It was discovered that at least 60 AI-equipped surveillance cameras were live-streamed and exposed to the internet in an unprotected state
It turns out that the security settings of the surveillance cameras provided by Flock were insufficient, leaving at least 60 cameras open to anyone, some of which were installed in public places, giving full visibility to children playing in parks and other areas.
Flock Exposed Its AI-Powered Cameras to the Internet. We Tracked Ourselves
Children on playground exposed by misconfigured Flock cameras
https://san.com/cc/flock-camera-captured-kids-on-a-playground-a-security-failure-exposed-them-online/
The leak of the camera footage was first reported by techie and YouTuber Ben Jordan, who was able to easily access the camera via a search engine and show that he was able to access the camera's administrative control panel as well as the live footage.
This Flock Camera Leak is like Netflix For Stalkers - YouTube
This allowed anyone to view camera footage, download 30 days of video archives, change settings, view log files, and run diagnostics.
The camera in question was a Flock Condor camera. Condor is an AI-powered crime prevention camera that can track suspicious vehicles and people gathering in closed areas after hours. Flock also markets the camera to police, promoting it as a potential crime deterrent when used in conjunction with license plate tracking cameras.
Regarding the incident, Flock said, 'This was a limited misconfiguration on a small number of devices that has since been fixed.' 'Our systems were not hacked. We adhere to the highest industry standards for protecting customer data, and Flock's cloud storage has never been compromised.'
However, Jordan expressed dissatisfaction with the fact that parks where children gather and suburban walking paths where people live normally are being monitored. 'No username or password was required, and everything from playgrounds to parking lots was instantly displayed. I want people to be aware of this danger,' he said. Jordan also reported that he was able to successfully identify individuals using open-source investigative tools based on the captured footage.
Around the same time, Flock also filed a takedown request against ' Have I Been Flocked, ' a website that allows users to search for information obtained from Flock's license plate tracking cameras.
Flock and Cyble Inc. Weaponize 'Cybercrime' Takedowns to Silence Critics | Have I Been Flocked
https://haveibeenflocked.com/news/cyble-downtime
Flock claims that 'Have I Been Flocked' is misusing its registered trademark. Flock requested Cloudflare to remove the site, and Cloudflare agreed. Have I Been Flocked countered, arguing that it was using publicly available government records, such as audit logs showing how law enforcement agencies use Flock's surveillance network, and that the information was not obtained through improper means. However, the complaint was unsuccessful.
Additionally, a recent investigation has revealed that Flock's upcoming product, Flock Nova, integrates people search data obtained from hacked and compromised databases. While Flock denies this, other investigations have also reportedly found that Nova's code contains references to Social Security and credit card numbers, and the truth of this remains unclear.
Related Posts:
in Security, Posted by log1p_kr