Ubiquiti
{{short description|American technology company}}
{{Use mdy dates|date=January 2021}}
{{Infobox company
| name = Ubiquiti Inc.
| logo = Ubiquiti Logo 2023.svg
| logo_size = 140px
| former_name = Ubiquiti Networks, Inc.
| type = Public
| traded_as = {{New York Stock Exchange|UI}}
Russell 1000 Index component
| foundation = {{Start date and age|2003|10}}{{cite web |title=Company |url=http://ir.ui.com/company/board-of-directors |website =Ubiquiti Inc. |access-date =June 8, 2021}}
| location_city = New York City
| location_country = United States
| founders = Robert Pera
| industry = Computer networking, energy
| products = Computer networking devices
| revenue = {{Decrease}} {{US$|1.928 billion|link=yes}} (2024){{cite web |url=https://www.sec.gov/Archives/edgar/data/0001511737/000151173724000053/ubnt-20240630.htm |title=Ubiquiti Networks 2024 SEC Form 10-K}}
| operating_income = {{Decrease}} {{US$|498.997 million|link=yes}} (2024)
| net_income = {{Decrease}} {{US$|349.960 million|link=yes}} (2024)
| assets = {{Decrease}} {{US$|1.154 billion |link=yes}} (2024)
| equity = {{Increase}} {{US$|95.060 million|link=yes}} (2024)
| num_employees = 1,515 (as of June 30, 2024)
| homepage = {{Official URL}}
}}
{{distinguish|iBiquity}}
Ubiquiti Inc. (formerly Ubiquiti Networks, Inc.){{Cite web |date=2019-08-09 |title=UBIQUITI NETWORKS REPORTS FOURTH QUARTER FISCAL 2019 FINANCIAL RESULTS |url=http://ir.ui.com/sites/default/files/2019-08/exhibit-99.1-6.30.19-8.8.19-final.pdf |url-status=live |archive-url=https://web.archive.org/web/20191231082336/http://ir.ui.com/sites/default/files/2019-08/exhibit-99.1-6.30.19-8.8.19-final.pdf |archive-date=2019-12-31 |archive-format=PDF |access-date=2022-04-02 |quote="At the close of business on August 19, 2019, the company will legally change its name to Ubiquiti Inc. The last trading day on NASDAQ under the name Ubiquiti Networks, Inc. and the UBNT symbol is expected to be August 19, 2019."}} is an American technology company founded in San Jose, California, in 2003.{{cite news |last=Greenberg |first=Herb |title=Yet Another Controversy for Ubiquiti? |work=CNBC |date=June 12, 2012 |url=https://www.cnbc.com/2012/06/12/yet-another-controversy-for-ubiquiti.html |access-date=June 8, 2021}} Now based in New York City,{{cite web |last=Witkowski |first=Wallace |date=September 18, 2017 |title=Ubiquiti shares hammered by Citron 'fraud' claim that contains little new evidence - MarketWatch |url=https://www.marketwatch.com/story/ubiquiti-shares-hammered-by-citron-fraud-claim-that-contains-little-new-evidence-2017-09-18 |website=MarketWatch.com |access-date=November 29, 2017 |quote=That may be a factor that led Ubiquiti's auditor, PWC, to cite a lack of internal controls in 2015, and an eventual staff clear-out that led Ubiquiti to move its headquarters from San Jose, Calif., to New York City and change auditors to KPMG.}} Ubiquiti manufactures and sells wireless data communication and wired products for enterprises and homes under multiple brand names. On October 13, 2011, Ubiquiti had its initial public offering (IPO) at 7.04 million shares, at $15 per share,{{cite news |date=October 13, 2011 |title=Ubiquiti Networks IPO Priced To Work At $15? |url=https://seekingalpha.com/article/299521-ubiquiti-networks-ipo-priced-to-work-at-15 |access-date=December 22, 2012 |newspaper=Seeking Alpha|last1=Tillman |first1=Trent }} raising $30.5 million.{{cite web |date=September 21, 2012 |title=Annual report for fiscal year ended June 30, 2012 |url=https://www.sec.gov/Archives/edgar/data/1511737/000119312512408603/d400092d10k.htm#tx400092_8 |access-date=October 16, 2013 |work=Form 10-K |publisher=US Securities and Exchange Commission}}
Products
Ubiquiti's first product line was its "Super Range" mini-PCI radio card series, which was followed by other wireless products.
The company's Xtreme Range (XR) cards operated on non-standard IEEE 802.11 bands, which reduced the impact of congestion in the 2.4 GHz and 5.8 GHz bands.{{citation needed|date=November 2016}} In August 2007 a group of Italian amateur radio operators set a distance world record for point-to-point links in the 5.8 GHz spectrum. Using two XR5 cards and a pair of 35 dBi dish antennas, the Italian team was able to establish a 304 km (about 188 mi) link at data rates between 4 and 5 Mbit/s.{{cite web |url=https://newatlas.com/go/7878/ |title=World Record 304km Wi-Fi connection |date=August 27, 2007 |publisher=newatlas.com |access-date=December 22, 2012}}
The company (under its "Ubiquiti Labs" brand) also manufactures a home-oriented wireless mesh network router and access point combination device, as a consumer-level product called AmpliFi.{{cite news |url=https://arstechnica.com/gadgets/2016/07/spending-some-time-with-ubiquiti-labs-amplifi-home-wi-fi-mesh-system/ |title=Hands-on: Ubiquiti's Amplifi covers the whole house in a Wi-Fi mesh |work=Ars Technica |date=July 20, 2016 |access-date=December 1, 2016}}
=Brands=
File:Guifi.net supernode hardware.jpg Antennaes]]
Ubiquiti product lines include UniFi, AmpliFi, EdgeMax, UISP, airMAX, airFiber, GigaBeam, and UFiber.
Their most well known product line is UniFi which is focused on home, prosumer, business wired and wireless networking in addition to IP cameras, physical access control systems, and VoIP phones. The EdgeMax product line is dedicated to wired networking, containing only routers and switches. UISP, announced in 2020, is a range of products for internet service providers.{{cite web |last= |first= |title=Ubiquiti: UISP Is The New UNMS |url=https://evanmccann.net/blog/2020/12/uisp-is-the-new-unms|website=McCann Tech |language=en-US |date=29 December 2020 |access-date=2021-01-24}}
airMAX is a product line dedicated to creating point-to-point (PtP) and point-to-multi-point (PtMP) links between networks. airFiber and UFiber are used by wireless and fiber Internet service providers (ISP) respectively.{{Citation needed|date=August 2024}}
=Software products=
Ubiquiti develops a variety of software controllers for their various products including access points, routers, switches, cameras, and locks. These controllers manage all connected devices and provide a single point for configuration and administration. The software is included as part of UniFi OS, an operating system that runs on devices called UniFi OS Consoles (UniFi Dream Machine, Dream Wall, Dream Router, Cloud Key).
The UniFi Network controller can alternatively be installed on Linux, FreeBSD, macOS, or Windows, while the other applications included with UniFi OS such as UniFi Protect and UniFi Access must be installed on a UniFi OS Console device.
WiFiman is an internet speed test and network analyzer tool that is integrated into most Ubiquiti products. It has mobile apps and a web version.
Security issues
=U-Boot configuration extraction=
In 2013, a security issue was discovered in the version of the U-Boot boot loader shipped on Ubiquiti's devices. It was possible to extract the plaintext configuration from the device without leaving a trace using Trivial File Transfer Protocol (TFTP) and an Ethernet cable, revealing information such as passwords.{{cite web |url=https://community.ui.com/questions/AirOS-and-Security-DUMP-of-configuration-files-with-TFTP-or-other-thing/c4ac1275-02ad-4377-998c-7a7e6f9c70e1#answer/8ca7ce3e-724f-450d-9507-e0f41a7a4519 |title=Re: AirOS and Security: DUMP of configuration files with TFTP or other thing |date=July 16, 2014 |website=community.ui.com |access-date=May 9, 2017}}
While the issue is fixed in current versions of Ubiquiti hardware, despite many requests and acknowledgment that they are using GPL-protected application, Ubiquiti refused to provide the source code for the GNU General Public License (GPL)-licensed U-Boot.{{cite web |url=http://community.ubnt.com/t5/airOS-SDK-Custom-Development/GPL-archive-missing-components/td-p/409238 |title=GPL archive missing components |date=March 2, 2013 |website=community.ubnt.com |access-date=May 9, 2017 |url-status=dead |archive-url=https://web.archive.org/web/20161209121418/https://community.ubnt.com/t5/airOS-SDK-Custom-Development/GPL-archive-missing-components/td-p/409238 |archive-date=December 9, 2016}} This made it impractical for Ubiquiti's customers to fix the issue. The GPL-licensed code was released eventually.
=Upatre Trojan=
It was reported by online reporter Brian Krebs, on June 15, 2015, that "Recently, researchers at the Fujitsu Security Operations Center in Warrington, UK began tracking [the] Upatre [trojan software] being served from hundreds of compromised home routers – particularly routers powered by MikroTik and Ubiquiti's airOS".
Bryan Campbell of the Fujitsu Security Operations Center in Warrington, UK was reported as saying: "We have seen literally hundreds of wireless access points and routers connected in relation to this botnet, usually AirOS ... The consistency in which the botnet is communicating with compromised routers in relation to both distribution and communication leads us to believe known vulnerabilities are being exploited in the firmware which allows this to occur."{{cite web |author= |first= |date=June 29, 2015 |title=Crooks Use Hacked Routers to Aid Cyberheists |url=https://krebsonsecurity.com/2015/06/crooks-use-hacked-routers-to-aid-cyberheists/ |website=Krebs on Security}}
=2021 alleged data breach and lawsuit=
In January 2021, a potential data breach of cloud accounts was reported,{{cite web |title=Ubiquiti says customer data may have been accessed in data breach |url=https://techcrunch.com/2021/01/11/ubiquiti-says-customer-data-may-have-been-accessed-in-data-breach/ |access-date=2021-01-19 |website=TechCrunch |date=January 11, 2021 |language=en-US}} with customer credentials having potentially been exposed to an unauthorized third party.
In March 2021 security blogger Brian Krebs reported that a whistleblower disclosed that Ubiquiti's January statement downplayed the extent of the data breach in an effort to protect the company's stock price. Furthermore, the whistleblower claimed that the company's response to the breach put the security of its customers at risk.[https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/ Whistleblower: Ubiquiti Breach "Catastrophic"], Krebs On Security, March 30, 2021 Ubiquiti responded to Krebs's reporting in a blog post, stating that the attacker "never claimed to have accessed any customer information" and "unsuccessfully attempted to extort the company by threatening to release stolen source code and specific IT credentials." Ubiquiti further wrote that they "believe that customer data was not the target of, or otherwise accessed in connection with, the incident."{{cite web |title=Update to January 2021 Account Notification |url=https://community.ui.com/questions/Update-to-January-2021-Account-Notification/3813e6f4-b023-4d62-9e10-1035dc51ad2e |website=Ubiquiti, Inc. |date=March 31, 2021 |access-date=June 8, 2021}}
On December 1, 2021, the United States Attorney for the Southern District of New York charged a former high-level employee of Ubiquiti for data theft and wire fraud, alleging that the "data breach" was in fact an inside job aimed at extorting the company for millions of dollars. The indictment also claimed that the employee caused further damage "by causing the publication of misleading news articles about the company’s handling of the breach that he perpetrated, which were followed by a significant drop in the company’s share price associated with the loss of billions of dollars in its market capitalization." The Verge reported that the indictment shed new light on the supposed breach and appeared to back up Ubiquiti's statement that no customer data was compromised.{{Cite web|date=2021-12-01|title=Former Employee Of Technology Company Charged With Stealing Confidential Data And Extorting Company For Ransom While Posing As Anonymous Attacker|url=https://www.justice.gov/usao-sdny/pr/former-employee-technology-company-charged-stealing-confidential-data-and-extorting|access-date=2021-12-03|website=www.justice.gov|language=en}}{{Cite web|last=Clark|first=Mitchell|date=2021-12-01|title=Ubiquiti hack may have been an inside job, federal charges suggest|url=https://www.theverge.com/2021/12/1/22812761/ubiquiti-data-breach-aws-doj-indictment-inside-job|access-date=2021-12-03|website=The Verge|language=en}}
In March 2022, Ubiquiti filed a lawsuit{{Cite web |title=Docket for UBIQUITI INC. v. KREBS, 1:22-cv-00352 - CourtListener.com |url=https://www.courtlistener.com/docket/63197557/ubiquiti-inc-v-krebs/ |access-date=2022-03-30 |website=CourtListener |language=en-us}} against Brian Krebs, alleging defamation for his reporting on their security issues. Both parties resolved their dispute outside the court in September 2022.
=Other=
In 2015, Ubiquiti revealed that it lost $46.7 million when its finance department was tricked into sending money to someone posing as an employee.{{cite web |url=https://fortune.com/2015/08/10/ubiquiti-networks-email-scam-40-million/ |title=Fraudsters duped this company into handing over $40 million |publisher=Fortune.com |date=August 10, 2015 |access-date=October 19, 2015}}
Legal difficulties
=United States sanctions against Iran=
In March 2014, Ubiquiti agreed to pay $504,225 to the Office of Foreign Assets Control after it allegedly violated U.S. sanctions against Iran.[https://www.lexology.com/library/detail.aspx?g=b60a9fc7-1d16-4193-8ab4-7b6e4b4d2aca "Ubiquiti Networks settles with OFAC for alleged violations of Iran sanctions"], Debevoise & Plimpton LLP, March 7, 2014.
=Open-source licensing compliance=
In 2015, Ubiquiti was accused of violating the terms of the GPL license for open-source code used in their products.{{cite web |url=http://libertybsd.net/ubiquiti/ |title=How Ubiquiti Networks Is Creatively Violating the GPL |author=Riley Baird |date=April 7, 2015 |website=LibertyBSD |access-date=April 30, 2017 |url-status=dead |archive-url=https://web.archive.org/web/20170430232455/http://libertybsd.net/ubiquiti/ |archive-date=April 30, 2017}} The original source of the complaint updated their website on May 24, 2017, when the issue was resolved.{{cite web |url=http://libertybsd.net/ubiquiti/ |title=N/A |author=Riley Baird |date=May 24, 2017 |website=LibertyBSD |access-date=December 12, 2017 |url-status=dead |archive-url=https://web.archive.org/web/20170524235100/http://libertybsd.net/ubiquiti/ |archive-date=2017-05-24}} In 2019, Ubiquiti was reported as again being in violation of the GPL.{{cite web |url=https://sfconservancy.org/blog/2019/oct/02/cambium-ubiquiti-gpl-violations/ |title=When companies use the GPL against each other, our community loses |author=Denver Gingerich |date=October 2, 2019 |website=SFconservancy |access-date=December 21, 2020}}
References
{{Reflist|30em}}
External links
- {{Official website}}
Category:Companies based in New York City
Category:Electronics companies established in 2005
Category:Companies listed on the Nasdaq
Category:Networking companies of the United States
Category:Networking hardware companies
Category:Computer companies of the United States
Category:Computer hardware companies