Data from Police Body Camera Apps Routed to Chinese Cloud Servers Over TLS Port 9091

The security and integrity of police body camera footage underpin the validity of evidence presented in court proceedings.

However, a recent investigation into a budget-friendly body camera system revealed that its companion mobile application—Viidure—transmits sensitive device identifiers and user data to cloud servers based in China over a nonstandard TLS port.

Such behavior raises pressing concerns around data privacy, chain-of-custody, and compliance with U.S. law enforcement policies.

Using Wireshark packet captures on an isolated network, the Viidure mobile application was observed establishing encrypted sessions to multiple domains.

The most noteworthy endpoint, app-api.lufengzhe.com:9091, resolved to IP address 115.175.147.124, which WHOIS records confirm belongs to HUAWEI INTERNATIONAL PTE. LTD. in China.

In addition, the app communicates over standard TLS port 443 to Baidu mapping services (api.map.baidu.com and loc.map.baidu.com ...