Home Security Blog

Posted By

Resideo and Honeywell Home, formerly Honeywell, released an announcement last week that they will change their date code format from a YDDD (Year, Day of the year) format, to use YYWW (Year, Week of the year). This is being done, ostensibly, to simplify the decoding of date codes for users.

Product date codes are important for determining whether a product is still under warranty, as well as whether it may be affected by a particular anomaly that may have occurred because of an issue in the manufacturing process. For Carbon Monoxide detectors, which always have a finite useful life, the manufacturing date code is important to help determine when a CO detector needs to be replaced, particularly if the detector doesn't include a feature to warn a user when its useful life is coming to an end. For all these reasons, it's important to be able to decode a date code.

Going all the way back to the Ademco days, Resideo products have used a date code where a letter signified the Year of manufacture, and a 3-digit number signified the day of manufacture. For example, 2022 has been signified by the letter F, so a date code of F159 would indicate a product was manufactured on the 159th day of 2022, or June 8. Calendars can be downloaded from the internet with all the days of the year enumerated.

Of course, this date code scheme has advantages and disadvantages. The letter used to signify each year can seem somewhat arbitrary, and at some point, letters must begin to be repeated. So, with a very long-lived product line, there could be some confusion as to whether a particular letter indicates the older or newer iteration of that letter for that product. The advantage of this format is that you know exactly which day a product was manufactured, and exactly which day it was packaged (packaging has its own date code, which follows the same format). This information can be helpful when determining a manufacturing issue.

Starting this month, June 2022, Resideo will standardize on a new Date Code format. In this format, containing four (4) digits, the first two (2) digits will indicate the year of manufacture, and the last two (2) digits will indicate the week of that year (YYWW). This will simplify things, as no one will have to look up or figure out which year goes with which letter, but it also doesn't supply quite as detailed an accounting of when a product was manufactured or packaged as the old format did. Packaging date codes will also be making the switch.

Below are some examples of the new Date Code, in these examples, the Date Codes are all 2223, indicating they were manufactured the 23rd week of 2022:


Tags: , , , , , , ,

Comments


Posted By

Effective in August of 2022, Alarm.com is ending sales of Alarm.Com Image Sensors (ADC-IS-220-GC and ADC-IS-300-LP). Alarm Grid has already discontinued these sensors due to the fact that they are in short supply, and no more of them will be produced. Only the Honeywell Home PROINDMV remains.

The 2GIG IMAGE3:


There was some overlap between the Alarm.com Image Sensor models, and the 2GIG and Qolsys Image Sensor models. I have confirmed with Alarm.com that the 2GIG and Qolsys models are also discontinued as of August, 2022. Currently, the only Image Sensors being offered by Alarm Grid are the DSC PowerG and Honeywell Home PROINDMV models which are discussed in more detail below.

Image sensors were a great idea that never really took off. The original image sensors, first offered by 2GIG and Alarm.com, did not have particularly good resolution or picture quality, which is probably one reason they weren't widely adopted by the DIY crowd. By the time the 2nd generation of these sensors came around, people were prepared to simply go with full-on video monitoring or to avoid capturing images altogether.

Both the second and third-generation image sensors that were offered by 2GIG, Qolsys, and Alarm.com had very good image quality. Combine that with Alarm Grid's policy of offering monitoring for image sensors without an additional price markup, and the image sensor was a viable alternative to the use of video cameras. An Alarm.com user could log into their account and perform a "peek-in", meaning they could request that a particular image sensor grab a picture of whatever it was able to see at that moment, and the image (actually two (2) images) would then be uploaded to the customer's alarm.com account for viewing. The sensor could also take images upon sensing motion after a particular period of inactivity, or upon an alarm. For full details on image sensor features and operation, check out this prior post.

DSC offers a couple of PowerG PIR Cameras that will work with the Qolsys IQ Panel 2 and IQ Panel 4 in addition to the DSC PowerSeries Neo panels with a PowerG Transceiver added. These are the DSC PG9934P, Indoor PIR Camera, and the DSC PG9944, Outdoor PIR Camera. These sensors work like any other PowerG Sensor with the Qolsys Panels. They can only capture images when the system is armed and the image sensor is active (not bypassed). They send their images to the panel, and then the first image is uploaded to Alarm.com. A total of ten (10) images are taken, and these images are stitched together by the panel into a sort of stop-motion video where each image can also be viewed individually. This is done via the panel screen itself. When used with the PowerSeries Neo panels, the DSC PIR Cameras can be used for Visual Verification only, they do NOT work like a regular image sensor with Alarm.com.

DSC PG9934P, Indoor Image Sensor:

DSC PG9944, Outdoor Image Sensor:


The Honeywell Home PROINDMV is a wireless PIR motion sensor with a camera built-in, just like the 2GIG, Qolsys, and Alarm.com image sensors were. The PROINDMV is currently only supported on the Resideo PROA7PLUSC, and Honeywell Home PROA7PLUS panels. There is no "peek-in" option for these image sensors. They can only capture images when they sense motion while the system is armed in Away mode. Images or videos are captured and uploaded to Total Connect 2.0 for viewing. The user can choose to receive either a still image or a 10-second video clip. You can read their full details of operation in our previous post.

Honeywell Home PROINDMV:


It seems like the era of the image sensor may be coming to a close, at least for now. Who knows, once we're through the global chip shortage, and the availability of components is back to normal, perhaps the humble image sensor will experience a revival. If so, DIYers may want to consider giving these sensors a try. They really are an excellent idea. They can be used for alarm verification in this age of increasing police resistance to alarm response, and they are cheaper, both initially and on an ongoing month-to-month basis, than video cameras.


Tags: , , , , , , , , , , , , , , , , , , , , , ,

Comments


Posted By

Corporate surveillance is on the rise. Including in the home security industry. Whereas the industry used to be dominated by local ma' and pa' shops who couldn't care less about what you're doing and why, the introduction of megacorps into the industry have changed the landscape entirely. We know that Google and Amazon in particular, but many others as well, are deeply interested in everything you do. They want as much of your social graph as possible so that they can feed you relevant ads or sell your data to brokers who can monetize it in other ways. In fact, most of the companies we interact with on a daily basis are not particularly good at keeping your information out of the hands of people who want to buy it. It makes sense when you realize that sharing your data is essentially a consequence free (to the sellers), cash-making enterprise. But for you, the consequences can be incredibly invasive, frustrating, and even a bit scary.

Enter the rise of OPSEC. OPSEC is shorthand for Operational Security. For the OPSEC-curious, you'll know that the field is deep and wide, and, for the most part, it adds large inconveniences to the lives of those who practice it. For the uninitiated, let me define it. OPSEC is, more or less, the practice of being as private as possible. The goal of OPSEC is to be less leaky data-wise. This can encompass a whole set of complicated digital practices from installing privacy operating systems on your phones to using browsers you've never heard of, to configuring your computer's display settings, to literally running your own search engine. And, depending on the depth of your practice, it can leak into the real world. It is absurdly complicated to live a normal life that looks off-the-grid to corporations but on-the-grid to your friends.

As a Bitcoin enthusiast myself, I have taken a strong interest in OPSEC. And the inspiration for this article is a combination of things. Timing-wise, I'm writing it now, because I came across an article on page 9 of the 1st edition of "Unredacted" Magazine entitled, "I Installed Your Alarm System."

The article is a scary diary entry of a rogue installer that logs into an account and watches his customers video cameras. He obliquely explains how he does it. The reality is, traditional monitoring is rife with security problems, which can be a problem if you don't trust your company. Even if you trust them, the information leak is considerable. So I thought, I might write a guide that will allow you to leak as little data as possible.

1) Sign Up for Alarm Grid monitoring Using SimpleLogin

This service allows you to maintain some privacy with regard to your email. It disambiguates your email from your person, allowing you to pick a single email address for each service you sign up for. Or, you can use it in any other way you'd like. I, personally, use it so that no one can create a personal profile of me based on my email address. I recommend you sign up with Alarm Grid because, well, this is Alarm Grid. I also know the practices of my company. We have no interest in monetizing your data. How can you know that to be true? You can't. But take the hint here. I'm telling you how to buy an account anonymously. Trust me on this. We don't care about your data.

2) Pay for the monitoring service using Privacy.com

Privacy.com is a wonderful service that will disambiguate your identity from the card you use. You can pick any name, address, zip code, expiration date, etc, and sign up for monitoring. If you're in Alaska, but you want to tell us you're in Oklahoma, Privacy.com prevents us from finding out.

3) Sign up for any of our accounts

If you follow these practices, you can actually sign up for monitoring of any type and be anonymous. Yes, this includes, monitored accounts. When you are working with us to set up the central station, you can decide how you want each zone to behave. If you want us to call a guard service, or a police station, or no one at all, that is an option. The guard service is a particularly interesting piece of the puzzle. They are not police, and they will not publish the incident in the local newspaper. Rather, if you can find one in your location, they are a service that can receive alarm calls and will send someone out to an address to verify if a break-in is happening. If it is happening, then, and only then, would they initiate a call to the police (unless you ask them not to).

That said, the self-monitoring option puts everything in your hands. You will have an app on your phone that receives messages, text, and/or email alerts telling you what your system is doing. Again, in this app, you can give simplelogin.io emails, you can use a Jabber number if you so choose, or you can use a proton mail account if you'd like. The options are endless, and you can use the service without leaking any data.

4) Don't use cameras with an online service component

I'm not saying that no one should use cameras. Rather, if you're security-minded, and OPSEC is your priority, cameras that shoot out over the internet aren't for you. You'll want a local server, if you want cameras at all, to host your files. You can tunnel into your server from outside if you need to. This is a very typical setup.

Using these methods, you can properly obfuscate nearly everything about yourself. With Alarm Grid, no one has to come to your home. In fact, if you need security products, you could use some kind of freight forwarder to ship the items to yourself. This with privacy.com would allow you to not leak your actual address.

This is the perfect service for the security minded, celebrities, Bitcoin whales, or anyone else who simply doesn't want anything about them known to even the company monitoring their alarm. The Unredacted article paints a bleak picture about something that is completely avoidable. If you don't want your data leaked, you don't have to leak it. Following these practices, you don't even need to trust your security company, so long as they actually attach the system to the interactive service (Alarm.com or Total Connect). It just takes a bit of planning, work, and the right company.

Comments


Posted By

The ever-evolving WIFI industry can sometimes present challenges to alarm equipment. The steps manufacturers take to protect privacy, and streamline connections, can sometimes interfere with an alarm system's ability to get connected. Here, we'll discuss ways to keep your WIFI system online.

Resideo and Honeywell Home have not embraced the 5 GHz WIFI band as some of the other alarm manufacturers have. Both 2GIG and Qolsys have panels that can connect to either 2.4 GHz or 5 GHz WIFI. While 5 GHz WIFI offers slightly greater speed, it also offers a shorter range. Its main advantage is that it offers more channels and less congestion than its 2.4 GHz counterpart. The 2.4 GHz band is slightly slower, mostly because it's more crowded, but with a greater range and better solid object penetration.

Many customers may be afraid to purchase Resideo or Honeywell Home equipment because they believe that soon WIFI routers may stop supporting the 2.4 GHz frequency. However, most IoT (Internet of Things) devices that use WIFI currently only support the 2.4 GHz band, so you can expect network equipment manufacturers to continue producing equipment that supports 2.4 GHz for some time. Also, many older devices, such as older smartphones or tablets, don't support 5 GHz WIFI.

Users with dual-band routers that support both 2.4 GHz and 5 GHz WIFI, and who also have Resideo or Honeywell Home WIFI products, may have experienced issues with their security device losing its WIFI connection. If that is the case, disabling a feature in the router called Band Steering may help the system to stay connected. Routers that support dual-band WIFI often use Band Steering in an effort to make switching from one band to the other seamless.

In theory, with Band Steering enabled, and the SSID, Password, and encryption settings for both 2.4 GHz and 5 GHz bands set to the exact same parameters, any device capable of using both bands can switch between them on the fly as the device moves through the location. Consider using a tablet or a smartphone as you walk through your home. When you're close to the router, 5GHz is likely the best band for the device to use. But as you walk away from the router, the 2.4 GHz band may become a better option. Band Steering will take care of switching from one to the other with no further input from the user and without the user even knowing that the switch has occurred.

If Band Steering worked as well in practice as it does in theory this would be an excellent solution. However, for some routers that support this feature, in certain cases, if a client WIFI device can only support 2.4 GHz, and the router supports both bands with both having matching SSIDs and Passwords and Band Steering is enabled, often the client device can't connect to the network because it is blocked by the router.

The router does this because it believes the client device is capable of connecting using the 5 GHz band, and in most cases, the router is trying to steer as many devices as it can to 5GHz. By disabling Band Steering, the Resideo or Honeywell Home WIFI capable panel will be able to see and connect to the 2.4 GHz network. In fact, it's the only network that it will be able to see. All other devices that support both bands will still be able to connect to whichever SSID the user chooses.

You can disable Band Steering on your dual-band router without having to change either SSID or password. The drawback to doing this is that you won't immediately be able to tell which WIFI band a device that supports both the 2.4 GHz and 5 GHz bands is connected to. If you need to be able to determine this, then you will want to disable Band Steering and then change the SSID and Password for one or the other WIFI Band so that you can easily determine which WIFI band a device is using. This will assist you, particularly on mobile devices, where you may need to manually switch between bands to achieve the best WIFI outcome.

Tags: , , , , , , , , , , , , , , , , , , , ,

Comments


Posted By

Resideo has reported that they are working to resolve an issue where Legacy IP Cameras (Non-HD) are sending notifications on motion activation, but without the actual video clip attached. The legacy, standard-definition cameras normally send a 10-second clip along with the notification.

Until this issue is corrected, Total Connect 2.0 users who have older, Standard-Definition IP Cameras from Honeywell can log into their TC2 account and view or download the video clips from there, once a notification has been received. Resideo is aware of this issue and plans to push an update in the next couple of weeks to resolve it. The legacy IP cameras include the IPCAM-WI, IPCAM-WI2, IPCAM-WL, IPCAM-PT, IPCAM-PT2, and IPCAM-WO.

When the Standard-Definition cameras are working properly a video clip triggered by motion detection via video analytics sends a notification as a text, email, or push notification. The user will actually receive the video clip within that notification and can view it or download it without ever logging into Total Connect 2.0.

Unlike the standard-definition, legacy IP Cameras from Honeywell, the newer High Definition cameras such as the IPCAM-WIC1, IPCAM-WIC2, IPCAM-WOC1, or IPCAM-WOC2 have never sent a video clip attachment along with new event notification messages. Instead, the user has always been required to log into TC2 once they received the notification and then view or download the supplied clip. HD IPCAM clips are 30-seconds, not 10-seconds in length. This, coupled with the increased data usage required by a higher definition clip, may be why the notifications for these cameras no longer include the actual clip.

According to the information we received, Resideo had a planned update nearly ready to go for Total Connect 2.0 when this issue came to light. The plan was to implement this update in early June. Now that the SD camera notification issue has been discovered, the fix for it will be included in the planned update. We expect this fix, along with the rest of the update within the first couple of weeks of June. Aside from this issue, we don't yet know what other fixes or new features this update may entail.

Are you affected by this issue? Are you still using the Honeywell legacy cameras? Let us know what you think in the comments below. Is this type of issue something that would make you consider upgrading to newer cameras, maybe even a new system? Reach out and start a conversation, we always look forward to hearing from you!

Tags: , , , , , , , , , , , , ,

Comments


Posted By

Monday, May 30, 2022 marks Memorial Day, a day where we honor those who have given their lives in service to our nation. Alarm Grid would like to take this opportunity to say a heartfelt, "Thank you." to the families of those service members. We honor both their sacrifice and yours.

To allow our employees to spend the holiday with their families, our offices will be closed on Monday, and will reopen for normal business hours on Tuesday, May 31, at 9:00 am Eastern. If you need to make a change to your account or have any other support issues, please send an email to us (see below). We will address your issue as quickly as possible after we return on Tuesday.

Our central station partners, of course, are available 24/7/365. All signals sent by your Alarm Grid monitored alarm system will be handled as usual during the holiday (unless you've made other arrangements with us beforehand). If you need to contact the central monitoring station, to cancel a false alarm or verify a signal, customers in the US can contact Criticom Monitoring Services (CMS) by dialing (888) 818-7728 and choosing Option [9].

Canadian customers can contact Rapid Response at (800) 932-3822. Remember when you call either monitoring station, you will need to provide your name, address, and your false alarm password or phrase. Providing incorrect information when asked will result in the dispatch of authorities.

If you have a support question or need to make adjustments to your account, the monitoring station cannot assist you with that type of request. For those types of requests, send an email to support@alarmgrid.com with details about what type of assistance you need. Remember that when we return after the holiday, there may be a little bit of a support backlog. Please be patient and we will work through all issues as rapidly as possible.

Thank you for trusting your safety to us. It is a responsibility we never take lightly. We hope you can enjoy this time with your family and that you are blessed with good weather, good company, good food, and good times!

Tags: , , , ,

Comments


Posted By

Johnson Controls, the parent company of DSC and Qolsys, recently released a technical advisory regarding the DSC WS4936 Photoelectric Smoke Detector. Pressing the "Test" button on the device will only trigger the sounder and will not cause the detector to transmit a wireless alarm signal.


The DSC WS4936 Photoelectric Smoke Detector operates at 433 MHz. This is not a DSC PowerG bi-directional smoke. When the "Test" button is pressed on an affected unit, it will sound the smoke detector's built-in sounder, but it will not transmit a signal to the alarm panel, and therefore will not cause an alarm on the panel during the test. In order to properly test the smoke detector, canned smoke should be used. This has the added benefit of being a functional test, and not just a test of the sounder and the transmitter for the WS4936.

Not all DSC WS4936 Smoke Detectors are affected by this issue. In fact, it's a relatively small number. Units produced between February 2022 and April 2022 are the only ones affected. You can determine if you have an affected smoke detector by checking the Date Code on your unit. To check the Date Code, find the ESN sticker. The Date Code will be a 4-digit number. The first two digits are the year of manufacture, the last two digits indicate the week of that year. February through April would show Date Codes of 2207 - 2217. New units without this anomaly will begin shipping in early May 2022.


If you determine you have a DSC WS4936 that is affected by this issue, and you would like to replace it, DSC will gladly do so. Contact your distributor or the alarm dealer you purchased the smoke detector from, and they can confirm the issue and arrange a replacement. However, these units still work perfectly well. In order to continue using an affected unit, all you need to do is be sure you test using canned smoke, as opposed to just using the "Test" button on the unit. If you purchased an affected unit from Alarm Grid, contact us by emailing support@alarmgrid.com, referencing your order number and this post. We will be happy to assist you with a replacement.

Tags: , , , ,

Comments


Posted By

An announcement on the AlarmNet360 page shows that they will send a remote reset command to some LTEM-PA, LTEM-PV, LTEM-PIA, and LTEM-PIV radios. This will occur today, Friday 04/15/22 between 2:00 pm - 3:00 pm ET. This may cause a trouble condition, and queued alarm reports could be sent.

It's unclear why this is being done. After a successful reset occurs, the radio will send an "E339-EXP. Module Power ON / Reset" message to the monitoring station. If the radio was in comm failure prior to the reset and any unsent alarm signals were queued, this reset may cause those alarm messages to be sent. These signals would show up immediately following the E339 signal at the central station. We assume this would also cause the same alarm messages to show up in Total Connect 2.0, and to be sent as notifications.

In addition, depending on how the panel is programmed, this event may cause the panel to display a bF or Check 103 message, and could also cause trouble beeping from the keypad. Disarming the system twice should clear the message and return the system to its normal state.

Tags: , , , , , , , , , , , , , , , , , ,

Comments


Posted By

The Resideo PROINDMV offers a cost-effective alternative to full video monitoring. Up to eight (8) PROINDMV devices can be added to each Total Connect 2.0 account, with no upgrade to full video surveillance required. When activated, the PROINDMV can take a still image or a 10-second clip.


For Alarm Grid customers, any Silver monitoring plan (Self or Full), or higher, can support up to eight (8) of these motion viewers. A Self Bronze plan, can support one (1) PROINDMV. Also, if the panel happens to be set to Local Alarm Mode, then only one (1) motion viewer can be added with clips available locally only. Clips or images captured by the motion viewer can be viewed through the Honeywell Home PROA7PLUS or Resideo PROA7PLUSC panel touchscreen, or through Total Connect 2.0. The PROINDMV is only compatible with the Honeywell Home PROA7PLUS and Resideo PROA7PLUSC panels and is not compatible with the non-plus versions of those panels or with any other panels (as of October 2022).

In order for the PROINDMV to create a clip or image and send it to the panel and TC2, the panel it's used with must have at least a 15-second burglary communication delay enabled, and the panel must stay in alarm long enough for an alarm report to be triggered. At that point, the clip or image will be sent to the panel and to TC2. In the case of the panel being in Local Alarm Mode, the clip will only be sent to the panel. The motion viewer is never recording unless it has detected an alarm. This means that there is no peek-in feature for the motion viewer. A user can't pull up their TC2 account, choose a PROINDMV device and bring up a real-time image. Hopefully, this may change in future firmware updates.

When the system is armed, and a video or image capture occurs during the Entry Delay period, the motion viewer holds any images or clips until after the Entry Delay has expired. If the system is disarmed before the end of Entry Delay, then any clips or images captured during that time are discarded. If it is not disarmed, then those images or clips will be sent once an alarm report is triggered.

Once the PROINDMV has captured a clip or image, it waits either 1.5 minutes (if there is no activity) or 3 minutes (in the event of constant activity) before it will capture another image or clip. A Maximum of ten (10) captures can occur during an armed period (this is assuming Swinger Suppression is set at the Maximum of 6). This is ten (10) captures per PROINDMV, not per account, per armed period. When programming, a PROINDMV can be assigned to any active partition. The response types that are available for the motion viewer are Interior Follower or Interior with Delay. So, the PROINDMV will only be active when its partition is armed Away, or Night (assuming the PROINDMV is enabled for Night Stay Mode).

When the panel camera log gets full, once ten (10) captures have been saved, it will begin to overwrite the oldest captures with new ones. All motion viewer captures are purged from the panel log after 30-days. The panel camera log can not be viewed through AlarmNet360, meaning an alarm dealer can't view any potentially private images. Image or clip captures are sent over WIFI (any time its available) or Cellular (if WIFI is down, or not present). Currently, motion captures cannot be viewed through the Honeywell Home PROWLTOUCH or Resideo PROWLTOUCHC.


Tags: , , , , , , , , , , , , , , ,

Comments


Posted By

Resideo has been investigating an issue with a very small number of communicators. The LTE-CFV, HWF2V-COM, LTE-IV, LTE-L3V, and VISTA-21IPLTE with LTE-21V. In a few cases, starting on March 19, 2022, the Verizon LTE SIM has become locked, causing a comm failure, or secondary path failure.


A device with this issue will show the following symptoms: Locally at the device, the LEDs will flash regularly at a rate of two times per second (see video above). Through AlarmNet360, the affected devices will have checked in normally for the period leading up to March 19, 2022. Then beginning on that date, or on a subsequent date through March 28, 2022, a comm failure will be indicated. Once the comm fail indication appears, it will not clear, so if you've had a comm failure during this time that has restored, then your communication failure is not being caused by this issue.

In addition to the above evidence of an issue, the alarm panel that the communicator is connected to will have a trouble indication displayed. This may come in the form of a Check 103, or a bF on VISTA-20P and similar panels, and also the L3000 panel. For the L3000 panel, the bF will only show on an RF keypad, such as the 5828 or 5828V, the panel itself will show Check or Fault 103. To silence any trouble beeping, enter a disarm command at any panel keypad. These trouble messages can be caused by other things, not just this issue, so if you see one of these error messages and think you may be affected, be sure to contact your alarm dealer for further assistance.

Bear in mind that only the communicators listed above are affected, and that these are all Verizon SIM Cards. If you have an AT&T Communicator, you needn't worry about this issue. Also, for those who have a dual-path communicator with Ethernet connected, you will not necessarily see a Communication Failure message. Instead you will be notified of a Secondary Path Failure. Again, if you are affected by this issue, once the failure occurs, it will not restore. So if you've received a Secondary Path Failure that has since restored, then you experienced a separate issue.

Again, if you feel that you have been affected by this issue, contact your alarm dealer. They can confirm if you are affected and will be able to assist you in receiving a replacement SIM. Alarm Grid customers who are affected have already been contacted and replacement SIMs are on the way. If any further information becomes available, we'll update this post with further details.

Tags: , , , , , , , , , , , , , , ,

Comments