Since some people here might be using the products from Ubiquity for small installs / branch offices I wanted to share this, because the fact and the way ui handled this honestly shocked me.
Ubiquity has included a phone home "feature" in all their devices in their new firmware. This "feature" transmits all of the device metrics, including sensitive data like type and time of all connected devices, first 8 digits of the MAC addresses, transferred data amount and speed.
And no this is not optional or connected to the automatic firmware update feature. ALL devices with the current firmware do this! Eaven if you block the access points but still have a USG - it collects the data from them circumventing the firewall.
- But the way this is handled by the company is even more horrendous:
- They didn't post a note in the changelog sneaking this "feature" in
- They made it mandatory ( no option to turn it off)
Here is a link to a thread detailing some of the ways they messed up
Honestly I don't trust the company any more and as a result will not use their product in any new installs.
Also I have to inform some people here that their new policy is not compatible with European data protection law and thus their network needs to be significantly - imagine their joy in that...
At least all be warned not to update to this firmware since downgrade is difficult and at the moment the only short term solution
No comments:
Post a Comment