201–210 of 244 posts
Earlier quoted context omitted.
He's a reporter. "Doxxing" isn't a thing in journalism, even though it upsets people on message boards to hear it.
doxxing is doxxing. Don't care if the media think they are special.
So what's a good alternative to Ubiquiti hardware? Is there some guides/community for standard x86_64/arm64 computers and PCIe cards to be used as professional-grade routers and wifi access point at a low price range? Turris Omnia looks pretty cool but it's really too expensive for non-profits. Is OpenWRT or OPNSense the way to go? Or is there some more generic web dashboard you can run on any GNU/Linux or BSD system…
It may surprise some, but there is not prosumer/enterprise vendor that provides that Ubiquti does in terms of a solid experience, with bugs (as all software does), across routers, switches and network, with a single pane of glass.
Don't use ubiquiti is you want OPNsense capabilities. For almost everything else, it's a great bet.
The new UDR that is about to come out is a very worthy successor to the Apple Airport... but has more power then any other consumer hardware. That's a hard combo to get to.
Ubiquiti's stock price (NYSE: UI) dropped by over 25% from $380 to $290 during the week following news of its breach. That's almost $5 billion wiped off the company's market capitalisation because of this employee.
Probably could have been a lot less and/or recovered by now had Ubiquiti not also gone through great lengths to cover it up and actively avoid taking appropriate mitigation action. https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-b... I mean Nick Sharp certainly took a chunk out of them but there is more to the story for why the market lost that much faith.
Krebs got played here.
Ubiquiti's stock price (NYSE: UI) dropped by over 25% from $380 to $290 during the week following news of its breach. That's almost $5 billion wiped off the company's market capitalisation because of this employee.
I’m shocked it hasn’t bounced back yet!
Brian Krebs’ article interviewing the whistleblower took this to DEFCON 1 for Ubiquiti. It’s really crazy how Mr. Sharp was able to trick all of his victims. https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-b...
Earlier quoted context omitted.
Should there be a chat bot for this? "Hey, I see you just shared a credential, I'll remind you in 5 minutes to delete it, if the message is not deleted I'll alert a member of the security team" kinda thing?
Ideally shouldn't the credential be rolled even if you delete the message? Unless slack hard deletes messages, but my guess would be soft deletion. Even then it's not really designed for sending sensitive credentials
Even if slack would delete the message, clients like bitlbee and wee-slack exist, and save the messages as soon as they came in, and slack will not be able to delete them. Bots get those messages as well.
Just because the chat service deletes messages from their backend does not mean the message is deleted at the clients.
Earlier quoted context omitted.
The stock definitely was at a peak, and fell dramatically on the release of that news and stayed low. That part is absolutely correct. Now you can argue that it wasn't a permanent loss, but the damage was done by the hacker and the journalist. It has also stayed relatively in that range afterwards - but you can definitely argue that this is due to the supply chain problems that the entire world is dealing with - but…
Correlation isn't causation, especially with stock prices.
But whatever.
Earlier quoted context omitted.
Is this why Ubiquiti quality has fallen over the last ~2 years? I went all-in on Ubiquiti almost 3 years ago and I’ve been less than thrilled with the quality and level of support. This chaos that you say happened seems to line up with what I was seeing as a customer but everyone has been shocked at how UI has dropped in terms of quality.
I used to recommend them. Not anymore. My complete home setup is all their kit (the GUI means that if I kick it, the family can likely sort - it is import). I opened a case that a replacement switch (new model, old is EOL) did not work with one of their POE devices. I know this stuff backwards and forwards. I did my testing and basically sent the case to support with all the details (I know this stuff at the ASIC lev…
Edit: also their stock. Believed in them so much I bought their stock
Ex-Ubiquiti employee here. Nick Sharp wasn't just a senior software engineer. He was the Cloud Lead and ran the whole cloud team. His LinkedIn profile will confirm it. This is why he had access to everything. Nick had his hands in everything from GitHub to Slack and we could never understand why or how. He rose to power in the company by claiming to find a vulnerability that let him access the CEO's personal system,…
Is this why Ubiquiti quality has fallen over the last ~2 years? I went all-in on Ubiquiti almost 3 years ago and I’ve been less than thrilled with the quality and level of support. This chaos that you say happened seems to line up with what I was seeing as a customer but everyone has been shocked at how UI has dropped in terms of quality.
Earlier quoted context omitted.
> When faced correcting a false reality you have created, it can be quite hard to decide to phase change into telling the truth. The lies that come out come from not being prepared and not being a very good liar. For people who lie like this, a good way to think about it is as though it were a disease. Or just don’t talk to the police and lawyer up. I agree the best thing is to not do the crime, but if you are a crim…
Having a lawyer doesn't mean you can just not answer questions when subpoenad. "Don't talk to cops" is complicated.
The full phrase - "don't talk to cops except upon the advice of your lawyer" - isn't complicated either.