Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ubiquiti Networks Breach

mailchi.mp

Post reply on HN
Print view View original

261–270 of 486 posts

Re: Ubiquiti Networks Breach

#261

Post by _rs »

pcdoodle wrote: post #198
linsomniac wrote: post #141

Earlier quoted context omitted.

I'm in the process of replacing my home Ubiquiti infrastructure. Here's what I've decided on: Replace the US-24-250W PoE switch with an Aruba Networks S2500-24P (gigabit and PoE, 4x 10gig ports, quiet). Replace the Cloud Key Gen 2 with BlueIris for camera controller. I expect this will be able to connect to the existing Ubiquiti cameras. Possibly add one or more Ruckus R610 APs running in "Unleashed" mode to augment…

Blue Iris is a great piece of software and Ken the developer has constantly improved it. I think there's a way to get the RTSP stream from your existing cameras.

I'm trying to recall, but maybe someone else can answer: do the UniFi cameras stream RTSP directly still, or do you still have to run their controller and re-stream it?

Re: Ubiquiti Networks Breach

#262

Post by garduque »

pcdoodle wrote: post #198
linsomniac wrote: post #141

Earlier quoted context omitted.

I'm in the process of replacing my home Ubiquiti infrastructure. Here's what I've decided on: Replace the US-24-250W PoE switch with an Aruba Networks S2500-24P (gigabit and PoE, 4x 10gig ports, quiet). Replace the Cloud Key Gen 2 with BlueIris for camera controller. I expect this will be able to connect to the existing Ubiquiti cameras. Possibly add one or more Ruckus R610 APs running in "Unleashed" mode to augment…

Blue Iris is a great piece of software and Ken the developer has constantly improved it. I think there's a way to get the RTSP stream from your existing cameras.

I use Blue Iris with my Ubiquiti cameras. Works like a champ.

Re: Ubiquiti Networks Breach

#263

Post by rhodozelia »

second--shift wrote: post #134
comboy wrote: post #25

Argh, why do I learn about this from HN when they pretty much force me through the cloud login with UDM-Pro. Nothing in the dashboard. Also I think http://unifi/ is crap from a security standpoint. Their threat management also seems to be just some kind of a bad joke.They could for example do a nice hardware based honeypot that you have to untrigger with physical access. They could offer so much more for prosumers pr…

Another endorsement for mikrotik here...spent a lot of time in the WISP space and doing CPE installations. Mikrotik all the way down - text config files (version control), ssh-like remote terminals on all endpoints, full feature-set on even the most basic hardware. I've taken them into other jobs and other engineers have been happy with them. The cons are that everything has one or more "mikrotik" way of doing things…

Another con is never ending regressions between versions.

Re: Ubiquiti Networks Breach

#264

Post by 29athrowaway »

amiga-workbench wrote: post #199
29athrowaway wrote: post #113

The Ubiquiti Cloud Key is the worst product I have ever purchased.

It's funny how they added a battery to the second gen model to stop power outages from shredding it's database.

Mine simply doesn't work in any way whatsoever, then I found out it was not even necessary to configure my devices (WiFi access points).

Re: Ubiquiti Networks Breach

#266

Post by _rs »

altano wrote: post #149
imposterr wrote: post #77

Earlier quoted context omitted.

I was confused by the parent comment too. Aside from the remote management features, if you turn off cloud login you still get everything else. Maybe it's something specific to the USG Pro? I've only used the smaller USG.

I recently invested in UniFi hardware with the UDM Pro and this isn't exactly correct. UniFi Protect (the video security line) requires remote access and Ubiquiti Cloud accounts or it will break in a million weird ways. If you disable cloud login you cannot reasonably use UniFi Protect.

As someone who uses UniFi Protect and refuses to use cloud-login: I disagree somewhat. It works fine, but the mobile apps become non-functional even on the same LAN. I haven't ran into any other problems.

Re: Ubiquiti Networks Breach

#267

Post by natenatenate3 »

napkin wrote: post #173
comboy wrote: post #25

Argh, why do I learn about this from HN when they pretty much force me through the cloud login with UDM-Pro. Nothing in the dashboard. Also I think http://unifi/ is crap from a security standpoint. Their threat management also seems to be just some kind of a bad joke.They could for example do a nice hardware based honeypot that you have to untrigger with physical access. They could offer so much more for prosumers pr…

Fitlet2 looks rather nice to me. Outfitted with an Intel J3455 CPU, and 2-4 Intel NICs, it is really power efficient for its performance class (idles at ~6 watts, for those that care). There are also some Chinese companies producing slightly cheaper boxes in this category- Qotom, Kettop, Protectli. When it comes to software, I'm conflicted. I like pfsense, but Netgate has gone a bit sour with the FLOSS community. I'd…

I had a fitlet2, was super excited about it, and took awhile to find one.

I had to do some work to get it to boot properly, and it worked great for a year or so, but then it just died one day, and I could never figure out what its problem was.

Out of warranty by the dead date, never bought another.

Been using a $100 HP 8300 SFF with an i7 since, it's a bit overkill, but the price was right.

Just purchased a Lenovo M90n iot when it was on sale for $215, will see how it works out once I get it.

Re: Ubiquiti Networks Breach

#268

Post by gcblkjaidfj »

varenc wrote: post #209
possibleworlds wrote: post #179

Earlier quoted context omitted.

My primary use case for a home router is solid set and forget qos. fq_codel and cake were recently added to routeros v7 beta, which means I will be plugging in my hEX again after a few years of happy edgerouter x usage. Also interested in what access points (besides unifi) people pair with mikrotik routers. Any wifi 6 recommendations?

The standalone Ubiquiti access points are still great IMHO. It's just their recent prosumer gateway/router product line that's really struggling. I've had a great experience with the older UAP-HD-PRO. Their newish $100 Wifi 6 U6-Lite AP is tempting but haven't tried it. If you just need one AP you can set it up in standalone mode and forget about it. If you want more monitoring and control you'll need to have a Ubiqu…

> If you just need one AP you can set it up in standalone mode and forget about it

unless you need any feature besides wifi at all. then you need a controller and usg at all times.

Re: Ubiquiti Networks Breach

#269

Post by linsomniac »

Johnny555 wrote: post #222
linsomniac wrote: post #214

Earlier quoted context omitted.

I guess I could have pointed it out more clearly: I'm going "used enterprise" as the route for replacement. As you say, yes, this switch was $2500 new (that's what I saw when I looked), but I bought one for under $100 on ebay. Similarly for the Ruckus R610 AP I mentioned: Those APs were a grand new, but you can get them for a bit over $100 on ebay. Linus Tech Tips did a comparison of it with other consumer units, doi…

That is a good price for the hardware, but what about the firmware? Do Aruba and Ruckus give free firmware updates? Have you looked at the power consumption of the switch? I've run some enterprise gear at home in the past (my favorite was the E-450 Sun server which an ex-employer gave me for free), but when I started paying for my own power, I found that even if the hardware is free, the power consumption makes it ex…

Looks like Aruba has the most recent firmware available for download here: https://h10145.www1.hpe.com/Downloads/SoftwareReleases.aspx?...

Most recent version is a couple years old, but it was EOLed 3 years ago.

Ruckus firmware seems to be downloadable from their main product page for the R610, updated a month ago.

Re power consumption, it looks like the Aruba pulls around 50W idle, and the Ubiquiti pulls 29W idle. Of course, if I can get rid of the second switch I've been running because the Ubiquiti keeps blocking the Google WiFi ports, that brings it even closer. :-)

Re: Ubiquiti Networks Breach

#270

Post by gcblkjaidfj »

Khaine wrote: post #185
linsomniac wrote: post #141

Earlier quoted context omitted.

I'm in the process of replacing my home Ubiquiti infrastructure. Here's what I've decided on: Replace the US-24-250W PoE switch with an Aruba Networks S2500-24P (gigabit and PoE, 4x 10gig ports, quiet). Replace the Cloud Key Gen 2 with BlueIris for camera controller. I expect this will be able to connect to the existing Ubiquiti cameras. Possibly add one or more Ruckus R610 APs running in "Unleashed" mode to augment…

I hear these are great little boxes for running PFSence and OPNSense https://protectli.com/

white label brand. You can get those boxes from alibaba for <$100. There are intel/amd/arm versions.
Post reply on HN