4 ms·
Many of the listed "paranoid" backups suffer from a single point of failure: your computer. If your computer gets compromised then it can silently erase/cryptol
by leni536 11y ago
Many of the listed "paranoid" backups suffer from a single point of failure: your computer. If your computer gets compromised then it can silently erase/cryptolock files on your computer or even on your backup drives in the rare event when they are connected. IMO in practice it could only be feasible with a targeted attack after a thorough investigation of your backup plan (assuming if you don't make it public on your blog).
I don't know crashplan but AFAIK most backup services suffer from the same problem. If you regularly enter or store account credentials for your backup service then it can be stolen from a compromised computer and can be used to delete backups from the past. It can be mitigated if your backup service provides two accounts for the same backup: an "append only" account and an "administrator" account. The idea that a compromise of the "append only" account can't delete your past backups.
- alkonaut 11y agoA sophisticated ransomware app could do this: stash away a snapshot from the users cloud backup (e.g. CrashPlan) and then change the local backup configuration to backup no folders at all, which in the case of CrashPlan also removes the historic archives of the users' data, as history is only kept for those folders that are currently backed up.
- ghgr 11y ago> It can be mitigated if your backup service provides two accounts for the same backup: an "append only" account and an "administrator" account. That's how Tarnsap[1] works (I think the author is the user cperciva) [1] https://www.tarsnap.com/ https://www.tarsnap.com/
- cperciva 11y agoTarnsap Tarsnap. But yes.