The Hardware Blind Spot: Why Flock’s Opaque Supply Chain is a Security Nightmare

In the world of cybersecurity, we have a saying: trust, but verify. When it comes to the hardware monitoring our streets, we are doing neither.

For years, Flock touted its license plate readers as being 'manufactured in the United States' and 'made in the USA,' with CEO Garrett Langley even claiming the first units were built on his own dining table in Atlanta. But as WIRED first reported, that narrative has quietly evaporated. Recent marketing materials reviewed by WIRED no longer specify where these cameras originate, and a U.S. manufacturer that once listed Flock as a customer has since scrubbed that mention from its site.

From a defender's mindset, this isn't just a marketing shift—it is a massive red flag. We are essentially installing geopolitical backdoors into our municipal infrastructure. If we cannot verify the provenance of the hardware, we cannot guarantee the integrity of the system.

WIRED’s investigation reveals a supply chain built on 'aggregation.' Import records from ImportGenius show Flock has increasingly sourced 'commodity' cameras and radar systems from Primax Electronics in Thailand. While Primax is based in Taiwan, it maintains manufacturing facilities in China and Thailand. Lynn Hughes, an analyst at ImportGenius, noted that Primax appears to manufacture entire security camera solutions, not just isolated components.

Flock spokesperson Paris Lewbel claims the products are compliant with the National Defense Authorization Act, which restricts the use of certain Chinese tech companies. But compliance with a broad legal standard is not the same as transparency. As Cris van Pelt, creator of the 'Have I Been Flocked' project, told WIRED, the lack of transparency underscores a systemic failure of oversight. Van Pelt warns that tens of thousands of 'black boxes' are being installed on American roads, and if any part of that supply chain is compromised, we would never know.

This risk is compounded by a history of 'janky' operations. Former employees told WIRED that Flock once stored cameras in self-storage units across the country for installation crews to retrieve, a practice one employee suggested left the hardware vulnerable to tampering. This is a company that Langley admitted started by using cameras ripped out of Android phones bought on Alibaba.

When the hardware is an opaque mix of global components assembled in mystery, the 'security' these cameras provide is an illusion. We are trading long-term national security for short-term convenience, ignoring the fact that the very tools used to 'solve crime' could be the primary vector for a foreign intelligence operation. Until Flock provides a transparent, verifiable bill of materials, these cameras aren't just monitoring our cars—they're monitoring our vulnerabilities.