rf_sentinel / guides / flock-camera-detector
Flock & plate-reader cameras
Two layers: radio signatures for cameras that broadcast, and an offline map of every plate reader, speed and red-light camera volunteers have mapped in OpenStreetMap, for the ones that don't.
Layer 1: radio signatures
| Signal | Rule | Score |
|---|---|---|
| WiFi SSID | starts with Flock- | 88 |
| BLE name | FS Ext Battery | 80 |
| BLE name | Penguin-<digits> or FS-<hex> | 70, 80 with 0x09C8 |
| BLE name | starts with Flock (loose) | 55 |
| BLE company ID | 0x09C8 XUNTONG, alone (shared silicon) | 45 |
| BLE 128-bit UUIDs | short IDs 0x3100-0x3500: Flock Raven audio sensor | 80 |
Sources: all-cameras-are-beacons field captures (ryanohoro, GainSec) and Bluetooth SIG assigned numbers. The SSID -FALCON suffix is deliberately not matched: the evidence behind it turned out to be circular.
Layer 2: the known-camera map
- Automatic: for the area on screen, cameras tagged
surveillance:type=ALPRplus fixed speed and red-light cameras are fetched once from the Overpass API and kept offline, refreshed weekly. - Download nearby cameras: every plate reader within the radius set in Settings or the setup wizard (10-200 km, 100 by default).
- Download Flock: every plate reader mapped in the US and Canada, ~18 MB, about 143,000 cameras, refreshed weekly on WiFi. Uses DeFlock's hourly snapshot, then adds cameras it leaves out (other tagging, Flock cameras mapped as ordinary cameras) straight from OpenStreetMap.
While scanning, you're warned once per camera per 30 minutes when one is within about 20 s of travel (150 m minimum, 600 m maximum) and two GPS fixes show you getting closer. Speed cameras warn about 30 s ahead with the mapped limit. Tap a camera → Ignore alerts to silence it for good.
Why the map matters
Most plate readers that aren't Flock (Genetec AutoVu, Motorola Vigilant, Perceptics, Quercus, Tattile) send their data over cellular modems or wired links and broadcast nothing a phone can match. The map layer is the only way a phone can warn about those. If a camera near you is missing, add it to OpenStreetMap, for example through DeFlock.
Questions
How close do I need to be to detect a Flock camera by radio?
Close: Flock units' WiFi and BLE are low-power and often only heard within tens of metres, depending on the install. The map layer warns from further away.
Does the camera download reveal my location?
The Overpass API and DeFlock's CDN see your IP and the area requested (DeFlock: which 20° region), like map tiles. Turn off Show known cameras automatically to fetch only when you tap a download.
Can I export where I've seen Flock cameras?
Yes. Recorded traces export as GPX, KML, GeoJSON or CSV with the devices heard along them, including flagged-only.