Reposted by Micah LeeRobert Evans (the Only Robert Evans) @iwriteok.bsky.social · 26/09/2026no they weren't very close to 0% of the SS were hanged the vast, vast seriously vast majority of people who carried out the Holocaust weren't ever punished. 904563856
Micah Lee @micahflee.com · 23/09/2026Flock Safety says they did a 2026 pen test. Flock customers can download the pen test report. Do you work for a city that uses Flock? Can you please, uh, download the report and send it to me? www.flocksafety.com/blog/flock-s...flocksafety.comFlock Security Testing 2026: What the Bishop Fox Penetration Test Found — Critical and High Findings Fixed and Independently VerifiedFlock's 2026 penetration test was conducted by independent security firm Bishop Fox. See what was found, what's fixed, and how Flock verifies remediation. 32010
Micah Lee @micahflee.com · 22/09/2026You’re briefly mentioned in the book actually, on page 463-464 050
Micah Lee @micahflee.com · 20/09/2026According to a leaked internal email, Flock is offering buyouts to employees so they can quit since customers are fleeing and everyone fucking hates them www.wired.com/story/flock-...wired.comFlock Offers Employees Buyouts as Customers FleeAs dozens of cities end contracts for its controversial license plate readers, Flock is rolling out a voluntary severance program, WIRED has learned. 27320
Reposted by Micah LeeNatanael, Tech janitor @natanael.bsky.social · 17/09/2026Lol xdaforums.com/t/3-18-71-pe...xdaforums.com 1141
Micah Lee @micahflee.com · 16/09/2026this is the responsible way to disclose technofascist vulnerabilities, no? 170
Reposted by Micah LeeExploit Code Not People @cooperq.com · 16/09/2026Amazing research by Micah! Give this a read! 0263
Micah Lee @micahflee.com · 16/09/2026I don't see how each camera can't use this exact same API key. It's the key that's used to then go and provision separate device-specific keys 170
Micah Lee @micahflee.com · 16/09/2026Each Flock cameras posts its own MAC address. But who knows, maybe any MAC address will work, or maybe only specific MAC addresses of real Flock cameras in their fleet 280
Micah Lee @micahflee.com · 16/09/2026I mean, I didn't try it so I'm not sure. Maybe there's IP gating or something else. But it sure looks like it 170
Micah Lee @micahflee.com · 16/09/2026Linux version 3.18.71-perf-gaf770dc (android@e593ce924ef6) (gcc version 4.8 (GCC) ) #1 SMP PREEMPT Thu Jun 5 20:15:45 UTC 2025 1291
Micah Lee @micahflee.com · 16/09/2026Read the analysis. Unless I'm getting something totally wrong, you use that API token to make a POST request to hpnotiq[.]flocksafety[.]com/api/v3/…, along with the camera's MAC address, and it gives you OAuth credentials 3652
Reposted by Micah LeeCoach Finstock @coachfinstock.bsky.social · 16/09/2026Yo this is incredible 420531
Micah Lee @micahflee.com · 16/09/2026You can read all the details in my write-up, which also shows exactly where in this public dataset you can find all of this micahflee.com/flock-camera...micahflee.comFlock cameras are riddled with security vulnerabilities and hard-coded credentialsThis morning, DDoSecrets published an exciting new dataset: Filesystem images of the partitions from an in-use Flock ALPR camera. 404 Media and Wired published a joint investigation into it. I downloa... 81018280
Micah Lee @micahflee.com · 16/09/2026HaJ3FgupAm8RrDJW3MHgT9X7Ft27eVaD What is that? That's a hard-coded API token that Flock cameras use to identify themselves and get OAuth credentials, which can then be used to talk to Flock's production servers. Like, anyone on the internet can probably do this right now. 382530849
Micah Lee @micahflee.com · 16/09/2026This Flock camera is running obsolete, end-of-life software. - It's on Android 8.1, released in 2017, support ended in 2021 - It's on Android patch level 2018-06-5 - It's running Linux 3.18, released in 2017 This shit is like 8 or 9 years old, and full of vulnerabilities. 221443308
Micah Lee @micahflee.com · 16/09/2026I tracked down the very likely specific Flock camera itself. It's in Wauwatosa, a suburb of Milwaukee. Here's a photo of it from Google Street View. The GPS coordinates were in the logs 656452
Micah Lee @micahflee.com · 16/09/2026okay I published a blog all about it! bsky.app/profile/did:... 010324
Micah Lee @micahflee.com · 16/09/2026Flock cameras are riddled with security vulnerabilities and hard-coded credentials. Here's my analysis of today's @ddosecrets.org Flock leak micahflee.com/flock-camera...micahflee.comFlock cameras are riddled with security vulnerabilities and hard-coded credentialsThis morning, DDoSecrets published an exciting new dataset: Filesystem images of the partitions from an in-use Flock ALPR camera. 404 Media and Wired published a joint investigation into it. I downloa... 6274114
Reposted by Micah LeeYael Grauer @yaelwrites.com · 16/09/2026For the @theverge.com, I dug into a dating scam network that an @anthropic.com spoke about @sleuthcon.bsky.social. It was later described in Anthropic's extremely thorough threat intel report. www.theverge.com/ai-artificia...theverge.comThe sexy AI-powered dating app scams are hereThousands of people were catfished by scammers supercharged with AI. 34621
Micah Lee @micahflee.com · 16/09/2026I've got a lot of work to do today but I'm getting absolutely nerdsniped by the new Flock dataset. You can download it here. It's all of the Android partitions extracted from a Flock device ddosecrets.org/article/floc...ddosecrets.orgFlock ALPR camera - Distributed Denial of SecretsFilesystem images of the partitions on an in-use Flock ALPR camera, including custom Android APK files installed on the device, as well as its recorded media. The data reveals how the devices track bo... 181551568
Reposted by Micah LeeFaine Greenwood @faineg.com · 15/09/2026The U.S. AI industry is being run by a batshit rationalist sex cult, and no, I am not being hyperbolic - they’re genuinely Like That: 28860751589
Reposted by Micah LeeNaomi Klein @naomiaklein.bsky.social · 15/09/2026Today is the day! A journey that Astra and I started as an essay in The Guardian is now officially out in the world. End Times Fascism – And the Fight for the Living World is in bookstores now. If you are inclined, please buy one from an indie bookseller or borrow it from your local library. 431109300
Reposted by Micah LeeNoura Aljizawi @noura.bsky.social · 10/09/20261/ Exile as "Safe haven" has become an illusion for women & queer activists. Crossing borders is no longer a guarantee of safety when repressive states use digital technology & weaponize intersectional identities to silence them & sabotage lives & rights in exile. Yet, they face such threats alone🧵 11911
Reposted by Micah LeeZack Whittaker @zackwhittaker.com · 09/09/2026Watching this Apple event tout how iPhones will soon be able to record ambient audio/conversations and transcribe "high level notes" for you. It's billed as private and end-to-end encrypted, but I think the bigger harm is the normalization of always-listening devices. It's creepy and not normal. 27992354
Micah Lee @micahflee.com · 09/09/2026“Make Germany Great Again” — what years do you think he’s nostalgic for? 3211
Micah Lee @micahflee.com · 06/09/2026A/I just announced they’re shutting down. “The possibility that our work may cause legal and financial consequences to those who are close to us - or even only have something to do with us - leaves us no choice.” keepitfree.ai/announcement...keepitfree.aiA/I Shuts Down Stay Human · Keep the Internet free 22522
Micah Lee @micahflee.com · 04/09/2026Fetterman was gonna write a pro-Israel op-ed based on talking points from an Israeli ambassador. But his staff didn't tell him when the embassy sent the talking points because it risked violating the Foreign Agents Registration Act www.wsj.com/politics/pol... 27216
Reposted by Micah LeeMicah @rincewind.run · 04/09/2026"elon argues with social media professional, loses badly" will never not be funny 332634330
Micah Lee @micahflee.com · 04/09/2026Not just any rectum. The Kurt Vonnegut rectum bsky.app/profile/mica... 0221
Micah Lee @micahflee.com · 03/09/2026"1Password employees don’t seem impressed by its leaders’ comments based on dozens of emoji reactions we saw in their internal Slack conversations." www.theverge.com/tech/988536/...theverge.com1Password wades into a right-wing mess after funding a Linux projectThe controversy surrounds David Heinemeier Hansson, who has posted strident anti-vax and anti-immigrant views. 0316
Reposted by Micah LeeElle Cordova @ellecordova.bsky.social · 03/09/2026Rough Draft vs Final Draft 253116673306
Reposted by Micah LeeBrennan Kenneth Brown ♾️ @brennan.day · 01/09/2026Shopify, Stripe, Dell Technologies, Block, Cloudflare, Dropbox, Coinbase, OpenClaw, and TapTap. All companies that have given millions of dollars to a project run by a far-right white nationalist. Why are we okay with this? brennan.day/normalized-f...brennan.dayNormalized Fascism in Open Source: $12 Million Given to DHHOpen source has become a safe harbor for far-right politics, from David Heinemeier Hansson's white-nationalist rhetoric and the Omarchy Foundation's $12 million in patron funding to so-called… 210857
Micah Lee @micahflee.com · 02/09/2026I just made a little OpenCode plugin to measure the tokens/sec of various models. Useful for measuring how fast local open weights models are running github.com/micahflee/op... 2266
Reposted by Micah LeeElectronic Frontier Foundation @eff.org · 31/08/2026The risk of being doxxed is top of mind for many movement workers. Learn what you can do to care for your digital footprint without compromising your work.eff.orgDoxxing Safety Pt I: Prevention and Footprint ManagementDoxxing is the deliberate disclosure of personal information in order to bully, harass, intimidate, or instigate a chain of harms against someone. It's a tricky thing to protect against when the jerk ... 213972
Micah Lee @micahflee.com · 29/08/2026With sbx my repo working directory just gets mounted into the sandbox container from the host. So that one dir is still on the host filesystem, and I can open it in VSCode 020
Reposted by Micah LeeRita, antifascist🏴 @oldsquida.bsky.social · 29/08/2026“This is really bad, and I want more people to know what's going on.” 03111
Micah Lee @micahflee.com · 29/08/2026The US just designated an Italian hacker collective (similar to Riseup) a terrorist organization. Please read this article about Autistici/Inventati, which I’ve reposted micahflee.com/the-server-c...micahflee.comThe Server Called Paranoia: Defend Autistici/InventatiFor twenty-five years, an Italian hacker collective has built communications infrastructure designed to survive censorship, surveillance and police raids. On August 26, the United States designated it... 111477
Micah Lee @micahflee.com · 29/08/2026I haven been doing any network isolation, mostly because I haven’t seen a real need for it yet 000
Micah Lee @micahflee.com · 29/08/2026Yeah I don’t like the login requirement. In should check out Lima VM 100
Reposted by Micah LeeBrian Merchant @bcmerchant.bsky.social · 28/08/2026It was a pleasure to chat with the great @hypervisible.blacksky.app about the backlash to Meta's AI glasses, and to luxury surveillance in general. www.bloodinthemachine.com/p/the-revolt...bloodinthemachine.comThe revolt against Meta’s ‘pervert glasses’ is part of a growing stormAI. Data centers. Flock cameras. Now Meta’s “pervert” glasses. Breaking down the latest stage of a mass resistance to big tech with Chris Gilliard, privacy scholar and author of Luxury Surveillance. 519553
Micah Lee @micahflee.com · 27/08/2026Yup. And also so into any other servers you might have access to 100