News for hackers. Stuff that matters.
Re:Netgear Firmware Requires Online Registration by gogopuppygogo on Saturday September 19, 2020 @08:04PM (#24531087)
All low end proprietary network gear is going managed by cloud. Ubiquiti on the soho side and now consumer.

Open source is the only equipment you can trust to not adopt this model as it’s much more profitable than shipping a box once every five years.

Re:Netgear Firmware Requires Online Registration by 4cao on Saturday September 19, 2020 @08:38PM (#24531209)
Netgear isn't (wasn't?) really low-end though. At least not priced as such. One would think they'd be making enough without having to resort to such tactics.

You're right Ubiquiti did it though and I believe their devices are priced even higher. (Edit: note the post next to mine says you can opt out of this.)

I agree replacing the stock firmware with an open-source aftermarket one like OpenWRT is the way to go but there's still the moral dilemma of supporting such practices with your wallet.

I was also thinking if this could be an attempt to thwart the second-hand market for their devices? Is the binding to the online account permanent, or maybe it requires unbinding the previous account first?

Re:Netgear Firmware Requires Online Registration by foxdev on Saturday September 19, 2020 @10:02PM (#24531480)
You can get a $20-40 Netgear router at Walmart.
Re:Netgear Firmware Requires Online Registration by T3OU-736 on Saturday September 19, 2020 @11:25PM (#24531693)
I would posit that MikroTik is so far not doing this insanity, and price-wise is not far off from NetGear.
Re:Netgear Firmware Requires Online Registration by Silhouette on Sunday September 20, 2020 @06:44AM (#24533191)
Nor DrayTek, AFAIK. And those are the two brands that I consistently see recommended for SOHO network gear these days. They don't have the flashy UI of something like Ubiquiti, so you do have to know what you're doing to set them up, but they seem to make reliable hardware and solid firmware.
Re:Netgear Firmware Requires Online Registration by matheusmoreira on Sunday September 20, 2020 @04:02AM (#24532610)
Why can't we have network equipment that's designed from the ground up to run open source router firmwares? When my ISP gives me new networking hardware, the first thing I do is look for ways to flash new firmware on it or put it into bridge mode.
Re:Netgear Firmware Requires Online Registration by gabriel_shatana on Sunday September 20, 2020 @05:56AM (#24532987)
There's librerouter actually, but Is more intended for mesh network scenarios.

https://librerouter.org/

Re:Netgear Firmware Requires Online Registration by ziml77 on Saturday September 19, 2020 @09:29PM (#24531367)
It's unfortunate that Ubiquiti is forcing telemetry on users. Having everything integrate into UniFi Controller is pretty neat. Like enough so that if I didn't already have an APU2 running pfSense, I'd very likely buy a UDM Pro despite it being immense overkill.
Re:Netgear Firmware Requires Online Registration by pseudalopex on Saturday September 19, 2020 @08:28PM (#24531168)
It's optional with Ubiquiti.
Re:Netgear Firmware Requires Online Registration by kalleboo on Saturday September 19, 2020 @11:08PM (#24531656)
I believe it's no longer optional on the new UDM and UDM Pro devices
Re:Netgear Firmware Requires Online Registration by jlgaddis on Saturday September 19, 2020 @08:39PM (#24531212)
... but the telemetry isn't, IIRC.
Re:Netgear Firmware Requires Online Registration by devrand on Saturday September 19, 2020 @09:02PM (#24531291)
Is it not? I disabled diagnostic and analytics reporting, though it does occasionally ask me to turn it back on.

Is there additional telemetry that cannot be disabled?

Re:Netgear Firmware Requires Online Registration by dylz on Saturday September 19, 2020 @10:34PM (#24531571)
When they pushed the firmware, iirc the telemetry was done without notice, opted in and enabled by default, and there was no way to actually opt out until _another firmware update after the uproar_
Re:Netgear Firmware Requires Online Registration by 0xy on Sunday September 20, 2020 @02:33AM (#24532300)
Ubiquiti has never cared about security, if they did they wouldn't have been scammed for $40,000,000 via a literal scam email.

If Ubiquiti staff has the non-existent procedures and corporate security for this to happen, they surely don't care about your privacy or security.

Re:Netgear Firmware Requires Online Registration by craftoman on Sunday September 20, 2020 @03:31PM (#24536674)
They didn't scammed, they washed some of the investors money. These kind of attacks are ridiculously hard to believe.
Re:Netgear Firmware Requires Online Registration by mason55 on Sunday September 20, 2020 @08:47AM (#24533698)
So what is the alternative nowadays?
Re:Netgear Firmware Requires Online Registration by devrand on Monday September 21, 2020 @11:14AM (#24544387)
Got it! Thank you for that context. I'm pretty sporadic about updates so I more than likely missed the gap when it was enabled by default and not available to be disabled.

Not cool to do that :(.

Re:Netgear Firmware Requires Online Registration by dylz on Monday September 21, 2020 @03:43PM (#24547596)
I'd argue the continued "ask you to turn it on" just in the hopes that you might eventually do it to shut it up is also a terrible antipattern.