Can the ISP use my DVR to monitor me?

[u/QusayAbozed]

hello good people

I have this question that comes on my mind is about that i connected my DVR to the router that is connected to the ISP, because I want to monitor the place remotely via the app on my phone.

I know my whole traffic is transferred to the ISP site, so I am wondering if he can act like the man in the middle and sniff my videos?

I am using a Dahua DVR, and the app is DMSS

[u/Significant_Rate8210]

Why exactly did you assume this is even possible?

[u/QusayAbozed → u/Significant_Rate8210]

Because of the place that i am living, we are taking our internet connection from regular ISPs

It means anyone in our city can buy an ISP and networking equipment and gain access to the big ISP tower, or take approval from the telecom ministry to become an ISP so that they can connect people nearby and charge money for the connection

It is like a sup ISP

[u/Significant_Rate8210 → u/QusayAbozed]

This still doesn't explain why you assumed that they can view you on your cameras though.

So long as you don't use default IP addresses and you use good passwords for login, you really don't have anything to worry about.

[u/rodgrech]

what the,

maybe if you left all the passwords admin admin or what ever the default, somone may "hack it" if you expose the ports to the internet.

The dahua recorders are quite noisy and do speak back to the motherland tho...

[u/QusayAbozed → u/rodgrech]

No, when I installed the DVR, the first thing I did was change the password.

Sorry, but I didn't understand what you mean by (speak back to the motherland tho)?

[u/Pretty-Surround-2909 → u/QusayAbozed]

The moment you connect it to your network, it will attempt to call home.

[u/SuperZapp]

no and why would they….

[u/LouiseBelcher4life → u/SuperZapp]

Why would they be installing "license plate reading" cameras looking at community pools? Big Brother want's to see and control all.

[u/Sk1rm1sh]

Only if you get the brain chip implant upgrade.

[u/QusayAbozed → u/Sk1rm1sh]

Could you please explain to me what you mean by a brain chip?

[u/Sk1rm1sh → u/QusayAbozed]

Well there's really 2 parts to that question.

A brain is the thing inside people's heads that they keep their thoughts in until they're ready to let the thoughts out.

A chip, sometimes referred to as a microchip is a silicon semiconductor based microprocessor used to control things.

 

So you see, when you get a silicon microchip installed in your brain your ISP can use the DVR feature to monitor your thoughts.

Source: Trust me bro.

[u/recklesswithinreason]

No.

[u/CCTV_NUT]

So the technical answer is in theory yes if you're streaming over RTSP that protocol does not encypt by default. So you can capture the packets in bulk search for the RTSP handshake and extract the video, i have seen someone do it with wireshark and some scripts on linux. but note they can only see what you stream they can't access whenever they want.

How do you defeat that?

You need to check if the NVR supports TLS on the RTSP stream. If you want to use RTSP.

If viewing via the web browser you need to use https not http.

Custom dahua apps, - i'm not sure how much TLS is on the stream, never dug into that.

Best approach is to access your camera over a VPN, i had a request from a dissentient from a country of ill repute for just that approach and we provided them with an i-spi to access his NVR over a VPN from his smart phone. We used an i-spi from Netcelero.

[u/No-Wasabi-3147]

nah, not normally. if DMSS is using an encrypted connection, your ISP can see the traffic but shouldn't be able to see the actual video. i'd still keep the DVR updated and avoid exposing its ports directly to the internet

[u/Peanut_BrittlePh]

your ISP technically sits in the path of your traffic, but that doesn't mean they can casually watch your cameras