Re:Ubiquiti all but confirms breach response iniquity
by apple4ever on Sunday April 04, 2021 @08:01PM
(#26693941)
Only because they made it cloud based.
If they never forced people to create a cloud account - and instead allowed people to choose - this would be wildly different.
Re:Ubiquiti all but confirms breach response iniquity
by mnemnc on Sunday April 04, 2021 @08:11PM
(#26694019)
Did I miss something here? I run a Unifi network with a local account and don‘t recall being forced to create a cloud account.
Re:Ubiquiti all but confirms breach response iniquity
by JamesSwift on Sunday April 04, 2021 @08:58PM
(#26694315)
The UDM, UDM Pro, and I think _all_ newer controller software require cloud login at some point in the process.
Re:Ubiquiti all but confirms breach response iniquity
by Godel_unicode on Sunday April 04, 2021 @10:03PM
(#26694611)
It's definitely not all the new controllers, although with the UDM line you might be right. I think there's a huge intersection between people who would buy those specific devices and people who are perfectly happy to have remote access to their control plane in the cloud.
Re:Ubiquiti all but confirms breach response iniquity
by spockz on Monday April 05, 2021 @03:07AM
(#26696125)
It is also about dark patterns. I never had the cloud option enabled. One night after a long day I upgraded the controller software. I noticed a message like “do you want to login?” and wasn’t awake enough to realise that it asked for my ui.com account and that after that cloud management was enabled and my phone switched to authenticate from a direct connection with the local credentials to using the ui.com credentials.
Re:Ubiquiti all but confirms breach response iniquity
by JamesSwift on Monday April 05, 2021 @09:04AM
(#26698388)
It looks like what I was referring to is that they recently made the initial controller setup on the cloudkey require a cloud account [1], but you can migrate to local only after the initial setup.
So the only remaining 'local only' from start to finish is for self-hosted I guess.
Re:Ubiquiti all but confirms breach response iniquity
by Godel_unicode on Monday April 05, 2021 @09:56AM
(#26699011)
I have a cloud key gen2 plus and do not have a UI.com account. I would classify getting the network controller setup without having one initially "mildly annoying but worth it".
I'm also floored at the number of people who are spinning the existence of a self-hosted controller as somehow a bad thing...?
Re:Ubiquiti all but confirms breach response iniquity
by posguy on Sunday April 04, 2021 @11:18PM
(#26694971)
The UDM and UDM-Pro force you to set up a UI.com account, and cannot be used with external Unifi controllers like one you might run on a server, PC or cloud key (Ubiquiti's management software on a Power over Ethernet powered dongle, does not require a UI.com account).
Re:Ubiquiti all but confirms breach response iniquity
by jaywalk on Monday April 05, 2021 @11:35AM
(#26700403)
The UDM and UDM Pro are the controller, and you can disable all of the cloud nonsense after initial setup.
Re:Ubiquiti all but confirms breach response iniquity
by mnemnc on Tuesday April 06, 2021 @02:38AM
(#26708710)
Wow, that sucks. So you HAVE to create a cloud account to be able to disable it later?
Re:Ubiquiti all but confirms breach response iniquity
by JamesSwift on Monday April 05, 2021 @12:13PM
(#26700836)
You can disable on the UDM but I don't believe the UDM pro allows you to. Thats just what I've heard though, so might not be accurate.
Re:Ubiquiti all but confirms breach response iniquity
by jaywalk on Monday April 05, 2021 @12:59PM
(#26701547)
The UDM Pro does allow it. I've got one, and all of the cloud stuff is disabled.
Re:Ubiquiti all but confirms breach response iniquity
by philjohn on Monday April 05, 2021 @03:06AM
(#26696119)
They do - first thing I did though was then go in and add a local account, and disable remote access (I have a wireguard tunnel that terminates on a server behind my firewall if I need remote access).
> The single pane of glass to view everything when I am many miles from the networks I support is essential
It's also why we're talking about this.