to drop an air tag now, you can use the license plate reader to track them everywhere they go. There is no hiding.

adamthegoalie 13 hours ago||
At first I thought you were defending flock. Seems clear the cameras make it harder to commit crimes and easier to go after the offenders, despite all the side effects most people are upset about here.
rainonmoon 13 hours ago|||
How does a camera make it harder to commit a crime? If I bash your skull in on camera, did the camera make that more difficult? Would your family be less aggrieved?
esseph 13 hours ago|||
It makes it easy for a random person to track anyone, regardless of which states they go to.

It also makes it easy to say, track a person's movements to an abortion clinic if your state would like to prosecute that (this is happening).

performative 9 hours ago||
benn jordan has been on an absolute tear recently. one of my favorite people nowadays
mvkel 7 hours ago||
the main summary of 1984: "neighbors are encouraged, via telesecreens, to spy on one another to enforce conformity."

There thing to fear isn't some higher state; it's each other. We happily will surveil each other under the auspices of safety.

Hell, these days, our kids grow up with cameras pointing at them in their own rooms. What did we expect?

Until we are willing to accept more "risk" in exchange for more privacy, this will only get worse. (It's why I believe most tech/services that tout privacy are DoA, because nobody actually cares)

rsync 11 hours ago||
There's an interesting idea here that is tangentially related to "common carrier" regulations ...

Specifically:

If a flock (or similar) camera is deployed on public land/infra there should exist default permission for any alternate vendor to deploy a camera in the same location.

I wonder how that could be used and/or abused and, further, what the response from a company like flock would be ...

chaps 11 hours ago|
Not directly an answer to your question, but installed Shotspotter locations are generally "not shared with police" and installations are done in a way where the location is obfuscated away from the police/city through Shotspotter contractors. It's not actually true that the device locations aren't shared with the police, but shotspotter/police testimonies in shotspotter cases say so anyway.
FireBeyond 8 hours ago||
I have absolutely zero faith in any of this.

Multiple cases have revealed that it seemed like police and Shotspotter worked hand-in-glove to tweak Shotspotter data and demographics to help shore up a case and make things appear more reliable than they were.

And multiple cases where, sufficiently pushed, DAs have dropped cases or dropped Shotspotter as evidence rather than have the narrative challenged too closely.

bpiche 14 hours ago||
Kirlian Selections rocks
guiltygatorade 13 hours ago|
Wild to see the Flashbulb on top of HN
everdrive 14 hours ago|
It's getting pretty crazy out there. What's your recourse for this? Avoid most populated areas?
kelnos 12 hours ago||
Work with your municipality to pass laws banning cameras like this. I'm sure it isn't easy (and I'm not sure I have the stomach for working through that process in my city), but people have done it in some places.
murderingmurloc 14 hours ago|||
I live in a town of 6,000 and we have 5 Flock cameras
potato3732842 14 hours ago|||
It's a quality of people problem not a quantity of people problem.
JKCalhoun 12 hours ago|||
deflock.me has a map. (I recently contributed a few flock cameras I spotted.)

I notice they generally watch busy roads and intersections, off and on ramps to highways, retail malls…

Smaller roads through neighborhoods were mostly unmolested.

potzemizer 13 hours ago||
I mean. There are solutions...

https://www.bbc.com/news/world-europe-46822472

More comments...