5 ms·
> If a user forgets their password or Isn't this the reason for a hardware reset button? Having this available over the internet is probably negligent.
by MR4D 5y ago
> If a user forgets their password or
Isn't this the reason for a hardware reset button?
Having this available over the internet is probably negligent.
- beerandt 5y agoHow common is it now for a hardware button that isn't just dedicated input for software?
- MR4D 5y agoProbably common, but connecting that function to the web (via PHP in this case) is pretty stupid. I would think it would run a firmware function to do the resetting, and if not that, then some sort of sell script that is not callable by their web interface. Due to all this stupidness, my weekend is going to be consumed by trying to find out if my Synology has something stupid in it (assuming I can even figure that out). So my trust in "personal" network storage devices has been shattered. Hopefully Synology is not as dumb.
- beerandt 5y agoI tried to start implementing separate lans/vlans at home for trusted and untrusted devises. But quickly realized I don't really trust any of it, save my personal laptop and a few of the servers I run.
- thujlife 5y agointel/amd me running second own os on everything. One malicious lib, GG security theatre.
- kova12 5y ago... and after a while, when you realize the hole goes deeper, you stop trusting these as well
- beerandt 5y agoIt's pretty much devolved to users instead of devices: 1) devices only I have write access to 2) devices others have access to 3) iot (which are basically users I've never met) At least I can segregate me running a port scan from my laptop, to a family members phone running a portscan from some spyware game they downloaded. I have a good idea how much I can trust my own devices, even if my phone's baseband OS is sending an unstoppable stream of location data and super cookies. But this NAS/cloud connected storage thing is a bit of a oddball, since you're supposed to trust it with your data, but can't trust it with unfettered network access.
- kova12 5y agoJust set up an old computer to be your nas and call it a day. Would be much quicker, and you can be much more confident it does only what you want it to do
- MR4D 5y agoMy son has my old computer for playing fortnight. :) So I'm reading up on TrueNAS to see if that's the way for me to go. Frankly, I love my Synology, but it at EOL (can't do the new version of DSM) but my needs are pretty simple, hence either straight Linux or TrueNAS seem to be my best options.
- beerandt 5y agoI do- it was just a curiosity given the topic.
- mmis1000 5y agoAt least 100% common for wifi routers? Not sure why all wifi routers have one though.
- Osiris 5y agoI read the support thread on WDs website and someone mentioned doing a hardware reset using a button.