Hacker News Reader

Comment by NietTim | Hacker News Reader

Synology has a vulnerability in their closed down software which allows this... how is this not something they have control over?

Also, this is not the first time this has happened to Synology hardware. Sure, bigger companies attract more attacks, but this is incredibly bad.

View on HN

See [0]. Also see this[1] and this[2].

[0] https://twitter.com/mikeevangelist/status/496322439740424193

[1] http://www.exploit-db.com/exploits/28243/

[2] http://www.synology.com/en-us/support/security

Have this proven to have been the case? ("a vulnerability in their closed down software which allows this"). Could you give me a link? Thanks!

If you are affiliated with Synology you should disclose that.

I see that your account is only 19 hours old.

No affiliation. I am sure my account is not the only one recently created. Merely a coincidence.

I own a DS411J. Really happy with it.

You can see that there has been hacks of synology products, right?

You are trolling me, yes? Next you will say Crytolocker is a Windows vulnerability (that is not to say that Windows does not have vulnerabilities).

The problem is that Synology has historically not been very proactive at informing and educating their users about security threats, including very specific ones like this. A company that specializes in selling advanced network appliances to novice users and non-IT pros has a certain obligation to those users, IMHO.

PayPal has been described as "a fraud detection company that also transfers money." That's how Synology needs to think of themselves.

Reply on news.ycombinator.com