Hacker News Reader

Comment by Fastidious | Hacker News Reader

I do not think Synology has much to do what it happen. A weak password, an out-of-date Synology software and/or an incorrect setup are all caused by the user.

Synology produces very good products at very affordable prices.

View on HN

Synology has a vulnerability in their closed down software which allows this... how is this not something they have control over?

Also, this is not the first time this has happened to Synology hardware. Sure, bigger companies attract more attacks, but this is incredibly bad.

Have this proven to have been the case? ("a vulnerability in their closed down software which allows this"). Could you give me a link? Thanks!

If you are affiliated with Synology you should disclose that.

I see that your account is only 19 hours old.

No affiliation. I am sure my account is not the only one recently created. Merely a coincidence.

I own a DS411J. Really happy with it.

You can see that there has been hacks of synology products, right?

You are trolling me, yes? Next you will say Crytolocker is a Windows vulnerability (that is not to say that Windows does not have vulnerabilities).

The problem is that Synology has historically not been very proactive at informing and educating their users about security threats, including very specific ones like this. A company that specializes in selling advanced network appliances to novice users and non-IT pros has a certain obligation to those users, IMHO.

PayPal has been described as "a fraud detection company that also transfers money." That's how Synology needs to think of themselves.

See [0]. Also see this[1] and this[2].

[0] https://twitter.com/mikeevangelist/status/496322439740424193

[1] http://www.exploit-db.com/exploits/28243/

[2] http://www.synology.com/en-us/support/security

Reply on news.ycombinator.com