3 ms·

So in real life terms, what does this mean for people that own USG3s? If you're so inclined, replace it? Or not use the VPN feature in the Unifi admin console?

So in real life terms, what does this mean for people that own USG3s? If you're so inclined, replace it? Or not use the VPN feature in the Unifi admin console? Personally, I just forward all WireGuard traffic to another computer on my network and use https://github.com/burghardt/easy-wg-quick https://github.com/burghardt/easy-wg-quick to setup a simple VPN.

stephen_g 3y ago
We don’t know which types of Cavium products may have vulnerabilities, which models or what the nature of it is (could be only applicable to certain features, sounds like possibly related to VPN acceleration). So absolutely no way to know whether anything needs to be done or not, unless you expect you’re at risk of a nation state actor having a reason to specifically target you, in which case it’d be wise to stop using it.
BlueTemplar 3y ago
What kind of people ? Your average person can't do squat if targeted by a state actor anyway (except complaining to their own state about it, and let them sort it out). It's another thing when it comes to resisting surveillance capitalism : https://web.archive.org/web/20180919021829/https://www.alexrad.me/discourse/why-rosyna-cant-take-a-movie-screenshot.html https://web.archive.org/web/20180919021829/https://www.alexr... It's completely disproportionate that Hollywood is making people lose control of their own computers because they are worried about copyright infringement !! That a boycott of Intel and Ryzen CPUs, "Trusted" Platform Modules, and Windows (8+) also probably makes the job of NSA/CIA/FBI harder (because they have likely backdoored them) is just a bonus. (Of course there's also a potential failure mode that some much more hostile actors might get their hands on some of these backdoors, but it doesn't seem worth worrying about it until we get a high profile example of that happening ?) Of course if you have the responsibility of, say, protecting your non-US company from industrial espionage, the situation is very different.

stephen_g 3y ago

We don’t know which types of Cavium products may have vulnerabilities, which models or what the nature of it is (could be only applicable to certain features, sounds like possibly related to VPN acceleration). So absolutely no way to know whether anything needs to be done or not, unless you expect you’re at risk of a nation state actor having a reason to specifically target you, in which case it’d be wise to stop using it.

BlueTemplar 3y ago

What kind of people ? Your average person can't do squat if targeted by a state actor anyway (except complaining to their own state about it, and let them sort it out). It's another thing when it comes to resisting surveillance capitalism : https://web.archive.org/web/20180919021829/https://www.alexrad.me/discourse/why-rosyna-cant-take-a-movie-screenshot.html https://web.archive.org/web/20180919021829/https://www.alexr... It's completely disproportionate that Hollywood is making people lose control of their own computers because they are worried about copyright infringement !! That a boycott of Intel and Ryzen CPUs, "Trusted" Platform Modules, and Windows (8+) also probably makes the job of NSA/CIA/FBI harder (because they have likely backdoored them) is just a bonus. (Of course there's also a potential failure mode that some much more hostile actors might get their hands on some of these backdoors, but it doesn't seem worth worrying about it until we get a high profile example of that happening ?) Of course if you have the responsibility of, say, protecting your non-US company from industrial espionage, the situation is very different.