4 ms·

At the same time the security advisor in Synology DSM spams you with notifications to disable the admin user account after creating another account with admin r

by gbil 6y ago

At the same time the security advisor in Synology DSM spams you with notifications to disable the admin user account after creating another account with admin rights first

prepend 6y ago
I’ve used synology for 10 years and really liked them. But there’s quite a few annoying things popping up more frequently. This is an example of a stupid error that I can’t turn off. They’re starting to assume that all devices are internet connectable and subject to brute force. That seems insane to me and my synology is on a private network with no inbound connectivity. I don’t want to change from admin.
- katbyte 6y ago
  Isn’t there a Config page somewhere the let’s you pick what warnings to show?
  - prepend 6y ago
    Not that I’ve found through searching their docs and walking through the UI, but I haven’t really dig deeply into the internals.
- manicdee 6y ago
  Your Maginot line is only providing imaginary security. Actual IT security is in depth, and the simple task of having an admin account that is not the default user ID makes sense to me. What zero days are out there that rely on a known user ID, and a known process ID for that user’s first process? You could defeat that by just following the advice from people that know better.
  - prepend 6y ago
    I’m not trying to provide absolute security as it’s for my home network. If there’s a zero day ravaging my kids iPad then that’s the risk I take. And it’s acceptable given my situation. “People that know better” for my situation seems pretty hard to qualify. I’m glad it makes sense to you, but since you have zero insight to my config and the changes required to implement I think it says more about the quality of your recommendations that you can give a recommendation without understanding the usability trade offs. Maginot lines suck for protecting countries, but simple, clear defenses are pretty darn handy for protecting home networks. I’ll take a disconnected NAS over a wonderfully synced, fully compliant NAS following every recommendation (that also includes making it network accessible).

by gbil 6y ago

At the same time the security advisor in Synology DSM spams you with notifications to disable the admin user account after creating another account with admin rights first

prepend 6y ago

I’ve used synology for 10 years and really liked them. But there’s quite a few annoying things popping up more frequently. This is an example of a stupid error that I can’t turn off. They’re starting to assume that all devices are internet connectable and subject to brute force. That seems insane to me and my synology is on a private network with no inbound connectivity. I don’t want to change from admin.

katbyte 6y ago
Isn’t there a Config page somewhere the let’s you pick what warnings to show?
- prepend 6y ago
  Not that I’ve found through searching their docs and walking through the UI, but I haven’t really dig deeply into the internals.
manicdee 6y ago
Your Maginot line is only providing imaginary security. Actual IT security is in depth, and the simple task of having an admin account that is not the default user ID makes sense to me. What zero days are out there that rely on a known user ID, and a known process ID for that user’s first process? You could defeat that by just following the advice from people that know better.
- prepend 6y ago
  I’m not trying to provide absolute security as it’s for my home network. If there’s a zero day ravaging my kids iPad then that’s the risk I take. And it’s acceptable given my situation. “People that know better” for my situation seems pretty hard to qualify. I’m glad it makes sense to you, but since you have zero insight to my config and the changes required to implement I think it says more about the quality of your recommendations that you can give a recommendation without understanding the usability trade offs. Maginot lines suck for protecting countries, but simple, clear defenses are pretty darn handy for protecting home networks. I’ll take a disconnected NAS over a wonderfully synced, fully compliant NAS following every recommendation (that also includes making it network accessible).