Re:Bup – towards the perfect backup
by wmf on Monday November 17, 2014 @07:46PM
(#8621810)
What about append-only remote storage? This is possible (in a kludgy way) in S3: http://stackoverflow.com/questions/10592541/amazon-s3-acl-fo...
[ Parent
| on HN ]
Better, but it might still expose to the attacker more data than he would otherwise have access to. For example: production box only contains data from the last 3 days, but the backup contains data from the last 12 months.
Even stricter access controls (write once, no read) might help with that. Not sure if you can do that with S3 though.
>production box only contains data from the last 3 days, but the backup contains data from the last 12 months
Even if the source can only perform new backups, it's a timing attack with a deduplicating system. The attacker can attempt to back up chosen data to infer properties of the existing backups.
You can remove this only by removing deduplication (or by crippling deduplication to work only at the server-side, and incur wasteful network requests)