Google Breaks Surveillance Browser Support

By: Ethan Ace, Published on Sep 09, 2015

Now you have a choice.

Broken video surveillance web browser support or an insecure, prone to crashing interface.

As Google has been warning for ~2 years, Chrome has now discontinued NPAPI support. Amazingly many video surveillance manufacturers have been impacted by this, some severely

Inside, we share our test results on which browser implementations still work and to what extent, covering Axis, Avigilon, Bosch, Dahua, Hikvision, Samsung, Exacq, Genetec and Milestone.

*** *** **** * choice.

****** ***** ************ *** browser ******* ** ** insecure, ***** ** ******** interface.

** ****** *** **** warning *** ~* *****,****** *** *** ************************. ********* **** ***** surveillance ************* **** **** impacted ** ****, **** severely

******, ** ***** *** test ******* ** ***** browser *************** ***** **** *** to **** ******, ******** Axis, ********, *****, *****, Hikvision, *******, *****, ******* and *********.

[***************]

*******

*** ***** **********, *** ******** ****** *********** *********** Interface *** ********** ** *** 90s, *********** *** ***** standard ****** *** ******** browser *******, **** ******** used *** ***** *** video *********.

********'* ***** ** ****** NPAPI ******* **** ***** ********* ** ********* ** 2013, ****** ***** *** security ********:

"*****’* ******** *** ********, safer, *** **** ******* than ***** *********. *********, NPAPI’s ***-*** ************ *** become * ******* ***** of *****, *******, ******** incidents, *** **** **********."

** ***** ****, ***** were ******** **** **** were ***** * ****** that ***** **** ** disabled, ** ** ******* to *** ********** ** avoid ***** *******. 

****, ***** ******* **** disabled ** *******, ******* users ** ****** ******* settings ** ****** ** continue ***** ****. 

*******, ** ********* ****, in ******* ** ** Google ******, ***** ******* was ******* *******.

Why **** ** * *******

******* ********* *** ***** of ********, **** ************ manufacturers **** *** ******* their *** ********** ** use ***-***** *******, ********* **** ******** or ********* *** *** interface ************ ** ******.

***** *** ***** ******* this ** * *******:

  1. **** ****** *** ******: ****** ********* **** ****** as *** **** ******* browser *********, **** ***** 50% ****** *****. 
  2. ******** ******** ***** ******** or *** ** ****: *** ** ********* ** policy, **** ***** *** not *** ** ** all, ** ** *** be ******* ** ***** versions. 
  3. ** *********** ************: **** *** ******* ** Windows ** *** ***** new **** *******, ********* has ******* *********** ** new ** ********, *** support **** ** ******* to ******* ******** ****. Not **** ****** **, **** does *** ******* *******.

Impact ** ****** ***

** *******, ***** ****** expect **** *.*** ***** will ** ****** **** in ******. ** ******* ******* from ****, *********, ****, Dahua, *********, ********, *** Bosch *** **** ********* H.264 ********* ***** ******. 

**** **** ********* ****** support ** ******* **:

  • ********: ** ******. ***** ********* only.
  • ****:*.*** ********* *** ***********. MJPEG ********* ****.
  • *****: ** ******. ***** ********* only.
  • *****: **** ***** *** *** ****** now *********** ** *** interface ***** ******.
  • *********: ** **** *****, ***** config, ** ******** ******** available ** ****** **+.
  • *********: ** ******. ***** ********* only. ****** ******** ******** Explorer.
  • *******: *** ********* *** ********** unavailable.
  • ****: ** ******. ***** ********* only. 

** ******* **** ** more ****** *****, ****** **** most ** ***** ******** by ******'* ******* ** NPAPI *******:

******: *****

** ***** *******, ** live ***** ** ********* and ***** *** *** configure ****** *********. ***** settings *** ** *******. 

** ***** (*** ***, such ** *** ********* NVR *****) ****/****, ***** may *** *** **** the *** ********* ** all:

 

******: *********

** **** ***** ** available ** ********* ***** Chrome. ************, **** ******** such ** ***** ************* and **** ******** ******* do *** ****. ***** must *** ** **** an ********* ****** *** proper ***.

********* *** ********* ******** ** Hikvision, ****** ******* **** be **-******* ** ******** firmware ********, ******** *** Q4 ****.

******* ********* ** ********* to ********* **** *** effective ********* ** *** customers, ** *** ******* to ****** *** ******** for *** ******** ** they **** ** ********** with ****** ***** *******. This ********, ***** **** require * ******** ******* on ****, ****, *** IP *******, **** ** rolled *** ** ******** below. ****** **** ********** period, *** ******** **** continue ** ******* **** other ******** **** ** Internet ********, ******, *** Firefox.

******: *******

******* ******* ****** *** user **** *** ********* ****** ** not *********, ******* ** actually ***** *********. **** after ********* ************, *** same ******* ** *********. There ** ** *** to ****** *** *** interface ******* *** ****** installed, ******* ***** ** use **.

********: ****

****** ***** *** *** unable ** **** *.*** video. ***** *** ***** be ****. **** **** Axis *** ****** ******** Internet ******** *** **** configuration (****** *********, ****** applications, ***.).

** ******: ********

******* *************' *** *** are *** ******** ** NPAPI's *******, ** **** use **** ***** *** video ** **** ***** worked ** ******:

  • ********: ********'* ****** ** ** unchanged ** ****** **, as ** **** **** MJPEG *** **** *****, not *.***.
  • *****: *.*** ***** ** *********** in ******, ** ** requires ** ******* ******. MJPEG ********* ***** ** Chrome ******* *******.
  • *********: ********* **** *** ******* H.264 ***** ** ****** configuration ** ******. ***** video ** *********.
  • ****: **** **** *** ******* live *.*** ***** ** Chrome. ***** ** *********. Users **** *** ** to ********* ******. 

VMS *** ****** ****** 

** ******** ** ****** UIs, ***** ******* *** impact VMS *** *******, ****** ******** *** developers ** ***** ** and ****** **** ** that **** **** ******* transitioned **** **** ***** plugins *** *** ****** use. **** *** ********:

***** 

*****'* *** ****** ***** properly ** ****** ******* 45, ********* ** *******. 

*******

*** ******* ******** ****** web ****** ***** ******** in ****** **** ** plugins ********, ***** ***** is **** *** ********* *****. However, *******'* ****** ***** (used ** ******** *** change ********, ******* ** SQL ******, *** ***** ***-***** ***** tasks) **** ********* ***********, which ** ** ****** supported ** ******. **** image *** ***** ** a ******* **** *********** installed:

*********

**** *******, ********* **** MJPEG *** *** ****** streaming, ********* ** *******. The ********* ****** *** client ***** ** ******** in ****** ******* **.

H.264 *********

** ** ******** ** stream *.*** ***** ******* NPAPI *******. ** ****** describes ** *** ***** deprecation *****, **** *******:

  • ***** ***** ********.  ******** ********************* * **** ***** platform ******* **************. **** *********** *** cases *** ** ******** using ********** (*** ******* ***** out ******** ** ****** **********).

  • ******.  ********* ******** *** **** time ************* ******* ***** and *** ********** *** also ** **** *** applications **** **** ********* media *** ****. ******’*********** ********** ****** ** ****** HD ***** ******* * browser *** **.

**** ** ******* ***** surveillance ********** ******* ******* these ******* ** ** seen.

Comments (35)

Which is why I love Firefox so much ;)

Bah, Firefox is slow. I haven't used Firefox in a while though...

Btw, anyone with any other cameras to report, please share.

The Fox may not be quick but it's better than nothing. Give it a try and stop using Netscape 4.0.

We (VXG) offer a replacement for VLC or NAPI based plug-ins. The VXG plug-in is based on NaCL/PNaCL architecture that is native for Chrome. For those who are interested, we have a demo page here:

http://rtpstream.com/nacl_player/

or you can read more about the plug-in here:

http://www.videoexpertsgroup.com/chrome-media-player-plug-in/

Konstantin,

What codecs does that support? H.264? MPEG-4? etc.

It looks like I need to install the player as an app on Chrome?

How / what price do you license this to companies?

John,

The plug-in supports H.264, MPEG-4, MPEG-2 video, AAC, G.711, PCM, MP3 audio. Supported streaming formats are RTSP, RTMP, HLS and MMS.

The plug-in requires VXG Player Chrome app. It is installed when you first time run the plug-in.

We license the plug-in and offer its customization to companies. The license is one time fee per hosting or per product.

If I have to ask how much it costs, I probably can't afford it...

Please fill the form on

http://www.videoexpertsgroup.com/chrome-media-player-plug-in/

and we'll contact you regarding the pricing shortly.

Does it require changes to the HTML/DOM/JavaScript or is it a 100% drop in replacement for the existing plugins?

It's easy to replace, however minimal changes in the javascript will be required if you move from an old NPAPI plug-in. You can see the client's code on our test page.

Samsung cameras can also run in Firefox, so IE is not "required".

I can't open up Axis equipment in IE for ages now without switching to and older version using F12. All I see when logging in is the header, and nothing more.
Which is why I have been using Chrome for those for quite some time. It's going to be annoying not being able to use that either as well.

The problem with the Samsung not installing is quite annoying as well.
I keep having to switch between IE and Chrome to get the functions on the camera's, which is, in these times, quite humiliating.

This is why solutions written using no plugins are preferable. All HTML and Javascript is the way. For video that hasn't traditionally been very feasible, but HTML5 is starting to change that. We're not all the way there yet, but you can now play video natively with no plugin, there are several manufacturers doing that now for certain applications. The 500 lb gorilla YouTube moved from Flash to HTML5 as their default last winter.

Dadgum it surveillance manufacturers, make it work. BTW, I still prefer firefox over Chrome myself. Just seems solid. I have no scientific proof to back this up, just a very uneducated opinion. Maybe its because surveillance stuff never really worked well in chrome.

Je suis Infosec.

5+ years ago I started looking at physical security networks. The first time they told me to let some scruffy old Axis camera download software into the browser in my computer in my command center I almost tossed my cookies all over the keyboard. That style went out with using uncovered Mason Jars to store kerosene.

Of course everybody told me to hush because that's how things are done in Physical Security.

Guess what? It sucked then, it was architecturally irresponsible, and now the people who bought (not the people who built) those bad architectures are paying. Don't look to your IT buddies for sympathy on this.

It sucked then, it was architecturally irresponsible, and now the people who bought (not the people who built) those bad architectures are paying.

Shortsighted developers, what were they thinking? If they could have just done the right thing and waited 10 or 15 years for HTML 5 to come out, we'd be a lot better off today.

Lol, that's a bad argument!

Sure, doing it 5 or 10 years early would be stupid. However, HTML5 is now mainstream and surveillance manufacturers had a good year's notice that this (NPAPI discontinuation) was going to happen but did nothing. Yes? No?

I agree with you, they (meaning both users and developers) have had plenty of warning that this was coming.

I was only reacting to the perfect hindsight of

It sucked then, it was architecturally irresponsible, and now the people who bought (not the people who built) those bad architectures are paying.

Rodney, You are WELL known for complaining yet never providing an answer/solution to the problem you are complaining about. What would have been your solution for native MPEG4/H.264 video in the browser 5 years ago and then what for today?

The corporation finally moved to IE11 last week and now we can't open some (about 50/50 depending on the model from the looks of things) of our AXIS cameras in H.264 anymore. Well, unless we want to run them using QuickTime which looks like crap and doesn't have the features. I was hoping we could use Chrome, but obviously not! Dang. Firefox already only works with QuickTime so where can I turn to open our cameras using AMC?

Just wait until you go to Windows 10 and get the Edge browser from MSFT, you'll be wishing for IE11...

Lucekly you can open it in IE11 as well. It's an option in Edge.

Do you know any VMS or camera product streaming live H264/MPEG4 to a browser in a HTML5 / javascript manner (without plugins), that works the same way at least in Firefox and Chrome?

Every solution that I know is still using Flash, Silverlight, VLC plugin, ActiveX, or a method that doesn't fit both browsers.

This solution is transcoding video to JPEG snapshots. This is not H264/MPEG4 live streaming. The are a lot of cons for this approach: server will have to decode and re-encode all video (very CPU intensive, not scalable), image quality and bandwidth requirements will be worse, etc.

You can check yourself using Chrome developer tools:

Jpeg snapshots in Chrome

Tested in Chrome version 45 and Firefox version 40.

Wagner, yes, agree with your analysis. From what I know, all the large brand VMSes are transcoding first to MJPEG (which is resource intensive and requires adding in another VMS component).

I do not know of a VMS that sends 'straight' H.264 video to web clients. I am sure it's going to happen at some point and there may be very well be a few who do that but it's certainly uncommon, at best, now.

Good call, Wagner!

It should be possible to stream h.264 directly to an html 5 page using DASH with MSE, no?

I don't know much about DASH/MSE, but looks like youtube is using it to live stream h264 (pure HTML solution). Tested with Chrome and Firefox, watching live TV from some public channels.

Related news: http://www.theverge.com/2015/9/2/9252753/alliance-for-open-media-next-generation-codec

My pain has been with updates on IE. I usually only need the browser for that part of camera config that isn't handled by the VMS (Genetec). Of the brands I use, Panasonic cameras (eg. WV-SC588) have been the most difficult to bust into. I don't even care about an image anymore, I just want to control all the settings. Compatibility view ... install viewer .... wait ... click .... wait ....finally ... maybe ... Thoughts?

Panasonic has been the most frustrating and archaic IP camera web interface I've ever used. So, yes, you are not alone there. Not sure what to say outside of hoping that one day they modernize their camera web interface.

Thanks, John, the solidarity is nice. At least I'm not losing my mind, then.

Panasonic has been the most frustrating and archaic IP camera web interface I've ever used.

My confidence is high that you have never had to use the Toshiba web interface. ;)

Toshiba makes IP cameras...

I know they do, I just rarely hear someone use them.

You're in luck, here's a link to a Toshiba's live public camera lab. I actually had the PTZ at the bottom going pretty nicely.

Question, do many manufacturers host their cameras with open access for all? I remember Axis and Avigilon having something, but it seems like a good idea, (if your stuff works).

Have it reset to default every hour, and let everybody have at it.

White-hat hacker bots might change your channel descriptions trying to warn you, but who cares?

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

IP Camera Browser Support: Who's Broken / Who Works on Dec 10, 2019
For many years, IP cameras depended on ActiveX control, whose security flaws have been known for more than a decade. The good news is that this is...
Milestone XProtect 2019 R3 'Centralized Search' Tested on Oct 30, 2019
Milestone has had problems over the last few years releasing significant new software. Now, in XProtect 2019 R3, Milestone is touting "one search...
Network Optix NxWitness 4.0 Tested on Oct 10, 2019
Network Optix released Nx Witness 4.0, proclaiming new features like a deep learning analytics metadata SDK, increased H.265 support, and UX...
Genetec Stratocast VSaaS Tested on Sep 05, 2019
The VSaaS market is rapidly expanding in 2019, with Verkada, Meraki, Eagle Eye, Avigilon and numerous startups growing their market share. When we...
CheckMySystems Company Profile on Aug 14, 2019
CheckMySystems says that too many users respond, "I get an email when something is wrong" when talking about their video system maintenance plan,...
Network Optix / Hanwha Cloud Access Tested on Jul 02, 2019
Remote cloud access is becoming a bigger differentiator, as cybersecurity issues underscore the problems of port forwarding and many integrators...
IndigoVision Control Center VMS Tested on May 30, 2019
IPVM's last test of IndigoVision's VMS was in 2010, which found enterprise VMS features and a simple client interface. but no 3rd party camera...
Milestone XProtect 2019 R1 Tested on May 15, 2019
For the past few years, Milestone has released quarterly software updates XProtect VMS platform. What is new and how much impact do the updates...
Verkada Cloud VMS/Cameras Tested on May 02, 2019
Verkada is arguably the most ambitious video surveillance startup in many years. The company is developing their own cameras, their own VMS, their...
Camera Configuration Manager Shootout - Avigilon, Axis, Bosch, Dahua, Hanwha, Hikvision on May 01, 2019
Which camera manufacturer has the best management tool? We tested 6 manufacturers - Avigilon, Axis, Bosch, Dahua, Hanwha, Hikvision to find...

Most Recent Industry Reports

USA ICI Elevated Skin Temperature Detectors Examined on Apr 06, 2020
Infrared Cameras, Inc. (ICI) is aiming to help slow the spread of COVID-19 with "pinpoint accurate skin temperature measurement" using their...
Trade Groups Request NDAA Blacklist Delay Citing Coronavirus on Apr 06, 2020
Two trade groups representing government contractors have asked Congress to delay implementation of the NDAA's 'blacklist' clause from this August...
Coronavirus Hits Manufacturers, Standing Now, Worse To Come on Apr 06, 2020
Coronavirus is hitting security manufacturers, though overall modestly for now, with worse expected to come, new IPVM survey results...
FLIR New Coronavirus Prioritized Temperature Screening Camera Examined on Apr 03, 2020
FLIR has announced a new series of thermal cameras "prioritized for entities working to mitigate the spread of COVID-19 virus", the A400/A700...
ADI Branch Burglary on Apr 03, 2020
A security systems distributor branch is an odd target for burglary but that happened this week at ADI's Memphis location. Vehicle Smash &...
Hikvision And Dahua Now Blocked From Conforming ONVIF Products on Apr 03, 2020
Dahua and Hikvision, sanctioned for human rights abuses, are now blocked from submitting products for ONVIF conformance, a blow to the mega China...
YCombinator AI Startup Visual One Tested on Apr 02, 2020
Startup Visual One, backed by Silicon Valley's powerful Y Combinator, aims to be "Your 24/7 Watchman" with advanced analytics and object...
Free IPVM Memberships For The Unemployed on Apr 02, 2020
IPVM is giving 3-month free memberships (regular price $99) for the unemployed, no questions asked. To get it, just contact us, your request...
Dahua Faked Coronavirus Camera Marketing on Apr 01, 2020
Dahua has conducted a coronavirus camera global marketing campaign centered around a faked detection. Now, Dahua has expanded this to the USA,...
Video Surveillance Trends 101 on Apr 01, 2020
This report examines major industry factors and how they could impact video surveillance in the next 5 - 10 years. This is part of our Video...