Conversation

Notices

1. lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Friday, 25-Jun-2021 13:16:38 EDT lnxw48a1
   https://gizmodo.com/western-digital-confirms-my-book-live-drives-are-being-1847171372
   
   Flaw allows attacker to damage Internet-connected hard drives. Who would have guessed that connecting things to a network means that someone else can do bad things to them?
   1. GeniusMusing (geniusmusing@nu.federati.net)'s status on Friday, 25-Jun-2021 14:35:57 EDT GeniusMusing

      in reply to
      What I have yet to see, and maybe they are keeping quite about it until a fix can be made and deployed, is how the command(s) are being sent. I did a quick search on Shodan for mybook and the results were very limited, about 60 or so world wide. I would like to think it gets access through a WD server login for both device/client software and not direct access from outside, but I have seen stupider things done before.
      1. lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Friday, 25-Jun-2021 14:48:09 EDT lnxw48a1

         in reply to
         Oh, boy! I think Synology has something like that for their NAS boxes. It gives you the ability to access your files from outside your home & network.
         1. GeniusMusing (geniusmusing@nu.federati.net)'s status on Friday, 25-Jun-2021 15:21:34 EDT GeniusMusing

            in reply to
            Reminds me of this, had it but never used it as a "cloud", just local internal access.
            
            How To How to Set Up Your Own Personal Cloud With Asus RT-AC66U Tom's Hardware Forum
            https://nu.federati.net/url/281672
            1. lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Friday, 25-Jun-2021 15:48:38 EDT lnxw48a1

               in reply to
               At one point, I and two of my kids had the AC66U router. But none of us set up "personal cloud".
               
               What I remember about it was that it wasn't easy to set up the first time without creating the remote Asus account, but later set ups were easier.
   2. lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Friday, 25-Jun-2021 15:19:30 EDT lnxw48a1

      in reply to
      https://nu.federati.net/url/281670 [www westerndigital com]
      
      Current recommendation: disconnect your device from the Internet.
      
      https://nvd.nist.gov/vuln/detail/CVE-2018-18472 [nvd nist gov]
      
      Apparently, the vulnerability has been known since 2018, but the boxes appear to have gone out of support in 2015.