3 ms·
I recently bought a lenovo ix2 NAS and was having some issues setting up rsync. Decided to go to their forums and found out that they turn on rsync by default a
by gketuma 13y ago
I recently bought a lenovo ix2 NAS and was having some issues setting up rsync. Decided to go to their forums and found out that they turn on rsync by default and unsecure. So if you have this device connected to your network with default settings (which I presume many people will do), anyone on the internet can see your backups. Here is the comment from one person who made the discovery and according to him, he can scan and see peoples backups.
http://forums.lenovo.com/t5/Iomega-Network-Storage/Security-Vulnerability-in-Lenovo-IX2-DL/m-p/1430085/highlight/true#M1618 http://forums.lenovo.com/t5/Iomega-Network-Storage/Security-...
- stevekemp 13y agoThat's pretty bad, thanks for highlighting it. I could certainly see patterns in the things that were exposed. A lot of hosts exposed either: * A single share called "squid". * A pair of shares called "sql" & "www". That made me think of a control-panel of some kind.
- cortesoft 13y agoIt would be behind a NAT for most people, though, right? Not saying that makes it ok, but at least a LITTLE less bad?