4 ms·

I'm a user of tarsnap. I have no idea of whether it's fantastic. I can see a list of times when I've run ./tarsnap.sh, but I have no idea if it's really encry

I'm a user of tarsnap. I have no idea of whether it's fantastic. I can see a list of times when I've run ./tarsnap.sh, but I have no idea if it's really encrypting the backup, and I have no idea if it's making a backup in the first place. I mean, I haven't had any hard drive failures and I haven't inspected the client source code. (As far as I can tell, the product is great.) And I can't remember where offsite I've put my keyfile, notwithstanding for the microprinted uuencoding I have stored in my ear. > My one requirement is that I be the only one that is able to decrypt my files. Tarsnap lets you download, inspect, and compile the source code yourself, and nothing unencrypted goes off your machine, so it's sufficient if you value paranoia. But I have not comparison-shopped.

trinket 17y ago
Losing the keyfile is a real concern for me as well, and makes me prefer less secure options like Dropbox or Ubuntu One. What do others do about this?
- cperciva 17y ago
  What do others do about this? I don't know what all tarsnap users are doing, but I've heard the following options on several occasions: 1. Give it to a friend. 2. Put it on a USB key. 3. Store it on a different computer. 4. Print it out (recent versions of tarsnap have printable key files).
cperciva 17y ago
I have no idea if it's really encrypting the backup Unless you look at source code, you'll never know if a backup service is encrypting your backups or not. At least with tarsnap you have the option of reading the source code to verify that tarsnap does what I say it does. :-) ... and I have no idea if it's making a backup in the first place. tarsnap --list-archives, tarsnap -t, and tarsnap -x are your friends. The ultimate test of whether a backup was created -- for any backup system -- is "can I get my data back".
- shrughes 17y ago
  > Unless you look at source code, you'll never know if a backup service is encrypting your backups or not. At least with tarsnap you have the option of reading the source code to verify that tarsnap does what I say it does. :-) You could reverse engineer the protocol that other products use. :_) And I'd rather just assume that somebody else has reviewed the source code.

trinket 17y ago

Losing the keyfile is a real concern for me as well, and makes me prefer less secure options like Dropbox or Ubuntu One. What do others do about this?

cperciva 17y ago
What do others do about this? I don't know what all tarsnap users are doing, but I've heard the following options on several occasions: 1. Give it to a friend. 2. Put it on a USB key. 3. Store it on a different computer. 4. Print it out (recent versions of tarsnap have printable key files).

cperciva 17y ago

I have no idea if it's really encrypting the backup Unless you look at source code, you'll never know if a backup service is encrypting your backups or not. At least with tarsnap you have the option of reading the source code to verify that tarsnap does what I say it does. :-) ... and I have no idea if it's making a backup in the first place. tarsnap --list-archives, tarsnap -t, and tarsnap -x are your friends. The ultimate test of whether a backup was created -- for any backup system -- is "can I get my data back".

shrughes 17y ago
> Unless you look at source code, you'll never know if a backup service is encrypting your backups or not. At least with tarsnap you have the option of reading the source code to verify that tarsnap does what I say it does. :-) You could reverse engineer the protocol that other products use. :_) And I'd rather just assume that somebody else has reviewed the source code.