Backing up is the process of making copies (a backup) of data which may be used to restore the original after a data loss event.

learn more… | top users | synonyms

1
vote
1answer
26 views

How robust is a VeraCrypt Container against disk errors?

I am planning to encrypt backup data using VeraCrypt. How safe are the generated containers? My worries is not so much the encryption, but potential data loss due to degrading harddisk media over time....
0
votes
0answers
9 views

Right mechanism & workflow for repeated replication of passwords from LastPass to KeePass?

A lot of us currently use LastPass for the easy management, access and input of passwords for applications and websites. Now, there are some people who are obsessive about not leaving it out to a ...
3
votes
3answers
799 views

I want to roll my personal cloud hosted Password Manager using pass. How secure/insecure would this be?

I've come to the conclusion that I need to up my security. I currently have a dozen memorized passwords I use for every device and website. I'm against KeePass/Lastpass due to having to trust they ...
3
votes
3answers
113 views

What is a good backup strategy against ransomware? [duplicate]

From my understanding, most ransomware works in the background until they are finished with encrypting all their chosen files. I assume that while the ransomware work in the background, if I plug in ...
61
votes
15answers
11k views

Are cloud storage services a good strategy to protect against ransomware attacks?

I have been reading a lot here about Ransomware attacks and I am wondering if my strategy for protecting myself is valid or not. I have 10Gb of personal data and 90Gb of photos and videos. I have ...
5
votes
1answer
127 views

How to protect TimeMachine backups from Ransomware?

According to Heise (German) Time Machine backups can be encrypted by Ransomware. Sorry I didn't find an English source, please use Google translate. KeRanger had an inactive module ...
3
votes
1answer
71 views

Linux log files to back up and review for security

Good morning/afternoon/evening everyone, I am looking into what files I should consistently back up externally from my machine to be able to monitor for any unusual activity. I would look at the files ...
0
votes
3answers
90 views

How many backups should I keep?

Recently my backup disk almost got full because of all the backups we keep: 30 days of daily backups for every database (mongodb). So, the more databases we have, the more space we need for backups. ...
1
vote
1answer
24 views

How to reliably backup to cloud services without hampering security?

There is a huge number of articles advising to enable two-factor authentication on sensitive cloud services. I understand the benefits for my accounts' security, but doesn't it defeat the purpose of ...
6
votes
1answer
213 views

Is Apple's AirPort Time Capsule vulnerable to ransomware?

I have a Macbook Air laptop and use Apple's Time Machine program and an AirPort Time Capsule (physically connected to my router via ethernet cable) to periodically back up my data. If my laptop were ...
8
votes
3answers
2k views

Why can't the FBI copy the contents of an iPhone they are trying to crack?

Making the news rounds now is a story about the courts ordering Apple to disable the automatic deletion of data after 10 failed password guesses. What I don't understand is, why doesn't the FBI just ...
-1
votes
1answer
96 views

Should I erase my iPhone if lost/stolen?

The recommended procedure is: Erase the phone immediately if stolen. But if the phone has a passcode and no-one can break into it anyway, can erasing be safely disregarded altogether? The upside of ...
4
votes
2answers
173 views

How can Apple claim that a backup of an iPhone made to iCloud is “hackable”/accessible but not the data on the device itself?

So I’ve been reading up on the 2015 San Bernardino attack and the legal/tech issues surrounding the FBI’s request that Apple unlocks the shooter’s phone. This is how I understand the issue: The FBI ...
105
votes
13answers
28k views

Where do you store your personal private GPG key?

So, I want to start using pass, but I need a GPG key for this. This application will store all of my passwords, which means it's very important that I don't lose my private key, once generated. Hard ...
1
vote
2answers
105 views

Creating a secure offsite backup at a friend's house

A friend has kindly allowed me to store a hard drive at his house to use as an offsite backup. I normally use rsync-backup to make backups of my home directory and have always done this (just being ...
4
votes
1answer
134 views

Is it unsafe to restore backed up data from Google servers?

I have an Android smartphone that I don't trust. It has an old version of Android and has been vulnerable to Stagefright and a host of a hundred other vulnerabilities for months. Although there is no ...
3
votes
1answer
146 views

When using Dropbox to sync Keepass db, is it ok to open it in synced folder?

I'm going to be storing a Keepass 2 database file (.kdbx) in a local folder that's synced by Dropbox. Is it safe to use Keepass to open the database directly considering everything in the folder is ...
1
vote
2answers
186 views

Why are application/services still using outdated Blowfish encryption? Is it secure?

For example, CrashPlan, an online backup service, is using 448-bit Blowfish to encrypt its backup files (only enterprise product line has the ability to choose using AES-256). According to Blowfish's ...
0
votes
1answer
140 views

Online vs offline backups [closed]

Up to this point I was using physical hard drives for backups, typically using dm_crypt as mentioned here. If online storage is used instead, and the provider cannot be trusted how much should the ...
12
votes
4answers
6k views

Why not simply backup the TrueCrypt container file?

The TrueCrypt website has some detailed information on how to backup (TrueCrypt non-system volumes) securely, summarised below: Create a new TrueCrypt volume Mount the main volume. Copy all ...
11
votes
8answers
269 views

How to choose a password that I have to remember for a long time but do not use a lot

I have a scenario where I have to remember a password / keyphrase, which I will not be able to recover if I forget it, for a long time (probably more than 10 years). The problem is because this ...
2
votes
1answer
110 views

OpenPGP encrypting backup files and sending them to Usenet servers

My Internet service provider includes Usenet servers with about about 45 days of retention. I'm planning to backup my most important files on there. I have a 50Mb/s symmetrical fiber connection to ...
0
votes
1answer
55 views

Resuming an interrupted nmap scan:

I need to: --resume <filename>: Resume an aborted interrupted scan. But I didn’t: -oN/-oX/-oS/-oG <file>: Output scan in normal, XML, s|<rIpt kIddi3, ...
1
vote
0answers
34 views

fulfillment of : ETSI EN 319 411-2 or ETSI TS 101 456 - "7.2.2 Certification authority key backup using secure world daily backup on tape

Can someone explain me how one CA can fulfill normative request: ETSI EN 319 411-2 or ETSI TS 101 456 "7.2.2 Certification authority key storage, backup and recovery ... c) the CA private ...
4
votes
2answers
128 views

Can a website have multiple valid TLS certs looping back to multiple root CAs in case one of them is compromised?

Sometimes, CAs get compromised, like Diginotar or Comodo. In such an incident, anything can happen from individual certs being revoked to the entire tree being scrubbed from the cert store. A company ...
3
votes
2answers
289 views

Backup procedure for PCI

Our company is does not store any credit card details but we do transmit them. We are storing it in a cloud platform which is already PCI compliant. We just require to access the Cloud portal from ...
0
votes
0answers
280 views

Windows Credentials - read password

What is the cipher used by windows Credential Manager to generate credentials backup files (*.crd)? With a backup file from Credential Manager and the password used to created that backup file is it ...
0
votes
0answers
41 views

SEP File Exclusions - symantec [closed]

SEP Exclusions My organization is considering a commitment with centralized file / data protection and I am keen on reviewing the Symantec ENDPOINT protection. I have installed a trial and have found ...
1
vote
4answers
658 views

Protecting Backups from Viruses

Currently we are using ReadyNAS by NETGEAR to hold all our images from all our machines. My question is can viruses expand from the machines and infect the NAS drive and the backups? We are using ...
7
votes
2answers
137 views

How much can I trust the “factory restore/reset” on a(n) (potentially compromised) android?

This question is a simple one: how much can you trust the "factory restore/reset" option on an android device? If the device has possibly been compromised, is it possible the "factory reset" will ...
1
vote
3answers
199 views

Is this approach to backups secure?

I've got an existing (personal) backup service which I'm rewriting from the ground up to be secure. At present, I just store files (and diffs) in AWS S3 with no encryption. It works fine but I'd like ...
0
votes
1answer
121 views

uploading photos to cloud from an infected device [closed]

My computer is infected with Malware and (shame on me) of course I didn't back up my photos or word docs. I also happen to know almost NOTHING about computers. Is it possible to upload photos to cloud ...
-3
votes
1answer
794 views

Safest and most secure way for backing up private data

Here is what happened, I first collected my data into one folder,tar'd it, encrypted it with gpg, put it in truecrypt container, and after that started to copy the container to another place, but ...
3
votes
1answer
2k views

Backing up SSL certificate private key files

What are some recommended practices for backing up SSL certificate private key files? I'm working in an environment where the public web servers are not backed up, because in theory the public ...
2
votes
2answers
298 views

Reasons to encrypt filenames on cloud backup

I use a cloud service for my off-site backup, and all my files are encrypted. But I am wondering whether to enable filename encryption or not. Are there any security advantages to be gained by ...
2
votes
1answer
428 views

What evidence is there that SpiderOak is significantly different from Lavabit?

In 2013 Lavabit shut down because a US agency was demanding access to its private SSL keys and basically the deets on whatever users the US was interested in. Lavabit shut down rather than give the US ...
0
votes
2answers
55 views

Ubuntu backup to only specific devices

I am looking into setting up a secure Ubuntu server with daily backups to two different external hard drives that will be swapped with the external hard drive that is stored in a safe deposit box. ...
1
vote
1answer
102 views

Why should I separately backup my revoke certificate

So I understand the principles behind the concept of a revocation certificate and why it should be useful to create one and back up before harm occurs. The thing is, I don't see a wide range of media (...
1
vote
1answer
169 views

Secure backup on online Cloudstorage

i own a small private server (@home) with all necessary features for my backup purposes (Owncloud, SVN, GIT). My target now is to ensure the safety of my data in emergency cases like fire/flood. For ...
2
votes
1answer
75 views

How do you back up cardholder data remotely without a network connection?

In the PCI DSS version 3 it says: 1.3.3 Do not allow any direct connections inbound or outbound for traffic between the Internet and the cardholder data environment. But in the event of hard ...
0
votes
1answer
704 views

What is an offsite facility as per PCI DSS requirement 9.5.1?

PCI DSS Version 3.0, Requirement 9.5.1 says that we have to store media backups in a secure location, preferably an off-site facility such as an alternative or backup site or a commercial storage ...
1
vote
2answers
388 views

best place to store backup encryption key [closed]

I have a server on which I keep an encrypted backup of some data. The server updates the backup once a day if the data has been changed and is physically accessible to many people. Further, I would ...
0
votes
1answer
4k views

How to backup files stored in a possibly infected computer?

I am to reinstall an old Windows XP installation. Before I format the drive, I have to backup some data (~200GB) like .doc files, pdfs, photos to an external hard drive. My concern is that this ...
-1
votes
1answer
467 views

TrueCrypt Hidden OS Decryption

A couple of months ago, on my pc with Windows 7, i installed truecrypt and created a decoy system and a hidden os. I stored some really important documents and files on my hidden os that now i need ...
3
votes
3answers
788 views

Encrypting Backups on Linux

I'm working on an automated backup solution to protect my files on my Linux servers. However, I'm not sure about how to securely encrypt the resulting archives. I am using 64bit linux, and I am ...
2
votes
1answer
59 views

How to keep important data secure in case of total compromise?

The question is simple, and really interesting at the same time. How would you keep your data secure in case of a total compromise of your infrastructure? This should NEVER happen, but as we all know,...
0
votes
3answers
143 views

Are backups really secure?

In many places a common practice is to connect in a backup drive at the end of the day and let the computer do an automatic backup in case of an emergency. I have been doing that for the past 2 years ...
2
votes
1answer
124 views

After restoring from a (valid) full disk backup can malware still persit?

In the comments to this question it is mentioned that even after a backup recovery malware still can persist. Do I understand that correctly? How is this possible? If Acronis True Image is used to ...
3
votes
3answers
220 views

Are cloud-based collaboration tools “safe”?

I've tried to bring in collaboration tools at my company such as Evernote, Dropbox, OneNote, GoogleDocs etc. at our company but am finding it tough to get people on board. We use Sharepoint to store ...
2
votes
1answer
579 views

How do I properly bury a hard disk drive to keep it healthy?

As a way of backing up big amounts of data (about 1-2 TB) I thought it's good idea to bury a hard disk drive (in a damage-preventing shell) to be able to dig it later and read all the data from it if ...