‹ BackHN Continuity

Thread

Hackers Got Inside a Flock Camera

586 points · 270 comments · driverdan

  1. killbot5000 · · focus · HN ↗
    This is pure laziness aka “reduced time to market” on the part of Flock.

    It takes time and effort to think through proper secure boot architecture and to implement key management in a way that doesn’t kill developer productivity.

    Their product managers, though, should have realized that setting these up in unsecured public spaces means that their threat model really does include local physical access to everything.

    Using off the shelf hardware and software stacks all but guarantees attackers have tools at their fingertips to exploit said physical access.

    Given all the recent exploits hitting the kernel, there’s a good chance that there exists an exploitable over-the-air vulnerability present in their WiFi/bluetooth stack, too.

    1. teraflop · · focus · HN ↗
      The flip side of this laziness is that now, when my elected representatives tell me "these are just license-plate readers that don't record video", I have evidence to show them that's false.

      If Flock had done a more competent job of securing their system, it would be harder to demonstrate this in a compelling way. To a technically-inclined person, it's obvious from the get-go that somewhere in Flock's pipeline, video is being recorded and archived, and is therefore vulnerable to misuse. But the more they're allowed to keep the implementation proprietary, the easier this is to sweep under the rug.

      1. QuiEgo · · focus · HN ↗
        Don’t worry, your elected representatives won’t be bothered by trivialities such as facts either way.
        1. toomuchtodo · · focus · HN ↗
          They can be recalled and/or replaced, as many have who voted for data centers.

          They fought against datacenters. Now they are running for local offices - <a href="https:&#x2F;&#x2F;www.theguardian.com&#x2F;us-news&#x2F;2026&#x2F;sep&#x2F;15&#x2F;datacenters-local-elections" rel="nofollow">https:&#x2F;&#x2F;www.theguardian.com&#x2F;us-news&#x2F;2026&#x2F;sep&#x2F;15&#x2F;datacenters-... - September 15th, 2026

          <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=49375000">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=49375000 (citations)

          1. astura · · focus · HN ↗
            Only a handful of states have any concept of a recall election.
            1. wand3r · · focus · HN ↗
              Exactly. It helps they also control who can even run for office in any meaningful way. Nobody fights the left harder than Democrats. Good luck finding a representative that is against data centers, flock, Israel, congressional stock bans and pausing and regulating AI, views overwhelming popular with the majority of the actual American public.
              1. wredcoll · · focus · HN ↗
                My experience is that nobody fights the democrats harder than &quot;leftists&quot;.
                1. Refreeze5224 · · focus · HN ↗
                  You are misunderstanding basic political terminology then, if you think it&#x27;s somehow odd that leftists are against Democrats. Democrats and Republicans are both capitalists and liberal in the classical sense, both of which leftists oppose.
                2. dtmooreiv · · focus · HN ↗
                  Funny. In my experience, nobody fights the “leftists” harder than the Democrats. I think the Republicans fight the Democrats harder than anyone else, and aside from the “leftists”, no political group seems to really fight the Republicans.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.