News for hackers. Stuff that matters.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by Abishek_Muthian on Tuesday March 30, 2021 @03:07PM (#26638947)
> Does anyone have a decent WAP where I can use PoE

There are PoE devices with OpenWRT support[1] and should be possible to enable 802.11r if they have the support. They can be managed locally even with self-signed certificate.

[1] https://openwrt.org/toh/views/toh_poe-powered

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by IgorPartola on Tuesday March 30, 2021 @03:16PM (#26639044)
I use OpenWRT now and would really rather avoid it. I want a central controller, not having every AP have its own UI. Plus firmware updates area always an adventure.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by josteink on Tuesday March 30, 2021 @03:31PM (#26639243)
> Plus firmware updates area always an adventure.

To somewhat eliminate the chances of adventure, I’ve profiled the setup for each of my many OpenWRT devices and created unique profiles for them in a (reasonably) simple Git repo[1].

All I need to do to get device-specific firmware is to update the OpenWRT version-number in a single makefile and the rest happens automatically.

I’ve even setup Github Actions to build the firmware for me (basically, run make), so I can even get/build new firmware from my phone.

I’ve yet to have any issues when flashing these builds. It used to be much worse when flashing the regular “official” OpenWRT image and restoring packages afterwards.

Couldn’t be simpler! (With the regular Linuxy you-have-to-build-it-yourself-first clause)

[1] https://github.com/josteink/openwrt-build

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by newman314 on Tuesday March 30, 2021 @11:58PM (#26643361)
This is cool! Forking.

I need to get back to trying to build a custom build for my KanKun smart plugs.

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by IgorPartola on Tuesday March 30, 2021 @05:03PM (#26640466)
About 5 years ago I would do the same thing. I want to set it up such that if I with the lotto and move away, the rest of my household can continue using the system without having to learn a CLI.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by the8472 on Tuesday March 30, 2021 @03:20PM (#26639106)
OpenWRT also provides SSH access and CLI tools, so if needed things can be automated the old-fashioned way.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by oblio on Tuesday March 30, 2021 @03:40PM (#26639368)
I don't know about you, but I "automate the old-fashioned way" at my day job, I want the damned thing to just work without me bothering with "SSH access and CLI tools" at home.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by fock on Tuesday March 30, 2021 @04:24PM (#26639953)
and how many APs do you have at home?
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by oblio on Tuesday March 30, 2021 @08:00PM (#26642027)
Right now? 1. But that's about to change, that's why I'm reading these comments. I was planning on buying a bunch of Ubiquiti APs.
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by nwmcsween on Tuesday March 30, 2021 @03:41PM (#26639387)
I'll let you in on a little secret, Ubiquity runs openwrt as can be seen by sshing into any uaps
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by IgorPartola on Tuesday March 30, 2021 @05:02PM (#26640458)
That’s fine. I think it’s a great project. But I want someone else to worry about what happens during each firmware update. It’s not trivial.