Comment by ksec | Hacker News Reader

Comment by ksec | Hacker News Reader

I am now less sure how anything is secured once it can be reached through the Internet.

May be I have the old way of a NAS that is NOT reachable through the internet at all.

I really want a Time Capsule for all my iOS devices,, and have it only accessible within my Network. But then i am also paranoid about Bit rot on HDD. As I have seen far too many of my Photos or Video with this problem. And I dont believe any consumer grade NAS are quite capable of handling them yet.

I have yet to find a usecase where I want ALL of my files, Photos, Movies or whatever accessible when ever I am. Most of the time I only need one file form work, and it is normally in dropbox or email.

If you want remote access, don't make the NAS directly accessible from the internet, set up a properly secured VPN instead. It is an additional step, but you'll be the one in control of access, not whichever faulty services are running on your NAS.

And don't buy a NAS appliance, buy an inexpensive server like a Lenovo TS150 or HP MicroServer, add a couple of RAID disks (Btrfs or ZFS preferred over hardware or software raid) and run something Linux/BSD based that you have better control over.

Btrfs and ZFS should be able to prevent bitrot. ECC memory is highly recommended.

Yes, That is why I said consumer grade. I dont want to fiddle with things anymore. I know Synology offers Btrfs, but they only offer it at the higher end spec machine. I think their newest DS218 doesn't support either Btrfs or snapshots, and it doesn't have ECC Memory.

Interesting, how do you think bitrot affects a NAS with ECC/ZFS/RAID10 ?

All your bits will rot if your house burns down. You will need something cross region (maybe your whole city gets nuked) but then you'll be exposed to the internet again. Snail mail your drives I guess?

If you want to pay the money get ZFS and you can easly backup the ZFS snapshots to rsync.net.

Which is what I do.

Reply on news.ycombinator.com