I am standing on the corner of Harris Road and Young Street outside of the Crossroads Business Park in Bakersfield, California, looking up at a Flock surveillance camera bolted high above a traffic signal. On my phone, I am watching myself in real time as the camera records and livestreams me—without any password or login—to the open internet. I wander into the intersection, stare at the camera and wave. On the livestream, I can see myself clearly. Hundreds of miles away, my colleagues are remotely watching me too through the exposed feed.
Flock left livestreams and administrator control panels for at least 60 of its AI-enabled Condor cameras around the country exposed to the open internet, where anyone could watch them, download 30 days worth of video archive, and change settings, see log files, and run diagnostics.
Archive: http://archive.today/IWMKe
Dude, he just released another one where they accessed dozens of real, currently in use cameras. They didn’t even “hack” them, they just used a search engine to find publicly exposed cameras, opened their unsecured internal web panel, and could download and view any footage over the past 31 days, including from the new face tracking cameras that zoom in and pan on people’s unsuspecting faces as they walk by.
Truly wild.
Reading flock their own response about their security and recording it via one of their active and installed cameras was fucking great. I mean, it was nightmare shit, but at a certain point, you have to appreciate the irony.
My own mother (pensioner) sent me the video asking “is this real?” But could only follow the first minutes of it.
I lol’d at that part and had to explain the brilliance of it. Then she lol’d, too.
It’s nice to share in the shadows humor, as a family, while we feel our liberties erode.
All that and they can’t catch real criminals, gotta harass “illegals” and law abiding citizens for speeding a little.
Yeah he is working with 404 media