Thomas (boggyb) wrote,

  • Mood:
Today's discovery is that a Netgear ReadyNAS Duo, when creating a new user account, "helpfully" emails the new user with their password. This is... undesirable, when the new user account has the same name and password as the one I use on my local computer (because single-sign-on makes everything much nicer to use). This is especially undesirable when the reason my local account is passworded is so that I can safely enable remote access for it.

I suppose it did at least send the email using TLS.

Fortunately it doesn't email when changing passwords. Lesson learnt: create account with dummy password, then set it to super-secret-squirrel password.
Tags: cryptography, fail, nas adventures
  • Post a new comment


    default userpic
    When you submit the form an invisible reCAPTCHA check will be performed.
    You must follow the Privacy Policy and Google Terms of use.