Questions tagged [backup]

Backing up is the process of making copies (a backup) of data which may be used to restore the original after a data loss event.

Filter by
Sorted by
Tagged with
1 vote
1 answer
58 views

Good checksum algorithm for backup / cloud sync system

I am writing a cloud backup system, and want to use a checksum to know if a file has been modified, and accordingly sync it with the server. This question shows that xxHash is super fast, and this ...
user avatar
  • 113
0 votes
2 answers
60 views

Storing backup keys (2FA) for online accounts

So I spent the day looking for a good solution of storing the backup keys or the 2FA codes and can't seem to find a convenient way for me, many people have different takes on this, so far I found 2 ...
user avatar
  • 1
0 votes
1 answer
72 views

Does keeping a flash drive in my computer all the time expose it to ransomware attacks?

I keep my laptop backed up using Google Desktop. It's how I keep my things like notes, pictures, etc., backed up. I recently have been reading about ransomware attacks increasing and I wanted to ...
user avatar
0 votes
2 answers
225 views

Why are multi-billion-dollar companies failing to create ransomware-proof backups?

We keep hearing of big enterprises (Garmin, Edeka) being taken out of business for days or weeks, due to ransomware encryption attacks. One would assume that it can't be that hard to create versioned ...
user avatar
2 votes
0 answers
72 views

Is "drag-drop files" computer backup sufficient to avoid most malware/ have all my files?

I'm debating dragging all my files onto an external hard drive manually - rather than a time machine backup - and then pulling over any specific files I need if I ever need them. Afterwards, I'll ...
user avatar
  • 21
1 vote
1 answer
133 views

Why do services generate multiple 2FA backup codes?

In case you lose access to your two-factor authentication (2FA) codes, you are only required to enter one of the backup codes. So why do services like Google generate multiple codes if it doesn't ...
user avatar
  • 113
0 votes
1 answer
115 views

Should I encrypt backup files with WinRar?

Currently we don't have a server in a small organization with a very limited budget. We do backup by syncing files between workstations with Windows 10 OS. I'd like to encrypt these files because they ...
user avatar
  • 487
2 votes
1 answer
115 views

Backup Google Authenticator transferring QR code

I understand that saving a screenshot of the QR code during the OTP setup process is enough to back up a single account, however, is this the same for the QR code generated during the Google ...
user avatar
0 votes
0 answers
107 views

What is a good common approach for encrypted backup/restore on an embedded device?

An embedded device with Linux supports backup/restore of files encrypted with openssl. The idea of backup is: tar -c .... | openssl smime -encrypt -binary -aes-256-cbc -out backupfile.encrypted -...
user avatar
  • 101
0 votes
3 answers
210 views

How to mitigate ransomware from locking attached storage

I have OSX. Time machine takes periodic backups. This backup is encrypted. If my machine were to be infected and locked by ransomware, what prevents the backup from also being comprised as it is just ...
user avatar
  • 149
1 vote
3 answers
295 views

Should I backup a GPG key used for Authentication?

Regarding backups (escrows) of GPG (OpenPGP compliant) keys, I seem to understand that (E)ncryption keys need to be backed up, to prevent data loss, and that (S)igning keys should not be backed up, ...
user avatar
1 vote
0 answers
89 views

How do we reconcile a requirement to keep backups, with a requirement that we be able to purge data on request? [closed]

As part of SOC 2 preparation (and just general operational best-practice) we take regular PostgreSQL backups and keep them for up to a year. One of our partners has a requirement that we be able to ...
user avatar
0 votes
0 answers
89 views

Is it possible/feasible for ransomware to inject itself into backup software to present false data to the user?

The reason I am asking this is the following: My boss wants me to sell a backup solution where encrypted backups are to be stored at our site. But we shouldn't have the key to decrypt them (in case we ...
user avatar
  • 31
1 vote
1 answer
133 views

Is Acronis True Image encryption safe? [duplicate]

This question has been asked before but a lot of time has passed since then. The older question had an answer that the Eula said that Acronis can decrypt the data. I can no longer find that part. Can ...
user avatar
0 votes
0 answers
188 views

DigitalOcean Spaces for personal backups

Sorry for the naive question. I wonder how DigitalOcean Spaces (S3 compatible) fits personal backups. I found a lot of information about security of Amazon S3 and its security is undoubted, however, ...
user avatar
  • 101
0 votes
1 answer
145 views

Is rsyncd secure? (except for the lack of transport encryption)

I have been using an rsyncd server for backups for what feels like a decade. I saw that rsyncd has no transport encryption (not even for username and password). I wonder what other security issues ...
user avatar
  • 1,399
1 vote
0 answers
103 views

How Can I Backup App Data In Android/iOS Devices?

After my other post I'm looking over some other possibilities to do what I'm trying to do. How To Recover End-To-End Encrypted Data After Losing Private Key? If I save user data in server, in order to ...
user avatar
  • 247
0 votes
1 answer
64 views

Sync AWS snapshots to secondary account - supplier ask for "swap" - security theathre?

I'm managing an AWS account for a specific purpose for a company of 120 people. Another supplier of this company of around 5 people also has an AWS account. To protect resources in an AWS account from ...
user avatar
  • 343
1 vote
1 answer
150 views

Can I encrypt Google backups (without setting a screenlock password?)

As you can see from my previous question, How can I escape Google?, I am not overly keen on sharing my personal data. I just got yet another new Android phone, after yet another died. Because I do not ...
user avatar
4 votes
2 answers
424 views

Understanding GnuPG --export-options backup

The GnuPG documentation lists an option called --export-options parameters. One of the possible parameters for this option is backup (aliased export-backup). The description for --export-options ...
user avatar
0 votes
0 answers
101 views

Asymmetric Encrypted Container

I'd like to set up a remote backup for my PC. I want to have it run at scheduled times, encrypting the data locally and then transmitting it to the server. I'd like to use something popular and open ...
user avatar
  • 101
0 votes
1 answer
168 views

Did a virus like this really ever exist? [closed]

I know that this world is very evil, and that the most unfathomable things go on around the clock, inside and outside of the "computer world". However, I sometimes really wonder if certain ...
user avatar
7 votes
2 answers
202 views

How should backups be tested in large offices?

I always hear people say "test your backups", but I have no idea how that is done in practice when you have to deal with complex infrastructures. For personal backups it's easy to rely on ...
user avatar
  • 15.3k
0 votes
1 answer
108 views

Backup on a distant dedicated server, such that even if someone gets root / hacks my distant server, they cannot read the data

Let's say we have: a local computer (Windows or Linux) a distant dedicated server with 2TB storage, running Linux I'd like to do a backup my local computer's data folder (1 TB) to the distant server ...
user avatar
  • 941
0 votes
1 answer
179 views

Can't Amazon see my files if I use s3cmd/gpg with a complex password?

Since the early days of s3cmd I use it in combination with random generated filenames (uuidgen loop) and a complex passphrase (pwgen -n1 -c 32 -y). On security.stackexchange.com search there is only 1 ...
user avatar
  • 1,399
-1 votes
2 answers
163 views

Can I check if ransomware is running by using a VM [closed]

I am not an expert, but as far as I understand, ransomware will encrypt files and (for an undefined period) decrypt as well, so it appears all is well. At some point in time, the decrypting ends and ...
user avatar
  • 1
2 votes
2 answers
202 views

use custom 'key' for hardware security token

Using a hardware security token as a second factor is generally considered quite a boost in security. But one of the issues I'm having is how to backup the (digital) keys used in the hardware device (...
user avatar
  • 121
1 vote
0 answers
103 views

Backing-up to an untrusted cloud

Not sure if this kind of review/validation question is allowed - please delete if it isn't. Like many before, I'm looking for ways to do cloud backup in a way where I trust that I'm still the only one ...
user avatar
  • 111
0 votes
1 answer
224 views

What could be recovered after an interrupted ransomware attack?

Four days ago my PC got phobos ransomware. I didn’t notice until three days ago, and the reason is that the attack stopped midway, leaving some of my data as it is and not leaving behind any ransom ...
user avatar
0 votes
2 answers
883 views

How bad is rsync with no-password sudo?

I need to backup files with preserved attributes from a source workstation to a LAN server (both on Linux Mint, the server is running sshd and Samba). One of the solutions which preserves files' ...
user avatar
  • 113
3 votes
3 answers
217 views

Drawback of Multi Level Encryption

I am backing up my files to a RAID mirrored HDD, that has full disk encryption (FDE) in place with LUKS. Until now I did this with rsync, but I recently switched to a new backup program that does file ...
user avatar
  • 131
1 vote
2 answers
104 views

Wordpress Backups and Security

Apart from all the other security and design flaws of Wordpress, there is 1 point that particularly got my attention: "Automatic Backups". These are saved inside the Wordpress directory. If you ask ...
user avatar
  • 135
3 votes
4 answers
328 views

Methods for backing up key on paper

What are the methods to backup a key to paper? The idea is to have reasonable protection and the ability to restore the key in case of the digital backup is lost. Are there things that convert a ...
user avatar
  • 53
0 votes
2 answers
190 views

Solutions for backing-up my codebase

I have a codebase that I've been keeping on Github that I don't want to worry about losing. I've intermittently backed up all the repos to an S3 instance, but this doesn't feel secure. If my Github ...
user avatar
0 votes
1 answer
342 views

Using gpg to encrypt backups stored on remote untrusted servers

I need to encrypt daily backups, then upload them to untrusted cloud storage (s3, dropbox, etc.) I received help on security.se and crypto.se to formulate this approach: tar and xz the backup file ...
user avatar
  • 353
2 votes
1 answer
814 views

Symmetric vs asymmetric encryption for backup files uploaded to cloud storage

I want to encrypt my server's backups and upload them to cloud storage (e.g. dropbox, google drive). I understand the basics with symmetric (single passphrase-secured key) and asymmetric (public/...
user avatar
  • 353
0 votes
2 answers
143 views

Secret sharing scheme for disaster recovery with asymmetric key?

I want to backup many secrets using a secret sharing scheme, to make sure my family can access those secrets in case of my death. I need a way to keep adding secrets (without distributing new shares). ...
user avatar
  • 103
0 votes
1 answer
208 views

Malware in backups [closed]

The main thing i am interested in is the 3rd point below. In short I am worried about having a virus and what will suffice to remove it. I am on Mac and am running the latest version of Catalina. I ...
user avatar
0 votes
2 answers
491 views

How to backup files from a infected computer to a USB drive in a safe way?

Send the files by email or upload then in a drive are not a option since my friend's connection is very poor and is a lot of files. She gave me a USB drive to save her files but I know her computer ...
user avatar
  • 747
3 votes
1 answer
391 views

How to secure backup scripts so I do not have to hardcode passwords?

I have a secure and private aws ec2 environment but I need to do some backups of mongodb, postgresql, so I have a separate ec2 instance for doing backup and occasionally allow 80 and 443 to allow ...
user avatar
6 votes
1 answer
281 views

How to keep backup servers safe?

I use duplicity on a few Ubuntu servers to encrypt backups and send them to a backup server, which then sends another copy to rsync.net, and then, once a week, give it or take, I download these ...
user avatar
2 votes
2 answers
166 views

Security risk of copying

I need to back up an encrypted drive, if the data gets corrupted I'd have another copy I don't have another drive that I trust not to have been compromised right now. My idea is to copy an encrypted ...
user avatar
  • 21
0 votes
3 answers
152 views

Is it safe to backup programming projects from a possibly infected computer?

Is is safe to backup programming projects (for example websites that where made using HTML/CSS/JS with the help of some frameworks and libraries (Bootstrap, jQuery, etc.), C# projects made with the ....
user avatar
  • 35
2 votes
3 answers
325 views

Is it safe to backup data (images, documents, videos, etc...) from a possibly infected computer?

If I had a possibily infected computer, where I had some images and documents that I wanted do backup to a thumb drive, is it possible that that the used thumb drive could be infected and when ...
user avatar
  • 35
7 votes
4 answers
4k views

Why does WhatsApp not encrypt Google Drive backups?

WhatsApp has end-to-end encryption, promising privacy to users. However, it becomes useless if backups to Google Drive are unencrypted. Our supposedly private data goes to the control of Google. No ...
user avatar
  • 215
0 votes
1 answer
237 views

Whats a good backup policy for application with 0 hours RPO?

In my company, we have business critical applications with 0-hour RTO (Recovery Time Objective) and RPO (Recovery Point Objective) requirement. Usual strategy to ensure the RPO objective is to have ...
user avatar
6 votes
2 answers
8k views

How do I back up YubiKey-backed TOTP authentication?

I bought a YubiKey 5 NFC this week and have started using 2FA and U2F where I can but am deathly allergic to the idea of losing access. For backing up U2F access I'm going to buy a second U2F token (...
user avatar
  • 297
1 vote
0 answers
134 views

Securing an android smartphone [closed]

Recently I got a new smartphone (OnePlus 6T, Android 9 Pie) and would like to do everything right from the start. My main concerns are, I would like to be able to backup my data, I would like the ...
user avatar
1 vote
1 answer
334 views

Physically Isolated backup scheme

The servers at my lab were recently hacked (ransomware attack) and I've been assigned to make our network more secure. I propose doing weekly backups with an SSD-cached RAID (10-20TB range) that is ...
user avatar
  • 131
0 votes
1 answer
359 views

Backing up an encypted drive on an encrypted drive

I have searched, and have been unable to find an adequate answer to my question. My apologies as I'm sure this is a relatively elementary question for the users here. I have encrypted my Windows 10 ...
user avatar