MISCONFIGURED LICENSE PLATE READERS ARE LEAKING DATA IN REAL TIME

Summary from the TLDR InfoSec newsletter

Security Researcher Matt Brown purchased and reverse engineered the firmware of a Motorola automated license plate reader (ALPR) system. Brown used a unique error page to find 150 Internet exposed Motorola ALPR systems that did not implement any form of authentication. Wired journalists confirmed that these cameras are deployed by law enforcement and are leaking license plate number, car location, make and model, and other metadata from thousands of cars in just 20 minutes of sample time.