OEMs, Dump Dahua

By: John Honovich, Published on Mar 08, 2017

OEMs, get smart and dump Dahua.

Dahua OEMs to many companies including some big brands (e.g. FLIR, Honeywell and Tyco).

Dahua has proven to be a terrible decision:

  • The backdoor
  • The unfixed backdoor with terrible communication
  • Dahua competing against its own OEM partners

The Backdoor

Dahua's backdoor is simply the coup de grace.

Dahua has shown that it does not care about cybersecurity in how it has handled past events, e.g. a few months ago with Mirai. But the OEMs, especially the bigger publicly traded companies have significant legal exposure in an environment where cyber awareness and concerns are increasing rapidly.

The backdoor creates a special problem, since it provides such a simple way for hackers to target their products.

Terrible Communication

The icing on the proverbial cake is that Dahua has been terrible communicating with its OEMs, as numerous partners have confirmed to IPVM. The OEM partners have essentially been kept in the dark, with no clarity about which of their devices are impacted or when Dahua will release a fix.

Get Notified of Video Surveillance Breaking News
Get Notified of Video Surveillance Breaking News

Granted, Dahua is so dysfunctional that are struggling to simply deal with it on their own but the OEMs partners are handcuffed by Dahua's inability to solve nor even communicate their (lack of) progress.

Competing Against Partners

The classic OEM model was meant to combine a company with an established brand and channel infrastructure (i.e., OEM) with a company specializing in manufacturing but without direct sales (e.g., Dahua and Hikvision). Of course, both Dahua and Hikvision want to have it both ways.

China Dahua just a few months ago, claimed to be a 'California Treasure' to push its own sales, which surely many OEMs and Californians found disconcerting. 

Dahua has been ramping up its direct branded sales and now aims for 200 employees in the US to compete against its OEMs. Granted this backdoor and the problems that follow will impede Dahua's ambitions but it is illogical and destructive for an OEM to be competing head to head against its own supplier.

Software Not Appreciated

The China mentality, certainly in this industry, is hardware is valuable and software is just a necessary evil given away for free to sell hardware.

Unfortunately, cyber security increases the value of well developed, backdoor-free, software.

If Dahua did not intentionally put this backdoor in, as they claim, the existence of it plus their response should show Dahua's problems in developing software.

OEM Future

Video surveillance, unfortunately for OEMs, is a software based, IP networked product and, as such, needs to be treated with the care of professional software development, not simply finding a Chinese hardware manufacturer who will sell for cheap and toss in whatever software they scrounge together.

OEMs, indeed, should seriously consider only offering hardware with their own (or properly vetted) software so they can ensure the quality and integrity of it.

Dahua Future

As long as Dahua can ride the China economic boom (see their $550 million China government project as an example), they will continue to make money but they have shown repeatedly, capped by the backdoor, that they make a poor partner that deserves the door.

Comments (39) : Members only. Login. or Join.

Related Reports

Milesight Company Profile on Jan 22, 2019
Milesight Technology, a Chinese company building an International branded business, says they are slowly building their presence through a series...
Top Hikvision Proponent Nelly's "GoSwift" Elsewhere on May 03, 2019
Sean Nelson [link no longer available] of Nelly's Security has made a name for himself and his company as a proponent of Hikvision, such as this...
Honeywell Speaks On NDAA Ban, New Non-Banned Cameras and Cybersecurity on Aug 06, 2019
For years, Honeywell has depended on Dahua, a company with a poor cybersecurity track record and now banned by the US NDAA, for the development and...
Hikvision OEM Directory on Aug 13, 2019
The Chinese government-owned and US-government banned Hikvision has become the world's largest video surveillance manufacturer and generally hidden...
Dahua OEM Directory on Aug 16, 2019
US Government banned Dahua OEMs for dozens of companies. The following directory includes 40+ of those companies with a graphic and links to...
Uniview OEM Directory on Sep 11, 2019
This directory lists 20+ companies that OEM products from Uniview, with a graphic and links to company websites below. It does not cover all...
3 Weeks Later, Honeywell Still Cannot Say Whether They Are Vulnerable To Dahua Wiretapping [Now Admits] on Aug 27, 2019
The Dahua wiretapping vulnerability and Dahua's decision to delay disclosing it until IPVM inquired underscored problems with cybersecurity and...
US Army Base To Buy Banned Honeywell Surveillance on Sep 17, 2019
The U.S. Army's Fort Gordon, home to their Cyber Center of Excellence, has issued a solicitation to purchase Honeywell products that are US...
Interlogix Shutting Down on Sep 20, 2019
Interlogix is shutting down, as UTC has confirmed to IPVM in a statement about their "plans to wind down" the once leading brand. Inside this...
Hikvision USA Fights LTS on Nov 04, 2019
Hikvision's USA subsidiary is fighting with LTS, having recently quietly dropped LTS as an authorized distributor amidst ongoing face-offs between...

Most Recent Industry Reports

Every VMS Will Become a VSaaS on Feb 21, 2020
VMS is ending. Soon every VMS will be a VSaaS. Competitive dynamics will be redrawn. What does this mean? VMS Historically...
Video Surveillance 101 Course - Last Chance on Feb 20, 2020
This is the last chance to join IPVM's first Video Surveillance 101 course, designed to help those new to the industry to quickly understand the...
Vulnerability Directory For Access Credentials on Feb 20, 2020
Knowing which access credentials are insecure can be difficult to see, especially because most look and feel the same. Even insecure 125 kHz...
AI/Smart Camera Tutorial on Feb 20, 2020
Cameras with video analytics, sometimes called 'Smart' camera or 'AI' cameras, etc. are one of the most promising growth areas of video...
China Manufacturer Suffers Coronavirus Scare on Feb 20, 2020
Uniview suffered a significant health scare last week after one of its employees reported a fever and initially tested positive for coronavirus....
Cheap Camera Problems at Night on Feb 19, 2020
Cheap cameras generally have problems at night, despite the common perception that integrated IR makes cameras mostly the same, according to new...
Milestone Launches Multiple Cloud Solutions on Feb 18, 2020
Milestone is going to the cloud, becoming one of the last prominent VMSes to do so. Milestone is clearly late but how competitive do these new...
Video Surveillance Architecture 101 on Feb 18, 2020
Video surveillance can be designed and deployed in a number of ways. This 101 examines the most common options and architectures used in...
UK Stands Behind Hikvision But Controversy Continues on Feb 18, 2020
Hikvision is exhibiting at a UK government conference for law enforcement, provoking controversy from the press, politicians, and activists due to...
IronYun AI Analytics Tested on Feb 17, 2020
Taiwan startup IronYun has raised tens of millions for its "mission to be the leading Artificial Intelligence, big data video software as a service...