42 votes
Accepted

Are cloud storage services a good strategy to protect against ransomware attacks?

I'm not sure about Google Drive, but Dropbox provides a way to recover previous file versions, a feature that wouldn't be impacted by the ransomware, since it relies on a file copies on the Dropbox ...
Jakub's user avatar
  • 820
39 votes

Where do you store your personal private GPG key?

This is not what I currently use, but I am thinking about it: Encrypt the private key with very long symmetric encryption key Use Shamir's Secret Sharing to split the symmetric encryption key to 7 ...
Lie Ryan's user avatar
  • 31.4k
38 votes
Accepted

Is Windows 10 backup safe from ransomware?

If the ransomware gains administrator access to your computer then it can damage any backups that the Windows machine may have created on that computer. If the ransomware only acquires non-...
700 Software's user avatar
31 votes
Accepted

How can WhatsApp restore local or Google Drive Backups?

First assumption: The backup key is saved on WhatsApp servers too. Otherwise a local phone to phone backup would not work? TL;DR: Yes, after some investigation, this seems to be the case. Secondary ...
Yorick de Wid's user avatar
21 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

Simple, cheap and relatively scalable solution (Although I'm aware it has nothing with online storage to do) I have two USB drives that I rotate regularly (you can add a reminder in your calendar if ...
Thibault D.'s user avatar
21 votes

Is openssl aes-256-cbc encryption safe for offsite backup

You should never use OpenSSL's command line utility for general purpose encryption. It is actually designed only as a test of the library's internal encryption routines. Because of this, there are a ...
forest's user avatar
  • 66.7k
16 votes
Accepted

How robust is a VeraCrypt Container against disk errors (bit rot)?

Will the created containers still be bitwise comparable? No. Veracrypt stores different containers with different encryption keys, even if you use the same password. So the containers won't be ...
Lie Ryan's user avatar
  • 31.4k
15 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

At the time of writing, Dropbox would be a good way to mitigate ransomware attacks because a 30 day version history of file changes is kept on their servers (even on the free tier). This, depending ...
SilverlightFox's user avatar
15 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

What would you recommend as backup strategy to avoid Ransomware? Read Only Storage The simplest solution covers 90% of the average person's data preservation needs: store your old data in a read-only ...
user1717828's user avatar
  • 2,392
14 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

It's kind of scary that only one answer here mentions the verification of the backups so I felt the urge to add this answer: Whatever you chose as a backup strategy: Your backups are worth absolutely ...
Noir's user avatar
  • 2,573
14 votes

Is Windows 10 backup safe from ransomware?

The System Volume Information folder only contains files backed up by System Restore. That is, it won't protect your personal files should they get overwritten by malware, it will only protect Windows ...
SilverlightFox's user avatar
12 votes
Accepted

How many backups should I keep?

I feel like random people on the internet are not going to be able to answer this for you. This is a business decision. How valuable is the data? What is the risk of loss / corruption vs the cost of ...
Mike Ounsworth's user avatar
11 votes

Why can't the FBI copy the contents of an iPhone they are trying to crack?

When trying to access the content of a hard-drive, you have to use the interface provided by said hard-drive. It usually comes with a firmware. Currently, it is stated that this firmware will not ...
M'vy's user avatar
  • 13.1k
9 votes

Is it realistic to only need to remember the one password for the password manager?

Possible? Yes   Realistic? No I set my Windows login password to be the same as my FDE password. A controversial choice, but I don't see any major risks with this. If you have FDE then in ...
paj28's user avatar
  • 33.4k
9 votes
Accepted

How can I safely back-up files from an infected computer?

"How can they know that one of their files isn't infected"? You can't. Well you can if you get down into the bits of the file, but that's pretty tedious and expensive. If you have an idea of the ...
baldPrussian's user avatar
  • 2,778
9 votes
Accepted

How should I verify a backup has not been tampered with?

Cryptographic hash lists From a theoretical standpoint, verifying the integrity of data that will be put on an untrusted medium (such as a remote backup server or an unattended storage device) ...
forest's user avatar
  • 66.7k
8 votes
Accepted

How to read password from Windows credentials?

The Credential Manager stored passwords are managed by the Data Protection API and protected by DPAPI "master keys": The DPAPI keys used for encrypting the user's RSA keys are stored under %...
Royce Williams's user avatar
8 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

No. Consumer grade cloud backup is not an effective solution. In fact no single solution will protect your data, you must mix it up a bit. To give you a good answer I would have to know about your ...
Enis P. Aginić's user avatar
8 votes

How to protect Time Machine backups from Ransomware?

Probably the best low-impact solution is to use multiple disks. OSX supports it already. You could keep a regular disk plugged in, and use the second disk on a weekly basis (keeping it unplugged and ...
lorenzog's user avatar
  • 1,931
7 votes
Accepted

How do I back up YubiKey-backed TOTP authentication?

When setting up TOTP with a site, they give you a shared secret. Yubico Authenticator uses your Yubikey to store that info. As long as your key is present, all instances of Yubico Authenticator ...
tjd's user avatar
  • 803
6 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

I use a stack of external USB-3 hard drives, "A", "B", "C", etc that I rotate in sequence, and run an automatic nightly backup. (my computer runs 24/7 so at night it runs tasks like full backups, deep ...
Peter N's user avatar
  • 61
6 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

Keep it simple. While cloud-sync solutions may provide protection against ransomware through file versioning, choosing individual solution requires research(1) (2) and I think it's a task not worth ...
techraf's user avatar
  • 9,149
6 votes
Accepted

How robust is duplicity encryption when the backup server is untrusted?

From a strictly cryptographic sense, the Duplicity model does not have any weaknesses. Duplicity is designed specifically for a threat model when the destination server is untrusted. It drastically ...
forest's user avatar
  • 66.7k
6 votes

How can I safely back-up files from an infected computer?

What do you mean by "files?" If you mean system files, registry settings, binaries, and scripts, then the other answers are correct that there's essentially no way to be safe. Since this is a ...
ArrowCase's user avatar
  • 158
6 votes
Accepted

Why are multi-billion-dollar companies failing to create ransomware-proof backups?

You reference Garmin, so let's look at that: "cyber criminals targeted Garmin with a ransomware attack that encrypted the company’s internal systems and shut down critical services" "...
schroeder's user avatar
  • 129k
5 votes

Is Apple's AirPort Time Capsule vulnerable to ransomware?

Technically, the Time Machine content is as vulnerable as the content on your computer. It depends of course on the exact implementation of the ransomware, but you have to assume that when they target ...
Chris's user avatar
  • 735
5 votes
Accepted

Can Acronis True Image decrypt your files?

The 'worth' of the encryption in this case (which has nothing to do with the actual encryption as I'll explain below) is completely opinion-based, so you better rephrase that. But I'll try to explain ...
MiaoHatola's user avatar
  • 2,304
5 votes
Accepted

Is this Backup Safe from Ransomware?

Reasonably accurate. You might also let the Linux server read the files off the PCs, which have no write access to the Linux server (nor even know it's there. They're simply accessed routinely by ...
LSerni's user avatar
  • 22.8k
5 votes
Accepted

My local machine was infected with malware from a clients web server

With my developer hat on: If the new site is "all new", including the OS, then I would not have investigated the hacked site. I would have chalked it up as a "past event". If the new site was on the ...
schroeder's user avatar
  • 129k
5 votes

Backup is corrective control or a preventive control?

Corrective Control It isn't a control until it can be used and the only benefit is corrective, it does not prevent the media loss, it just helps fix the media loss. Who cares that it needs to be ...
Andrew Russell's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible