> You have to design a system where even a rogue IT admin with full access to everything can’t screw you. OK, brilliant — this is a nice articulation of a fund

> You have to design a system where even a rogue IT admin with full access to everything can’t screw you. OK, brilliant — this is a nice articulation of a fundamental principle. Do you know of any books that describe how to design such systems? Guaranteeing that offline backups exist is a great start, but if the backups contain backdoors, restoring could be extremely laborious and yet unsuccessful.