On September 16, 2026, WIRED and 404 Media published reporting about a copy of Flock Safety LPR firmware obtained by hackers. The firmware was also distributed through DDoSecrets, enabling this static remediation review of the supplied Falcon/Sparrow image against vulnerabilities I disclosed throughout my Examining the Security Posture of an Anti-Crime Ecosystem (Bird Hunting Season) research project.
RealHermes, an AR/VR Body, Voice, and Eyes for your Hermes Agent
Give your Hermes Agent a body. RealHermes puts a voice driven AI companion in AR/VR on the Steam Frame and in any WebXR browser: push-to-talk voice, sees what you see, opens PDFs and images in your room. Ships with 2x4; bring your own character
TreeHouse Defense System – RF + Wireless SIGINT 3D/XR/VR Dashboard with Steam Frame Support
TDS is a self-hosted RF awareness dashboard for visualizing WiFi, BLE, ADS-B, rail, IoT, LTE lab data, and infrastructure alerts in 3D. It normalizes local sensor data into searchable presence intelligence.
Verkracked Part 8 – VerkEye
Part 8 of the Verkracked Security Research Project; A local visual recognition harness for the Verkada CB62 cameras I have been researching.
Government Run OSINT Services
I’ve been writing about government run people search tools for years. So I built SectorGov: a familiar search interface for discovering 7,373 government service links. Browse by location, service, vendor or software. No account required.
Verkracked Parts 4 & 5 – Local Cloud and Sub-GHz Frameworks for Verkada Alarm Hubs
Part 4 and 5 of the "Verkracked" independent security research project. Specifically covering the subghz protocol framework and the cloud emulator, enabling use of Verkada alarm hubs locally.
Verkracked – Security Research on Verkada Anti-Crime Devices – Part 0
Part 0 of the ongoing long form independent security research project Jon "GainSec" Gaines is doing to assess the security posture of various Verkada devices and hardware.
Bird Hunting Season at Def Con 34
I spoke on the main stage of Def Con 34 on the same day Flock Safety’s Private Bug Bounty closed. My talk, titled The Final Flight was an overview of the entire research project including my experience from an independent researcher perspective. Of course the talk will be on YouTube eventually and in the meantime … Continue reading Bird Hunting Season at Def Con 34
AOL Desktop Gold Security Research Public Release
As mentioned in my last post, I have some very backlogged projects I’ve decided to just release to get them out of my backlog. This one is related to AOL Desktop Gold, the modern successor to the AOL desktop software a lot of us remember from the 90s. Yes it does still exist (and hence … Continue reading AOL Desktop Gold Security Research Public Release
Digital Ally ThermoVu DTM-600 / Uniview LAPI Security Research Release
I have some very backlogged projects I’ve decided to just release to get them out of my backlog. This one is related to the Digital Ally ThermoVu DTM-600, which is a Uniview/OEM OET-213H-NB-style facial recognition and thermal access-control device. This release is the majority of my notes, tools, findings, and research artifacts from looking at … Continue reading Digital Ally ThermoVu DTM-600 / Uniview LAPI Security Research Release