For those in the physical security technology field, particularly those working with Dahua products, a common issue arose with Google Chrome: the inability to view video streams due to the phasing out of NPAPI (Netscape Plugin Application Programming Interface) plugin support. This article delves into the problem, potential workarounds (though temporary), and the broader implications for the security industry. IPVM, a trusted source in the security tech world, covered the discussions and challenges surrounding this issue.
Google's decision to drop NPAPI support in Chrome created a significant hurdle for users of Dahua and other video surveillance systems. NPAPI plugins were commonly used to enable video streaming within web browsers. With Chrome's update, these streams became inaccessible, disrupting monitoring and management workflows.
Jon Dillabaugh from Pro Focus LLC initially raised the concern, highlighting the challenge of viewing Dahua video streams in Chrome. He also pointed out that Internet Explorer, another browser often used in these situations, was also facing end-of-life, leaving integrators in a difficult position.
Several temporary fixes were suggested to keep Dahua video streams running in Chrome, but these were, at best, short-term solutions:
Enabling NPAPI Flags: One suggestion involved manually enabling NPAPI within Chrome's settings. By typing chrome://flags/#enable-npapi
into the address bar, users could attempt to re-enable the functionality. Additionally, enabling Native Client was recommended. However, this was a temporary measure, as NPAPI support was slated for complete removal.
Disabling Renderer Lockdown: Another proposed solution involved disabling the "renderer lockdown" feature via chrome://flags/#enable-win32k-renderer-lockdown
. This was also acknowledged as a temporary fix and potentially less secure.
Using IE Tab Extension: Some users found success using the "IE Tab" Chrome extension. This extension essentially emulates Internet Explorer within a Chrome tab, allowing NPAPI-based plugins to function. Eden D'Alessandro suggested this as a workaround.
The Core Issue: The fundamental problem was the reliance on outdated plugin technology. As one user aptly put it, it felt like going back to 2006, struggling with ActiveX controls just to view video.
The NPAPI issue wasn't limited to Dahua. Another user, Undisclosed Integrator #3, noted similar problems with Hikvision systems. The frustration of "webclient.exe" failures and compatibility issues across different browser versions and processor architectures resonated with many in the field. IPVM covered Hikvision's challenges, further highlighting the industry-wide impact of Chrome's decision.
The Dahua video and Chrome NPAPI saga underscores a crucial aspect of physical security technology: the need for modern, browser-agnostic solutions. Relying on outdated plugins creates vulnerabilities and compatibility headaches.
Key Takeaways:
The NPAPI issue served as a wake-up call for the security industry. While temporary workarounds provided some relief, the long-term solution lies in adopting modern web technologies that offer improved security, compatibility, and ease of use. As John Honovich of IPVM noted, the industry needs to move beyond outdated approaches and embrace a future where video surveillance is seamlessly integrated with modern web browsers.