Newsgroup: it.comp.hardware
Titolo: WD invia email

L'email che mi è arrivata da WD. Il link Knowledge Base citato nel testo 
è il seguente:
 
http://links.westerndigital.com/NzEyLUxLVC01OTUAAAF96V4dYY0kRRdxgOaYZltpYxuS5cJviLNuOXklBh0ykSTERI3Id_dpLJLJBVvlKLdEyLTC6Ik=
 
 
che dice di collegare il nas direttamente al computer.
 
Sbaglio o, parlando qui sotto di port forwarding, stanno dicendo che il 
nas è a rischio anche se usato senza passare da mycloud da web o app?
 
Corro a staccare il cavo.
 
 
"
  Western Digital
 
Our records indicate that you registered a My Book Live or My Book Live 
Duo device. To protect your data on the device from ongoing attacks, we 
recommend you disconnect your My Book Live and My Book Live Duo from the 
Internet and access your data locally by following these instructions on 
our Knowledge Base.
 
 
 
Western Digital has determined that some My Book Live and My Book Live 
Duo devices are being compromised through exploitation of a remote 
command execution vulnerability. In some cases, the attackers have 
triggered a factory reset that appears to erase all data on the device.
 
 
 
Our investigation of this incident has not uncovered any evidence that 
Western Digital cloud services, firmware update servers, or customer 
credentials were compromised. As the My Book Live devices can be 
directly exposed to the internet through port forwarding, the attackers 
may be able to discover vulnerable devices through port scanning.
 
 
 
We understand your data is very important. Some customers have reported 
that data recovery tools may be able to recover data from affected 
devices, and we are currently investigating the effectiveness of these 
tools.
 
 
 
We are continuing our investigation and will post the latest information 
about this incident on our Product Security Portal. For further 
assistance, you can contact our Customer Support team.
 
"
 
 
 
-- 
Lanciata dalla NASA la sonda che cercherà vita intelligente sulla Terra.

 nas è a rischio anche se usato senza passare da mycloud da web o app?
 
In tal caso occorre verificare se hai un port forwarding impostato sul 
router, ovviamente escludendo quello per FTP che avrai per forza.
Il port forwarding potresti averlo impostato tu, in tal caso dovresti 
ricordarlo, oppure potrebbe essere impostato dal NAS, ma in questo caso 
e' necessario che UPnP sia abilitato sul router, inoltre lo puoi 
verificare andando nella relativa sezione del router, oltre a 
controllare lo stato di UPnP, nella sezione port forwarding dovrebbero 
comparire le regole se il NAS le ha impostate.

 L'email che mi è arrivata da WD. 
 
 
Mi è arrivata un'altra email, un pò più allarmata della precedente. 
Dicono che il problema riguarda solo le vecchie unità come la mia, che i 
loro servizi cluod non sono compromessi e, con uno slancio di 
generosità, offrono di vendermi una unità nuova. Nessun nuovo firmware.
 
 
 
"Western Digital
 
Western Digital has an important announcement for registered My Book 
Live or My Book Live Duo customers.
 
 
 
Immediately disconnect your My Book Live device from the Internet to 
protect your data from ongoing attacks. You can disconnect the device 
and continue to access your data locally by following these instructions 
on our Knowledge Base.
 
 
 
Some My Book Live devices connected to the Internet are being 
compromised by attackers and in some cases, the attackers have triggered 
a factory reset that appears to erase all data on the device.
 
 
 
We are here to help. Although this product family is no longer sold or 
supported by Western Digital, we know some of our customers have been 
impacted and we want to help. If you have lost your data as a result of 
these attacks, we will provide data recovery services which will be 
available beginning in July.
 
 
 
We know how important your data is to you and are committed to helping 
you protect it. We are launching a trade-in program that will allow you 
to upgrade from your My Book Live to one of our supported My Cloud devices.
 
 
 
We will provide details about how to take advantage of these programs in 
a separate email.
 
 
 
In case you are concerned about other products and services from Western 
Digital, our investigation of this incident has not found any evidence 
that our cloud services, firmware update servers, or customer 
credentials were compromised. The vulnerabilities being exploited are 
limited to the My Book Live devices, which were introduced to the market 
in 2010 and received a final firmware update in 2015. These 
vulnerabilities do not affect our current My Cloud product family.
 
 
 
The latest information about this incident will be available on our 
Product Security Portal. If you need any additional help, please contact 
