laurin1

Members
  • Posts

    97
  • Joined

  • Last visited

Posts posted by laurin1

  1. I've never had an issue with this, but I did "Reset this PC" on one of my machines today and now it fails with this:

     

    Devices not linked

    Please checked that both devices are online

    image.png.810832c31e922fd2f7570412591520e3.png

     

    BTW, this machine runs Sync as service. Also, the machine now shows up on other machines but is Disconnected. The machine in question always goes through the process of trying to download certificate and folder data, then fails.

     

    image.thumb.png.268ecdaea5c070c2624f679f1922ef79.png

  2. 2 hours ago, Andy+ said:

    (all files in the SynUserxxxxxxxxxx directory that end with *.db and *.db-wal)

    I don't have any of these files in .SyncUser1503178328 directory. All of those are in the parent directory of .SyncUser1503178328.

    However, I removed the folder with the error and added it back and the error has not returned (knock on wood), which never fixed the issue in 2.7.1.

    2 hours ago, Andy+ said:

    If the Pro version is in use and identities are used, it might also be helpful to recreate the master identity, since orphaned or duplicate identities sometimes accumulate there, which can cause disruptions. Unfortunately, these identities can only be hidden via the GUI, but not deleted, which is very bad.

    I'm tempted to do this at some point, as I've had this identity in place now for a very long time. However, I'm a little wary since my license (I have a Business License) is tied to the identity, is it not?

  3. I just installed 2.7.2, due to having a problem with the application crashing constantly (2.7.0), both the desktop and service version, on 5 different machines:

    Quote

    Within the last few weeks (not sure exactly went this started, Sync started crashing on 4 of them, the 2 installed as a service and 2 others. The machine that I use most frequently is not installed as a service and has not crashed. One of the ones that is not a service, but is crashing only crashes on first login for the day (and I login to it every day). The other non-service machine will crash repeatedly - I'll RDP into the machine and see about 50 instances of the icon in the taskbar and the window about the app has crashed with options to relaunch, submit dump, or exit. The service ones concern me the most as these could offline for some time and I would not know it. I'm attaching one of the DMP files and associated logs from a crash that occured on 10/13/20 at 7:54PM.

    Support replied:

    Quote

    Please upgrade all your peers to the current 2.7.2 Sync version -- some important fixes have been made since v.2.7. If the problem persists after upgrade, collect fresh dumps and logs from the affected peers.

    However, as I told them:

    Quote

    I will try 2.7.2, but we updated to 2.7.1 and incurred such problems, we had to downgrade back to 2.7.0:

    •    On 6/28/20 I experienced this: 
    •   https://help.resilio.com/hc/en-us/articles/204753659
    •  

    2.7.1 is unusable for us. If 2.7.2 has the same issues, we won’t be able to use it either. 

     

    So I tried 2.7.2 and already getting "Database Error":

    image.png.0090db0a478982fb992c9cde3db54417.png

     

  4. Yea, I know, I saw that. There is nothing wrong with the file system, that is a problem with Sync.  None of the machines are out of space. This has happened before (on many occasions). Right now, everything is synced, but what you pointed out is a bug in the Sync software.

     

    I have tried doing smaller folders, but the problem is there are so many of them, that it takes me FOREVER to configure a new machine (or a rebuild), which I do all too frequently).

  5. On 8/17/2019 at 6:37 AM, jacw said:

    I've sent in two support requests over the past two months related to Sync not functioning on my Synology NAS's anymore.  On one I treid a new install.  It still won't open the web interface and allow me to reconnect the device to my devices.  But anyway, there has been no reply whatsoever.

     

  6. I've worked in I.T. a long time and I flat out disagree with that publication. If the authentication process doesn't enforce rules like that, users will definitely create passwords like "123456789" or "aaaaaaaa" (on systems that allow such, I've seen it happen) which are much easier to brute-force hack (or even guess). For that matter, that document conflicts with itself:

    Quote

    Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. 

    But above that the document states:

    Quote

    When processing requests to establish and change memorized secrets, verifiers SHALL compare the prospective secrets against a list that contains values known to be commonly-used, expected, or compromised. For example, the list MAY include, but is not limited to:

    • Passwords obtained from previous breach corpuses.
    • Dictionary words.
    • Repetitive or sequential characters (e.g. ‘aaaaaa’, ‘1234abcd’).
    • Context-specific words, such as the name of the service, the username, and derivatives thereof.

    The rationale is given here:

    Quote

    Q13: Are password composition rules no longer recommended?

    A13: SP 800-63B Section 5.1.1.2 paragraph 9 recommends against the use of composition rules (e.g., requiring lower-case, upper-case, digits, and/or special characters) for memorized secrets. These rules provide less benefit than might be expected because users tend to use predictable methods for satisfying these requirements when imposed (e.g., appending a ! to a memorized secret when required to use a special character). The frustration they often face may also cause them to focus on minimally satisfying the requirements rather than devising a memorable but complex secret. Instead, a blacklist of common passwords prevents subscribers from choosing very common values that would be particularly vulnerable, especially to an online attack.

    Composition rules also inadvertently encourage people to use the same password across multiple systems since they often result in passwords that are difficult for people to memorize.

    I agree with their reasoning, but don't believe removing those rules accomplishes the goal indicated. Especially that last line - even for myself, the only thing that finally broke me of that (because I have to 100's of passwords) is using a password manager. Seems that pushing PM's and / or 2FA is much better advice than removing those rules as recommendation.