Whistleblower: Ubiquiti Breach “Catastrophic” • Hacker News Board

Re: Whistleblower: Ubiquiti Breach “Catastrophic”

#321

Post by IgorPartola » Tue, Mar 30, 2021, 9:05 PM UTC

traceroute66 wrote: post #200

IgorPartola wrote: post #43

Earlier quoted context omitted.

Was shopping for alternatives to my Ubiquiti last night. Seems like there is nothing good out there. Engenius has shit hardware and a cloud controller. Aruba has a cloud controller AND you have to pay for a license. Cisco makes you pay for a license. TP-Link is cloud-based. WTF. Does anyone have a decent WAP where I can use PoE, deploy like 5 of them and have them support roaming between APs, all managed locally? Is…

For those people here saying "go Ruckus unleashed" ... caveat emptor my friends ! I have it on very good authority that Ruckus have started rolling out a change in their pricing model to require a Unleashed license per AP to operate, a move which obviously increases costs to the end-user. Some people might say its a deliberate move prevent cannibalisation of their main business model by nudging people away from Unlea…

Your credit card is stolen and your bank disables it -> your network is dead. What a great user experience.

Re: Whistleblower: Ubiquiti Breach “Catastrophic”

#322

Post by istjohn » Tue, Mar 30, 2021, 9:05 PM UTC

colineartheta wrote: post #306

rsync wrote: post #189

Earlier quoted context omitted.

Now rewrite your entire comment with s/ubiquiti/sonos/g. So much wasted potential ... so much customer goodwill wasted because (apparently) no company is worth running unless it is a publicly traded unicorn.

Just curious (I agree with you), but what are the s/ and /g for? Samsung and Google?

That's the syntax for search on replace with sed on Linux.

Re: Whistleblower: Ubiquiti Breach “Catastrophic”

#323

Post by sofixa » Tue, Mar 30, 2021, 9:05 PM UTC

m4rtink wrote: post #311

benjohnson wrote: post #57

Earlier quoted context omitted.

It's a shame that Mikrotik doesn't have a easy to use global GUI. It's the right hardware, and great firmware and wonderful flexibility - but it needs an easy to use GUI controller to make the simple stuff easy to take over from Ubiquiti.

Winbox is a really nice remote controller for Mikrotik & vulnerabilities of a shared global controller have just been clearly demonstrated, so I don't see an issue.

Not really. The vulnerabilities of using a vendor hosted cloud controller have been demonstrate, but having one yourself next to your networking decides is just as secure as it always was.

Re: Whistleblower: Ubiquiti Breach “Catastrophic”

#324

Post by spockz » Tue, Mar 30, 2021, 9:05 PM UTC

How can you see whether you have been effected or whether they have poked around your setup and maybe even left something behind? Theoretically you can’t really trust anything on your network anymore.

Re: Whistleblower: Ubiquiti Breach “Catastrophic”

#325

Post by inetknght » Tue, Mar 30, 2021, 9:05 PM UTC

colineartheta wrote: post #306

rsync wrote: post #189

Earlier quoted context omitted.

Now rewrite your entire comment with s/ubiquiti/sonos/g. So much wasted potential ... so much customer goodwill wasted because (apparently) no company is worth running unless it is a publicly traded unicorn.

Just curious (I agree with you), but what are the s/ and /g for? Samsung and Google?

Good tools support search and replace. Better tools support regular expressions.

https://linux.die.net/man/1/sed

Re: Whistleblower: Ubiquiti Breach “Catastrophic”

#326

Post by eecc » Tue, Mar 30, 2021, 9:06 PM UTC

benjohnson wrote: post #132

bpye wrote: post #76

Earlier quoted context omitted.

These recent posts about Ubiquiti have made me look again at MikroTik. Their hardware is more affordable than I had remembered. Is there any good intro to their hardware - there are certainly a lot more options than you get with Ubiquiti. Even before now there are some limitations with UniFi that have annoyed me. Setting up more complex DNS and firewall rules requires editing the JSON config. IPv6 tunnelling isn’t we…

It may sound strange, but for Mikrotik, I find it more productive to concentrate on setting them up via CLI. It's certainly more trainable. CLI for Port Forward: /ip firewall nat add chain=dstnat dst-port=1234 in-interface=ether1-gateway action=dst-nat protocol=tcp to-address=192.168.1.1 to-port=1234 VS having to document the same task in the GUI: IP->Firewall->Nat-> Add New General Tab Chain: dstnat Protocol: TPC Ds…

Yup, very nice router/switch. If anyone could forward a properly documented configuration to make the Apple AirPort guest network work I'd be ever grateful.

Re: Whistleblower: Ubiquiti Breach “Catastrophic”

#327

Post by [deleted] » Tue, Mar 30, 2021, 9:06 PM UTC

colineartheta wrote: post #306

rsync wrote: post #189

Earlier quoted context omitted.

Now rewrite your entire comment with s/ubiquiti/sonos/g. So much wasted potential ... so much customer goodwill wasted because (apparently) no company is worth running unless it is a publicly traded unicorn.

Just curious (I agree with you), but what are the s/ and /g for? Samsung and Google?

[deleted]

Re: Whistleblower: Ubiquiti Breach “Catastrophic”

#328

Post by newsclues » Tue, Mar 30, 2021, 9:06 PM UTC

kazen44 wrote: post #170

dolni wrote: post #110

Earlier quoted context omitted.

So the question for becomes: is there just not a good enthusiast market for this stuff? I have met a number of people who are "network nerds", so I'm inclined to think the market does exist. With any of the plethora of consumer devices (Linksys, Netgear, D-Link) it's a dice roll whether your gear is complete garbage or not. A lot of the time, you're coming up snake eyes. I've got some Ubiquiti gear I bought a couple…

? So the question for becomes: is there just not a good enthusiast market for this stuff? I have met a number of people who are "network nerds", so I'm inclined to think the market does exist. my experience as a professional "network nerd" is that most other people in the networking field run cheap/second hand enterprise gear fetched from their employer at a major discount and simply seem to care less about wifi in g…

Ubiquity captured the prosumer networking market.

Re: Whistleblower: Ubiquiti Breach “Catastrophic”

#329

Post by tinco » Tue, Mar 30, 2021, 9:07 PM UTC

colineartheta wrote: post #306

rsync wrote: post #189

Earlier quoted context omitted.

Now rewrite your entire comment with s/ubiquiti/sonos/g. So much wasted potential ... so much customer goodwill wasted because (apparently) no company is worth running unless it is a publicly traded unicorn.

Just curious (I agree with you), but what are the s/ and /g for? Samsung and Google?

It's how you do a text replacement in VIM, I believe it's s for substitute, /../ for the regular expression, and g for global, to substitute multiple instances.

Re: Whistleblower: Ubiquiti Breach “Catastrophic”

#330

Post by actimia » Tue, Mar 30, 2021, 9:07 PM UTC

colineartheta wrote: post #306

rsync wrote: post #189

Earlier quoted context omitted.

Now rewrite your entire comment with s/ubiquiti/sonos/g. So much wasted potential ... so much customer goodwill wasted because (apparently) no company is worth running unless it is a publicly traded unicorn.

Just curious (I agree with you), but what are the s/ and /g for? Samsung and Google?

It is a `sed` command, used to replace (s/) all (/g) instances of the first word with the second.