Re:Hackers exploited 0-day, not 2018 bug, to mass-wipe My Bo...
by beerandt on Tuesday June 29, 2021 @12:51PM
(#27678500)
I tried to start implementing separate lans/vlans at home for trusted and untrusted devises. But quickly realized I don't really trust any of it, save my personal laptop and a few of the servers I run.
[ Parent
| on HN ]
Re:Hackers exploited 0-day, not 2018 bug, to mass-wipe My Bo...
by kova12 on Tuesday June 29, 2021 @03:05PM
(#27680298)
... and after a while, when you realize the hole goes deeper, you stop trusting these as well
Re:Hackers exploited 0-day, not 2018 bug, to mass-wipe My Bo...
by beerandt on Tuesday June 29, 2021 @03:40PM
(#27680767)
It's pretty much devolved to users instead of devices:
1) devices only I have write access to 2) devices others have access to 3) iot (which are basically users I've never met)
At least I can segregate me running a port scan from my laptop, to a family members phone running a portscan from some spyware game they downloaded.
I have a good idea how much I can trust my own devices, even if my phone's baseband OS is sending an unstoppable stream of location data and super cookies.
But this NAS/cloud connected storage thing is a bit of a oddball, since you're supposed to trust it with your data, but can't trust it with unfettered network access.