4 ms·

I wonder how hard it is to download the whole database from this source. Would be cool if they released a straight sqlite file or something to do analysis.

by gleenn 4y ago

heavyset_go 4y ago
They have an email on their about page that you can reach them at and ask for the records.
twelvechairs 4y ago
Or the next AI fad 'LAPD officer generator'
- zoklet-enjoyer 4y ago
  AR glasses with cop recognition
  - SauciestGNU 4y ago
    I've been at enough protests where cop agent provocateurs are a problem that this would be an amazing threat identification tool.
Ralo 4y ago
The site doesn't seem to be thrown together very well, you can dump the entire DB by searching for a space character [0] (assuming every officer should have a space in their full name). It dumps as a nice JSON format with all the details. All the headshots can easily be extracted by appending "https://watchthewatchers.net/headshots/ https://watchthewatchers.net/headshots/" to the values from the "imagePath" value in the JSON dump. [0] https://watchthewatchers.net/api/search/%20 https://watchthewatchers.net/api/search/%20
- spicybright 4y ago
  Here's a preview of clicking the API link: https://i.imgur.com/nbhL64L.png https://i.imgur.com/nbhL64L.png It took a while to load for me, so I'm posting this to spare the site from the HN hug of death, even if just a little bit.
  - Ralo 4y ago
    I saved it, just incase it gets removed.
- LoganDark 4y ago
  > you can dump the entire DB by searching for a space character I abused this trick to perform local fuzzy searches for usernames, results would update with no delay on every keypress, the competing devs were so blown away and couldn't tell how I did it lol. Best exploit ever. It wouldn't have scaled but it was still so funny to see everyone else's reactions.
  - Ralo 4y ago
    In my experience the vast majority of the time exploits are found over Ajax APIs. Developers just forget that sanitization client side isn't secure. It's a good party trick for sure.
    - LoganDark 4y ago
      The funny thing is that you actually didn't do it by searching for an actual space—you would search for an underscore, and they would convert it to a space after checking if the input is empty, but before trimming, so...
- ashwagary 4y ago
  Code quality and potential security issues aside, I don't think the creators would mind any member of the public having a full copy.
- antifa 4y ago
  > you can dump the entire DB by searching for a space character You'll probably miss some names like McLovin.

I wonder how hard it is to download the whole database from this source. Would be cool if they released a straight sqlite file or something to do analysis.

by gleenn 4y ago

I wonder how hard it is to download the whole database from this source. Would be cool if they released a straight sqlite file or something to do analysis.

heavyset_go 4y ago

They have an email on their about page that you can reach them at and ask for the records.

twelvechairs 4y ago

Or the next AI fad 'LAPD officer generator'

zoklet-enjoyer 4y ago
AR glasses with cop recognition
- SauciestGNU 4y ago
  I've been at enough protests where cop agent provocateurs are a problem that this would be an amazing threat identification tool.

Ralo 4y ago

The site doesn't seem to be thrown together very well, you can dump the entire DB by searching for a space character [0] (assuming every officer should have a space in their full name). It dumps as a nice JSON format with all the details. All the headshots can easily be extracted by appending "https://watchthewatchers.net/headshots/ https://watchthewatchers.net/headshots/" to the values from the "imagePath" value in the JSON dump. [0] https://watchthewatchers.net/api/search/%20 https://watchthewatchers.net/api/search/%20

spicybright 4y ago
Here's a preview of clicking the API link: https://i.imgur.com/nbhL64L.png https://i.imgur.com/nbhL64L.png It took a while to load for me, so I'm posting this to spare the site from the HN hug of death, even if just a little bit.
- Ralo 4y ago
  I saved it, just incase it gets removed.
LoganDark 4y ago
> you can dump the entire DB by searching for a space character I abused this trick to perform local fuzzy searches for usernames, results would update with no delay on every keypress, the competing devs were so blown away and couldn't tell how I did it lol. Best exploit ever. It wouldn't have scaled but it was still so funny to see everyone else's reactions.
- Ralo 4y ago
  In my experience the vast majority of the time exploits are found over Ajax APIs. Developers just forget that sanitization client side isn't secure. It's a good party trick for sure.
  - LoganDark 4y ago
    The funny thing is that you actually didn't do it by searching for an actual space—you would search for an underscore, and they would convert it to a space after checking if the input is empty, but before trimming, so...
ashwagary 4y ago
Code quality and potential security issues aside, I don't think the creators would mind any member of the public having a full copy.
antifa 4y ago
> you can dump the entire DB by searching for a space character You'll probably miss some names like McLovin.