ReadyNAS 6.1 volume encryption

StephenB wrote:
... The password/access controls on the shares and admin interface would protect your data from access if drives are in the ReadyNAS (even if the bad guy has the USB key). NOTE - this is a hypothetical. I don't know if Netgear used this kind of approach or not. ...

These can be reset without tampering with the data itself:
http://kb.netgear.com/app/answers/detail/a_id/22818
Handy if u've lost ur pass and forgot the recovery details but from a security point of view it's totally not okay. True, it would require physical access to the box but I'm guessing that won't be a problem, providing the box has been stolen.

StephenB wrote:
It would be helpful if Netgear gave more information on how the encryption is implemented. That would allow admins to do their own threat analysis, and in some cases, allow them to assess if the approach lets them meet regulatory requirements (such as HIPAA compliance in the US).

Couldn't find anything online. If I manage to find some free time I'll contact their support and try to find more info.