Best to stay away from WD Sync and use FFS via VPN. I noticed a security hole yesterday where my files were being sent over the Internet unencrypted. I later was able to replay a transaction hours later which makes that susceptible to man in the middle attacks. SSL should be used whenever not on the same LAN and the user authorization should expire after a certain period. I’ve been advised security experts that session tokens should go from 20 minutes to 5 minutes to mitigate this type of exploit vulnerability.
I’ve disabled cloud access to my MCM until this is address with WD Sync and a firmware update.
http://versprite.com/og/command-injection-in-the-wd-my-cloud-nas/
