Boston Linux & UNIX was originally founded in 1994 as part of The Boston Computer Society. We meet on the third Wednesday of each month at the Massachusetts Institute of Technology, in Building E51.

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Discuss] Mothballing Synology NAS



Nope - I was wrong
This is the one it addresses CVE-2017-16939

On 2/5/18, 10:30 AM, "Discuss on behalf of Joe Polcari"
<discuss-bounces+joe=polcari.com at blu.org on behalf of joe at polcari.com>
wrote:

>I just got an update today which, I think, covers it.
>
>On 2/5/18, 9:33 AM, "discuss-bounces+joe=polcari.com at blu.org on behalf of
>markw at mohawksoft.com" <discuss-bounces+joe=polcari.com at blu.org on behalf
>of markw at mohawksoft.com> wrote:
>
>>This is common across the industry. EMC, Cisco, IBM, and others have said
>>basically the same thing. I would dump synology because its crap, but not
>>because of that.
>>
>>> The Meltdown and Spectre vulnerabilities were publicly disclosed 3
>>> January.
>>>
>>> Synology posted their own security advisory 5 days later on 8 January
>>> listing these vulnerabilities as moderate "because these
>>>vulnerabilities
>>> can only be exploited via local malicious programs." As if there were
>>>no
>>> ways for "local malicious programs" to ever be installed or injected.
>>>
>>> As of 4 February, a month after the initial disclosure, Synology have
>>> yet to release fixes for these vulnerabilities.
>>>
>>> I will be mothballing my Synology NAS box as soon as I get a
>>>replacement
>>> for it up and running. I have the parts. I just need to assemble and
>>> test them, install an OS, and move the drives.
>>>
>>> --
>>> Rich P.
>>> _______________________________________________
>>> Discuss mailing list
>>> Discuss at blu.org
>>> http://lists.blu.org/mailman/listinfo/discuss
>>>
>>
>>
>>_______________________________________________
>>Discuss mailing list
>>Discuss at blu.org
>>http://lists.blu.org/mailman/listinfo/discuss
>
>
>_______________________________________________
>Discuss mailing list
>Discuss at blu.org
>http://lists.blu.org/mailman/listinfo/discuss





BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org