So Big bad US Government has banned Hik Vision and Dauhau Surveillance Camera Products
if a Camera Product is not NDAA compliant it can not be used by a government entity.
This is because of a known issue with a back door in the systems which allow Chinese access to your computer Network for spying or causing damage like ransomware.
https://ipvm.com/reports/ndaa-guide
https://ipvm.com/reports/ban-law
While some security dealers scoff at it and say its propaganda and nothing to worry about
They are sadly misinformed into danger these units pose . Yes even the corner Pizza shop is vulnerable
which is one of their arguments
I recently had to tell the President of a large telephone / cable company in W. Pa who trusted his security company to do him right he had been screwed as they installed Hik vision cameras in his brand new headquarters and he blew his stack because he has been going thru and making sure he had no banned Hewaii switching system equiptment in his operatoions and his security supplier goes and screws him.
Well after doinOf course our own uncaring Allegheny County District Attorney when made aware his office was using Hik vision products and he said he was not concerned.
If he would bother to do some simple research he should be,so let me tell you what the dangers are.
and how he has screwed the citizens of Allegheny county.
1st off if your that little Pizza shop Owner and you think your not being spied on by Chinese Think again
They are watching all kind of business to look for vulnerabilities like when you make your cash drops
they know when you open when you close they know where your safe is watching your cameras info that could be passed on to a criminal organization
2nd off they know who you buy from and if your a franchised pizza shop all the better because these hik vision units could allow a tailgating or piggyback attack of your franchises network.
. This is exactly how Target Retail stores where attacked one of their vendors a Mechanical contractor in Pittsburgh who got work orders and submitted bills etc thru Targets network was hacked then this opened the door to the target network.
https://krebsonsecurity.com/2014/02/target-hackers-broke-in-via-hvac-company/
3rd My camera vendor said he isolated and blocked the Chinese from being in my network
Think again do you use a phone app like Hik Connect guess what all the isolation you are doing is worthless they have everything they know from the phone App
4th Hik and Dauhau has been called out by US state Dept. for using Slave labor to build their products thats why they are cheaper than everyone else as well as allowing china to spy on its own citizens activitys
https://news.trust.org/item/20210709012916-ql13s
5th Hik and dauhau have been delististed by Onvif the agency which sets standards for IP based Camera Systems
The big Problem also is Hik provides components to many manufactuers so your cameras may not say Hik or dauhau but they can still be on list and disreputable dealers are taking full advantage of using 3rd party labels.
https://ipvm.com/reports/dahua-oem
https://ipvm.com/reports/hik-oems-dir
The list is extensive and many popular manufactuers in above links if you are using them you are at risk.
It looks like Hik and dauhau are shutting down operations in US and thats a good thing but all that legacy product out there is going to cause problems for years to come.
No comments:
Post a Comment