Really a poor decision to come after Brian Krebs. The crossover between Ubiquiti customers and people that support Krebs, I would venture to guess, is quite high. What a way to incinerate a pile of goodwill.
On the homelab subreddit, they're no longer the go-to recommendation they were a few years ago.
For instance, I keep hoping for an updated USG3 given the current one hasn’t changed since 2014 and can’t do IPS without throttling speeds to 80Mbps which is simply unacceptable these days, but all they seem to be doing is focusing on big and expensive 1U hardware which I just don’t have room for.
Everyone I know in tech would probably agree with you, and consider suing reporters to be a bad approach. But everyone I speak to in business management seems to take the view that this strengthens their view of Ubiquiti.
Ubiquiti basically needs to weigh whether it makes sense to get burned by Streisand effect now or cut their losses and hope journalists don't burn them again in the future when they don't do due diligence on a lead. After reading through the complaint, it looks like their demands are reasonable.
What I'm more interested to know is whether never issuing a correction/retraction is going to work for or against Krebs.
"Within five years of the appointment of a business manager, wages decline by 6% and the labor share by 5 percentage points in the US, and by 3% and 3 percentage points in Denmark. Firms appointing business managers are not on differential trends and do not enjoy higher output, investment, or employment growth thereafter."
Not a cool move from them.
That said, I am really excited about their forthcoming pre-paired PTP Gigabit link kit. I have been using ancient Ubiquiti paired links and need a replacement.
2. To be fair, this is the big one. Who does replacing all the hardware ALREADY BOUGHT hurt other than the customer who bought the hardware? You're generally not getting a refund because you no longer like the company. The company has your money. It's not like their products are things you buy on a monthly basis. You aren't hurting the company.
They're not suing to censor a researcher or to create a chilling effect on reporting about security or their company. They have to sue to show the court, their customers, and their investors exactly how Sharp manipulated public opinion to damage the company so he could "save it", how Sharp used Krebs' authority as a security reporter to damage the reputation and trust in their brand to apply that pressure and force leadership to act in the way he wanted, and to be able to claim appropriate damages by rightfully discrediting a false and inaccurate report.
Krebs either has to weaken his own brand and admit he was played or stick to his guns that he faithfully reported. Either way, this lawsuit ensures he's got to correct the report.
Late last year I kitted out my home with a switch and two wireless access points.
The switch (S3410-10TF-P) does everything that you expect a switch to do. It has a pretty simple web interface, and a pretty comprehensive CLI.
The access points are AP-W6T6817C (6800mbps WiFi 6, 802.11ax). It is rebranded from Ruijie Networks. The access points have a simple web UI for configuring everything, the range is pretty awesome. Multiple radios can be configured with separate SSIDs that have access to different VLANs.
The usability is less than Ubiquiti, but it seems that they work a little better than my old UniFi setup that this replaced (though, that was purchased more than 8 years ago).
There's WPA3 support.
Getting data via SNMP into Prometheus means that you can see per-client usage history, too.
Edit:
Access Point AP-W6T6817C: https://www.fs.com/products/108707.html
Switch S3410-10TF-P: https://www.fs.com/products/115387.html
for home use at this point I would also recommend mikrotik routers over anything ubiquiti edgeOS based, since they seem to have abandoned development on their fork of vyatta... the $50 edgerouter-x (ER-X) as a standalone wired gigabit router was a good choice in 2017 but not so much anymore.
I moved my four HAP AC devices onto OpenWRT; speed and stability has been much improved, and roaming works much better. If you don't need WiFi 6 then I'd go as far as to say this is a great solution.
That has been my (one?) major complaint with my Ubiquiti APs - I have four of them scattered around my house/garage and moving between them always suffers a bit of a delay in handing over (or refusing to hand over at all).
I recently migrated a router (not Ubiquiti) over to OpenWRT and have been happy with the stability. I read a bit about roaming, but thought it looked a little daunting.
Here's an example: https://parkercs.tech/enabling-802-11r-fast-roaming-transiti...
I did lose the central management interface of Mikrotik (CAPsMAN) but for my home set-up this wasn't a big deal. I used the backup and restore capability in OpenWRT's LUCI interface to clone most of the settings.
Roaming / fast transition now works much better. I do still lose a few packets as I wonder around but nowhere near as flakey as on the Mikrotik stack.
I did spend an inordinate amount of time optimising channels, signal strength and placement etc. on the Mikrotik stack before migrating over, and so I kept these settings on OpenWRT. I think a lot of making wifi work well is in this particular black art. All things being equal, though, OpenWRT works better for me.
are these any good? has anyone had any luck with going full oss for this stuff?
You can also search AliExpress for “fanless pfsense” and find lots of options for less $$$.
For APs, you could also check out the Cisco Small Business line. Their 240 is the same hardware as some of their enterprise access points, and pretty trivial to set up.
If you are in the US, I'm pretty sure I saw very similar devices sold there as well, but didn't keep the link as buying from there would be too expensive.
The TL-WDR4300 and TL-WR743ND have a special unauthenticated URL that causes the device to connect back to your IP, download a file, and execute it as root.
The TL-WA701ND and similar models create a hidden SSID that acts as an unauthenticated bridge into your network.
If you can even manage to report security issues to them, they will only patch models you specifically tell them are vulnerable. So as a researcher you have to buy one of every model to actually get things fixed.
They suffer from extremely poor code quality, a complete lack of understanding of security, and severe code reuse without recording what devices the code ends up in. You can take existing TP-Link exploits, poke around in a new model of device, and often find the same vulnerable endpoint under a new "hidden" URL.
Edit: to address your specific question, CVE-2021-35004 is RCE against both routers and standalone APs.
Sadly the consumer department doesn't seem to follow the same model as their business department.