News for hackers. Stuff that matters.

A comment on Bitcrypt broken. Parent comment

Re:Bitcrypt broken by gatehouse on Thursday February 20, 2014 @06:08PM (#7274317)
You create a backup system that has credentials into your target system, but the target has no credentials for the backup. The backup system can maintain the point-in-time history.

Of course if you backup system gets hit then the whole thing falls apart, but you can isolate this one system and it doesn't need to accept any incoming connections.

[ Parent | on HN ]
Re:Bitcrypt broken by einhverfr on Thursday February 20, 2014 @10:39PM (#7275313)
> Of course if you backup system gets hit then the whole thing falls apart, but you can isolate this one system and it doesn't need to accept any incoming connections.

Unless you need to remote administer it.... But I suppose that's what virtualization helps with.

[ Parent | on HN ]
Re:Bitcrypt broken by dspillett on Friday February 21, 2014 @06:05AM (#7276364)
Or a step further: don't let either the live and backup sites connect to each other directly, instead use an intermediary site that both connect to (which can not connect back to them).
[ Parent | on HN ]