MyCloud Browser Access Unaccessible Due To Java Security Risks

I spent an hour trying to access MyCloud through the ridiculous web/browser interface only to find out that none of my browsers will permit access due to the Java security risks. Why are you still using such a ridiculous, antiquated, security risk laden interface? After having MyCloud recently hacked, and now this, my confidence in WD products is at an all time low. When are you going to provide a secure, functional web interface for your customers that does not appear as if it was designed for Windows 3.1? Also, FYI, include the captcha field on the initial user id/password screen instead of making us fill in everything twice: which, I might add is absolutely ridiculous. Additionally, the captcha logo is nearly completely illegible. Where do you come up with all this ridiculous **bleep**?

Do you mean remotely? Locally, the web browser interface doesn’t require Java.

JAC70 wrote:

Do you mean remotely? Locally, the web browser interface doesn’t require Java.

I am using it locally and it requires Java to access MyCloud. I believe that when a web browser is used it is remote access by nature not local access.

I am trying to access through https://www.wd2go.com/

If you are trying to access the WD My Cloud locally, from a PC on your local network, why are you going through wd2go.com ?

As as explained in your other thread wd2go.com is for remote access not for local access. For local access use a file explorer or file manager like Windows Explorer or Finder. Or you map the drive to your PC. To access the Dashboard you use a web browser but it doesn’t use Java I don’t think.

To access the Dashboard see the following link for directions on how to do so: http://wdc.custhelp.com/app/answers/detail/a_id/10420/~/how-to-access-the-dashboard-on-a-wd-my-cloud-product

Bennor wrote:
If you are trying to access the WD My cloud locally why are you going through wd2go.com ?

As as explained in your other thread wd2go. Com is for remote access not for local access. For local access use a file explorer like Windows Explorer or finder. Or you map the drive to your PC. To access the dashboard you use a web browser but it doesn’t use Java I don’t think.

To access the dashboard see the following link for directions on how to do so: http://wdc.custhelp.com/app/answers/detail/a_id/10420/~/how-to-access-the-dashboard-on-a-wd-my-cloud-product

Because I am testing it for when I am not on my local network. Once again WD has dropped the ball. This is the first time I have tried to use the browser interface to access my files and of course it is unusable.

Yes, and wd2go.com can be used either locally or non locally. It is through the web and does not make any difference where you are. Yes, I access my files locally just fine using all the options you mentioned. Again, the problem is that the web browser access is unusable because of the high risk of Java interface. None of my browsers will permit access.

The dashboard is only to access MyCloud settings it cannot be used to access your files. 

If you use wd2go.com then you currently have to use Java. Complaining about it doesn’t change that fact. Nothing is preventing you from setting up your own private VPN network on your own to access your WD My Cloud, bypassing the wd2go.com website, and its use of Java, completely.

Bennor wrote:
If you usewd2go.com then you currently have to use Java. Complaining about it doesn’t change that fact. Nothing is preventing you from setting up your own privateVPN network on your own to access yourWD My Cloud, bypassing thewd2go.com website, and its use of Java, completely.

You must be on the WD payroll. I am merely letting WD know that they have another severe problem with their MyCloud implementation. If their apps are unusable then our MyClouds are unusable. Bringing it to their attention should prompt them to fix it if they care about their customers and if they like having customers.

Actually, using a VPN service adds another potentially unsafe variable into the equation since there is not currently a VPN service that I feel that I can trust. Also, I do not want to pay out more more money in monthly or annual service fees for a VPN merely because WD is releasing unusable apps. Additionally, to setup my own VPN I need a dedicated PC running 24/7 for it to be fully operational/functional 24/7. WD just needs to fix their app and problem solved.

AJ777 wrote:


Bennor wrote:
If you usewd2go.com then you currently have to use Java. Complaining about it doesn’t change that fact. Nothing is preventing you from setting up your own privateVPN network on your own to access yourWD My Cloud, bypassing thewd2go.com website, and its use of Java, completely.


You must be on the WD payroll. I am merely letting WD know that they have another severe problem with their MyCloud implementation. If their apps are unusable then our MyClouds are unusable. Bringing it to their attention should prompt them to fix it if they care about their customers and if they like having customers.

 

Actually, using a VPN service adds another potentially unsafe variable into the equation since there is not currently a VPN service that I feel that I can trust. Also, I do not want to pay out more more money in monthly or annual service fees for a VPN merely because WD is releasing unusable apps. Additionally, to setup my own VPN I need a dedicated PC running 24/7 for it to be fully operational/functional 24/7. WD just needs to fix their app and problem solved.

Don’t hold your breath. Software fixes don’t seem to be a big priority for WD.  Bottom line is this: if you want to get your MC working in a fashion that suits your needs, you’re going to have to do it yourself.  That’s what this forum is about; people listing the countless workarounds they’ve discovered in order to salvage an otherwise hopeless bit of kit.

I stripped everything except for Samba from mine, a long and arduous process, and it works well enough for my needs.   Would I ever open my network to allow it to serve files remotely? Not a chance in **bleep**.  Besides, Java is for suckers.

AJ777 wrote:

You must be on the WD payroll. I am merely letting WD know that they have another severe problem with their MyCloud implementation. If their apps are unusable then our MyClouds are unusable. Bringing it to their attention should prompt them to fix it if they care about their customers and if they like having customers.

 

Actually, using a VPN service adds another potentially unsafe variable into the equation since there is not currently a VPN service that I feel that I can trust. Also, I do not want to pay out more more money in monthly or annual service fees for a VPN merely because WD is releasing unusable apps. Additionally, to setup my own VPN I need a dedicated PC running 24/7 for it to be fully operational/functional 24/7. WD just needs to fix their app and problem solved.

Their apps are not unusable. The personal choice you are making not to run Java is what makes the remote feature unsuable for you. The WD2Go.com site utilizes a encrypted connection when logging in. As such that places the Java they employ behind an encrypted connection. That encrypted connection appears to continue on through even when one “maps” in a sense the drive through the WD2Go.com interface.

You have several choices for remote access, each have their own trade offs:

WD2Go.com

WD My Cloud Desktop

WD My Cloud app for Android/iOS

WD Photo app for Android/iOS

Private VPN

Create your own software, app, Debian module for access

If WD doesn’t already have a change in their software/WD2Go product pipeline it will be many months to a year or more before such a change, like removing Java, can be analyzed, programmed, tested and implemented. All that costs WD time and money. They may simply decide that the loss of a few users who refuse to use Java (for what ever reasons, valid or invalid they may be) does not justify the time and expense to change the current software or WD2Go site. They will probably have to do something about the use of Java simply because Chrome is ending support for one form of Java which causes the WD2Go site to become unusable in Chrome (see this thread and the workaround for Chrome).

The fact remains (as mentioned in your other thread) that remote access to any device on one’s local network presents potential security issues and opens up the possibility for a hacker to compromise one’s local network and devices.

If firmware such as that from DD-WRT, OpenWRT or Tomato can be loaded to your Linksys EA6700 then it may be possible to setup an OpenVPN server on the Linksys EA6700 router and create a VPN tunnel into your network to access the WD My Cloud. If the Linksys EA6700 router doesn’t support third party firmware then there are loads of used routers one can buy to load DD-WRT, OpenWRT or Tomato that can support setting up a OpenVPN server. Ask around to friends and family to see if they have an old unused router laying around and see if that router can be configured with third party firmware for OpenVPN support.

No I and most others posting here are not on the WD payroll. We are here on our own time and expense. The WD My Cloud and its software/WD2Go is what it is. There are various issues, problems and limitations with the WD My Cloud. As the previous poster indicated, one seeking to gain certain features or options often has to find work arounds for those issues, problems and limitations. For the average Joe the WD My Cloud and its software/WD2Go site probability work without issue (or very little issues) once properly setup and configured. For those concerned about security the remote features and security or lack of it on any lower cost entry level NAS like the WD My Cloud will be an major issue. For those who are seeking a low cost NAS on par with the much more expensive offerings from Synology, QNAP and others they will be (probably sorely) disappointed as the entry level WD My Clouds are not marketed for those folks who seek more features and capabilities.

My apologies to the OP for starting a new thread earlier this evening on this subject.

I’m very happy with the drive but as mentioned in my other thread I cannot access this at work due to Java not being installed. I also forsee many times ahead when travelling abroad that I will not be able to access it due to the same Java issue.

I don’t have much experience within IT but surely a piece of software that needs frequent updating (i think Java is currently on update/patch 51?!) translates as being very insecure.

So can i request to WD to please make the cloud accessible through native browers in the same way as google drive or box.com amongst countless others…

We can live in hope!

James

james_t wrote:

 

I’m very happy with the drive but as mentioned in my other thread I cannot access this at work due to Java not being installed. I also forsee many times ahead when travelling abroad that I will not be able to access it due to the same Java issue.

As mentioned in your other thread there are a variety of ways to access the WD My Cloud remotely without using a browser…

WD My Cloud Desktop for Windows

WD My Cloud Desktop for Mac

WD My Cloud for Android

WD Photos for Android

WD My Cloud for iOS

WD Photos for iOS

WD 2go for Windows Phone

And as pointed out in your thread if you cannot install software programs then some of the above programs will not work because they require the ability to install to a Windows OS or Mac OS.

The fact is that there is no guarantee that WD will ever address the Java issue. Reasons for why they may not are potentially varied. Not the least of which is insuring compatibility across all their devices that have remote access capability.

Hi Bennor,

Thanks for taking time to answer - unfortunately as you say it does look like on a public computer which has no java then I will not be able to access my cloud (my fault for not investigating before purchase!)

I don’t suppose there is such thing as a Java emulator (that can run in a browser and doesn’t need administrator rights to install) ?!

james_t wrote:

 

I don’t suppose there is such thing as a Java emulator (that can run in a browser and doesn’t need administrator rights to install) ?!

It may be possible but it might take some work. See the following link for a possible way to run Java without installing it:  How to Install Java Without Admin Privileges If one needs the Java Development Kit installed but doesn’t have Administrator rights see the following link for a possible workaround: How to install a (portable) JDK in Windows without admin rights

There is one issue to make note of here. If you are attempting to access your personal WD My Cloud from your work or business computer you will want to check with your company’s or business’s IT department to ensure you don’t violate any corporate policies by attaching or accessing a personal storage device located offsite on or to their network or by trying to bypass their policy on Java usage. Some companies or businesses may prohibit such actions and it could lead to being disciplined or even terminated/fired.