Unoffical empeg BBS

Quick Links: Empeg FAQ | RioCar.Org | Hijack | BigDisk Builder | jEmplode | emphatic
Repairs: Repairs

Topic Options
#372395 - 31/10/2019 02:21 Wyze cams?
Dignan
carpal tunnel

Registered: 08/03/2000
Posts: 12318
Loc: Sterling, VA
So, Wyze cams are definitely, 100%, nothing more than security risks, right?

They're $25 HD cameras made by a Chinese company. I assume they're only designed to gather data at best and be an attack vector at worst? Is that crazy?

Of course, even crazier is that I bought one on a whim anyway. I needed a camera to keep an eye on the drain in our basement stairwell and check if it might overflow. So I figured I'd drop $25 on this camera and try it out. Hopefully I've protected myself by creating a VLAN and guest wifi network specifically for this device, but who knows?

Any opinions?
_________________________
Matt

Top
#372396 - 31/10/2019 03:08 Re: Wyze cams? [Re: Dignan]
K447
old hand

Registered: 29/05/2002
Posts: 797
Loc: near Toronto, Ontario, Canada
The attack vectors may not only be the camera but through the software/web site/app that you use to view the video feed?

Top
#372397 - 31/10/2019 09:23 Re: Wyze cams? [Re: Dignan]
julf
veteran

Registered: 01/10/2001
Posts: 1307
Loc: Amsterdam, The Netherlands
Are there any cameras left on the market that don't require the video to go through some external cloud service (aka somebody else's computer)?

Top
#372399 - 31/10/2019 12:43 Re: Wyze cams? [Re: Dignan]
elperepat
enthusiast

Registered: 11/01/2002
Posts: 211
Loc: Qc, Canada
I used to tinker with these cameras. I made sure the router completely blocked internet access for the camera by mac address and then flashed the camera with an alternative firmware that allowed me to stream rtsp video and feed it to a dedicated server ( bluecherry, or motion). It worked. But I'm not a security expert. Might still have security holes I didn't think of.


Edited by elperepat (31/10/2019 12:46)
_________________________
Patrick

Top
#372400 - 31/10/2019 13:10 Re: Wyze cams? [Re: elperepat]
mlord
carpal tunnel

Registered: 29/08/2000
Posts: 14472
Loc: Canada
Originally Posted By: elperepat
... flashed the camera with an alternative firmware


Nice!

Top
#372402 - 31/10/2019 16:39 Re: Wyze cams? [Re: julf]
tfabris
carpal tunnel

Registered: 20/12/1999
Posts: 31563
Loc: Seattle, WA
Originally Posted By: julf
Are there any cameras left on the market that don't require the video to go through some external cloud service (aka somebody else's computer)?


Yes. They are known as "IP Cameras". Mostly you find them marketed as security cameras which are intended to send their signal to a centralized local security camera hub. Basically, like in the old CCTV days, except, instead of a video cable, the camera connects with an ethernet cable, and instead of a CCTV security camera hub, it's a server doing the same job. That market still exists and is still full of products. The biggest player in that market seems to be Axis cameras from what I can tell.

The line is blurred though. Many of these devices can do both: Working as a regular IP camera, while also simultaneously being able to send the video to a cloud service. But the original LAN-only market still exists, and the identifying keyword for the local-LAN side of it is "IP Camera".

One example of the blurred line is with those Axis cameras I mentioned. By default, most of them are just IP cameras, but can have additional streaming software added to them, CamStreamer, which adds the ability to stream to a cloud service of some kind.

Another example is when you have a camera which, out of the box, works as both an IP camera and also as a camera which streams to the camera manufacturer's own cloud service. I'm using one of these Reolink cheapies for the CrowCam. It does both things out of the box. My Reolink camera streams via its ethernet cable to the security camera hub software that's built into my Synology NAS (called "Surveillance Station"). The video is a local LAN stream at that point, then the Surveillance Station software has an additional feature I can activate, which sends the camera's stream up to my YouTube channel. That keeps everything under my control.

That same camera also connects to ReoLink's web service. I don't actually know how to turn off that side of it. My guess is that they don't have a way to turn it off. However, it's useful for command+control of the camera itself via their smartphone app, so I haven't tried to find a way to block it. (At least I'm not paying a subscription for that part of it.)

Then of course, there are those cameras out there which cannot function as an IP camera, and are locked into only working with a cloud service (usually subscription-based). I'm assuming things like the Nest camera and the Ring doorbell camera are in that category, though I haven't looked closely at them.
_________________________
Tony Fabris

Top
#372403 - 31/10/2019 20:59 Re: Wyze cams? [Re: tfabris]
julf
veteran

Registered: 01/10/2001
Posts: 1307
Loc: Amsterdam, The Netherlands
Originally Posted By: tfabris
Yes. They are known as "IP Cameras". Mostly you find them marketed as security cameras which are intended to send their signal to a centralized local security camera hub. Basically, like in the old CCTV days, except, instead of a video cable, the camera connects with an ethernet cable, and instead of a CCTV security camera hub, it's a server doing the same job. That market still exists and is still full of products. The biggest player in that market seems to be Axis cameras from what I can tell.


Yes, I actually have a bunch of (older) Axis cameras, but they are definitely priced for the "premium" market.

Top