4 ms·

Nothing surprising about it. These cheap Chinese cameras are just like that: buggy, default telnet passwords, silly vulnerabilities, crashing ActiveX plugins. D

Nothing surprising about it. These cheap Chinese cameras are just like that: buggy, default telnet passwords, silly vulnerabilities, crashing ActiveX plugins. Dahua/Xiongmai/Herospeed/whatever doesn't matter, everything is awful. Using these devices outside isolated VLAN with only RTSP tunneled to trusted client is just bad idea.

buran77 7y ago
> These cheap Chinese cameras People want dirt cheap stuff that has a Bible's worth of advertised features. Amazon's Ring (which is an order of magnitude more expensive than the regular cheap Chinese crap) is a dumpster fire of security and privacy to rival any Chinese brand, yet it consistently gets 4/5 stars in any review, none of which even bothers to mention the litany of findings or the fact that for the price they are unacceptable. But they are acceptable because it's not Chinese. It's the "Made in" label that counts. People will accept more garbage for a higher price if it has a local label, and will criticize foreign things more for the exact same issues. And that's valid basically almost everywhere in the world.
close04 7y ago
> buggy, default telnet passwords, silly vulnerabilities, crashing ActiveX plugins This pretty much happens with any equipment. If it's very cheap there's no reasonable expectation that they put too much effort into building and maintaining it. If it's expensive there may be other interests involved. The difference is what your nationalism dictates: When you hear of a Huawei vulnerability you think "spying", and when you hear of a Cisco one (or five [0]) you think "bug". In the end the choice is to buy cheap and have all the careless bugs, or to buy expensive and only have the by design ones. And whether you think they are malicious or not depends on where you come from relative to the product. [0] https://www.tomshardware.com/news/cisco-backdoor-hardcoded-accounts-software,37480.html https://www.tomshardware.com/news/cisco-backdoor-hardcoded-a...
- therealx 7y ago
  Or the semi-third option; firewall the living hell out of everything with something you either wrote yourself or can read yourself. No guarantee there either but you can avoid the garbage fire that is a lot of this. I'm sure the NSA has exploits for everything tho.
  - greyhair 7y ago
    And that third option is only technically available to at most 10 percent of the population, and most of them have neither the time ("day jobs") nor inclination to spend their time in that effort. And that is discounting the fact that the majority of the buggy appliances you encounter are developed by that very 10 percent in the first place.

buran77 7y ago

> These cheap Chinese cameras People want dirt cheap stuff that has a Bible's worth of advertised features. Amazon's Ring (which is an order of magnitude more expensive than the regular cheap Chinese crap) is a dumpster fire of security and privacy to rival any Chinese brand, yet it consistently gets 4/5 stars in any review, none of which even bothers to mention the litany of findings or the fact that for the price they are unacceptable. But they are acceptable because it's not Chinese. It's the "Made in" label that counts. People will accept more garbage for a higher price if it has a local label, and will criticize foreign things more for the exact same issues. And that's valid basically almost everywhere in the world.

close04 7y ago

> buggy, default telnet passwords, silly vulnerabilities, crashing ActiveX plugins This pretty much happens with any equipment. If it's very cheap there's no reasonable expectation that they put too much effort into building and maintaining it. If it's expensive there may be other interests involved. The difference is what your nationalism dictates: When you hear of a Huawei vulnerability you think "spying", and when you hear of a Cisco one (or five [0]) you think "bug". In the end the choice is to buy cheap and have all the careless bugs, or to buy expensive and only have the by design ones. And whether you think they are malicious or not depends on where you come from relative to the product. [0] https://www.tomshardware.com/news/cisco-backdoor-hardcoded-accounts-software,37480.html https://www.tomshardware.com/news/cisco-backdoor-hardcoded-a...

therealx 7y ago
Or the semi-third option; firewall the living hell out of everything with something you either wrote yourself or can read yourself. No guarantee there either but you can avoid the garbage fire that is a lot of this. I'm sure the NSA has exploits for everything tho.
- greyhair 7y ago
  And that third option is only technically available to at most 10 percent of the population, and most of them have neither the time ("day jobs") nor inclination to spend their time in that effort. And that is discounting the fact that the majority of the buggy appliances you encounter are developed by that very 10 percent in the first place.