3 ms·
I'm thinking of using Tarsnap. Can I absolutely, positively, definitely trust that everything on Tarsnap's end is encrypted to best practice standards and that
by skarmklart 13y ago
I'm thinking of using Tarsnap. Can I absolutely, positively, definitely trust that everything on Tarsnap's end is encrypted to best practice standards and that there is no reasonable way to get to my data (outside of the usual contract provided by encryption I mean)?
I don't have the option to know for sure by analyzing the source code myself so I'll have to trust the popular opionion of Very Smart People here on HN (well, I suppose I could if I spent a non-trivial chunk of the coming year reading up on crypto stuff).
- glurgh 13y agoThe encryption happens on your end, not Tarsnap's. The bar you're setting, though, is impossibly high. Can you absolutely, positively, definitely trust that your machine is not rooted and some nefarious entity isn't quietly collecting your every keystroke and snickering in the dark while stroking a white cat? At that level of paranoia, you're probably best off using a device personally soldered together with hand-selected transistors that XORs all your backups with the white noise collected from your tv (while disconnected from cable, of course).
- icebraining 13y agoWell, the guy who wrote Tarsnap is himself a Very Smart Person here on HN, so I'd say the answer is yes, by definition ;)
- Steko 13y ago"a Very Smart Person" Did he win the Putnam? spoilers: https://news.ycombinator.com/item?id=35083 https://news.ycombinator.com/item?id=35083
- Ecio78 13y agoSee my reply here: https://news.ycombinator.com/item?id=5768024 https://news.ycombinator.com/item?id=5768024