Timeline / entry

Flock ALPR camera found with hard-coded credentials and outdated Android

A blog post by Micah Lee, based on a dataset published by DDoSecrets from a collective called stegan0gram, describes security flaws in a Flock ALPR camera. The camera ran Android 8.1 with a security patch level from 2018-06-05, missing years of updates. The firmware contained a hard-coded API key for Flock’s backend service, presumably allowing credential retrieval for any camera. Logs revealed the camera’s location in Wauwatosa, Wisconsin.

Sources

  1. Flock cameras are riddled with security vulnerabilities and hard-coded credentials — micahflee.com, Sep 16, 2026

Something wrong? Send a correction — cite a source and we'll fix it and note the change.