top | item 36448589

(no title)

Jeslijar | 2 years ago

Pretty sure hikvision is suspected to have spyware in it. UK has banned it from government sites afaik. China of course denies. https://www.bbc.com/news/world-asia-china-65307503

It is known to have major vulnerabilities https://www.bleepingcomputer.com/news/security/over-80-000-e...

discuss

entrepy123|2 years ago

Yeah, I was going to suggest Hikvision as being a possible/standard good fit for the OP's inquiry (cameras specifically for LAN use "offline" (not connected to public internet). Straight-up Hikvision would be lower cost than US-based rebranders. However, I checked Wikipedia first and saw "In November 2022, the FCC banned sales or import of equipment made by Hikvision".

So, Hikvision seems to not be a great answer in 2023 after all (an apparent 100% shift from just several years ago). I wonder about the current status of the ban, and what the rebranders and their distributors are doing; a cursory look at web material still shows Hikvision-derived products AFAICT (though I haven't checked in much depth).

As for management software; a dedicated NVR appliance is most convenient IMO in terms of hands-off just-works, but if one wanted to put more time and resources into it, Blue Iris looked interesting the last time I looked several years ago; again, I wonder how that landscape may have updated since then.

Kirby64|2 years ago

Not sure this is actually impacting anything here... I've purchased more hikvision cameras and nvrs this year with no apparent issue. They sure seem to be available at usual pricing.

As long as you take a pretty hard stance to wall off the Hikvision stuff from the outside internet, it seems fairly harmless. Obviously this requires setting up your internet to manage that, but that's not impossible.

bitwrangler|2 years ago

Affected Hikvision cameras and firmware versions are listed here:

https://www.hikvision.com/en/support/cybersecurity/security-...

Precondition:

The attacker has access to the device network or the device has direct interface with the internet

dmm|2 years ago

IP cameras in general are little, proprietary computers that you shouldn't trust with internet access. Put them on an isolated network and access them through a more trusted(FOSS) NVR.