Flock cameras are riddled with security vulnerabilities and hard-coded credentials

42 points by robey


mdaniel

I would be very curious to know if this invalidates their use in court, since the chain of custody is now hypothetically compromised. Then again, I hope that I, personally, never have to find out

lake

that's amazing. these things suck.

That is some vintage android. Kind of fun that with software that old, you just have your pick of exploits, like from a catalogue.

Do these cameras get OTA updates? Because if not, and they use those hardcoded API creds, and now the whole world has them...

jussi

Crt.sh also lists a lot of services for them. I wonder how many of those accept the same credentials.