Normalize flipping off Flock cams.

[bit@ohai.social]

@alice I can also wave a Mexican flag in from of them to throw them off.

[0x00string@infosec.exchange]

@alice yes, off the mounts, onto the cement

[aprilfollies@mastodon.online]

@alice Someone in my neighborhood seems to have flipped one right off of its pole. Seem to have repurposed its solar panel, too. Very conscientious of them.

[geonz@mathstodon.xyz]

@alice Oh, I hadn't thought of that. They're on my college campus and public safety watches the feral cats on them (and got one of 'em a home...)

[kajer@infosec.exchange]

@alice

the yolov3tiny models the falcon cameras uses detect "birds." But it's probably just detecting "person" and uploading those frames.

[kajer@infosec.exchange]

@ChuckMcManis @alice

Sadly, the cameras don't do any actual OCR or object decoding in real time. The YOLO models just crop objects and upload to AWS for "processing."

[chuckmcmanis@chaos.social]

@kajer @alice Okay, but what if we had a QR code that made AWS "processing" really really expensive. I'm thinking an HTTPS page with a six billion link referrer link chain.

[kajer@infosec.exchange]

@ChuckMcManis @alice

Once testing renders results, then maybe it's an attack path

Mike Sheward (@SecureOwl@infosec.exchange)

Update on my QR porch ornament experiment. There have now been 4 Amazon proof of delivery images containing the code. The first two, reliably hit the canary token within 20-40 minutes of the delivery, from a non-phone QR code. Definitely some sort of automated process. The third one, did hit the QR, but it was because the delivery person took it upon themselves to scan the QR code with their phone to see what it did - user agent confirmed that. There were no programatic hits like the first two. Fourth one, in the picture, but no hit registered. UPS/FedEx/USPS - not even as much as a flicker of a GET request to my canary. Bonus points, while driving I exposed my QR code to a couple of Flock cameras, but alas they didn't do anything. Next step will be a new QR code, one that points to a different domain, because the next thing to check is - did they start blocking the requests to Canarytoken dot org from whatever process was ingesting the images - because that is what it seems like.

Infosec Exchange (infosec.exchange)

[w_b@mastodon.world]

@SymTrkl @alice

Often thought about building a license plate frame loaded with ir LEDs to mess with ALPRs

[lambdacalculus@masto.hackers.town]

@alice Next step: laser right in the Flock's lens!

[ferrix@mastodon.online]

@alice Flip Flock

[momo@social.linux.pizza]

@mindpersephone
Honestly? You need a bit of a capacitor to stabilize the power supply but strobing the leds means they are not constantly using power but stay off for some time. You can easily double your battery time that way!
@alice @SymTrkl

[dzwiedziu@mastodon.social]

@alice
I would, but I couldn't pull it's pole from the ground.

[dzwiedziu@mastodon.social]

@Shdwdrgn
https://www.youtube.com/watch?v=Pp9MwZkHiMQ

@SymTrkl @alice

[dzwiedziu@mastodon.social]

@johne
https://www.macpierce.com/the-camera-shy-hoodie

@SymTrkl @alice

[breach@discuss.systems]

@alice Normalize umbrellas for every day carry, and dino suits. Either way not gonna stop my free bitch Fridays where I get $20 cash and go to the store in a dino suit for dino nuggets. Remember suncreen as skin cancer is rampant folks. Didn't realize folks reviewed those but guess they got a skipping dino giving them the finger every Friday with either $20.00 or dino nuggets in one hand.

[cyberlyra@hachyderm.io]

@alice

admit doing this to waymos too...

[smolbrain@floofy.tech]

@alice just to be clear
Do i flip them off before or after I throw rocks at them?