Web  1 sites indexed in VXNA
17 articles feed address
EyebrowsWhite's repos on GitHub
TypeScript · 65 watchers
garage-admin-console
A modern web-based administration interface for managing Garage distributed object storage clusters.
TypeScript · 3 watchers
key-display
Display key press on web page
Jinja · 2 watchers
ansible-role-meilisearch
An Ansible role to install, configure, and upgrade Meilisearch as a systemd service on Linux systems.
TypeScript · 2 watchers
wgquick
Secure WireGuard keys, ready in seconds.
Vim Script · 1 watchers
.vim
my personal vim config
Shell · 1 watchers
ansible-role-garage
An Ansible role to install, configure, and upgrade Garage Object Storage as a systemd service on Linux systems.
Lua · 1 watchers
ansible-vault.nvim
Encrypt, decrypt, view, edit and rekey Ansible Vault files and inline YAML !vault values in Neovim. Create new encrypted files without leaving the editor.
Shell · 1 watchers
dotfiles
Lua · 1 watchers
nvim
TypeScript · 0 watchers
all-in-raycast
my raycast extensions
Jinja · 0 watchers
ansible-development
Shell · 0 watchers
ansible-role-litedump
An Ansible role for scheduled SQLite database backups using systemd timers.
Jinja · 0 watchers
ansible-role-wireguard
Ansible role for installing WireGuard VPN. Supports Ubuntu, Debian, Archlinx, Fedora and CentOS.
TypeScript · 0 watchers
eyebrowkang.github.io
Tech Test Bed
Dockerfile · 0 watchers
jenkins-agent
Python · 0 watchers
n8n-workflows
CSS · 0 watchers
omarchy-cozy-theme
Go · 0 watchers
terraform-provider-acme
Terraform ACME provider
Go · 0 watchers
terraform-provider-garage
EyebrowsWhite

EyebrowsWhite

V2EX member #511263, joined on 2020-10-06 11:38:22 +08:00
Today's activity rank 1217
eyebrowkang
Per EyebrowsWhite's settings, the topics list is hidden
Deals info, including closed deals, is not hidden
EyebrowsWhite's recent replies
@EyebrowsWhite 我认为 Reddit 的一楼评论说的很对,要么不要对公网开放除了 VPN 之外的端口,要么及时更新服务,普通人能做的也就这些了。

至于说最新版本也中招,这种 0day 真碰到谁也没办法。但是目前我没找到最新版本中招的消息来源,就这个 360 的文章来看,这个属于 1day ,距今已经一个多月了。
在用群晖,很幸运没中招,马上把端口转发关了。

看了下相关信息,今天早上 360 发的文章 https://www.360.cn/n/13055.html 涉及的漏洞是 9 月份的,已修复,https://www.synology.com/en-br/security/advisory/Synology_SA_26_13 这次修复涉及 8 个漏洞,其中两个 CVSS 9.8 ,不需要登录就可以利用,其余六个要登录才可以。结合 AI 分析了下,只要公网能访问 web 端口,且没有升级版本就可能中招,没有中招可能只是没被扫到。

搜索“C3RB3R synology”可以找到一些相关内容,这里贴两个链接:
https://www.oschina.net/news/503279
https://www.reddit.com/r/synology/comments/1xhqgov/well_it_finally_happened_my_first_real_ransomware/

另外,这里可以看群晖 DSM 版本发布记录 https://www.synology.com/en-global/releaseNote/DSM
5h 7m ago
Replied to a topic by ninjaJ › MacBook Pro › 新款 MacBook 的触摸屏真的有用吗?
可以更方便使用 iphone mirroring
3 days ago
Replied to a topic by Geon97 › Mac mini › Mac mini M6 价格彻底崩了
如果拿来当主力机那肯定是不够看,但是要知道丐版 M6 托管价格普遍 100 刀以上,如果拿来跑 CI ,或者让 AI 接管当构建机,那就是神机好吧
当 runner 跑 CI
7 days ago
Replied to a topic by DejavuMoe › Claude › Claude 20 刀 5h/每周有多少额度?
250 刀左右
9 days ago
Replied to a topic by huangqihong › 分享发现 › 武汉交通卡终于支持苹果钱包了
@huangqihong 哭死,不想升级系统,我还是继续用实体卡吧
9 days ago
Replied to a topic by huangqihong › 分享发现 › 武汉交通卡终于支持苹果钱包了
@EyebrowsWhite 说错了,我 iOS18
9 days ago
Replied to a topic by huangqihong › 分享发现 › 武汉交通卡终于支持苹果钱包了
难道要 iOS27 吗?我 iOS15 为啥看不到
第一,并非高质量出口,第二,用的是 systemd-nspawn 的隔离技术,能做的事情有限,第三,这种明显违反 TOS 的事情自己偷摸搞就算了,还大肆宣扬,实在不应该
About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Privacy   ·   Solana   ·   5162 Online   Highest 6679   ·     Select Language
创意工作者们的社区
World is powered by solitude
VERSION: 3.9.8.5 · 186ms · UTC 07:44 · PVG 15:44 · LAX 00:44 · JFK 03:44
♥ Do have faith in what you're doing.