8 ms·
Kerberos: Open-Source Video Surveillance
- foodstances 5y agoDoes it support Kerberos authentication?
- leetrout 5y agoIt’s like they didn’t even Google the name first.
- marcosdumay 5y agoIt's surprising that anybody working on something related to security and computers would have to Google that name. But yeah, goes to show that Windows is not absolutely omnipresent.
- natch 5y agoI don’t follow the Windows reference since my understanding was that Kerberos (the authentication protocol and associated project and software) is not platform specific, and also works on UNIX and macOS and other systems where it’s implemented for that matter. Did you think Kerberos was only on Windows?
- marcosdumay 5y agoIt's not platform specific, but everything on Windows uses it, while on other platforms it's a decision people have to make (and often decide for something else, because they don't understand kerberos and it's not trivial to setup). Thus, if you haven't heard of it, you are not on Windows.
- natch 5y agoWhere I’ve used it, it was not a decision I had to make (OS X, UNIX). It was a decision made by the IT departments at my organizations. So I’ve most certainly heard of it. No Windows anywhere in the picture. But I get what you are saying, you’re talking about people who have not heard of it.
- spijdar 5y agoTo add on to this -- the about page acknowledges how "many are confused" about the name but effectively brushes it off because "kerberos is a good name", then "it's not actually kerberos, but kerberos.io", followed by "it's a mouthful so we'll just say kerberos" (and the HN submission just says kerberos) I feel like the name really might be an impediment to the project. Not that people can't ever re-use names, but this really feels like a pointless impediment to discoverability.
- rjzzleep 5y agoIt actually is a really good name. But yeah, I had the same confusion.
- vhodges 5y agoA better name for a multi-headed security system would be Cerberus https://en.wikipedia.org/wiki/Cerberus https://en.wikipedia.org/wiki/Cerberus
- rjzzleep 5y agoThat might be something they would be willing to change their name to. It's also a commonly used name although probably nowhere near as bad to google as Kerberus.
- srswtf123 5y agoI think Siemans has that under the Cerberus Pyrotronics brand.
- pjc50 5y agoSame dog, different language.
- wyager 5y agoIt’s pronounced about the same in either case. “Cerberus” in Latin is pronounced “Kerberus”, just like “cent” is actually pronounced “Kent”.
- daniellarusso 5y agoWell done.
- ulzeraj 5y agoI had a very similar moment a few months ago when I found out there is some kind of docker management UI named Heimdall, which is the name of another Kerberos implementation.
- quickthrower2 5y agok6s? Maybe!
- bsenftner 5y ago> Single camera per instance (e.g. One Docker container per camera). One camera per Docker instance? This is going to eat up hardware resources like Fat Albert.
- daniellarusso 5y agoHow does Fat Albert eat up hardware resources? Also, don’t you need to know the specs of the individual container instances before determining it will be resource starved on the host? I have an off-the-shelf CCTV DVR that supports 4k with up to 8 cameras, but it struggles with more than 4.
- bsenftner 5y agoI write video security software, and the support logic to manage a single camera is quite low. Whereas the supporting infrastructure for this conglomeration is quite large. I know this field of tech intimately, yet when I see projects like this I ask myself "what are they doing with all this infrastructure? why?"
- okamiueru 5y agoWhat kind of hardware resource would this eat up? Maybe on non-linux where docker isn't as efficient? There is next to zero extra memory overhead on Linux, as the static parts are shared. Computational overhead is also linear with work, which would mostly be the case regardless.
- daniellarusso 5y agoThe other cool thing, to me, is you can keep adding cameras and do not have to replace hardware, just add more.
- bsenftner 5y agoIt's not just the use of Docker, the infrastructure they're using is heavier than necessary. Quite a bit.
- 5y ago
- thom 5y agoAny recommendations for a system like this that runs on old smartphones as cameras?
- Atlas-Marbles 5y agoI've used an old phone with kerberos. You'll need an "IP cam" app that runs an mjpg or RTSP stream from the phone, then put the stream url in kerberos. I run kerberos on a Pi.
- clipradiowallet 5y agoChoosing a name like "Kerberos" for a new project will make it very difficult to search for anything related to it. Kerberos is an old concept in many operating systems with 8.4 million google search results(and none of them are related to this video product). Pick a new name IMO.
- aaronchall 5y agoIt's interesting that the cached summary of the `Kerberos` article on Yahoo search has the text of the disambiguated https://en.wikipedia.org/wiki/Kerberos_(protocol) https://en.wikipedia.org/wiki/Kerberos_(protocol), but it's now a disambiguation page that still doesn't include this Kerberos. The biggest problem with this name clash for the creators is that help and documentation will be hard to find, which will stymie adoption. They also lose potential good will with the rest of the tech community.
- counternotions 5y agoFrigate is another open-source object detection engine that works amazingly well with Home Assistant: https://github.com/blakeblackshear/frigate https://github.com/blakeblackshear/frigate
- dementik 5y agoFrigate is just wonderful. Coupled with Coral TPU it manages to perform pretty well on Raspi4.
- GekkePrutser 5y agoInteresting! I was just setting up Shinobi but this looks really good too. I don't like the idea of having one docker per camera though.. But I'll give it a try.
- Johnyma22 5y agoI tried Shinobi but gave up, I even spent some time on bug reports/issues/with their community. My major issue with Shinobi was each stream is processed by ffmpeg and I had 10+ cameras all requiring 10% cpu each to handle any object/motion detection. The cameras had object/motion detection functionality built in so I figured it made more sense to just do that work on the camera and not on CPU. I also tried offloading some jobs to GPU and that was not working properly, so I tried Nvidia Jetson and still no dice.
- GekkePrutser 5y agoThe problem with offloading that to the camera is that onvif doesn't seem to have a standard way to report this. I only need motion detection on one cam so it wasn't an issue. But good point, I wonder how Kerberos does this
- Keyb0ardWarr10r 5y agoIt doesn't use the builtin ONVIF motion detection but instead processes every keyframe and does motion detection between the keyframes. So not every frame is being decoded to process, but enough to perform motion capture. There's some interesting work w.r.t motion detection that doesn't actually require decoding the packets but rather looks at the motion vectors to estimate motion. That would save up a lot of resources..
- cvwright 5y ago> motion detection that doesn't actually require decoding the packets but rather looks at the motion vectors to estimate motion. There's a very cool package for the Raspberry Pi that does this: https://github.com/billw2/pikrellcam https://github.com/billw2/pikrellcam
- eeZah7Ux 5y agodocker pull kerberos/kerberos Should I trust a whole image from docker hub with access to a security camera? No. I'd rather trust a Linux distribution to do a reproducible build.
- Keyb0ardWarr10r 5y agobuild from source then https://github.com/kerberos-io/opensource https://github.com/kerberos-io/opensource
- eeZah7Ux 5y agoNo thanks.
- vdfs 5y agoAnyone know how this compare to MotionEyeOS? MotionEye is great but have some limitations like no audio, no way to separate users/camera permissions
- ancount 5y agoDoes anyone have some outdoor camera recommendations? The ones I had were very low resolution, I could hardly recognize myself in video.
- jzawodn 5y agoI'm happy with Amcrest cameras, both for indoor and outdoor use. They have some very affordable 4k options with PoE if that matters to you.
- throw0101a 5y agoHow do you power your outdoor cameras? Just drill a hole for a PoE cable?
- acidburnNSA 5y agoThat's what I do.
- acidburnNSA 5y agoI love their cameras but the app is so abysmal. Whenever I connect over vpn to access the cams remotely it goes effectively into a boot loop. I hate it. I keep reporting the crashes on android but no updates come.
- Saris 5y agoAny app that supports RTSP will work too, you're not stuck on the official app!
- bsenftner 5y agoI've come full circle with Amcrest. I work in video surveillance, and over time Amcrest just continue to work. I think of them like the consumer priced Axis. As far as their app, ditch it - they are ONVIF compatible. I'm currently using mine with both a rebranded hikvision NVR and a home brewed NVR I'm coding myself, plus a few RaspberryPIs running VLC in different rooms.
- whalesalad 5y agoInteresting. I’ve been building a home camera network and the state of this space (the nvr software) is pretty abysmal: zoneminder, blueiris, shinobi, etc… gonna take this for a spin. This is a terrible name for an open source project though.
- edgyquant 5y agoIt would be a perfect name for a surveillance system in a dystopian government though
- boraoztunc 5y agoa system in "The Ministry of Surveillance"
- edoceo 5y agoMinistry of Peace
- CyberDildonics 5y agoThe name is a giant red flag. If someone doesn't care about a giant name conflict of a very uncommon word with a very common project, then they just brush it off with rationalizations, it makes me wonder what other reasonable things they are willing to ignore.
- aaronchall 5y agoAh, the reasonableness signaling heuristic.
- deleted 5y ago[deleted]
- tw04 5y agoOther than the windows dependence, what’s the issue with blueiris? I’ve tried the others you’ve listed as well and found it to be the most robust by quite a bit. I wish the web interface were better, and having to use a reverse proxy or vpn to get mobile access is also… meh.
- kristianpaul 5y agoHow this could be named open source but actually be licensed under a creative commons non comercial license (BY-NC-SA 4.0) https://doc.kerberos.io/opensource/license/ https://doc.kerberos.io/opensource/license/
- fooblat 5y agoIt does seem like an odd choice given that Creative Commons specifically recommends against it[0]. That alone would make me unlikely to use this project. 0. https://creativecommons.org/faq/#can-i-apply-a-creative-commons-license-to-software https://creativecommons.org/faq/#can-i-apply-a-creative-comm...
- remram 5y agoSeems like v3 is MIT (but not yet released): https://github.com/kerberos-io/opensource/blob/master/LICENSE https://github.com/kerberos-io/opensource/blob/master/LICENS...
- ghastmaster 5y ago"Open Source" means the source code is accessible, usually to the entire public. "Closed Source" means the source code is not accessible. Whether the source is open or not does not limit what type of license that can be applied to it. For example, I can write a program and not release it to any other soul and give it an MIT license. Conversely I could publish code on github available to the public and apply a very strict license.
- acd 5y agoKerberos name is a security ticket protocol/server.
- synergy20 5y agowhere is the code? I only see open source client, but the server side(nvr etc) are really the key.
- thedougd 5y agoI'm surprised more video surveillance software does not leverage the APIs of the cameras. Network cameras have built in motion, object, line cross, and facial detection. The work is done in the camera and the APIs allow you to subscribe through call backs or server side events. You could support event recording for at least a half dozen cameras with a raspberry pi. I've prototyped this but it ended up on my shelf of incomplete hobbies. Given that many camera brands are white label products made by the same manufacturer, I would think you could cover several brands with just the first API client implementation. Or maybe this is also covered with onvif?
- tw04 5y agoThat is all part of ONVIF.
- abstractbarista 5y agoI believe some like Blue Iris do support this, but other open-source stuff like ZoneMinder is not as close. ZM does support controlling many PTZ cameras, which is really fun. :)
- millzlane 5y agoThis post couldn't have come at a more perfect time. I recently got a call from a client who couldn't access their Unifi Cameras remotely anymore. Apparently the EOL for the self-hosted Unifi Video was was announced last year. And the replacement solution is no longer self-hosted and is a hardware solution that costs a few hundred dollars to keep the system up to date.
- tw04 5y agoCareful with that. Ubiquiti doesn’t support ONVIF (industry standard for triggering motion alerts) and stopped supporting RTSP on their new stuff IIRC. You’re going to want to do a ton of testing if you’re keeping those cameras.
- millzlane 5y agoTY for letting me know. So basically the customers are locked in with Ubiquiti or will have to replace their cameras if I want to use ONVIF and RTSP.