Dahua NVR, DMSS and P2P - How are they connected?

I'm at 36 hours with P2P off and still getting the push notices, just cant view the pic or video clip

I've rebooted NVR and Phone 2x each
 
Ok they are working again.. Strange.. I had to remove the app from the camera and add it back with P2P before it would come back and there is now some new options that was not there before WHAT THE HECK.. Looks way cooler with more options then before.. I didn't change the app only added the camera back to the app dang..
 

Attachments

  • Screenshot_20250102_194909.jpg
    Screenshot_20250102_194909.jpg
    264.1 KB · Views: 2
Ok they are working again.. Strange.. I had to remove the app from the camera and add it back with P2P before it would come back and there is now some new options that was not there before WHAT THE HECK.. Looks way cooler with more options then before.. I didn't change the app only added the camera back to the app dang..

No drinking and testing allowed!
 
LOL Hold on need to get another beer.. LOL. Everyone thinks I am crazy I am it is all good.. ":) I added back a picture again in an edit lol. But yeah really it did go offline and had to remove from app and add it back before it would start pushing again..
 
  • Like
Reactions: bigredfish
And now I have turned it off lol and I get an alert that it is off.. I just want to wait until I know for sure that I am not going to get another alert after being turned off. Waiting for another vehicle to go by... If I post the offline picture then it did in fact not alert after I turned off p2P.. THen I know problem is solved car just turned before getting to the cameras view lol still waiting.. Car went by shows on my AI view on my NVR and Not Push to phone
 

Attachments

  • Screenshot_20250102_195556.jpg
    Screenshot_20250102_195556.jpg
    337.6 KB · Views: 3
Can you bypass the potential privacy and security concerns by firewalling the NVR IP and only accessing the NVR via VPN - using a web browser (on your phone) and not the app?

Sure, but I think you'll break push notifications. I'll add that to the testing.

Understand my hypothesis is that the push notification function isnt really the security issue. I started this by wanting to prove that the recent reports of "hacks" were a result of old software (SmartPSS) and not the P2P function or push alert ecosystem. I still believe that.
 
  • Like
Reactions: Revo2Maxx
Well it is strange that yours has not gone off and force to remove and add back the camera to the app.. As i said doing so have changed the look of the app.. I am also on the 12-05-2024 version so that might be the difference. I don't think any Hack over P2P is a current thing from Amcrest or Dahua apps. I can't say about others I know there are many devices out there that are not secure and I know there are some people that have connection issues and un check secure connection without knowing it puts them at Risk.. For a year I have tried to warn some but as of Now I don't think I need to help in that way anymore lol.. Still a Pizza Joint that didn't listen lol But I tried..
 
  • Like
Reactions: bigredfish
And now I have turned it off lol and I get an alert that it is off.. I just want to wait until I know for sure that I am not going to get another alert after being turned off. Waiting for another vehicle to go by... If I post the offline picture then it did in fact not alert after I turned off p2P.. THen I know problem is solved car just turned before getting to the cameras view lol still waiting.. Car went by shows on my AI view on my NVR and Not Push to phone

I've already pretty much proven on my FW that P2P is NOT needed for the push alert itself, only to view the snapshot/video clip. I see it in the firewall logs clearly. Push alerts arent going through Dahua P2P servers. They are going to push.messagepush.org on Amazon servers
 
Last edited:
  • Like
Reactions: Revo2Maxx
But difference is Though and pass.. P2P is passed off for a Peer 2 Peer not a cloud though service. Only middle man is Ping to hand off app to device and the connection is Encrypted only thing that was last I checked plain text was the SN and without the other it don't really matter.. It was a while I did testing with what happened on connection when people were like can I do it at a cafe.. I was like sure as long as you don't sit in the sight of a camera and or someone isn't watching you put in your password while logging into the desktop app you know kind of thing. If someone is data mining only data they could get was SN.. Does no good without knowing the Encryption type and method..
 
  • Like
Reactions: bigredfish
I’m guessing I’m going to get to a point where Dahua doesn’t exactly want us to know the details…
I don't want to cross the line of nosiness, but would you care to make a statement about any suicidal tendencies? Remember the AI guy just last week....
 
  • Haha
Reactions: bigredfish