Despite being a relatively recent build, the Flock camera was running Android 8.1. This version of Android was released in 2017, and officially stopped getting support from Google in 2021 (see the Android end-of-life page for more info). And despite Google publishing security fixes for Android 8.1 until 2021, the Android patch level is 2018-06-05. This camera is missing Android security updates for the last eight years.

no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
22 comments in c/privacy@lemmy.ml view that post
[–] 38 points 1 month ago (7 children)

I'd like to see a practical guide to leveraging this information

  • source
  • hideshow 7 child comments
  • [–] 17 points 1 month ago (2 children)

    kali Linux with metasploit will do a lot of the heavy lifting. I imagine you could turn your local installations into a free wifi access point, for starters.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 1 month ago (1 child)

    Are you able to provide greater detail?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 1 month ago (3 children)

    I mean, the api keys are literally in the post

  • source
  • parent
  • hideshow 3 child comments
  • [–] 10 points 1 month ago (2 children)

    I need the complete idiots guide. I'd like to participate as a disruptive force, but my level of tech knowledge is limited.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 1 month ago*

    i wonder if this a majority of us -- everyone has different skill levels with a huge majority of us having the needful basics to be turned into a critical mass.

    the only problem i can foresee is that a huge majority in this space are either liberal or libertarian -- which history proves are easily co-optible or are already aligned by the same epstein class that wants the flock cameras.

  • source
  • parent
  • [–] 28 points 1 month ago* (last edited 1 month ago) (3 children)

    Oh, so you could work up a war driving rig to fry them. Neat.

  • source
  • hideshow 3 child comments
  • [–] 6 points 1 month ago* (last edited 1 month ago) (2 children)

    That would scan your license plate. Better to use a drone.

    Edit: that's not what this post suggests at all

  • source
  • parent
  • hideshow 2 child comments
  • [–] 14 points 1 month ago (4 children)

    This camera is missing Android security updates for the last eight years.

    Any RCEs though? Or do they all require local privileges?

  • source
  • hideshow 4 child comments
  • [–] 1 point 1 month ago (2 children)

    Hmm, thinking bootloader sploits

  • source
  • parent
  • hideshow 2 child comments
  • [–] 12 points 1 month ago

    I hope people hack/compromise them and use them against the police and the people in charge to embarrass and expose them. That's likely the only way they will finally get removed.

  • source
  • [–] 7 points 1 month ago

    Good.

    Don’t tell them where they are.

  • source
  • [–] 4 points 1 month ago

    Deflock app. Me everyone should have it

  • source
  • That doesn't surprise me.

  • source
  • [–] 3 points 1 month ago

    Guessing this is deliberate to enable warrantless use of the resource by people who wouldn't have been authorized to use it in the first place.

  • source
  • 3 comments in c/privacy@programming.dev view that post
    [–] 15 points 1 month ago (1 child)

    Android 8.1. That is just. Wow.

    And hardcoded API keys? Bro seriously? This is a big "security" company and they're making baby's first programming mistake?

    I have no words.

  • source
  • hideshow 1 child comment
  • [–] 7 points 1 month ago

    I'm not a dev by far but I read 'hardcoded credentials', was going to scroll on as I do, stopped, made a weird face and then laughed out loud for quite a while. Security, yeah. It's at same time strange, really funny and very sad that words have lost all meaning. We're living in full doublespeak times.

  • source
  • parent
  • [–] 14 points 1 month ago

    Guys, Im starting to think these Flock thingies are a bunch of hooey.

  • source