Are Synology NAS Drives Safe in 2022?

[@xTonusx]

Yes please do a video on the security differences between Synology and QNAP and ways to mitigate or fix to better secure our NAS on either platform.

[@robn135]

Gents, this "security series" is wonderful. I've spent a number of months vetting hardware specs and comparing software offerings in my NAS purchasing decision process. The security component has been a nagging thought on the backburner of my mind. A QNAP vs. Synology system defaults video would certainly be appreciated (I will guarantee 1 view)!

[@nascompares]

Thanks man. Appreciate the props

[@TopDog8762]

I have been researching NAS for weeks. What I found there are only a very few channels that provide useful information. Just my opinion, this channel and one other. Videos that are manufacturer specific, targeting subjects like security (this video), hardware and software are most useful. Not only for someone that already has one of these systems but someone like myself researching a purchase. Thank You for useful and entertaining videos that actually help people. Well done Gentlemen.

[@nascompares]

Cheers buddy. Genuinely appreciate your kind words man.

[@wisenber]

I've found the biggest threat for small businesses on Synology is SMB and using it as a shared drive. Anything that can hit the Windows PC or Server passes directly to the NAS. The same applies to backing your server up to the NAS. Learned that the hard way.

[@reread2549]

I’m an old Cisco - MS tech and I use synology Nas from my home because it gives me seamless and secure access for when I travel or work from home. I run a DS 218+ with upgraded ram as my archive NAS and as my Web server. My main NAS is the DS220+ with upgraded ram and I use that to run my virtual Ubuntu server and my VPN server. I run a third NAS DS118 as a hyper back up server for the DS 220+. The synology software and services have been pretty flawless and my power usage via CPU cycle per watt and storage is a huge improvement over running dedicated MS and Linux Servers at home. It doesn’t matter if I’m running a Mac, PC, or a Linux desktop on the LAN. I never have a problem with file sharing or back ups. I VPN with my iOS devices when I’m traveling and save money on not having to pay for a monthly subscription for a VPN service. I guess for me as a Synology fan boy is again the quality of the software and hardware and the Synology services that make it just easy to operate. So far the total cost of ownership has been very low compared to the return on features and function. Thanks for the video guys

[@josephmoreira7017]

Fantasastic segment. As a novice to NAS etc this was very eye opening. I would love to see a video on how to make our synlogy or other NAS safe. Thanks gents

[@RJ_Cormac]

I'm surprised Synology hasn't had a security threat while supporting DSM6 and DSM7. I'm genuinely shocked DSM6 hasn't been removed due to a security threat.

[@jonathonphillips5880]

A QVPN setup and enabled it to run the whole network would be a great video. I know I would appreciate it for your qnap series.

[@DavidM2002]

Ah, the Human Factor. A friend who works at HP client support refers to this as "PICNIC".... Problem In Chair, Not In Computer.

[@bens5186]

Bloody great story at the start, got a big laugh from me. Made my day. MORE quick stories would be great. Even if you add them to the news of the week.

[@tiagoj8020]

I own a DS1019 and yeah, I had to funnel down to turn some things on that weren't on by default. I'm a newbie and I hope I didn't screw something up. So far so good... Kinda wish it was easier to setup.

[@charleswalsh489]

I am interesting in diving in to the new update with you.

[@fransdigitalmediaservices3912]

Are all your security videos tagged so I can search. I am in the middle of a Network and Cyber Security Diploma at the moment and really value your content. Thanks

[@rtxfox5745]

Love your story at the beginning 😂🤣

[@nascompares]

Thanks... It keeps me awake at night... Was it his wife's backup? His daughter's? An affair his wife is having? Was it someone he recognised?! Honestly...it's been 2 years and all I want is blood closure...

[@rtxfox5745]

@@nascompares hahaha i guess you’ll never know 😂 I hope you find that closure mate 👍

[@skystink]

regarding Quickconnect at around 13:00 ... why arent you using VPN to access your router and from there go to your NAS?

[@tamj01]

I have a qnap and fell victim to echoraix. Refused to pay the fee and recovered some photos searching for the "deleted version" of the photos. Devastating though too tough to sort the folders. Signed up to cloud storage but thinking of buying a synology nas.

[@devrim1134]

Like many many others, my Synology DS1815+ doesn’t boot anymore. It failed already after a year and Synology sent me a new device. Recently it failed again and now they won’t do anything. They don’t even have a repair center. Synology doesn’t acknowledge their design flaws + the Intel problem. They barely lift a finger after the warranty runs out which is really bad. Its an expensive device and service is very bad. They’ve offered me a discount om a new NAS, but I’m hesitant to invest again if I can’t expect any service after 2 years and no repair center. Any suggestions? My guess is that my drives won’t work in a different nas, won’t they?

[@cjl5919]

Thank you as always informative balanced and fair!

[@Lucy-dk5cz]

Zero days aren’t just known vulnerabilities that a patch has yet to be rolled out for, they are unknown, possibly unkown to vendor. The 2-3 week window you are talking about does not hold true if the vulnerability is unknown to the vendor. That being said, attack on a NAS are less likely to be from zero day and social engineering rather than traditional attack vectors which were not discussed.

[@alesmohoric9130]

Have you ever been addressed regarding WD RED drives and the stuck at 90% issue? Is there any information about that? I can not believe WD RED drives perform so poorly in synology which is trully a bummer. An Extended smart test for a lousy 6TB drive can take up an entire week beeing stuck at 90%. This is not normal. There are too many complains about this.

[@Mulnader]

Why you keep saying it's QNAP's PR failure? It took them over 6 months to fix backdoor that was discovered by third party that reminded them about this issue every month. QNAP ignored third party for many months. Even after they released the fix it wasn't clear if it's going fix it. Third party wasn't a teenager in basement but renowned security specialists. Am I missing something?

[@ALR000]

Great work as usual. I have a question regarding NAS, i'm on the market for a solution that will be used with 3DS Max on a 3990x Workstation, i need 4 slots although i will only use 2 slots (2x12TB) for the moment. This will be used to store and use to read and write lots of files on a daily basis. Regarding these points, what would be the perfect setup for me ? NAS + 12TB HDD + SSD for cache, access speed and future proof ability are my main concerns. Thanks and keep up with your good work

[@IT_RUN1]

Weren't the only people that were affected by the synolock incident people running an older version of the DSM At the time?

[@jsonhealer]

Love the conversation. Love Synology. I wish I was on the platform earlier to get help from the your team. Is this probono still available.? The remote connectivity is the biggest aspect for me. I don't want to go through Synology network. You data is still accessible on their end. I want to change the default network settings which seem to be embedded due to auto configuration.

Great discussion point... I have been using Synology products for a few years now but never went curious about how using QNAP would look like. I think this is because of the image of Apple-like image Synology have been imposing to its customers. With QNAP you can have more tweaks and customizations but that might mean more vulnerabilities as well for most basic to novice users.

[@playwithme2291]

Hello Sir . I wanted to ask that if it is a problem if I wach movies that are downloaden from pirate sits on the Nas

[@DavidM2002]

I recently bought the top end Synology router but I find that compared to my other routers (Asus, Netgear), it does a generally crappy job of mapping connected devices and and even crappier job with IP address reservations. A couple of people on Synology forums have brought this to Synology's attention but Synology has just said that this was normal or that it was a user problem. Utter nonsense.

[@christiancampbell7828]

Is it possible to do a video with cooling stands for ps5 to see if they would be worth picking up to keep the ps5 coolier on internal temps.

[@tobats120]

@nascompares might be off topic but any comment on synology forcing synology branded drives and the future of ds product line due to this?

[@EmilePolka]

you nas is never been safe in the first place if you expose your NAS over the internet (eg... quickconnect). QuickConnect is a very convenient way to access your NAS remotely, also for the hackers as well.

[@IntoxicatedVortex]

The amount of times I have been confronted by the digital nakedness of someone that is in the same room or the room next is beyond belief!! 😂😂😂

[@IT_RUN1]

You'd think they would organize stuff like that into one folder

[@electricflys]

Are you still offering this service? I cannot get Plex to recognize my ds920+ for the life of me.

[@didierhubercoachingconsulting]

Hey guys - I love your Chanel, I love the perspective you both bring and I even love your seagulls, but 34 min is just too long. I do not have that time! May be I should check if you have time stamps below. If you could shorten them to 20 min at most? I think you could get the same info and value out in 20 min. Just a suggestion, may be I have it wrong. Cheers and do not get too harsh on your seagulls lol

[@nascompares]

Thanks for the feedback. It's a bit subject to cover in brief by though. Also, there are chapters in the description and on the KZbin time bar...I mean...they are right there... How much of a rush are you in? Also, don't side with the seagulls

[@gee7092]

No such thing as safe when you expose your network to the public. You are may be safe but for now.

[@zebrasprite]

English and repressed lmfao

[@nascompares]

*straightens ties and sips tea aggressively* ...what?

[@entelin]

"NAS" are pointless. Just buy a real server and load linux on it. You wouldn't buy a windows server with a gimped webgui laid on the top, so why do it with linux?