4 ms·
I'd be interested to know if these type of cheap cameras are safe to use after fixing / replacing the default firmware or does the hardware itself have some kin
by Uninen 7y ago
I'd be interested to know if these type of cheap cameras are safe to use after fixing / replacing the default firmware or does the hardware itself have some kind of backdoors to allow easy exploits even if the firmware is updated.
- grawlinson 7y agoIt's common practise to put these devices on their own VLAN that is completely isolated from network access, except for the controller device (NVR, etc). I'd consider these items completely and utterly unfit for purpose, even these from branded manufacturers.
- milankragujevic 7y agoWell, AFAIK, the so-called Cloud cameras that don't require (nor support) an NVR must be allowed to call-home, whether for setup or regular functioning. They don't do anything inside the LAN. That way they can be easily watched from anywhere, as they don't require open ports on the router, and can work even behind CGNAT. The obvious downside is the video is sent to the company's servers, and given how cheap the device is and how expensive storing and streaming video is, you can bet they're monetizing it somehow...
- vuln 7y agoYup. There’s even a community helping. Xiaomi DaFang Hacks / XiaoFang 1S / Wyzecam V2 / Wyzecam Pan / Other T20 Devices https://github.com/EliasKotlyar/Xiaomi-Dafang-Hacks https://github.com/EliasKotlyar/Xiaomi-Dafang-Hacks