← Back to context

Comment by iAMkenough

9 hours ago

If you’re exposing anything on Synology to the Internet, you’re already playing with fire. Their packages (like Container Manager) are usually very far behind on security patches.

I think the current version of Docker engine Synology uses was end-of-life 2.5 years ago.

It just has to pass through one port, right? Is that the kind of thing that's likely to be vulnerable on an outdated server?

Synology NAS - an ugly doorstop with data loss resulting from its half-baked post-purchase attempts to enforce hardware vendor lock-in. (Was working fine w/ a Western Digital drive, the next day, boom.)

  • I’ve had a synology NAS that’s been running for 8 years. No data loss. I use random drives I had laying around. It’s not the fastest or fanciest, but I never had any experience with lock in. It’s got a 3rd party 10g card, more memory … nothing locked in.