[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Planning for Emergency restore

On Sun, Apr 04, 2021 at 09:48:22PM +0200, hvjunk wrote:
> Disgruntled *and* ransomware, well… that exact same disgruntled employee
> that corrupted your tarsnap keys, already deleted all the old tarsnap
> backups from before the ransomware attack ;(

That's why you don't give random employees access to the full tarsnap keys.
Create write-only keys so that your employees can create archives, but they
cannot read or delete them:

- Graham Percival