3 ms·
"Ransomware gangs often destroy your backup infrastructure. So it's important to create pull-only backups or backups that cannot be deleted / overwritten." Eve
by rsync 6y ago
"Ransomware gangs often destroy your backup infrastructure. So it's important to create pull-only backups or backups that cannot be deleted / overwritten."
Every rsync.net customer has ZFS snapshots available in their account that are immutable. They are read-only.
So, even if Mallory trashes your primary site and then gains access to your rsync.net credentials, the daily/weekly/monthly snapshots cannot be destroyed.
- m3nu 6y agoImmutable backups are often overlooked. At borgbase.com, we call this “append-only” mode and the large majority of repositories uses it. With S3 (or similar) you would add some policies to disable deletions. So it’s usually doable, but needs to be considered when setting up the backup process.
- formerly_proven 6y agoDoes the append-only mode you have in borgbase fix the issues of the append-only mode in Borg itself? https://borgbackup.readthedocs.io/en/stable/usage/notes.html#drawbacks https://borgbackup.readthedocs.io/en/stable/usage/notes.html... Because the way it works in Borg isn't really workable in practice, it only seems to be good to check a box.
- m3nu 6y agoWe use the same public version of Borg, so those limitations apply. It’s still quite workable. Just prune from a different machine or once a year when the repo gets too large. We may move to reject destructive commands from append-only repos in the future, but this will break existing workflows. Discussion on this here: https://feedback.borgbase.com/posts/28/reject-delete-and-prune-commands-for-append-only-repos https://feedback.borgbase.com/posts/28/reject-delete-and-pru...
- closeparen 6y agoThat’s all well and good for weather data, but if anything in your backup is in any way related to user behaviors or transactions, immutability is a crime.
- Jabbles 6y agoImmutability in this context doesn't mean "kept forever", it just means the permission to hard-delete is separate from soft-delete. GDPR requires that good data-stewards keep backups: the controller and the processor shall implement... the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident https://gdpr-info.eu/art-32-gdpr/ https://gdpr-info.eu/art-32-gdpr/ For more details on GDPR and backups, see https://www.backup-systems.co.uk/blog/6-gdpr-implications-on-data-backup-and-disaster-recovery https://www.backup-systems.co.uk/blog/6-gdpr-implications-on... It would be inappropriate, for instance, to store user data on the blockchain.
- closeparen 5y agoIt also requires that user data can be hard-deleted on command. The ability to wipe data from backups needs to be kept close at hand.