4 ms·

This is great. I find myself having to explain and argue this point way too often: "One issue with most backup solutions is that an attacker controlling the lo

This is great. I find myself having to explain and argue this point way too often: "One issue with most backup solutions is that an attacker controlling the local system can also wipe its old backups."

regecks 8y ago
S3 also makes this kind of protection pretty easy - enable bucket versioning and allow only PutObject.
- juskrey 8y ago
  write only FTP rights
- bpye 8y ago
  B2 can do this too if S3 is a bit too spendy.
yroc92 8y ago
What kind of solution to this problem would you propose?
- Jaepa 8y ago
  Well, append-only backups with something like restic and rclone seems like the obvious one.
- mprovost 8y ago
  Tapes sitting on a shelf is the classic solution.
  - m3nu 8y ago
    Write-once backup media, like DVDs were even better. But they are getting out of fashion.