How secure is ADS NAS kit?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I recently purchased a Network-Attached Storage HD enclosure by ADS Tech,
but I am not sure how secure/hackerproof it is. (Assuming, of course, that
it has been correctly configured though it's web interface, all user
accounts have difficult passwords, access rights to specific folders have
been specified, etc., you know, the obvious has been taken care of). I want
to put some data on it that could be shared with some of my friends/family
over internet, as well as business files, which I don't want anybody to even
have a chance to get access to (besides myself).

The NAS kit interfaces through NetBios in Win workgroup environment, for
outside access it has FTP and HTTP. One thing I don't like about the FTP is
that any user who has any kind of FTP access can see all shared folders,
even those that he has no access to (when such folder is clicked, the
"Access denied" box opens). Would be much better in my opinion if a "root
folder" per used could be specified.

Does anybody know how safe it is to put shared data alongside with private
data on that thing?

Somebody might ask: Why would I want to put confidential data on it? Because
of the versatility -- I can access it from any computer, it does not require
any specific computer to be turned on (like in case with USB/FireWire
drives). I can access it from outside through Internet, or take it with me
if necessary.

Thanks in advance!

Re: How secure is ADS NAS kit?

Depend's on what the product is built on. Common operating systems like
Windows and NetWare have robust and reliable network access control.

Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

Quoted text here. Click to load it

Re: How secure is ADS NAS kit?

Quoted text here. Click to load it

Thanks, but that's exactly what I want to find out -- How robust is the
technology this kit is built on. Since it is a network appliance, it has its
own embedded operating system, HTTP and FTP servers. It does not need any
computer to function. If I open up it's FTP server, for example (by port
forwarding on my router), I would like to make sure it has no "back-door"
access by some undocomented FTP commands or by some other features, that's

Re: How secure is ADS NAS kit?

That I couldn't say without looking at the kit. If undocumented features are
of a concern - stay away from el-cheapo an use Windows- or Linux-based
storage. Open systems, you know...

Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

Quoted text here. Click to load it

Site Timeline