Re: Binary blob
We use Hikvision, not Dahua (I've always seen them as the 'bargain/cheap knock off' alternative to Hikvision as their interfaces and GUI's always seem a bit 'fisher price' in comparison. (See also: SWANN)
We don't ever expose cameras directly to the internet - Smaller deployments are 'plug and play' (go directly into the back of the NVR, it has a built-in switch) - The bigger ones are kept on a segregated physical network and/or a VLAN and accessible remotely via VPN.
Unfortunately as with any trade, for every company who do things *properly*, there will be 10 'cowboys' following shortly behind who do things by half-measures.
Biting the hand that feeds IT
