Ubiquiti Breach - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: March 30, 2021, 08:32:49 pm
content: Whistleblower: Ubiquiti Breach “Catastrophic“:https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/Change your PWs!

author: PKTKS
author_rank: Super Contributor
timestamp: March 31, 2021, 11:49:26 am
content: It did not last very long to surface ...Think fast..- What should be the worst nightmare for a serious data center buz ?... A SINGLE NODE OF CATASTROPHIC FAILURE ...- What exactly a "CLOUD" is ?... A SINGLE NODE OF CATASTROPHIC FAILURE ...- you have no clue who controls and access it- you have no real vision of how the thing is managed- you have left your control to the hands of unknown others..last question: Why people trust that cloud thihg ?Why Ubiquiti and not MIMOSA Mikrotik Cambrium ... others..Paul

author: madires
author_rank: Super Contributor
timestamp: March 31, 2021, 01:31:52 pm
content: Someone screwed up the risk assessment. Cloud platforms are an attractive target, hack once and own millions of accounts or devices. However, the cloud isn't bad per se, but you need to know the pros and cons, and act accordingly. And even if you don't use the cloud you can create havoc for all your users, e.g by firmwares with hidden admin accounts. Some vendors are better, some are worse. They all have to face security issues from time to time. Some more often, some more rarely. No one is bulletproof.

author: Halcyon
author_rank: Unknown
timestamp: April 03, 2021, 08:00:59 am
content: This breach was far from catastrophic, in fact, it had no impact at all to most customers. Unlike most IoT services, Ubiquiti allows you to use their products completely offline and independent of their cloud infrastructure. Even if you want to remotely manage your devices over a VPN, you still have that option.

author: cdev
author_rank: Super Contributor
timestamp: July 18, 2021, 10:49:50 pm
content: People use cloud services because they are lazy and often dont have any critical or valuable information to protect.Many of themnever even realized they could install and manage all those services themselves.Quote from: PKTKS on March 31, 2021, 11:49:26 am

author: Mr. Scram
author_rank: Super Contributor
timestamp: July 18, 2021, 11:12:01 pm
content: Quote from: cdev on July 18, 2021, 10:49:50 pmNothing to lose like various parts of various governments?

author: bson
author_rank: Unknown
timestamp: September 29, 2021, 04:15:36 am
content: Credentials like that are fine to keep and share using LastPass, 1Password and so on - but it needs to be protected with more than a password. We use U2F devices - Yubikeys in particular. Same with SSOs like Google, github/gitlab, and so on. They all support U2F - for a reason!And when people leave their accounts need to be taken down.

author: PKTKS
author_rank: Super Contributor
timestamp: September 29, 2021, 11:45:15 am
content: That scares the shit out of everything...but also put things into a perspective where nobody cares anymore putting their privacy into the hands ofunknownpeople trusted just by obscure labels such as "we care about your privacy..." trust us..No surprises there are currently about half dozens MEGA CORPORATIONS running a freak show.Things will converge to those freak show and nobody cares anymoreThese trends ahead in the mid-to-long term are very badThey are and will concentrate that just to monetize the top of the pyramid..and FU**** the restPaul

author: SL4P
author_rank: Super Contributor
timestamp: September 30, 2021, 06:52:52 am
content: LOL, wait for the ‘experts’ to say you should be using a ‘public VPN’ for your WAN connectivity 😱Oh, I missed that VPN, VirtualPublic Network… so it MUST be safe ?

author: PKTKS
author_rank: Super Contributor
timestamp: September 30, 2021, 07:42:59 am
content: Quote from: SL4P on September 30, 2021, 06:52:52 amPersonally i give a shit for VPN as part of my activity i really do not care who is certainly wasting time logging me.But when i do want some obscure cloudy bits... i just switch my proxy to TORand i have 3 settings for thatI am pretty sure today even VPNs can be sniffed with remote tags placed on hashes and hidden codeTOR is a bit hard to spotPaul

author: Ranayna
author_rank: Super Contributor
timestamp: September 30, 2021, 09:48:35 am
content: Well, considering that it is at least suspected that a large majority of TOR exit nodes are run bei various "Three Letter Agencies" i would not trust TOR all that much.I would even think that it makes you especially suspicious. :pOn topic: In the past, despite not having had personal experience with Ubiquity hardware, i, and many IT people i know, often recommended it as consideration for affordable wireless products.But since that breach i stopped doing that, and any consideration that i myself might upgrade to Ubiquity hardware had been stopped. When i learned that they now have started showing ads on the admin webpages of some of their devices i am really glad that i do not have anything made by them.But this account bullshit is really becoming very common. There are Netgear switches that need a Netgear account to manage. There are now HP printers that need an HP account to set them up. And now Windows 11 Home Edition needs a Microsoft account. It's getting ridiculous, and the options for sane people get less and less.

author: PKTKS
author_rank: Super Contributor
timestamp: September 30, 2021, 10:22:28 am
content: Quote from: Ranayna on September 30, 2021, 09:48:35 amIt may be mostly TRUE today.. reason I have even put aside my own relay..But it was not like that a decade ago.It became pretty clear that filthy hands got into the relays...Nevertheless the amount of trouble and brute force they need to do is mostly worthless for the results..Today I really give a shit for all that freak show the agencies and mega corps are making..Internet and software in general turned out like a serious anti-privacy surveillance monetizing paradigm ...Reason such CLOUD buz fast ascendingAnd why obviously some targets are sweeter than others..Politics and discrimination as usualBTW running a relay or proxy may be suspicious for vicious minds trying to find targets 100% time..Otherwise is just a plain proxy method like any other being VPN or filter proxyThe world we live is sick and monetizedPaul

author: madires
author_rank: Super Contributor
timestamp: September 30, 2021, 11:17:00 am
content: Most of the popular VPN services are marketed as some kind of privacy shield which they aren't. Marketing nonsense, as usual. There are many ways to pinpoint a specific web browser profile, not matter if via direct internet access, NAT or VPN with public exit. And those pesky enforced online accounts aren't a good idea either. Why should I give a LAN switch or a printer internet access? To increase my attack surface? Ever heard of network security? The vendors claim that they care about privacy and security. Still they try to enforce an online account which won't work without internet access.²

author: PKTKS
author_rank: Super Contributor
timestamp: September 30, 2021, 01:00:08 pm
content: Quote from: madires on September 30, 2021, 11:17:00 amDon't forget as today:- an online "account" monitoring- a required TPM identify tutored agent- a UEFI "trusted" firmware.Not so long ago mostly account and MAC (which can be tinkered)But that would not scale and leverage tracking system surveillanceSo competition can be tutoredPaul

author: madires
author_rank: Super Contributor
timestamp: December 02, 2021, 09:37:39 pm
content: Apparently it was an inside job:Ubiquiti Developer Charged With Extortion, Causing 2020 “Breach”:https://krebsonsecurity.com/2021/12/ubiquiti-developer-charged-with-extortion-causing-2020-breach/#more-57755

author: PKTKS
author_rank: Super Contributor
timestamp: December 06, 2021, 11:11:45 am
content: Quote from: madires on December 02, 2021, 09:37:39 pmFinding someone to blame does not surprises me...What really worries me is how many others disgruntled insiders are out there ?WTF can anyone trust that their whole life data into this shitty cloud business ?That worries me..I think there is already too much (OUR) data under unknown disgruntled hands.Paul

author: madires
author_rank: Super Contributor
timestamp: March 30, 2022, 05:28:49 pm
content: Ubiquiti doesn't like what Brian Krebs wrote about the breach:https://www.courtlistener.com/docket/63197557/ubiquiti-inc-v-krebs/They want US$ 350k compensation and at least 75k for trial costs.

author: PKTKS
author_rank: Super Contributor
timestamp: March 30, 2022, 05:43:51 pm
content: I have been seeing such legal threats targeting simple individuals by large corporations and guilds exponentially multiplying last 5y or so...Around here several cases of just opinions ( even been protected by constitution )been target of such "digital-case-seekers".... sponsored by interests...Considering last week all router VULNERABILITY affecting major vendors.This is just a laugh and a muck for serious people involved in security...What matters is *IF* the company will actually hold responsible for their products...What has been seeing by large... no corporation as of today has been liable for virtually no incident... zero... nada...Legal threats will even shut down individuals seeking for better products.. AND SERVICES...and they keep non liable for the problems...collecting profits and disregarding best practicesPaul

author: SiliconWizard
author_rank: Super Contributor
timestamp: March 30, 2022, 06:33:17 pm
content: Those security issues are actually a good thing, showing people what kind of risks are involved with all this cloud crap.Unfortunately, I don't think it has this effect.Most people have gotten used to security breaches, software bugs, invasion of privacy, and so on. This has become their new "normal".As to people not having "any critical or valuable information to protect", yeah for the average joe, maybe. But even that is deluded. Probably a large fraction of those average joes store contracts, bills, possibly medical information, possibly information that they do know even own (like stuff from other people) etc, on those cloud services. You tell me if this is not critical information.This cloud stuff goes hand in hand with subscription-based everything. It makes people forever dependent, and kills the already limited autonomy they had.

author: Bassman59
author_rank: Super Contributor
timestamp: March 30, 2022, 06:58:43 pm
content: Quote from: madires on March 30, 2022, 05:28:49 pmThat seems like it's aSLAPPlawsuit.

author: MrMobodies
author_rank: Super Contributor
timestamp: March 30, 2022, 08:46:59 pm
content: Quote from: PKTKS on March 31, 2021, 11:49:26 amFor VOIP I was concerned about these YeaLink "cloud" phones. A few UK ISP's I spoke to told me they use this portal setup in China to register them and Amazon "cloud" for the hosting which I was very unhappy about. I read somewhere last month in a news article, I looked just now but I can't find it that At&t have them inhouse where and block the zero positioning to YeaLinks server in China which is nice.QuoteIn a contract I'd expect redundancy and over many networks owned and controlled by the isp's in the country I live in when making local calls apart from maybe calls to other countries.

author: gmb42
author_rank: Frequent Contributor
timestamp: March 31, 2022, 10:02:14 am
content: Quote from: Bassman59 on March 30, 2022, 06:58:43 pmAt least that's what a lawyer not involved in the case says on Twitter and we all know they are paragons of the truth.While I'm inclined to cut Klebs a lot of slack because of all the good work he does there's an odd smell about this, more info atThe Register.As far as I can make out, the "breach" was actually an extortion attempt by a disgruntled Ubiquiti engineer who was claiming to be reporting poor practices at Ubiquiti and which Klebs reported on using that engineer as a "source" and with the source's view of the story, and then subsequently reported about it again after the source had been indicted when he should have known that the source was not quite what he had made out to be.

author: madires
author_rank: Super Contributor
timestamp: March 31, 2022, 10:31:27 am
content: https://twitter.com/greg_doucette/status/1509184336188350465?s=20:QuoteI just put Ubiquiti on my do-not-buy list.

author: jpanhalt
author_rank: Super Contributor
timestamp: March 31, 2022, 12:00:52 pm
content: Re: Doucette quoteCase was filed in Federal District Court Eastern District of Virginia (i.e., Washington DC area). Federal law will apply.

author: gmb42
author_rank: Frequent Contributor
timestamp: April 01, 2022, 11:21:07 am
content: Quote from: jpanhalt on March 31, 2022, 12:00:52 pmSo does that mean the random lawyer is incorrect about SLAPP? If so, I'm shocked!