Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ubiquiti Networks Breach

mailchi.mp

Post reply on HN
Print view View original

461–470 of 486 posts

Re: Ubiquiti Networks Breach

#461

Post by tekproxy »

pupdogg wrote: post #345
ex_ubiquiti wrote: post #35

As a former Ubiquiti employee, I'm sad to watch the slow decline of the company. There was a steady exodus of engineering talent through 2020. The CEO was focused on moving to countries where engineering was cheaper and employees complained less about constant crunch mode. If you search around, you can find interviews where he brags about closing the San Jose office because he thought everyone there was too entitled.…

As someone who uses Ubiquiti NanoStation M2 APs very often as a part of wireless bridging solution for our own products, I was wondering what is happening with Ubiquiti. I have close colleague in Taiwan and he was so excited to inform me that he’s now working for Ubiquiti. I was sorta shocked because I thought Ubiquiti was a US based R&D team. When it first started, I remember watching the video of all the awesome en…

Innovation leads to profits, imho. "Short term profits" is the killer in most cases.

Re: Ubiquiti Networks Breach

#462

Post by psidhu »

twblalock wrote: post #200
ex_ubiquiti wrote: post #35

As a former Ubiquiti employee, I'm sad to watch the slow decline of the company. There was a steady exodus of engineering talent through 2020. The CEO was focused on moving to countries where engineering was cheaper and employees complained less about constant crunch mode. If you search around, you can find interviews where he brags about closing the San Jose office because he thought everyone there was too entitled.…

I bought a Unifi Dream Machine last year because it was an all-in-one device that seemed like the simplest way to have multiple VLANs on my home network, in order to segregate my IoT devices and security system from the rest of my home network. At the time, I didn't see any similar products. Are there any other "prosumer"-type devices on the market that could replace a Dream Machine? If Unifi is going downhill it doe…

I would suggest looking into Mikrotik. Bit of a steep learning curve and a prerequisite that you understand networking, but cheap, reliable, feature packed.

Their WiFi APs are behind the curve (no mu-mimo even afaik), but you can just hook up some other wAP if you need the newer protocol features.

What I do is keep a Mikrotik router that does all the heavy stuff and hang wAPs off of it as needed. I especially love capsman for wAP management. They do have all-in-ones of course, just not my cup of tea.

Re: Ubiquiti Networks Breach

#463

Post by grahamburger »

gertrunde wrote: post #418
jimnotgym wrote: post #372

Earlier quoted context omitted.

I have come across several situations where professional network engineers have accidentally left a Mikrotik in a dangerously insecure state by misunderstanding the UI. I like Watchguard or Draytek in the small business space. They are a bit more expensive than Mikrotik though

Oh my... so the Draytek UI is better than Mikrotik? I had been considering trying out some of their gear, but perhaps I might not bother now!

The MikroTik UI is... an acquired taste. Honestly I don't think it's bad, I would argue that it's among the best GUIs out there for routers. I would be surprised if it's more common for MikroTik routers to be left in an insecure state that any other router, unless it's only because people who work on routers tend to have been trained on Cisco or Juniper and that training just doesn't translate very well to MikroTik. But I'm also not going to die on a hill of defending MikroTik's configuration design choices, there's a lot to be desired.

Re: Ubiquiti Networks Breach

#464

Post by labas »

judge2020 wrote: post #180
ex_ubiquiti wrote: post #35

As a former Ubiquiti employee, I'm sad to watch the slow decline of the company. There was a steady exodus of engineering talent through 2020. The CEO was focused on moving to countries where engineering was cheaper and employees complained less about constant crunch mode. If you search around, you can find interviews where he brags about closing the San Jose office because he thought everyone there was too entitled.…

Have suggestions for an alternative? Most web UIs are garbage but the Ubiquiti one looks fine, even if it is cloud based.

Check out latest Teltonika's products. They are made for industrial customers mostly, but UI (on top of openwrt) is the best I've seen.

Here's a review: https://seabits.com/teltonika-rutx11-lte-router/

Re: Ubiquiti Networks Breach

#465

Post by callalex »

rossjudson wrote: post #153
ex_ubiquiti wrote: post #44

Earlier quoted context omitted.

Ubiquiti had a steady exodus of engineers in the past few years. It's a very different company now compared to the glory days of UniFi.

Doesn't it seem like one of the missing measurements for directors/VPs should be "amount of disappearing expertise"?

Often times churn is rewarded because it can keep salaries lower.

Re: Ubiquiti Networks Breach

#467

Post by gcblkjaidfj »

gh02t wrote: post #318
gcblkjaidfj wrote: post #290

Earlier quoted context omitted.

Ironically you can do that with pretty much ANY access point. From TP-LINK, assus all the way to arruba ones (unleashed). BUT you can't do that with unifi ones alone. Go figure. You need a usg+key or the discontinued UDM you have.

This is wrong. First, the UDM is not discontinued- it's for sale right now. Second, you don't need a USG+key to do VLANs. You do need to run a Unifi controller, but you can self host that anywhere like on a RasPi or in a VM. You don't need a USG to do the tagging and routing, either... the VLANs you set in the Unifi controller will work with any router/gateway it's just not all streamlined into the controller interfa…

> you don't need a USG+key to do VLANs. You do need to run a Unifi controller

Did you try? i did.

The controller UI shows you a hole in the left part of the diagram and explicitly tells you "no routing control without USG"

Re: Ubiquiti Networks Breach

#468

Post by peeters »

nh2 wrote: post #283

Regarding authenticity, from the TechCrunch article about this: > The networking company quickly followed its email with a post on its community pages confirming that the email was authentic, after several complained that the email sent to customers included typos. Indeed: How am I supposed to know whether this email is really from Ubiquiti? * There was apparently no official press release. * All links in the email,…

The "change password" button leading to an opaque tracker is inexcusable. That said, the "safe" way to handle this is the same way you do with cold calls. Ignore any calls to action in the email, go to Ubiquiti's website on your own, and change your password. If it was a phishing attempt, worst case, you updated your password which is not a bad practice every once in a while.

Re: Ubiquiti Networks Breach

#469

Post by victorhooi »

twblalock wrote: post #200
ex_ubiquiti wrote: post #35

As a former Ubiquiti employee, I'm sad to watch the slow decline of the company. There was a steady exodus of engineering talent through 2020. The CEO was focused on moving to countries where engineering was cheaper and employees complained less about constant crunch mode. If you search around, you can find interviews where he brags about closing the San Jose office because he thought everyone there was too entitled.…

I bought a Unifi Dream Machine last year because it was an all-in-one device that seemed like the simplest way to have multiple VLANs on my home network, in order to segregate my IoT devices and security system from the rest of my home network. At the time, I didn't see any similar products. Are there any other "prosumer"-type devices on the market that could replace a Dream Machine? If Unifi is going downhill it doe…

For the routing/firewall side, I would encourage looking at either pfSense (as others here have suggested), or possibly VyOS.

I used to have several Ubiquit USG devices as well as their EdgeRouter.

I moved to pfSense as it's open-source, more stable, and gives you much better control/configurability on your hardware. There's a great ecosystem of packages on pfSense, that you can install via the web UI - making it a really feature-packed for a homelab.

However, recently I've been moving to VyOS to pfSense, which is basically a stripped-down Linux distro, with a heavily tuned FRR routing stack built on top of it.

VyOS is an open-source fork of Vyatta, which was previously owned/released by Brocade networks.

It operates with a CLI, like many enterprise/commercial routing products. It takes a bit of getting used to, but it's really great to use in practice, and makes it easy to diff configurations, or rollback changes, or copy the same configuration across multiple devices.

And of course, it implements with config-management software like SaltStack/Ansible (via Napalm), which is something that pfSense. If you have multiple pfSense devices, you basically need to point/click via the web UI on each one.

For APs - Ruckus is great, as is HPE/Aruba (they have a new low-cost line that's targeting the Prosumer market) - they have both been leaders in the wifi field for ages, and have things like AP handover, RF tuning/optimisation, adaptive antennas etc down pat.

Re: Ubiquiti Networks Breach

#470

Post by varjag »

xkqd wrote: post #451
varjag wrote: post #406

Earlier quoted context omitted.

> You can also look at the proportion of field leaders. Are more from the developed nations or the developing ones? Lower cost of living does not imply developing nation. Czhech Republic or Poland or Taiwan are developed nations, all with the cost of living a fraction of Bay Area. I see Ubiquiti dev center apparently moved to Latvia. You can argue it's a depressed region of the EU but it is not a developing country b…

I’ve spent a lot of time in Czech and Poland, and while someone could argue they’re developed countries when looking at the wider gamut, it doesn’t compare well Canada, USA, UK, etc engineering talent. A lot of the engineering talent you find there is extremely limited in quantity, but it is untapped. Overall I think it’s a step in the right direction as compared to other countries we’ve outsourced work to, but let’s…

Developed in "developed country" customary means certain things. Like a decent standard of governance, sanitation, education, healthcare, welfare and quality of life. All these countries I mentioned are roughly on the same level.

You don't have problems with access to clean water in Poland. You ain't going to die from hunger in Czech Republic. There are no issues getting education in Latvia.

And mythical Anglo engineering talent, please. They are approximately the same anywhere you mentioned.

Post reply on HN