News for hackers. Stuff that matters.

A comment on Ask HN: How do you back up your site hosted on a VPS such as Digital Ocean?. Parent comment

Re:Ask HN: How do you back up your site hosted on a VPS such... by usaphp on Tuesday October 11, 2016 @11:18PM (#12690224)
But if he already owns your box what prevents him from accessing your data anyway?
[ Parent | on HN ]
Re:Ask HN: How do you back up your site hosted on a VPS such... by gcr on Thursday October 13, 2016 @02:21PM (#12702871)
Usually you don't want to give any attackers the ability to destroy all your backups of the server they hacked.

S3's "upload-only" API keys are a solution here: you send the backups into a black hole but the attacker can't delete them.

Looks like Dropbox might not have something like that, giving the attacker read-write access to backups if they can get that API key.

[ Parent | on HN ]