Unfortunately this is probably correct. The right outcome here would be some form of retraction, and more visibility into how this came about in the first plac

Unfortunately this is probably correct. The right outcome here would be some form of retraction, and more visibility into how this came about in the first place. As with all insider attacks, it's almost impossible to stop someone from doing the first bad thing, but you should have controls in place to easily identify who the bad actor was. Ubiquiti eventually did - with the assistance of the FBI, but not after the damage was done. On the other hand, Krebs not vetting his source, and allowing this through resulted in a 20% drop to Ubiquiti's stock - which affected the company, their employees (who have a financial interest in the stock) and played into the attackers hands. I'd like to see both of them come together and do a real strong analysis. That said, the negative "tone" that came from these articles persists - take a look at this thread for evidence. How many people know that Ubiquiti dropped the cloud login requirement? That their recent firmware and releases have been impressively solid (judging from my and community experience)? I don't want Krebs or Ubiquiti to "win" here, I want people to behave ethically.