News for hackers. Stuff that matters.

A comment on US city rejects $5.3M ransom demand and restores encrypted files from backup. Parent comment

Re:US city rejects $5.3M ransom demand and restores encrypte... by beagle3 on Friday September 06, 2019 @06:42AM (#20894498)
Snapshots (not incremental nor differential) that take space proportional to change (1 byte change in a 5GB file takes 10K or so in backup, even insertion/deletion), built in to windows? How is it called?

TimeMachine in macs has a similar feature set notably lacking proportional space (insert 1 byte anywhere in a 5GB file and the snapshot takes an additional 5GB)

[ Parent | on HN ]
Re:US city rejects $5.3M ransom demand and restores encrypte... by denkmoon on Sunday September 08, 2019 @11:56PM (#20915110)
Can't say I'm sure about the actual space usage, but the subsystem is "Shadow Copy". https://en.wikipedia.org/wiki/Shadow_Copy
[ Parent | on HN ]
Re:US city rejects $5.3M ransom demand and restores encrypte... by beagle3 on Monday September 09, 2019 @01:30AM (#20915422)
That’s a low level mechanism that is used to implement consistent backups, (comparable to e.g. LVM snapshots for any file system or ZFS/Btrfs snapshots) but it does not offer anything directly to end users. The venerable built in NTBackup (afaik the only built in user backup system included in Windows) is better than nothing but is a far cry from Borg/Bup - it is practically infeasible to snapshot e.g. every hour.
[ Parent | on HN ]