Hackers ripped down a Flock camera. Inside: 1.6 million images, 21 days

Our Take

Credit to git_good_at_git for walking through the 404 Media and Wired reporting on this one, because the findings are exactly the kind of thing Flock Safety would rather you not think too hard about. A single camera, pulled down and cracked open by researchers, had an unencrypted storage partition sitting there with 1.6 million images collected in just three weeks. That's not a hypothetical privacy risk — that's a physical box bolted to a pole in your town, holding a rolling record of who drove where, with security that apparently didn't account for someone just taking the thing apart.

This matters because the entire pitch for ALPR networks rests on the promise that the data is locked down, access-controlled, and only used for serious investigations. An unencrypted partition on hardware deployed in public space blows a hole in that promise. If a camera can be physically removed and its contents extracted by outside researchers, the question isn't just "who has login access to Flock's dashboard" — it's "who else has already had their hands on this data without anyone knowing." That's the kind of failure mode that should worry city councils signing new contracts just as much as it worries privacy advocates.

We keep saying it: these cameras are quietly multiplying in neighborhoods across the country, often approved with little public debate and even less technical scrutiny. Check the map to see what's already watching your area, and if you want to push back on a deployment near you, our take-action page has concrete steps.