Stories
Slash Boxes
Comments

SoylentNews is people

Ubiquiti: Change Your Password, Enable 2FA

posted by Fnord666 on Tuesday January 12 2021, @03:39AM   Printer-friendly
from the ubiquitous-credentials dept.

upstart writes in with an IRC submission:

Ubiquiti: Change Your Password, Enable 2FA:

Ubiquiti, a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. The company says an incident at a third-party cloud provider may have exposed customer account information and credentials used to remotely manage Ubiquiti gear.

In an email sent to customers today, Ubiquiti Inc. said it recently became aware of "unauthorized access to certain of our information technology systems hosted by a third party cloud provider," although it declined to name that provider.

[...] Ubiquiti has not yet responded to requests for more information, but the notice was confirmed as official in a post on the company's user support forum.

Is anyone running Ubiquiti gear and if so, what do you think?

Original Submission

 
This discussion has been archived. No new comments can be posted.
Ubiquiti: Change Your Password, Enable 2FA | Log In/Create an Account | Top | 6 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 0) by Anonymous Coward on Tuesday January 12 2021, @10:10PM (1 child)

    by Anonymous Coward on Tuesday January 12 2021, @10:10PM (#1099109)

    Giving your phone number to Google is a good idea since when?

  • (Score: 1) by Sabriel on Friday January 15 2021, @05:56AM

    by Sabriel (6522) on Friday January 15 2021, @05:56AM (#1100422)

    Using the TOTP ("Time-based One Time Password") protocol to do 2FA means the app itself doesn't need your phone number (even if installing the app involves Google).

    But if you're wanting a non-Google app, another example would be Aegis Authenticator which is available on Github under GPL3 if you don't want to use the Google Play store.