Yep. Clown show.

> The hackers said they were able to access the Android system on the camera, and found two partitions—sections of its hard-drive, essentially. A few of these were unencrypted, the hackers said, including one called “vendor” and another called “media.” The latter contained an encryption key that unlocked another part, which contained much of the media—think, the videos and stills—the camera took.

> In early 2025, security researcher Jon “GainSec” Gaines reverse engineered a Flock license-plate reader and documented flaws that could be used to gain root-level access. After Gaines disclosed his findings, the company acknowledged the findings but downplayed their severity, writing that the flaws required physical access to the device and that even someone who gained access to a camera “would still not be able to gain access to footage” because images remained on the device only briefly after being transmitted to the cloud.

Source: https://www.404media.co/hackers-stole-flocks-camera-software...

▲

Quinner 3 hours ago | parent | next [-]

How could anyone possibly physically access a device that is just sitting out in public?

	▲	coldpie 2 hours ago \| parent \| next [-]
		YC's finest https://www.ycombinator.com/companies/flock-safety
	▲	Obscurity4340 2 hours ago \| parent \| prev [-]
		Its impossible, I tell ya

▲

scottLobster 3 hours ago | parent | prev | next [-]

TDIL my homebuilt Plex media server is more strongly encrypted than a Flock Camera

▲

bdangubic 3 hours ago | parent [-]

so is my all-passwords.txt file on my desktop

▲

antonvs 2 hours ago | parent [-]

My passwords are in an encrypted block in a text file that can be unencrypted inline in an Emacs session with a keystroke sequence that looks like a cat just chased a mouse across the keyboard, and that's before entering the decryption password. To access it, an attacker would first have to learn Emacs. Pretty sure that's a post-quantum level of security.

▲

mmooss 12 minutes ago | parent | next [-]

They could use an LLM to lookup your HN posts and then to wrangle Emacs. Or just decrypt the text in another application - I doubt Emacs is the only platform for whatever crypto method you use. M-x rot13 ?

▲

dpoloncsak 2 hours ago | parent | prev | next [-]

Obligatory relevant xkcd: https://xkcd.com/538/

	▲	IAmBroom an hour ago \| parent [-]
		It's a forever-fresh reminder about security versus your own government, but for malicious hackers and bots: the physical trip to visit you costs more than half their infrastructure. Encryption matters, even if I would divulge everything long before the wrench appeared.

▲

syed_qutub3 an hour ago | parent | prev [-]

[dead]

▲

reaperducer 41 minutes ago | parent | prev [-]

Runs Android. Has (wireless?) internet access.

It seems that some enterprising Jolly Roger could start running a public mesh net on top of them without Flock even noticing.