Bruno Ferreira Social Links Navigation Contributor Bruno Ferreira is a contributing writer for Tom's Hardware. He has decades of experience with PC hardware and assorted sundries, alongside a career as a developer. He's obsessed with detail and has a tendency to ramble on the topics he loves. When not doing that, he's usually playing games, or at live music shows and festivals.
palladin9479 Exposing any admin interface to the web is a very VERY bad idea. That admin interface being an appliance web page makes it a ludicrously irresponsible bad idea. Reply
helper800 palladin9479 said: Exposing any admin interface to the web is a very VERY bad idea. That admin interface being an application web page makes it a ludicrously irresponsible bad idea. What exactly do you mean by admin interface on an application web page? I have access to google admin console at work through a google webpage. Does that count in your book as something 'ludicrously irresponsible'? Reply
ejolson The NAS here felt unsafe from the day it was installed. Internally everything runs as root and there is no way to install a standard Linux distribution. Reply
BoxmenSEO Worth checking UPnP on the router too. Synology can open ports on its own through it, so some people end up with the admin page exposed without ever forwarding anything themselves. If you need remote access, a VPN like Tailscale or WireGuard is the easy way around it. Reply
wolfferth regarding tailscale: nothing is safe. https://cybersecuritynews.com/tailscale-ssh-flaws/ Reply
skiwi44 Important to note that the Synology 918+ is a 2017/18 box and as such it will not automatically update to the latest version of DSM. It issued with DSM 6, and will happily stay on DSM 6 until you manually ask it to upgrade to DSM 7. The reason for this is that DSM 7 deprecated a number of DSM 6 software apps. Once upgraded to DSM 7, it will continue to update with the latest patches (including the PHP ones). Secondly, you can setup DSM to automatically update or to manually update. It will nag you to do so, but you must initiate the process yourself. Reply
palladin9479 helper800 said: What exactly do you mean by admin interface on an application web page? I have access to google admin console at work through a google webpage. Does that count in your book as something 'ludicrously irresponsible'? Autocorrect strikes again. It's appliance not application. Appliances are notorious for running very old versions of common software / libraries that are uneconomical to update. This can be made safe through internal safeguards but not internet facing. Reply
ohio_buckeye If I recall as well with synology supposedly you have the ability to set up immutable snapshots. I don’t use one but was researching them. But I think the idea was in a scenario where say someone gained access to your nas you could regain control and have had a role effectively set up that there was a time frame where even an admin couldn’t delete your snapshots. Seems like that would have been useful in this case. Reply
Key considerations
- Investor positioning can change fast
- Volatility remains possible near catalysts
- Macro rates and liquidity can dominate flows
Reference reading
- https://www.tomshardware.com/tech-industry/cyber-security/SPONSORED_LINK_URL
- https://www.tomshardware.com/tech-industry/cyber-security/tech-whizzs-internet-accessible-synology-nas-gets-bit-by-ransomware-attack-from-18-month-old-remote-code-execution-flaw-security-updates-neglected-in-a-series-of-catastrophic-errors#main
- https://www.tomshardware.com/membership
- Elon Musk's SpaceX buying out 418 homes near flagship AI data center, but only if they drop participation in lawsuit
- Bringing the Spark to Europe: Local Intelligence Powers Next Wave of Agents
- Intel leaker reveals Moon Lake chip as a likely replacement for N-series SoCs
- Kazakhstan Expands Compute for Its AI Future
- Grab a Nintendo Switch 2 with a free game for as low as $459 in this limited-time deal
Informational only. No financial advice. Do your own research.