Disassembling a Cloud-compromised NAS

Disassembling a Cloud-compromised NAS



Disassembling a Cloud-compromised NAS

Again in October 2015, once I was evaluating options to Microsoft’s Window Media Heart for receiving, recording, and streaming cable tv service round my home, I picked up a factory-refurbished Western Digital My Cloud 2 TByte (single-HDD) network-attached storage (NAS) (later rebranded because the My Cloud Residence) for $99:

Launched in late October 2013 (right here’s an preliminary evaluation from a number of months later), the two TByte variant initially offered for $150. Roughly two years later got here a notably feature-enhanced proprietary O/S replace to My Cloud OS 3, together with further single- and multi-HDD {hardware} fashions. I’d purchased mine as a result of it was one of many stored-recordings choices then supported by SiliconDust’s HDHomeRun PVR software program; I used to be already utilizing the corporate’s HDHomeRun PRIME CableCard-supportive three-tuner networked receiver. I deliberate to run HDHomeRun PVR’s server software program on a networked PC, with per-TV playback supported through Google Nexus Gamers, every paired to a micro-USB-to-Ethernet adapter and working the corporate’s Android consumer app.

Sadly, shortly thereafter got here a number of successive WD Cloud OS distant system hijacks with a typical assault vector—the NAS’s connectivity to WD’s “cloud” file sync and backup service—together with a typical unlucky firm response—prolonged delay, in sloth-like response to each non-public alerts despatched to the corporate by safety vulnerability companies and public disclosures. One such patch suite belatedly arrived in March 2017; learn it and weep.

In December 2021, WD “threw within the towel” on My Cloud OS 3, telling clients to improve relevant gadgets to My Cloud OS 5, as help for My Cloud OS 3 can be ending a number of months later. Alas, my explicit system wasn’t My Cloud OS 5-compatible; to WD’s credit score, “gadgets that had auto-update enabled obtained a closing firmware replace that disabled distant entry and outbound visitors to cloud companies”, successfully reworking them into local-only NAS gadgets from that time ahead. And the corporate additionally despatched people like me a 20%-off coupon for hardware-upgrade functions; mine arrived on January 17, 2022.

Simply in time, it seems…two days later got here the information of patches for yet one more set of My Cloud OS 3 vulnerabilities. And, because it additionally seems, My Cloud OS 5 customers’ troubles alas weren’t over, both. In March of final 12 months, WD’s cloud companies had been circumvented by a community breach that “locked them out of their information for greater than 24 hours and has put company-handled info into the fingers of at the moment unknown hackers.” I’m admittedly glad I didn’t take WD up on its discounted {hardware} improve provide, not that QNAP’s been notably higher

Reality be informed, I by no means received round to actualizing my HDHomeRun PVR aspiration; I’m nonetheless working Home windows Media Heart on an out-of-support Home windows 7-based networked laptop together with a number of equally geriatric per-TV-located Xbox 360s (though the expiration clock on this explicit setup is rising louder by the passing day, for causes I’ll clarify in larger element in one other upcoming deliberate put up). I’ve nonetheless received my system, which I’ll by no means donate to charity because of its now-neutered performance which’d solely bewilder a recipient. Worst case, I’ve received a 2 TByte WD Pink HDD that I can repurpose in another system. And, to fulfill my very own curiosity, amongst different causes, I’ve additionally determined to crack open the NAS and see what’s inside.

Right here’s an preliminary suite of overview pictures, after I’d first eliminated the reflection- and glare-enhancing protecting clear plastic sheet from the entrance and sides, and as common accompanied by a 0.75″ (19.1 mm) diameter U.S. penny for dimension comparability functions (the WD My Cloud Residence 2 TByte has dimensions of seven.5 in x 1.9 in x 6.7 in/193.3 mm x 49 mm x 170.6 mm and weighs 2.12 lb./0.92 kg):

Proper and left sides:

High: no built-in fan on this NAS, however loads of heat-dissipating passive airflow vents:

Extra on the raised backside, this time presumably for air influx (warmth rises, don’cha know):

Right here’s a closeup of the bottom-end label:

And at last, the far more fascinating bottom, as soon as once more vent-abundant:

Right here’s a closeup of its sticker:

And one other up-close perspective, this time with extra intriguing parts for us techie people:

The wired Ethernet connectivity is Gbit-capable, thereby rationalizing why I’ve held onto the NAS for this lengthy despite its dearth of RAID 1 multi-HDD mirroring redundancy. Conversely, the USB connector is helpful solely for increasing the inner capability through a tethered DAS; the WD My Cloud Residence can’t itself be used as a DAS to a USB-connected laptop, alas.

Earlier than diving in, right here’s a have a look at the included equipment—a size of Ethernet cable and the exterior energy provide—together with a closeup of the latter’s specs:

Preliminary path-inside suspicion targeted on the bottom label, however elimination was unfruitful; no screw heads had been behind it:

Focusing as a substitute on the seams between the perimeters and the inside body was extra productive, with because of the writer of this explicit YouTube video for his calm-demeanor steering:

Solely a little bit of collateral injury:

Right here’s the first-time uncovered inside body frontside:

Together with the additionally now-exposed right- and left-side “guts”:

The HDD and its paired PCB meeting surprisingly (at the very least to me) “floats” on one finish:

The opposite finish’s two mounting factors are extra sturdily safe, however solely considerably (left aspect views first, then proper):

Releasing one finish of every clip:

affords liftoff of the insides:

Right here’s the aforementioned meeting from a number of views:

Three screws maintain the PCB in place:

And I guess what comes subsequent:

Slide off the SATA energy and information connectors:

and, together with three spacers falling away, the separation between the PCB and HDD is full:

together with the now revealed, and a lot extra fascinating, PCB inside:

Further closeups of the latter expose, I believe, why this explicit mannequin by no means received the My Cloud OS 5 replace:

The system SoC, additionally present in different WD My Guide fashions, is Mindspeed Applied sciences’ (now NXP Semiconductor’s) M86261G-12 Comcerto 2000 communication processor, based mostly on a dual-core Arm Cortex-A9 working at 650 MHz. Go to NXP’s product web page and also you’ll see that this explicit chip is end-of-life (and certain has been for a while); alongside the IC’s demise, additional software program growth help doubtless additionally ceased. For posterity, a photograph of this actual SoC is even coincidentally showcased on Wikipedia’s firm web page:

Controller of a Western Digital My Cloud 4 TB – ARM Cortex-A9

To the system processor’s proper is a Samsung K4B2G1646E 2-Gbit DDR3 SDRAM. To its left is Broadcom’s BCM54612E GbE transceiver, with an related Delta Ethernet transformer past it. And within the M86261G-12’s decrease proper nook is a Winbond W25X40CL 4-Gbit serial flash reminiscence, presumably housing the aforementioned OS.

In closing, listed below are some views of the HDD, which as beforehand talked about is a traditional WD “Pink” (the firm’s Pink collection is NAS usage-tailored from entry profile optimization, energy consumption and different features) 2 TByte mannequin.

The shielding between the HDD and the PCB lifts away simply:

And with that, I’ll shut and hand the keyboard over to you in your ideas within the feedback!

Brian Dipert is the Editor-in-Chief of the Edge AI and Imaginative and prescient Alliance, and a Senior Analyst at BDTI and Editor-in-Chief of InsideDSP, the corporate’s on-line e-newsletter.

 Associated Content material

<!–
googletag.cmd.push(perform() { googletag.show(‘div-gpt-ad-native’); });
–>

The put up Disassembling a Cloud-compromised NAS appeared first on EDN.

Leave a Reply

Your email address will not be published. Required fields are marked *