Hacker News Reader

Comment by MR4D | Hacker News Reader

Probably common, but connecting that function to the web (via PHP in this case) is pretty stupid.

I would think it would run a firmware function to do the resetting, and if not that, then some sort of sell script that is not callable by their web interface.

Due to all this stupidness, my weekend is going to be consumed by trying to find out if my Synology has something stupid in it (assuming I can even figure that out).

So my trust in "personal" network storage devices has been shattered. Hopefully Synology is not as dumb.

View on HN

Just set up an old computer to be your nas and call it a day. Would be much quicker, and you can be much more confident it does only what you want it to do

My son has my old computer for playing fortnight. :)

So I'm reading up on TrueNAS to see if that's the way for me to go.

Frankly, I love my Synology, but it at EOL (can't do the new version of DSM) but my needs are pretty simple, hence either straight Linux or TrueNAS seem to be my best options.

I do- it was just a curiosity given the topic.

I tried to start implementing separate lans/vlans at home for trusted and untrusted devises. But quickly realized I don't really trust any of it, save my personal laptop and a few of the servers I run.

intel/amd me running second own os on everything. One malicious lib, GG security theatre.

... and after a while, when you realize the hole goes deeper, you stop trusting these as well

It's pretty much devolved to users instead of devices:

1) devices only I have write access to 2) devices others have access to 3) iot (which are basically users I've never met)

At least I can segregate me running a port scan from my laptop, to a family members phone running a portscan from some spyware game they downloaded.

I have a good idea how much I can trust my own devices, even if my phone's baseband OS is sending an unstoppable stream of location data and super cookies.

But this NAS/cloud connected storage thing is a bit of a oddball, since you're supposed to trust it with your data, but can't trust it with unfettered network access.

Reply on news.ycombinator.com