Don't DM, reply so we may spread the word.

I'm really surprised that military in such a technologically advanced country just connected random IP cams to the internet

Reolink, amcrest. Amcrest dont get anything starting with ASH in the model name.

If you want ONVIF, be sure to check the specs, many cheaper models drop support, but not all.

Some YI cameras have easily replaced firmware and can do rtsp too, but you have to do your homework on those models to be sure you're getting one that can be modded.

You'll still want to (IMO) toss any of them in a vlan without internet access, and rather than provide that vlan access to an NVR on another vlan, I'd lean toward your NVR having a second connection to that vlan. I'm a huge fan of segmentation though, so YMMV.

Same with russian 'grandma phones' with big buttons. Some researches found thst although they don't provide any functionality besides basic phone\sms stuff, they do try to call their motherbase, sending all credentials and geoloc. IIRC there was no argument about them sending the content of smses and voicecalls, but it's troubling as it is.

+ Russian as in sold there, they are chinese, sometimes with a local branding.

Ubiquiti G3 and G4 cams do rtsp direct streams without needing Unifi Protect services on a unifi gateway device. G5 requires unifi prot but can rtsp from the protec gateway.

Just get some raspberry pi camera.

What to do about IR vision though?

Not a plug and play solution. But if you aren't averse to tinkering. RPI zero with a CSI camera and v4lrtsp server. can get you done rather cheap. Depending on your needs.

Like every military operation, the job always goes to the lowest bidder, that is still overpriced, because it's just tax money. That's what always cracks me up about stuff that is marketed as military grade.

Capitalism. They just bought the cheapest reliable enough option they could find and didn't give two craps about infosec, because that's too expensive to actually properly do. Minimize the financial losses of an upfront purchase. (I worked more than enough jobs in hardware design to know what management cares about and what it doesn't)

Also, big yikes for the Israel flag in your username.

Suppliers lie.

I know a guy who is the sole reason that software written by <adversary> isnt being currently used in <host countries most top secret defense environment>. His boss told him to lie if asked, and he refused to and informed <end user>.

Cheap devices

Whether you like it or not

If you have access to hardware level design, just about anything can happen.

This is just bad spy craft. You don't tell the person who bugged you that you found their bug. You mess with their head by setting up false flags.

Like have maps of China and what look like troop movements.

Or details about tank man.

Why not have the cameras on a VLAN that has no Internet access?

Just use a system that connects to a server on base and nothing else

I wonder if this was the case. From the bloomberg article,

"No data has actually been leaked," they added.

And from Yonhap,

found to be designed to be able to transmit recorded footage externally

So maybe they were designed that way, but it didn't work because the cam network was offline?

Keep in mind that this was on the border with North Korea, so, they'd (the South Korean military) have a very high level of paranoia on being hacked to begin with.

Share the URL if you find out it does