NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Jarkod
Jan 14, 2015Guide
Using aptitude to update OS6
Is it safe to use the Debian internal update mechanism, i.e. aptitude to update the system or should I wait for the offcial OS6 releases? Some packets are updated much faster by Debian than by Netgear...
Jarkod
Jan 15, 2015Guide
I know if I screw things up using ssh I'll be left on my own. Fair enough. On the other hand, I don't think beta releases are solutions to security issues. Beta is by definition a (still) buggy piece of software and usually comes late.
As for the repo, what repo are you reffereing to? I've found in /etc/apt/sources.list a link to
so it seems there's indeed a repo with Netgear's updates. They aren't installed automatically so I need to use aptitude. But if I break anything with aptitude I'll be denied support. Conclusion: the repo is useless.
There's of course a total solution to any security issue: to not expose a nas to internet. But what's the point in having it and not being able to access it from WAN? I intentionally skip the VPN (which I actually use to access my nas) because it's a solution for a very limited number of users (I mean people wanting to connect to nas, not nas owners) - it's not possible to generate keys for everyone and share them in a secure way.
My point is: Netgear should address the security issues in OS releases as it does now, but in case of emergency the updated packages should be in the Netgear's repo and people should be acually encouraged to use it to keep their nases as safe as possible. It could be via ssh or - if Netgear doesn't want ordinary users to use ssh - via web interface, e.g. two buttons: search for the os new release and search for the updates. The former would search for what it says, the latter would search for updated packages in the repo and install them.
As for the repo, what repo are you reffereing to? I've found in /etc/apt/sources.list a link to
deb http://apt.readynas.com/packages/readynasos 6.2.2 updates apps main
so it seems there's indeed a repo with Netgear's updates. They aren't installed automatically so I need to use aptitude. But if I break anything with aptitude I'll be denied support. Conclusion: the repo is useless.
There's of course a total solution to any security issue: to not expose a nas to internet. But what's the point in having it and not being able to access it from WAN? I intentionally skip the VPN (which I actually use to access my nas) because it's a solution for a very limited number of users (I mean people wanting to connect to nas, not nas owners) - it's not possible to generate keys for everyone and share them in a secure way.
My point is: Netgear should address the security issues in OS releases as it does now, but in case of emergency the updated packages should be in the Netgear's repo and people should be acually encouraged to use it to keep their nases as safe as possible. It could be via ssh or - if Netgear doesn't want ordinary users to use ssh - via web interface, e.g. two buttons: search for the os new release and search for the updates. The former would search for what it says, the latter would search for updated packages in the repo and install them.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!