I am standing on the corner of Harris Road and Young Street outside of the Crossroads Business Park in Bakersfield, California, looking up at a Flock surveillance camera bolted high above a traffic signal. On my phone, I am watching myself in real time as the camera records and livestreams me\u2014without any password or login\u2014to the open internet. I wander into the intersection, stare at the camera and wave. On the livestream, I can see myself clearly. Hundreds of miles away, my colleagues are remotely watching me too through the exposed feed.Flock left livestreams and administrator control panels for at least 60 of its AI-enabled Condor cameras around the country exposed to the open internet, where anyone could watch them, download 30 days worth of video archive, and change settings, see log files, and run diagnostics.\u00a0Unlike many of Flock\u2019s cameras, which are designed to capture license plates as people drive by, Flock\u2019s Condor cameras are pan-tilt-zoom (PTZ) cameras designed to record and track people, not vehicles. Condor cameras can be set to automatically zoom in on people\u2019s faces as they walk through a parking lot, down a public street, or play on a playground, or they can be controlled manually, according to marketing material on Flock\u2019s website. We watched Condor cameras zoom in on a woman walking her dog on a bike path in suburban Atlanta; a camera followed a man walking through a Macy\u2019s parking lot in Bakersfield; surveil children swinging on a swingset at a playground; and film high-res video of people sitting at a stoplight in traffic. In one case, we were able to watch a man rollerblade down Brookhaven, Georgia\u2019s Peachtree Creek Greenway bike path. The Flock camera zoomed in on him and tracked him as he rolled past. Minutes later, he showed up on another exposed camera livestream further down the bike path. The camera\u2019s resolution was good enough that we were able to see that, when he stopped beneath one of the cameras, he was watching rollerblading videos on his phone.<\/p>\n
0:00<\/p>\n
\/0:16<\/p>\n
1\u00d7<\/p>\n
The exposure was initially discovered by YouTuber and technologist Benn Jordan and was shared with security researcher Jon \u201cGainSec\u201d Gaines, who recently found numerous vulnerabilities in several other models of Flock\u2019s automated license plate reader (ALPR) cameras. They shared the details of what they found\u00a0 with me, and I verified many of the details seen in the exposed portals by driving to Bakersfield to walk in front of two cameras there while I watched myself on the livestream. I also pulled Flock\u2019s contracts with cities for Condor cameras, pulled details from company presentations about the technology, and geolocated a handful of the cameras to cities and towns across the United States. Jordan also filmed himself in front of several of the cameras on the Peachtree Creek Greenway bike path. Jordan said he and Gaines discovered many of the exposed cameras with Shodan, an internet of things search engine that researchers regularly use to identify improperly secured devices.\u00a0After finding links to the feed, \u201cimmediately, we were just without any username, without any password, we were just seeing everything from playgrounds to parking lots with people, Christmas shopping and unloading their stuff into cars,\u201d Jordan told me in an interview. \u201cI think it was like the first time that I actually got like immediately scared \u2026 I think the one that affected me most was as playground. You could see unattended kids, and that\u2019s something I want people to know about so they can understand how dangerous this is.\u201d In a YouTube video about his research, Jordan said he was able to use footage pulled from the exposed feed to identify specific people using open source investigation tools in order to show how trivially an exposure like this could be abused.Benn JordanLast year, Flock introduced AI features to Condor cameras that automatically zoom in on people as they walk by. In Flock\u2019s announcement of this feature, it explained that this technology \u201czooms in on a suspect exiting one car, stealing an item from another, and returning to his vehicle. Every detail is captured, providing invaluable evidence for investigators.\u201d On several of the exposed feeds, we saw Flock cameras repeatedly zooming in on and tracking random people as they walked by. The cameras can be controlled by AI or manually.\u00a0\u00a0The exposure highlights the fact that Flock is not just surveilling cars\u2014it is surveilling people, and in some cases it is doing so in an insecure way, and highlight the types of places that its Condor cameras are being deployed. Condor cameras are part of Flock\u2019s ever-expanding quest to \u201cprevent crime,\u201d and are sometimes integrated with its license plate cameras, its gunshot detection microphones, and its automated camera drones.Cooper Quintin, senior staff technologist at the Electronic Frontier Foundation, told me the behavior he saw in videos we shared with him \u201cshows that Flock’s ambitions go far beyond license-plate surveillance. They want to be a nation-wide panopticon, watching everyone all the time. Flock’s goal isn’t to catch stolen cars, their goal is to have total surveillance of everyone all the time.”<\/p>\n
0:00<\/p>\n
\/1:03<\/p>\n
1\u00d7<\/p>\n
The cameras were left not just livestreaming to the internet for anyone who could find the link, but in many cases their administrative portals were left open with no login credentials required whatsoever. On this portal, some camera settings could be changed, diagnostics could be run, and text logs of what the camera was doing were being streamed, too. Thirty days of the camera\u2019s archive was left available for anyone to watch or download from any of the cameras that we found. We were not able to geolocate every camera that was left unprotected, but we found cameras at a New York City Department of Transportation parking lot, on a street corner in suburban New Orleans, in random cul-de-sacs, in a Lowes parking lot, in the parking lot of a skatepark, at a pool, outside a parking garage, at an apartment complex, outside a church, on a bike path, and at various street intersections around the country.\u00a0Quintin told me the situation reminds him of ALPR cameras from another company that were left unprotected a decade ago.\u00a0\u201cThis is not the first time we have seen ALPRs exposed on the public internet, and it won’t be the last. Law enforcement agencies around the country have been all too eager to adopt mass surveillance technologies, but sometimes they have put little effort into ensuring the systems are secure and the sensitive data they collect on everyday people is protected,\u201d Quintin said. \u201cLaw enforcement should not collect information they can\u2019t protect. Surveillance technology without adequate security measures puts everyone\u2019s safety at risk.\u201dIt was not always clear which business or agency owned specific cameras that were left exposed, or what type of misconfiguration led to the exposure, though I was able to find a $348,000 Flock contract for Brookhaven, Georgia, which manages the Peachtree Creek Greenway, and includes 64 Condor cameras.\u00a0“This was a limited misconfiguration on a very small number of devices, and it has since been remedied,” a Flock spokesperson told 404 Media. It did not answer questions about what caused the misconfiguration or how many devices ultimately were affected.\ud83d\udca1Do you know anything else about surveillance? I would love to hear from you. Using a non-work device, you can message me securely on Signal at jason.404. Otherwise, send me an email at jason@404media.co.In response to Jordan and Gaines\u2019 earlier research on vulnerabilities in other Flock cameras, Flock CEO Garrett Langley said in a LinkedIn post that \u201cThe Flock system has not been hacked. We secure customer data to the highest standard of industry requirements, including strict industry standard encryption. Flock\u2019s cloud storage has never been compromised.\u201d The exposure of these video feeds is not a hack of Flock\u2019s system, but demonstrates a major misconfiguration of at least some cameras. It also highlights a major misconfiguration in its security that persisted for at least days.\u201cWhen I was making my last video [about Flock ALPR vulnerabilities], it was almost like a catchphrase where I’d say like, \u2018I don’t see how it could get any worse.\u2019 And then something would happen where you’d be like, wow, they pulled it off. They made it worse,\u201d Jordan said. \u201cAnd then this is like the ultimate one. Because this is completely unrelated [to my earlier research] and I don\u2019t really know how it could be any worse to be honest.\u201dIn a 2023 video webinar introducing the Condor platform to police, Flock executives said the cameras are meant to be paired with their ALPR cameras and are designed to feed video to FlockOS, a police panel that allows cops to hop from camera to camera in real time across a mapped-out view of their city. In Bakersfield, which has 382 Flock cameras according to a transparency report, one of the Condor cameras we saw was located next to a mall that had at least two Flock ALPR cameras stationed at the entrances to the mall parking lot.Kevin Cox, a Flock consultant who used to work for the Grand Prairie, Texas Police Department, said in the webinar that he built an \u201cintel center\u201d with a high \u201cdensity\u201d of Flock cameras in that city. \u201cI am passionate about this because I\u2019ve lived it. The background behind video [Condor] with LPR is rich with arrests,\u201d he said. \u201cThat rich experience of seeing what happened kind of brings it alive to [judges]. So video combined with the LPR evidence of placing a vehicle at the scene or nearby is an incredibly game changing experience into the prosecutorial chain of events.\u201d\u00a0\u201cYou can look down a tremendous distance with our cameras, to the next intersection and the next intersection,\u201d he said. \u201cThe camera will identify people, what they\u2019re wearing, and cars up to a half a mile away. It\u2019s that good.\u201d<\/p>\n
0:00<\/p>\n
\/0:08<\/p>\n
1\u00d7<\/p>\n
Condor cameras in a Flock demo showing off its AI tracking features
\n In the webinar Cox pulled up a multiview panel of a series of cameras and took control of them, dragging, panning, and zooming on cameras and hopping between multiple cameras in real time. Cox suggested that police officers could either use Flock\u2019s cameras to pinpoint a person at a place and time and then use it to request \u201ccell tower dumps\u201d from wireless companies, or could use cell GPS data to then go into the Flock system to track a person as they moved throughout a city. \u201cIf you can place that person\u2019s cell phone and then the Condor video and Falcon LPR evidence, it would be next to impossible to beat that in court,\u201d he said, adding that some towns may just want to have always-on, always recording video of certain intersections or town squares. \u201cThere\u2019s endless endless uses to what we can do with these things.\u201dOn the webinar, Seth Cimino, who was a police officer at the Citrus Heights, California police department at the time but now works directly for Flock, told participants that officers in his city enjoyed using the cameras to zoom in on crimes.\u00a0\u201cThere is an eagerness amongst our staff that are logged in that have their own Flock accounts to be able to monitor our ALPR and pan tilt zoom Condor cameras throughout the community, to a point where sometimes our officers are beating dispatch with the information,\u201d he said. \u201cIf there\u2019s an incident that occurs at a specific intersection or a short distance away where our Condor cameras can zoom in on that area, it allows for real time overwatch [\u2026] as I sit here right now with you\u2014how cool is this? We just had a Flock alert here in the city. I mean, it just popped up on my screen!\u201dSamantha Cole contributed reporting.<\/p>\n","protected":false},"excerpt":{"rendered":"