IP Cams Hik-Connect - Secure???

[kiteboy]

Hi all - after reading about vulnerabilities of IP cameras recently I was just wondering how you guys view the HikConnect software (ie for android)
I have no access to my cameras through open ports - all I use at present is HikConnect and I assume it must be using Upnp to get out

Im not sure in that regard to be honest a I havent looked at these things for ages - what has prompted this is I had to reset my router which did have loads of open port for various things so it got me thinking about IP cam and in particular this hikconnect - is it OK to use - I think it uses P2P

Currently have two cameras going through the hikconnect software - they also go through a Vlan capable switch so maybe should look at doing some vlans (never done before) to keep any possible intruders off the home network

Thanks for any input

 

[SamM]

Hey there

I have migrated to HikConnect in 2017 from HikDNS as they supposedly shut down some "exploits", not sure how the cloud helps, anyway, the vulnerabilities will still exist unless you change/upgrade to the later firmware. Nevertheless, I am not entirely convinced that although one uses the cloud without any port forwarding etc, the systems are safe. I am sure that the new exploits will become available especially as some people have lockdown boredom.

Lastly, the HikConnect cloud only allows remote video /playback and not system configuration so if you need to remotely configure the machine you will still need to have a secure VPN.

 

[SouthernYankee]

P2P is open to exploits. You need to set up OpneVPN to securly access your home network.

Look at the follow post, on exploits and attacks.

Hikvision Honeypot Hackathon

We get quite a lot of posts about port forwarding - and quite a lot of good advice in response about the risks, and pointers to more secure remote access methods. And we still get posts related to the Hikvision backdoor vulnerability, where camera passwords are mysteriously lost, or cameras...

ipcamtalk.com

Read How to Secure Your Network (Don't Get Hacked!)


-----------------------------------------------
My general VPN post

There are two types of VPN, do not get them confused.
The type depends on where the traffic conversation (traffic) originates

1) origination: local home network, destination the internet.
This type of VPN purpose to hides your activity from the internet, it is outbound, it normally costs a monthly fee to use. Direction is from your home PC to the internet, going to your bank, google, porn sites,,,, this not what you want

2) Origination: the internet world wide web, destination: your home network
This VPN type is used to provide a secure connection onto your local network, in bound to you local home network, from your office computer, your cell phone in your car, tablet at the coffee shop.. This is what you want, it does not have a monthly fee and is normally completely free. OpenVPN is this type of VPN.

------------------------------------------------------

 

[OICU2]

I would also not trust my video going out to any "cloud", secure or not. VPN is the way to go.