Live data from Hacker News

WD My Book users wake up to find their data deleted

arstechnica.com

131–140 of 701 posts

Re: WD My Book users wake up to find their data deleted

#131

"The My Book Live device received its final firmware update in 2015." A unpatched in 6 years linux device directly connected to the internet? What could possibly go wrong? "There is no IoT, there is only the internet of unpatched linux boxes."

doesn't appear to be a directly connected to the internet problem, even NAT'd stuff wiped data.

Re: WD My Book users wake up to find their data deleted

#132
post #101

Earlier quoted context omitted.

>Very interested to see what the root cause ends up being The article says: >Multiple users reported that the data loss coincided with a factory reset that was performed on their devices. One person posted a log that showed unexplained behavior occurring on Wednesday: I'm leaning more towards 0day than "software bug", mainly because I can't really think of a reason why a bug would cause the factory reset to get trigg…

> internet connected NAS I am guessing this is normal? My data backups are offline. The idea of making my backups read/write on the internet seems insane.

For certain notions of "read/write", the risk can be lower. You might make backups to storage, but not have permission to delete files. Or when you delete files, they are kept for a certain safety window (e.g. if you delete a file on June 24, the file is instead moved and can be restored any time before July 24, at which point it is purged).

Re: WD My Book users wake up to find their data deleted

#133

Read this, then checked my old My Book Live. Sure enough... everything's gone. I just used it for continuous laptop backups over my LAN, so unless one of them crashes tonight, I should be good. But, this will certainly give me pause when considering WD products, and this type of product in particular. This is very bad, WD! Are your other products also vulnerable in this way? Why should anyone ever again trust your co…

> Why should anyone ever again trust your company to keep their data safe?

Because if you need a hard drive, your options are pretty much Western Digital, Seagate, and Toshiba, and they've all had their own problems.

Re: WD My Book users wake up to find their data deleted

#134
post #26

Earlier quoted context omitted.

> Cloud backup is a stupid idea. At any moment it could go dark, for any reason, and you have no recourse. Might as well bare your throat and hand some random stranger a razor. I really disagree - physical storage in your home is the common alternative for a lot of consumer users - and that physical storage will involve maybe unplugging your external hard drive between backups - but otherwise never checking for the c…

> cloud backups are likely going to be more reliable I've seen enough HackerNews articles: 1. My account got deleted and I can't find a human to talk to and all my pictures going back 20 years are gone! 2. A hacker guessed my password and deleted my online presence! It's all gone! 3. My storage provider went bust and all my stuff is gone!

> I can't find a human to talk to and

Obviously customer support is a finite resource.

That's why companies need to start paid/premium customer support: when you lost access to your account, you should be able to pay 10, 100, 1000 of money to talk to a real person who understand how the system works and where there a mistake was made.

Like a hacker stole your account and you cannot take it back? A special person will to do a background check (e.g. call your employer) to verify that you is actually you.

Robot erroneously blocked your account because of misclassified spam-like activity? Your account is restored, and you are fully refunded.

Re: WD My Book users wake up to find their data deleted

#136
"Western Digital has determined that some My Book Live devices are being compromised by malicious software. In some cases, this compromise has led to a factory reset that appears to erase all data on the device. The My Book Live device received its final firmware update in 2015. We understand that our customers’ data is very important. At this time, we recommend you disconnect your My Book Live from the Internet to protect your data on the device. We are actively investigating and we will provide updates to this thread when they are available." - Western Digital

Re: WD My Book users wake up to find their data deleted

#137

"The My Book Live device received its final firmware update in 2015." A unpatched in 6 years linux device directly connected to the internet? What could possibly go wrong? "There is no IoT, there is only the internet of unpatched linux boxes."

doesn't appear to be a directly connected to the internet problem, even NAT'd stuff wiped data.

That's not how C2 servers work. Connected to the internet means connected to the internet.

Re: WD My Book users wake up to find their data deleted

#138

"The My Book Live device received its final firmware update in 2015." A unpatched in 6 years linux device directly connected to the internet? What could possibly go wrong? "There is no IoT, there is only the internet of unpatched linux boxes."

doesn't appear to be a directly connected to the internet problem, even NAT'd stuff wiped data.

By definition "directly connected to the internet" means if a device can on its on accord, direct requests to an entity, ask it a question, and act upon it is true. From what I understand these WD boxes go to a management service in the cloud. and were told they should factory reset. Whether something is pull-only (as in this case) or push (say allows HTTP or SSH access from a random on the internet) is irrelavnt if either result in unauthorised activity on a box in your home.

Re: WD My Book users wake up to find their data deleted

#139

Earlier quoted context omitted.

> cloud backups are likely going to be more reliable I've seen enough HackerNews articles: 1. My account got deleted and I can't find a human to talk to and all my pictures going back 20 years are gone! 2. A hacker guessed my password and deleted my online presence! It's all gone! 3. My storage provider went bust and all my stuff is gone!

And: 4. My crypto exchange disappeared/went bankrupt/was a scam and now my crypto is all gone. I swear, some people never learn.

Don't be silly! That could never happen to my crypto exchange

Re: WD My Book users wake up to find their data deleted

#140

> “It is very scary and devastating that someone can do factory restore on my drive without any permission granted from the end user,” one user wrote. I'll say again: backup drives must have a physical write enable switch on them. To all the people who argue against this - just you wait till it happens to you! Not having multiple backups is also a very bad idea. One day my 8T drive slipped out of my hand and smacked…

Any single backup is a stupid idea. Combine them, and you've got a great backup solution. Why would I keep important data in one physical location?

My house could burn down tomorrow, but I'd still have my cloud backups. My cloud backups could roast in a fire tomorrow, but I'd still have my local backups. And probably several other cloud backups.

If you put all your eggs in one backup, sooner or later, you're going to get screwed.

Post reply on HN