Skip to main content
Enthusiast I
Jun 14, 2019 10:55 AM UTC

SMB2 (or SMB3) support must be supported NOW!

We are writing summer 2019 and still Sonos only supports SMB version 1 for the Music Library share.

This is not acceptable.

A file share running SMB1 is extremely vulnerable to all the variants of cryptolocker virus that exists today. File share servers (NAS, Windows, Apple OS) can only support one version of SMB - so you cannot from the same box have one file share (for Sonos) using SMB1 and the other file shares using SMB2 or SMB3. This way Sonos puts each and every file share at serious risc - just because they don’t update their file share protocol to comply with this century.

And for the record - the “solution” through PLEX is not a solution. Unstable at best.
This topic has been closed for further comments. You can use the search bar to find a similar topic, or create a new one by clicking Create Topic at the top of the page.

281 replies

Stanley_4
Grand Maestro
Jan 1, 2021 11:22 PM UTC

I just don’t see this as a big issue, a NAS (any Linux supported protocol) to SMB v1 protocol converter / gateway is a few minutes work and about $25 using a Raspberry Pi Zero W.

I’d really feel silly taking a bath on dumping my Sonos on ebay or the like over such a minor issue.

Translate
Avid Contributor I
Jan 1, 2021 11:25 PM UTC

I respectfully disagree. I have spent well over $1,000 in Sonos equipment and they won’t at least jump into the 21st century in IT security?  I am sorry, get with the program Sonos or watch what happens. People are going to leave in droves. 

Translate
controlav
Lead Maestro
Jan 2, 2021 12:02 AM UTC

Few people play their music from files these days. Most use a mac or a pc for it, the percentage that use a NAS is even smaller. The percentage who use Synology is smaller still. “Droves”, lol.

Translate
Author of the leading independent Sonos apps for Android, MacOS, iOS, Windows and Xbox.
Avid Contributor I
Jan 2, 2021 12:06 AM UTC

So why are you on these boards defending Sonos?  Sounds like to me tour an employee or have some sort of personal/economical interest. 
The only people I see on these boards are people pissed off at the fact that Sonos doesn’t give to shi.. about their customers IT security.  
 

“Droves……...take a look around now, Sonos is only getting a smaller customer base. 

Translate
controlav
Lead Maestro
Jan 2, 2021 12:26 AM UTC

I am giving my opinion based on over a decade of streaming files to my Sonos, after creating multiple commercial Sonos apps, after working with Sonos engineering in their codebase and after many years of monitoring this forum and it's predecessor. It's an opinion, treat it as you like.

Translate
Author of the leading independent Sonos apps for Android, MacOS, iOS, Windows and Xbox.
Avid Contributor I
Jan 2, 2021 12:33 AM UTC

LOL!  Exactly. Defending Sonos for obvious reasons. Like I said, take a look at the boards and understand what Sonos’s customers want. Step into the 21st century and give your customers something other than SMB1.   Otherwise people will leave. 
 

I have spent $1,000+ on Sonos and love the platform but if you think SMB1 is acceptable, then I am out along with a lot of other people on this board. 

Translate
controlav
Lead Maestro
Jan 2, 2021 1:13 AM UTC

Do I think SMBv1 is a good idea? No. Do I think Sonos will fix it? Hmm probably not IMHO. Engineering decisions are driven by various criteria, such as number of customers affected (tiny), complexity of fix (low for S2 assuming the Linux kernel has already been updated and I have no idea if that has happened, high if not), availability of work arounds (there are lots) and risk of the security issue (debatable).

Translate
Author of the leading independent Sonos apps for Android, MacOS, iOS, Windows and Xbox.
Avid Contributor I
Jan 2, 2021 1:14 AM UTC

SMH. 

Translate
Contributor I
Jan 2, 2021 5:51 AM UTC

Come on Sonos, where is SMB2/3support for S2 hardware?

Translate
Stanley_4
Grand Maestro
Jan 3, 2021 1:16 AM UTC

Take the time to go back and read the history on this issue. I’m not going to re-do all the work I’ve put in in the past and I expect others feel the same just to save you looking it up.

I will sum it up quickly, Sonos has long used an unsupported version of Linux that they have manually patched with the bare minimum stuff needed to stay secure. SMB didn’t make the cut because it required a newer kernel that wouldn’t fit on the older hardware. Making it worse the newer SMB is bigger too.

There is hope but it involves Sonos doing a new kernel and that is mind-bendingly difficult. Then they have to port all their patches and tweaks to the new kernel. Then they have to do the applications. And finally when the core is complete they need to port the Sonos software onto the kernel/GPL base.

Translate