Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Motorola #26

Merged
merged 8 commits into from
Jan 6, 2025
Merged

Motorola #26

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
d58a9f1
remove dangers page, fix counter
frillweeman Jan 4, 2025
1560dab
fix bad instrucitons
frillweeman Jan 4, 2025
5def529
cleanup
frillweeman Jan 4, 2025
b78eb81
allow nonstandard direction tag, link to OSM
frillweeman Jan 4, 2025
8d34b7a
update privacy policy to account for intro message
frillweeman Jan 4, 2025
6a500cb
Merge branch 'master' of https://github.com/FoggedLens/deflock
frillweeman Jan 5, 2025
3717599
Merge branch 'master' of https://github.com/FoggedLens/deflock
frillweeman Jan 6, 2025
8c463ce
add motorola vulnerability
frillweeman Jan 6, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
73 changes: 45 additions & 28 deletions webapp/src/components/Dangers.vue
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,23 @@
</v-expansion-panel-text>
</v-expansion-panel>

<v-expansion-panel>
<v-expansion-panel-title class="font-weight-bold">
ALPRs Are a Major Security Risk
</v-expansion-panel-title>
<v-expansion-panel-text>
<p>
Companies that make ALPRs have a history of poor security practices, which can lead to data breaches and unauthorized access to sensitive information. For example:
</p>

<ul>
<li>
In January 2025, Motorola Solutions' ALPR system was <a href="https://youtu.be/0dUnY1641WM" target="_blank">found to have a critical security flaw</a> that allowed anyone to access live data from their cameras. Data includes <b>license plate numbers, make, model, color, and timestamps</b>. A <b>live feed</b> of both cameras (color and infrared) was also available to stream using a web browser.
</li>
</ul>
</v-expansion-panel-text>
</v-expansion-panel>

<v-expansion-panel>
<v-expansion-panel-title class="font-weight-bold">
ALPRs Are Dragnet Surveillance
Expand All @@ -55,6 +72,34 @@
</v-expansion-panel-text>
</v-expansion-panel>

<v-expansion-panel>
<v-expansion-panel-title class="font-weight-bold">
ALPRs Are Abused
</v-expansion-panel-title>
<v-expansion-panel-text>
<p>
There are many documented cases where police have knowingly used ALPRs to commit crimes and put people in danger. These examples illustrate that it can be difficult to put meaningful restrictions in place that prevent ALPRs from being used for nefarious purposes. It's often only after harm is done that an officer is caught and punished, if at all.
</p>
<ul>
<li>
<a href="https://inewsource.org/2022/01/06/police-share-license-plate-data/" target="_blank">Police in San Diego County breaking the law sharing drivers' data</a>
</li>
<li>
<a href="https://www.kwch.com/2022/10/31/kechi-police-lieutenant-arrested-using-police-technology-stalk-wife/" target="_blank">A police officer used Flock Safety ALPRs to stalk his estranged wife in Kechi, KS</a>
</li>
<li>
<a href="https://apnews.com/general-news-699236946e3140659fff8a2362e16f43" target="_blank">A police officer accepted a bribe to run a woman's license plate in Georgia</a>
</li>
<li>
<a href="https://apnews.com/general-news-699236946e3140659fff8a2362e16f43" target="_blank">A police officer used ALPRs to stalk his ex-girlfriend in Ohio</a>
</li>
<li>
<a href="https://information.auditor.ca.gov/pdfs/reports/2019-118.pdf" target="_blank">California agencies keeping data longer than necessary and sharing it with unauthorized agencies</a>
</li>
</ul>
</v-expansion-panel-text>
</v-expansion-panel>

<v-expansion-panel>
<v-expansion-panel-title class="font-weight-bold">
ALPR Errors Create Dangerous Police Interactions
Expand Down Expand Up @@ -123,34 +168,6 @@
</ul>
</v-expansion-panel-text>
</v-expansion-panel>

<v-expansion-panel>
<v-expansion-panel-title class="font-weight-bold">
ALPRs Are Abused
</v-expansion-panel-title>
<v-expansion-panel-text>
<p>
There are many documented cases where police have knowingly used ALPRs to commit crimes and put people in danger. These examples illustrate that it can be difficult to put meaningful restrictions in place that prevent ALPRs from being used for nefarious purposes. It's often only after harm is done that an officer is caught and punished, if at all.
</p>
<ul>
<li>
<a href="https://inewsource.org/2022/01/06/police-share-license-plate-data/" target="_blank">Police in San Diego County breaking the law sharing drivers' data</a>
</li>
<li>
<a href="https://www.kwch.com/2022/10/31/kechi-police-lieutenant-arrested-using-police-technology-stalk-wife/" target="_blank">A police officer used Flock Safety ALPRs to stalk his estranged wife in Kechi, KS</a>
</li>
<li>
<a href="https://apnews.com/general-news-699236946e3140659fff8a2362e16f43" target="_blank">A police officer accepted a bribe to run a woman's license plate in Georgia</a>
</li>
<li>
<a href="https://apnews.com/general-news-699236946e3140659fff8a2362e16f43" target="_blank">A police officer used ALPRs to stalk his ex-girlfriend in Ohio</a>
</li>
<li>
<a href="https://information.auditor.ca.gov/pdfs/reports/2019-118.pdf" target="_blank">California agencies keeping data longer than necessary and sharing it with unauthorized agencies</a>
</li>
</ul>
</v-expansion-panel-text>
</v-expansion-panel>
</v-expansion-panels>
</template>

Expand Down
15 changes: 15 additions & 0 deletions webapp/src/views/Landing.vue
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,21 @@
<p class="px-6">
ALPRs are a threat to your privacy and civil liberties. They can be used to track your movements and profile you, and even stalk you. Learn more about the dangers of ALPRs and how you can protect yourself.
</p>

<v-alert
class="mt-4 text-left"
variant="tonal"
type="error"
icon="mdi-alert"
title="BREAKING: Anyone Can Access Motorola ALPR Data"
>
<p class="mt-2">
Recent security research has revealed that anyone can access live data from Motorola ALPRs by simply visiting a URL. This data includes <b>license plate numbers, make, model, color, and timestamps</b> as well as <b>still images</b> and a <b>live video feed</b>.
</p>
<p class="mt-2">
Watch Matt Brown's <a target="_blank" href="https://youtu.be/0dUnY1641WM">YouTube video</a> on the topic or <a target="_blank" href="https://github.com/frillweeman/alprleaks">run the script yourself</a> to see how dangerous this vulnerability is.
</p>
</v-alert>

<v-row class="align-center mt-4">
<v-col cols="12" md="4" class="text-center">
Expand Down