Ubiquiti all but confirms breach response iniquity

Re:Ubiquiti all but confirms breach response iniquity by GekkePrutser on Monday April 05, 2021 @06:38AM (#26697313)

Ubiquiti should really stop making cloud logins mandatory. The latest stuff (UDM/UDM Pro, Cloud Key G2) must be connected to their cloud at installation time. Remote access can be turned off but an admin account connected to their cloud remains.

Without those ties to their infrastructure, this breach would not be as severe. It would just cause an attacker to see what I've bought from them, nothing else.

I'm glad I can still use the unifi controller in docker without any ties to UI.com however their later stuff like Unifi protect, access, talk etc no longer works with that.

[ Parent | on HN ]

Re:Ubiquiti all but confirms breach response iniquity by ex_ubiquiti on Monday April 05, 2021 @09:18AM (#26698527)

I worked there and I didn't even understand why we had to force cloud logins on Dream Machine. In the early days we were all about letting people run their own controller hardware and not requiring cloud logins. No one could ever tell us why we had to force everyone to the cloud. It was a mandate from above

[ Parent | on HN ]

Re:Ubiquiti all but confirms breach response iniquity by GekkePrutser on Monday April 05, 2021 @04:33PM (#26704326)

Thanks for that insight!

I guess it's for the usual reasons. Telemetry / product improvement, and also more marketing data. Data is the new gold :)

[ Parent | on HN ]

Re:Ubiquiti all but confirms breach response iniquity by EricE on Tuesday April 06, 2021 @02:17PM (#26715378)

They utterly flushed away their biggest selling point - the only vendor in that space that didn't require a cloud login.

Beyond stupid.

[ Parent | on HN ]