back to article Top tip: Unplug your WD My Cloud boxen – now

Western Digital is preparing patches for its My Cloud storage devices because they can be easily hijacked from across the internet or network. At the time of writing, there's no fix, so the best thing to do is firewall or power off My Cloud kit and wait. Whoever can reach one of the at-risk storage system's builtin …

  1. Frumious Bandersnatch

    Top tip: Unplug your WD My Cloud boxen

    Also, save money by not throwing away your used-up disposable razors: instead use them for peeling potatoes!

  2. Anonymous Coward
    Anonymous Coward

    No worries I'm sorted...

    All my WD NAS failed just outside warranty, so no worries there...

    1. 404

      Re: No worries I'm sorted...

      Which model?

      I've had a client's EX4 fail hard twice just out of warranty over the last four years and each time WD extended the warranty another year. Couldn't hurt to call.

  3. Rafael #872397

    Firmware versions

    Maybe It's still too early in the morning, but I checked mine:

    WDMyCloud v04.04.05-101 : Core F/W

    All listed firmware were 2.XX.YY. Did I miss something?

    1. John Brown (no body) Silver badge

      Re: Firmware versions

      "All listed firmware were 2.XX.YY. Did I miss something?"

      Just the bit where these boxes are designed and sold to people who just want to "click and play" and unless the boxes actively check for and warn about updates, then those users will never, ever even think about firmware update, let alone install any.

  4. Yet Another Hierachial Anonynmous Coward

    More IOT Madness......

    And this time from a company who should know better,,,,,,,,,

  5. RonWheeler


    Got two which I rely on heavily. Might have to go back to VPN into home network, avoiding which is one of the reasons i bought these in the first place.

  6. Dave 126 Silver badge

    Any ideas?

    I've bought one and unboxed it, but I haven't copied any data to it yet. Should I just take it back to Tescos for a full refund? (because it's clearly not fit for the purpose for which it was sold)

    I just want a NAS that can back itself up to an external drive. Not fussed about cloudy features or accessing stuff when away from the house.

    1. Dave 126 Silver badge

      Re: Any ideas?

      Incidentally, I bought the WD My Cloud box at Christmas, and it was in January I plugged it in. I didn't copy data across to it because after setting up an account, it refused to accept the password I gave it that day. Looking for a solution, I couldn't access the WD websites, forums or support pages.

      It may be just coincidence that the flaws in the article were discovered in January.

    2. Korev Silver badge

      Re: Any ideas?

      As long as it stays behind your firewall and you trust your family(!) then it should be fine.

      1. Dave 126 Silver badge

        Re: Any ideas?

        Thanks Korev, I'll give it another poke and see it can be configured to run without needing access to WD's cloud.

  7. Gavin Burnett

    I Have One

    Clicked through the setup pages when I bought it.

    Saw that it could be logged into over the internet by default.

    Turned that feature off straight away.

    Am I safe?

  8. RonWheeler

    Looks mine has auto-updated

    now on v04.04.05-101 - was on series 2.something till autoupdate Dec 15th.

  9. Georges

    so I disable remote access I should be safe?

  10. DailyLlama

    They've released an update now

    Patches were released last week to fix these security issues, and some other bugs and stuff.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2022