3 ms·
You assume anyone except the hacker knew anything about AWS. Our firm subcontracts to other firms. I am among other thing resident Sysadmin which means I get t
by unionpivo 5y ago
You assume anyone except the hacker knew anything about AWS.
Our firm subcontracts to other firms. I am among other thing resident Sysadmin which means I get to do everything related to AWS.
Out of 6 contracts we had, where firm had their project on aws I got root credentials in 4 cases. out of 4 i only managed to convince 2 to take their account security more seriously and lock things down.
What I am trying to say is that what happened at Ubiquiti is far more comon than people realize.
Because when all is said and done you still need someone who thinks like sysadmin.
- LilBytes 5y agoFrankly after reading the other comments in this chain, as well as experience in other businesses and industries. You're likely correct. I'm giving too many companies far too much credit.
- ex_ubiquiti 5y ago> You assume anyone except the hacker knew anything about AWS. There were a lot of smart and experienced people at Ubiquiti when I worked there. Nick Sharp manipulated his way into total control over everything and wouldn't let anyone outside of his isolated team touch it. Nick was hired out of his job at Amazon because he was supposed to be the AWS expert. He used that to lock out anyone but himself and a trusted team. It didn't matter that others knew better. Nick controlled it.
- _pplp 5y ago> Nick was hired out of his job at Amazon because he was supposed to be the AWS expert. This always cracked me up. From what I can tell, he was a mid level dev on the Alexa web api team. He knew AWS sure, but he did not have the cred at all to justify the position and responsibility he was given at Ubiquiti.
- gonzo 5y agoThis means the fall in Ubiquiti’s share price was entirely deserved. Management abdicated its responsibility.