Unsolved Looking for Security camera options
-
@gjacobse said in Looking for Security camera options:
As I have a single camera that doesn’t meet your needs (Ring Doorbell) I’d like to stay away from WiFi. I have serious performance issues with it. But that could be ring and not a WiFi issue ( last speed test was 220 down and 13up)
Obviously not anywhere close to the same thing.
True security camera systems will have local recording. Local WiFi is more than stable enough for that.
-
@jaredbusch said in Looking for Security camera options:
@gjacobse said in Looking for Security camera options:
As I have a single camera that doesn’t meet your needs (Ring Doorbell) I’d like to stay away from WiFi. I have serious performance issues with it. But that could be ring and not a WiFi issue ( last speed test was 220 down and 13up)
Obviously not anywhere close to the same thing.
True security camera systems will have local recording. Local WiFi is more than stable enough for that.
No disagreement there. I want to add a camera or two, but Ring at least covers Amazon drops....
-
@gjacobse said in Looking for Security camera options:
@jaredbusch said in Looking for Security camera options:
@gjacobse said in Looking for Security camera options:
As I have a single camera that doesn’t meet your needs (Ring Doorbell) I’d like to stay away from WiFi. I have serious performance issues with it. But that could be ring and not a WiFi issue ( last speed test was 220 down and 13up)
Obviously not anywhere close to the same thing.
True security camera systems will have local recording. Local WiFi is more than stable enough for that.
No disagreement there. I want to add a camera or two, but Ring at least covers Amazon drops....
I had to return a Ring system last year because they have no way to continuously monitor the cameras. The video feed shuts down after a max of 10 minutes, and this use case wanted cameras available to be continuously viewed during office hours.
-
I have no experience with them but I keep seeing hikvision everywhere.
-
We use only Vivotek https://www.vivotek.com/
Server software is free for Vivotek cameras, $35 license fee for other brand cameras. Love them. -
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
-
@travisdh1 Do they run LVM?
-
@voip_n00b said in Looking for Security camera options:
@travisdh1 Do they run LVM?
I forget what those HikVision cameras called their software. Probably something like that just so I'd always be confusing it with Logical Volume Manager.
-
@travisdh1 IVMS4200
-
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
-
@jasgot said in Looking for Security camera options:
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
Good to know.
But on the other hand it's not wise to open your security cameras to the internet - ever. All devices are filled with backdoors and vulnerabilities. Some are known, most are not. -
@pete-s said in Looking for Security camera options:
@jasgot said in Looking for Security camera options:
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
Good to know.
But on the other hand it's not wise to open your security cameras to the internet - ever. All devices are filled with backdoors and vulnerabilities. Some are known, most are not.so the only way you'd ever have cameras is with local access, or VPN access to that local network?
-
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@jasgot said in Looking for Security camera options:
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
Good to know.
But on the other hand it's not wise to open your security cameras to the internet - ever. All devices are filled with backdoors and vulnerabilities. Some are known, most are not.so the only way you'd ever have cameras is with local access, or VPN access to that local network?
Yes. It's hard to secure things that are insecure without adding a layer of "something" around it.
In the case of cameras a reverse proxy with SAML authentication could also work.
-
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@jasgot said in Looking for Security camera options:
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
Good to know.
But on the other hand it's not wise to open your security cameras to the internet - ever. All devices are filled with backdoors and vulnerabilities. Some are known, most are not.so the only way you'd ever have cameras is with local access, or VPN access to that local network?
Yes. It's hard to secure things that are insecure without adding a layer of "something" around it.
In the case of cameras a reverse proxy with SAML authentication could also work.
yeah it was a complete non question by the time I finished editing my original post.
Of course if you don't trust whatever you're talking about - you have to do this.
I would guess though, that you could use a reverse proxy and still put most of these things directly online - especially if you put your own logon page in front of the proxy's redirect to the camera system.
-
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@jasgot said in Looking for Security camera options:
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
Good to know.
But on the other hand it's not wise to open your security cameras to the internet - ever. All devices are filled with backdoors and vulnerabilities. Some are known, most are not.so the only way you'd ever have cameras is with local access, or VPN access to that local network?
Yes. It's hard to secure things that are insecure without adding a layer of "something" around it.
In the case of cameras a reverse proxy with SAML authentication could also work.
yeah it was a complete non question by the time I finished editing my original post.
Of course if you don't trust whatever you're talking about - you have to do this.
I would guess though, that you could use a reverse proxy and still put most of these things directly online - especially if you put your own logon page in front of the proxy's redirect to the camera system.
Yes, the cameras or NVR would be accessible through the reverse proxy only.
When you authenticate with SAML, the users are authenticated against a third party "login" service (called Identity Provider). So you are basically outsourcing 2FA and the login process to someone who has the resources to secure it. It's how enterprises do it.
Otherwise if you build your own login portal on a reverse proxy, that will become the weak link from a security perspective.
-
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@jasgot said in Looking for Security camera options:
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
Good to know.
But on the other hand it's not wise to open your security cameras to the internet - ever. All devices are filled with backdoors and vulnerabilities. Some are known, most are not.so the only way you'd ever have cameras is with local access, or VPN access to that local network?
Yes. It's hard to secure things that are insecure without adding a layer of "something" around it.
In the case of cameras a reverse proxy with SAML authentication could also work.
yeah it was a complete non question by the time I finished editing my original post.
Of course if you don't trust whatever you're talking about - you have to do this.
I would guess though, that you could use a reverse proxy and still put most of these things directly online - especially if you put your own logon page in front of the proxy's redirect to the camera system.
Yes, the cameras or NVR would be accessible through the reverse proxy only.
When you authenticate with SAML, the users are authenticated against a third party "login" service (called Identity Provider). So you are basically outsourcing 2FA and the login process to someone who has the resources to secure it. It's how enterprises do it.
Otherwise if you build your own login portal on a reverse proxy, that will become the weak link from a security perspective.
Now you've lost me - where is SAML being introduced?
-
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@jasgot said in Looking for Security camera options:
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
Good to know.
But on the other hand it's not wise to open your security cameras to the internet - ever. All devices are filled with backdoors and vulnerabilities. Some are known, most are not.so the only way you'd ever have cameras is with local access, or VPN access to that local network?
Yes. It's hard to secure things that are insecure without adding a layer of "something" around it.
In the case of cameras a reverse proxy with SAML authentication could also work.
yeah it was a complete non question by the time I finished editing my original post.
Of course if you don't trust whatever you're talking about - you have to do this.
I would guess though, that you could use a reverse proxy and still put most of these things directly online - especially if you put your own logon page in front of the proxy's redirect to the camera system.
Yes, the cameras or NVR would be accessible through the reverse proxy only.
When you authenticate with SAML, the users are authenticated against a third party "login" service (called Identity Provider). So you are basically outsourcing 2FA and the login process to someone who has the resources to secure it. It's how enterprises do it.
Otherwise if you build your own login portal on a reverse proxy, that will become the weak link from a security perspective.
Now you've lost me - where is SAML being introduced?
On the reverse proxy server.
You can't do it on the web cameras or any other insecure device.
-
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@jasgot said in Looking for Security camera options:
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
Good to know.
But on the other hand it's not wise to open your security cameras to the internet - ever. All devices are filled with backdoors and vulnerabilities. Some are known, most are not.so the only way you'd ever have cameras is with local access, or VPN access to that local network?
Yes. It's hard to secure things that are insecure without adding a layer of "something" around it.
In the case of cameras a reverse proxy with SAML authentication could also work.
yeah it was a complete non question by the time I finished editing my original post.
Of course if you don't trust whatever you're talking about - you have to do this.
I would guess though, that you could use a reverse proxy and still put most of these things directly online - especially if you put your own logon page in front of the proxy's redirect to the camera system.
Yes, the cameras or NVR would be accessible through the reverse proxy only.
When you authenticate with SAML, the users are authenticated against a third party "login" service (called Identity Provider). So you are basically outsourcing 2FA and the login process to someone who has the resources to secure it. It's how enterprises do it.
Otherwise if you build your own login portal on a reverse proxy, that will become the weak link from a security perspective.
Now you've lost me - where is SAML being introduced?
On the reverse proxy server.
You can't do it on the web cameras or any other insecure device.
I guess I don't understand why you talked about SAML, then talked about rolling your own... I mean I suppose someone could do that, but if they have access to a SAML solution, rolling your own seems odd.
-
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@jasgot said in Looking for Security camera options:
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
Good to know.
But on the other hand it's not wise to open your security cameras to the internet - ever. All devices are filled with backdoors and vulnerabilities. Some are known, most are not.so the only way you'd ever have cameras is with local access, or VPN access to that local network?
Yes. It's hard to secure things that are insecure without adding a layer of "something" around it.
In the case of cameras a reverse proxy with SAML authentication could also work.
yeah it was a complete non question by the time I finished editing my original post.
Of course if you don't trust whatever you're talking about - you have to do this.
I would guess though, that you could use a reverse proxy and still put most of these things directly online - especially if you put your own logon page in front of the proxy's redirect to the camera system.
Yes, the cameras or NVR would be accessible through the reverse proxy only.
When you authenticate with SAML, the users are authenticated against a third party "login" service (called Identity Provider). So you are basically outsourcing 2FA and the login process to someone who has the resources to secure it. It's how enterprises do it.
Otherwise if you build your own login portal on a reverse proxy, that will become the weak link from a security perspective.
Now you've lost me - where is SAML being introduced?
On the reverse proxy server.
You can't do it on the web cameras or any other insecure device.
I guess I don't understand why you talked about SAML, then talked about rolling your own... I mean I suppose someone could do that, but if they have access to a SAML solution, rolling your own seems odd.
Yeah, rolling your own isn't a such a good idea.
I just mentioned it because you said "your own logon page". -
@dashrender said in Looking for Security camera options:
@pete-s said in Looking for Security camera options:
@jasgot said in Looking for Security camera options:
@travisdh1 said in Looking for Security camera options:
@voip_n00b said in Looking for Security camera options:
I have no experience with them but I keep seeing hikvision everywhere.
I see those everywhere as well. I think because they're cheap. I was very annoyed by the only system I ever worked with (required IE, 8 years ago now, but still, yuck.)
Hikvision was very popular because of price until it was discovered they had a backdoor to monitor every camera that had a route to the internet.
Good to know.
But on the other hand it's not wise to open your security cameras to the internet - ever. All devices are filled with backdoors and vulnerabilities. Some are known, most are not.so the only way you'd ever have cameras is with local access, or VPN access to that local network?
A common way is with VLANs, like mentioned in another thread.
