I spoke on the main stage of Def Con 34 on the same day Flock Safety’s Private Bug Bounty closed. My talk, titled The Final Flight was an overview of the entire research project including my experience from an independent researcher perspective.
Of course the talk will be on YouTube eventually and in the meantime you can read the slides: HERE and the companion PDF: HERE and the demo videos: HERE, HERE, HERE, and HERE
The companion PDF has all the security issues from the Examining the Security Posture of an Anti-Crime Ecosystem unredacted. It also links to all of the full disclosure posts if you want more details.
It also marked the release of BirdShot.
BirdShot is your one stop tool suite for all things Flock hardware with over 12 modules. I hope yall find it useful.
Check it out: HERE
Although there is more beyond the scenes leading up to Def Con I won’t be talking about it at this time.
Thank you to everyone who came out to my talk and everyone who supported me behind the scenes.
Part 1: Bird Hunting Season – Security Research on Flock Safety’s Anti-Crime Systems: HERE
Part 2: Plucked and Rooted – Device 1: Debug Shell on Flock Safety’s Raven Gunshot Detection System: HERE
Part 3: Grounded Flight – Device 2: Root Shell on Flock Safety’s Falcon/Sparrow Automated License Plate Reader: HERE
Part 4: Trap Shooter – Flock Safety Sniffer & Alarm: HERE
Part 5: Root from the Coop – Device 3: Root Shell on Flock Safety’s Bravo Compute Box: HERE
Part 6: Fly-By – Device 2: The Falcon/Sparrow – Gated Wireless RCE, Camera Feed, DoS, Information Disclosure and More: HERE
Part 7: Button Presses to Wireless RCE: Shell on Flock Safety’s License Plate Cameras Over Wi-Fi: HERE
Part 8: Formalizing my Flock Safety Research: HERE
Part 9: BirdEye (Tool to Test Flock Safety’s ML Visual Recognition Models): HERE
Part 10: Finding 67 Flock Safety Live PTZ Camera/LPR Feeds and Debug Web Interfaces accidentally exposed without authentication to the internet: HERE
END TRANSMISSION