Date: Fri, 5 Dec 2014 02:00:25 +0100 From: Polytropon <freebsd@edvax.de> To: Olivier Nicole <olivier.nicole@cs.ait.ac.th> Cc: Ian Lord <lordi@msdi.ca>, "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org> Subject: Re: Backup solution for freeBSD/Symantec Backup exec porting Message-ID: <20141205020025.396c0d8a.freebsd@edvax.de> In-Reply-To: <CA%2Bg%2BBvjQ4w%2B6fqS42nhC4PoUh7ir3Z6R=e6b3s4bw6ONS8kJfQ@mail.gmail.com> References: <999d7e80e60f466682c736f275b75788@Server02.ad.ezmax.ca> <54809639.4070103@netfence.it> <bdfa05850a3e46f6aae49f0d5cf266d5@Server02.ad.ezmax.ca> <CA%2Bg%2BBvjQ4w%2B6fqS42nhC4PoUh7ir3Z6R=e6b3s4bw6ONS8kJfQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 5 Dec 2014 07:00:33 +0700, Olivier Nicole wrote: > Hi, > > > It's kinda hard for a hacker to format all the tapes > > in a library furthermore, some tapes will be put in a safe... > > Understanding that putting the tape away in a safe is a manual thing, > you could also put an HD in a safe... Still it's an important reminder about actual _access_ to backups. Of course it's very comfortable to access all the backup media without manual (human) intervention, but it can be dangerous. Imagine a situation like what Cryptolocker malware usually does: It encrypts anything it can access, and if it can find the backups, they will be useless in any attempt to restore the system. I'm sure it's more complicated to encrypt tapes (in an ATL) than disks, but it's still dangerous when they can be accessed "too easily". > One thing I like about the HD solution is that you need nothing to > access your files (at least with Amanda): only dd(1) and tar(1); it > can work even if Amanda server is dead. Exactly, and there is no proprietary (and undocumented) file format involed, or manufacturer-specific connectors and access protocols. This is unimportant as long as everything works as expected, but it may become essential in a worst-case scenario. > In fall 2011, we were flooded and had to move the datacenter. I packed > the minimum amount of servers, but I also packed the backup HD, > knowing that I could use them with no backup server) On-site and off-site method - where off-site actually means "somewhere else", instead of putting them next to each other. ;-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20141205020025.396c0d8a.freebsd>