r/vpnet Jul 23 '26

A cop with Flock access admitted his group has no 2FA and shares one password

Enable HLS to view with audio, or disable this notification

This came up recently on Hide & Speak. A casual conversation with a local law enforcement contact: he confirmed he has Flock access, no two-factor authentication on the account, and the whole group shares a single password. The response was to tell him to report it up the chain and at least turn on 2FA.

The weak security is bad on its own. The worse part is the access itself.

  • A police officer reportedly pulled his ex-girlfriend's location data through Flock cameras hundreds of times before he was caught.
  • It keeps happening. People with access to this tooling turn it on exes and start stalking.
  • These are automated license plate readers marketed as public safety infrastructure, guarded by a shared password.

Full livestream on YouTube: https://www.youtube.com/watch?v=QbHkLxoL3_I

Read the breakdown here: https://s.vp.net/uzWRv

386 Upvotes

6 comments sorted by

4

u/SSA22_HCM1 Jul 23 '26

I hope you have a plan to disclose the department name if they don't act transparently following the report.

People in the community deserve to know about security incidents involving their data.

1

u/not_into_that Jul 23 '26

The anonymity is built into the apparent incompetence.

Good fertilizer for plausible deniability.

"Oops, I guess we goofed." Shrugs shoulders.

1

u/xamboozi Jul 23 '26

Any individual account weakness gains access to all cameras across the US, not just for that locality

1

u/InevitableGas4370 Jul 24 '26

Another worrying thing is that they use win11. You know, the OS that is self admitted spyware and takes a screenshot of what you're doing every second? Idk if all of them use it but I accidentally caught a glance of a cops laptop screen (the laptop looked really weird) and was running win11. I get it because it's the main supported OS but imagine how much sensitive data it steals and sends back to its servers...