Hackers Expose Inner Workings of Flock Surveillance Cameras
Unprecedented breach reveals how Flock's cameras track vehicles and people nationwide.
1Unprecedented camera system breach
Hackers successfully dismantled a Flock Safety camera mounted above a roadway, copied nearly all its internal data, and shared the files with media outlets. The breach provides the first detailed look at how Flock's surveillance system tracks both vehicles and people. The hackers also published their methods, hoping others might replicate their work. This incident challenges Flock's claims about device encryption and security protections.
2Encryption vulnerabilities exposed
Despite Flock's claims of on-device encryption, hackers recovered an encryption key stored directly on the camera. This key unlocked thousands of vehicle detection videos. The breach revealed that while some sensitive data remained encrypted, significant portions of the camera's storage were accessible. The hackers shared their findings with 404 Media and transparency group Distributed Denial of Secrets, who then collaborated with WIRED on analysis.
3Extensive data collection revealed
Analysis of the stolen data shows Flock cameras capture dozens of images per passing vehicle, generating over a million images in several weeks. The system detects not just license plates but also people, bicycles, and even bumper stickers. In one instance, the camera isolated an American flag patch on a motorcyclist's saddlebag. The camera's computer vision software maintains detailed logs of all detections with confidence scores.
4National surveillance network concerns
Flock's system allows local agencies to share camera data nationally, with over 2,000 agencies accessing feeds in some cases. This includes police departments, colleges, airports, and even federal offices. The national network has sparked controversy, particularly after revelations that local police performed lookups for immigration authorities and searched for individuals who self-administered abortions, bypassing local restrictions.
5Technical implementation details
The camera runs about 20 custom Flock apps on hardware similar to midrange smartphones. When detecting motion, it takes rapid photo sequences (28+ images per vehicle). Different exposures capture both license plates and wider scenes. Images are cropped and sent via cellular network to Flock servers for plate reading and vehicle identification. The camera itself doesn't process this data, only collects it.
6People detection capabilities
While Flock emphasizes vehicle tracking, the camera software explicitly detects people, recording their position and detection confidence. Tests using extracted models detected people in motorcycle footage, though few pedestrians appeared due to the camera's roadway positioning. The system doesn't perform facial recognition beyond default Android capabilities, which weren't actively used.
7Storage and reliability issues
Recovered logs show the camera frequently struggled with storage space, recording over 27,000 'no space left' errors. The device also logged tens of thousands of crashes and reboots. Quirky system messages like 'Who's a good boy?!' appeared every two minutes as heartbeat checks. These technical issues suggest potential reliability concerns in field deployments.
8Growing resistance to surveillance
Beyond hacking, some communities are abandoning Flock cameras entirely. Others have created fake camera housings to deter vandals. Former officer Noel Pichardo warns that sabotage may backfire, reinforcing authorities' belief in surveillance necessity. Meanwhile, hackers argue they're exposing secrets of those spying on communities, framing their actions as hardware liberation.
9Security and policy implications
The breach reveals significant gaps between Flock's security claims and reality. While the company maintains a vulnerability disclosure program, hackers bypassed it to publicly expose weaknesses. Flock calls camera tampering illegal but hasn't fully addressed the encryption key storage issue. This incident fuels ongoing debates about surveillance technology's role in society and the adequacy of its safeguards.