Suffering Criticism, Hikvision Keeps Insecure Online Service Up [Now Down]
By: John Honovich, Published on Jan 03, 2017
Read this IPVM report for free.
This article is part of IPVM's 6,367 reports, 855 tests and is only available to members. To get a one-time preview of our work, enter your work email to access the full article.
Related Reports
.jpg)
Hikvision AI Training In Xinjiang Paramilitary Base, Now Denies
on Mar 10, 2020
Hikvision has been listing AI training in a Xinjiang paramilitary base that bans Uyghurs from participating. However, Hikvision is now denying it...
Verkada Notification Outage
on Dec 12, 2019
Verkada is suffering an event notification outage and analytic search failures.
Inside, we examine what the issues are, what Verkada told IPVM...
Hikvision Silent on "Bad Architectural Practices" Cybersecurity Report
on Nov 14, 2018
A 'significant vulnerability was found in Hikvision cameras' by VDOO, a startup cybersecurity specialist. Hikvision has fixed the specific...
Chinese Government Blocks IPVM
on Oct 22, 2018
IPVM has been blocked by the Chinese government without any notice or explanation. This means IPVM.com is no longer officially accessible anywhere...
Hikvision Drops ASIS / GSX, Ex-Dahua ISS CMO Takes Advantage
on Aug 02, 2018
The fallout of the Ban Bill has begun and it is hurting the already beleaguered ASIS GSX show next month.
Mega-exhibitor Hikvision has now...
Hikvision Upgrade Breaks ONVIF VMS Integration
on Oct 31, 2017
Hikvision IP cameras using ONVIF for VMS integration will break when upgrading to Hikvision new 5.5 firmware, IPVM testing has verified.
This...
Fortune 500 Company Bars Dahua and Hikvision
on Aug 30, 2017
A Fortune 500 company has barred Dahua and Hikvision cameras from a large RFP due to cyber security concerns, IPVM has confirmed with the...
ASIS 2017 Cuts Day 3 Exhibits to 3 Hours
on Jun 14, 2017
The 3rd day of major trade shows are always the worst attended.
And with shows with poor traffic, like ASIS over the past few years, day 3 has...
Hikvision Barred From US City Housing Authority Bid
on Feb 14, 2017
A US city's housing authority has barred Hikvision products from their bid, due to 'increasing security concerns.'
In the past few...
Hikvision Discontinuing Online Service
on Dec 12, 2016
Hikvision has declared it will discontinue its Hikvision online service, just days after IPVM's Hikvision Cloud Security Vulnerability Uncovered...
Most Recent Industry Reports
Verkada: "IPVM Should Never Be Your Source of News"
on Jul 02, 2020
Verkada was unhappy with IPVM's recent coverage declaring that reading IPVM is 'not a good look' and that 'IPVM should never be your source of...
Vintra Presents FulcrumAI Face Recognition
on Jul 02, 2020
Vintra presented its FulcrumAI face recognition and mask detection offering at the May 2020 IPVM Startups show.
Inside this report:
A...
Uniview Wrist Temperature Reader Tested
on Jul 02, 2020
Uniview is promoting measuring wrist temperatures whereas most others are just offering forehead or inner canthus measurements. But how well does...
Dahua USA Admits Thermal Solutions "Qualify As Medical Devices"
on Jul 02, 2020
Dahua USA has issued a press release admitting a controversial point in the industry but an obvious one to the US FDA, that the thermal temperature...
Access Control Online Show - July 2020 - With 40+ Manufacturers - Register Now
on Jul 01, 2020
IPVM is excited to announce our July 2020 Access Control Show. With 40+ companies presenting across 4 days, this is a unique opportunity to hear...
Hanwha Face Mask Detection Tested
on Jul 01, 2020
Face mask detection or, more specifically lack-of-face-mask detection, is an expanding offering in the midst of coronavirus. Hanwha in partnership...
UK Government Says Fever Cameras "Unsuitable"
on Jul 01, 2020
The UK government's medical device regulator, MHRA, told IPVM that fever-seeking thermal cameras are "unsuitable for this purpose" and recommends...
Camera Course Summer 2020
on Jun 30, 2020
This is the only independent surveillance camera course, based on in-depth product and technology testing.
Lots of manufacturer training...
Worst Over But Integrators Still Dealing With Coronavirus Problems (June Statistics)
on Jun 30, 2020
While numbers of integrators very impacted by Coronavirus continue to drop, most are still moderately dealing with the pandemic's problems, June...
FLIR Screen-EST Screening Software Tested
on Jun 30, 2020
In our FLIR A Series Test, the cameras' biggest drawback was their lack of face detection, requiring manual adjustment when screening each...
Comments (15)
Ethan Ace
In new press releases, Hikvision has given new details on their new Hik-Connect platform. See the North America and Global releases. The releases are mainly the same, but:
Both releases state that the new Hik-Connect app is coming in 4-7 days, awaiting App Store and Play Store approval:
The new Hik-Connect web interface looks like a stripped down EZVIZ device management page:
But there is no actual cloud access, either to settings or live/playback. Instead, clicking on the IP/Port No. opens the device's IP address. Port forwarding is still required.
You can push UPnP/port settings to the device via settings, but this is the only configuration available.
We'll take a look at things again when the mobile app is released.
Create New Topic
Undisclosed #1
With all my due respect,
How many years it took IPVM to have "S" at the end of http?
5-7?
Create New Topic
Jeffrey Hinckley
01/04/17 10:28am
It took me a couple hours to migrate the systems we had (maybe 20) on this to no-ip, followed by deletion from the hikvision website. This was followed up with new ddns address and instructions to the customers.
This would be a better longterm plan since you can also run the no-ip client on other systems and/or routers/firewalls. Cost is about a buck a year per host from a company whos core offering is secure supported ddns service. Kind of a no brainer.
I tested no-ip and dyndns and chose no-ip because I could assign passwords to groups of hosts (using random password generator). With dyndns, you could assign a long code-key but Hikvision would not accept this many characters in the password field.
To me, this is common sense to make this switch. Just make sure you have a group allocation and system naming scheme before you do this. I used a password generator with all characters 8 in length. (username is "group":"siteusername").
I find it hard to believe that there is such commotion over a service offered for convenience (which no other vendors offered), but should have said "use at your own risk". Now that I look back at it, it was pure laziness on our part not to use a reputable ddns source, especially with all the other systems and firewalls we have deployed (you should be using it on the router/firewall, anyway).
Create New Topic
Undisclosed Integrator #2
Hi
Isn't that what a corporation should do? Listen to its customers and react in kind? They made a decision based on the data available. Data proved to be wrong. Reverse course. That we are so much talking about this means that this is a company to take even more seriously. Not only are they listening, they have the wherewithal to act swiftly upon our desires and perhaps needs. They should be commanded.
Now frankly, we have always made sure of disabling this "feature" and still do heavy firewalling on corporate networks. For the most part we block everything except what's necessary for video recording, camera management and other associated data.
This is somewhat similar to the path taken by Microsoft which for the longest time weren't listening... They are now making great products based on customer feedback (read criticism).. OTOH Apple is moving in a different direction...They removed the so-basic earphone jack from the iPhone and changed not much inthe Macbook except to add a RIDICULOUS touch bar . Meanwhile Micro$oft cannot keep up with the demand for the Ultimate Laptop:The Surface which is not a laptop but a tablet .... or is it a laptop :) Sorry to be OT
if anything this will add to Hikvision bottom-line and sales.
Create New Topic
Undisclosed Integrator #2
John
Again this is what leaders face everyday. Microsoft is the most hacked OS because it is the overwhelming leader.. Hik is criticized for good reasons among these that they're the leader in the industry by a very large margin. The vulnerabilities are real but so are those from many of their competitors Axis especially another leader which faces less scrutiny at this point.
The entire field of IP-based surveillance and security systems needs to take a deep breath and consider cybersecurity as part of what we do. Not a separate field to be handled-off casually to another party. We are whether we admit it or not responsible for the well being and correct behavior of the systems we put in place. While this creates a new level of responsibility and complexity it also will drive more revenues. The Internet Of Things is upon us. This new road will bring new threats. For us Integrator in IP Surveillance it is both an opportunity and a threat. I personally tend to see it as a much needed opportunity when prices of hardware is falling so precipitously. Hik is one small driver in this: The real culprit is Moore's Law. Silicon has been growing cheaper and better by the nanosecond... It wasn't 3 years ago that a 1080p was the TOL now 4 MP are <$200 with WDR....
Create New Topic
John Honovich
Update January 5th, Hik-online.com is now shut down. The site is up and one can login but when doing so, it just displays the discontinuation notice with no other options - e.g., no ability to manage devices or check status. In addition, new devices cannot be added, despite the notice saying that this could be done through February 16th.
Create New Topic
John Scanlan
We confirmed with Hikvision technical support that they will help with retrieving device lists if you contact them with your credentials: URL / username / password.
They also recommended using 3rd party services listed on the DNS tab: noip, peanuthull, or dyndns.
Create New Topic
Undisclosed Manufacturer #3
I guess the ADI flyer is now incorrect - as they do not have a free DDNS service included...
Create New Topic