Slashdot Mirror
Has Google Indexed Your Backup Drive?
itwbennett writes Depending on how you've configured the device, your backup drive may have been indexed by Google, making some seriously personal information freely available online to anyone who knows what they're looking for. Using a few simple Google searches, CSO's Steve Ragan discovered thousands of personal records and documents online, including sales receipts with credit card information and tax documents with social security numbers. In all cases, the files were exposed because someone used a misconfigured device acting as a personal cloud, or FTP (File Transfer Protocol) was enabled on their router.
robots.txt has nothing to do with security or blocking.
Synology had a remote exploit last year that was exploited by ransomware. You're insane to expose your NAS to the internet, even if it apparently has security enabled. Get a VPN capable router.
Yep, I followed that breaking news fairly carefully.
Although in fairness to Synology, it was only exploitable if you didn't actually patch your device (you can do this with a single button click) for quite some time. Then again, in fairness to users, Synology NAS devices didn't have a way to schedule automatic patching for your device like they do now. I think it may have been this incident which prompted them to add that feature, which I was glad to see.
Irony: Agile development has too much intertia to be abandoned now.