4 ms·

> Object Lock serves as a digital vault, making data immutable for a specified period. It creates a virtual air gap... "Virtual" and "air gap" is quite frankly

• MyFedora 3y ago
  It's poorly worded for sure. Perhaps the object lock servers: * run on an immutable operating system, * enforce strict (local) whitelist-based firewall rules, * pull, not push, data from other servers, * restrict remote administration to a physically isolated network, * or disable remote administration entirely. I feel like that's as close as you can get to the benefits of air gapped environments without the drawbacks of servers directly exposed to the network. Or, well, unless there happens to be a 0-day in the TCP/IP stack. It depends on the threat model I guess.
  • whoisthemachine 3y ago
    It's hard to know, but since it's virtual, we know with certainty that there's no guarantee of any sort of "air" between the object locked data. Much less the total severance of any kind of plugged in network that "air gapped" implies.