Flock left at least 60 of its AI-powered Condor cameras exposed to the open internet. Anyone could watch live feeds, download 30 days of archived video, and change camera settings. No password or login was required. Researchers verified the problem by tracking themselves in real time at multiple camera locations across the United States.
How the Cameras Were Exposed
YouTuber Benn Jordan and security researcher Jon Gaines discovered the exposure using Shodan, a search engine for internet-connected devices. They found livestreams and control panels accessible to anyone online. According to 404 Media, Jordan traveled to camera sites and watched himself on the feeds while standing in front of them.
The cameras are Flock Condor models. These are pan-tilt-zoom devices designed to track people, not vehicles. They can zoom in on faces automatically as people walk through parking lots, streets, or playgrounds. Marketing materials show they can be controlled manually or set to follow targets.
What Researchers Saw
Researchers watched cameras track a woman walking her dog on a bike path in suburban Atlanta. Another camera followed a man through a Macy’s parking lot in Bakersfield. One feed showed children on swings at a playground. Cameras also filmed people sitting in traffic at stoplights.
In one case, a camera tracked a man rollerblading down a bike path in Brookhaven, Georgia. The feed showed him on one camera, then picked him up again on another camera further down the path. When he stopped, the resolution was clear enough to see videos playing on his phone.
Security Concerns Raised
Jordan said the discovery was immediately alarming. He mentioned a playground feed showing unattended children as particularly concerning. He wanted people to understand how dangerous such exposures can be.
Jordan demonstrated in a YouTube video that he could identify specific people using the footage and open source investigation tools. This showed how easily the exposure could be misused.
Gaines previously found other problems in different Flock camera models. He discovered several vulnerabilities in automated license plate reader cameras made by the same company. The Condor exposure represents another security issue with Flock’s surveillance equipment deployed in cities nationwide.
