My First 10 Minutes on a Server

Re:My First 10 Minutes on a Server by brokenwren on Wednesday June 15, 2016 @03:20PM (#11911417)

I agree that pulling does appear to be more secure, but if someone breaches any of your servers undetected, you're pretty much hosed regardless.

Plus, the Inversoft guide specifically states that backups must be encrypted. I could put my backup ZIPs on a public Github repository and no one would be able to access the user data stored inside it. Therefore, it really doesn't matted if they are pushed or pulled.

[ Parent | on HN ]

Re:My First 10 Minutes on a Server by brobinson on Wednesday June 15, 2016 @07:27PM (#11912889)

If a script or cronjob or whatever on the server has write access to the repo, so does the hypothetical attacker.

I remember seeing a "hacking" website get wiped along with all of its backups about 15 years ago and it left a very strong impression on me regarding this issue.

[ Parent | on HN ]

Re:My First 10 Minutes on a Server by jjnoakes on Thursday June 16, 2016 @07:49AM (#11915464)

If it is write access but not delete access (nor overwrite access) then there is no issue.

It is sometimes more secure to push because it requires no inbound connections or authorizations the live machine.

[ Parent | on HN ]

Re:My First 10 Minutes on a Server by jacquesm on Wednesday June 15, 2016 @05:08PM (#11912163)

That may be true but with a pulled db backup and a good recovery strategy you'll be back up relatively quickly, without you'll be DOA.

[ Parent | on HN ]