4 ms·
Commercial consumer NAS boxes are notoriously bad wrt security though, even firewalled. Apple Airport Extreme is probably the only one with a decent track recor
by zurn 10y ago
Commercial consumer NAS boxes are notoriously bad wrt security though, even firewalled. Apple Airport Extreme is probably the only one with a decent track record (and I say this as someone who doesn't use Apple products).
Eg QNAP requires you to install security patches manually, and as a result had a ShellShock worm exploiting QNAP boxes: https://threatpost.com/shellshock-worm-exploiting-unpatched-qnap-nas-devices/109870/ https://threatpost.com/shellshock-worm-exploiting-unpatched-...
- roel_v 10y agoThat report isn't quite accurate; you can install updates automatically on the device I have (I don't know if there was some point in time where that wasn't possible; seems like a basic feature). Some require reboots though, which is why by default updates aren't automatic. Who sets their servers on fully automatic updates (and reboots) anyway? I mean, even forgetting about the reboots - you don't want fileservers to disconnect all clients at any random point in time because it has to install some update to the service software.
- zurn 10y agoThis kind of NAS should definitely automatically update and reboot rather than become wormable. A high-availability file server is a different beast from a home NAS.
- roel_v 10y agoThe one I have is not a home nas. It's a rack mount machine with a bunch of 'enterprise' features, and marketed/sold as such.