Flock's on-camera software classifies people, bicycles and bumper stickers
Hackers pulled a camera off a roadway, recovered the encryption key stored inside it, and handed the files to 404 Media and WIRED. The joint analysis found a person detector inside an automatic license plate reader.
The Product Desk
What happened
- Hackers ripped a Flock camera down from above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and WIRED.
- The joint analysis of the recovered data found that software running on the device explicitly detects people, along with vehicles, license plates and bicycles.
- The hackers recovered an encryption key stored on the camera itself, and it unlocked videos of thousands of vehicle detections.
- Multiple people have been arrested around the country for allegedly tampering with Flock cameras, and one police department built a fake 3D-printed camera case to bait vandals.
Why it matters
- Who has to decide decision An agency that has told a council its cameras read plates now has to either produce the on-device class list in writing or change the sentence it uses in public.
- Who's exposed exposure Every deployed unit is the same hardware, so physical custody of one camera is enough to reach what that camera stored, and the risk scales with the number of poles, not the strength of the network.
- What it sets up precedent With the hackers intending to publish their method, a second dump becomes a planning assumption for any department running these cameras.
- What it limits constraint Because part of the storage stayed locked, an outside review still cannot establish what the camera keeps about the people it detects. The locked storage caps what any oversight report can conclude.
Next story · Product · Oct 5
Texas cities set their own price on police Flock records, up to $2.3 millionConfirmed2 publishers
A computer-vision pipeline that outputs a person box is a different product from one that outputs a plate string, and a retention policy sits on top of the classifier without changing what the classifier can name. The recovered software also cut out bumper stickers and other graphics, including an American flag patch on a motorcyclist's saddlebag [10].
Volume is the part that makes an audit hard. Several weeks of logs from the single unit account for more than a million images [5], and the device can produce dozens of images of one passing vehicle [9]. Take thirty frames per pass and a million images works out to roughly 33,000 vehicle passes [14]. Read "several weeks" as four and the same total is more than 35,000 images written a day [15], from one camera on one road.
Flock has described the system as protected by on-device encryption [7]. On-device encryption protects against a remote attacker, not against someone who takes the camera down. Custody of the hardware is a separate control, and here the files went from the hackers to 404 Media and to the transparency nonprofit Distributed Denial of Secrets, which passed them to WIRED for a joint analysis [8]. Flock's answer to the findings is not in the account of the breach.
For whoever has to speak at the next public meeting, the answers are checkable in writing. First, the list of object classes the on-device model outputs, which is a build artefact. Second, images written per camera per day, which the vendor can read from the same logs the hackers read. Third, where the decryption key sits, and whether taking a camera down takes the key with it.
Answers one and three are the ones that decide whether a council-meeting sentence about plates matches the device on the pole. A policy answer to a capability question still passes the exposure to the agency, because the agency is the party named in the minutes and in the public records request. Some towns have already announced they will stop using Flock's cameras altogether [12].
What to watch
- Whether Flock publishes the on-device object class list or responds to the person-detection finding.
- Whether the hackers' published method produces a second camera dump, and in which town.
- Whether a council cancels or pauses a Flock contract and cites the classification finding in the minutes.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence62
- Adoption55
- Hype gap+20
- Incentives60
- Confidence64
Perspective Coverage
3 publishers- Builder
- Builder 40%
- Operator
- Operator 45%
- Investor
- Investor 15%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and WIRED.
- [2]
The hackers were able to copy the camera's storage and recover an encryption key stored on the device, which unlocked videos of thousands of vehicle detections.
- [3]
Much of the automatic license plate reader's most sensitive storage remained encrypted and inaccessible to the hackers.
- [4]
The joint analysis of the recovered data shows that software running on the device explicitly detects people as well as vehicles, license plates, and bicycles.
- [5]
According to several weeks of recovered logs, the camera generated more than a million images.
- [6]
The hackers say they are also publishing details on how they managed to obtain the software, in the hopes that other people may copy them.
- [7]
Flock has described its system as protected by on-device encryption.
- [8]
The hackers shared the material with 404 Media and the transparency nonprofit Distributed Denial of Secrets, which shared the data with WIRED; 404 Media and WIRED then analyzed the files as part of a joint investigation.
- [9]
The camera can produce dozens of images of a single passing vehicle.
- [10]
The camera's computer-vision software also sometimes isolated bumper stickers and other graphics, including, in one case, an American flag patch on a motorcyclist's saddlebag.
- [11]
Across the country, multiple people have been arrested for allegedly tampering with or otherwise sabotaging Flock's cameras.
- [12]
Some towns have announced that they are going to stop using Flock's cameras altogether.
- [13]
In one case, a police department made a fake, 3D-printed Flock camera case in order to bait potential vandals.
- [14]
At thirty images per vehicle pass, more than a million images corresponds to roughly 33,000 vehicle passes.
- [15]
If the recovered logs cover four weeks, more than a million images is more than about 35,000 images written per day by the single camera.
Sources
3 independent publishers whose own reporting we read for this story.
- arstechnica.comHackers reveal how Flock cameras really track cars and people
1 article · September 17, 2026
- mashable.comHackers dismantle Flock camera to see what makes it tick | Mashable
1 article · September 16, 2026
- thenextweb.comHackers extracted a Flock camera’s software and key, 404 Media reports
1 article · September 17, 2026
Topics and entities
Topics
- Police surveillance
- Automatic License Plate Readers
- Encryption at rest
- Hardware reverse engineering
Entities
- Distributed Denial of Secrets
- Android
- Flock Safety
- 404 Media
- Wired
- Raja Krishnamoorthi