# Joshua Michael Topic: [[Topics/Flock Safety and ALPR Surveillance/Flock Safety and ALPR Surveillance|Flock Safety and ALPR Surveillance]] · [[Topics/Flock Safety and ALPR Surveillance/Timeline|Timeline]] - **Who:** a cybersecurity researcher. His site lists him as founder of **Nexanet** (nexanet.ai, an intelligence firm) and **Dataminimal** (privacy software) ([whoisjoshuamichael.com](https://whoisjoshuamichael.com/)) ⚠️ self-described. - **X:** [@whoisjmichael](https://x.com/whoisjmichael) (user ID 2005808299183374336, created Dec 30, 2025; 1,050 followers on Oct 24, 2026). Bio: "Working for the people. Cybersecurity researcher holding powerful systems accountable Founder, [link] & DataMinimal". - **Flock work:** - Jul 2025: a misconfigured demo exposing 83,000 cameras. - Nov 13, 2025: reports the pre-login token exposure. - Dec 14, 2025: exports 335,701 device records. - Jan 9, 2026: "53 Times Flock Safety Hardcoded the Password". - Sep 23, 2026: the map and formal paper at [flocksurveillance.org](https://flocksurveillance.org/). - **Claims:** he says 22 military, intelligence and federal sites are covered, with a median 66% of modeled trips passing a Flock camera (his site) ⚠️ not checked. - **Legal:** a Doppel trademark complaint (Sep 24, 2026) and a Flock cease-and-desist alleging unauthorized access (Sep 25, 2026). He told Cybernews he refuses to be "censored through lawfare". - **Cited by:** [[Topics/Flock Safety and ALPR Surveillance/People/Benn Jordan|Benn Jordan]] in Senate testimony (Sep 23, 2026). - **Appears in:** [[Users/@cyber_razz/Post Analyses/Post Analysis - cyber_razz on Flock, Joshua Michael's Map and Proton (2026-10-24)|@cyber_razz post analysis]]. He thanked @cyber_razz for the coverage on X ([post](https://x.com/whoisjmichael/status/2114074073202671685)).