Join for quick access. Enter your email below and we'll send confirmation plus sign you up to our newsletter.
By submitting your information, you confirm you are aged 16 or over,
have read our
Privacy Policy
and agree to the
Terms & Conditions. Geographical rules apply.
Stay On the Cutting Edge: Get the Tom's Hardware Newsletter
Get Tom's Hardware's best news and in-depth reviews, straight to your inbox.
You are now subscribed
Your newsletter sign-up was successful
Join the club
Get full access to premium articles, exclusive features and a growing list of member rewards.
An account already exists for this email address, please log in.
Hackers find encryption keys stored on stolen Flock camera despite company's denials — group extracts more than 27,000 clips, 1.6 million images captured in a span of 21 days from the device
Flock claims that images are only briefly stored on its cameras before being forwarded to the company’s servers, but a group of hackers determined that this wasn’t the case.
Flock says that its cameras are protected by on-device encryption, and even though a security researcher noted some flaws in its system, the company said that physical access is still required to exploit them and that the images are only briefly retained on the device before they’re forwarded to the cloud. However, 404 Media says that a hacking group called stegan0gram found out that this wasn’t the case after they took down a Flock camera positioned over a roadway and analyzed the data stored inside it.
While the hacking group failed to access the most sensitive data stored on the Flock camera, they were still able to access its Android operating system and found two storage partitions, labeled “vendor” and “media.” The latter was found to contain an encryption key that unlocked another partition containing all the media files from the camera. 404 Media said that that particular Flock camera captured about 1.6 million images across 21 days, detecting around 50,200 vehicles and, more concerningly, 11 people. There were also 27,321 video clips saved on the device — MP4 files with a 1024 x 768 resolution that lasted about a second or two.
Abilities like reading license plates and describing vehicle characteristics like color, make, and model are done on Flock’s servers, but these cameras still retain some edge AI capabilities. This includes detecting people, vehicles, bicycles, and plate-like shapes, which it then crops and sends to the company servers, alongside the original images. Although the software was found to have some facial detection capabilities, the publication said that this was the stock capabilities included in the operating system and wasn’t used by the camera.
This discovery by the hacking group raises another issue with Flock’s system, which is facing a lot of controversies when it comes to privacy and misuse. For example, several police officers have been arrested for using it to stalk romantic partners, while another incident over a mistyped license plate resulted in the unnecessary “ambush” of a car reviewer. Because of this, some towns and cities have ended their contracts with the company, while other people are taking things into their own hands to blind the controversial cameras.
Nevertheless, some critics say that those who are against the deployment of these systems should refrain from damaging or sabotaging these devices, as doing so will only make the authorities feel that these systems are needed. “I think that type of vigilantism will only crystallize the police and the state at large in their belief that this tool is necessary,” former Pawtucket, Rhode Island, police officer Noel Pichardo told the news website. “The longer the state continues to ignore the groanings of their constituents who are against this type of surveillance, the more this will happen.”
Jowi Morales is a tech enthusiast with years of experience working in the industry. He’s been writing with several tech publications since 2021, where he’s been interested in tech hardware and consumer electronics.
Flock have lied repeatedly about the capabilities of these devices as well as the retention policies pertinent to its data. Enough is enough. This would be unacceptable SLA in - any - other circumstance.
The more upset that people are about systems like this, the more the state will use them. Did I get the jist of what that guy said?
I think they paraphrased him a bit too much there, because it seemed contradictory with nothing bridging it. Or he really is that internally conflicted.
Flock have lied repeatedly about the capabilities of these devices as well as the retention policies pertinent to its data. Enough is enough. This would be unacceptable SLA in - any - other circumstance.
And Flocks retention policies are sort of irrelevant.
They can proudly proclaim a 7 day retention.
But when they pass all that data off to their partners, their "7 days" no longer counts.
What is the retention policy of the recipient? Who knows....
And Flocks retention policies are sort of irrelevant.
They can proudly proclaim a 7 day retention.
But when they pass all that data off to their partners, their "7 days" no longer counts.
What is the retention policy of the recipient? Who knows....
It just reminds me again about how with all of these truly massive data centers popping up literally Everywhere, not only do they have absolutely insane amount of processing power, but they must also have near limitless data storage capabilities.
In the past I would always find myself at odds with trying to visualize just how much storage companies like Google has got for things like gmail and YouTube, along with all of the other data the companies hoards.
But I'm not sure how well people can estimate just how much data can be stored in all of these data centers that have gone up in the past year alone...
I don't care what the rights are to retain information for how long passed what's originally stated. It's sad to see that we have to resort to hackers being the heroes in this timeline. Government is showing its colors blatantly.
27k clips and 1.6mill pictures. How much storage do these cameras have... That's averaging 7-15TB... No way those cameras have that much storage...
The original article says that the camera captured 1.6 million pictures over 21 days, based on logs stored on the camera. It didn't say that all of them were still stored on it.
FLOCK's a secretive method government agencies are happily placing in the hands of powerful authorities. Our tax money supports it & yet there's no VOTER approved referendum. Sure, FLOCK's used for good. So are armed LEO'S carrying Glocks & 9mm's. Except when there's an unlawful use of force & an officer's fired, convicted or hired somewhere else ! Trained cops (Citizens on Patrol) normally wear uniforms, badges, use marked vehicles, etc... Why aren't these cameras not readily identifiable, lit up or painted like Chistmas trees ? Follow the money ya'll. That's the # 1 reason. Public good is further down the list.
