News for hackers. Stuff that matters.

A comment on Whistleblower: Ubiquiti Breach “Catastrophic”. Parent comment

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by takeda on Tuesday March 30, 2021 @03:30PM (#26639231)
Isn't enough to just disable cloud access?

Edit: I got upvoted by somebody, but as an UI user I'm genuinely looking for an answer. If it's still possible to get inside if devices aren't connected to UIs cloud.

[ Parent | on HN ]
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by IgorPartola on Tuesday March 30, 2021 @05:12PM (#26640598)
That’s a part of it. But also:

1. They are now pushing ads to their local controllers. That is a shady tactic. It also means the controller is phoning home. It means they might have an XSS in that code now or in the future.

2. They just deprecated a bunch of relatively new hardware. If I’m going to invest a non-trivial amount into their hardware I want to know it’ll keep working for a long time.

3. They lost trust due to this breach. How can I trust their code to secure my locks network if they can’t secure their own?

[ Parent | on HN ]