Hello aliyense!
Ndimapanga firmware yamakamera owunikira makanema a b2b ndi b2c, komanso omwe akuchita nawo ntchito zowunikira makanema.
Ndinalemba momwe tinayambira .
Kuyambira pamenepo, zambiri zasintha - tinayamba kuthandizira ma chipsets ochulukirapo, mwachitsanzo, monga mstar ndi fullhan, tidakumana ndikupeza mabwenzi ambiri akunja ndi apakhomo opanga makamera a IP.
Nthawi zambiri, opanga makamera nthawi zambiri amabwera kwa ife kudzawonetsa zida zatsopano, kukambirana zaukadaulo wa firmware kapena kupanga.
Koma, monga nthawi zonse, nthawi zina anyamata achilendo amabwera - amabweretsa zinthu zaku China zamtundu wosavomerezeka ndi firmware yodzaza mabowo, komanso chizindikiro chophimbidwa mwachangu cha fakitale yachitatu, koma nthawi yomweyo amati adapanga zonse okha: zozungulira ndi firmware, ndipo zidakhala zaku Russia kwathunthu.
Lero ndikuwuzani za ena mwa anyamatawa. Kunena zowona, sindine wochirikiza kukwapulidwa pagulu kwa "olowa m'malo" osasamala - nthawi zambiri ndimaganiza kuti sitikufuna ubale ndi makampani oterowo, ndipo pakadali pano timasiyana nawo.
Koma, komabe, lero, ndikuwerenga nkhani pa Facebook ndikumwa khofi yanga yam'mawa, ndinatsala pang'ono kutaya nditawerenga kuti wothandizira wa Rusnano, kampani ELVIS-NeoTek, pamodzi ndi Rostec, adzapereka makamera masauzande masauzande kusukulu.
Pansipa pali tsatanetsatane wa momwe tidawayesa.
Inde, inde - awa ndi anyamata omwewo omwe adandibweretsera China motsika mtengo komanso woyipa, motengera chitukuko chawo.
Chifukwa chake, tiyeni tiwone zowona: Anatibweretsera kamera ya "VisorJet Smart Bullet", yochokera kunyumba - inali ndi bokosi ndi pepala lovomerezeka la QC (:-D), mkati mwake munali kamera yaku China yokhazikika yotengera Hisilicon 3516 chipset.
Pambuyo popanga dambo la firmware, zidawonekeratu kuti wopanga kamera ndi firmware anali kampani inayake "Brovotech", yomwe imagwira ntchito popereka makamera a IP okhazikika. Payokha, ndidakwiyitsidwa ndi dzina lachiwiri la ofesiyi "»ndi zabodza za dzina la kampani Ezviz, mwana wamkazi wa b2c wa m'modzi mwa atsogoleri adziko lapansi Hikvision. Hmm, zonse zili m'miyambo yabwino kwambiri ya Abibas ndi Nokla.
Chilichonse mu firmware chidakhala chokhazikika, chonyozeka mu Chitchaina:
Mafayilo mu firmware
├── alarm.pcm
├── bvipcam
├── cmdserv
├── daemonserv
├── amazindikira
├── zilembo
├── lib
...
│ └── libsony_imx326.so
├── sinthaninso
├── start_ipcam.sh
├── sysconf
│ ├── 600106000-BV-H0600.conf
│ ├── 600106001-BV-H0601.conf
...
│ └── 600108014-BV-H0814.conf
├── system.conf -> /mnt/nand/system.conf
├── mtundu.conf
└── www
...
├── chizindikiro
│ ├── elvis.jpg
│ └── qrcode.png
Kuchokera kwa wopanga zoweta tikuwona fayilo elvis.jpg - osati yoyipa, koma ndi cholakwika m'dzina la kampani - kuweruza malo omwe amatchedwa "elvees".
bvipcam imayang'anira magwiridwe antchito a kamera - ntchito yayikulu yomwe imagwira ntchito ndi mitsinje ya A/V ndipo ndi seva yapaintaneti.
Tsopano za mabowo ndi kuseri:
1. Khomo lakumbuyo mu bvipcam ndilosavuta: strcmp (password,"20140808") && strcmp (dzina lolowera,"bvtech"). Siyiyimitsidwa, ndipo imayenda pa doko lopanda olumala 6000
2. Mu /etc/shadow pali mawu achinsinsi okhazikika komanso doko lotseguka la telnet. Osati MacBook yamphamvu kwambiri yokakamiza mawu achinsinsi pasanathe ola limodzi.
3. Kamera imatha kutumiza mapasiwedi onse osungidwa kudzera pa mawonekedwe owongolera pamawu omveka bwino. Ndiko kuti, pofikira kamera pogwiritsa ntchito chipika chakumbuyo chakumbuyo kuchokera ku (1), mutha kudziwa mawu achinsinsi a ogwiritsa ntchito onse.
Ndidachita zonyenga zonsezi ndekha - chigamulo chake ndi chodziwikiratu. Firmware yaku China yachitatu, yomwe singagwiritsidwe ntchito ngakhale pama projekiti akuluakulu.
Mwa njira, ndinazipeza pambuyo pake - momwemo iwo adagwira ntchito yozama pophunzira mabowo mu makamera kuchokera ku brovotech. Hmmm.
Kutengera zotsatira za kafukufukuyu, tidalemba zomaliza kwa ELVIS-NeoTek ndi zowona zonse zomwe zidapezeka. Poyankha, tidalandira yankho lalikulu kuchokera kwa ELVIS-NeoTek: "Firmware yamakamera athu idakhazikitsidwa pa Linux SDK kuchokera kwa wopanga owongolera HiSilicon. Chifukwa olamulira awa amagwiritsidwa ntchito mu makamera athu. Panthawi imodzimodziyo, mapulogalamu athu adapangidwa pamwamba pa SDK iyi, yomwe imayang'anira kuyanjana kwa kamera pogwiritsa ntchito ndondomeko zosinthira deta. Zinali zovuta kuti akatswiri oyesa mayeso adziwe, popeza sitinapereke mwayi wofikira makamera.
Ndipo pamene ayesedwa kuchokera kunja, lingaliro lolakwika likhoza kupangidwa. Ngati ndi kotheka, ndife okonzeka kuwonetsa akatswiri anu njira yonse yopangira ndi firmware yamakamera pakupanga kwathu. Kuphatikizira kuwonetsa ma code ena a firmware. "
Mwachibadwa, palibe amene anasonyeza gwero code.
Ndinaganiza zosiya kugwira nawo ntchito. Ndipo tsopano, patatha zaka ziwiri, mapulani a kampani ya Elvees yopangira makamera otsika mtengo achi China okhala ndi firmware yaku China yotsika mtengo motengera chitukuko cha Russia apeza ntchito yawo.
Tsopano ndidapita patsamba lawo ndikupeza kuti asintha makamera awo ndipo sakuwonekanso ngati Brovotech. Wow, mwina anyamatawo adazindikira ndikudzikonza - adachita zonse okha, nthawi ino moona mtima, popanda firmware yotayirira.
Koma, tsoka, kuyerekezera kophweka "Russian" kamera adapereka zotsatira.
Chifukwa chake, kukumana ndi choyambirira: makamera ochokera kumtunda wosadziwika wamalonda.
Kodi mtunda uwu uli bwino bwanji kuposa brovotech? Kuchokera pamalingaliro achitetezo, mwina, palibe - njira yotsika mtengo yogula.
Tangoyang'anani pa chithunzi cha mawonekedwe a intaneti a milesight ndi makamera a ELVIS-NeoTek - sipadzakhala kukayikira: makamera a "Russian" VisorJet ndi ofanana ndi makamera akutali. Osati zithunzi zokha zapaintaneti zomwe zimagwirizana, komanso zokhazikika za IP 192.168.5.190 ndi zojambula za kamera. Ngakhale mawu achinsinsi osasinthika ndi ofanana: ms1234 vs en123456 ya clone.
Pomaliza, nditha kunena kuti ndine bambo, ndili ndi ana kusukulu ndipo ndikutsutsana ndi kugwiritsa ntchito makamera aku China okhala ndi firmware yaku China yotayirira, yokhala ndi Trojans ndi kumbuyo kwamaphunziro awo.
Source: www.habr.com