4 ms·

ZoneMinder doesn't do encryption, not sure if it would allow adding in gpg as a plugin somewhere. Network bandwidth is generally not metered on home connection

ZoneMinder doesn't do encryption, not sure if it would allow adding in gpg as a plugin somewhere. Network bandwidth is generally not metered on home connections, so that's indeed not an issue, but storage isn't infinite. Transcoding the video would be a plus and can't happen remotely due to encryption. Raw mjpeg is also an option though, storage isn't that expensive (or throw more CPU at the encoding system; a raspberry pi is just an example). > encrypting the network traffic end to end but the video stream? The idea is that the storage server (Google, for that matter) doesn't need access to my video stream. Not sure if end to end encryption is too much to ask but I did figure since it's 2020, it should be doable. Thanks for your responses by the way, it's helpful to have a second pair of eyes on finding a simple solution. Since there doesn't appear to be one, I will start experimenting with some ideas, feeding ffmpeg to gpg and checking cpu vs. compression ratio etc. Next step will be seeing which protocol to use for local + remote writing of the encrypted file (not sure if sshfs does incremental writes / appends). Let's see how hard this is! :)

walrus01 6y ago
> Transcoding the video would be a plus and can't happen remotely due to encryption. why couldn't it? Unless the remote system (where the video is being received) is untrustworthy. In my scenario I was describing network traffic encryption, for a theoretical where the entire network between the video-sending and video-receiving linux systems could be 'hostile', but not encryption of the video itself, I was assuming that the location where the video is being sent to is trustworthy. If the video needs to go to a remote storage location where you want files to be written to disk, but nobody else to be able to read them, that's a somewhat more rare problem to solve. Possibly something involving a virtual machine with a dm-crypt/LUKS implementation for FDE.
- lucgommans 6y ago
  > Unless the remote system (where the video is being received) is untrustworthy Well, that's part of the threat model. There is no need to trust the remote end fully, especially since I'm hoping that I can host at Google / OVH / Hetzner / whatever. I trust them as a backup and not to collude with a burglar, but why give them plaintext data? ... To answer my own question, not adding encryption makes life easy I suppose... but that's not very satisfactory imo :)
omgwtfbyobbq 6y ago
ZoneMinder doesn't do encryption, not sure if it would allow adding in gpg as a plugin somewhere. Adding SSL to Apache works, assuming you're using Apache. Edit - This is the closest I can think of, but you'll need to modify it to encrypt the files before upload. https://github.com/kabadisha/raspberry-pi-cctv https://github.com/kabadisha/raspberry-pi-cctv
- numpad0 6y ago
  He wants to DRM the footage. That’s how it reads to me.
  - omgwtfbyobbq 6y ago
    Oh yeah, I should've read the whole thread.

walrus01 6y ago

> Transcoding the video would be a plus and can't happen remotely due to encryption. why couldn't it? Unless the remote system (where the video is being received) is untrustworthy. In my scenario I was describing network traffic encryption, for a theoretical where the entire network between the video-sending and video-receiving linux systems could be 'hostile', but not encryption of the video itself, I was assuming that the location where the video is being sent to is trustworthy. If the video needs to go to a remote storage location where you want files to be written to disk, but nobody else to be able to read them, that's a somewhat more rare problem to solve. Possibly something involving a virtual machine with a dm-crypt/LUKS implementation for FDE.

lucgommans 6y ago
> Unless the remote system (where the video is being received) is untrustworthy Well, that's part of the threat model. There is no need to trust the remote end fully, especially since I'm hoping that I can host at Google / OVH / Hetzner / whatever. I trust them as a backup and not to collude with a burglar, but why give them plaintext data? ... To answer my own question, not adding encryption makes life easy I suppose... but that's not very satisfactory imo :)

omgwtfbyobbq 6y ago

ZoneMinder doesn't do encryption, not sure if it would allow adding in gpg as a plugin somewhere. Adding SSL to Apache works, assuming you're using Apache. Edit - This is the closest I can think of, but you'll need to modify it to encrypt the files before upload. https://github.com/kabadisha/raspberry-pi-cctv https://github.com/kabadisha/raspberry-pi-cctv

numpad0 6y ago
He wants to DRM the footage. That’s how it reads to me.
- omgwtfbyobbq 6y ago
  Oh yeah, I should've read the whole thread.