Re:WD My Book users wake up to find their data deleted
by zamadatix on Friday June 25, 2021 @07:58AM
(#27629631)
> Huh. This is a huge security flaw and they decided to not patch it. Winning is patching this.
"Winning" isn't "gee if we could just say we'll patch every discontinued product forever and imagine it had no downsides wouldn't that be great" - that's known as "dreaming".
Re:WD My Book users wake up to find their data deleted
by ec109685 on Friday June 25, 2021 @11:48PM
(#27638912)
If a company releases an internet connected appliance, they need to support the software for at least the half-life of the underlying hardware.
Having a vendor support patch releases indefinitely would not be a huge burden for Western Digital.
In this case, it was obvious errors in their PHP application.
This is so disingenuous (from the first report of this flaw):
“Western Digital takes the security of our customers’ data seriously, and we provide security updates for our products to address issues from both external reports and regular security audits.”