237
Matt Brown Digs Deep Into an IP Camera's Firmware — and Finds a Hard-Coded Root Password
(www.hackster.io)
this post was submitted on 26 Jul 2024
237 points (99.6% liked)
Privacy
4250 readers
4 users here now
A community for Lemmy users interested in privacy
Rules:
- Be civil
- No spam posting
- Keep posts on-topic
- No trolling
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
This is one of several reasons why I keep all my cameras and any other IoT devices on a separate VLAN that has no access to the internet and no access to the rest of my home network. The only bridge is my DVR server, but that's something I can't get around.
Before it was set up this way, I saw a huge amount of requests on my DNS server from the cameras, each one resolving the manufacturer's domain name. It was probably innocuous, but why take the risk? There is absolutely no reason whatsoever that a security camera needs access to anything.
Any recommendations on cameras that work well local-only/don't seem to make peculiar DNS requests?
If I ever get around to installing cameras I'll have them on their own, no-internet VLAN, but would prefer having well-behaved devices.
I'm a big fan of the Ubiquiti security cameras - all local data, decent quality. The downside is the price and availability, but if you can swing it - they're pretty great.
Nice, thanks!