Recent content by mnederlanden

This is why I shared it. I'm glad we agree that a mechanical switch on a device is still an airgap. Yes, and this is the software equivalent of a mechanical switch. It introduces a small amount of risk, but it is still an airgap - a conceptual one and one with a key, but one none-the-less...

I've been following the thread; you haven't actually disputed any facts, yet. You've not engaged with any of the sources I have linked. I'd be happy to learn from you, if you know more that I do, but you're not giving me that opportunity. Here's another link that proves claim 2: Secure Data...

I love to learn. Would you mind telling me statement what you are claiming is a false claim: Claim 1: Devices plugged into the uplink port on many POE NVRs, including our models, can't talk to devices plugged into the POE ports, directly. Claim 2: A component can be airgaped. Airgaps are a...

Some to All Hikvision, Dahua, and UNV POE NVRs use the IPFS method of an airgap. Most other POE NVRs do as well. We aren't the only ones who have this; this is normal in POE NVRs. On these devices, there is no physical connection between the uplink port and the POE ports. The only way to talk...

Thank you for recognizing this. This is not true. That's not the only definition of an air gap, although it is most common definition. From IPFS: "The air gap may not be completely literal, as networks employing the use of dedicated cryptographic devices that can tunnel packets over...

That's not how GPL licensing actually works. Android is open source. Not all Android apps are open source. You can't compel gmail to give you their source code, just cause gmail runs on Android. Most linux kernels aren't even totally open source. The majority of Arch linux or Debian kernels...

No, our partner doesn't publish source code. I think the only open source projects availible right now are Zoneminder, Shinobi, and ONVIF Device Manager. There's several more being worked on, but those are the only ones I know of that are currently downloadable. SAST is coming and we're working...

You! I like you!

I'm not asking them. That's far too complex for them. I'll building it into our software suite. Soon you won't have to do a VPN or open ports. P.S. we haven't settled on a reverse SSH as the best method, just something we're trying for now.

I love this. I'm glad you point this out. This is the sad state of IOT (NVRs cameras, smart speakers, smart locks, etc) currently. Stuff gets discontinued and then abandoned way too quick. I'm hoping to change this.

This isn't how the hardware works. An airgap protects the cameras from being access by something other than the NVR. All processes to the camera must originate in the NVR. So, no camera can be hacked if the NVR isn't hacked. That's how this works. I don't really know how UNV does it. That's...

Correct. Not completely correct. We're one of their largest customers. They fix bugs for us weekly. This is really no different that your scenario with Blue Iris. You guys move a lot of product and you get power because of that with the developer. That's a good thing. You help him manage his...

Additionally, I've been working with a hardware designer to create our own POE powered devices (for a separate, secret project) and I can tell you that the hardware engineers that we're working with have absolutely designed a physical barrier in these new devices. I wasn't part of the hardware...

There really is one on our NVRs. The only way to remote into a camera's web interface is to plug a PC into one of the free POE ports. If you would like, I can send you a 4 channel NVR for free and you can try to access a camera's ip address without plugging into one of the POE ports. I'd be...

Just curiously, what's ?