Hey, we got hate here... I hate it when people complain about our lack of hate. 
 We can hate with the best of them, just choose to reserve it for a better time 
and place...  afmug: higher quality hate

From: Ty Featherling 
Sent: Tuesday, May 17, 2016 7:21 AM
To: af@afmug.com 
Subject: Re: [AFMUG] ubnt malware

When Steve comes back from somewhere complaining of too much hate, you know 
that place is a hell-hole. 

-Ty



-Ty

On Tue, May 17, 2016 at 4:48 AM, That One Guy /sarcasm 
<thatoneguyst...@gmail.com> wrote:

  holy nuggets of hate. I just got done reading the 31 pages of hate, now i 
remember why i dont ever go there

  On Tue, May 17, 2016 at 12:49 AM, That One Guy /sarcasm 
<thatoneguyst...@gmail.com> wrote:

    wow, port 19081 turns out to be pretty popular 
    one im cleaning up now has a child connection active in it since i logged 
in, im curious what its doing

    On Mon, May 16, 2016 at 10:55 PM, Mathew Howard <mhoward...@gmail.com> 
wrote:

      ...unless of course it gets on a PC at the office... in which case we'd 
be in trouble.


      On Mon, May 16, 2016 at 10:53 PM, Mathew Howard <mhoward...@gmail.com> 
wrote:

        True! but that hasn't happened yet, and it still shouldn't get beyond 
that customer's radio.


        On Mon, May 16, 2016 at 9:35 PM, Mike Hammett <af...@ics-il.net> wrote:

          Until it gets delivered via Flash or Java or something else...   ;-)




          -----
          Mike Hammett
          Intelligent Computing Solutions

          Midwest Internet Exchange

          The Brothers WISP






----------------------------------------------------------------------

          From: "Mathew Howard" <mhoward...@gmail.com>
          To: "af" <af@afmug.com>
          Sent: Monday, May 16, 2016 9:16:40 PM
          Subject: Re: [AFMUG] ubnt malware


          If you have firewall rules at the edge of the network blocking the 
management ports ti the airrouters that are on public IPs, they're probably 
fine. We still have some radios that are on old firmware, but   I haven't been 
able to find anything on our network that's infected. Fortunately, when I was 
setting up the firewall rules to block access to the CPEs from outside our 
network, I decided it was desirable to block customers from being able to get 
to other customers radios as well... which should break the self replicating 
part of this thing, so even if it does somehow get into our network, it 
shouldn't be able to get far. 

          That said, I'm updating everything that isn't on at least 5.6.2 right 
away. 

          On May 16, 2016 8:41 PM, "That One Guy /sarcasm" 
<thatoneguyst...@gmail.com> wrote:

            yeah, thats amazing me, one fella was complaining about how much of 
a problem it would be to take a unit offline to get on a bench. I would think 
if things are that bad that your network is progressively shutting down, 
convenience would be the least of your concerns. 

            I have to investigate a couple anomalies on the network, in the 
back of my mind Im hoping the air routers have been hit to put a nail in their 
coffins so we cam go with mikrotiks as the CPE router instead

            On Mon, May 16, 2016 at 8:33 PM, Josh Reynolds 
<j...@kyneticwifi.com> wrote:

              Or threatening to sue because of their own personal ignorance and 
negligence.

              On May 16, 2016 8:32 PM, "Mike Hammett" <af...@ics-il.net> wrote:

                A good amount of it is just people that don't know any better 
making false observations.




                -----
                Mike Hammett
                Intelligent Computing Solutions

                Midwest Internet Exchange

                The Brothers WISP






----------------------------------------------------------------

                From: "That One Guy /sarcasm" <thatoneguyst...@gmail.com>
                To: af@afmug.com
                Sent: Monday, May 16, 2016 8:19:00 PM
                Subject: [AFMUG] ubnt malware


                From what im reading in their forums something set off over the 
weekend? or is it ubnt douche nozzles? 

                It sounds almost as if this malware is actively being 
manipulated (changing from key access to foul username/password, wandering 
control ports, etc, like script kiddies found a new toy?

                is this thing self propagating from the device?


                -- 

                If you only see yourself as part of the team but you don't see 
your team as part of yourself you have already failed as part of the team.





            -- 

            If you only see yourself as part of the team but you don't see your 
team as part of yourself you have already failed as part of the team.







    -- 

    If you only see yourself as part of the team but you don't see your team as 
part of yourself you have already failed as part of the team.




  -- 

  If you only see yourself as part of the team but you don't see your team as 
part of yourself you have already failed as part of the team.

Reply via email to