Ui ubiquity hacked?

[Trustmeimadoctor]

Just had an email saying some of their systems have been compromised anyone else had an email?

[geeks]

Not yet but it is only a matter of time. There is a lot about it on Twitter.

https://twitter.com/troyhunt/status/13487275301869...

[Trustmeimadoctor]

Ffs just bought more unifi stuff tonight too lol

Just enabled 2fa too and changed passwords so fingers crossed

[babelfish]

Trustmeimadoctor said:

Just had an email saying some of their systems have been compromised anyone else had an email?

Yep, "We are not currently aware of evidence of access to any databases that host user data, but we cannot be certain that user data has not been exposed. This data may include your name, email address, and the one-way encrypted password to your account (in technical terms, the passwords are hashed and salted). The data may also include your address and phone number if you have provided that to us. "

[colin79666]

They really need to provide details. The email was awful (not even mail merging in the customer name) and just generates more questions. It could be a nothing event or a complete disaster. They say passwords where hashed but with what? Who is the cloud provider and what service? When was it detected? How long had it gone undetected? What have they done to stop it? What are they doing to prevent a repeat? Why can’t their new products work locally without cloud integration?

In so many of these breaches it is how the company handles it rather than the breach itself that matters most in the long run.

I invested in Unify kit just 2 months ago and so far it has proved stable and definitely a good step up from the consumer grade stuff I had before but their support and software development are a total shambles, I can’t see them really breaking into the enterprise market unless they get a grip.

[rxe]

Got my mail.

Old password was 32 characters of gibberish, so they’ll have fun breaking that. New password is 64 characters of gibberish.

st happens. Not overly worried.

[megaphone]

I got the email and have changed my passwords. The Unifi portal was down over the weekend, was back when I tried on Monday afternoon UK time.

I use different accounts for my online account and my 'mission critical' stuff, goes against the idea of having everything accessible under one umbrella, but....

[LooneyTunes]

colin79666 said:

They say passwords where hashed but with what?

Their reference to salt was very reassuring, provided they have done it correctly.

Have a read of this: https://crackstation.net/hashing-security.htm for an overview of password hashing.