381
submitted 5 days ago by alessandro@lemmy.ca to c/pcgaming@lemmy.ca
top 50 comments
sorted by: hot top controversial new old
[-] ProgrammingSocks@pawb.social 32 points 4 days ago

Yet again another reason why I won't buy proprietary systems like this. Make your own, if you know what a NAS is I'm sure you van handle it.

[-] CanadianCarl@sh.itjust.works 8 points 4 days ago

I van handle everything... Honk Honk.

[-] ours@lemmy.world 74 points 5 days ago

Meanwhile Synology keeps updating my ageing NAS.

They may not have the best bang for the buck for hardware but their software package is really well put together.

[-] athairmor@lemmy.world 46 points 5 days ago

Sounds like D-Link is telling people to buy Synology.

[-] DontMakeMoreBabies@lemm.ee 20 points 5 days ago

Or just build your own? I have an eight-bay running OMV that I built using one of these cool little mini-ITX towers.

[-] NanoooK@sh.itjust.works 2 points 4 days ago

The "issue" I have with this case is the SFX format for the PSU, they are rare and more expensive.

[-] DontMakeMoreBabies@lemm.ee 2 points 4 days ago

Not sure what you mean...? I bought a random Corsair PSU from bestbuy and it's working fine.

[-] NanoooK@sh.itjust.works 1 points 4 days ago

I've never said anything about your PSU not working. I've simply commented on the Jonsbo N3 that requires a PSU of SFX form factor. SFX' PSUs are more expensive and less common than the ATX one, that's it.

[-] RagingNerdoholic@lemmy.ca 10 points 5 days ago

Well whaddaya know, you get what you pay for.

That being said, companies should be legally obligated to provide security patches for a minimum number of years.

[-] rbos@lemmy.ca 8 points 5 days ago

My synology box is 8 years old now and still getting patches. I would actually buy it again. Good work.

load more comments (2 replies)
[-] FellowEnt@sh.itjust.works 3 points 4 days ago

I bought my DS212 in 2012. Still going strong after two drive swaps. And now I feel old.

[-] whodatdair@lemmy.blahaj.zone 4 points 5 days ago

I have to say Iโ€™ve also been enjoying my synology - going on almost 7 years since this thing was released and I get security updates regularly still. Will buy again once this thing dies.

[-] DebatableRaccoon@lemmy.ca 51 points 5 days ago

Alright, I'll just buy another one... from a brand that isn't shit.

[-] BCsven@lemmy.ca 32 points 4 days ago* (last edited 3 days ago)

Lenovo did this when they bought Iomega NAS devices. The final firmware before they ended support added google ads to the web admin interface. So now I have it booting Debian and OpenMediaVault, bye bye Lenovo.

[-] nik282000@lemmy.ca 24 points 4 days ago

Welp, looks like I'm changing brands next time I buy a router.

[-] ky56@aussie.zone 9 points 4 days ago* (last edited 4 days ago)

Banana Pi R3 or R64 (OpenWRT). Some DIY assembly required but it will probably last you over a decade.

My favorite part about these is that they are unbrickable. There is no bootloader to permanently corrupt as the firmware that loads the flash chip is in mask memory and the firmware you load from OpenWRT is the bootloader + firmware. So even if the flash chip dies you can use the other flash chip on the board or with soldering skills replace it and re-flash it.

[-] shoulderoforion@fedia.io 42 points 5 days ago

I'm a little bit torn on this one, we're talking 10-15 year old devices here. The number of companies that will continue to produce emergency security patches for their hardware so old and having reached EOL four years ago in 2020 are few and far between. Caveat Emptor most definitely, but if you're someone who likes to keep their tech running forever, you're going to need to get creative, when the manufacturer eventually stops patching. For this particular instance, I'd recommend placing the unit behind a vpn on the lan.

[-] Benjaben@lemmy.world 14 points 5 days ago

Yeah, I mean...what IS "end of life" / "end of support" other than not patching newly found issues, after long enough? Not enough info in the article to indicate any kind of bait and switch or annoyingly short support window, and the support window didn't end recently either. Seems pretty reasonable TBH.

Then again it's a lot of vulnerable devices, and doesn't sound like too hard of a fix. But for all I know they've dismantled their tooling for testing patches on those devices, etc. Would be nice if they addressed it, but I can't exactly condemn them for not.

[-] 2pt_perversion@lemmy.world 11 points 5 days ago

It looks like they just didn't neutralize/sanitize controllable input data so it should be a pretty easy fix. I think if a security researcher gives you a layup by identifying an easily fixable vulnerability a company should just take it, even if the product is old. If for no other reason than it's bad marketing when news articles like this come out.

[-] Benjaben@lemmy.world 3 points 4 days ago

Yeah, I know what you mean, and yep it looked like just input sanitization on a very specific thing. I don't disagree, headlines being headlines, and even just broad benefit vs. overall level of effort seems pretty positive to me from an outsider's perspective.

But then again, issuing a firmware update is also an implicit guarantee that no (unrelated) functionality will degrade, which really needs a degree of testing in order to be a responsible business decision. And then on the optics side, I can see there being a benefit to a hard line in the sand regarding EOL, vs getting into the weeds of determining on a case by case basis what merits violating their own policy, and all the implications such granular judgment calls would entail (although they and all others probably must do something similar, to some degree).

Idk, I don't own much or any of their stuff these days, no real skin in the game, nor do I have any particularly relevant info or opinions on the company. Just rambling lol.

[-] Empricorn@feddit.nl 2 points 4 days ago

Most honest person in this discussion.

[-] Fizz@lemmy.nz 1 points 4 days ago

These are storages though. They should last that long. Just by the fact there is still 60,000 in use is enough reason to patch it.

[-] Mercuri@lemmy.world 25 points 5 days ago
[-] Appoxo@lemmy.dbzer0.com 6 points 4 days ago* (last edited 4 days ago)

Laughs in uGreen NAS with TrueNAS.

[-] TheTechnician27@lemmy.world 30 points 5 days ago

And other reasons why closed-source firmware can go fuck itself.

[-] Feddinat0r@feddit.org 23 points 5 days ago

So now more buying D-link anymore

[-] whyNotSquirrel@sh.itjust.works 24 points 5 days ago

this typo completely changes the sense of your sentence ๐Ÿ˜…

[-] Feddinat0r@feddit.org 4 points 5 days ago

Oh my... Really.... Thanks for pointing it out :) Of course i leave it

load more comments (4 replies)
[-] corroded@lemmy.world 19 points 5 days ago

The article didn't specify how old the affected models are, but any time you use an all-in-one device with proprietary software, you take the risk of this happening.

To some extent, you can't really blame the manufacturers for this, either. They can't reasonably continue maintaining software for their products for an indefinite period of time. As an extreme example, I wouldn't expect the old Linksys wifi router I used in 2004 to still be receiving firmware updates.

My NAS hardware is relatively ancient, but it's regular server hardware running TrueNAS. If TrueNAS suddenly stops getting updates, there's UnRaid, or just Linux. It really goes to show the advantage of using generic hardware with open software.

[-] ramble81@lemm.ee 8 points 5 days ago

you can't really blame the manufacturers for this, either. They can't reasonably continue maintaining software for their products for an indefinite period of time.

Shh, anytime I say this about Windows I get people coming out of the woodwork that say Windows 7 should be supported 15 years later.

load more comments (5 replies)
load more comments (3 replies)
[-] catloaf@lemm.ee 14 points 5 days ago

How is this PC gaming? Are people playing games on the NAS?

I'll allow it (my authority: some jerk that doesn't even have an account on this instance).

Part of Reddit culture was hyper narrow focus on the topics of subreddits. I wouldn't be surprised if the mods of r/samsung_galaxy removed "Overall I like my Pixel better" for being off-topic, even if it was a reply in the comment chain "I have both a Pixel 5 and an S22 and the S22 has the better camera." "Other than the camera which of the two phones do you like best?" 7 day ban, rule 4: mentions another brand of phone without also mentioning a Samsung.

That doesn't happen here on Lemmy as much and I don't mind it. While a NAS isn't necessarily directly a piece of gaming hardware, I think a lot of gamers might have one. Any who stream might save video of their play sessions to a NAS, etc. So I think this article is of peripheral interest to PC gamers.

[-] bear_cube@sh.itjust.works 7 points 4 days ago

A NAS, a router or Storage server all of the are computer. Just use old computer as nas instead of throwing them away.

[-] blackfire@lemmy.world 11 points 5 days ago

Just looked it up and the DNS-320 Version 1.00 is from 2010. I get it on the company side thats old and was a given to be out of date. People who own it should take more mitigations to protect against any unwanted connections. Or use something that doesn't rely on proprietary firmwares like truenas or unraid.

[-] umbraroze@lemmy.world 8 points 4 days ago

Yup, doesn't surprise me.

I also have a NAS box that's out of support. Turned off all of the nifty services and firewalled the shit out of it so it won't be visible outside the LAN even by accident. Will replace it with a FreeBSD box as soon as I get a new hard drive.

[-] aeronmelon@lemmy.world 7 points 5 days ago

โ€œOkay, I found a great NAS made by another company.โ€

D-Link: โ€œNo, wait!โ€

[-] lemmyng@lemmy.ca 7 points 5 days ago

Doesn't matter to the D-Link bean counters. Either case is a non-sale to them. Never mind that they tank whatever is left of their already terrible reputation, all they care about is immediate shareholder revenue generation, and spending money maintaining software for older hardware is a loss to them.

"buy another one you ~~rich~~ motherfuckers"

[-] _sideffect@lemmy.world 4 points 5 days ago

I hate these clickbait headlines

load more comments
view more: next โ€บ
this post was submitted on 10 Nov 2024
381 points (98.5% liked)

PC Gaming

8559 readers
582 users here now

For PC gaming news and discussion. PCGamingWiki

Rules:

  1. Be Respectful.
  2. No Spam or Porn.
  3. No Advertising.
  4. No Memes.
  5. No Tech Support.
  6. No questions about buying/building computers.
  7. No game suggestions, friend requests, surveys, or begging.
  8. No Let's Plays, streams, highlight reels/montages, random videos or shorts.
  9. No off-topic posts/comments, within reason.
  10. Use the original source, no clickbait titles, no duplicates. (Submissions should be from the original source if possible, unless from paywalled or non-english sources. If the title is clickbait or lacks context you may lightly edit the title.)

founded 1 year ago
MODERATORS