4 ms·

I would genuinely rather lose all my critical data to cryptolocker than put it in the cloud. Given a choice between my data being accessible by no-one or everyo

I would genuinely rather lose all my critical data to cryptolocker than put it in the cloud. Given a choice between my data being accessible by no-one or everyone, I will pick no-one every time. Data in the cloud /is/ available to everyone that matters. I'd also like to remind you that it can be impractical to back up some forms of data, especially in the cloud. High definition video (weddings, funerals, holidays) is impractically large. The problem /is/ Cryptolocker. Anyone with an ounce of practicality will take mitigating steps against it, I have no sympathy for anyone who ignores the risk, but the solution is not massive scale global data duplication, that is treating the symptoms. The solution is to dissuade criminals from this path. Widescale international cooperation in finding these people would be a start.

JCole 12y ago
You don't need to backup to the cloud, have people forgotten about physical hard drives?
- r0m4n0 12y ago
  Yep, a good mitigation plan is a 2tb time capsule. All my precious cat photos are backed up on the regular, encrypted and within reach.
  - TeMPOraL 12y ago
    As long as you remember to keep that drive unplugged - otherwise it'll get cryptolocked with everything else.
- pmontra 12y ago
  I do have a physical hard disk for my backups but I also backup some critical data "on the cloud" (actually, some servers of mine). There is always a chance that the pc and the disk are stolen by a burglar or my house catches fire. Then there is the matter of making the encryption and access keys survive any of those events.
venomsnake 12y ago
Here is a good interview question: Design a simple system that uses amazon as backend to store encrypted data and the keys never leave your control. There were 4TB drives at 100-sh bucks for big things. The problem is not Cryptolocker because there will ALWAYS be malware that targets the data itself. And some people will do it just for fun.
- fdsary 12y ago
  I think Duplicity (http://duplicity.nongnu.org http://duplicity.nongnu.org) is what you're looking for. For Ubuntu I know there's a nice GUI that anyone who can use a computer can set up. For other platforms I think cli is the only way, but someone could just write a QT/Cocoa wrapper around it.
  - elithrar 12y ago
    Duply (http://duply.net/ http://duply.net/) is a wrapper around Duplicity, and there's a GUI front-end called Deja Dup too: http://live.gnome.org/DejaDup/Screenshots http://live.gnome.org/DejaDup/Screenshots I use Duply to schedule incremental backups of my server logs to S3 (write only) and then have S3 expire them after 60 days. Works great.
ecopoesis 12y ago
Or, don't be dumb and use tarsnap. encypting backups is not an impossible (or even hard) problem.

JCole 12y ago

You don't need to backup to the cloud, have people forgotten about physical hard drives?

r0m4n0 12y ago
Yep, a good mitigation plan is a 2tb time capsule. All my precious cat photos are backed up on the regular, encrypted and within reach.
- TeMPOraL 12y ago
  As long as you remember to keep that drive unplugged - otherwise it'll get cryptolocked with everything else.
pmontra 12y ago
I do have a physical hard disk for my backups but I also backup some critical data "on the cloud" (actually, some servers of mine). There is always a chance that the pc and the disk are stolen by a burglar or my house catches fire. Then there is the matter of making the encryption and access keys survive any of those events.

venomsnake 12y ago

Here is a good interview question: Design a simple system that uses amazon as backend to store encrypted data and the keys never leave your control. There were 4TB drives at 100-sh bucks for big things. The problem is not Cryptolocker because there will ALWAYS be malware that targets the data itself. And some people will do it just for fun.

fdsary 12y ago
I think Duplicity (http://duplicity.nongnu.org http://duplicity.nongnu.org) is what you're looking for. For Ubuntu I know there's a nice GUI that anyone who can use a computer can set up. For other platforms I think cli is the only way, but someone could just write a QT/Cocoa wrapper around it.
- elithrar 12y ago
  Duply (http://duply.net/ http://duply.net/) is a wrapper around Duplicity, and there's a GUI front-end called Deja Dup too: http://live.gnome.org/DejaDup/Screenshots http://live.gnome.org/DejaDup/Screenshots I use Duply to schedule incremental backups of my server logs to S3 (write only) and then have S3 expire them after 60 days. Works great.

ecopoesis 12y ago

Or, don't be dumb and use tarsnap. encypting backups is not an impossible (or even hard) problem.