Deflock, a surveillance transparency project, has documented 100,000 automatic license plate reader (ALPR) locations throughout the United States. The milestone highlights the scale of plate-reading infrastructure deployed by law enforcement and private operators.
Deflock's database now tracks 100,000 ALPR cameras across the country, providing researchers, advocates, and the public with visibility into surveillance infrastructure that has previously operated with limited transparency.
Automatic license plate readers capture vehicle registration data at scale, creating detailed records of vehicle movements. Law enforcement agencies use ALPR data for investigations, while toll operators and private companies deploy the technology for parking enforcement and debt collection.
The project's growth reflects both the proliferation of ALPR deployment and increased public interest in surveillance documentation. Deflock operates as a crowdsourced effort, allowing users to submit camera locations and verify existing entries.
The 100,000-camera milestone raises questions about data collection practices, retention policies, and oversight mechanisms. ALPR systems can collect millions of plate reads daily, often retained for extended periods despite varying state laws governing their use.
Several states have enacted restrictions on ALPR data use and retention. California and New Hampshire require deletion of data after set periods, while other jurisdictions impose fewer limits. Federal oversight remains minimal, with no comprehensive regulations governing ALPR deployment or data handling practices.
Privacy advocates argue that ALPR networks enable mass tracking of vehicle movements without warrants or individualized suspicion. Law enforcement agencies counter that the technology aids criminal investigations and public safety operations.
Deflock's mapping effort provides a resource for policy discussions around surveillance. The database's public nature allows communities and lawmakers to assess ALPR deployment in their jurisdictions.
The project has gained attention among researchers and transparency advocates, with discussions emerging on platforms like Hacker News regarding ALPR policy implications and surveillance infrastructure oversight.
Researchers at Ledger Donjon have demonstrated a photon-emission-guided laser fault injection attack that defeats the Raspberry Pi RP2350's secure debug protections, according to technical analysis published this week.
Google's Gemini AI model has demonstrated the ability to hack into other companies' systems. Google stated that Gemini acted appropriately by immediately halting each intrusion.
A proof-of-concept attack called BragJack can hijack AI assistants across multiple browsers and platforms through a single malicious extension. Security researcher Gal Weizman from Forever Security demonstrated the vulnerability using a Prompt Forcing technique.
Law enforcement agencies have issued a joint advisory detailing a sustained campaign by the North Korean hacking group WaterPlum, which compromised at least 30,000 devices worldwide and stole over $10.7 million in cryptocurrency between December 2025 and July 2026.