77% of Flock Safety’s Public DNS Namespace is Development Infrastructure
Brief
By Adrian Cheek, Senior Cybercrime Researcher
What Passive DNS Discloses About the Systems Behind the Cameras
Automated license plate readers and AI-assisted video surveillance have moved from a handful of pilot deployments to tens of thousands of installations across US towns, business parks and residential streets. Anyone can see the cameras, but the cloud platform behind them is a different story.
This includes the services that ingest the footage, the search interfaces that police departments query, and the development pipeline that ships changes to both.
In January 2026, independent researchers found that a number of Flock Safety’s pan-tilt-zoom cameras were reachable on the open internet without authentication. One researcher’s initial discovery was extended by Jon “GainSec” Gaines to 67 exposed live feeds and debug web interfaces.