• corroded@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 months ago

    This is one of several reasons why I keep all my cameras and any other IoT devices on a separate VLAN that has no access to the internet and no access to the rest of my home network. The only bridge is my DVR server, but that’s something I can’t get around.

    Before it was set up this way, I saw a huge amount of requests on my DNS server from the cameras, each one resolving the manufacturer’s domain name. It was probably innocuous, but why take the risk? There is absolutely no reason whatsoever that a security camera needs access to anything.

    • e0qdk@reddthat.com
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 months ago

      There is absolutely no reason whatsoever that a security camera needs access to anything.

      NTP is useful to correct clock drift, but otherwise, I’d agree.

  • onlinepersona@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    2 months ago

    Very cool. If telnetd is on there, maybe it’s already running and just spinning it up could be enough to then log into it - dunno if he tried that already. That would be even worse because anybody with access to the WLAN could then log into the camera if it’s on the same network.

    Anti Commercial-AI license