Backdoor v NAS od společnosti QNAP

V NAS od společnosti QNAP bylo řešeno hned několik bezpečnostních chyb. Zdůraznit lze CVE-2021-28799. V softwaru HBS 3 Hybrid Backup Sync byl odstraněn zabudovaný backdoor (v bezpečnostním upozornění bylo nejprve "Hard-Coded Credentials" později "Improper Authorization"), přes který se šířil ransomware Qlocker šifrující soubory do 7z archivů chráněných heslem.

26.4.2021 15:11 | Ladislav Hagara | Bezpečnostní upozornění

Komentáře

[adsfg]

Backdoor v NAS od noname firmy? Kdo by to byl čekal.
Požadoval bych vrácení peněz a náhradu škody.

[MDavid]

QNAP

noname

Prober se z tý diskotéky.

[ydxf]

QNAP - 1,000 zaměstnanců
D-Link - 2,000 zaměstnanců
TP-Link - 22,000 zaměstnanců
Cisco - 76,000 zaměstnanců

Takže jo, noname. Ale je možný, že jen málo kupuju východní aušus.

[Max]

Podle počtu zaměstnanců se neurčuje, co je a co není noname. Nejdřív si tedy ujasni pojmy .
Zdar Max

[asdfsdfb]

No, je pravda, že o tom, co je noname nerozhoduje ani počet zaměstnanců, ani počet prodaných kusů, ani hlasování na abclinuxu, ale pouze znalost mezi běžnou populací.. :) Bohužel by pak jako noname vyšel asi úplně každý, možná s vyjímkou Cisca.. :)

[Bořivoj Plástev]

Tak, tak. Když NAS tak jedině od Adidas, Sony nebo Coca Coly.

[YX]

Apple, Cisco.

[Max]

Tak se nejdříve podívej, co lidi většinou kupují. Bude to Synology, QNAP a pro totální low cost WD (lidi to kupují, protože znají značku WD, jinak ty low cost jsou z hlediska OS funkcí totální šméčko).
Pokud se podíváš do českých eshopů, tak QNAP mívá i nejširší nabídku. Na trhu je hafec let a je to jedno z mála běžným uživatelům dostupné řešení se ZFS.
Kdo si kupuje menší all-in-one NAS do firmy, tak se většinou rozhoduje mezi Synology nebo QNAPem.
Každopádně ani jedno z těch tří nelze považovat za noname.
Zdar Max

[k3dAR]

touhle "logikou" by Cisco bylo noname, protoze ma nejvice backdooru

[Max]

Nedávno jsem na ně slyšel docela ošklivý hejty od jednoho velkýho implementátora, že mají šíleně zabugovaný IOS. Konkrétně jejich řešení SDWAN.
Zdar Max

[Jendа]

A ti ostatní zmiňovaní samozřejmě taky: D-Link, TP-Link.

[skunkOS]

To si radši postavím NAS sám, a tudíž si vyberu které backdoory a zranitelnosti tam chci.

[amna]

Your blog provided us with important information to work on. You have done a admirable job. satta matka

[amna]

Your blog provided us with important information to work on. You have done a admirable job. matka golden

[amna]

This is a smart blog. I mean it. You have so much knowledge about this issue, and so much passion. You also know how to make people rally behind it, obviously from the responses. 꽁머니 1만

[amna]

That are surely wonderful. A large number of tiny essentials are created obtaining lot of reputation know-how. I am just looking towards an item tons.Delta 8 Vape cartridges for sale online

[바카라사이트]

Your information was very useful to me. That's exactly what I've been looking for 바카라사이트!

[먹튀검증사이트]

I've always told people around me, but this article is really crazy good. You don't know how much I've read this. The blueprint you presented is really creative. Please check out my blog for related information. By: 먹튀검증사이트

[토토사이트]

I've always told people around me, but this article is really crazy good. You don't know how much I've read this. The blueprint you presented is really creative. Please check out my blog for related information. By: [url=https://totobun.com/]토토사이트[/url]

[온라인카지노사이트]

What a nice post! I'm so happy to read this. 온라인카지노사이트 What you wrote was very helpful to me. Thank you. Actually, I run a site similar to you. If you have time, could you visit my site? Please leave your comments after reading what I wrote. If you do so, I will actively reflect your opinion. I think it will be a great help to run my site. Have a good day.

[GG포커]

Nice post. I learn something totally new and challenging on blogs I stumbleupon everyday. It’s always useful to read through content from other authors and use something from other sites. GG포커

[안전놀이터]

Hello, I am one of the most impressed people in your article. 안전놀이터 I'm very curious about how you write such a good article. Are you an expert on this subject? I think so. Thank you again for allowing me to read these posts, and have a nice day today. Thank you.

[먹튀검증]

This really answered my problem, thank you! 먹튀검증

[토토사이트]

Woah! I’m really enjoying the template/theme of this website. It’s simple, yet effective. 토토사이트

[메이저사이트]

Wow, wonderful blog layout! How long have you been blogging for? you made blogging look easy. 메이저사이트

[토토사이트 추천]

My considerable internet investigation has now been paid with beneficial knowledge to share with my classmates and friends. 토토사이트 추천

[food packaging]

Extremely pleasant article food packaging

[ยูฟ่าสล็อต]

An interesting discussion is worth comment. I do believe that you ought to write more about this subject, it might not be a taboo subject but typically people do not speak about such topics. To the next! All the best!! ยูฟ่าสล็อต

[betflixsupervip]

betflik vip ผู้ให้บริการเกมสล็อตชั้นนำ เล่นง่าย จ่ายจริง

[토토사이트 추천]

Looking at this article, I miss the time when I didn't wear a mask. Hopefully this corona will end soon. 토토사이트 추천

[스포츠토토사이트]

Incredible! This blog is just like my previous one! Despite being on a completely different subject, it has a layout and design that are very similar. 스포츠토토사이트

[메이저사이트]

Great goօds fгom ｙou, man. I hage keeρ in mind youг stuff рrevious tо and ʏߋu aгe simply extremely fantastic. 메이저사이트

[토토사이트]

Great info! I recently came across your blog and have been reading along. I thought I would leave my first comment. 토토사이트

[먹튀검증]

Asking questions are in fact good thing if you are not understanding anything fully, however this post provides fastidious understanding even. 먹튀검증

[메이저토토사이트]

Attractive section of content. I simply stumbled upon your web site and in accession capital to say that I acquire actually loved account your weblog posts.메이저토토사이트

[토토사이트]

It is enjoyable, however it is important that you check out this amazing web site =) 토토사이트

[먹튀검증사이트]

Helped to getting in touch with game playing in this posting fully grasp every little thing pertaining to all people =) 먹튀검증사이트

[메이저사이트]

Thank you for your content very helpful for me, another webpage I found and hope you like it 메이저사이트

[ufabet1688]

I really appreciate this wonderful post that you have provided for us. I assure this would be beneficial for most of the people. ufabet1688

[UFAAUTO789]

ufabet789 หมดยุคบ่อนบนดิน รวยได้จริงแค่เล่นออนไลน์

[totosite]

I hope this one affects more widely so that many people could be happier than before. I have something simmilar too. 토토사이트 could also make people feel much better I guess.

[betflixvip]

It was an awesome post to be sure. I completely delighted in understanding it in my noon. Will without a doubt come and visit this blog all the more frequently. A debt of gratitude is in order for sharing. betflixvip

[UFABET168GO]

สมัคร ufabet168 เว็บตรง มั่นคง ปลอดภัย เชื่อถือได้ ถอนเงินได้จริงแน่อน 100% ฝากไม่มีขั้นต่ำ งบน้อยก็เล่นได้ ตอบโจทย์นักเล่นเกมสล็อต

[UFABET168GO]

ทางเข้าufabet168 vip เว็บแทงบอลบริการครบครัน แทงบอลง่าย กำไรงาม

[PGSLOT168Z]

I think your blog might be having browser compatibility issues. When I look at your website in Ie, it looks fine but when opening in Internet Explorer, it has some overlapping. I just wanted to give you a quick heads up! Other then that, terrific blog!pg168vip