Re:Show HN: Baxx – Unix-friendly backup service
by metafunctor on Monday March 25, 2019 @04:07PM
(#19486280)
Thanks for pointing this out.
The first entry on the Borg FAQ [1] is “can I backup from multiple servers into a single repository” and the answer is basically “yes, but it might be slow”. Seems to me like it should say “not really, it's insecure and might be slow”, plus the tool should make it clear you're doing something unwise if you try it anyway.
I've always shied away from shared backup repositories anyway, because it usually means data from host A can be read by host B, and that's just not what I usually want. The deployment instructions appear sane to me. [2]
[1] https://borgbackup.readthedocs.io/en/stable/faq.html#can-i-b...
[2] https://borgbackup.readthedocs.io/en/stable/deployment/centr...
> When the above attack model is extended to include multiple clients independently updating the same repository, then Borg fails to provide confidentiality (i.e. guarantees 3) and 4) do not apply any more).