back to article Top tip: Unplug your WD My Cloud boxen – now

Western Digital is preparing patches for its My Cloud storage devices because they can be easily hijacked from across the internet or network. At the time of writing, there's no fix, so the best thing to do is firewall or power off My Cloud kit and wait. Whoever can reach one of the at-risk storage system's builtin …

Silver badge

Top tip: Unplug your WD My Cloud boxen

Also, save money by not throwing away your used-up disposable razors: instead use them for peeling potatoes!

1
0
Anonymous Coward

No worries I'm sorted...

All my WD NAS failed just outside warranty, so no worries there...

0
0
404
Silver badge
Pint

Re: No worries I'm sorted...

Which model?

I've had a client's EX4 fail hard twice just out of warranty over the last four years and each time WD extended the warranty another year. Couldn't hurt to call.

0
0

Firmware versions

Maybe It's still too early in the morning, but I checked mine:

WDMyCloud v04.04.05-101 : Core F/W

All listed firmware were 2.XX.YY. Did I miss something?

0
0
Silver badge

Re: Firmware versions

"All listed firmware were 2.XX.YY. Did I miss something?"

Just the bit where these boxes are designed and sold to people who just want to "click and play" and unless the boxes actively check for and warn about updates, then those users will never, ever even think about firmware update, let alone install any.

2
0

More IOT Madness......

And this time from a company who should know better,,,,,,,,,

1
2

Dammit

Got two which I rely on heavily. Might have to go back to VPN into home network, avoiding which is one of the reasons i bought these in the first place.

0
0
Silver badge

Any ideas?

I've bought one and unboxed it, but I haven't copied any data to it yet. Should I just take it back to Tescos for a full refund? (because it's clearly not fit for the purpose for which it was sold)

I just want a NAS that can back itself up to an external drive. Not fussed about cloudy features or accessing stuff when away from the house.

1
0
Silver badge

Re: Any ideas?

Incidentally, I bought the WD My Cloud box at Christmas, and it was in January I plugged it in. I didn't copy data across to it because after setting up an account, it refused to accept the password I gave it that day. Looking for a solution, I couldn't access the WD websites, forums or support pages.

It may be just coincidence that the flaws in the article were discovered in January.

0
0
Silver badge

Re: Any ideas?

As long as it stays behind your firewall and you trust your family(!) then it should be fine.

4
0
Silver badge

Re: Any ideas?

Thanks Korev, I'll give it another poke and see it can be configured to run without needing access to WD's cloud.

0
0

I Have One

Clicked through the setup pages when I bought it.

Saw that it could be logged into over the internet by default.

Turned that feature off straight away.

Am I safe?

0
0

Looks mine has auto-updated

now on v04.04.05-101 - was on series 2.something till autoupdate Dec 15th.

0
0

so I disable remote access I should be safe?

0
0

They've released an update now

Patches were released last week to fix these security issues, and some other bugs and stuff.

0
0

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Forums

Biting the hand that feeds IT © 1998–2018