Live data from Hacker News

Ask HN: IP cameras that don't require an app or internet?

news.ycombinator.com

61–70 of 204 posts

Re: Ask HN: IP cameras that don't require an app or internet?

#61

Dahua and Hikvision are the largest manufactures, with most companies rebranding them. Even if you don't use Synology, this is a handy list. https://www.synology.com/en-us/compatibility/camera

Pretty sure hikvision is suspected to have spyware in it. UK has banned it from government sites afaik. China of course denies. https://www.bbc.com/news/world-asia-china-65307503

It is known to have major vulnerabilities https://www.bleepingcomputer.com/news/security/over-80-000-e...

Re: Ask HN: IP cameras that don't require an app or internet?

#62
post #6

I have worked professionally with access control and surveillance. I can give you two manufacturer recommendations: Axis and Geovision. Axis cameras are high end and expensive, but they will, in my experience, do anything an IP camera could reasonably be expected to do, and they will do it well. They are European in origin and are available from various retail outlets to ship this week. Geovision cameras are low end…

Axis is cool, they once even had (still have?) their own CPU / ISA (ETRAX CRIS) plus a Linux port:

https://www.kernel.org/doc/Documentation/cris/README

Edit: Official Linux support was removed with 4.17 in 2018

https://lkml.org/lkml/2018/6/3/142

Re: Ask HN: IP cameras that don't require an app or internet?

#63
post #6

I have worked professionally with access control and surveillance. I can give you two manufacturer recommendations: Axis and Geovision. Axis cameras are high end and expensive, but they will, in my experience, do anything an IP camera could reasonably be expected to do, and they will do it well. They are European in origin and are available from various retail outlets to ship this week. Geovision cameras are low end…

Can second the Axis recommendation. I've never had problems with them. You can also easily use them with other systems or without Internet.

Re: Ask HN: IP cameras that don't require an app or internet?

#65
post #34

Earlier quoted context omitted.

I recommend explicitly blocking internet access for Amcrest devices. I configured my camera with a static IP and blocked it in my PF rules with logging, and my camera model was making 1000s (16k in 24 hours) of DNS requests for config.amcrestcloud.com. I don't use any of their cloud services.

Rather than play whack-a-mole with filters, it's simpler to put mystery-meat devices on a separate VLAN+subnet that doesn't route. Firewall will keep the camera from accessing the internet, but does nothing to protect other hosts on the LAN. The cloud thing can be disabled from their web UI or the HTTP API, but between all of the knock-offs out there (of any brand), and the eventual end of firmware updates, it's best…

This is doubly important now that devices are starting to use DNS over HTTPs

Re: Ask HN: IP cameras that don't require an app or internet?

#67
post #34

Earlier quoted context omitted.

I recommend explicitly blocking internet access for Amcrest devices. I configured my camera with a static IP and blocked it in my PF rules with logging, and my camera model was making 1000s (16k in 24 hours) of DNS requests for config.amcrestcloud.com. I don't use any of their cloud services.

Rather than play whack-a-mole with filters, it's simpler to put mystery-meat devices on a separate VLAN+subnet that doesn't route. Firewall will keep the camera from accessing the internet, but does nothing to protect other hosts on the LAN. The cloud thing can be disabled from their web UI or the HTTP API, but between all of the knock-offs out there (of any brand), and the eventual end of firmware updates, it's best…

Absolutely agree a VLAN is the better solution to block an entire network, and I do use one in my case (protecting my other VLANs). But I still need to explicitly block Amcrest cam because I also have an RPI on that VLAN doing image processing, which uploads to an external site; hence I can't block the entire VLAN.

Re: Ask HN: IP cameras that don't require an app or internet?

#69
post #62
post #6

I have worked professionally with access control and surveillance. I can give you two manufacturer recommendations: Axis and Geovision. Axis cameras are high end and expensive, but they will, in my experience, do anything an IP camera could reasonably be expected to do, and they will do it well. They are European in origin and are available from various retail outlets to ship this week. Geovision cameras are low end…

Axis is cool, they once even had (still have?) their own CPU / ISA (ETRAX CRIS) plus a Linux port: https://www.kernel.org/doc/Documentation/cris/README Edit: Official Linux support was removed with 4.17 in 2018 https://lkml.org/lkml/2018/6/3/142

The ETRAX CRIS has been superseded by ARM Cortex-M in the latest ARTPEC (Axis Real Time Picture Encoder Chip) chips these days. For a period of time in between those two architectures the ARTPEC chips used MIPS as a core.

Re: Ask HN: IP cameras that don't require an app or internet?

#70

Earlier quoted context omitted.

Another recommendation for Axis here. I've used dozens of them for almost 20 years now and they've been rock solid, technically and support-wise. But they're expensive. They do have cheaper models nowadays, though. In addition to explosion-proof ones: https://www.axis.com/en-us/products/explosion-protected-came...

Fun story re: the term "explosion-proof": I was given a tour of an industrial facility where conditions required explosion-proof equipment. The tour guide made a point of calling out the explosion-proof motors in one of the rooms. One of the other tour group members asked the question "Why would it matter if these motors survived an explosion?" I visualized the facility exploding in a fiery blaze and a motor, fully i…

> "Explosion-proof means that it won't cause an explosion."

Another industry term for this is Intrinsically Safe.

Post reply on HN