Button Presses to Wireless RCE: Shell on Flock Safety’s License Plate Cameras Over Wi-Fi

gainsec.com

Button Presses to Wireless RCE: Shell on Flock Safety’s License Plate Cameras Over Wi-Fi

gainsec.com

hereforawhile@programming.dev to

deflock.me@sh.itjust.works · 8 months ago

Button Presses to Wireless RCE: Shell on Flock Safety’s License Plate Cameras Over Wi-Fi

gainsec.com

A combination of reused default passwords, hidden triggers, and completely unauthenticated APIs results in reliable wireless RCE, data disclosure, and device control in the field on Flock Safety…

You must log in or # to comment.

Chat

deflock.me@sh.itjust.works

DeFlock@sh.itjust.works

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !DeFlock@sh.itjust.works

Automated License Plate Readers (ALPRs) are AI-powered cameras that capture and analyze images of all passing vehicles, storing details like your car’s location, date, and time. They also capture your car’s make, model, color, and identifying features such as dents, roof racks, and bumper stickers, often turning these into searchable data points. These cameras collect data on millions of vehicles—regardless of whether the driver is suspected of a crime. While these systems can be useful for tracking stolen cars or wanted individuals, they are mostly used to track the movements of innocent people.

Learn more at deflock.me

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

8 users / day
85 users / week
295 users / month
902 users / 6 months
2 local subscribers
248 subscribers
104 Posts
146 Comments
Modlog