A police officer gained access to 19,000 Flock cameras using fake requests

An Indiana police officer used the Flock Safety system to search a database of 19,000 cameras installed in 1,558 US cities, citing "LMAO" as the reason for the query. The incident was uncovered during an investigation by the Electronic Frontier Foundation, which analyzed logs of automatic license plate reader (ALPR) system usage.

The Flock system combines data from thousands of cameras, allowing law enforcement to track vehicle movements in real-time. According to the report, the lack of strict verification of query reasons allows employees to enter arbitrary text data that is not checked for validity. In this case, the system accepted the acronym for "laughing out loud" as a legitimate reason for accessing large datasets of citizen movement.

The study highlights critical vulnerabilities in the security protocols of AI tools used by government agencies. The lack of automated control over input data leads to huge amounts of confidential information becoming available for unauthorized use. Experts note that such incidents raise questions about the effectiveness of existing audit mechanisms in surveillance networks.

So far, the incident has sparked a discussion about the need to implement stricter validation algorithms for queries in monitoring software. Developers of surveillance systems are facing demands to restrict access to data to prevent abuse by operators with access to global object recognition networks.