we're in a similar space -- http://www.getdropbox.com (and part of the yc summer 07 program) basically, sync and backup done right (but for windows and os x). i had the same frustrations as you with existing solutions.

let me know if it's something you're interested in, or if you want to chat about it sometime.

drew (at getdropbox.com)

Will your service offer a full server backup, or just selected files?

It looks like a great idea - except - the sucking up of bandwidth to make the first backup. I'm definitely looking for a better remote backup service for my Architecture firm, for which I currently pay far too much, but my server unfortunately is Windows SBS 2003 - whose OS I truly dislike. I am forced to do this for compatibility with my Revit BIM software unfortunately, so I guess your product won't help me.

If that would be a problem, give that first upload for free. Or is your concern about something other than cost?

As a major bandwidth user, mainly bandwidth actually. But having the first upload for free would be a great incentive.

I think it took several days to move my data to the current system remotely which was not fun. I think its just an unavoidable problem. The severity was lessened by the service calibrating the upload to occur in the middle of the night, which really did help a lot. All of the incremental uploads also are scheduled at night, which is an obvious move.

Hm, what about FedEx-ing a HD with the encrypted data? It might be faster/cheaper/more practical?

Edit: That's assuming cperciva has physical access to his server, rather than working with e.g., EC2, or that he has more bandwith to spare.

I think it's a good idea, but already done, though. I use Carbonite to keep an online remote backup of my hard drive. They charge a fixed rate regardless of the capacity of the drive. Of course there is always space for competition, so if you think you can improve on their offering, then go for it.

If you use Carbonite, you're considerably braver than I am. Carbonite has no effective technological security, so you'd better hope that nobody breaks into their offices, none of their employees "go bad", and they're never confronted by a subpoena or have the PATRIOT act invoked against them; and they only keep the latest version of any file, so if you ever accidentally mangle a file you'd better hope that you can retrieve the unmangled version before Carbonite backs up the mangled version and throws away the older copy.

Right, but they're secure enough for most people. Think about it, the chances that someone gets access to my own computer (stealing it, breaking into my home, or hacking it over the Internet) are higher than the chances of that happening to a professional service provider. At least that's the case for most computer users. I heard recently that 25% of all computers in the world are zombified. So much for security on your own computer.

But anyway, that's why I said if you can improve on their offering then go for it. Given the current options, they're the best that I know of; and I say that knowing that they have a lot to improve. So, if you build a better service, I'd consider switching.

_none of their employees "go bad"_

This won't happen to you? Okay. I trust you.

_never confronted by a subpoena_

If you get a subpoena for a passphrase for a client, you will give it up. Yes you will. Now, if someone was holding terroristic bombcodes or whatever and REALLY didn't want people getting them, they ain't backing up anything online. The same people who need real security aren't going to be uploading their data anywhere .

"I trust you"

"If you get a subpoena for a passphrase for a client, you will give it up."

Not if I don't have it. This is the point of strong security -- you don't NEED to trust me, because I am not technically capable (nor, unless I'm quite mistaken, is the NSA) of decrypting data backed up using tarsnap.

This would be off-topic in this thread, but definitely not in this forum. If you make a new top level post requesting feedback, more people will be able to contribute and benefit from it.

My first reaction was: I see this more as donationware open source. But then again, if you feel your technology would be hard to replicate, and if the cost is on the S3 ballpark, I'm in.

I just read more about your security strategy - and that is definitely something people really want - reliable and secure data backup. Good luck.

Interesting project, unfortunately I didn't found any way to enter in contact with you. You can contact me through my project web site http://www.disnetwork.info

I'll be glad to discuss this remote secure backup project with you. It was once on top of my list for a DIS application, but I dropped it for various reasons that I would be glad to share with you.

His address is at the end of the blog entry in which he introduces his idea (the first of the links above).