4 ms·
Why would the footage not be E2E encrypted? Hospitals and police stations are installing cameras which store unencrypted footage remotely?? What is this madness
by jtsiskin 6y ago
Why would the footage not be E2E encrypted? Hospitals and police stations are installing cameras which store unencrypted footage remotely?? What is this madness
- ocdtrekkie 6y agoEnd-to-end between the cloud provider and the cameras at the site, sure. But it's stored unencrypted, mostly because cloud providers provide the web interfaces and such to stream the video, provide services to analyze and classify the video, etc. Nobody encrypts their surveillance video storage, AFAIK.
- d110af5ccf 6y ago> End-to-end between the cloud provider and the cameras at the site, sure That's TLS, not E2EE. E2EE means the provider never sees the unencrypted data. (Ex SMS is unencrypted, most internet services use TLS these days, Matrix and Signal use E2EE.) > Nobody encrypts their surveillance video storage, AFAIK. This is a serious problem.
- ocdtrekkie 6y agoIt's never going to change because of the performance implications. Most video surveillance systems have poor CPU to begin with.
- d110af5ccf 6y agoWhat performance implication?! AES-NI has been standard for mainstream x86 hardware since ~2013 and ARMv8 introduced optional crypto instructions in 2011! The issue is that manufacturers choose the cheapest possible SoC that lacks these abilities. Given the small cost savings and importance of basic security measures, that really needs to change. (A quick look at Amazon shows many of the top sellers advertising various "AI" features and streaming video at 4K or better. Given their apparent capabilities, I strongly suspect that such SoCs do in fact have hardware support for crypto.)