5 ms·
"Shell out for Hikvision"? Hikvision has generally been low cost equipment with decent performance. The main issue with Hikvision is that they are funded and co
by brk 4y ago
"Shell out for Hikvision"?
Hikvision has generally been low cost equipment with decent performance.
The main issue with Hikvision is that they are funded and controlled by the Chinese government, and have had countless major vulnerabilities over the years.
Then there is Dahua, which is basically Hikvision Junior. Reolink is somewhat in the middle, in the past they have OEM'd products from Dahua, and others. It can be difficult to know who actually manufactures a lot of the Chinese surveillance cameras, as the companies often go to great lengths to obscure the details.
- pablodavila 4y agoIs there a manufacturer you prefer over others in the budget segment?
- brk 4y agoHanwha A Series cameras. They are relatively new may be hard to find online yet.
- Tijdreiziger 4y agoDidn't know about Hanwha, thanks. Looks like the A series isn't even on their European website yet though :(
- brk 4y agoThis page might help fill in some details: https://www.hanwhasecurity.com/products-page/security-cameras/series/wisenet-a-series/ https://www.hanwhasecurity.com/products-page/security-camera...
- walterbell 4y agoHanwha was previously Samsung Wisenet?
- brk 4y agoCorrect, Hanwha has been independent of Samsung for many years now though.
- Tijdreiziger 4y agoAh, it seems that I was mistaken about Hikvision then.
- 1MachineElf 4y agoFWIW, I have a mostly isolated network of Reolink cameras. Initially it was completely locked down, but I discovered the cameras eventually refuse connections after their RTC drifts too much. I could not get them to use my router for NTP because they preferred pool.ntp.org. I had to open up that port as well as allow them to make DNS lookups on my router. They have been working fine with that minimal amount of internet access, but curiously, the firewall logs show frequent blocked connections to Reolink IPs on port 9999. If you have Reolink cameras, your network is open, and you're worried about data exfiltration, then 9999 is one port you may want to block.
- accountofme 4y agowhy not just point pool.ntp.org to your router ip on the dns server? then you need not open them up to anything :)
- 1MachineElf 4y agoYeah, I really should do that. The current DNS setup is just using AdGuard Home. From what I can see, it doesn't support custom rules. Down the road I will setup something that provides this, most likely BIND forwarding to AdGuard.
- accountofme 4y agoYeah that is cool, I use dnscrypt proxy myself, it is a go application which can apply rules and filters ;) good luck with the upgrade :D