the big irony, of course, is that i'm much more comfortable with China surveilling me than the US, since the latter can throw me in jail, seize my assets, and ruin my family's life, while the former cannot.
> it amazes me how often I see this kind of anti-democratic institition sentiment.
leeoniya didn't say anything about democracy. The practical reality is that regardless of what forms of government are involved, whichever government has the ability to arrest you is the government which is the greatest threat in your day-to-day life.
Lack of rule of law by various states, counties, cities, fraud by their councils, and violent offenders are the direct cause of Flocks adoption.
Blues create the chaos to justify the surveillance so they can selectively enforce who gets charged. They revoke self protection laws and tell people to wait for the police they defunded. They rarely target criminals, overwhelmingly political dissidents.
jesus fuck the gloves really came off in the past few years. noone even cares to hide it anymore.
i could almost admire the transparency of these people, the way they're apparently okay accepting collateral damage of their schemes, up to the complete destruction of the fabric of society... as long as there's money to be made.
I've never heard about this Tan guy before, I don't keep up with politics/corporatism anymore, but is that possibly sarcasm? It sure feels like it to me. But again, I don't know this person, but if I came across that by itself I feel like it's pretty clearly sarcastic, as Twitter tends to be. Maybe I'm just tone deaf myself to how tone deaf others could be?
He probably being sincere. If you're logged in (or use something like xcancel), you can see the full thread, where he starts off with
> Flock Safety currently solves 700,000 reported cases of crime per year, which is about 10% of reported crime nationwide
> And they're just getting started
His profile also says:
>President & CEO @ycombinator —Founder @Initialized—designer/engineer who helps founders—SF Dem accelerating the boom loop—haters not allowed in my sauna
Generally speaking, today, surveillance capitalism is the foundation of both our political culture, economy, and the tech industry that backs them.
In polite circles we call surveillance "user telemetry" and the like. It's not just Palantir and FLock; where does Meta's money come from...? Google's for that matter...?
flock is the most heinous reflection of the ills of our current socioeconomic structure. absolutely nobody should be okay with mass surveillance, much less mass surveillance enabled by a private company.
If you find yourself sympathetic to Flock, you should ask yourself: do we have a right to any kind of privacy in a public space or is public space by definition a denial of any sort of privacy? This is the inherent premise in this technology that's problematic.
In Japan, for instance, there are very strict laws about broadcasting people's faces in public because there is a cultural assumption that one deserves anonymity as a form of privacy, regardless of the public visibility of their person.
I think I'd prefer to live in a place where I have some sort of recourse over when and how I'm recorded. Something more than "avoid that public intersection if you don't like it."
Flock is literally funded by the people behind this site. The people behind this site are the 'most heinous reflection of the ills of our current socioeconomic structure'.
> The financing was led by Andreessen Horowitz, with backing from Greenoaks Capital, Bedrock Capital. Meritech Capital, Matrix Partners, Sands Capital, Founders Fund, Kleiner Perkins, Tiger Global, and Y Combinator also participated.
We didn't sleep walk into it, we ran into it because of poor basic civics education and a cynical media cycle that biases towards making everyone terrified of crime.
The latter is driven by two forces - a profit motive (sensational, gruesome stories sell), and a political motive (media carrying water for far-right-wing candidates loves to keep you scared on this issue).
The optimal level of crime or unsolved crime in a society is not zero, but a lot of people will look at you like you've got three eyes if you tell them that. Talk to them for another ten minutes, and most of them will see why what you say makes sense, but that's not a conversation their television will ever have with them.
>This is clear fascism, but people are too afraid to admit. We have sleep walked into it.
>With such surveillance, administration can [...]
Have you missed all the cries of "fascism" back in 2016/2017? The problem isn't "people are too afraid to admit". It's that "wolf!" was cried too many times and people tuned it out. Ironically this invocation "fascism" is arguably also crying wolf. From wikipedia:
>Fascism is characterized by support for a dictatorial leader, centralized autocracy, militarism, forcible suppression of opposition, belief in a natural social hierarchy, subordination of individual interests for the perceived interest of the nation or race, and strong regimentation of society and the economy.
Is an ANPR network terrible for privacy? Yes, obviously. Is it authoritarian? Maybe[1]. Is everything vaguely authoritarian "fascism"? No.
[1] Consider cell phones. They're terrible for privacy, but nobody would seriously consider them "authoritarian".
>Fascism is characterized by support for a dictatorial leader, centralized autocracy, militarism, forcible suppression of opposition, belief in a natural social hierarchy, subordination of individual interests for the perceived interest of the nation or race, and strong regimentation of society and the economy.
These things don't just happen overnight. It's not crying wolf when you see the wolf on the horizon running towards you.
>These things don't just happen overnight. It's not crying wolf when you see the wolf on the horizon running towards you.
So were vaccine mandates and passports "fascism" as well, even though they melted away after the pandemic ended, contrary to some who thought it was going to be part of some new world order?
Children could go missing thanks to Flock default settings. HN would tell me to never attribute to malice ... but there may be criminal negligence.
To cover their butts I strongly suggest Flock implement a default "grading system" that will show a city in a banner at the top of their management and monitoring system that based on their camera and network configuration they get an A+ to F-. If the grade is below a C then it must be impossible to get rid of the banner and it must be blinking red. The grading system must be both free, mandatory and a part of the core management code. This assumes Flock will have the willpower to say no when a city demands removal of the flashing red banner. Instead up-sell professional services to secure their mess. I would like to see the NCC Group review their security and future grading system.
I always found Hanlon's Razor a bit too optimistic in tone. I prefer it restated in the form of Clarke's third law:
"Sufficiently advanced stupidity is indistinguishable from malice."
I think so, but it is a loosely held opinion at this point. Fundamentally, I think it is a huge, asymmetric power grab by Flock and local police to install these systems. It only takes one officer looking up their local politician and finding them doing something that could even look like a bad deed (or to fake it in the era of AI videogen...) to enable blackmail and personal/professional gain.
If they're going to exist, it may be better for that to be spread among the public than to be left in the hands of the few.
At first I thought you were defending flock. Seems clear the cameras make it harder to commit crimes and easier to go after the offenders, despite all the side effects most people are upset about here.
For what? Under current jurisprudence collecting license plates images isn't illegal, because there's no expectation of privacy in public. They could post the information online if they wanted to and they'd be in the clear. It's fine to object to ANPR networks on the basis of "mass surveillance" or whatever, but screaming for people to be arrested without legal basis, just because you don't like what they're doing is childish and counterproductive to the conversation.
You're probably being facetious, but aiding criminals isn't illegal unless you're knowingly doing it. Signal is known to be used by criminals, and on top their app is specifically designed to frustrate law enforcement, yet they stayed clear of lawsuits.
Rather just see them get Flocked honestly. Seems like the type of tech a child would dream up only to realize when it's too late that it's dystopian, creepy, and a detriment to society.
By top brass do you mean the people behind this website?
> The financing was led by Andreessen Horowitz, with backing from Greenoaks Capital, Bedrock Capital. Meritech Capital, Matrix Partners, Sands Capital, Founders Fund, Kleiner Perkins, Tiger Global, and Y Combinator also participated.
I would love to watch a shorter version of this video that just discussed the deltas between the status quo and Flock, rather than breathlessly reporting the implications of cameras as if they were distinctive to Flock. He'll spend 30 seconds talking about how you can see every activity and every person on the camera --- yeah, that's how cameras work. There are thousands of public IP cameras on the Internet, aimed at intersections, public streets, houses, playgrounds, schools; most of them operated that way deliberately.
There are Flock-specific bad things happening here, but you have to dig through the video to get to them, and they're not intuitive. The new Flock "Condor" cameras are apparently auto-PTZ, meaning that when they detect motion, they zoom in on it. That's new! I want to hear more about that, and less about "I had tears in my eyes watching this camera footage of a children's playground", which is something you could have done last week or last year or last decade, or about a mental health police wellness detention somewhere where all the cops were already wearing FOIA-able body cams.
If open Flock cameras gave you the Flock search bar, that would be the end of the world. And the possibility that could happen is a good reason to push back on Flock. But that's not what happened here.
In my experience, people respond much more strongly to naming a specific company or person. Clearer plan of action than a resigned “This tech is old news.”
If your takeaway from that comment is that ‘tptacek thinks Flock’s tech is old news and he’s resigned about it, I think you’re going to be in for a treat.
Is the plan of action "eliminate all public IP cameras"? That's coherent, I'd get it, but that doesn't seem to be what he's saying at all. He used a Google search to find exposed Flock admin consoles (interesting! say more about that!) but he could just as easily have just searched "open IP cameras"; there's sites that do nothing but index those.
You could kinda already do this with all kinds of security cameras. There are only so many people who are computer proficient, and that number is lower than the number of camera installers.
There have been cases of people getting into baby monitors and yelling at the baby.
But as a tech company, this is extremely irresponsible
BTW, Benn Jordan is also known as The Flashbulb, an ambient legend
i guess that while it is alarming that these feeds were "unsecured" I'm just as concerned that they exist at all. Folks worry about it getting into the "wrong hands" but from my POV it was put up by the wrong hands.
While both are a problem I am far more concerned about the power this gives our, increasingly authoritarian, government than about individual stalkers/creeps.
Interesting, but nothing new. Shodan users have known about clueless IP camera owners that leave their cameras on the public internet for years. This is a little more interesting because it's from a well-funded startup rather than independently owned Chinese IP cameras.
It's 2025. The ISP gateway I got comes with more default security than these cameras. The barrier to entry on security is lower than it ever has been in history. Whoever let this past the QC phase is an idiot.
It's all a matter of perspective. I'm sure to some executive somewhere, the person/s who approved all of this is seen as heroes, as they shaved of 0.7% or whatever from the costs of the development, and therefore made shareholders more money.
Until there are laws in place that makes people actually responsible for creating these situations, it'll continue, as for a company, profits goes above all.
It probably makes close to no difference in development or production, but it does significantly cut down on the number of tech support calls from people who can't figure out how to set the password, or immediately forget the password they set. If it has no password then you can just plug it in an have it work. Sure it's totally insecure, but its also trivial to install.
Generating a password that is unique to the device and print it with a sticky label on the underside of the device isn't exactly rocket-science, and ISPs somehow figured this out at least two decades ago, which was the first time I came across that myself. Surely whoever developed this IP-camera has an engineering department who've also seen something like this in the wild before?
Yep, but if you do that you need to staff a help line with people who can say "turn the box over and look at the sticker, no the sticker with the numbers on it, it's white with black letters and says PASSWORD in a big font, no the password isn't literally PASSWORD, it's the line below that with the strange letters, yes, to type that one you need to hold the shift key and press 3..."
Remember that ISPs often have people who come to your home to hook stuff up.
Yes, which costs money, which is exactly my original point. It's not because "Oh I'm so hassled because customers are dumb", it's "No, hiring people to do support would cost us money, which we don't want".
> Remember that ISPs often have people who come to your home to hook stuff up.
I can't recall a single time a technician wasn't required to come to my flat/house to install a new router. I'm based in Spain, maybe it's different elsewhere, but I think it's pretty much a requirement, you can't setup the WAN endpoint or ISP router yourself.
Last time I moved I opted for the "self install" kit, which was fine because I'm technical and the previous owners already had the service so there was nothing that needed to be done except hooking up the pre-configured modem. Saved me $200 in truck roll fees.
Interesting stuff, I've asked if I could do the installation myself every single time I've moved to a new , and never has the ISP (three different ones) said yes. There isn't any installation fee place(probably by law?) so that isn't an issue here, just a hassle to coordinate having to meet between 12:00 and 18:00 or some super wide range of time for them to come and install it.
So you're trying to justify this type of rampant negligence in tech? Do you think justifying such malfeasance makes up for fact we literally have surveillance networks that bad actors can tap to do really awful things?
Anyone that cares about their perspective has missed the point.
I don't think the person you're replying to is justifying it, but saying there's no laws to prevent the abuse.
Personally I think tech CEOs should be put in stocks in the town square on the regular but they're protected from any form of repercussions besides extreme cases of fraud. Even then, they're only held accountable when the money people have their money effected, not when normal people are bulldozed by the abuse.
If I was 10 years younger, I might agree that they aren't justifying it, but I have enough experience with passive speech to just not let it pass anymore.
Regarding remedy, we really need laws on this stuff yesterday. The problem is that we have to gut first amendment freedoms for some of this stuff, which wont go anywhere because there will always be too much overreach with today's representatives.
You should probably read the comment you're replying to before replying
> Until there are laws in place that makes people actually responsible for creating these situations, it'll continue, as for a company, profits goes above all.
They obviously meant that we ought to be holding these people responsible.
> You should probably read the comment you're replying to before replying
Congrats you spotted the thing we agreed on between comments. If you fail to see the agreement through parity of the part that was echoed, idk what to tell you. Education system is failing everyone in it these days.
> So you're trying to justify this type of rampant negligence in tech?
Don't know how you reached that conclusion, I obviously isn't trying to justify anything. But maybe something I said was unclear? What exactly gave you the idea I'm trying to justify anything of this?
Why stick your neck out, swim upstream to do a good job that will not be recognised as such?
Fix the corporate incentives and engineers will be able to do the right thing without suffering. Not everyone gets the luxury of a secure career doing morally ok things.
Counterpoint: whoever let this past the QC phase got paid very generously, and everyone involved is ignoring the laws that already exist to combat this, because law enforcement, too, gets paid generously. And the laws that forbid that aren't getting enforced because the police doesn't police the police, and dad has made it perfectly clear that flagrantly ignoring the law is fine if you're in power.
What makes you think QA/QC is paid handsomely? It's a bloody cost center mate, and you can't measure "damage prevented" consistently, or at least in a way most high-risk tolerating exec types won't immediately undermine.
remember when people first started experiencing TSA and there were massive protests at how obscene and violating it all was, then uncovering how useless they were as fake security theater
and they were going to get it all shut down
TWENTY-FIVE YEARS NOW
so good luck getting rid of flock where people don't even know it's happening
Not sure if people realize that cellphone locations, several layers in the firmware and software, can be had without warrant by anyone YEARS LATER
Moreover, people are pissed off when someone's angry because of TSA bs. "Don't be an asshole, they're just doing their jobs". "Oh someone's first week on this planet".
Oh no. Someone can view cctv data and delete it. Always blown out of proportion. The likelihood of someone a) committing a crime or otherwise b) knowing there was this specific brand of camera software being run on a camera in that area c) knowing how to access these portals
A useful rule of thumb is that any video that is using music to convince you of something is generally bullshit in the first place.
Am I right to understand that all those cams are pointed to the street / public places? I am not aware that there is any expectation of privacy, legally or otherwise, when you walk down the street. Sure, it is lame that those camera are unprotected, and shows how amateurish most of those IoT companies are. But how is that different from the thousands of live cams over youtube or the wider internet? Or the poorly secured CCTV watching every angle of any street in most big cities.
The author then uses face search engines to find personal information on the individuals. That is the creepy part, but has little to do with Flock, and you could have pulled those faces from any social network or any random video on youtube.
Am I right to understand that all those cams are pointed to the street / public places?
- I think you would be wrong to understand that. How on earth did you reach that conclusion?
But how is that different from the thousands of live cams over youtube or the wider internet? Or the poorly secured CCTV watching every angle of any street in most big cities.
- More than one thing can be wrong at once. Requires nuanced thought I accept.
The author then uses face search engines to find personal information on the individuals. That is the creepy part.
- I think he is demonstrating the creepy opportinities. Did he share any of that information? I think anyone with bad intent probably probably not make a video explaining what they did.
You miss the point. This is a law enforcement tool. The average American doesn’t want a surveillance state and that’s literally what’s happening. The legal aspect of it is not in question here.
Just because something is legal doesn’t make it right. Anyone deploying or involved with this technology should be embarrassed and ashamed of themselves.
That's not the point the video makes. Flock didn't invent CCTV. Not that I am trying to defend mass surveillance or incompetent silicon valley companies.
Flock "invented" CCTV in the USA that doesn't requiring going to multiple locations and asking for their tapes in order to track someone across locations.
For more context here Flock Safety is a YC-backed company [1][2]
[1] https://www.ycombinator.com/companies/flock-safety
[2] https://x.com/garrytan/status/1856016868580151615
And let me share this reply by Garry Tan, CEO of YC, after someone made a comment that Flock might be _pretty dystopian_ [1][2]:
> You're thinking Chinese surveillance
> US-based surveillance helps victims and prevents more victims
[1] https://x.com/neurajordan/status/1963303084609966288
[2] https://x.com/garrytan/status/1963310592615485955
> You're thinking Chinese surveillance
the big irony, of course, is that i'm much more comfortable with China surveilling me than the US, since the latter can throw me in jail, seize my assets, and ruin my family's life, while the former cannot.
The US government is a democracy and can be replaced should it exceed people’s limits. The CCP… uh, not so much.
I’m not trying to say the US government is faultless but it amazes me how often I see this kind of anti-democratic institition sentiment.
> it amazes me how often I see this kind of anti-democratic institition sentiment.
leeoniya didn't say anything about democracy. The practical reality is that regardless of what forms of government are involved, whichever government has the ability to arrest you is the government which is the greatest threat in your day-to-day life.
The CCP can hijack your accounts and absolutely do all of those things, using your own government.
could you provide an example of that happening?
Lack of rule of law by various states, counties, cities, fraud by their councils, and violent offenders are the direct cause of Flocks adoption.
Blues create the chaos to justify the surveillance so they can selectively enforce who gets charged. They revoke self protection laws and tell people to wait for the police they defunded. They rarely target criminals, overwhelmingly political dissidents.
If the police protected and served as they're asked they could get some funding. Not for tanks and spy cameras, but for trained officers.
jesus fuck the gloves really came off in the past few years. noone even cares to hide it anymore.
i could almost admire the transparency of these people, the way they're apparently okay accepting collateral damage of their schemes, up to the complete destruction of the fabric of society... as long as there's money to be made.
I've never heard about this Tan guy before, I don't keep up with politics/corporatism anymore, but is that possibly sarcasm? It sure feels like it to me. But again, I don't know this person, but if I came across that by itself I feel like it's pretty clearly sarcastic, as Twitter tends to be. Maybe I'm just tone deaf myself to how tone deaf others could be?
He probably being sincere. If you're logged in (or use something like xcancel), you can see the full thread, where he starts off with
> Flock Safety currently solves 700,000 reported cases of crime per year, which is about 10% of reported crime nationwide
> And they're just getting started
His profile also says:
>President & CEO @ycombinator —Founder @Initialized—designer/engineer who helps founders—SF Dem accelerating the boom loop—haters not allowed in my sauna
This is the CEO of the startup incubator handwaving away concerns in the name of money.
It is not sarcastic.
Generally speaking, today, surveillance capitalism is the foundation of both our political culture, economy, and the tech industry that backs them.
In polite circles we call surveillance "user telemetry" and the like. It's not just Palantir and FLock; where does Meta's money come from...? Google's for that matter...?
This was posted to HN a week ago but didn't get enough attention due to the weird title.
It's a map of all city council meetings in the US whose agenda mentions Flock
https://alpr.watch/
flock is the most heinous reflection of the ills of our current socioeconomic structure. absolutely nobody should be okay with mass surveillance, much less mass surveillance enabled by a private company.
It's what happens when we rank private property over human lives. We deserve this.
Agree.
If you find yourself sympathetic to Flock, you should ask yourself: do we have a right to any kind of privacy in a public space or is public space by definition a denial of any sort of privacy? This is the inherent premise in this technology that's problematic.
In Japan, for instance, there are very strict laws about broadcasting people's faces in public because there is a cultural assumption that one deserves anonymity as a form of privacy, regardless of the public visibility of their person.
I think I'd prefer to live in a place where I have some sort of recourse over when and how I'm recorded. Something more than "avoid that public intersection if you don't like it."
No, we do not "deserve this". The universe has no concept of "deserve".
People are part of the universe, and they have a concept of deserving.
Flock is literally funded by the people behind this site. The people behind this site are the 'most heinous reflection of the ills of our current socioeconomic structure'.
> The financing was led by Andreessen Horowitz, with backing from Greenoaks Capital, Bedrock Capital. Meritech Capital, Matrix Partners, Sands Capital, Founders Fund, Kleiner Perkins, Tiger Global, and Y Combinator also participated.
https://www.flocksafety.com/blog/flock-safety-secures-major-...
This is clear fascism, but people are too afraid to admit. We have sleep walked into it.
With such surveillance, administration can slice and dice population and entertain disappearance of "undesirables" on an industrial scale.
This is actually nothing new, but people think there is some magic invisible hand that will prevent atrocities of WWII from never happening again.
FFS you have your own president favouring a war criminal and protecting nonces.
> We have sleep walked into it.
We didn't sleep walk into it, we ran into it because of poor basic civics education and a cynical media cycle that biases towards making everyone terrified of crime.
The latter is driven by two forces - a profit motive (sensational, gruesome stories sell), and a political motive (media carrying water for far-right-wing candidates loves to keep you scared on this issue).
The optimal level of crime or unsolved crime in a society is not zero, but a lot of people will look at you like you've got three eyes if you tell them that. Talk to them for another ten minutes, and most of them will see why what you say makes sense, but that's not a conversation their television will ever have with them.
>This is clear fascism, but people are too afraid to admit. We have sleep walked into it.
>With such surveillance, administration can [...]
Have you missed all the cries of "fascism" back in 2016/2017? The problem isn't "people are too afraid to admit". It's that "wolf!" was cried too many times and people tuned it out. Ironically this invocation "fascism" is arguably also crying wolf. From wikipedia:
>Fascism is characterized by support for a dictatorial leader, centralized autocracy, militarism, forcible suppression of opposition, belief in a natural social hierarchy, subordination of individual interests for the perceived interest of the nation or race, and strong regimentation of society and the economy.
Is an ANPR network terrible for privacy? Yes, obviously. Is it authoritarian? Maybe[1]. Is everything vaguely authoritarian "fascism"? No.
[1] Consider cell phones. They're terrible for privacy, but nobody would seriously consider them "authoritarian".
>Fascism is characterized by support for a dictatorial leader, centralized autocracy, militarism, forcible suppression of opposition, belief in a natural social hierarchy, subordination of individual interests for the perceived interest of the nation or race, and strong regimentation of society and the economy.
These things don't just happen overnight. It's not crying wolf when you see the wolf on the horizon running towards you.
>These things don't just happen overnight. It's not crying wolf when you see the wolf on the horizon running towards you.
So were vaccine mandates and passports "fascism" as well, even though they melted away after the pandemic ended, contrary to some who thought it was going to be part of some new world order?
Children could go missing thanks to Flock default settings. HN would tell me to never attribute to malice ... but there may be criminal negligence.
To cover their butts I strongly suggest Flock implement a default "grading system" that will show a city in a banner at the top of their management and monitoring system that based on their camera and network configuration they get an A+ to F-. If the grade is below a C then it must be impossible to get rid of the banner and it must be blinking red. The grading system must be both free, mandatory and a part of the core management code. This assumes Flock will have the willpower to say no when a city demands removal of the flashing red banner. Instead up-sell professional services to secure their mess. I would like to see the NCC Group review their security and future grading system.
I always found Hanlon's Razor a bit too optimistic in tone. I prefer it restated in the form of Clarke's third law: "Sufficiently advanced stupidity is indistinguishable from malice."
If the cameras are recoding public areas, isn’t it better the recorded footage stays public
I think so, but it is a loosely held opinion at this point. Fundamentally, I think it is a huge, asymmetric power grab by Flock and local police to install these systems. It only takes one officer looking up their local politician and finding them doing something that could even look like a bad deed (or to fake it in the era of AI videogen...) to enable blackmail and personal/professional gain.
If they're going to exist, it may be better for that to be spread among the public than to be left in the hands of the few.
They shouldn't be recording at all is the point.
Would you want your partner or child stalked, raped, and murdered?
You don't even need to drop an air tag now, you can use the license plate reader to track them everywhere they go. There is no hiding.
At first I thought you were defending flock. Seems clear the cameras make it harder to commit crimes and easier to go after the offenders, despite all the side effects most people are upset about here.
At what point does the top brass at Flock get arrested?
For what? Under current jurisprudence collecting license plates images isn't illegal, because there's no expectation of privacy in public. They could post the information online if they wanted to and they'd be in the clear. It's fine to object to ANPR networks on the basis of "mass surveillance" or whatever, but screaming for people to be arrested without legal basis, just because you don't like what they're doing is childish and counterproductive to the conversation.
They're aiding the terrorists to stalk celebrities and public figures!
You're probably being facetious, but aiding criminals isn't illegal unless you're knowingly doing it. Signal is known to be used by criminals, and on top their app is specifically designed to frustrate law enforcement, yet they stayed clear of lawsuits.
Oh they’re buddies with all the departments. Fat chance.
Rather just see them get Flocked honestly. Seems like the type of tech a child would dream up only to realize when it's too late that it's dystopian, creepy, and a detriment to society.
Building the torment nexus...
In your dreams maybe
By top brass do you mean the people behind this website?
> The financing was led by Andreessen Horowitz, with backing from Greenoaks Capital, Bedrock Capital. Meritech Capital, Matrix Partners, Sands Capital, Founders Fund, Kleiner Perkins, Tiger Global, and Y Combinator also participated.
https://www.flocksafety.com/blog/flock-safety-secures-major-...
Him reading the Flock statement on a Flock camera open on the internet was just so good. I love and support Benn Jordan.
Related: https://news.ycombinator.com/item?id=46355548
A bit more detail:
Flock Exposed Its AI-Powered Cameras to the Internet. We Tracked Ourselves (404media.co)
Kirlian Selections rocks
I would love to watch a shorter version of this video that just discussed the deltas between the status quo and Flock, rather than breathlessly reporting the implications of cameras as if they were distinctive to Flock. He'll spend 30 seconds talking about how you can see every activity and every person on the camera --- yeah, that's how cameras work. There are thousands of public IP cameras on the Internet, aimed at intersections, public streets, houses, playgrounds, schools; most of them operated that way deliberately.
There are Flock-specific bad things happening here, but you have to dig through the video to get to them, and they're not intuitive. The new Flock "Condor" cameras are apparently auto-PTZ, meaning that when they detect motion, they zoom in on it. That's new! I want to hear more about that, and less about "I had tears in my eyes watching this camera footage of a children's playground", which is something you could have done last week or last year or last decade, or about a mental health police wellness detention somewhere where all the cops were already wearing FOIA-able body cams.
If open Flock cameras gave you the Flock search bar, that would be the end of the world. And the possibility that could happen is a good reason to push back on Flock. But that's not what happened here.
In my experience, people respond much more strongly to naming a specific company or person. Clearer plan of action than a resigned “This tech is old news.”
If your takeaway from that comment is that ‘tptacek thinks Flock’s tech is old news and he’s resigned about it, I think you’re going to be in for a treat.
Is the plan of action "eliminate all public IP cameras"? That's coherent, I'd get it, but that doesn't seem to be what he's saying at all. He used a Google search to find exposed Flock admin consoles (interesting! say more about that!) but he could just as easily have just searched "open IP cameras"; there's sites that do nothing but index those.
You could kinda already do this with all kinds of security cameras. There are only so many people who are computer proficient, and that number is lower than the number of camera installers.
There have been cases of people getting into baby monitors and yelling at the baby.
But as a tech company, this is extremely irresponsible
BTW, Benn Jordan is also known as The Flashbulb, an ambient legend
i guess that while it is alarming that these feeds were "unsecured" I'm just as concerned that they exist at all. Folks worry about it getting into the "wrong hands" but from my POV it was put up by the wrong hands.
While both are a problem I am far more concerned about the power this gives our, increasingly authoritarian, government than about individual stalkers/creeps.
Easy solution for Flock problem: get rid of visible license plates. Make them 2x1" of size and RFID-readable, give readers to police, problem solved.
Not-that-easy solution is legal ban for such surveillance.
None of these both will happen though.
You accepted TSA and PRISM, you will get used to Flock too.
Next is Flock but for people, with face recognition.
[dupe] Earlier article source: https://news.ycombinator.com/item?id=46355548
Interesting, but nothing new. Shodan users have known about clueless IP camera owners that leave their cameras on the public internet for years. This is a little more interesting because it's from a well-funded startup rather than independently owned Chinese IP cameras.
It's 2025. The ISP gateway I got comes with more default security than these cameras. The barrier to entry on security is lower than it ever has been in history. Whoever let this past the QC phase is an idiot.
> Whoever let this past the QC phase is an idiot.
It's all a matter of perspective. I'm sure to some executive somewhere, the person/s who approved all of this is seen as heroes, as they shaved of 0.7% or whatever from the costs of the development, and therefore made shareholders more money.
Until there are laws in place that makes people actually responsible for creating these situations, it'll continue, as for a company, profits goes above all.
It probably makes close to no difference in development or production, but it does significantly cut down on the number of tech support calls from people who can't figure out how to set the password, or immediately forget the password they set. If it has no password then you can just plug it in an have it work. Sure it's totally insecure, but its also trivial to install.
Generating a password that is unique to the device and print it with a sticky label on the underside of the device isn't exactly rocket-science, and ISPs somehow figured this out at least two decades ago, which was the first time I came across that myself. Surely whoever developed this IP-camera has an engineering department who've also seen something like this in the wild before?
Yep, but if you do that you need to staff a help line with people who can say "turn the box over and look at the sticker, no the sticker with the numbers on it, it's white with black letters and says PASSWORD in a big font, no the password isn't literally PASSWORD, it's the line below that with the strange letters, yes, to type that one you need to hold the shift key and press 3..."
Remember that ISPs often have people who come to your home to hook stuff up.
Yes, which costs money, which is exactly my original point. It's not because "Oh I'm so hassled because customers are dumb", it's "No, hiring people to do support would cost us money, which we don't want".
> Remember that ISPs often have people who come to your home to hook stuff up.
I can't recall a single time a technician wasn't required to come to my flat/house to install a new router. I'm based in Spain, maybe it's different elsewhere, but I think it's pretty much a requirement, you can't setup the WAN endpoint or ISP router yourself.
Last time I moved I opted for the "self install" kit, which was fine because I'm technical and the previous owners already had the service so there was nothing that needed to be done except hooking up the pre-configured modem. Saved me $200 in truck roll fees.
Interesting stuff, I've asked if I could do the installation myself every single time I've moved to a new , and never has the ISP (three different ones) said yes. There isn't any installation fee place(probably by law?) so that isn't an issue here, just a hassle to coordinate having to meet between 12:00 and 18:00 or some super wide range of time for them to come and install it.
Yep. Until we start holding decision makers responsible for the consequences of their decisions, they will always choose the selfish option.
So you're trying to justify this type of rampant negligence in tech? Do you think justifying such malfeasance makes up for fact we literally have surveillance networks that bad actors can tap to do really awful things?
Anyone that cares about their perspective has missed the point.
I don't think the person you're replying to is justifying it, but saying there's no laws to prevent the abuse.
Personally I think tech CEOs should be put in stocks in the town square on the regular but they're protected from any form of repercussions besides extreme cases of fraud. Even then, they're only held accountable when the money people have their money effected, not when normal people are bulldozed by the abuse.
If I was 10 years younger, I might agree that they aren't justifying it, but I have enough experience with passive speech to just not let it pass anymore.
Regarding remedy, we really need laws on this stuff yesterday. The problem is that we have to gut first amendment freedoms for some of this stuff, which wont go anywhere because there will always be too much overreach with today's representatives.
You should probably read the comment you're replying to before replying
> Until there are laws in place that makes people actually responsible for creating these situations, it'll continue, as for a company, profits goes above all.
They obviously meant that we ought to be holding these people responsible.
> You should probably read the comment you're replying to before replying
Congrats you spotted the thing we agreed on between comments. If you fail to see the agreement through parity of the part that was echoed, idk what to tell you. Education system is failing everyone in it these days.
> So you're trying to justify this type of rampant negligence in tech?
Don't know how you reached that conclusion, I obviously isn't trying to justify anything. But maybe something I said was unclear? What exactly gave you the idea I'm trying to justify anything of this?
Why stick your neck out, swim upstream to do a good job that will not be recognised as such?
Fix the corporate incentives and engineers will be able to do the right thing without suffering. Not everyone gets the luxury of a secure career doing morally ok things.
An explanation is not a justification.
Counterpoint: whoever let this past the QC phase got paid very generously, and everyone involved is ignoring the laws that already exist to combat this, because law enforcement, too, gets paid generously. And the laws that forbid that aren't getting enforced because the police doesn't police the police, and dad has made it perfectly clear that flagrantly ignoring the law is fine if you're in power.
What makes you think QA/QC is paid handsomely? It's a bloody cost center mate, and you can't measure "damage prevented" consistently, or at least in a way most high-risk tolerating exec types won't immediately undermine.
t. Former QA veteran
remember when people first started experiencing TSA and there were massive protests at how obscene and violating it all was, then uncovering how useless they were as fake security theater
and they were going to get it all shut down
TWENTY-FIVE YEARS NOW
so good luck getting rid of flock where people don't even know it's happening
Not sure if people realize that cellphone locations, several layers in the firmware and software, can be had without warrant by anyone YEARS LATER
That's why it's good to use GraphiteOS. In the future, hopefully the pinebook project succeeds
How does using GrapheneOS prevent license plate readers from tracking where you are, or from you being groped at the airport?
You mean GrapheneOS?
Moreover, people are pissed off when someone's angry because of TSA bs. "Don't be an asshole, they're just doing their jobs". "Oh someone's first week on this planet".
Oh no. Someone can view cctv data and delete it. Always blown out of proportion. The likelihood of someone a) committing a crime or otherwise b) knowing there was this specific brand of camera software being run on a camera in that area c) knowing how to access these portals
Is basically zero.
A useful rule of thumb is that any video that is using music to convince you of something is generally bullshit in the first place.
Am I right to understand that all those cams are pointed to the street / public places? I am not aware that there is any expectation of privacy, legally or otherwise, when you walk down the street. Sure, it is lame that those camera are unprotected, and shows how amateurish most of those IoT companies are. But how is that different from the thousands of live cams over youtube or the wider internet? Or the poorly secured CCTV watching every angle of any street in most big cities.
The author then uses face search engines to find personal information on the individuals. That is the creepy part, but has little to do with Flock, and you could have pulled those faces from any social network or any random video on youtube.
Am I right to understand that all those cams are pointed to the street / public places?
- I think you would be wrong to understand that. How on earth did you reach that conclusion?
But how is that different from the thousands of live cams over youtube or the wider internet? Or the poorly secured CCTV watching every angle of any street in most big cities.
- More than one thing can be wrong at once. Requires nuanced thought I accept.
The author then uses face search engines to find personal information on the individuals. That is the creepy part.
- I think he is demonstrating the creepy opportinities. Did he share any of that information? I think anyone with bad intent probably probably not make a video explaining what they did.
You miss the point. This is a law enforcement tool. The average American doesn’t want a surveillance state and that’s literally what’s happening. The legal aspect of it is not in question here.
Just because something is legal doesn’t make it right. Anyone deploying or involved with this technology should be embarrassed and ashamed of themselves.
That's not the point the video makes. Flock didn't invent CCTV. Not that I am trying to defend mass surveillance or incompetent silicon valley companies.
Flock "invented" CCTV in the USA that doesn't requiring going to multiple locations and asking for their tapes in order to track someone across locations.