Hackable by design risk
Cameras, apps, cloud dashboards, police portals, and databases all create attack surfaces. Encryption and security policies matter, but they do not make a mass movement database harmless.
The best safety is to not store all our movements in the cloud.
Watch the video
The video walks through reported device and platform security weaknesses.
Flock security evidence
This page does not need to publish exploit instructions to make the point. Security researchers and reporters have already documented concerns around exposed camera feeds, weak device protections, credential handling, and public-facing access to sensitive surveillance systems.
When a system collects location history and video at city scale, a security failure is not just an IT problem. It can become a stalking problem, an evidence problem, a political surveillance problem, or a public safety problem.
Flock data can describe where cars were seen, when they were seen, and which cameras captured them. That kind of movement history is valuable precisely because it reveals patterns of real life.
Cloud storage risk
Flock’s own materials say footage and metadata are encrypted and stored in Amazon Web Services cloud storage, with CJIS data stored in AWS GovCloud. AWS is a mature and heavily secured cloud platform.
But “stored in AWS” does not mean impossible to expose. Real-world breaches often happen through misconfigured applications, over-permissioned cloud roles, stolen credentials, exposed buckets, weak dashboards, or compromised customer accounts.
KrebsOnSecurity
KrebsOnSecurity reported that a cloud-hosted web application firewall misconfiguration helped an attacker reach AWS metadata credentials and access files in S3 buckets. The lesson is not that AWS is inherently unsafe; it is that cloud systems can fail when applications, roles, and permissions are misconfigured.
Read the source
Ars Technica
Ars Technica reported that an attacker gained unauthorized access to Code Spaces’ AWS control panel and deleted EBS snapshots, S3 buckets, AMIs, and machine instances, forcing the company to shut down.
Read the source
Traffic cameras as intelligence
According to reporting republished by Yahoo News, Israel hacked Tehran’s traffic cameras and used AI-assisted analysis to map Ayatollah Ali Khamenei’s movements, routines, and security patterns before his assassination.
That report is an extreme national-security example, but the local lesson is simple: cameras that track routine movement can become powerful intelligence infrastructure when the wrong party gains access.
Bottom line
Casa Grande can support public safety without creating a centralized searchable record of ordinary residents’ daily lives. If a database should not be leaked, hacked, misused, or subpoenaed without strict limits, the city should ask whether it should exist at all.