[Cerowrt-devel] openwrt or "open" security cams?

[Cerowrt-devel] openwrt or "open" security cams?

[Dave Taht]

I am considering doing a security camera deployment, but am concerned
about the overall security of
security cams. Are there any with a reasonably rebuildable set of sources? ipv6?

Anyone have recent experience with zoneminder, jitsi or big blue button?

-- 
Make Music, Not War

Dave Täht
CTO, TekLibre, LLC
http://www.teklibre.com
Tel: 1-831-435-0729

Re: [Cerowrt-devel] openwrt or "open" security cams?

[David P. Reed]

The ESP32-CAM device (which is under $10 quantity 1 from lots of sources, just google) is a WiFi enabled camera board with lots of functionaliy built in, including a full WiFi (2.4 GHz) and TCP/IP with TLS stack.
I have been playing with a couple, as have my friends. Various folks have 3D printed cases for particular uses, or you can just use any little box with a hole drilled for the camera.

It's programmable with the Arduino tools, or with Micropython, or with an embedded Javascript framework. You need an FTDI usb device to boot it, program it, ...

Folks have used it effectively for security camera applications. The camera that is usually sold with it (a very teeny camera indeed, smaller than a black bean, which I almost lost when I opened the package with the board and camera, the first time).

Easily battery powered. You can find a lot of support from the hacker community.

It does a simple (imperfect) face recognition onboard as an option, and can do single frames or streams, and has a number of GPIO pins you can use to trigger it, if triggering by motion isn't what you want.

On Thursday, April 2, 2020 2:05pm, "Dave Taht" <dave.taht@gmail.com> said:

> I am considering doing a security camera deployment, but am concerned
> about the overall security of
> security cams. Are there any with a reasonably rebuildable set of sources? ipv6?
> 
> Anyone have recent experience with zoneminder, jitsi or big blue button?
> 
> --
> Make Music, Not War
> 
> Dave Täht
> CTO, TekLibre, LLC
> http://www.teklibre.com
> Tel: 1-831-435-0729
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
> 

Re: [Cerowrt-devel] openwrt or "open" security cams?

[Joel Wirāmu Pauling]

[-- Attachment #1: Type: text/plain, Size: 2348 bytes --]

The Xiaomi Dafang Cameras are good value and there is a completely open
tool chain including uboot for them:
Get one with 128G of Ram if you want to do 1080P RTSP streams.

https://github.com/EliasKotlyar/Xiaomi-Dafang-Hacks


On Sat, 4 Apr 2020 at 11:53, David P. Reed <dpreed@deepplum.com> wrote:

> The ESP32-CAM device (which is under $10 quantity 1 from lots of sources,
> just google) is a WiFi enabled camera board with lots of functionaliy built
> in, including a full WiFi (2.4 GHz) and TCP/IP with TLS stack.
> I have been playing with a couple, as have my friends. Various folks have
> 3D printed cases for particular uses, or you can just use any little box
> with a hole drilled for the camera.
>
> It's programmable with the Arduino tools, or with Micropython, or with an
> embedded Javascript framework. You need an FTDI usb device to boot it,
> program it, ...
>
> Folks have used it effectively for security camera applications. The
> camera that is usually sold with it (a very teeny camera indeed, smaller
> than a black bean, which I almost lost when I opened the package with the
> board and camera, the first time).
>
> Easily battery powered. You can find a lot of support from the hacker
> community.
>
> It does a simple (imperfect) face recognition onboard as an option, and
> can do single frames or streams, and has a number of GPIO pins you can use
> to trigger it, if triggering by motion isn't what you want.
>
> On Thursday, April 2, 2020 2:05pm, "Dave Taht" <dave.taht@gmail.com> said:
>
> > I am considering doing a security camera deployment, but am concerned
> > about the overall security of
> > security cams. Are there any with a reasonably rebuildable set of
> sources? ipv6?
> >
> > Anyone have recent experience with zoneminder, jitsi or big blue button?
> >
> > --
> > Make Music, Not War
> >
> > Dave Täht
> > CTO, TekLibre, LLC
> > http://www.teklibre.com
> > Tel: 1-831-435-0729
> > _______________________________________________
> > Cerowrt-devel mailing list
> > Cerowrt-devel@lists.bufferbloat.net
> > https://lists.bufferbloat.net/listinfo/cerowrt-devel
> >
>
>
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
>

[-- Attachment #2: Type: text/html, Size: 3648 bytes --]

Re: [Cerowrt-devel] openwrt or "open" security cams?

[Jonathan Morton]

> On 4 Apr, 2020, at 2:08 am, Joel Wirāmu Pauling <joel@aenertia.net> wrote:
> 
> 128G of Ram

That's somewhat more than I have in my desktop PCs.  Did you mean 128MB?

 - Jonathan Morton

Re: [Cerowrt-devel] openwrt or "open" security cams?

[Joel Wirāmu Pauling]

[-- Attachment #1: Type: text/plain, Size: 307 bytes --]

Correct.

On Sat, 4 Apr 2020 at 12:10, Jonathan Morton <chromatix99@gmail.com> wrote:

> > On 4 Apr, 2020, at 2:08 am, Joel Wirāmu Pauling <joel@aenertia.net>
> wrote:
> >
> > 128G of Ram
>
> That's somewhat more than I have in my desktop PCs.  Did you mean 128MB?
>
>  - Jonathan Morton
>
>

[-- Attachment #2: Type: text/html, Size: 751 bytes --]

Re: [Cerowrt-devel] openwrt or "open" security cams?

[Valdis Klētnieks]

[-- Attachment #1: Type: text/plain, Size: 388 bytes --]

On Sat, 04 Apr 2020 12:08:48 +1300, Joel Wirāmu Pauling said:

> The Xiaomi Dafang Cameras are good value and there is a completely open
> tool chain including uboot for them:

Hopefully that security cam, having an open tool chain, isn't a security-disaster
cam like most of them are turning out to be (even the big-name ones from
companies that *really* should know better...)

[-- Attachment #2: Type: application/pgp-signature, Size: 832 bytes --]

Re: [Cerowrt-devel] openwrt or "open" security cams?

[Joel Wirāmu Pauling]

[-- Attachment #1: Type: text/plain, Size: 1070 bytes --]

Yeah - there is a full uboot replacement project (linked from that repo) -
so you can basically build openwrt for it.

That project I linked too is more designed at end users who just want to
replace the userspace with somethat that isn't tied to xiaomi's cloud
services. So is the best starting point.

I didn't even bother looking at the firmware that comes with it; Serial
uart is exposed so I wouldn't worry too much about the users harping on
about not being able to install versions from newer factory firmwares ;
serial allows you to push whatever you like.

On Sat, 4 Apr 2020 at 12:32, Valdis Klētnieks <valdis.kletnieks@vt.edu>
wrote:

> On Sat, 04 Apr 2020 12:08:48 +1300, Joel Wirāmu Pauling said:
>
> > The Xiaomi Dafang Cameras are good value and there is a completely open
> > tool chain including uboot for them:
>
> Hopefully that security cam, having an open tool chain, isn't a
> security-disaster
> cam like most of them are turning out to be (even the big-name ones from
> companies that *really* should know better...)
>

[-- Attachment #2: Type: text/html, Size: 1749 bytes --]

Re: [Cerowrt-devel] openwrt or "open" security cams?

[Dave Taht]

ya know, I am now mindblown by how little folk have paid attention to
security in security cams.

Stross's "scorpion stare" mod comes to mind. It's bad enough that
"Cloud support" is sold as
a "feature", merely being able to have some certainty the feed is
going to my cloud  or the camera
is not a launch point for attacks within a network is kind of lacking
in what I've perused thus far.

I'd merely started with the thought that maybe I wanted ipv6 support,
and that physical security is
a problem in the first place for power and so on. I did find an
outdoor camera with potential - battery backup, wifi, and solar
support...

https://www.amazon.com/gp/product/B07GBRV8W5/ref=ox_sc_act_title_2?smid=A15NUCR7ITLOD6&psc=1

On Fri, Apr 3, 2020 at 4:36 PM Joel Wirāmu Pauling <joel@aenertia.net> wrote:
>
> Yeah - there is a full uboot replacement project (linked from that repo) - so you can basically build openwrt for it.
>
> That project I linked too is more designed at end users who just want to replace the userspace with somethat that isn't tied to xiaomi's cloud services. So is the best starting point.
>
> I didn't even bother looking at the firmware that comes with it; Serial uart is exposed so I wouldn't worry too much about the users harping on about not being able to install versions from newer factory firmwares ; serial allows you to push whatever you like.
>
> On Sat, 4 Apr 2020 at 12:32, Valdis Klētnieks <valdis.kletnieks@vt.edu> wrote:
>>
>> On Sat, 04 Apr 2020 12:08:48 +1300, Joel Wirāmu Pauling said:
>>
>> > The Xiaomi Dafang Cameras are good value and there is a completely open
>> > tool chain including uboot for them:
>>
>> Hopefully that security cam, having an open tool chain, isn't a security-disaster
>> cam like most of them are turning out to be (even the big-name ones from
>> companies that *really* should know better...)
>
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel



-- 
Make Music, Not War

Dave Täht
CTO, TekLibre, LLC
http://www.teklibre.com
Tel: 1-831-435-0729

Re: [Cerowrt-devel] openwrt or "open" security cams?

[David P. Reed]

I have some servers with 512 GB of RAM, and my company sells "Software Defined Server" capability to relatively inexpensively make virtualized systems with 10 TB of RAM out of these 512 GB systems. They fit in less then a single 19" rack.

[Couldn't resist :-) https://www.tidalscale.com/technology is the place to learn more.

More OT: We deal with "bloat" at a different scale in our Ethernet internal to our software defined server implementation, since our interconnects are 10 GigE up to 100 GigE, but I can tell you it is a problem there, too. Serious problem if you by Arista gear, which is bloated by intent :-( because latency doesn't occur to Bechtolsheim to be a problem, only throughput. Fortunately, we (my design) control the network stack in the hyperkernel, and can use speciaized end-to-end protocols that don't use the bloat.

Anyway, my actual non-work desktop has 32 GB RAM. So 128 GB isn't surprising in my context.]

On Friday, April 3, 2020 7:10pm, "Jonathan Morton" <chromatix99@gmail.com> said:

>> On 4 Apr, 2020, at 2:08 am, Joel Wirāmu Pauling <joel@aenertia.net> wrote:
>>
>> 128G of Ram
> 
> That's somewhat more than I have in my desktop PCs.  Did you mean 128MB?
> 
>  - Jonathan Morton
> 
>