this post was submitted on 09 Sep 2023
889 points (99.3% liked)

Technology

57432 readers
3842 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 19 points 11 months ago* (last edited 11 months ago) (1 children)

It would be fine if the footage was end-to-end encrypted, meaning you need to transfer the encryption/decryption keys from device (e.g. a phone) to camera, and then manually between all devices that should have access to the decrypted footage.

Camera would only ever send out encrypted footage, and thus it would be insufficient to have access to the cloud account if you want to view the footage - you would need both access to the account (to obtain the encrypted data) and the decryption key (to actually decrypt it). The decryption key must never reach any 3rd party servers and can only be manually transferred between devices that should have access.

There are still possible attack vectors, like malicious firmware updates, or the viewer client app updates, but those are very difficult to exploit, and pretty much exist in most "secure" software today (including from companies like Google, Apple, Meta, etc.). They could be mitigated by hardware design (do the encryption in hardware, camera's software never has access to decrypted footage) and open source viewer clients that the user controls, but I would consider a camera sufficiently secure (for non-sensitive locations) without those.

[–] [email protected] 5 points 11 months ago (4 children)

How would I encrypt an rtsp stream so I can port forward it and then how to I unencrypt that stream for use on a local server?

[–] [email protected] 5 points 11 months ago* (last edited 11 months ago)

Encrypted VPN between each side. IPSEC over GRE using 1024-bit AES encryption is more than enough.

Honestly though, if someones cracking IPSEC with any encryption against a random person then that's already leagues more than any script kiddie is capable of and professional hackers don't have the motive.

[–] [email protected] 5 points 11 months ago

I guess you wouldn't. Use a different protocol, one that supports the security you need.

[–] [email protected] 4 points 11 months ago

Just set up a VPN and transmit the video over that network. That's the easy method.