3 ms·
My guess is someone figured out how to bounce commands off WD command server (customer reps helping people reset their devices) and they are spamming customer i
by flatiron 5y ago
My guess is someone figured out how to bounce commands off WD command server (customer reps helping people reset their devices) and they are spamming customer ids.
Either that or these devices have unique ports on the WAN with a 0-day but that would take a lot more effort to exploit.
- dannyw 5y agosomeone didnt just figure ut out, it wss dislosed as a 9.8 CVE in 2019 .
- HotHotLava 5y agoThat CVE only shows how to factory-reset a single MyBook to which you can connect and send HTTP requests. There's still something missing to explain how it could happen to seemingly all MyBook's at once, including those behind a NAT.
- addingnumbers 5y ago> explain how it could happen to seemingly all MyBook's at once Explain what makes you think this happened to all of them at once. That's a huge leap
- HotHotLava 5y agoThere are comments in this thread from people who read about this in the news, checked their own device, and found it was wiped as well. This seems like it would be very unlikely to happen if this were just happening in isolated cases.
- addingnumbers 5y agoNow you're just advocating for the Hasty Generalization Fallacy