News for hackers. Stuff that matters.

A comment on Multiple Vulnerabilities in PfSense. Parent comment

Re:Multiple Vulnerabilities in PfSense by robbiet480 on Friday March 18, 2022 @03:01AM (#30719350)
I recently switched to Ubiquiti’s Unifi line and am extremely happy, mostly for moral reasons, compared to how I felt being a pfSense user these last few years.
[ Parent | on HN ]
Re:Multiple Vulnerabilities in PfSense by lostlogin on Friday March 18, 2022 @03:07AM (#30719377)
There is some bad bad shit in that kit.

The APs are good and the switches too in my experience. However the UDM-P is a troubled device. It’s buggy, things break or stop working and it loses its config every so often. The form factor is very compelling and the concept is great.

I’d pay more if the software quality were better.

[ Parent | on HN ]
Re:Multiple Vulnerabilities in PfSense by 8fingerlouie on Friday March 18, 2022 @03:12AM (#30719396)
> However the UDM-P is a troubled device. It’s buggy, things break or stop working and it loses its config every so often.

I've been running a UDM and UDMP for years, and have literally never run into any of those issues, despite having a somewhat complex network (for a home network anyway).

It runs 24/7 and only needs reboots when a software update requires it. Multiple VLANs, road warrior VPN. I run a site to site VPN between my UDMP at home and UDM at my summerhouse, and that has been rock solid as well.

In the latest EA version of the software, there is also some support for Wireguard (though UI's Teleport). I'm not sure if "raw" Wireguard is available (yet).

Latest version also implements policy based routing.

[ Parent | on HN ]
Re:Multiple Vulnerabilities in PfSense by lostlogin on Friday March 18, 2022 @04:32AM (#30719830)
I’m looking forward to using WireGuard on the device (I already use it, but from within the network).

I’m in the latest stable version, as I updated after an outage last week where the controller was crashed.

The variability in user satisfaction suggests some sort of hardware issue or bugginess that hits a small portion of users.

[ Parent | on HN ]
Re:Multiple Vulnerabilities in PfSense by vigilans on Friday March 18, 2022 @03:09AM (#30719388)
Ubiquiti is also morally questionable. They do not contribute their modifications to the Linux kernel as required by the GPL.

Maybe that has changed but I'm not aware that it has.

[ Parent | on HN ]
Re:Multiple Vulnerabilities in PfSense by frickinLasers on Friday March 18, 2022 @09:04AM (#30721663)
There's also that time they slipped telemetry reporting into their software and hoped no one would notice.

https://www.theregister.com/2019/11/07/ubiquiti_networks_pho...

[ Parent | on HN ]
Re:Multiple Vulnerabilities in PfSense by imglorp on Friday March 18, 2022 @08:29AM (#30721315)
That, plus they try very hard to drive you to their cloud. It's not necessary, at least with older hardware, but their cloud has been breached and people should probably ask if they really need its convenience vs cost, privacy and security.

I just ended up resetting my network (switch, sec gateway, controller, and AP) and it's a little tricky without their cloud. You need to do some SSH'ing.

Caveats aside, the hardware is outstanding, the disk AP is solid as is the consumer grade cube one. It's a good prosumer and small business option despite the downsides.

[ Parent | on HN ]