D-Link refuses to patch a security flaw on over 60,000 NAS devices — the company instead recommends replacing legacy NAS with newer models
D-Link refuses to patch a security flaw on over 60,000 NAS devices — the company instead recommends replacing legacy NAS with newer models
It's time to buy a new NAS.
Yet again another reason why I won't buy proprietary systems like this. Make your own, if you know what a NAS is I'm sure you van handle it.
I van handle everything... Honk Honk.
Meanwhile Synology keeps updating my ageing NAS.
They may not have the best bang for the buck for hardware but their software package is really well put together.
Sounds like D-Link is telling people to buy Synology.
Well whaddaya know, you get what you pay for.
That being said, companies should be legally obligated to provide security patches for a minimum number of years.
I bought my DS212 in 2012. Still going strong after two drive swaps. And now I feel old.
I have to say I’ve also been enjoying my synology - going on almost 7 years since this thing was released and I get security updates regularly still. Will buy again once this thing dies.
Alright, I'll just buy another one... from a brand that isn't shit.
Welp, looks like I'm changing brands next time I buy a router.
Banana Pi R3 or R64 (OpenWRT). Some DIY assembly required but it will probably last you over a decade.
My favorite part about these is that they are unbrickable. There is no bootloader to permanently corrupt as the firmware that loads the flash chip is in mask memory and the firmware you load from OpenWRT is the bootloader + firmware. So even if the flash chip dies you can use the other flash chip on the board or with soldering skills replace it and re-flash it.
Lenovo did this when they bought Iomega NAS devices. The final firmware before they ended support added google ads to the web admin interface. So now I have it booting Debian and OpenMediaVault, bye bye Lenovo.
And other reasons why closed-source firmware can go fuck itself.
Laughs in TrueNAS
Laughs in uGreen NAS with TrueNAS.
So now more buying D-link anymore
this typo completely changes the sense of your sentence 😅
Oh my... Really.... Thanks for pointing it out :) Of course i leave it
The article didn't specify how old the affected models are, but any time you use an all-in-one device with proprietary software, you take the risk of this happening.
To some extent, you can't really blame the manufacturers for this, either. They can't reasonably continue maintaining software for their products for an indefinite period of time. As an extreme example, I wouldn't expect the old Linksys wifi router I used in 2004 to still be receiving firmware updates.
My NAS hardware is relatively ancient, but it's regular server hardware running TrueNAS. If TrueNAS suddenly stops getting updates, there's UnRaid, or just Linux. It really goes to show the advantage of using generic hardware with open software.
you can't really blame the manufacturers for this, either. They can't reasonably continue maintaining software for their products for an indefinite period of time.
Shh, anytime I say this about Windows I get people coming out of the woodwork that say Windows 7 should be supported 15 years later.
Don't you know that it's entirely unreasonable to expect your users to have hardware that's a standard feature on any machine made in the last ten years, that can be added to existing systems for around $30 and a free card slot? /s
I don't think I'll ever understand the insistence that a TPM module is a bridge too far.
I expect security patches for the tires on my Model T. Ford is still around, so what's the ploblem?
You're right in saying that these devices are basically ancient, and also right about why you should never use all-in-ones for anything that you would want to last more than a couple of years.
http://support.dlink.com.au/download/download.aspx?product=DNS-320 The age of the devices:
Firmware: 1.00
Hardware: A1
Date: 2010/9/7
First DNS-320 firmware releaseFor those kind of devices, the manufacturer should be required to make it possible to easily load a third-party firmware when they declare a device as obsolete.
I understand it's not financially viable to support a device beyond a certain threshold, but there's likely a community behind those that are willing to keep these devices alive for a while longer, with the benefit of reducing the amount of ewaste.
How is this PC gaming? Are people playing games on the NAS?
I'll allow it (my authority: some jerk that doesn't even have an account on this instance).
Part of Reddit culture was hyper narrow focus on the topics of subreddits. I wouldn't be surprised if the mods of r/samsung_galaxy removed "Overall I like my Pixel better" for being off-topic, even if it was a reply in the comment chain "I have both a Pixel 5 and an S22 and the S22 has the better camera." "Other than the camera which of the two phones do you like best?" 7 day ban, rule 4: mentions another brand of phone without also mentioning a Samsung.
That doesn't happen here on Lemmy as much and I don't mind it. While a NAS isn't necessarily directly a piece of gaming hardware, I think a lot of gamers might have one. Any who stream might save video of their play sessions to a NAS, etc. So I think this article is of peripheral interest to PC gamers.
A NAS, a router or Storage server all of the are computer. Just use old computer as nas instead of throwing them away.
Just looked it up and the DNS-320 Version 1.00 is from 2010. I get it on the company side thats old and was a given to be out of date. People who own it should take more mitigations to protect against any unwanted connections. Or use something that doesn't rely on proprietary firmwares like truenas or unraid.
Yup, doesn't surprise me.
I also have a NAS box that's out of support. Turned off all of the nifty services and firewalled the shit out of it so it won't be visible outside the LAN even by accident. Will replace it with a FreeBSD box as soon as I get a new hard drive.
Opensource after EOL. Vote for parties that care, write to your representatives, sign petitions, and vote with your wallet.
“Okay, I found a great NAS made by another company.”
D-Link: “No, wait!”
Doesn't matter to the D-Link bean counters. Either case is a non-sale to them. Never mind that they tank whatever is left of their already terrible reputation, all they care about is immediate shareholder revenue generation, and spending money maintaining software for older hardware is a loss to them.
"buy another one you
richmotherfuckers"