Former Ubiquiti employee charged with stealing data and extorting company • Hacker News Board

Re: Former Ubiquiti employee charged with stealing data and extorting company

#221

Post by vytvy » Thu, Dec 02, 2021, 9:33 PM UTC

TedDoesntTalk wrote: post #47

> SHARP used a virtual private network service that he subscribed to from a company named Surfshark to mask his Internet Protocol (“IP”) address when he accessed Company-1’s AWS and GitHub infrastructure without authorization. How did they know it was SurfShark?

FYI, the policy to delete logs, just deletes them from your aws account, but they are still accessable/recoverable from aws side if needed. So this guy, that worked as cloud lead in ubiquiti was stupid enough to think it will hide his traces by deleting logs :DD it might have worked if he deleted them in bare metal server itself,but in aws it just deletes from account/s3, but can be recovered by AWS support. so this is how they got all the logs and found that it was him that logged in with his own aws user, and ip address from surfshark.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#222

Post by v77 » Thu, Dec 02, 2021, 9:37 PM UTC

zamadatix wrote: post #37

oars wrote: post #16

Ubiquiti's stock price (NYSE: UI) dropped by over 25% from $380 to $290 during the week following news of its breach. That's almost $5 billion wiped off the company's market capitalisation because of this employee.

Probably could have been a lot less and/or recovered by now had Ubiquiti not also gone through great lengths to cover it up and actively avoid taking appropriate mitigation action. https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-b... I mean Nick Sharp certainly took a chunk out of them but there is more to the story for why the market lost that much faith.

LOL, this is literally covered in the article! Sharp was the source for this story! He was lying to try and cover his tracks! Krebs should probably take this story down.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#223

Post by lotsofpulp » Thu, Dec 02, 2021, 10:03 PM UTC

b3lvedere wrote: post #218

lotsofpulp wrote: post #175

Earlier quoted context omitted.

Does Aruba instant on allow for multiple VLAN solely for wireless clients by SSID? I love Meraki stuff, so I looked into Meraki Go, and they handicapped Meraki Go by only allowing VLAN for devices with wired connections to the switch. I want the ability to setup a wireless SSID, apply a VLAN to it, and have any wireless devices connected to that SSID be on that VLAN.

https://instanton.club/library/setting-up-aruba-instant-on-1...

Ah, perfect, thank you! For anyone wondering, the demonstration for assigning VLAN per wireless SSID starts at ~6m30s.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#224

Post by hnaccount141 » Thu, Dec 02, 2021, 10:52 PM UTC

pdimitar wrote: post #155

b3lvedere wrote: post #153

Earlier quoted context omitted.

To my knowledge all their switches are fan cooled.

Thank you. Any direct impression on how noisy they are?

I have the 24 port poe model and swapped the fan for a noctua. The stock fan wasn't noisy by rackmount switch standards but it was more than I prefer to have audible in my living space.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#225

Post by hnaccount141 » Thu, Dec 02, 2021, 10:56 PM UTC

b3lvedere wrote: post #148

pdimitar wrote: post #129

Earlier quoted context omitted.

Which are those other brands and models, please? I am looking to upgrade my home setup to 10GbE LAN and apart from 2-3 switch models from Mikrotik I really can't see anything worthwhile (I don't want Cisco or TP-Link, they don't take security seriously).

Aruba Instant On. (It's owned by HP) The name is bit misleading though. Especially the first time it can take quite some time for devices to be fully updated and manageable. Regarding support wise: I've had one malfunctioning switch (POE just stopped working) and it was replaced within 24 hours, so that's nice.

I have an instant on switch and quite like it. Worth noting however that the unifi-style all in one management interface requires using their cloud service, it can't be self-hosted like unifi. The switches can be configured locally (individually) but the access points can't.

Wish they would reevaluate that decision, as I've heard good things about their access points.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#226

Post by charcircuit » Thu, Dec 02, 2021, 11:52 PM UTC

ramcle wrote: post #157

miyuru wrote: post #94

Earlier quoted context omitted.

I really dislike theses kinds of comments in theses kind of posts. This is just bragging. I would like the bad people to be caught and you are just giving away free advice to any future thief like him and also kind of encouraging other people which is kind of worrisome. Privacy is a double edge sword and this is case that I happy that he was caught because of his lack of knowledge.

But such information can also serve as an advice for potential victims. For example, many people don't think about the fact that if they credit card info gets stolen, it not only may lead to losing money (which may be not much if a card has access to little funds), but may also allow someone to use it in a criminal context. Demonstrating a scenario where it can be used in a serious crime can increase awareness.

Victims don't care about that because it doesn't effect them. Losing money on the other hand does.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#227

Post by edm0nd » Fri, Dec 03, 2021, 1:02 AM UTC

neom wrote: post #168

ex_ubiquiti wrote: post #23

Ex-Ubiquiti employee here. Nick Sharp wasn't just a senior software engineer. He was the Cloud Lead and ran the whole cloud team. His LinkedIn profile will confirm it. This is why he had access to everything. Nick had his hands in everything from GitHub to Slack and we could never understand why or how. He rose to power in the company by claiming to find a vulnerability that let him access the CEO's personal system,…

How does one weaponize slack? Github maybe I can understand, but I don't understand how you can weaponize slack.

You can also view users private messages by downloading the history.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#228

Post by khaki54 » Fri, Dec 03, 2021, 1:27 AM UTC

artificialLimbs wrote: post #28

baskethead wrote: post #27

Earlier quoted context omitted.

Is this why Ubiquiti quality has fallen over the last ~2 years? I went all-in on Ubiquiti almost 3 years ago and I’ve been less than thrilled with the quality and level of support. This chaos that you say happened seems to line up with what I was seeing as a customer but everyone has been shocked at how UI has dropped in terms of quality.

When I first bought ubnt (a sec gateway), I could chat with support agents FROM THE GATEWAY'S WEB UI! The service was shockingly good at the time, and I was committed to using UBNT from then on. Agents would be on the chat usually within a minute, maybe a few. Now... submit a ticket. Frustrating/pointless UI changes. Breaking system upgrades. Backed up your configuration? Doesn't matter, you're going to need to reset…

yeah i remember that feature. was amazing!

Re: Former Ubiquiti employee charged with stealing data and extorting company

#229

Post by bithavoc » Fri, Dec 03, 2021, 3:09 AM UTC

sgerenser wrote: post #214

1991g wrote: post #83

Earlier quoted context omitted.

Somewhat amusing that he has a new dev job since the incident.

Could be fake. The employer is marked “Confidential.”

FYI It wasn’t confidential when I posted my comment, so something changed in the last 24 hrs after the news became public.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#230

Post by doctor_eval » Fri, Dec 03, 2021, 3:10 AM UTC

nython wrote: post #154

doctor_eval wrote: post #118

Earlier quoted context omitted.

I’ve finally worked out that people who want something from me, like my company or my software or my expertise, will say whatever they have to say to get a deal - but once the deal is done they just do whatever the hell they want, regardless of what they said. It’s the opposite of what I expect. I can’t deal with it. The people who do this are smart, confident and charismatic. It is clearly a negotiating strategy. Bu…

Thisstory about ebay's attempted takeover of craigslist might interest you. Even before Omidyar stepped down from Craigslist’s board, his appointed agent, Garrett Price, started bullying Craigslist’s owners. In an email to Buckmaster, Price wrote that Craiglist was “driving [eBay’s] execs (especially Meg) to distraction.” He told Buckmaster that eBay’s takeover was “inevitable” and that Craigslist needed to accept th…

Hey nython, i just wanted to reply again and say that I got a chance to read the whole article just now. It has really helped me put my recent experiences into context. THANK YOU.

It's been one thing for me to be on the receiving end of bad behaviour and to form an opinion and suspicions about what happened.

But it's quite another to see it played out deliberately, in the large, using trust and friendship as a weapon to defeat a group of people who aren't even playing the same game.

The remarkable thing for me is that people really are capable of this kind of shitty behaviour; that it can be entirely intentional, and planned well ahead of time. And that it doesn't matter how rich some people are, they are happy to cheat and steal just to get a little bit more. It's disgusting.

Thanks again for linking to it.