Important! About dahua hacked Chinese cams and NVR issues

Discussion in 'Dahua' started by EMPIRETECANDY, May 8, 2018.

Share This Page

  1. EMPIRETECANDY

    EMPIRETECANDY IPCT Vendor

    Joined:
    Nov 8, 2016
    Messages:
    1,655
    Likes Received:
    3,027
    Location:
    HONGKONG
    Hey Guys.


    Dahua just will release the latest new firmware, There has 2 points need all guys who are using or plan to use the hacked Chinese models.

    1. English language firmware will not run on a chinese region NVR. The NVR may be "bricked" by trying.
    2. Chinese region cameras will not work with an NVR running english language firmware (i.e. a non-chinese-region NVR).
    3. A chinese region NVR will not work with non-chinese-region cameras.

    How to know they are original english or not, just go to dahua website to check if can be searched.

    https://www.dahuasecurity.com/
    This is very important now, the NVR firmware we get supporting this function now, so please double check to download and upgrade if your system not original english. Some models like NVR41xx,NVR42xx, NVR52XX, with POE also has hacked too. Just be careful before you buy! Our device all are original english ones, normally i will tell clients the models they asked not original english.

    Solution is using 3rd party software to work with the cams or not upgrade NVR anymore.
    Andy
     
    Last edited: May 8, 2018
  2. Jagradang

    Jagradang Young grasshopper

    Joined:
    Aug 10, 2017
    Messages:
    47
    Likes Received:
    13
    do you have a link for the latest firmware? Not sure if i need to upgrade to it, i have a NVR5216 purchased from you with 3x ipc5231 cams
     
    toolazyforalogin likes this.
  3. tigerwillow1

    tigerwillow1 Pulling my weight

    Joined:
    Jul 18, 2016
    Messages:
    561
    Likes Received:
    207
    I want to make sure I understand this correctly by restating it in more familiar english terms, and anybody can tell me if I have it wrong. Andy, please forgive me. Your english is at least a million times better than my chinese.

    Dahua is about to release a new round of firmware for NVRs that contains geographic region restrictions as follows:
    1. English language firmware will not run on a chinese region NVR. The NVR may be "bricked" by trying.
    2. Chinese region cameras will not work with an NVR running english language firmware (i.e. a non-chinese-region NVR).
    3. A chinese region NVR will not work with non-chinese-region cameras.

    This info generates two questions from me:
    1) What is the latest version NVR firmware that does not contain the restrictions?
    2) Will the new firmware catch chinese region cameras running cor35vet's firmware, which I think is english language firmware with the camera region detection disabled. (I suspect this will be answered only by trying it).
     
    bp2008 and EMPIRETECANDY like this.
  4. EMPIRETECANDY

    EMPIRETECANDY IPCT Vendor

    Joined:
    Nov 8, 2016
    Messages:
    1,655
    Likes Received:
    3,027
    Location:
    HONGKONG
    I will post here soon. But have to test here firstly then released, because if not suits will make the camera crashed. aha, thanks for your pure english explaination.
     
  5. EMPIRETECANDY

    EMPIRETECANDY IPCT Vendor

    Joined:
    Nov 8, 2016
    Messages:
    1,655
    Likes Received:
    3,027
    Location:
    HONGKONG
    try to upload here, system said security reason, was reject... have to check with Fenderman
     
  6. bp2008

    bp2008 Staff Member

    Joined:
    Mar 10, 2014
    Messages:
    6,897
    Likes Received:
    3,342
    You might need to put it in a zip file first. Forum software can be stupid about file types that are allowed.
     
  7. crossStreet

    crossStreet n3wb

    Joined:
    Jun 9, 2018
    Messages:
    8
    Likes Received:
    7
    Location:
    UK
  8. bp2008

    bp2008 Staff Member

    Joined:
    Mar 10, 2014
    Messages:
    6,897
    Likes Received:
    3,342
    Why is that amazing? Anyone can sell things through Amazon.
     
  9. pb11186

    pb11186 n3wb

    Joined:
    Jun 9, 2018
    Messages:
    5
    Likes Received:
    3
    Location:
    Canada
    Curious. When i am searching on Aliexpress, how do you confirm if one is fake or not?

    Sent from my ASUS_Z01BDC using Tapatalk
     
    mat200 likes this.
  10. crossStreet

    crossStreet n3wb

    Joined:
    Jun 9, 2018
    Messages:
    8
    Likes Received:
    7
    Location:
    UK
    When you buy a HDD listed as 1 TB but receive a 100 GB one you've been scammed and Amazon takes down such listings. Likewise, if you are buying a Dahua and receive not a Dahua (and that camera is apparently not a Dahua as it cannot be found on the Dahua website), then you've been scammed as well.
     
  11. crossStreet

    crossStreet n3wb

    Joined:
    Jun 9, 2018
    Messages:
    8
    Likes Received:
    7
    Location:
    UK
    The very first post says that you should search the Dahua website for a particular model you see on AliExpress. If you don't see the model there it is a hack or whatever - don't buy it.
     
    Last edited: Jun 13, 2018
  12. usaf_pride

    usaf_pride Getting the hang of it

    Joined:
    Mar 10, 2017
    Messages:
    58
    Likes Received:
    25
    These aren't "fake" Dahua camera's. They are intended for the Chinese market only (real Dahua) and the sellers are using hacked firmware to add English text to the cameras. When you see "firmware can't be upgraded", it's a Chinese only market camera.
     
    Tinman and mat200 like this.
  13. SantiagoDraco

    SantiagoDraco Getting the hang of it

    Joined:
    Dec 8, 2017
    Messages:
    100
    Likes Received:
    37
    When dealing with Chinese products or high tech products manufactured in China it's always best to only buy from known reputable sources. Many of these sellers are just scam artists. Amazon, AliExpress, Ebay... these are all sites that facilitate this now for their own profit. They don't care about the legitimacy of these sellers until someone forces them to by pointing out fraud at which point they have a legal obligation... until then they are content to rake in profits and let the buyers sort it out. It's really sad to see that Amazon, most specifically, has allowed past trust to be leveraged by crooks for Amazon's own profit.
     
    Last edited: Jun 14, 2018
    giomania and mat200 like this.
  14. mat200

    mat200 Known around here

    Joined:
    Jan 17, 2017
    Messages:
    2,549
    Likes Received:
    1,090
    Hi @pb11186

    I highly recommend following Santiago's advice. ONLY buy from vendors who have been recommended by other ipct members.

    There's just too many bad and deceptive vendors and products.

    See the vendor section for 2 vendors which have earned the support of ipct membership. ( Nelly's Security and Andy from Empire Tec )


     
    RyanODan, Tinman, pb11186 and 2 others like this.
  15. looney2ns

    looney2ns Known around here

    Joined:
    Sep 25, 2016
    Messages:
    4,154
    Likes Received:
    2,381
    Location:
    Evansville, Indiana
    If you can't find the exact model number on Dahua's international site, stay away.
     
    Tinman, rufunky and mat200 like this.
  16. MixManSC

    MixManSC Getting the hang of it

    Joined:
    May 20, 2018
    Messages:
    37
    Likes Received:
    41
    Location:
    USA
    Also if the price is $50+ less than anywhere else.... One thing I've noticed on most of the eBay sellers and some on Aliexpress and even Amazon are some note somewhere on the page that you should not attempt to upgrade the firmware. If you see that anywhere, about a 99% chance it is a China market device.
     
    mat200 likes this.
  17. Engee

    Engee Young grasshopper

    Joined:
    Feb 22, 2018
    Messages:
    57
    Likes Received:
    6
    sooner or later they will hack the restrictions andy is saying about
     
  18. MixManSC

    MixManSC Getting the hang of it

    Joined:
    May 20, 2018
    Messages:
    37
    Likes Received:
    41
    Location:
    USA
    I'm not so sure about that. I've been involved over the years with a LOT of things related to hacked firmware like car ECU tuning, custom firmware on routers, custom roms on Android phones, custom firmware on certain car stereos, etc. Problem is nearly all of these industries are rapidly moving towards having full digitally signed firmware, encrypted firmware, etc. On many things that has already taken place. Is it impossible? No, one could get into specialized tools (clips and chip burners) that can directly attach to a rom chip but that is far far more difficult and impractical and even then in many cases it might still be impossible. Technology is rapidly moving and security issues have become a huge problem to the point that nearly every industry is working fast to encrypt and digitally sign every bit of code. It is already taking place on the newest vehicles - no more custom tuning. Eventually that will put manufacturers of the custom tune software and devices out of business. Already taking place right here on Dahua devices. The rest are coming. They already implemented signed firmware updates just over the past year. Much of this will also essentially put an end to grey market products across all sorts of industries and make it so that if you get a grey market device, then you get the device the way it is and that is it. No way to update it, ever.. Big security exploit or some great new feature in a new firmware, tough luck.

    Here are a couple of more docs from Dahua regarding security.

    https://www.dahuasecurity.com/asset...ty-Technology-White-Paper_V1_0_0-20180104.pdf

    https://dahuatech.ro/downloads/Device_initialization_and_password_reset_V2_EN_20170907.pdf

    The release notes on the newest NVR5216 firmware is pretty telling too.
    https://www.dahuasecurity.com/asset...1-0-R-20180326_Release-Note-V1_3-20180508.pdf
     
    Carver, looney2ns, rufunky and 2 others like this.
  19. rufunky

    rufunky Getting the hang of it

    Joined:
    Dec 2, 2015
    Messages:
    340
    Likes Received:
    65
    Not only what Mixman said but also who wants to deal with hacked firmware on something that is used for security purposes? Not only are you at the mercy of the hacker/programer, you are also not likely to get an updated version once hacked.

    IMHO Your just asking for a world of hurt.
     
  20. crossStreet

    crossStreet n3wb

    Joined:
    Jun 9, 2018
    Messages:
    8
    Likes Received:
    7
    Location:
    UK
    I've been buying from AliExpress for a few years (around 30 or so items bought), and not once I ran into a bad sale or a scam. The rules I use are:
    -There should be good feedback from previous buyers of the item, the more the better.
    -The store should have been around for a reasonably long time (years).
    Unless I am buying something cheap I do avoid sellers without orders or feedback.
    These rules should minimize your chances of getting scammed on AliExpress.

    PS: AliExpress website sucks
     
  21. MixManSC

    MixManSC Getting the hang of it

    Joined:
    May 20, 2018
    Messages:
    37
    Likes Received:
    41
    Location:
    USA
    Also add - sellers that ship via DHL or some express service. Otherwise you may have forgotten you bought whatever it is by the time it actually arrives 2 months later.... I've done that on Aliexpress. Literally totally forgot. Something shows up and was like, what is this package? I'm not expecting anything.... lol
     
    aristobrat likes this.
  22. mat200

    mat200 Known around here

    Joined:
    Jan 17, 2017
    Messages:
    2,549
    Likes Received:
    1,090
    Hi CrossStreet,

    YOU may not knowingly have purchased from a bad vendor scamming you.

    Example of what I am referring to:

    Seller - advertises a Dahua OEM 4MP starlight camera.

    It is a legit Dahua OEM Chinese market camera... HOWEVER it is not a Dahua Starlight, buyer doen't really know they are conned as the product works - BUT it does not work as well as a legit starlight, and is using hacked firmware.

    This happens A LOT, where the vendors are deceptive, dishonest, and fraudulent in their descriptions of the products they sell. THEY KNOW they are being deceptive - but do not care as they make sales, and as I mentioned - the product works to some functional standard.

    You can think of this similar to someone selling you a "lexus with a 6 cylinder engine" - and replacing it with a "toyota with a 4 cylinder engine" ... not the same even though the same OEM.
     
    aristobrat and MixManSC like this.
  23. crossStreet

    crossStreet n3wb

    Joined:
    Jun 9, 2018
    Messages:
    8
    Likes Received:
    7
    Location:
    UK
    Just looked, there are indeed lots of those 4MP starlights on aliexpress dead cheap. Everyone needs to do their due diligence.
    This time I've selected a grand worth of cameras on Aliexpress, but in the end decided to buy them from Andy. But I don't think those vendors I chose would be a problem.
     
    MixManSC and mat200 like this.
  24. tigerwillow1

    tigerwillow1 Pulling my weight

    Joined:
    Jul 18, 2016
    Messages:
    561
    Likes Received:
    207
    "there are indeed lots of those 4MP starlights on aliexpress dead cheap"
    There are no 4MP starlights on aliexpress dead cheap because they are not startlights. Other that inferior low light performance, at least some of them perform just as good as the 2MP starlights. A simple cost-vs-capability tradeoff, with the new wrinkle of Dahua NVRs rejecting the chinese market cameras.
     
  25. tim8

    tim8 Young grasshopper

    Joined:
    Jun 17, 2017
    Messages:
    45
    Likes Received:
    1
    @EMPIRETECANDY So what you’re saying is if I have a nvr 5216 and a bunch of China region cams, I can’t buy anymore China region cams? The new ones with new firmware won’t work on my nvr and I must buy international versions. Any idea what the latest manufacture date on the box is that will still have the old firmware?
     
  26. usaf_pride

    usaf_pride Getting the hang of it

    Joined:
    Mar 10, 2017
    Messages:
    58
    Likes Received:
    25
    They will continue to work until you upgarde the NVR firmware.
     
    tim8 likes this.
  27. tim8

    tim8 Young grasshopper

    Joined:
    Jun 17, 2017
    Messages:
    45
    Likes Received:
    1
    I hope so. If not I’ll need to buy some more that are on old firmware ASAP. Andy’s post bullet point number 2 says
    So will buying new camera with brand new firmware block access to nvr from the camera side? Because it seems like Andy is saying that the camera will block off access to any nvr on the English firmware.
     
  28. usaf_pride

    usaf_pride Getting the hang of it

    Joined:
    Mar 10, 2017
    Messages:
    58
    Likes Received:
    25
    The first post is about NVR firmware. Nothing was ever said about camera firmware. If you don't upgrade your NVR firmware, the stuff will still work with the NVR. There was nothing in here re: camera firmware. As most Chinese cameras are hacked with English firmware, you don't/can't upgrade the cameras anyways.
     
    tim8 likes this.
  29. tim8

    tim8 Young grasshopper

    Joined:
    Jun 17, 2017
    Messages:
    45
    Likes Received:
    1
    *facepalm* of course! Yeah sorry I totally misinterpreted the bullet points. I thought this was something completely new that came up so Andy needed to make a post about it. I though the nvr firmwares had been blocking Chinese cams for many months now and that Andy was reporting a new change that had occurred on the camera side. Thanks for clarifying this for me!