Surveillance Camera Security? It’s Completely Flocked!

Researchers examined the disk contents of a Flock Safety camera and found the devices run on unsupported Android 8.1 (2017) with known vulnerabilities. A hardcoded API key was found in the firmware, allowing data from any Flock camera to be retrieved by MAC address.

• Flock Safety cameras run on Android 8.1 unpatched since 2017
• Hardcoded API key with open access found in firmware
• MAC address can retrieve data from any Flock camera
• Devices already feature in surveillance and police abuse disputes