this post was submitted on 26 Jul 2024
230 points (99.6% liked)

Privacy

4163 readers
21 users here now

A community for Lemmy users interested in privacy

Rules:

  1. Be civil
  2. No spam posting
  3. Keep posts on-topic
  4. No trolling

founded 1 year ago
MODERATORS
iopq@lemmy.world
230
Matt Brown Digs Deep Into an IP Camera's Firmware — and Finds a Hard-Coded Root Password (www.hackster.io)
submitted 3 months ago by imPastaSyndrome@lemm.ee to c/privacy@lemmy.world
16 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] Fillicia@sh.itjust.works 2 points 3 months ago

Depending what's you router you can usually open communication between different VLAN for specific ip/port. So let's say your camera use rtsp to send video data to your NVR you could allow for port 554 to be opened between your camera ip and the NVR.

This means that even if someone has access to your camera they couldn't do an ssh (port 22) or http/https (80/443) requests to your internal network.

For PoE cams installed outside, creating a separate VLAN is an absolute must. Otherwise anyone could use the Ethernet cable to access your network and steal your data.