<![CDATA[IDK what DSM is but I know some of you nerds like hacking Synology stuff.]]>IDK what DSM is but I know some of you nerds like hacking Synology stuff.

https://www.synology.com/en-global/security/advisory/Synology_SA_26_13

]]>https://forum.fedi.dk/topic/7d9c8a25-2614-403e-972e-b79a080ec60c/idk-what-dsm-is-but-i-know-some-of-you-nerds-like-hacking-synology-stuff.RSS for NodeMon, 05 Oct 2026 03:11:11 GMTFri, 18 Sep 2026 13:28:05 GMT60<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 14:05:03 GMT]]>@christopherkunz @fuzzyfuzzyfungus OMG you're right.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292420560366383https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292420560366383Fri, 18 Sep 2026 14:05:03 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 14:02:52 GMT]]>@cR0w @fuzzyfuzzyfungus This whole toot could be about a NAS or a Cobalt Strike beacon.

]]>https://forum.fedi.dk/post/https://chaos.social/users/christopherkunz/statuses/117292411919910554https://forum.fedi.dk/post/https://chaos.social/users/christopherkunz/statuses/117292411919910554Fri, 18 Sep 2026 14:02:52 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:59:35 GMT]]>@fuzzyfuzzyfungus @christopherkunz I don't know much about them but I hear people talk about using them all the time and I occasionally find a random one on a network for what I am sure is totally legit purposes.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292399027448300https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292399027448300Fri, 18 Sep 2026 13:59:35 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:58:14 GMT]]>@cR0w @christopherkunz Once they started with the drive-locking nonsense that was no longer a question.

Yeah guys, sell dodgy SMB toys; try to play enterprise SAN pricing games. Hell no.

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/117292393756225994https://forum.fedi.dk/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/117292393756225994Fri, 18 Sep 2026 13:58:14 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:57:37 GMT]]>@wdormann I'm glad that's not as common as it used to be but it still frustrates me when vendors do that.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292391299048791https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292391299048791Fri, 18 Sep 2026 13:57:37 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:56:04 GMT]]>@cR0w
I can only assume that this is a case of "roll out the update and wait long enough for the masses to install it before telling anyone about the vulnerabilities it fixes" ? 🤷‍♂️

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117292385221779168https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117292385221779168Fri, 18 Sep 2026 13:56:04 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:54:09 GMT]]>@cR0w The "H" in Synology stands for "Hardened".

]]>https://forum.fedi.dk/post/https://chaos.social/users/christopherkunz/statuses/117292377642676827https://forum.fedi.dk/post/https://chaos.social/users/christopherkunz/statuses/117292377642676827Fri, 18 Sep 2026 13:54:09 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:52:34 GMT]]>@fuzzyfuzzyfungus @christopherkunz I believe you mean "AITA" since you're talking about Synology.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292371460062527https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292371460062527Fri, 18 Sep 2026 13:52:34 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:51:26 GMT]]>@christopherkunz @cR0w Unauth reads mean that you get 200% credit for 'availability' and can construct the 'AIA triad'.

And if there are any unauth writes it's 300% credit, you construct the 'AAA' triad and shiftily try to blame DNS. Doesn't work in IPv6 only environments; but what are the odds?

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/117292366972052742https://forum.fedi.dk/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/117292366972052742Fri, 18 Sep 2026 13:51:26 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:51:24 GMT]]>@cR0w @christopherkunz "it's not like anyone will attach this storage to a network."

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/huronbikes/statuses/117292366863717726https://forum.fedi.dk/post/https://cyberplace.social/users/huronbikes/statuses/117292366863717726Fri, 18 Sep 2026 13:51:24 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:49:50 GMT]]>@christopherkunz The S in NAS stands for security.

Wait, there is an S in NAS. Dammit. Well, it certainly doesn't stand for security.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292360675778110https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292360675778110Fri, 18 Sep 2026 13:49:50 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:48:44 GMT]]>@wdormann

checks date on calendar

checks again

sigh

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292356392149208https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292356392149208Fri, 18 Sep 2026 13:48:44 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:47:57 GMT]]>@cR0w What. *squints* The first one allows _unauthenticated_ attackers to read arbitrary files on a NAS?
I errmm... have questions.

]]>https://forum.fedi.dk/post/https://chaos.social/users/christopherkunz/statuses/117292353254610287https://forum.fedi.dk/post/https://chaos.social/users/christopherkunz/statuses/117292353254610287Fri, 18 Sep 2026 13:47:57 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:46:43 GMT]]>@cR0w
Synology on September 18:

Upgrade to 7.4-90075 or above.

Also Synology on July 24:
We've released Synology DSM 7.4.1-90080

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117292348419121428https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117292348419121428Fri, 18 Sep 2026 13:46:43 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:37:06 GMT]]>@cR0w Synology's Linux flavor for their NAS boxes. Much GUI, very shell and CGI wrapper, wow!

]]>https://forum.fedi.dk/post/https://chaos.social/users/christopherkunz/statuses/117292310618265369https://forum.fedi.dk/post/https://chaos.social/users/christopherkunz/statuses/117292310618265369Fri, 18 Sep 2026 13:37:06 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:32:13 GMT]]>@cR0w Distributed Silliness Module

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/nerdpr0f/statuses/117292291448943656https://forum.fedi.dk/post/https://infosec.exchange/users/nerdpr0f/statuses/117292291448943656Fri, 18 Sep 2026 13:32:13 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:29:26 GMT]]>@hrbrmstr That's when it gets added to the KEV. 🫦

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292280498665202https://forum.fedi.dk/post/https://infosec.exchange/users/cR0w/statuses/117292280498665202Fri, 18 Sep 2026 13:29:26 GMT<![CDATA[Reply to IDK what DSM is but I know some of you nerds like hacking Synology stuff. on Fri, 18 Sep 2026 13:28:50 GMT]]>@cR0w thought for a second you accidentally left out the B 🙃

]]>https://forum.fedi.dk/post/https://mastodon.social/users/hrbrmstr/statuses/117292278110280645https://forum.fedi.dk/post/https://mastodon.social/users/hrbrmstr/statuses/117292278110280645Fri, 18 Sep 2026 13:28:50 GMT