Hacker News Reader

This is great. I find myself having to explain and argue this point way too often:

"One issue with most backup solutions is that an attacker controlling the local system can also wipe its old backups."

S3 also makes this kind of protection pretty easy - enable bucket versioning and allow only PutObject.

B2 can do this too if S3 is a bit too spendy.

write only FTP rights

What kind of solution to this problem would you propose?

Well, append-only backups with something like restic and rclone seems like the obvious one.

Tapes sitting on a shelf is the classic solution.

Write-once backup media, like DVDs were even better. But they are getting out of fashion.