At DEF CON 34, I presented The Final Flight, covering the full history of my Flock Safety security research.
Following new reporting from WIRED and 404 Media, a copy of Flock LPR firmware was distributed through DDoSecrets.
Today, I am releasing 1.0RV — Remediation Verification. I did not search for new vulnerabilities. I compared this firmware and its applications against the versions used during my original research to determine whether previously disclosed vulnerabilities had been remediated. Because I no longer have Flock hardware, this assessment relies on exhaustive static analysis, reverse engineering, and original-versus-current code comparison. The results: – 23 findings remain unremediated and still vulnerable – 2 are likely unremediated – 3 require live-device confirmation – 1 is confirmed remediated After approximately five rounds of responsible disclosure, seeing only one confirmed remediation in this deployment version is extremely concerning.Part 1: Bird Hunting Season – Security Research on Flock Safety’s Anti-Crime Systems: HERE
Part 2: Plucked and Rooted – Device 1: Debug Shell on Flock Safety’s Raven Gunshot Detection System: HERE
Part 3: Grounded Flight – Device 2: Root Shell on Flock Safety’s Falcon/Sparrow Automated License Plate Reader: HERE
Part 4: Trap Shooter – Flock Safety Sniffer & Alarm: HERE
Part 5: Root from the Coop – Device 3: Root Shell on Flock Safety’s Bravo Compute Box: HERE
Part 6: Fly-By – Device 2: The Falcon/Sparrow – Gated Wireless RCE, Camera Feed, DoS, Information Disclosure and More: HERE
Part 7: Button Presses to Wireless RCE: Shell on Flock Safety’s License Plate Cameras Over Wi-Fi: HERE
Part 8: Formalizing my Flock Safety Research: HERE
Part 9: BirdEye (Tool to Test Flock Safety’s ML Visual Recognition Models): HERE
Part 10: Finding 67 Flock Safety Live PTZ Camera/LPR Feeds and Debug Web Interfaces accidentally exposed without authentication to the internet: HERE
END TRANSMISSION