LinkedIn infosec bod proffers DIY Ubiquiti fix for automation zero day

LinkedIn application Security Luca Carettoni has proffered a homebrew patch to close off a dangerous zero day hole that allows remote attackers to hijack home automation Ubiquiti mFi controllers. The holes in the automation systems remain officially unpatched despite working exploit code and vulnerability details being …

[Pascal Monett]

Ubiquiti

Apparently, the company publishes rubbish insufficiently tested code, then not only ignores bug submissions but actively attempts to suppress them without offering any response to anyone.

I can accept errors in code, I make enough of my own. I have trouble accepting a company that ignores dangerous bug submissions. I cannot accept a company that attempts to suppress bug reports.

Ubiquiti is now a name that I will avoid in future.

[Bluto Nash]

Re: Ubiquiti

"Ubiquiti is now a name that I will avoid in future."

Which is a shame, since they make some pretty cool stuff. However, while this won't keep me from using their equipment, it will make me view it with a bit more skeptical eye.