Oddbean new post about | logout
β–² β–Ό
 Synology zero-day discovered during pwn2own hacker contest. Stay safe out there.

https://www.wired.com/story/synology-zero-click-vulnerability/ 
 explain it like I’m 5 ? 
β–² β–Ό
 +1 until i check with my techlord  lol 
β–² β–Ό
 If you have a Synology NAS and its accessible from the internet, you're screwed. 
β–² β–Ό
 t-y 
β–² β–Ό
 RCE for NAS exposed to internet or via quickconnect service, and has the photos app installed. Please use a VPN like tailscale to access your devices. You can host your own controlplane for tailscale with headscale too.