Ubiquity breached, downplayed the issue
-
https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/
From article it seems this was pretty serious.
-
@marcinozga said in Ubiquity breached, downplayed the issue:
From article it seems this was pretty serious.
It is Krebs. I absolutely do not trust it to be not fearmongering. He is a journalist.
-
@jaredbusch He is a well respected in the security space - who would you trust?
-
@marcinozga said in Ubiquity breached, downplayed the issue:
https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/
From article it seems this was pretty serious.
Sounds credible and that they are trying to downplay it makes total sense.
-
@pete-s said in Ubiquity breached, downplayed the issue:
that they are trying to downplay it makes total sense.
No company doesn't. That part is irrelevant.
-
@voip_n00b said in Ubiquity breached, downplayed the issue:
@jaredbusch He is a well respected in the security space - who would you trust?
Actual security people, not people who get paid to make headlines. And define "security space", you mean all those paper auditors coming out of every boot camp and junior college? Real security people are few and far between.
-
If you read the claims by "Adam" and then read the statement made by Ubiquiti, you can see from that alone that he was lying. The entire premise of his claim is that UBNT downplayed something and tried to blame Amazon. But there is nothing of the sort in the statement that UBNT made. Nothing. This "Adam" character fabricated it completely just to get attention. And Krebs didn't do any verification, even bothering to read his own story. He just published something he already knew to be false to get a headline.
-
ZDNet ran the Krebs story. Read it and see how they applied quotes to words, instead of statements. You can't read it without sending the air quotes denoting sarcasm throughout.
-
@scottalanmiller said in Ubiquity breached, downplayed the issue:
If you read the claims by "Adam" and then read the statement made by Ubiquiti, you can see from that alone that he was lying. The entire premise of his claim is that UBNT downplayed something and tried to blame Amazon. But there is nothing of the sort in the statement that UBNT made. Nothing. This "Adam" character fabricated it completely just to get attention. And Krebs didn't do any verification, even bothering to read his own story. He just published something he already knew to be false to get a headline.
How do you know it's Adam who's lying? What makes you so sure UBNT are telling the whole truth? In the end, the company has more to lose here, not the whistleblower.
“It was catastrophically worse than reported, and legal silenced and overruled efforts to decisively protect customers,”
Ubiquiti has not responded to repeated requests for comment.
“Legal overrode the repeated requests to force rotation of all customer credentials, and to revert any device access permission changes within the relevant period.”
Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?
-
@marcinozga said in Ubiquity breached, downplayed the issue:
How do you know it's Adam who's lying?
Either it is Adam or the person falsifying the quotes. But they quotes conflicting statements.
-
@marcinozga said in Ubiquity breached, downplayed the issue:
Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?
Can't go by the quote of someone we already caught lying a few sentences before. Bottom line is either Adam and/or Krebs (my money is on Adam) is just looking for some attention here. And it worked. Make a claim, don't substantiate it, don't even make it plausible, and no one checks. You can read the quote right on Krebs from Ubiquiti that clearly doesn't say what Adam claimed it said. So.... what's the bases for the whole complaint?
-
@scottalanmiller said in Ubiquity breached, downplayed the issue:
@marcinozga said in Ubiquity breached, downplayed the issue:
Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?
Can't go by the quote of someone we already caught lying a few sentences before. Bottom line is either Adam and/or Krebs (my money is on Adam) is just looking for some attention here. And it worked. Make a claim, don't substantiate it, don't even make it plausible, and no one checks. You can read the quote right on Krebs from Ubiquiti that clearly doesn't say what Adam claimed it said. So.... what's the bases for the whole complaint?
So whatever company says is absolute truth, right? Give me a break. Whistleblower has a name for a reason. And Krebs wouldn't publish the story unless he vetted the source thoroughly. But why do I even bother replying, since you already know UBNT tells the truth and any conflicting statement is automatically a lie.
-
-
And don't forget, this is a company that wired millions to scammers, and only learned about it from FBI. And they failed to disclose all the details then too. So there's a pattern of covering their screwups.
One fact that Pera and Ubiquiti did not disclose at the time was that Pera only learned about the transfers of vast sums of money, 10% of Ubiquiti’s cash position, after being notified by the Federal Bureau of Investigation.
-
@marcinozga said in Ubiquity breached, downplayed the issue:
@scottalanmiller said in Ubiquity breached, downplayed the issue:
If you read the claims by "Adam" and then read the statement made by Ubiquiti, you can see from that alone that he was lying. The entire premise of his claim is that UBNT downplayed something and tried to blame Amazon. But there is nothing of the sort in the statement that UBNT made. Nothing. This "Adam" character fabricated it completely just to get attention. And Krebs didn't do any verification, even bothering to read his own story. He just published something he already knew to be false to get a headline.
How do you know it's Adam who's lying? What makes you so sure UBNT are telling the whole truth? In the end, the company has more to lose here, not the whistleblower.
Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?
I don't have much to say about the validity of "Adam" / Krebs but the stock is down roughly 25% in the last 3 days alone. The largest down day being today.
Don't know if it is related to this but that much of a loss in 3 days are the big boys dumping (plus the algos too)
-
Have mercy!
-
More fun and excitement on this: https://krebsonsecurity.com/2021/04/ubiquiti-all-but-confirms-breach-response-iniquity/
Hilariously the article spends half the time recapping, and drops a link to the wrong thread (inactive for 1 year)
While I like Brian’s articles this one confuses me greatly. It’s a lot different and feels rushed.
-
@nadnerb yeah google has started putting a krebs into my feed because I've clicked once on the op link.
While I agree that an issue like this should be investigated, I'm sure more than just Krebs would be reporting about it.
-
@dustinb3403 said in Ubiquity breached, downplayed the issue:
@nadnerb yeah google has started putting a krebs into my feed because I've clicked once on the op link.
While I agree that an issue like this should be investigated, I'm sure more than just Krebs would be reporting about it.
This is the hard thing to know - Edward Snowden could have just been swept under the rug... on one hand, you kinda wonder why it wasn't? Perhaps the scope is the difference?
No other media outlet had access - all they could do was report on what the Guardian was reporting. -
@pmoncho said in Ubiquity breached, downplayed the issue:
@marcinozga said in Ubiquity breached, downplayed the issue:
@scottalanmiller said in Ubiquity breached, downplayed the issue:
If you read the claims by "Adam" and then read the statement made by Ubiquiti, you can see from that alone that he was lying. The entire premise of his claim is that UBNT downplayed something and tried to blame Amazon. But there is nothing of the sort in the statement that UBNT made. Nothing. This "Adam" character fabricated it completely just to get attention. And Krebs didn't do any verification, even bothering to read his own story. He just published something he already knew to be false to get a headline.
How do you know it's Adam who's lying? What makes you so sure UBNT are telling the whole truth? In the end, the company has more to lose here, not the whistleblower.
Does that sound like a trustworthy company? Or one trying to cover their asses to protect stock prices?
I don't have much to say about the validity of "Adam" / Krebs but the stock is down roughly 25% in the last 3 days alone. The largest down day being today.
Don't know if it is related to this but that much of a loss in 3 days are the big boys dumping (plus the algos too)
Sure, but the market is a reflection of the news and nothing more. So that doesn't tell us anything about what happened.
