4 ms·
My house security and automation systems are all behind a firewall and access to them is proxied, including the video feed concentrator for the security cameras
by classichasclass 8y ago
My house security and automation systems are all behind a firewall and access to them is proxied, including the video feed concentrator for the security cameras. I've had folks call this overkill but I won't directly expose any IoT-like thing to the Internet these days.
- pmlnr 8y agoUnless you left upnp enabled, in which case all precations are useless.
- Piskvorrr 8y agoTell me, Mr. Anderson: what good is UPnP, if the firewall blocks it?
- stordoff 8y agoI done more or less exactly the same - IoT devices are on a separate hotspot, they can't talk out to anything (even pings to the gateway are dropped), and the only thing that can talk in is a specific address on my LAN.
- keeler 8y agoAre they able to initiate outbound connections?
- classichasclass 8y agoNo. They can't route out themselves (only through the proxy, which they don't know how to use and won't accept outbound connections from them anyway), and there is no UPnP enabled on that network.
- bshep 8y agoDo you mind if I ask what cameras / software you use? or a good site to read up on this topic? Bonus if it has a mobile app/interface, my use case is video monitoring of my kids rooms while they sleep.
- gcb0 8y agoisolation is hard if you can't trust the device. Have fun blocking nonstandard upnp hacks and worrying about outgoing traffic from the cameras. https://www.schneier.com/blog/archives/2016/02/eavesdropping_b_1.html https://www.schneier.com/blog/archives/2016/02/eavesdropping...