this post was submitted on 30 Aug 2025
38 points (100.0% liked)

Bay Area

1482 readers
1 users here now

Discussion for all things Bay Area.

founded 2 years ago
MODERATORS
38
submitted 2 days ago* (last edited 2 days ago) by Five@slrpnk.net to c/bayarea@lemmy.world
 

Flock Safety

Privacy concerns have been raised with respect to ALPRs generally, including Flock's systems. Additionally, Flock's surveillance model has also spurred debates between supporters and opponents of the technology. Flock's surveillance technology is often criticized for its broadening of public surveillance, and lead to a chilling effect on civil liberties, as described by privacy experts and organizations like the Electronic Frontier Foundation (EFF) and the American Civil Liberties Union (ACLU). The EFF argues that ALPRs create more problems than they solve.

In March 2022, the American Civil Liberties Union released a report criticizing Flock Safety's business model and products.[60] In 2023, the ACLU acknowledged some uses of ALPRS could be acceptable, but emphasized the need for careful controls:

We don't find every use of ALPRs objectionable. For example, we do not generally object to using them to check license plates against lists of stolen cars, for AMBER Alerts, or for toll collection, provided they are deployed and used fairly and subject to proper checks and balances, such as ensuring devices are not disproportionately deployed in low-income communities and communities of color, and that the "hot lists" they are run against are legitimate and up to date. But there's no reason the technology should be used to create comprehensive records of everybody's comings and goings — and that is precisely what ALPR databases like Flock's are doing. In our country, the government should not be tracking us unless it has individualized suspicion that we're engaged in wrongdoing.

Menlo Park, California opted out of a contract in 2023, bucking trends of nearby cities, but revisited the question and approved Flock cameras in 2024.

In June 2024, a judge in the Norfolk, Virginia, Circuit Court ruled that collecting location data from the city's 172 Flock ALPRs constitutes a search under the Fourth Amendment, and cannot be used as evidence in a criminal case when collected without a warrant. The ruling likened ALPR location databases to tracking devices, whose use by police was previously found unconstitutional without a warrant in United States v. Jones. Later, in October 2024, the Institute for Justice filed a federal lawsuit against the Norfolk Police Department on behalf of two local residents, similarly asserting that the department's use of Flock ALPRs constitutes illegal surveillance in violation of the Fourth Amendment. In California, state law prohibits sharing license plate reader data with federal agencies, but in 2025 it was reported that several state and municipal law enforcement agencies have nonetheless done so.

In May 2025, it was reported by 404 Media that Flock data had been queried for use in immigration enforcement. According the company, a pilot program of investigation with Customs and Border Protection and Homeland Security Investigations was initiated to help combat human trafficking and fentanyl distribution. They halted the program in August because of "confusion and concerns" about the purpose of the investigations.

top 5 comments
sorted by: hot top controversial new old
[–] Diva@lemmy.ml 9 points 2 days ago
[–] tal@lemmy.today -2 points 2 days ago* (last edited 2 days ago) (2 children)

I don't condone destroying ALPRs, but I'm really not happy about the proliferation of them, either. It really does mean that everyone's movement is recorded, and it's not really realistic to limit monitoring to law enforcement. And it's not legal to not have tags on the vehicle (understandably, since law enforcement wanta the ability to check).

considers

I guess what one would what is a way to be able to identify a given vehicle with a warrant, but not let anyone without a warrant correlate its movements. Hmm.

considers

So, what you could do is remove the physical, visible-light-readable tags. Shift to radio querying. Assign each vehicle a private key. Assign law enforcement a pre-assigned list of private keys. Distribute their public key counterparts to vehicle manufacturers.

One can issue a "who is nearby" query. That query contains the identity of one law enforcement public key. Each vehicle responds with a tuple of its GPS coordinates, VIN, and a timestamp. It cryptographically signs the result with the vehicle private key, encrypts it with the specified law enforcement public key, and then transmits it.

Then, access to law enforcement private key decryption is restricted by the warrant process.

There is a certificate revocation list for any potential compromised law enforcement keys that can be updated at maintenance time. Vehicles will not honor requests using revoked law enforcement keys.

That permits:

  • Any individual entity, be it business or other, to take a "snapshot" of nearby vehicles. They can do so without needing to worry about getting a good angle on a plate.

  • This snapshot is useless to anyone who does not have access to the private law enforcement key. This cuts private business out of the "use ALPRs to build mass surveilance database for non-law-enforcement use".

  • While the system isn't immune to forging a location, if someone can compromise trusted hardware, it's a lot harder than the present "walk up to the back of any car with a screwdriver and you can take their plates" method.

  • It'd be potentially possible to jam a transmission, but it's possible to obscure license plates today, and I imagine that non-responding transponders would be pretty easy to identify at tollbooths and the like.

Downside is that it kills existing investment in ALPRs.

[–] electric_nan@lemmy.ml 3 points 2 days ago (1 children)

I do condone destroying ALPRs. I just wanted to provide a balancing opinion :)

destroying ALPRs would seem to be politically protected speech

Or, and hear me out; no.

I legitimately enjoy and appreciate the thought you put into this but your solution misses the forest for the trees - surveillance and data collection is wildly out of control and should be curtailed, not augmented.