Formalizing my Flock Safety Security Research.

There comes a time in any long-term project where its reached a point of maturity and requires change.

My Flock Safety independent security research has reached that point.

Although it took a while, I have finally published a formal white paper where I have condensed all current fully disclosed security issues as well as any other security issues that either are pending full disclosure or I have decided not to request CVE assignment for them. Overall there are 45 issues covered, with 44 discovered, reported and disclosed by me, as well as one from an outside contributor. All of the issues are much more heavily redacted with little or no literal commands however I’ve kept the high level reproduction steps that can still be used to learn, validate, verify, and defend against the issues covered in the white paper.

As the issues pending disclosure reach their responsible full disclosure dates, I will still create an informal detailed technical write-up as I always have to this site.

If you’re interested in reading or sharing the white paper titled, Examining the Security Posture of an Anti-Crime Ecosystem, please see the links below.

It is available on GitHub: Link

As well as on Zenodo: Link

Additionally, I have included a formal statement which is included at the end of the white paper as well as its own document: Link

Lastly, I included a verbose checklist meant for Defenders of these and similar public safety devices: Link

Update 11/12/25: There are now 51 Findings in the latest version of the white paper (still accessible with the links above).
Additionally, Flock Safety has released a PR statement regarding the formal publication of my white paper: Link

View all my informal full disclosure technical write-ups in regards to my Flock Safety Security Research:

Part 1: Bird Hunting Season – Security Research on Flock Safety’s Anti-Crime Systems: HERE
Part 2: Plucked and Rooted – Device 1: Debug Shell on Flock Safety’s Raven Gunshot Detection System: HERE
Part 3: Grounded Flight – Device 2: Root Shell on Flock Safety’s Falcon/Sparrow Automated License Plate Reader: HERE
Part 4: Trap Shooter – Flock Safety Sniffer & Alarm: HERE
Part 5: Root from the Coop – Device 3: Root Shell on Flock Safety’s Bravo Compute Box: HERE
Part 6: Fly-By – Device 2: The Falcon/Sparrow – Gated Wireless RCE, Camera Feed, DoS, Information Disclosure and More: HERE
Part 7: Button Presses to Wireless RCE: Shell on Flock Safety’s License Plate Cameras Over Wi-Fi: HERE
Part 8: Formalizing my Flock Safety Research: HERE
Part 9: BirdEye (Tool to Test Flock Safety’s ML Visual Recognition Models): HERE

END TRANSMISSION