News for hackers. Stuff that matters.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by IgorPartola on Tuesday March 30, 2021 @03:05PM (#26638904)
No, a local controller that you run on a machine inside your LAN.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by coder543 on Tuesday March 30, 2021 @03:30PM (#26639236)
That's basically what MikroTik CAPsMAN is, depending on your needs.

I think it's specific to Access Points, so not a general purpose centralized controller for MikroTik equipment, but... centralizing access point management seems to be the main thing under discussion here.

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by taldo on Tuesday March 30, 2021 @03:42PM (#26639403)
CAPsMAN is a royal PITA to set up. You have to manually add all the wifi channels, map each AP to the channels it'll use, and a lot of busywork. Once it's set up, though, it works fine, and lets you upgrade all devices from the manager, etc.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by pilsetnieks on Tuesday March 30, 2021 @04:58PM (#26640389)
> You have to manually add all the wifi channels, map each AP to the channels it'll use, and a lot of busywork.

No, you don't? I mean you can but you don't need to.

There are cases when that is useful, true - for example, the automatic channel selection makes some curious choices sometimes.

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by bshep on Tuesday March 30, 2021 @03:33PM (#26639265)
Their http interface is reasonable and you can configure/provision the APs from CAPSman from one of the routers/switches in a central location.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by bombcar on Tuesday March 30, 2021 @04:51PM (#26640300)
You can also script against the Mikrotik CLI - I use it to update the certificates every ~90 days.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by weaksauce on Tuesday March 30, 2021 @04:24PM (#26639954)
nothing stopping you from using a local ubiquiti controller though. you aren't tied to their servers if you don't want to use them. that said, they seem pretty problematic from a security standpoint based on these leaks and your networking infra should be rock solid.