News for hackers. Stuff that matters.
Re:WD My Book users wake up to find their data deleted by userbinator on Thursday June 24, 2021 @09:36PM (#27626209)
There are countless systems out there which are far older and also more secure. Age is of zero relevance except to those who propagate forced obolescence, mindless consumption, and generation of massive amounts of e-waste. This "update mentality" is a cancer itself. Especially when this is supposed to be a simple device.

That said, relying on the same credentials for a long time is more problematic. My bet is on credentials being bruteforced, especially if many people have left them at their default or used easily guessable ones.

Re:WD My Book users wake up to find their data deleted by davidcbc on Thursday June 24, 2021 @09:47PM (#27626286)
Age is of zero relevance for hard drives?
Re:WD My Book users wake up to find their data deleted by bigiain on Thursday June 24, 2021 @10:07PM (#27626410)
Also - age is of zero relevance to internet connected linux devices?

I rely on many "8-10 year old device that hadn’t received a security update in 6+ years". My coffee machine. My fridge. My hifi. All my motorcycles. None of them run linux and are directly connected to the internet.

Re:WD My Book users wake up to find their data deleted by haswell on Thursday June 24, 2021 @11:23PM (#27626810)
But think about this from the perspective of the average buyer/user. Hard drives are traditionally "local". Local = safe. Now, a new generation of drives are introduced with this awesome capability to get access to data remotely. "Cool", they think. They don't understand how the Internet works, and so they don't really see the issue, or if they have a basic understanding of networks they might understandably believe that "it's behind the router, so it's safe".
Re:WD My Book users wake up to find their data deleted by slavik81 on Friday June 25, 2021 @03:17AM (#27628002)
The remote access feature was disabled by default. For many people, the only reason it was accessing the internet was so it could get security updates.