Ubiquiti AirOS default password warning
I recently updated a Ubiquiti Networks PicoStation M2 from firmware v5.3.5 to the latest v5.5.2 and noticed an interesting new UI feature: a persistent message-box indicating that I was still using the default username and password for the administrator account. Normally such a message might be a nuisance, but I was actually pleasantly surprised.
The message-box in question, located at the bottom-right corner of the browser-based UI:
Little things like this make a difference. It’s a welcome reminder that Ubiquiti Networks is thinking about security when designing a product that definitely needs to be secure. Instead of instantly clicking “Dismiss”, which is practically a reflex for me (and probably anyone who uses Windows at least occasionally), I went ahead and changed the default password. Now if/when someone accesses my home network (hopefully with my permission, and by breaking into the PEAP-secured Wi-Fi network), they will at least have to do some more work than a simple Google search to change settings on my AP. On the other hand, this makes it harder for me if I forget the password. 🙂
I’m definitely a fan of the PicoStation. It’s small, reliable, reasonably priced, supports PoE, has an unobtrusive and even attractive design, and Ubiquiti provides free software updates unlike some other vendors. I had no problem implementing PEAP, and it has performed flawlessly (unlike the 3Com/HP AP it replaced). As I work on enhancing Wi-Fi coverage for my home, I will definitely be considering the PicoStation and other Ubiquiti APs.