Skip to main content

我居然也被黑客勒索了

 发信人: GoMustang (野马), 信区: PhotoGear
标  题: 我居然也被黑客勒索了
发信站: BBS 未名空间站 (Sat Jun  5 21:59:29 2021, 美东)

自己搞了几个NAS,用来存储拍过的照片和视频,大概有15TB的数据吧。NAS的制造商
QNAP 公司,提供免费的云服务,就是你可以把NAS设置成一个personal cloud,随时可
以远程访问。

4月底的时候,黑客利用QNAP操作系统的一个安全漏洞,攻击了全世界QNAP Cloud 的
NAS用户。

他们的做法是把文件压缩成.7z格式,再用密码锁起来。需要给他们打0.01个比特币才
能给你密码解锁。

好在呢,这些黑客显然不是资深摄影爱好者,不知道我们都是拍raw的嘻嘻。加密压缩
的是最不重要的JPG文件,而且这些文件在Flickr上都有备份,所以也没什么损失。

后来QNAP公司打了补丁,暂时解决了安全问题。不过那个personal cloud 从此也不敢
用了。

Comments

Popular posts from this blog

CKA Simulator Kubernetes 1.22

  https://killer.sh Pre Setup Once you've gained access to your terminal it might be wise to spend ~1 minute to setup your environment. You could set these: alias k = kubectl                         # will already be pre-configured export do = "--dry-run=client -o yaml"     # k get pod x $do export now = "--force --grace-period 0"   # k delete pod x $now Vim To make vim use 2 spaces for a tab edit ~/.vimrc to contain: set tabstop=2 set expandtab set shiftwidth=2 More setup suggestions are in the tips section .     Question 1 | Contexts Task weight: 1%   You have access to multiple clusters from your main terminal through kubectl contexts. Write all those context names into /opt/course/1/contexts . Next write a command to display the current context into /opt/course/1/context_default_kubectl.sh , the command should use kubectl . Finally write a second command doing the same thing into ...

OWASP Top 10 Threats and Mitigations Exam - Single Select

Last updated 4 Aug 11 Course Title: OWASP Top 10 Threats and Mitigation Exam Questions - Single Select 1) Which of the following consequences is most likely to occur due to an injection attack? Spoofing Cross-site request forgery Denial of service   Correct Insecure direct object references 2) Your application is created using a language that does not support a clear distinction between code and data. Which vulnerability is most likely to occur in your application? Injection   Correct Insecure direct object references Failure to restrict URL access Insufficient transport layer protection 3) Which of the following scenarios is most likely to cause an injection attack? Unvalidated input is embedded in an instruction stream.   Correct Unvalidated input can be distinguished from valid instructions. A Web application does not validate a client’s access to a resource. A Web action performs an operation on behalf of the user without checkin...