音乐人兼调查记者Benn Jordan近日在美国参议院司法委员会作证,揭露了Flock Safety自动车牌识别系统存在的多项严重安全和隐私问题1。这一举动引发了两党调查,参议员Josh Hawley对该公司展开了深入调查1。
Jordan发现Flock摄像头缺乏多因素认证、管理接口开放等多个安全缺陷,允许未授权用户删除录像和查看30天前的镜头1。更令人担忧的是,他在暗网上发现了来自俄罗斯供应商的Flock凭据1。此外,Flock建立的私有数据库允许执法部门在无搜查令的情况下追踪车辆位置,与此前需要通过国家犯罪信息中心获得法官授权的做法形成鲜明对比1。
受到公众批评和监管压力,Flock Safety的业务遭遇重创1。数百个城市、县和地方政府已开始取消与该公司的合同1,公司计划实施约18%的裁员1。业内人士认为,CEO Garrett Langley采取的对抗性公关策略加剧了公司的困境1。目前,Jordan已作为第三方审计员与Flock合作1。
Investigative journalist and musician Benn Jordan has become a public figure after exposing critical security vulnerabilities and privacy concerns with Flock Safety's automated license plate recognition system, prompting him to testify before the Senate Judiciary Committee.1 Jordan discovered multiple security deficiencies in Flock's cameras, including the absence of multi-factor authentication, open administrative interfaces that allowed deletion of recordings and access to footage from 30 days prior, and plain-text credentials that he found circulating on the dark web from a Russian vendor.1 Beyond these technical gaps, Jordan identified a more troubling privacy vulnerability: Flock's proprietary database enabled law enforcement to track vehicle locations across jurisdictions without a search warrant, circumventing the previous requirement that such automated license plate reader data be obtained through the National Crime Information Center with judicial authorization.1
The revelations have triggered widespread scrutiny and bipartisan action. Senator Josh Hawley launched an investigation into Flock's practices,1 and hundreds of cities, counties, and local governments have begun canceling their contracts with the company.1 In response to the mounting pressure, Flock announced plans to lay off approximately 18 percent of its workforce.1 Jordan has since transitioned into a formal role as a third-party auditor collaborating with Flock.1 Industry observers have attributed some of the company's difficulties to the confrontational public relations strategy employed by CEO Garrett Langley.1
评论
还没有评论,欢迎留下第一条。