Re:WD My Book users wake up to find their data deleted
by ineedasername on Thursday June 24, 2021 @08:14PM
(#27625589)
Discontinued in 2015, so no security patches. That's the problem with all of these purpose built IoT devices, a general lack of security updates even when they're still supported, and of course no chance at all if 6 months or a year after you buy it they decide to drop the product line.
[ Parent
| on HN ]
Re:WD My Book users wake up to find their data deleted
by 1-6 on Thursday June 24, 2021 @08:59PM
(#27625920)
"Western Digital has determined that some My Book Live devices are being compromised by malicious software. In some cases, this compromise has led to a factory reset that appears to erase all data on the device. The My Book Live device received its final firmware update in 2015. We understand that our customers’ data is very important. At this time, we recommend you disconnect your My Book Live from the Internet to protect your data on the device. We are actively investigating and we will provide updates to this thread when they are available."
I'm using a WD My Cloud for non-essential data. I was wondering if my unit would be affected as well. As far as I can tell, the latest firmware update completed January 01, 2020. I'm safe for now but I better build something more robust.
Re:WD My Book users wake up to find their data deleted
by kwyjobojoe on Thursday June 24, 2021 @09:53PM
(#27626310)
It runs Linux, and they could have at least opened up the firmware for opensource updating. WDs response to Windows 10 blocking network access because the My Clouds use an old version of SMB is to buy a new one (and trash working equipment) or enable a not particularly secure SMB version in Windows.