Les avions en vol, les cargos, les satellites espions, les zones de brouillage GPS... Imaginez tout ce bordel, à l'échelle de la planète, visible sur une seule carte sombre directement chez vous. Ce serait fou non ? Hé bien c'est ce que nous propose BigBodyCobain qui a sorti
ShadowBroker
, un tableau de bord OSINT gratuit et open source qui agrège plus de 60 flux de renseignement public, rafraîchis en continu.
Pour l'installer, un git clone, et on entre dans le dossier. Suffit ensuite de lancer un docker compose up (faut juste Docker, et ça tourne sous Linux, Mac ou Windows), vous ouvrez localhost:3000 et la carte se remplit toute seule ! Ça marche même sur un Raspberry Pi 5. C'est donc largement plus simple que la moitié des trucs que je vous présente ici en général.
Y'a qu'une seule clé API qui est vraiment obligatoire, c'est celle d'aisstream.io pour le trafic des bateaux, et c'est une inscription gratuite. Le reste tourne sans rien, sauf qu'une clé OpenSky (gratuite aussi) est chaudement recommandée pour une couverture aérienne correcte, + quelques couches secondaires qui acceptent leur propre clé pour avoir de la meilleure info.
L'interface principale de ShadowBroker : une carte du globe qui empile en temps réel avions, navires et satellites, chat MESH à gauche et fil Global Threat Intercept à droite
Pour ceux qui débarquent, l'OSINT c'est le renseignement à partir de sources ouvertes, c'est à dire toutes ces données déjà publiques que personne ne prend le temps d'aller croiser. Donc cet agrégateur ne pirate rien... il ramasse juste ce qui traîne déjà en accès libre.
Et là, vous vous demandez ce qu'il y a dedans en détails ?
Hé bien accrochez-vous parce qu'on y retrouve les avions civils via OpenSky, les militaires via adsb.lol, l'ADS-B étant le signal que tout avion crache en vol, avec Air Force One bien visible dès le décollage. Et les bateaux sont suivis en AIS, l'équivalent radio côté maritime.
Y'a aussi les satellites dont la trajectoire est calculée depuis leurs paramètres orbitaux, les séismes de l'USGS, les feux repérés par la NASA, les conflits agrégés depuis GDELT, la ligne de front ukrainienne via DeepState et même un tracker pour suivre les porte-avions américains (c'est une position estimée à partir de l'actu publique, et pas du temps réel).
Du coup ça va loin ! Les zones de brouillage GPS probable sont même déduites quand le signal de navigation des avions se dégrade et on y retrouve aussi plus de 11 000 caméras de circulation aussi, de Londres à Singapour en passant par les États-Unis et l'Espagne.
Le panneau Data Layers (séismes, satellites, brouillage GPS, lignes de front) ouvert sur une zone de conflit, avec le détail des reports terrain
Il y a même un tuner d'ondes courtes intégré, branché sur des centaines de récepteurs radio partagés par des amateurs (les SDR, des radios pilotées par logiciel). Et les scanners de la police américaine sont aussi en écoute directe.
Et en faisant un clic droit n'importe où sur le globe, ce radar mondial vous sortira un dossier du pays, avec le type de gouvernement, le chef d'État tiré de Wikidata, un résumé Wikipédia et la dernière image satellite Sentinel-2 disponible.
Côté bidouille, vous pouvez aussi brancher votre propre dongle RTL-SDR, une clé radio à pas cher, en plus du flux distant pour choper les bateaux à portée de votre antenne. Et avec une clé Shodan, un overlay optionnel ajoute les objets connectés visibles depuis Internet, tels que les caméras, les systèmes industriels, les bases de données et j'en passe.
Ça rejoint ce bon vieux
moteur de recherche d'objets connectés
dont je vous parlais il y a quelques années. Et si l'OSINT vous gratte vraiment, y'a aussi de quoi
vous entraîner
sérieusement avec ce site aussi.
La légende de cet outil veut que l'idée soit partie d'une envie de pister les déplacements d'Elon Musk avec une interface cyberpunk. Le nom, lui, vient du Shadow Broker de Mass Effect (rien à voir avec
le groupe de hacker Shadow Brokers
). D'après le créateur, GitHub aurait même fait retirer le dépôt d'origine à cause de ce nom, d'où un petit détour par GitLab avant de revenir à Github.
Bref, ce truc agrège une quantité hallucinante de données publiques mondiales...
Après, au niveau du code, tout n'est pas non plus très clair car même si l'OSINT c'est légal, le code du scrapeur d'une carte de guerre contourne volontairement la protection Cloudflare Turnstile, ce qui pose
une vraie question légale
côté CFAA, la loi américaine contre l'intrusion informatique. C'est une zone grise...
Et y'a aussi des failles puisque plusieurs endpoints ne sont pas authentifiés, dont un qui laisse n'importe qui envoyer des messages APRS (le réseau de positionnement des radioamateurs) sous n'importe quel indicatif, ce qui est une infraction pure et simple aux règles radio.
Quant à la messagerie soi-disant chiffrée ne l'est pas de bout en bout, mais juste obfusquée donc ne faites rien transiter de sensible dessus.
Voilà si je vous dis tout ça, c'est pour que vous gardiez cet outil bien au chaud en local et que vous ne l'exposiez pas sur le net.
Zoom sur la côte de Floride : chaque marqueur est un avion suivi en direct via l'ADS-B, façon radar (
Source : GIGAZINE
)
Mais bon, ça fait une belle salle de crise gratuite, open source sous licence AGPL, installable par exemple sur un Raspberry Pi. Grâce à ça, le monde n'a jamais été aussi "lisible" depuis votre canapé !
UniFi UNVR Gen 2 and UNVR Gen 2 Pro: What Has Actually Changed?
UniFi’s UNVR range has always occupied a fairly clear role in the Protect ecosystem: a dedicated rackmount recorder for users who have outgrown smaller gateway-based recording, or who want their surveillance storage separated from the rest of their network hardware. With the new UNVR Gen 2 and UNVR Gen 2 Pro, Ubiquiti is shifting that role further. These are still network video recorders first, but the hardware and software changes point toward a more active surveillance appliance, with higher camera support, local AI processing, HDMI output for live viewing, and closer integration with the newer direction of UniFi Protect. The issue is that this also comes with a much higher price than the previous UNVR and UNVR Pro, so the question is not simply whether the Gen 2 models are better, but whether the added hardware and features are relevant enough to justify the increase for different types of deployments.
UNVR G.2 and UNVR G.2 Pro – Specifications
The UNVR Gen 2 is the 1U model in the new range and keeps the same general rackmount class as the original UNVR, with 4 2.5/3.5″ HDD or SSD bays. Its camera support is rated at up to 50 HD cameras, 35 2K cameras, or 25 4K cameras, with support for 150+ Access Hubs. Networking is handled by 1 10G SFP+ port and 1 2.5GbE RJ45 port, while the chassis measures 442.4 x 43.7 x 325 mm.
Internally, it moves to a Qualcomm Kryo CPU built on Arm Cortex technology using a 4 nm process, with 1 Prime core at 3.2 GHz, 4 Performance cores at 2.8 GHz, and 3 Efficiency cores at 2.0 GHz. Memory is increased to 8 GB, drive power budget remains 75W, and maximum system power consumption is listed at 100W.
The UNVR Gen 2 Pro is the larger 2U model and increases the drive count to 8 2.5/3.5″ HDD or SSD bays, compared with 7 bays on the previous UNVR Pro. Its camera support is rated at up to 100 HD cameras, 70 2K cameras, or 50 4K cameras, again with support for 150+ Access Hubs. The Pro model uses the same Qualcomm Kryo CPU arrangement as the smaller Gen 2 model, but increases memory to 16 GB. Networking consists of 1 10G SFP+ port and 1 2.5GbE RJ45 port, with a listed chassis size of 442.4 x 87.4 x 325 mm. The drive power budget rises to 155W, while maximum power consumption is listed at 200W.
Both Gen 2 models also include HDMI output for the built-in ViewPort function, which allows a Protect multi-view to be assigned directly to a connected display rather than requiring a separate ViewPort device.
Specification
UniFi UNVR Gen 2
UniFi UNVR Gen 2 Pro
Price
$699
$999
Form factor
Rackmount 1U
Rackmount 2U
Dimensions
442.4 x 43.7 x 325 mm
442.4 x 87.4 x 325 mm
Drive bays
4 x 2.5/3.5″ HDD/SSD
8 x 2.5/3.5″ HDD/SSD
Managed cameras
50 HD / 35 2K / 25 4K
100 HD / 70 2K / 50 4K
Managed Access Hubs
150+
150+
Networking
1 x 10G SFP+ / 1 x 2.5GbE RJ45
1 x 10G SFP+ / 1 x 2.5GbE RJ45
HDMI output
Yes, built-in ViewPort
Yes, built-in ViewPort
ViewPort stream limit
Up to 16 streams
Up to 16 streams
Processor
Qualcomm Kryo CPU built on Arm Cortex technology, 4 nm
Qualcomm Kryo CPU built on Arm Cortex technology, 4 nm
CPU configuration
1 Prime core at 3.2 GHz, 4 Performance cores at 2.8 GHz, 3 Efficiency cores at 2.0 GHz
1 Prime core at 3.2 GHz, 4 Performance cores at 2.8 GHz, 3 Efficiency cores at 2.0 GHz
Memory
8 GB
16 GB
Integrated Edge AI
Yes
Yes
AI detections
Up to 1,000 per hour
Up to 1,000 per hour
Edge AI features
Natural Language Search, Object Indexing in Find Anything, Person ReID, Search by Image
Natural Language Search, Object Indexing in Find Anything, Person ReID, Search by Image
Max. drive power budget
75W
155W
Max. power consumption
100W
200W
Power method
Universal AC input, 100 to 240V AC, 50/60 Hz
Universal AC input, 100 to 240V AC, 50/60 Hz
Power supply
Internal PSU, 100W
Internal PSU, 200W
Minimum NVR version
Not specified in supplied notes
5.1.10
Minimum Protect version
7.1.46
7.1.46
UNVR Gen 2 vs Original UNVR: Where the Price Increase Comes From
The clearest difference between the original UNVR and the UNVR Gen 2 is the change in hardware platform. The older UNVR uses a quad-core ARM Cortex-A57 processor at 1.7 GHz with 4 GB of memory, while the UNVR Gen 2 moves to the newer Qualcomm Kryo ARM-based CPU platform and 8 GB of memory. The network layout has also changed, with the older model using 1 GbE RJ45 alongside 10G SFP+, while the Gen 2 model upgrades the RJ45 connection to 2.5GbE. Storage bay count remains the same at 4 bays, but camera capacity changes from 60 HD, 30 2K, or 18 4K cameras on the original UNVR to 50 HD, 35 2K, or 25 4K cameras on the Gen 2 model. That means the newer system is not a straight increase across every camera category, but it does raise support for higher-resolution 2K and 4K deployments.
The pricing difference is more substantial than the specification changes would suggest if this were only a conventional recorder update. The original UNVR is positioned at $299, while the UNVR Gen 2 is positioned at $699. The explanation appears to be that UniFi is treating the Gen 2 model as a more complete Protect appliance rather than just a higher-performance version of the old 4-bay recorder.
The HDMI output effectively integrates ViewPort-style live display support, while the built-in Edge AI features shift part of the workload that would otherwise require additional hardware such as an AI Key. This does not make the older UNVR obsolete for simpler recording tasks, but it does change the buying decision. The Gen 2 model is aimed more clearly at deployments that need local AI search, image-based search, person re-identification, and direct live monitoring from the recorder itself.
Specification
Older UNVR / UNVR Pro
New UNVR Gen 2 / UNVR Gen 2 Pro
Models compared
UNVR / UNVR Pro
UNVR Gen 2 / UNVR Gen 2 Pro
Price
$299 / $499
$699 / $999
Form factor
1U / 2U
1U / 2U
Dimensions
442 x 325 x 44 mm / 442 x 325 x 87 mm
442.4 x 43.7 x 325 mm / 442.4 x 87.4 x 325 mm
Drive bays
4 x 2.5/3.5″ HDD/SSD / 7 x 2.5/3.5″ HDD/SSD
4 x 2.5/3.5″ HDD/SSD / 8 x 2.5/3.5″ HDD/SSD
Managed HD cameras
60 / 70
50 / 100
Managed 2K cameras
30 / 35
35 / 70
Managed 4K cameras
18 / 24
25 / 50
Managed Access Hubs
150 / 150
150+ / 150+
Networking
1 x 10G SFP+ and 1 x GbE RJ45
1 x 10G SFP+ and 1 x 2.5GbE RJ45
HDMI output
No integrated ViewPort
Yes, integrated ViewPort via HDMI
ViewPort stream limit
Requires separate ViewPort device
Up to 16 streams
Processor
Quad ARM Cortex-A57 cores at 1.7 GHz
Qualcomm Kryo CPU built on Arm Cortex technology, 4 nm
CPU configuration
4 cores
1 Prime core at 3.2 GHz, 4 Performance cores at 2.8 GHz, 3 Efficiency cores at 2.0 GHz
Memory
4 GB / 8 GB
8 GB / 16 GB
Integrated Edge AI
No
Yes
AI features
Requires additional UniFi AI hardware for expanded AI functionality
Natural Language Search, Object Indexing in Find Anything, Person ReID, Search by Image
AI detections
Not specified
Up to 1,000 per hour
Max. drive power budget
75W / 135W
75W / 155W
Max. power consumption
100W / 160W
100W / 200W
Power supply
Internal AC/DC, 120W / 200W
Internal PSU, 100W / 200W
Power redundancy
USP-RPS DC input supported
USP-RPS DC input supported
Main practical difference
Dedicated UniFi Protect recording and storage appliances
Higher-resolution camera scaling, integrated display output, and local AI search features
Protect 7.1 and the Shift Toward Local AI Surveillance
UniFi Protect 7.1 is an important part of the UNVR Gen 2 release, because several of the headline hardware features depend on the newer Protect software stack. The Gen 2 recorders include built-in Edge AI functionality, with support for Natural Language Search, Object Indexing in Find Anything, Person ReID, and Search by Image. In practical terms, this changes how recorded footage can be searched. Instead of relying only on a timeline, motion events, or predefined smart detections, the system is designed to help users locate more specific events across stored footage using more descriptive search methods. The built-in AI functionality is local and license-free, but for larger or busier deployments, UniFi still recommends adding 1 or more AI Keys to expand processing capacity, reduce Edge AI latency, and lower the chance of missed events.
Protect 7.1 also expands the broader surveillance feature set beyond the Gen 2 recorders themselves. Custom Video Walls are now available in Site Manager, dashboard widgets have deeper customization, and live camera views can be configured with webhook shortcuts for triggering automations from the camera interface. Smart detections have been retrained for improved accuracy across UniFi cameras, PTZ tracking has been expanded to include vehicles, and 360 cameras now support native immersive downloads. ONVIF support is also more developed, with audio and motion detection support for third-party cameras, which is significant for sites migrating gradually from existing surveillance hardware into UniFi Protect. The update also introduces U.S.-only Noonlight dispatch services for sensor and video monitoring at $199 per year, DC-09 support for third-party monitoring integrations, and SuperLink Remote Control support for customizable site control. Below is a full breakdown of the feaures of UniFi Protect, and which require AI assistance (either edge based on the camera/AI-port, or local using an AI assisted server or AI-Key):
UniFi Protect Feature
What It Does
AI Related?
Local NVR Recording
Records camera footage to a UniFi console or dedicated NVR rather than relying on mandatory cloud storage.
No
Live Camera View
Provides real-time camera viewing through the UniFi Protect interface, mobile app, and supported display outputs.
No
Timeline Playback
Allows users to review recorded footage across a visual timeline.
No
Motion Events
Flags movement-based activity in recorded footage for faster review.
No
Smart Detections
Identifies specific event types such as people, vehicles, and other supported detection categories rather than relying only on basic motion.
Yes
Person Detection
Detects people in camera footage and can be used for alerts, filtering, and event review.
Yes
Vehicle Detection
Detects vehicles in supported camera views and can be used to separate vehicle events from general motion.
Yes
Facial Recognition
Supports recognition-based workflows on compatible UniFi AI-capable cameras and supported configurations.
Yes
License Plate Logging
Allows supported cameras and configurations to identify and log vehicle plates for later search or review.
Yes
Audio Classification
Uses supported cameras to classify certain audio events, improving event review beyond video-only detection.
Yes
Natural Language Search
Allows users to search footage using descriptive human-language queries rather than relying only on manual timeline browsing.
Yes
Object Indexing in Find Anything
Indexes objects in recorded footage so users can locate relevant events more quickly.
Yes
Person Re-Identification
Helps track or locate the same person across different footage events without relying only on a single camera timeline.
Yes
Search by Image
Allows footage search using an image reference rather than only text, date, or event filters.
Yes
Edge AI Processing
Runs AI-related analysis locally on supported cameras, NVRs, or UniFi AI hardware rather than requiring a cloud AI subscription.
Yes
Alarm Manager
Allows alerts and responses to be configured around selected events, detections, and system triggers.
Partly
Custom Video Walls in Site Manager
Allows larger camera layouts and multi-camera views to be arranged in Site Manager for monitoring across a deployment.
No
Dashboard Widget Customization
Allows the Protect dashboard to be adjusted with more relevant widgets and status information.
No
Live Camera View Customization
Allows camera live views to be configured more flexibly, including command-style interactions such as webhook shortcuts.
No
Webhook Shortcuts
Allows users to trigger external actions or automations from camera live views.
No
PTZ Tracking
Allows supported pan-tilt-zoom cameras to follow detected activity.
Partly
PTZ Vehicle Tracking
Expands PTZ tracking to vehicles, allowing supported PTZ cameras to track vehicle movement as a detection category.
Yes
360 Camera Support
Supports panoramic and 360-degree camera formats in Protect.
No
Native Immersive Downloads for 360 Cameras
Allows 360 camera footage to be exported in its immersive format rather than only as a flattened view.
No
ONVIF Third-Party Camera Support
Allows compatible third-party ONVIF cameras to be added to UniFi Protect, helping sites migrate gradually from older surveillance systems.
No
ONVIF Audio Detection
Adds audio event support for ONVIF cameras where supported, expanding third-party camera usefulness in Protect.
Partly
ONVIF Motion Detection
Adds motion event support for ONVIF cameras where supported, reducing the feature gap between UniFi and third-party cameras.
No
Integrated ViewPort via HDMI
Allows supported NVRs, including the UNVR Gen 2 range, to output a camera multi-view directly over HDMI.
No
Multi-View Display Assignment
Allows a Protect multi-view to be assigned to an HDMI display for live monitoring.
No
AI Key Expansion
Allows additional AI processing hardware to be added for heavier deployments, reducing AI latency and expanding processing capacity.
Yes
AI Port Support
Adds smart detections and AI functions to supported third-party or legacy cameras, depending on configuration.
Yes
Noonlight Dispatch Services
Adds U.S.-only sensor and video monitoring via Noonlight, listed in the supplied Protect 7.1 notes at $199 per year.
No
DC-09 Monitoring Integration
Supports third-party monitoring integrations using the SIA DC-09 interface.
No
SuperLink Remote Control
Adds customizable site control through a long-range remote control accessory.
No
No Mandatory Camera License Fees
UniFi Protect does not use a per-camera license model in the same way as many enterprise VMS platforms.
Bottom Line: A More Capable NVR, but Not a Like-for-Like Replacement
The UNVR Gen 2 and UNVR Gen 2 Pro make more sense when viewed as expanded Protect appliances rather than direct replacements for the older UNVR and UNVR Pro. The new models add faster processing, more memory, 2.5GbE RJ45 networking, HDMI output for built-in ViewPort use, higher 2K and 4K camera ceilings, and local Edge AI features that change how recorded footage can be searched and reviewed. The Pro model also gains an 8th drive bay, which makes it a cleaner fit for larger retention requirements than the older 7-bay UNVR Pro. For sites already planning to use AI search, Person ReID, image-based search, or a direct HDMI monitoring display, the higher price is easier to explain because those functions would otherwise involve additional hardware or a less integrated setup.
That does not mean the price increase will make sense for every Protect installation. The original UNVR and UNVR Pro remain better aligned with users who mainly need reliable recording, centralized Protect storage, and conventional camera management without paying for a broader AI-enabled appliance. The Gen 2 models are therefore best judged by deployment requirements rather than by bay count alone. For new or expanding surveillance environments with higher-resolution cameras, active monitoring, ONVIF migration plans, and a need to search footage more intelligently, the UNVR Gen 2 range has a clearer role. For simpler sites where AI features and HDMI ViewPort output are not a priority, the older UNVR models still have a practical argument, provided UniFi continues to keep them available.
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.
Si vous croisez un robot-chien Unitree dans un hall d'HLM, sur un parking, un chantier, ou en train de patrouiller dans votre ville, faut que vous sachiez 2 trucs quand même :
Un, n'importe qui peut le rooter en moins d'une minute avec son téléphone. Et de deux, le robot lui-même envoie en continu un flux chiffré vers un tunnel cloud opéré depuis la Chine. C'est en tout cas ce que Benn Jordan, musicien indépendant et chercheur amateur, vient de démontrer hier dans une enquête de 24 minutes qui fait, comme il le dit lui-même, un meilleur boulot que toute l'infrastructure cybersécurité du gouvernement américain.
Pour le hacker, suffit donc de se connecter au robot en Bluetooth, puis d'injecter une commande curl à la fin du mot de passe Wi-Fi, on éteint le toutou, on le rallume, et au reboot le robot exécute votre commande quand il active le Wi-Fi. C'est tout et c'est vraiment magique !! Pas besoin d'accès root physique donc mais juste un bon vieux téléphone et un Bluetooth pourri !
Le boss !
Alors vous pensez peut-être que ce n'est pas très grave parce que ces robots sont des gadgets mais c'est faux puisque les robots-chiens Unitree sont actuellement utilisés par les services de police de Pullman (Washington), Port St. Lucie (Floride) et Topeka (Kansas) et un peu partout ailleurs dans le monde.
Les Marines américains les déploient en test, certains armés de lance-roquettes, les forces chinoises leur sanglent diverses armes sur le dos depuis un moment et l'Ukraine s'en sert pour repérer des munitions non-explosées. Et dans le civil, ces robots circulent même dans des HLM d'Atlanta pour le compte de sociétés de surveillance privée...
En France, le tableau est un peu différent. Pas de déploiement confirmé par les forces de l'ordre ou l'armée pour l'instant. Chez nous, c'est Boston Dynamics Spot et l'
E-Doggy d'Evotech
(robot 100% français, utilisé au déminage pendant les JO 2024) qui tiennent ces marchés-là. Les Unitree restent encore dans les labos tels que l'
INRIA Paris
et le labo
HUCEBOT de Nancy
qui utilisent le Go2 pour leurs recherches en locomotion robotique.
En dehors de la recherche, le cas le plus avancé est celui d'Orano, qui a testé fin 2025 le G1 humanoïde d'Unitree sur son
site nucléaire de Marcoule
en partenariat avec Capgemini (c'est un humanoïde, pas un quadrupède, mais même fabricant, même firmware, mêmes questions). Côté distribution, INNOV8 Power est également partenaire officiel Unitree depuis VivaTech 2025 et INGEN Geosciences distribue la marque depuis 2020. Le réseau pour vendre ces robots à des boîtes de sécurité privées françaises est donc déjà bien en place.
Du coup quand un mec démontre qu'on peut en prendre le contrôle complet rapidement, ça mérite qu'on regarde ça d'un peu plus près...
Et quand je dis contrôle complet, c'est pas un excès de langage. Avec cet accès root, Benn Jordan a réussi à enregistrer, télécharger et live streamer l'audio et la vidéo captés par le robot. Sans authentification donc ni même sans passer par l'app officielle. C'est assez dingue... On peut même contrôler les mouvements du robot. Une belle merde donc !
Cette faille n'est d'ailleurs pas une nouveauté absolue puisque j'avais
déjà couvert le hack BLE des humanoïdes Unitree
en décembre dernier. Et ensuite
rebelote en mars dernier
avec deux nouvelles CVE sur le Go2, partiellement patchées. La répétition des conneries devient un peu lourdingue chez Unitree...
La deuxième partie de l'enquête, elle, atteint un autre niveau puisque Benn Jordan a entendu parler de rapports affirmant que d'autres robots Unitree contenaient une backdoor envoyant des données à des serveurs étrangers. Il a donc voulu vérifier ça lui-même.
Il a donc transformé un Raspberry Pi sous Linux en routeur avec le mode moniteur activé, et lancé BetterCap pour analyser chaque paquet sortant.
Et là, surprise, le robot refuse purement et simplement de s'authentifier. Le hic, c'est que quelque chose côté serveur cloud détecte que le routeur est anormal et bloque la connexion. En analysant un peu plus finement la connexion, il a remarqué que la première IP chopée au sniff pointait vers Odessa, en Ukraine... Vu qu'aucune doc fabricant ne mentionne ce point d'accès, le truc devient alors officiellement louche... Le robot semble savoir quand il est "analysé" et cette détection d'environnement anormal est précisément le truc qui transforme une affaire de faille classique en problème de sécurité nationale.
Benn Jordan a donc ensuite contourné ça avec un routeur de voyage standard avant de sniffer derrière les paquets, et il a fini par confirmer ce qu'on appelle officiellement la
CVE-2025-2894
. Il s'agit d'un tunnel P2P préinstallé sur le Go1 qui se connecte automatiquement au démarrage à une plateforme appelée CloudSail, opérée par une boîte chinoise nommée Zhexi Technology.
Le truc est référencé dans MITRE depuis le printemps 2025, soit environ un an. En 2025, les chercheurs Andreas Makris et Kevin Finisterre ont même chopé la clé API de CloudSail et identifié près de 2000 robots vulnérables sur ce réseau, dont des unités installées au MIT, à Princeton, à Carnegie Mellon et à l'université de Waterloo.
Côté américain, la seule action gouvernementale connue suite à ça, a été une mise en garde des Marines US concernant l'usage de produits Unitree en opérations militaires. Rien d'autre.
Et là on arrive à un point de blocage assez brutal. Les failles démontrées par Benn (le hack Bluetooth, la prise de contrôle complète) et la backdoor CloudSail ne peuvent pas être corrigées en même temps, parce que les solutions se neutralisent mutuellement.
Pour boucher les failles de Benn, il faut passer par une mise à jour firmware officielle d'Unitree. Mais cette mise à jour ferme aussi l'accès root au système. Sans accès root, impossible de détecter ou bloquer le tunnel CloudSail de l'intérieur. Du coup, on a un robot sécurisé contre les hackers, mais des données qui filent quand même vers la Chine.
À l'inverse, si vous gardez le firmware actuel pour maintenir l'accès root (et donc la capacité de surveiller et bloquer CloudSail), les failles restent béantes. N'importe quel inconnu avec un téléphone peut alors prendre le contrôle complet de votre flotte de robots clébards. Bien sûr, couper Internet sur le robot évite les deux problèmes à la fois, mais le rend inutilisable dans la plupart des déploiements opérationnels.
Si vous avez un Unitree à la maison ou en entreprise, voilà la recommandation perso de Benn Jordan. Selon lui, plutôt que d'installer la dernière mise à jour, mieux vaut ne plus jamais mettre à jour le firmware (gardez en tête que c'est son avis radical, pas une bonne pratique standard). Parce qu'à la prochaine mise à jour, vous risquez de perdre la capacité de rooter votre propre robot, et avec elle la capacité de détecter, bloquer ou rediriger la backdoor.
Vous perdrez aussi la possibilité d'écrire manuellement des services qui empêchent les hackers d'exploiter les autres failles. En clair, sa meilleure défense contre Unitree, c'est de figer le firmware actuel.
Synology Cameras Now Need a License for Surveillance Station
Synology has changed the licensing position for selected cameras in its 2026 surveillance camera range, with the newly listed BC510, TC510, and BC800Z now requiring a Surveillance Device License when used with Synology Surveillance Station. This marks a notable shift from the previous value proposition of Synology-branded cameras, which had been positioned as tightly integrated first-party devices that did not require an additional camera license. The new BC510 and TC510 have been introduced as AI-enabled bullet and turret cameras with 5MP resolution, 30 FPS recording, 110° horizontal field of view, IP66/IP67 protection, 30 m night vision, edge AI analytics, ONVIF support, and compatibility with Synology’s wider surveillance ecosystem, including its upcoming cloud-based surveillance platform. But why has Synology changed it’s stance on camera license requirements with this new series?
What Changed in Synology Cameras and the License Requirements?
Synology’s camera licensing policy has changed for part of its 2026 camera generation. The BC510, TC510, and BC800Z are now listed by Synology as requiring a Surveillance Device License, with Synology’s license documentation stating that these models require 1 license per camera. This means these Synology-branded cameras are now treated in the same basic licensing structure as regular IP cameras, where each camera consumes 1 available Surveillance Station camera license.
This is a significant change because Synology’s own cameras previously had a clear licensing advantage inside Surveillance Station. Earlier Synology camera models were positioned as first-party devices that worked directly with the platform without the need to buy an additional camera license. For users building a Synology-based surveillance setup, that made the cameras easier to justify even when comparable third-party ONVIF cameras were available at lower prices. The camera, platform integration, AI features, and license position were effectively part of the same value proposition.
With the 2026 generation, that arrangement has changed for the BC510, TC510, and BC800Z. Users will now need to account for the cost of a Surveillance Device License when deploying these cameras beyond the default licenses included with their Synology NAS, NVR, or DVA system. Synology NAS systems generally include 2 default licenses, Network Video Recorder systems include 4, and Deep Learning NVR systems include 8. Any deployment that exceeds the available default license count will require additional license packs, just as it would when adding third-party IP cameras or other supported surveillance devices.
Device Type
License Units
Example
License required
Synology Cameras
Per camera
BC510, TC510, BC800Z
1
Per camera
BC500, TC500
0
Synology LiveCam
Per device
Synology LiveCam app
1
Regular IP camera
Per camera
AXIS P1347
1
Panoramic (fisheye)
Per camera
AXIS M3007
1
Multi-lens
Fixed lens
Per camera
ArecontVision AV8185DN
1
Fixed lenses with independent IP
Per channel
AXIS Q3709-PVE
3
Removable lens
Per channel
AXIS F44
5
Video server
Per channel
Vivotek VS8801
8
I/O module
Per device
AXIS A9188
1
Intercom
Per device
AXIS A8105-E
1
IP speaker
Per device
AXIS C3003-E
1
Access controller (door)
Per device
AXIS A1001
1
Transaction device (POS)
Per device
–
2
According to Synology’s stated position around the new generation, the decision is connected to broader deployment flexibility. The BC510 and TC510 are being introduced not only as cameras for Surveillance Station, but also as devices designed to work across multiple surveillance environments. Synology states that these cameras support deployment within the native Synology ecosystem, third-party NVR and VMS infrastructures through ONVIF, and its upcoming cloud-based surveillance platform. In that context, Synology appears to be separating the camera hardware from the Surveillance Station license entitlement, rather than treating the license as implicitly bundled with the camera.
The advantage Synology presents is that this approach allows the cameras to be used more flexibly outside Synology-only deployments. In theory, a lower hardware price can reduce the entry cost for users who want to deploy the cameras in third-party systems, where a Synology Surveillance Station license would not be relevant. For mixed environments, installers, managed service providers, or businesses migrating between platforms, the cameras can be positioned as ONVIF-capable AI cameras rather than hardware tied primarily to a Synology NAS or NVR. Synology’s argument is therefore less about removing value from Surveillance Station users, and more about aligning the cameras with wider interoperability, third-party infrastructure support, and future cloud surveillance services.
Which Cameras are Affected, and What About Older Synology Cameras?
The affected 2026 Synology camera models listed as requiring a Surveillance Device License are the BC800Z, BC510, and TC510. The BC800Z is the higher-end 8MP model with PoE connectivity, optical zoom coverage, longer night vision range, IP66/IP67/IK10 protection, a 5-year warranty, and additional analytics such as License Plate Recognition and Smoke Detection. The BC510 and TC510 are 5MP PoE cameras, offered in bullet and turret designs respectively, with 2880×1620 resolution, 30 FPS video, a 110° horizontal field of view, 30 m night vision, people and vehicle detection, intrusion detection, audio detection, tampering detection, motion detection, people and vehicle counting, Instant Search, and people-based auto tracking. The CC400W is not listed as requiring a Surveillance Device License, and remains separate from the licensing change affecting the BC800Z, BC510, and TC510.
At this stage, the licensing change appears to apply to the newer 2026 generation models listed by Synology, rather than being presented as a wider retrospective change across all previous Synology cameras. Older Synology camera models are less prominent on Synology’s current product pages following the arrival of the refreshed range, so the long-term public positioning of those older models is less clear from the current camera comparison material. Based on the available details, there is no indication in the supplied information that previously released Synology cameras are being newly reclassified in the same way, but buyers and existing users should still check the official Synology Camera Support List and license documentation for their exact model before expanding or changing a deployment.
Why Has Synology Made This Decision?
Synology’s stated reasoning appears to centre on making its newer cameras more flexible across different deployment environments. The BC510 and TC510 are being positioned not only as Surveillance Station cameras, but also as cameras for third-party NVR and VMS systems through ONVIF, as well as Synology’s upcoming cloud-based surveillance platform. By separating the camera hardware from the Surveillance Station license entitlement, Synology can sell the cameras into environments where a bundled Surveillance Station license would not be useful, while also lowering the hardware entry price for users who are not deploying them directly with Synology’s own platform. There may also be a wider commercial consideration around Synology’s position as a Taiwanese camera manufacturer. In some government, education, public sector, and official institutional deployments, the country of origin of surveillance hardware can be a factor in procurement, security review, and long-term platform approval.
This may give Synology an advantage over some Chinese-made camera brands, particularly in environments where hardware from certain vendors is harder to approve or deploy. In that context, Synology may see an opportunity to position the BC510, TC510, and BC800Z as more broadly deployable surveillance cameras for institutions that want ONVIF-compatible hardware without relying on brands that may face additional scrutiny. For Synology-only users, however, the practical result is different: the license cost now needs to be considered separately when adding the BC510, TC510, or BC800Z to a deployment that has already used its default license allowance. This does not remove the cameras’ first-party integration benefits, edge AI features, or official support inside the Synology ecosystem, but it does change the overall value calculation compared with older Synology cameras that did not require a separate Surveillance Device License.
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.
Disponible sur le Google Play Store, l'application « Nearby Glasses », développée par un amateur, attire l’attention. Elle permet à ses utilisateurs d’être avertis si des personnes à proximité portent des lunettes « intelligentes », comme les lunettes Ray-Ban de Meta.