Reverse-Engineering Flock Cameras
Researchers reverse-engineered a captured Flock camera, finding person detection and an encryption key left unencrypted.
Bruce Schneier highlighted a joint analysis of a captured Flock automatic license-plate-reader camera. On-device software detects people, vehicles, license plates, and bicycles, can capture dozens of images of one vehicle, and produced more than a million images over several weeks of recovered logs. It also sometimes isolated bumper stickers and other graphics. Much of the sensitive storage stayed encrypted, but researchers found the key for an encrypted partition sitting on an unencrypted partition.
- Recovered Flock camera software detects people as well as vehicles, plates, and bicycles.
- Logs covering several weeks recorded more than one million images.
- An unencrypted partition contained the key for an encrypted partition.
- The most sensitive storage remained encrypted and inaccessible to the researchers.
- Vendors
- Flock Safety
- Products
- Flock ALPR
- Organizations
- Flock Safety
From the original article
1 min read at schneier.comHackers captured a Flock camera and got a look (alternate link) at the software: While much of the automatic license plate reader’s (ALPR) most sensitive storage remained encrypted and inaccessible, the joint analysis of the recovered data shows that software running on the device explicitly detects people as well as vehicles, license plates, and bicycles.
By Bruce Schneier · schneier.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.