4 ms·
So, for those who don't know: Your MyCloud will spam you six times a day about firmware updates if you didn't update. They replaced the vulnerable OS back in Ma
by ocdtrekkie 5y ago
So, for those who don't know: Your MyCloud will spam you six times a day about firmware updates if you didn't update. They replaced the vulnerable OS back in March. So people probably should know/have done this by now. It's hardly a zero-day at this point: It was fixed months ago.
Second, and I feel like this should be obvious: People should not be exposing their NAS appliance directly to the Internet! Stop doing it. Just don't. If you do, you deserve what you get, because you intentionally went into your consumer-grade firewall and poked a hole in it.
- MrStonedOne 5y ago> They replaced the vulnerable OS back in March. When a full rewrite that removed functionality, so some users aren't going to bother to update, and as far as I'm concerned, thats on WD, not the users.
- ocdtrekkie 5y agoIt's still not a zero day: Fixed software has been available for months. And it's free.
- markzzerella 5y agoFor some hardware. For everybody else, WD says to buy new hardware.
- GekkePrutser 5y agoAre you sure it's always intentional? There might be some UPnP thing going on here.
- ocdtrekkie 5y agoPossible, though we should shame any routers that still allow uPnP. The horror. And MyCloud does default to local only communication.
- DiabloD3 5y agoI don't think you understand that they use dark patterns that default to the incorrect, dangerous, behavior. Western Digital is not free of sin.
- markzzerella 5y agoExcept for the folks that can't update and WD won't provide a patch, telling them to buy a new device.