Following the national security argument to a logical, if admittedly extreme conclusion, that is where you might end up.
Assuming that is unrealistic, what is a workable solution?
1. Western countries/western cameras, Eastern countries/eastern cameras
2. Allied countries/allied cameras
3. No cameras from foreign government owned companies
4. No cameras from foreign government owned companies in non-allied countries
5. Open or reviewed source firmware cameras only
6. Other?
TBH many a time I find these debates on Ipvm leading nowhere... My feeling is, if it is really important for you, you will go the extra mile to check the equipment you buy (check for security , not usability) and use the appropriate best practices.
I also think that even then , it might not work, if someone really wants to get you, they will...and if they can't get through the networked device, they will infiltrate into your organization and use someone on the inside.
Japanese companies' buying spree in the 90s was also scary to many U.S. Companies,does Japan rule the U.S.Economy like everyone feared?
"I also think that even then , it might not work, if someone really wants to get you, they will."
You are absolutely right:)
...if someone really wants to get you, they will.
Hacker Jr: Damn! There’s just no way in to this casino network. I’ve tried everything!
Hacker Sr: Well you could always hack into the fish tank.
Hacker Jr: Hack into the fish tank, are you crazy? I don’t know nuthin about how you exploit a fish tank.
Hacker Sr: Its no different than any other random IoT device. You won’t even know you’re in one. Later when word gets out, the hack will be trumpeted as ingenious trickery!
Hacker Jr: That’s brilliant! How do come up with this stuff?
Hacker Sr: You have to really want it...
It really wasn’t that great of a hack. It wasn’t a fish tank that was hacked. It was the PC that monitors and controls the environmentals for the fish tank. Not really that unique in the grand scheme of things.
...check for security...
What do you think the ‘best practice’ is to determine whether there is an intentional backdoor left in your camera by the manufacturer?
Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.
