Chinese Spam Access Control Is Here

By: Brian Rhodes, Published on Aug 04, 2016

Notorious spammers like Longse, Cantonk, and Wodsee have flooded the video market with nuisance emails touting ultra low cost cameras for years, but is electronic access control the next target? 

Access has been a relative safe-haven for manufacturers and installers alike who have not needed to fight the substantial pricing pressures from product coming from overseas. However, signs are here that access is the next target.  

In this note, we examine:

  • Access control spam offerings being sent
  • Software functional issues
  • Hardware functional limits / omissions
  • Business barriers
  • 'Upscale' offerings expanding from Hikvision, Dahua and ADI W-Box

********* ******** **********,*******, ************* ******* *** ***** market ************ ****** ******* ***** low **** ******* *** *****, *** is ********** ****** ******* the **** ******? 

****** *** **** * relative ****-***** *** ************* and ********** ***** *** have *** ****** ** fight *** *********** ******* pressures **** ******* ****** from ********. *******, ***** are **** **** ****** is *** **** ******.  

** **** ****, ** examine:

  • ****** ******* **** ********* being ****
  • ******** ********** ******
  • ******** ********** ****** / omissions
  • ******** ********
  • '*******' ********* ********* **** Hikvision, ***** *** *** W-Box

[***************]

Spam ******* *******

**** ****** *** *****-***** security ********* *** ******* new, ********* ******** *** ******* a *** ******** ** the ******* *** ****** PACS ******. **** **** **** example, ******* ** *****, single **** *** ****** controllers *** $** ** four-door ****** *** $**:

 

****** ********** ***** ****** systems **** ********* **** a ****** *** ** both ******** *** ********, the ***** ***** ** these ***** ***** ********* is ********. ****** ** no ******* ** ********** software ** ********* ************ are ****; ****** **** focus ** **** *** inexpensive ****** ****** ***** are ******.

Big ********** ******

*******, * ****** ********** raises *** ****. **** of *** ******* *** found ** ********* ********** software, ** **** ** it. *********** **** **** commercial ****** ****** ******* a ****** ****** *** develops *** ******** **** hardware *** ******** ***** a ****** *****, *** fact ***** ******** ******* ignore ** **** **** them ******* ** ******* consideration *** **** ** the ******.

******** ******** ********* ***** features *** ******** **** controllers ** * ****** at ****, *** ****** manages ***** ************ **** the **** *********. **** approach ** ******* ** the ******** ***** *****'* **** **** ******, *** **** ***** free ********** ********* ******** ***** ************* ***** ** ***** and ****** ******** ***** as * ******.  

****, ***** **** ******** like '********' ** *** doors ** * ****** or ****** *** ***** are ********* *** *********. Rather, ********* ********** ** each **** ** ******, and **** * ***** list ** ******* *** typically *****. *** ******** of *********** ******** *** navigation **** ****** ********** deployment ********* ****** ***********, no ****** *** *********** the *****.

**** ********* ********

***********, *** ******* ** software ** ***** ********** by ****** *********** ******, misspellings, *** ******* *********** translations.

*******, ****** ***** **** "Socail ********* **." *** not ***** ** * showstopper, *** ************ ******* with ********* ** ********* data ****** *** ******* dismissal *** ****** ******* customers. *** *******, ** the ******** ******* *****, "**(*****) Name", "********", "*********", *** "Cultural" **** *** **** no **************** ** ********** being *********/ **** ** grant ****** ** ****, but *** ******* ******* these ***** ***** ** considered ********* ** ***** and **** * ***** liability ** **** ********* to *******.

******, *** ******** ****** is *** * ******* *******, as *** ****** ***** in ******* **********:

"[*********] *** ******** **** ** things, ****** ******** ******** for *** ***** ****** will ******* *********** ************* for *** [***** ********] market. **** *** **** been ******** ******* * software ******* *** ******** come ****** * ****** that *** **** **** a *** ******* ******* on ** ***** *** were ********* ** *** a **** ***** ******* 'First ****'?  *** *********** is ** ****** **** own ********** ********** ******** suite **** *** ****** up ***** *** ************'* SDK **** ***, [***** costs ***********] $$$$ *** time."

Hardware ****** ************

*** ******** *** *** just ********.  ********* ******** design **** ******* *** gaps. ******** *** *** hardware ****** *****, **** touted ** *** *** same *********** ** *********** a ****** **** *** supporting * '****-********' *********** of ****-** *** ****-*** dual *******:

******* ** **********, ****** at $**

******* ** **********, ****** over *** **** ** ~$600

***** ***** ** *** the **********. ******** ***** hardware ******** ******* ** *** spam *****:

  • ******* ****, ** **** support
  • ** *** ****** *******
  • ** *** *******
  • ** **** ******** ****** *****
  • *** ****** **** (**** only)
  • ** ***** ***** *******

***** ******* ******** *** not ****** '***** & whistles', *** ********* ***** options ** ******** ********** products.

Business ********

*** ************ *** *** only ** ******** *** hardware ******. ******** ********** are *** ******** ** well.

******* ****** ******* ** Ultra-Conservative: ********** ****** ** risk-averse ** ** *******. If doors *** ****** ** the ***** ****, ** could **** ** ****** or *****. *** **** users *** ******* ** save * *** ******* by ****** ** '********' brand. ******, ****'** *** more *** * '******* but ********' ********** **** if ** ***** ******** risk ** ********, *******, or ******. **** ****** who **** **** *******/********/********** product *** * ****** are ********** '***' ** a ****** ***** **** companies ** **** *** years ** ****.

** ************:******* ******* ******** ** **** access ****** ** ** support *** ***** ******** system ***********. ****** ******* access ********* **** ****** substantial ********* ** ******** connections **** ***** ************, mass ************, *** **** or ********* ***** *******, those ******* ****** ** not ***** *** **** offerings. 

Other ********

** * ****** ********** thread ****** "**** **** ******** *** Access ******* ****** ****? " ******* ******* ** other ******* ******** **** spam ****** ****:

******* **************

"* **** ******* ***** of ******* ***** **-***** access *********** ** **** as ******** ********* ** my ****** **** ******* testing *** ********* **** the ***** *** **** found **** ******** **** not ****-******** ****** *** of *** *** *** the ** ******. ********* that **** * ******** NA ******** **** ***** offices **** *** **** "Americanized" ***** ******** *** the *********, *** **** have *** ** ** through *** ***** ** modifying ***** ******** *** software ** **** *** needs ** *** ** market ... *** **** had ** ** ******* the **/*** ******* ********. This **** ** *** cost, *** ***** *** leveling *** ******* *****, it ****** ** **** way."

********* ******* *****

"******* **** ***** ** Asia ***** **** '**********' or **** '*** *****' labels, *** ******* ** central ********/**** ****** ***** are *** *********. ***** a ****** ******* ********** is ******, *** **** scope ** ****** ************ over ******* **** ******** codes ** ************ ****** is ** ***** ** isn't ****** ** *******, understood, ** ******** ** Europe ** ***** *******. *************, in ***** *******, ** have * ****** ** nearly *** ***** ** industrialized ******* (****'**** ******* **** ****, ** ****) **** elaborates *** * ****** set ** ************* *** life ****** ***** *** brought *****.

*** ****** ****: ********* and ************* ***** *****, and ***** ******** **********, is *** ** ********* in ******* *******. ***** Asia ****** ********* *********** or ***** ******* *********** a ***** ********** ** manufacturing ******* **** ********* product, *** ******** **** there *** *** **** of ***** *********** ** 'not *******' ** '*** commercial *****'.

*******, *** *** *** the ******** ** **************, but **** ** '******* pains' **** ***** ****** in ******** ******* ****** leaders:

"[****] ** ***** **** ********* which **** **** ********* when *** & ***** were ** *** ****. [Objections ********* **] "******* ******", "Manufacturing *******" *** ** on.

* *** ***** *** some ** **** *********** on ******* **** **** at *** ****.  **** Dahua *** *** **** intercoms ** **** *** which *** ********** ******. * have ****** ***** **** Hik & ***** ***** engineers *** ********* **** creating ** *** ******** which **** ** *** probability ********* ***** ********** into ***** **** ********. And *'* ** ********* surprised ** **** ***'* have * **** **** an ******* **** ********** in *** ***** *********."

More "***-****" ****** ******

******, * ****** ****** ****** shows **** ***-**** ****** control ** *** **** the ****** ** ********. In ****, **** ** the **** ******* ****** that **** ********* ******* in *** ***** ****** have ********* ** *** actively ********** ****** ******* products:

*********

***** *** ******* ****** of ********* *** ****** partner [**** ** ****** available]s ** ******* ** a *** ******* ******, the ******* **** ********** ********* ** ******* branded ******** *** ********** software********* ***********, *******, *** stand-alone ***** [**** ** longer *********] ******* ***** **** elsewhere ** ****** *******.

*** ******* *** **** mum ** *** ********** release *** ************ ** those ******** ** ***** American *******, *** ***** the *********** ****** ************ of *** *****, *** door **** *** **** closed *******.

*****

******** *********'* ****** ***********, ***** also *** * ***** number ** ****** ******** [link ** ****** *********] in *** *****, ******* for ********** *******. *****'* portfolio ** *** ** substantial, *** **** ******** core ****** ** ***********, readers, *** *****, *** even ***** ********* *********** options [**** ** ****** available].

******* *** ******* ************ these ******** **********, ** simply ******** ******* ********* themselves ** *******, *** the ******** ** * well-planned *** ********* ****** control **** ** *******.

* ***

*** *****, **** ******* distributors *** ******** **** low-cost ******. ***** *********** ADI's ***** ***** * *** ** ****** ****** ******* items. ***** ******* *** currently ******* ** ****** lock *****, ******* **** us ***** ******* ********* the *****'* ********* ** the ***** **** *** on * ******* *****.

***** **** * *** typically ******** ******* **** Chinese *********, ********* ******** may ******* ***** ********* and ***** ** *** North ******** ******.

Comments (13)

'Upscale' offerings expanding from Hikvision, Dahua and ADI W-Box.

Maybe the low cost junk is out there just to make the Hikua look good.

You mentioned that Hik has 30,000 engineers.

Although figures like these are often mentioned in a political context of those arguing educational policy, very seldom is it mentioned that what is counted as an "engineer" in a lot of Asia, is not the same thing as an "engineer" here.

When we think of an engineer, we think of someone who matriculated at an accredited 4-year university and finished with a Bachelors in, say, Electrical Engineering.

An "engineer" elsewhere can sometimes be someone who went to 8 months vocational school and learned Visual Basic.

Just something to keep in mind when one considers the seemingly massive "engineering" staffs of some companies.

Hik has 30,000 engineers...

To be fair it's Brian quoting a member's hyperbolic statement.

Hikvision this year is regularly reporting 5,000 to 6,000 engineers.

28,998 Reverse Engineers, 2 Design Engineers?

I noticed I got 1 thumbs down, must be for the math error, so here is correction:

 

29,998 Reverse Engineers, 2 Design Engineers?

A tour of the facility suggested they could indeed have 3000 engineers (that's the number I recall.) They looked like engineers because they were faffing around with boards in obvious debug configurations, editing code in visual studio, and had cubicles with books about data compression and H.264.

They were faffing around with boards? Oh then they must be engineers! My mistake.

They looked like engineers because they were faffing around with boards...

Did you get a look at any of the reverse engineers? Supposedly, they're the backbone of the organization.

I wasn't beating up on Brian per se. It just reminded me of those claims in the political realm of "Country X is churning out 10 gazillion engineers a year" and hence we are falling behind. I was just calling attention to the matter that elsewhere in the world, what counts as an "engineer" is very broad.

Every time IPVM posts one of these spam-bottom-feeding hardware reviews I check it out on my integrator supplier of choice, Amazon.com. I just learned that ZKAccess (which I would characterize as a mainstream brand in North America) has panels for $95. Amazon seems to have stuff as cheap as $70 as far as I could see. Not UL, not safe, not enough digital outputs, I get it. However at 10 times cheaper than US stuff one wonders what it would take for them to compete. Would UL approval and a second relay increase the cost that much, especially if Home Depot buys a squidjillion of them...

As of last ISC West HIKvision still doesn't sell access control here, I think. The demo center in Hangzhou had panels, mifare/prox readers, fingerprint scanners, etc. on display. Not sure what features they offered but they certainly have figured out how to build some sort of product.

We have a profile post upcoming on ZKAccess, who is based in NJ. Until recently, however (Q1 2015), they were a division on ZKTeco headquartered in Shenzhen. The company still uses ZKTeco for product design and manufacturing.

I do not think they are 'mainstream' yet with recognition onpar to Mercury, HID, Assa, Allegion, etc, but their prices are attracting attention at the low end.

We have a client that was using cheap direct import parts for Access. Not a small company. The head of IT was doing all the work himself. WE would come out and quote and quote and quote, never landed the access control work. Until very recently when he was let go for doing too much and managing too little.

We are in the process of installing a Paxton system now.

Cameras are susceptible (more so anyways) to commoditization. It tends to be a set it and forget it type of purchase for most of the industry. They go back to it in a reactive way when something happens. Access Control is different in that it is used daily by every employee, and it requires changes whenever there are changes to the payrolls. Add to that the fact that if a door fails to open someone could die, and you have a market that is more resistant to the DIY guy on staff. Its still subject to market loss in cases of "self-integration" pr those really large clients that basically have their own integration department and are buying from the same distributors we are all buying from, but we never had their business anyways...

Read this IPVM report for free.

This article is part of IPVM's 6,367 reports, 855 tests and is only available to members. To get a one-time preview of our work, enter your work email to access the full article.

Already a member? Login here | Join now

Related Reports

Verkada Coronavirus Response: Free Temp Systems For Government and Health Care on Apr 07, 2020
Verkada has built a reputation on giving away things for free - free Yeti Tumblers, free trial cameras and now free temporary systems for...
Directory of 30+ VSaaS / Cloud Video Surveillance Providers on Jun 07, 2019
This directory provides a list of VSaaS / cloud video surveillance providers to help you see and research what options are available. 2019...
HTTPS / SSL Video Surveillance Usage Statistics on Apr 01, 2019
HTTPS / SSL / TLS usage has become commonplace for websites to improve security and, in particular, to help mitigate attackers reading or modifying...
ADI Pushing Cracked 125 kHz Access Control on Oct 25, 2018
Security distribution giant ADI commonly promotes access bundles featuring vulnerable and cracked 125 kHz card formats.  Even worse, they promote...
Network Cable Testing Guide on Oct 02, 2018
Proper cable installation is key to trouble-free surveillance systems. However, testing is often an afterthought, with problems only discovered...
Vivint Streety Video Strengthens Door Knocking on Jan 17, 2018
Vivint is famous (or infamous depending on your perspective) for mastering large scale door to door selling. The company has skyrocketed from a...
STP vs UTP for Video Surveillance Tutorial on Dec 20, 2017
For many video system designers, deciding which ethernet cabling to use is a quick decision: go with the cheapest. However, this overlooks the...
Devil's Ivy PR Campaign Exploiting Manufacturer Cybersecurity on Jul 20, 2017
Manufacturers increasingly have a bulls-eye on their back. As cyber security solutions providers grow, they realize a great way to get publicity...
Wrongly Accused Critical Vulnerability for Vivotek on Jul 13, 2017
Vulnerabilities are an increasing branding and business problem for video surveillance manufacturers. However, sometimes vulnerabilities reported...

Most Recent Industry Reports

Verkada: "IPVM Should Never Be Your Source of News" on Jul 02, 2020
Verkada was unhappy with IPVM's recent coverage declaring that reading IPVM is 'not a good look' and that 'IPVM should never be your source of...
Vintra Presents FulcrumAI Face Recognition on Jul 02, 2020
Vintra presented its FulcrumAI face recognition and mask detection offering at the May 2020 IPVM Startups show. Inside this report: A...
Uniview Wrist Temperature Reader Tested on Jul 02, 2020
Uniview is promoting measuring wrist temperatures whereas most others are just offering forehead or inner canthus measurements. But how well does...
Dahua USA Admits Thermal Solutions "Qualify As Medical Devices" on Jul 02, 2020
Dahua USA has issued a press release admitting a controversial point in the industry but an obvious one to the US FDA, that the thermal temperature...
Access Control Online Show - July 2020 - With 40+ Manufacturers - Register Now on Jul 01, 2020
IPVM is excited to announce our July 2020 Access Control Show. With 40+ companies presenting across 4 days, this is a unique opportunity to hear...
Hanwha Face Mask Detection Tested on Jul 01, 2020
Face mask detection or, more specifically lack-of-face-mask detection, is an expanding offering in the midst of coronavirus. Hanwha in partnership...
UK Government Says Fever Cameras "Unsuitable" on Jul 01, 2020
The UK government's medical device regulator, MHRA, told IPVM that fever-seeking thermal cameras are "unsuitable for this purpose" and recommends...
Camera Course Summer 2020 on Jun 30, 2020
This is the only independent surveillance camera course, based on in-depth product and technology testing. Lots of manufacturer training...
Worst Over But Integrators Still Dealing With Coronavirus Problems (June Statistics) on Jun 30, 2020
While numbers of integrators very impacted by Coronavirus continue to drop, most are still moderately dealing with the pandemic's problems, June...