Throughout Uzbekistan, a community of a couple of hundred banks of high-resolution roadside cameras constantly scan autos’ license plates and their occupants, generally hundreds a day, on the lookout for potential site visitors violations. Automobiles operating purple lights, drivers not carrying their seatbelts, and unlicensed autos driving at evening, to call a couple of.
The driving force of one of the surveilled autos within the system was tracked over six months as he traveled between the japanese metropolis of Chirchiq, via the capital Tashkent, and within the close by settlement of Eshonguzar, typically a number of occasions per week.
We all know this as a result of the nation’s sprawling license plate-tracking surveillance system has been left uncovered to the web.
Safety researcher Anurag Sen, who found the safety lapse, discovered the license plate surveillance system uncovered on-line with no password, permitting anybody entry to the information inside. It’s not clear how lengthy the surveillance system has been public, however artifacts from the system present that its database was arrange in September 2024, and site visitors monitoring started in mid-2025.
The publicity gives a uncommon glimpse into how such nationwide license plate surveillance programs work, the information they gather, and the way they can be utilized to trace the whereabouts of any one of many thousands and thousands of individuals throughout a complete nation.
The lapse additionally reveals the safety and privateness dangers related to the mass monitoring of autos and their homeowners, at a time when america is increase its nationwide array of license plate readers, lots of that are supplied by surveillance big Flock. Earlier this week, unbiased information outlet 404 Media reported that Flock left dozens of its personal license plate studying cameras publicly uncovered to the net, permitting a reporter to watch themselves being tracked in actual time by a Flock digital camera.
Sen stated he discovered the uncovered Uzbek license plate surveillance system earlier this month, and shared particulars of the safety lapse with TechCrunch. Sen informed TechCrunch that the system’s database reveals the real-world places of the cameras, and incorporates thousands and thousands of photographs and uncooked digital camera video footage of passing autos.
The system is run by the Division of Public Safety in Uzbekistan’s Ministry of Inside Affairs in Tashkent, which didn’t reply to emails requesting remark concerning the safety lapse throughout December.
Representatives of the Uzbek authorities in Washington, D.C. and New York additionally didn’t reply to TechCrunch’s emails concerning the publicity. Uzbekistan’s pc emergency readiness crew, UZCERT, didn’t reply to an alert concerning the system, aside from an automatic reply acknowledging receipt of our e-mail.
The surveillance system stays uncovered to the net on the time of writing.
The system refers to itself as an “intelligence site visitors administration system” by Maxvision, a Shenzhen, China-based maker of internet-connected site visitors applied sciences, border inspection programs, and surveillance merchandise. In a video on LinkedIn, the corporate says its cameras can file the “whole unlawful course of,” and might “show unlawful and passing info in real-time.”
Based on its brochure, Maxvision exports its safety and surveillance tech to international locations throughout the globe, together with Burkina Faso, Kuwait, Oman, Mexico, Saudi Arabia, and Uzbekistan.
TechCrunch’s evaluation of the information contained in the uncovered system revealed no less than 100 cameras positioned throughout main Uzbek cities, in addition to busy junctions and different necessary transit routes.
We plotted the GPS coordinates of the cameras, and located banks of license plate readers in Tashkent, the cities of Jizzakh and Qarshi within the south, and Namangan within the east. A number of the cameras are positioned in rural areas, reminiscent of on routes close to the once-disputed elements of the borders between Uzbekistan and Tajikistan.
In Tashkent, the nation’s largest metropolis, the cameras could be discovered at greater than a dozen places. A few of these cameras are even seen on Google Road View.
The cameras, some which watermark their footage with the title of the Singapore digital camera maker Holowits, seize video footage and nonetheless photos of autos violating guidelines in 4K decision.
The uncovered system permits entry to its web-based interface, which incorporates a dashboard permitting operators to look at footage of site visitors violations. The dashboard incorporates zoomed-in photographs and the uncooked video footage of violations, in addition to surrounding autos. (TechCrunch redacted the license plates and automobile occupants previous to publication.)
The publicity of Uzbekistan’s nationwide license plate studying system is the most recent instance of a safety lapse involving highway surveillance cameras.
Earlier this yr, Wired reported that greater than 150 license plate readers round america and the real-time automobile information they gather had been uncovered to the web with none safety.
Uncovered license plate readers should not a brand new phenomena. In 2019, TechCrunch reported that over 100 license plate readers had been searchable and accessible from the web, permitting anybody to entry the information inside. Some had been uncovered for years, regardless of safety researchers warning legislation enforcement businesses that these programs could possibly be accessed from the net.
To securely contact this reporter, you’ll be able to attain out utilizing Sign through the username: zackwhittaker.1337
