Plymouth, Michigan, canceled its contract with Flock Safety after the company’s license-plate cameras wrongly tracked journalist Joel Feder and led police to stop him and his wife. The city council voted to discontinue the system on September 22. Police Chief Eric Fadden says the department suspended local Flock accounts the next day and sent the company formal cancellation notice by email and mail after consulting the city attorney. The cameras, however, remained mounted around town, and Flock did not provide a substantive response to the cancellation.
After more than a week without a reply from the company’s corporate or legal teams, Fadden ordered police staff to unplug the cameras so they could not operate or record license plates. Feder checked two locations and confirmed the power cords had been disconnected. The dispute highlights a practical complication of ending a camera subscription: Flock supplies and owns the equipment, while the city can stop using the service but cannot itself set the company’s removal schedule. Fadden says Plymouth continued asking when the hardware would be taken down but had no firm timeline. Flock did not answer repeated questions about its procedure or the expected removal timeframe.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
CVE-2026-98432 is a critical Linux IPv4 TCP handshake use-after-free, remotely exploitable without authentication and potentially allowing root command execution on servers with multipath TCP listeners. Upstream fixes are available, but Ubuntu and RHEL had not yet shipped patched kernels as of October 29, 2026. (atlasum.net)
Colin Percival discovered that Intel Hyper-Threading could leak cryptographic secrets and developed an exploit to recover an RSA key. He argues scholars who find security flaws should coordinate quietly with affected teams so patches are ready before public disclosure. (daemonology.net)
Binance says it has covered 90% of the $6.3 billion in cryptocurrency stolen in a hack and will absorb the losses rather than pass them to users. It has set aside more than $6.34 billion and says sourcing the remaining assets may take longer. (bbc.com)
A hacking group said it exploited a vulnerability in software used to manage LED advertising screens, displaying pornographic footage on a highway billboard in Egypt and accessing screens in several other countries. Egyptian authorities opened an investigation and suspended roadside displays, while the incident raised questions about security at the billboard operator. (cairoreport.org)
VOLTA infostealer steals credentials, financial data, and personal details, then sends an evidence bundle to an LLM to rank victims by potential value. If a model refuses, the malware tries a chain of other models, making AI a key part of its intelligence-gathering workflow. (blog.talosintelligence.com)
Cybersecurity startup Cathedral accessed Anthropic’s internal systems in under 12 hours during an authorized security test, exposing employee details, salary information, job offers and internal messages. Its AI agents found weaknesses in business software and accessed meeting transcripts and Slack conversations. (indiatoday.in)
Today's best Hacker News stories, summarized and screenshotted, one email a day.