Security experts say that firmware for Seagate’s wireless NAS drive is hopeless and that a number of devices allow unauthorised access to files and settings.
Researchers at Tangible Security have discovered a series of vulnerabilities in Seagate gear which leave them wide open to hackers.
In one case, an undocumented Telnet feature could be used to gain control of the device by using the username ‘root’ and the hardcoded default password. Also other vulnerabilities allow for unauthorised browsing and downloading of files, as well as permitting malicious files to be uploaded.
Tangible Security says that Seagate Wireless Plus Mobile Storage, Seagate Wireless Mobile Storage, and LaCie FUEL drives are all dodgy but there may also be others.
The security issues are confirmed to exist with firmware versions 2.2.0.005 to 2.3.0.014. The problems were discovered in March, but a patch was only recently been published, along with an advisory notice from US CERT. Tangible Security issued a warning of its own:
Apparently, the problem is that Seagate has numerous product names for basically the same product under the same vendor’s name or another vendor. Other named products may be affected. The vulnerabilities allow Forced Browsing where the affected device firmware provides unrestricted file download capability and unrestricted uploads of dangerous files, thanks to the fact that the affected device firmware provides a file upload capability to the device’s /media/sda2 file system, which is reserved for the file sharing.
Intel’s third generation SSDs, which use 25 nanometer memory, have arrived, many months before their rumoured launch date in 2011.
A Chinese auction site called Taobao, which is similar to eBay, sold a number of Intel X25-M SSD G3’s according to Dutch-language Tweakers.net. The X25-M SSD G3 utilises 25 nanometer MLC flash memory, which Intel developed with Micron earlier this year.
Three different capacities were available on Taobao, the 160GB, 300GB, and 600GB models. There is also an 80GB model planned, but that was not for sale.
Intel has already released the specifications for the SSDs, but initial tests on those acquired through Taobao show that they are not quite as advertised.
On the 300GB model a seqential read speed of 250MB/s is supplied by Intel, but on benchmarking tests with HD Tune it came in slightly under par at 218MB/s.
It had an advertised write speed of 170MB/s, but tests showed this also slightly less at 167.4MB/s. The difference in this instance, however, is minimal and would hardly be noticed.
The 160GB version has a retail price of around €260 ($360), with the larger 600GB one going for a wallet-eating €865 ($1,200), continuing the trend of significantly overpriced solid state drives.
There is no word yet on when these SSDs will be available for the rest of the world, but rumours suggest a February 2011 launch.
Storage device manufacturer Iomega has today announced a new range of external USB 3.0 SSD Flash Drives for the small and medium business market.
The new 1.8-inch drives utilise solid state technology to deliver greater performance, while the USB 3.0 featre should help increase speed further. They will be available in 64GB, 128GB and 256GB capacities.
The drives also feature 256-bit hardware encryption to protect against data leaks and come bundled with the Iomega Protection Suite anti-virus software to ensure added security. They can also withstand drops from up 10 feet, preventing potentially costly data loss if they are knocked over.
Iomega is boasting these drives as having superior speeds to many others on the market. The USB 3.0 interface allows up to 10 times faster speeds than USB 2.0 drives, while the SSD technology will give twice the speed as a standard 7200 RPM SATA hard drive with USB 3.0.
The drives will be available in early November with prices varying depending on capacity. The 64GB model will have a suggested retail price of $299, the 128GB should sell for $399, and the 256GB is significantly costlier at $749.
All models come with a standard three year warranty from Iomega after registration.