Friday, July 9, 2021

Do you have a Hik Vision or Dahua or one of their many 3rd party relabled Survielance camer system. Do You know its been banned by FCC and other federal agency do to Chinese having a secret back door and do you know the dangers this means to your business.

 So Big bad US Government has banned Hik Vision  and Dauhau Surveillance Camera  Products 

if a Camera Product is not NDAA compliant it can not be used by a government entity.

This is because of a known issue with a back door in the systems which allow Chinese access to your computer Network for spying or causing damage like ransomware.  

https://ipvm.com/reports/ndaa-guide

https://ipvm.com/reports/ban-law

 

While some security dealers scoff at it and say its propaganda and nothing to worry about

They are sadly misinformed into danger these units pose . Yes even the corner Pizza shop is vulnerable  

 which is one of their arguments

I recently had to tell the President of a large telephone / cable company in W. Pa  who trusted his security company to do him right he had been screwed as they installed Hik vision cameras in his brand new headquarters and he blew his stack because he has been going thru and making sure he had no banned Hewaii  switching system equiptment in his operatoions and his security supplier goes and screws him.

Well after doinOf course our own uncaring Allegheny County District Attorney when made aware his office was using Hik vision products and he said he was not concerned.

If he would bother to do some simple research he should be,so let me tell you what the dangers are.

and how he has screwed the citizens of Allegheny county. 


1st off  if your that little Pizza shop Owner  and you think your not being spied on by Chinese Think again 

They are watching all kind of business to look for vulnerabilities  like when you make your cash drops 

they know when you open when you close they know where your safe is  watching your cameras info that could be passed on to a criminal organization

 2nd off they know who you buy from  and if your a franchised pizza shop all the better because these hik vision  units could allow a tailgating or piggyback attack  of your franchises network.

. This is exactly how Target Retail stores where attacked one of their vendors a Mechanical contractor in Pittsburgh who got work orders and submitted bills etc thru Targets network  was hacked then this opened the door to the target network.

https://krebsonsecurity.com/2014/02/target-hackers-broke-in-via-hvac-company/

 3rd My camera vendor said he isolated and blocked the Chinese from being in my network

Think again do you use a phone app like Hik Connect guess what all the isolation you are doing is worthless they have everything they know from the phone App


4th Hik and Dauhau has been called out by  US state Dept. for using Slave labor to build their products thats why they are cheaper than everyone else  as well as allowing china to spy on its own citizens activitys

https://news.trust.org/item/20210709012916-ql13s

 

5th Hik and dauhau have been delististed by Onvif the agency which sets standards for IP based Camera Systems 

The big Problem also is Hik provides components to many manufactuers  so your cameras may not say Hik or dauhau but they can still be on list and disreputable dealers are taking full advantage of using 3rd party labels.  

https://ipvm.com/reports/dahua-oem

https://ipvm.com/reports/hik-oems-dir

 

The list is extensive and many popular manufactuers in above links if you are using them you are at risk.

It looks like Hik and dauhau are shutting down operations in US  and thats a good thing but all that legacy product out there is going to cause problems for years to come.

 

 

 

No comments:

Post a Comment