Synology DS224+ vs QNAP TS-262 NAS – Which is Best For You?
Isn’t it great when any facet of the tech industry gives birth to competition! In the early days of any new form of technology, the relative scarcity and newness of anything result in very few options for buyers to get the best value or competitive experience for their money. However, it doesn’t take long before competition emerges, innovation flourishes, and ultimately any different form of new tech becomes a more fleshed-out choice for the buyer. The same has certainly happened in the world of network-attached storage (NAS), and although there are several different brands available in NAS, the two biggest names are quite comfortable: Synology and QNAP. For buyers looking at a compact, fully-featured NAS solution, two of the very best options in 2023/2024 are the Synology DS224+ and the QNAP TS-262. Both of these solutions are targeted at home users who want to be able to do a little bit of everything and although they do have a decent amount of small business potential, they have slightly different attitudes towards what you can get for your money. Although it could be very easy to describe this comparison as hardware versus software, the reality is a little bit more nuanced. But before we go ahead and compare these two current-generation NAS solutions, we need to also highlight what both of these systems have in common. Regardless of whether you choose the DS224+ or TS-262 NAS drive, you are guaranteed the following:
- Both units feature an Intel Celeron processor for a good price vs hardware balance
- Both can Stream and Transcode on the fly (so, live) 1080p HD or 4K media, with superior performance natively and mid-range performance in Plex, as well as both arriving with integrated graphics, so more aggressive graphical manipulation (encode/decode/conversion) is done much more efficiently
- Both the Synology DS224+ and TS-262 NAS support AI-supported photo and ‘thing’ recognition supported to a very high degree from the free branded software included
- For Business users who currently enjoy the use of Google Workspace or Microsoft/Office 365, both of these NAS provide excellent means to backup your mass cloud accounts (as well as natively sync, dupe and configure rules on the fly)
- Both the TS-262 NAS and DS224+ NAS support snapshots, for more incremental and version-protecting failsafe in efforts to protect you from Malware and Ransomware attacks, by allowing multi-versioning storage history to browse through and restore
- Both units are DLNA certified so can be accessed, browsed and played from by popular DLNA devices, such as Amazon Firestick, Alexa, Google Home, Chromecast, DS224+ TV, Bose, Sonos, iPads, etc, as well as connectivity between these platforms with IFTTT
- Both are multi-bay, RAID enabled devices NAS devices that support JBOD, RAID 0 and RAID 1, RAID 5, RAID 6 and RAID 10 (as well as Synology Hybrid RAID too for their Plus series range), though support of storage media on each device does differ significantly in places
- Both devices run on their own proprietary operating system that can be accessed remotely or locally. These include regular updates to the firmware, security patches, applications and more. Ranging from multimedia, home and multi-tiered backup applications, to more business-end tools such as Surveillance software, Virtual Machine deployment and business-class backup and synchronization tools.
- Both the TS-262 and DS224+ use and can be accessed equally by a multitude of mobile applications such as DS File, DS Video, Moments, DS Photo, DSCam and DS Music that are created by and constantly improved by Synology. As well as QFile, QMusic, QuMagie and QManager from QNAP for iOS and Android.
- Both NAS are completely compatible with Windows, Android and Mac systems, as well as acting as a bring between software platforms to share and distribute files for migration and file sync (Synology Drive and QNAP QSync)
- Both units can be used as mail and/or business servers, providing excellent 3rd party CRM and first-party CMS systems. There is the Synology collaboration Suite of applications Chat, Drive, Mail, Calendar, Office and Active Backup Suite. Whereas on QNAP there is the QMail, Hybrid Backup Sync 3, Virtualization station and BoXafe tools
- Both systems support the NVR use with QVR Pro and Surveillance Station applications, support numerous cameras and arrive with at least 2 camera licenses with your purchase (8 Camera Licenses with the QNAP, 2 with the Synology)
Both systems are fully featured examples of what each brand can offer on their own individual server platform. However, you want to know what is different about them and which one best deserves your data!
Synology DS224+ vs QNAP TS-262 NAS – Price and Value
Normally, in these comparisons, I would very quickly highlight that when comparing Synology and QNAP, the latter would be the more affordable choice. It has kind of been that way for a while, but things changed towards the end of 2022 when Synology revamped and reorganized their portfolio. In brief, Synology changed a number of the positions of their solutions while simultaneously removing a few different tiers in a portfolio to change which solutions were covering home, small business, medium business, and large-scale deployments. This meant that some systems had their hardware and their price point realigned up or down to better suit the overall portfolio and choice for buyers, and the result is that the DS224+ surprisingly manages to be the lower price of these two very similar systems in some (not all) locations. The DS224+ arrives at around $350 (give or take currency exchange, tax, and shipping), whereas the TS-262 arrives much closer to the $400 mark and in some regions actually crosses this a little higher too. Part of this raised price on the QNAP TS-262 is because of a change in memory implementation (arriving as a fixed 4GB memory and later changing to 2 SODIMM slots and more flexibility). More affordable examples of the TS-262 are available online (couple below), but typically the price is going to be a pinch higher.
Neither of these prices includes storage media and, depending on the capacity of the drives you are considering in either of these two main NAS systems, that is going to take its toll on your budget. So if the price tag of the system you are buying carries a lot of weight in your decision, the Synology DS224+ is probably going to be a better cost choice for you. However, we do have to factor in that not only is the price difference between these two devices comparatively small in the grand scheme of things, but we also have to think about what we get for our money and ultimately ‘value’! In this context, a NAS can be judged on its value in two very distinct ways: the hardware that you are getting for your money and the inclusive software the system arrives with, and it is in this way that these two NAS systems are remarkably different in terms of their priorities.
Synology DS224+ vs QNAP TS-262 NAS – Hardware and Connections
Very few of my comparisons have displayed two NAS systems that, although at a casual glance are very similar, are so wildly different in the finer details and scalability than these two NAS devices. The Synology DS224+ system is easily the less hardware-rich of the two, heavily relying upon a hardware architecture that feels somewhat dated in comparison to the QNAP TS-262. In Synology’s defense, they have had a lot of time experimenting and testing their software with this particular CPU (the Intel J4125 quad-core Intel Celeron) and clearly know how to make the most out of it within their software in terms of efficiency and capability. Nevertheless, for PC builders, those who understand how hardware innovates over time, and those who are looking for the best value for money in their kit, this Synology CPU choice is pretty underwhelming. Thanks to that portfolio change I mentioned earlier by Synology, the hardware you find in this home user multimedia NAS is actually near enough identical to the 2020 generation prosumer and fully-featured TIA. That would be pretty good if it wasn’t for the fact that the CPU was released in 2019 and that despite this system’s similarity to the 2020 prosumer tier, some scalability options and upgrade options are not available here. The QNAP, by comparison, manages to scale up over the Synology in so many different ways, with a couple of slightly peculiar backsteps along the way. First, let’s look at the arrangement of that hardware side by side:
Synology DS224+ vs QNAP S-262 NAS Hardware Comparison | ||
Synology NAS | ||
Amazon Price: | $305 (09/08/23 – Check Amazon) | $332 (09/08/23 – Check Amazon) |
Processor model | Intel Celeron N5105 | Intel Celeron J4125 (2019 Gen) |
processor architecture | 64-bit | 64-bit |
processor clock | 2-core 2.0 (base frequency) / 2.9 (burst frequency) GHz | 4-core 2.0 (base frequency) / 2.7 (burst frequency) GHz |
Integrated Graphics | Yes (450-800Mhz) | Yes (250-750Mhz) |
Hardware encryption engine (AES-NI) | Yes | Yes |
system memory | 4GB DDR4 non-ECC | 2 GB DDR4 non-ECC |
Pre-installed memory modules | Yes, Fixed | Yes, Initial 2GB Fixed |
Total number of memory slots | 0 | 1 |
Maximum memory capacity | 4GB | 6 GB (2 GB + 4 GB) |
The maximum number of disk slots for an expansion unit | 2x USB 3.2 (Supports 2/4/8 Bay Expansions) | N/A |
M.2 drive bay | Yes, x1 (Gen 3×1) | N/A |
Compatible Disk Type |
|
|
Disk hot-plug support* | Yes | Yes |
The big hurdle for a lot of users is clearly going to be that CPU choice. Side by side, the quad-core CPU inside the Synology is going to mean more cores for the system to take advantage of over the dual-core inside the QNAP. Potentially, both CPUs feature integrated graphics, which also means that for processes such as transcoding, handling of graphical data, and simple offline conversions, they are going to use fewer system resources to get the job done. But when we take a closer look, we can see that there is a lot more to it. For a start, the N4505 jewel court CPU inside the QNAP is a much newer generation processor and features a slightly higher clock speed too. Despite half the available core numbers, that is going to result in the CPU being noticeably more efficient thanks to modern innovation by Intel in newer refreshes of their processors. The integrated graphics on the N405 CPU are of a higher birth speed, and although the QNAP CPU will lose out on the sheer breadth of processing capabilities being dual-core rather than quad-core, in a home user environment, and unless you are going to push the system hard, you aren’t really going to feel it.
Then there is the memory inside the two NAS systems and a very distinct difference in how either brand deploys their systems. The Synology system arrives with less default memory at 2GB versus 4GB on the QNAP. However, the Synology features an upgradable Sodimm memory slot that allows you to add a further 4GB of memory. The QNAP, on the other hand, features 4GB by default, but that 4GB is soldered internally for reasons of efficiency and cost (in light of continued memory shortages over the last 2 years and rising NAND flash costs), which results in the TS-262 NAS not allowing memory upgrades further. Therefore, you are getting more RAM on the QNAP on day one, but better long-term scalability by around 50% on the Synology. The fact that both systems feature soldered memory by default is super annoying, particularly when you know both of the CPUs can support more memory officially according to Intel, of 8 GB and 16 GB respectively.
From this point, however, in terms of hardware, QNAP absolutely steals the show moving forward! In terms of ports, connectivity, and upgrade options, Synology has clearly taken a very rigid stance on the DS224+ system, and this results in an incredibly low glass ceiling in comparison to the TS-262 NAS and the sheer wealth of ways to upgrade its hardware throughout the system’s lifetime. The most obvious example is in network connectivity and one that more modern network equipment is going to benefit most! The Synology DS224+ arrives with two Ethernet ports, both gigabit in architecture. Synology has come under fairly regular criticism for sticking quite rigidly with 1Gb network ports on the bulk of their systems, only providing improved gigabit connections or 10G on their XS or enterprise-grade systems by default. Although these two Ethernet ports support bonding options such as link aggregation, port trunking, and the more modern and easy-to-set-up SMB multi-channel via Windows, there are going to be a lot of users that are disappointed with gigabit network port when even domestic-class hard drives these days can comfortably provide 160 to 200 megabytes per second performance, and increasingly affordable SATA SSDs double or triple that number. Therefore, an external connection that immediately throttles performance down to 109 megabytes per second per port is going to be disappointing. This is further exacerbated by the fact that there is no means to upgrade the network connectivity on the Synology NAS beyond 1G, with no PCIe upgrade slot or any compatibility or support officially for 2.5G or 5G adapters which are becoming increasingly affordable.
The QNAP TS-262, on the other hand, is a completely different story! Arriving with a single Ethernet port, you may think things have started poorly, but this Ethernet port is 2.5 GB Ethernet (2.5 times that of the Synology) and whether you are running a one gig architecture and/or thinking of upgrading your network equipment, this is going to allow you to have higher performance via the single port than both of the ports on the Synology combined. However, this is further improved when you discover that the QNAP now also supports network adapters as I alluded to earlier, meaning that you can add a $20 2.5G USB upgrade and even a $50 5G upgrade to the system to further upgrade network connectivity and fully capitalize on the increased performance afforded to you via your media inside the system in RAID 0 or RAID 1. In fact, these USB ports get even better when you find out that, unlike the 5GB. USB 3 Gen 1 ports in the Synology, the QNAP features 10G USB 3 Gen 2 ports. These USB ports support vastly more peripheral and accessory devices on the TS-262 than they do on the DS224+, ranging from network upgrades, wireless upgrades, office peripherals, and assignment towards virtual machines for either more utilization. But more importantly, these USB ports support storage expansions from QNAP that allow you to add a further two, four, eight, and sixteen bay expansions (in conjunction with the PCIe slot), which means that you are not limited in the system’s lifetime to just those two bays of storage. Synology, on the other hand, has no expansion support for the DS224+. They do have a couple of expansion devices for desktop use in their portfolio, but they are connected via eSATA and have not added this connection to their DS224+ NAS.
Continuing down the rabbit hole of expansion and scalability, there is the fact that the QNAP NAS has a PCIe upgrade slot. It cannot be understated just how important and useful a lot of users are going to find this upgrade slot; even entry-level home users are going to feel the benefits here. Unsurprisingly, there is no PCIe upgrade slot on the Synology DS224+, but why is it such a big deal that these NAS devices would feature one? Well, much like the previous point I made about default network connectivity on the DS224+ and TS-262, having a PCIe upgrade slot means that you can add even greater network connectivity such as 10 GbE via a one or two-port card! There is also support for SSD storage upgrade cards that allow you to add two more M.2 NVMe SSDs and turn this 2-bay NAS into a 4-bay NAS! Or you can go ahead and get combo cards that have both built into a single card that occupies one slot and gives you a massive storage upgrade and a massive external bandwidth upgrade! There is even support for Wi-Fi 6 upgrade cards, USB port upgrade cards, and a long-ranging list of third-party PCIe cards that can be installed inside this system to improve performance inside and outside! Because of the CPU choice here and efforts to keep things affordable on systems on the scale of the DS224+ and TS-262, the PCIe architecture of this upgrade slot is gen 3 x 2, which does limit the internal bandwidth to 2000 megabytes per second, but nevertheless, having the option of this upgrade on the TS-262 alongside those network USB upgrade choices, when the DS224+ provides neither, is definitely something worthy of note.
However, the upgrades on the QNAP TS-262 do not stop there with this system. Also arriving by default with two times M.2 NVMe SSD base as well. That’s right; you don’t even need to wait to upgrade with a PCIe card, and you can go ahead and utilize M.2 SSDs for caching or as raw storage pools straight away on day one, thanks to the system featuring these by default. Remember earlier when I mentioned that the Synology DS224+ is using hardware architecture in this home-tier solution that three years ago was in the prosumer tier, about certain hardware limiting choices have been made? One of those was the two M.2 NVMe SSD base that previous generations of this device had featured and are notably absent on the Synology DS224+. It’s a real shame that Synology opted to not feature these in this architecture, despite clearly having enough resources here to support it. This is quite a clear choice by the brand to place the system in a very specific area of their portfolio so it does not overlap the next tier, the Synology DS723+.
Finally, there is the fact that the QNAP TS-262, like a number of other different NAS solutions in their portfolio that feature integrated graphics, also arrives with visual output, in this case, an HDMI 2.0 4K 60 frames per second port. This visual output, combined with two dedicated USB 2.0 ports that can be used for low priority peripherals alongside this if you choose, allows you to run a completely parallel (not mirrored!) Software GUI that is dedicated to the HDMI out, called HD station. Well, it should be highlighted that QNAP does not update this service and its applications anywhere near as frequently as it does the other apps in the brand’s portfolio. There is still a good range of services that can be used here that allow you to run a standalone surveillance system with KVM, a direct multimedia center that has direct control via an infrared remote control/Wi-Fi remote via mobile/USB keyboard and mouse, the ability to run a standalone PC via this HDMI, while the system also continues to run the QNAP NAS OS and apps over the network as usual, and a whole bunch of other things. Synology has always been pretty clear about their integration of HDMI out on their systems, largely ignoring it for any system other than a handful of their surveillance systems. This is by no means a killer feature for most users, and I know that the percentage of QNAP NAS owners that actually utilize the HDMI is surprisingly small. But nevertheless, this is just another example of the sheer scope of hardware that has been packed into the QNAP TS-262.
Overall, it should come as absolutely no surprise that in terms of hardware, the QNAP TS-262 absolutely smashes it! Even if the base-level hardware of the Synology had been a more modern generation CPU choice (and we have to at least give them the benefit of the doubt that the system does provide more scalability in terms of memory and is a quad-core CPU too!), the overall standard and modern architecture of the QNAP TS-262 is just impossible to ignore, and you are getting frankly insane value for money in terms of hardware on the TS-262, then you do on the slightly older feeling DS224+ by comparison. However, we can’t just focus on the hardware, as having the best hardware in the world won’t mean anything if you can’t utilize it properly. So let’s start talking about the software that is included with both of these NAS systems to see if this is where Synology can shine.
Synology DS224+ vs QNAP TS-262 NAS – Software and Services
Spoiler alert, Synology is going to win this! If you have been spending even a moderate amount of time looking at either of these brands, you’ll know that where QNAP seemingly hit the accelerator in the hardware department, Synology absolutely dominates in terms of the software! QNAP arrives with QTS 5.1, the latest iteration of their software, and although it does lack some of the smoothness and intuitive nature of the Synology platform (DSM 7.2), it is still a very well-put-together and heavily-featured platform. Here is how they compare:
QNAP QTS 5.1
|
Synology DSM 7.2
|
|
Browser Support | Supports all Browsers | Supports all Browsers |
Browser File Management | Browser File Management | |
Photo/Music/Video Tools | Photo/Music/Video Tools | |
Multimedia Console | Synology Drive | |
AI Photo Recognition | AI Photo Recognition | |
Edge m.2 Coral TPU Support | ||
Storage Services | ||
SED Drive Support | SED Drive Support | |
QTier | Synology Hybrid RAID | |
Hybrid Mount | Hybrid Share | |
ISCSI Target/LUN | ISCSI Target/LUN | |
vJBOD | Volume Encryption | |
Snapshots | Snapshots | |
SSD Cache (Read/Write/Both) | SSD Cache (Read/Write/Both) | |
Cloud Sync / QSync | Cloud Sync | |
Drive Failure Predcition & Migration | Fast RAID Rebuild | |
RAID Resync control | RAID Resync control | |
Secure Erase | Acrtive Backup Suite | |
Lots of Expansions (TR/TL) | Hyper Backup | |
HBS 3 | Synology CMS | |
Qfiling and Qsirch | Write Once Read Many | |
Business Applications | ||
QVR Pro – 8 Camera Licenses (+USB Camera Support) | Surveillance Station – 2 Camera Licenses | |
Virtualization Station | Virtual Machine Manager | |
Ubuntu Linux Station 18/20 | Docker Support | |
Container Station | Active Backup 365 & Workspace | |
Hypervisor Protector | Synology Office, Chat, Calendar | |
QMailAgent | Synology Mail / MailPlus | |
HD Station | Synology C2 and Services | |
BoXafe | ||
Security Councillor | Security Councillor | |
Malware Remover | Synology VPN Plus | |
McAfee Anti-Virus Scanning | Log and Notification Center | |
QVPN | Auto Blocking on SSH, Telnet etc | |
Log and Notification Center | 256 bit Encryption | |
Auto Blocking on SSH, Telnet etc | 2 Step Authentication | |
256 bit Encryption | Firewall App | |
2 Step Authentication | Access Protection and Allow/Deny list | |
Firewall App | Synology Secure SignIn | |
Access Protection and Allow/Deny list | Synology C2 Password |
The TS-262 also supports QNAP’s QTier service, a unique alternative to utilizing faster SSDs as storage pools or for caching. With Q Tier, you can combine your available slower hard drive storage media and faster SSD media into a single storage pool. Upon doing so, over time the system will learn what are the most frequently accessed files, ranging from small metadata and OS files all the way up to larger block data, which is then moved (not copied, as found with caching in smaller files) to the faster storage area. Then over time, as you and your other users use the TS-262, those more frequently accessed files will be retrieved from the faster SSD and create a much more responsive and faster user experience. Combine that with the improvements in the base level, network bandwidth on day one, or via upgrade, and the benefits of QTier in a mixed media storage device are very useful indeed.
We also have to acknowledge that one of these two brands suffered something of a PR disaster back in 2021/2022 when QNAP was one of the brands that was targeted by the Deadbolt ransomware group (alongside Asustor and Terramaster), resulting in more than 3,000 successfully hit devices who suffered targeted data encryption in small or whole system storage extents. The impact of this, combined with QNAP’s handling of the attack and their response to semi-force updates on systems remotely, resulted in a lot of lost face by many in this brand, and they will be carrying the stigma of this event for quite a few years yet. In comparison, Synology, though targeted by the group, were not successfully attacked, and at the time of writing, it appears that no Synology NAS user was ever hit by Deadbolt ransomware. In fact, aside from the Synolocker attack on Synology NAS systems over a decade ago, there has not been any widespread reported successful attack on their platform that comes even slightly close to the Deadbolt attack on QNAP.
To put this into a little bit of perspective, all network-attached storage devices received regular security updates for years, long beyond the hardware warranty of any singular NAS hardware. This is because software development can only ever really be one step ahead of the hackers. A brand releases software, hackers begin to try to find vulnerabilities, and when successful, the software brand releases a firmware update, and the cycle begins again. The majority of software these days is actually built on just a handful of different software architectures such as Linux, which in turn go through the same cycle of update>attack>update as any other software. However, when THEY roll out an update, the software that is built on them needs to customize that firmware update on their platforms, which takes time! Both of these brands, alongside every other reputable software brand that has even a hint of internet/remote access, has their security advisory pages that you can find online, which will detail the number of vulnerabilities that have been highlighted and the progress of their resolution. So, no brand will ever be considered 100% bulletproof from security vulnerabilities, as any piece of software might have a vulnerability that has just simply not been found yet, but there is simply no denying that between these two brands when it comes to security and how they have managed this subject, Synology seemingly has the edge.
If you are still on the fence about whether you should buy the Synology DS224+ or QNAP TS-262, and you intend to spend a decent amount of time with their respective software, then I would strongly recommend that you head to one of the two demo pages below. Both of these allow you to test out and experience the respective NAS software from each of these brands and will give you a good understanding of how each one works, how intuitive or user-friendly they are, and whether either software will provide you the level of reliability, stability, or customization that you are going to need before you purchase either the DS224+ or TS-262 NAS.
Synology Diskstation Manager 7.2 Online Demo – HERE
QNAP QTS 5.1 Online Demo – HERE
Ultimately, much like previously when QNAP was holding court and comfortably winning the hardware comparison of these two NAS devices, in the case of software, Synology absolutely smashes it. It’s not a complete flawless victory, as the QNAP QTS platform does provide a wide range of first-party services, much more customizable and adaptable services, and a wide range of third-party support compared with Synology DSM. But in terms of UX design, smoothness of GUI, long-term security management, and first-party ecosystem services, the Synology DSM platform on the DS224+ comfortably places it ahead. This is as you would expect from a brand that, when purchasing one of their solutions, places the emphasis on the software more than anything else. You can really feel the investment there! If you are in need of further comparison, you can check out my reviews on both DSM and QTS below in the software reviews over on YouTube:
QNAP QTS 5.1 Before You Buy (YouTube) | Synology DSM 7.2 Before You Buy (YouTube) |
Synology DS224+ vs QNAP TS-262 NAS – Verdict and Conclusion
It would be so, so easy to simply label this a case of hardware versus software, and indeed there is a ring of truth to that when you look at just how much is packed in with both the DS224+ and TS-262 in terms of priorities from either brand. However, the reality is a little bit more nuanced, as it really will come down to both what the user needs and their level of experience. Though the software on the DS224+ towers over the hardware when you purchase the device, it also needs to be stated that good software can make the most of weaker hardware, and having a system that requires a lower skill level in order to make the most out of it, for some, is going to be worth its waiting gold! You need to think of the Synology NAS systems as something of a complete ecosystem rather than just a data storage solution, providing more applications to replace those third-party alternatives that may exist in your network and create a truly synchronized storage networking communication environment! However, all of that arrives with limitations, with a lower glass ceiling and often with a feeling that the system is being held back intentionally in efforts to maintain that balance in the case of the DS224+. The TS-262, by comparison, gives you more hardware, more bandwidth, greater opportunities to upgrade and scale out your storage, and does so with a software platform that takes off the training wheels. This can lead to inconsistencies, this can lead to a higher learning curve, and ultimately leads to an experience where you may have to spend more time getting the system to wrap around your existing workflow rather than the other way around. This is where the TS-262 excels, as it tries to give you the control to do things your way, but may also hit the odd hurdle when it’s trying to do and be too many things to too many people. If you are looking for a streamlined experience that will hold your hand the whole way, go for the Synology DS224+! If you are looking to take the reins of your hardware, get a system to work the way YOU want it to, and have more opportunities to scale up your network storage in many directions, go for the QNAP TS-262. Both systems excel in what they’re trying to do at this price point, and as long as you know what you want from this system in advance, they will fulfill those needs appropriately!
NAS | ||
Amazon Price: | QNAP TS-262 NAS | Synology DS224+ NAS |
📧 SUBSCRIBE TO OUR NEWSLETTER 🔔 This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
🔒 Join Inner Circle
Get an alert every time something gets added to this specific article!
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.
Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
(Early Access) M.2 to Oculink 4i Adapter - TURN £5 INTO 64Gb/s
(Early Access) Synology Active Protect - The End of Active Backup?
(Early Access) Jonsbo N5 NAS Case Build - GET IT RIGHT, FIRST TIME
(Early Access) 64TB USB Drives - How Does This SCAM Work?
(Early Access) Minisforum MGA1 7600M XT eGPU Docking Station Review
(Early Access) The Best M.2 SSD NAS To Buy Right Now
Access content via Patreon or KO-FI
Does it work over wifi. Actually I share wifi with owner neighbors downstairs
So I don’t have Ethernet.
REPLY ON YOUTUBE
QVR Pro runs on ARM.
REPLY ON YOUTUBE
Jackson Matthew Hernandez Joseph Hernandez Joseph
REPLY ON YOUTUBE
RAM is no longer soldered in on the TS-262 units. I just bought one and swapped the 4GB out for 2 x 8gb sticks and now have 16GB of RAM on a $280 dollar NAS.
REPLY ON YOUTUBE
That music you use is estremo loud and annoying.
REPLY ON YOUTUBE
Nice video, but I missed these two things:
1. How easily is to change the Hard drives in both systems? I saw somewhere in your video that the QNAP can be easily opened from the front and then extract them; however, it is not clear how this is done for the Synology; hopefully, you don’t have two screw something
2. How loud are each of them. This is really important if you are planning to do home office.
REPLY ON YOUTUBE
I am new to the NAS DAS scene. I am a home user with a 4 drive win 7 PC and just want to store and synch my drives in DAS mode not NAS mode. I boutght a QNAP TS-004 (4 bay) and 4 10tb hard drives and ended up copying files to the QNAP with it in individual mode because I could not find any videos on a more efficient way of doing this. It leaves me wondering why I didn’t just buy a few drives like external Seagate or WD portable back up drives and save a whole lot of $$. You know your stuff as you make a lot of videos, Why not do a video for the many people in my situation as I am sure we are many.
REPLY ON YOUTUBE
nice, now I really have no idea which one I should buy ????
I love comparison ending with “buy this, the other is shit”, that’s my definition of “useful comparison” ????
REPLY ON YOUTUBE
I feel like If Synology bumped up their hardware to 1-2 years old, rather than 3-4 years old, they’d crush the competition.
REPLY ON YOUTUBE
If the QNAP is dual-core, why does the graphic say quad-core? The simple truth is that the J4125 eclipses the J4505 on multi-core tasks.
Another disingenuous review? Facts matter, mate.
REPLY ON YOUTUBE
For security reasons I blocked every internet-traffic in my QNAP VLAN using my firewall. When there are update available I either put them in manually or change the firewall rules for some minutes. I am operating a cloud in a different VLAN, I never wanted my QNAP to be available thru the internet.
REPLY ON YOUTUBE
im getting a DAS as NAS is not safe
REPLY ON YOUTUBE
One thing not covered that is important to me is BACKUP. My old QNAP TS-221 uses a backup system that will overwrite the old on a NAS USB Drive, no incremental to fall back for a week ago or a month ago etc. If a file was infected for some reason on the NAS the backup is overwritten with it making the backup useless. Has this been resolved in the new TS262-8G thats now out. Does Synology also have this problem? I also use Netback Replicator to back up my PC to the NAS rear USB Drive, on my old NAS it runs its CPU close to 100% which I hope with new PC would have some resources left over. What is the Synology App like for backing up a PC to the NAS?
REPLY ON YOUTUBE
Im a totally beginner in NAS and am planning to store all personal and family photos. I was planning to get the Synology DS223J but was looking at the DS224+, as well as a QNAP option. I will only use it for personal purposes and work exclusively on Mac (and mostly on iPad).
So my request for an advice is which model would you recommend, considering I don’t want to break a bank. Thanks
REPLY ON YOUTUBE
Great Video content. Fire your editor though. You need to use the “clap” method if he’s struggling sync the audio to the video.
REPLY ON YOUTUBE
just recently got the qnap love it its been amazing, was wondering if i take all the precautions you say can i use the qlink?
REPLY ON YOUTUBE
Been watching your videos a lot lately. Been debating the diy vs turnkey options for awhile to replace my aging Netgear readynas. Is there anything diy that can touch a 12 bay option with expansion like the DS3622xs+ ? I like the form factor and efficiency, but not the cost, Yikes. For a DIY to entice me it would need to be at least $1000 to $1500 less for similar spec.
REPLY ON YOUTUBE
Why can’t I update to 7.2..
REPLY ON YOUTUBE
I was thinking your comparison on software bundles more than just “storage”. I think it would be better to split out storage (you know, the S in NAS) and just compare the software on storage. That would be a better NAS comparison. Then add in all the other stuff for people who want the NAS to do all that other stuff. I was looking for storage only and I think you over emphasised Synology for other reasons, justified if you want those other things, but not a fair comparison as a NAS
REPLY ON YOUTUBE
Both have problems with upgrading RAM. Synology has 1 memory slot up to 4 GB (if you’re lucky, maybe 8 GB). And for QNAP the memory is completely soldered without an additional slot.
The only thing QNAP has is HDMI and 2x m2 slot
very very sad NAS series for upgrade (((((((((((((((((((
REPLY ON YOUTUBE
That guitar solo is so annoying. Hurting my ears. Else a great video.
REPLY ON YOUTUBE
Thank you in advance for your helpful guides. I just bought a QNAP. I follow your guide and I think I configured everything correctly but my nas is soooo laggy and slow. How can I check if everything is okay?
REPLY ON YOUTUBE
I bought a ts262 and to my surprise it came with 2 ram slots, seems they are having upgradeable ram now!
REPLY ON YOUTUBE
I miss the discussion of the Android Apps.
I struggled in my decision and I was short before to buy a qnap. Now I will get a Synology.
I am a programmer, and I know enough about all those stuff. But finally I want to work with it. Want to use the Apps and mobile devices. So the final decision is no pro Synology
REPLY ON YOUTUBE
LOL…; it’s pronounced, BAY-tah….; not Bee-tah 🙂
REPLY ON YOUTUBE
Does QTS have a similar application like Synology’s chat?
REPLY ON YOUTUBE
Great video. I am looking to replace my 5 year old Netgear ReadyNAS 204 with a new Synology 923+ or 1522+. I am primarily using it as a file server but in the future I would probably also use at for automatic backup of our 3 desktop PC’s and 2 laptops.
hould I consider anything other than these 2?
It will be connected to a 10 BGit network.
REPLY ON YOUTUBE
Thank you for the very informative videos. Im interested in a beginner NAS setup. Im always running out of storage and I would prefer to manage my own cloud instead of paying monthly service fees. The data I will be storing are mainly pictures and videos taken from our mobile devices from many years ago. I can’t decide between Synology or Qnap or WD. I know they have their own faults and I recently watched your video about WD cloud ultra being hacked. In your honest opinion, what would be the safest bet for less vulnerability of data from hackers? Should i just stick with a desktop attached storage? I would like to have the ability to access my files on the go which is why im opting for a NAS setup. But terrified of my data being hacked. Also, Is there a way to setup an auto backup from a personal NAS to an external storage HDD? Thanks in advance.
REPLY ON YOUTUBE
Thanks for these useful videos
REPLY ON YOUTUBE
Your video are way too long.sorry bye.
REPLY ON YOUTUBE
“Should you buy”? Does Synology charge to upgrade DSM?
REPLY ON YOUTUBE
QTS app is ugly as hell, coming from an Apple Ecosystem, it’s really a drawback , Typography, icons and UX is a real nightmare. I wish they did a sober flawless user interface. I’ll never understand these Nerds designing visual interfaces
REPLY ON YOUTUBE
I know it’s strange but I’d like to know which NAS is noisier
REPLY ON YOUTUBE
Thanks for the great video. One question that keeps me puzzled (and possibly many other viewers), however, is which of those two devices provides a faster experience. Particularly, you describe on the one hand that Ts262 is much better hardware and therefore faster operation, but on the other hand you state that due to the software the ds224+ would run faster and provides a smoother experience. Could you explain a bit which device provides the faster or snappier operations ? For my case, the NAS will be used for backing up and watching/streaming my photos and videos in the mobile phone app. My current ts233 fails to provide a stable and fast experience for these basic user things. Thanks!
REPLY ON YOUTUBE
Awesome review! Lots of info to process when you are talking from a really technical knowledge base ????
After running 5 years with two TS-253Be NASses, I decided to change drives to SSD’s.
Updated the QTS and started from bottom up as a new system, having all my files rsynced to the second NAS.
During install, I had to check the box – paragraph 6 of the Qnap TOS – that Qnap is allowed to audit my NAS if I am behaving well ANY TIME…
This concerns me a lot because I don’t want NOBODY to snoop in my private files.
Can you tell me, if I only use the Qnaps as file storage and rsync backup, how I can be shure that Qnap can’t access my files??
If not, I’ll move over to OpenMediaVault being quit nice but needing a steep learning curve when talking about correct implementation of encrypted filesystem and backing up the boot drive which can’t be in raid on this NAS.
REPLY ON YOUTUBE
I keep looking at the Synology option, but the drive compatibility aspect just make me go meh. So still on QNAP using WD Red Pro and Red NVME. DS1621+ of interest.
REPLY ON YOUTUBE
Way too much technical comments for those of us who are trying to get away from multiple external drives. I would like to find a NAS Video for dummies.
REPLY ON YOUTUBE
Why use British slang.? It would be better if you used Pounds instead of nicker.
REPLY ON YOUTUBE
Interesting tip for some is that if you’re looking to spend the money on the 262 have a look at the 462 as well, the 4 bay model. As the price of these two might be pretty close. The 20 bucks extra(430 vs 410 in my case) could be worth the 2 extra bays. I’m not sure which one to go for yet, but I happen to notice it while browsing,
REPLY ON YOUTUBE
Qnap deliveres only crap.
Nfs shares on kodi are gone, power settings no longer working ect ect.
Just crap.
REPLY ON YOUTUBE
I understand why they would limit the HDD’s/SSD’s compatibility to avoid misuse but they could at least allow CMR NAS and Enterprise WD and Seagate drives. Btw starting and shutting down a nas everyday what does it do to the disks? Does it prolong the life of the components? Even though they are designed to run 24/7
REPLY ON YOUTUBE
I have a TS-231, its still holding up pretty well.
REPLY ON YOUTUBE
Dude, I knew nothing about NAS a week ago. Your content basically guided me toward my first purchase with so much more confidence. I hope every first NAS buyer watch your content. Keep up the incredibly good work ????
REPLY ON YOUTUBE
Be clear on the SSD storage pools, its not that other units do not support it, they do… Rather, this is just fleecing customers – Synology don’t want to enable on other models, as they want you to believe its “unique” to certain models an encourage you to buy the newer model, and throw the old one out (Yeah, great environmentally-friendly move there!
REPLY ON YOUTUBE
Do Qnap Os have Reverse Proxy?
REPLY ON YOUTUBE
My first NAS was a qnap and it randomly decided to drop one of my drives, then decided to totally reset itself without any of my input. Replaced it with Synology and it’s been so much more stable. Qnap OS (QTS) is utter crap.
REPLY ON YOUTUBE
Still at DSM 7.2-64570 Update 1 here.
Waiting for the DS1821+ update train to arrive in Australia.
REPLY ON YOUTUBE
For the container station part, it looks like it will be simple, but in fact you have to read all FAQ/docs, forums, discords (where no one answer) to hope to do something that might work. And it’s not that I don’t want to use their version of an app, but they’re outdated, plex for example has a version that’s 7 months old!
REPLY ON YOUTUBE
Great comparison video as usual – Thank you so much .
REPLY ON YOUTUBE
@NasCompares – I’m considering purchasing the QNAP TS-464 however given its been out a year, do you know off any upcoming new models releasing shortly? How often do QNAP refresh their line up?
REPLY ON YOUTUBE
Thanks for the review!
REPLY ON YOUTUBE
between the TS-133 and DS124, which one has better hardware?
REPLY ON YOUTUBE
Please can you do a video on setting up of DLNA server on latest QNAP software. Bought a few weeks ago a QNAP SILENTNAS HS-264 to backup my music ripped on my Naim HDX Music server (2000 CDs). But there is no DLNA server on the QNAP software. The multimedia console app does not work. It cannot see any of my music DLNA devices on my network, except for my bluray player. Why is there no DLNA server on SILENTNAS HS-264?
REPLY ON YOUTUBE
…and for those people (like me), having the 5.0.1 installed… should I consider the upgrade to 5.1?
REPLY ON YOUTUBE
Don’t use WDDA for automatically replace a drive (as it flag a drive as failing after 5 years uptime)
REPLY ON YOUTUBE
Tipp: Make a camera crop like 4:3 and put your screenrecording side by side with you. Or just don’t care.
REPLY ON YOUTUBE
Nice, I watched the Synology review the other day.
REPLY ON YOUTUBE
Synology Hyper Backup doesn’t even support OneDrive natively. DSM and Synology apps seem consistent, but there also seems to be a walled garden that limits what you can do with a Synology NAS.
REPLY ON YOUTUBE
Interesting. Had Qnap 20 years ago, and at the time, it seemed a hot mess of inconsistency with processor slowing to a stall if you did too much. That clearly hasn’t changed.
Pity, as some of their software shown looked good, and almost had me in “buy” mode. Waiting to see similar on ADM and TOS (Synology is unfortunately dead to me, without a gpu).
THANK YOU FOR THIS – Best review you’ve done!!
REPLY ON YOUTUBE
Hi,
Just wanted to let you know that qnap are shipping TS 264 with upgradable sodim ram slots, so 16gb is the maximum for this little beast.
Would you please look it up or try to get your hands on one to do some comparisons with your current 8gb soldered unit?
REPLY ON YOUTUBE
Thank you for the thorough review. I’m thinking of buying a new NAS and am torn between waiting to see Synology’s 2024 offerings and getting a QNAP. I currently have two older Synology NASes (1512+,1813+) that have served me well, but I would like something capable of being a self-sustained Plex server with good transcoding capability. QTS gets a bad rap in many reviews and on some forums, so it was good for me to see the newest version in action. QNAP’s security history still remains a concern, but it looks like they’re headed in the right direction. Thanks again.
REPLY ON YOUTUBE
Thank you, we need more software reviews!! If I wanted a DIY NAS I’d build that, so the software and ease of install and ises of key components for NAS users (and I don’t care if it is all through Docker – may even be better). I dont want a bunch of non-maintained first party apps, and want to know the software is improving.
Now please do ADM 4.2 and TOS 5.1 (Synology has no GPUs so not interested for media transcoding so less interesting, but sure others might be).
REPLY ON YOUTUBE
I used your video on Virtualization Station (VS) from April 2020 to create a VM from my Windows 11. It was just enough hand holding to get it done. But now that VS 4.0 Beta is on my QNAP, it’s different enough that your old video has lost a lot of its usefulness. So, I look forward to your new VS video. When you do that video, I would really appreciate it if you would compare the various methods of deploying a VM such as Create, Import, Convert and when each would be used. I find that part or the process somewhat confusing. Also, some tools create VHD files whereas Virtualization Station requires VMD or ISO files. Maybe touch on how to create or convert those files. (I used VMware Ver 6.3 to create my Windows 11 VM but for some reason Ver 6.4 wants to create the incompatible VHD files.)
I would add that SpaceRex did a video in May 2020 about connecting to your VM using the Windows Remote Desktop Connector which really speeds things up. Also Scotti-Byte did a video in August 2022 on speeding up VM’s by properly installing the VirtIO drivers. That made a huge difference as that affects screen resolution, network adapter, and HDD.
REPLY ON YOUTUBE
Glad i sold my qnap and bought a synology
REPLY ON YOUTUBE
Will Bitdefender antivirus run good on QNAP QTS 5.1?
REPLY ON YOUTUBE
MARS also doesn’t seem to work at all – when trying to connect to Google Photos, I just get ‘sorry, something went wrong, try again later’ – not very helpful message… Some of the apps available in this ecosystem appear not worth bothering with. The basics are rather decent, I have had no major problems.
REPLY ON YOUTUBE
Can you now expand a ZFS NAS by adding new drives?
REPLY ON YOUTUBE
Just FYI – Photo Station, QPhoto & QVideo are discontinued after October this year.
REPLY ON YOUTUBE
More and more realising I will have to buy QNAP in future. Smething like qnap tvs-h874.
REPLY ON YOUTUBE
SSD for storage pool is only supported in few of the newer models, I only seem to be able to use that as a cache drive
REPLY ON YOUTUBE
Excellent content as usual. Thanks.
REPLY ON YOUTUBE
Umm I hate to say it but your wrong on both accounts of BTRFS and encryption. I just got their lowest end current model the ds223j and i have both of these options. I however didnt enable encryption as it will make transfering data slower and im not worried about my NAS getting stolen.
REPLY ON YOUTUBE
Thanks for the video. I am using Exos 14TB hdd in my new DS1522+ system hope that’s okay. I got that incompatibility warning as well but ignored it.
REPLY ON YOUTUBE
Do the Docker containers already installed, work seamlessly in the new Container Manager when updating to 7.2?
REPLY ON YOUTUBE
I have a Synology DS918+, but the way I’ve always tried to use it is to basically make my setup idempotent as it were. What I mean is everything I host on there, I just host it with Docker using Docker Compose, so if I ever got another NAS, or built my own server – whether it was Unraid, TrueNAS Scale, or just plain Debian, I ought to be able to just install Docker on it, then copy my docker folder over to it (which contains the docker-compose.yml and all the persistent storage for my containers), then run: docker-compose up -d, and all my stuff should basically just work, without being dependent on a particular operating system or vendor.
The only “first party” Synology things I use tend to be monitoring and backup. I do use Hyper Backup to backup my important stuff to Backblaze B2, but I’m wondering if Hyper Backup makes a backup that only a Synology NAS could read. If my NAS died would be be able to recover my data without buying another Synology NAS?
REPLY ON YOUTUBE
Damn these vids are just too good. I like the hardware of Qnap and I like the software of Synology and I’m still undiceded which to buy.
REPLY ON YOUTUBE
Great overview mate. My only gripe, as always, is no DTS support on video station. I have to transcode my videos before putting them up on the Nas. Why don’t they simply charge the user a fee for a license to which I am willing to pay? Being I don’t use Plex, does Plex play DTS videos on a Synology NAS? Thanx Robbie & G’day! ????????????????????
REPLY ON YOUTUBE
I’m somewhat of a novice and this may be a dumb question, but HDDs seem like plug and play hardware, why would some drives not be compatible with Synology NASes?
REPLY ON YOUTUBE
Thanks for all the hard work putting this together!
REPLY ON YOUTUBE
Synology locking out all the hard disks compatibility and not testing new one anymore is all the proof that your better off going to Qnap.
REPLY ON YOUTUBE
Great stuff
REPLY ON YOUTUBE
USB 2.0 seems a strange choice in this day and age.
REPLY ON YOUTUBE
I like the pc v console analogy. it explains quite a bit. And i was a pc builder and gamed a lot on a pc but as i got older i ended up a console player and i can see the huge benefit of things just working without me having to understand how to flash my bios chip or even know what a bios chip does. that being said i want things how i want them and when so i like customization as an option. For example i use my iphone to store all my music locally just like i did with mp3s and an ipod. Ipods order files in long texts lists which is great if you have several hundred artists and songs etc. But apple changed their app so it had cover art, often only 4 to a screen. Meaning it took ages to find things scrolling 4 at a time when it used to scroll 10 or 15 artists per page. And also it’s organized by album and in a world of singles i don’t know allthe albums on site and i also don’t ever search by album. I might know an artists and a song. But not the album it was on. But either way i’d like to be able to reorganize the how it navigates. and i ended up buyiing a third party music player “CS music” that had that feature. So yeah customization is an important consideraation. And until they went away from celeron i was all in on Synology.
REPLY ON YOUTUBE
you’ve got a global reaching channel and you’re still talking “nickers and quids”.. time to grow up don’t you think? US dollars will give people a better understanding of the value globally, despite I’m not American unfortunately they’re the global currency currency
REPLY ON YOUTUBE
Is it easy to add nvme storage to either NAS ?
REPLY ON YOUTUBE
As always great video. I would go with Synology as I am old Synology user,
Wondering what 2.5gbe USB ethernet dongles are compatible with Synology DS216+II?
REPLY ON YOUTUBE
Wait a min, why not just buy a mini pc with a ryzen 5600u for 250 bucks and a HDD enclosure and make your own file /plex server with 2 – 3 x graphically and computational performance?
REPLY ON YOUTUBE
Your videos are very nice, thanks. A suggestion would be to compare the applications capabilities in both NAS.
I want to buy a NAS with a better hardware because Synology is really bothering me leaving 2.5Gbps out of the table.. I would like to know about usb-copy, rsync, snapshot replication, if Asustor or QNAP are able to fulfill my requirements at the app and functionality levels. Thanks.
REPLY ON YOUTUBE
HI Mate A little Off topic I know BUT 🙂 i’m kinda new to all this. Mate when i’m wondering Can I run a PLEX Nas Server and a Home Cloud for backing up phones “Wife’s 1000000000 pics” lol and kids phones on the same NAS ? If so what would be a Great NAS for me to BUY. I’m willing to spend around the $1000.00 to $500 AUD Mark.
REPLY ON YOUTUBE
Although it’s not officially supported according to Synology, I understood that you can expand the memory of the DS224+ with 16GB to 18GB in total. That’s a huge advantage compared to the QNAP I would say. But as you mentioned in the video, only the expansion of 4GB is officially supported.
REPLY ON YOUTUBE
When will The ds224+ finally be revealed in europe and in Stores?
REPLY ON YOUTUBE
Hello, thank you so much for the review. One question regarding the Asustor AS5402T, is the nvme restricted in them or can we use any brand we like? Thank you
REPLY ON YOUTUBE
Hi
Would you do a deeper review of WD EX4100 and PR4100. I know that they are getting old and not much movement from WD to upgrade / replace them
REPLY ON YOUTUBE
Qnap make amazing kit. I’ve been running them for over ten years without any major issues – the minor ones being due to the hardware slowly getting older and associated problems with that such as firmware updates requiring manual steps to install (although big kudos for them still releasing security updates for my ancient systems), and lack of support for larger drives. Yes, I’ve recently bought another one.
I am impressed with what you can do with their NAS systems *but* as much as it is tempting to use these extras I never would. Years before this deadbolt etc thing happening I was recommending people not to use the remote features. That is not because I specifically don’t trust QNAP to get things right. I would not trust any third party to be able to ensure that there are no holes or backdoors. That includes, by the way, systems such as Teamviewer. Responsibility for the security of my data on my network is up to me – if I hand any of that over to anyone else then that is an act of faith that I am not willing to take. The risk vs reward does not add up.
My recommendation is yes to ensure that your devices are patched and kept up to date, but I would also recommend to not directly expose anything like that to the internet. Rather, I use a VPN to get to my network and from then on it is like I am at home. For a ‘hacker’ to get to my data, they would need to be able to get in through that one hole that is as secure as I can possibly make it.
The other recommendation is to not focus on backups to prevent loss of data due to a hack. That is a concern of course, but there is also a big risk of loss of data due to hardware failure. I have seen total data loss due to two disks failing in a RAID, data loss due to corruption, even a direct lightning strike (although in that case I was able to recover the data through some miracle). Backup because bad stuff happens – like insurance, you may not need it but it is really good to have just in case. Also make sure there is an air gap between at least one of your backups – I have seen data loss due to the corrupted data being backed up over good. Minimum I would suggest would be to have two backups – one where all the data is regularly backed up to a second device on site (maybe an old NAS with drives in a RAID0 array) that is usually physically disconnected when the backups are not running, and the other to a remote site such as a cloud service. Note that you may have a huge amount of data that could be backed up – and to do that to a cloud service might take an inordinate amount of time as well as cost a fortune – but you can also structure your backups so you only backup what you really need eg family photos and important documents that cannot be replaced. Local copies of most movies, for example, can always be ripped again from the originals or simply watched from streaming services.
Finally, I would note that I do like being able to install updates based on my own schedule. If they are forced by default (and I agree that is a good setting for most people) at least provide me with the option to turn off forced updates and perhaps just pester me. This enables me to ensure I have backed up my data before an update is applied. Yes the updates should be applied, but I have seen issues – not with Qnap, but that doesn’t mean it couldn’t happen – where a device is basically bricked after a failed update. I know that I should have a fairly recent backup, but I would rather do it when I know I have a valid and current backup just in case. 🙂
REPLY ON YOUTUBE
I have been hit. Is there a way to fix this without ruining or losing all my data? Admittedly, I am a noob who thought of QNAP as a plug and play with all the appropriate security built in. Any help, would be very much appreciated.
REPLY ON YOUTUBE
I mean, I don’t have enought money to backup my 120TB
REPLY ON YOUTUBE
With all due respect you have blown past the single biggest issue that is 105% QNAPs fault. And still persists to this day. EVERYTHING. And I do mean EVERYTHING on their OS runs as root. As a perfect example:
[/] # ps -elf | grep admin | wc -l
587
I have 3 apps installed on my system that don’t ship by default, and I’ve removed and disabled as much as possible and still…..587 processes are running as “root” or admin as it were. This is beyond unacceptable. No process outside basic core processes required to make the OS work should be running as admin and sure as hell not something like Plex. This screams that QNAP is incompetent as everything is running wide open. This is exactly how these malware apps were able to encrypt the content. They used the tools on the system to encrypt it because they were running as admin. They could do whatever the heck they wanted.
[/] # ps -elf | grep -i Plex
4906 admin 103212 S /share/CACHEDEV1_DATA/.qpkg/Tautulli/bin/python3 Tautulli.py –daemon –port=XXXX –datadir=/share/CACHEDEV1_DATA/XXXXXXX
21774 admin 84 S Plex EAE Service
25832 admin 298956 S ./Plex Media Server
25879 admin 13616 S N Plex Plug-in [com.plexapp.system] /share/CACHEDEV1_DATA/.qpkg/PlexMediaServer/Resources/Plug-ins-ca0c45ff8/Framework.bundle/Contents/Resources/Versions/2/Python/bootstrap.py
28587 admin 756 S /share/CACHEDEV1_DATA/.qpkg/PlexMediaServer/Plex Tuner Service /share/CACHEDEV1_DATA/.qpkg/XXXXXXXXXXXXXXXXX
Going back to your house analogy. If I lived in a shitty part of town I damn well would have video surveillance in my house and have a safe for valuable when I’m away. QNAP has locked the front door. Sure. But the windows are open and all the valuables are out and can easily be seen inside the house.
PS- And before saying I should be running Plex as a different user. I created a plex user, selected application priv and Plex never populated under that. If there is a way of running apps under alaternate user creds it is far and away hidden from the common user interface. Even a simple google search results in people asking why would you even want to do that.
REPLY ON YOUTUBE
Yeah right. AS soon as I have a good solution to backup 92TB of data…..I’ll do it. upload speed is 40mbit a second. (Thanks shitcast….like I care about the gig download speed.) and 100TB external storage is expensive AF. I looked at tape……5K for a tape drive.
REPLY ON YOUTUBE
You talk to much and say to little
REPLY ON YOUTUBE
In the age of VPN technologies such as used by Tailscale, I think all NAS vendors from now on should integrate Tailscale or similar and offer an easy solution for remote access. Like what was said in this video, allow users to set up remote access with open ports, but warn them several times before allowing. Tailscale does not require any open ports on your router to the outside world, and even works through carrier grade NAT.
REPLY ON YOUTUBE
That sucks. I was leaning this way over Synology due to the proprietary crap they seem to be missing ing to. I’m also looking to use this as an alternative to Google Photos and Amazon but it sounds like it isn’t even close to secure.
REPLY ON YOUTUBE
Always update if the update is security related at all.
REPLY ON YOUTUBE
A backup is not a backup if it is online
REPLY ON YOUTUBE
I found the txt files in my /home folders for each user. Luckily my Nasbook wasn’t encrypted. I setup firmware updates to check at 6am every morning and auto update all apps. I also deleted every app I don’t use and have it set so that the NAS reboots every morning at 5:30am. I deleted the HelpDesk app. For some reason the latest firmware doesn’t start the app automatically anymore, sounds suspect to me. My Nasbook seems to be ok. The only thing that bothers me is that the OS will randomly shut down but the router ports still active, maybe once a month. I’ll have to unplug the Nasbook twice to get it running again.
REPLY ON YOUTUBE
I only use my QNAP NAS to store videos so I can watch them via Plex on my internal network. The router must have some open ports since it is needed for my security cameras (port 80 and 6036). It has taken me weeks to rip my DVDs to the QNAP and because of deadbolt, they are all useless now. So I can start again. I have a large house with IoP devices throughout. Any useful suggestions?
REPLY ON YOUTUBE
17:00m FORCED UPDATES TO EAT YOUR MEAT OR YOU CAN’T HAVE ANY PUDDING
The minority but visible issue of RANSOMWARE points to the same conclusion of managed time only on the internet and a different access and use infrastructure, harking back to CompuServe and even military peer to peer access only to break the back of the Time Jack and Slave issue.
REPLY ON YOUTUBE
For many years now Why is NASCompares still always running defence and public relations for QNAP incompetence?
REPLY ON YOUTUBE
QNAP products are a colossal Waste of time and money. QNAP has become a constant worry and threat to my valuable Data. It has been only a few years that I have been configuring and securing my data on these and I have lost all confidence in this company and its software and hardware. The Ransomware attacks go on and on and on and on… I call BS.
QNAP software and security is awful. Two years ago I got hit with Ransomware from the QNAP Cloud itself because lets face it… even if you secure your end you can bet QNAP is NOT secure on their end. Never. No way.
QNAP is not for amateurs and it is especially not for professionals. Professionals don’t waste their time on crap. The QNAP products are so laughably insecure that you might as well kiss everything you put on these boxes goodbye. ????
REPLY ON YOUTUBE
What if the NAS manufacturers created an auto update that Only access their site, but otherwise disallows internet access altogether. ?
REPLY ON YOUTUBE
Is there a way to not expose my nas to the internet but have it on my local area network?
REPLY ON YOUTUBE
Thank you for this I was hit in Sept and my photos mostly traditional formats but most of my RAW files were not.
EVERYTHING said here is accurate and correct . I travel on the months sept -Jan and enable MyQnap for remote access. When I went in to access files for Xmas photo book for family I found out I had been hit
Also because I was running daily virus checks with Malware … it saw scanned the problem at 3am Sept 8 2022 and quarantined the virus… so make sure you have this running. I also had auto updates on firmware
I have ripped out photo station for time being until I can get back to physical hardware. I hope this help
But this Video is exactly correct
REPLY ON YOUTUBE
I agree the owner should have total power over their equipment. Forced updates and forced restrictions do not sit well with me. I am responsible for my data and my device security. That said Qnap is totally at fault for producing insecure apps, and not notifying users in a reasonable time.
REPLY ON YOUTUBE
This video is like payed by QNAP:
“It’s customers fault that they allow QNAP apps to run”.
It’s better to say it simply:
– QNAP apps are unusable gimmicks
– The entire QNAP platform is not usable for internet access.
(previous hack was trough their cloud accounts, so nothing related to local user setup could help)
It’s ridiculous to blame user, routers, protocols (like UPnP) etc. as NONE of the hacks were because of them.
ALL of the hacks were due POOR security (like hardcoded passwords in the source) in QNAP own software and platform.
REPLY ON YOUTUBE
Perhaps QNAP is not for those of us who are not computer experts. Some of my files have been corrupted by DEADBOLT and I now have to recover them from lots of backup discs which will be a day’s work. Suggestion about uPnP Auto config tools, disable SSH and Telnet services appear daunting to those of us not well versed in computer jargon. I would certainly “radomize port numbers” if only I knew how. I have tried to follow the advice given by QNAP and on this video but must confess, that for me, it is not easy to find the controls that will disable these things.
REPLY ON YOUTUBE
When he says “any NAS should not be ”directly” connected to the internet” does that mean it is not behind a router? Also, I don’t need SSL if I only connect to my NAS while I’m at home, connected to the NAS with my own wifi, right? I have telnet, ssh, etc., all disabled.
REPLY ON YOUTUBE
i have both qnap and synology 2 units each. They crash and i mainly purchased to store data. Many headaches, moving forward it is cheaper to just buy a wd 20tb drive for $400ish. The unit with good drives is 1k+ . having a difficult time seeing the value. An old server is also cheaper.
REPLY ON YOUTUBE
My understanding is that even if you follow all the security guidelines and update everything daily you would have fell into the attack prior to Sept 3rd. Assuming you are using Photostation through the internet.
REPLY ON YOUTUBE
I think this video, fails to address the elephant in the room – Everything on the QNAP runs under a single SU account… meaning, all apps, have access to all data. A fundamental security feature on Linux (and modern OSs) is the running of processes under separate account, which allows us to restrict what data they can access – meaning, if an app does have a vulnerability, the impact of an attack is minimised… but because QNAP do not use this, the fallout is basically nuclear!
Synology know this, and have implemented this application segregation.. and the ridiculous thing is, QNAP also know this, they spoke about implementing it 4 years ago, they also spoke about moving to containers to provide application isolation… neither of these have seen the light of day.
REPLY ON YOUTUBE
Just a wild thought: what if some of the Qnap engineers themselves are behind this?
REPLY ON YOUTUBE
And I just ordered QNAP TS-251D today 🙁
REPLY ON YOUTUBE
I was hit by deadbolt ransomeware some weeks ago. Finally I got the key and my files have been fully decrypted Thank you.
REPLY ON YOUTUBE
Starting to think qnap is skimping out and not paying top dollar in their security department. Maybe increase ur expenses in the security department and this type of crap will happen less frequently or non at all
REPLY ON YOUTUBE
My Asustor was hit the first time around here in Australia. Before this time I HAD locked down my 6510T by IP address, was assisted by an Asustor tech to do so, ezconnect & unused services were not activated. After some investigation an Asustor tech admitted one of the attack vectors discovered was through their own automatic update system! You CANT protect against that!
REPLY ON YOUTUBE
Snapshots should give us the ability to rollback in time and retrieve our data before it was encrypted by ransomware. Is taking snapshots regularly a reliable safety-net against ransomware. If a hacker has root access to the nas couldn’t he just delete all snapshots before and after encrypting all data?
REPLY ON YOUTUBE
We have dealt with so many deadbolt cases
REPLY ON YOUTUBE
Lucky enough for me i got help from this guys “mouse”????⬆️, my files were successfully decrypted and recovered
REPLY ON YOUTUBE
Lucky enough for me i got help from this guys “mouse”????⬆️, my files were successfully decrypted and recovered
REPLY ON YOUTUBE
I’m not convinced this latest wave was using photostation. I don’t have this installed and managed to get caught by 0xxx virus but based on this exact situation.i used it for media storage and I did have 443 exposed to web so I can access remotely via qfile app. Upnp disable on both qnap / router.
I only had 1 account and actually had my usb still plugged in with all my backup data. I left it transferring and forgot to unplug it and still the attackers didn’t or couldn’t encrypt it. Based on this I feel thqis may have been dnla/media server related as multimedia is the only folder the media servers are restricted to.
REPLY ON YOUTUBE
DEADBOLT hit my files by adding a suffix to the file names, that’s it. Weird
REPLY ON YOUTUBE
I feel so desperate for QNAP for their products which are frequently subject to ransomware attacks with no solution. I think it’s the right time to shift to other brand NAS for better protection of NAS data..
REPLY ON YOUTUBE
It would be perfect if they had an option of ‘file storage only’ . I could sell 25 a year if that was an actual option. Locking everything down is nearly impossible
REPLY ON YOUTUBE
27:00 most of that is default and requires user to enable insecure setup (like you said have a backup like another nas that isn’t a qnap or bunch of USB external hdds ideally 2 separate )
REPLY ON YOUTUBE
Question:
Is there a way to completely remove QTS from the QNAP server and install something else such as TrueNAS on the metal even if that means having to install a new DOM or is the BIOS so propitiatory it can’t be done without a board swap? Yes it would no longer be QNAP but I feel it would be much more secure and I could at least keep the servers updated without having to buy all new hardware.
The QNAP systems should be forbidden from access to and from the cloud, remote access of any kind or via the internet in any way such as api’s, by out of the box default. The administrator should have to manually configure any setups after acknowledging warnings and security should be enforced period.
I try to keep all my equipment up to date on firmware (including routers, switches, etc.) but QNAP makes even this hard by deciding to not support older enterprise (their term for rack mount) systems and I really don’t believe their reasoning on this either. I have a rack mount sever 4.36.2050 (5-26-2022) which they rarely update firmware on; only doing so as an after thought. The other is newer and still gets the newest updates. I have removed most of the remote access apps from both servers and have done QNAPS suggested disabling of stuff, changing settings etc.. I do have a few cloud apps still in use, but am thinking of moving away from those too to an external program I use.
REPLY ON YOUTUBE
I remember the same attack done at Synology, ransomware attack demanding 1.2 bitcoin, unfortunately I paid them and they gave the key and I unlocked all of my 10 years worth of files .
since then I unplugged my NAS from internet and don’t use its feature.
what synology did? they sent me $30 headphone… imagine that, I paid 1.2 bitcoin for cheap headphone.
I was considering Qnap until I find this video
REPLY ON YOUTUBE
QNAP are damned if they do and damned if they don’t on warning, big scary warnings upset alot of people, some from the “Mah Freedom” view where they just want to do what they like and dont want to be told otherwise by some sort of nanny, and others from the “Thats scary im going to return it/call support and complain” QNAP are behind on the security aspect but they are moving alot faster now than they were, alot of systems are now asking users to configure updates automatically now, Unifi as an example do it on setup, it should be on by default and if you want to manage it then you can turn it off
REPLY ON YOUTUBE
I’m about to outmode my three redundant Drobo NASs (none have ever given me an issue, but it’s time to move on). I have QNAPs in my shopping cart because I’m moving to a fast network.
All I want is a simple NAS. How secure am I if I disable everything but basic functions?
REPLY ON YOUTUBE
My PhotoStation was not exposed to the internet but I still got hit by this wave. AND I had just updated my firmware a couple days before the attack. I do not think PhotoStation was at an older version at the time of the attack either (I cannot remember and be 100% sure, but I do not recall updating PhotoStation recently, and there is no pending update in AppCenter).
Could it be Transmission from QNAP Club app source? The only ports open are Transmission and OpenVPN server.
I did briefly open management web over 443 and forgot to turn it off. But that is not PhotoStation and at the time the firmware had already been updated to the latest version.
Also the malware remover tool cannot find any malware. The anti-virus scan could not find anything related to DeadBolt.
REPLY ON YOUTUBE
QNAP user here who has not been attacked by Deadbolt or any other ransomware as of yet. My devices are not accessible from the internet, and I have no QNAP cloud features turned on. And UPnP is always disabled everywhere.
Just in case, however, I do have all my data backed up.
REPLY ON YOUTUBE
btw I like the first 30 seconds!!!! I wish you could just add…..more info explaining the responsibility of the major brands! why should I be having to pentest…..neways
REPLY ON YOUTUBE
I just got hit by this ransomware few days ago. Without knowing what happened, I updated the firmware and ran Malware remover and they removed my ransom note. I have thousands of photos and videos got encrypted and i’m doomed now.
REPLY ON YOUTUBE
It’s all good sitting in the ivory tower surround by free NASs however if someone spends 2k plus on a NAS e.g. 8 12 16 Bay you not going to have USB hdd to backup to as your invested in a beast system which one would hope has security features to block or apps to under scans etc. Qnap need to work better with the Linux distributior or change the flavour or OS they use.
REPLY ON YOUTUBE
Make sure PnP is turned off on your router. You don’t want something being made public without your knowledge. If you make it public at least you know you did it. If PnP did it, you might be unaware.
I agree about forced updates. At the very least set a reboot window time. 3am in the morning. I know that won’t work for everyone, but it should work for the majority.
REPLY ON YOUTUBE
I wonder if most NAS units were just being used as a simple SAMBA file server if we would have all these attacks and vulnerabilities??
REPLY ON YOUTUBE
Great video. At 27:25 you mentioned a video you did on security settings/randomising ports. Please can you post link. TY
REPLY ON YOUTUBE
What about the snapshot functionality that Synology has? Other than a HW failure would you consider it as an extra point of defence in case of data alteration?
REPLY ON YOUTUBE
Does the upgrade to the photo application in question actually require a reboot? If it does, that sounds like it’s completely unnecessary.
I’d add that the recommendation to create a low-privilege account to host individual apps sounds sounds like it ought to be a QNAP recommendation—if it’s their app, shouldn’t their installers do that by default?
REPLY ON YOUTUBE
I guess we can put FreeNAS on our QNAPs?
REPLY ON YOUTUBE
I got hit today as I only found out when my plex server didn’t show my library 🙁
now all my files are encrypted by .deadbolt I contacted qnap support and got nothing.
any way to decrypt my files or some one or firm that can help?
REPLY ON YOUTUBE
My QNAP is in the trash. They suck. I get constant email advertising new products, but not one email about ransomware that infected QNAP. Had they warned me, maybe I could have updated my QNAP before it was infected. Be careful how you back up your data. My QNAP was set up to automatically backup to a second QNAP NAS. The infected files overwrote the good files on the backup NAS. My third backup was Dropbox. Those files were over written too. Thankfully Dropbox has the ability to go back in time and all of my data on Dropbox was recovered. The bulk of my data on the NAS are movies in the MKV format, thankfully those were not infected.
Any NAS or computer can be infected, but QNAP in particular suck as a company because of ow poorly they handled it. It as if they tried to hide it. DO NOT BUY QNAP.
REPLY ON YOUTUBE
Why not simply access the nas through a local vpn needed to gain access?
REPLY ON YOUTUBE
I was hit… thank goodness that I found it early and I have offsite backup. Nothing permanently lost, but it took a WEEK of personal effort to recover it back to normal (re-downloading lost data + removing the ransom note/malware, which QNAP’s updates do not yet handle, outside of halting the file locking itself). Others will surely have a worse time.
Good moment to update my backup strategy (offsite backup was great, but slow… I need local backup… now I get that whole 3-2-1 backup thing ????). And yeah, lock it the F down from outside access! I’m surprised this isn’t the default state of the Nas out of the box, given what I know now… Live and learn.
REPLY ON YOUTUBE
The defaults need to be biased towards security instead of ease of access. If qnap wants these security issues to be the users fault they should force the users to explicitly misconfigure their systems. Rather than misconfiguring the system on the users behalf and then blaming the user for the fallout.
REPLY ON YOUTUBE
Qnap is AIDS. I’ve never known an operating system on any other platform to be as weak, or vulnerable as QNAPs operating system. If you’re interested in protecting your files buy a Synology or use some open source software. I’m sick of getting vulnerability notifications online about QNAPs, it makes me sick to my stomach.
REPLY ON YOUTUBE
Simple Solution “Do Not Give People The Choice” No Bypass, Nothing.
REPLY ON YOUTUBE
Absolutely pro forced security and critical updates.
REPLY ON YOUTUBE
NAS for Lan only
REPLY ON YOUTUBE
I would also advise upping TLS to the highest version on your NAS or homebuilt, I don’t agree with buying VPN, setup your own all vendors have OpenVPN (QVPN for QNAP) that way you don’t rely on a third-party company
REPLY ON YOUTUBE
As a long QNAP user, I remember when I was on a holiday and saw first Russian IP trying to breach the NAS, as a former IT guy I was watching all logs almost on a daily basis… In 10min I turned off NAS from the Internet and moved everything to local VPN gate closing all ports which were exposed to the internet… Not even 1 problem anymore. If somebody needs an access from the Internet I turn on ports for the time of the access, and immediately turn them off once this person got what he wanted. I still can’t believe in current environment people risk exposing NAS to full internet access… Regular QNAP patching to recommended software versions and regular router (Mikrotik) patching.
REPLY ON YOUTUBE
The breaking wheel or crucifixion should be re- introduced specifically for these people. They lay the blame on Qnap but they are the ones exploiting the loop hole, crushing users, many of whom have not recovered from the immense financial losses of Covid shutdowns and job losses.
REPLY ON YOUTUBE
No.
REPLY ON YOUTUBE
I think most folks need to educate themselves a bit more, bit it’s not all on the user.
Also, using a VPN as the only way into your network is really the way to go IMO
REPLY ON YOUTUBE
qnap has auto update on the os and on the applications. but is disabled as default. I use it on my nas to keep my data more save.
REPLY ON YOUTUBE
am I safe again if I delete or stop the photo app? on older drive NAS.
REPLY ON YOUTUBE
Unfortunately I must admit that I have not deactivated the default admin and don‘t have 2-step verification active. I once tried 2-step and it somehow stopped working after a few days and I was locked out. That‘s the reason why I fear disabling the default admin. Based on QNAPs software quality I fear losing access to my data due to messed up access rights. What is your advise. Start over again from scratch?
REPLY ON YOUTUBE
After getting hit with qlocker I haven’t had my nas connected online since. Recently connected it again just this week and I hear about this deadbolt stuff. Thankfully i sind be fine because I connected after all these new updates.
I have backups of my data om external drives. Heck my nas is no longer a backup means really I just want it to be able to access my data remotely as my own personal cloud storage with terabytes of data.
But now I’m worried I can’t do this without possible future hacks.
REPLY ON YOUTUBE
I can confirm that this deadbolt attack occurred at 9pm on Saturday night Australia EST, I was at work. I agree with you but there are issues with their firmware updates….my NAS was telling me there were no firmware updates when there actually was in August. You are correct there are several simple solutions but the ultimate protection is the 321 backup. I also found that it’s probably a good idea to reinitialise your NAS after a deadbolt attack and restore from a backup…..this is because there are issues with to Qnap operating software.
REPLY ON YOUTUBE
nice video, may i know when the galayou G2 video is published?
REPLY ON YOUTUBE
Put the NAS behind a NAT router at the minimum.
REPLY ON YOUTUBE
Awesome as always! Thank you! ????
REPLY ON YOUTUBE
How about a good video class (Long and lots of detail) on Secure https connections ssl Certs and the like?
I know Qnap installed a default secure certificate but that’s all I know. I did not do anything to set it up. 100% Lost on that stuff.
REPLY ON YOUTUBE
can encrypted files be unencrypted?
REPLY ON YOUTUBE
Dang Bro. Gotta check that authoritarian coming out. When someone says “you shouldn’t be allowed to” regarding a product you own it’s over the line. Do you really want to live in a world of “we’ll assume you’re to stupid to know what’s best for you so we’ll give you no choice”? Did you learn nothing from the lockdown scamdemic? People have to take responsibility.
REPLY ON YOUTUBE
What I don’t get is how someone can be knowledgeable enough to research and buy a NAS but dumb enough to leave it exposed. Even a turnkey solution like most Synology’s and QNAP NAS’s can be, require some knowledge on how computers work. Before I am attacked, almost all novice computer users think backing up is using a simple external HD solution, so if you are using a NAS you have more knowledge than the majority.
REPLY ON YOUTUBE
This dude is on point and honest in the first 60 seconds! I admire his perspective and knowledge, keep it up brother.
REPLY ON YOUTUBE
Is this true
https://youtu.be/2TE0Evn8eB0
REPLY ON YOUTUBE
I got hit with DEADBOLT on Saturday night. I was patched up to the most recent patch and thought that my QNAP was not able to be seen from the outside world. I had my data on another USB hard drive as backup and a number of snapshots on the QNAP.
I reverted to the most recent snapshot on a volume level, as thought that this was the best way to recover and was able to get back in and files were back. Changed my password and reinstated 2 factor authentication.
The 2 factor came in clutch as on Monday afternoon my phone pinged and it was the 2 factor pinging with an authentication code, which they weren’t getting.
Do you have a video of how to setup a QNAP NAS so it is total on your home network…????
REPLY ON YOUTUBE
It’s a pity. There are some really robust older QNAP NAS models (Rack mountable too) that have better specs then many of the newer retail models going for a song on eBay,……but aren’t upgradable to the latest QTS version. Practically criminal it is, real shame that. What with QNAP venerabilities as they are, you might as well pay the ransomware attackers in advance,….
REPLY ON YOUTUBE
I’ve been git by the last attack so I’ve followed your advice and isolated my Qnap from the internet as best as I could, I’m backing up my data as up for now, haven’t checked but I’m pretty sure I’m good to go. Your the best man
REPLY ON YOUTUBE
brilliant video. accountability works both ways
REPLY ON YOUTUBE
The solution could be to split up updates in different areas (“Security”, “Perfomance” and “Apps”, for example) or based on their importance (“Critial”, “Moderate” and “Optional”). And force the user to download the most important ones (following the examples, “Security” and “Critical”). And allow the user to choose the time he/she wants the NAS to reboot to apply the updates (“As soon as downloaded”, “At 1AM”, etc). I have a NAS for personal use and I would apply all of them and reboot as soon as possible. Besides, I think it would be a great idea if QNAP opens a Beta Program so people like me with a personal NAS can join it and get beta versions. Regards!
REPLY ON YOUTUBE
Society, citizens, and their governments and resources need to start taking these crimes more seriously. The message should be sent that if you develop these life ruining, economy ruining, malicious bits of code, then the people of the world will find you, hunt you down, and publicly execute your sorry ass. I don’t care if it’s a two year old coder, when a person is evil, they are truly evil, and need to be snuffed out. I’d personally contribute to a vigilante group do get rid of these sick people. The worst part is I was just reading how a hospital got infected and someone died. Think about it, everything is going to be computerized and require firmware updates and coding.
REPLY ON YOUTUBE
I have been hit on the 3d of September .. F***g QNAP not checking these holes! now I have some stuff that was not backed up.
BTW I followed almost all the recommendations and have automatic updates.. this is how the deadbolt was stopped before all the NAS was ecripted, but not fast enough.
REPLY ON YOUTUBE
Synology should buy Qnap for their hardware. And by combining the best hardware with the best software you get the killer combo…
REPLY ON YOUTUBE
I generally like QNAP’s products — but as a NAS user, I would not expose my equipment to external access for any reason and for any purpose. It may be an occasional hassle but, IMO, it’s a big hassle to discover that your NAS has been taken over by a hacker. The other thing is that I am a former IT guy who has experienced a few situations where entire workplaces were shut down due to virus attacks. And I learned early on the hard way that the “that can’t happen to me because I’m not a big corporation” factor is a big fallacy. Because it can and it did happen to me. Which brings me to this — QNAP as well as all NAS manufacturers should do everything they can to ensure that end users understand the importance of securing their equipment. As well, there should be proper measures to ensure proper security measures are set up on a NAS — like preventing use of a default admin account by forcing users to create a admin account which will have a less likelihood of being attacked.
REPLY ON YOUTUBE
This has been said before on similar videos, but it is not good security practice to connect any device to an open internet connection. If the device or applications running on the device have vulnerabilities, or poor coding, then an external threat actor could exploit and compromise the device. My suggestion would be to enable the device firewall. Do regular patching, inc routers/modems/NAS, Disable UPNP, which can cause issues with online games services, but can help.
REPLY ON YOUTUBE
But thanks for the update.
REPLY ON YOUTUBE
No photo station and no wan access to my nas
REPLY ON YOUTUBE
When you have 80tb of data to back up its not cheap to back up either locally or in a cloud service.
REPLY ON YOUTUBE
Fingers crossed that I did my backup properly…I just got hit. What a pain in the a$$!!!! And yes…firmware updated…just forgot my new router had upnp enabled.
REPLY ON YOUTUBE
Some really good points were made here. However, while the default Admin account should obviously be disabled the neophytes among us won’t necessarily know this. So it’s a fair point to suggest that it’s on QNAP for not forcing the user to change it at initial setup. They may do this now with the latest version of QTS / QuTS Hero but they didn’t always and as such they share some of the responsibility.
REPLY ON YOUTUBE
There is some merit in saying “NAS should remain storage appliance, not as webserver / media server”, but since virtually all NAS vendors market their products as such, I think it should be reasonable to expect they are hardened as such. System vendors should really restore the old way of calling software bug a bug and FIX it, not some ‘vulnerability’ that sounds like job for security experts to discover.
I got hit myself in this wave, still I must respectfully disagree that “using well known port is dangerous”. This is blaming victim at best and misleading at worst. Everyone connect to youtube on port 443, and no one should underestimate the scale of challenge this site is facing every second. To continue the analogy, it won’t offer extra you security by moving the front door to face the back street, or give it a camouflage paint. What matters is a quality door and lock, as well as to close & lock it properly in daily routine.
Well I get the argument that thieves pick easy target to begin with, yet lowering the chance of being attacked does not replace the need to get prepare for up coming attacks.
Technically the question is how is QNAP handle traffic to port 443, or 80 or 8080 etc. Is it using the battle tested httpd to listen, to authenticate, and to reverse proxy request to actual apps? Why does it need a separate firewall app that is not turn on by default? I was surprised to see different QTS apps happens to be separate FCGI threads spawning off cgi-bin/ directly, and handle authentication individually. These imply each app running, and each app update, introduce new risk.
Bottom line: I pay a premium for NAS appliance in exchange of peace of mind. This is a major let down.
REPLY ON YOUTUBE
Thank you for providing well-needed information to the general public…
REPLY ON YOUTUBE
Can you do a video of your thoughts on TrueNAS and it’s place in this torrent of ransomware attacks? (see what I did with the word ‘torrent’ there 😉
Also, could you share your thoughts of replacing OS in a QNAP box to TrueNAS?
Thanks!
REPLY ON YOUTUBE
It should be clear to everyone now that qnap is not up to the task for external access. It is just not worth it.
REPLY ON YOUTUBE
Unsecured external access to the NAS and Photostation,…….who in their right mind would ever,….???
REPLY ON YOUTUBE
I´ve got a TS-653D not running any QNap apps whatsoever. External access possible but no standard usernames or passwords, no standard ports, 2FA, SSL cert etc pp.
REPLY ON YOUTUBE
Ransomware sucks
REPLY ON YOUTUBE
I have secured my QNAP and it has been safe until Saturday when I got hit by Deadbolt, but my most recent snapshot come to the rescue……the thing is that my QNAP was secured as far as I was aware…..????????????????????????????
REPLY ON YOUTUBE
I am IT consultant for 20 years and i loved to had the opportunity to watch this video. To me the thing that QnAP does not have any guilt in their product its at least a bit biased. I know people want to sell NAS and make a good chunk of commissions, its how things works i got that.
But lets face it with a great example, if you have a Tesla, are driving and the car crushes because the system does not allow you to stop, then even if there is a bug there, the brand is responsible, not the end-user for sure.
When we translate the NAS issues, well sure , the end-user needs to have a specific skill set to be able to know how to work with the technologies, but the brand does not say its it can be challenging for some people, who does not understands, a,b,c… etc…. Instead they tell you that you can have everything setup by clicking a simple button, and the more features it has the more people will activate.
I never saw a disclaimer from QNAP or any other NAS brands about what can happen if the users does not have that skillset, and even worst, they market it as a product that is top notch in technology, like having access to the nas content from everywhere. That´s where they have responsibility, i am quite sure some lawsuits will occur sooner then later.
Because they have the responsibility to explain clearly what a basic user should do and should not do…
They also should explain that someone before buying a NAS should have at least a 3-2-1 backup solution , because the NAS is not the backup solution.
I know that for many people, the NAS itself its quite expensive to buy and so many users cant afford to buy external drives for Local backups and also a cloud backup system, that is the bare minimum for whom thinks about having a NAS as home or in a SOHO
And here again i never seen QNAP explaining in a very clear way in their sale pages about their NAS products, when i am talking about QNAP, its not only QNAP , other brands do the same, but are they responsible brands by doing so? in my honest opinion nope.
Probably many small business went out business, some because ethically they don’t want to pay to criminals and others because they cant afford to pay due to the crisis that have impacted so many people worldwide.
Here i believe that QNAP should paid the ransom to solve this issue for their customers, are they obliged to? of course not, but in the other hand they would not have their image burned out and their online reputation is not good to say the least.
I have a QNAP nas devices and i am quite sure that i will never ever buy another from this brand again.
REPLY ON YOUTUBE
I think every brand should add a choice at setup that asks, what is your data classification: very private, private, public. And what is your update tier: beta, innovative, stable and secure. From that the system can make the appropriate choices.
REPLY ON YOUTUBE
Worker with a reliable hacker is what I think is all over the world and I recommend a hacker parfait who works with good heart and sincerity Dee_hack11 is in Seoul☝️☝️☝️.
REPLY ON YOUTUBE
After trying for some time, I had to contact *SCOTTS_HACK* to help me get the deadbolt off my Nas. I’m free now.
REPLY ON YOUTUBE
After trying for some time, I had to contact *SCOTTS_HACK* to help me get the deadbolt off my Nas. I’m free now.
REPLY ON YOUTUBE
*I was hit, so unplugged, shutdown, external USB backs fine. Plex user, was watching at the time no issues, went to update saver denied, then found the splash screen, no on reboot, water gapped on an independent switch no WiFi etc, it instantly goes to initialization. So save to assume the service themselves have been affected. Did safe shutdown. After some time I turn on everything then I found out I’ve been truly hit by deadbolt. I did as many research as I could and I found out that scott can actually decrypt the encrypted files So I paid some money not upto what deadbolt team are asking, then he decrypted my files*
REPLY ON YOUTUBE
Good day all, for DEADBOLT RANSOMWARE REMOVAL, consult *SCOTTS_HACK* Thank you.
REPLY ON YOUTUBE
Good day all, for DEADBOLT RANSOMWARE REMOVAL, consult *SCOTTS_HACK* Thank you.
REPLY ON YOUTUBE
Let Eddie say something…
REPLY ON YOUTUBE
I wouldn’t touch QNap with a barge pole until they drastically change their approaches to the user base, contempt for the user base isn’t a great strategy.
REPLY ON YOUTUBE
You’re ???? such a genius, I really appreciate your services, fast and safe recovery process..
REPLY ON YOUTUBE
You’re ???? such a genius, I really appreciate your services, fast and safe recovery process..
REPLY ON YOUTUBE
My QNAP NAS used UPnP to open all of the ports needed for bad actors to try brute forcing their way in. I was getting over 1200 login attempts per hour.
REPLY ON YOUTUBE
I think forced updates should be a requirement for utilizing certain features. So, if I enable remote access through a firewall of any sort, forced updates should be enabled. IT enabled organizations wouldn’t be making use if these features anyway and in can absorb the risk of automatic/manual updating.
REPLY ON YOUTUBE
I think they get attacked because they move into Face/Facial/Eye/Mask screening. People don’t like that. This is a threat to privacy. I think that is the root cause of it. I don’t know if Synology is in the same as such.
REPLY ON YOUTUBE
I regret I have missed this video 2 weeks ago. #asustor #deadbolt
REPLY ON YOUTUBE
I’m sorry I purchased a NAS as a means to have a BACKUP of what is/was on my laptop or pc. And it’s even sold as a backup. It started with ‘consumers’ being told to connect an external hard drive to backup their data. They would even supply at times backup software. So you backed up to this external drive. Then they started to sell NAS which was a way to still Backup and be able to access those backed up files from any connected computer.
So I disagree that you cannot thing of the NAS as a Backup.
Evidence: Why do they supply NetBak. Which can backup or copy your PC to the NAS.
So if you say the NAS is not a Backup tell these companies to stop supplying backup software that works to copy to these systems.
When I was told I needed a Backup I bit the bullet and purchased a second NAS which is used only to receive a Backup Data from the Main NAS! Its stupid but I understand it.
Especially since this last issue I had to erase my partitions to fix my issue. Great!
REPLY ON YOUTUBE
Wow I liked how you pointed out tech support being abrupt.
I reported a problem months and months ago and it was just impossible to arrange for remote support.
Then there was an update which fixed the problem we were trying to work on. So I basically wasted tons of time trying to recreate the problem and pin pointing the actual issue.
So why was I spinning my wheels for months when they knew about the issue.
Just tell me and ask me to be patient while they fix the bug. Why make me waste my important time for this sh*t.
I also had a problem of the NAS running so slow I could not even log in via the web. Thankfully I have a unit that has a hdmi port and was able access it via direct. But still could not use the system.
That was months and months. I was planning on dumping the whole thing. But it meant dumping two QNAP units. The cheaper of the two worked perfectly. I was angry.
Then I read something in a forum and decided to try it. I had to stop running Q’Center. Once I turned it off and removed it my system ran normally.
The same thing happens when you run McAfee. Of all things to slow down your unit so its unusable what is the purpose of having anti-virus. And whomever says its not needed needs their hand examined. You do!
The built-in anti-virus finds things that McAfee does not? And yes they could be false flags but it works.
REPLY ON YOUTUBE
Great video! I just saw lex friedman video and he talks about his devastating qnap ransom attack.
REPLY ON YOUTUBE
your videos could be a bit shorter and more concise. Lots of filler that doesn’t give a lot of information.
REPLY ON YOUTUBE
Not an IT expert but I bought an entry level Qnap NAS, which is now not connected to the internet and I’ve manually updated. What I’d really like to see is a guide to setting the NAS up safely so that the NAS is available to the home users, but protected from the internet outside. Backing up to two USB drives BTW!
REPLY ON YOUTUBE
Great discussion, can an OpenVPN / windows vpn on QNAP do it? and not juse myQNAPcloud? can it not be a good option? between one’s server and user outside of one’s network.
REPLY ON YOUTUBE
QNAP has significant blame in this latest attack. First, it was their operating system that was hacked (no one had to download a corrupt file). Second, they have all their users emails and all they needed to do is send out notifications to us users alerting us to all the attacks this past year not to mention warning us all to “unplug” immediately when this last attack started. Instead, they remain silent by email even to this day. The only reason I figured out I was hacked is after a month of not logging onto my NAS I found all my files encrypted when I went to grab some photos for my wife. I had to figure out for myself (with the help of bleepingcomputer forum) what was going on, how to get the ransom message back because they had quarantined it. No I didnt have a backup and I guess that is my fault for not understanding the hardware and risks better but I bought the NAS because it was supposed to “simple, safe and secure”. I only use my NAS on my LAN and I’ve never downloaded outside files to it but am not savvy enough to not have it connected to the internet thru my router. If Im lucky enough to get my data back after taking out a loan on my credit card and figuring out this whole Bitcoin thing this weekend, Im done with QNAP and their crappy equipment, buggy software and business approach. QNAP’s silence, irresponsibility and incompetence in dealing with these attacks this past year is the real story here that you all should be talking about as well.
REPLY ON YOUTUBE
What is the most concerning for me as a customer, not that hackers exists, they always did. But that Qnap has backdoor account to my own NAS…… they can remotely access to HBS, force update or whatever….. the clear answer to me to your question is : QNAP is not safe at all, period !
REPLY ON YOUTUBE
I don’t understand why so many “intelligent” people finger-point the victims. Do those guys blame their kids who’s got bullied in school? What a pathetic! NOBODY, NOBODY opened the port to the internet! QNAP got the port opened OUT OF THE BOX! I’m not using mycloud, I didn’t open any port. I didn’t enable auto-update because last year I ever lost files after migrating to the latest build!
This is not the first time they messed up everything. As always, QNAP is trying to escape from their own responsibilities. They pretends nothing happened. Custom service is non-existent. Users forum is full of everything but anything helps fix the issue.
Stay away from QNAP like a plague!
REPLY ON YOUTUBE
Infected last month, huge damages to us, and i guess it’s their ex-engneers who made ransom, and i am sure this company will fall.
REPLY ON YOUTUBE
I use my QNAP for Plex, and I share my Plex with two other friends. This is my second ransomware attack (thank goodness I had backups), so should I stop sharing? Can I make my QNAP secure and still share?
REPLY ON YOUTUBE
Thank you for making this enlightening video! I have now checked and switched off UPnP at my router. I was also watching your Plex setup video where you talk about setting remote access for Plex on a Synology NAS (with DSM 7) . How risky is setting up remote access for Plex to access my media remotely and are there ways to mitigate the risk?
REPLY ON YOUTUBE
I have found QNAP TVS-951X about 350£ (450$) used with 30 days free return + 6TB WD RED drives + 32GB RAM, should I buy it ?? it does look in a fair condition I want to use it for 4k streaming + 1080 and some backup + two or three members of my family watching 1080 content with me also to back up my stuff on it, should I buy it ??
thank you
REPLY ON YOUTUBE
Robbie and Eddie, Thank you for this in depth discussion, and guidance. I’m new to this, bought my nas at the end of November, and have been following a steep learning curve since then. I especially liked the advise to NOT TOUCH your network or nas settings if you do not understand the actions and results. I have to remind myself of that each time I mess with the settings, and have to reconstitute my nas.
REPLY ON YOUTUBE
I bought a single, large (16TB) HDD in recent weeks, plugged that into a free bay in my NAS, created a new storage pool & volume, and copied all my existing NAS Data onto it, and when complete, I pulled that Harddrive out. This is my ‘emergency’ back up, should the worst happen.
REPLY ON YOUTUBE
The Bank & Bank card analogy is a good one.
REPLY ON YOUTUBE
I don’t have remote access to either my QNAP or my Synology directly or through their respective relay systems. Instead, I use OneDrive (OD) as a relay point. My NAS is setup to sync with my OD account. When I’m on the road, my laptop syncs files with OD. So, when I edit a file on my laptop, it then syncs to OD which in turn syncs to my NAS. This won’t work for everyone but it can be a very effective way to effectively gain access to your NAS while working remotely. I don’t do this with the entire NAS, just the folders / files that I may need remotely.
REPLY ON YOUTUBE
Just bought a qnap nas yesterday. Really useful conversation. I have to admit i’m a little more concerned after watching this video than i was before.
REPLY ON YOUTUBE
Probably a recommended setting for beginners users from QNAP might works.
REPLY ON YOUTUBE
We are preparing a new video about how to secure your NAS and your local network.
You can send your external IP address to us via NAScompares.com contact form and we will run free vulnerability tests for you.
This will allow you to identify your network vulnerabilities and open ports etc.
REPLY ON YOUTUBE
Thanks again, last year after qlocker Eddie was adamant that myQnapCloud was safe and I believe the issue was upnp allowing access a hard coded back door.
Do you both still feel myQnapCloud is safe ?
REPLY ON YOUTUBE
Really enjoyed this especially since they got me too. Thank you. Small piece of feedback – it’d be great if you gave Edward a bit more of a chance to speak at times. There are sections where it seems he’s just on the receiving end of a long lecture, as opposed to part of the conversation.
REPLY ON YOUTUBE
Rip out the DOM n install unraid on it 😀
REPLY ON YOUTUBE
Thanks Robert. Thanks Edward.
REPLY ON YOUTUBE
Could you do a video on how to secure your nas? Things like what port to put things on. Stuff like that?
REPLY ON YOUTUBE
im using a tricky way to remotely access my NAS files, by hiding them behind a nextcloud single user on a Pi thats not visible. not infallible, but takes breaking that, just to see files, not alter them or upgrade. if i have to upload, i have to remote into a computer and use other methods. rarely do i need to access files , but it can be done if i have to.
REPLY ON YOUTUBE
After using QNAP NAS devices for years – we’ve lost all confidence in the brand and it’s no longer on our supplier list.
REPLY ON YOUTUBE
TL:DW; version – its a security/ease of use trade-off. If you lock things down users find it too hard to use the features the vendor offers and berates them for it. If you open things up you give users the chance to shoot themselves in the foot, and some will.
Case in point being IoT “plug and play” devices. I was struggling to identify a device on my network today and discovered it had a password-protected web server – I guessed the password on the third attempt. You’d have thought vendors would have learned by now but clearly not.
Another interesting point given the mention of TrueNAS – Unraid ships with all security turned off by default. I think they’ve now realised they erred in doing that, but don’t seem to be in any hurry to fix it. I’ll be keeping any NAS behind a VPN. Wish I could do the same thing with Plex but it seems to need an opening to work properly, so I’ll have to isolate it on a VLAN.
REPLY ON YOUTUBE
One of the mistakes that QNAP made on this was that they actually identified and problem and issued a fix before the attack. But they didn’t make the update mandatory (they can override the user desire on when to take an upgrade). Users that had manually done the upgrade like myself or ones that didn’t have their NAS exposed to the Internet were fine. But other users were hijacked.
REPLY ON YOUTUBE
I did enjoy the video. I got a month ago a TVS-H1288X. We wouldn’t be talking about this if everyone had updated their NAS. QNAP needs to have a shout mode that you can’t miss if the patch fixes a vulnerability. The lack of organized information as not only to what to do but why? Example Port 443. It is recommended to change it but what range and why change it. I assume port scanners don’t deviate from assigned ports and look for low honing fruit. So by changing to 478 it is put out of the scanner range? If we do a router port forwarding to use QBelt on the NAS is that a direct open door to get into the NAS? I am guessing no otherwise why do assigned ports exist. At moment because of questions I have port forwarding off therefore I can’t use QBelt VPN which we are told it safe. My point is there needs to be a source that explains all of this that we can read. I am an engineer and programmer. First thing I did was set up QBelt to my android phone. UPnP was off from beginning. I have turned off myQnapCloud as I am unsure of where it stands safety wise. Has it been broken before? I even bought a certificate from Qnap and installed it. I think you should step in detail on each part of these security setting. What to change? Why you do it. And where to get more if on it. Love your videos
REPLY ON YOUTUBE
Data (physical or electronic) is arguably the most important thing you own the protection of it it more important than money.
If I loose a $50 note it can be replaced with any other $50 note the thing that makes it unique, the little string of numbers in the corner or any stains or creases are not what gives this value to you.
Conversely if you loose 50mb of data it can’t be replaced with any old 50mb of data as it’s uniqueness IS where the value was held. It is by definition irreplaceable/ priceless.
When average joe numpty buys an external HDD, NAS OR starts doing some form of online cloud storage or backup they have stumbled into the realisation that data holds value.
Often it’s a result of learning the hard way and loosing something.
NAS brands really should be held to account for some things but like you say not all.
From a consumer protection point of view, is it fit for purpose? Does it do everything it was advertised to do? Was it free of defects?
I buy a NAS, follow their instructions for setup while using the drives they recommend.
My expectations are:
– My data will be stored there without risk
– My data will be available using ALL advertised methods without putting it at risk
– I will be prevented from accidentally impacting the above two things.
During the setup process there should be a “most users” option that walks you through a VERY simple wizard (most users are not as smart as they think they are… see Dunning-Kruger effect).
Lock out or at least require a certain level of knowledge to unlock the most advanced features. Maybe a big warning when you select advanced option a big simple warning saying “by clicking this we no longer warrant the safety and security of your data” The stuff a car owner should touch is yellow under the bonnet of most cars now. Oil, wiper fluid, etc…
Also as joe numpty does not understand the difference between redundancy, backup etc etc. prompting them to locally encrypt and purchase a offsite data storage plan, backup to another offsite NAS or set up automatic email reminders for periodic backups.
Updates should always come with a have 3 options:
1. Update instantly on release. Early adopters on the bleeding edge (called that for a reason) “the is an update available and will be installed in x hours unless you hit cancel”
2. Delayed update (default most users). There is a new update available it’s currently being installed on some systems. This update will be automatically installed on this hardware after 30 consecutive days of bug free operation globally”. In this mode critical exploit patches are able to be forced if it impacts the last auto update.
3. Auto update off. Notifications on.
I think it’s absolutely NUTS that people give any nas company any form of slack for not treating your data at least as valuable as a bank treats your money. DONT share your pin, unusual behaviour lockdowns of accounts, etc.
Hard to type all this crap on a mobile phone.
REPLY ON YOUTUBE
Great Discussion! Driver’s license…????????????
REPLY ON YOUTUBE
Absolutely, I bought it for the hardware. Not always as inexpensive as I’d like — TS-873A vs 873-AU come to mind.
Is QNAP safe? Well, when it’s a NAS not an iNAS … mostly. I mean, there’s an IOT vector, but this is an IOT issue — does QNAP need to make its NAS safe against a determined in-network hacker? The IOT threat is just a whole nother topic….
The problem is that they market their internet-connectivity, and they need to stop doing that until they get their house in order, because they don’t have their house in order. Their responsiveness to CVEs has been lackluster at best, bordering on dangerously irresponsible. Security concerns are not as front-and-center as they should be. And magic, hard-coded backdoors in software is so gigantically awful — that stuff never should have been checked in to anything that ships to a customer. Astonishingly terrible.
REPLY ON YOUTUBE
Good discussion! But their privacy policy is what drove me away!
REPLY ON YOUTUBE
Great discussion. I like how you alluded to the “everyday man.” The reason I gravitated from Synology to QNAP was #1) Hardware comparison but most importantly #2) Capability to do more thanks to the software’s ability to have a lot less guardrails allowing me to do more.
I am by no means an IT expert, but I want the most hardware for my money and the software capabilities to do it. I also learned early on YOU HAVE to absolutely!!! know what you are getting yourself into before opening up your network with any NAS.
REPLY ON YOUTUBE
There is only one important rule. Never expose your NAS to the internet…until you know exactly what you are doing! Anyway, and always remember, a NAS is NO backup (RAID is not enough backup, either)!
REPLY ON YOUTUBE
Probably time for everyone to realize that these boxes are not good enough for external access. I have 3 qnap boxes and would never expose them to the outside. You want to go outside, go with the big boys like Azure. Qnap is not up for the job. It is fine for your LAN and leave it there.
REPLY ON YOUTUBE
As regarding the backup, one of the reason’s I am looking at buying a NAS is to allow me to put one in my home and one in my parents home, and allow us to both sync our data to have an off site backup.
But this means both need to be exposed on the internet to allow the sync. In this case it I think it makes sense to have both of these to be using the same platform as this includes software to sync.
However if I chose QNAP it is the process of wanting to get the backup capabilities that is exposing me to the data risk.
I am a software developer, (i.e. the worst person in this case since I know enough to be dangerous), but am no ‘Locksmith’, so would really welcome better hand holding and explanation of what the various features are actually doing behing the scenes and what the risks are.
REPLY ON YOUTUBE
QNAP need to open and honest about what vulnerabilities in what software exist on all of their models. If you fix the vulnerabilities sooner via auto-update (and not all vulnerabilities need reboots) then they wouldn’t be in this situation.
REPLY ON YOUTUBE
How about a step by step guide to secure your qnap nas?
REPLY ON YOUTUBE
No, absolutely, NO
REPLY ON YOUTUBE
Safe to save garbage files I guess.
REPLY ON YOUTUBE