11/17/20258:58:50AM Sent: From: WendyStrattonMonahan<WMonahan@ci.benicia.ca.us To: "Lily" Cc: "Mark","Edward" Bcc: Importance: Normal Subject: FW: Benicia Must Reconsider Its Flock Safety Deployment Attachments image505918.png,image042445.png,image775613.png ： ,image674458.png,image570395.png,image185847.png Please see the email below from one of our community members that is opposed to FLocK, and who will most likely Council andbeprepared tospeaktohisconcerns? Thanks. WendyStrattonMonahan Senior ManagementAnalyst/PD PIO PoliceDepartment ENIC 0:707-746-4306 EST. 1941 POLICE WMonahan@ci.benicia.ca.u THECITY OF S BENICIA www.ci.benicia.ca.us/police Subject:Benicia Must ReconsiderItsFlockSafety Deployment Caution:This email originatedfrom outside of the organization.Donotclick links or open attachments unless you recognize the sender and know the content is safe. Benicia's City Council should urgently reconsider its reliance on Flock Safety surveillance devices. Independent security that place public data, city infrastructure, and law-enforcement operations at risk—not hypothetically, but demonstrably. The whitepaper documents 51 security findings across Flock's gunshot detection units, license plate readers,andAlcomputeboxes.Manyarecritical,including: ·Disabled Secure Boot on multiple devices, allowing attackers to load malicious firmware and gain persistent control(e.g.,CVE-2025-47819). 2. Exposed debug interfaces such as UART, JTAG, and Android Debug Bridge, enabling shell access or full system compromise with minimal skill. access points and intercept traffic. 4. Unauthenticated administrative APl endpoints and multiple paths to remote code execution, including wireless attacks across devices.
- Unencrypted storage of sensitive recordings, logs, and cryptographic secrets—-including APl keys andauthenticationtokens.
- Flock license plate readers operating on Android Things 8.1, a long-abandoned, end-of-life OS with nosecurityupdates. These issues are not edge cases—they are systemic design and hardening failures. They expose Benicia to risks of data breaches, evidence tampering, operational disruption, and legal liability. Deploying devices standard for systems that monitor the public or support police operations. Before expanding or renewing any Flock contract, Benicia must demand independent verification of TheWhitepapercanbefoundhereandavideooutliningthefindingsisbelow https://zenodo.org/records/17584876 https://www.youtube.com/watch?v=uB0gr7Fh6lY
Public Records Exemptions Enclosed please find a copy of the response documents for your public process employed to review and produce the response documents. Reason Description Pages 1 of 1