5 ms·

From the article “It would be laughable to argue the low-end SG2002 AI SoC poses a threat to any country…” I can see a great deal of trouble capable of coming

From the article “It would be laughable to argue the low-end SG2002 AI SoC poses a threat to any country…” I can see a great deal of trouble capable of coming from a networked device capable of watching the screens 24x7 and potentially intercepting passwords being entered. And those are the legitimate functions for this device. Wouldn’t take much to throw a reverse shell for external access if you wanted to be particularly nefarious. Not saying there’s any evidence this kvm is malicious. But I probably wouldn’t put it in anything more than one of my toy home lab servers.

theamk 2y ago
I was worrying about typical Chinese cloud you cannot turn off (seems to be present on all cheap IP cameras), but this device is actually pretty good. For remote access, there is no cloud. But you can BYO tailscale or FRP [0] (note: I really like the FRP idea, as it's trivial to self-host) For updating, there is a central server. But at least the process seems to be manually-initiated [1]. I am not saying the firmware is backdoor-free, but at least it would be feasible to monitor/block all outgoing network connection attempts, and still have a functional device. [0] https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/network/tailscale.html https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/network/tail... [1] https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/system/updating.html https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/system/updat...
- wkat4242 2y ago
  What's FRP? Your source link speaks only of tailscale.
  - dzidol 2y ago
    Just open the link about tailscale, in the page it's one tab below on the left.
    - wkat4242 2y ago
      Ahh a reverse proxy. Thanks!
- stevefan1999 2y ago
  For FRP do you mean https://github.com/fatedier/frp https://github.com/fatedier/frp?
- poisonborz 2y ago
  You can selfhost the control server, look at headscale, all the clients support this.
- stavros 2y ago
  Speaking of cameras, I got some Reolink cameras for $40 and they're great. I run then on a wifi that has no internet access, but which I can access through Tailscale, and all functionality works (except notifications, obviously), as the cameras have a LAN only mode. About this KVM, I really like the Tailscale access ability, though I'm worried about the binary blob.

theamk 2y ago

I was worrying about typical Chinese cloud you cannot turn off (seems to be present on all cheap IP cameras), but this device is actually pretty good. For remote access, there is no cloud. But you can BYO tailscale or FRP [0] (note: I really like the FRP idea, as it's trivial to self-host) For updating, there is a central server. But at least the process seems to be manually-initiated [1]. I am not saying the firmware is backdoor-free, but at least it would be feasible to monitor/block all outgoing network connection attempts, and still have a functional device. [0] https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/network/tailscale.html https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/network/tail... [1] https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/system/updating.html https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/system/updat...

wkat4242 2y ago
What's FRP? Your source link speaks only of tailscale.
- dzidol 2y ago
  Just open the link about tailscale, in the page it's one tab below on the left.
  - wkat4242 2y ago
    Ahh a reverse proxy. Thanks!
stevefan1999 2y ago
For FRP do you mean https://github.com/fatedier/frp https://github.com/fatedier/frp?
poisonborz 2y ago
You can selfhost the control server, look at headscale, all the clients support this.
stavros 2y ago
Speaking of cameras, I got some Reolink cameras for $40 and they're great. I run then on a wifi that has no internet access, but which I can access through Tailscale, and all functionality works (except notifications, obviously), as the cameras have a LAN only mode. About this KVM, I really like the Tailscale access ability, though I'm worried about the binary blob.