Times Investigates Hikvision's Chinese Government Control

Brilliant

And the BBC has picked this up:

Does it concern you that over 1 million CCTV cameras are controlled by a company owned by the Chinese state? #r2vine pic.twitter.com/xm2KM0SGU7

— BBC Radio 2 (@BBCRadio2) September 16, 2016

Wait wait wait... does this mean IPVM is no longer the National Enquirer of our industry?

Any chance this will be part of the 2016 Presidential debate? If anyone is attending, ask them if they are aware

Would there be a benefit to switching to one of the rebranded versions of Hik, such as Interlogix for security purposes? Do they alter the firmware in such a way that if there was a backdoor or other security risk that it could be disrupted?

Now all we need to do is actually find that backdoor...

Sooooo - wouldn't this be a BETTER time to go after Federal Contracting Officers who blatantly violate BAA and TAA and trample underfoot the Federal Regulations for Chinese Procurement. I still haven't heard back from the procurement officer on my secondary email.

I think I'll throw this article link directly at them to "open their eyes a little".

Thanks John

How many Hikvision employees are being forced to cancel their accounts today?

I hope all integrators in my vicinity immediately cease selling Hikvision....

So I can be the only one busy as hell installing quality systems at a great value to my clients. I will worry about them being able to "phone home" or snoop the LAN.

I'm not so much a conspiracy theorist but there are always possibilities.

How about 10 million devices doing a continuous storm across the known gateway address? Would that create some issues on government, banking, retail, home networks?

Let's say Black Friday? Let's face it, DMV is slow enough!

Snooping is an issue, mapping a network and sending that info is another, Denial of Service is something else and finally becoming a tool to pass malicious code can be a problem.

How many have to happen at once?

As a side note, why????

https://www.washingtonpost.com/world/china-bars-top-us-technology-firms-from-government-list/2015/02/26/ebd4282c-bda1-11e4-9dfb-03366e719af8_story.html

Also Corriere Della Sera in Italy has picked up the story.

Just saw "Snowden" at the movies. As for all this paranoia about red's under the bed with Hikvision. I think that horse has already bolted with the NSA on its back. If and its only an if, the Chinese government are planning some covert hacking operation they may actually catch up to what the NSA has been doing for years.

Amazing!

Would like to see Washington Post or NY Times, WSJ get involved in the conversation or a major network news channel.

Are the same checks and balances - or lack of - applied to their network equipment Companies like Hauwei are global giants as well

For those of you (like Jon) who think their understanding of networking protocols and security can actually protect against interested governments from snooping on their stuff, please read the excerpt below.... it refers to the work of Tsutomo Shimomura (whom you might remember was the one who helped the feds track down Kevin Mitnick in 1995 after Mitnick hacked into his personal machine). His work has been funded by both the US Air Force and the NSA.

This archived post (excerpted below) was dated 1996 - 20 years ago.

Tsutomu's stealth version of the Berkeley packet filter did a lot more
than modload into the kernel.  He was paid by the Air Force to design one
that could patch itself into SunOS kernels invisibly, even into kernels
with no modload support at all.  It had special code that would search
through the kernel binary for references to the address of the Ethernet
chip, and patch itself in during the very low level interrupt handling.
It was highly optimized so it wouldn't show up by loading down the
machine, and it did things like decrement the interrupt counter so that
even the extra interrupts caused by running the Ethernet chip in 'receive
every packet on the wire' mode wouldn't be visible.  He talked about
enhancements that would automatically forward packets of interest back
out onto the Internet, so the whole shebang would hide in kernel memory,
never visible to users, never running any processes or altering any files.
Think of it as Digital Telephony wiretap technology for the Internet.

The idea was to design something that you could run on a machine without
the owner ever finding out about it.  To break into that person's network.
It's a tool customized for crackers.  It's one of the tools that Mitnick
was after when he broke into Tsutomu's machine.

Genuine Question

If the others - UNV & Dahua - are 'clean' ...how are they managing to match keep pace and match Hikvision's pricing levels?

Depending on the answer; 2nd question - are they sustainable long-term businesses if they don't have access to the same government funding?

NOTICE: This comment has been moved to its own discussion: How Are Dahua And UNV Managing To Match Keep Pace And Match Hikvision's Pricing Levels?

Hikvision UK GM has conducted an interview with a UK trade magazine denying control by the Chinese government.

We will do a full post in a few days but wanted to reference it here for those interested right away.