Bruno Ferreira Social Links Navigation Contributor Bruno Ferreira is a contributing writer for Tom's Hardware. He has decades of experience with PC hardware and assorted sundries, alongside a career as a developer. He's obsessed with detail and has a tendency to ramble on the topics he loves. When not doing that, he's usually playing games, or at live music shows and festivals.
palladin9479 Exposing any admin interface to the web is a very VERY bad idea. That admin interface being an application web page makes it a ludicrously irresponsible bad idea. Reply
helper800 palladin9479 said: Exposing any admin interface to the web is a very VERY bad idea. That admin interface being an application web page makes it a ludicrously irresponsible bad idea. What exactly do you mean by admin interface on an application web page? I have access to google admin console at work through a google webpage. Does that count in your book as something 'ludicrously irresponsible'? Reply
ejolson The NAS here felt unsafe from the day it was installed. Internally everything runs as root and there is no way to install a standard Linux distribution. Reply
BoxmenSEO Worth checking UPnP on the router too. Synology can open ports on its own through it, so some people end up with the admin page exposed without ever forwarding anything themselves. If you need remote access, a VPN like Tailscale or WireGuard is the easy way around it. Reply
wolfferth regarding tailscale: nothing is safe. https://cybersecuritynews.com/tailscale-ssh-flaws/ Reply
skiwi44 Important to note that the Synology 918+ is a 2017/18 box and as such it will not automatically update to the latest version of DSM. It issued with DSM 6, and will happily stay on DSM 6 until you manually ask it to upgrade to DSM 7. The reason for this is that DSM 7 deprecated a number of DSM 6 software apps. Once upgraded to DSM 7, it will continue to update with the latest patches (including the PHP ones). Secondly, you can setup DSM to automatically update or to manually update. It will nag you to do so, but you must initiate the process yourself. Reply
Key considerations
- Investor positioning can change fast
- Volatility remains possible near catalysts
- Macro rates and liquidity can dominate flows
Reference reading
- https://www.tomshardware.com/tech-industry/cyber-security/SPONSORED_LINK_URL
- https://www.tomshardware.com/tech-industry/cyber-security/tech-whizzs-internet-accessible-synology-nas-gets-bit-by-ransomware-attack-from-18-month-old-remote-code-execution-flaw-security-updates-neglected-in-a-series-of-catastrophic-errors#main
- https://www.tomshardware.com/membership
- Fake PS5 emulators are being used to steal gamers' passwords
- Pioneers Across Europe Deploy NVIDIA Earth-2 Open Models to Power Real-World Weather and Climate Prediction
- Score a huge $1,250 saving on this Alienware gaming PC with an RTX 5070 Ti and 32GB DDR5 right now
- Taiwan working on autonomous drone swarms to counter China’s increasingly aggressive grey-zone military tactics
- Elon Musk's SpaceX buying out 418 homes near flagship AI data center, but only if they drop participation in lawsuit
Informational only. No financial advice. Do your own research.