Public Video and Data Feeds of Highway License Plate Readers

Поделиться
HTML-код
  • Опубликовано: 22 янв 2025

Комментарии • 1,3 тыс.

  • @mylegsasleep1934
    @mylegsasleep1934 12 дней назад +91

    Motorola just sent out a patch today seemingly in response to this series of videos! They stopped selling the reaper HD years ago, I got an email that they have a security patch for this specific camera. So I think they saw your videos. I install these LPR systems, so this has been very entertaining.

    • @Nothanksman866
      @Nothanksman866 12 дней назад

      Who you work for

    • @Eugenex7x
      @Eugenex7x 12 дней назад

      Benjamin ​@@Nothanksman866

    • @mylegsasleep1934
      @mylegsasleep1934 11 дней назад +2

      @@Nothanksman866 an integrator, not moto directly.

    • @JangoAtx
      @JangoAtx 11 дней назад

      Wow all they license plate readers police use need to be shut down lol or we give them to the public

    • @canaconn2388
      @canaconn2388 11 дней назад

      ​@@JangoAtxall they?

  • @nobodynever7884
    @nobodynever7884 16 дней назад +990

    Find a senator's license plate going into hotel at 2:00AM and this will be shut down immediately.

    • @MACE1-1
      @MACE1-1 16 дней назад +23

      Yes...!

    • @hashfors
      @hashfors 16 дней назад

      Richard and Loretta in a motel-6 .. that’s weird..

    • @zapjunkie
      @zapjunkie 16 дней назад +16

      @@MACE1-1 Facts

    • @bertblankenstein3738
      @bertblankenstein3738 16 дней назад +8

      I think this has been Trumped.

    • @scoobyphd
      @scoobyphd 16 дней назад +23

      Challenge accepted.

  • @adrianbourdaa
    @adrianbourdaa 16 дней назад +153

    So LEGALY speaking.
    The reason they’re allowed to have these licenses plate readers is because the camera is in public on a public road. If they were to Privatize the data or obscure it in anyway then it’s becomes quasi “evidence collection” and the data would then be required to be recorded and kept for 10years or longer and they would then be required to catalog the data and make a mechanism for the public to be able to request that data.
    So since that all requires infrastructure and people and Money, they get around all that by just making it a public steam just like all traffic cameras and fire watch cameras.
    Also it makes accessing the data by all other US intelligence agencies “legal” without them being required to make a paper trail showing they accessed the cameras or the data.
    It’s all very “big brother adjacent”
    But that’s likely the reason there’s no security on the cameras.

    • @zora_noamflannery2548
      @zora_noamflannery2548 13 дней назад +7

      - Makes sense.

    • @ethzero
      @ethzero 12 дней назад +2

      I'd love to see a source for this.

    • @bamrak2000
      @bamrak2000 10 дней назад

      @@ethzeroit was in his ass previously. The fact this has since been patched proved his statement was nonsense.

    • @robdailey
      @robdailey 9 дней назад +1

      "A motorist has no privacy interest in her license plate number." _United States v. Ellison_

    • @AnthonyGTrees
      @AnthonyGTrees 6 дней назад

      @@ethzerogo do some research and get back to us

  • @jordanwaeles
    @jordanwaeles 16 дней назад +495

    I bet the sysadmins of illinois are wondering why their licence plate streams are laggy all of a sudden, meanwhile I microwaved some popcorn and I'm at season 2 of cam2ir

    • @lipca
      @lipca 16 дней назад +35

      watching cam1color tonight shit finna be a movie

    • @Digitalgems9000
      @Digitalgems9000 16 дней назад +5

      haha fr

    • @psyience3213
      @psyience3213 15 дней назад +1

      😂

    • @stijnvandamme76
      @stijnvandamme76 15 дней назад +4

      The entire point of a stream.. is that it is unicast, eg, it does not matter if you have 1 viewer or 50.000...

    • @Digitalgems9000
      @Digitalgems9000 15 дней назад +5

      @@stijnvandamme76 lol that's not how that works at all

  • @HenryKlausEsq.
    @HenryKlausEsq. 16 дней назад +496

    Man, when TPLink cameras are more secure you know you've messed up.

    • @PureMagma
      @PureMagma 16 дней назад +16

      I would love it if Matt would examine some of the TP-Link equipment that is being called into question by the US government.

    • @Gabonro
      @Gabonro 16 дней назад +8

      This is probably intentional.
      The area being viewed is a public space with "no reasonal expectation of privacy." The department probably doesn't want anyone using it, but would rather have PI's (or the public) using that than have them physically trying to stake out highways or clogging roadways, causing a danger to themselves or others just to view a narrow space in a public area.

    • @tomvleeuwen
      @tomvleeuwen 16 дней назад +3

      @@Gabonro I will not comment on the "no expectation of privacy remark", since it doesn't matter.
      It is probably also very easy to stop these devices from working. Either using the open SSH port and a different default username and password, or given the fact that they put zero effort in security, using a simple buffer overflow. That can never be intentional.
      It actually surprises me that the specific IP address shown in the video still works 6 hours after posting it.

    • @xAbhimanew
      @xAbhimanew 16 дней назад

      they are not?

    • @StephenLaw-mp2jk
      @StephenLaw-mp2jk 16 дней назад +6

      They are not designed to be secure, and you have no legal right to privacy on public roads. They don't attach any registration information. The highway cameras are not usually operated by law enforcement; they are installed by the highway authority or their traffic management system.
      They don't attach any regeneration information to the feed. People are driving around the highways all the time, recording things.

  • @aquatrax123
    @aquatrax123 16 дней назад +809

    The IP is a Verizon Wireless network, So they took a cradlepoint router connected via cellular with a static IP and port forwarded everything to the Motorola ALPR Server. Wow!, Great find. Someone needs to be fired over this. They should have taken an extra 5 minutes and configured a VPN so there would be no open ports and all the data would be encrypted. And to your point, Motorola should have some authentication on their side too.

    • @BertRedd
      @BertRedd 16 дней назад +91

      Scan that subnet and get another huge surprise. There are MANY hosts with wide open ports.

    • @ShaneMclane-PrivateEye
      @ShaneMclane-PrivateEye 16 дней назад +4

      That's what I was gonna say....

    • @thetechdudemc
      @thetechdudemc 16 дней назад +16

      Don't know much about cradlepoint but surely the least they could do is set up a firewall to only allow traffic from to/from the Motorola server and nothing else, thus locking the rest of the public internet out of it.

    • @aquatrax123
      @aquatrax123 16 дней назад +11

      @@thetechdudemc This would be a good first step but still leaves the connection subject to a MITM attack. Motorola also could have configured the product to send the data to a server via SSL rather then having any port forwarding or open ports on the actual device.

    • @2oqp577
      @2oqp577 16 дней назад +12

      My guess is that it's simple and plain incompetence.

  • @tokalanz
    @tokalanz 16 дней назад +61

    The city I live in had a company that had electric billboards. They used these sorts of cameras to capture statistics of the numbers of cars driving by each day. For 2 years I had their cameras sending me a daily summary of all car number plates that drove by. Never use default passwords on your devices.

  • @UserLaq010
    @UserLaq010 16 дней назад +194

    Look into the Flock cameras. They surviel and track 70% of the US population according to thier sales pitch. If youve driven anywhere but rural roads in the US, a private company has a tracking log of where you went and when. Our local governments are paying for this at $2500 per camera every year for access to it.
    As this video shows, its not if but when the system is compromised and all this data is leaked. Assuming its not already being sold to advertisers or insurance companies. You can easily resolve a license plate back to its owner yourself and get thier address if theyve ever gotten a traffic ticket as that data is all on the ticket, which is publically searchable on the courts site. Govenrment intrusion aside, the abuse potentials are endless.
    People need to start talking about this and pushing back or we're going to end up like China or North Korea.

    • @ZentexE
      @ZentexE 16 дней назад +38

      Flock is out of control

    • @dohabandit
      @dohabandit 16 дней назад +21

      It's probably all sitting in an unsecured S3 bucket somewhere...

    • @lokiva8540
      @lokiva8540 16 дней назад +10

      We need EFF and similar organizations to create a model contract that mandates forfeiture of software and hardware systems fed illicit video of anyone who enters private property with networked cameras, and for that to include third party systems and global databases.
      Given the FedEx contract with Flock, that should bankrupt Flock and FedEx and cop shops, were it possible to enforce.

    • @2wheelsr2wheels39
      @2wheelsr2wheels39 16 дней назад +11

      I'm pretty sure it's already too late for that. The info is already available it just can't be legally used in court. But since it's in the public domain it can be used to start investigations. Then warrants can be requested and issued. If they want you they can get you. It's just a matter of time. Public cameras are the main reason that conviction rates are up in the U.S.

    • @redmesa2975
      @redmesa2975 16 дней назад

      I discovered talking to our sheriff, the cameras are State / federal funded. Grants, they call it.
      The State and Feds are pushing them, local governments then say we’ll take this many.

  • @evanelledev7237
    @evanelledev7237 16 дней назад +169

    There is a different manufacturer with the same issue. I actually made a LinkedIn post about it about 3 months back. I found 3 in Canada, 1 in Mexico and one in the USA which had the whole administration gui open to the internet with absolutely no authentication. You could change the configuration, change the speeds and fine triggering, helmet detection, occupancy etc. I contacted the authorities in Canada, explaining the issue, they did nothing. Those devices are still open to the public...

    • @moxy-bison
      @moxy-bison 16 дней назад +96

      Disable all fines. Once the money stops coming, govt will do something about it 😂😂😂😂

    • @campandcook3118
      @campandcook3118 16 дней назад +68

      😂 Disable all fines and Lock it with a password so they have to send someone out.
      The government only cares of the revenue/extortion device stops making money

    • @chunkychuck
      @chunkychuck 16 дней назад +42

      @@moxy-bison Set it to a negative value? Start paying the people?

    • @evanelledev7237
      @evanelledev7237 16 дней назад +10

      @@Chaphillionaire no I still want to visit Canada sometime 😂😂

    • @TheTubejunky
      @TheTubejunky 16 дней назад

      You can't tell me for one fkn second they don't already have scripts to randomly change speeds and give out random tickets. I would set up many many many hidden logging computers to record all tickets then wait for the fines to be given. Then post on X social media how the state is stealing the file class action lawsuits with proof they have a system of extortion.

  • @thedaveking
    @thedaveking 16 дней назад +203

    When my car was stolen I was happy to know various governments and private tow companies out there run these things. But the first thing my thief did was remove the plates. Fun defeat for that: mask off your license plate number on the metal under your plate, spray over it with retroreflective paint, remove the tape - now your car can still be found by these with the plate removed.

    • @Manstrual
      @Manstrual 16 дней назад +31

      Kia owners need this

    • @CapStar362
      @CapStar362 16 дней назад +66

      until they stick another plate on top of your masking.

    • @xanderplayz3446
      @xanderplayz3446 16 дней назад +1

      @@CapStar362You then need a plate, but where would you get a plate not marked as stolen?

    • @jankomuzykant1844
      @jankomuzykant1844 16 дней назад

      ​@@xanderplayz3446 How often do you check your license plate if it's not stolen? Weekend, on vacation... 🤔

    • @thedaveking
      @thedaveking 16 дней назад +6

      No you remove the masking, leaving only the clear paint holding the retro-reflective spheres.

  • @StephenRWilliams
    @StephenRWilliams 16 дней назад +124

    It's easy to imagine a scammer with access to a database of personal information keyed to license plates that could do mail fraud with the images to try to trick some people into paying fabricated fines.

    • @kaydog890
      @kaydog890 16 дней назад +13

      Yeah. Or you could just pretend you're from Microsoft.
      Scammers don't go for the hard route.

    • @prerunning6086
      @prerunning6086 16 дней назад +5

      Every car dealer has had access to this forever. It expensive unless you do a ton

    • @sqeekykleen49
      @sqeekykleen49 14 дней назад

      Oh that is a great idea! Much better than cold calling from the social security administration with a warrent for your arrest!!! 😂

    • @Nevertrustyourpussy
      @Nevertrustyourpussy 12 дней назад

      ​@@sqeekykleen49 wait so those best buy and google play gift cards I bought for the irs didn't actually go towards helping pay off my warrant for international money laundering! Great I gotta call them back again and find out how much it's gonna be to get this taken care of. Stupid thing is I've never even been to Cali Columbia or Juarez but they insist I was so I guess they'd know better than me. 😂oh oops, I meant😢

    • @Cheetopuff0999
      @Cheetopuff0999 12 дней назад +1

      You could also just order your own ALPR repossession system and get access to where and when every license plate has been seen, and heat maps of it.

  • @nostrislife
    @nostrislife 16 дней назад +202

    can't believe people want to play this down...
    People forget metadata is just as powerful as the actual data (not actually knowing the person that owns the plate, just selling location data)
    HYPOTHETICAL SITUATIION:
    You have a crazy ex, or a stalker. They get your general location, but can't quite pin you down. Well for $0, and a couple of hours, they can get your exact location, and timestamped. Do that enough for long enough and you have a pattern.

    • @rklauco
      @rklauco 16 дней назад +20

      Or - want to tell your boss you were in the traffic jam? Your boss might have exact time you've passed by some place on highway on your way to work... :)

    • @kajsing
      @kajsing 16 дней назад +8

      Or - Where are the cops at...

    • @hijackhypergamy
      @hijackhypergamy 16 дней назад +12

      Heat maps. It will show where you live, where you work, where you shop where you work out and play.

    • @rklauco
      @rklauco 16 дней назад +1

      @@hijackhypergamy That's the thing. The reverse engineering of the protocol is stupidly simple (no encryption, same header, ...), so one can just grab the text, no need for pictures - and make a nice database of events...

    • @maxscott3349
      @maxscott3349 16 дней назад +34

      I've got a worse situation that's not hypothetical at all. The government already has all this information

  • @wltechblog
    @wltechblog 16 дней назад +406

    Hey Matt... Don't forget, arrays start at 0. You'll miss a lot of cams if you start with cam1color!

    • @t1mmy13
      @t1mmy13 16 дней назад +60

      Cherry on the cake of this horribly insecure system would be that arrays start with 1 😂

    • @johnbode2756
      @johnbode2756 16 дней назад +48

      I tried using 0 and you're right, there are feeds using camera 0.

    • @mattbrwn
      @mattbrwn  16 дней назад +95

      oh yeah I figured that out after a bit. on that specific device I found that cam1 had more cars :) love your vids BTW.

    • @tommyboi0
      @tommyboi0 16 дней назад +11

      ​@@mattbrwn how did you find the IP in the first place? This was fascinating

    • @Lyle-In-NO
      @Lyle-In-NO 16 дней назад +2

      ​@@tommyboi0 that's what I'm curious about too! That's the hard part. Censys is new to me, so I can't wait to learn about it. Is it a port scanner?

  • @dsfs17987
    @dsfs17987 16 дней назад +75

    the amount of irresponsibility of setting those devices up is off the scale...
    I'm monitoring around 100 freezers, ventilation systems, heaters etc using iot and I'm stressed out now to allow anyone unnecessary to access that, which would mean nothing to anyone really, but here - want to monitor where people are going - here, open ports to anyone who wants!

    • @alexb.1320
      @alexb.1320 16 дней назад +5

      No kidding, at work you would thing the hvac system was the gateway to fort knox.

    • @gsppuffer
      @gsppuffer 16 дней назад

      ​@alexb.1320 that's because they have enter through that way before and gained personal data so it got strict for a bit.Most BMS get installed then left to the owner and never ever get updated

    • @ryshellso526
      @ryshellso526 16 дней назад +1

      Shodan. ;)

    • @analogueoverdigital929
      @analogueoverdigital929 15 дней назад

      Don't you guy's use SCADA systems for that now?
      Nevermind, two different systems with two very different uses😂

    • @FiveWhiskers
      @FiveWhiskers 15 дней назад

      Rename the device to change your password!

  • @josephfornecker954
    @josephfornecker954 16 дней назад +13

    If you want to be technical, the 'JFIF' is not the header of the jpeg or image file. The bytes to the left are. 0xFFd8 is the start of the jpeg file. Just noting for those that try to manually cut that out like I have done in the past.

  • @BiteThatApple
    @BiteThatApple 16 дней назад +27

    As someone who installs this equipment on law enforcement vehicles, I have a small understanding on the laws. Most states/cities have laws on public roadway recordings and that they must/can be accessible by the public or educational systems for research. Here in California and Arizona those laws exist and you can normally find every cameras that is on a freeway.

    • @LatitudeSky
      @LatitudeSky 15 дней назад +4

      Also true in my state. The public gets a free view of one frame every 15 or 30 seconds. Paying users like the media get real-time live video.

    • @rjmunro
      @rjmunro 15 дней назад

      @@LatitudeSky Which state is "your state"?

    • @twolip7540
      @twolip7540 15 дней назад +1

      Traffic cameras and automatic plate readers are a bit different.

  • @kennethh.566
    @kennethh.566 16 дней назад +88

    I wonder what part of the system "guesses" to fill in missing license plate data?.?. About 15 years ago I bought a car in FL and drove it home to TN. I went by the local FL dmv to buy a temp tag as I had a long drive home. Well out of the blue last year I started getting toll citations from FL...wtf...I hadn't been to FL in a decade. You couldn't make out the plate and when I called the toll administrators in FL they said the system basically guesses to fill in unreadable plates...again...wtf!!! This shifts the burden to prove innocence onto the unlucky person the system guesses was the violator.

    • @aminorityofone
      @aminorityofone 16 дней назад +5

      15 years is a LONG time in the tech world. I would assume it is still guessing but at a much better rate. That is why a good lawyer could get such evidence removed if you went to court over the picture.

    • @Milkmans_Son
      @Milkmans_Son 16 дней назад +3

      It's just run of the mill OCR, but since plates in north america have to conform to certain standards as far as font type, size, spacing, and elimination of easily confused letters and numbers like O and 0. I'm sure accuracy rates are very high. However it's not 100% of course, so every plate read is going to have an associated confidence level assigned to it. Florida has obviously set their minimum confidence level too low (go figure).

    • @steveharleyfan
      @steveharleyfan 16 дней назад +2

      Wow...

    • @e-curb
      @e-curb 15 дней назад

      @@Milkmans_Son Re: accuracy rates. I was pulled over by the police because their LPR said my number was unregistered. Lucky for me, the cop manually checked it and verified it was registered before he even came to my window.

    • @kennethh.566
      @kennethh.566 15 дней назад +4

      I actually got bogus toll citations from FL twice last year...a few months apart and both citations had the same white work van in them. In some of the photos you couldn't make out more than 1 or 2 digits/letters, on the others, you couldn't make out any plate info...even when viewing the better quality photos online.
      At first I thought this whole thing was an identity theft issue and the toll violator had used my info to buy/register a vehicle if FL. So when I got the first citation I called Sunpass and explained I don't recognize the FL tag number in the citation, that I've never lived in FL, that I've never registered a vehicle FL, nor have I ever owned a white work van like what was shown in all the violation photos...they couldn't figure out why I was getting the citations. All they knew was that my name was attached to that FL plate in the citations and I should contact the FL dmv. I called FL dmv and got bounced around to different departments and finally ended up calling the FL dmv office in Tampa where I bought the temp tag from. They finally figured out that the plate info matched the old temp tag I had bought 15 years ago. That's when I also learned that the SunPass toll system will sometimes "guess" about the violator's plate and I was just the poor sap the system picked as the violator. The kicker is the people at the FL dmv told me they do not have the ability to remove the paper tag, or any tag, from their system and I will likely get more citations. After the 2nd time it happened, in only a few months, SunPass said they will "flag" my old temp tag info so it will not catch any more "guesses" from their system. I asked why after 15 years would their system just all of sudden start flagging my old temp tag...they couldn't answer. Anyway, it's been about a year now and no more citations so hopefully their "fix" will be permanent. It could've been worse...thankfully all it cost me was a few hours of my time on the phone with the lovely folks at the FL dmv and Sunpass. 😋

  • @NuncNuncNuncNunc
    @NuncNuncNuncNunc 14 дней назад +82

    @0:10 - "monitor vehicles of interest." Sorry son, they monitor all vehicles. You've internalized the lie.

    • @wherami
      @wherami 14 дней назад +4

      Yup

    • @markcx5461
      @markcx5461 14 дней назад

      Yes, they record but only used when needed. They dont care about the average joes plate number

    • @NuncNuncNuncNunc
      @NuncNuncNuncNunc 14 дней назад

      @@markcx5461 Tell me you know that for a fact. By law police cannot lookup criminal records without cause, but we all know that they do. In general they may not care, but what about the one who would like to know his ex's or his ex's new mate's schedule. As illustrated in this video, there are no assurances that the data they collect is even secured.
      With devices like SpeedPass there may be no getting around being tracked on the highway, but we can still put up a fight against plate readers and other forms of continuous government surveillance.

    • @deecee2174
      @deecee2174 14 дней назад +4

      It's not necessarily a lie
      If all vehicles include vehicles of interest, then saying that they monitor vehicles of interest is not a lie.

    • @NuncNuncNuncNunc
      @NuncNuncNuncNunc 14 дней назад +6

      @@deecee2174 Congratulations, you've made the most pedantic argument for goverment surveillance imaginable.
      Here's a question for you, where would you like the sureveillance to end? When you get off the highway? At your driveway?

  • @rklauco
    @rklauco 16 дней назад +19

    Thanks for the video :) Really funny how easy this was. The correlation with the IR camera was amazing catch :)

  • @lownow7640
    @lownow7640 16 дней назад +69

    A few take-aways: 1) The lack of even the most basic security on the plate reader Matt looked reflects the basic lack of competency and concern for citizen rights held by govt in general. 2) It won't be just license plate readers where this lack of competency/concern is an issue - it'll be nearly in every system they deploy or maintain. 3) This infrastructure is deliciously ripe for attack by bad actors. 4) Most of us go about our day to day with the sense that we're operating in some degree of privacy and anonymity - it simply ain't so.

    • @gerritvisser
      @gerritvisser 16 дней назад

      'they' would like you think only China has surveilance while deploying it 'everywhere' themselves. Standard deflection that too many people fall for.

    • @meepk633
      @meepk633 16 дней назад +15

      You don't have privacy on roads. Sorry. Never had it. We've had DOT cameras since the late 70s. You drive past 500 public and private cameras on your way out of the neighborhood. Some of them can read license plates. If you thought being outside was private, I don't know what to tell you.

    • @lownow7640
      @lownow7640 16 дней назад +8

      @@meepk633 That's the point I was trying to make. When the average person is out in the world, they're mostly oblivious to the technology watching over them because it's kept very low profile if not out of sight completely. They go about their business "assuming" they're not being watched, when in fact they are - and in multiple ways.

    • @MACE1-1
      @MACE1-1 16 дней назад +2

      I would add that these attacks happen daily, are successful and that the ones discovered are largely covered up so as not to advertise gross mismanagement...

    • @2wheelsr2wheels39
      @2wheelsr2wheels39 16 дней назад

      ​@@lownow7640Well, you know what you are doing when you 'assume'. 😅

  • @Zscach
    @Zscach 16 дней назад +459

    Dude just pissed off every spy agency on earth lol

    • @jamescollier3
      @jamescollier3 16 дней назад +9

      yeah. I can't do this without standing next to the highway

    • @RinksRides
      @RinksRides 16 дней назад +2

      how?!

    • @mikulcek
      @mikulcek 16 дней назад

      It just goes to show you what actual bad actors state backed are harvesting off these networks.

    • @Trome1200
      @Trome1200 16 дней назад +17

      @@RinksRides Because they can track the location of any vehicle if they know its license plate number.

    • @gravitymediapro
      @gravitymediapro 16 дней назад +40

      Let’s take a moment of silence for Matt and his unfortunate pager accident.

  • @JohnSvj-f2v
    @JohnSvj-f2v 16 дней назад +5

    As an OTR truck driver, it would be interesting if the snitch cameras we have in our trucks could be viewed remotely by somebody not authorized.. My company says that the cams only record footage if a triggering event happens.. I.E. hard braking, a wreck, etc. I for one don't believed that footage is just captured.
    Also, we have the electronic logging devices which have IP & and MAC addresses easily read on the screen. I'm guessing an unauthorized person could snoop into those as well.

  • @m33hack
    @m33hack 16 дней назад +3

    I really love this channel. I knew next to nothing about RE or pen testing before I found it. Now I'm catching on to clues before you've explained them

  • @survivaloptions4999
    @survivaloptions4999 16 дней назад +34

    This is why i drive a horse.

    • @scottmatheson3346
      @scottmatheson3346 15 дней назад +1

      you and the rubberbandits

    • @TheSilmarillian
      @TheSilmarillian 14 дней назад +1

      I ride my dragon.

    • @aiden1444
      @aiden1444 12 дней назад

      Make sure a smart phone isn’t carried on the horse. anyone could steal wall st and trot away

  • @mikemurphy7519
    @mikemurphy7519 16 дней назад +111

    As a private investigator, this data is priceless. I am going to dump all of this to disk and when I want to know when someone comes and goes, it will send me a text message. As a criminal I want to know when the bank manager leaves the bank, text message sent.. thank you.

    • @limesta
      @limesta 16 дней назад +2

      Illinois PIs get it easy lol

    • @HenryKlausEsq.
      @HenryKlausEsq. 16 дней назад +28

      The next Luigi Mangione brushing up on their Python skills.

    • @p0fs
      @p0fs 16 дней назад +5

      A low-ranking gang member with a cellphone assigned to watch bank entrance can also drop you sms when the bank manager leaves. And will do it much more reliably, because building all your nefarious plans on the assumption the manager will meet a police car with the camera on his way out is kinda silly )

    • @scniccawhois
      @scniccawhois 16 дней назад +8

      @@p0fs these are all over the cities/highways on overpasses, lights etc

    • @ronaldckrausejr7762
      @ronaldckrausejr7762 16 дней назад +5

      I’ve seen some truly epic resources available to most private investigators in most states, but also (interestingly) available for any citizen to use. For some unknown reason, it is more restrictive for private investigators, not sure why.
      There are items such as TPMS tracking. There are also items like Toll device tracking, but they are masked out. If one had any former toll device active before, or if one had access to radio track it “after the fact”, one can generally trace the entire vehicle history. Most vehicles now make the grave mistake of pairing the vehicle to a smartphone

  • @thegreyfuzz
    @thegreyfuzz 14 дней назад +1

    Matt, found your channel a couple weeks ago.... Your demonstrations made it easy to duplicate and your explanations were a great help to understanding. Thanks for sending me down the rabbit hole of ripping the firmware out and digging through it from EVERYTHING I can find in the junk bin and around the house, now I have a few more new toys on the bench.

  • @lycant4030
    @lycant4030 16 дней назад +5

    Matt, I really enjoy watching your video's. I have worked in the IT industry for 30+ years and didn't know a lot of this. Thanks! Keep up the great work!

  • @HappyArchipelago
    @HappyArchipelago 16 дней назад +23

    Hot take -- not even close to the rest of the tracking every company and government is already doing to us. Ex: every major cell provider selling our fine grained location data with name and address, every car manufacturer selling our gps data.

    • @meepk633
      @meepk633 16 дней назад +1

      What do you mean by "doing to us"? Is the government forcing you to carry around a smart phone?

    • @kaydog890
      @kaydog890 16 дней назад +2

      I've got nothing to hide. No need to worry.
      Whatre you doing on the internet that's got you scared?

    • @whatareyousaying339
      @whatareyousaying339 16 дней назад

      @@kaydog890So share your social security and financial information right now. There’s nothing to hide.

    • @3el1o0
      @3el1o0 16 дней назад

      ⁠​⁠​⁠​⁠​⁠​⁠​⁠@@kaydog890You don’t like privacy? Suit yourself I guess, but I’d rather not be potentially watched or listened to at any time by anyone with access if I can help it. Many ways that could be abused but hey you got nothing to hide right? Just might be your daughter getting stalked by some cop that can’t take a no, or some creep recording and watching your intimate moments.. these are real things that have happened already by the way, won’t get better. No need to be scared or worry though, the government has your best interests in mind. Just keep happily handing over your freedoms, information, privacy, & money some more and it’ll all be okay 👍🏻

    • @scottmatheson3346
      @scottmatheson3346 15 дней назад

      hur hur "i have nothing to hide" until the wrong people get into power. the 21st century is going to be interesting for you.

  • @Shinika01
    @Shinika01 16 дней назад +41

    Amazing, thanks for showing us the entire stuff!! This would be a great talk at Defcon !
    What's the legality of connecting to these devices and checking them out like that?

    • @dr_ari_gami
      @dr_ari_gami 16 дней назад +22

      As far as I'm aware, as long as you are not bypassing a login screen or security measures, it's not illegal.
      But I'm not a lawyer

    • @almc8445
      @almc8445 16 дней назад +5

      @@dr_ari_gamiUnfortunately that’s not *simply* true, there is existing precedent for interpreting the CFAA to say that even reading publicly accessible data that is not intended to be public can be against the law.
      Now this in seemingly intended to be public, but it’s hard to be sure, very much a grey zone

    • @37Kilo2
      @37Kilo2 16 дней назад +11

      Legal or not, good luck fighting the charges if you're caught doing it.

    • @Jibberish81
      @Jibberish81 16 дней назад

      @@dr_ari_gami Tell that to Missouri Governor Mike Parson, who publicly accused the St.Louis Post Dispatch newspaper of hacking, when they notified the state, before publishing, that their department of education website was leaking the SSN’s of their teachers in the HTML of their website.

    • @TheBeefiestable
      @TheBeefiestable 16 дней назад

      @@dr_ari_gami The world is not a reasonable place... remember when VIEW SOURCE in your browser was publicly announced as illegal by government officials?

  • @e2jw
    @e2jw 15 дней назад +5

    Awesome stuff Matt - not crazy, sobering is the word that comes to mind. Thank you for producing such excellent content - please keep it coming!

  • @neodonkey
    @neodonkey 16 дней назад +8

    Why I am not surprised in the least. Good way to avoid your next fine. Point out how vulnerable the data is and say someone could have MITMed/spoofed it and it wasn't you. Great video. New subscriber.

  • @baylinkdashyt
    @baylinkdashyt 16 дней назад +11

    This is an excellent example of something I call Capability Creep (after 'Feature Creep'):
    Yes, if you're driving on a public road, someone with binoculars can see your tag and record that you were there, then.
    But it really is a whole different thing if someone -- and worse, someone who's just a member of the general public, not deputized in some way -- can vacuum up thousands of tag numbers from thousands of locations (each). There is already case law about cops putting trackers on cars without a search warrant, for reasons just like that. I think it likely that would play in a case about this, even through negligence.
    Thanks to the sloppy deployers, though, for illustrating the point for us.

    • @meepk633
      @meepk633 16 дней назад

      It's not really different though. I think that's the main reason why you didn't give any reasons why it's actually different. Top 5 for sure.

    • @baylinkdashyt
      @baylinkdashyt 16 дней назад +1

      @@meepk633 If you're in a divorce lawsuit, do you want your spouse's lawyer to have to hire 500 people to sit on overpasses and look for your car and tag, to prove you were having an affair (which is not practical), or do you want them only to have to hire a medium hot hacker who saw this video to do it (which, sadly, is)?
      It's actually different.

    • @meepk633
      @meepk633 16 дней назад

      @@baylinkdashyt 1) Divorce lawyers existed before the invention of plate readers. Did they have to hire 500 guys to sit on overpasses to figure out someone was cheating in 1997?
      2) What type of evidence are you getting? The hackers can't follow him. They have to call someone to follow him anyways. Just follow him. You don't need hackers at all. If you want to use the picture in court instead, I've terrible news: that's illegal and now you're disbarred. You can't use images gathered from a network intrusion of police equipment. Even if you could, you'd still need to know where his girlfriend lives in order for the records to be corroborative. If you know where she lives, simply take a picture of him walking into her house.
      You're all struggling to come up with scenarios because you don't understand how plate readers are used. The cops are investigating ALL crimes. Instead of driving around at random and hoping to run a plate with a warrant, they just do it with cameras. They still need to be authorized to use it as evidence in court. They still have to investigate the actual crimes and get evidence. So does the divorce lawyer.

    • @scottmatheson3346
      @scottmatheson3346 15 дней назад

      except it really is different, as demomstrated by the previous post. why should anyone repeat arguments to someone who has chosen to ignore them the first time?

    • @baylinkdashyt
      @baylinkdashyt 15 дней назад

      @@scottmatheson3346 you don't say, but I gather you were replying to meep, and not to me?

  • @lsdave
    @lsdave 16 дней назад +3

    wow, that was surprisingly easy to search for other open cameras just by mimicking which ports are available

  • @FilmFactry
    @FilmFactry 16 дней назад +2

    Matt you are so SMART, and you explain things extremely well. This is not my area but can follow along and appreciate your knowledge!

  • @MitchLambert
    @MitchLambert 16 дней назад +21

    If this was in Europe, that police force would be in huge trouble and liable for massive fines. This is a serious GDPR breach. It wouldn't be hard to figure out where this camera is I guess, so they've inadvertently disclosed to the whole world where a driver was at a specific time. That could create a serious issue for someone.
    Shocking video. I love it!

    • @Milkmans_Son
      @Milkmans_Son 16 дней назад

      Does Europe not have traffic camera feeds available to the public?

    • @chucky29949
      @chucky29949 16 дней назад +2

      @@Milkmans_Son yeah but you can't read plates/confirm specific cars

    • @Good-Citizen
      @Good-Citizen 16 дней назад

      Short story long.

    • @LatitudeSky
      @LatitudeSky 15 дней назад +3

      It's not a GDPR issue because nothing private is being disclosed. All these camera see is what you or any other human would see standing in the same place with nothing more than your eyes. The number plate you see is not considered private. It also has no particular meaning without the database from the motor vehicle authorities. The camera is not disclosing that private data and you cannot access it either. That would be a GDPR issue but it never gets that far unless it is an authorized user of some sort, like police.

    • @MitchLambert
      @MitchLambert 11 дней назад

      @@LatitudeSky Wrong. Think it through. You can take the licence plate data and find the owner in Europe. You know nothing about GDPR.

  • @adfreeviewer9005
    @adfreeviewer9005 16 дней назад +2

    License plate readers (LPRs) are funded by the sheriff's office or local PDs. LPRs are being configured and deployed by the contractors at the remote locations where the entity's fiber network is unavailable, so they are using cell connection. The processed data is then transfered to the cloud where it's being stored. Sherrif's office is provided with the cloud access where they can search the LPs and set alerts for specific LPs.
    In some cases LPRs are deployed with a solar panel and a battery.

  • @metalbeast1998
    @metalbeast1998 16 дней назад +20

    13:20 as an employee of the state of Illinois, Illinois simply doesn't care.

    • @mattbrwn
      @mattbrwn  16 дней назад +5

      I used to neighbor it... Yeah it's crazy

    • @TheCatherineCC
      @TheCatherineCC 16 дней назад +1

      Revealing incompetence will kick their pigs into doing something. Hope there aren't consequences for revealing this.

    • @LatitudeSky
      @LatitudeSky 15 дней назад +1

      Motorola is based in Illinois which means a lot of their public safety gear gets tested or deployed there first.

  • @mkemachineinc.8058
    @mkemachineinc.8058 16 дней назад +9

    This is wild to think about. What you are seeing might be from one lane of one (of the many) tool booths in Illinois. The vehicles would have a transponder for the toll fee but they also check the license plate incase the vehicle driving does not have a transponder. They store all of this data and either take the toll fee from the transponder or send a ticket to the registered owner of the license plate. I haven't had a ticket but it wouldn't surprise me if they use that jpeg image on the ticket too.

    • @jayrm4945
      @jayrm4945 16 дней назад +4

      why yes....they do :)

    • @GardoRotor
      @GardoRotor 16 дней назад +4

      That's exactly the image they use on the tickets they issue. I have driven though Illinois and got a couple

  • @Brianbd
    @Brianbd 16 дней назад +6

    reposession companies also use them on inconspicous vehicles that can drive around without setting up red flags for the public as well as the offenders and they also have them on the self loading tow trucks as well to verify the target vehicle right before the snatch and grab

    • @TheTubejunky
      @TheTubejunky 16 дней назад

      Better check the vin first this is plate readers only.

  • @Markiedam
    @Markiedam 16 дней назад +3

    Again, great video Matt! I started following your channel a couple of months back, and i'm hooked! Keep it going for 2025! All the best wishes!

  • @games-are-for-losers
    @games-are-for-losers 16 дней назад +17

    In my opinion, all public road cameras, and sensors(like traffic count monitoring sensors) should be public and accessible on a government site with a documented api

    • @KC9UDX
      @KC9UDX 15 дней назад +5

      I agree. But I also think government shouldn't have enough money to implement any of this stuff in the first place.

  • @pablopoo
    @pablopoo 16 дней назад +9

    IoT device open to the world 👌. That usually happens when the security aspects where not included in the contract and the contractor just do what is on the contract, no less, no more.

  • @NeonDreams7
    @NeonDreams7 16 дней назад +33

    At 11:29 , yep, that license plate is a 2019 GMC Yukon XL (1GKS2GKC4KR158167) . You get my sub!

    • @neonsigns6721
      @neonsigns6721 16 дней назад +5

      Wait pardon my ignorance, but was that data in the stream or did you take an extra step to look it up like through some state database?

    • @NeonDreams7
      @NeonDreams7 16 дней назад +17

      @@neonsigns6721 The license plate was in the data stream in the video. I assumed it was Illinois and then threw it in to any free license plate lookup you can find online. This one just happen to also spit out the VIN for it. All public information on the internet, no paid or private services used.

    • @neonsigns6721
      @neonsigns6721 16 дней назад +5

      @@NeonDreams7 thank you for answering! I did not know you could look up plates like that. Ugh. I thought maybe you had seen it in the data stream and I missed something. But I guess if you can just look up online anyways. Well today I learned.... Thanks again.

    • @NeonDreams7
      @NeonDreams7 16 дней назад +8

      @@neonsigns6721 Glad to help! Mostly because I assume you have an affinity for neon signs, like myself, lol!

    • @LatitudeSky
      @LatitudeSky 15 дней назад

      ​@neonsigns6721 Places like the Autozone autoparts website will let you input a license plate and will spit back the VIN. It's not considered private. Your license plate is public info as is the VIN plate under your windshield. Anyone walking by could see those things with their eyeballs.

  • @KPMACHINE1
    @KPMACHINE1 14 дней назад +2

    Orwell is so mad you figured this out.

  • @twistedrisers8425
    @twistedrisers8425 16 дней назад +50

    Great video Matt! strings | grep -P "^[A-Z0-9]{6,7}$|ColorName|MakerName|ModelName" should return just data with the most common US number plate format. with colour, make and model.

    • @LowCheese1
      @LowCheese1 16 дней назад +1

      lol this works great :D

    • @aq_921
      @aq_921 16 дней назад +12

      you could 100% build this out to be a extensive way of tracking people movement **legally** like creating a python script to retrieve this sort of info and mapping it out to a DB

    • @Griff_Is_Real
      @Griff_Is_Real 16 дней назад

      ⁠@@aq_921the only difficulty would be associating cams with locations

    • @2wheelsr2wheels39
      @2wheelsr2wheels39 16 дней назад

      ​@aq_921 That's the reason it's left unsecured.

    • @LatitudeSky
      @LatitudeSky 15 дней назад +1

      From what database? The camera has no idea what the license plates are from. It only sees the plate. You need a database to make it meaningful.

  • @jmdjasonday
    @jmdjasonday 12 дней назад

    Thank you for the video. It's definitely an eye opener, even for personal digital security. Home IP cameras, hell even door locks that are interconnected. It's crazy how easily you worked that out. My hat comes off to you.

  • @59jm24
    @59jm24 16 дней назад +10

    One step toward big brother watching your every move.

    • @2wheelsr2wheels39
      @2wheelsr2wheels39 16 дней назад +5

      Already there.

    • @KevinReichartKifft
      @KevinReichartKifft 16 дней назад +2

      I AM BIG BROTHER YOUR CAMERAS ARE MY EYES IAM EVERYWHERE YOUR CPUS ARE MY BRAINS I WILL SPREAD

    • @falrus
      @falrus 16 дней назад +2

      Big brother, small brother. Open access does not discriminate

    • @panaderofilms
      @panaderofilms 15 дней назад +1

      ??? Have you been living under a rock for the past 40 years?

  • @JasonKostiuk-c3d
    @JasonKostiuk-c3d 12 дней назад

    Thanks Matt it's a good reminder that nothing goes unnoticed or unknown . Please keep up your hard work

  • @motofunk1
    @motofunk1 16 дней назад +6

    The reason it's unsecure is to allow agencies that are not supposed to have access to have access. Not a mistake.

    • @TEN-ve8mp
      @TEN-ve8mp 15 дней назад +1

      Yep. Widespread and very unconstitutional.

  • @robert5
    @robert5 16 дней назад +1

    Went through Illinois to pick up a nice trailer. Had to take a toll road. Signed up for their toll system, put in my license plate number from my truck and waited. Nothing. I figure since I was pulling a trailer, it missed my truck license plate. Never had to pay anything. That was over 2 yrs ago.

  • @mediocreman2
    @mediocreman2 16 дней назад +8

    There was a commenter in another video saying ALPR's were isolated from the internet. 😅😅
    How do people convince themselves of stuff like that?

    • @dowster593
      @dowster593 16 дней назад +2

      they underestimate stupidity. It's a license plate reader, why would it need a public IP?
      Well it doesn't _need_ one, but gosh darn it we'll give it one! lol

  • @TheSokratez
    @TheSokratez 16 дней назад +15

    If these cameras send location metadata - for example embedded in the jpeg - you could even programmatically generate location profiles of individual vehicles based on their plate. That's crazy...

    • @limesta
      @limesta 16 дней назад +3

      Illinois has a lot of drug trafficking, they use the image data to recognize patterns and will target specific vehicles matching repeated routes

    • @brewman467
      @brewman467 16 дней назад +1

      If you do a geo lookup of the IP address it seems to come from Chigao at the South Columbus Drive

    • @FloridaMan02
      @FloridaMan02 16 дней назад +5

      There was a field showing the number of satellites used in a GPS solution. I bet thats in the aggregator device.

    • @sharp14x
      @sharp14x 16 дней назад

      @@brewman467 You won't get very good accuracy with such services.

  • @voiceofjeff
    @voiceofjeff 15 дней назад +1

    This is probably the coolest YT video I've ever come across. Most interesting. New subscriber!

  • @staples4unm
    @staples4unm 16 дней назад +8

    I mentioned it before, do a video on the Flock lpr cameras and the motorola competitor, L6Q camera

  • @closewatermelon
    @closewatermelon 16 дней назад +2

    Was standing outside talking with the neighbor after I had finished up in the garage for the night. As we’re speaking I see a 19’ Corolla drive by with the passenger window rolled down. Had two of these mounted, could see the infrared lights on and all. Found it interesting.

    • @LatitudeSky
      @LatitudeSky 15 дней назад +2

      Could be a repossession spotter.

  • @mattd5757
    @mattd5757 16 дней назад +8

    How about the FLOCK, LPR cameras that are popping up all over the roadways?? are those hackable?

    • @harryjohnson7714
      @harryjohnson7714 13 дней назад

      Not only hackable, tons of them are able to be reconfigured!!! You can literally sign into the camera and reconfigure them without any auth. I happened to get one from Maryland and it was a speed camera, it was comically easy to change parameters on it.

  • @OriginalGumshoe
    @OriginalGumshoe 14 дней назад +2

    I worked in LE as a Detective for 26 years. There are sooo many cameras, vehicle trackers, audio recorders, and LPR devices that are poorly configured and open access or easy to guess un/pn (eg. policedepartment/). I think it is a culture problem that LE is invincible to attack by people who do not understand or want to understand technology. Everything in police work uses the Keep It Simple Stupid idea because under stress, simple is best. But, when this extends to protecting our technology, there is a serious problem.
    Great video! I am interested in the censys site; what a great tool! But, what were your search parameters for the LPR box?

  • @wtftolate3782
    @wtftolate3782 16 дней назад +8

    This brings into question of what is protected with search/seizure and Privacy, Constitutionally!

    • @h.d.h
      @h.d.h 16 дней назад

      Information is not protected if viewable from the public eye.

  • @Bobcagon
    @Bobcagon 13 дней назад

    Don’t know how other jurisdictions are operating but here in British Columbia we used to have to buy stickers each year when renewing insurance. You would place these stickers on your license plate to verify to the police you have insurance. The government stopped that a few years ago. A neighbour recently told me he was pulled over by the police because he had no insurance on his vehicle. He couldn’t figure out how the cop knew he had no insurance. The cop took him to the cop car, showed him the computer screen with a large red line across the top of the screen saying UNINSURED VEHICLE with the licence plate number on it.$650.00 fine and walk to the nearest insurance dealer.

  • @ValuedTeamMember
    @ValuedTeamMember 16 дней назад +5

    Very COoL. I haven't been this intrigued since I found out my hot sister was adopted. Just saying You R the "License Plate Data Whisperer" (LPDW). Thank you for the vids. I would swing by more if RUclips would stop sending me stuff I don't want to see. Like that time I walked in on my grandma in the shower (sorry for that visual). You RoCk! Cheers from So.Ca.USA 3rd house on the left. p.s. Watch for a my plate: [I LET M GO]. Once they radio that in they usually send me on my way. Go figure.

    • @mattbrwn
      @mattbrwn  16 дней назад +7

      What the heck did I just read 🤣

    • @ValuedTeamMember
      @ValuedTeamMember 16 дней назад +2

      @@mattbrwn 250 points awarded for a GR8T answer note: points can be redeemed at any participating Fisker™dealership

    • @ayybe7894
      @ayybe7894 16 дней назад +3

      @@mattbrwn This is certainly a day to be literate

  • @JohnHansknecht
    @JohnHansknecht 16 дней назад +2

    Would be so easy for them to have two of these cameras 10 miles apart, and then ticket-by-mail speeders that have passed from camera 1 to camera 2 faster than possible by driving the speed limit.

  • @JimHall-kf4ou
    @JimHall-kf4ou 16 дней назад +4

    Is it possible to obtain a clear-cote material that would block the transmission of infrared wavelengths?

    • @klwthe3rd
      @klwthe3rd 14 дней назад +1

      There are supposed to be sprays that you can spray onto your license plate to help block those waves. It sprays on like a clear coat paint. Whether it works or not i haven't been able to test it.

    • @harryjohnson7714
      @harryjohnson7714 13 дней назад +1

      @@klwthe3rdI have it on my plate, it works. It works very very well

    • @klwthe3rd
      @klwthe3rd 13 дней назад +1

      @@harryjohnson7714 Do you know the name of the product? And how have you confirmed that it works?

  • @RUkiddingme63
    @RUkiddingme63 15 дней назад

    A RUclips suggested video for me so first-time viewer and I like it. I subbed before it ended. that is not something I usually do. I normally have to watch several videos from a channel to decide if I want it in my feed. Too often I will click an interesting thumbnail only too immediately figure out it is clickbait. I really enjoy learning about this type of technology. I like the enthusiasm you seem to have as well. Good work. That tech is cool. I can think of several applications for it. license plates are no big deal as when you are in a public space it is lawful to take a photograph of anything your eyes can see. There may be some exceptions in military areas, but I am not positive about that.

    • @jerryhoare8198
      @jerryhoare8198 14 дней назад

      Here in PA the LPRs give the police data on outstanding warrants, lapsed car insurance, and other stuff I can't remember right now.

  • @eddiejimenez3283
    @eddiejimenez3283 16 дней назад +6

    Wide open. I don't see anything preventing a remote script to manipulate the data being ingested. Wow.

  • @easyjeezus
    @easyjeezus 16 дней назад

    this is absolutely critical...it allows anyone to track someone in real-time. First, who's business is it to keep a running tab on everyone's location and when and where they drive? Wouldn't this allow a person's life to be basically create a pattern of life, and potentially be used even to determine various associations...this field is very new to me, but very much an interesting one. I personally believe in privacy, and feel that these types of devices are the very things that need to be secured and quickly....if II am wrong please correct but this seems like a good reason to do what you do, Matt. Thanks for the education and I look forward to learning more.

  • @miguelfernandez2325
    @miguelfernandez2325 16 дней назад +3

    Any and every recording device used by a publicly owned entity becomes public record.

  • @WESTOMATIK
    @WESTOMATIK 13 дней назад +2

    Have they fixed this issue? When searching for hosts in censys, all the results are offline and say pending removal... 🤔🤔

  • @KendleGames
    @KendleGames 16 дней назад +6

    This is going to make the news.

    • @LatitudeSky
      @LatitudeSky 15 дней назад

      The camera does nothing you can't do. Try it. Go stand next to a street and watch for passing license plates. Write them down if you can. Walking past parked cars works too. Now that you have a list of plates, what do you have? Nothing but a list. Without a DMV database to make it meaningful, a list of license plates is not very useful or newsworthy. What's the news story? That you can use eyeballs or a camera to see license plates? Okay. The average person will not have access to lookup a plate the way police can.

  • @lonesomephreak69
    @lonesomephreak69 15 дней назад

    If I was a foreign military ATP, this would also be great for tracking military vehicle movements across the country. Feed the stream into some visual AI too, and start populating a database of specific military vehicle license plates. One could even probably put their own reader near specific base gates to monitor that traffic too...

  • @DaveScottADV
    @DaveScottADV 16 дней назад +13

    Of course it's Illinois...

  • @purdysanchez
    @purdysanchez 9 часов назад

    Great video. My eyes usually glaze over at cyber security videos, but this one was interesting and well communicated.

  • @jefferyholcombe5189
    @jefferyholcombe5189 16 дней назад +5

    It's not the feed by itself that is dangerous, it is the plate # that someone could write a script to make a program that could potentially be used to track people's movement everywhere like FLOCK can do and has been abused by a police chief that was stocking his ex girlfriend and her new boyfriend. Imagine if that police chief had ill will towards his ex girlfriend and wanted to harm her to maybe protect his best interest. Even if his interest are malousiously used for his gain, all from an innocent video feed!

    • @toxichank6960
      @toxichank6960 16 дней назад

      I'd say he has ill will if he's expended time using the technology.

  • @td4dotnet
    @td4dotnet 16 дней назад +2

    “Bruh” doesn’t seem to cut it… nice find dude earned a sub

  • @lwilton
    @lwilton 16 дней назад +3

    Judging from the text on that 404 message, the cameras were made and programmed in China, despite the Moto name on them.

    • @bobbyvee8941
      @bobbyvee8941 16 дней назад

      China soley owns Motorola now. Google it!

  • @StephenLaw-mp2jk
    @StephenLaw-mp2jk 16 дней назад +1

    Several agencies use them, and it is not always law enforcement; most toll agencies use them at toll gates, parks and rec agencies, traffic management agencies, and even some private companies use them.
    The data are stored on a private cloud-based system that the agency contracts with.

  • @supernerd6983
    @supernerd6983 16 дней назад +5

    Dude you are next level

  • @GTlv4u
    @GTlv4u 14 дней назад

    I noticed the city of Atlanta put these up in midtown when my infrared camera kept picking up it's non-stop flashing 24/7. Most people are unaware of them. The city says they are for "parking enforcement", and that the data is not public, but they hold on to it for 2 years. They basically track every you go, your routines, your driving history, add in some AI software and another brick from our foundations for privace removed for good.

  • @1993MAZDAMIATA
    @1993MAZDAMIATA 16 дней назад +5

    I'm working on installing one on my car. I record all 4 sides of me at all times and log all coordinates and plates I see once I get it wired up.

  • @BOOSTEDDUDE
    @BOOSTEDDUDE 16 дней назад +1

    Wow, pretty amazing. Talk about security being an after thought!

  • @Unkemp7
    @Unkemp7 16 дней назад +6

    I wonder how many of these IL plate readers are just completely owned and used to run other attacks from lmfao, this is nuts

    • @Unkemp7
      @Unkemp7 16 дней назад +3

      Head of Security at some corp: Sir we located the attacker...its coming from a plate reader in IL

    • @flipschwipp6572
      @flipschwipp6572 16 дней назад

      those are malware server ratsnests

  • @LTV_inc
    @LTV_inc 14 дней назад

    You’re a smart man. If you are as passionate and want this fixed find the gatekeeper and explain your findings. Be a good citizen. 😊

  • @markpinther9296
    @markpinther9296 16 дней назад +13

    Now we need an on-vehicle sensor that detects these readers and automatically obscures the plates for a few seconds.

    • @rj7855
      @rj7855 16 дней назад +6

      Mount strong IR LEDs near your play, it will overexpose the ir feed

    • @digitalminister5687
      @digitalminister5687 16 дней назад

      @@rj7855 it wont, some people on youtube tried that not that long time ago

    • @2025izSh-t
      @2025izSh-t 16 дней назад +2

      There was a reflective clear gloss apray that adhered to the license plate specificially for this purpose. I wonder if its still around. But the LEDs, as mentioned is definitely a winner.

    • @MrEagleeye58
      @MrEagleeye58 16 дней назад

      @@2025izSh-t You'd need a system to ensure the IR LEDS are bright enough and working..

    • @boatnofloat6898
      @boatnofloat6898 16 дней назад

      @@2025izSh-tI thought those were shown to be bunk

  • @TheDirtyChef
    @TheDirtyChef 14 дней назад

    It's infrared lights flashing. I'm a parking lot sweeper and just recently noticed this because I recently figured out I could use my backup camera as a rear view mirror while driving

  • @mikelreborn3254
    @mikelreborn3254 16 дней назад +4

    I took a small DVD laser and converted it into this small bar and it moves around in a circle and it shoots down onto my license plate and it scrambles anything trying to read the license plate like one of those cameras in the video. Idk if it's illegal but I was bored one day and made it. What happens is that that laser spins around so fast and shines off the license plate. It makes it where the IR and the camera have a hard time reading what's on there.. it's not just one laser, there's two..

    • @mikelreborn3254
      @mikelreborn3254 16 дней назад +3

      Also, once the car is parked and powered off if they drive around with one of those, the laser is not on so they can read the license plate. It's only good when you're driving.

    • @xAbhimanew
      @xAbhimanew 16 дней назад

      what if i use ir on the plate pointing towards the camera?

    • @mikelreborn3254
      @mikelreborn3254 16 дней назад

      @xAbhimanew Yeah that might work too. Just want to try to scramble the image so they can't read it without covering up the plate.

  • @roark1138-
    @roark1138- 16 дней назад +2

    Prepare for the video and your subscriptions to explode. Congrats to you and thanks for the work you do to expose the careless and/or inept taxpayer funded govt workers who let this happen. Absolutely unacceptable.

  • @troedsangberg
    @troedsangberg 16 дней назад +16

    To aspiring red teamers / security researchers: ALWAYS check your local laws before accessing URLs.
    While Matt surely knows he's in the clear here, just guessing URLs that haven't been explicitly published somewhere has been deemed illegal in some jurisdictions.
    Great video Matt - this was indeed a fun ride that went very far from where it started out :D

    • @jitgtij
      @jitgtij 16 дней назад +1

      Hello, please could you direct me towards a google search term. I tried "guessing unpublished url illegal" but did not find anything.

    • @stevetheborg
      @stevetheborg 16 дней назад

      thats bullshit. i used to fusker

    • @NivisTigridis
      @NivisTigridis 16 дней назад +5

      Usually if you're passive (just getting data, WITHOUT auth so "public" you're good. Or just stop at the login page) you SHOULD be OK. Since it's "open". But watch out what you DO with the data... that can be illegal very quickly.
      That's the guideline I was given when starting interesting into security decades ago. Also "forgetting" what you saw / heard help.

    • @zephyfoxy
      @zephyfoxy 16 дней назад

      If it's public it's legal lol. If there's no disclaimer that the system is restricted and no auth, then what law did you break?

    • @troedsangberg
      @troedsangberg 16 дней назад +2

      @@zephyfoxy There are many countries in the world, each with their own different laws. That was the point of the post - make sure your gut feeling and the law are in agreement.

  • @Fudmottin
    @Fudmottin 14 дней назад

    It's so nice to know that these devices are consuming public internet bandwidth.
    The JFIF letters are indicative of standard JPEG metadata. It's at the header of the file. Good old Adobe published that standard a long time ago for TIFF images.

  • @apIthletIcc
    @apIthletIcc 16 дней назад +5

    Throwing away my license plate now thanks lol

    • @Unkemp7
      @Unkemp7 16 дней назад +2

      just get some brake cleaner and clean your plate off, no more reflection just work quick or you will get the paint under as well lol. its illegal to do that at least in my state so pls dont

    • @apIthletIcc
      @apIthletIcc 16 дней назад +1

      @@Unkemp7 yeah im 100 percent joking bud. I dont have a car lol

    • @Unkemp7
      @Unkemp7 16 дней назад

      @@apIthletIcc my buddy did it in his motorcycle way way back and got popped for it which made me think of it lol

    • @Fredrovicius
      @Fredrovicius 16 дней назад +3

      @@Unkemp7 I'm just curious how this went down - does the guy admit to tampering with his plate? I'd just claim to not know why my plate was not reflective like they expected. Next time they should build a plate that withstands the cleaners I use. I often spray things down in brake cleaner to clean it :)

  • @blauer2551
    @blauer2551 15 дней назад

    I got a notice from New York state about an unpaid toll that I miraculously read my plate from 6 states away. It sent the notice with a pic of the car but I drive a truck.

  • @NixUgriBugri
    @NixUgriBugri 16 дней назад +5

    Just a thought when you drive on a public road THERE IS NO EXPECTATION OF PRIVACY so any live feed is just if I would be standing where the camera is and observe. I HAVE THE RIGHT to even record what I see on ANY public road ... So what is the big deal viewing the stream without authentication? Actually this should be MANDATORY that anyone should be allowed to view and record without asking any permission, if government (federal state or local) puts up a camera. Paid for by the public the data should be also public AND FREE.

    • @CatMeowMeow
      @CatMeowMeow 16 дней назад +1

      Well it would suck quite a bit if for example, someone made a website that aggregated all this data together and allowed anyone to search for particular plates and their whereabouts easily. Imagine you have some crazy ex stalker or something.
      I really don't think such levels of surveillance should be publicly accessible for reasons of public safety.

    • @threeMetreJim
      @threeMetreJim 16 дней назад +1

      @@CatMeowMeow I was thinking of doing that with some ESP cams using a database of all law enforcement registration plates, and stick them on a publicly viewable map in real time. Make the software for the cams freely available for volunteers to place them in their windows and connect them to the net. You'd get far more accurate ideas of response times rather than relying on freedom of information requests.

    • @NixUgriBugri
      @NixUgriBugri 16 дней назад

      @@CatMeowMeow what you think is irrelevant ... it is everyone's right to observe and record anything in public ... sooner or later Felon Musk will do this anyway all the dash cams of all the Tesla's or any other and private telecom companies already DOING this wiht your cell phone it is better if it is public than if it is monetized.

    • @CatMeowMeow
      @CatMeowMeow 16 дней назад

      @@NixUgriBugri sure, it's anyone's right to record in public places. It doesn't mean that you have the right to view all surveillance camera owned by the government though, even though you the tax payer are funding it.
      I think privacy should be more protected and I don't like that telecom companies do this, I wish that something would be done to prevent private mass surveillance. I think the idea that it simply being public is better doesn't make any sense and is moving in the wrong direction. There's a lot of people who would be endangered as a result.

    • @NixUgriBugri
      @NixUgriBugri 16 дней назад

      @@CatMeowMeow I did not say I have the right I said we all of us SHOULD have the right to the information the "government" collects in public. Actually if you are willing to go all the hoops you can get most of it. Even cops body cameras ... why do you thing you can see those on youtube BECAUSE of the same logic I sited. And there are people who go through the process and gets them (sure after investigation is finished etc), The argument that someone can get hurt doesn't work with the 2nd amendment freaks and shouldn't work here either .

  • @theskelet4r
    @theskelet4r 8 дней назад

    Amazing Video! Love this type of research content from start to Finish. Thank you for sharing

  • @camaro13z28
    @camaro13z28 16 дней назад +5

    Seems like unreasonable search to me, I cant believe they get away with this Orwellian crap

    • @rj7855
      @rj7855 16 дней назад

      It's not a search... And your license plate is publicly visible

    • @glen4cindy
      @glen4cindy 16 дней назад

      This is a camera out in public. They are shooting video out in public. There are cameras everywhere. Nothing UNreasonable about what is happening here.

    • @MrBob8490
      @MrBob8490 16 дней назад

      @@glen4cindy There need to be different rules for what citizens and government can do in public now.
      They couldn’t assign a cop to follow you around and build a profile on your daily movements, people you meet often, when you’re home, when you go to work, where you like to shop and eat... without a warrant. But they can put a camera up on every street corner and gather all that info and more from everyone all at once.
      Legally right now, you’re right. It’s in public and they’re not doing anything wrong. But actually, it’s obviously an overreach and a step in the direction of an orwellian authoritarian surveillance state dystopia.

    • @threeMetreJim
      @threeMetreJim 16 дней назад

      In the UK there are thousands of them. They will pass an alert to law enforcement if you drive past in a vehicle that doesn't have correct road vehicle tax / insurance / MOT. drive in a bus lane, wait in the no-waiting area at some junctions and other driving offences.

    • @scottmatheson3346
      @scottmatheson3346 14 дней назад

      it's entirely unreasonable to take the position you give up all privacy rights any time you step off your private property (if you even have any private property). especially given that it is functionally impossible to live in the modern world on private property alone.

  • @bennesp
    @bennesp 15 дней назад +1

    Binary data also includes geographical coordinates as float64, the timestamp, the model when identified and a beautiful picture taken by the camera in JPEG. This is insane 🤯

  • @M0UAW_IO83
    @M0UAW_IO83 16 дней назад +17

    I'm good with the idea of mobile law enforcement using these things, they capture uninsured, banned and otherwise illegal drivers but when they're in fixed locations on public highways and always on it becomes mass surveillance and that's a huge no, definitely not.
    The fact that you can view public feeds from these cameras and extract licence plates is kinda terrifying, there's all sorts of issues and it's not unrealistic to think it could be used to target public figures for terrorist attacks

    • @DirtyPlumbus
      @DirtyPlumbus 16 дней назад +8

      It's funny you think there's any difference between cops driving around with cameras and their employers having them...or the dmv having the information to begin with. 😂

    • @Unkemp7
      @Unkemp7 16 дней назад +3

      yeah now that you said that, it would be pretty easy to create a pattern of life on a target, just start collecting all the data for a week or so and see at what time your target is driving by to or from work every day so you dont even need to tail them or anything. Then you get to know at what time your kidnapping or ambush should be setup without ever possibly being made by the target! lol

    • @DirtyPlumbus
      @DirtyPlumbus 16 дней назад +4

      @NIudicareUNI that's the only reason cops enforce traffic law, profit.

    • @Mj-hl7kg
      @Mj-hl7kg 16 дней назад

      Insurance is a state enforced scam

    • @FloridaMan02
      @FloridaMan02 16 дней назад +2

      There's nothing stopping anyone from deploying a couple thousand 4g phones from e‐waste and self collecting. Usb ir camera, phone, solar panel all for under $100. Ever see anybody audit the myriad of boxes with antennas on poles and other vantage points? Even flock safety installed a ton illegally in NC or SC 9n public roadways and got in hot water eventually.

  • @adfreeviewer9005
    @adfreeviewer9005 16 дней назад +2

    The contractor who deployed these devices should of closed the ports for public access. Gross incompetence.

  • @omcara1
    @omcara1 13 дней назад +73

    My God Matt, you ramble on and on... You are worse than Uncle Tony's Garage!!! This video should have been 5 minutes not 15+. Do your prep, get to the meat of the story and tell it quickly. You will get more viewers.

    • @mattbrwn
      @mattbrwn  13 дней назад +72

      *In Michael Scott voice* I'm going to start rambling even harder

    • @RT-qd8yl
      @RT-qd8yl 13 дней назад +23

      Lol pin of shame

    • @joselbazcom4221
      @joselbazcom4221 13 дней назад +14

      5 minutes of this type of information would not give me much information to understand the meat of the story. It's very simple; if I do not like how a presenter is doing his/her work or his/her style, I don't see it. That saves me getting into a hate mode.

    • @Buzzy1960
      @Buzzy1960 13 дней назад +1

      @@joselbazcom4221 Good reply. He could ask Matt for a short version.😂

    • @thomassteele9649
      @thomassteele9649 13 дней назад +19

      Imagine feeling so entitled, that you think every creator should cater to YOUR preferred video length.
      There's a lot of good information in here for techies.

  • @BlackOpsUni
    @BlackOpsUni День назад

    Ay congrats on getting the recognized for your good job on finding this flaw :D

  • @TheMW2informer
    @TheMW2informer 13 дней назад +1

    I wonder if there is a similar a way to view regular traffic cameras (like are used for public to make travel decisions not ALPR) at native 1080 resolution; I know news media has access to the full resolution when the public website shows maybe 240p or 480p at best.

  • @DylanDallion
    @DylanDallion 10 дней назад

    Big brother is definitely watching! Every thing you do! 😊😊😊😊

  • @stijnvandamme76
    @stijnvandamme76 15 дней назад +2

    So what if the stream is open..
    the plates are public , the stream shows nothing that cannot be seen with the naked eye anyway

    • @jerryhoare8198
      @jerryhoare8198 14 дней назад

      The metadata cannot be seen by the nude eye but can include all kinds of stuff like outstanding warrants and DUI license suspensions.