Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ubiquiti Networks Breach

mailchi.mp

Post reply on HN
Print view View original

151–160 of 486 posts

Re: Ubiquiti Networks Breach

#151

Post by rconti »

bluedino wrote: post #49

Ubiquiti is in a weird market, where they are better than Linksys/Netgear etc, but they are crap compared to something like Meraki. Their support isn't very good (they point you to a forum), their hardware replacement is spotty (sorry, out of stock, you'll have to wait!), and their hardware/software is buggy. We had 48 port switches that would randomly reboot, for example. They can be a decent solution for SMB wifi,…

My Meraki APs were replaced with Ubiquiti (MR32 -> AP AC Pro) and holy god what a difference. The Merakis just had absolutely AWFUL range. I tried everything I could for years, and they were just terrible.

Re: Ubiquiti Networks Breach

#152

Post by lillecarl »

vetrom wrote: post #142
aborsy wrote: post #135

Earlier quoted context omitted.

Does it support Wireguard? Also RouterOS does not seem open source.

RouterOS is not, but Mikrotik added wireguard support to their firmware sometime in mid-late 2020. IDK if its out of beta yet.

No, still very shitty beta sadly. In mikrotik communities routeros7 is a meme (it'll never arrive). Even though its here, its not.

Re: Ubiquiti Networks Breach

#153

Post by rossjudson »

ex_ubiquiti wrote: post #44
3guk wrote: post #40

I must admit - Ubiquiti has lost some of it's shine in the last few years, whilst AP and routing hardware seems to still be very good in terms of pricepoint, it does feel like the software side of things has been going in a very strange direction for quite some time. I'm still quite annoyed by the fact that I was forced to migrate from Unifi Video to Unifi Protect - due to vendor lock in and the fact that the remote…

Ubiquiti had a steady exodus of engineers in the past few years. It's a very different company now compared to the glory days of UniFi.

Doesn't it seem like one of the missing measurements for directors/VPs should be "amount of disappearing expertise"?

Re: Ubiquiti Networks Breach

#154

Post by luser007 »

unethical_ban wrote: post #118
luser007 wrote: post #88

Earlier quoted context omitted.

They put all of their users eggs in one basket in the cloud. That makes for a very interesting target. They could have not done that. The users were probably unaware that their data was even placed on the cloud servers of some third party. Ubiquiti used to be cool. They've taken a nose dive in recent years in several ways: Firmware upgrade suddenly including telemetry by default, forcing people to use their NVR appli…

I heard rumors about the telemetry thing, but that is usually an overhyped concern - unless it is sending flow logs or something. When did they stop allowing people to use a private server for central management? I see Unifi still has a network controller.

Sorry for being obtuse - it wasn't my intention.

I'm thinking of "Unifi Video" that is going out (EOL announced six months ago), where you could either buy their appliance OR download an official .deb package and install the NVR software on your own server.

They replace that with "Unifi Protect" that comes ONLY as an NVR appliance. No more .deb packages. It also requires you to buy one of their other products (Cloud Key 2), IIRC.

Re: Ubiquiti Networks Breach

#155

Post by [deleted] »

imposterr wrote: post #77
ViViDboarder wrote: post #66

Earlier quoted context omitted.

I turned off cloud login a while back. There’s a toggle in the settings for this.

I was confused by the parent comment too. Aside from the remote management features, if you turn off cloud login you still get everything else. Maybe it's something specific to the USG Pro? I've only used the smaller USG.

[deleted]

Re: Ubiquiti Networks Breach

#156

Post by pilsetnieks »

pimeys wrote: post #128
unethical_ban wrote: post #112

Earlier quoted context omitted.

Link to the box you got? That sounds interesting.

Oh, sorry! These are available from Europe, but I've heard good things from US about similar boxes, when I searched with "best pfsense computer". Not the same brand, but similar hardware. https://www.amazon.de/gp/product/B08JHKZMTN/ref=ppx_yo_dt_b_... Let's see how it works, but I expect it to be much faster than my current ARMv7 box. Of course if you have space for a rack, go with something actively cooled. In our a…

Despite the name in the Amazon listing, it has nothing to do with Mikrotik; also a 1Gbit ARM Mikrotik router/firewall can be had for considerably less.

Re: Ubiquiti Networks Breach

#157

Post by ethanpil »

Lammy wrote: post #101
ahepp wrote: post #91

Earlier quoted context omitted.

Do you know how ubiquiti's "edge" line compares to mikrotik?

I'm a Mikrotik user, not a Ubiquiti user, but looks like the closest match would be Mikrotik's CRS (Cloud Router Switch) line. My home network is a CRS317-1G-16S+RM at the core and three CRS305-1G-4S+IN (one in each room), all running SwitchOS/SwOS instead of the stock RouterOS (they dual-boot, your choice), and I am very happy with them.

What APs do you use with a MicroTik setup?

Re: Ubiquiti Networks Breach

#158

Post by pimeys »

comboy wrote: post #143
pimeys wrote: post #105

Earlier quoted context omitted.

Just ordered a Chinese box with 8th gen U-series i5, 8 GB of RAM and 120 GB of SSD. Has six ethernet connections, HDMI and COM. Planning to install OpenWRT to it, and with AES-NI the system should be easily able to push the full 1 Gbps of traffic through Wireguard. I've had whatever routers before, but mostly when using some VPN to hide the traffic from your home network, and if having fast enough internet, a good CP…

I still put the important part of my network behind my own router similar to yours (and in terms of security I think ubuntu server + whatever you need has likely much smaller attack surface than OpenWRT which is a piece of software just too tasty not to be exploited). Outside that, wifi part is hard to get right and smart switches are nice to have, but they are PITA if the firmware is never updated and there's no sin…

I'm having already Unifi's AP's, the controller running in my NAS and a good switch for the current setup.

Do you have some better suggestions for the router software? I'd love to run Opnsense, but a native Wireguard client is a must, and so is a good web interface for the setup.

Re: Ubiquiti Networks Breach

#159

Post by MasterScrat »

jiveturkey wrote: post #85
kenniskrag wrote: post #55

Earlier quoted context omitted.

> That phenomenon is called counter-signaling, which I first ran into listening to Dan Jurafsky making the point that if a menu uses the word "fresh", its a low-brow restaurant. A high-brow restaurant would never use the word "fresh" -- the freshness is implicit in the other signals. https://kelley.iu.edu/riharbau/cs-randfinal.pdf source: https://news.ycombinator.com/item?id=25713050

Italian franchise[0] restaurant in Sacramento has this huge neon sign in their window: "health inspected". Neon . It's just that one instance of the store. Not that I've seen them all, but never seen that signage in their other stores. [0] Maybe not technically a franchise. Not sure. There are a bunch in California.

Reminds me of a restaurant in Goa, India, which proudly advertises: "Vegetables are cleaned with clean water before use!"

Re: Ubiquiti Networks Breach

#160

Post by secabeen »

centimeter wrote: post #136
imposterr wrote: post #83

Earlier quoted context omitted.

You can also just run a docker container for it [0]. This has the added benefit of separating your data from the runtime so you can move it around as if you had a physical cloud key. [0] https://hub.docker.com/r/linuxserver/unifi-controller

I shouldn't have to run a docker appliance for my network appliances to function. Are you kidding me?

You don't. The docker appliance (or whatever platform you use to run the controller) only is needed for config changes. You can shut it down when finished making changes and everything runs fine. The install at my mom's house has the Windows controller, and I don't think it's run in 6 months.
Post reply on HN