Wikipedia talk:WikiProject Computer security

New pages patrollers needed

Would anyone like to help review new computer security articles? I just recently picked up a new way to help with this: if you request and receive permissions to do Wikipedia:New pages patrol, you can review new articles to ensure they meet basic standards. If they do, you click "reviewed", and the article can get indexed by search engines. If they don't, you tag them for improvement, WP:DRAFTIFY them, nominate them for deletion, or take other action.

There's a huge backlog right now, so they need more reviewers who are experienced editors with a decent understanding of the notability guidelines. I made a database report that shows unreviewed articles in scope for this project: Wikipedia:WikiProject Computer security/Unreviewed articles. So if you get that permission, you can help process those articles! Dreamyshade (talk) 17:41, 22 August 2026 (UTC)

Relevant discussion

As Cyberwarfare and China is part of this WikiProject, it would be good to get others' views on this discussion: Talk:Cyberwarfare and China#Split part of this into Cyberwarfare by China. Amigao (talk) 05:11, 12 September 2026 (UTC)

Joshua Michael and his Flock Safety research

This LLM-generated text has been collapsed and should be excluded from assessments of consensus.

The following discussion has been closed. Please do not modify it.

Disclosure: I am an independent researcher with no personal, professional, or financial affiliation with Joshua Michael, Nexanet, or DataMinimal. I am not being paid or acting on their behalf to request or create Wikipedia coverage. I became interested in the subject through publicly available reporting and research.

Hello. Would an editor be interested in reviewing the sources below and considering an article about Joshua Michael, a cybersecurity researcher associated with Nexanet and the Flock Surveillance Map?

His research is published at joshuamichaelresearch.com and flocksurveillance.org. It includes reported security vulnerabilities, a device-location dataset and interactive map, a research paper, a disclosure memorandum, and camera-exposure studies covering 22 military, intelligence, federal, and defense-related locations.

I would appreciate advice on whether the independent coverage supports a biography, an article about the research project, or additions to the existing Flock Safety article. If a separate article is appropriate, would a volunteer consider writing it?

Main news sources

• The Intercept, September 24, 2026 — reporting on Michael’s research, the map, how he says he obtained the device records, and the dispute over removing the website.

• Suncoast Searchlight, May 1, 2026 — Alice Herman describes Michael’s discovery of exposed credentials and quotes him about privacy risks from centralized data analysis.

• The Guardian, April 6, 2026 — names Michael alongside Benn Jordan and Jon Gaines in discussing demonstrations of Flock camera vulnerabilities.

• 9NEWS, November 19, 2025 — names and quotes Michael concerning Flock’s security and includes the company’s response.

• Flare, September 18, 2026 — technical analysis citing Nexanet’s January research about development systems issuing production-scoped access tokens.

• Tom’s Hardware, September 27, 2026 — covers Michael’s mapping project and the takedown dispute. It draws on The Intercept rather than providing entirely separate original reporting.

The research

These are Michael’s own publications, included to explain the work discussed in outside sources. I have not established that they underwent academic peer review.

• “‘Never Hacked’: The National Security and Accountability Failures in Flock Safety’s Nationwide Dynamic Surveillance Network” (PDF) — dated September 2, 2026. The viewer lists 160 pages. It presents four reported security failures, a disclosure chronology, Michael’s account of retrieving 335,701 device and deployment records, and route-exposure modeling around 22 sites. It includes technical appendices, methodology, evidence provenance, limitations, and references.

• “Four Disclosed Flock Safety and FlockNova Vulnerabilities” (PDF) — a supporting memorandum describing the findings and disclosure timeline. It distinguishes the static ArcGIS credential exposure from the pre-login credential-issuance path Michael reports using to retrieve the inventory.

• National Security Exposure Studies — assessments for 22 locations. These model whether plausible public-road trips would encounter mapped cameras; they do not document the tracking of actual individuals.

• “Flock Safety and FlockNova: A Complete Guide” (PDF) — a 48-page guide covering hardware, software, search tools, and data-fusion functions.

• “A Misconfigured Demo Exposed Flock Safety’s 83,000 Camera Nationwide Tracking System” — an earlier technical investigation. The current page credits Joshua Michael and displays July 16, 2025; the amicus brief listed below cites the article under a different name and date.

• “Flock Said It Does Not Use Dark Web Data. Analysis of Their Code Tells a Different Story,” December 12, 2025 — analysis of FlockNova application code and the company’s public statements.

• “53 Times Flock Safety Hardcoded the Password for America’s Surveillance Infrastructure” — the report discussed on Hacker News in January 2026 and referenced in later technical publications.

• Interactive map and dataset table — the reported inventory contains device and deployment records, not exclusively license plate readers.

• Dokumen copy of “Never Hacked” — another location for the same report, not an independent publication or review.

The research claims should be attributed where appropriate and considered alongside Flock’s responses. The route estimates use a historical snapshot and modeling assumptions, including assumptions about planned devices.

Legal citations, testimony, and interviews

• Amicus brief in Commonwealth v. Ronnie D. Church, Court of Appeals of Virginia, filed August 28, 2025 — submitted by the Electronic Frontier Foundation, National Association of Criminal Defense Lawyers, American Civil Liberties Union, and ACLU of Virginia. In discussing ALPR security problems, the brief cites Nexanet’s “How a Misconfigured Demo Exposed Flock Safety’s 83,000-Camera Nationwide Tracking System” on printed page 20, footnote 49. It credits “Joshua Garett” and dates the article July 15, 2025, whereas the current Nexanet page credits Joshua Michael and displays July 16. These differences need clarification. The brief’s archived reference points to the same Nexanet article. This documents citation of the research in an amicus filing, not a judicial finding or endorsement.

• NACDL’s case and brief page — identifies the filing date, case number, participating organizations, and arguments, and provides another copy of the same brief. This is supporting information about one filing, not a second independent citation of the research.

• Benn Jordan’s written Senate Judiciary subcommittee testimony, September 23, 2026 — names Michael and discusses his findings. This documents their inclusion in the testimony, not a Senate endorsement.

• Benn Jordan, “We Hacked Flock Safety Cameras in under 30 Seconds,” November 16, 2025 — features Michael explaining his research and links his report.

• Benn Jordan on The Jordan Harbinger Show — discusses Michael’s findings around 47–49 minutes. Jordan describes having worked with Michael.

• Jack Neel interview, September 4, 2026 — a long-form interview about Michael’s research and privacy work. It identifies Nexanet as his company and links DataMinimal. It also includes promotional material for Nexanet.

Other coverage and references

These vary in depth and independence. Several summarize the same reporting.

• Cape Fear Beacon, August 11, 2026 — names Michael in reporting on New Hanover County’s surveillance purchases, drawing on Jordan and The Guardian.

• Hudson TV, September 27, 2026 — discusses Michael and the map dispute, citing coverage from The Intercept and Tom’s Hardware.

• Gadget Review, September 25, 2026 — summarizes the map story, relying on The Intercept. Also republished by Yahoo.

• The Daily Caller, September 27, 2026 — additional coverage drawing on The Intercept.

• LEOsphere, September 25, 2026 — names Michael and summarizes the map story, identifying The Intercept as its source.

• Sicherheitssignal, September 24, 2026 — a summary naming Michael and citing The Intercept.

• El Reportero, September 25, 2026 — commentary naming Michael and discussing the map, with attribution to The Intercept.

• The Shield, September 9, 2026 — a Westmont student-publication article naming Michael in its discussion of Jordan’s investigation.

• WGCU and WUSF — republications of the Suncoast Searchlight story, not separate original reports.

• Interval News, September 25, 2026 — an Instagram post whose search-indexed text names Michael and attributes the map reporting to The Intercept. The complete post could not be accessed during checking, and a separate original Interval News article has not been verified.

• GainSec, January 9, 2026 — Jon Gaines identifies Josh Michael as founder of Nexanet AI and discusses their participation in Jordan’s coverage. This is an involved researcher’s account.

• Footnote4a, December 17, 2025 — discusses Joshua’s Nexanet analysis of FlockNova’s alleged use of “Dark Data.”

• Footnote4a, July 31, 2026 — discusses Nexanet’s January report and Flock’s audit commitments.

• Mission Meets Tech, August 11, 2026 — cites Nexanet’s FlockNova analysis as reference 9.

• Maryville Residents for Privacy — advocacy material naming Michael and discussing his research. It attributes the Nova findings to Nexanet rather than claiming independent reproduction.

• Hacker News, January 9, 2026 — discussion of the “53 Times” report. It showed 522 points and 178 comments when checked on September 27, 2026. This is community discussion, not verification of the findings.

Business background and public visibility

Nexanet and DataMinimal provide affiliated business information. DataMinimal identifies Nexanet as its sister company. The Mozilla listing for DataMinimal Privacy Helper documents the product but is developer-supplied. The Good Ancestor Foundation’s Privacy Guide also briefly recommends Nexanet.

Social-profile links supplied for Michael’s current handle, “whoisjoshuamichael,” are Instagram, TikTok, and YouTube. His LinkedIn profile uses his name. These current handles have not been independently rechecked, and follower figures previously retrieved under older handles are omitted.

Video metadata retrieved on September 27, 2026 showed approximately 3.17 million views for Benn Jordan’s video featuring Michael and 308,000 for Jack Neel’s interview. These are views of the publishers’ videos, not Michael’s own accounts. They are included only as context about visibility, not as evidence of notability.

I understand that the number of links, the length of the reports, and audience figures do not establish notability by themselves. I would welcome an editor’s assessment of the independent coverage and the most appropriate scope for an article.

Thank you. ~~~~

~2026-52176-33 (talk) 23:04, 27 September 2026 (UTC)

If you'd like to start a WP: draft, you may. See WP:YFA. guninvalid (talk) 23:22, 27 September 2026 (UTC)

Edit request at Talk:Medical device hijack

There is a pending conflict-of-interest edit request at Talk:Medical device hijack#Edit request: add United Kingdom subsection under Countermeasures. It proposes a short United Kingdom subsection under Countermeasures, to address the article's globalisation tag. An uninvolved reviewer would be welcome. Disclosure: I made the request. OliverToparti (talk) 15:55, 15 October 2026 (UTC)

Merging of security hacker

Please see Wikipedia:Articles for deletion/Security hacker. Windwardcoast (talk) 20:24, 20 October 2026 (UTC)

Relevant discussion

There is a discussion at Talk:Black October (information security) that may be of interest to members of this project. The discussion is at Talk:Black October (information security)#Notability tag. guninvalid (talk) 19:27, 27 October 2026 (UTC)

Aura (company) suspected AI content

Hi editors, I'm Jory with Aura (identity management company). The article about the company was recently created, and I suspect possibly written by AI. I made a request about some of that content to make it human-written and actually on the topic of the company. It might be of interest to folks here. Cheers AuraJory (talk) 15:30, 29 October 2026 (UTC)

WP:RSCOMPSEC?

Is there an appetite for a WP:RSCOMPSEC page, in a similar vein to WP:VGS? Is there even enough content for such a page? ~2026-57895-53 (talk) 22:58, 29 October 2026 (UTC)

I'd rather encourage improving Wikipedia:WikiProject Technology/sources instead of making a separate one, since it's already a pretty good starting point for security-related sources. This also exists: Wikipedia:WikiProject Software/Free and open-source software task force/List of reliable sources. Dreamyshade (talk) 04:41, 30 October 2026 (UTC)