OK, I repeated it for you!
I’m still at a loss about what (if anything) I need to be able to continue to use the little MyCloud box sitting next to my Virgin Superhub (modem/router) after April.
I’ve set up FE explorer and use it mostly to access the box, and load stuff - though I prefer the MyCloud app.
I don’t want remote access, just local, in my home. So do I need todo anything to disconnect internet access, since I won’t need to use it anyway? Or if I do that, would that enable me to continue to use the MyCloud app? In which case how I set abut doing that? Preferably without involving the WD company, since I don’t trust them.
Yes, just go into settings and turn off cloud access. The firmware update promised in April may do more but, for now, just do that. You won’t be able to access the NAS with the MyCloud app after April but you WILL be able to access it on your network with FE or NE (not sure why you prefer the MyCloud app - I always found it an unreliable dog). Any other device on your network will also be able to access it (eg iphone with one of the many explorer apps, or an amazon firestick, etc).
First step, if you don’t need remote access, is to disable Remote Access/Cloud Access in the My Cloud Dashboard > Settings section. See the following WD Knowledge Base Article for more information.
How To Disable and Turn Off Remote Access on a My Cloud
https://support-en.wd.com/app/answers/detail/a_id/29502
Second step, block broadband access to the My Cloud at the local network router (if possible). Not all routers will block broadband access per local network client but generally consumer routers will offer such an option. One may have to search the internet for their router model instructions on how to block broadband access per local network client.
Note: When disabling broadband access to the My Cloud certain features/options may need to be set manually. This may include having to set the My Cloud Time manually due to the NTP function of the My Cloud not being able to reach an Internet Time Server. If one runs a local network NTP server, one can configure the My Cloud Dashboard > Setting > NTP option to use the local network NTP server.
Thanks. First thing, if I can get full access to my stuff anyway after WD cuts us off, by using FE explorer, why do I need to disable broadband connection for it? I won’t be using it anyway, so why can’t I just forget it?
Asssuming there’s some benefit to me, and I need to get it sorted, I’ve never gone to settings in MyCloud, or even looked at the dashboard. I’d appreciate advice on how to do the necessary, as tech free as possible.
As for the MyCloud app, I like the way you can check using Activities to see how a big download is progressing, and the general feeling of it. The FE explorer app is much sparser. I wonder if there any alternatives available for iPads that would do the same job, so I could look around. I like to have alternatives, in case for some reason FEexplorer does a WD on its users.
I can’t see why the fact that WD won’t support the My Cloud app loaded on my iPad would mean it wouldn’t still work. Though there’d be the problemof it getting clogged up, and no obvious way to clean it.
I’ve just had a look at the MyCloud app, and spotting Settings. In it there’s an option to sign out from MyCloud.com, and another for updates. Could the former be a simpler alternative to hunting up and fiddling with Desktop?
Blocking broadband access has to do with the nature of the potential security vulnerabilities that are present in the OS3 firmware (in addition to the firmware used in the My Book Live device) that caused WD to terminate support for it and move to OS5. By disabling broadband access (i.e. the internet) from the My Cloud close down one possible vector that could be used to compromise the My Cloud through those potential security vulnerabilities. One of a number of articles from mid last year which covers the latest round of security vulnerabilities in certain WD devices including OS3 My Cloud:
Another 0-Day Looms for Many Western Digital Users
https://krebsonsecurity.com/2021/07/another-0-day-looms-for-many-western-digital-users/
Its up to you to decide if you want to secure your OS3 My Cloud beyond just disabling Remote Access/Cloud Access in the My Cloud Dashboard.
The information on how to disable Remote Access in the My Cloud Dashboard was previously posted above. If you don’t know how to access the My Cloud Dashboard, see the following WD Knowledge Base Article.
How to Access the Dashboard on a My Cloud Device
https://support-en.wd.com/app/answers/detail/a_id/27432
Bennor is correct - - -there are numerous security issues with the OS/3 software; and it should be isolated from the internet.
To you question about the WD web app: Fundamentally, the way that app works is that it is using a web connection TO WD servers, which in turn read data from the drive. Those WD servers are “going away”; which is why the app won’t work.
So the reason to disconnect from the intenet is to remedy a security problem that’s been there all along, and the MyCloud box would still work, and the contents accessibleu, using FE explorer.
Well,security matters, so I’ll try to access this Dashboard and do the necessary, but if that proved too difficult I’ll not feel too worried about letting things go. That How-to guide sounded a complicated to me.
What is it about WD that they could not come up with a way to access the Dashboard through an iPad rather than bringing in computers? And when signing in to ask questions I found they don’t recognise the existence of tablets, nó option to give iOS as your operating system.
They’re a funny bunch - one thing that struck me especially was the way they say their support is changing, when what they mean is, we are cutting offall support to the mugs who trusted their promises.
My query about settings in MyCloud app - is there any point in my pushing the sign out button? And, while presumably the app won’t be in my App Store after April, won’t the MyCloud app downloaded and set up in myiPad still work the same as ever, since it does notinvole WD in doing anything?
how to do this exactly? I have old router Hitron CVE-30360 and can not understand if this model has that feature. Can someone help me, here is the manual Hitron CVE-30360 Manuals | ManualsLib
Like indicated one may have to search the internet to see if their router supports blocking internet/broadband by specific local network client. Typically the modems, routers, gateways provided by one’s internet/broadband provider are limited in features. This may include not being able to block internet/broadband to network clients. There may be ways around it, but again it depends on the features and options of the specific modem, router or gateway that one was provided. One may need to contact their broadband or internet provder to see if they can tell one how to configure their equipment to block broadband to a specific network client.
If the equipment isn’t capable of blocking the internet/broadband to a client then one will be stuck with relying on the disabling of remote access/cloud access within the My Cloud Dashboard. Or one could buy their own router, one which does have more capability and set it up behind their broadband/internet provider’s equipment. Note that usually doing so requires one configure the broadband/internet providers equipment in some fashion. Once again one will need to search the internet for how to do so (add a router behind the current modem, router, gateway). Directions are different depending on the equipment and router one purchases.
Provisional success! It turns out that it is perfectly possible to access the Dashboard via my iPad. So I did that, and was able to turn off remote access - and I can still access my device both via the MyCloud app and FEexplorer.
So it’s provisional because up the thread there were indications that there are other things to do still. But I’m hoping I can get along without having to do some.
The MyCloud app (even local) will probably cease to function after April. So prepare for this possibility. As to the security vulnerabilities, to some extent they were always there but have become much more significant as the sophistication of hackers has increased.
My modem /router is a Superhub 3 supplied by Virgin Media, together with my Broadband and TV and Landline, so I can get on to them about it.
But i feel reasonably relaxed about security, since these backdoors etc are what I’ve been living with for a good few years. I’ve found that with the remote access turned of my access to my data seems noticeably faster.
Thanks for your help.
yes, I searched in Internet but not sure if I understand right all the definitions, thats why I asked for help.
For my router I find the option MAC filtering,
Blockquote
you can set up a list of MAC addresses, and then specify whether Deny/Allow the devices on the list access to the CVE-30360 and the network (in which case all other devices can access the network)
Or maybe the feature IP Filtering:
Is that the same?
You may want to contact your broadband provider or the modem/router/gateway manufacturer for assistance with that device. As previously indicated not all modem/router/gateway units will have a clear cut option to block broadband access to/from a specific network client device.
Generally MAC Filtering is used to block or allow specific network clients to join the local network (or WiFi connection). It typically either allows the device on the network or it doesn’t. If it doesn’t allow the device on the network then no other devices can access that MAC Filtered device.
No idea if IP Filtering could be jury rigged to block all the ports (generally 0 to 65535) for a specific network client and if it would block both inbound and outbound connections. From the sounds of it, based on that screen capture, that router/gateway may only bock outbound connections. Better than nothing but its better to block both inbound and outbound connections, if possible, to the My Cloud.
do you mean, that if I block the MAC address of the MyCloud on the router then I wont be able to access the Mycloud at all?
Usually MAC Address Filtering bocks or allows specific devices from the local network (and by extension broadband/internet). See the explanation for MAC Address Filtering that the user manual for the Hitron CVE 30360 gives. (English User Manual or Spanish User Manual)
4.1.4 MAC FILTERING
Every networking device has a unique Media Access Control (MAC) address that identifies it on the network. When you enable MAC address filtering on the CVE30360’s firewall, you can set up a list of MAC addresses, and then specify whether you want to:
• Deny the devices on the list access to the CVE-30360 and the network (in which case all other devices can access the network)
or
• Allow the devices on the list to access the network (in which case no other devices can access the network)
yes, and that is what one wants/needs to secury its MyCloud, right or not?
No. The user manual indicates by using MAC Address filtering, one is either allowing individual device access to the CVE-30360 and the network or disallowing individual device access to the CVE-30360 and the network. If the device cannot access the CVE-30360 or the network, how can other local network devices access that device that is being blocked by the CVE-3036?
