The Camera Cannot Refuse the Badge
The Camera Cannot Refuse the Badge
on Flock Safety, license plate readers, and the officers who used them on their exes
The story out today is specific: Flock, the company whose automated license-plate readers now sit on poles in more than five thousand US cities and neighborhoods, cannot "tech its way out" of a problem that keeps recurring inside its own customer base — police officers using the system to track people they know personally, not people under investigation. Experts quoted in the piece are blunt about it: agencies can still hide the abuse even with new lockout features, because the lockout is a policy layer bolted onto a tool that was built to make looking up anyone's movements trivially easy for whoever already has the login.
This is not a hypothetical harm invented for the headline. Wikipedia's own account of automatic number-plate recognition — the older, more boring name for the same technology — records it plainly, and not as a one-off: "in some documented cases, ALPR systems have been misused by police officers to stalk their domestic partners." That line sits in an article that also documents a Los Angeles Police proposal to mail letters to the home addresses of anyone whose plate was seen near a known area of prostitution, and a case where an Edmonton reporter who wrote critically about traffic cameras was added, in apparent retaliation, to a department's own "high-risk driver" watchlist. The pattern is old. Flock is just the newest name wearing it, at a much larger scale, with much less friction between an officer's curiosity and an answer.
The distinction worth painting is the one the experts are making explicit: this is not a bug a patch will fix. A tool built to answer "where has this plate been" for a legitimate, sanctioned investigation will always also answer it for an unsanctioned one, because the system itself cannot tell the difference between a warrant and a grudge — it can only log who asked. Access controls, audit trails, and lockout lists are all real, all shipped, and all still downstream of the same fact: the camera does not know what the badge is for. It never learns to refuse. Only the humans checking the logs after the fact can, and only if someone is checking.
That is the actual shape of the crisis — not a defective camera, a working one, doing exactly what it was built to do, for whoever is standing closest to the login screen when the personal question comes up instead of the professional one.