News for hackers. Stuff that matters.

A comment on Backups Aren't Simple. Parent comment

Re:Backups Aren't Simple by Gigachad on Thursday September 17, 2026 @03:46AM (#49737668)
You want to make sure the append only is enforced by the hosting provider rather than duplicity. Your backups should be resistant to having an attacker on the system who can run arbitrary commands with duplicity.
[ Parent | on HN ]
Re:Backups Aren't Simple by Terr_ on Thursday September 17, 2026 @01:40PM (#49744065)
Right, defense against internal "oops" accidents looks rather different than defense against purposeful sabotage.

While the local backup service uses an API-key with limited privileges, I need to go back to the bucket/storage-zone settings and see what I can enable, how it would affect total storage, and whether I (with additional privileges) can reliably grab the correct mix of old-blobs to do a restore.

[ Parent | on HN ]