Comment by alt227
2 days ago
Still dont understand why this is such a big issue, and I have been reading threads about it for a year now.
Just turn on cloud access, accept the t&cs and then turn it off again. If you are really scared then you can isolate that device in a vlan or DMZ temporarily.
I run many commercial and residential networks, and this is definitely a non issue for me.
I stopped buying Ubiquiti when I reset my UDM Pro and took it to another house without internet access, and it refused to "activate" without an Internet Connection or a phone app connection. Seems they are more interested in selling a lifestyle rather than actual production network equipment.
I stopped buying them when I saw users posting on reddit that they were logging in to their systems and seeing other peoples camera feeds and networks.
https://www.bleepingcomputer.com/news/security/ubiquiti-user...
Im not excusing Ubiquiti here, I agree thats pretty annoying.
However a UDM pro is a router (as well as other things). The expectation is that it is connected to WAN.
Unifi switches and access points etc do not have the same online requirement.
You can't actually configure the wan connection fully without internet connectivity (at least last i checked).
This meant for instance if your WAN required VLAN like New Zealand you couldn't actually set it up without another router. Their fix is to add 1 more option to the WAN configuration options rather than the full suite of WAN configuration options you get once it's talked home.
The partial fix does make it clear that the philosophy of "you must talk to the mothership" is a guiding one that ubiquiti sticks to.
What are you using instead?
OPNsense.
If I ditched my modest ubiquiti gear I’d probably try out https://www.alta.inc/ Because https://chrisbuechler.com/
2 replies →
I’m also curious what other prosumer network hardware companies have good products?
2 replies →
Having seen a few slippery slope situations like this over the years with IoT and other services, I'm simply not willing to make any concessions in that direction. I use a UDM Pro and turning on cloud access requires associating that hardware with a Unify cloud account. That's already undesirable if you want to safeguard privacy.
Fair enough, the Unifi brand is a consumer/prosumer brand after all.
I guess if you have strict privacy requirements then you would be looking more at enterprise gear anyway.
Why does strict privacy requirements imply enterprise gear?
13 replies →
Will it still get automatic updates in case of security issues?