Flock and Cyble Inc. weaponize “cybercrime” takedowns to silence critics

510 pointsposted 14 hours ago
by _a9

95 Comments

greyface-

12 hours ago

If Flock truly believed that the domain name infringes on their trademark, they would file an ICANN UDRP complaint instead of Cloudflare and Hetzner abuse reports.

But they don't, because the former would require them to perjure themselves, and the latter just requires them to lie to a hosting company.

CalChris

12 hours ago

I wonder if Flock + Cyble can be sued for fraud. There are 5 elements in a fraud:

  Misrepresentation of Fact
  Knowledge of Falsity
  Intent to Induce Reliance 
  Justifiable Reliance 
  Resulting Damages

themafia

10 hours ago

Cloudflare would have to bring that suit since they were the ones defrauded. The site owners probably can't sue Cloudflare because of their contract. So the site owners probably have to go basic "tortious interference" and be ready to show actual damages.

CalChris

9 hours ago

No, if the site owners have been harmed by Flock + Cyble knowingly filing a false takedown notice then they can sue Flock + Cyble. If Cloudflare's reputation has also been harmed then they could sue Flock + Cyble as well.

15155

an hour ago

Tortious interference with contract, cut and dry.

RobotToaster

4 hours ago

> Cloudflare would have to bring that suit

At first that seems pretty unlikely, but I could see them wanting to nip this in the bud so it doesn't become more common.

thayne

7 hours ago

The "resulting damages" is pretty small though, they just had to move off of cloudflare. I'm not sure it would be worth it, especially if the other side doesn't end up paying their legal costs.

miohtama

8 hours ago

You would need damages

pfdietz

4 hours ago

False accusation of criminal behavior is defamation and in many US states such accusations are assumed to be damaging. No evidence of damage is needed.

mycall

10 hours ago

Cloudfare and Hetzner should see this vulnerability of their own making and DO SOMETHING about it.

jeroenhd

7 hours ago

Knowingly filing false DMCA claims will also perjure them.

However, ICANN has a whole procedure they follow where complaints are fact-checked, whereas DMCA takedowns put an unreasonable burden on hosting providers that requires immediate action, and many hosting providers will take such action automatically to protect themselves.

I doubt they care about perjury. They care about results, and the DMCA gets them exactly that.

The phishing reports are interesting, providers aren't necessarily required to act as fast on those. Although, I suspect companies like Cloudflare who get used by countless phishers will probably also set up some kind of automated anti phishing system.

charcircuit

6 hours ago

>Knowingly filing false DMCA claims will also perjure them.

You are confusing false claims with filing DMCA requests on behalf of someone you don't have permission from.

>and under penalty of perjury, that the complaining party is authorized to act on behalf of the owner of an exclusive right that is allegedly infringed

A false DMCA request is misrepresentation.

moktonar

6 hours ago

Cloudflare is becoming the great firewall of America more and more every day

charcircuit

6 hours ago

>they would file an ICANN UDRP complaint

Those take on the order of months to go through. Even if they did so, you wouldn't notice until much later. Meanwhile cloudflare and hetzner are faster. If you want to reduce harm by taking down a site you can't just let it stay up for weeks while the ICANN process plays out.

softwaredoug

11 hours ago

My city just ended our pilot Flock program. I hope others do the same.

But I think the real issue with Flock will be private security. Random Home Depot parking lots, etc.

https://www.29news.com/2025/12/17/charlottesville-ends-flock...

rrix2

11 hours ago

The local credit union in Eugene had installed Flock cams at the entrances to all their branches. They took em down after only a few of our community members began protests out front a few branches and emailing with the CU's leadership before our city terminated our contract and removed the cams

overfeed

9 hours ago

> My city just ended our pilot Flock program. I hope others do the same.

If someone would like to engage in grassroots activism on this, may I suggest the perfect domain: getTheFlockOutOfMyCity.com

LostMyLogin

8 hours ago

My town in Colorado just did the same. Pretty happy with the result.

VladVladikoff

11 hours ago

> The site’s only input fields accept license plate numbers (which are hashed client-side before transmission and cannot be harvested)

License plates are trivially short, hashing them accomplishes no additional level of privacy if the hashes could be bruted in seconds on an antique GPU.

croes

7 hours ago

They have indexed publicly available data. The privacy was long gone before you even entered a license plate number. Or do you think other actors didn’t have the same data but without a frontend to show it to you?

VladVladikoff

36 minutes ago

Entering your licence plate into this site gives the operator your geodata/ip address tied back to your licence plate.

hibf

11 hours ago

Technically true. Flock could present an unfounded argument that I might be brute-forcing my own security and privacy measures.

I think it'd sound pretty dumb.

whatshisface

10 hours ago

If the security depends on the person it's supposed to be secure against not trying to break it...

TheDong

9 hours ago

Being able to say "Our server never sees user-input license plate numbers", even though from a technical perspective the hash is just as identifiable, does have value. Even though it offers no additional privacy, it does let non-technically-minded users and so on feel safer, and that's valuable.

rockskon

7 hours ago

That "value" here lets them mislead policymakers.

63stack

8 hours ago

The value is being able to mislead your users

mceachen

2 hours ago

VladVladikoff

30 minutes ago

Well aware of these, however that would not benefit in this case. Their main protection is against pre computed lookup tables. But since the operator needs to be able to lookup the license plate within their own database, then they would not be using either of these. If the operator really wanted to do this in a safe way for the user then the whole database should exist client side.

Kim_Bruning

11 hours ago

If these folks get in trouble, they might try hosting with Freedom.nl . It's +/- the old xs4all crew, and they might be in for some more fun in the 21st century.

manbart

9 hours ago

Flock is trying their best to usher in dystopia

cosmicgadget

12 hours ago

> With the new Divinity game in the works, I decided to do a run as Gale in BG3.

I don't support this decision but I respect it.

Curious what the Cloudflare HNers have to say about this debacle.

seanhunter

6 hours ago

Everyone knows that it all hinges on why they’re being Gale. If they’re doing it so they can romance Shadowheart then it’s permissable.

badgersnake

an hour ago

You can romance Shadowheart as Laezel if you want and they hate each other at the start of the game. Don’t need Gale for that. You can “win” in act 1 with Gale though.

hibf

11 hours ago

Can't be less than what support has had to say up until now.

CamperBob2

13 hours ago

This is a Y Combinator company? https://www.ycombinator.com/companies/flock-safety

dang/tomhow, does Y Combinator have a code of ethics that comes into play when one of your funding recipients does something unethical and/or illegal like this?

nerdsniper

8 hours ago

To some extent, YCombinator partners are on the record[0] supporting the idea of their startups doing illegal things. Generally they'll frame this as challenging outdated regulations, but they acknowledge that the founders whose strategies they fully support sometimes come into office hours and discuss how they're worried that the strategy puts them at risk of going to jail.

0: https://www.youtube.com/watch?v=Hm-ZIiwiN1o&t=8m46s

avaer

12 hours ago

One long-standing code is that they moderate YC companies less on HN, allowing criticisms like yours to stand: https://news.ycombinator.com/item?id=34320816

To HN's credit I haven't seen this rule violated.

For example I wouldn't have known it was a YC company if not for your comment.

TimorousBestie

10 hours ago

> One long-standing code is that they moderate YC companies less on HN, allowing criticisms like yours to stand:

Well, that’s what dang says he does. There’s no transparency and no publicly available data that would demonstrate adherence to the rule.

> To HN's credit I haven't seen this rule violated.

I don’t think you’d observe anything different if it were violated.

duckmysick

31 minutes ago

> no publicly available data that would demonstrate adherence to the rule.

What kind of data would satisfy you? I imagine any data coming directly from YC would be untrustworthy and third-party data would be incomplete (say, it wouldn't catch content removed before it's published).

Is there a similar data set for other private platforms?

squigz

3 hours ago

> I don’t think you’d observe anything different if it were violated.

If the mods were in the practice of moderating like this, yes, it would almost certainly be noticed by someone whose post/comment got deleted.

HN, like every other community on the Internet, relies on trust between the users and mods. If you don't trust them, you can always leave.

throwaway27285

2 hours ago

> it would almost certainly be noticed by someone whose post/comment got deleted

Would it?

HN has all sorts of sneaky punishments to keep people from noticing what's going on. Shadow bans, limiting how many comments you can post per day, sometimes outright refusing to serve you pages with a "Sorry." error, and even flagging isn't visible to the person whose comment got flagged. HN doesn't notify you in any way for any of this. How often do you check your comments while logged out? That includes old comments, of course, which need to be rechecked on a periodic basis. Archives provide some limitation to how much manipulation can happen, but flagging is a thing, can be abused by anyone with enough karma, and provides a lot of plausible deniability for dang should he opt for a stealthier approach to moderation.

Even this account is shadowbanned - and this comment automatically flagged - because I had the audacity to create an account with a VPN, in a world where VPNs are a requirement for unrestricted Internet access for a growing number of people living in "democratic" countries. The only way I know this is through testing, of course, because HN gives no indication that your account will be shadowbanned on creation.

jjulius

2 hours ago

>HN doesn't notify you in any way of this.

I'm not sure this is the supportive argument that you think it is, as HN doesn't notify users of anything akin to what you're discussing, be it positive or negative, ever. They don't have notifications whatsoever.

>Even this account is shadowbanned - and this comment automatically flagged...

No it's not. Edit: mea culpa, see response

>The only way I know this is through testing, of course...

How did you test this? Your single comment on a brand new account appears to be showing up just fine, as any new account would. Did you unflag your throwaway comment from a different account?

I get the feeling you pushed the boundaries of what was acceptable here at one point, and didn't like the result.

squigz

2 hours ago

> No it's not.

It was, actually. New accounts' comments being flagged by default is, I'm fairly certain, very much a thing.

jjulius

2 hours ago

Ah, you must've vouched for it. :)

Odd, I don't remember that being a thing when I joined. Mine showed up a-okay.

squigz

2 hours ago

> HN has all sorts of sneaky punishments to keep people from noticing what's going on

Another way of putting this is that HN has very standard mechanisms in place to combat spam and other sources of low-signal comments.

> Shadow bans, limiting how many comments you can post per day

Like these.

> Sometimes outright refusing to serve you pages with a "Sorry." error,

This just sounds like downtime/server problems. Every site has them, and even the most law-abiding posters on HN will see that sometimes.

> even flagging isn't visible to the person whose comment got flagged.

Yes it is?

> HN doesn't notify you in any way for any of this.

This is by design; HN doesn't offer notifications of anything on its own. Besides, most platforms don't usually notify people of these things by default either?

> Even this account is shadowbanned - and this comment automatically flagged - because I had the audacity to create an account with a VPN, in a world where VPNs are a requirement for unrestricted Internet access for a growing number of people living in "democratic" countries. The only way I know this is through testing, of course, because HN gives no indication that your account will be shadowbanned on creation.

I don't think you need to be so indignant. VPNs are also abused. All of these mechanisms are tradeoffs for making HN one of the best sites I've ever been on for productive, intelligent discussion; and the mods are well aware of this and manage to balance it well. For example, you were still able to register, and you and I are still able to exchange comments. If you contribute to discussions (on an account you don't just throwaway) for a little while, the limitations go away.

TimorousBestie

an hour ago

> > I don’t think you’d observe anything different if it were violated.

> If the mods were in the practice of moderating like this, yes, it would almost certainly be noticed by someone whose post/comment got deleted.

“You” in the original was referring to avaer specifically, not the generic “you.” They were the ones making the observation on little to no data.

> HN, like every other community on the Internet, relies on trust between the users and mods.

This is exactly my point. One must trust (or more precisely have faith in) them, because claims like the one up-thread are impossible to verify.

edm0nd

12 hours ago

yeah their code of ethics is to laugh all the way to the bank and be untouchable. nothing will happen to them from YC.

mmooss

11 hours ago

Are dang and tomhow involved at all in YC member ethics? I expect they know about ethical behavior on HN.

nrhrjrjrjtntbt

8 hours ago

VC system with multiple investors means YC can't tell their company what to do. No mote than you can tell Google what to do because you have $100M in shares.

sergiotapia

12 hours ago

So these are the scumbags putting cameras in front of schools and sending tickets to people on Sundays. Thank you for making peoples lives materially WORSE.

tomjakubowski

5 hours ago

Cameras at schools, I can see how that could be concerning. But what's wrong with ticketing drivers on Sundays?

sneak

12 hours ago

Speeding tickets are not related in any way to why Flock (YC S17)* is bad.

* how I will now always refer to them

therobots927

13 hours ago

Absolutely unacceptable behavior. Wild that Americans are so distracted by pointless social issues that they haven’t even realized the ruling elite are treating them like cattle. Absolutely pathetic.

westmeal

12 hours ago

The pointless social issues are manufactured specifically in order to distract Americans from the fact they are being treated like cattle.

ares623

12 hours ago

And they/we absolutely love the distraction

therobots927

12 hours ago

Because our educational system has been dismantled

throwaway0xT

11 hours ago

Cloudflare outage on Dec. 5 on remote servers were /user/ parsing errors in HTTP.

Flock does this well in terms of bios spinlock releases, whereas a secure measure is stress-testing network traffic.

chii

11 hours ago

> are manufactured specifically

the fact that these majority do accept the distraction points to lack of intelligence and discipline in critical thinking and future planning. The populous has half the blame - not just those who do these manufacturing of distractions.

themafia

10 hours ago

That's an easy trap to fall in. This industry costs trillions every year to operate for a reason. The people never really stood a chance. It's not as if school educated them to live in the world we actually inhabit.

anjel

12 hours ago

Cattle is as Cattle does

JumpCrisscross

12 hours ago

> Wild that Americans are so distracted

There is a tonne of civic action against Flock, specifically, in the works, in many cases with successful results.

jjulius

2 hours ago

And yet... many communities are in the process of ending their contracts and lawsuits are being filed against them?

kotaKat

3 hours ago

Flock's CEO basically went to the public and said "you all have phones" like the Blizzard people.

“If (people are) worried about privacy, a license plate reader is the dumbest way to do surveillance. You have a cell phone. A cell phone knows your exact location at all times,” he said. “If you don’t trust law enforcement to do their job, that’s actually what you’re concerned about, and I’m not going to help people get over that.”

Just means I have to have a Faraday bag alongside my polesaw and high-powered laser. I can compete with your shitty outdated Android SoM and a shitty Raspberry Pi webcam in an enclosure.

voidfunc

11 hours ago

America is huge and there's a lot of exceptionally stupid people especially in the South and Midwest.

Not much I can do about that over here in the coastal Northeast.

yard2010

7 hours ago

It's not about stupid people, there are stupid people everywhere, it's about the .1% elite controlling all the wealth and power, using flaws in the ways humans work (stupid or not every human has to have shelter and food to survive).

b00ty4breakfast

10 hours ago

"us smarties would never fall for such obvious bread and circus. not like those silly dumdums what live in {region}!"

said without an ounce irony as the proverbial rug is yanked right out from under your feet

hermannj314

11 hours ago

I was offended and then I defined "exceptionally stupid" a few ways and all the statistics support this claim.

I'm still offended though.

Fucking a lot of smart people in Mass., Vermont, Conn., New York, Maryland, DC.

matthewfcarlson

10 hours ago

I’m pretty sure anywhere there’s a lot of people (the northeast of the US for example) you’re going to find a lot of smart people.

hermannj314

9 hours ago

People with advanced degrees accumulate in those specific states, despite not significantly different rates of HS graduation from other states.

Smart people, as measured by educational attainment, live in the NE coastal states and exceptionally stupid people (by the same metric) live in the South and Midwest. As a guy from Iowa, I was offended, but humbled by the reality of the numbers.

faidit

9 hours ago

All things considered, I don't think advanced degrees necessarily correlate with intelligence. It's often just a marker of socioeconomic privilege.

A Carnegie Mellon study found that people with PhDs were more likely than any other educational attainment level to be against the Covid-19 vaccine: https://www.medrxiv.org/content/10.1101/2021.07.20.21260795v... (page 17)

Gallup polls during the Vietnam War found that higher-educated Americans were more likely to be pro-war while the most anti-war group were those with only a grade school education: https://afterthewarproject.org/files/original/3e5e5a47a15203... (page 19 of the PDF, page 38 of the document)

golem14

9 hours ago

Come on, there are exceptionally stupid people almost everywhere. No need for ad hominem.

jmeister

8 hours ago

Flock helped catch the Boston/Brown shooter.

Natfan

8 hours ago

the guy who took himself out? what did flock do to assist there?

kotaKat

3 hours ago

apparently they enabled "extra" "AI" features that track plate swap detections.

they fingerprint every vehicle they see, then they can do things like track the fingerprint over time, and see when the license plate got swapped, which they enabled on the Providence account to assist in the investigation to track down "which" car it was the killer drove

tamimio

12 hours ago

Remember when Zuck called his fellow students at harvard who used facebook “Dumb fucks”? The US is accelerating into techno-authoritarianism, and all of these tech companies adopted “companies over countries” motto since the start, it’s not a surprise now.

sneak

12 hours ago

it’s important to contextualize that quote: he called them dumbfucks specifically because they trusted him with their data.

anal_reactor

6 hours ago

If you operate in a world where your goal is to scam others then anyone displaying any amount of trust is obviously a dumb fuck.

Aeglaecia

12 hours ago

it is fairly evident that contextualisation is paramount in objectively assessing a situation ... in the context of having god like power over billions , it seems entirely moot to debate the merits of why such a god like individual would label his subjects as idiots ...

tamimio

11 hours ago

The context is given, it’s all about users’ data. facebook, google, plantir, flock, you name it, the end goal is to harvest data as much as possible to sell it, profile the individuals, manipulate the public opinion (facebook did a mood-manipulation “experiment” back in 2012, you can only imagine now in the era of social media dependency and AI), invade people’s privacy, among many other things. Now add to that mix a mandatory digital ID, and let’s hear what these CEOs will call the public behind closed doors, I’m sure it’s worse than “dumb fucks”. Fun fact: Zuck early days business card printed with “I’M THE CEO, BITCH.”

bongodongobob

11 hours ago

In the sense that the US has been anti-intellectualist for decades, I'm kind of ok with it. All the kids who fucked around in school and picked on the nerds for just existing are kind of getting their comeuppance. It's definitely cut off your nose to spite your face type shit, but does give me a little bit of joy. "You stuffed me in a locker and destroyed my social life because I read a book at lunch. I'm going to automate your job away and help billionaires make sure you'll never rise out of poverty."

pepperball

8 hours ago

> I'm kind of ok with it. All the kids who fucked around in school and picked on the nerds for just existing are kind of getting their comeuppance

I have yet to see it. All the stereotypical “asshole jocks” I can recall from school tended to be from upper middle class families. They’re doing much better than many of the nerds many of who are unemployed NEETs.

Though I admit these sort of social cliques are much more complex in real life than in a corny 80s coming of age movie.

CamperBob2

11 hours ago

All the kids who fucked around in school and picked on the nerds for just existing are running the government. Not sure this is the win you're painting it as?

Terr_

11 hours ago

I don't think "the nerds" are really dishing out much comeuppance here.

Professionally, they're marginalized by finance-bros, who actually decide what gets built and which morals get followed. Privately, everything you might want to repair or tweak or invent is still getting locked down or patented or criminalized.

venturecruelty

11 hours ago

How much does food and electricity cost you (if the electricity is even on for you at all)? Also, uh, this isn't high school anymore, and the "nerds vs. jocks" framing says a lot more about your own internal state than it does about the state of the world, which is being run into the ground by wealthy oligarchs. If you have bad high school memories to process, that can be done elsewhere.

citizenkeen

12 hours ago

Is this not libel?

hibf

11 hours ago

They don't actually allege anything. They add in the keywords without going so far as to say "this website is doing X." It's enough to trip the keyword filters at Cloudflare and other hosting providers and reverse the burden of proof.

dawnerd

11 hours ago

Problem is they have way more money to fight and that’s basically their whole playbook. I was caught up in a fraudulent libel claim that had to settle* back in the Twitter days. When those companies want to come after you, it’s really hard to fight back.

* no money was exchanged just some guarantees to not disclose their client and remove tweets.