Re: Planning for Emergency restore

[Graham Percival <gperciva@tarsnap.com>]

On Sun, Apr 04, 2021 at 09:48:22PM +0200, hvjunk wrote:
> Disgruntled *and* ransomware, well… that exact same disgruntled employee
> that corrupted your tarsnap keys, already deleted all the old tarsnap
> backups from before the ransomware attack ;(

That's why you don't give random employees access to the full tarsnap keys.
Create write-only keys so that your employees can create archives, but they
cannot read or delete them:
https://www.tarsnap.com/tips.html#write-only-keys

Cheers,
- Graham Percival