Hikvision Ezviz Touts Robust Security

By John Honovich, Published on Mar 11, 2016

Hikvision's poor security track record, Chinese government ownership and hiding of their own brand in the consumer space has raised many concerns about their direct sales to American consumers. Indeed, a Google Consumer survey showed significant resistance.

Now, Hikvision has gone public with a statement explaining and defending their security.

Key ****** ****

****** ****** ********* *****:

  • ***** ***** ******* ** run ** ****** *** Services, **** "*** **** and *********** ******" ** the ****** ******.
  • ***** ***** ******** ******* to *****
  • "***** ** ** ** address *** ***** *******"
  • "****** *** ****** ******** by ***** ******* *** only ** ******** ******* the *********** ***** ***."
  • "****** *** **** *** transmitted *** ***** *** SSL"
  • "************ **** ** ******** to **** **** **** and ******** *****, *** when ******* ** *** additional *******. *** ******** is *** **** ****** with *** ************ ****, and ***** ** ** default **** **** *** override *** **********."

** **** ** ******** these ****** ** ******** tests.

Still ******* **** *****

***** ** ******* ********* for ******* * ******** and ******** *** ** technical ******, ** ***** encourage **** ** ** forthright ***** *** **** are.

*************** *************:

"***** ** ************* ****** ** ********, **********. EZVIZ ******** ***** ******* easily ********** *****. ** design *** ************..."

***** ************* ******* *** marketing ***** *** *********. **** of ******** ***** ** security ** ***** **** ***** who *** ***. ****** the ****** **** ** certainly ***** ****** *** it ** **** **** Hikvision ** ******* **** specific ***** ***** ******** practices.

Comments (17)

Undisclosed #1

IPVMU Certified | 03/11/16 05:35pm

EZVIZ North America is run on Amazon Web Services, with "all data and connections remain" in the United States.

Last time I checked the Internet lacked any customs or border patrol, so I am not sure how they could insure that routers not on U.S. soil would not ever pass traffic.

As a practical matter, I'm not sure how often your data would actually leave the country (during transmission), but it is a naive statement nonetheless.

John Honovich

IPVM | 03/11/16 06:20pm
  • "There is no IP address for EZVIZ cameras"

Ethan pulled up the Ezviz Mini in Hikvision's own software tool, showing an IP address for it:

Undisclosed Manufacturer #2

03/11/16 06:25pm

"There is no IP address for EZVIZ cameras"

If these are network cameras connected to a home/business router, it will have an IP address. Their software may not disclose it, rather using a cloud/app connection, it still has an IP address. I believe they are referring to it not having a web browser interface (HTTP web page), which is different than it having an IP address (TCP/IPv4).

Just like hwen people confuse the world wide web with the Internet.

John Honovich

IPVM | In reply to Undisclosed Manufacturer #2 | 03/11/16 06:36pm

2, yes, I agree I think they are just confusing the two but still...

Here is the full quote:

"One critical element that distinguishes EZVIZ's security measures from others is that there is no IP address for EZVIZ cameras -- meaning no direct web connection to EZVIZ products."

They emphasized it quite clearly 'no IP address', which is strange to say the least.

Undisclosed #1

IPVMU Certified | In reply to John Honovich | 03/11/16 07:28pm

Yes, I think they mean from the outside.

So if you were to establish a connection to your home camera from your phone using the local Starbucks free wireless, you wouldn't see a connection to your home IP, only the generic IP to their Amazon cloud service which is relays the data pushed to it from your home.

So no inbound connection for video, only outbound to the cloud.

IMHO, that's what they are trying to say, but still just guessing based on other p2p implementations I've read about.

John Honovich

IPVM | In reply to Undisclosed #1 | 03/12/16 12:19am

"relays the data pushed to it from your home"

And inside your home, the Ezviz camera has an IP address that it uses to interface with the cloud service.

If Hikvision wants to say what you say, they should say it. However, they published a document saying "there is no IP address for EZVIZ cameras"

Avatar

Brian Karas

IPVM | In reply to John Honovich | 03/12/16 01:27pm

"there is no IP address for EZVIZ cameras"

Maybe they're referring to the TVI cameras, LOL.

Undisclosed #1

IPVMU Certified | In reply to Brian Karas | 03/12/16 02:37pm

Or maybe they're running LonWorks...

Avatar

Jon Dillabaugh

Pro Focus LLC
In reply to Undisclosed Manufacturer #2 | 03/12/16 03:49pm

I think a lot of you are confused. They simply meant a public facing IP address. Of course any device using TCP/IP will have an IP address. But, it doesn't have to be public facing. You need to be able to speak Chinglish. I'm fluent.

John Honovich

IPVM | In reply to Jon Dillabaugh | 03/12/16 04:05pm

"You need to be able to speak Chinglish. I'm fluent."

But:

"EZVIZ is a North American company headquartered in City of Industry, California"

I suspect it is not a 'Chinglish' issue as much as it is a marketing department who has deficiencies communicating about technology.

Undisclosed #1

IPVMU Certified | In reply to Jon Dillabaugh | 03/12/16 07:24pm

You need to be able to speak Chinglish. I'm fluent.

Prove it. What's a "male Wallace house"? (Don't skip the ending.)

Undisclosed Integrator #3

03/12/16 03:40am

EZVIZ is super secure in that it's nearly impossible to make it work right...

John Honovich

IPVM | In reply to Undisclosed Integrator #3 | 03/12/16 12:39pm

3, what specific problems have you faced? We are in the middle of testing the Ezviz mini and found a fairly fundamental wireless connection (or lack thereof) problem.

Undisclosed Integrator #3

In reply to John Honovich | 03/14/16 06:14am

The one time I tried to use it, it refused to configure UPnP on the router despite that being enabled, the EZVIZ app refused to recognize the QR code (once I found the version that was in English), it wouldn't let me log in on my phone with the account I set up with it (I eventually just created a new one that did work), then when I added it to the client's phone it refused to log in with either account... at that point I gave up and configured port forwarding on the router manually and just configured the regular app on his phone with his internet IP (you know, the old fashioned way).

Undisclosed Integrator #4

03/22/16 03:01pm

John,

Ezviz touts that their WiFi camera doesn't have a default password, but the camera itself has a default verification code which is used as a camera password on the product itself next to the QR code and it stays as default code unless the user changes it. So this is also contradicting their claim about not having a default password. You should point out this claim as well.

Also, do you know how I can verify that all my data is staying in the US AWS servers instead of other co-located AWS servers?

Undisclosed #1

IPVMU Certified | In reply to Undisclosed Integrator #4 | 03/22/16 04:26pm

Ezviz touts that their WiFi camera doesn't have a default password, but the camera itself has a default verification code which is used as a camera password on the product itself next to the QR code and it stays as default code unless the user changes it.

What is the default password then? 8888888? 6666666?

Or do you mean each camera has a unique pre-assigned password?

Avatar

Ethan Ace

IPVM | In reply to Undisclosed #1 | 03/22/16 04:52pm

Each camera has a six-character alphanumeric access code. You'll find it on a bunch of Hikvision stuff, also, below the serial number. You have to enter it when adding it to EZVIZ, and sometimes you have to enter it again to view video.

Read this IPVM report for free.

This article is part of IPVM's 6,587 reports, 888 tests and is only available to members. To get a one-time preview of our work, enter your work email to access the full article.

Already a member? Login here | Join now

Related Reports

Hikvision Hides Xinjiang R&D Activities on Apr 22, 2020
Hikvision has systematically deleted evidence showing their R&D base and...
Facial Recognition: Weak Sales, Anti Regulation, No Favorite, Says Security Integrators on Jul 07, 2020
While facial recognition has gained greater prominence, a new IPVM study of...
Faulty Hikvision Fever Cam Setup at Mexico City Basilica and Cathedral on Oct 14, 2020
Donated Hikvision fever cameras (claiming screening of 1,800 people/min. with...
"He Is An Idiot!" Exclaims SIA Director John Mack on Mar 23, 2020
Here is another inside look into the "leaders" of the security industry. SIA...
SIA: "Refrain From Working With Companies And/or Products That Are Implicated In Human Rights Abuses" Like Dahua and Hikvision on Aug 17, 2020
The US (Security Industry Association) SIA has taken a stand, declaring that...
Dahua Taunts Australian Government, Continues To Sell Illegal Fever Cameras on Aug 10, 2020
Dahua is effectively taunting the Australian government by continuing to sell...
Dangerous Hikvision Fever Camera Showcased by Chilean City on Aug 07, 2020
Deploying a fever camera outdoors, in the rain, with no black body, is...
Fever Cameras Are Medical Devices, Per The FDA, Dahua, Feevr, Hikvision, InVid Contrary Claims Are False on May 28, 2020
Fever cameras are medical devices, despite what euphemisms various sellers...
Hikvision AI Training In Xinjiang Paramilitary Base, Now Denies on Mar 10, 2020
Hikvision has been listing AI training in a Xinjiang paramilitary base that...
Deceptive Meridian Temperature Tablets Endanger Public Safety on Oct 21, 2020
IPVM's testing of and investigation into Meridian Kiosk's temperature...
Hikvision Illicitly Uses Back To The Future In Marketing on Jul 03, 2020
NBCUniversal told IPVM that Hikvision UK's ongoing coronavirus marketing...
Verkada: "IPVM Should Never Be Your Source of News" on Jul 02, 2020
Verkada was unhappy with IPVM's recent coverage declaring that reading IPVM...
NDAA Compliant Video Surveillance Whitelist on Aug 10, 2020
This report aggregates video surveillance products that manufacturers have...
Panasonic i-PRO Hid Huawei, Does Damage Control on Aug 21, 2020
Panasonic i-PRO hid their usage of Huawei from the public, continues to...
Axis Compares Fever Camera Sellers to 9/11 on Sep 18, 2020
Axis Communications, the West's largest surveillance camera manufacturer, has...

Recent Reports

Deceptive Meridian Temperature Tablets Endanger Public Safety on Oct 21, 2020
IPVM's testing of and investigation into Meridian Kiosk's temperature...
Honeywell 30 Series and Vivotek NVR Test on Oct 21, 2020
The NDAA ban has driven many users to look for low-cost NVRs not made by...
Ubiquiti Access Control Tested on Oct 21, 2020
Ubiquiti has become one of the most widely used wireless and switch providers...
Mexico Video Surveillance Market Overview 2020 on Oct 20, 2020
Despite being neighbors, there are key differences between the U.S. and...
Dahua Revenue Grows But Profits Down, Cause Unclear on Oct 20, 2020
While Dahua's overall revenue was up more than 12% in Q3 2020, a significant...
Illegal Hikvision Fever Screening Touted In Australia, Government Investigating, Temperature References Deleted on Oct 20, 2020
The Australian government told IPVM that they are investigating a Hikvision...
Panasonic Presents i-PRO Cameras and Video Analytics on Oct 19, 2020
Panasonic i-PRO presented its X-Series cameras and AI video analytics at the...
Augmented Reality (AR) Cameras From Hikvision and Dahua Examined on Oct 19, 2020
Hikvision, Dahua, and other China companies are marketing augmented reality...
18 TB Video Surveillance Drives (WD and Seagate) on Oct 19, 2020
Both Seagate and Western Digital recently announced 18TB hard drives...
Watrix Gait Recognition Profile on Oct 16, 2020
Watrix is the world's only gait recognition surveillance provider IPVM has...
Intel Presents Edge-to-Cloud Ecosystem for Video Analytics on Oct 16, 2020
Intel presented its processors and software toolkit for computer vision at...
Best Manufacturer Technical Support 2020 on Oct 16, 2020
5 manufacturers stood out as providing the best technical support to ~200...
Microsoft Azure Presents Live Video Analytics on Oct 15, 2020
Microsoft Azure presented its Live Video Analytics offering at the September...
Worst Manufacturer Technical Support 2020 on Oct 15, 2020
4 manufacturers stood out as providing the worst technical support to ~200...