Having the Public share in WD My Cloud EX4 is a major security flaw. It allows anyone including hackers and criminals in the network to put child pornography into the product. This not only exposes the owner to substantial legal liability, but also causes severe harm to the community. Please regard it as a public safety issue of the product.
I would like WD to give the owners of My Cloud EX4 the ability to delete the default Public share or restrict the access to it on the next firmware update.
Yes please give us the option to deny access to the public share. If I wanted users to have access to this share I would simply grant them access but it theres no need to give them full access by default. Also its a full privelege read/write access and we may only want read access available. Personally I dont keep anything in this share.
Many thanks to those who have voted.
“To vote click on the Up arrow icon at the left of the beginning of any post - it’s basically giving a kudos to the post - but it counts as a vote.” – Thanks to Cybernut1 for this explanation.
We need enough votes to get WD’s attention to address this critical issue ASAP.
To be honest I hate even seeing the Smartware and TimeMachineBackup shares in addition to the Public share. If I wanted these I would create the shares for them. I get it that some people use this for backups but I bought my EX4 to use as a NAS with reliable remote access. Maybe the firmware update should include an option to create these shares automatically if you turn on these backup features. I’m a bit OCD and like to keep my shares and folders very organized. Even seeing these empty shares is an eyesore and makes me feel like I don’t have control over my own device. Please give us the ability to turn them off.
It is waiting for you from the possibility of restricting access to shared resources on the level introduced into the system users
Would also like to be able to make NAS WD My Cloud Ex2 invisible to network scanners. It is necessary for security.
Simple. Poor writing in English.
I agree - this needs to be on EX2, not just on EX4. Until this gets implemented, here’s a manual fix to restrict access to the Public share -> http://community.wd.com/t5/WD-My-Cloud-EX2/Hacks-to-make-Public-share-and-USB-shares-private/td-p/728740
Folks voting on this feature request (by clicking the up arror icon next to the first post in the thread) please also vote up my request for a similar restrict access feature for the USB shares. Currently the entire USB share automatically becomes accessible to all. That idea thread is here -> http://community.wd.com/t5/Personal-Cloud-Ideas/EX2-USB-shares-need-configurable-permissions-configurable-ftp/idi-p/712500
I haven’t thought about this security bug. It seems there are more issues than I initially thought. Hope they fix it soon.
Just bought this product. It is still not possible to delete the public folder. It is really a “no go” for this product not to be able to controll access. Maybe I will give back this product to the seller, as this product is “not safely operational” when there is not a possibility to control the acces to all folders. I don’t want to become a share place for “unwanted stuff” just becaus there is a public uncontrollable folder…
I know this can be done because I’ve restricted access on a My Book Live NAS, My Book Duo NAS and a My Cloud NAS. Personally I would go to keep the Public directory/share, but allow setting a restriction on access to it.
It’s is surprisingly easy to. I didn’t really change anything apart from the ACL on /DataVolume/shares/Public …
Connected to nas-mc.
220 Welcome to WD My Cloud
User (nas-mc:(none)): alex
331 Please specify the password.
Password:
230 Login successful.
ftp> cd alex
250 Directory successfully changed.
ftp> cd ..
250 Directory successfully changed.
ftp> cd Public
550 Failed to change directory.
ftp> bye
221 Goodbye.
I’ve not erased Public . . . .
Connected to nas-mc.
220 Welcome to WD My Cloud
User (nas-mc:(none)): myron
331 Please specify the password.
Password:
230 Login successful.
ftp> cd alex
250 Directory successfully changed.
ftp> cd ..
250 Directory successfully changed.
ftp> cd Public
250 Directory successfully changed.
ftp> bye
221 Goodbye.
I’ve not changed anything except the ACL on the Public directory and recursed the changes to the whole directory structure under Public.
I would keep the Public directory but just have one single option which would read something similar to . . .
Restrict access of Public to owner/admin? YES/NO
That’s all that is needed and is stupidly simple to implement. The factory default would be to allow all access to Public and and owner/admin would have to enable the restriction.
See:
http://community.wd.com/t5/WD-My-Cloud/BE-CAREFUL-PUBLIC-FOLDER-amp-PHOTOS/m-p/756544#M16621