Backdoors and other vulnerabilities in HiSilicon based hardware video encoders

Re:Backdoors and other vulnerabilities in HiSilicon based ha... by RL_Quine on Friday September 18, 2020 @10:25AM (#24517160)

They went to some amount of effort to hide it.

On a Hikvision one I pulled apart recently it was literally a binary running as root called `backdoorServer`.

[ Parent | on HN ]

Re:Backdoors and other vulnerabilities in HiSilicon based ha... by balola on Friday September 18, 2020 @12:08PM (#24518545)

Hikvision, a effectively state owned company.

[ Parent | on HN ]

Re:Backdoors and other vulnerabilities in HiSilicon based ha... by RL_Quine on Friday September 18, 2020 @12:17PM (#24518657)

No, literally state owned. The stuff they sell under a huge range of brands (even Monoprice I believe) is malware. Plain and simple.

[ Parent | on HN ]

Re:Backdoors and other vulnerabilities in HiSilicon based ha... by not_exactly__ on Friday September 18, 2020 @02:51PM (#24520544)

Do provide a write up when you can.

[ Parent | on HN ]

Re:Backdoors and other vulnerabilities in HiSilicon based ha... by trasz on Friday September 18, 2020 @10:28AM (#24517200)

Any real effort would start with using a hash instead of plaintext password.

[ Parent | on HN ]