3 ms·
Well, most IP cameras cannot be accessed this way when you look at the global pool of IP cameras. However many on them on Amazon, particularly from OEM companie
by brk 5y ago
Well, most IP cameras cannot be accessed this way when you look at the global pool of IP cameras. However many on them on Amazon, particularly from OEM companies like Reolink that are more of a custom relabeller vs. a real camera manufacturer have all kinds of backdoor access methods.
Best practice is to put your IP cameras on a separate isolated network, connected to a dual-NIC recorder/PC running trusted software (eg: not some random DVR/NVR on Amazon) for recording and viewing. This is not a perfect solution, but it at least takes you far away from the path-of-least-resistance pool of devices with weak cybersecurity that are prone to various exploits.
- throwaway48375 5y agoCan't you just use VLAN tagging and firewall rules?
- n4bz0r 5y agoYou sure can. And as a result you will get... > a separate isolated network
- throwaway48375 5y agoThey specifically called for dual-NIC.
- DiggyJohnson 5y agoAs an extension of their suggestion. There’s no mystery here.
- brk 5y agoYes, of course. Though most people who understand that are already doing things to mitigate exposing these devices to open internet access. My comment was targeted more towards anyone who might not have considered the risks, or might not be comfortable with virtual segmentation vs. physical segmentation.