News for hackers. Stuff that matters.
Re:Astalavista.com hacked, including details by enneff on Friday June 05, 2009 @01:39AM (#642745)
They did have off-site backups, which the hacker found and erased.

One strategy that I employ to mitigate this is to have my backup service connect to the production server, rather than the other way around. That way if your production services are compromised, your backups remain untouched (on a machine that's running no services, behind a firewall, etc, and for all intents invisible).

Re:Astalavista.com hacked, including details by ekarulf on Friday June 05, 2009 @12:46PM (#643482)
We use tarsnap (http://www.tarsnap.com) to handle our offsite backups. If you give your production servers write only keys you can mitigate this risk (and not send your backups across the wire in the clear).
Re:Astalavista.com hacked, including details by jlcheng on Friday June 05, 2009 @10:46AM (#643265)
I thought the typical definition of offsite backup also means data is backed up to a media like tape and stored in a different location.

How is your offsite backup implemented? Is the data stored on a network drive, or backed up to tape?

Re:Astalavista.com hacked, including details by enneff on Friday June 05, 2009 @09:55PM (#644352)
My understanding is that an offsite backup is, as the name implies, a backup that is stored at a geographically separate location to your production site.

I have a few servers deployed at various locations around the world, and I have a machine here at home that performs rsnapshot daily backups of their files. I then make bi-monthly backups of those backups, and store them in a saftey deposit box at a bank. This means that if my servers go down, I can restore them to within a day. If my house burns down, I still have my data to within two-weeks.

Re:Astalavista.com hacked, including details by jlcheng on Saturday June 06, 2009 @12:00PM (#644853)
That's pretty much how it should be done. Let's hope the guys at astalavista is smart enough to do that. Your approach adds an additional layer of protection in case, as you'd put it, someone gets into your home server and deletes them. That, and tapes are less likely to get corrupted or become unreadable than the drives on your server, which may cut down on recovery time.

When your business gets bigger, it might be worth it to look into dedicated hosting and have the datacenter do the backup for you. After all, you want to spend your time managing your IT crew, rather than driving those tapes to the bank :)

Re:Astalavista.com hacked, including details by sev on Friday June 05, 2009 @03:52AM (#642869)
Definitely a much better method of handling backups. Completely agreed.
Re:Astalavista.com hacked, including details by obanite on Friday June 05, 2009 @10:29AM (#643235)
What's the point in offsite backups (for security reasons) if they're connected over network connections?
Re:Astalavista.com hacked, including details by notaddicted on Friday June 05, 2009 @10:48AM (#643268)
Physical security, i.e. protection against fires floods and comets, etc.