Why Surveillance Pros Rationally Won't Care About The Massive Dahua Mirai Attack

Author: Brian Karas, Published on Oct 05, 2016

The physical security industry has been fairly indifferent to cyber security (e.g., see the Cyber Security For Video Surveillance Study).

Here, we explain why most video surveillance integrators will not care about the massive Dahua attack, even if they understand it, and its effects.

We look at what led to the existence of Mirai, and why they would rationally be indifferent.

*** ******** ******** ******** *** **** ****** *********** ** ***** security (*.*., *** ******** ******** *** ***** ************ *****).

****, ** ******* *** **** ***** ************ *********** **** *** care ***** *** ******* ***** ******, **** ** **** ********** it, *** *** *******.

** **** ** **** *** ** *** ********* ** *****, and *** **** ***** ********** ** ***********.

[***************]

Mirai ****** *** ** ************ ********* *** **** *************

***** ******** *** ******* ********** ** ****** ** ***** ****** scenario. *** ***** ** ** *** **** ** *** ************, Dahua, ******** * ************* *** ******* ** ****** ****** ** their ******* **** ** *** *** *** **** ** ******* it. *** ****** ** ** *** **** ** ********** ******* default ********* *********, ****** ** ********** **** *** ********* ** gain ****** **** **** ******* ** ******.

A **** ******** **** *** **** *** ****

***** ** * ********, ***** *** ********* ** *** **** for *** *** ********, *** ** **** *** "****" *** host *** ****** ** **********. *******, ** ****** *** ****** relatively ********** ** *** *** ****, ***** ******** ** ** operate. **** ** *** **** ** *** ****** **** ** the ******** ******** **** *** **** **** ********* ***** *****, it **** *** ****** ***** ********.

Mirai ** *** ***** ***

**** ******* **** ***** ******** ****, ****** ****:

  • ****** *********
  • ****** **** ****
  • **** ******* ****
  • ****** ******** *******/********** ** ****
  • *** ****

***** ** *** ****** ** *** *** ** **** ***********, it **** ******** ******* ** ****** ******* ******* ***** ******** sites.

***** ******** ** ***** ** *** ****** *** ****** ******* or ******, **** ** *** ***** ****** *** ********* *** outrage *** *******, ***** *** ****** ***** ******** *** **** on ******* ******* ******* ** ** *********.

Fixes **** *****

******** ********* *** ********** *** ******** *** ***** **** *** (from *** ***** ***********) ******* **** **** ** ** ******* that *** *********** ***** **** ** ***, *** **** ***** customers *** ****** ** **** ** *** ***. ****, *** Mirai ****** ** ****** ** ******** ** ***** *** ******, or **** *****, ****** ***** ** **** ***** ****** **** causes ****** ** ******** ****** ********* ** *** **.

Why *** ****** ****

******** ******* ****** **** ****** *** ******** ***** **** *** installed, *** *** ************** *** ******* ******** (** ******) ** risk. ** ** ******** *** **** ** ****** ******* ******, and *** *** ****** ** ********* *****. **** *** **** proposed ** *** **** **** ******* ******'* **** ******* ******** on *** ********, *** *** *****-******* ****** ******* ** ***** is ******* *** ******* *** **** ******* **********. ********* ******* themselves ******** ** ***** *** ******* ***** ******** ****** ** infected *** ***** ***** *********** *** ********** * "******" ******.

Vote - ** *** ****?

Comments (18)

Undisclosed Integrator #1

10/05/16 02:22pm

** **** ********* ***** ********** *************** ** *** ****** ******* the ******* ** ***** **** ** ********** ******** **** ***** to **** ****. *** ***** ** ****** **** ****, ***#*, personal ***********, *** ***** ***** **** **** ******* ** *** past *** *****.

*** *** **** ** **** **** **** *** ***** *** radar *** ****** ********. ***** *****'* ** ******* *******, *** (or ** ***) **** ****** *** ****** ** ******* *** one.

* ****** ** ******** ** *** ****** ****** **:

*. **** *** **** ***** ** ******* ** ****** ********?

*. **** *** ****** ******** ***** ***** *** ** ********?

Undisclosed Integrator #2

10/05/16 02:36pm

*** ****** ** *********** *** ****** *** ***** *****? *** customer, *** **********, ** *** ***********? *** ************ *** ******* new ******** *** **** *****'* ******** *** *** ***** ***** it's **** *********. *** *** ********** ** ***** * *** of ***** ** **** * ***** ** *** ***** *** upgrade *** ********.

***** *** *** ***** ******* *** ** ***** ** **** for ************* ** ***** ******** *** **** *** ***** ******* to ******** *** ********* ******* ** **** **** **** ** integrator ***** ********** ******* *******.

Robert Shih

SavvyTech Security | In reply to Undisclosed Integrator #2 | 10/05/16 03:09pm

********, ******** ****** ******* *** **** ****** * ***** *** set ** ******** *****. ******* ***** **** ** ****** **** mechanism. ** ******* **** *** ******, ****'* *** ***** ********** then.

Undisclosed Integrator #2

In reply to Robert Shih | 10/05/16 04:13pm

**** ***** ** ****, *** ** **** ********* ** ****** for ****** ******** ****** ***** *** ** **** ****** **** term. ***** ***** **** ****** ******, *** ** **** ** the ***** *** ******* **** *** ****** ******* ****** *********** back ** *** ************ *******.

** ****** **** *** ** ** *********** ******** *** *********** to ****** *** ********* ** ************* ***** **** **** ***** with **.

** *** ************* ***'* **** *** ********* ** ** ****, then **** ****** **** **** ***** ***** ******** ******* ** create * ********.

*** **** ** ******** ******** ******** ** ******** ******* ** with ******** ****** **** *****'* **** ***** **** ****.

Robert Shih

SavvyTech Security | In reply to Undisclosed Integrator #2 | 10/05/16 04:39pm

***** **** *** ******* *** **** ***** ********, ******* ****'** had ******** ********* ***** ******** ******* ***** ****** ** ***-**** devices *** ****** ******** *******, **** ***'* **** **** ** with **** ****** ** ***** ** **.

***** ******* ** *** ** ****** *** ********; ************, **** could ****** ******* **** * ********* ********* ** *** *** point.

******* ** ***, ** *** ******** **** *** ***, *** in *** **** *****, ***** ** ** **** ******** **** can *** ********** *** ***** ******* **** ***** *** ***. I **** *** **** ** ****-******, ********* ****** *********** *** camera ********, *** * ***** *** **** ** *** ********* updates ****** **** ** ****** ************.

* ******** **** ****** **** ****** *** * ******* ********** sponsored ******* (******* ********* *******) ** *** **** ** * backdoor ** ********* *** ********* ** * *********** *****. ** any ******* ***** ******** ****** ****** **** *** ****, ********* will ********* *** **** ** ***** ********* *** ****** *** trend, ********** **** ** ** ** ********* *** *******.

** **** ******* * **.

Undisclosed Integrator #1

In reply to Robert Shih | 10/05/16 10:25pm

* *** *** **** ***** ** **** *******. ** ****** comes **** ** *** ********* *** *** ** *** ************ being **** ** ******** **** *******.

************ ****** ***** *********** ***** ****** *** ** *** ******* ** *** ******** pushes ***** *** ** * **** ****. ** ***** **** point * ***** **** **** ** *** * ***** ****. Brian ***** ****** *** ***** ** **** ****** **** ******* signing ***** **** ******* ****. ** ******* ** ******* **** would **** ****** **** ** ** *** ************ ******* *** update?

******* ******* ** ********** ****** ******* **** ******* * *** ** ******* ******* ** ****** **** ******* ********** ****** ***** ** startup.

Thumbnail brk1

Brian Karas

IPVM | In reply to Undisclosed Integrator #1 | 10/05/16 11:05pm

******* ******* ******* (** **** ********) **** *** ******** ********** from *** ************, *** *** *** **** ******** **** ** altered. ** **** *** ******* ** ***** ***** *** ******** is ********* ******** ** *** ************ (****** ************ ** ************). In *******, *** **** ** **** ******** ***** ** *** manufacturer *****.

Thumbnail brk1

Brian Karas

IPVM | In reply to Robert Shih | 10/05/16 05:03pm

*** *** ** ******** **** ** **** ******/********* ********, ***** is ** ******** **** *** **** ****** *** ***** * while (****** *** **** ****** ** ******** *******).

Robert Shih

SavvyTech Security | In reply to Brian Karas | 10/05/16 06:15pm

***** *** **** **** ** *** **** ** **** ****** if ** *** *** ***** ** **, *** *** ******** holds ****. ** ****** *** **** ** *** ** ****** this, ***** *** ***** *** ***** **** *** **** ********* of **** ** *** ******* ****** ****** ***** ****** *************.

*** ** ******, *'** *********, ******* ********** + *********.

Andrew Hogendijk

In reply to Robert Shih | 10/18/16 12:56am

*** ***** ** ***** ** ******* ** *** **** ** security, **** *** ****-***** *** ***** ******. ***** ** **** source ** **** ******** **** ********** *** ********* ******* (*** the **) **** ******** **** ** *** *******, *** **** not ******** ** **** ***** ** ***** *** ***** ** a ***** ******** ******** ** *** ************* ********.

*** *******, ********* *** ******** ***** ** *** ********* ** computer. *** *** *** ******** ***** ************ *** **** **** on ** ** *** *** *********** **** **** **** ** thing, ***, *** **** ** *** **** ********* ***, *** cannot **** *** ** **** ******* * ******** ****** **** provided ** *** ** *** **** *************. ** ***** *** OS ***** ** **** ******, *** *** ***** **** **** is ** **** ****** **** - **** ******** **** ** actually *******? **** ** **** * ********? *** ** **** tell? **** ***** * '*******' ******* **** ********* ****** ********?

** ***** *** ****** *** ***** ** **** **** * hardware ***** ** **** - *** ********** ** *** *** features, *** **** *** ****** ******** **** **** ***** *** particular ****** ****. ****** *** *** ***** *** ************ *** are ******* ***** *** ***** ** ** *** ****** ****.

** ** ** **** ** ******** ***** ******* *** ******* both **-**-**** *** *********** ******* ******** ************** ******** * *******-**-***** approach. **** ** *** ********* **** *** ********** ******** ******** has ********* ******* ** *** ** ******** *** ** * separate *** *********** ********. ***** ** ** '*****-***' ** ****** bullet ** ****** **** *************.

*** **** ***** *** * *** ***** ** ** ****** an ** ***** ****** ****** ** ** **** ** ********* entirely **** *** ******** *** ******** ****. *** **** ****** it ** ** ** ******** ** **** ***.

** ** *** *** *** ******* ** ****** **** **** firmware *****. *** * ***** ***** ********** *******, ****** ******* and **** **********. **** *** ****** ** ******** - *** far ** *** ** ** ********** ******** ****?

Undisclosed #3

In reply to Andrew Hogendijk | 10/18/16 01:03am

...*** *** ***** **** ***** **** ****** ****...

*** ******* * *** ** ******.

*******:*** ********* *************

Andrew Hogendijk

In reply to Undisclosed #3 | 10/18/16 01:44am

*******! ** **** ***** *** ***** ** ******** *** ********* and ** ****** ** ***** *** ******* *********** *********.

Undisclosed Integrator #1

In reply to Undisclosed Integrator #2 | 10/05/16 10:16pm

"*** ****** ** *********** *** ****** *** ***** *****? *** customer, *** **********, ** *** ************?"

**** ** *** **** ********. ***** ***, *** ****** ***** to ** "******". **'* **** ** *** ***, ***** *** points **** ***** ** ****** **** **** ****.

** ** **********: * **** *** ************ ****** ****** ****** in ******* *** ******** ** ***** ********. ******* ****, **** should ****** ** ***** ********** *** *** ** **** ** fix **.

** ** ************: ** ***'* ***** ***** ******** ****. *** integrator ****** ****** ***** ******* ** ******* ******** ********** **** creating ** ****** ******. ** *** **** ** ** *** part.

** ** *** ****: *** ****'* *** ********** ********* * purchase * ********* ******* **** **** ******** ********? *** *** I *** ***** * **** *********** ** *** ********** ** lieu ** ******* ********** ******* ***** *?

Thumbnail images

Marco Sanchez

10/05/16 04:32pm

*'* ******* ** ** *** ***** *** ***** *** ***** no *** **** *** ******** **? **** *******.

Robert Shih

SavvyTech Security | In reply to Marco Sanchez | 10/05/16 06:29pm

******* ********, ******* ** ***** ********** **** ******** ******* ** all **** *** ***** *** ** ****** ********** ******, *** in *** *** **** **** ***** **** ******* ** ************* needing ******* ******** *** ******* ********** **** ***** ******** ********, the ********** **** ** **** **** ******* *** ****** ** well.

******* ********** *** ****** *** *** ** ******** *** ******** that *** *** ***** ** *** *****. ************* *** **** release **** **** *******, *** ************** ** *** ***. ********** about **** ****** ****** ** ********** ****** ********* **********. ***** took *** **** *** *** **** ***** ********* ** ******* ease ** *****, **************, *** ***. **** ***** ***** ******** were *** ****** ***** ** ***** ** ***** ********. *** the ******* *** ******* ** ***** ********* ** ********* ** all ******.

*** *******, **** ********** ***** *** **'* ***** *** ** actively ***** *** ******** ******* ** ******* *** ************ ************, but **'* *** ***** ****** ** **** ** ************* *** his ***** ******** ********. ** *****'* **** ***** ** ** anyone **** ******* *** ****. ** ***** **** *** ******* that *** ******* *** ** ** *******. *** **** **** he ****** ****** ** *** **** *** ******** ******* ** wanted **** ***** ******** ** *** ******.

*********, *** ***, **'* ******** ** ***** *** ***'* *** the *** **** **. ***** *** ******.

***, * ***** ***, *** * ***** ********** **.

Thumbnail 395fbc4

Ricardo Souza

IndigoVision Ltd | IPVMU Certified | 10/13/16 07:27pm

****, *** **** *'** **** **** * ***** **** ** Software *********** * *** ** *** ****, ******* ****** ***'* care **** ***** ******** ** ** *** ******** *********** ***** they *** *** ** * *** ********.

Undisclosed #3

In reply to Ricardo Souza | 10/14/16 03:33am

*** ** **** **** **** **** **** **** *****, ***** the ******* ***** ****** *** *** *********** ********, ** ** disaster *** *** ****** ** *** ******. *** ******* **** go **** ** **** ** ****** ******* **** ********* ****, until **** *** ****** ** *** **** **** ******.

Thumbnail inpicture gert molkens k2

Gert Molkens

IPVMU Certified | 10/14/16 05:11am

*** ***'* ** **** * ***** ********** ****** *** ** manage ********* ******'* *** ***** ******** *******? *'* ******** * system **** ** ** ****** ** **** *** ******* **** Aerohove, **** ********, *** ***

*** *** ****** ** **** ****** ********* ** ** ** it ******** ** *** **** *** ******* **'* *** ***** time ** ** **.

**** * ****** ** **** **** **** *********** ** ****** new ******** *** ** **** *************

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

RealNetworks Free School Facial Recognition on Aug 03, 2018
The company that created RealPlayer is moving beyond media delivery and into the security space with a new facial recognition platform they have...
Sony Gen 5 IP Cameras Critical Vulnerabilities on Jul 26, 2018
Cybersecurity vulnerabilities remain prevalent in video surveillance devices. Now Talos researchers have discovered multiple vulnerabilities in...
Improved Security And Surveillance Bidding - 2018 MasterFormat Divisions Examined) on Jul 19, 2018
Navigating the world of system specifications and bidding work can be complex and confusing, but a standard format exists, and understanding it...
July 2018 IP Networking Course on Jul 12, 2018
Registration is closed. This is the only networking course designed specifically for video surveillance professionals.  Lots of network training...
4 Most Difficult Camera Installs (Statistics) on Jul 12, 2018
Heavy housings, cumbersome brackets, heavy ladders required, and tricky field of view requirements will cause difficulties no matter the camera...
Most Wanted Improvements In Manufacturer Technical Support (Statistics) on Jun 21, 2018
5 key areas of improvement and 1 clear wanted support feature were voiced by 140+ integrator responses to: What improvement in manufacturer...
Hikvision Corrects False Cybersecurity Announcement on Jun 18, 2018
Hikvision has corrected a false cybersecurity announcement that claimed a British government-sponsored program endorsed the cybersecurity of...
The Dumb Ones: PSA's Bozeman On Cybersecurity on Jun 15, 2018
The smart ones are the hundred people who flew to Denver and spent $500+ on a 1.5-day conference featuring Dahua as a 'cyber responsible partner',...
Debating Relevance of China Hacking US Navy Plans on Jun 11, 2018
"Chinese government hackers have compromised the computers of a Navy contractor, stealing massive amounts of highly sensitive data related to...
Worst Features for Camera Installation (Statistics) on Jun 07, 2018
4 clear worst features for installing were identified by 140+ integrator respondents to: What feature(s) make a camera hard to install? The...

Most Recent Industry Reports

SimpliSafe Violating California, Florida, and Texas Licensing Laws on Aug 14, 2018
IPVM has verified that DIY security system provider SimpliSafe, founded in 2006 and acquired in June of 2018 at a billion dollar valuation, is...
Cut Milestone Licensing Costs 80% By Using Hikvision and Dahua NVRs (Tested) on Aug 13, 2018
Enterprise VMS licensing can be quite expensive, with $200 or more per channel common, meaning a 100 camera system can cost $20,000 in VMS...
Nortek Sues SDS, Battle Over Unpaid Bill and Cancelled Lines on Aug 13, 2018
Nortek and SDS legal battle continues. As IPVM reported, SDS sued Nortek alleging bribery and antitrust violation. However, Wave fired back at SDS,...
Uniview Intrusion Analytics and VMD Tested on Aug 13, 2018
IPVM's IP Camera Analytics Shootout featuring Avigilon, Axis, Bosch, Dahua, Hanwha, Hikvision created some ill will with a Uniview distributor who...
ADT Employees Protest ADT CEO on Aug 10, 2018
So many ADT employees were so upset with ADT's CEO speech reported on by IPVM, that ADT's CEO was forced to send a mass email to employees to...
Axis / Avigilon Legal Battle Rises on Aug 09, 2018
In what is shaping up to be high-powered, will-not-back-down battle, Axis and Avigilon are squaring off in multiple legal contests. In 2017, IPVM...
Camera Focusing Tutorial on Aug 09, 2018
A camera's focus is fundamental to quality imaging. Mistakes can cause important problems. In this guide, we explain focus issues and proper...
Dahua Ban Response: NOT Chinese Government Owned on Aug 08, 2018
Dahua has responded to the US Congress passing a US government ban on Dahua and Hikvision's products. While Dahua offered the now standard...
Bad Move: ADT Markets Rival Amazon on Aug 08, 2018
Amazon may be lining up ADT as its next victim but ADT is happy to promote Amazon. Amazon has made major moves recently, including acquiring...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact