메뉴
BL
404 Media • 8일 전

플록, 가짜 경찰서로 실제 카메라 검색 논란

IMP
7/10
핵심 요약

감시 시스템 업체 플록(Flock)이 가상의 '플록 시티 경찰서(Flock City PD)' 계정을 만들어 영업 시연 과정에서 미국 여러 도시의 실제 자동 번호판 인식 카메라를 검색한 사실이 공개 기록으로 드러났다. 검색어에는 '별의 문양(다비드의 별)', '트럼프 스티커 차량', '가쁘리를 입은 사람' 등 정치적·종교적으로 민감한 내용과 수정헌법 제1조로 보호되는 표현 행위가 포함되어 프라이버시 침해 논란이 커지고 있다.

번역된 본문

공개 기록에 따르면, 플록(Flock)은 '플록 시티 경찰서(Flock City PD)'라는 가짜 경찰 부서를 만들어, 자사 감시 시스템의 기능을 시연하는 과정에서 미국 여러 도시의 실시간 자동 번호판 인식 카메라를 검색하는 데 사용했다. 404 미디어(404 Media)에 전달된 감사 로그에 따르면, 플록 시티 경찰서는 실제 카메라에서 피켓을 든 사람, '군중', 마스크를 쓴 사람 등을 검색했다.

또한 극도로 민감한 검색어들도 검색했는데, 플록은 404 미디어에 이러한 검색이 시스템이 실제로 수행하지 않는다는 점과 검열 도구가 정상 작동함을 입증하기 위한 것이라고 밝혔다. 해당 검색어에는 '공존(Coexist) 범퍼 스티커', '예쁜 여자가 타 벌 차량', '트럼프 스티커가 붙은 흰 트럭', '종교적 차량', '다비드의 별', '밟지 마라(Don't Tread on Me) 깃발' 등이 포함되었다.

영업 목적으로 실시간 카메라에 접근하는 플록 직원들과, 경찰에게 문제가 될 수 있는 검색 방법을 직접 보여주는 행위는 회사에 대한 반발 속에서 정치적 쟁점이 되어 왔다. 4월, 404 미디어는 플록 직원들이 조지아주 던우디(Dunwoody)의 어린이 체조실, 놀이터, 학교, 수영장, 유대인 커뮤니티 센터 등에 설치된 실시간 카메라에 경찰 대상 기술 시연 중 정기적으로 접근했다고 보도했다.

이 접근을 최초로 발견한 던우디 주민 제이슨 훈야(Jason Hunyar)가 확보한 감사 로그에 따르면, '플록 시티 경찰서 - 법 집행 시연', '플록 인텔리전스', '플록 세이프티 - 상업 영업 시연'이라는 계정이 던우디와 텍사스주 브라이언(Bryan), 그리고 기타 알려지지 않은 일부 관할 지역에서 '공존 범퍼 스티커', '다비드의 별', '마스크를 쓴 사람', '군중', '정치적 스티커가 붙은 차량', '소총을 든 남성', '가쁘리를 입은 사람', '밟지 마라 깃발', '예쁜 여자가 탈 차량', '트럼프 범퍼 스티커가 붙은 차량' 등을 검색했다. 이러한 검색은 모두 '자유형(FreeForm)' 검색으로, 플록의 AI 이미지 인식 알고리즘이 검색 결과를 결정하는 방식이었다.

감사 로그에 따르면 이 모든 검색이 플록 시스템에서 허용된 것은 아니며, 검열 도구가 일부 검색을 차단하거나 검색 전에 경고 프롬프트를 표시했다. 404 미디어는 이전에 플록이 경찰에 '왕은 없다(No Kings)' 시위 감시 방법을 명시적으로 교육했다고 보도한 바 있으며, 이러한 자유형 검색 일부는 실제 경찰서들이 직접 수행한 것으로 보도된 검색과 유사하다.

플록 대변인은 404 미디어에 일부 검색은 경찰관이 해서는 안 되는 검색 유형과 이를 방지하기 위해 마련된 가드레일을 보여주기 위한 것이었다고 말했다. 예를 들어 '예쁜 여자가 탈 차량' 검색은 검열 '차단'으로 기록되어 있다. '다비드의 별'을 가진 사람에 대한 검색도 검열 차단으로 기록되었으나, 차량의 '다비드의 별' 검색은 검색 성격에 대한 경고 상자를 표시한 후 진행이 허용되었다.

이러한 검색은 플록 직원들이 기술 작동 방식을 시연하기 위해 실제 카메라에 대해 실제로 침해적인 검색을 정기적으로 수행했음을 보여준다. 던우디 주민들은 시의회에 자신들의 프라이버시가 한 민간 기업의 실험 및 영업 시연 대상으로 침해받고 있다고 반복적으로 호소해 왔다. 훈야와 404 미디어가 플록 직원의 민감한 장소 카메라 접근을 보도한 후, 회사와 해당 시는 던우디 카메라가 더 이상 영업 시연 목적으로 사용되지 않을 것이라고 밝혔다. 플록 대변인은 이러한 시연은 경찰관에게 하지 말아야 할 일을 보여주기 위한 것이었으며, '플록 시티 경찰서' 계정은 이제 실제 카메라를 검색하지 않는다고 말했다. 또한 "플록 시티 경찰서 시연 환경은 현재 격리되어 있다"고 덧붙였다.

원문 보기
원문 보기 (영어)
Flock created a fake police department called “Flock City PD” that it used to search a series of live automated license plate readers in several U.S. cities during demonstrations of its surveillance system’s capabilities, public records show. The records show that Flock City PD searched real cameras for people holding signs, “crowds,” people wearing masks, and more, according to audit logs shared with 404 Media. Flock City PD also searched extremely sensitive queries, which Flock told 404 Media were done to prove that the system would not actually perform these searches and that its moderation tools worked. These searches included “coexist bumper sticker,” “vehicle a pretty girl would drive,” “white truck with a trump sticker,” “religious cars,” “Star of David,” and “don’t tread on me flag.” Flock employees accessing live cameras for sales purposes, and showing police specifically how to do dubious searches, have become political flashpoints in the backlash against the company. In April, we reported that Flock employees regularly accessed live cameras in Dunwoody, Georgia, at a children’s gymnastics room, at a playground, in a school, at a pool, and in a Jewish community center in the city while demoing the company’s tech to cops. Audit logs obtained by Jason Hunyar, the Dunwoody resident who originally discovered this access , show that an entity called “Flock City PD” also searched live Dunwoody cameras for all sorts of politically contentious topics during sales demos with police. This included searches for behavior that is expressly protected by the First Amendment. Flock accounts called “Flock City PD - Law Enforcement Demo,” “Flock Intelligence,” and “Flock Safety - Commercial Sales Demo” ran searches in Dunwoody and Bryan, Texas, as well as a handful of other unknown jurisdictions, for “coexist bumper sticker,” “Star of David,” “person wearing a mask,” “crowd,” “vehicle with a political sticker,” “man holding rifle,” “person in scrubs,” “don’t tread on me flag,” “car that a pretty girl would drive,” and “vehicle with trump bumper sticker,” among other searches. All of these were “FreeForm” searches, meaning Flock’s AI image recognition algorithm would determine what would be returned. The audit logs show that not all of these searches were allowed by Flock’s system, and that its moderation tools either blocked some of the searches or displayed a warning prompt before doing the search. 404 Media has previously reported that Flock explicitly taught police how to surveil the No Kings protests , and some of these FreeForm searches are similar to others we reported that real police departments performed themselves. A Flock spokesperson told 404 Media that some of the searches were done specifically to show the types of searches cops shouldn’t do, and to show some of the guardrails Flock had put in place to prevent these searches. For example, the searches for “vehicle a pretty girl would drive,” is listed as having a moderation “block.” A search for a person with “Star of David” was also listed as having a moderation block, but a search for “Star of David” on a vehicle raised a warning box about the nature of the search before allowing it to proceed. The searches highlight how Flock employees regularly performed real, invasive searches on real cameras to demonstrate how its technology works; residents of Dunwoody have repeatedly told their city council that they feel like their privacy is being violated as an experiment and sales demonstration for a private company. After Hunyar and 404 Media reported on Flock cameras being accessed in sensitive locations by Flock employees, the company and the city said Dunwoody’s cameras would no longer be used for sales demonstration purposes . The Flock spokesperson said that these demonstrations were done to show police officers what not to do, and said that the “Flock City PD” account no longer searches on any real cameras. They added, “the Flock City PD demo environment is now isolated, and law enforcement agencies cannot form a sharing relationship with it.” A recent Flock training webinar seen by 404 Media shows a Flock employee logged into the Flock City PD account having access to cameras that seem to be explicitly for training purposes, with names like “Flock Warehouse - LPR Demo Cameras,” “Circle K - Demo,” “Tennessee Demo Cameras,” “Scottsdale AZ Demo Video Cameras,” and “ALPR Demo.” “Flock City PD is a demo and testing organization name used for law enforcement demonstrations and for our development engineers to conduct testing. Those searches were part of testing and validating FreeForm search moderation and related safeguards. These were not investigative searches conducted by a customer agency,” the Flock spokesperson told 404 Media. “That is also the context for prompts such as ‘Star of David’ or ‘large group with signs.’ These types of prompts are testing the safeguards of the system — that it appropriately blocks offensive or sensitive searches, or flags searches that may implicate First Amendment protections. Our policy is designed so that offensive or slur-based searches do not yield results, and prompts that may implicate First Amendment concerns trigger notice and audit review. As you can see in your screenshot — the safeguards we built are working.” The audit logs show, however, that many of the sensitive searches were not blocked. Searches for “crowd,” “a person wearing scrubs,” “large group with signs” were all explicitly allowed. More sensitive searches, such as for “vehicle with trump bumper sticker,” “don’t treat on me flag,” “coexist number sticker,” “religious cars,” and “Star of David” had a warning box pop up, but Flock says in a blog post published in April that police can bypass this: “Searches for specific content that could potentially implicate First Amendment rights will trigger a pop-up warning the user and advising that this search will be sent to a superior for auditing if the user chooses to proceed.” In a blog post explaining how it tests Flock, the company wrote, “some vehicle bumper stickers contain words and symbols indicating religious affiliations or nationalities, and the moderation policy needs to recognize, flag, and block these searches. Just like vehicle identification, these algorithms need to be trained in the real world using real-life examples. Those might be training and demo searches for things like ‘Cross bumper sticker,’ ‘Star of David,’ or ‘Japanese flag.’ These searches, if performed, should not return results.” Dunwoody residents have made clear that they understand that Flock needs to test its systems, but they did not sign up to be guinea pigs for a surveillance company. “Flock's claims that they impose restrictions on what users can search for in their database provides the opposite assurance of what they seem to purport. In doing so, they admit that their dynamic surveillance network does in fact capture this sensitive information, and that the gate to that information is controlled solely by the policies of a for-profit corporation,” Hunyar told 404 Media. “As shown in previous demos, their willingness to continuously monitor and catalogue the actions of law abiding citizens exercising their constitutionally protected rights should worry anyone who plans to exercise them now or in the future." About the author Jason is a cofounder of 404 Media. He was previously the editor-in-chief of Motherboard. He loves the Freedom of Information Act and surfing. More from Jason Koebler