Backing up is the process of making copies (a backup) of data which may be used to restore the original after a data loss event.

learn more… | top users | synonyms

107
votes
13answers
29k views

Where do you store your personal private GPG key?

So, I want to start using pass, but I need a GPG key for this. This application will store all of my passwords, which means it's very important that I don't lose my private key, once generated. Hard ...
61
votes
15answers
12k views

Are cloud storage services a good strategy to protect against ransomware attacks?

I have been reading a lot here about Ransomware attacks and I am wondering if my strategy for protecting myself is valid or not. I have 10Gb of personal data and 90Gb of photos and videos. I have ...
52
votes
8answers
6k views

Online backup : how could encryption and de-duplication be compatible?

A "soon to enter beta" online backup service, Bitcasa, claims to have both de-duplication (you don't backup something already in the cloud) and client side encryption. http://techcrunch.com/2011/09/...
20
votes
6answers
2k views

Backing up sensitive data - pitfalls and best practices

Obviously, securely backing up sensitive data is a challenge. A remote backup is important for surviving a variety of disasters. What are some of the "gotcha's" lurking out there, and what best ...
16
votes
4answers
2k views

How do you prevent physical backups from being stolen?

I'm sure, by now, we're all aware of the need to encrypt backup disks, but what can be done on the physical security side of things to prevent backups from being stolen or damaged? Particularly: ...
12
votes
4answers
6k views

Why not simply backup the TrueCrypt container file?

The TrueCrypt website has some detailed information on how to backup (TrueCrypt non-system volumes) securely, summarised below: Create a new TrueCrypt volume Mount the main volume. Copy all ...
11
votes
8answers
269 views

How to choose a password that I have to remember for a long time but do not use a lot

I have a scenario where I have to remember a password / keyphrase, which I will not be able to recover if I forget it, for a long time (probably more than 10 years). The problem is because this ...
10
votes
6answers
25k views

It is safe to store photos and documents on skydrive / google cloud services?

I have over 20GB of photos and documents stored on my hard disk without a backup. I'm thinking about saving all of them in a cloud service such as Microsoft Skydrive or google cloud, but I'm wondering ...
10
votes
3answers
593 views

Tools needed to setup a paranoid remote backup server

I'm a system admin with little security experience. I want to schedule the copying of our backups to protect our data in case of fire. The best solution would be to copy the data onto a new hard-...
8
votes
3answers
2k views

Why can't the FBI copy the contents of an iPhone they are trying to crack?

Making the news rounds now is a story about the courts ordering Apple to disable the automatic deletion of data after 10 failed password guesses. What I don't understand is, why doesn't the FBI just ...
8
votes
2answers
1k views

Recently had a virus, can I use backed up files on clean system?

I had to reinstall my OS (windows) recently due to a virus. I backed up my source files onto a flash drive. How can I get to those files without problems? I know flash drives can have nasty things in ...
8
votes
2answers
420 views

Backup schedule for Encryption Keys

How often should encryption keys be backed up? Should this be done on the same schedule as the encrypted content/configuration? That seems excessive, as the keys do not change as often. Perhaps ...
7
votes
3answers
3k views

Secure sync of TrueCrypt containers

Need to sync arbitrary files within two TrueCrypt containers; one container is a backup, the other the one actively used by me, both are local during the transaction. Current concern security wise is ...
7
votes
1answer
483 views

Should iPhone backups be encrypted? Is this in-scope for Corporate IT if the device is linked to a home pc?

iPhone backups may reside on a computer that is outside of IT Policy (Home PC) and therefore doesn't have any Corporate IT protections on it. If this home PC was stolen or hacked, then the iPhone ...
7
votes
1answer
6k views

Is CIFS/SMB (Folder Sharing in Windows) secure?

I have to back up some data from windows 7 machines over the internet, and I rarely use windows so am distrustful of it in general. Specifically: Is there any sort of check that the server is the ...
7
votes
2answers
142 views

How much can I trust the “factory restore/reset” on a(n) (potentially compromised) android?

This question is a simple one: how much can you trust the "factory restore/reset" option on an android device? If the device has possibly been compromised, is it possible the "factory reset" will ...
6
votes
1answer
234 views

Is Apple's AirPort Time Capsule vulnerable to ransomware?

I have a Macbook Air laptop and use Apple's Time Machine program and an AirPort Time Capsule (physically connected to my router via ethernet cable) to periodically back up my data. If my laptop were ...
5
votes
1answer
133 views

How to protect TimeMachine backups from Ransomware?

According to Heise (German) Time Machine backups can be encrypted by Ransomware. Sorry I didn't find an English source, please use Google translate. KeRanger had an inactive module ...
5
votes
2answers
406 views

How to back up encrypted data over a VPN connection? The encrypted container, the data within or encrypted individual files?

Given a (TrueCrypt) encrypted volume on one device A, what is the more secure way to back it up via a VPN connection to the physically far away device B? Backup the data: Requires the volume to be ...
5
votes
2answers
4k views

What trust level should I give keys I need for encryption?

As I'm encrypting server backups, I typically install my public GPG key from a keyserver into me server's keyring: gpg --search-keys 6569758F I import the key into my keyring. I then attempt to ...
4
votes
1answer
2k views

How to backup database to comply with UK data protection act?

Charity has a server in their office onto which they backup a database with sensitive information. They want to get rid of this server. Is there a cost effective solution that would allow them to ...
4
votes
2answers
139 views

Can a website have multiple valid TLS certs looping back to multiple root CAs in case one of them is compromised?

Sometimes, CAs get compromised, like Diginotar or Comodo. In such an incident, anything can happen from individual certs being revoked to the entire tree being scrubbed from the cert store. A company ...
4
votes
1answer
138 views

What security features and qualifications should we look for in an online backup provider?

What security features and qualifications should we look for in an online backup provider for an Internet-exposed web server storing sensitive data? In the backups themselves - encryption type, ...
4
votes
1answer
2k views

Backing up SSL certificate private key files

What are some recommended practices for backing up SSL certificate private key files? I'm working in an environment where the public web servers are not backed up, because in theory the public ...
4
votes
2answers
177 views

How can Apple claim that a backup of an iPhone made to iCloud is “hackable”/accessible but not the data on the device itself?

So I’ve been reading up on the 2015 San Bernardino attack and the legal/tech issues surrounding the FBI’s request that Apple unlocks the shooter’s phone. This is how I understand the issue: The FBI ...
4
votes
1answer
136 views

Is it unsafe to restore backed up data from Google servers?

I have an Android smartphone that I don't trust. It has an old version of Android and has been vulnerable to Stagefright and a host of a hundred other vulnerabilities for months. Although there is no ...
4
votes
4answers
660 views

How to securely delete a table in MS-Access?

I have a Windows 7 computer which currently has a large working Microsoft Access 2007 database on it containing some tables with confidential data. I would like to securely delete/remove the tables ...
4
votes
1answer
894 views

Standards for secure key backup of master keys with secret sharing

In many cases, there is a single master key that is installed in a HSM or similar device, but which should be backed up. The recommended method for this backup in many cases is to encrypt the master ...
3
votes
2answers
236 views

Where a sysadmin deletes a company's data, why can't they just restore from backups

As an example, in the UBS Duronio case, Mr. Duronio executed code that deleted everything in its path, but isn't there a backup server? Why was UBS hit by the loss of data? If the backup is available, ...
3
votes
3answers
796 views

Encrypting Backups on Linux

I'm working on an automated backup solution to protect my files on my Linux servers. However, I'm not sure about how to securely encrypt the resulting archives. I am using 64bit linux, and I am ...
3
votes
2answers
2k views

Deduplication of Encrypted Files

Let's assume I have an 18GB database that is backed up nightly by dumping the database and then encrypted using a modern algorithm such as AES-256. This database has a daily update of rate of ...
3
votes
1answer
159 views

When using Dropbox to sync Keepass db, is it ok to open it in synced folder?

I'm going to be storing a Keepass 2 database file (.kdbx) in a local folder that's synced by Dropbox. Is it safe to use Keepass to open the database directly considering everything in the folder is ...
3
votes
3answers
522 views

Backup personal email on VPS - privacy, security and trust risks

FastMail.fm hosts my personal email account. Now they claim to have reliable backup services, but I'd like to have my own copy of my email archives. What I'd like to do is back up to my VPS, which ...
3
votes
3answers
138 views

What is a good backup strategy against ransomware? [duplicate]

From my understanding, most ransomware works in the background until they are finished with encrypting all their chosen files. I assume that while the ransomware work in the background, if I plug in ...
3
votes
1answer
79 views

Linux log files to back up and review for security

Good morning/afternoon/evening everyone, I am looking into what files I should consistently back up externally from my machine to be able to monitor for any unusual activity. I would look at the files ...
3
votes
3answers
220 views

Are cloud-based collaboration tools “safe”?

I've tried to bring in collaboration tools at my company such as Evernote, Dropbox, OneNote, GoogleDocs etc. at our company but am finding it tough to get people on board. We use Sharepoint to store ...
3
votes
3answers
828 views

I want to roll my personal cloud hosted Password Manager using pass. How secure/insecure would this be?

I've come to the conclusion that I need to up my security. I currently have a dozen memorized passwords I use for every device and website. I'm against KeePass/Lastpass due to having to trust they ...
3
votes
2answers
320 views

Backup procedure for PCI

Our company is does not store any credit card details but we do transmit them. We are storing it in a cloud platform which is already PCI compliant. We just require to access the Cloud portal from ...
2
votes
3answers
182 views

What is the likelihood of getting sensitive information off of a backup tape?

For purpose of the quesition, I am going to paint a picture: A system administrator maintains and backs up a production server for clients with sensitive financial information (account numbers, names,...
2
votes
1answer
600 views

How do I properly bury a hard disk drive to keep it healthy?

As a way of backing up big amounts of data (about 1-2 TB) I thought it's good idea to bury a hard disk drive (in a damage-preventing shell) to be able to dig it later and read all the data from it if ...
2
votes
1answer
253 views

Maximum protection on a computer network?

I would like to secure as much as possible a computer I am using to sync sensitive data files from work to my home pc. The syncronisation is being done by only 1 software is there a firewall to allow ...
2
votes
2answers
312 views

Reasons to encrypt filenames on cloud backup

I use a cloud service for my off-site backup, and all my files are encrypted. But I am wondering whether to enable filename encryption or not. Are there any security advantages to be gained by ...
2
votes
1answer
444 views

What evidence is there that SpiderOak is significantly different from Lavabit?

In 2013 Lavabit shut down because a US agency was demanding access to its private SSL keys and basically the deets on whatever users the US was interested in. Lavabit shut down rather than give the US ...
2
votes
1answer
163 views

Backup media storage strategy

As a company we are performing daily backups onto RDX removable media which is fully encrypted (shows as unformatted drive) and the backup software also encrypts the files during the backup process, ...
2
votes
1answer
2k views

Is there any way to list the contents of the iPhone/OSX Keychain and their security level?

I have a few apps that I purchased from the app store that probably store information in my keychain on OSX and on the iPhone. Since it's possible for keychain items to be bound to a device (and ...
2
votes
1answer
127 views

After restoring from a (valid) full disk backup can malware still persit?

In the comments to this question it is mentioned that even after a backup recovery malware still can persist. Do I understand that correctly? How is this possible? If Acronis True Image is used to ...
2
votes
1answer
92 views

Privacy laws' right-to-amend (and right-to-delete) requests and archived data/backups

Under HIPAA and some privacy laws (in US, EU and other countries), the user has the right to amend (under some laws even delete) his/her data. What is the right way to handle a request to amend/delete ...
2
votes
1answer
122 views

OpenPGP encrypting backup files and sending them to Usenet servers

My Internet service provider includes Usenet servers with about about 45 days of retention. I'm planning to backup my most important files on there. I have a 50Mb/s symmetrical fiber connection to ...
2
votes
1answer
75 views

How do you back up cardholder data remotely without a network connection?

In the PCI DSS version 3 it says: 1.3.3 Do not allow any direct connections inbound or outbound for traffic between the Internet and the cardholder data environment. But in the event of hard ...
2
votes
1answer
60 views

How to keep important data secure in case of total compromise?

The question is simple, and really interesting at the same time. How would you keep your data secure in case of a total compromise of your infrastructure? This should NEVER happen, but as we all know,...