News for hackers. Stuff that matters.
Re:Please review the new tarsnap website by tptacek on Sunday September 13, 2009 @10:55PM (#820996)
I need a reason to recommend this, Colin. If you give me one --- and it's not "paranoia" --- I will start recommending it.

(I already have, to people like H.D. Moore on Twitter. The HD's of the world is a really small target market).

Re:Please review the new tarsnap website by cperciva on Monday September 14, 2009 @02:18AM (#821199)
I need a reason to recommend this, Colin.

Ok, I don't know why you, of all people, don't consider security to be a valid reason for using tarsnap; but if you don't like that, how about

* Tarsnap's snapshotting model of backups is very efficient (equal to or better than incremental backups) while providing the flexibility of having archives behave as if they're completely independent of each other.

* Tarsnap is priced based on actual usage, so if you don't have much data to store, it can be incredibly cheap.

* Tarsnap is written by someone with the expertise required, and who is willing to take the time necessary, to get things right.

That last, of course, is relevant to security; but it's also relevant to simple robustness, too.

Re:Please review the new tarsnap website by tptacek on Monday September 14, 2009 @11:59AM (#821898)
Security could be a great reason to use tarsnap. But you still need to advocate for it in terms that your audience will understand. We still have to convince large financials to get critical, Internet-exposed code audited. What hope do you have that I'll just automatically see how much better this is than Mozy?
Re:Please review the new tarsnap website by cperciva on Monday September 14, 2009 @12:53PM (#822027)
What hope do you have that I'll just automatically see how much better this is than Mozy?

I don't have much hope that anyone will automatically see anything. This is why I go out of my way to educate -- explaining things like why simple code is less likely to have security flaws, pointing out my expertise and experience, and demonstrating that I'm not afraid to have people look at the tarsnap source code.

Re:Please review the new tarsnap website by tptacek on Monday September 14, 2009 @02:26PM (#822264)
Yeah you're screwed. Come up with another strategy. My clients are the top N% of security professionals (they're managing source code audits), and I'll bet you $5 they think Mozy security is comparable to yours.

There's a reason you designed tarsnap the way you did. It's not a little bit different from Mozy. It's a totally different model. Explain how in simple terms. And remember even if your beachhead market is sysadmins, most sysadmins don't code. Don't talk down to them, but don't make your value proposition be about code.