Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: P2P camera security

3 Weeks Ago   #1
F22 Simpilot

Windows 7 Ultimate x64
 
 
P2P camera security

I have a WIFI camera in my room that I monitor on my smartphone when I'm away. It works with P2P, no port forwarding. I checked Shodan and my WAN IP looks good, but I need a sanity check. Is there a way for someone to see this video stream? The WIFI is of course password protected using WPA2 AES and the camera has a password. I'm sure there is a WPA2 CVE that I read about, but I'm not that concerned about that. Just want to know if someone could see my P2P camera.


My System SpecsSystem Spec
.
3 Weeks Ago   #2
samuria

win 8 32 bit
 
 

Without more details it's hard to say but if it uses P2P then it sounds possible
My System SpecsSystem Spec
3 Weeks Ago   #3
F22 Simpilot

Windows 7 Ultimate x64
 
 

What details do you need?
My System SpecsSystem Spec
.

3 Weeks Ago   #4
samuria

win 8 32 bit
 
 

What p2p does it open ports?
My System SpecsSystem Spec
3 Weeks Ago   #5
F22 Simpilot

Windows 7 Ultimate x64
 
 

No, I said there is no port forwarding. It's P2P. I never had to open a port.
My System SpecsSystem Spec
3 Weeks Ago   #6
samuria

win 8 32 bit
 
 

It must open ports very often the software will open all the ports it needs if it's using normal P2P ports any software may be able to connect
My System SpecsSystem Spec
3 Weeks Ago   #7
F22 Simpilot

Windows 7 Ultimate x64
 
 

I'll run a few tests and see what I find.
My System SpecsSystem Spec
2 Weeks Ago   #8
Alejandro85

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by F22 Simpilot View Post
It works with P2P, no port forwarding.
That's exactly contradictory, no way it can be that way.
P2P (peer to peer) means that both computers (or camera and phone here) communicate directly without any kind of intermediary help. That's easy on a local network with phone's WiFi, but when you're away, you need to pass though your router, and for direct communication to occur you NEED port forwarding (and most likely dynamic DNS too, unless your public IP is static).
The other alternative is to have a third party serving as a mediator to remove the need for port forwarding (and that's the most likely options these days). The camera uploads their images to someone's else servers (nicknamed "the cloud") and your phone downloads it from there, both talking to the server.

The second option is obviously insecure as the vendor is effectively intercepting all communications and could theoretically access and record all the video stream. Wheter or not they actually do is pure speculation, but the fact is that, at least, they CAN.

For the first option you need to open a port. Some programs can leverage uPnP to automatically manage it for you, but the protocol is know to have some serious security problems, and is best avoided. You can open the port yourself and configure DDNS, but then there is also another horrible fact: most of those gadgets also have some other serious security problems and are trivially hacked quite often. You really don't want to forward a port directly to a camera.

That leaves some sort of secure tunneling as the only really safe option (which requires quite some more configuration to get working), such as VPN or SSH tunneling or similar, probably neither of which are ready available with the default programs vendors supply.

To concretely answer your question, most likely is that yes, someone else could with some effort get access and see the camera. These days, IoT, security and privacy don't play nice together.


Quote   Quote: Originally Posted by F22 Simpilot View Post
Is there a way for someone to see this video stream? The WIFI is of course password protected using WPA2 AES and the camera has a password.
Those are fine steps, as long as the passwords are strong and unique. And until a vulnerability in either is revealed.
My System SpecsSystem Spec
2 Weeks Ago   #9
F22 Simpilot

Windows 7 Ultimate x64
 
 

Well, like I stated twice now, I'm not using port forwarding and I never want to. I do use it for a TS server when I enable it, but then I close the ports. I use the camera all the time without using port forwarding at all. Also, the camera manufacturer stated there is no middle man since it's P2P (Peer to Peer). I have checked Shodan for my IP address and I have check here and nothing ever found. I also did a port scan from GRC's Shields Up and no ports are open, they're all stealthed. I will do a NMAP with my WAN IP and a VPN and see what happens there as well.

I assume this is working like Team Viewer in how it penetrates a firewall. Which means there would have to be a third party server involved here.

This is the camera I have: Amazon.com : Spy Camera Wireless Hidden WiFi Camera AREBI HD 1080P Mini Camera Portable Home Security Cameras Covert Nanny Cam Indoor Video Recorder Small Camcorder with Motion Activated/Night Vision A10 Plus : Camera & Photo

Looks like the price went through the roof. I paid $36.
My System SpecsSystem Spec
1 Week Ago   #10
F22 Simpilot

Windows 7 Ultimate x64
 
 

Yep! There's a middle man! I looked in my live router log and my camera makes a connection to 47.104.218.22. Guess where that goes?

So yeah, no port forwarding needed. It connects to that IP and I connect to that IP with my phone to view the camera.
My System SpecsSystem Spec
Reply

 P2P camera security




Thread Tools




Similar help and support threads
Thread Forum
FTC files lawsuit against D-Link for router and camera security flaws
Read more: FTC files lawsuit against D-Link for router and camera security flaws | ZDNet
News
DVR Security Video Camera Recorder Card
Has anyone tried using WIN7 and any of the Security DVR Cards? if so, which ones are compatible with WIN7?
Graphic Cards
Security Camera
Due to recent vandalism of my car, I'm thinking of buying a security camera to be kept pointed at my vehicle. The main parking lot is out of sight, but there is a small section of parking visible from my apartment. However, it is ~100 feet from my balcony, and since I have never had a security...
Hardware & Devices
Set up Wireless Security Camera
I have a router right now. I want to put a security camera outside, but all my hardware is downstairs. It would be very hard to use an Ethernet connection. So, would it be good to put a router in my garage as an access point, and then direct connect a camera?
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:51.
Twitter Facebook Google+