Live data from Hacker News

Final thoughts on Ubiquiti

krebsonsecurity.com

171–180 of 238 posts

Re: Final thoughts on Ubiquiti

#171

Earlier quoted context omitted.

Yeah, this reflects my views too. He's using the veneer or pretext of journalism and reporting the truth in order for him to cover sloppy sourcing.

> sing the veneer or pretext of journalism and reporting the truth in order for him to cover sloppy sourcing Getting tips from criminals is not sloppy sourcing. There is verification that obviously failed here. We likely won't hear the full story until the prosecution and litigation cycles have turned.

[deleted]

Re: Final thoughts on Ubiquiti

#172
post #61

Earlier quoted context omitted.

> I think it's obvious he's going to do something to avoid this happening again but also I highly doubt anything would be disclosed publicly about this. This isn't exactly a guy with a track record of not learning. Sure, but part of a "mea culpa" is saying what's important to be said. Otherwise why say anything at all? Maybe he doesn't get it? Maybe he sees the facts differently? Generally I agree with you, and think…

Frankly, he is retracting something because is wrong and he is broadcasting that retraction on the largest platform he has access to: his platform. He has sincerely apologized to and made clear who he has harmed: Ubiquiti. So like, what do you want? What more should he say? You say "maybe he sees the facts differently" as if we as anonymous internet crowds are entitled to a post-mortem on his psychological state. Thi…

> So like, what do you want?

This hasn’t been a particularly prompt retraction. Why the delay?

Re: Final thoughts on Ubiquiti

#173
post #41

Earlier quoted context omitted.

Mikrotik is in the same price range but not as polished.

"Not as polished" is an incredibly generous term. Unless something has radically changed, Mikrotik basically requires remoting in with a command line and understanding all the implementation details. It's like trying to run a FreeBSD box as a router. Ubiquiti's tooling for common workflows is generations ahead, not a coat of polish.

I have one Mikrotik switch and it's the only device on my network that just randomly decides it doesn't want to DHCP renewal and falls back to some random static IP until a power cycle.

Since it's a switch that I rarely touch it's not a big deal, but "not polished" is putting it mildly for sure.

Price & performance is still solid if you just treat it as a VLAN-aware "dumb" switch, though.

Re: Final thoughts on Ubiquiti

#174
post #6

An accurate but pretty lacklustre "mea culpa" and retraction. I don't mind people making mistakes, everyone does, but seeing how Krebs has handled this whole episode has not inspired optimism in how he'll handle future mistakes. He was essentially used as an unwitting party in a cyber blackmail scheme, and he doesn't touch on that at all. There will continue to be nefarious parties trying to misuse his reputation, so…

This is about of straightforward as a "I screwed up, I own it, I apologize" Everyone makes mistakes. Some of the good work Krebs has done seems to be completely overshadowed by a mistake here. Granted, this is probably in response to some legal action either in progress or already settled, but what more do you want from the guy?

I'm not really sure if he's owning it. This post has not made it to his Twitter feed, unlike most of the other recent stories. They're probably not automated, so I wouldn't expect it to be there immediately, but I kinda feel like he wants it to just quietly go away if he doesn't mention it there as well.

https://twitter.com/briankrebs

Re: Final thoughts on Ubiquiti

#175

Earlier quoted context omitted.

Frankly, he is retracting something because is wrong and he is broadcasting that retraction on the largest platform he has access to: his platform. He has sincerely apologized to and made clear who he has harmed: Ubiquiti. So like, what do you want? What more should he say? You say "maybe he sees the facts differently" as if we as anonymous internet crowds are entitled to a post-mortem on his psychological state. Thi…

> So like, what do you want? This hasn’t been a particularly prompt retraction. Why the delay?

[deleted]

Re: Final thoughts on Ubiquiti

#176
post #58

> As a result of the new information that has been provided to me, I no longer have faith in the veracity of my source or the information he provided to me. I always endeavor to ensure that my articles are properly sourced and factual. This is a strange statement given how the details of the FBI investigation have been public for a very long time. Krebs was fast to report on the initial accusations, but seems to have…

This is a failure across many journalists; the inability to view what they're involved with objectively. The amount of scrutiny applied to a source is inversely proportional with how much I want to believe the source.

> The amount of scrutiny applied to a source is inversely proportional with how much I want to believe the source

Aka "confirmation bias"

Re: Final thoughts on Ubiquiti

#177
post #61

Earlier quoted context omitted.

> I think it's obvious he's going to do something to avoid this happening again but also I highly doubt anything would be disclosed publicly about this. This isn't exactly a guy with a track record of not learning. Sure, but part of a "mea culpa" is saying what's important to be said. Otherwise why say anything at all? Maybe he doesn't get it? Maybe he sees the facts differently? Generally I agree with you, and think…

Frankly, he is retracting something because is wrong and he is broadcasting that retraction on the largest platform he has access to: his platform. He has sincerely apologized to and made clear who he has harmed: Ubiquiti. So like, what do you want? What more should he say? You say "maybe he sees the facts differently" as if we as anonymous internet crowds are entitled to a post-mortem on his psychological state. Thi…

It’s about reputation. His reputation has been damaged. I think people genuinely appreciate what he’s done and hope that he’ll rehabilitate it.

Let’s avoid ad hominem.

Re: Final thoughts on Ubiquiti

#178
post #32

Before people jump on this with super negativity... mistakes happen. What is Krebs' false positive rate? I think low enough that a simple, clear explanation of why it happened is sufficient. There's no weasel words or evasion here - he owns up to the error, apologizes to affected parties, and retracts all original posts. It's true that his reporting probably caused stress for Ubiquity. I'm curious what people think i…

Ubiquiti lost $4B in market cap based on this one, poorly sourced post Krebs wrote. He then waited 9 months after he knew it was lies to correct and only does it in the most muted, begrudging way possible. This is completely unethical behavior for a writer.

I don't think it's fair to attribute their losses directly to Krebs. While this instance is in their favor, Ubiquiti have been doing plenty on their own to alienate their client base. Half backed software updates, pushing products in new verticals without delivering on existing prodcuts. It's clear that there are still issues within Ubiquiti that aren't washed away by this "breach". They're attempting to be enterprise and barely delivering in the Prosumer market.

Re: Final thoughts on Ubiquiti

#180

Reminds me of the Bloomberg SuperMicro article with a single anonymous source alleging that several big companies were compromised, which they deny. Funniest part is how Bloomberg itself also claims it wasn't compromised: > Bloomberg LP has been a Supermicro customer. According to a Bloomberg LP spokesperson, the company has found no evidence to suggest that it has been affected by the hardware issues raised in the a…

Biggest difference - Bloomberg still hasn't retracted that garbage story...

Yeah, that's why I'm reminded. Is the moral of the story that reputable, medium-sized reporters without huge legal resources are more trustworthy than something like Bloomberg?
Post reply on HN