Technical request / Architecture & Security / Data flow

[User_63_633151097208875]

Owner of the new doorbell cam, I noticed that:

• App notifications about detected motion does work when I'm connected to the LAN... but surpringly also transparently when out
• I can get a live stream from the cam, when connected on LAN or anywhere with an Internet connection
• User password change does break notification feature

a) Consequently is there any technical document that explains data flow / mechanism between my local IP cam and Android App on my phone (and any third parties)?

b) Are there some security guidelines about how to harden cam systems?

[User_63_633151097208875]

Any one interested in Information Security?

[Kristof]

@user_63_633151097208875 Well it's not that surprising as it is a cloud doorbell. This means quite simply said the doorbell connects to a cloud server where the IP is stored. Then you connect to the cloud server with your phone and request the IP of YOUR doorbell, so a connection can be established. I am not a network technician though.

If you don't want it to work outside of your lan you have to restrict internet access for the doorbell on your router for example.

[joseph_1979]

@user_63_633151097208875 Just do a search on P2P protocol and you will get an idea of how data flows between the client and the IP camera. Once I did get into details and maybe you can do a search in the community articles. As to enhance security, have a strong password and change it say every 2 months and if you have fw then implement some rules.

[User_63_633151097208875]

Thanks @joseph-chircop_497308027822318, I'll search for these details and feedback.