Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [backup]

Backing up is the process of making copies (a backup) of data which may be used to restore the original after a data loss event.

0
votes
1answer
74 views

Whats a good backup policy for application with 0 hours RPO?

In my company, we have business critical applications with 0-hour RTO and RPO requirement. Usual strategy to ensure the RPO objective is to have regular backups (let’s say daily incremental, weekly ...
1
vote
2answers
278 views

How do I back up YubiKey-backed TOTP authentication?

I bought a YubiKey 5 NFC this week and have started using 2FA and U2F where I can but am deathly allergic to the idea of losing access. For backing up U2F access I'm going to buy a second U2F token (...
1
vote
0answers
60 views

Securing an android smartphone [closed]

Recently I got a new smartphone (OnePlus 6T, Android 9 Pie) and would like to do everything right from the start. My main concerns are, I would like to be able to backup my data, I would like the ...
1
vote
1answer
65 views

Physically Isolated backup scheme

The servers at my lab were recently hacked (ransomware attack) and I've been assigned to make our network more secure. I propose doing weekly backups with an SSD-cached RAID (10-20TB range) that is ...
0
votes
1answer
69 views

Backing up an encypted drive on an encrypted drive

I have searched, and have been unable to find an adequate answer to my question. My apologies as I'm sure this is a relatively elementary question for the users here. I have encrypted my Windows 10 ...
0
votes
2answers
2k views

Suspicious new folder named .um in internal storage, google search says file is spyware

I am running Android 7.0 in a Samsung Galaxy J7 prime phone. Today, while using the phone, I suddenly found a folder named obj in Internal storage/Android, that had never been there before. It had the ...
0
votes
2answers
152 views

How to back up and restore personal data safely from possibly exploited android phone?

I'm using a Samsung J7 Prime with Android version 7.0, not rooted. Recently, I grew suspicious I had become the target of some kind of exploit/network attack/mitm. Since I suspect the exploit is ...
4
votes
2answers
130 views

Is it safe to upload a read-only encrypted volume to a cloud folder?

I know keeping an active encrypted volume (like a VeraCrypt drive or a simple zip folder encrypted with AES256) on Dropbox/OneDrive/Gdrive/etc. is risky; data can be corrupted and the pattern of ...
1
vote
1answer
265 views

GPG: Is 'pubring.kbx' safe to share?

This public keyring pubring.kbx (as I merely guess from the name) must be safe to share publicly or is it not? Does it contain any sensitive information with respect to private keys? I want to back ...
2
votes
1answer
133 views

Is this ransomware encryption or file corruption?

I have backups of a user folder from an older drive that I am getting to organizing now and noticed files are either corrupted or encrypted. File extensions and names are not changed, appears exe ...
1
vote
1answer
387 views

Why is the U2F secret key on yubikeys is not programmable, and how to get a universal backup token?

I'm trying to figure the best strategy for having a backup U2F token. Ideally, I want to have two identical tokens; obviously I'll have the primary one easily accessible (say, on my keyring), but the ...
4
votes
3answers
237 views

Digital preservation: cryptography for long-term archiving

What would be a safer bet/standard choice for encrypted archived data? Presently I use a dmcrypt + LUKS container for my sensitive data. For some stuff (like music mp3s), it would not matter if ...
2
votes
2answers
154 views

Encryption before backing up to the Cloud

I have collected a lot of data (approx 3TB) in photos and videos over the years, I've been upgrading to newer and bigger hard disks and luckily they've not failed on me. I've realized that my access ...
1
vote
1answer
454 views

Is it safe to use unencrypted rsync when my backup is encrypted?

I've configured something usually advised against, but so far I have evaluated it seems perfectly safe to me. I'd like some opinions since playing with non-encrypted connections for my very sensitive ...
3
votes
1answer
60 views

How does security work in a cloud-to-cloud backup scenario?

I'm thinking of using Spinbackup which is a cloud-to-cloud backup of gmail, but I was resistant to the idea of telling Spinbackup my gmail password for obvious reasons. However, on the Spinbackup ...
0
votes
2answers
475 views

Backup is corrective control or a preventive control?

This is a theoritical question. There are preventive controls and corrective controls. So, is Backup a corrective control or a preventive control? There are mixed answers and mixed explainations. (...
2
votes
1answer
287 views

How should I verify a backup has not been tampered with?

I have a NAS with some files that total up to 2TB in size. I suspect I could shrink this because there are possibly duplicate files. I plan on making a second backup by sending what I have to Google ...
13
votes
6answers
7k views

How can I safely back-up files from an infected computer?

Imagine a laptop that's been infected by malware, and that the owner hasn't backed-up their files.* They have pictures, videos, and documents they'd like to preserve, so they're hesitant to ...
8
votes
1answer
2k views

Is openssl aes-256-cbc encryption safe for offsite backup

I have around 20000 files (around 9GB) each of which is encrypted using openssl enc -aes-256-cbc -in infile -out outfile -k mypassword command. Each file uses same password. My openssl version is 1.1....
3
votes
1answer
163 views

My local machine was infected with malware from a clients web server

I have a client that I developed a new site for, it's not live yet because he wanted me to backup the old site first. This was a completely custom "directory" type site and the company that built it (...
1
vote
2answers
400 views

Is two copies of the same data stored on a RAID 1 array considered a “backup” [closed]

Since I got/built my computer I've been working towards improving my backup situation and my planned setup goes something like this: My PC: 240 GB SSD Backup Array: 1TB RAID1, incremental time ...
3
votes
1answer
386 views

duplicity list-current-files doesn't ask for password

I use duplicity to create symmetrically encrypted backups to some server space I get from my ISP. When creating the backups I of course set a password and when I want to restore my files, duplicity ...
3
votes
1answer
120 views

What are the security implications of rewriting SSH_ORIGINAL_COMMAND to allow rsync run from rsnapshot cron job?

We have the following authorized_key file that we sync across all our hosts to use with our rsnapshot cron job: from="192.168.1.337",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,\ ...
6
votes
4answers
704 views

Possible to use *only* U2F authentication?

Using a U2F USB authentication key to login to services such as Google seems a good idea. However, these services often allow you to register a backup two-factor-authentication (2FA) method, which you ...
1
vote
1answer
53 views

Against what scenarios should I backup my database?

I'm building a website with very sensitive data stored in my database. Losing any of it is not an option, and that's why I'm thinking to do an incremental backup every hour or so. I work on it alone, ...
2
votes
2answers
275 views

Is this Backup Safe from Ransomware?

I'm planning a home backup setup, and I'm not sure if I really understand this quite right. The idea is I'll set up a Linux server on the network that contains two drives. Drive1 will be network-...
3
votes
2answers
486 views

Encryption using multiple Yubikeys, any of which can unlock

I was hoping to use my Yubikey for file encryption, but also wanted to have a backup Yubikey work to unlock the file. From a conceptual point of view, I know it is possible since, even as is, I ...
4
votes
1answer
236 views

How do I use google drive local folder with auto sync while protecting myself from ransomware?

Background So I have my Google Drive 1TB account. Obviously, I'm using Drive to have a backup for all my precious files. I used to have a local Drive folder with auto sync on my PC. It was very ...
7
votes
1answer
586 views

How robust is duplicity encryption when the backup server is untrusted?

The top answer to this question and the article it references explain that when an adversary can see snapshots of a Truecrypt container over time, the encryption is weakened. That same answer ...
-1
votes
2answers
75 views

securely restoring iPhone from backup

Let's say you have an iPhone. Someone else gets physical control of the phone, successfully logs in, installs a backdoor that lives inside any local restore functionality (e.g. if you used the phone's ...
0
votes
1answer
148 views

What is the name of this type of attack using transparent encryption?

I don't know or remember the name for the following attack and I can't find it on the web. Using transparent encryption (e.g. TDE) to encrypt data (e.g. databases) over a long period of time, so that ...
3
votes
1answer
1k views

Should a backup server be on a separate subnet / vlan from other machines on the network?

Should a backup server be on a separate VLAN/subnet from the systems it backs up? And should the routes only go one way from inside the VLAN/subnet of the backup server out to the clients and subnets ...
2
votes
4answers
185 views

Archival storage for ransomware defense

Thinking about the threat posed by ransomware, the defense that makes the most sense to me is to have a secure copy, and an automated way to restore protected files. Ordinary backups are not really ...
1
vote
0answers
90 views

Encrypt and backup files directly to cloud storage? (No locally saved copies) [closed]

So far I know of the following services: Tresorit (paid cloud storage service) SpiderOak (paid cloud storage service) Arq (paid software, works with a number of cloud services) ...are there any ...
1
vote
0answers
15 views

Meta Backup with Temporary Connections

I have an Ubuntu server set up as a NAS server among other things. I use that space for my backups, but for safety, I back up certain crucial files to an external USB Hard-drive. I back up about once ...
3
votes
1answer
150 views

Offsite Incremental Encrypted Backups for a small law office [closed]

I am the system administrator for a small law office. We have a local file server on our network that holds all of our digital records. I currently have this server being incrementally backed up ...
0
votes
2answers
551 views

VeraCrypt + WinRAR

My situation: I create containter in VeraCrypt encrypted by AES-Twofish-Serpent with Whirpool. I put my data in here and then I split the container using WinRAR into smaller pieces without compression ...
1
vote
1answer
287 views

If Full Disk Encryption is enabled, is encrypting the backups a moot point?

Assume that a server has Full Disk Encryption enabled - LUKS for Linux and BitLocker for Windows. This FDE requires a passphrase on boot to allow the disk to be unlocked and facilitate the boot ...
3
votes
2answers
269 views

How to properly store, encrypt and backup passwords for home and office use

I am in close proximity to the moment, where I will need to migrate from my old ssd and data hdd to new ones (wear and age), so I'm rethinking my environment. Please, give me suggestions about what ...
3
votes
1answer
122 views

How can I back up my iPhone without compromising my 2FA and master keys?

I've noticed that when I restore my old iPhone's backup to a new iPhone, 1Password's master-key (which is never supposed to leave the device 1Password is installed on, and you transfer manually), my ...
4
votes
3answers
2k views

Is Acronis True Image encryption secure?

I use Acronis backup software to create images of my system, have a copy of important stuff in the cloud and all other backup related things. As Acronis states, their software uses AES encryption ...
1
vote
2answers
133 views

How to prevent corruption from ruining synced backups

I thought I was being clever keeping my password database stored on dropbox. This is because it's synced to the cloud and multiple computers. But when one got corrupted, I lost everything. (Ok I ...
3
votes
1answer
444 views

CrashPlan: Is the archive key password stored on the server?

I'm considering enabling Archive Key Password in my CrashPlan account. I'd like to understand how secure this feature is. CrashPlan documentation for Archive Key Password says (emphasis added): ...
3
votes
1answer
150 views

Is safe to save files on HDD with bad sectors?

I have a 500Gb 2.5 External Hard-Drive. I have separated good-sectors into "X" partition, and have separated bad-sectors into "Y" partition. I've managed to use that drive as a backup. But is it safe ...
4
votes
1answer
197 views

Simple, malware-resilient, automatic Windows backup (or: How should the average small company protect their Windows server?)

I am trying to devise a backup strategy for a Windows server, and I'd like it to satisfy the following criteria: It should be resilient to malware: If ransomware takes over the server, it should not ...
2
votes
2answers
388 views

Protect backup from ransomware [duplicate]

I'm planning to (finally) backup all my personal files from my home network on a new HDD. If I'd use an external HDD with USB cable the ransomware would theoretically encript these data too. Would ...
0
votes
1answer
98 views

Do backups with application-level authentication defeat ransomware?

While having "too much time" and after some careful thinking from my side, I kinda "found" that if you authenticate at application level, ransomware would have to carefully analyze all known settings ...
0
votes
1answer
166 views

Does it make more sense to encrypt whole backup disk or only encrypt backup itself?

I am using duplicity to back up files to my external hard drive. I see that I have different options of encrypting my backup: Encrypt backup disk (filesystem-level encryption) Encrypt backup (...
2
votes
1answer
60 views

Does it matter if my recovery media is read only?

In the past, it was fairly simple to create read only recovery media for a computer: you just made sure to use write once disks. This meant that if you accidentally booted the machine to the normal OS,...
0
votes
1answer
71 views

Online backup of secret keys in crypted zip

I want to have an online backup of my private keys and other sensitive information. Which realistic attack vectors do I expose myself to by: making a zip containing the keys symmetrically crypting ...