4 ms·

My cameras are on their own vlan, with outbound internet access disabled - so in theory they aren't sending anything anywhere else. So is this less about the a

My cameras are on their own vlan, with outbound internet access disabled - so in theory they aren't sending anything anywhere else. So is this less about the actual cameras, and more that they have been installed insecurely and not kept up to date with firmware? Or the hardware used to record the data is acutally in the cloud somewhere and that is the issue?

quantum_state 4y ago
The UK government is behaving more and more adolescent like … Not good for the kingdom …
stedaniels 4y ago
I have no comment on the security of Hikvision devices. However, a lot of cameras these days come with a good sized amount of processing power onboard. This can be used for object detection amongst other things. Even without network access the devices could communicate and act on the command of others in many ways. A couple of ideas. You could communicate with the IR LEDs. You could blank the video feed if a certain QR code or flashing light pattern is detected. I'm sure there are more, but you get the idea.
- bsenftner 4y ago
  A lot of cameras are for sale with such additional compute, but the only people with them are developers. Corporations that want/need security tend to have large legacy camera networks that one is lucky if they support HD resolution above 720p. I worked for a leading enterprise FR video security company, and the majority of their clients are firms with anywhere from a few hundred to several tens of thousands of original generation IP cameras, which they very slowly replace with something as close to what they already have. They want to continue to use their older cameras too, often because their network and number of cameras fit, higher resolution and greater bandwidth cameras simply can't fit into their live and operating design.
wil421 4y ago
I know a few people who are in the AV/low voltage installing business. They said it’s been going around that CCP can access the cameras remotely and/or get video off them. He said he actually likes installing and setting them up but they have to stop selling them due to customer pressure and “unknown” back doors.
supermatt 4y ago
i dont think ive ever seen a firmware update for any of my hikvision cameras. They are only 5 years old and require IE to use the admin interface... I would NEVER buy hikvision again because as far as im concerned their products are absolute junk. Im amazed they would even be looked at for gov/edu. I guess cheapest really does win those tenders.
- bennyp101 4y ago
  They used to need ie for the live feed iirc, but my current colorvu ones work fine in Firefox. For home use they suit me perfectly, but I see what you are saying, I too thought that there was a more “pro” brand that govs would use.
joosters 4y ago
Ah, the “You’re holding it wrong” defence.
- bennyp101 4y ago
  More the “belt and braces” idea. There’s no proof as such, so SOP would be to firewall things?
mywacaday 4y ago
Who makes your network hardware?

quantum_state 4y ago

The UK government is behaving more and more adolescent like … Not good for the kingdom …

stedaniels 4y ago

I have no comment on the security of Hikvision devices. However, a lot of cameras these days come with a good sized amount of processing power onboard. This can be used for object detection amongst other things. Even without network access the devices could communicate and act on the command of others in many ways. A couple of ideas. You could communicate with the IR LEDs. You could blank the video feed if a certain QR code or flashing light pattern is detected. I'm sure there are more, but you get the idea.

bsenftner 4y ago
A lot of cameras are for sale with such additional compute, but the only people with them are developers. Corporations that want/need security tend to have large legacy camera networks that one is lucky if they support HD resolution above 720p. I worked for a leading enterprise FR video security company, and the majority of their clients are firms with anywhere from a few hundred to several tens of thousands of original generation IP cameras, which they very slowly replace with something as close to what they already have. They want to continue to use their older cameras too, often because their network and number of cameras fit, higher resolution and greater bandwidth cameras simply can't fit into their live and operating design.

wil421 4y ago

I know a few people who are in the AV/low voltage installing business. They said it’s been going around that CCP can access the cameras remotely and/or get video off them. He said he actually likes installing and setting them up but they have to stop selling them due to customer pressure and “unknown” back doors.

supermatt 4y ago

i dont think ive ever seen a firmware update for any of my hikvision cameras. They are only 5 years old and require IE to use the admin interface... I would NEVER buy hikvision again because as far as im concerned their products are absolute junk. Im amazed they would even be looked at for gov/edu. I guess cheapest really does win those tenders.

bennyp101 4y ago
They used to need ie for the live feed iirc, but my current colorvu ones work fine in Firefox. For home use they suit me perfectly, but I see what you are saying, I too thought that there was a more “pro” brand that govs would use.

joosters 4y ago

Ah, the “You’re holding it wrong” defence.

bennyp101 4y ago
More the “belt and braces” idea. There’s no proof as such, so SOP would be to firewall things?

mywacaday 4y ago

Who makes your network hardware?