GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Conversation

Notices

  1. Embed this notice
    Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Tuesday, 02-Apr-2024 02:18:24 JST Ryan Castellucci :nonbinary_flag: Ryan Castellucci :nonbinary_flag:

    Help me pick network cameras!

    Needs:

    • Wired Ethernet w/ PoE
    • Usable outdoors
    • ONVIF compatible
    • Works purely locally without internet access (NO CLOUD)
    • Can see in the dark
    • Decent video quality

    Nice-to-have:

    • Can run open source firmware
    • I can get a root shell on it with minimal effort
    In conversation about a year ago from infosec.exchange permalink
    • Embed this notice
      kajer (kajer@infosec.exchange)'s status on Tuesday, 02-Apr-2024 02:27:09 JST kajer kajer
      in reply to

      @Ryan The no-name amazon PTZ cams that claim 30X optical zoom are nice, re: onvif, wired poe, outdoors, RTSP streams, and long distance IR throw.

      The cameras at my WA site have all survived outdoors weather with exception to that one tree branch. My only complaint is the camera claims to be 802.3at standards compliant, but only ever negotiates 802.3af. I have to manyally set the port to 30W of static draw in my switch, otherwise using IR and PTZ cause a reboot if I dont do that.

      I also got a 56V injector to pass ""more wattage"" through, but ended up replacing the switch with a c3850-48p-s so i could set the poe wattage manually.

      All of my security cameras are on a vlan that only allows DNS resolution of 0.pool.ntp.org and udp123 to those cached addresses. They don't complain one bit.

      In conversation about a year ago permalink

      Attachments


      1. Invalid filename.
    • Embed this notice
      Seth Hanford 🐡 (ckure@infosec.exchange)'s status on Tuesday, 02-Apr-2024 02:45:05 JST Seth Hanford 🐡 Seth Hanford 🐡
      in reply to

      @ryanc last time I looked, Dahua, HikVision, and Amcrest all fit the bill (I think Amcrest are white-label of one of those, prob Dahua). There are select models where ONVIF is a challenge, but largely they should all match for you. I tend toward Amcrest and know it the best of those 3.

      When I see people list local-capable/POE/ONVIF, I also commonly see a bullet point for "company doesn't support oppression" factors, which tends to be the next differentiating factor among the leaders that overlap with your requirements.

      In conversation about a year ago permalink
    • Embed this notice
      Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Tuesday, 02-Apr-2024 02:48:13 JST Ryan Castellucci :nonbinary_flag: Ryan Castellucci :nonbinary_flag:
      in reply to
      • saljam

      @sa Do you have experience with the AI/ML features?

      In conversation about a year ago permalink
    • Embed this notice
      saljam (sa@chaos.social)'s status on Tuesday, 02-Apr-2024 02:48:15 JST saljam saljam
      in reply to

      @ryanc i don't see "cheap" on the list so i'd say: AXIS M2036. (that's their "affordable" model, but that's only compared to other axis cameras.)

      ticks almost all the boxes. the only missing point is firmware isn't fully open source, but it's based on linux and there's ssh and a dev kit for it.

      plus, they have decent documentation and seem to be serious about security.

      In conversation about a year ago permalink
    • Embed this notice
      Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Tuesday, 02-Apr-2024 02:51:55 JST Ryan Castellucci :nonbinary_flag: Ryan Castellucci :nonbinary_flag:
      in reply to
      • : j@fabrica:~/src; :t_blink:

      @josephholsten I'll probably end up with frigate on debian or ubuntu with a modest amount of storage, then set up a batch job to archive the video.

      I'd consider paying someone to set this up for me, actually.

      In conversation about a year ago permalink
    • Embed this notice
      : j@fabrica:~/src; :t_blink: (josephholsten@mstdn.social)'s status on Tuesday, 02-Apr-2024 02:51:56 JST : j@fabrica:~/src;  :t_blink: : j@fabrica:~/src; :t_blink:
      in reply to

      @ryanc I’d love to hear what NVR you end up with. I’m leaning toward Synology, but I keep flipping whether a DIY Frigate setup is reasonable. Pretty certain not Luma.

      In conversation about a year ago permalink
    • Embed this notice
      Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Tuesday, 02-Apr-2024 03:05:12 JST Ryan Castellucci :nonbinary_flag: Ryan Castellucci :nonbinary_flag:
      in reply to
      • Seth Hanford 🐡

      @ckure What should I look for when picking models? Do you have specific ones you've used?

      I care about corporate ethics to an extent, but "no ethical consumption in capitalism" is always a problem regardless. 😕

      In conversation about a year ago permalink
    • Embed this notice
      Seth Hanford 🐡 (ckure@infosec.exchange)'s status on Tuesday, 02-Apr-2024 04:46:24 JST Seth Hanford 🐡 Seth Hanford 🐡
      in reply to

      @ryanc my amcrests are a little older, but generally the dome and bullet cams all do what you're asking. I have various experience with a pretty wide variety of 2/3/4MP bullets & domes.

      I also have an Amcrest floodlight cam sitting here on my office floor because it's a location where I don't have a good ethernet route but I do have a security floodlight already (ASH26-W). Weather is just getting good enough to install it so I don't have first-hand experience just yet, but it is Wifi and I'm expecting it to be mildly challenging, just like the wifi doorbell I use an AD110. For both of these, I expect/have experienced to have to setup an account at first to provision them, and then reconfigure them to push/pull to a local server.

      On the Dahua(?) front, I understand that they do things like setting alert zones & such a bit more easily than Amcrest, but the differences are likely in software -- hardware probably whitelabeled.

      And I understand re: corporate ethics. I just mentioned it because it tends to be the next question, but didn't want to assume/presume. And yeah, at the end of the day there are only so many options commercially available.

      In conversation about a year ago permalink
    • Embed this notice
      Antonios Chariton (antonis@mastodon.social)'s status on Tuesday, 02-Apr-2024 06:31:09 JST Antonios Chariton Antonios Chariton
      in reply to

      @ryanc I am very happy with Ubiquiti ( https://ui.com/eu/en/camera-security ).

      All local, wired, and outdoor quality is good. Especially at the 4K models, but even the 2K models look great.

      I ended up with them for 3 reasons:

      1) Asian alternatives are cheaper, but way too chatty (probably govt. subsidy)
      2) It's very difficult to find any high quality NVR that works on Debian and supports enough streams / cameras
      3) Their approach to security, minus one major event, is proactive and okay.

      SSH works too!

      In conversation about a year ago permalink

      Attachments

      1. Domain not in remote thumbnail source whitelist: www.ui.com
        UniFi Camera Security - Ubiquiti
        A license-free camera security platform with an AI-centric management experience, lightning-fast local storage, and cameras designed for every deployment.
    • Embed this notice
      Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Tuesday, 02-Apr-2024 06:31:09 JST Ryan Castellucci :nonbinary_flag: Ryan Castellucci :nonbinary_flag:
      in reply to
      • Antonios Chariton

      @antonis I don't actually care if they try to talk to the mothership so long as they work on a VLAN that has no internet access.

      In conversation about a year ago permalink
    • Embed this notice
      Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Tuesday, 02-Apr-2024 06:41:52 JST Ryan Castellucci :nonbinary_flag: Ryan Castellucci :nonbinary_flag:
      in reply to
      • Antonios Chariton

      @antonis I wish random exploit kits a very nice day trying to find my internal IP ranges - I don't use RFC1918.

      In conversation about a year ago permalink
    • Embed this notice
      Antonios Chariton (antonis@mastodon.social)'s status on Tuesday, 02-Apr-2024 06:41:53 JST Antonios Chariton Antonios Chariton
      in reply to

      @ryanc

      For me it was either not wanting to deal with this too much (ensure they remain safe through time), or also being too paranoid (what if the NVR pivots or has a SIM card? / what if there's a CORS endpoint that triggers when I visit news-website.com from a device with access to the camera VLAN).

      In conversation about a year ago permalink

      Attachments

      1. No result found on File_thumbnail lookup.
        http://news-website.com/

Feeds

  • Activity Streams
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.