News for hackers. Stuff that matters.

A comment on My First 10 Minutes on a Server. Parent comment

Re:My First 10 Minutes on a Server by brobinson on Thursday June 16, 2016 @05:10AM (#11914916)
This is still open to abuse in the form of your legitimate backup script being disabled and replaced by one uploading false backups. You wouldn't know anything has happened until you go to restore from one.

Of course, this is an edge case, but I believe setting up a pull-based backup system is still going to be less work than a write-only push system.

[ Parent | on HN ]
Re:My First 10 Minutes on a Server by arielb1 on Thursday June 16, 2016 @09:59AM (#11916106)
A hacked server can have the backup server pull false backups as well.

Of course, your servers shouldn't be SSHing to your backup servers, but that goes both ways.

[ Parent | on HN ]
Re:My First 10 Minutes on a Server by tamana on Thursday June 16, 2016 @03:09PM (#11918180)
If the backup machine is compromised the attacker can corrupt your backups. Either way, if machine is hacked you risk loss.
[ Parent | on HN ]
Re:My First 10 Minutes on a Server by hueving on Thursday June 16, 2016 @04:43PM (#11918731)
That's ridiculous. The same tricks can be played on a pull based system once you have compromised the DB server.
[ Parent | on HN ]