Kaspersky and spying for Russian Federation


Recommended Posts

30 minutes ago, adrynalyne said:

Ok then. Let's see a screenshot of it sending your private information to that IP. Full headers and data. You can use fake details and reproduce I am sure. 

I removed it from all my PCs'. If you want to see evidence by yourself then you are more than welcome to install Kaspersky trial on your own PC :). I have provided links and external sources. It does not invalidate fact that, browser tries to send sensitive data to Kaspersky's servers, even if Kaspersky blocks traffic to its own domains later. It is still a big security hole.

5 minutes ago, EJocys said:

I removed it from all my PCs'. If you want to see evidence by yourself then you are more than welcome to install Kaspersky trial on your own PC :). I have provided links and external sources. It does not invalidate fact that, browser tries to send sensitive data to Kaspersky's servers, even if Kaspersky blocks traffic to its own domains later. It is still a big security hole.

That isn't how this works. You made the claim. Burden of proof is on you friend. 

 

From everything you you have posted so far, I think you just misunderstood what you saw. Feel free to prove otherwise though. 

  • Like 2
9 minutes ago, adrynalyne said:

That isn't how this works. You made the claim. Burden of proof is on you friend. 

 

From everything you you have posted so far, I think you just misunderstood what you saw. Feel free to prove otherwise though. 

 

Facts and evidence are very obvious:

 

a) Kaspersky is using ie.kis.scr.kaspersky-labs.com domain for injection URLs on Internet Explorer

b) ie.kis.scr.kaspersky-labs.com points to external server (185.85.13.154) on the Internet. Proof:

https://who.is/dns/ie.kis.scr.kaspersky-labs.com

 

P.S.: How long do you think it takes for Kaspersky devs to update DNS records to 127.*.** and claim honest mistake?

Edited by EJocys
8 minutes ago, EJocys said:

 

Facts and evidence are very obvious:

 

a) Kaspersky is using ie.kis.scr.kaspersky-labs.com domain for injection URLs on Internet Explorer

b) ie.kis.scr.kaspersky-labs.com points to external server (185.85.13.154) on the Internet. Proof:

https://who.is/dns/ie.kis.scr.kaspersky-labs.com

 

P.S.: How long do you think it takes for Kaspersky devs to update DNS records to 127.*.** and claim honest mistake?

Not proof nor evidence of sending sensitive data home, and to the Kremlin at that. It's far more likely that IE doesn't have the plugin needed to use internal routing like ff. 

 

Is it a good practice how they have it set up? Nope. Is it indicative of phoning home with your bank details to Russia?  Nope. 

  • Like 2
12 minutes ago, adrynalyne said:

Not proof nor evidence of sending sensitive data home, and to the Kremlin at that. 

If you cannot understand evidence, which I have supplied in my previous posts and security implications of Kaspersky's solution, then no evidence will convince you. It is not only about sending data, it is about huge security hole in implementation, which looks like definition of the back door.

 

I have screenshot (taken before I got rid of Kaspersky) which relates to injection on IE. You can see script loading from ie.kis.scr.kaspersky-labs.com domain. I do not expect people to believe it and this is the reason, why I provided instructions on my first post on how to replicate it.

KasperskyIE.PNG

Edited by EJocys
2 minutes ago, EJocys said:

If you cannot understand evidence which I've supplied in my previous posts and security implications of Kaspersky's solution, then no evidence will convince you. It is not only about sending data it is about huge security hole in implementation which looks like definition of the back door.

I think everyone reading this thread can agree: you have provided no such evidence and instead only what you think is evidence. 

 

Again, nobody denies the script injection and I'm sure most of us agree that it's not a good way to handle it. That's not what you are on the line for though. You made a claim that it is sending home your sensitive data and have yet to provide any evidence. 

  • Like 2
17 minutes ago, adrynalyne said:

Again, nobody denies the script injection and I'm sure most of us agree that it's not a good way to handle it. That's not what you are on the line for though. You made a claim that it is sending home your sensitive data and have yet to provide any evidence. 

So, according to you, web browser trying to open https://ie.kis.scr.kaspersky-labs.com/1B74BD89-2A22-4B93-B451-1C9E1052A0EC/init?url=https%3A%2F%2Ffc1.retail.santander.co.uk%2Fquery%2F1%2FfwyK.html%3Feu%3Dhttps%3A%2F%2Fretail.santander.co.uk%2FLOGSUK_NS_ENS%2FChannelDriver.ssobto%3Fdse_operationName%3DLOGON&nocache=1fdc6, when ie.kis.scr.kaspersky-labs.com points to external Internet server (185.85.13.154) do not qualify as evidence of browser trying to sending sensitive data to external server?

 

Please note that, I am not trying to prove that destination server gets the data. What is obvious that web broser is trying to delive it to server with remote address. I've provided you with the screenshot from IE debugger and proof that domain point to external source is also there:

https://who.is/dns/ie.kis.scr.kaspersky-labs.com

 

 

1 minute ago, EJocys said:

So, according to you, web browser trying to open https://ie.kis.scr.kaspersky-labs.com/1B74BD89-2A22-4B93-B451-1C9E1052A0EC/init?url=https%3A%2F%2Ffc1.retail.santander.co.uk%2Fquery%2F1%2FfwyK.html%3Feu%3Dhttps%3A%2F%2Fretail.santander.co.uk%2FLOGSUK_NS_ENS%2FChannelDriver.ssobto%3Fdse_operationName%3DLOGON&nocache=1fdc6, when ie.kis.scr.kaspersky-labs.com points to external Internet server (185.85.13.154) do not qualify as evidence of browser trying to sending sensitive data to external server?

 

Please note that, I am not trying to prove that destination server gets the data. What is obvious that web broser is trying to delive it to server with remote address.

 

Ok? Where in that url is sensitive data???

  • Like 1
11 minutes ago, adrynalyne said:

Ok? Where in that url is sensitive data???

That link contains URL and GET data used by my bank. GET requests frequently contain usernames; secret and password reset keys and sometimes passwords (depending on implementation). Kaspersky does it with every single page and browser tries to submit every single request to Kaspersky server. Another problem that browser tries to load external script (main.js) into encrypted secure connection which poses security issues on its own.

7 minutes ago, EJocys said:

That link contains URL and GET data used by my bank. GET requests frequently contain usernames; secret and password reset keys and sometimes passwords (depending on implementation). Kaspersky does it with every single page and browser tries to submit every single request to Kaspersky server. Another problem that browser tries to load external script (main.js) into encrypted secure connection which poses security issues on its own.

Please point out the portions that contain your sensitive data. 

Enable any sniffer and check if any sensitive data was delivered to Kaspersky servers.

 

Stop your paranoia, Kaspersky KIS just comparing your JS and dangerous file with his catalog of dangerous files.

 

Kasperky Application Advisor at 

http://whitelisting.kaspersky.com/advisor?lang=es-MX#search/c9b3b344c26c697eca4939d54f9036df

  • Like 3
2 minutes ago, adrynalyne said:

Please point out the portions that contain your sensitive data. 

So the, fact that that browser tried to inform Kaspersky's server which bank I am using and passed data used in GET method is not sensitive enough :). Are you trying to prove that Kaspersky knows which GET data is sensitive and eliminates it before browser tries to post it to remote server? I have no intention to post more data which is even more sensitive on public forums. I've posted just enough to make my point.

2 minutes ago, EJocys said:

So the, fact that that browser tried to inform Kaspersky's server which bank I am using and passed data used in GET method is not sensitive enough :). Are you trying to prove that Kaspersky knows which GET data is sensitive and eliminates it before browser tries to post it to remote server? I have no intention to post more data which is even more sensitive on public forums. I've posted just enough to make my point.

The only point you have made is that you don't understand what you are reading. You have already been shown to be wrong about t going to the Kremlin. Further you have not shown any evidence of data sent past a query string that contains no sensitive information. 

 

Stop wasting our time. 

10 minutes ago, Alejandro779 said:

Enable any sniffer and check if any sensitive data was delivered to Kaspersky servers.

 

Stop your paranoia, Kaspersky KIS just comparing your JS and dangerous file with his catalog of dangerous files.

 

Kasperky Application Advisor at 

http://whitelisting.kaspersky.com/advisor?lang=es-MX#search/c9b3b344c26c697eca4939d54f9036df

You don't understand the problem. Problem is that Kesperky injects scripts into encrypted content and browser tries to post data to external servers on the internet.

3 minutes ago, EJocys said:

You don't understand the problem. Problem is that Kesperky injects scripts into encrypted content and browser tries to post data to external servers on the internet.

Omg!  What data is being posted? You are making claims and delivering proof on none of them!

12 minutes ago, adrynalyne said:

The only point you have made is that you don't understand what you are reading. You have already been shown to be wrong about t going to the Kremlin. Further you have not shown any evidence of data sent past a query string that contains no sensitive information. 

 

Stop wasting our time. 

I have same opinion about you :). I provided links and screenshots which clearly shows browser requests and replies. I've provided IP addresses by using independent DNS services. You managed to ignore it and even misunderstand my "Kremlin" references, despite providing you with clear proof that IP geographical location is pointing to Kremlin and noting that it is a technical record and in reality location can be different (which probably is). At this point you are trying hard to misrepresent my points and missed security flaw consequences in Kasperskys "injection" implementation.

 

Just now, EJocys said:

I am have same opinion about you :). I provided links and screenshots which clearly shows browser requests and replies. I've provided IP addresses by using independent DNS services. You managed to ignore it and even misunderstand my "Kremlin" references, despite providing you with clear proof that IP geographical location is pointing to Kremlin and noting that it is a technical record and in reality location can be different (which probably is). At this point you are trying hard to misrepresent my points and missed security flaw consequences in Kasperskys "injection" implementation.

 

 This whole thread reeks of ignorance. Have fun misunderstanding what you are seeing and making claims you either can't or don't know how to backup. I'm tired of wasting my time. 

3 minutes ago, adrynalyne said:

 This whole thread reeks of ignorance.

Yes, because you are posting on it :). Why don't you install Kaspersky Trial. Login to your bank, reset your password, look at account details and post all browser request/reply details involving Kaspersky's URL here.

3 hours ago, EJocys said:

There is no need to use Fidler because integrated debug tools of the browser reported all links and traffic just fine. Extension was using real domain registered in Russia (ie.kis.scr.kaspersky-labs.com). If there were, no need to go outside then https://localhost:port would be enough. It probably would be fine if "ie.kis.scr.kaspersky-labs.com" had 127.0.0.0 assigned internally, but that was not the case. Supplying data with GET requests also is interesting, because I used same method as a workaround to bypass web Brower’s cross-domain security in some of my applications. What I was seeing was browser extension with intentional back door used by antivirus. Do you think it was a mistake, for company, specializing in security and linked to Russian KGB and FSB to inject secure web content with externaly pointing URL? I don't think so.

 

URL for Firefox users (ff.kis.scr.kaspersky-labs.com) resolves to 127.245.107.154 which is internal, but URL for Internet Explorer (ie.kis.scr.kaspersky-labs.com) resolves directly to Kremlin: 185.85.13.154.

 

If you don't know what you're doing and what you're analyzing or what the reports from the "tools" you are using says.  Then you shouldn't write an post about how you found someone spying on you. it'll just lead you you being on youtube, telling people how to hack with tracert...

9 minutes ago, HawkMan said:

If you don't know what you're doing and what you're analyzing or what the reports from the "tools" you are using says.  Then you shouldn't write an post about how you found someone spying on you. it'll just lead you you being on youtube, telling people how to hack with tracert...

I've used debugging tools of "Internet Explorer" and "Firefox" to analyse requests made by web browser which is exactly the right tool I need to see all requests made to hosts. My point was to prove that Kaspersky is forcing web browser to send data to external addresses on the Internet. Point was to prove that Kaspersky opens "back door" unnecessary. I don't care if it closes/blocks later.

8 minutes ago, HawkMan said:

If you don't know what you're doing and what you're analyzing or what the reports from the "tools" you are using says.  Then you shouldn't write an post about how you found someone spying on you. it'll just lead you you being on youtube, telling people how to hack with tracert...

He totally knows what he is doing...

 

After all:

 

I am writing comercial software (including network capturing and encryption), websites and network mobile apps and debug them by using network tools for 21 years now. I know that I am reading.

19 minutes ago, adrynalyne said:

He totally knows what he is doing...

 

After all:

 

Sure I do, for example: ported System.Security.Cryptography classes (RSA, AES-256) for JavaScript: http://www.codeproject.com/Articles/22073/Object-Oriented-JavaScript-Class-Library-in-C-NET. I don't know everything. But I think, that your assumption, that I don't know, how to use network sniffing tools, is based on your misunderstanding. I am not a native English speaker, maybe it contributes to that.

 

Please note that I asked for people to check this issue (gather evidence) by themselves.

 

Edited by EJocys
2 minutes ago, EJocys said:

Sure I do, for example: ported System.Security.Cryptography classes (RSA, AES-256) for JavaScript: http://www.codeproject.com/Articles/22073/Object-Oriented-JavaScript-Class-Library-in-C-NET. I think, your assumption, that I don't know, how to use network sniffing tools, is based on your misunderstanding. I am not a native English speaker, maybe it contributes to that.

 

Your lack of ability to provide evidence is what contributes to it. Your lack of knowledge of ip geolocation and how inaccurate it can be contributes to it. 

 

i think it is true in any language--if you make a bold claim, back it up. You are not doing that here. 

2 hours ago, EJocys said:

I am not planing to install KAV anymore. I am writing comercial software (including network capturing and encryption), websites and network mobile apps and debug them by using network tools for 21 years now. I know that I am reading. It is hard to mis-unbderstand or misread web brower debug tools. It is not the rocket science. It looks like, it is not the first time Kaspersky is injecting scripts. While I understand the purpose of it (antivirus must have access to plain content in order to analyse it), I don't agree with "back door" implementation method of it i.e. Using live domains and live IPs.

You could try getting Xkeyscore to see what's really going on on your system and with your traffic :D 

6 hours ago, EJocys said:

So, if you have Kaspersky on your computer, then please open secure site like https://www.google.com, press F12 for debug mode, go into “Network” tab, refresh page, see for yourself and report your opinion.

i just tried this and i have no traces of any kaspersky entries in that log.

i have been using kaspersky for years, but i am not using every protection it offers, e.g. i always disable the browser addon and i also deactivate the URL and HTTPS scan options.

 

 -andy-

  • Like 2
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • ZimaBoard 2 1664 Starter Kit review: it's a cool and affordable DIY NAS by Steven Parker IceWhale Technology reached out to me asking if I was interested in testing the ZimaBoard 2, and after convincing them to send me the Starter Kit, it arrived at my doorstep in May. A bit of background: it is a Shanghai-based Chinese company founded in 2020, which specializes in single-board servers and personal cloud solutions. From searching around online, user feedback on the company and ZimaOS is mostly positive, so we're off to a good start. In addition, I should probably point out that although they do not have a large portfolio of NAS devices, with just four of what they do offer, they seem to have covered everything from a relatively low-priced entry point with the ZimaBoard 2, right up to the high end, with the ZimaCube 2 Creator Pack that even includes an NVIDIA RTX PRO 2000. Anyway, as already mentioned, what we have today is the ZimaBoard 2 Starter Kit, and here are the full specifications: ZimaBoard 2 Model 832, 1664 CPU Intel Core N150 (4x E Cores/Threads, Max burst up to 3.6 GHz) TDP: 6W (Base) 10W (Max) Graphics Intel UHD Graphics 24 EUs (1.00 GHz) Memory 8 GB, 16 GB DDR5 4800MT/s non ECC SODIMM (soldered) Disk Capacity 60 TB (30 TB x 2) Supported RAID Types TRAID, TRAID +, RAID0, RAID1, RAID5, RAID 6, RAID 10 Storage 2 x SATA 3.0 6Gb/s Ports with Power Bootloader 32 GB, 64 GB eMMC Network 2x RJ-45 2.5 GbE PCIe 1 x PCIe 3.0 (via LPC) USB Ports 2 x USB-A 3.1 (5 Gbps) Display Mini-DisplayPort 1.4 (4K@60Hz) Hardware Transcoding Engine H.264, H.265, MPEG-4, VC-1 Maximum resolution: 4K (4096 x 2160); Maximum FPS: 60 Virtualization Intel® AES New Instructions Intel® Virtualization Technology (VT-x) Intel® Virtualization Technology for Directed I/O (VT-d) Size (H/W/D) 140mm x 83mm x 31mm Weight 0.4 kg (only ZimaBoard 2 device) Power 12v 5A Power Supply Warranty 1 year (Global) 2 Years (EU) OS ZimaOS v1.6.1 MSRP $339, $399 ($548.60) As you can see above, there are two variants of the ZimaBoard 2. The lesser variant has half the eMMC storage and 8 GB less RAM, although it also costs $60 less than the top variant we are testing today. The above pricing is only for the ZimaBoard 2. I put the MSRP of the Starter Kit next to it in brackets, although as of publishing, it is discounted to $534.50. The ZimaBoard 2 started life on Kickstarter and shipped to backers in August last year. It became available via the official website in late 2025 and Q1 2026. This hobbyist NAS contains the still relatively new N150 Intel CPU released in the first quarter of 2025, with support for DisplayPort 1.4, HDMI 2.1, although in this case, the memory is integrated into the board itself, so it will not be possible to upgrade or expand the amount. It also supports AV1 decoding, as well as H.264, VP8, VP9, H.265 (8 bit), and H.265 (10 bit). The different capabilities in the Alder Lake-N (and Twin Lake) series are listed below. Processor E-cores L3-cache Turbo clock GPU GPU-clock TDP Intel N355 8 6 MB 3.9 GHz 32 EUs 1.35 GHz 9 W Intel Core 3 N350 3.9 GHz 1.35 GHz 7 W Intel Core i3-N305 3.8 GHz 1.25 GHz 9 W Intel Core i3-N300 3.8 GHz 1.25 GHz Intel N250 4 3.8 GHz 1.25 GHz 6 W Intel Processor N200 3.7 GHz 0.75 GHz Intel N150 3.6 GHz 24 EUs 1 GHz Intel N97 1.2 GHz 12 W Intel Processor N100 3.4 GHz 0.75 GHz 6 W The CPU is part of the Twin Lake series that sits near the bottom of the N-series, designed for low- powered systems and entry-level laptops, and as such has a base level TDP of just 6W. As I have noted before, we are seeing another NAS with a great amount of RAM. It's important to mention that the ZimaBoard 2's memory is integrated into the base board (which is why they have two variants of it). As a reminder, up until a couple of years ago, it was commonplace to only get 2 or 4GB max on a flagship Synology or QNAP home NAS. Ever since the likes of TerraMaster and more have entered the market with ample RAM sizes included in their NAS offerings, it has gone a long way in forcing the hands of the traditional makers to up their game a bit. First impressions The Starter Kit came in one outer box with several packages inside it (shown above). I forgot to take pics of it because when it arrived, it wasn't clear what was inside, and I had to confirm with my contact that I received the entire Starter Kit. In the box ZimaBoard 2 ZimaBoard 2 HDD Expansion Bracket + PCIe card frame Zimaboard Mini DisplayPort Male to HDMI Female Cable 4K 60Hz Zimaboard PCIe 3.0 x4 to Dual NVMe M.2 SSD Adapter Card Quick guide [full online guide] Limited warranty notice Screws Design Where to start? You'd be forgiven for mistaking it as an SSD enclosure if not for all the ports on it. It is completely made out of metal, and the top is an entire heatsink. It has a premium feel about it, but it definitely looks like a hobby device. As you will see, the completed build looks like it belongs in a server or meter closet rather than as a showpiece on someone's desk. On what I am calling the rear, there's a Mini DisplayPort (1.4), two 2.5 GbE ports, with Type A 3.1 USB ports, and then the barrel connector port. Around the front, there are two SATA6 ports with a power connector in the middle. Left side Right side One side is completely free of ports. On the other there's a slit that allows for the feed of a CPU fan cable, and a PCIe 3.0 X4 slot. Top Bottom The top is entirely made up of a heatsink except for the extended height for the I/O on the rear. Around the other side, you can find the ZIMA branding and some regulatory information stamped near the bottom. As you may see from the bottom of the ZimaBoard 2, it scratches quite easily from just moving it around on my Ikea island. Teardown Before we get started, let's have a look at this thing on the inside. The steps to get to the board are as follows: Remove the four smaller Torx screws on the bottom of the ZimaBoard 2; Remove the four larger Torx screws on the sides of the device; Carefully unstick the CMOS battery from the PCB; Remove two Phillips screws on the PCB; Lift out the PCB. Yes, as you can tell from the instructions, you need three different tools to remove Torx and Phillips screws (10 in total), and unhelpfully, one of the screws is located under the CMOS battery, which is stuck onto the PCB. Building Now comes the fun part. Because the ZimaSpace website does not provide any guidance on how to put the Starter Kit together. They only have guidance for connecting the CPU fan. However, they did upload a video to their YouTube channel that shows the entire process. To install the fan, first remove the four screws on the bottom of the ZimaBoard 2, then on the inside, there is a CPU FAN connector where you can attach the fan, reattach the ZimaBoard 2 frame, and feed the fan cable through the provided slit. Then remove the nearest screw on the side and attach the fan frame to the side of the device using the same screw. ZimaBard 2 screws Aligning the screws Bottom view Remember those four screws we removed to access the CPU FAN? Longer screws are provided in the box with the HDD Expansion Bracket, which is what you will now need to attach the ZimaBoard 2 to it. Helpfully, the orientation on how to attach it is made obvious when the frame can only be screwed on at the same overall length as the ZimaBoard 2. If you do it the wrong way around (which is what I did initially) one side hangs off the frame, and it becomes difficult to attach the PCIe Adapter Card cable. PCIe card frame Other side PCIe slot connector Next, it's time to attach the PCIe card frame, which is fastened with the help of 3.5-inch SATA HDD (3 screws). These are toolless screws that you can just use your fingers to fasten them with. Then it is time to connect the provided PCIe cable with the slot connector on one side of the ZimaBoard 2, feed it through the bottom of the HDD frame, and fasten it with two standoffs. Both bracket options 2280 standoffs with 2x 4TB MP44Q The PCIe 3.0 X4 card comes with a short bracket option, handy if you decide to place it inside a different NAS or rack server, but here we need the long bracket. Oddly enough, the M.2 standoffs were preinstalled into the 22110 position, but extra standoffs are included in the box, which I installed at the 2280 position for our use. I added a couple of MP44Q M.2 PCIe 4.0 SSDs (2 x 4TB) that can be availed on Amazon for $478.99 (the lowest price for 3 months) that TEAMGROUP supplied us with Then we have the almost completed build, you just need to push the card into the PCIe slot. Unfortunately, IceWhale Technologies did not provide a screw for the PCIe card frame (this is also apparent in their own video). Here it is at several different angles, with the last pic showing the SATA Y-Cable connected to the two WD Red Plus 4TB drives. Setup and Usage Next, you connect your cables to the I/O, and the ZimaBoard 2 powers on automatically, as there is no power button on the device. Power is controlled through the Settings in ZimaOS. BIOS The ZimaBoard 2 includes an Aptio BIOS from American Megatrends [1, 2, 3], and you can setup pretty much everything here including the boot order, which is locked to the UEFI OS, however above that choice you can enable or disable booting to a SATA/USB bootloader so this would still allow you to switch to an alternative bootloader and boot from it, or disable it to instead always start from the first disk with an OS installed on it. Initial Setup Upon connecting to the LAN and booting up, the ZimaBoard 2 can be reached by navigating to the IP address (shown if you have a monitor connected), or you can find it using the ZIMA Client desktop application, which is essentially a Zima device finder. Initializing the ZimaBoard 2 The ZimaOS setup process is pretty straightforward, through a wizard, and in full above, it basically consists of setting up an account and some handy tips, and that's that! Post Setup (ZimaOS update) Upon first boot, you are alerted that there is a ZimaOS update from 1.5.0 to 1.6.1, which I applied; the full process is shown above with the changelog. ZimaBoard 2 Storage Setup Next, it is time to set up the storage. ZimaOS actually throws everything onto the eMMC flash drive; it is also the default location of AppData, which is definitely something to be wary about, as the 45GB available storage could fill up quickly. HDDs I first attempted to create a Storage Pool using the two 4TB WD Red Plus NAS drives, and got an error message: After several attempts and then looking online, I discovered it was a bug with ZimaOS where the fix was simply to reboot ZimaOS and then try again, this time I was able to create a RAID mirror using the two drives. SSDs I did the same for the SSDs, as you will see in the above gallery, when I created the second Storage Pool, it only allowed me to select available drives. ZimaBoard 2 AppData ZimaOS comes with an App Store that includes a repository of almost 400 apps, so you will be able to find most of what you'll need for a NAS (although after a quick search, I wasn't able to find a Surveillance Manager), and now comes the important part: moving the default AppData location off the 45GB eMMC and onto a larger volume: Open Settings Then Apps Then, in the Select a new location field, click on the new Storage volume you want to move it to (in my case, the Apps Storage Pool), which is the SSD RAID mirror. Confirm the Migration warning Be praised! You can also do this for Docker (which by default installs onto the 45GB eMMC flash drive) and the User database. Plex Setup Next, I tested the configuration by installing the Plex Server app from the App Store. The library folders must already exist (which I placed into the Storage Pool). Plex Server setup is straightforward and requires very little configuration. In my case, all I had to do was add the media path I just created, which you can also browse to using the folder icon in the path field. In addition, you can now map the new Media library in Windows Explorer using the Zima Client. Oddly enough, it is not possible to access the ZimaBoard 2 over the Network Neighborhood; you must map drives using the client, which is shown in the last image in the above gallery. I watched one of my Blu-Ray rips, which is Dolby Vision with Dolby Atmos, and the content played fine with no stuttering or buffering, which is what anyone needs in this scenario. ZimaBoard 2 Zima Client mobile app There's also a client for mobile. It is pretty barebones, as shown in the above gallery, for example, the Apps screen launches the WebUI for that app, and the Backup must be done manually. On opening Backup, you can select internal storage folders on your phone to backup to the ZimaBoard 2's storage, and although this is constantly scanned, the backup action itself must be manually triggered. There is an option to allow foreground backup (last image in the above gallery), but this basically means the queued backup gets triggered when you manually open the app. Benchmarking SATA PCIe 3.0 X4 A CrystalDiskMark test on a mapped network drive from within a Windows 11 25H2 PC (image above) connected over a 2.5 GbE was well within acceptable ranges. Writes were generally better on the SSD RAID mirror. SATA PCIe 3.0 X1 I also ran the NAS Performance tester, which tests the link speed performance. As you can see, it pretty much maxes out the 2.5GbE connection. Of course, you can also opt to bond the two 2.5 GbE connections for a bit more umph, but I didn't do that. Thermals Top PCIe card SATA HDDs Next, I measured some hotspots while playing content on Plex. It's fair to say this will perform better than a NAS that is enclosed in a metal or plastic case, as almost everything storage-wise is exposed! Anyway, the ZimaBoard 2 did not break a sweat with Plex streaming or disk benchmarks. ZimaOS Factory Reset ZimaOS does not include a factory reset option. Instead, you have to download the ZimaOS image and flash it to the eMMC manually. The flashing process is shown in the above gallery. The steps to do so are listed below: Download the ZimaOS image here; Open BalenaEtcher (Run as Administrator) and select the image; Select your inserted USB drive (min 8 GB) Flash to it; Connect your USB drive, monitor, keyboard, USB hub (optional), mouse (optional), and network cable (recommended) to the ZimaBoard 2; Connect power and press F11 continuously; Select your USB drive starting with UEFI in the boot device menu; Press Enter on the Install ZimaOS option; Select /dev/mmcblk0 (MMC) flash drive as target; Confirm with (three times) to wipe the target disk; Wait a couple of minutes while ZimaOS installs; Remove the USB drive and confirm with a reboot; Your ZimaBoard 2 has been factory reset. However, you don't have to stick with ZimaOS, in fact the company also offers official CasaOS images, that are based on Debian; or as they say themselves, put anything you want on this "hackable single board server" it's up to you. Conclusion I had a lot of fun putting this together. I've custom-built all my own PCs and servers since the 90s, and this is the first time I have had to put a NAS together. Even if the actual base ZimaBoard 2 was already a completed build, it still feels pretty custom. I just wish that IceWhale Technology included a getting-started guide in the box for the Start Kit, which would have really completed this kit. Instead, I had to search for the official video on the YouTube channel to make sure I wasn't doing anything wrong. So who is this for? Definitely the hobbyist who is comfortable building their own PC and servers. It also has a much smaller footprint than its nearest equivalent (in terms of specs), like the Beelink Me Pro, which is another NAS I will be testing soon. Although the Beelink does not come with the PCIe 3.0 X4 expansion, the ZimaBoard 2 Starter Kit suddenly looks to be a great bargain, even if it only offers the two 3.5-inch bays over the four in the other example. It makes a lot of sense to use Intel's N150 chip inside a NAS; it is more than capable of doing what the ZimaBoard 2 is intended for, media streaming and backup. It also looks like the IceWhale Technology staff are quite active in the official forums helping people with issues they come across with ZimaOS and the devices, peer support seems to be good as well, I was quickly able to find why I was not able to create a new Storage Pool in ZimaOS v1.6.1 even though that is quite a serious bug, hopefully it will be fixed in the next update. If you are comfortable with the command line and Docker, you'll be fine. You can do great things with this hardware. This was my first time with ZimaOS. It seems a bit barebones in comparison to the likes of Synology DSM, TOS, and UGOS, but it has a ton of apps to get you started with your home or small business NAS. Where to buy As of publishing, IceWhale Technology is running a discount of up to 5% for the Starter Kit. If you opt to get just the ZimaBoard 2 itself, it does come with a SATA Y-Cable, so you will be able to connect up to two 3.5-inch HDDs to it. ZimaBoard 2 1668 Starter Kit for $534.50 on Amazon US (was $548.60) ZimaBoard 2 832 Starter Kit for $372.88 on Amazon US (was $390.60) Zimaboard 2 1668 (16GB+64GB) for $419.90 on Amazon US Zimaboard 2 832 (8GB+32GB) for $359.90 on Amazon Disclosure: IceWhale Technology provided a free sample without any editorial input or review pre-approval. Good to know The Amazon link is U.S. specific, and not available in other regions unless specified. We only use first-party seller links (at the time of article publishing); ensure that you purchase from a first-party seller link only. Check out Today's Deals on Amazon | or our recent tech deals. Become a Prime member (for Students or SNAP) via Neowin Get Prime Access - Prime for half price (for qualifying Medicaid, EBT, SNAP) Subscribe to Prime Video, Audible Plus, Music Unlimited or Kindle Unlimited via Neowin As an Amazon Associate, when you purchase through links on our site, we earn from qualifying purchases.
    • It's in the Insider's group so yes it's technically beta, though these days it's hard to see much of a difference unless you opt for the most extreme beta builds, which I don't. When I moved here from the Release Preview channel I did so primarily because I wanted to see how well the restored taskbar functionality (restored from Win10, and earlier) is working and whether it was time to finally abandon SAB--and it is--working fine, so far. Not as polished as SAB, but it'll do for me.
    • I've been using MWB Premium for a number of years so that along with Windows updates and updated browser should be fine. Thanks for that.
  • Recent Achievements

    • Week One Done
      flexorcist earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      488
    2. 2
      +Edouard
      222
    3. 3
      PsYcHoKiLLa
      147
    4. 4
      Steven P.
      74
    5. 5
      FloatingFatMan
      71
  • Tell a friend

    Love Neowin? Tell a friend!