2 ms·
From recent KrebsonSecurity article: This is Why People Fear the Internet of Things [1] Replace "camera" with "watch": “The details about how P2P feature work
by roymurdock 11y ago
From recent KrebsonSecurity article: This is Why People Fear the Internet of Things [1]
Replace "camera" with "watch":
“The details about how P2P feature works which will be helpful for you understand why the camera need communicate with P2P servers,” Qu explained. “Our company deploy many servers in some regions of global world.” Qu further explained:
1. When the camera is powered on and connected to the internet, the camera will log in our main P2P server with fastest response and get the IP address of other server with low load and log in it. Then the camera will not connect the main P2P server.
2. When log in the camera via P2P with Foscam App, the app will also log in our main P2P server with fastest response and get the IP address of the server the camera connect to.
3. The App will ask the server create an independent tunnel between the app and the camera. The data and video will transfers directly between them and will not pass through the server. If the server fail to create the tunnel, the data and video will be forwarded by the server and all of them are encrypted.
4. Finally the camera will keep hearbeat connection with our P2P server in order to check the connection status with the servers so that the app can visit the camera directly via the server. Only when the camera power off/on or change another network, it will replicate the steps above.”
Nothing inherently malicious about this, unless the vendor is irresponsible with user data, or collects data it should not be collecting in the first place.
[1] http://krebsonsecurity.com/2016/02/this-is-why-people-fear-the-internet-of-things/ http://krebsonsecurity.com/2016/02/this-is-why-people-fear-t...