Hacker News Reader

Comment by Sir_Substance | Hacker News Reader

I would genuinely rather lose all my critical data to cryptolocker than put it in the cloud. Given a choice between my data being accessible by no-one or everyone, I will pick no-one every time.

Data in the cloud /is/ available to everyone that matters.

I'd also like to remind you that it can be impractical to back up some forms of data, especially in the cloud. High definition video (weddings, funerals, holidays) is impractically large.

The problem /is/ Cryptolocker. Anyone with an ounce of practicality will take mitigating steps against it, I have no sympathy for anyone who ignores the risk, but the solution is not massive scale global data duplication, that is treating the symptoms. The solution is to dissuade criminals from this path.

Widescale international cooperation in finding these people would be a start.

View on HN

You don't need to backup to the cloud, have people forgotten about physical hard drives?

I do have a physical hard disk for my backups but I also backup some critical data "on the cloud" (actually, some servers of mine). There is always a chance that the pc and the disk are stolen by a burglar or my house catches fire. Then there is the matter of making the encryption and access keys survive any of those events.

Yep, a good mitigation plan is a 2tb time capsule. All my precious cat photos are backed up on the regular, encrypted and within reach.

As long as you remember to keep that drive unplugged - otherwise it'll get cryptolocked with everything else.

Here is a good interview question:

Design a simple system that uses amazon as backend to store encrypted data and the keys never leave your control.

There were 4TB drives at 100-sh bucks for big things.

The problem is not Cryptolocker because there will ALWAYS be malware that targets the data itself. And some people will do it just for fun.

I think Duplicity (http://duplicity.nongnu.org) is what you're looking for. For Ubuntu I know there's a nice GUI that anyone who can use a computer can set up. For other platforms I think cli is the only way, but someone could just write a QT/Cocoa wrapper around it.

Duply (http://duply.net/) is a wrapper around Duplicity, and there's a GUI front-end called Deja Dup too: http://live.gnome.org/DejaDup/Screenshots

I use Duply to schedule incremental backups of my server logs to S3 (write only) and then have S3 expire them after 60 days. Works great.

Or, don't be dumb and use tarsnap. encypting backups is not an impossible (or even hard) problem.

Reply on news.ycombinator.com