Live data from Hacker News

Former Ubiquiti employee charged with stealing data and extorting company

justice.gov

141–150 of 244 posts

Re: Former Ubiquiti employee charged with stealing data and extorting company

#141
So what's a good alternative to Ubiquiti hardware? Is there some guides/community for standard x86_64/arm64 computers and PCIe cards to be used as professional-grade routers and wifi access point at a low price range? Turris Omnia looks pretty cool but it's really too expensive for non-profits.

Is OpenWRT or OPNSense the way to go? Or is there some more generic web dashboard you can run on any GNU/Linux or BSD system?

Re: Former Ubiquiti employee charged with stealing data and extorting company

#142

Earlier quoted context omitted.

Market cap is monopoly money, it doesn't mean anything.

Alas not true. The higher your market cap, the more money you can raise by printing more stocks.

By the time you're publicly traded you're not looking to raise money via equity as you have excellent access to loans by that point. You're not talking about a startup that can't get a loan.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#143

Earlier quoted context omitted.

I would like to hear more about your experience.

I’ve finally worked out that people who want something from me, like my company or my software or my expertise, will say whatever they have to say to get a deal - but once the deal is done they just do whatever the hell they want, regardless of what they said. It’s the opposite of what I expect. I can’t deal with it. The people who do this are smart, confident and charismatic. It is clearly a negotiating strategy. Bu…

I sometimes wonder if the snakes learn their craft in some consistent manner (schoolyard politics? non-naive parents?) or if it's mostly instinctual.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#144

So what's a good alternative to Ubiquiti hardware? Is there some guides/community for standard x86_64/arm64 computers and PCIe cards to be used as professional-grade routers and wifi access point at a low price range? Turris Omnia looks pretty cool but it's really too expensive for non-profits. Is OpenWRT or OPNSense the way to go? Or is there some more generic web dashboard you can run on any GNU/Linux or BSD system…

How about mikrotik, https://mikrotik.com/

I am a satisfied user of their software (and hardware) for the past 10years.

If you don't mind the rather rustic interface, it should be as closest to a professional grade cisco as you can get.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#145
post #94

He could've prevent all of this by a) making sure his traffic was blackholed when the VPN went down and b) adding another layer from a free service (like TOR or a proxy or another VPN). He also should've been actively using the VPN so his traffic patterns wouldn't stand out as much, and so his purchase would be justifiable. If he really did buy the VPN 6 months ahead then he was a fool to leave the subscription dorma…

I really dislike theses kinds of comments in theses kind of posts. This is just bragging. I would like the bad people to be caught and you are just giving away free advice to any future thief like him and also kind of encouraging other people which is kind of worrisome. Privacy is a double edge sword and this is case that I happy that he was caught because of his lack of knowledge.

This information can all be easily found or derived, Mr. Sharp wasn't lacking resources to learn opsec if he cared.

He was probably just overconfident in his knowledge; you kind of have to be somewhat nuts to try to pull this off so it's not too surprising.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#146
post #25

Earlier quoted context omitted.

I’m shocked it hasn’t bounced back yet!

Some times these events (not security specifically) simply mask a market correction or trigger it. I have been in infosec a long time now and historically security incidents have rarely moved a stock price. Maybe temporarily, but it tends to bounce back after a year. Look at the massive Home Depot breaches from a while back for example. Perhaps consumers are less forgiving if it happens to a tech company.

[deleted]

Re: Former Ubiquiti employee charged with stealing data and extorting company

#147

So what's a good alternative to Ubiquiti hardware? Is there some guides/community for standard x86_64/arm64 computers and PCIe cards to be used as professional-grade routers and wifi access point at a low price range? Turris Omnia looks pretty cool but it's really too expensive for non-profits. Is OpenWRT or OPNSense the way to go? Or is there some more generic web dashboard you can run on any GNU/Linux or BSD system…

How about mikrotik, https://mikrotik.com/ I am a satisfied user of their software (and hardware) for the past 10years. If you don't mind the rather rustic interface, it should be as closest to a professional grade cisco as you can get.

I've successfully used Microtik hardware, but they are pushing for their own non-free software stack (RouterOS) and while they support pfSense, it seems pfSense itself has some shady practices. OPNSense only works on x86 so far and Microtik hardware is mostly ARM.

I'd personally be interested in a hardware vendor supporting a free-software stack (but with an accessible price range), or an established software vendor (ideally a workers coop) maintaining an administration dashboard to setup on commodity hardware.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#148

Earlier quoted context omitted.

I used to like Ubiquiti a lot, but nowadays i prefer to use other brands which are even easier to implement and manage. For the clients that still want to use Ubiquiti i try and implement a Debian 11 VM with the Ubiquiti software on it.

Which are those other brands and models, please? I am looking to upgrade my home setup to 10GbE LAN and apart from 2-3 switch models from Mikrotik I really can't see anything worthwhile (I don't want Cisco or TP-Link, they don't take security seriously).

Aruba Instant On. (It's owned by HP) The name is bit misleading though. Especially the first time it can take quite some time for devices to be fully updated and manageable.

Regarding support wise: I've had one malfunctioning switch (POE just stopped working) and it was replaced within 24 hours, so that's nice.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#149

Earlier quoted context omitted.

Is this why Ubiquiti quality has fallen over the last ~2 years? I went all-in on Ubiquiti almost 3 years ago and I’ve been less than thrilled with the quality and level of support. This chaos that you say happened seems to line up with what I was seeing as a customer but everyone has been shocked at how UI has dropped in terms of quality.

I mean this genuinely: I'm amazed there was a point at which people were ever thrilled enough with the quality and level of support from Ubiquiti that they are now shocked. Other than the working hours first level chat support I can't think of anything they had in support that remotely resembled having quality support. Shit, 3 years ago I was happy if there was someone on the forums that found a version of firmware t…

Maybe people are now used to the level of support they get from Google & Co.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#150
post #77
post #66

Earlier quoted context omitted.

> When faced correcting a false reality you have created, it can be quite hard to decide to phase change into telling the truth. The lies that come out come from not being prepared and not being a very good liar. For people who lie like this, a good way to think about it is as though it were a disease. Or just don’t talk to the police and lawyer up. I agree the best thing is to not do the crime, but if you are a crim…

Even if you're not guilty the intelligent and simple thing is to politely decline to speak to the investigators and consult an attorney.

Indeed. In my understanding, the authorities have the depth of training and the experience to easily talk us regular folks in circles and catch us in contradictions. Especially if you're innocent: lawyer up.
Post reply on HN