So what has everybody been doing since last February??
Vulnerabilities in a network attached storage (NAS) devices made by QNAP Systems create a potential means for hackers to steal data and passwords, execute commands or drop malware on vulnerable kit, say security researchers. Researchers at F-Secure claim they have found a series of weaknesses in the firmware update process of …
Wednesday 18th January 2017 14:00 GMT Hans 1
Wednesday 18th January 2017 17:46 GMT Anonymous Coward
Re: Don't update!!!! No, don't update!!!!
I guess off topic, but I like a lot of the little boxes these 1 off NAS machines come in, I kust never like the hardware they run. I've seen $500 boxes that look neat, but they basically are running a raspi. A lot of them don't even list if the RAM is ECC, which seems trivial to list. I keep an eye out for gutted ones on Ebay just for the cases.
Wednesday 18th January 2017 20:51 GMT Youngone
Wednesday 18th January 2017 23:55 GMT John Smith 19
Another network connected appliance mfg that doesn't think it's their problem.
I'm sort of amazed there isn't some little company that can supply a turn key verified package that can handle this. Accept update requests securely, process them, send them out and check they've been installed properly.
Who'd pay for something like that?
Who should pay for something like that is anyone too f**king incompetent to do it themselves.