Flock Exposed Its AI-Powered Cameras to the Internet. We Tracked Ourselves

210 pointsposted 6 hours ago
by chaps

63 Comments

edot

6 hours ago

Flock or their defenders will lock in on the excuse that “oh these are misconfigured” or “yeah hacking is illegal, only cops should have this data”. The issue is neither of the above. The issue is the collection and collation of this footage in the first place! I don’t want hackers watching me all the time, sure, but I DEFINITELY don’t trust the state or megacorps to watch me all the time. Hackers concern me less, actually. I’m glad that Benn Jordan and others are giving this the airtime it needs, but they’re focusing the messaging on security vulnerabilities and not state surveillance. Thus Flock can go “ok we will do better about security” and the bureaucrats, average suburbanites, and law enforcement agencies will go “ok good they fixed the vulnerabilities I’m happy now”

dvtkrlbs

6 hours ago

Yes and the biggest problem with this kind of ALPRs are they bypass the due process. Most of the time police can just pull up data without any warrant and there has been instances where this was abused (I think some cops used this for stalking their exes [1]) and also the most worrying Flock seems to really okay with giving ICE unlimited access to this data [2] [3] (which I speculate for loose regulations).

[1]: https://lookout.co/georgia-police-chief-arrested-for-using-f... [2]: https://www.404media.co/emails-reveal-the-casual-surveillanc... [3]: https://www.404media.co/ice-taps-into-nationwide-ai-enabled-...

candiddevmike

6 minutes ago

Maybe with these systems we should require them TO be open for anyone to query against. Maybe then people would care more about how they impact their privacy.

throwway120385

5 hours ago

When you give access to any system that collects the personal information including location data for people in the US to the police, a percentage of the police will always use those systems for stalking their exes.

hugo1789

4 hours ago

What is not only true for police but for every sufficiently big group of people.

kcatskcolbdi

a few seconds ago

Cops do have some unique tendencies but I think the real issue is the cops are able to leverage the power of the government in ways other large groups cannot.

Spooky23

12 minutes ago

Was it misconfigured? Or “misconfigured” so people in the know can bypass the minimal controls that are in place?

SamInTheShell

5 hours ago

Nothing will be done until one of the investors of the tech end up embarrassed from weaponization of the tech against themselves. These people have no clue how creepy some of their technologic betters can be. I once witnessed a coworker surveilling his own network to ensure his girlfriend wasn't cheating on him (this was a time before massive SSL adoption). The guy just got a role doing networking at my company and thankfully he wasn't there for very long after that.

tracker1

5 hours ago

I think more importantly people need to recognize that cops are people, flawed and fallible as is the flock system in general. It should never be the whole solution and be used as evidence alone.

fusslo

4 hours ago

I wonder what our founders would think about tools like Flock.

From what I understand these systems are legal because there is no expectation of privacy in public. Therefore any time you go in public you cannot expect NOT to be tracked, photographed, and entered into a database (which may now outlive us).

I think the argument comes from the 1st amendment.

Weaponizing the Bill of Rights (BoR) for the government against the people does not seem to align with my understanding of why the Bill of Rights was cemented into our constitution in the first place.

I wonder what Adams or Madison would make of it. I wonder if Benjamin Franklin would be appalled.

I wonder if they'd consider every license plate reading a violation of the 4th amendment.

amrocha

6 minutes ago

I think you should try to decide for yourself what to make of the situation instead of wondering what some ancient dead old dudes would think.

reed1234

3 minutes ago

Both perspectives could be informative.

TheCraiggers

3 hours ago

> From what I understand these systems are legal because there is no expectation of privacy in public.

Not quite. There's been precedent set that seems to imply flock and other mass surveillance drag net operations such as this do violate the forth.

snazz

43 minutes ago

Defendants trying to exclude ALPR evidence often invoke Carpenter v. U.S. (or U.S. v. Jones, but that’s questionable because the majority decision is based on the trespass interpretation of the 4th Amendment rather than the Katz test). Judges have not generally agreed with defendants that ALPR (either the license plate capture itself or the database lookup) resembles the CSLI in Carpenter or the GPS tracker in Jones. A high enough density of Flock cameras may make the Carpenter-like arguments more compelling, though.

chzblck

3 hours ago

they prob be upset about the 13th 15th and 19th amendments too

eightysixfour

5 hours ago

I don't want these cameras to exist but, if they're going to, might we be better off if they are openly accessible? At the very least, that would make the power they grant more diffuse and people would be more cognizant of their existence and capabilities.

lubujackson

4 hours ago

Did you see the other post about this where the guys showed a Flock camera pointed at a playground, so any pedo can see when kids are there and not attended?

Or how it has become increasingly trivial to identify by face or license plate such that combining tools reaches "movie Interpol" levels, without any warrant or security credentials?

If Big Brother surveillance is unavoidable I don't think "everyone has access" is the solution. The best defense is actually the glut of data and the fact nobody is actively watching you picking your nose in the elevator. If everyone can utilize any camera and its history for any reason then expect fractal chaos and internet shaming.

eightysixfour

3 hours ago

> so any pedo can see when kids are there and not attended?

Sure. It also lets parents watch. Or others see when parents are repeatedly leaving their kids unattended. Or lets you see some person that keeps showing up unattended and watching the kids.

> Or how it has become increasingly trivial to identify by face or license plate such that combining tools reaches "movie Interpol" levels, without any warrant or security credentials?

That already exists and it is run by private companies and sold to government agencies. That’s a huge power grab.

> The best defense is actually the glut of data and the fact nobody is actively watching you picking your nose in the elevator. If everyone can utilize any camera and its history for any reason then expect fractal chaos and internet shaming.

This argument holds whether it is public or not. It is worse if Flock or the government can do this asymmetrically than if anyone can do it IMO, they already have enough coercive tools.

rsync

2 hours ago

"Or others see when parents are repeatedly leaving their kids unattended."

... which is the expected, default use-case for a playground ...

eightysixfour

17 minutes ago

I didn't want to get into an argument over whether kids should be unattended at playgrounds or not - I don't know where the other poster is front and it seems to be based on age, density, region, etc. Where I grew up it would be weird to stay, in the city I am in it would be weird to leave them.

If you leave your kids unattended at a playground I don't see how the camera changes the risk factor in any meaningful way. Either a pedophile can expect there to be unattended children or not.

JKCalhoun

3 hours ago

I've thought the same regarding license plate readers (and saw considerable pushback on HN) — feeling like you suggest: if they have the technology anyway, why not open it up?

I imagined a "white list" though (or whatever the new term is—"permitted list"?) so that only certain license plates are posted/tracked.

overfeed

2 hours ago

> I don't want these cameras to exist but, if they're going to, might we be better off if they are openly accessible?

Cities will remove Flock cameras at the first council meeting that sits after council-members learn their families can be stalked.

eightysixfour

16 minutes ago

Seems like a positive side effect. The Seattle area is delaying it after the open records request case.

hrimfaxi

5 hours ago

Is it more symmetrical? I know in theory we all can continuously download and datamine these video feeds but can everyone really?

eightysixfour

5 hours ago

No, but the same argument could be made for things like open source software. We assume/hope that someone more aligned with our outcomes is actively looking.

Or, at the very least, that we can go back and look later.

hrimfaxi

5 hours ago

I don't think they are similar. Public feeds would enable someone to document and sell people's whereabouts in real time. The fact that I could do the same or go back and look later is no defense.

eightysixfour

4 hours ago

This is a different argument than what I was responding to.

> I know in theory we all can continuously download and datamine these video feeds but can everyone really?

To which my response is "this is like OSS." What I mean by that is that, in theory, people audit and review code submitted to OSS software, in reality most people trust that there are other people who do it.

> Public feeds would enable someone to document and sell people's whereabouts in real time. The fact that I could do the same or go back and look later is no defense.

This is a different argument to me and one that I'm still torn about. I think that if the feeds exist and the government and private entities have access to them, the trade-offs may be better if everyone has access to them. In my mind this results in a few things:

1. Diffusion of power - You said public feeds would "enable someone to document and sell people's whereabouts in real time." Well, private feeds allow this too. I'd rather have everyone know about some misdeed than Flock or the local PD blackmail someone with it.

2. Second guessing deployment - I think if the people making the decisions know that the data will be publicly available, they're more likely to second guess deploying it in the first place.

3. Awareness - if you can just open an app on your phone and look at the feed from a camera then you become aware of the amount of surveillance you are subject to. I think being aware of it is better than not.

There's trade-offs to this. The cameras become less effective if everyone knows where they are. It doesn't help with the location selection bias - if they're only installed in areas of town where decision makers don't live and don't go, the power is asymmetric again. Plenty of other reasons it is bad. None of them worse than the original sin of installing them in the first place.

xyzzy123

3 hours ago

Open cameras make information that was previously local and difficult to collect global and easier to collect. Relatively, it reduces the privacy and power of people on the ground in your neighbourhood and increases the power of more distant actors. It doesn't seem very socially desirable as an outcome. It also increases the relative power of people with technical capacity and capital for storage and processing etc.

I do buy your argument that open access could help check the worst abuses. But, if widespread, it'd be so catastrophic for national security that I can't see how it would ever fly.

eightysixfour

an hour ago

I think the theater of closed versions have the same problems, we just don’t acknowledge them as well.

If I were an enemy nation state, flock would definitely be a target.

kgwxd

4 hours ago

They don't grant power, they enhance it. Not helpful for those without don't have any actual power.

rsync

2 hours ago

There's an interesting idea here that is tangentially related to "common carrier" regulations ...

Specifically:

If a flock (or similar) camera is deployed on public land/infra there should exist default permission for any alternate vendor to deploy a camera in the same location.

I wonder how that could be used and/or abused and, further, what the response from a company like flock would be ...

chaps

2 hours ago

Not directly an answer to your question, but installed Shotspotter locations are generally "not shared with police" and installations are done in a way where the location is obfuscated away from the police/city through Shotspotter contractors. It's not actually true that the device locations aren't shared with the police, but shotspotter/police testimonies in shotspotter cases say so anyway.

crumpled

an hour ago

Yes. This looks bad for Flock security.

Good thing nobody tried to pop a shell on the camera OS and move laterally through the network. That would be bad.

I'm sure it's all very secure though.

eddyg

5 hours ago

Yes, they should be secured so they can only be accessed by law enforcement.

But if your spouse/SO/sister/mother/girlfriend/whatever was assaulted while jogging in a park that had Flock cameras, and it allowed law enforcement to quickly identify, track, apprehend and charge the criminal, you'd absolutely be grateful for the technology. There's nothing worse than being told "we don't have any leads" when someone you care about has been attacked.

542354234235

4 hours ago

Maybe I’m crazy, but I don’t want laws to be written to the level of my emotional individual reaction to a singular crime. I want laws to reflect the ideals and values of society, and to work at scale when balancing individual freedom, societal safety, and protection from government abuse.

“It is better, so the Fourth Amendment teaches us, that the guilty sometimes go free than the citizens be subject to easy arrest.” - Former Supreme Court Justice William O. Douglas

estimator7292

5 hours ago

What about when ICE uses this data to abduct and deport your spouse and family members? Will you be grateful then?

gs17

4 hours ago

They should also require a warrant at least, especially for any data sharing. With "they can only be accessed by law enforcement", we've already had plenty of police harassing their exes. If they couldn't convince a judge to let them use the camera, there's really no hope of the case going anywhere.

> There's nothing worse than being told "we don't have any leads" when someone you care about is attacked.

I'd argue worse is "we know exactly who did it and we're not going to do anything about it (but we would do something if you try to do something about it yourself)".

dexwiz

4 hours ago

Until your spouse/SO/sister/mother/girlfriend spurns a LEO, and then the LEO uses it to stalk and harass them. Talk to any LEO, they constantly misuse their data access to look up friends/family/neighbors to find dirt. Most of the time its relatively harmless gossip, but it can easily be used to harass people.

thedougd

3 hours ago

I'll make up another one to pile on. Perhaps the police would have had a visible, deterrent presence if they weren't lazily relying on cameras, and that would have prevented the assault in the first place.

Anyhow, if you read the flock database, they're overwhelmingly not using them for the purposes of public safety or random crime.

JKCalhoun

3 hours ago

"…they're overwhelmingly not using them for the purposes of public safety or random crime."

That would seem to be very relevant information.

kelnos

3 hours ago

Ah yes, the good ol' appeal to fear. "Think of the childr--err, I mean poor defenseless woman!"

No, I don't want these cameras. I don't care if they make law enforcement's job easier. They are an invasion of privacy and a part of the disgusting dragnet surveillance state.

They need to go.

A decade ago, I was attacked on a public sidewalk by three men, who roughed me up a bit and stole from me. The police were utterly unhelpful, and as far as I know, they never caught anyone. But ultimately, that didn't really matter. I was traumatized for a while, but eventually worked through it. Whether or not they were caught would not have changed any part of that process.

I get that, emotionally, we want some sort of justice when things like this happen, but I am not willing to put up with even more constant surveillance in order to feel a little bit better about a bad thing that happened to me. I would much rather criminals sometimes went free.

SunshineTheCat

3 hours ago

Yea I've never been a fan of the whole "makes law enforcement's job easier" arguments.

As though personal rights/liberties are trumped by a cop needing to do paperwork or leave his desk.

Plus, when you follow this to its natural/extreme conclusion, the absolute easiest thing for law enforcement would be to arrest you for no reason at all.

The rationalization for this policy of course could simply be that probable cause is "inconvenient."

tediousgraffit1

4 hours ago

"Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety."

LeFantome

3 hours ago

This is true of course. You could also apply this logic to even the most extreme of fascist tendencies though.

There is freedom to and freedom from as they say in The Handmaid’s Tale.

fzeroracer

4 hours ago

What if your spouse/SO/whatever was wrongfully arrested because they were on a Flock camera and conveniently matched what the police were looking for? Or if they ran whatever dogshit AI algorithm over it looking for suspects?

We can make up situations all day where it can or can not be validated but the reality is that this is a defacto surveillance state. If every move you make can be monitored, you should assume that the state can and will abuse it to hurt innocent people in the name of politics or whatever.

gs17

4 hours ago

Or if they were simply being harassed because their ex was a cop who decided to use the cameras to stalk them, where there's not even an excuse.

kgwxd

4 hours ago

What's the point of making a statement like that? Is it like a Snapple cap thing, or do you expect people to actually give up on talking about the blatant government overreach?

And what a dumb way to frame it. "Think of the woman" is the same argument as "think of the children". Why not just say if you were attacked you'd want it to be on camera? Afraid it'll make you sound weak? Well, so does bootlicking.

dvtkrlbs

6 hours ago

I just watched the Benn Jordan's video on this. Even if this is just configuration error on some of their cameras this is terrifying and I think they should be held accountable for this and their previous myriad of CVEs.

tencentshill

6 hours ago

It's amazing that any vendor, let alone a CJIS vendor even allows unsecured deployments of their software in 2025.

GaryBluto

4 hours ago

I'm not sure if it's better or worse to have it publicly accessible or only accessible to an elite group.

everdrive

5 hours ago

It's getting pretty crazy out there. What's your recourse for this? Avoid most populated areas?

murderingmurloc

4 hours ago

I live in a town of 6,000 and we have 5 Flock cameras

kelnos

3 hours ago

Work with your municipality to pass laws banning cameras like this. I'm sure it isn't easy (and I'm not sure I have the stomach for working through that process in my city), but people have done it in some places.

potato3732842

4 hours ago

It's a quality of people problem not a quantity of people problem.

JKCalhoun

3 hours ago

deflock.me has a map. (I recently contributed a few flock cameras I spotted.)

I notice they generally watch busy roads and intersections, off and on ramps to highways, retail malls…

Smaller roads through neighborhoods were mostly unmolested.

bromuk

5 hours ago

Really great investigation, what's the URL of the "vibe coded" site with the access links?

chzblck

3 hours ago

People who complain about flock should have to list how many crimes are in their zip code to be taken serious.

btbuildem

3 hours ago

glock > flock

Is mass vandalism the final answer to this problem?