3 ms·

And nothing for 16hrs. So probably there is something wrong. And it’s seems pretty critical. Status page doesn’t show anything

WesolyKubeczek 3y ago
I don't know if it's expected of status pages to signal security incidents and bugs if you technically can still use your (and other people's) console. (Putting on buck teeth and fidgeting with something) But but but akchyually, it's not an outage, you see.
- PeterisP 3y ago
  If other people can access your console, then this feels like a case where it's negligent not to have an intentional outage, shutting down all remote access to all cloud consoles until this is fixed.
  - WesolyKubeczek 3y ago
    I don’t know, imagine relying on remote access and one day when you absolutely need to log in and do your thing you suddenly cannot because the breach and they turned it off for everyone. And to get on site it’s a 8-hour commute, or you have to cross a border or two, or you need a visa to get there. Or anything at all which necessitated remote access in the first place.
Petersipoi 3y ago
Why would users want them to advertise a vulnerability on the status page before the issue is fixed? I would want them to keep this as quiet as possible until the issue is resolved.
- x0x0 3y ago
  To enable workarounds and/or stop the bleeding. There's many places where no network is strongly preferable to network that could be open to hackers.
  - JAlexoid 3y ago
    I mean... It's not even "no network". Once the management connection is severed the network equipment doesn't stop operating at all.
- Ekaros 3y ago
  All users should be informed so they can decide if to pull the plug or not on their devices...
boilerupnc 3y ago
Ubiquiti Statement: https://community.ui.com/questions/Bug-Fix-Cloud-Access-Misconfiguration/fe8d4479-e187-4471-bf95-b2799183ceb7 https://community.ui.com/questions/Bug-Fix-Cloud-Access-Misc...

WesolyKubeczek 3y ago

I don't know if it's expected of status pages to signal security incidents and bugs if you technically can still use your (and other people's) console. (Putting on buck teeth and fidgeting with something) But but but akchyually, it's not an outage, you see.

PeterisP 3y ago
If other people can access your console, then this feels like a case where it's negligent not to have an intentional outage, shutting down all remote access to all cloud consoles until this is fixed.
- WesolyKubeczek 3y ago
  I don’t know, imagine relying on remote access and one day when you absolutely need to log in and do your thing you suddenly cannot because the breach and they turned it off for everyone. And to get on site it’s a 8-hour commute, or you have to cross a border or two, or you need a visa to get there. Or anything at all which necessitated remote access in the first place.

Petersipoi 3y ago

Why would users want them to advertise a vulnerability on the status page before the issue is fixed? I would want them to keep this as quiet as possible until the issue is resolved.

x0x0 3y ago
To enable workarounds and/or stop the bleeding. There's many places where no network is strongly preferable to network that could be open to hackers.
- JAlexoid 3y ago
  I mean... It's not even "no network". Once the management connection is severed the network equipment doesn't stop operating at all.
Ekaros 3y ago
All users should be informed so they can decide if to pull the plug or not on their devices...

boilerupnc 3y ago

Ubiquiti Statement: https://community.ui.com/questions/Bug-Fix-Cloud-Access-Misconfiguration/fe8d4479-e187-4471-bf95-b2799183ceb7 https://community.ui.com/questions/Bug-Fix-Cloud-Access-Misc...