3 ms·
But if he already owns your box what prevents him from accessing your data anyway?
by usaphp 10y ago
But if he already owns your box what prevents him from accessing your data anyway?
- gcr 10y agoUsually you don't want to give any attackers the ability to destroy all your backups of the server they hacked. S3's "upload-only" API keys are a solution here: you send the backups into a black hole but the attacker can't delete them. Looks like Dropbox might not have something like that, giving the attacker read-write access to backups if they can get that API key.