Top tip: Unplug your WD My Cloud boxen – now Western Digital is preparing patches for its My Cloud storage devices because they can be easily hijacked from across the internet or network. At the time of writing, there's no fix, so the best thing to do is firewall or power off My Cloud kit and wait. Whoever can reach one of the at-risk storage system's builtin …
"All listed firmware were 2.XX.YY. Did I miss something?"
Just the bit where these boxes are designed and sold to people who just want to "click and play" and unless the boxes actively check for and warn about updates, then those users will never, ever even think about firmware update, let alone install any.
I've bought one and unboxed it, but I haven't copied any data to it yet. Should I just take it back to Tescos for a full refund? (because it's clearly not fit for the purpose for which it was sold)
I just want a NAS that can back itself up to an external drive. Not fussed about cloudy features or accessing stuff when away from the house.
Incidentally, I bought the WD My Cloud box at Christmas, and it was in January I plugged it in. I didn't copy data across to it because after setting up an account, it refused to accept the password I gave it that day. Looking for a solution, I couldn't access the WD websites, forums or support pages.
It may be just coincidence that the flaws in the article were discovered in January.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
