4 ms·

> But I tend to worry about the security vulnerabilities and/or backdoors in the cameras sold for these purposes This is precisely why I try to use Raspberry P

> But I tend to worry about the security vulnerabilities and/or backdoors in the cameras sold for these purposes This is precisely why I try to use Raspberry Pi's for stuff like this. Even then, I do put the devices on a separate guest wifi network that is firewalled off from the rest of my network. It doesn't keep them from being used for DDoS or as a jump point for attackers, but at least it (hopefully) keeps them out of my local network.

aftbit 9y ago
I've been meaning to put together a guest network that was only allowed to connect to a single VM / LXC container on my home server. Then I could set up a bunch of those cheap Chinese cameras and ensure that nobody was accessing them remotely while still enjoying internet-accessible video.
ad_hominem 9y ago
That does sound interesting, would you mind sharing what camera hardware you use? I didn't mention it in my other comment but about 6 months ago I did set up a "YI" brand dome camera[1] for my mother-in-law. It comes with a slick little iPhone/Android app for controlling it, and the setup process / onboarding the device onto her WiFi network was very smooth. So anyway I was demoing their mobile app to her, and I was going to show her how you'd have to be on her WiFi network with the admin password to be able to access the video stream / device. So I disabled the WiFi on her phone to demo that. My jaw about hit the floor when the video stream was still working over her cellular modem (in other words the video was streaming over the Internet by default)! Note this was fresh out of the box, she didn't sign up for YI's cloud platform option or anything like that. So yeah I would be very heavy on iptables rules if I were you. [1]: https://www.amazon.com/gp/product/B01CW4BN5M https://www.amazon.com/gp/product/B01CW4BN5M
- heywire 9y ago
  I'm using the official raspberry pi camera module both with a model B and a zero-w. For night vision in my garage, I found a standalone infrared light similar to [1] [1] https://www.amazon.com/Univivi-U48R-48-LEDs-WideAngle-Illuminator/dp/B00M3MQL9W https://www.amazon.com/Univivi-U48R-48-LEDs-WideAngle-Illumi...

aftbit 9y ago

I've been meaning to put together a guest network that was only allowed to connect to a single VM / LXC container on my home server. Then I could set up a bunch of those cheap Chinese cameras and ensure that nobody was accessing them remotely while still enjoying internet-accessible video.

ad_hominem 9y ago

That does sound interesting, would you mind sharing what camera hardware you use? I didn't mention it in my other comment but about 6 months ago I did set up a "YI" brand dome camera[1] for my mother-in-law. It comes with a slick little iPhone/Android app for controlling it, and the setup process / onboarding the device onto her WiFi network was very smooth. So anyway I was demoing their mobile app to her, and I was going to show her how you'd have to be on her WiFi network with the admin password to be able to access the video stream / device. So I disabled the WiFi on her phone to demo that. My jaw about hit the floor when the video stream was still working over her cellular modem (in other words the video was streaming over the Internet by default)! Note this was fresh out of the box, she didn't sign up for YI's cloud platform option or anything like that. So yeah I would be very heavy on iptables rules if I were you. [1]: https://www.amazon.com/gp/product/B01CW4BN5M https://www.amazon.com/gp/product/B01CW4BN5M

heywire 9y ago
I'm using the official raspberry pi camera module both with a model B and a zero-w. For night vision in my garage, I found a standalone infrared light similar to [1] [1] https://www.amazon.com/Univivi-U48R-48-LEDs-WideAngle-Illuminator/dp/B00M3MQL9W https://www.amazon.com/Univivi-U48R-48-LEDs-WideAngle-Illumi...