Hi , I have several of these cam that I bought over a 2 years period mostly Ebay.
I am very satisfy of them and got Firmware update from the supplier ( YuCHeng when I did ask them for Backup purpose ) ), but thru google search I have found out that other vendor ( owlcat, Maviotek,LEF,Suneyes )all on AliExpress have their web site to wich some of them do have the Firmware available for download in their support section .
The Firmware look like a partial firmware only , what I mean is ,it has been very reliable/forgiving/error proof .I am no expert but I suspect that the reason it is so forgiving is that it do not replace ( primary important kernel boot section )and the Firmware come in a Format like:V10.1.4.5.1-20160825.pkg ( about 6.5Meg size )but if you change the .pkg to .zip you can open the Firmware and look inside ( and see the web page and other )but I did not see password and critical assembly code.
Also it seam you can t re-package the Firmware because when it is unzipped it lose the ( checksum or other important information )and it do ( grow in size )and do not work to upgrade the Camera.
I have spend a lot of time on the web/Forum looking for information ,but did not find so much info.
It seam that for the same hardware( HISILICON H35XX )there is 2 differents Firmware wich are incompatible ( meaning different App on smartphone ) like ( CamHI ,Keye,vipCam,Dericam,XMCam )are not compatible with App like ( vMeyeSuper,XMeye,UMeye )wich is the Firmware they seam to be in all the main thread on this Forum.
What I wonder the most is ( is this Firmware more or less secure )than all the ( cheap Chinese Hacking Foscam exploit ) we heard over the last 2 years?( on over 2500+ Chinese cheap cam )
Thank s