3 ms·
This is one reason I still do manual backups as well as automated backups. The manual backup is to HDDs that sit on a shelf, offline, unplugged.
by jl6 6y ago
This is one reason I still do manual backups as well as automated backups. The manual backup is to HDDs that sit on a shelf, offline, unplugged.
- WalterBright 6y agoYeah, but to read the backup you've got to attach it to your compromised system. Boom, it's corrupted. A physical read-only switch is required.
- deleted 6y ago[deleted]
- pitay 6y agoBooting to a Live USB/DVD/CD and then doing the backup while in the booted Live OS would minimize the chances of corruption of the backup, either reading from it or writing to it. Not ironclad but pretty good. Issues with it that first come to mind are the live operating system image was already compromised when it was written to say the USB disk, or compromised firmware, and of course user error (nothing to do with ransomware in this case). I am not familiar with this stuff so I may be missing something very important, if so tell me about it.
- benjohnson 6y agoThere are USB to SATA controllers that default to read only - typically used for forensics reasons. About $250 if I remember correctly.
- WalterBright 6y agoA physical switch costs what, a nickel? Just think of all the security issues that would just go away with physical write-enable switches. Heck, I'd go further, and demand from disk makers a physical write enable switch for a separate volume. Use that volume for the system software.