Apple Time Capsule Security/Hack?

[Belle]

I'm a really old but cool lady with an Apple Time Capsule. The combination hard drive/router is very convenient. However, I just can't bring myself to put any data on that hard drive that I wouldn't want published on TOTSE. Do any of you young and brilliant techies have any insight into the hack ability of the Time Capsule data? Or a way to secure it? I couldn't find anything myself. My first instinct was to google up some magic firewall or something. I came up empty.

[Equinox]

Wow, you made an account just for this troll thread...

But, you failed horribly. I knew you were a troll just from the title.

[Belle]

Originally Posted by Calypso

Wow, you made an account just for this troll thread...But, you failed horribly. I knew you were a troll just from the title.

Not, honest. I understand the confusion because I kinda came out of nowhere. I am in mourning over TOTSE and it led me here. I've been reading TOTSE for 15 years and loving it. I'm legit, and you smart young ones have nothing to fear from helping me out. Believe it or not, I have a thing or two you guys will find useful at some point. Honor among thieves you know.

My husband & daughter love nothing more than learning how to blow things up and pick locks. He had a lock pick kit before I married him twenty years ago. My tomboy daughter is dying to blow things up in the name of science. I love reading the bad ideas thread. I hang at Ogrish forum. I *was* young once too. It isn't MY fault I got old. You will, too!

I honestly just want to secure my Time Capsule and could not find a thing on it anywhere on the www. Which makes me think it is wide open since the router is always online. Or, if it can't be secured, I'll continue to just put drivel on it. I thought if it could be done or not one of you guys would know.

Have a mod check my IP. It isn't a proxy or anything. I'll gladly send a mod my complete real isp info & more for verification.

[Belle]

Originally Posted by Calypso

Old people don't need companionship. They need to be isolated and studied so that it can be determined what nutrients they have that might be extracted for our personal use.

1) I was born in 1965 so I'm not completely fossilized. My breasts are actually quite hot if you put a bag over my head.

2) I'm stealing your signature line for future use.

3) Guilty as charged for not lurking longer before first post.

[The Cheshire Cat]

Originally Posted by Belle

1) I was born in 1965 so I'm not completely fossilized. My breasts are actually quite hot if you put a bag over my head.

Proof.

Also, I'm not quite sure what you're trying to get at here. Could you explain a bit more?

[RDProgrammer]

[quote=Belle;189184]1) I was born in 1965 so I'm not completely fossilized. My breasts are actually quite hot if you put a bag over my head.

pics?

RDP

[Belle]

Originally Posted by Expl0itz

Proof.

Sorry, Calypso's warm welcome turned me off and ruined it fer ya ALL. It's okay though, all is cool. I'm a fireproof old hag who probably has a bunch of exposed data and doesn't want to piss off anyone in this subforum

Originally Posted by Expl0itz

Also, I'm not quite sure what you're trying to get at here. Could you explain a bit more?

Time Capsule is one piece of hardware that works as a print server/router/wireless network/AND 500GB hard drive all in one unit. It works really well, and for $300 was cost effective since I needed a 811n router and didn't own any external hard drive or print server.

The nature of the device means that every second it is powered up and connected to my cable modem (which is always), that same 500gb hard drive is always powered up.

I can't help but believe any data on that drive is essentially there for the taking by anybody with half a clue. I don't put anything important on it, but I'd like to secure/protect what I do have even if it is lame personal crap.

I've looked around myself, but all I can find to secure the data is a couple of lame password/login options that are part of Airport.

I am clueless on Apple & Security. However, I do predict, the first day serious malware goes wild on OS X 90% of the people using Macs are going to get infected, lose all their personal data, and jump out the window in despair.

Any help securing my Time Capsule or learning about ways to hack it so I can protect against it, would seriously be appreciated. But not rewarded with hooter shots.

[slowdown]

Originally Posted by Expl0itz

Proof.

this. proof of ta-ta's

Also, lol @ this thread. OP sounds creepy.

[The Cheshire Cat]

Originally Posted by Belle

Sorry, Calypso's warm welcome turned me off and ruined it fer ya ALL. It's okay though, all is cool. I'm a fireproof old hag who probably has a bunch of exposed data and doesn't want to piss of anyone in this subforum

Time Capsule is one piece of hardware that works as a print server/router/wireless network/AND 500GB hard drive all in one unit. It works really well, and for $300 was cost effective since I needed a 811n router and didn't own any external hard drive or print server.

The nature of the device means that every second it is powered up and connected to my cable modem (which is always), that same 500gb hard drive is always powered up.

I can't help but believe any data on that drive is essentially there for the taking by anybody with half a clue. I don't put anything important on it, but I'd like to secure/protect what I do have even if it is lame personal crap.

I've looked around myself, but all I can find to secure the data is a couple of lame password/login options that are part of Airport.

I am clueless on Apple & Security. However, I do predict, the first day serious malware goes wild on OS X 90% of the people using Macs are going to get infected, lose all their personal data, and jump out the window in despair.

Any help securing my Time Capsule or learning about ways to hack it so I can protect against it, would seriously be appreciated.

Mmmkay. Thanks. I somewhat get it now. Though, I've never used one, I'm thinking that maybe your best bet is to buy just a regular router, and put it between the Time Capsule and your Modem. I've done this before, except I used it as a repeater (I'm lazy) but the same principles apply here. With the routers built in firewall, I don't think anyone will be stealing your megahuRtz. It just being one more line of defense. Also, passwording it wouldn't be a bad idea either if you do this. Also, I'm not quite sure about the configuration of it all, but it shouldn't be too hard to figure out. Shit, it might even be plug in and go.

That's about as simple of an idea as I can come up with, which has worked for me in the past. Do let us know how it goes, or if you come up with something else.

But not rewarded with hooter shots.

PLEASE?!?!?!?!?!?

We get lonely and deprived down here in this forum

[Belle]

Originally Posted by slowdown

this. proof of ta-ta's

Also, lol @ this thread. OP sounds creepy.

You guys *really* know how to charm a gal I'm a "troll", "creepy", and "my nutrients should be extracted for your personal use", but would I please reward your insults with perfectly good porn other people would pay for? Yep, right away, I'll get on that NOT>

FFS, I'm glad I am fireproof. You guys are rough.

If anybody with a mentality over 13 would like to step up and provide useful information, thanks in advance.

[The Cheshire Cat]

Originally Posted by Belle

You guys *really* know how to charm a gal I'm a "troll", "creepy", and "my nutrients should be extracted for your personal use", but would I please reward your insults with perfectly good porn other people would pay for? Yep, right away, I'll get on that NOT>

FFS, I'm glad I am fireproof. You guys are rough.

If anybody with a mentality over 13 would like to step up and provide useful information, thanks in advance.

You missed my post. Also, any more questions about my idea and I'd be glad to help you out.

[Belle]

Originally Posted by Expl0itz

We get lonely and deprived down here in this forum

No wonder you are lonely and deprived here, the way I got the love. If you had hit me in a drunken webcam mood to flash, the flames around here would have sent me and my hooters elsewhere anyway,

[slowdown]

Originally Posted by Belle

You guys *really* know how to charm a gal I'm a "troll", "creepy", and "my nutrients should be extracted for your personal use", but would I please reward your insults with perfectly good porn other people would pay for? Yep, right away, I'll get on that NOT>

FFS, I'm glad I am fireproof. You guys are rough.

If anybody with a mentality over 13 would like to step up and provide useful information, thanks in advance.

lol @ would pay for.

Just so you know, you are primarily talking to females right now.

Sorry, I don't know much about what you're requesting, otherwise I would give you the info you needed. Good luck with your time capsule and help though.

[Belle]

Originally Posted by slowdown

lol @ would pay for.

Just so you know, you are primarily talking to females right now.

If you are female, in this thread, and on this forum, I'm sure you know quite well that certain desperate males will pay for porn regardless of the "quality", that the "quality" of porn is surely in the eye of the beholder, and if I found them here they'll probably know how to use a stolen credit card to pay for it anyway.

I had an admirer on a different forum that would gladly pay just for shots of my un-manicured feet. My friends and I charitably sent him some candid bare foot unencrypted photos, and my real life spouse got quite jealous.

Now, why is it that women don't need to pay for porn?

[Belle]

Originally Posted by Expl0itz

You missed my post. Also, any more questions about my idea and I'd be glad to help you out.

Yes, my apologies to you; our posts crossed. THANK YOU for taking the time to give your me thoughts on the matter. Surely there are more breasts in your future than there are in some other posters I don't even know what a "repeater" is, but I *do* know that all decent routers have hardware firewalls in them. And I do have the old one or two around here somewhere. It never occurred to me to try to slap one in between the cable modem and the Apple Time Capsule product (because the whole point of the Time Capsule is the ease of use and replacing all those other things). Your idea does sound like it would certainly add some additional measure of security. I'll dig up the old router and see if it reduces the network speeds or causes any compatibility issues with the other hardware.

I ass u me the Apple Time Capsule has a built in hardware firewall of some sort, but I can't find any information on it anywhere. The Apple software does give me an option to password protect the hard drive and create user accounts, but I'd like to know if that is locking it down tight and secure or basically a joke.

The lack of information about the security of the Time Capsule router/drive makes me wonder. Is it really secure and that is why the issue isn't addressed? Or are there so few of them that no one has bothered to write a simple code to take control of it and steal all my baby pictures?

I can tell you I was surprised by the speed and simplicity of just plugging it in and being able to use it as a router/print server/secure wireless network and shared drive with various Apple and Windows machines connected.

[Syphilis]

The data on the Time Capsule is no more secure that data on any other external hard disk.

[Belle]

Originally Posted by Syphilis

The data on the Time Capsule is no more secure that data on any other external hard disk.

Okay. I'll buy that. But forgive me I have no clue how secure any external disk constantly attached to a router is or isn't? What should I be doing to protect it?

[Syphilis]

Originally Posted by Belle

Okay. I'll buy that. But forgive me I have no clue how secure any external disk constantly attached to a router is or isn't? What should I be doing to protect it?

Not secure at all.

You could create an encrypted disk image on the time capsule (with Disk Utility) and back up onto the disk image, but I'm not sure if that works.

Since you're using a time capsule, I'll assume you've got a Mac. Turn on Filevault, that way the data is encrypted on your computer and on the backup disk. That's probably the best way.

[Belle]

Originally Posted by Syphilis

Not secure at all.

You could create an encrypted disk image on the time capsule (with Disk Utility) and back up onto the disk image, but I'm not sure if that works.

Since you're using a time capsule, I'll assume you've got a Mac. Turn on Filevault, that way the data is encrypted on your computer and on the backup disk. That's probably the best way.

Ah hah! Thank you! I suspected the data was basically out there for the taking despite the fact that I was using AirPort's disk access password options.

I have Windows & Mac machines, and I can use OSX to encrypt the data. So, am I correct in understanding that it really is worth the trouble to turn on FireVault, that the data is sitting there relatively easy to get at othewise?

[Kwinnie Bogan]

Belle is legit. Even Belle might wonder how I know this, but that's about the most useful thing I can add to this thread (though it no longer matters). I know two things about computers: jack and shit.

EDIT: OP isn't that old by my standards, but then I'm older than your average totsean or zokletian.

[slowdown]

Originally Posted by KwinnieBogan

Belle is legit.

Are you sure? Did you at least do the crotch check?

[Kwinnie Bogan]

Ouch, that has an entirely different meaning to a cowboy.

[Syphilis]

Originally Posted by Belle

Ah hah! Thank you! I suspected the data was basically out there for the taking despite the fact that I was using AirPort's disk access password options.

I have Windows & Mac machines, and I can use OSX to encrypt the data. So, am I correct in understanding that it really is worth the trouble to turn on FireVault, that the data is sitting there relatively easy to get at othewise?

Turning on Filevault will only protect the data inside your home folder. If you don't turn it on, the data isn't safe, even if you have passwords on your wireless connection. You can use Disk Utility to create encrypted disk images to keep files safe outside your home folder. Make sure they are in the .sparsebundle format so they don't suck all your disk space when they get backed up.

[Belle]

Originally Posted by Syphilis

Turning on Filevault will only protect the data inside your home folder. If you don't turn it on, the data isn't safe, even if you have passwords on your wireless connection. You can use Disk Utility to create encrypted disk images to keep files safe outside your home folder. Make sure they are in the .sparsebundle format so they don't suck all your disk space when they get backed up.

Thank you once again!

If I wasn't legit I would never have opened an account and posted my question here with my regular undisguised IP. Trolling to annoy Zoklet security experts is high on my list of "stupid things NOT to do".

[Belle]

Originally Posted by KwinnieBogan

Belle is legit. Even Belle might wonder how I know this, but that's about the most useful thing I can add to this thread (though it no longer matters). I know two things about computers: jack and shit.

EDIT: OP isn't that old by my standards, but then I'm older than your average totsean or zokletian.

Oh, Kwinnie, did I get drunk last night and leave my isight connection on or something? I *am* old and wizened enough to know from my very first post, that if somebody here cared enough, they'd easily have my IP, location, and a lot more if they wanted it in a relatively short amount of time.

Thanks for not flaming me! The different kind of warmth is most welcome

[Belle]

Originally Posted by slowdown

Are you sure? Did you at least do the crotch check?

If Kwinnie, did, I slept right through it I had forgotten that hot breasts can be installed on just about ANYBODY or ANYTHING these days.......

[slowdown]

Originally Posted by Belle

Thanks for not flaming me! The different kind of warmth is most welcome

I didn't mean to flame you; You just left yourself so open, so vulnerable I couldn't help but take the bait.
I'm really a very nice person. I live in a Care Bear for god's sake.

[hazmat]

Lol @ this thread... all a lady has to do is say shes a lady and every rosypalmer within sight wants "proof."

Back on topic.....

If that apple thing is smart (dont get yer hopes up) it will only allow reading the hdd from local IPs, unless otherwise set. Alternatively, you could block the ports used on your router as long as the NAS doesnt use the same ports as anything important (dont block port 80). My router has an option called "remote administration" which controls if the router itself can be accessed from non-local IPs.

Last time i had a look at Apple networking equipment (airport ) will hopefully be the last, i cant stand how they stupified their setup utilities. Id even go as far to recommend selling that thing and getting a real NAS and router if you are really concerned about security.

[illuminatikiller]

Originally Posted by Belle

1) I was born in 1965 so I'm not completely fossilized. My breasts are actually quite hot if you put a bag over my head.

funniest shit EVAR

[Prometheum]

I have no real knowledge of the hardware/software involved, so I'll just attempt to cover all possible setups.

Basically, what I'm thinking here is global-write NAS. If that's true, it's no more secure than an external drive, so you should really just encrypt everything. I'm not sure how FileVault in particular operates, but I seem to remember it being hardlink-hackery, and as that's a filesystem-level hack, it'll be fine with encrypted images.

However, if the NAS is anonymously write-able, then you're basically plugging the hole in the Titanic with a band-aid. Create user accounts with secure passwords. Additionally, lock down your wireless or disable it altogether.

The best way to check out what's possible is to have a friend come by with a laptop and try to read, write, etc. to the NAS.

Also: Please keep the tits/gtfo crap in HB/SG/4chan. Those were stupid questions to ask and to answer.

[Trix Are For Kids]

Originally Posted by Belle

Thank you once again!

If I wasn't legit I would never have opened an account and posted my question here with my regular undisguised IP. Trolling to annoy Zoklet security experts is high on my list of "stupid things NOT to do".

Yet so many others do it anyway.

[Belle]

Apple updated the firmware on the Time Capsule this weekend. It totally brought my network completely down, and I had to start all over. LOL! That took an entire morning to get back online.

Thank goodness for the neighbor's unsecured network I was able to use.

The new software does have more options for me to alter and secure the network, however.

Thanks everyone for the help & input offered.