Blue Iris UI3

@NickTheGreat you can reset the lockout by restarting Blue Iris (if you run it as a service, you need to restart the service via Task Manager or the Windows Services control panel). It may also be possible from BI's status window, but I am not sure.

The user name and password need to be exactly what you set up in Blue Iris Settings > Users.
 
  • Like
Reactions: NickTheGreat
Thank you, I will try that.

There is nothing I need to install in addition to BI itself, though, right?

I'm excited for this as it looks pretty darn cool! Appreciate your work on it.
 
I have ran a vulnerability scan on UI3. There is a high risk vulnerability.

Missing `httpOnly` Cookie Attribute.

High: Missing `httpOnly` Cookie Attribute
Risk: High
Protocol: tcp
ScriptID: 105925
Vulnerability Detection Result: The cookies: Set-Cookie: session=***replaced***; path=/ are missing the "httpOnly" attribute.
Summary: The application is missing the 'httpOnly' cookie attribute
CVSS Base Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Solution: Set the 'httpOnly' attribute for any session cookie.
Vulnerability Detection Method: Check all cookies sent by the application for a missing 'httpOnly' attribute
Affected Software/OS: Application with session handling in cookies.
Insight: The flaw is due to a cookie is not using the 'httpOnly' attribute. This allows a cookie to be accessed by JavaScript which could lead to session hijacking attacks.

References: OWASP
HttpOnly Testing for cookies attributes (OTG-SESS-002) - OWASP
CVSS Base Score: 5.0
Family name: Web application abuses
Category: infos
Copyright: Copyright (c) 2014 SCHUTZWERK GmbH
Summary: NOSUMMARY
Version: $Revision: 5270 $
 
I have ran a vulnerability scan on UI3. There is a high risk vulnerability.

Missing `httpOnly` Cookie Attribute.

If you want to enable the httpOnly cookie attribute, you can do so by toggling the HttpOnly cookies checkbox in Blue Iris's Web server - Advanced panel.

But just so you know, it does not affect security of UI3 or the Blue Iris web server in any way. The only reason the setting exists in Blue Iris is to satisfy automated tests like this one.

Enabling it will have a very slight effect on UI3. In a few rare situations, UI3 performs its own login to Blue Iris (in order to upgrade from a user-level session to an admin-level one), and then it needs to change its session identifier. When httpOnly cookies is enabled, changing the session identifier requires reloading the page, which is otherwise unnecessary.
 
  • Like
Reactions: R4nger
I have 6 cameras and they display great in a grid when viewing with Live View in UI3. I'd like to view all the cameras in a similar grid from, say, 3 hours ago. I can do that with just one camera but is there a way to view the recordings from all the cameras at a certain time? Thanks.
 
I have 6 cameras and they display great in a grid when viewing with Live View in UI3. I'd like to view all the cameras in a similar grid from, say, 3 hours ago. I can do that with just one camera but is there a way to view the recordings from all the cameras at a certain time? Thanks.

Not through UI3.
 
UI3 isn't showing alerts or clips older than 2.5 weeks (July 7). In BI admin console, I have clips going back to June 25. In UI3 I'm not filtering by dates, I'm showing all clips/alerts.

This happens in UI3 on the local BI machine, and remotely at work.

I have repaired the db.

I hadn't noticed this before, as I only had a 3TB hard drive that would hold 2.5 weeks of footage. Last week I changed it to an 8TB hard drive and copied the footage over to it. The 2.5 week (July 7) duration does not correspond to when I changed the HDD (July 16). In BI clips & archiving I have obviously changed the allocation size, since BI console is showing clips & alerts further back.

Any ideas?
 
Last edited:
UI3 isn't showing alerts or clips older than 2.5 weeks (July 7). In BI admin console, I have clips going back to June 25. In UI3 I'm not filtering by dates, I'm showing all clips/alerts.

This happens in UI3 on the local BI machine, and remotely at work.

I have repaired the db.

I hadn't noticed this before, as I only had a 3TB hard drive that would hold 2.5 weeks of footage. Last week I changed it to an 8TB hard drive and copied the footage over to it. The 2.5 week (July 7) duration does not correspond to when I changed the HDD (July 16). In BI clips & archiving I have obviously changed the allocation size, since BI console is showing clips & alerts further back.

Any ideas?

Have you set up in BI the amount of data you can put on each logical drive?
 
Like I said.. "In BI clips & archiving I have obviously changed the allocation size"

I only have 1 drive (other than db and alerts being on an SSD). This has nothing to do with it. The older clips & alerts show up in the BI program. They don't in UI3.
 
UI3 isn't showing alerts or clips older than 2.5 weeks (July 7). In BI admin console, I have clips going back to June 25. In UI3 I'm not filtering by dates, I'm showing all clips/alerts.

This is because Blue Iris sends data for 1200 clips at a time. If you need to see back further than 1200 clips you need to use the date filter. Then UI3 will make multiple requests if needed to get all the clips from the selected days.
 
  • Like
Reactions: Walrus
This is because Blue Iris sends data for 1200 clips at a time. If you need to see back further than 1200 clips you need to use the date filter. Then UI3 will make multiple requests if needed to get all the clips from the selected days.
Thanks, that's it. I use 1 hour clips as it gives a more control with the slider bar for scrubbing through looking for action, but that means I have 1200+ clips just in the last 16 days.
 
Hello, we supply location camera feed to clients trough UI3. Sometimes, when a camera is offline, there is this gray error image view telling "No signal", http timeout, etc..
Is it possible to replace the "No signal" image to a custom logo or something informative in case our camera is offline?
 
bp, Thanks for bringing BI to an Enterprise level solution. jpegpull was worthless!
Feature request: any chance of some indicator on the calendars as to how far back your recordings go. At the console, the calendar marks the days with red where recordings are present. Thanks
 
Hello, we supply location camera feed to clients trough UI3. Sometimes, when a camera is offline, there is this gray error image view telling "No signal", http timeout, etc..
Is it possible to replace the "No signal" image to a custom logo or something informative in case our camera is offline?

Not that I'm aware of. You should ask Blue Iris support if this can be a new feature.

bp, Thanks for bringing BI to an Enterprise level solution. jpegpull was worthless!
Feature request: any chance of some indicator on the calendars as to how far back your recordings go. At the console, the calendar marks the days with red where recordings are present. Thanks

Nope. While I think BI does offer a method that returns data usable for marking days on the calendar, that is not currently something UI3 takes advantage of.
 
Got another request...
It would be nice to have the first recording open automatically when calling up the alerts. I tried the setting "automatically open first recording when loading alerts" but instead it brings up the last recording. It is the first clip in the column, but the last recording. It would be nice if I could have it open the first recording in reference to time. Example; I tell the calendar to display Aug 5th start to Aug 6th end. The first recording being displayed would be around midnight Aug 5th. This would allow me to not have to scroll down to the bottom to start playing forward, or on the other hand as I sometimes do, start at the last clip and play them in reverse. I think many times when a user selects a starting day, that would be where they want to start viewing. Thanks
Edit: Or perhaps an option to display the column in reverse order?
 
Last edited:
I could change that "automatically open first recording when loading alerts" setting to a dropdown list where "first" and "last" are options. Would that do it for you?
 
  • Like
Reactions: IAmATeaf