3 ms·

AFAICS, this attack is running on Microtik routers. Mikrotik is a Latvian company. They are successfully competing with Cisco and Juniper in feature-set and per

AFAICS, this attack is running on Microtik routers. Mikrotik is a Latvian company. They are successfully competing with Cisco and Juniper in feature-set and performance at a fraction of a price. The thing is, they provided a large, under-educated user base with powerful, complex and utterly sophisticated tools. That the attacker targeted those and not less numerous and better guarded mainstream manufacturers only pays tribute to the success of Mikrotik.

Y_Y 5y ago
You forgot to include your affiliate link.
- sam_lowry_ 5y ago
  I am unaffiliated irregular customer They have great hardware, but I prefer rinning OpenWRT on their hardware.
donmcronald 5y ago
> The thing is, they provided a large, under-educated user base with powerful, complex and utterly sophisticated tools. Do you think the expensive manufacturers don’t do that? I’ve seen un-configured, un-updated, EoL Cisco equipment. Small businesses get sold it because it’s “the best”, but they don’t actually need anything nearly that complicated and don’t want to pay the ongoing costs so you end up with things like managed switches being used like you’d use a dumb switch that’s 1/10th of the price.
- yelling_cat 5y ago
  >I’ve seen un-configured, un-updated, EoL Cisco equipment. I was in a server room a couple of years ago that looked like a Cisco museum, with some of the kit dating back to the early 2000s. When I mentioned that running a business on gear that had been EoL'd for a decade+ wasn't quite up to security best practices my contact shrugged and said they wouldn't be updating any of it in any case since they'd long since lost all of their access passwords.
j_walter 5y ago
I trashed my Microtik router as soon as I started seeing my bandwidth jump and a lot of traffic from Isreal a few years ago. There was no mitigation of whatever was going on and clearly there were issues...turns out Microtik's RouterOS had multiple vulnerabilities. Ubiquiti on the other hand has been more than adequate for my needs and is even easier to setup than Microtik. https://www.cvedetails.com/product/23641/Mikrotik-Routeros.html?vendor_id=12508 https://www.cvedetails.com/product/23641/Mikrotik-Routeros.h...
- sam_lowry_ 5y ago
  Ubiquity tarnished its image with the leak of client credentials from its Cloud offering.
  - j_walter 5y ago
    No doubt that was concerning. That hack (not really a leak) sounds like it was due to an AWS issue and probably someone with intricate knowledge of their systems. Eventually they responded, but not until a whistleblower called them out first (thanks to their legal team holding them back from disclosing the event).

Y_Y 5y ago

You forgot to include your affiliate link.

sam_lowry_ 5y ago
I am unaffiliated irregular customer They have great hardware, but I prefer rinning OpenWRT on their hardware.

donmcronald 5y ago

> The thing is, they provided a large, under-educated user base with powerful, complex and utterly sophisticated tools. Do you think the expensive manufacturers don’t do that? I’ve seen un-configured, un-updated, EoL Cisco equipment. Small businesses get sold it because it’s “the best”, but they don’t actually need anything nearly that complicated and don’t want to pay the ongoing costs so you end up with things like managed switches being used like you’d use a dumb switch that’s 1/10th of the price.

yelling_cat 5y ago
>I’ve seen un-configured, un-updated, EoL Cisco equipment. I was in a server room a couple of years ago that looked like a Cisco museum, with some of the kit dating back to the early 2000s. When I mentioned that running a business on gear that had been EoL'd for a decade+ wasn't quite up to security best practices my contact shrugged and said they wouldn't be updating any of it in any case since they'd long since lost all of their access passwords.

j_walter 5y ago

I trashed my Microtik router as soon as I started seeing my bandwidth jump and a lot of traffic from Isreal a few years ago. There was no mitigation of whatever was going on and clearly there were issues...turns out Microtik's RouterOS had multiple vulnerabilities. Ubiquiti on the other hand has been more than adequate for my needs and is even easier to setup than Microtik. https://www.cvedetails.com/product/23641/Mikrotik-Routeros.html?vendor_id=12508 https://www.cvedetails.com/product/23641/Mikrotik-Routeros.h...

sam_lowry_ 5y ago
Ubiquity tarnished its image with the leak of client credentials from its Cloud offering.
- j_walter 5y ago
  No doubt that was concerning. That hack (not really a leak) sounds like it was due to an AWS issue and probably someone with intricate knowledge of their systems. Eventually they responded, but not until a whistleblower called them out first (thanks to their legal team holding them back from disclosing the event).