@Dramus - I am certainly not claiming to be a network security expert, but please elaborate on how a camera that is isolated from the internet (like in a dual NIC system or VLAN) is a real risk? Are you implying it is the same risk as port forwarding, P2P, UPnP?
I'm not implying it's the same risk as anything. What I am
asserting is that it is undeniably true that neither you, I, nor anybody can possibly know of all the threats that exist on our networks, thus it is arguably wise to eliminate all threats of which we
are aware.
One day I was sitting out back in the lab area working on some-or-another bit of software. At the time I was still dividing my time between software engineering and system administration. One of my software engineering colleagues wanted me to allow some-or-another access to the network--I no longer recall what--and didn't see the harm in it. I pointed out to him that, yes, what he wanted
seemed innocuous on the face of it, thought about it, and explained to him how that "innocuous" thing, coupled with a couple other innocuous-looking things, each of which he agreed were equally innocuous, could result in the three being "chained together," so to say, to create a breach. He was literally speechless for a moment. "I never thought of it that way," he replied.
He never questioned my edicts after that
So please elaborate and tell us how to be more secure as that is what we all strive for on here and to learn from others. If you have a better and more secure way than many here are doing, we would love to hear about it....
Heh. I guaran-fracking-tee you the vast majority of users here would not be inclined to follow my security stance
Let me give you a
very small taste that can't, or shouldn't... uh... cause trouble here, because the protocol is Officially Dead (and Thank God!): Adobe Flash. No device has
ever existed on my home network with Flash on it. At least not any longer than it took to delete it. When I was still the BOFH at work (Bastard Operator From Hell - for those who don't know the Internet lore: Look it up) I successfully campaigned to have it utterly banned from the corporation's PCs and to have our corporate web site re-designed to eliminate it.
Let me make something clear: I'm not asserting my network security is any better than yours or anybody else's here. All I'm saying is we have different views as to what constitutes wise network security policy and that, in
this particular aspect, that being the wisdom of updating devices
known to have vulnerabilities, I believe few, if any, network security professionals would disagree with my stance.
Would I have updated my perfectly-functioning Dahua cameras for security vulnerabilities which
probably wouldn't have been a threat to my network? Dunno. I was still debating with myself about it when the question became moot.
@Dramus a few users have reported restart issues with v16.
Yes, I know.
