Live data from Hacker News

Former Ubiquiti employee charged with stealing data and extorting company

justice.gov

121–130 of 244 posts

Re: Former Ubiquiti employee charged with stealing data and extorting company

#121

Earlier quoted context omitted.

> wrote everything in Node, but absolutely _refused_ to use any existing libraries except for ones he personally wrote. He didn't "trust" them. Sounds like the single sensible thing he did. Have you seen the npm ecosystem?

Why would you use node, if it wasn’t for the vast package exosystem?

Path of least resistance?

Picking a language (and possibly runtime) is a pretty huge investment if you intend to become proficient. A lot of people like to think that they are polyglot programmers and that language doesn't really matter. But it does. It takes a few years to become a decent programmer in a given language. And if people claim it takes just weeks or a couple of months, it really only tells you that they have very low standards.

If you are familiar with a given language, ecosystem and runtime, and you care about productivity and quality, the path of least resistance is to stick to what you know. Taking on a major project in a language you don't know is a risky proposition. In terms of quality, time, and even in terms of being able to deliver something acceptable.

I tend to have a main workhorse language. It typically takes 2-3 years to reach an acceptable level of comfortable familiarity with a new language. If history is any guide I tend to stick to the same language for 5-10 years. 5 years ago I switched from Java to Go. I mostly worked mostly as a manager at the time, which is why it took longer to reach what I think is an acceptable level. I'd say it is only in the last 18 months or so I've started feeling sufficiently competent in Go to call myself a Go programmer.

That being said: I think the JS space is both a poor technical choice and a poor career choice. The whole ecosystem is janky as fuck, you have to spend a lot of time dealing with silly complexity that tries to fix the jankiness, and the type of work you get isn't very attractive.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#122
post #110

Earlier quoted context omitted.

You mistook my assertiveness for aggression :) And let's assume it's not just the only receipt you happen to have in your house. Anyway, real life example - police calls me up saying this number came up in an investigation, who are you and a few more other questions. They were obviously expecting me to cooperate cause they hadn't bothered to do the paperwork to obtain my identity which was tied to the number. First t…

I like your actual scenario. I would probably have done the same as you, and yes it would probably be absurd to actually pay a lawyer money for that situation. Less absurd to just refuse to talk without a lawyer (This refusal does not obligate you to actually go get a lawyer unless and until you get some sort of subpoena or summons, or are arrested) In this case you had a cop who is actually willing to go back-and-fo…

> Absent that, you absolutely would be right to say something like, “without knowing what’s going on here I can’t answer any questions.”

No!

An actual lawyer wrote an actual book about this (after he made that famous video we are all talking about). Refusing to answer questions can be used against you!

His advice is to collapse it to:

"I want a lawyer."

It becomes unconstitutional for them to continue questioning you after that statement. Do not decline to answer questions directly - ask for an attorney!

Re: Former Ubiquiti employee charged with stealing data and extorting company

#123
post #110

Earlier quoted context omitted.

1. You don't have to say it aggressively. Politely say, "I need to talk to my lawyer before answering questions." 2. “The suspect conveniently had a receipt in their pocket placing them elsewhere at the exact time of the Y crime. It was the only receipt in his pocket! Seems suspicious to me. He plainly engineered the alibi.” 3. There's no reason you have to immediately begin demonstrating your innocence. It can wait…

You mistook my assertiveness for aggression :) And let's assume it's not just the only receipt you happen to have in your house. Anyway, real life example - police calls me up saying this number came up in an investigation, who are you and a few more other questions. They were obviously expecting me to cooperate cause they hadn't bothered to do the paperwork to obtain my identity which was tied to the number. First t…

You wouldn't have needed to lawyer up, as you wouldn't have been arrested. Refusing to talk to the police at all would have been the end of it.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#124
As a customer, the one thing I really want to know is whether or not the company is dealing with this in a manner that helps me decide if I should continue being a customer.

Do they understand that they may need to fire the CEO given that the CEO probably is the weakest link here? Do they have sufficient liquidity and capital to invest in resetting the culture and hiring people who can turn this around?

Re: Former Ubiquiti employee charged with stealing data and extorting company

#125

I've always been fascinated by the idea that intelligence lies within a spectrum. Someone might be incredibly smart about a narrow topic or field, yet be blind to their own stupidity within another realm. To me, this seems like a classic example. To quote the press release: "During the execution of that search, SHARP made numerous false statements to FBI agents, including, among other things, in substance, that he wa…

This man was a senior developer yet this quote sounds like it comes from a nine year-old.

I knew a senior developer doing advanced R&D at a big tech company, who also kept getting suckered into MLM scams.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#126

Earlier quoted context omitted.

Theoretically it would go down if you did that. In practice it seems to go up if people like you.

>Theoretically it would go down if you did that. Why? If a company prints a single stock then sells it for $100, I would expect the company's market cap to go up by $100 since it now has $100 more dollars in its bank account.

Because the company printing a single stock is already a signal it is worth a little bit less. If you have N stock for capital valuation $V, each stock is worth $V/N. If you emit one more, you basically need either to argue your company total valuation should rise or you dilluted all stock to be worth now $V/(N+1).

The company valuation is not stock price * stock count, which is your confusion, it's more tangible asset + speculative future assets, so the more stock you emit the less they each is worth. Companies become popular by doing stock buyback (increasing each remaining stock individual value).

Market cap, which is the stuff they do for amateur and children, to multiply stock count by stock price, is entirely meaningless because it ignores value when stocks were actually transacted and liquidity. If you emit a million stock at 0.1c and then create a marketing fad while locking the supply in the hands of a few and refuse to sell, you create a huge gap between low supply and high demand, increasing the individual price manyfold, arriving at a huge market cap... but you paid nothing for most stocks and a few people paid a LOT for a little. In investment banking we use volume weighted average price to try to get a view of what's the short term intraday value of a stock instead.

Imagine, I dont know, a crypto asset with a market cap of a trillion and a single individual owning 1/21 of the entire asset pool, if this single individual signal just one token sale, the entire market starts selling to people who dont want to buy anymore: what is then the value of considering the market cap ? It can go to 0 tomorrow just if demand disappear. Basically you need to include liquidity, a metric of the stability of the supply and demand, that's why I prefer to look at earnings per share to evaluate a company, it is way more significative of what you just bought. For a crypto asset it's 0 for instance.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#127
post #126

Earlier quoted context omitted.

>Theoretically it would go down if you did that. Why? If a company prints a single stock then sells it for $100, I would expect the company's market cap to go up by $100 since it now has $100 more dollars in its bank account.

Because the company printing a single stock is already a signal it is worth a little bit less. If you have N stock for capital valuation $V, each stock is worth $V/N. If you emit one more, you basically need either to argue your company total valuation should rise or you dilluted all stock to be worth now $V/(N+1). The company valuation is not stock price * stock count, which is your confusion, it's more tangible ass…

Right. Share buybacks and sales are both value neutral at the moment they're done, but selling implies they think it's overvalued.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#128

Ex-Ubiquiti employee here. Nick Sharp wasn't just a senior software engineer. He was the Cloud Lead and ran the whole cloud team. His LinkedIn profile will confirm it. This is why he had access to everything. Nick had his hands in everything from GitHub to Slack and we could never understand why or how. He rose to power in the company by claiming to find a vulnerability that let him access the CEO's personal system,…

Let me not come across as non-sympathetic -- I feel what you and others went through.

But IMO the truly depressing event here is management refusing to do anything until it was too late. What are they even paid for?

Re: Former Ubiquiti employee charged with stealing data and extorting company

#129

Earlier quoted context omitted.

Is this why Ubiquiti quality has fallen over the last ~2 years? I went all-in on Ubiquiti almost 3 years ago and I’ve been less than thrilled with the quality and level of support. This chaos that you say happened seems to line up with what I was seeing as a customer but everyone has been shocked at how UI has dropped in terms of quality.

I used to like Ubiquiti a lot, but nowadays i prefer to use other brands which are even easier to implement and manage. For the clients that still want to use Ubiquiti i try and implement a Debian 11 VM with the Ubiquiti software on it.

Which are those other brands and models, please? I am looking to upgrade my home setup to 10GbE LAN and apart from 2-3 switch models from Mikrotik I really can't see anything worthwhile (I don't want Cisco or TP-Link, they don't take security seriously).

Re: Former Ubiquiti employee charged with stealing data and extorting company

#130

Earlier quoted context omitted.

I used to like Ubiquiti a lot, but nowadays i prefer to use other brands which are even easier to implement and manage. For the clients that still want to use Ubiquiti i try and implement a Debian 11 VM with the Ubiquiti software on it.

Which are those other brands and models, please? I am looking to upgrade my home setup to 10GbE LAN and apart from 2-3 switch models from Mikrotik I really can't see anything worthwhile (I don't want Cisco or TP-Link, they don't take security seriously).

Check out Aruba Instant On, they seem to be trying to jump the bandwagon with the single-pane-of-glass-management and target small businesses. Also Ruckus Unleashed seems to be similar and Juniper MIST.
Post reply on HN