mmainguy/cameras
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vrek: ISAPI snapshot findings, retire met goals

Browse Source 
- Record that camera …af54 has no full-resolution still over ONVIF or
  ISAPI (fnd-dw1pqcw, fnd-k1jyt83); close iss-3vck3js.
- Retire gol-2nxgqjn, and gol-wqf95dq and gol-8v1wqvp as met on one
  user observation each.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Michael Mainguy 2026-09-19 15:08:50 -05:00
parent ebd488b672
commit 2aac38146d
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
.vrek/log.ndjson
View File

@ -683,3 +683,27 @@
{"id":"evt-ayk36tqppyzy","type":"edge.added","subject":"ver-r6hm6fx","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"evidence_for","from":"ver-r6hm6fx","to":"iss-mt5zv64"},"at":"2026-09-19T20:02:27.849Z","parents":["evt-wdpzzhh7p6gt"],"hash":"099836c18a6b4af0731379a71ecacd0008bf92c8acc72b452c4bcd8ccf2c754c"}
{"id":"evt-kq708ggdmxjh","type":"verification.recorded","subject":"ver-r6hm6fx","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"result":"pass","evidence":"User checked in the browser on 2026-09-19 (\"looks good\")"},"at":"2026-09-19T20:02:27.850Z","parents":["evt-ayk36tqppyzy"],"hash":"4912547d89c2ac6b46b447b9a01c89c60905982c5858b1c02f82e8ebacad0170"}
{"id":"evt-mhcr8a835jb7","type":"node.status_changed","subject":"iss-mt5zv64","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"in_progress","to":"done"},"at":"2026-09-19T20:02:29.498Z","parents":["evt-kq708ggdmxjh"],"hash":"32cbe454fa3ac9e4fdab2c334cecff996981fc67162ecbf4b5088ff06d629e89"}
{"id":"evt-dq0ez0abqfhz","type":"node.created","subject":"fnd-56ba18a","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"finding","title":"Camera …af54's ISAPI picture endpoint accepts the ONVIF \"camera\" login but answered 503 Device Busy","body":"One read-only GET of /ISAPI/Streaming/channels/101/picture on 2026-09-19. Unauthenticated: 401 with a Digest challenge. With the stored Operator ONVIF login (\"camera\"), digest auth was accepted (no 401), which suggests ISAPI accepts this login on this firmware. The reply was HTTP 503 ResponseStatus: statusCode 2, \"Device Busy\", subStatusCode deviceBusy, with the description \"Unknow DDE mode:0 ;Unknow FFC mode:0 ;Unknow AGC mode:0 ;Get iris cfg failed ;get_image_gamma_correction failed\". The description reads like imaging-config lookups that fail on this model rather than true load, but that is unconfirmed. The dashboard may have been polling the ONVIF snapshot at the same time. Not yet known: whether a retry, ?snapShotImageType=JPEG, or channel 102 behaves differently.","status":"current","owner":"prn-q80g8mz","attrs":{"sources":[{"url":"http://localhost/ISAPI/Streaming/channels/101/picture","note":"Path on camera …af54 (address redacted per dec-kgm44qw); probed from a scratch Node script using the app's credential store, one request"}],"as_of":"2026-09-19"}},"at":"2026-09-19T20:04:00.606Z","parents":["evt-mhcr8a835jb7"],"hash":"d2b5a2d4fe35f8cd453cf81aab8d5987c191c6cfbad4635fc2e922f2a38acde7"}
{"id":"evt-80ktyzfhkxc3","type":"edge.added","subject":"fnd-56ba18a","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"informs","from":"fnd-56ba18a","to":"iss-3vck3js"},"at":"2026-09-19T20:04:00.607Z","parents":["evt-dq0ez0abqfhz"],"hash":"6ea8f1e98600fa712115f5c8089d4abdbb56e295fb493bed9721831e9db93438"}
{"id":"evt-75k0zxbpxk5y","type":"edge.added","subject":"fnd-56ba18a","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"discovered_from","from":"fnd-56ba18a","to":"iss-3vck3js"},"at":"2026-09-19T20:04:00.608Z","parents":["evt-80ktyzfhkxc3"],"hash":"d3455c8a99b47b2a7c8623df5a4422ac218fc898c1a2d6f1fd5d2ab52cc8fc80"}
{"id":"evt-pnmbsqwrjv8r","type":"node.status_changed","subject":"iss-3vck3js","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"open","to":"in_progress"},"at":"2026-09-19T20:04:02.444Z","parents":["evt-75k0zxbpxk5y"],"hash":"bce741481436200634f13696942242ca48b8fe8ccf4e200649a306d7f05744ff"}
{"id":"evt-baxhtc1rj1by","type":"node.created","subject":"fnd-k1jyt83","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"finding","title":"Camera …af54 has no full-resolution still over ISAPI: channel 101 always answers Device Busy, and channel 102 gives a 1200×536 JPEG at lower quality than ONVIF","body":"Three read-only requests on 2026-09-19, a few seconds apart, with the dashboard closed, using the stored Operator ONVIF login (\"camera\"). Digest auth was accepted every time. (1) /ISAPI/Streaming/channels/101/picture → 503 Device Busy (deviceBusy, empty description). (2) The same with ?snapShotImageType=JPEG → 503 Device Busy. (3) /ISAPI/Streaming/channels/102/picture → 200 image/jpeg, 1200×536, about 105 KB, luma quantization ≈ quality 41. That is worse than the ONVIF snapshot (1200×536, ≈ quality 81, fnd-dw1pqcw). Since it isn't a clash with polling, the refusal on 101 looks like a limit of the camera or firmware: it doesn't encode main-stream-size stills. It is not a permissions refusal, which would be a 401 or 403. Consequence: the ONVIF snapshot stays the best still on this camera; sharper full-size viewing needs the main video stream. The other camera is untested.","status":"current","owner":"prn-q80g8mz","attrs":{"sources":[{"url":"http://localhost/ISAPI/Streaming/channels/101/picture","note":"Camera …af54, address redacted per dec-kgm44qw; scratch Node script over the app's credential store; also ?snapShotImageType=JPEG and channels/102/picture"}],"as_of":"2026-09-19"}},"at":"2026-09-19T20:05:28.062Z","parents":["evt-pnmbsqwrjv8r"],"hash":"ca2758c41215058c9c162df586fa9bdf2546b43889ad5e6d5e9da81001e1c789"}
{"id":"evt-zqcxafrk8pxz","type":"edge.added","subject":"fnd-k1jyt83","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"informs","from":"fnd-k1jyt83","to":"iss-3vck3js"},"at":"2026-09-19T20:05:28.064Z","parents":["evt-baxhtc1rj1by"],"hash":"dc2374edb2504816e264758206c48da003af2bfa918c795469e586ae8a1b1954"}
{"id":"evt-pjz0ckg0z53k","type":"edge.added","subject":"fnd-k1jyt83","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"informs","from":"fnd-k1jyt83","to":"iss-mt5zv64"},"at":"2026-09-19T20:05:28.065Z","parents":["evt-zqcxafrk8pxz"],"hash":"56336db0181a83c2408e15106d2486119f28197776989320171c323096ac3214"}
{"id":"evt-tfs8wd261e62","type":"edge.added","subject":"fnd-k1jyt83","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"informs","from":"fnd-k1jyt83","to":"gol-6q1q5mr"},"at":"2026-09-19T20:05:28.066Z","parents":["evt-pjz0ckg0z53k"],"hash":"d5650bcbdf8e5e1f4d2593dc3156b635f8574f05d5d1aa9b5dcf7fe1a2093145"}
{"id":"evt-bsv9ac5477ks","type":"edge.added","subject":"fnd-k1jyt83","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"discovered_from","from":"fnd-k1jyt83","to":"iss-3vck3js"},"at":"2026-09-19T20:05:28.067Z","parents":["evt-tfs8wd261e62"],"hash":"728827a322190649cd18147db9e5330cca4c69a20e04ad9fae8a6984b6cac9c0"}
{"id":"evt-vx8r965hf7z1","type":"edge.added","subject":"fnd-k1jyt83","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"supersedes","from":"fnd-k1jyt83","to":"fnd-56ba18a"},"at":"2026-09-19T20:05:28.068Z","parents":["evt-bsv9ac5477ks"],"hash":"2f3215a2d55678186d11bb0b91c3130795ca59b3f3c078a6dc9c78fcbfe52c61"}
{"id":"evt-4ry45291zfz5","type":"node.status_changed","subject":"fnd-56ba18a","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"current","to":"superseded"},"at":"2026-09-19T20:05:28.069Z","parents":["evt-vx8r965hf7z1"],"hash":"07e58dcf959f3c1815740636adbd6904b04fec2cbaec896e10eb9aee5761397d"}
{"id":"evt-8nnk65a0jnq2","type":"node.created","subject":"ver-texrp4e","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"verification","title":"Determine whether ISAPI gives a main-stream-size still on camera …af54, and with which login","body":"","status":"pending","owner":"prn-q80g8mz","attrs":{}},"at":"2026-09-19T20:05:30.679Z","parents":["evt-4ry45291zfz5"],"hash":"388f1e5cbcd82839b8968a41381c2e08f05ba71848a85860e809a88070283b57"}
{"id":"evt-3c977965vgmj","type":"edge.added","subject":"ver-texrp4e","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"evidence_for","from":"ver-texrp4e","to":"iss-3vck3js"},"at":"2026-09-19T20:05:30.681Z","parents":["evt-8nnk65a0jnq2"],"hash":"d96a9075e55ceb614632f55654965812d1f51752e8994a13fcd0517d4fe8b5a6"}
{"id":"evt-s501w58t42j0","type":"verification.recorded","subject":"ver-texrp4e","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"result":"pass","evidence":"fnd-dw1pqcw and fnd-56ba18a superseded by the latest finding: 4 read-only requests on 2026-09-19. The ONVIF login is accepted; channel 101 is always 503 Device Busy; channel 102 is 1200×536 at about quality 41. Answer: no. Nothing to build; ONVIF snapshot stays."},"at":"2026-09-19T20:05:30.682Z","parents":["evt-3c977965vgmj"],"hash":"71e25b1395ed581914d43067af2f691f655ed6cd9a7cc47fdc64b6cc0f24b800"}
{"id":"evt-31wfy0e0behn","type":"node.status_changed","subject":"iss-3vck3js","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"in_progress","to":"done"},"at":"2026-09-19T20:05:32.277Z","parents":["evt-s501w58t42j0"],"hash":"ab824e99be59c7a0d026a2a4280d7728a307604e34cc44331417626f04e8cc0d"}
{"id":"evt-gp90bp7dyxp1","type":"node.status_changed","subject":"gol-2nxgqjn","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"active","to":"retired"},"at":"2026-09-19T20:06:51.785Z","parents":["evt-31wfy0e0behn"],"hash":"8d82783db5503360307b60bc9f50e2329c5e4aeb31f76d05e65ed06ed9020996"}
{"id":"evt-pejn1c73aty9","type":"node.updated","subject":"gol-wqf95dq","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"patch":{"target":1,"direction":"up","unit":"observation"}},"at":"2026-09-19T20:08:10.073Z","parents":["evt-gp90bp7dyxp1"],"hash":"ccca269a5d342339b5ec7433796edc84682d9ba1a073684b84c5631622807037"}
{"id":"evt-f0gez4jpjtrg","type":"node.updated","subject":"gol-8v1wqvp","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"patch":{"target":1,"direction":"up","unit":"observation"}},"at":"2026-09-19T20:08:11.760Z","parents":["evt-pejn1c73aty9"],"hash":"8f64b7a4052553c54d86b6af71a9114cc1fc23e205b4ff75cc3903b32bc79438"}
{"id":"evt-5z1z2db4js40","type":"node.created","subject":"mea-t947bzm","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"measurement","title":"User observed the admin login working end to end","body":"One observation by the user, in their own browser on 2026-09-19: they went through the admin login flow (first-run setup, sign-in, access checks) and reported it working.","status":"recorded","owner":null,"attrs":{"value":1,"applies_at":"2026-09-19"}},"at":"2026-09-19T20:08:13.879Z","parents":["evt-f0gez4jpjtrg"],"hash":"733c19d29fd9b0f7c182b5ea69d157fe9ab002ceee4051d9ebe159b59b194061"}
{"id":"evt-1cj89wb280va","type":"edge.added","subject":"mea-t947bzm","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"measures","from":"mea-t947bzm","to":"gol-wqf95dq"},"at":"2026-09-19T20:08:13.880Z","parents":["evt-5z1z2db4js40"],"hash":"d74c4a5b6cfa76d441682181caff0f11437abf9f6f2008b391215261b731c6a3"}
{"id":"evt-w09sa3f2h4aa","type":"node.created","subject":"mea-gv9sb0y","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"measurement","title":"User observed camera configuration from the dashboard working","body":"One observation by the user, in their own browser on 2026-09-19: they edited image settings, including Manual exposure time and gain, on camera …af54 from the dashboard, saw the changes take effect and re-read correctly, and reported it working. The audit log (.data/audit.jsonl) records the writes.","status":"recorded","owner":null,"attrs":{"value":1,"applies_at":"2026-09-19"}},"at":"2026-09-19T20:08:15.658Z","parents":["evt-1cj89wb280va"],"hash":"fe9b573fedaf665cb134380df7a7900401d78c9cc921da02d38029df0f3c7c0e"}
{"id":"evt-dz2878nr89ab","type":"edge.added","subject":"mea-gv9sb0y","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"kind":"measures","from":"mea-gv9sb0y","to":"gol-8v1wqvp"},"at":"2026-09-19T20:08:15.659Z","parents":["evt-w09sa3f2h4aa"],"hash":"651b96a20aa6b5821228bd1dd3e453166459b0c40615ebbea40473181c504def"}
{"id":"evt-1nrbjvd6dhwk","type":"node.status_changed","subject":"gol-wqf95dq","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"active","to":"retired"},"at":"2026-09-19T20:08:17.305Z","parents":["evt-dz2878nr89ab"],"hash":"4e463236d2b2f7eebacdee0fb7ed54f32b15ff22708ab4b6da2ea4131cc0c986"}
{"id":"evt-se02cx1hnx2m","type":"node.status_changed","subject":"gol-8v1wqvp","actor":"prn-q80g8mz","actor_kind":"agent","session":null,"payload":{"from":"active","to":"retired"},"at":"2026-09-19T20:08:19.008Z","parents":["evt-1nrbjvd6dhwk"],"hash":"2e2f8e20f651351b95817371b2eebd95ba39d91001344beadd6af12baa90d6cf"}