Top
Best
New

Posted by chaps 12/22/2025

Flock Exposed Its AI-Powered Cameras to the Internet. We Tracked Ourselves(www.404media.co)
Archive Link: https://archive.ph/IWMKe

Also: https://www.youtube.com/watch?v=vU1-uiUlHTo – This Flock Camera Leak is like Netflix For Stalkers

827 points | 471 commentspage 2
eightysixfour 12/22/2025|
I don't want these cameras to exist but, if they're going to, might we be better off if they are openly accessible? At the very least, that would make the power they grant more diffuse and people would be more cognizant of their existence and capabilities.
lubujackson 12/22/2025||
Did you see the other post about this where the guys showed a Flock camera pointed at a playground, so any pedo can see when kids are there and not attended?

Or how it has become increasingly trivial to identify by face or license plate such that combining tools reaches "movie Interpol" levels, without any warrant or security credentials?

If Big Brother surveillance is unavoidable I don't think "everyone has access" is the solution. The best defense is actually the glut of data and the fact nobody is actively watching you picking your nose in the elevator. If everyone can utilize any camera and its history for any reason then expect fractal chaos and internet shaming.

autoexec 12/23/2025|||
> Did you see the other post about this where the guys showed a Flock camera pointed at a playground, so any pedo can see when kids are there and not attended?

If it's inappropriate for any pedo to see when kids are in a park then certainly it should inappropriate when those pedos just happen to be police officers or Flock employees. The nice thing about the "everyone has access" case is that it forces the public to decide what they think is acceptable instead of making it some abstract thing that their brains aren't able to process correctly.

People will happily stand under mounted surveillance cameras all day long, but the moment they actually see someone point a camera at them they consider that a hostile action. The surveillance camera is an abstract concept they don't understand. The stranger pointing a camera in their direction is something they do understand and it makes their true feelings on strangers recording them very clear.

We might need a little bit of "everyone has access" to convince people of the truth that "no one should have access" instead.

eightysixfour 12/22/2025||||
> so any pedo can see when kids are there and not attended?

Sure. It also lets parents watch. Or others see when parents are repeatedly leaving their kids unattended. Or lets you see some person that keeps showing up unattended and watching the kids.

> Or how it has become increasingly trivial to identify by face or license plate such that combining tools reaches "movie Interpol" levels, without any warrant or security credentials?

That already exists and it is run by private companies and sold to government agencies. That’s a huge power grab.

> The best defense is actually the glut of data and the fact nobody is actively watching you picking your nose in the elevator. If everyone can utilize any camera and its history for any reason then expect fractal chaos and internet shaming.

This argument holds whether it is public or not. It is worse if Flock or the government can do this asymmetrically than if anyone can do it IMO, they already have enough coercive tools.

rsync 12/22/2025||
"Or others see when parents are repeatedly leaving their kids unattended."

... which is the expected, default use-case for a playground ...

eightysixfour 12/22/2025||
I didn't want to get into an argument over whether kids should be unattended at playgrounds or not - I don't know where the other poster is front and it seems to be based on age, density, region, etc. Where I grew up it would be weird to stay, in the city I am in it would be weird to leave them.

If you leave your kids unattended at a playground I don't see how the camera changes the risk factor in any meaningful way. Either a pedophile can expect there to be unattended children or not.

braingravy 12/22/2025|||
It’s anonymity of the viewers combined with mass open-access surveillance that enables an unheard of level of stalking capacity.

Most people don’t like the idea that strangers could easily stalk their child remotely.

It’s the easy of access to surveillance technology that is different. Has nothing to do with the park being safe or not.

Try to think like an evil person with no life and very specific and demonic aims if you’re still having trouble seeing why this would be an issue.

eightysixfour 12/22/2025||
> Try to think like an evil person with no life and very specific and demonic aims if you’re still having trouble seeing why this would be an issue.

That person already has incredible power to stalk and ruin someone's life. Making Flock cameras public would change almost nothing for that person. It fascinates me how fast people jump to "imagine the worst person" when we talk about making data public.

We have the worst people, they're the ones who profit off of it being private, with no public accountability, who don't build secure systems. The theater of privacy is, IMO, worse than not having privacy.

braingravy 12/23/2025||
“almost nothing” is doing a lot of heavy lifting in that sentence.

Stalking someone from your desk vs. IRL is a whole different ball game. Not sure why this needs explanation… anyways, the main difference is how easy it do things from your desk. For example, no one see you when you’re stalking someone from your desk. Think of the success of 4chan investigations vs. those in authority to actually do so. It’s empowering.

We live in a world of strangers, and unfortunately a % of those are the type to kill/rape other strangers. Why enable them?

Not sure who else would be empowered by making all public camera accessible at the click of a button, but I’m interested in who you think that population is.

Certainly we can agree most normal folks will not spend their time looking camera feeds of strangers?

I’m fascinated by people who stick to their theoretical principles (‘all data should be public’, etc.) no matter the real world implications, but we all have our own interests :).

bakies 12/23/2025|||
once i learned to ride a bike i took myself to the playground
tptacek 12/22/2025||||
There are sites that index thousands of public live streaming cameras, with search fields where you can just enter "park" and get live cams with kids playing, because people have specifically arranged for those cameras to exist.
handoflixue 12/24/2025|||
If you're that worried about child molesters knowing where the kids are, I've got very bad news for you: https://www.statista.com/statistics/254893/child-abuse-in-th...

Turns out, 95% of the predators already know exactly where the victims are, usually because it's their kid. Probably we want to worry about that a lot more.

Doubly so since, y'know, this only works if the predator lives close enough to act on the information before it changes - so the tiny possibility of a predator, a tiny possibility that they didn't already know this, and a tiny possibility of being able to act on the information...

kgwxd 12/22/2025|||
They don't grant power, they enhance it. Not helpful for those without don't have any actual power.
JKCalhoun 12/22/2025|||
I've thought the same regarding license plate readers (and saw considerable pushback on HN) — feeling like you suggest: if they have the technology anyway, why not open it up?

I imagined a "white list" though (or whatever the new term is—"permitted list"?) so that only certain license plates are posted/tracked.

enahs-sf 12/23/2025|||
I wonder if such a business model could exist where they were effectively "public" and thus, access was uniformly granted to anyone willing to pay. not sure if this would be net better for society, but an interesting thought.
hrimfaxi 12/22/2025|||
Is it more symmetrical? I know in theory we all can continuously download and datamine these video feeds but can everyone really?
eightysixfour 12/22/2025||
No, but the same argument could be made for things like open source software. We assume/hope that someone more aligned with our outcomes is actively looking.

Or, at the very least, that we can go back and look later.

hrimfaxi 12/22/2025||
I don't think they are similar. Public feeds would enable someone to document and sell people's whereabouts in real time. The fact that I could do the same or go back and look later is no defense.
eightysixfour 12/22/2025||
This is a different argument than what I was responding to.

> I know in theory we all can continuously download and datamine these video feeds but can everyone really?

To which my response is "this is like OSS." What I mean by that is that, in theory, people audit and review code submitted to OSS software, in reality most people trust that there are other people who do it.

> Public feeds would enable someone to document and sell people's whereabouts in real time. The fact that I could do the same or go back and look later is no defense.

This is a different argument to me and one that I'm still torn about. I think that if the feeds exist and the government and private entities have access to them, the trade-offs may be better if everyone has access to them. In my mind this results in a few things:

1. Diffusion of power - You said public feeds would "enable someone to document and sell people's whereabouts in real time." Well, private feeds allow this too. I'd rather have everyone know about some misdeed than Flock or the local PD blackmail someone with it.

2. Second guessing deployment - I think if the people making the decisions know that the data will be publicly available, they're more likely to second guess deploying it in the first place.

3. Awareness - if you can just open an app on your phone and look at the feed from a camera then you become aware of the amount of surveillance you are subject to. I think being aware of it is better than not.

There's trade-offs to this. The cameras become less effective if everyone knows where they are. It doesn't help with the location selection bias - if they're only installed in areas of town where decision makers don't live and don't go, the power is asymmetric again. Plenty of other reasons it is bad. None of them worse than the original sin of installing them in the first place.

xyzzy123 12/22/2025||
Open cameras make information that was previously local and difficult to collect global and easier to collect. Relatively, it reduces the privacy and power of people on the ground in your neighbourhood and increases the power of more distant actors. It doesn't seem very socially desirable as an outcome. It also increases the relative power of people with technical capacity and capital for storage and processing etc.

I do buy your argument that open access could help check the worst abuses. But, if widespread, it'd be so catastrophic for national security that I can't see how it would ever fly.

eightysixfour 12/22/2025||
I think the theater of closed versions have the same problems, we just don’t acknowledge them as well.

If I were an enemy nation state, flock would definitely be a target.

overfeed 12/22/2025||
> I don't want these cameras to exist but, if they're going to, might we be better off if they are openly accessible?

Cities will remove Flock cameras at the first council meeting that sits after council-members learn their families can be stalked.

eightysixfour 12/22/2025||
Seems like a positive side effect. The Seattle area is delaying it after the open records request case.
catoc 12/23/2025||
What I don’t understand is how you can work at a company like Flock and look yourself in the mirror. Seriously. You must be aware of the inherent evil, of the privacy invasive nature of your product, of how it’s being actively abused. How do you rationalize this for yourself?
Klaster_1 12/23/2025||
There's this book Eichmann in Jerusalem: A Report on the Banality of Evil by Hannah Arendt that explores the topic.
throwaway_7274 12/23/2025||
An old friend of mine went to work at a similar company, seemingly with no qualms. He praised how “nice” the ceo was. It was a sad and eye-opening experience of losing respect for someone.

The thing is, a lot of ordinary people in tech are naive, gullible, more intelligent than wise, easily flattered, limited to first-order thinking socially-speaking, and obsessed with rules and systems. Then there’s another stratum of actors on top who are all of the above, and sociopathic to boot.

I don’t know, I think it’s just the way it is. I’ve become very disillusioned with the ability of ‘tech people’ as a class to work for good.

crumpled 12/22/2025||
Yes. This looks bad for Flock security.

Good thing nobody tried to pop a shell on the camera OS and move laterally through the network. That would be bad.

I'm sure it's all very secure though.

kjkjadksj 12/23/2025||
Flock cameras would be so easy to disable by motivated people. Dress in nondescript clothing, mask, sunglasses, and just spraypaint over the lenses. This is completely asymmetric warfare because it is trivial how long it would take for you to do this. You could hit dozens of cameras across an area overnight. Meanwhile, flock or the city, whoever maintains this stuff, needs to identify the vandalized cameras, flag them for repair, pay a technician to go out and presumably repair the unit outright. You pay cents and they are paying potentially thousands in labor and hardware costs.

And this would absolutely work at scale too. Streetlights are already being vandalized for their copper and most cities cannot afford to hire more technicians to even keep up with streetlight repair. I believe I’ve seen the backlog for streetlight repair in LA is over 10x what the current street services crew is capable of repairing in a year of constant work and growing by the day.

Municipalities and these technology companies cannot keep up against a motivated crew and can’t afford to scale either. Totally asymmetric.

mothballed 12/23/2025|
The initial disabling might be asymmetric but when/if you're caught you go to jail for years for something that cost the state maybe an hour tops to fix.

Therefore if only say one of a thousand gets caught, it still costs the people doing it more than the state on average (unless their life/time is worth basically nothing for years on end).

kjkjadksj 12/23/2025||
They are making literal zero progress catching copper theft so I doubt flock would be any better. Yeah it takes them hours to fix but they still need to send out a technician and pay for a technician. Maybe you can do this well out of the pov of the camera with a paintball gun.
mothballed 12/23/2025||
Zero progress catching copper theft from private persons; because they do not care. They get basically nothing for solving that. If you robbed a cop or the mayor they'd have you found out within a week. Whether they care about vandalizing a camera depends very much on whether the whole thing is a graft or they have something else they want out of the camera.

If the goal is just to enrich their contractors, they might even be happy they're getting vandalized.

dvtkrlbs 12/22/2025||
I just watched the Benn Jordan's video on this. Even if this is just configuration error on some of their cameras this is terrifying and I think they should be held accountable for this and their previous myriad of CVEs.
chaps 12/22/2025||
Here's the video for interested folk:

https://www.youtube.com/watch?v=vU1-uiUlHTo

tencentshill 12/22/2025||
It's amazing that any vendor, let alone a CJIS vendor even allows unsecured deployments of their software in 2025.
kirykl 12/22/2025||
If the cameras are recoding public areas, isn’t it better the recorded footage stays public
eightysixfour 12/22/2025||
I think so, but it is a loosely held opinion at this point. Fundamentally, I think it is a huge, asymmetric power grab by Flock and local police to install these systems. It only takes one officer looking up their local politician and finding them doing something that could even look like a bad deed (or to fake it in the era of AI videogen...) to enable blackmail and personal/professional gain.

If they're going to exist, it may be better for that to be spread among the public than to be left in the hands of the few.

butlike 12/22/2025|||
They shouldn't be recording at all is the point.
esseph 12/22/2025|||
Would you want your partner or child stalked, raped, and murdered?

You don't even need to drop an air tag now, you can use the license plate reader to track them everywhere they go. There is no hiding.

adamthegoalie 12/22/2025||
At first I thought you were defending flock. Seems clear the cameras make it harder to commit crimes and easier to go after the offenders, despite all the side effects most people are upset about here.
rainonmoon 12/22/2025|||
How does a camera make it harder to commit a crime? If I bash your skull in on camera, did the camera make that more difficult? Would your family be less aggrieved?
esseph 12/22/2025|||
It makes it easy for a random person to track anyone, regardless of which states they go to.

It also makes it easy to say, track a person's movements to an abortion clinic if your state would like to prosecute that (this is happening).

SamInTheShell 12/22/2025||
This is pretty naive. What happens when you develop and extend such a system in a way that it can track who you interact with? What about social credit scores? You might go out to a social event with a very distinguished social credit score of 820 and get knocked down to 69 just because you were in proximity to Bob and Alice, who happen to be on some blacklists for their work in cryptography.

What you're staring at is the gateway tech that brings in a dystopian society. At first stuff like this is fairly benign, but slowly over time it ramps up into truly awful outcomes.

grugagag 12/23/2025|||
I think the goal is to do just that. China has it, the west wants it too
_DeadFred_ 12/23/2025|||
I mean public venues in the US use this stuff to kick out people that they don't like, or that work for firms that have been involved in lawsuits. That is no different than the start of a social credit score and it's happening already.
tptacek 12/22/2025||
I would love to watch a shorter version of this video that just discussed the deltas between the status quo and Flock, rather than breathlessly reporting the implications of cameras as if they were distinctive to Flock. He'll spend 30 seconds talking about how you can see every activity and every person on the camera --- yeah, that's how cameras work. There are thousands of public IP cameras on the Internet, aimed at intersections, public streets, houses, playgrounds, schools; most of them operated that way deliberately.

There are Flock-specific bad things happening here, but you have to dig through the video to get to them, and they're not intuitive. The new Flock "Condor" cameras are apparently auto-PTZ, meaning that when they detect motion, they zoom in on it. That's new! I want to hear more about that, and less about "I had tears in my eyes watching this camera footage of a children's playground", which is something you could have done last week or last year or last decade, or about a mental health police wellness detention somewhere where all the cops were already wearing FOIA-able body cams.

If open Flock cameras gave you the Flock search bar, that would be the end of the world. And the possibility that could happen is a good reason to push back on Flock. But that's not what happened here.

fuzzylightbulb 12/22/2025||
Have you ever gone fishing? Did you catch all the fish?

Often it is more impactful to address one major/tangible player in a particular space than it would be to "boil the ocean" and ensure that we are capturing every possible player/transgressor. I agree that some of the video was overly breathless, but if that's what wakes people up to the dangers of unsecured cameras/devices then so be it.

tptacek 12/22/2025|||
Ok, you're the second person to say that, and I think my point is not clear enough. That's on me.

This response would make sense if I was saying "why focus on Flock, there are so many other ALPR cameras out there" (also true, but not relevant to my point).

But this is a video that is mostly about things that are true of all IP cameras, of the kind that we've had staring out onto public streets for decades, plural decades. People celebrated those cameras, thought they were super neat, built sites indexing them. All of them do most of the same things this video says those Flock cameras did, the tiny minority of Flock cameras you can access publicly.

hackable_sand 12/23/2025|||
Many hands make light work
jkestner 12/22/2025|||
In my experience, people respond much more strongly to naming a specific company or person. Clearer plan of action than a resigned “This tech is old news.”
tptacek 12/22/2025|||
Is the plan of action "eliminate all public IP cameras"? That's coherent, I'd get it, but that doesn't seem to be what he's saying at all. He used a Google search to find exposed Flock admin consoles (interesting! say more about that!) but he could just as easily have just searched "open IP cameras"; there's sites that do nothing but index those.
akerl_ 12/22/2025|||
If your takeaway from that comment is that ‘tptacek thinks Flock’s tech is old news and he’s resigned about it, I think you’re going to be in for a treat.
KurSix 12/23/2025|||
But isn't that "auto-PTZ" exactly what changes the game here? Sure, there are plenty of open cameras, but usually, that's just a passive stream you have to stare at for hours to spot anything interesting. Here, we have a situation where technology has effectively removed the "friction" from the surveillance process. You don't need to monitor the screen for hours - the algorithm itself grabs the person, zooms in on the face, and tracks them. It’s like the difference between searching for a needle in a haystack by hand and having a powerful magnet. Because of the Flock leak, this magnet is now available to anyone with a link, and that is what's truly terrifying, not just the mere fact of filming a playground
dang 12/22/2025|||
(This was originally posted to https://news.ycombinator.com/item?id=46356182 but we've since merged the threads.

The video in question is linked from the toptext above.)

phyzome 12/22/2025|||
He's pretty open in this video about how Flock is far from alone in this space, and he's just using them as an example because they're so popular and flagrantly abusive.
tptacek 12/22/2025||
In what way this is an illustration of Flock's "flagrancy"? I'm seriously asking. I'm not a Flock supporter. My point is that cameras just as sensitive as the ones he shows here are deliberately public on the Internet.
phyzome 12/22/2025|||
His other two (much longer) videos go into those details. This one is more of a quick update.

Just to give you a sense of the kind of company we're dealing with, the CEO of Flock called the guy who made a Flock camera map an "antifa terrorist". He's unhinged.

tptacek 12/22/2025||
Thanks! I know it's a big ask, but can you give me pointers (rough timestamps, whatever). A friend told me to watch this video for the distinctive Flock badness, and the time I spent on that was not rewarded.
phyzome 12/23/2025||
Sure, around 33:00 here: https://www.youtube.com/watch?v=uB0gr7Fh6lY

The other video is https://www.youtube.com/watch?v=Pp9MwZkHiMQ but I don't recall which one goes more into it.

It's also possible I'm just remembering Flock-specific stuff from other sources, and the things he shows in these videos are more general issues with security camera companies (using Flock as the example).

It would be great if this stuff was (also?) published as blog posts so that it could be easily skimmed...

tptacek 12/23/2025||
Thanks! I looked, but that's a segment about someone at Flock accusing anti-Flock people of being "antifa" or terrorists. I'm about as anti-Flock as I think it's possible to be (having been instrumental in killing it my Chicagoland suburb) and I'm not not sure what to do with "someone at Flock said something dumb".

In case it helps: my thing here is, the video we were commenting on thread seems to be about all public cameras, not just AI-assisted smart cameras or even security cameras more broadly. That was my complaint.

It's not that I don't think there's a video to do about 60 open Flock admin consoles; I'm sure there is. I'm just not sure what the implications are, because that video spent all its time talking about stuff that is trivially true of all public cameras, many of which are indexed on Google already, not through Google-dork searches for open console but instead with searches like "open IP camera live streams".

(I was struck by this in part because I vividly remember when Russia invaded Ukraine flipping between dozens of different live camera streams in places like Mariupol; that's obviously not the US, but you can do very similar stuff in the US, and on a lot more than 60 random misconfigured Flock cameras).

I think there may be something to the PTZ on the new Flock cameras that makes this worse? I just think he should make a better, sharper video case against them.

Thank you for giving me a link!

phyzome 12/23/2025||
I mean, it's not just any person at Flock, it's the CEO.

But I hear what you're saying about public cameras.

ryandrake 12/22/2025|||
It's the attitude and marketing. Maybe not "flagrant" but "ambitious," "aggressive," and "expansive." I don't know the name of any other public surveillance/camera company, but I've heard about Flock, and the same is probably true of any of my neighbors who are even the least bit tech-following. They are also ambitiously funded for growth and expansion and their outward press attitude is congruent.

Other camera companies would like to see steady year-over-year growth in camera sales. Flock would like to see the world blanketed in 24/7 surveillance.

They make themselves a lightning rod as a business strategy.

tptacek 12/22/2025||
If Flock vanished off the Earth tomorrow I think we'd see exactly the same ALPR penetration. Municipalities aren't buying these things because Flock's so good at selling them; they're buying because the ALPR vendors have an extremely compelling pitch! Two of our neighboring municipalities have non-Flock ALPRs; I think you're going to see a lot of non-Flock ALPR penetration in progressive-leaning suburbs, for instance, because progressives are all het up about Flock.

(I helped get Flock cancelled in Oak Park, where I live, and before that led the passage of what I believe to be the most restrictive ALPR regs/ordinance package in the country. I'm not an ALPR booster.)

But I'm going to keep saying: my thing about this video is that he's describing mostly things that are true of all public IP cameras. There are zillions of those!

ryandrake 12/22/2025||
I think everyone in this thread can agree that surveillance cameras should be fought against, no matter whose brand is stamped on them. Flock is still a better than average target because of the attitude they project and because of name recognition.
tptacek 12/22/2025||
Wait, I don't agree with that. Why do you assume everyone in this thread agrees with that?
ryandrake 12/22/2025||
Sorry, I assumed you did, given the advocacy you mentioned you led.
tptacek 12/22/2025||
I pushed back on our Flock deployment because the particulars of its deployment meant that we were curbing more cars driven by innocent Black drivers than we were responding to any meaningful crimes, and because when we had Flock's alerts enabled, the net effect was to take our selectively-recruited, highly-trained, very expensive police force and turn them into failure-to-appear-warrant debt collectors for nearby suburbs with far worse police departments.

It was not some nerd† principled stand against "surveillance". My experience working on the public policy of this stuff is that when you take a stand against "surveillance", normal people --- and I'm in what I believe to be one of the 10 most progressive municipalities in the country, the most progressive municipality in Chicagoland --- look at you like you're a space alien.

† I am, obviously, a nerd, fwiw.

fuckflock 12/22/2025||
[dead]
potato3732842 12/23/2025||
Systems like this that exist to facilitate dispatching government violence will never be "good" by whatever the standards of the time is because they don't need to be. They have "at-cost" access to nearly infinite government violence they can dispatch capriciously and an unequally good relationship with any system that would hold them accountable for any misuse of their stuff.
monkaiju 12/22/2025||
i guess that while it is alarming that these feeds were "unsecured" I'm just as concerned that they exist at all. Folks worry about it getting into the "wrong hands" but from my POV it was put up by the wrong hands.

While both are a problem I am far more concerned about the power this gives our, increasingly authoritarian, government than about individual stalkers/creeps.

bearjaws 12/23/2025|
You just know other nation states are all inside these camera systems and probably buried deep at this point.

Of course no liability will be faced by the company, and none for the police departments who violate our constitutional rights.

More comments...