Questions tagged [backup]
Backing up is the process of making copies (a backup) of data which may be used to restore the original after a data loss event.
196
questions
0
votes
0
answers
76
views
Outdoor backup: gocryptfs --init --reverse: alway same .diriv in 1st level directory
Intro
Trying to send encrypted backup of in productions filesystems, I was interested by the ability of using gocryptfs in reverse mode!
The idea is to
use gocryptfs --reverse from any existing (...
0
votes
0
answers
6
views
How exactly Apple Time Machine backups are encrypted? [migrated]
I have a USB SSD that I use for Time Machine backups. I have backup encryption enabled.
What keys exactly are used to encrypt the backup? Does Apple have any of those keys? How safe it is to keep this ...
- 1
0
votes
0
answers
31
views
What does an exported BitLocker key package contain?
I've learned that a key protector encrypts the VMK (volume master key), then the VMK encrypts the FVEK (full volume encryption key), and finally the FVEK encrypts the actual data blocks.
I've also ...
- 181
1
vote
0
answers
56
views
Encryption Reccomendation for Specific Borg Backup + Rclone Scenario
I currently use Borg backup to make backup repositories of my system data on a local drive. I also use Rclone to transfer the repository to a Backblaze B2 cloud storage bucket.
Borg can create ...
- 11
0
votes
1
answer
85
views
Verify the safety of old back ups
I have an old laptop that I've been using since high school, and for a long time I wasn't careful with how I used it. Namely, I shared USBs with friends and teachers for assignments and presentations, ...
- 1
2
votes
0
answers
298
views
MMLS (Sleuth Kit) not working in some situations
I am experiencing some issues when using mmls command after having created an image with dcfldd/guymager in some particular situations. Usually this approach seems to be working fine to create ...
0
votes
1
answer
55
views
How to create, use and backup android signing keys without trusting the computer?
I did a lot of research on how to securely create, use and backup android signing keys (when using Google Play Signing is not an option). The best option seams to be a Yubikey or a Nitrokey HSM 2 and ...
- 1
0
votes
1
answer
52
views
Is my PGP key which I uploaded to sync.net compromised?
I just accidentally uploaded my PGP key in unencrypted format to rsync.net. As far as I know, nobody but me has access to the account. Is my key compromised?
- 139
2
votes
1
answer
560
views
Is Synology's Active Backup for Business Destination Encryption Secure or Snake Oil?
Synology's Active Backup for Business has a feature for Destination Encryption which only seems to work with BTRFS. It works so that you have to set it up when creating the BTRFS storage. At this ...
- 222
1
vote
1
answer
475
views
Good checksum algorithm for backup / cloud sync system
I am writing a cloud backup system, and want to use a checksum to know if a file has been modified, and accordingly sync it with the server.
This question shows that xxHash is super fast, and this ...
- 113
0
votes
2
answers
190
views
Storing backup keys (2FA) for online accounts
So I spent the day looking for a good solution of storing the backup keys or the 2FA codes and can't seem to find a convenient way for me, many people have different takes on this, so far I found 2 ...
- 1
0
votes
1
answer
78
views
Does keeping a flash drive in my computer all the time expose it to ransomware attacks?
I keep my laptop backed up using Google Desktop. It's how I keep my things like notes, pictures, etc., backed up. I recently have been reading about ransomware attacks increasing and I wanted to ...
- 135
0
votes
2
answers
251
views
Why are multi-billion-dollar companies failing to create ransomware-proof backups?
We keep hearing of big enterprises (Garmin, Edeka) being taken out of business for days or weeks, due to ransomware encryption attacks.
One would assume that it can't be that hard to create versioned ...
- 193
2
votes
0
answers
102
views
Is "drag-drop files" computer backup sufficient to avoid most malware/ have all my files?
I'm debating dragging all my files onto an external hard drive manually - rather than a time machine backup - and then pulling over any specific files I need if I ever need them.
Afterwards, I'll ...
- 21
1
vote
1
answer
287
views
Why do services generate multiple 2FA backup codes?
In case you lose access to your two-factor authentication (2FA) codes, you are only required to enter one of the backup codes. So why do services like Google generate multiple codes if it doesn't ...
- 113
0
votes
1
answer
237
views
Should I encrypt backup files with WinRar?
Currently we don't have a server in a small organization with a very limited budget. We do backup by syncing files between workstations with Windows 10 OS. I'd like to encrypt these files because they ...
- 489
2
votes
1
answer
171
views
Backup Google Authenticator transferring QR code
I understand that saving a screenshot of the QR code during the OTP setup process is enough to back up a single account, however, is this the same for the QR code generated during the Google ...
- 23
0
votes
0
answers
155
views
What is a good common approach for encrypted backup/restore on an embedded device?
An embedded device with Linux supports backup/restore of files encrypted with openssl. The idea of backup is: tar -c .... | openssl smime -encrypt -binary -aes-256-cbc -out backupfile.encrypted -...
- 101
0
votes
3
answers
237
views
How to mitigate ransomware from locking attached storage
I have OSX. Time machine takes periodic backups. This backup is encrypted.
If my machine were to be infected and locked by ransomware, what prevents the backup from also being comprised as it is just ...
- 157
1
vote
3
answers
425
views
Should I backup a GPG key used for Authentication?
Regarding backups (escrows) of GPG (OpenPGP compliant) keys, I seem to understand that (E)ncryption keys need to be backed up, to prevent data loss, and that (S)igning keys should not be backed up, ...
- 17
1
vote
0
answers
101
views
How do we reconcile a requirement to keep backups, with a requirement that we be able to purge data on request? [closed]
As part of SOC 2 preparation (and just general operational best-practice) we take regular PostgreSQL backups and keep them for up to a year. One of our partners has a requirement that we be able to ...
- 11
0
votes
0
answers
104
views
Is it possible/feasible for ransomware to inject itself into backup software to present false data to the user?
The reason I am asking this is the following:
My boss wants me to sell a backup solution where encrypted backups are to be stored at our site. But we shouldn't have the key to decrypt them (in case we ...
- 31
1
vote
1
answer
183
views
Is Acronis True Image encryption safe? [duplicate]
This question has been asked before but a lot of time has passed since then.
The older question had an answer that the Eula said that Acronis can decrypt the data. I can no longer find that part.
Can ...
- 13
0
votes
0
answers
361
views
DigitalOcean Spaces for personal backups
Sorry for the naive question.
I wonder how DigitalOcean Spaces (S3 compatible) fits personal backups.
I found a lot of information about security of Amazon S3 and its security is undoubted, however, ...
- 101
0
votes
1
answer
692
views
Is rsyncd secure? (except for the lack of transport encryption)
I have been using an rsyncd server for backups for what feels like a decade.
I saw that rsyncd has no transport encryption (not even for username and password).
I wonder what other security issues ...
- 1,445
1
vote
0
answers
117
views
How Can I Backup App Data In Android/iOS Devices?
After my other post I'm looking over some other possibilities to do what I'm trying to do.
How To Recover End-To-End Encrypted Data After Losing Private Key?
If I save user data in server, in order to ...
- 257
0
votes
1
answer
70
views
Sync AWS snapshots to secondary account - supplier ask for "swap" - security theathre?
I'm managing an AWS account for a specific purpose for a company of 120 people. Another supplier of this company of around 5 people also has an AWS account.
To protect resources in an AWS account from ...
- 355
1
vote
1
answer
329
views
Can I encrypt Google backups (without setting a screenlock password?)
As you can see from my previous question, How can I escape Google?, I am not overly keen on sharing my personal data.
I just got yet another new Android phone, after yet another died. Because I do not ...
8
votes
2
answers
1k
views
Understanding GnuPG --export-options backup
The GnuPG documentation lists an option called --export-options parameters. One of the possible parameters for this option is backup (aliased export-backup).
The description for --export-options ...
0
votes
0
answers
109
views
Asymmetric Encrypted Container
I'd like to set up a remote backup for my PC. I want to have it run at scheduled times, encrypting the data locally and then transmitting it to the server. I'd like to use something popular and open ...
- 101
0
votes
1
answer
186
views
Did a virus like this really ever exist? [closed]
I know that this world is very evil, and that the most unfathomable things go on around the clock, inside and outside of the "computer world". However, I sometimes really wonder if certain ...
- 1
7
votes
2
answers
217
views
How should backups be tested in large offices?
I always hear people say "test your backups", but I have no idea how that is done in practice when you have to deal with complex infrastructures.
For personal backups it's easy to rely on ...
- 15.7k
0
votes
1
answer
116
views
Backup on a distant dedicated server, such that even if someone gets root / hacks my distant server, they cannot read the data
Let's say we have:
a local computer (Windows or Linux)
a distant dedicated server with 2TB storage, running Linux
I'd like to do a backup my local computer's data folder (1 TB) to the distant server ...
- 961
0
votes
1
answer
269
views
Can't Amazon see my files if I use s3cmd/gpg with a complex password?
Since the early days of s3cmd I use it in combination with random generated filenames (uuidgen loop) and a complex passphrase (pwgen -n1 -c 32 -y). On security.stackexchange.com search there is only 1 ...
- 1,445
-1
votes
2
answers
192
views
Can I check if ransomware is running by using a VM [closed]
I am not an expert, but as far as I understand, ransomware will encrypt files and (for an undefined period) decrypt as well, so it appears all is well. At some point in time, the decrypting ends and ...
- 1
2
votes
2
answers
254
views
use custom 'key' for hardware security token
Using a hardware security token as a second factor is generally considered quite a boost in security. But one of the issues I'm having is how to backup the (digital) keys used in the hardware device (...
- 121
1
vote
0
answers
124
views
Backing-up to an untrusted cloud
Not sure if this kind of review/validation question is allowed - please delete if it isn't.
Like many before, I'm looking for ways to do cloud backup in a way where I trust that I'm still the only one ...
- 111
0
votes
1
answer
262
views
What could be recovered after an interrupted ransomware attack?
Four days ago my PC got phobos ransomware. I didn’t notice until three days ago, and the reason is that the attack stopped midway, leaving some of my data as it is and not leaving behind any ransom ...
0
votes
2
answers
1k
views
How bad is rsync with no-password sudo?
I need to backup files with preserved attributes from a source workstation to a LAN server (both on Linux Mint, the server is running sshd and Samba). One of the solutions which preserves files' ...
- 113
3
votes
3
answers
237
views
Drawback of Multi Level Encryption
I am backing up my files to a RAID mirrored HDD, that has full disk encryption (FDE) in place with LUKS. Until now I did this with rsync, but I recently switched to a new backup program that does file ...
- 131
1
vote
2
answers
108
views
Wordpress Backups and Security
Apart from all the other security and design flaws of Wordpress, there is 1 point that particularly got my attention: "Automatic Backups".
These are saved inside the Wordpress directory. If you ask ...
- 145
5
votes
4
answers
476
views
Methods for backing up key on paper
What are the methods to backup a key to paper?
The idea is to have reasonable protection and the ability to restore the key in case of the digital backup is lost.
Are there things that convert a ...
- 73
1
vote
2
answers
274
views
Solutions for backing-up my codebase
I have a codebase that I've been keeping on Github that I don't want to worry about losing. I've intermittently backed up all the repos to an S3 instance, but this doesn't feel secure. If my Github ...
- 31
0
votes
1
answer
550
views
Using gpg to encrypt backups stored on remote untrusted servers
I need to encrypt daily backups, then upload them to untrusted cloud storage (s3, dropbox, etc.)
I received help on security.se and crypto.se to formulate this approach:
tar and xz the backup file
...
- 425
2
votes
1
answer
1k
views
Symmetric vs asymmetric encryption for backup files uploaded to cloud storage
I want to encrypt my server's backups and upload them to cloud storage (e.g. dropbox, google drive).
I understand the basics with symmetric (single passphrase-secured key) and asymmetric (public/...
- 425
0
votes
2
answers
166
views
Secret sharing scheme for disaster recovery with asymmetric key?
I want to backup many secrets using a secret sharing scheme, to make sure my family can access those secrets in case of my death. I need a way to keep adding secrets (without distributing new shares).
...
- 103
0
votes
1
answer
218
views
Malware in backups [closed]
The main thing i am interested in is the 3rd point below.
In short I am worried about having a virus and what will suffice to remove it.
I am on Mac and am running the latest version of Catalina. I ...
- 1
0
votes
2
answers
767
views
How to backup files from a infected computer to a USB drive in a safe way?
Send the files by email or upload then in a drive are not a option since my friend's connection is very poor and is a lot of files.
She gave me a USB drive to save her files but I know her computer ...
- 758
3
votes
1
answer
457
views
How to secure backup scripts so I do not have to hardcode passwords?
I have a secure and private aws ec2 environment but I need to do some backups of mongodb, postgresql, so I have a separate ec2 instance for doing backup and occasionally allow 80 and 443 to allow ...
- 181
6
votes
1
answer
340
views
How to keep backup servers safe?
I use duplicity on a few Ubuntu servers to encrypt backups and send them to a backup server, which then sends another copy to rsync.net, and then, once a week, give it or take, I download these ...
user222601