WD My Cloud drive contains a backdoor

[TetraSky]

These kind of news is why I can't bring myself to trust anything "cloud" related.

Just glad I bought a WD 3TB MyBook instead of the Cloud crap. Had been working great for years without issues.(Just had to get rid of their crapware on the drive itself.)

[jagdtigger]

40 minutes ago, TetraSky said:

These kind of news is why I can't bring myself to trust anything "cloud" related.

Just glad I bought a WD 3TB MyBook instead of the Cloud crap. Had been working great for years without issues.(Just had to get rid of their crapware on the drive itself.)

Even worse when i tested my old router(Archer C7) it just let through anything over IPv6...

[NumLock21]

I wonder what that wd engineer was thinking when they hardware coded that username, "mydlinkBRionyg" .

[TetraSky]

36 minutes ago, jagdtigger said:

Even worse when i tested my old router(Archer C7) it just let through anything over IPv6...

You could install DD-WRT or some other third party firmware on the router to help fix this if TP-Link isn't patching that though.

[jagdtigger]

2 minutes ago, TetraSky said:

You could install DD-WRT or some other third party firmware on the router to help fix this if TP-Link isn't patching that though.

Nah, it became an internal router so its not that big of an issue. The main one is a Netgear FVS336G...

[Fetzie]

1 hour ago, jagdtigger said:

Even worse when i tested my old router(Archer C7) it just let through anything over IPv6...

Yeah, if there aren't any policies defined for IPv6 or the router/firewall isn't programmed to handle IPv6 then they just let everything through

 

(that isn't just TP-Link goofing up though, I've seen Cisco kit do the same thing)

[jagdtigger]

8 minutes ago, Fetzie said:

Yeah, if there aren't any policies defined for IPv6 or the router/firewall isn't programmed to handle IPv6 then they just let everything through

 

(that isn't just TP-Link goofing up though, I've seen Cisco kit do the same thing)

The "funny" part is that it has support for IPv6 but no options for NAT or firewall rules...

[Sauron]

Hardcoded passwords? Really...?

[Silentprototipe]

2018 just makes me want to cry 7 days in 

[vorticalbox]

I have a dlink sharecentre that is vulnerable to smb exploit and it's hasn't been patched even after contacting dlink.

 

I can't use my drive as a cloud because of this. 

 

You would surprised how many devices have no login at all and dump you right in to a root shell. 

[jagdtigger]

1 hour ago, vorticalbox said:

I have a dlink sharecentre that is vulnerable to smb exploit and it's hasn't been patched even after contacting dlink.

 

I can't use my drive as a cloud because of this. 

 

You would surprised how many devices have no login at all and dump you right in to a root shell. 

It isnt a good idea even if your device is secure TBH. Its way better if the only way you can reach anything on your lan remotely is a VPN...

[vorticalbox]

16 minutes ago, jagdtigger said:

It isnt a good idea even if your device is secure TBH. Its way better if the only way you can reach anything on your lan remotely is a VPN...

That's true though it can be nice getting my files without uploading everything to the cloud. 

[jagdtigger]

1 minute ago, vorticalbox said:

That's true though it can be nice getting my files without uploading everything to the cloud. 

Thats why i said the best way is a VPN... (I thought it was clear that i meant a self hosted one .)

[Drak3]

2 hours ago, silentprototipe said:

2018 just makes me want to cry 7 days in 

On the bright side, I'll be able to legally drink come tuesday.

[Silentprototipe]

1 minute ago, Drak3 said:

On the bright side, I'll be able to legally drink come tuesday.

Drink your sorrows away! (Dont take advice from me )

[ElZamo92]

Well, looks like the only way to keep your files moderately safe is to have them writen in paper and stored in a vault. I better start writing.

[mr moose]

17 minutes ago, ElZamo92 said:

Well, looks like the only way to keep your files moderately safe is to have them writen in paper and stored in a vault. I better start writing.

 

 

10010101011010101001101010101 101010101010101010101001001 10101010101010100101010011101010 10101010101010101

...

There has got to be a quicker way!

[captain_to_fire]

On 1/7/2018 at 8:43 PM, Matu20 said:

This past 2 months has been horrible for security

Try 2017 with worldwide malware infections and data breaches and it looks like 2018 will be much bleaker than last year. 

[Kamina]

2018 has become Y2K for computers.

 

Maybe the world really is ending.

[Czeekaj]

My WD drive portable has a password but I wish I had the sense to reformat it and encrypt it properly.. I had a data leak because I can't change the damn password and it's pretty lame password, shorter than password itself.
Although my network WD drive is running some form of Vista so I disconnected it untill I can find a way to update it.
good luck to you guys with WD's default software.

[Matu20]

4 hours ago, hey_yo_ said:

Try 2017 with worldwide malware infections and data breaches and it looks like 2018 will be much bleaker than last year. 

Oh it has just started, I expect a lot worse tbh

[Pesukarhu]

On 7.1.2018 at 7:13 AM, Energycore said:

So according to those numbers, there should be an adapter for 3.5" drives that uses 2 USB 3 ports

 

Just wishful thinking here.

Im pretty sure 3,5" drives need 5v and 12v to work, so you would need 3x usb 3 ports for power and a boost converter... It is cheaper (and probably safer) to use a wall power adapter  

[Fetzie]

6 hours ago, ElZamo92 said:

Well, looks like the only way to keep your files moderately safe is to have them writen in paper and stored in a vault. I better start writing.

Embossed in stainless steel