The Dumb Ones: PSA's Bozeman On Cybersecurity

By: John Honovich, Published on Jun 15, 2018

The smart ones are the hundred people who flew to Denver and spent $500+ on a 1.5-day conference featuring (now US government banned) Dahua as a 'cyber responsible partner', as PSA President Bill Bozeman declared:

The rest of you, well...

A few problems here:

Theater

This is literally (cyber) security theater. Get in a room, congratulate each other on being so smart, while the industry's worst cybersecurity offender headlines the event. And then showcase how out of touch these 'thought leaders' are:

The only thing fast about the worst vulnerabilities in our industry is how fast companies like Dahua, Hikvision, and Xiongmai push cheap products with little regard for cybersecurity.

Now, surely this makes the event's sponsors feel good but it undermines real problems in this industry.

Making Manufacturers Take Responsibility

Get Notified of Video Surveillance Breaking News
Get Notified of Video Surveillance Breaking News

The reality is most manufacturers have taken cybersecurity far too lightly. And, worse, like Dahua, think they can pay to sponsor an event to buy that credibility back or falsely claim cybersecurity compliance.

But the manufacturers need to be responsible and need to improve their cybersecurity. The more manufacturers understand they have to lose by bad cybersecurity, the more they will put engineering resources (and not just press releases) into improving their products.

Stop Port Forwarding

While these conferences talk about Bitcoin and other such speculative, far-removed, topics, there is something much more fundamental that we all need to convince integrators to do. Stop port forwarding.

Why did all those Dahua recorders get hacked last year? Not just the backdoor but because Dahua directed their integrators to port forward. And port forwarding exposes one's video surveillance devices to the entire world so that any vulnerability found becomes a gold mine for hackers.

Worse, manufacturers like Hikvision continue to endorse port forwarding, even in their own hardening guides.

Doing Something To Help Integrators

Rather than sit around conference rooms and congratulate ourselves, IPVM has been hard at work building a tool to help integrators. We have released new software that allows video surveillance professionals to quickly and easily identify known vulnerabilities of products deployed in their systems.

Comments (26) : Members only. Login. or Join.

Related Reports

Stop Blaming Your Employee, Wyze on Dec 30, 2019
Wyze management is at fault for its massive data leak, not its 'employee', as it has centered the blame on. While blaming an employee is clever...
Dahua New Critical Vulnerability 2019 on Sep 23, 2019
Dahua has quietly admitted 5 new vulnerabilities including 1 critical vulnerability with a 9.8 / 10.0 CVSS score and 2 high vulnerabilities (scored...
US Army Base To Buy Banned Honeywell Surveillance on Sep 17, 2019
The U.S. Army's Fort Gordon, home to their Cyber Center of Excellence, has issued a solicitation to purchase Honeywell products that are US...
Uniview OEM Directory on Sep 11, 2019
This directory lists 20+ companies that OEM products from Uniview, with a graphic and links to company websites below. It does not cover all...
3 Weeks Later, Honeywell Still Cannot Say Whether They Are Vulnerable To Dahua Wiretapping [Now Admits] on Aug 27, 2019
The Dahua wiretapping vulnerability and Dahua's decision to delay disclosing it until IPVM inquired underscored problems with cybersecurity and...
Axis Suffers Outage, Provides Postmortem on Aug 15, 2019
This week, Axis suffered an outage impacting their website and cloud services. Inside this note, we examined what happened, what was impacted...
Alarm.com Suffers Outage on Jul 26, 2019
Alarm.com suffered a major outage this week, impacting its 5+ million customers. Inside, we examine what happened, what Alarm.com told IPVM and...
Manufacturer Favorability Guide 2019 on Jun 12, 2019
The 259 page PDF guide may be downloaded inside by all IPVM members. It includes our manufacturer favorability rankings and individual...
Security Fail: ASISNYC Auto Emails Passwords In Plain Text on May 14, 2019
ASIS NYC automatically emails a user with the password the user just entered, in plain text, when one registers for the site / event, as the...
'Independent' Security Consultant Organization Sells Off Speaking Slots To Manufacturers on May 10, 2019
The International Association of Professional Security Consultants (IAPSC) have sold numerous speaking slots to manufacturers. This is part of...

Most Recent Industry Reports

LIVE NOW "Fever Camera" Show on Jun 02, 2020
IPVM is excited for the world's first "Fever Camera" show, to be held today Tuesday, June 2nd and Wednesday the 3rd from 11am to 4pm EDT, giving...
Smart Entry Systems Presents Cloud Multi-Tenant Access Control on Jun 02, 2020
Smart Entry Systems presented Cloud Multi-Tenant Access Control at the May 2020 IPVM Startups show. Inside this report: A 30-minute video...
Genetec Drops Support for Dahua and Hikvision on Jun 01, 2020
Genetec has dropped support for Dahua and Hikvision, citing US blacklisting and ONVIF conformance blockage, the company informed partners in an...
Dotty "Hot Or Not" Elevated Body Temperature App Tested on Jun 01, 2020
What if you could take an existing phone or tablet and transform it into "fever camera"? That is what DottyAR is doing with their strangely named...
Optris "Fever Screening Systems" Examined on Jun 01, 2020
German manufacturer Optris has been building temperature measuring instruments for industrial manufacturing for over 15 years, and thermal cameras...
Fever Camera Sales From Integrators Surveyed on Jun 01, 2020
Fever cameras are the hottest trend in video surveillance currently but how much are integrators selling them? 220 integrators answered the...
Proxy Presents Mobile Credentials For BLE Devices and Access on May 29, 2020
Proxy presented Mobile Credentials For BLE Devices and Access at the May 2020 IPVM Startups show. Inside this report: A 30-minute video...
ISC West 2020 Moves To The Basement on May 29, 2020
The twice cancelled/postponed show will now not only be held in a different month (October) but on a different floor, moving down to the...
Integrators Avoiding Coronavirus Air Travel on May 29, 2020
IPVM asked integrators if air travel is part of their 2020 plans to see how significantly Coronavirus will impact future...
Viakoo Presents Cyber Hygiene for Cameras on May 28, 2020
Viakoo presented its 'Cyber Hygiene' and 'Service Assurance' products at the April 2020 IPVM New Products show. Inside this report: A...