For the first time since I updated to a version that no longer has the reset option on the main web page I need to reset a config. So I had to go lookup how to do it. I believe that what I found is cause for concern. In looking at the wiki I read about this url that can be type into a browser address line in order to do the reset (deliberately not listing it here). The test system I wanted to reset was using the default Tower name so I wondered what would happen if just cliked on the link in the wiki. Sure enough it reset the config, no warning, no "are you sure you want to do this", nothing. It jsut gave me a blank browser page to look at.

 

Granted the array needs to be stopped first but even so if someone using the default server name is having a problem starting their array, an accidental click on a link in the wiki would make things worse for them. Maybe that is a lot of ifs but I have alwasy been somewhat paranoid when it comes to data protection (my computer security background showing through). I just don't think is is a good thing that clicking a link in the wike would be able to modify my array under any circumstances. Maybe this particular shortcut should not even exist in unRAID. Reseting an array should not be that easy. Not to mention any web page anywhere could hide the url behind perfectly friendly text, including links in this forum.

For the first time since I updated to a version that no longer has the reset option on the main web page I need to reset a config. So I had to go lookup how to do it. I believe that what I found is cause for concern. In looking at the wiki I read about this url that can be type into a browser address line in order to do the reset (deliberately not listing it here). The test system I wanted to reset was using the default Tower name so I wondered what would happen if just cliked on the link in the wiki. Sure enough it reset the config, no warning, no "are you sure you want to do this", nothing. It jsut gave me a blank browser page to look at.

 

Granted the array needs to be stopped first but even so if someone using the default server name is having a problem starting their array, an accidental click on a link in the wiki would make things worse for them. Maybe that is a lot of ifs but I have alwasy been somewhat paranoid when it comes to data protection (my computer security background showing through). I just don't think is is a good thing that clicking a link in the wike would be able to modify my array under any circumstances. Maybe this particular shortcut should not even exist in unRAID. Reseting an array should not be that easy. Not to mention any web page anywhere could hide the url behind perfectly friendly text, including links in this forum.

You might check on your flash drive to see if there is a config/super.old file dated from when you clicked on the link.  If there is you can re-name it back to super.dat and reboot. 

 

Your point about malicious use of the command is very valid.