3 ms·
Cops Search Flock Cameras for Reasons of 'LMAO,' 'IDK,' and 'Asdfg'
- silvermine 12d ago[dead]
- moribvndvs 12d agoI’d like to see these comments copied over to the “reason for termination” field in their personnel file.
- jamesnorden 12d agoWaiting for the "think of the children" bots.
- writtenone 12d agono email wall: https://nonograph.com/cops-search-thousands-of-flock-cameras-for-reasons-of-lmao-idk-hehe-and-asdfg-09-14-2026 https://nonograph.com/cops-search-thousands-of-flock-cameras...
- jauntywundrkind 12d agoThis is why police unions are starting to talk about shutting down Flock: because it's a hazard to police. Because the normalized abuse of power that pervades policing is actually visible here.
- sublinear 12d agoI agree that it is to some extent about optics for the cops, but access controls and properly scoped authorization are always problems everywhere in software. That's not to say we should let any of this slide, but that we should realize it is time we take this aspect of security more seriously. We are living in that future now. Yes, your shitty janky auth scheme is causing real problems right now and yes it sometimes is life or death. We're missing an entire category of software that manages permissions in more dynamic ways... Meanwhile, about a third of devs out there don't even know or care about the difference between authn and authz.
- jauntywundrkind 11d agocertainly something we've seen an epic-facepalm on with the huggingface hack. oh your mongo all just uses one static username/password. oh your cross-cluster connection is all one password. reciprocally though i think the top down securitization of systems with only proper access control has taken out a lot of the grease that used to greatly ease how companies related to the world in really good ways. even when you do get through to support on the phone, there's often such a grim expectation that they will be in no way able to help you, that they don't really have access to information or corporate processes that are going to do anything for you. we (engineers) look at defined behavior & constraints as secure, safe, good. but i think the informal processes and laxity from the pre-coded world allowed companies to better actually help people and to be good, in important ways. we have to recognize that mechanization is not always a good force too, while also starting to take more seriously too that we often do need more oversight/guards/access-control too. it's paradox, it's duality, but we have to recognize both ends as dangerous.
- sublinear 11d ago
- deleted 12d ago[deleted]
- swed420 12d agoEFF article https://news.ycombinator.com/item?id=49699308 https://news.ycombinator.com/item?id=49699308
- tangotaylor 12d agoAnd this is why I donate monthly to EFF. Nice find.
- sznio 11d agoactual cops or script kiddies that found a way to impersonate them?
- forest_brothers 11d ago[dead]