Western Digital My Cloud Service Hacked, Customer Data Under Ransom

[DeathtoGnomes]

I see they opened the email and clicked.

For really important stuff I go out into the woods with ski masks, night vision goggles, and a verity of musical tambourines for tapping out encrypted Morse code

smoke signals by the early adopters.

 

[ymbaja]

Yes generally speaking the big boys are much much better at it than anyone except perhaps doomsday preppers, never had any issues with my Gmail/google/Hotmail/outlook/AWS accounts. So in that they "can be" trusted a lot more, but having this data physically near you feels more "secure" for most people out there ~ even though in reality it's not.

While I agree the difference is centralized data is a huge target for attackers vs some random drive at “Bob’s” house.

 

[Minus Infinity]

Bit fucking late to be proactive after the hack don't you think.

 

[Tsukiyomi91]

local data vault/archive >>>> any "cloud" services. Putting your own personal data on a cloud storage is NEVER a good idea, not to mention putting your trust on WD's track record of piss-poor management.

 

[AusWolf]

View attachment 291519

Exactly!

What have I always said about never storing precious and personal data on the cloud? Mmm... I can't remember.

 

[bobbybluz]

There's a very good reason why I have around 30 external HDD's full of data and another 5 with only backup .iso's of operating systems on them.

 

[Bones]

And yet another example and reason why I have never before or ever will trust "The Cloud" since it can be hacked with all your shit taken or trashed - Maybe both.
And that's just the data itself, no telling what else they can do after they go through it all.

While I agree the difference is centralized data is a huge target for attackers vs some random drive at “Bob’s” house.

Don't be so complacient "Bob"..... Even your shit has value to a hacker and could be taken for about any reason you can put a name to - You fit a certain demographic type, the hacker is just bored that day, maybe looking for an E-Z target to help pad their quota count of the day..... Hacker's rage and you just wandered into the line of fire with a simple, innocent mouse click over at you favorite pron site......Who really knows?

TBH all they need is just one to do it and if they've got it well.... Guess what?

Yep - They DID take it from you Bob and you "took it" from them too!!

 

[SamirD]

I'm over 70. I still pay for most things by check, write actual snail mail letters and make plenty of telephone calls. Growing up around professional criminals made me very aware of security related things.

Yep, there's a lot of 'if it isn't broken, don't try to fix it' that the young kids with their stupidly named companies and 'white board' ideas need to learn.

My mom and dad once met and attended a security seminar by the guy who was the subject of the movie 'Catch Me If You Can'. The stuff they said he told them about how to avoid scams was mindblowing at the time--stuff you would never think of and yet was dead obvious.

Anything that's connected to the internet is at risk, if you really have something that important just keep it off the net.

Yep--'the only winning move is not to play'

Remembers investing building my own OMV based home DIY NAS.

Reads this and thinks it pays off being paranoid.

It always helps to error on the side of caution.

For really important stuff I go out into the woods with ski masks, night vision goggles, and a verity of musical tambourines for tapping out encrypted Morse code.

Funniest thing I've read this week!

People want everything accessible 24/7 from everywhere, so this is what we get. Until there's an arm long enough to reach out & throttle the perpetrators, this is just going to keep happening. Its a lot easier for them to find exploits than it is to design a system with no exploits when it comes to data & computer networks.

And these are facts that people really need to digest when determining what they think is 'safe'. The last statement about how it is easier to find exploits than design a system with no exploits should really stand out.

While I agree the difference is centralized data is a huge target for attackers vs some random drive at “Bob’s” house.

Yep, and the bigger the payoff, the greater will be the effort. It's why bigger companies usually get in the crosshairs before smaller ones do.

 

[R-T-B]

There are ways to setup a truly secure cloud, but due to legal compliance issues, no big provider really uses them.

That makes all this possible.

 

[lemonadesoda]

Everybody, and I mean EVERYBODY, who is a member of this forum, has the competence to set up a home or SOHO NAS. And give it no access to/from the internet. If they want remote features, then it is equally easy to set up an air-gapped backup of said NAS.

The only thing holding most people back is cantbebotheredness. A terrible illness plaguing the lazy.

Dare I say it? I've got a foot in both camps. But this article, thread and my comment, will hopefully kick me up the backside to get that new server and NAS installed that was on my to-do list since December?

 

[AusWolf]

Everybody, and I mean EVERYBODY, who is a member of this forum, has the competence to set up a home or SOHO NAS. And give it no access to/from the internet. If they want remote features, then it is equally easy to set up an air-gapped backup of said NAS.

The only thing holding most people back is cantbebotheredness. A terrible illness plaguing the lazy.

Dare I say it? I've got a foot in both camps. But this article, thread and my comment, will hopefully kick me up the backside to get that new server and NAS installed that was on my to-do list since December?

I don't trust home servers, either. When I need data portability, USB sticks and external hard drives are fastest and most secure way.

 

[lemonadesoda]

I don't trust home servers,

What don't you trust? The server/NAS or the firewall between it and your WAN?

But I do agree, for "planned jobs" having a USB/external HDD is the fastest, simplest, and safest way to go

 

[trsttte]

The only thing holding most people back is cantbebotheredness. A terrible illness plaguing the lazy.

There's another reason, money. It's cheaper to get bad solutions like this WD cloud even if not by much.

 

[R-T-B]

Everybody, and I mean EVERYBODY, who is a member of this forum, has the competence to set up a home or SOHO NAS.

You have much more confidence than me.

 

[AusWolf]

What don't you trust? The server/NAS or the firewall between it and your WAN?

The firewall. If a device is connected to the internet, it can be hacked.

 

[Steevo]

My cloud backup is a 4TB drive in a safe, and burned DVD copies of extremely important things, and some online files.

 

[lemonadesoda]

You have much more confidence than me.

I have a little hope and faith. With experience you learn that most people don't have any competence whatsoever and are good for nothing but bread, circus, and enslavement. But that's a different story.

Let's rephrase it: with a how-to, most people on this forum should be able to follow the instructions. Whether they will choose to invest their time and do it properly is another matter...