Given how notorious the Chinese government is in forcing local companies to add spyware to their products or store encrypted data for future decryption when quantum computers will become more feasible (e.g. Huawei), how secure do you think their Terramaster NAS products are? Is it worth the cost or is it best to just steer clear of these?
Yes. Next question.
ANYTHING from china is suspect.
There’s no such thing as a “Privately Owned Business” in China…the CCP will always be a shareholder
hot take:
it doesn’t matter if China has your data, it matters if the USA does
I’m not a chinese citizen
I had a Terramaster NAS years ago. It was secure. Never had any intrusion attempts. It was just lacking in power. Switched to a Ryzen based QNAP with dual 2.5G NICs for performance. 5x the cost, but worth it.
I find Americans’ fear of Chinese manufactured products really strange. I’m sure some of those commenters were doing so on their iPhones. Be more concerned about the US government having the ability to read your emails for the last 22 years.
Pribably
There’s an old joke in infosec about wanting firewalls made by every different nation. You want a Cisco device, that has back doors for the Americans, a Huawei device that has Chinese back doors, and a Juniper device with Israeli back doors. Put them all together and you should be good
No no no, that’s not good enough. You also need a Palo alto because all the cool kids are running it and a pf sense for good luck
Don’t forget an EDR solution because the execs are too embaressed to ask what it means so they buy it to save their egos
EDR, XDR throw money at all the acronyms :D
Something AI powered too for good measure, I presume. Ahem. “AI”.
Don’t forget some WAPs.
I’m not too proud to admit I don’t even know what that is. Someone take my IT credentials away
Wireless Access Point. Maybe it’s used more in a networking environment. But Cardi B stole this acronym.
Doesn’t everyone just google it to remember anyways?
That’s the problem with so many acronyms in networking
Juniper is Israeli? I didn’t know that
Silicom is Israeli too, as was Mellanox before the Nvidia acquisition.
Now that you mention it, it’s Checkpoint. I got them mixed up. Corrected
rofl - Americans are getting smarter.
Are you calling me American bro?
My NAS is behind my firewall, blocked from all internet access, so no problem for me, no one to phone home to.
If it’s already been purchased, put it in an isolated VLAN, restrict all device-initiated internet traffic from it. Watch your logs for both DNS and outbound connection attempts from it for a few days.
It makes no difference if the device is Chinese, American, Russian, etc, assume nothing should be trusted and use the principles of least privilege at all times…
i audible said “what. the. fuck.” reading this.
if its not allowed to route out, who cares? 🔥wall it off
Better than the CIA watching your back and notifying the IRS.
Absolutely
Having recently purchased a really nice looking piece of network gear with all the features I wanted at a very low price from a Chinese vendor that had absolutely no existing reputation I was aware of, my experience was enlightening with the final lesson being re-taught: you get what you pay for.
If your use case is within the boundaries of the equipment’s quality limits then you will probably do fine, but I suspect if you try to explore the more complex features of the equipment you will find out where the lack of effort and cost reduction comes from.
how secure do you think their Terramaster NAS products are
I don’t think this would be any less secure than any other consumer vendor device. I just don’t think you’d be able to get much help if anything is broken, and I wouldn’t expect to see any fixes for bugs.
You definitely should not put something like this directly on the Internet, and that advice isn’t limited to Chinese hardware. It is pretty easy to limit a device like this from “phoning home” at your Internet edge if you’re concerned with such things.
If all you are storing there are movie and cat pictures, you shouldn’t be concerned in anyone spying on you.
One word. YES