{"id":18768,"date":"2026-09-17T10:08:52","date_gmt":"2026-09-17T17:08:52","guid":{"rendered":"https:\/\/jasonsblog.ddns.net\/?p=18768"},"modified":"2026-09-17T10:09:23","modified_gmt":"2026-09-17T17:09:23","slug":"hackers-find-encryption-keys-stored-on-stolen-flock-camera-despite-companys-denials-group-extracts-more-than-27000-clips-1-6-million-images-captured-in-a-span-of-21-days-from-the-device","status":"publish","type":"post","link":"https:\/\/jasonsblog.ddns.net\/index.php\/2026\/09\/17\/hackers-find-encryption-keys-stored-on-stolen-flock-camera-despite-companys-denials-group-extracts-more-than-27000-clips-1-6-million-images-captured-in-a-span-of-21-days-from-the-device\/","title":{"rendered":"Hackers Find Encryption Keys Stored on Stolen Flock Camera Despite Company&#8217;s Denials \u2014 Group Extracts More Than 27,000 Clips, 1.6 Million Images"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Well, just more evidence that Flock can&#8217;t secure their devices, and in a previous report where they got their hands on legally obtained devices, they use an older, no longer supported version of Android (no more security updates) and some special cameras for walking paths were installed and left open to the internet where anyone could see the footage, which zooms in on people and capable of reading phone screens&#8230; On security practices and executive gaslighting, every government entity should cancel their Flock contracts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.tomshardware.com\/tech-industry\/cyber-security\/hackers-find-encryption-key-stored-on-flock-camera-group-extracts-more-than-27-000-clips-1-6-million-images-captured-in-a-span-of-21-days-from-device\" target=\"_blank\" rel=\"noopener\">https:\/\/www.tomshardware.com\/tech-industry\/cyber-security\/hackers-find-encryption-key-stored-on-flock-camera-group-extracts-more-than-27-000-clips-1-6-million-images-captured-in-a-span-of-21-days-from-device<\/a><\/p>\n\n\n<div class=\"wp-block-ub-divider ub_divider ub-divider-orientation-horizontal\" id=\"ub_divider_d4363f82-da57-4b64-b555-e5df0e597b1a\"><div class=\"ub_divider_wrapper\" style=\"position: relative; margin-bottom: 2px; width: 100%; height: 2px; \" data-divider-alignment=\"center\"><div class=\"ub_divider_line\" style=\"border-top: 2px solid #ccc; margin-top: 2px; \"><\/div><\/div><\/div>\n\n\n<p class=\"wp-block-paragraph\">By Jowi Morales<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">Flock claims that images are only briefly stored on its cameras before being forwarded to the company\u2019s servers, but a group of hackers determined that this wasn\u2019t the case.<\/h5>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/cdn.mos.cms.futurecdn.net\/8Ht5WmB2A95EErFNdy8QmN.png\" alt=\"a Flock camera with a street in the background\"\/><figcaption class=\"wp-element-caption\">(Image credit: <a href=\"https:\/\/www.gettyimages.com\/detail\/news-photo\/an-aerial-view-a-flock-camera-is-seen-on-september-14-2026-news-photo\/2295300684\">Getty Images<\/a>)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Flock says that its cameras are protected by on-device encryption, and even though a <a href=\"https:\/\/www.tomshardware.com\/tag\/security\">security<\/a> researcher noted some flaws in its system, the company said that physical access is still required to exploit them and that the images are only briefly retained on the device before they\u2019re forwarded to the cloud. However, <a href=\"https:\/\/www.404media.co\/hackers-stole-flocks-camera-software-revealing-how-the-company-tracks-cars-and-people-2\/\" target=\"_blank\" rel=\"noopener\"><em>404 Media<\/em><\/a> says that a hacking group called stegan0gram found out that this wasn\u2019t the case after they took down a Flock camera positioned over a roadway and analyzed the data stored inside it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">While the hacking group failed to access the most sensitive data stored on the Flock camera, they were still able to access its Android operating system and found two storage partitions, labeled \u201cvendor\u201d and \u201cmedia.\u201d The latter was found to contain an encryption key that unlocked another partition containing all the media files from the camera. <em>404 Media<\/em> said that that particular Flock camera captured about 1.6 million images across 21 days, detecting around 50,200 vehicles and, more concerningly, 11 people. There were also 27,321 video clips saved on the device \u2014 MP4 files with a 1024 x 768 resolution that lasted about a second or two.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Abilities like reading license plates and describing vehicle characteristics like color, make, and model are done on Flock\u2019s servers, but these cameras still retain some edge AI capabilities. This includes detecting people, vehicles, bicycles, and plate-like shapes, which it then crops and sends to the company servers, alongside the original images. Although the software was found to have some facial detection capabilities, the publication said that this was the stock capabilities included in the operating system and wasn\u2019t used by the camera.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This discovery by the hacking group raises another issue with Flock\u2019s system, which is facing a lot of controversies when it comes to privacy and misuse. For example, several police officers have been arrested for using it to <a href=\"https:\/\/www.tomshardware.com\/software\/security-software\/several-police-officers-arrested-for-using-controversial-flock-ai-license-plate-reader-system-to-stalk-romantic-partners-says-report-investigators-have-unearthed-at-least-18-such-cases-in-the-us-over-recent-years\">stalk romantic partners<\/a>, while another incident over a mistyped license plate resulted in the <a href=\"https:\/\/www.tomshardware.com\/tech-industry\/big-tech\/flock-cameras-mistakenly-track-car-reviewer-over-stolen-tags-police-ambush-tester-in-store-parking-lot-and-detain-him-for-an-hour\">unnecessary \u201cambush\u201d of a car reviewer<\/a>. Because of this, some towns and cities have ended their contracts with the company, while other people are taking things into their own hands to <a href=\"https:\/\/www.tomshardware.com\/3d-printing\/3d-printing-enthusiast-creates-flock-sock-camera-blind-slip-on-cover-attaches-to-broom-handle-to-make-it-easy-to-put-on-devices-placed-on-traffic-and-streetlights\">blind the controversial cameras<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nevertheless, some critics say that those who are against the deployment of these systems should refrain from damaging or sabotaging these devices, as doing so will only make the authorities feel that these systems are needed. \u201cI think that type of vigilantism will only crystallize the police and the state at large in their belief that this tool is necessary,\u201d former Pawtucket, Rhode Island, police officer Noel Pichardo told the news website. \u201cThe longer the state continues to ignore the groanings of their constituents who are against this type of surveillance, the more this will happen.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Well, just more evidence that Flock can&#8217;t secure their devices, and in a previous report where they got their hands on legally obtained devices, they use an older, no longer supported version of Android (no more security updates) and some special cameras for walking paths were installed and left open to the internet where anyone [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,7],"tags":[],"class_list":["post-18768","post","type-post","status-publish","format-standard","hentry","category-tech","category-world"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"featured_image_src":null,"author_info":{"display_name":"Jason","author_link":"https:\/\/jasonsblog.ddns.net\/index.php\/author\/jturning\/"},"_links":{"self":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18768","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/comments?post=18768"}],"version-history":[{"count":2,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18768\/revisions"}],"predecessor-version":[{"id":18770,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18768\/revisions\/18770"}],"wp:attachment":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/media?parent=18768"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/categories?post=18768"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/tags?post=18768"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}