3 ms·
>This is a really bad idea and a good way to get owned. Database backups must be PULLED Just make sure your database server doesn't have permission to delete b
by hueving 10y ago
>This is a really bad idea and a good way to get owned. Database backups must be PULLED
Just make sure your database server doesn't have permission to delete backups (e.g. Have it POST a backup via HTTPS). There is nothing wrong with db server initiated backups.
- brobinson 10y agoThis is still open to abuse in the form of your legitimate backup script being disabled and replaced by one uploading false backups. You wouldn't know anything has happened until you go to restore from one. Of course, this is an edge case, but I believe setting up a pull-based backup system is still going to be less work than a write-only push system.
- arielb1 10y agoA hacked server can have the backup server pull false backups as well. Of course, your servers shouldn't be SSHing to your backup servers, but that goes both ways.
- tamana 10y agoIf the backup machine is compromised the attacker can corrupt your backups. Either way, if machine is hacked you risk loss.
- hueving 10y agoThat's ridiculous. The same tricks can be played on a pull based system once you have compromised the DB server.