While Flock announced changes for its AI-powered traffic cameras, "Several of the proposed changes Flock is touting are merely retreads of previous ," complains the American Civil Liberties Union. "Flock's latest announcement still appears more focused on addressing a perceived PR problem than the significant harms its products create... [T]his is hardly the step forward Flock wants us to think it is " The ACLU continues to urge that default retention periods be shortened to 48 hours — not one week. And they warn Flock allows longer retention to any police department that asks for it, or when police officers activate "Evidence Mode" (the scope of which is not yet clear): Even if "Evidence Mode's" data retention hold only applies to hits returned on a given search, it would still retain significant amounts of location data on persons and vehicles who law enforcement do not suspect have engaged in any wrongdoing... Flock claims that its changes will provide "more local control," meaning local police can decide what types of offenses other Flock customers can search their data for... This is not new. Flock has attempted this before, and the security measure failed because users were easily able to circumvent the system's requirement that police input the purpose of their search. For example, on June 12, 2025 Flock started claiming its new "Proactive Search Term Tool" would block any "impermissible" searches, such as abortion-related searches in states like Illinois that prohibit sharing reproductive healthcare data. But police officers quickly realized they could just input "investigation" or even "hehehe" as a search reason and it would be approved. Flock later switched from an open text box to a drop-down menu of reasons, but that just offered police a list of acceptable purposes they could choose from, whether it was accurate or not. Until Flock demonstrates they can develop a reliable, workable system to prevent improper searches, this promise of local control provides nothing more than a false sense of security... While providing "Audit Assistance" to all departments makes sense, there is no evidence that the tool works consistently to address what the Washington Post observed is a growing pattern of police officers turning Flock into a personal stalking tool. While dozens of officers have recently been arrested, fired, or otherwise disciplined for misusing Flock for personal reasons, Flock claims these arrests are proof its auditing tool works. However, unless we know the number of officers misusing the system, we cannot conclude if Flock and its auditing tools are catching 95 percent of violators or 5 percent. Flock needs to have its auditing tool analyzed by an independent evaluator to determine its actual effectiveness. Until then, we don't know if the tool is a real security measure or just window dressing. Perhaps the oddest part of Flock's announcement is its claims that "now every search will require" police to input a case code... While claiming that a "search without a reason is a search that shouldn't happen in the first place," Flock's announcement fails to note how easily users have circumvented "search reason" security measures in the past... This leaves the public wondering how making an ineffective voluntary security measure mandatory will improve its functionality. Flock's "nearly $1 billion in venture capitalist funding has locked it into an operational model that seeks to trade our privacy for massive profits," concludes the ACLU's statement, as they promise to continue "The ACLU is fighting alongside communities to cancel local ALPR contracts and push lawmakers to protect our rights from this surveillance nightmare..."

Read more of this story at Slashdot.

The Trump administration today unveiled a new program that will allow vetted U.S. companies to conduct cyber surveillance and offensive cyber operations against foreign transnational criminal organizations. A presidential memorandum signed August 12 directs the National Coordination Center to establish and manage the program, expanding the government's fight against cybercrime by tapping the technical capabilities of the private sector. It builds on a March executive order that called for greater private-sector involvement, but goes significantly further by establishing a formal operational framework for the initiative. The White House argues that American companies possess a "critical offensive cyber advantage" whose capabilities have "historically been underutilized" in efforts to identify and disrupt criminal networks operating online. There are two broad categories of authorized activity. "Cyber Surveillance Operations" can involve secretly accessing foreign information systems without authorization to gather intelligence, including information that could later be used for offensive operations. "Cyber Effects Operations," meanwhile, can result in the "manipulation, disruption, denial, degradation, or destruction" of information systems, networks, or infrastructure. It's worth noting that companies will not be free to launch their own operations. The memorandum requires program officials to "review every cyber operations package and provide written approval and direction" before a participating company can act. Operations that could cause death or serious injury, or "rise to the level of use of force or armed attack under international law," are classified as "Critical Outcomes" and cannot be approved through the standard process. The program includes safeguards requiring companies to halt and report operations that unintentionally affect U.S. persons or systems, as well as any imminent threats to critical infrastructure.

Read more of this story at Slashdot.

Longtime Slashdot reader schwit1 shares an opinion piece from the Washington Post, written by Virginia Governor Abigail Spanberger: NextEra Energy, a Florida-based utility company, has filed paperwork to buy Dominion Energy for about $67 billion, creating the largest regulated electric utility in the world. Virginia's State Corporation Commission is the regulatory body tasked with reviewing the application, and the SCC's commissioners will ultimately decide whether to approve, deny or impose new conditions on any potential merger. As a Virginian, I am deeply skeptical about whether selling our primary state-regulated utility to an out-of-state company is good for the commonwealth. I have serious questions about what this deal would mean for us. And as governor, I intend to get answers and be a voice for Virginians in the process. That is why I will be taking the legal step of "intervening" in this proposed merger, which means that as governor, I will formally request to be a party to the case. I know this action is unprecedented by a Virginia governor -- but so, too, is the size of this proposed merger and its potential impact on the commonwealth. Virginians deserve to know that their leaders are laser-focused on ensuring that their needs are part of the SCC review. "If two large corporations stand to benefit financially from this merger, so, too, should the Virginians who pay the bills," said Spanberger. "That is why any potential deal must deliver a more affordable energy bill with sustained, long-term energy cost savings." By formally intervening in the merger review, Spanberger's administration would gain legal standing to participate directly in the case, request detailed information, raise concerns, and advocate for conditions that benefit people in the state. She says the goal is to push for lower long-term energy costs, protect utility jobs, and ensure any new owner continues investing in reliable, affordable and cleaner power.

Read more of this story at Slashdot.

An anonymous reader quotes a report from NBC News: Cyberattacks targeting municipal water systems have been reported in at least seven states this week, prompting the FBI and the Environmental Protection Agency to warn utilities nationwide that hackers are trying to disrupt critical water infrastructure. In a public service announcement Thursday, the agencies said water and wastewater utilities have reported incidents to the FBI, with some malicious activity degrading water operations. The announcement does not name the states. The warning comes after hackers targeted more than 30 municipal water facilities in Minnesota in an attack that had hallmarks of Iranian meddling, according to a law enforcement official. It is still under investigation. A spokesperson for Minnesota's information technology services agency said Thursday there was no indication the breaches contaminated any municipal water supplies. The federal Cybersecurity and Infrastructure Security Agency said in a separate alert that some larger attacks on water infrastructure had "resulted in boil water notices and sustained manual operations," though it did not say where. [...] The federal advisory said the malicious cyber actors, or MCAs, targeted specific brands of control systems used by municipal water utilities, though the FBI and the EPA urged operators of all systems to take precautions. [...] The agencies said the hackers remotely accessed internet-facing devices, changed IP addresses and passwords, and caused utilities to lose monitoring and control capabilities. The federal advisory calls on system operators to remove programmable logical controllers, or PLCs, from direct internet exposure by putting them behind secure gateways and firewalls; use strong passwords; and limit communications between authorized control system devices through access control lists.

Read more of this story at Slashdot.

An anonymous Slashdot reader writes: Surveillance cameras owned by Flock Safety have been cut down with electric saws in New York State, vandalized with paint in Oakland, California, and rammed with a truck in Idaho. Flock claims its services fight crime, but law enforcement agencies also use their services to track vehicles based on license plate numbers and reconstruct the their movements, even when the drivers and owners of these vehicles have never been accused or convicted of any crime. (Flock states it has 120,000 automated cameras that record license plate data, as well as pan-tilt-zoom cameras, across the United States.) A guerilla mindset among average citizens have seen these cameras forcibly disabled within recent weeks with sympathy directed toward the vigilantes. In June, a West Virginia man accused of destroying several Flock cameras was arrested. Under a Facebook post from the local NBC affiliate announcing his arrest are dozens of people volunteering to provide alibis. "He was out fishing with me that day, you got the wrong guy," one man wrote.

Read more of this story at Slashdot.