Skip to main content
Williams_Nest
Enthusiast I
June 14, 2019

SMB2 (or SMB3) support must be supported NOW!

  • June 14, 2019
  • 281 replies
  • 30263 views
We are writing summer 2019 and still Sonos only supports SMB version 1 for the Music Library share.

This is not acceptable.

A file share running SMB1 is extremely vulnerable to all the variants of cryptolocker virus that exists today. File share servers (NAS, Windows, Apple OS) can only support one version of SMB - so you cannot from the same box have one file share (for Sonos) using SMB1 and the other file shares using SMB2 or SMB3. This way Sonos puts each and every file share at serious risc - just because they don’t update their file share protocol to comply with this century.

And for the record - the “solution” through PLEX is not a solution. Unstable at best.
    This topic has been closed for further comments. You can use the search bar to find a similar topic, or create a new one by clicking Create Topic at the top of the page.

    281 replies

    Show previous replies
    amun
    February 4, 2020

     

    Unless you have access to the code base I don’t see how you can say this

    I worked in the Sonos code base for several years, as the main contractor on the Phish project. I also have extensive experience in Alexa integration.

    So, you’re saying that the different devices run different code?

    Smilja
    Smilja
    February 4, 2020

     

    Unless you have access to the code base I don’t see how you can say this

    I worked in the Sonos code base for several years, as the main contractor on the Phish project. I also have extensive experience in Alexa integration.

    So, you’re saying that the different devices run different code?

     

    Go to About My Sonos System and you’ll see that your Sonos devices are running equivalent firmware builds.

    »And the world is like an apple whirling silently in space, Like the circles that you find in the windmills of your mind.« (›Windmills Of Your Mind‹ [1967]. Music by Michel Legrand ; English lyrics written by Alan & Marilyn Bergman)
    controlav
    controlav
    Lead Maestro
    February 5, 2020

    So, you’re saying that the different devices run different code?

    Absolutely. They have different CPUs and different hardware abilities and are built with different toolsets. It is all built from the same source tree, but there are different conditionals that control exactly what ends up in each device’s flash image.

    Author of the leading independent Sonos apps for Android, MacOS, iOS, Windows and Xbox.
    jgatie
    jgatie
    February 5, 2020

    Absolutely. They have different CPUs and different hardware abilities and are built with different toolsets. It is all built from the same source tree, but there are different conditionals that control exactly what ends up in each device’s flash image.

     

    Which is standard procedure for embedded systems.  In my line of work, it is all determined by pragmas and make files.  However, each application still needs the core code, and if that core code doesn’t fit on the hardware, something has to give.  

      el rubio
      el rubio
      February 5, 2020

      I bought my NAS solely to supply my own music to Sonos.

      Even with Deezer etc there are songs that aren't available to stream.

      We don't have computers running 24/7 so it would be a pain if Sonos stopped supporting NAS drives.


      I have full confidence that SONOS will address this in the future. Maybe we will get a SONOS compatible media app that will stream music on our (Synology) NAS. Meanwhile, it is worthwhile to mitigate the security risks. I am doing this by using a Guest account with only read permissions to the music library folder(s).

      salu2.eu
      Stanley_4
      Stanley_4
      Grand Maestro
      February 5, 2020

      Using a guest account helps some but doesn’t mitigate all the SMB v1 risks.

      I much prefer to not have v1 enabled on my primary NAS and use a dedicated music NAS or a NAS to SMB v1 gateway to minimize the risk as far as possible.

      el rubio
      el rubio
      February 5, 2020

      It depends on your ‘risk appetite’ and how you protect your home network and connected devices.

      salu2.eu
      Mr TVR
      Lyricist III
      February 22, 2020

      The Sonos Amp is my first Sonos purchase and it could be the last.

      It never occurred to me that any company would release a brand new product that only supports the obsolete SMB1 protocol!

      Had this been a cheap bit of Chinese kit I might have forgiven it but Sonos is supposedly a high-end manufacturer with a reputation to protect.

      Come on Sonos, get your act together or go home …

       

       

        controlav
        controlav
        Lead Maestro
        February 22, 2020

        It never occurred to me that any company would release a brand new product that only supports the obsolete SMB1 protocol!

         

        Well I think they should just remove SMB support entirely to fix the security issue. PC and Mac users will be fine, as those platforms don’t use it any more. Only the tiny percentage of NAS users would even notice.

        The other easy fix would be to make SonosLibraryService.exe use .NET Core so it could run on the Linux systems that most NASs use.

        Author of the leading independent Sonos apps for Android, MacOS, iOS, Windows and Xbox.
        beynym
        World-Class Superstar
        February 22, 2020

         Only the tiny percentage of NAS users

        As a dedicated NAS-user, I have to ask: do you have any source for this remark?

          Show more replies
          Terms & ConditionsAccessibility statement