Researcher Micah Lee analyzed filesystem images from a Flock ALPR camera obtained by hackers, revealing the device runs Android 8.1 (end-of-life since 2021) and Linux kernel 3.18.71 from 2017, with no security patches for eight years. The camera also contains hard-coded credentials and publicly known vulnerabilities that could allow remote exploitation.
Background
Flock Safety operates a network of automatic license plate reader cameras widely deployed across the US for law enforcement surveillance. The leaked firmware data came from hackers who collected and reverse-engineered an in-the-field unit.
- Source
- Lobsters
- Published
- Sep 18, 2026 at 05:21 AM
- Score
- 8.0 / 10