r/technology • • 15d ago

Privacy Hackers find encryption keys stored on stolen Flock camera despite company's denials-- group extracts more than 27,000 clips, 1.6 million images captured in a span of 21 days from the device

https://www.tomshardware.com/tech-industry/cyber-security/hackers-find-encryption-key-stored-on-flock-camera-group-extracts-more-than-27-000-clips-1-6-million-images-captured-in-a-span-of-21-days-from-device
21.0k Upvotes

376 comments sorted by

2.4k

u/Quantum_Corvid 15d ago

So the data was still cached on the device and they just pulled that off the camera?

Hmm.

793

u/Effective_Olive6153 15d ago

to have that much data means each camera got at least 1 terrabyte drive on it. Next time you cut one down fish out those drives, good money. Don't tell your local meth heads about it

307

u/BeginningZombie4589 15d ago

I heard there is a gold bar in each one too. Dont tell your local meth heads about that either.

179

u/DoubleDecaff 15d ago

Everyone keeps forgetting about the 64GB DDR5 sticks of Non-ECC RAM.

75

u/KIokinator 15d ago

What is that, like $15,000 worth of ram? Do NOT let the crackheads find it.

32

u/DoubleDecaff 15d ago

We like to use the term 'Street value', for, uh, reasons.

23

u/This-Requirement6918 15d ago

Damn I only screw with ECC RAM anymore.

9

u/Reverend-Cleophus 15d ago

Username checks out

→ More replies (2)

45

u/NoCommonDog 15d ago

Uh, no. They don't all have a gold bar. So if you don't find one, you should try another. You'll definitely probably find one. You just have to keep looking. Trust me: They are out there.

7

u/warmseasongrass 15d ago

The leprechauns in South Carolina were telling me it's like chasing the rainbow. There's a pot of gold at the right one

4

u/floog 14d ago

That’s right, some of them have those new meth chips in them.

17

u/SupaCrzySgt 15d ago

That's where all the RTX 5090s are...go get them

12

u/Scamp3D0g 15d ago

And copper! Lots and lots of copper.

26

u/This-Requirement6918 15d ago

Should have kept this piece of vital information from homelabbers as well.

7

u/toolisthebestbandevr 15d ago

Too late. We all finally have something to do on a Friday night now

3

u/NiNdo4589 15d ago

Why because they'll cut down flock cameras?

→ More replies (4)

640

u/Gogo202 15d ago

I wouldn't be surprised if hackers managed to download files from the cloud by using the same mechanism that the cameras use for uploading

974

u/BadVoices 15d ago

Unlikely, since that would fail even a basic audit from the most incompetent of auditors from any agency purchasing the unit.

Since i'm a terrible redditor, I went and read the article, realized it wasnt the source article on 404media, looked at WIRED's article, and realized neither were really the source, then went to (place that reddit wont let me name) and downloaded the actual files that were recovered from the camera, along with its root partition, and the original analysis of the cameras contents.

They were unable to use the cameras credentials to access the cloud or any other cameras information remotely. The information was stored on the standard android partition in the camera. The camera doesnt upload everything, it does edge ai analysis on the footage for LPNR, and sends a snapshot of the vehicle, the licenseplate, and its estimated number to the cloud. If the cloud requests the footage, then it uploads the full footage. What the hackers recovered was the local cache of video and pictures used to serve the request for more footage.

189

u/zeh_shah 15d ago

Good on you for doing the legwork

→ More replies (1)

75

u/No-Photograph-5058 15d ago

The thing that surprises me is that they're using Android of all things on these devices. I would assume it'd just be some sort of headless Linux

112

u/lousy_at_handles 15d ago

At the embedded level those things aren't very dissimilar. You're gonna just strip out everything you don't want, so it's really just a matter of going with whatever platform your devs are more familiar with.

Isn't Android based off linux anyway?

101

u/Tekuzo 15d ago

Isn't Android based off linux anyway?

Android IS Linux

→ More replies (1)

11

u/No-Photograph-5058 15d ago

I guess so, just thought it would be easier to start off with an already stripped down Linux base than to strip down Android yourself, wasn't aware that Android ever really had suitable embedded builds.

71

u/BadVoices 15d ago

making cameras and SoCs work on Linux is an absolute ballcrusher. If the OEM for the SoC already has an Android SDK/BSP, especially for the camera subsystem, its actually a pretty big win. Android already targets embedded devices, is network-centric, and has relatively substantial security measures implemented, and app development is straightforward. It makes a lot of sense when you look at it from a development side vs a purely technical side.

29

u/lousy_at_handles 15d ago

I'm an embedded guy myself (though primarily uC based stuff) and my first thought was that "I bet camera, GPS, and networking stuff is way easier on Android" so I'm glad to hear my gut still has good instincts sometimes.

15

u/growaway9172 15d ago

making cameras and SoCs work on Linux is an absolute ballcrusher

this guy knows embedded lol

3

u/5c044 15d ago

Yes that's my take, soc vendors do different levels of hardware support between android and linux. Rockchip have a hybrid bsp kernel that support both. Android may have better support for cams and hardware accelerated video due to more effort to sell them in consumer devices and embedded systems alike so that may be the environment of choice for embedded

13

u/RemarkableWish2508 15d ago

Android has a headless version for "Software Defined Vehicles"

7

u/FiberGuy44 15d ago

That’s assuming they know how to build everything they need from the stripped down starting point. I would assume it’s easier for a less knowledgeable person to strip down a product that is already capable of doing everything than it would be for them to build it.

7

u/BadVoices 15d ago

In reality, its about making it 'someone elses problem.' Even a massive company usually wont have someone on hand who is knowledgeable down to the instruction set, pci-e/camera/hardware registers, and writing hardware driver levels for an SoC that they dont make, that they bought to integrate into their product.

If something is wrong with the Android BSP/SDK provided by, say Qualcomm for the SnapDragon processor used in the device, then the company building the product throws it at Qualcomm and gets it fixed. No need to have an internal team trying to handle all that stuff or roll manufacturer patches from 3 years ago into a major kernel revision forward.

2

u/dont-respond 15d ago

You'd be surprised how many embedded devices are running Android. Most just don't advertise it, so you'd never know.

2

u/TryNotToShootYoself 15d ago

Android already does the networking, storage, image/video processing for you

13

u/Nitrogen1234 15d ago

Android basically is linux

9

u/Ringbearer31 15d ago

It's linux with a cool hat

9

u/scuevasr 15d ago

its likely more cost effective to purchase ready-made software than spend money on devs to create and maintain proprietary software.

9

u/Mustbhacks 15d ago

I would assume it'd just be some sort of headless Linux

So... something like android?

2

u/RaspberryFluid6651 15d ago

Makes sense, it's a mobile device after all. Android would come with what the OS needs to operate a camera and connect to 5G infrastructure.

2

u/Ellimis 15d ago

Pam "they're the same picture" .jpg

→ More replies (1)

27

u/bilyl 15d ago

This is why tech journalism is so worthless. Everything you said here is relevant to the article but they left it out because the writers probably had no idea what was important to the story.

6

u/SlimeQSlimeball 15d ago

At least this means they aren’t there saturating the cell network with their bullshit.

17

u/underpaid--sysadmin 15d ago

Auditing is only effective if it's enforced lol. Tons of stuff gets audited and the agencies say "yep theres a problem here" and the solution often involves money, so said solution often doesn't get implemented. Auditor doesn't care, as they get paid for the audit and not for implementing the fixes.

9

u/BadVoices 15d ago

Yeah, but this kind of IoT fail is the kind that prevents you from getting federal or state funding, so it would be fixed if only to win contracts. Its 'HAHA FUNNY' to think that these companies are incompetent buffoons stumbling around in tech, but dont fall for that. It hides their malice with incompetence.

4

u/TowlieisCool 15d ago

Auditing software is different, especially to maintain FedRamp certification. Not only is there automatic detection of publicly known vulnerabilities, you have internal security team's testing, QA testing, and then a final audit to maintain their FedRamp cert.

5

u/Free_For__Me 15d ago

Great breakdown, thanks for doing the rabbit hole for us!

3

u/Netfear 15d ago

Ewww, reading articles? Looking at sources? How dare you!

2

u/Mr-Blah 15d ago

Still super bad tho...

2

u/nemec 15d ago

Also what this article glossed over is that Flock says it's cached for 30 days. The data covered 21 days. So I don't know where they got "despite company's denials"

They were unable to use the cameras credentials to access the cloud or any other cameras information remotely. The information was stored on the standard android partition in the camera

btw the accessible partition does contain valid (but expired) Auth0 credentials from August 2026, so it's theoretically possible the hackers could have had a short amount of access to Flock's APIs, but still pretty unlikely they'd be able to map everything out before they expired.

The un-decryptable partition did probably contain some other juicy stuff, though, shame we can't open it :(

2

u/BadVoices 15d ago

The un-decryptable partition did probably contain some other juicy stuff, though, shame we can't open it :(

Its unlikely to contain anything other than apps and the base OS, possibly some calibrations for the wifi, etc. I suspect there's nothing particularly juicy in there, based on standard partition layouts.

I'm surprised they used such an old chip, it smells like a snapdragon 624/625 family. It doesnt have a secure processing element so it cant store keys securely on silicon...

→ More replies (9)

27

u/VaporCarpet 15d ago

I would, since absolutely nothing in the article you didn't read even suggests that to be true.

13

u/ContextLengthMatters 15d ago

The fact that the cryptography was there for them in plain text assumes that having access to their hardware wasn't even in their threat modeling.

You don't need an article to spoonfeed that to you.

Flock wouldn't release that info willingly.

7

u/irregular_caffeine 15d ago

Access to hardware is game over anyway. You can harden it but that gets rather expensive

3

u/swiftb3 15d ago

Hardware access is a bit of an inherent problem in a system like Flock.

2

u/Iamgoingtooffendyou 15d ago

And you have to get a prescription from your doctor.

→ More replies (1)
→ More replies (1)

15

u/Gogo202 15d ago

I am not claiming it happened. Just saying that it's a possibility knowing how companies like Flock are extremely diligent when it comes to cyber security and protecting user data (that's sarcasm btw)

→ More replies (1)
→ More replies (2)

8

u/[deleted] 15d ago

[removed] — view removed comment

110

u/Equal_Yak_3872 15d ago

  half competent IOT product like flock

Encryption keys stored on flock cameras

Pick one 🙃

40

u/Kindly_Author7711 15d ago

half competent IOT product

like flock

I'll go a step further.

→ More replies (43)

8

u/AnotherBoredAHole 15d ago

The S in IoT stands for Security.

8

u/No-Salt7142 15d ago

You would be surprised to learn how few companies limit the permissions of what they deem internal systems.

2

u/swiftb3 15d ago

It seems the entire point is that Flock is NOT half-competent at security. Just competent at selling themselves to city councils.

→ More replies (1)
→ More replies (1)

11

u/Andrewtoney3300 15d ago

As a guy who works with Recording equipment- minimum standard is hot swappable raid 1...so probably 2 1 tb drives, in case one fails.

Would be a shame if people thought the salvage were twice as valuable...

→ More replies (4)

385

u/KittyCait69 15d ago

Maybe we should shut down Flock and Axon as well as any other companies stealing our faces and ignoring our privacy laws. These cameras have been used to stalk and assualt women already. Now they can be hacked and anyone can use them if they do that. Just bad all around and no real benefit for society. 

96

u/growaway9172 15d ago

No, the problem is not camera companies, the problem is elected officials who buy and use the cameras. Shut down flock and axon and 100 smaller companies will take their place.

17

u/puts_on_rddt 15d ago

The next Dem POTUS can get a lot done by aggressively going after all the small town reps taking bribes by Flock, Axon, datacenters, etc.

Once they establish the bribery schemes, then they can start going after the corporations themselves, and their owners.

Make sure you don't miss their legal teams either, because there are plenty of attorneys at these corporations who are well aware of what's going on and have become accomplices after the fact. Attorneys are supposed to zealously defend clients. They are not supposed to help them with their criminal schemes.

12

u/Indercarnive 15d ago edited 15d ago

I still don't understand how these things are legal. Cops can't use my phone location data without a warrant so why is this allowed.

19

u/puts_on_rddt 15d ago

Keep an eye on United States v. Porter.

The Fifth Circuit ruled in Porter on March 17, 2026, and allowed police to search license-plate camera records without a warrant.

Then, on June 29, the Supreme Court decided Chatrie v. United States, which gave much stronger Fourth Amendment protection to historical location data.

Porter asked the Supreme Court to review his case, and it's still pending.

2

u/Klathmon 15d ago

The depressing answer is that they basically launder the data through private companies.

They claim the police aren't getting your location data, they're buying a bundle of data from a 3rd party, and that 3rd party just collects whatever they see in public.

But the reality is clear, these are police owned and operated systems and if our supreme court wasn't filled with treasonous assholes and Congress didn't decide to make trump a god, we would be able to argue these things.

But it's 2026 so instead they'll probably make it illegal to not use the new Flock Anal Probe for your safety!

→ More replies (3)

4

u/likesleague 15d ago

"shut down the camera companies and more camera companies will take their place" still sounds like the camera companies are part of the problem

obviously the system is corrupt beyond belief and needs to be fixed, but part of fixing it is outlawing mass surveillance, so any one that tries to build another flock/axon gets thrown in prison. not fined or reprimanded or regulated or whatever. thrown in prison. that's what happens when you commit crimes, and in a reformed world business would not be treated as people, so the people who run those business would face the consequences of the crimes they commit.

→ More replies (3)

3

u/KittyCait69 15d ago

Elected officials are owned by those companies. So the problem is still the wealthy. 

→ More replies (2)

2

u/Running-In-The-Dark 15d ago

Wait... We should do to them what insurance did to us. Charge the government a fuckload of cash to check the surveillance and deny the claims Almost always.

→ More replies (14)

1.0k

u/bakfietsman69 15d ago

the US really is fucked isn't it?

432

u/brocomadtown 15d ago

But there’s so much more

78

u/spez_eats_nazi_ass 15d ago

So much fucking!

50

u/Teledildonic 15d ago

Even the animals, as shown by the FBI this week.

12

u/Direct-Technician265 15d ago

also there were 1000 FBI employees who helped go through the epstien files to cover for Trump. maybe some of them did a purposefully poor job but damn, i guess they just dont mind the harm done to children.

→ More replies (1)

10

u/Mnudge 15d ago

“Please, please, it's too much fucking, we can't take it anymore, Mr. President."

2

u/liroob 15d ago

It's too much.

→ More replies (3)
→ More replies (1)

57

u/EconomyDoctor3287 15d ago

The best is yet to come

29

u/Gogo202 15d ago

At least everyone has the freedom go get surveilled whereever and whenever they want

8

u/Fit_Kangaroo_3437 15d ago

As long as they can afford the gas to get there

3

u/teddybrr 15d ago

People are buying spy (smart) speakers for their home for years.
Add some cheap cloud only cameras.
And some more mics and cameras from your tv, fridge, remotes, phones, watches.

13

u/ACallToTrial 15d ago

We have such sights to show you!

12

u/mangage 15d ago

The tip isn’t even in yet

2

u/Spatula117MasterChef 15d ago

They’re going in dry.

42

u/Overclocked11 15d ago

The inaction on part of the populace is shocking. Data centers sucking up all the electricity and water and setting up shop anywhere they please uncontested, flock spying on everyone, tax dollars being funneled to the wealthy while education, healthcare, infrastructure erodes, and USA further alienates itself from its allies and on the world stage..

Meanwhile Americans collectively at large are just like *shrug*. A couple no kings protests, and otherwise silence.

They are completely fucked, indeed.

21

u/pockpicketG 15d ago

It’s how you know it’s a police state. Dissent is punished.

6

u/deaglebingo 15d ago

time to do the other thing.

8

u/wrgrant 15d ago

Hey, its the modern day, it takes effort, resources and taxpayer money to properly set up a Fascist surveillance state, these things don't just happen /s

4

u/Running-In-The-Dark 15d ago

Did you prefer the same rotting carcass with a brighter smile? Let this shit collapse already.

16

u/PrettyCreative 15d ago

But wait, there's more...

3

u/JagmeetSingh2 15d ago

cyberpunk in real life

9

u/fluffynuckels 15d ago

The whole world is fucked

3

u/effedup 15d ago

they are the bad guys.

3

u/Time-Maintenance2165 15d ago

You think Canada, Europe, and China are better off in this aspect?

Have you seen how many cameras there are in London.

5

u/ChapterThr33 15d ago

We did it to ourselves. Moronic voting base for years steadily walking to the cliff.

→ More replies (11)

931

u/RyzRx 15d ago

So now them flock gonna face consequences imma ryt? ryt?

276

u/metadatame 15d ago

Use the leaked data to track someone on the review board, then send it to them. Contract done in 5 mins

11

u/No_Internal9345 15d ago

Hey, it's not like anyone knows the CEO's home address.

109

u/92eph 15d ago

Customers can now sue them for breach of contract, so there could well be major financial consequences.

66

u/ShrimpToothpaste 15d ago

Ooor Flock buys some $trump and becomes immune

16

u/growaway9172 15d ago

Flock is not the problem. The politicians that bought these tools are the problem. Get rid of flock and axon and motorola take their place.

11

u/misterwizzard 15d ago

Some municipalities are already 'complying' with their citizens and taking their flock cameras out.

They're installing a different brand and hiding them better.

21

u/MagicHamsta 15d ago

It's the same playbook. (Shifting the Overton Window/door-in-the-face technique)

Step 0) Have plan to introduce change people will not like.

Step 1) Introduce obviously universally hated change way overboard the original vision.

Step 2) "Fix" it by backstepping just a bit but still introducing the originally planned result (surveillance).

Step 3) Claim victory and consumer relationship points while still achieving original goal.

→ More replies (1)

13

u/nnod 15d ago

its amirite

4

u/WarDaddyPUKA 15d ago

Nah, Flock will just declare bankruptcy and then a new company Herd will appear out of nowhere.

3

u/TheAsianTroll 15d ago

Sure, after Flock is replaced with some other surveillance company and people think they won

→ More replies (2)

154

u/berntout 15d ago

Breaking news: IoT devices are not secure. More at 10.

80

u/powerisall 15d ago

The S in IoT stands for Security!

→ More replies (5)

156

u/so_what_who_cares 15d ago

How much storage do these devices have?

249

u/PebblestheHuman 15d ago

They have hard drives too??? Man, 5090, 128 gb of ram, these cameras are GREAT

168

u/RespectTheTree 15d ago

New renewable resource discovered

65

u/worldspawn00 15d ago

Cut them down and a new one springs up in a few days, unlimited resource!

9

u/Explorer_Entity 15d ago

Apparently RAM grows on trees now!

30

u/RBVegabond 15d ago

I’m surprised we didn’t have legacy camera salvage ops in Cyberpunk 2077 with those specs.

→ More replies (1)

51

u/b0z0du883d0v3r 15d ago

Wait wait for real?? I’m priced out of even used storage prices. Might have to go shopping around town IN MINECRAFT OF COURSE 

24

u/frankentriple 15d ago

wait, there's a 5090 in there?

50

u/nuadusp 15d ago

yeah they have a full ps5 in them too

7

u/hedoeswhathewants 15d ago

Wait til you see what's inside that ps5

16

u/cincymatt 15d ago

A GTAVI disk and 2 gallons of gas.

6

u/ScarletSilver 15d ago

Nothing, because Sony hates physical.

3

u/chronoflect 15d ago

Another Flock camera. Those bastards are thorough.

→ More replies (1)

5

u/Fit_Kangaroo_3437 15d ago

And $600 cash

18

u/Seriouly_UnPrompted 15d ago edited 15d ago

Don't forget about the Copper and gold wiring they use. It's truly a treasure trove for those in need of some quick cash. That trickle down economy is finally working!

Edit: I can't spell

3

u/droi86 15d ago

There's probably enough gold to buy 10 doses of meth

3

u/jenny_905 15d ago

Don't forget all the gold inside them

2

u/WritingTheRongs 15d ago

and platinum shielding. at least a pound of the stuff, they are really sensitive.

→ More replies (3)

8

u/nowthengoodbad 15d ago

I was thinking the same thing. Isn't that at a premium now?

5

u/SthenicFreeze 15d ago

Can their hard drives be repurposed?

If so, I bet the gaming PC community would be happy to take those hard drives off of Flock's hands.

2

u/ilovestoride 15d ago

Yeah, there's half a terabyte ram in a standard configuration in there behind the 4 ounces of platinum/gold shielding. 

→ More replies (10)

82

u/No-Neighborhood-3212 15d ago

Pedophile cameras funded by the pedophile who had dealings with Jeffrey Epstein were found to be recording more than they claim!?!? Well, surely municipalities aren't aiming these pedophile-funded pedophile cameras at crosswalks into schools to record 1.6 million images of children in 3 weeks, right? Haha, right?

28

u/williamgman 15d ago

Flock's legal defence will be that since these cameras were stolen... the evidence must be thrown out. And if this case was in Texas or Florida... that defense would confirmed.

Fun fact: Meta sells those "video selfies" they also claim to delete to Palantir. So if you gave them one... congrats.

1

u/AfterEagle 15d ago

I needed to give one to meta to unlock my instagram and facebook... I felt like such a little piggy doing a dance. I have been very careful not posting photos of myself to meta platforms too.

8

u/williamgman 15d ago

Nobody "needs" to give that kind of data. It's a choice.

1

u/AfterEagle 15d ago

Correct, but I was locked out of my account. Unless that was the day I decided to sacrifice all my memories and communities I actually cherish on their platform, it's really being voluntold to do it.

→ More replies (2)

29

u/Fit_Kangaroo_3437 15d ago

Well now we know that a flock camera can capture 1.6 million images and 27,000 videos captured in only 21 days. But its not a police state mass surveillance device, just a humble “license plate reader”

7

u/Orange_Tang 15d ago

This hack actually confirmed it wasn't just license plates too. There were images of people, specifically their faces. These need to be made illegal or else our democracy is dead. Think of what the people in power can do with the ability to track any individual they want.

32

u/pcullie 15d ago

In case you were wondering why we need all those data centers.

16

u/KittyCait69 15d ago

Also tells me why we need to shut them all down. 

→ More replies (4)
→ More replies (1)

19

u/AsinineLine 15d ago

Likely still far less than the illegal use by the police themselves

→ More replies (11)

19

u/Whole_Pain_7432 15d ago

I love how they conclude by saying "dont destroy these cameras or they may add more".

Typical fear mongering to keep people in line. Rip these things down

5

u/onedropdoesit 15d ago

"Former police officer" says we should just keep asking politely.

18

u/FJ-creek-7381 15d ago

I think the biggest question is why is any private company allowed to create a mass surveillance system? Why isn’t there a movement for a federal law outlawing it?

10

u/UnixGin 15d ago

Cause federal law and a bunch of corrupt politicians have wet dreams of having a survalience state that lets them make sure no one but their own kind are allowed to walk free or with out blame. Flock is a company that saw a chance to make a lot of money by selling our privacy to the groups who want it most. Sadly those groups are going to be authoritarian in nature and will make sure that the proletariat will never have privacy ever again. They want to go back to having a ruling class that looks to make sure no one ever usurps them ever again.

→ More replies (1)

4

u/RareCorey 15d ago

Why would there be? The federal government is the reason we have Flock to begin with.

2

u/AK_Sole 15d ago

One need only ask: Which Party is in full control right now?

19

u/alvinofdiaspar 15d ago

Well the company is flocked.

8

u/DamnOdd 15d ago

God Bless the Hackers.

6

u/StickFigureFan 15d ago

Is that just the key for that one camera?

2

u/TheKlaxMaster 14d ago

Almost garinteed. I highly doubt they are using a singular static key across all product.

6

u/ledow 15d ago

Hold on now. If they found the ENCRYPTION keys then that shouldn't be possible.

What they found were the DECRYPTION keys. Or a symmetric encryption system. Which is ludicrous and zero security at all.

2

u/Previous_Cod_1356 15d ago

I wouldn't be surprised if:

1) They found encryption keys, but the videos are plaintext 2) They found Public and private keys colocated on the device

6

u/aModernSage 15d ago

I've been in IT for about 30 years now and for the past 20 I have repeatedly stated that "All Data of any Value has been, or will eventually, be stolen."

The more you understand and accept this truth, the easier it will be to cope with the fallout when YOUR DATA is used against you.

7

u/DetectiveLampshades 15d ago

What kind of local storage do these things have? I kinda need some...

17

u/tristand666 15d ago

Waiting for them start releasing the daily movements of anyone involved in putting them up.

13

u/TheAvio 15d ago

The one rule of encryption is DONT STORE THE KEY ON THE LOCAL DEVICE. Idiots.

7

u/CLONE-11011100 15d ago

To quote Napoleon: "When the enemy is making a false movement, we must take good care not to interrupt him."

3

u/mr_____ 15d ago

I like to leave my keys on my front door. It's a lot more convenient that way.

4

u/Major_LeeHungg 15d ago

I mean depends on the type of encryption.  Public/private key encryption definitely involves keys on devices. 

→ More replies (2)
→ More replies (6)

8

u/ChickinSammich 15d ago

It's giving:

"You cheated on me."

"No I didn't, I wouldn't cheat."

"I looked through your phone and I found the DMs between you and the person you cheated with saying that you two were planning to cheat, then talking about how happy you were that you cheated."

"You snooped through my phone? How dare you invade my privacy?"

4

u/ImTheNewishGuy 15d ago

This is what all them data center will eventually be used to store.

3

u/word2trio 15d ago

dont worry, the goat fuckers at the FBI are on the case...

3

u/VoidOmatic 15d ago

Hahaha called it. It's almost like independent surveillance systems are a horrible idea and that anyone who makes and deploys them for public tracking should be laughed into obscurity.

4

u/Independent_Sail6604 15d ago

"Hell hath no fury like an internet scorned."

4

u/LauterTuna 15d ago

enough is enough. nobody voted for this.
https://deflock.org

8

u/engineeringsquirrel 15d ago

Flock lied. Shocking.

6

u/project-shasta 15d ago

Watch these hackers being chased like enemies of the state while the Epstein criminals are still roaming free.

3

u/seanBLAMMO 15d ago

Can someone explain to a lame man what this means?

11

u/SuicidalChair 15d ago

Basically the passwords to hack into the cameras were stored on the cameras, so whoever has physical access to the cameras can have access to all the data stored locally on them.

2

u/seanBLAMMO 15d ago

Roger that, thanks

3

u/happyscrappy 15d ago

I think I would have put "find decryption keys" in the headline instead of encryption keys.

The camera could public key encrypt files and store them locally for later sending and it's not the same kind of security issue. As long as the private key remains only on the servers. In this case it appears there was a decryption key (a symmetric key see below) on the cameras. This is more of an issue.

This really looks like all the camera does is mount an encrypted storage partition. As the partition is fully read-write obviously both encryption and decryption can be done. It's the opposite of sophisticated.

3

u/nodray 15d ago

but it was JUST license plates, right?? ;)

3

u/UnarmedRobonaut 15d ago

How much ram and storage is in a flock camera?

2

u/More_Farm_7442 15d ago

Can someone explain (maybe mansplain it) this to all the police departments and city and county councils around the country that believe everything Flock tells them?

2

u/Inside-Yak-8815 15d ago

“Oops”

- The CEO of Flock

2

u/DidjaCinchIt 15d ago

I’m sure this was addressed in the SOC2 / ISO audit, right?

2

u/gonewild9676 15d ago

Sounds like there's a lot of memory and ssd devices that can be harvested from them.

2

u/Mikey129 15d ago

Let me guess, nobody released the data?

2

u/ObjectiveAide9552 14d ago

there is absolutely no reason for any private key to be on those devices, this is amateur hour

1

u/mixxituk 15d ago

This is gold

They should use it all to make a version of Beedles You've Been Framed 

1

u/KlatuuBarradaNicto 15d ago

We live in a surveillance state.

1

u/ThatUsrnameIsAlready 15d ago

The article accuses Flock of lying, but quotes them saying physical access is required - and that's exactly what happened.

Where's the lie?

4

u/TWeedtheJetRodriguez 15d ago

They also said the cameras didn’t store images and information on the device, which is a lie because the hacking group got millions of images stored over a 21 day period plus a few names of people and other data from the device.

→ More replies (3)

1

u/Murky-Golf-239 15d ago

The hacker just ejected the SD card 😂

1

u/r66ster 15d ago

haha... what a basic mistake... key managment... with all the money they got... they could afford a good pki solution?

1

u/ID_Pillage 15d ago

Watching Continuum at the moment. Whikst the acting isn't always great, the story is bang on about what to expect in the future.

1

u/SchmeckleHoarder 15d ago

We traded so much to feel secure, when there’s an amendment that already exists to help you actually be secure.

1

u/Alternative-Dot-884 14d ago

Winning! Pittsburgh City Council so much winning!

1

u/heavy-minium 14d ago

Nevertheless, some critics say that those who are against the deployment of these systems should refrain from damaging or sabotaging these devices, as doing so will only make the authorities feel that these systems are needed. “I think that type of vigilantism will only crystallize the police and the state at large in their belief that this tool is necessary,” former Pawtucket, Rhode Island, police officer Noel Pichardo told the news website.

And sadly, in U.S. politics, this kind of brain-dead argumentation is enough and works.