3 ms·
"In fairness" about what? How is client's computer compromise related to server compromise? If someone gets access to, for example, Tarsnap servers, the attacke
by dchest 14y ago
"In fairness" about what? How is client's computer compromise related to server compromise? If someone gets access to, for example, Tarsnap servers, the attackers can do nothing apart from deleting your backups. If the same happens to Backblaze (who have some interesting understanding of "security", BTW: http://i.imgur.com/t3NCm3X.png http://i.imgur.com/t3NCm3X.png), they can get full access to your backups.
- erichocean 14y agoI don't consider Tarsnap's actual storage to be part of the cryptosystem – it's no different than the data simply being "in transit" indefinitely – so "compromising" a Tarsnap server has no real meaning from a cryptographic point of view. I totally agree with you about Backblaze; at least with Tarsnap, the physical machines and environments that are actually part of the cryptosystem are in your own control. Oh, and the "in fairness" was that compromised clients have the same problem as compromised servers. Perhaps I could have worded it better – I don't have any problem with what you wrote at all.