Tagged Questions

13
votes
5answers
410 views

Encrypted offsite backups - where to store the encryption key?

In addition to regular onsite backups (kept in a fire resistant safe), we also send tapes offsite once a month, encrypted with AES. So if our site is one day vaporised by an alien heat ray, we should ...
4
votes
3answers
91 views

Backup Permissions for Entire File System

Here's the skinny: I have a Linode VPS that I want to backup to my local laptop via rsync. I have just generated ssh keys for the communication and left a blank passphrase for the private key so I can ...
10
votes
2answers
223 views

Should the virtualization host be allowed to run any service?

I recently setup a virtualization server for the small company I'm running. This server runs few virtual machines that are used for development, testing, etc... My business partner works from a ...
1
vote
2answers
117 views

Is there a way to force an automatic unmount of a volume under some conditions? [closed]

Where I work, we have very light security policy which allows users to connect to their personal mail accounts and so on. Every user is root on his own computer and there is no centralized account ...
1
vote
7answers
167 views

Security concerns on online backup

Can there be any security with online (cloud) backup? There are solutions that claim to be secure because they encrypt on client side. But there is a client on your server that has access to all your ...
1
vote
1answer
39 views

Backup to track fraud on Dedicated Server running Apache and MySQL

Background: i am running a Dedicated Server with WHM/cPanel and i would like to know what to backup. My old VPS was hacked into using a security vulnerability in TimThumb and i was unable to track ...
1
vote
2answers
161 views

LTO(4) Tape Physical Storage

We have moved to an LTO(4) tape backup system. It works great and now we have a stack of physical tapes lying around that need to be stored and ultimately secured. I was curious what options exist ...
-1
votes
2answers
481 views

Folder permissions when zip and unzip on Windows

I've a webserver Windows 2003. When I do a backup in a zip of some folders, the permissions of the folder doesnt restore when i unzip the compress file. How can I do a zip saving the original ...
5
votes
6answers
360 views

Write-only remote backup solutions to prevent backup deletion by hackers

Consider this scenario: I have linux server which is automatically backed up daily to some remote location via rsync or something like this. Everything is fine until some bad guy gains access to ...
2
votes
3answers
284 views

How do I go about securing my rsync backups?

Right now I backup my website/server daily using rsync with cron. What I'm worried about is someone hacking into my server and then gaining access to my rsync account and deleting everything. How do I ...
3
votes
2answers
163 views

Secure corporate document storage

One of the more interesting arguments currently rumbling around the office is the lack of backup for the HR person's laptop. This contains a copy of the contract and other HR type info on every member ...
1
vote
2answers
286 views

Domain Security Advice: Backup Operators Group

Greetings I've been tasked with creating an automatic backup system that will backup a users home drive to their respective network drive that we have on a file server. After much hassle of actually ...
0
votes
1answer
101 views

help me setup a good security policy

i'm running a site on a shared host while image hosting is done on amazon s3. i've opened a second shared host account for backups. here's my setup : A -> site on shared host, pushes images to B (s3 ...
0
votes
1answer
2k views

How to backup postfix?

I am putting together a list of things that I need to backup, on my website. I am using postfix for handling my mail. Which files in /etc/postfix (if any) do I need to backup? My goal is that after ...
2
votes
1answer
137 views

Security implications of adding a computer account to folder security

The backup job on my SharePoint 2007 (server A) fails since the job running under local NETWORK SERVICE account tries to access a remote share(Server B) to store backup files. Adding Server A' ...
4
votes
3answers
434 views

Finding a backup and synchronization solution

I'm having difficulties to find a backup and synchronization solution with the following characteristics: Cross-platform: Windows, Linux, Mac Transfer only new/modified bits of modified files ...
3
votes
3answers
127 views

Backup security: Why same keys to backup and restore?

I'm evaluating some backup tools to find a good solution for my scenario and I was wondering about a common security choice in a lot of these tools. I've noticed that backup software commonly encrypt ...
5
votes
4answers
2k views

How Secure is JungleDisk?

We work with a lot of proprietary information that we do not want compromised. Is jungledisk any more or less secure than say backing up to a tape drive and using Iron Mountain's off-site storage? I ...
10
votes
6answers
734 views

How to choose a cloud service for backups

I am thinking of using a cloud service to backup one of my client's website. My (clients) main concerns are (in decreasing order of importance) Protection of IP (trade secrets, source code), user ...
2
votes
3answers
460 views

Disable Linux Commands

I'm writing a simple program to back-up some files to a Linux box. The transaction will take place over SSH and each copy of the program will have its own account on the Linux box that it will ...
1
vote
4answers
823 views

Securing bash scripts

Does anybody know what is the best way to secure bash scripts. I have a script which creates database and source code backup and ftp it to other server. And login/password for destination ftp are ...
6
votes
2answers
2k views

AWS S3 Backup Strategies - How should I approach backing up S3 buckets?

I am in the process of building a web-app with potential for a massive amount of storage requirements which can be satisfied by amazon S3. My main concern is the usage of API keys on the server, and ...
3
votes
6answers
751 views

How do we secure our source code?

Our source code is our most prized asset. I would like to have it: secured from proliferation by in-house developers but they also need unrestricted access to the code to do their job right. So I'm ...
1
vote
2answers
6k views

What is the maximum supported size of a truecrypt file?

What is the maximum size a truecrypt container can support? I'm trying to encrypt and store around 1TB data in a truecrypt container file. Is this a recommended usage?
8
votes
5answers
376 views

How good/safe are disk to disk backups?

In the good old days, backups went to tapes, some of which were often offline if not offsite. This made it difficult to destroy all backups (accidentally or maliciously), especially if the ...
7
votes
1answer
237 views

Protecting Network attached storage

In your answers, please keep in mind that it is all about a home network. What is the best way of protecting a network attached storage from the outside world? Currently i have a NAS connected ...
5
votes
4answers
295 views

How to prevent a security breach from taking your online backups with it?

What techniques do you recommend for securing a online backups (to a third party service like Mozy) a backup that has the advantages of online backup but cannot be tampered with just by compromising ...
0
votes
0answers
3k views

Aftermath of Hack

We recently faced a full scale attack on one of our servers running Open SUSE 11.0; the intruder deleted a lot of files necessary for day to day operation. Although the backups came in handy but for a ...
16
votes
8answers
23k views

What security risks are there with employees using Dropbox?

Are there any particular security concerns to keep in mind with company-wide use of Dropbox file sharing / versioning / backing up, and are there specific options or settings that would be recommended ...
4
votes
3answers
722 views

PostgreSQL encrypted backups

Is it possible to ensure that dumps taken from a PostgreSQL db are always encrypted? The data in the database is highly sensitive and we cannot afford un-authorized personnel, including Sys Admins ...