Normalize flipping off Flock cams.
-
@alice We need to find a qr code that encodes an exploit that takes the camera off line to wear on t-shirts.
Sadly, the cameras don't do any actual OCR or object decoding in real time. The YOLO models just crop objects and upload to AWS for "processing."
-
Sadly, the cameras don't do any actual OCR or object decoding in real time. The YOLO models just crop objects and upload to AWS for "processing."
-
Once testing renders results, then maybe it's an attack path
Mike Sheward (@SecureOwl@infosec.exchange)
Update on my QR porch ornament experiment. There have now been 4 Amazon proof of delivery images containing the code. The first two, reliably hit the canary token within 20-40 minutes of the delivery, from a non-phone QR code. Definitely some sort of automated process. The third one, did hit the QR, but it was because the delivery person took it upon themselves to scan the QR code with their phone to see what it did - user agent confirmed that. There were no programatic hits like the first two. Fourth one, in the picture, but no hit registered. UPS/FedEx/USPS - not even as much as a flicker of a GET request to my canary. Bonus points, while driving I exposed my QR code to a couple of Flock cameras, but alas they didn't do anything. Next step will be a new QR code, one that points to a different domain, because the next thing to check is - did they start blocking the requests to Canarytoken dot org from whatever process was ingesting the images - because that is what it seems like.
Infosec Exchange (infosec.exchange)
-
@alice Googling how many ultrabright IR LEDs can I fit in various pieces of headware, because making them hate their job is easier when I make that job as hard as humanly possible.
-
Normalize flipping off Flock cams.
@alice Next step: laser right in the Flock's lens!
-
Normalize flipping off Flock cams.
@alice Flip Flock
-
@SymTrkl @alice Wonder if you could give someone a headache by making the IR leds strobe at the right frequency. hopefully wouldn't effect anyone looking at the hat normally, but anyone watching through a camera would see flashing lights.
Guess you'd probably have to be careful not to flash them too fast or at the wrong frequencies and cause seizures@mindpersephone
Honestly? You need a bit of a capacitor to stabilize the power supply but strobing the leds means they are not constantly using power but stay off for some time. You can easily double your battery time that way!
@alice @SymTrkl -
Normalize flipping off Flock cams.
@alice
I would, but I couldn't pull it's pole from the ground. -
-
Normalize flipping off Flock cams.
@alice Normalize umbrellas for every day carry, and dino suits. Either way not gonna stop my free bitch Fridays where I get $20 cash and go to the store in a dino suit for dino nuggets. Remember suncreen as skin cancer is rampant folks. Didn't realize folks reviewed those but guess they got a skipping dino giving them the finger every Friday with either $20.00 or dino nuggets in one hand.
-
Normalize flipping off Flock cams.
admit doing this to waymos too...
-
Normalize flipping off Flock cams.
@alice just to be clear
Do i flip them off before or after I throw rocks at them? -
R relay@relay.infosec.exchange shared this topic
