4 ms·

I do not think Synology has much to do what it happen. A weak password, an out-of-date Synology software and/or an incorrect setup are all caused by the user.

I do not think Synology has much to do what it happen. A weak password, an out-of-date Synology software and/or an incorrect setup are all caused by the user. Synology produces very good products at very affordable prices.

NietTim 12y ago
Synology has a vulnerability in their closed down software which allows this... how is this not something they have control over? Also, this is not the first time this has happened to Synology hardware. Sure, bigger companies attract more attacks, but this is incredibly bad.
- Fastidious 12y ago
  Have this proven to have been the case? ("a vulnerability in their closed down software which allows this"). Could you give me a link? Thanks!
  - NietTim 12y ago
    You can see that there has been hacks of synology products, right?
    - Fastidious 12y ago
      You are trolling me, yes? Next you will say Crytolocker is a Windows vulnerability (that is not to say that Windows does not have vulnerabilities).
      - CamperBob2 12y ago
        The problem is that Synology has historically not been very proactive at informing and educating their users about security threats, including very specific ones like this. A company that specializes in selling advanced network appliances to novice users and non-IT pros has a certain obligation to those users, IMHO. PayPal has been described as "a fraud detection company that also transfers money." That's how Synology needs to think of themselves.
  - dataminded 12y ago
    If you are affiliated with Synology you should disclose that. I see that your account is only 19 hours old.
    - Fastidious 12y ago
      No affiliation. I am sure my account is not the only one recently created. Merely a coincidence. I own a DS411J. Really happy with it.
- Fastidious 12y ago
  See [0]. Also see this[1] and this[2]. [0] https://twitter.com/mikeevangelist/status/496322439740424193 https://twitter.com/mikeevangelist/status/496322439740424193 [1] http://www.exploit-db.com/exploits/28243/ http://www.exploit-db.com/exploits/28243/ [2] http://www.synology.com/en-us/support/security http://www.synology.com/en-us/support/security

NietTim 12y ago

Synology has a vulnerability in their closed down software which allows this... how is this not something they have control over? Also, this is not the first time this has happened to Synology hardware. Sure, bigger companies attract more attacks, but this is incredibly bad.

Fastidious 12y ago
Have this proven to have been the case? ("a vulnerability in their closed down software which allows this"). Could you give me a link? Thanks!
- NietTim 12y ago
  You can see that there has been hacks of synology products, right?
  - Fastidious 12y ago
    You are trolling me, yes? Next you will say Crytolocker is a Windows vulnerability (that is not to say that Windows does not have vulnerabilities).
    - CamperBob2 12y ago
      The problem is that Synology has historically not been very proactive at informing and educating their users about security threats, including very specific ones like this. A company that specializes in selling advanced network appliances to novice users and non-IT pros has a certain obligation to those users, IMHO. PayPal has been described as "a fraud detection company that also transfers money." That's how Synology needs to think of themselves.
- dataminded 12y ago
  If you are affiliated with Synology you should disclose that. I see that your account is only 19 hours old.
  - Fastidious 12y ago
    No affiliation. I am sure my account is not the only one recently created. Merely a coincidence. I own a DS411J. Really happy with it.
Fastidious 12y ago
See [0]. Also see this[1] and this[2]. [0] https://twitter.com/mikeevangelist/status/496322439740424193 https://twitter.com/mikeevangelist/status/496322439740424193 [1] http://www.exploit-db.com/exploits/28243/ http://www.exploit-db.com/exploits/28243/ [2] http://www.synology.com/en-us/support/security http://www.synology.com/en-us/support/security