![IP_Security_Cameras[1].jpg](https://i.imgur.com/KIqh48O.jpg "IP_Security_Cameras[1].jpg")
Hi /g/,
I recently purchase a cheapish IP camera off Amazon which is pretty good apart from one thing, the login/ menu/ GUI isn't HTTPS.
How much of a security issue is this if my general network security is bretty good to start with?
Also IP security general. Not enough of these threads.
Pic related: a pretty sweet set up.
>>54559853
It's fine unless it faces the internet.
Just join it to the open webcams group.
>>54560325
And if it does face the internet, is this an inherent risk if the admin username and password are changed from default?
>>54560810
so long as you protect against bruteforce attacks
>>54559853
I have all my cameras connected to a separate firewalled PC with 2 network interfaces.
The PC also runs a VPN client to allow for secure remote access.
Don't trust the camera firmware. It's usually proprietary and especially cheap ones are known to phone home aggressively.
>>54561187
>>54559853
P.S. If it's just 1 or 2 cameras, a Raspberry Pi 2 is enough. Just add a second network interface.
Alternatively you can use a cheap WiFi router with OpenWRT. Make sure it allows firewalling by physical port tho
>>54560810
If it does face the internet, do not log into it from outside your network. Inside your network is fine as long as you trust every single other client on that network.
You can easily install an SSL reverse proxy on your network though and access it externally through that.
>>54561241
Good advice but
>Inside your network is fine
yes, if you don't allow the camera to connect to the outside world.
Pic related, firewall log caused by the popular Foscam C1.
>>54561284
There's no security issue with using http for an internet facing client as long as the credentials are sufficiently complex, rate limiting is in place, and no authentication is performed on untrusted networks.
Spam in logs is not a security issue and is going to happen whether you use SSL or not.
>>54561401
>Spam in logs is not a security issue
The camera connects to remote servers if you don't explicitly firewall its outgoing traffic.
How is this not a security issue?
>>54559853
>the login/ menu/ GUI isn't HTTPS.
so run it behind an https server, duh
https://www.nginx.com/resources/admin-guide/reverse-proxy/
>>54561468
That has nothing to do with the login page using SSL or not
