No brand Security cameras and security holes

Forums › Digital Imaging › No brand Security cameras and security holes - what to be aware of?

hairy1

2821 posts

Uber Geek
+1 received by user: 402

Trusted

Lifetime subscriber

# 175045 15-Jun-2015 15:50

Hi all,

I have a mate who needs some video monitoring so am having a look as a favour. These cameras will be in the middle of the pacific and probably won't be connected to the internet (but can't say for sure). They will probably be these:

http://www.aliexpress.com/item/Sunvision-1280-720P-HD-1-0-Megapixel-IP-Camera-Wifi-Outdoor-P2P-Plug-Play-Waterproof-IP/1690649763.html

with Blue Iris as the monitoring software:

http://blueirissoftware.com/

Is there anything to be aware of when getting these cameras? There are horror stories of webcams broadcasting all over the internet.

Cheers, Matt.

My views (except when I am looking out their windows) are not those of my employer.

tchart

1518 posts

Uber Geek
+1 received by user: 196

Trusted

# 1325192 15-Jun-2015 16:33

Change the default password?

sbiddle

27906 posts

Uber Geek
+1 received by user: 7390

Moderator

Trusted

Biddle Corp

Lifetime subscriber

# 1325202 15-Jun-2015 16:47

One person supports this post

tchart: Change the default password?

There is a lot more to it that that..

Many Chinese cameras have (or have had) backdoors which has allowed them to be compromised.

ONVIF can allow access to the video even if you don't have a password. UPNP can create automatic port forwards in the router.

hairy1

2821 posts

Uber Geek
+1 received by user: 402

Trusted

Lifetime subscriber

# 1325244 15-Jun-2015 18:50

Thanks Steve. So the only option is really to take a punt and hope there is no malicious firmware or buy d-links?

Cheers.

My views (except when I am looking out their windows) are not those of my employer.

toyonut

1508 posts

Uber Geek
+1 received by user: 213

# 1325289 15-Jun-2015 19:32

Or if you are using blueiris, don't configure a gateway or dns on the cams, just an IP and subnet mask then point the computer running blueiris at them. If you are are really concerned about it, put a second network card in the PC only for BlueIris/cams and plug it into the POE switch. Configure a subnet for just the cams and the second NIC. Turn off everything except IPV4 on the second nic. If you are using them wireless, I don't know, maybe some kind of restricted wireless with no gateway to the internet.

Try Vultr using this link and get us both some credit:

http://www.vultr.com/?ref=7033587-3B

hairy1

2821 posts

Uber Geek
+1 received by user: 402

Trusted

Lifetime subscriber

# 1325923 16-Jun-2015 16:50

Thanks guys,

That has given me some good ideas. A second wireless without internet on the modem would be a good start. The network will be connected to the internet eventually. I will change some IP addresses around etc. The problem is that I don't want to make it too complex for someone to fix if things go wrong as it is miles from anywhere.

Cheers, Matt.

My views (except when I am looking out their windows) are not those of my employer.