Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [backup]

Backing up is the process of making copies (a backup) of data which may be used to restore the original after a data loss event.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

Shamir secret sharing beats XOR in theory or in practice too? [migrated]

The paper introducing Shamir's Secret Sharing Scheme starts as follows: In 2, Liu considers the following problem: Eleven scientists are working on a secret project. They wish to lock up the ...
ghosts_in_the_code's user avatar
0 votes
0 answers
68 views

Is Windows 10 'Backup and Restore' sending my password in plaintext on unencryped link?

[Note: I have a Windows 10 system in an air-gapped network as the only computer on the network where it is the acting "server", as part of an RMF-compliant, DAAPM (link to PDF on dcsa.mil) ...
SeligkeitIstInGott's user avatar
0 votes
0 answers
254 views

Outdoor backup: gocryptfs --init --reverse: alway same .diriv in 1st level directory

Intro Trying to send encrypted backup of in productions filesystems, I was interested by the ability of using gocryptfs in reverse mode! The idea is to use gocryptfs --reverse from any existing (...
F. Hauri  - Give Up GitHub's user avatar
0 votes
0 answers
164 views

What does an exported BitLocker key package contain?

I've learned that a key protector encrypts the VMK (volume master key), then the VMK encrypts the FVEK (full volume encryption key), and finally the FVEK encrypts the actual data blocks. I've also ...
Chris Chen's user avatar
1 vote
0 answers
216 views

Encryption Reccomendation for Specific Borg Backup + Rclone Scenario

I currently use Borg backup to make backup repositories of my system data on a local drive. I also use Rclone to transfer the repository to a Backblaze B2 cloud storage bucket. Borg can create ...
Xixor's user avatar
  • 11
0 votes
1 answer
130 views

Verify the safety of old back ups

I have an old laptop that I've been using since high school, and for a long time I wasn't careful with how I used it. Namely, I shared USBs with friends and teachers for assignments and presentations, ...
Tunes_K's user avatar
2 votes
0 answers
605 views

MMLS (Sleuth Kit) not working in some situations

I am experiencing some issues when using mmls command after having created an image with dcfldd/guymager in some particular situations. Usually this approach seems to be working fine to create ...
Luca Domeneghetti's user avatar
0 votes
1 answer
107 views

How to create, use and backup android signing keys without trusting the computer?

I did a lot of research on how to securely create, use and backup android signing keys (when using Google Play Signing is not an option). The best option seams to be a Yubikey or a Nitrokey HSM 2 and ...
Alai's user avatar
  • 1
0 votes
1 answer
107 views

Is my PGP key which I uploaded to sync.net compromised?

I just accidentally uploaded my PGP key in unencrypted format to rsync.net. As far as I know, nobody but me has access to the account. Is my key compromised?
Someone's user avatar
  • 169
2 votes
1 answer
985 views

Is Synology's Active Backup for Business Destination Encryption Secure or Snake Oil?

Synology's Active Backup for Business has a feature for Destination Encryption which only seems to work with BTRFS. It works so that you have to set it up when creating the BTRFS storage. At this ...
Jey DWork's user avatar
  • 230
1 vote
1 answer
822 views

Good checksum algorithm for backup / cloud sync system

I am writing a cloud backup system, and want to use a checksum to know if a file has been modified, and accordingly sync it with the server. This question shows that xxHash is super fast, and this ...
t348575's user avatar
  • 113
1 vote
2 answers
285 views

Storing backup keys (2FA) for online accounts

So I spent the day looking for a good solution of storing the backup keys or the 2FA codes and can't seem to find a convenient way for me, many people have different takes on this, so far I found 2 ...
hiken's user avatar
  • 11
0 votes
1 answer
114 views

Does keeping a flash drive in my computer all the time expose it to ransomware attacks?

I keep my laptop backed up using Google Desktop. It's how I keep my things like notes, pictures, etc., backed up. I recently have been reading about ransomware attacks increasing and I wanted to ...
Stan Shunpike's user avatar
0 votes
2 answers
290 views

Why are multi-billion-dollar companies failing to create ransomware-proof backups?

We keep hearing of big enterprises (Garmin, Edeka) being taken out of business for days or weeks, due to ransomware encryption attacks. One would assume that it can't be that hard to create versioned ...
Zsolt Szilagy's user avatar
2 votes
0 answers
178 views

Is "drag-drop files" computer backup sufficient to avoid most malware/ have all my files?

I'm debating dragging all my files onto an external hard drive manually - rather than a time machine backup - and then pulling over any specific files I need if I ever need them. Afterwards, I'll ...
Jonas's user avatar
  • 21
2 votes
1 answer
432 views

Why do services generate multiple 2FA backup codes?

In case you lose access to your two-factor authentication (2FA) codes, you are only required to enter one of the backup codes. So why do services like Google generate multiple codes if it doesn't ...
Noodles's user avatar
  • 123
0 votes
1 answer
303 views

Should I encrypt backup files with WinRar?

Currently we don't have a server in a small organization with a very limited budget. We do backup by syncing files between workstations with Windows 10 OS. I'd like to encrypt these files because they ...
inf3rno's user avatar
  • 489
2 votes
1 answer
219 views

Backup Google Authenticator transferring QR code

I understand that saving a screenshot of the QR code during the OTP setup process is enough to back up a single account, however, is this the same for the QR code generated during the Google ...
lucasresck's user avatar
0 votes
0 answers
201 views

What is a good common approach for encrypted backup/restore on an embedded device?

An embedded device with Linux supports backup/restore of files encrypted with openssl. The idea of backup is: tar -c .... | openssl smime -encrypt -binary -aes-256-cbc -out backupfile.encrypted -...
falkb's user avatar
  • 101
0 votes
3 answers
282 views

How to mitigate ransomware from locking attached storage

I have OSX. Time machine takes periodic backups. This backup is encrypted. If my machine were to be infected and locked by ransomware, what prevents the backup from also being comprised as it is just ...
paulj's user avatar
  • 157
1 vote
3 answers
511 views

Should I backup a GPG key used for Authentication?

Regarding backups (escrows) of GPG (OpenPGP compliant) keys, I seem to understand that (E)ncryption keys need to be backed up, to prevent data loss, and that (S)igning keys should not be backed up, ...
gpg-question's user avatar
1 vote
0 answers
135 views

How do we reconcile a requirement to keep backups, with a requirement that we be able to purge data on request? [closed]

As part of SOC 2 preparation (and just general operational best-practice) we take regular PostgreSQL backups and keep them for up to a year. One of our partners has a requirement that we be able to ...
recurser's user avatar
0 votes
0 answers
132 views

Is it possible/feasible for ransomware to inject itself into backup software to present false data to the user?

The reason I am asking this is the following: My boss wants me to sell a backup solution where encrypted backups are to be stored at our site. But we shouldn't have the key to decrypt them (in case we ...
CCK1979's user avatar
  • 31
1 vote
1 answer
232 views

Is Acronis True Image encryption safe? [duplicate]

This question has been asked before but a lot of time has passed since then. The older question had an answer that the Eula said that Acronis can decrypt the data. I can no longer find that part. Can ...
A_good_name's user avatar
0 votes
0 answers
404 views

DigitalOcean Spaces for personal backups

Sorry for the naive question. I wonder how DigitalOcean Spaces (S3 compatible) fits personal backups. I found a lot of information about security of Amazon S3 and its security is undoubted, however, ...
com's user avatar
  • 101
1 vote
1 answer
1k views

Is rsyncd secure? (except for the lack of transport encryption)

I have been using an rsyncd server for backups for what feels like a decade. I saw that rsyncd has no transport encryption (not even for username and password). I wonder what other security issues ...
Sybil's user avatar
  • 1,479
1 vote
0 answers
151 views

How Can I Backup App Data In Android/iOS Devices?

After my other post I'm looking over some other possibilities to do what I'm trying to do. How To Recover End-To-End Encrypted Data After Losing Private Key? If I save user data in server, in order to ...
Eagleclaw's user avatar
  • 257
0 votes
1 answer
98 views

Sync AWS snapshots to secondary account - supplier ask for "swap" - security theathre?

I'm managing an AWS account for a specific purpose for a company of 120 people. Another supplier of this company of around 5 people also has an AWS account. To protect resources in an AWS account from ...
jdog's user avatar
  • 345
1 vote
1 answer
479 views

Can I encrypt Google backups (without setting a screenlock password?)

As you can see from my previous question, How can I escape Google?, I am not overly keen on sharing my personal data. I just got yet another new Android phone, after yet another died. Because I do not ...
Mawg's user avatar
  • 1,410
8 votes
2 answers
2k views

Understanding GnuPG --export-options backup

The GnuPG documentation lists an option called --export-options parameters. One of the possible parameters for this option is backup (aliased export-backup). The description for --export-options ...
Confused GPGer's user avatar
0 votes
0 answers
153 views

Asymmetric Encrypted Container

I'd like to set up a remote backup for my PC. I want to have it run at scheduled times, encrypting the data locally and then transmitting it to the server. I'd like to use something popular and open ...
BeB00's user avatar
  • 101
0 votes
1 answer
214 views

Did a virus like this really ever exist? [closed]

I know that this world is very evil, and that the most unfathomable things go on around the clock, inside and outside of the "computer world". However, I sometimes really wonder if certain ...
H Bebee's user avatar
7 votes
2 answers
252 views

How should backups be tested in large offices?

I always hear people say "test your backups", but I have no idea how that is done in practice when you have to deal with complex infrastructures. For personal backups it's easy to rely on ...
reed's user avatar
  • 15.8k
0 votes
1 answer
140 views

Backup on a distant dedicated server, such that even if someone gets root / hacks my distant server, they cannot read the data

Let's say we have: a local computer (Windows or Linux) a distant dedicated server with 2TB storage, running Linux I'd like to do a backup my local computer's data folder (1 TB) to the distant server ...
Basj's user avatar
  • 953
0 votes
1 answer
312 views

Can't Amazon see my files if I use s3cmd/gpg with a complex password?

Since the early days of s3cmd I use it in combination with random generated filenames (uuidgen loop) and a complex passphrase (pwgen -n1 -c 32 -y). On security.stackexchange.com search there is only 1 ...
Sybil's user avatar
  • 1,479
-1 votes
2 answers
230 views

Can I check if ransomware is running by using a VM [closed]

I am not an expert, but as far as I understand, ransomware will encrypt files and (for an undefined period) decrypt as well, so it appears all is well. At some point in time, the decrypting ends and ...
Marco's user avatar
  • 1
2 votes
2 answers
298 views

use custom 'key' for hardware security token

Using a hardware security token as a second factor is generally considered quite a boost in security. But one of the issues I'm having is how to backup the (digital) keys used in the hardware device (...
n0542344's user avatar
  • 121
1 vote
0 answers
161 views

Backing-up to an untrusted cloud

Not sure if this kind of review/validation question is allowed - please delete if it isn't. Like many before, I'm looking for ways to do cloud backup in a way where I trust that I'm still the only one ...
jmr's user avatar
  • 111
0 votes
1 answer
298 views

What could be recovered after an interrupted ransomware attack?

Four days ago my PC got phobos ransomware. I didn’t notice until three days ago, and the reason is that the attack stopped midway, leaving some of my data as it is and not leaving behind any ransom ...
user401445's user avatar
0 votes
3 answers
2k views

How bad is rsync with no-password sudo?

I need to backup files with preserved attributes from a source workstation to a LAN server (both on Linux Mint, the server is running sshd and Samba). One of the solutions which preserves files' ...
afora377's user avatar
  • 121
3 votes
3 answers
274 views

Drawback of Multi Level Encryption

I am backing up my files to a RAID mirrored HDD, that has full disk encryption (FDE) in place with LUKS. Until now I did this with rsync, but I recently switched to a new backup program that does file ...
JJ Abrams's user avatar
  • 131
1 vote
2 answers
135 views

Wordpress Backups and Security

Apart from all the other security and design flaws of Wordpress, there is 1 point that particularly got my attention: "Automatic Backups". These are saved inside the Wordpress directory. If you ask ...
Asperger's user avatar
  • 145
5 votes
4 answers
610 views

Methods for backing up key on paper

What are the methods to backup a key to paper? The idea is to have reasonable protection and the ability to restore the key in case of the digital backup is lost. Are there things that convert a ...
John Nett's user avatar
1 vote
2 answers
365 views

Solutions for backing-up my codebase

I have a codebase that I've been keeping on Github that I don't want to worry about losing. I've intermittently backed up all the repos to an S3 instance, but this doesn't feel secure. If my Github ...
undecided's user avatar
0 votes
1 answer
672 views

Using gpg to encrypt backups stored on remote untrusted servers

I need to encrypt daily backups, then upload them to untrusted cloud storage (s3, dropbox, etc.) I received help on security.se and crypto.se to formulate this approach: tar and xz the backup file ...
lonix's user avatar
  • 445
3 votes
1 answer
1k views

Symmetric vs asymmetric encryption for backup files uploaded to cloud storage

I want to encrypt my server's backups and upload them to cloud storage (e.g. dropbox, google drive). I understand the basics with symmetric (single passphrase-secured key) and asymmetric (public/...
lonix's user avatar
  • 445
0 votes
2 answers
208 views

Secret sharing scheme for disaster recovery with asymmetric key?

I want to backup many secrets using a secret sharing scheme, to make sure my family can access those secrets in case of my death. I need a way to keep adding secrets (without distributing new shares). ...
eloyesp's user avatar
  • 103
0 votes
1 answer
245 views

Malware in backups [closed]

The main thing i am interested in is the 3rd point below. In short I am worried about having a virus and what will suffice to remove it. I am on Mac and am running the latest version of Catalina. I ...
LowKi's user avatar
  • 1
0 votes
2 answers
1k views

How to backup files from a infected computer to a USB drive in a safe way?

Send the files by email or upload then in a drive are not a option since my friend's connection is very poor and is a lot of files. She gave me a USB drive to save her files but I know her computer ...
Mycroft's user avatar
  • 768
3 votes
1 answer
505 views

How to secure backup scripts so I do not have to hardcode passwords?

I have a secure and private aws ec2 environment but I need to do some backups of mongodb, postgresql, so I have a separate ec2 instance for doing backup and occasionally allow 80 and 443 to allow ...
raring-coffee20's user avatar