HI folks - has anyone looked at GL.iNet GoodCloud from a security perspective? If so, what were the findings? The Comet X seems pretty compelling…
Thanks!
1 Like
No cloud is safe today. And your default assumption should always be that its unsafe and it should not be used by anyone. It doesnt matter if its GL.iNet or anyone else. There is no need for you to create cloud account for their devices and services. If they offer something that you perceive as very convenient, there are alternative solutions that are more private and secure.
1 Like
Generally speaking, any vendor provided remote cloud access increases the attack surface, and if a vulnerability is discovered your device risks becoming compromised. Just ask anyone who uses myQNAPCloud.
GL-iNet IPKVM devices include Tailscale, NetBird, ZeroTier, although they are usually outdated versions. Or you can simply host your own VPN server on or behind your firewall to remotely access the KVM.
I added IPTABLES rules to the RM1 to explicitly block all outbound connections. I run Tailscale on pfSense with advertise sub-net routes enabled. Since Tailscale traffic “appears” as if it originates from the local LAN, I can still access the RM1 remotely.
1 Like