Motorola cameras designed for automatic recognition of automobile license plates were found to be connected to an unprotected server, allowing unauthorized access to streaming videos and data on car movement. Researcher Matt Brown demonstrated in videos that the Motorola Reaper HD AlPR cameras could transmit data to open access platforms.
Initially, Brown discovered that unauthorized access to the cameras was possible on closed networks. However, it was later revealed that many cameras were incorrectly configured to transmit data over the Internet. Using Censys, the researcher confirmed that IP addresses were easily accessible, allowing video and data to be viewed without proper authorization.
Some cameras were found to be broadcasting color and infrared street videos along with car information. Will Freeman from the Deflock project noted that over 170 data streams from cameras were publicly available. By using a specialized script, researchers were able to automatically collect data from the cameras, including license plate numbers, car models, colors, as well as time and location data.
The presence of such devices in key locations within cities raises concerns about data privacy risks associated with widespread use of ALPR technology. Despite law enforcement agencies employing these systems, the security of the collected information cannot be guaranteed.
Motorola Solutions mentioned that they are working on updating the firmware to enhance the security of their devices. The company clarified that their ReaperHD cameras have not been sold since 2022 and attributed the identified issues to user network settings. They have promised to collaborate with customers to restore recommended configurations.
Similar vulnerabilities have been addressed in the past, with researchers discovering numerous publicly accessible data streams with ALPR in 2015.
Will Freeman previously noticed an unusually high number of cameras equipped with solar panels on poles in the southern states. In Khantsville, cameras from various manufacturers, including Motorola and its Avigilon subsidiary, form an observation network tracking the movements of vehicles entering and leaving the city center. These systems are interconnected with other surveillance networks, enabling widespread monitoring of people across the country.
In March 2022, a citizen named David Zaias was traveling in his gray Chevrolet along a highway in Skarsdale, New York. Despite his unremarkable driving behavior, the car triggered suspicion for law enforcement due to a new artificial intelligence-based tool flagging it as potentially suspicious.