Wd old live drives - disconnect from internet now!

[myPinballs]

For anyone with wd ‘internet connected’ off the shelf storage devices or using old wd live drives see this thread.

Not fun reading

https://community.wd.com/t/help-all-data-in-mybook-live-gone-and-owner-password-unknown/268111/145

And many users reporting they had ‘remote features’ disabled but they still got remotely wiped. We see security updates all the time for computer os’s but things like this get forgotten about or dropped by the manufacturer leaving people very vulnerable ..

would you trust any wd internet enabled product now as part of your backup/storage strategy? I wouldn’t and I feel for people that depended on these devices

 

[AlanJ]

Ooooh err.

 

[Arv]

Not read the article yet but no doubt there must be an exploit in the 'wild' to wipe the mbr on that disk.

 

[myPinballs]

Not read the article yet but no doubt there must be an exploit in the 'wild' to wipe the mbr on that disk.

Seems like an attack event using Linux exploits known from as far back as 2015 and upnp . Wd failed to do anything to protect users no surprise..

and also it seems ‘remote access settings ‘ off failed to actually remove the device from being visible externally. Which gave most std users a false sense of protection

 

[Fubar]

A glimpse into the future of internet-connected pinball machines

 

[cyberkryten]

Seems like an attack event using Linux exploits known from as far back as 2015 and upnp . Wd failed to do anything to protect users no surprise..

and also it seems ‘remote access settings ‘ off failed to actually remove the device from being visible externally. Which gave most std users a false sense of protection

Ugh, UPnP.

Basically, allows any device to bypass firewalls and become open and available to anything on the internet.

Turn. It. Off!!!

 

[Pick Holder]

Not good.
Anything that connects online does have a risk.