Flock Camera Firmware Leak Exposes Unencrypted Key for ALPR Data

What Happened

Security researchers captured a Flock ALPR camera and extracted its firmware. Analysis of the recovered data uncovered a plaintext key stored on an unencrypted partition that decrypts the device’s main storage. The camera’s computer‑vision engine records dozens of images per passing vehicle, generating over a million images in a few weeks of logs, and can detect people, vehicles, license plates, bicycles, and even specific graphics such as bumper stickers.

Impact

Anyone deploying Flock cameras is at risk of having their entire image archive exposed if the device is compromised. The plaintext key means an attacker can decrypt stored data without needing to crack encryption. The volume of captured imagery also raises privacy concerns for individuals and vehicles recorded by the system.

What to Do

Defenders should:

• Verify that firmware images do not contain plaintext keys or other secrets.
• Apply any vendor‑released firmware updates that address key storage and encryption practices.
• Implement strict access controls on camera storage and network interfaces.
• Monitor logs for unusually high image capture rates or anomalous image content.
• Consider disabling or limiting the camera’s image‑capture frequency if privacy or storage constraints exist.

Key storage in clear text is a fundamental design flaw; secure key management must be enforced in all embedded devices.