Hackers Expose Flock Camera Surveillance Secrets

Hackers have compromised Flock Safety cameras, exposing detailed information about their surveillance capabilities, including the tracking of individuals. The group, stegan0gram, shared data with 404 Media and WIRED, revealing how they bypassed the camera's encryption. They managed to copy the device's storage and recover an encryption key, which unlocked extensive video footage and logs.

Analysis of the data indicates that Flock's software explicitly detects people alongside vehicles, license plates, and bicycles. One camera generated over a million images in several weeks, capturing bumper stickers and even patches on clothing. This breach occurred despite Flock's assertion that its devices feature on-device encryption.

The hackers' motivation stemmed from a desire to expose surveillance, stating, "Why just destroy them when we can reverse engineer them and find the secrets of those spying on us?" They emphasized liberating hardware to understand the surveillance technology.

Flock's cameras transmit images and data to company servers for analysis, creating searchable records accessible to authorized agencies. However, this national network has raised concerns, as revealed by previous reporting on nationwide searches conducted by law enforcement on behalf of other agencies.

Security researcher Jon Gaines had previously identified flaws allowing root-level access, though Flock downplayed their severity, citing the need for physical access. The recovered data, however, demonstrates a deeper compromise than initially acknowledged.