4 ms·

Hey I have a WD MyCloud with OS5 (updated to latest release) and it works localy. I've disabled all the silly cloud and online services and I use it perfectly f

Hey I have a WD MyCloud with OS5 (updated to latest release) and it works localy. I've disabled all the silly cloud and online services and I use it perfectly fine as a local NAS. It's people who were using the cloud features that are affected by this hack. To be clear and honest, other vendors have faced similar issues. I remember D-Link many years ago and Synology more recently. We have to accept that all cloud services are susceptible to attacks, downtime and so it's always good to have local (and offsite) backups of your important files.

agloe_dreams 4y ago
If you have automatic updates turned on, I would still assume you were breached. It can remotely re-enable cloud services and there's all kinds of unknown implementation details.
saidinesh5 4y ago
Ohh interesting.. do the existing applications like syncthing etc.. work on OS5? I've currently disabled all cloud functionality.. i don't think i ever even registered an account with them. I remember reading that cloud account is mandatory after the update, so i had to disable the updates. On my current OS, i ran a little piece of JS to enable third-party applications, from which I've installed syncthing. It freed up my raspberry Pi to do other things...
maxsilver 4y ago
> I use it perfectly fine as a local NAS. I think the problem is the newer models. I also have a WD MyCloud, but the "newer" Home edition one, and a lot of the features do not work locally, and require cloud connections. (Even local LAN-only file transfers, or managing the onboard Plex server and such, all have random cloud server junk shoved in the middle of them, to handle authentication and such) I had to take pliers and scissors to mine and cut the harddrive out to rescue the data earlier this year, when the internal network board couldn't successfully reach WD's cloud system for some reason. I have to imagine any of the folks who bought devices like mine are just SOL until WD gets service back up.

agloe_dreams 4y ago

If you have automatic updates turned on, I would still assume you were breached. It can remotely re-enable cloud services and there's all kinds of unknown implementation details.

saidinesh5 4y ago

Ohh interesting.. do the existing applications like syncthing etc.. work on OS5? I've currently disabled all cloud functionality.. i don't think i ever even registered an account with them. I remember reading that cloud account is mandatory after the update, so i had to disable the updates. On my current OS, i ran a little piece of JS to enable third-party applications, from which I've installed syncthing. It freed up my raspberry Pi to do other things...

maxsilver 4y ago

> I use it perfectly fine as a local NAS. I think the problem is the newer models. I also have a WD MyCloud, but the "newer" Home edition one, and a lot of the features do not work locally, and require cloud connections. (Even local LAN-only file transfers, or managing the onboard Plex server and such, all have random cloud server junk shoved in the middle of them, to handle authentication and such) I had to take pliers and scissors to mine and cut the harddrive out to rescue the data earlier this year, when the internal network board couldn't successfully reach WD's cloud system for some reason. I have to imagine any of the folks who bought devices like mine are just SOL until WD gets service back up.