tag:blogger.com,1999:blog-5710205.post2044555369765585821..comments2024-02-08T11:00:53.069-06:00Comments on Gordon's Tech: Synology NAS and security risks of enabling notificationsJGFhttp://www.blogger.com/profile/14580785981874040314noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-5710205.post-91809987341539627262019-02-11T22:00:37.419-06:002019-02-11T22:00:37.419-06:00Synology is a company based in Taiwan. Xi has no r...Synology is a company based in Taiwan. Xi has no reach (at least for now and the foreseeable future). So you can rest a little easier.stevechenhttps://www.blogger.com/profile/02253715502598539666noreply@blogger.comtag:blogger.com,1999:blog-5710205.post-51084700099462303282019-02-10T04:45:54.199-06:002019-02-10T04:45:54.199-06:00You should never give an app or a device full acce...You should never give an app or a device full access to your personal e-mail account just for sending out notifications. Just use a simple old-school mail account. They are usually included even in the cheapest hosting plans. Another option is to use an additional free mail account, even Gmail …<br /><br />I have a dedicated old-school mail account for device notifications. In addition, I use plus recipient e-mail addresses to distinguish between devices – if possible, some developers have still not gotten the, ehmmm, message that e-mail addresses can contain plus characters.<br /><br />It is of course a - literal - plus if a device asks for an actual e-mail account. More 'modern' devices send out notifications through their own cloud backend. That is still not mandatory with Synology devices.<br /><br />It is also a good idea to enable only absolutely necessary packages. Synolosy's softquare quality outside the firmware and some core packages is doubtful. Many third-party packages are clearly outdated. Exposing any NAS to the Internet certainly takes a lot of courage.Martinhttps://www.blogger.com/profile/07281335225031210525noreply@blogger.com