×
Data Storage

Western Digital 'My Cloud' Devices Have a Hardcoded Backdoor (betanews.com) 160

BrianFagioli shares a report from BetaNews: Today, yet another security blunder becomes publicized, and it is really bad. You see, many Western Digital MyCloud NAS drives have a hardcoded backdoor, meaning anyone can access them -- your files are at risk. It isn't even hard to take advantage of it -- the username is "mydlinkBRionyg" and the password is "abc12345cba" (without quotes). To make matters worse, it was disclosed to Western Digital six months ago and the company did nothing. GulfTech Research and Development explains, "The triviality of exploiting this issues makes it very dangerous, and even wormable. Not only that, but users locked to a LAN are not safe either. An attacker could literally take over your WDMyCloud by just having you visit a website where an embedded iframe or img tag make a request to the vulnerable device using one of the many predictable default hostnames for the WDMyCloud such as 'wdmycloud' and 'wdmycloudmirror' etc." The My Cloud Storage devices affected by this backdoor include: MyCloud, MyCloudMirror, My Cloud Gen 2, My Cloud PR2100, My Cloud PR4100, My Cloud EX2 Ultra, My Cloud EX2, My Cloud EX4, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, and My Cloud DL4100. Firmware 2.30.172 reportedly fixes the bug, so make sure your device is updated before reconnecting to the internet.
The Internet

Senate Will Force Vote On Overturning Net Neutrality Repeal (theverge.com) 143

An anonymous reader quotes a report from The Verge: Senator Ed Markey (D-MA) has mustered the 30 votes necessary to force a vote on the FCC's decision to repeal net neutrality. Senator Claire McCaskill (D-MO) announced that she's signed onto Markey's request to overturn the new rules, under the Congressional Review Act -- which lets Congress nullify recently passed regulations with a simple majority. Markey announced his intention to file a resolution of disapproval in December, just after the FCC voted on new rules that killed net neutrality protections from 2015. These new rules were officially published last week, and with 30 sponsors, Markey can make the Senate vote on whether to consider overturning them. If this happens, it would lead to a debate and final vote. That's not remotely the end of the process: if it's approved, the resolution will go to the House, and if it passes there, the desk of Donald Trump, who seems unlikely to approve it.
Businesses

After Iceland and Germany, Now France Declares War on the Gender Wage Gap (fastcompany.com) 293

France says it wants to make good on at least one-third of its motto of "liberte, egalite, and fraternite," by ensuring pay equality. From a report: The French government announced it is devising a "tough, concrete" plan to make the gender pay gap as much a thing of the past as Madame DeFarge's knitting habit. Per the Associated Press, France's plan for pay equity is still a work in progress. However, legislators may require companies to release the average salaries of their male and female employees and analyze them for disparities.
Google

James Damore Sues Google For Allegedly Discriminating Against Conservative White Men (theverge.com) 1175

An anonymous reader shares a report: The author of the controversial memo that upended Google in August is suing the company, alleging that white, male conservatives are systematically discriminated against by Google. James Damore was fired as an engineer after a manifesto questioning the benefits of diversity programs was widely passed around the company. In a new lawsuit, he and another fired engineer claim that "employees who expressed views deviating from the majority view at Google on political subjects raised in the workplace and relevant to Google's employment policies and its business, such as 'diversity' hiring policies, 'bias sensitivity,' or 'social justice,' were/are singled out, mistreated, and systematically punished and terminated from Google, in violation of their legal rights."

Slashdot Top Deals