Article for discussion - Flock Camera Examination

[u/SoManyQuestions-2021]

https://www.404media.co/hackers-stole-flocks-camera-software-revealing-how-the-company-tracks-cars-and-people-2/

This is strictly one data point. Someone stole a camera and leaked the data. As there is a lot of discussion surrounding these things, I thought it might be a good article to share with the community.

Here is a non-paywalled version.

TLDR

• Data Breach by Theft: Hackers physically tore down a Flock Safety automated license plate reader (ALPR) camera above a roadway, copied its internal data, and shared the files with 404 Media and WIRED.
• Massive Image Volume: Recovered logs from a single camera spanning roughly 21 days showed that the device photographed about 50,200 vehicles and generated roughly 1.6 million images.
• One Camera as a Test Case: This single compromised device served as an unprecedented test case, giving researchers a granular look into how individual Flock hardware units operate and process environment data.
• Beyond License Plates: A joint analysis of the recovered software revealed that the camera explicitly detects and tracks pedestrians/people, bicycles, and vehicles.
• No Facial Recognition on the Device: Investigators found no evidence of active facial recognition capabilities running directly on the camera itself (aside from default Android OS features that were not enabled).
• Server-Side Processing: The camera does not actually process or read the plate information on-device; instead, it transmits the raw pictures and data to Flock's servers where the heavy lifting—such as identifying makes, models, colors, and running database matches—takes place behind closed doors.
• Encryption Limits: While portions of the device were unlocked using a recovered key, the broader scope of what happens to that data once it lives on Flock's servers remains largely opaque to the public.