News for hackers. Stuff that matters.

A comment on Ubiquiti Networks Breach. Parent comment

Re:Ubiquiti Networks Breach by grahamburger on Monday January 11, 2021 @10:27PM (#25741882)
I would go with MikroTik. Or just one if the cheaper Ubiquiti devices, like the EdgeRouter series.
[ Parent | on HN ]
Re:Ubiquiti Networks Breach by novok on Monday January 11, 2021 @11:06PM (#25742133)
MikroTik feels like rolling your own linux router box, a bit overkill and high maintenance.
[ Parent | on HN ]
Re:Ubiquiti Networks Breach by grahamburger on Monday January 11, 2021 @11:17PM (#25742211)
It's definitely overkill, but what is a homelab if not overkill? It's not really high maintenance, though. Once it's in and running you'll never have to touch it.
[ Parent | on HN ]
Re:Ubiquiti Networks Breach by NegativeLatency on Monday January 11, 2021 @11:53PM (#25742451)
Until you do and then you’ve forgotten how and what to do.
[ Parent | on HN ]
Re:Ubiquiti Networks Breach by chessmango on Tuesday January 12, 2021 @02:08AM (#25743391)
Not to mention software updates to ensure your credentials aren't leaked in plaintext...
[ Parent | on HN ]
Re:Ubiquiti Networks Breach by ComodoHacker on Tuesday January 12, 2021 @03:33AM (#25743919)
Isn't this true for any advanced technology?
[ Parent | on HN ]
Re:Ubiquiti Networks Breach by novok on Tuesday January 12, 2021 @03:21PM (#25752949)
With Ubiquity, it wasn't, and you get a nice mobile app to see the status of everything.
[ Parent | on HN ]
Re:Ubiquiti Networks Breach by carlhjerpe on Tuesday January 12, 2021 @02:48AM (#25743617)
The MSP I work at maintain some 500 MikroTik devices, I wouldn't call it particularly high maintenance. Once they're set up they'll just keep working. I've been auto upgrading my stuff at home with beta software for the last 4 years without encountering any issues. (ROS6, 7 is another story).
[ Parent | on HN ]
Re:Ubiquiti Networks Breach by jimnotgym on Tuesday January 12, 2021 @02:07AM (#25743386)
I have come across several situations where professional network engineers have accidentally left a Mikrotik in a dangerously insecure state by misunderstanding the UI. I like Watchguard or Draytek in the small business space. They are a bit more expensive than Mikrotik though
[ Parent | on HN ]
Re:Ubiquiti Networks Breach by gertrunde on Tuesday January 12, 2021 @05:21AM (#25744791)
Oh my... so the Draytek UI is better than Mikrotik?

I had been considering trying out some of their gear, but perhaps I might not bother now!

[ Parent | on HN ]
Re:Ubiquiti Networks Breach by grahamburger on Tuesday January 12, 2021 @02:42PM (#25752335)
The MikroTik UI is... an acquired taste. Honestly I don't think it's bad, I would argue that it's among the best GUIs out there for routers. I would be surprised if it's more common for MikroTik routers to be left in an insecure state that any other router, unless it's only because people who work on routers tend to have been trained on Cisco or Juniper and that training just doesn't translate very well to MikroTik. But I'm also not going to die on a hill of defending MikroTik's configuration design choices, there's a lot to be desired.
[ Parent | on HN ]
Re:Ubiquiti Networks Breach by BrandoElFollito on Tuesday January 12, 2021 @11:11AM (#25748780)
It probably depends on the environment one is in.

I replaced my ISP-provided all-in-one box (Orange in France) with an EdgeRouter 4 and it is many, many times more stable. The crap you get from the ISP does not compare.

The management is horrible and how they designed it is horrible as well (from the OS perspective) but once it works, it works.

[ Parent | on HN ]
Re:Ubiquiti Networks Breach by dehrmann on Tuesday January 12, 2021 @02:08AM (#25743393)
I've had good luck with MikroTik hardware, but I really didn't like their OS and just went with OpenWRT.
[ Parent | on HN ]