Help All data in WD mybook live gone and owner password unknown
community.wd.com
community.wd.com
WD My Book users wake up to find their data deleted - https://news.ycombinator.com/item?id=27624735 - June 2021 (254 comments)
That's seriously messed up. I'd have to very seriously second-guess buying anything that involves software of any kind from this company.
> The vulnerability report CVE-2018-18472 affects My Book Live devices originally introduced to the market between 2010 and 2012. These products have been discontinued since 2014 and are no longer covered under our device software support lifecycle.
So support can be discontinued after two years after introducing a product??? That's ridiculous. It's not even like this was a one-off product and they're no longer supporting that line of work. WD still sells MyBooks.
The fallout from this will be worse for western digitals brand than just patching the cloud service or smartly shutting it off if they weren’t going to support it.
The manufacturer can only provide a warranty and exclude a lot from it. Like Motorola does with the batteries of the smartphones, which only have 3 months of warranty. The seller has to cover the 2 years.
There is no obligation to support a device, like to provide firmware to fix bugs. If the hardware/firmware has a bug, it is a defect, which entitles you to a fault-free replacement within 2 years.
https://europa.eu/youreurope/business/dealing-with-customers...
In particular there is mention of purpose:
> is not fit for purpose - either its standard purpose or a specific purpose ordered by the customer which you accepted
The seller will tell you to send the item to the manufacturer to check if it is a "warranty" case. You, on the other hand, will tell your seller that you won't do that, that you will send the product to him, and that the will have to check if it is covered by the "legal warranty" (notice the difference between just "warranty" of the manufacturer, and "legal warranty" of the seller). It is up to the seller then to forward the product to the manufacturer or to provide you directly a replacement or repair it himself.
If you send it to the manufacturer, like the seller wanted you to, the manufacturer can send it back to you untouched, saying it is not covered by his "warranty". You will have to pay the shipping. Then you will have to send it to the seller, and also let him know that you had to pay for shipping to the manufacturer, that you'd like that money back as well, which the seller can reject (but probably won't).
The seller is in a worse position than the manufacturer, because only he is bound to the the things mentioned on the page you linked to.
For instance Apple had to extend its warranty to 2 years in europe, while leaving it at one year everywhere else for a while. The same way, most sellers won’t deal with makers that will put them on the spot for repeated repairs down the line.
Apple had to extend it because they are not only the manufacturer, but also a seller (same goes for Google and Microsoft).
If you buy your MacBook on Amazon then it can very well be the case that you are not getting the same warranty you get when you buy it directly from Apple. In that case Amazon is responsible for covering the difference in warranty, and you'll have to deal with Amazon if you have problems. But Amazon will tell you to send it to Apple, and if they don't cover it, send it to Amazon, and they'll either repair or replace the device for you.
> The same way, most sellers won’t deal with makers that will put them on the spot for repeated repairs down the line.
This is why the manufacturers will usually be accommodating towards the seller. You're in a better position if you let them both take care of it between themselves, instead of doing the seller's work. Of course this will take more time, but you're more likely to get a better result.
If you live in Europe, just keep in mind that you usually have more rights if you contact the seller instead of the manufacturer, as there's no small print you'd need to read on a warranty card. Either the device works or it doesn't.
These WD devices were phoning home on scheduled intervals and it appears that got issued a factory-reset command, but only at the “quick” format level so everything might still be there but will need to go through a recovery procedure.
If you connect a device to the Internet, you must maintain it. If it's a server, you need typically some system administrator behind. If it's a hardware object such as a camera or a NAS, you need a maintenance contract.
Having a device connected to the Internet without any maintenance is asking for troubles.
This is the only wrongdoing here for WD: not informing their customer that "end of life support" strictly means "DO NOT CONNECT ANYMORE TO THE INTERNET YOU FOOLS!"
"The WD MBL log files indicate a script issued “FactoryReset” command to users all over the world. I don’t use Cloud Storage so I don’t understand how this can happen?"
Oh boy... plus side is other users said data seems to be potentially recoverable
Sounds like for at least some of them, the IoT part was purely a negative as it's solely responsible for their lost data.
The storage is effectively integral to all of them, yeah. Not necessarily the IoT.
On a serious note though, it's kind of a double edge sword, you still have to provide firmware "I bought this device and I can't even use it without downloading something from the internet...!!!" or "The firmware I downloaded off the internet stole my wife and burned down my house!"
This was fairly obvious a decade ago, and today it should be planly obvious.
Google may not be the most trustworthy but I at least trust my data is backed up and safe from hackers.
This shit is coming.
https://www.bbc.com/news/technology-39898319
https://www.edn.com/toyotas-killer-firmware-bad-design-and-i...
https://www.nbcnews.com/business/consumer/honda-recalls-1-4m...
https://www.motorbiscuit.com/jeep-cherokees-recalled-over-sl...
https://www.autonews.com/regulation-safety/mercedes-benz-rec...
https://pressroom.toyota.com/toyota-is-conducting-a-safety-r...
https://www.forbes.com/wheels/news/tesla-recalls-135000-cars...
https://www.prnewswire.com/news-releases/hyundai-issues-reca...
https://www.reuters.com/article/us-bmw-emissions-idUSKCN1G72...
https://www.reuters.com/article/uk-volkswagen-software-idUSK...
https://www.motorbiscuit.com/nissan-issues-huge-recall-on-se...
https://www.mlive.com/news/2019/08/audi-recalls-144k-vehicle...
https://www.automotive-fleet.com/336135/mazda-recalls-three-...
https://www.thetruthaboutcars.com/2020/02/gms-software-recal...
https://www.motorsafety.org/subaru-recalls-2020-legacy-and-o...
The case of "I crashed but then my car caught fire before emergency services could give me medical help" is hard to categorize, and may be substantial...
Basically, the unknown unknowns for vehicle manufacturers is skyrocketing since they are now working outside of core competencies be that EVs, software driven power trains, or backup cameras.
We're getting what we deserve.
I talked to a non-technical Tesla owner friend of mine and I was expressing the sentiment that I didn't want a Tesla because I didn't want to join the rent-extraction everything-is-a-SaaS world that Tesla (and just about every business) seems to be driving towards. His response was of course about how he's never had to pay for any upgrades or anything like that for his Tesla.
A lot of people have jumped on this train with us (the "techies") because some of said it was awesome and the best version of the future and it seems like a lot of people do not see where this track is leading and will be surprised when we get to the terminus.
(all puns are intended)
Then again buy or lease a BMW and you'll need to pay a lot of money to the dealer for simple parts to be changed, because a, the parts are pricey, b, the parts are hard to access. The Tesla at least doesn't have that -hardware- issue.
I'm a recent Tesla owner. What's the worst case scenario you're envisaging ?
But you can buy parts for a BMW. Its not even an option to buy OEM or aftermarket parts with a Tesla. That simple fact cuts out a huge segment of the market from even considering one. You have the crowd that can afford to keep a late model car still under warranty (soccer moms, yuppies, suburbanites, etc) and then you have everybody else who drives used cars or runs them for business. That second group needs to be able to buy parts and the realistic ability to fix them themselves, independent shops, or fleet service. Without that teslas are disposable vehicles. Most people aren't going to buy a second wrecked tesla and park it in the side yard just so they can keep their daily driver running. They'll just buy a different car unless Tesla can sell theirs so cheap everybody will be able to buy another every couple years.
My point above was that talk to any BMW owner about maintenance costs and see if it's any better than the rent seeking concern around software above.
I'll give you a strike against Tesla if you want one, though. If I wreck my car or get it replaced, I lose Acceleration Boost because it's not tied to my account in any way.
This is unusual and unique for auto manufacturers. And its the only thing like it other than other industries such as agriculture (e.g. John Deer). Normal federal laws require auto makers to produce or stock parts for a time period after manufacturer date. This is usually the reason you have licensed aftermarket parts from other makes. Its also the reason GM forced everybody to return all those EV1s since they didn't want to take the loss making those parts after the trial run. Federal law also requires standard interfaces for diagnostics and information such as OBD2. So both state or federal inspection can happen as well as automotive techs can keep the economy going when your vehicle breaks down far from a licensed dealer. The US isn't being weird here, almost every country has the same sorts of rules on the books.
Tesla has these "strange" and extremely unique exemptions from both. Not entirely sure how you get those since its extremely lucrative to have. GM would have probably let people keep their EV1s if they had them. You'd certainly see regular makes come to production with more popular concept cars and keep them true to the concept if they had them. Basically, every other make would love to do the same thing Tesla is doing right now. But for them, they have no choice but to play the uneven playing field if they want to enter the American market. So they have to remain more cautious and careful about what they do release into the wild.
You can "mod" anything but that is not buying new suspension components or even a windshields. And hacking it is no different than what farmers keep trying to do with their John Deer equipment. That is also why right-to-repair is such a big issue. What I can't understand is why nobody ever talks about Tesla there. They're probably the biggest offender.
I'm curious why. I've heard that they're exempt from reporting reliability because of some legislative tie-in to emissions reporting. Is it similar to that?
If anything, it’s traditional manufacturers like BMW ( https://www.businessinsider.com/bmw-subscription-model-for-f... ) that are pushing for this, not Tesla.
Personally I picked up a VCDS adapter for my VW GTI and was able to turn on things like a startup gauge sweep, automatic window closing when it detects rain, configure the puddle lights to turn on when the windows fold and heaps more.
When you don’t pay for heated seats in a VW it doesn’t come with heated seats at all. Maybe the Tesla way is better? But the comparison isn’t one to one.
The blurb at the top of the Tesla upgrades page (https://www.tesla.com/support/upgrades) feels like it would be a shot across the bow for any car company in the same premium car market that Tesla operates in. I really don't think this monetization model was considered heavily before Tesla existed. Info-tainment sure, but the rest of the car I don't think so.
> But, as long as this doesn't turn into a subscription model. I don't really see the analogy to SaaS.
As long as it doesn't! It's also fully possible that the sum-total of changes that this future Tesla is pioneering will be a consumer positive, will be interesting to see how it turns out.
What about if you replace parts of the car yourself? (I guess that's not even possible?)
It sounds like Massachusetts is pushing for laws to make it even easier: https://grist.org/politics/tesla-want-to-fix-your-own-massac...
I don't follow this channel but I do not remember Tesla being particularly encouraging of the trend, similar to other defacto closed ecosystems. They're definitely not egregious but just a little bit closed-by-default.
[0]: https://www.youtube.com/watch?v=NuAMczraBIM
[1]: https://www.youtube.com/channel/UCfV0_wbjG8KJADuZT2ct4SA
To be fair to Tesla, infotainment systems were already heading in this direction, but they have a well established after market and most of the time it's very easy for people to refuse the option and install their own (with Apple/Google/etc integration). Tesla didn't invent this, but the move from just an add-on to what some might consider core "car" functionality seems to me like it can be attributed to Tesla. There is an argument to be had over whether those features are core or not -- are you selling a car that has better acceleration or not? Does it self drive or not? The answer becomes a maybe only because of Tesla's choices, and marks a shift in the thinking. For example turbo'd cars have to get their turbos tuned dynamically -- imagine a world where you have to pay for your car's turbo tuning as a service every month.
> Then again buy or lease a BMW and you'll need to pay a lot of money to the dealer for simple parts to be changed, because a, the parts are pricey, b, the parts are hard to access. The Tesla at least doesn't have that -hardware- issue.
I agree that the current luxury market has a lot of fat. Tesla has come a long way in reducing the fat (the amount of vertical integration they've done is amazing), but my problem is that I don't think the choice to buy an option that isn't doing this monetization model will be around much longer in the worst case.
> I'm a recent Tesla owner. What's the worst case scenario you're envisaging ?
I mean realistically, a world where cars are just another rent-seeking vehicle for conglomerates. For most of history you could buy a car that just worked, and eventually it would become an asset to you and "pay itself off". Cars that never pay themselves off are great at first, until you hit the inflection point where they would have paid themselves off. In a world where most cars (and/or functionality) are leases and thus rent-able machinery, it feels kind of like kicking the ladder in a way that's hard for me to pin down.
Further down the road in my worst case scenario, non-self-driving cars are outlawed all together for safety reasons (once the tech is down it will very likely be hard to argue for letting people put others in danger).
[EDIT] - Just to add for people who have never dealt with turbo-ing their own cars or getting "tunes" for turbo setups, you tune turbo setups on cars and essentially get a golden set of data that works for a certain performance profile. This is necessary because altitude, pressure, specifics of your setup can cause changes in what the software should be telling the components to do at any given time or place in the "power band" (your tachometer, roughly).
This is the kind of thing that can be a dark art since you could optimize nearly endlessly and bad settings are dangerous but once you do it can be reproduced for near free given similar inputs (and of course, dealer-made cars are very similar inputs by design). It would be a perfect thing to SaaS-ify -- most performance-concerned consumers wouldn't think twice about paying $xx or even $xxx a month for a decent tune (assuming a decent general tune wasn't free). Then you have to do things like make sure they're not hobbling base tunes to make premium models more attractive (this has happened in the past already IIRC).
That's decades away for places like Canada and Scandinavia. Outside of California where you actually have snow, the self driving doesn't seem very impressive when it only works for like 40% of the year
See: John Deere & tractors, Right to Repair, etc.
And possibly work like electric scooters, you just park the car and it's not your problem, the next day you use a different one that's close by.
They will be looking for vehicles that are easily repaired.
Are we always mind-connected to every other human? Wouldn't that open us to all sorts of hacking?
I think the s/w and IoT industry needs to step back and consider if they aren't inventing problems rather than solving them.
Unfortunately, they also believe (rightly or wrongly, I don't know, I'm not the target market here) that unless things have an App(TM) to go with it, nobody will buy it. Why would you buy a "dumb toaster" when you can buy an app-enabled "smart toaster" with firmware updates and the ability to send your phone a notification when your toast is done? Standing in the kitchen listening for the ding is soooooo old fashioned!
And, the reality is that most of the companies pushing stuff like that are also "data extraction" companies. There are other companies that pay what, apparently, is reasonably large sums of money for "big data elements" about people. How often do you make toast? Do you like your toast light or dark? What sort of bread do you like? What time do you eat breakfast? Do you sleep in on weekends and make toast later? Do you like eggs on your toast? Do you eat it in a box? Do you eat it with a fox? Do you eat it here or there? Will you make toast anywhere?
Why this is so valuable, I've no idea, but I certainly want no part of this ecosystem.
I've been considering a streaming stick of some sort to replace what appears to be a dying NUC, and some of the "privacy" policies are utterly absurd. Roku's is the worst. It roughly amounts to, "Anything we can think of, we will do and upload, to include scanning your network to find out what else you use. Once we have the data, we will do anything we want with it. And if the laws of your country would make that a problem, we'll just move it to another country that doesn't care and use it there." Really quite horrifying to read.
But they're absolutely inventing new problems - that your device is suddenly without firmware updates and "Oh No, Security Issues!" The solution is, of course, for you to buy another one to replace what would be a perfectly functional one, but they got bored, and updates are hard, and... seriously, who uses a hard drive more than like... 2 years, anyway?
Over the years, I've been increasingly spending my free time away from the internet, working with what seems to be a trend towards older and older machinery. Motorcycles from the early 2000s (some based on late 1930s designs with fairly little evolution since then), a tractor from the early 40s, a car from 1930, etc. And it's a nice breath of fresh air (well, and usually a bit of gas vapors...) compared to the modern stuff. They were built to be maintained, repaired, and have no bloody firmware in them. It's a nice direction.
A major software defect would be hard to repair otherwise.
Back when Consumer Reports was testing the Model 3 and found that the brakes sucked compared to other cars, Tesla overnighted them an OTA update and fixed the problem, and everyone seemed focused on how amazing it was that Tesla could do this, and how dealership visits will be a thing of the past, etc.
Very few people asked how they managed to ship a car with both defective brakes out of the box, that were easily fixed with a software update. That's the sort of thing automakers used to test, rather extensively, before sending cars out for testing and use.
I'm old enough to remember when games shipped complete, not "broken and we'll patch it later." I'm not sure the changes have been an improvement.
I'm aware that modern cars ship with something like 150M lines of code, and that nobody could possibly be expected to make sure they're all correct. My solution of "Maybe we shouldn't ship gigabytes of untested and often broken software in a car?" doesn't seem to be very popular.
Yeah - they sold interchangeable drives/docks that wouldn't actually work interchangeably until you issued your own fixes. They had a stupid server-based auth system that they obviously didn't want to keep maintaining. But, that auth system wasn't even necessary except for utilizing their webclient.
It's a shame, because the NAS/DLNA drive was fast and reliable on a home network.
https://www.nasdaq.com/market-activity/stocks/wdc/short-inte...
To make money off shorting the stock, all you need is for the stock to drop in price