Auto Account Lock Out? Who Does/Does Not Do It?

Avatar
Ethan Ace
Oct 10, 2016

In the past couple of years, some manufacturers (notably Hikvision, Dahua, and Samsung) have added auto account lock out, which automatically locks an IP camera account after a specified number of invalid log in attempts. Typically, users must wait a set amount of time (typically 30 minutes) before attempting to log in again, or reboot the camera.

This helps prevent against dictionary attacks, one of the most basic forms of cyber attacks, in which an attacker essentially attempts hundreds or thousands of passwords until the correct one is found using automated tools.

Aside from the three mentioned above, which manufacturers support auto account lock out?

U
Undisclosed #1
Oct 10, 2016
IPVMU Certified

Additional question, do they all lock just the account?

Or do some block the IP where the requests originate? (For cases when the attempt is made with a non-valid user name).

JH
John Honovich
Oct 10, 2016
IPVM

To be clear, if you are a manufacturer that does support auto account lock out, tell us now.

We plan to do a post criticizing manufacturers who do not and this is effectively notice to manufacturers.

New discussion

Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.

Newest discussions