[Discuss] Mothballing Synology NAS

Greg Rundlett (freephile) greg at freephile.com
Mon Feb 5 15:14:27 EST 2018


At least QNAP offer to one-click secure your installation with a Let's
Encrypt cert through their SSL management plugin - even though they sell
certs through the the same plugin/admin interface.

(ed. note: TLS/SSL does not prevent Spectre / Meltdown - it's just an
indication that QNAP are not 'crap' vendors if you consider Let's Encrypt
free certs the 'right thing' to do.)

Greg Rundlett
https://eQuality-Tech.com
https://freephile.org

On Mon, Feb 5, 2018 at 3:07 PM, Greg Rundlett (freephile) <
greg at freephile.com> wrote:

> I have a QNAP TS-231 (dual bay SMB NAS) https://static.
> myqnapcloud.com/device_model/53466f86d6b82f5cd5295b28?r=1517796001
>
> QNAP offered this security advisory on Jan. 8th
> https://www.qnap.com/en-us/security-advisory/nas-201801-08
>
> And have released firmware upgrades since then ( 2018/01/30 ) QTS
> 4.3.3.0448 Build 20180126
>
> However, they don't mention anything in the release notes yet
> https://www.qnap.com/en/releasenotes/ so I'm unsure if it's "in there".
>
> They advise:
>
>    - Do not install applications from unknown third-party sources.
>    - Do not open or run unknown virtual machine (VM) images on your
>    device.
>    - Do not run unknown software in Container Station.
>
>
>



More information about the Discuss mailing list