Sync Network Drive (WIN7) - Howto

[canton7 (Antony Male)]

@moshes

Syncthing is logged a local system

Please make sure you’re aware of the security implications of running Syncthing as a service/privileged user, and make sure you secure the GUI. I’ve updated that wiki article.

See posts such as:

Windows Autostart: Service or Start-On-Login. Comments please!

The point is that if a user executes a malicious file, that file runs with the user’s permissions. It can only change things the user has permission to change. But… If Syncthing is running as a local admin, and doesn’t have a GUI password set up, any process can talk to Syncthing. Even the most unprivileged process can open a connection on port 8080 and talk to its REST API. It can ask Syncthing to set up a folder anywhere (since Syncthing, running as local admin, has permission to do anything…