4 ms·

The issue at hand is a NAS firmware problem, not a HD drive issue. There are quite a few other brands offering NAS devices e.g. Synology, QNAP, Thecus, Pegasus

The issue at hand is a NAS firmware problem, not a HD drive issue. There are quite a few other brands offering NAS devices e.g. Synology, QNAP, Thecus, Pegasus and more.

Scoundreller 5y ago
Public-facing Synology devices got hit in the past too, but they just used it to mine Litecoin. I think someone calculated it and figured out that it cost something like $400k in electricity to mine $100k of coins on the boxes. Aha! It was $600k in dogecoin in 2014 https://www.pcworld.com/article/2364120/hacked-synology-nas-systems-used-in-highprofit-cryptocurrency-mining-operation.html https://www.pcworld.com/article/2364120/hacked-synology-nas-... That’s worth around $125m today (assuming straight hodling).
- ValentineC 5y ago
  Synology has a large enough following to get its own ransomware attack (in July 2019) too: https://www.synology.com/en-us/company/news/article/2019JulyRansomware https://www.synology.com/en-us/company/news/article/2019July...
- ksec 5y ago
  And of course Qnap in the recent month. It keeps repeating, and keeps happening, and some ( me ) keep ranting about it and no one / company is doing anything much with it. Majority of people buy NAS only use it to access their Data within their internal network. But somehow they all include Internet / Cloud features as upsell.
  - fistynuts 5y ago
    To be fair to Qnap, they're actively patching these issues as they come up. Of course the issues shouldn't be there in the first place, but it's not like they're ignoring the problem.
    - noja 5y ago
      > To be fair to Qnap, they're actively patching these issues as they come up. What? They backdoored every device.
  - cfn 5y ago
    Can you give a link to what is happening with QNAP? I have one and now I am worried.
    - criddell 5y ago
      They had hard coded credentials in a service that lots of people inadvertently exposed to the internet. https://www.bleepingcomputer.com/news/security/qnap-removes-backdoor-account-in-nas-backup-disaster-recovery-app/ https://www.bleepingcomputer.com/news/security/qnap-removes-...

The issue at hand is a NAS firmware problem, not a HD drive issue. There are quite a few other brands offering NAS devices e.g. Synology, QNAP, Thecus, Pegasus and more.

Scoundreller 5y ago

Public-facing Synology devices got hit in the past too, but they just used it to mine Litecoin. I think someone calculated it and figured out that it cost something like $400k in electricity to mine $100k of coins on the boxes. Aha! It was $600k in dogecoin in 2014 https://www.pcworld.com/article/2364120/hacked-synology-nas-systems-used-in-highprofit-cryptocurrency-mining-operation.html https://www.pcworld.com/article/2364120/hacked-synology-nas-... That’s worth around $125m today (assuming straight hodling).

ValentineC 5y ago
Synology has a large enough following to get its own ransomware attack (in July 2019) too: https://www.synology.com/en-us/company/news/article/2019JulyRansomware https://www.synology.com/en-us/company/news/article/2019July...
ksec 5y ago
And of course Qnap in the recent month. It keeps repeating, and keeps happening, and some ( me ) keep ranting about it and no one / company is doing anything much with it. Majority of people buy NAS only use it to access their Data within their internal network. But somehow they all include Internet / Cloud features as upsell.
- fistynuts 5y ago
  To be fair to Qnap, they're actively patching these issues as they come up. Of course the issues shouldn't be there in the first place, but it's not like they're ignoring the problem.
  - noja 5y ago
    > To be fair to Qnap, they're actively patching these issues as they come up. What? They backdoored every device.
- cfn 5y ago
  Can you give a link to what is happening with QNAP? I have one and now I am worried.
  - criddell 5y ago
    They had hard coded credentials in a service that lots of people inadvertently exposed to the internet. https://www.bleepingcomputer.com/news/security/qnap-removes-backdoor-account-in-nas-backup-disaster-recovery-app/ https://www.bleepingcomputer.com/news/security/qnap-removes-...