On the issue of QNAP. What QNAP stated is the following:
https://www.qnap.com/en/security-news/2022/take-immediate-actions-to-secure-qnap-nas
QNAP urges all QNAP NAS users to follow the security setting instructions below to ensure the security of QNAP networking devices.
Check whether your NAS is exposed to the Internet
Open the Security Counselor on your QNAP NAS. Your NAS is exposed to the Internet and at high risk if there shows “The System Administration service can be directly accessible from an external IP address via the following protocols: HTTP” on the dashboard.
See the link for the rest. They are telling their users to close certain NAS ports (port forwarding) and disable certain NAS features/options. Some of which, like UPnP are generally recommended by many security advisors to disable anyway. They have further articles on using myQNAPcloud Link to access their device(s) from the internet.
To the initial posting. The first gen v4.x single bay My Cloud has been end of support for a number of years now (since late 2019). There are a number of discussions on the OS3 termination where it is recommended to use VPN to access the unit once WD terminates the OS3 remote access. There were even some years past discussions on trying to get SFTP working for remote access. While the termination of OS3 support for emailing of certain alerts will affect some. There have been past discussions on setting up email notification for certain user scripted events like using Rsync instead of SafePoint to back up a v4.x firmware My Cloud.
http://community.wd.com/search?q=SFTP%20category%3A105
Fact is most who need remote access will likely just “man up” after their grumbling about what WD is doing, and buy a new NAS if they are not technically inclined to take a stab at VPN or other methods of secure remote access.
Exposing any device to broadband access runs the risk of it being compromised through security vulnerabilities. Some venders close security vulnerabilities in their products faster than others. And for some it’s easier/cheaper to simply end support for a product than continue to support it. WD has chosen this last option for certain OS3 devices.
