Google Breaks Surveillance Browser Support

By: Ethan Ace, Published on Sep 09, 2015

Now you have a choice.

Broken video surveillance web browser support or an insecure, prone to crashing interface.

As Google has been warning for ~2 years, Chrome has now discontinued NPAPI support. Amazingly many video surveillance manufacturers have been impacted by this, some severely

Inside, we share our test results on which browser implementations still work and to what extent, covering Axis, Avigilon, Bosch, Dahua, Hikvision, Samsung, Exacq, Genetec and Milestone.

*** *** **** * choice.

****** ***** ************ *** browser ******* ** ** insecure, ***** ** ******** interface.

** ****** *** **** warning *** ~* *****,****** *** *** ************************. ********* **** ***** surveillance ************* **** **** impacted ** ****, **** severely

******, ** ***** *** test ******* ** ***** browser *************** ***** **** *** to **** ******, ******** Axis, ********, *****, *****, Hikvision, *******, *****, ******* and *********.

[***************]

*******

*** ***** **********, *** ******** ****** *********** *********** Interface *** ********** ** *** 90s, *********** *** ***** standard ****** *** ******** browser *******, **** ******** used *** ***** *** video *********.

********'* ***** ** ****** NPAPI ******* **** ***** ********* ** ********* ** 2013, ****** ***** *** security ********:

"*****’* ******** *** ********, safer, *** **** ******* than ***** *********. *********, NPAPI’s ***-*** ************ *** become * ******* ***** of *****, *******, ******** incidents, *** **** **********."

** ***** ****, ***** were ******** **** **** were ***** * ****** that ***** **** ** disabled, ** ** ******* to *** ********** ** avoid ***** *******. 

****, ***** ******* **** disabled ** *******, ******* users ** ****** ******* settings ** ****** ** continue ***** ****. 

*******, ** ********* ****, in ******* ** ** Google ******, ***** ******* was ******* *******.

Why **** ** * *******

******* ********* *** ***** of ********, **** ************ manufacturers **** *** ******* their *** ********** ** use ***-***** *******, ********* **** ******** or ********* *** *** interface ************ ** ******.

***** *** ***** ******* this ** * *******:

  1. **** ****** *** ******: ****** ********* **** ****** as *** **** ******* browser *********, **** ***** 50% ****** *****. 
  2. ******** ******** ***** ******** or *** ** ****: *** ** ********* ** policy, **** ***** *** not *** ** ** all, ** ** *** be ******* ** ***** versions. 
  3. ** *********** ************: **** *** ******* ** Windows ** *** ***** new **** *******, ********* has ******* *********** ** new ** ********, *** support **** ** ******* to ******* ******** ****. Not **** ****** **, **** does *** ******* *******.

Impact ** ****** ***

** *******, ***** ****** expect **** *.*** ***** will ** ****** **** in ******. ** ******* ******* from ****, *********, ****, Dahua, *********, ********, *** Bosch *** **** ********* H.264 ********* ***** ******. 

**** **** ********* ****** support ** ******* **:

  • ********: ** ******. ***** ********* only.
  • ****:*.*** ********* *** ***********. MJPEG ********* ****.
  • *****: ** ******. ***** ********* only.
  • *****: **** ***** *** *** ****** now *********** ** *** interface ***** ******.
  • *********: ** **** *****, ***** config, ** ******** ******** available ** ****** **+.
  • *********: ** ******. ***** ********* only. ****** ******** ******** Explorer.
  • *******: *** ********* *** ********** unavailable.
  • ****: ** ******. ***** ********* only. 

** ******* **** ** more ****** *****, ****** **** most ** ***** ******** by ******'* ******* ** NPAPI *******:

******: *****

** ***** *******, ** live ***** ** ********* and ***** *** *** configure ****** *********. ***** settings *** ** *******. 

** ***** (*** ***, such ** *** ********* NVR *****) ****/****, ***** may *** *** **** the *** ********* ** all:

 

******: *********

** **** ***** ** available ** ********* ***** Chrome. ************, **** ******** such ** ***** ************* and **** ******** ******* do *** ****. ***** must *** ** **** an ********* ****** *** proper ***.

********* *** ********* ******** ** Hikvision, ****** ******* **** be **-******* ** ******** firmware ********, ******** *** Q4 ****.

******* ********* ** ********* to ********* **** *** effective ********* ** *** customers, ** *** ******* to ****** *** ******** for *** ******** ** they **** ** ********** with ****** ***** *******. This ********, ***** **** require * ******** ******* on ****, ****, *** IP *******, **** ** rolled *** ** ******** below. ****** **** ********** period, *** ******** **** continue ** ******* **** other ******** **** ** Internet ********, ******, *** Firefox.

******: *******

******* ******* ****** *** user **** *** ********* ****** ** not *********, ******* ** actually ***** *********. **** after ********* ************, *** same ******* ** *********. There ** ** *** to ****** *** *** interface ******* *** ****** installed, ******* ***** ** use **.

********: ****

****** ***** *** *** unable ** **** *.*** video. ***** *** ***** be ****. **** **** Axis *** ****** ******** Internet ******** *** **** configuration (****** *********, ****** applications, ***.).

** ******: ********

******* *************' *** *** are *** ******** ** NPAPI's *******, ** **** use **** ***** *** video ** **** ***** worked ** ******:

  • ********: ********'* ****** ** ** unchanged ** ****** **, as ** **** **** MJPEG *** **** *****, not *.***.
  • *****: *.*** ***** ** *********** in ******, ** ** requires ** ******* ******. MJPEG ********* ***** ** Chrome ******* *******.
  • *********: ********* **** *** ******* H.264 ***** ** ****** configuration ** ******. ***** video ** *********.
  • ****: **** **** *** ******* live *.*** ***** ** Chrome. ***** ** *********. Users **** *** ** to ********* ******. 

VMS *** ****** ****** 

** ******** ** ****** UIs, ***** ******* *** impact VMS *** *******, ****** ******** *** developers ** ***** ** and ****** **** ** that **** **** ******* transitioned **** **** ***** plugins *** *** ****** use. **** *** ********:

***** 

*****'* *** ****** ***** properly ** ****** ******* 45, ********* ** *******. 

*******

*** ******* ******** ****** web ****** ***** ******** in ****** **** ** plugins ********, ***** ***** is **** *** ********* *****. However, *******'* ****** ***** (used ** ******** *** change ********, ******* ** SQL ******, *** ***** ***-***** ***** tasks) **** ********* ***********, which ** ** ****** supported ** ******. **** image *** ***** ** a ******* **** *********** installed:

*********

**** *******, ********* **** MJPEG *** *** ****** streaming, ********* ** *******. The ********* ****** *** client ***** ** ******** in ****** ******* **.

H.264 *********

** ** ******** ** stream *.*** ***** ******* NPAPI *******. ** ****** describes ** *** ***** deprecation *****, **** *******:

  • ***** ***** ********.  ******** ********************* * **** ***** platform ******* **************. **** *********** *** cases *** ** ******** using ********** (*** ******* ***** out ******** ** ****** **********).

  • ******.  ********* ******** *** **** time ************* ******* ***** and *** ********** *** also ** **** *** applications **** **** ********* media *** ****. ******’*********** ********** ****** ** ****** HD ***** ******* * browser *** **.

**** ** ******* ***** surveillance ********** ******* ******* these ******* ** ** seen.

Comments (35)

Which is why I love Firefox so much ;)

Bah, Firefox is slow. I haven't used Firefox in a while though...

Btw, anyone with any other cameras to report, please share.

The Fox may not be quick but it's better than nothing. Give it a try and stop using Netscape 4.0.

We (VXG) offer a replacement for VLC or NAPI based plug-ins. The VXG plug-in is based on NaCL/PNaCL architecture that is native for Chrome. For those who are interested, we have a demo page here:

http://rtpstream.com/nacl_player/

or you can read more about the plug-in here:

http://www.videoexpertsgroup.com/chrome-media-player-plug-in/

Konstantin,

What codecs does that support? H.264? MPEG-4? etc.

It looks like I need to install the player as an app on Chrome?

How / what price do you license this to companies?

John,

The plug-in supports H.264, MPEG-4, MPEG-2 video, AAC, G.711, PCM, MP3 audio. Supported streaming formats are RTSP, RTMP, HLS and MMS.

The plug-in requires VXG Player Chrome app. It is installed when you first time run the plug-in.

We license the plug-in and offer its customization to companies. The license is one time fee per hosting or per product.

If I have to ask how much it costs, I probably can't afford it...

Please fill the form on

http://www.videoexpertsgroup.com/chrome-media-player-plug-in/

and we'll contact you regarding the pricing shortly.

Does it require changes to the HTML/DOM/JavaScript or is it a 100% drop in replacement for the existing plugins?

It's easy to replace, however minimal changes in the javascript will be required if you move from an old NPAPI plug-in. You can see the client's code on our test page.

Samsung cameras can also run in Firefox, so IE is not "required".

I can't open up Axis equipment in IE for ages now without switching to and older version using F12. All I see when logging in is the header, and nothing more.
Which is why I have been using Chrome for those for quite some time. It's going to be annoying not being able to use that either as well.

The problem with the Samsung not installing is quite annoying as well.
I keep having to switch between IE and Chrome to get the functions on the camera's, which is, in these times, quite humiliating.

This is why solutions written using no plugins are preferable. All HTML and Javascript is the way. For video that hasn't traditionally been very feasible, but HTML5 is starting to change that. We're not all the way there yet, but you can now play video natively with no plugin, there are several manufacturers doing that now for certain applications. The 500 lb gorilla YouTube moved from Flash to HTML5 as their default last winter.

Dadgum it surveillance manufacturers, make it work. BTW, I still prefer firefox over Chrome myself. Just seems solid. I have no scientific proof to back this up, just a very uneducated opinion. Maybe its because surveillance stuff never really worked well in chrome.

Je suis Infosec.

5+ years ago I started looking at physical security networks. The first time they told me to let some scruffy old Axis camera download software into the browser in my computer in my command center I almost tossed my cookies all over the keyboard. That style went out with using uncovered Mason Jars to store kerosene.

Of course everybody told me to hush because that's how things are done in Physical Security.

Guess what? It sucked then, it was architecturally irresponsible, and now the people who bought (not the people who built) those bad architectures are paying. Don't look to your IT buddies for sympathy on this.

It sucked then, it was architecturally irresponsible, and now the people who bought (not the people who built) those bad architectures are paying.

Shortsighted developers, what were they thinking? If they could have just done the right thing and waited 10 or 15 years for HTML 5 to come out, we'd be a lot better off today.

Lol, that's a bad argument!

Sure, doing it 5 or 10 years early would be stupid. However, HTML5 is now mainstream and surveillance manufacturers had a good year's notice that this (NPAPI discontinuation) was going to happen but did nothing. Yes? No?

I agree with you, they (meaning both users and developers) have had plenty of warning that this was coming.

I was only reacting to the perfect hindsight of

It sucked then, it was architecturally irresponsible, and now the people who bought (not the people who built) those bad architectures are paying.

Rodney, You are WELL known for complaining yet never providing an answer/solution to the problem you are complaining about. What would have been your solution for native MPEG4/H.264 video in the browser 5 years ago and then what for today?

The corporation finally moved to IE11 last week and now we can't open some (about 50/50 depending on the model from the looks of things) of our AXIS cameras in H.264 anymore. Well, unless we want to run them using QuickTime which looks like crap and doesn't have the features. I was hoping we could use Chrome, but obviously not! Dang. Firefox already only works with QuickTime so where can I turn to open our cameras using AMC?

Just wait until you go to Windows 10 and get the Edge browser from MSFT, you'll be wishing for IE11...

Lucekly you can open it in IE11 as well. It's an option in Edge.

Do you know any VMS or camera product streaming live H264/MPEG4 to a browser in a HTML5 / javascript manner (without plugins), that works the same way at least in Firefox and Chrome?

Every solution that I know is still using Flash, Silverlight, VLC plugin, ActiveX, or a method that doesn't fit both browsers.

This solution is transcoding video to JPEG snapshots. This is not H264/MPEG4 live streaming. The are a lot of cons for this approach: server will have to decode and re-encode all video (very CPU intensive, not scalable), image quality and bandwidth requirements will be worse, etc.

You can check yourself using Chrome developer tools:

Jpeg snapshots in Chrome

Tested in Chrome version 45 and Firefox version 40.

Wagner, yes, agree with your analysis. From what I know, all the large brand VMSes are transcoding first to MJPEG (which is resource intensive and requires adding in another VMS component).

I do not know of a VMS that sends 'straight' H.264 video to web clients. I am sure it's going to happen at some point and there may be very well be a few who do that but it's certainly uncommon, at best, now.

Good call, Wagner!

It should be possible to stream h.264 directly to an html 5 page using DASH with MSE, no?

I don't know much about DASH/MSE, but looks like youtube is using it to live stream h264 (pure HTML solution). Tested with Chrome and Firefox, watching live TV from some public channels.

Related news: http://www.theverge.com/2015/9/2/9252753/alliance-for-open-media-next-generation-codec

My pain has been with updates on IE. I usually only need the browser for that part of camera config that isn't handled by the VMS (Genetec). Of the brands I use, Panasonic cameras (eg. WV-SC588) have been the most difficult to bust into. I don't even care about an image anymore, I just want to control all the settings. Compatibility view ... install viewer .... wait ... click .... wait ....finally ... maybe ... Thoughts?

Panasonic has been the most frustrating and archaic IP camera web interface I've ever used. So, yes, you are not alone there. Not sure what to say outside of hoping that one day they modernize their camera web interface.

Thanks, John, the solidarity is nice. At least I'm not losing my mind, then.

Panasonic has been the most frustrating and archaic IP camera web interface I've ever used.

My confidence is high that you have never had to use the Toshiba web interface. ;)

Toshiba makes IP cameras...

I know they do, I just rarely hear someone use them.

You're in luck, here's a link to a Toshiba's live public camera lab. I actually had the PTZ at the bottom going pretty nicely.

Question, do many manufacturers host their cameras with open access for all? I remember Axis and Avigilon having something, but it seems like a good idea, (if your stuff works).

Have it reset to default every hour, and let everybody have at it.

White-hat hacker bots might change your channel descriptions trying to warn you, but who cares?

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

ONVIF Video Surveillance Tutorial on Jan 29, 2019
ONVIF is well known within the surveillance industry as an interface to connect IP cameras and VMS systems. However, new users may find it...
Verkada Cloud VMS/Cameras Tested on May 02, 2019
Verkada is arguably the most ambitious video surveillance startup in many years. The company is developing their own cameras, their own VMS, their...
Salient CompleteView 20/20 VMS Tested on Feb 27, 2019
In IPVM's last test of Salient 3 years ago, we found various problems and deficiencies. Now, Salient says their new CompleteView 20/20 "unified...
Genetec Security Center 5.8 Tested on Mar 19, 2019
Genetec has released Version 5.8. This comes after a wait of more than a year that caused frustrations for many Genetec partners. Our previous...
Milestone XProtect 2019 R1 Tested on May 15, 2019
For the past few years, Milestone has released quarterly software updates XProtect VMS platform. What is new and how much impact do the updates...
Camera Configuration Manager Shootout - Avigilon, Axis, Bosch, Dahua, Hanwha, Hikvision on May 01, 2019
Which camera manufacturer has the best management tool? We tested 6 manufacturers - Avigilon, Axis, Bosch, Dahua, Hanwha, Hikvision to find...
IndigoVision Control Center VMS Tested on May 30, 2019
IPVM's last test of IndigoVision's VMS was in 2010, which found enterprise VMS features and a simple client interface. but no 3rd party camera...
Network Optix NxWitness 4.0 Tested on Oct 10, 2019
Network Optix released Nx Witness 4.0, proclaiming new features like a deep learning analytics metadata SDK, increased H.265 support, and UX...
Milestone XProtect 2019 R3 'Centralized Search' Tested on Oct 30, 2019
Milestone has had problems over the last few years releasing significant new software. Now, in XProtect 2019 R3, Milestone is touting "one search...
IP Camera Browser Support: Who's Broken / Who Works on Dec 10, 2019
For many years, IP cameras depended on ActiveX control, whose security flaws have been known for more than a decade. The good news is that this is...

Most Recent Industry Reports

Breaking Into A Facility Using Canned Air Tested on Jan 28, 2020
Access control is supposed to make doors more secure, but a $5 can of compressed air may defeat it. With no special training, intruders can...
ROG Security - Cloud AI For Remote Monitoring on Jan 28, 2020
ROG Security is offering cloud-based AI analytics to remote guard companies, by touting having "nothing to install" to "add virtual guards." We...
Brivo Business Profile 2020 on Jan 27, 2020
Brivo has been doing cloud access for more than 20 years. Is the 2020s the decade that cloud access becomes the norm? CEO Steve Van Till recently...
Favorite VMS / NVR Manufacturers 2020 on Jan 27, 2020
In 2018, a new winner emerged and a former top choice declined. Now, there is a new #1, a new top 5 finisher and 2 major VMSes in decline. Our...
"Hikvision Football Arena" Lithuania Causes Controversy on Jan 24, 2020
Controversy has arisen in Lithuania over Hikvision becoming a soccer team's top sponsor and gaining naming rights to their arena, with one local MP...
Axis and Genetec Drop IFSEC 2020 on Jan 23, 2020
Two of the best-known video surveillance manufacturers are dropping IFSEC International 2020, joining Milestone who dropped IFSEC in 2019. The...
Multipoint Door Lock Tutorial on Jan 23, 2020
Despite widespread use, locked doors are notoriously weak at stopping entry, and thousands can be misspent on locks that leave doors quite...
Avigilon Shifts Cloud Strategy - Merges Blue and ACC on Jan 23, 2020
Avigilon is shifting its cloud strategy, phasing out its Blue web-managed surveillance platform as a stand-alone brand and merging it with its ACC...
Verkada Paying $100 For Referrals Just To Demo on Jan 22, 2020
Some companies pay for referrals when the referral becomes a customer. Verkada is taking it to the next level - paying $100 referrals fees simply...
Camera Analytics Shootout 2020 - Avigilon, Axis, Bosch, Dahua, Hanwha, Hikvision, Uniview, Vivotek on Jan 22, 2020
Analytics are hot again, thanks to a slew of AI-powered cameras, but whose analytics really work? And how do these new smart cameras compare to top...