ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Ubiquity breached, downplayed the issue

    News
    11
    34
    1.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      marcinozga
      last edited by

      https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/

      From article it seems this was pretty serious.

      JaredBuschJ 1 2 Replies Last reply Reply Quote 0
      • JaredBuschJ
        JaredBusch @marcinozga
        last edited by

        @marcinozga said in Ubiquity breached, downplayed the issue:

        From article it seems this was pretty serious.

        It is Krebs. I absolutely do not trust it to be not fearmongering. He is a journalist.

        V 1 Reply Last reply Reply Quote 1
        • V
          VoIP_n00b @JaredBusch
          last edited by VoIP_n00b

          @jaredbusch He is a well respected in the security space - who would you trust?

          scottalanmillerS 1 Reply Last reply Reply Quote -1
          • 1
            1337 @marcinozga
            last edited by

            @marcinozga said in Ubiquity breached, downplayed the issue:

            https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/

            From article it seems this was pretty serious.

            Sounds credible and that they are trying to downplay it makes total sense.

            JaredBuschJ 1 Reply Last reply Reply Quote 0
            • JaredBuschJ
              JaredBusch @1337
              last edited by

              @pete-s said in Ubiquity breached, downplayed the issue:

              that they are trying to downplay it makes total sense.

              No company doesn't. That part is irrelevant.

              1 Reply Last reply Reply Quote 0
              • scottalanmillerS
                scottalanmiller @VoIP_n00b
                last edited by

                @voip_n00b said in Ubiquity breached, downplayed the issue:

                @jaredbusch He is a well respected in the security space - who would you trust?

                Actual security people, not people who get paid to make headlines. And define "security space", you mean all those paper auditors coming out of every boot camp and junior college? Real security people are few and far between.

                1 Reply Last reply Reply Quote 1
                • scottalanmillerS
                  scottalanmiller
                  last edited by

                  If you read the claims by "Adam" and then read the statement made by Ubiquiti, you can see from that alone that he was lying. The entire premise of his claim is that UBNT downplayed something and tried to blame Amazon. But there is nothing of the sort in the statement that UBNT made. Nothing. This "Adam" character fabricated it completely just to get attention. And Krebs didn't do any verification, even bothering to read his own story. He just published something he already knew to be false to get a headline.

                  M 1 Reply Last reply Reply Quote 0
                  • scottalanmillerS
                    scottalanmiller
                    last edited by

                    ZDNet ran the Krebs story. Read it and see how they applied quotes to words, instead of statements. You can't read it without sending the air quotes denoting sarcasm throughout.

                    https://www.zdnet.com/google-amp/article/whistleblower-claims-ubiquiti-networks-data-breach-was-catastrophic/

                    1 Reply Last reply Reply Quote 0
                    • M
                      marcinozga @scottalanmiller
                      last edited by

                      @scottalanmiller said in Ubiquity breached, downplayed the issue:

                      If you read the claims by "Adam" and then read the statement made by Ubiquiti, you can see from that alone that he was lying. The entire premise of his claim is that UBNT downplayed something and tried to blame Amazon. But there is nothing of the sort in the statement that UBNT made. Nothing. This "Adam" character fabricated it completely just to get attention. And Krebs didn't do any verification, even bothering to read his own story. He just published something he already knew to be false to get a headline.

                      How do you know it's Adam who's lying? What makes you so sure UBNT are telling the whole truth? In the end, the company has more to lose here, not the whistleblower.

                      “It was catastrophically worse than reported, and legal silenced and overruled efforts to decisively protect customers,”

                      Ubiquiti has not responded to repeated requests for comment.

                      “Legal overrode the repeated requests to force rotation of all customer credentials, and to revert any device access permission changes within the relevant period.”

                      Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?

                      scottalanmillerS pmonchoP 2 Replies Last reply Reply Quote 0
                      • scottalanmillerS
                        scottalanmiller
                        last edited by

                        @marcinozga said in Ubiquity breached, downplayed the issue:

                        How do you know it's Adam who's lying?

                        Either it is Adam or the person falsifying the quotes. But they quotes conflicting statements.

                        1 Reply Last reply Reply Quote 0
                        • scottalanmillerS
                          scottalanmiller @marcinozga
                          last edited by

                          @marcinozga said in Ubiquity breached, downplayed the issue:

                          Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?

                          Can't go by the quote of someone we already caught lying a few sentences before. Bottom line is either Adam and/or Krebs (my money is on Adam) is just looking for some attention here. And it worked. Make a claim, don't substantiate it, don't even make it plausible, and no one checks. You can read the quote right on Krebs from Ubiquiti that clearly doesn't say what Adam claimed it said. So.... what's the bases for the whole complaint?

                          M 1 Reply Last reply Reply Quote 0
                          • M
                            marcinozga @scottalanmiller
                            last edited by

                            @scottalanmiller said in Ubiquity breached, downplayed the issue:

                            @marcinozga said in Ubiquity breached, downplayed the issue:

                            Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?

                            Can't go by the quote of someone we already caught lying a few sentences before. Bottom line is either Adam and/or Krebs (my money is on Adam) is just looking for some attention here. And it worked. Make a claim, don't substantiate it, don't even make it plausible, and no one checks. You can read the quote right on Krebs from Ubiquiti that clearly doesn't say what Adam claimed it said. So.... what's the bases for the whole complaint?

                            So whatever company says is absolute truth, right? Give me a break. Whistleblower has a name for a reason. And Krebs wouldn't publish the story unless he vetted the source thoroughly. But why do I even bother replying, since you already know UBNT tells the truth and any conflicting statement is automatically a lie.

                            1 Reply Last reply Reply Quote 0
                            • DustinB3403D
                              DustinB3403
                              last edited by

                              🍿🍿🍿🍿

                              1 Reply Last reply Reply Quote 2
                              • M
                                marcinozga
                                last edited by marcinozga

                                And don't forget, this is a company that wired millions to scammers, and only learned about it from FBI. And they failed to disclose all the details then too. So there's a pattern of covering their screwups.

                                https://www.forbes.com/sites/nathanvardi/2016/02/08/how-a-tech-billionaires-company-misplaced-46-7-million-and-didnt-know-it/?sh=41b9aa3550b3

                                One fact that Pera and Ubiquiti did not disclose at the time was that Pera only learned about the transfers of vast sums of money, 10% of Ubiquiti’s cash position, after being notified by the Federal Bureau of Investigation.

                                1 Reply Last reply Reply Quote 0
                                • pmonchoP
                                  pmoncho @marcinozga
                                  last edited by

                                  @marcinozga said in Ubiquity breached, downplayed the issue:

                                  @scottalanmiller said in Ubiquity breached, downplayed the issue:

                                  If you read the claims by "Adam" and then read the statement made by Ubiquiti, you can see from that alone that he was lying. The entire premise of his claim is that UBNT downplayed something and tried to blame Amazon. But there is nothing of the sort in the statement that UBNT made. Nothing. This "Adam" character fabricated it completely just to get attention. And Krebs didn't do any verification, even bothering to read his own story. He just published something he already knew to be false to get a headline.

                                  How do you know it's Adam who's lying? What makes you so sure UBNT are telling the whole truth? In the end, the company has more to lose here, not the whistleblower.

                                  Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?

                                  I don't have much to say about the validity of "Adam" / Krebs but the stock is down roughly 25% in the last 3 days alone. The largest down day being today.

                                  Don't know if it is related to this but that much of a loss in 3 days are the big boys dumping (plus the algos too)

                                  scottalanmillerS 1 Reply Last reply Reply Quote 0
                                  • gotwfG
                                    gotwf
                                    last edited by

                                    Have mercy! 🐕

                                    1 Reply Last reply Reply Quote 0
                                    • nadnerBN
                                      nadnerB
                                      last edited by nadnerB

                                      More fun and excitement on this: https://krebsonsecurity.com/2021/04/ubiquiti-all-but-confirms-breach-response-iniquity/

                                      Hilariously the article spends half the time recapping, and drops a link to the wrong thread (inactive for 1 year)

                                      While I like Brian’s articles this one confuses me greatly. It’s a lot different and feels rushed.

                                      DustinB3403D 1 Reply Last reply Reply Quote 0
                                      • DustinB3403D
                                        DustinB3403 @nadnerB
                                        last edited by

                                        @nadnerb yeah google has started putting a krebs into my feed because I've clicked once on the op link.

                                        While I agree that an issue like this should be investigated, I'm sure more than just Krebs would be reporting about it.

                                        DashrenderD scottalanmillerS 2 Replies Last reply Reply Quote 0
                                        • DashrenderD
                                          Dashrender @DustinB3403
                                          last edited by

                                          @dustinb3403 said in Ubiquity breached, downplayed the issue:

                                          @nadnerb yeah google has started putting a krebs into my feed because I've clicked once on the op link.

                                          While I agree that an issue like this should be investigated, I'm sure more than just Krebs would be reporting about it.

                                          This is the hard thing to know - Edward Snowden could have just been swept under the rug... on one hand, you kinda wonder why it wasn't? Perhaps the scope is the difference?
                                          No other media outlet had access - all they could do was report on what the Guardian was reporting.

                                          1 Reply Last reply Reply Quote 0
                                          • scottalanmillerS
                                            scottalanmiller @pmoncho
                                            last edited by

                                            @pmoncho said in Ubiquity breached, downplayed the issue:

                                            @marcinozga said in Ubiquity breached, downplayed the issue:

                                            @scottalanmiller said in Ubiquity breached, downplayed the issue:

                                            If you read the claims by "Adam" and then read the statement made by Ubiquiti, you can see from that alone that he was lying. The entire premise of his claim is that UBNT downplayed something and tried to blame Amazon. But there is nothing of the sort in the statement that UBNT made. Nothing. This "Adam" character fabricated it completely just to get attention. And Krebs didn't do any verification, even bothering to read his own story. He just published something he already knew to be false to get a headline.

                                            How do you know it's Adam who's lying? What makes you so sure UBNT are telling the whole truth? In the end, the company has more to lose here, not the whistleblower.

                                            Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?

                                            I don't have much to say about the validity of "Adam" / Krebs but the stock is down roughly 25% in the last 3 days alone. The largest down day being today.

                                            Don't know if it is related to this but that much of a loss in 3 days are the big boys dumping (plus the algos too)

                                            Sure, but the market is a reflection of the news and nothing more. So that doesn't tell us anything about what happened.

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 1 / 2
                                            • First post
                                              Last post