To my mind, and how I'd like to keep it, it you would only be rolling against DR if you're physically connected to a device slaved to the Host. This goes along with the whole "Get the decker out of the van" bit 5e has going for it.
I think most Host's defenses are supposed to prevent a decker from gaining entry remotely in the first place, which is why the direct-connect to a slave hack is so valuable. I guess what I don't want to happen is Wraith ending up in a scenario where we do gain physical access to a location, I get a MARK on the Host through the direct connect hack on a device, but then can't benefit from that access in trying to hack other devices further on in the run without also having to physically direct connect. It mostly defeats the purpose of hacking into the Host for anything other than stealing files.
To put it another way, if we're going to throw out:
If you are in a host that has a WAN, you are considered directly connected to all devices in the WAN.
It changes things considerably for me. I can work with it, just need to know that's the case.
Another question: since you're specifically looking for cameras would you only spot silent running icons that are cameras -- and potentially those "Wrapped" as cameras? That's my understanding but I'd like to hear your thoughts
Totally a GM Call since Matrix Perception, particularly Running Silently, is so poorly defined. Personally, no I wouldn't think that Wrapper would hold up in this situation. The program is intended to defeat cursory inspection of icons by passers-by. If I know there are several silently running icons and I want to find, specifically, a camera icon because I think a strip club is probably going to have cameras set up, I don't think Wrapper would necessarily fool that Matrix Perception check (in either direction), since it isn't changing the underlying nature of the icon, but rather its appearance (which I couldn't see in the first place because it is running silently). If instead, there was only one silently running icon, but I had no clue what it was, then I think Wrapper would work to fool me. Success on the Matrix Perception check would reveal whatever wrapper says the icon is because I'm not specifically asking for a certain type of icon and don't have any reason to suspect that it's something else.
Those are just my thoughts on the matter. Without the specific piece of information clause being able to whittle down silently running icons considerably, the game is largely unplayable (bag of 1000 stelath tags now turns into host full of 1000 wrapped silently running icons etc.).