Earlier quoted context omitted.
Worth noting that Meraki have a small business option now: https://www.meraki-go.com/
Says “cloud managed” on every piece of equipment. Do you know if that’s optional?
Not optional on any Meraki gear afaik.
Whistleblower: Ubiquiti Breach “Catastrophic”
801–810 of 815 posts
Re: Whistleblower: Ubiquiti Breach “Catastrophic”
#802> “The breach was massive, customer data was at risk, access to customers’ devices deployed in corporations and homes around the world was at risk.” > “They were able to get cryptographic secrets for single sign-on cookies and remote access, full source code control contents, and signing keys exfiltration,” Maybe putting your network control plane in 'the cloud' isn't such a good idea after all... Edit: Just re-read…
Why didn’t they have a honeypot alert in their pager duty?
Re: Whistleblower: Ubiquiti Breach “Catastrophic”
#803Earlier quoted context omitted.
Nowhere is it said this was mandated. That’s your assumption not supported by evidence. So let’s run through it. Cisco writes white paper supporting LE back door access. LE/IC use hard coded back doors as revealed in the Snowden and Vault7 leaks. You’re saying it never happened, ever. Maybe you’re right (you’re not) but you spoke so firmly! Do you know something I don’t?
[flagged]
What IBM white paper?
Show me the law where this was mandated.
Because no, you are in fact misrepresenting the truth.
So, your I agree with you in not being hyperbolic. However, let’s just say I have exceedingly applicable industry experience. (IC and LE) I know beyond a shadow of a doubt that I’m right. So now my burden is finding what I can in the public domain to share this truth with you without violating NDAs.
Re: Whistleblower: Ubiquiti Breach “Catastrophic”
#804Earlier quoted context omitted.
[flagged]
What IBM white paper? Show me the law where this was mandated. Because no, you are in fact misrepresenting the truth. So, your I agree with you in not being hyperbolic. However, let’s just say I have exceedingly applicable industry experience. (IC and LE) I know beyond a shadow of a doubt that I’m right. So now my burden is finding what I can in the public domain to share this truth with you without violating NDAs.
[flagged]
Re: Whistleblower: Ubiquiti Breach “Catastrophic”
#805Earlier quoted context omitted.
What IBM white paper? Show me the law where this was mandated. Because no, you are in fact misrepresenting the truth. So, your I agree with you in not being hyperbolic. However, let’s just say I have exceedingly applicable industry experience. (IC and LE) I know beyond a shadow of a doubt that I’m right. So now my burden is finding what I can in the public domain to share this truth with you without violating NDAs.
[flagged]
[flagged]
Re: Whistleblower: Ubiquiti Breach “Catastrophic”
#806Earlier quoted context omitted.
Thanks! I completely glossed over the IPv6 thing... At home I don't get native IPv6 from my ISP, so I just tend to forget about that. Although it would be neat. For me I bought my AP on eBay and just plopped the standalone Unleashed firmware on it and that's all seemed fine. In what I see there's nothing changing? But it sounds like you're running a /much/ larger install.
@c0nsumer Without going into detail because, well, you never know who's reading .... TL;DR "WatchDog End User Support" is now mandatory for Unleashed and is sold and priced on a per AP per year basis. The pricing is not too scary (two digit figure per AP per year). But I'm told the requirement is (will be ?) enforced so its unlikely to be a case of being sneaky and paying the first year and "forgetting" to pay the re…
Thanks for this info; I appreciate it.
I've clearly only just scratched the surface of Ruckus stuff.
Re: Whistleblower: Ubiquiti Breach “Catastrophic”
#807Earlier quoted context omitted.
[flagged]
[flagged]
As far as the white paper, I mixed up Cisco and IBM in my head on that.
As far as “mandated”, laws and policy mandating back door access have been shot down repeatedly in the real world.
The claim of an FCC mandate in a white paper does not indicate legality of deployment in the real world is what I mean.
Re: Whistleblower: Ubiquiti Breach “Catastrophic”
#808Earlier quoted context omitted.
Never, ever happened. Ever. You're conflating "NSA secretly rerouting shipping company deliveries to end-users, installing their firmware, then senting it on" with "Cisco willingly did that". Cisco was unaware, and once aware (thanks to Snowden), Cisco took steps to try to prevent it, by altering shipping destinations, at the last minute, on route.
I’m not conflating anything. Check your facts. “ Way back in 2004, Cisco wrote an IETF proposal for a “lawful intercept” backdoor for routers, which law enforcement could use to remotely log in to routers. Years later, in 2010, an IBM security researcher showed how this protocol could be abused by malicious attackers to take over Cisco IOS routers, which are typically sold to ISPs and other large enterprises.” https:…
We ban accounts that post like this. Please review https://news.ycombinator.com/newsguidelines.html and stick to the rules from now on. We've had to ask you not to post in the flamewar style to HN before, so this is a big deal.
Re: Whistleblower: Ubiquiti Breach “Catastrophic”
#809Earlier quoted context omitted.
What IBM white paper? Show me the law where this was mandated. Because no, you are in fact misrepresenting the truth. So, your I agree with you in not being hyperbolic. However, let’s just say I have exceedingly applicable industry experience. (IC and LE) I know beyond a shadow of a doubt that I’m right. So now my burden is finding what I can in the public domain to share this truth with you without violating NDAs.
[flagged]
Please don't do flamewars on HN. I've warned the other commenter above but you've broken the site guidelines as well. Not cool.
Re: Whistleblower: Ubiquiti Breach “Catastrophic”
#810Earlier quoted context omitted.
> It seemed to me Ubiquiti would never allow customers the option to install their own OS I run plain-vanilla Debian on all my Ubiquiti boxes, six or seven of them at this point. debootstrap --arch=mips Octeons are awesome. Ubiquiti hardware is the bomb. I hear their software is junk, but I wouldn't know anything about that, I always erase it right after unboxing the device.
I'd like to hear more about your setup, because I'm tempted to try something similar. How do you actually bootstrap it? How do you configure it? Just a bunch of iptables rules? How do you configure the WiFi? What packages do you install?
It is literally just plain vanilla debian. See
man debootstrap
You will need to build your own kernel. Check the OpenWRT project for patches, although only a very very few Ubiquiti devices (USG-3 for example) need kernel patches. For other devices (EdgeRouter-4) the OpenWRT packages make things nicer, like getting the network device names to match what's printed on the front of the case.
Put the kernel and rootfs on a USB stick, plug it into the router, attach the serial console (nice easy RJ45 jack on the front!) and boot. Once it's up you can migrate stuff to the internal soldered-down emmc.
Octeons are awesome.