Re: [PLUG] Backup solution

On Wed, Feb 3, 2021, 11:45 AM Rich Freeman via plug <plug@lists.phillylinux.org> wrote:

On Wed, Feb 3, 2021 at 9:35 AM LeRoy Cressy via plug
<plug@lists.phillylinux.org> wrote:
>
> I would never trust a cloud service or whatever with my data.
>

I think this needs a couple of big caveats.

First, if you're talking about encrypted backups, using strong
encryption, then there is no harm in storing them on the cloud as long
as you keep your keys secure. Obviously this depends a bit on the
details but as long as everything that hits the cloud is encrypted the
most they're going to probably be able to tell is when you run your
backups and how large the incremental is for each day. Since we're
talking about backups loss of data isn't a huge concern - it is only a
problem if they lose your data the same day that you need the backup,
which is very unlikely.

Now, if you're just talking about using commercial backup services
then obviously the security is going to be lower. They often encrypt
stuff but usually it isn't FOSS so who knows how well it works. That
said, commercial backups are probably going to still beat not having
any backups for most ordinary threat models, so if your choices are
something like Backblaze or hoping to get lucky then I'd go with the
backup solution. That is probably more suited for the general public
than most on this list, but there are a LOT of people out there who
don't keep proper backups.

A big advantage of cloud services (especially if you use FOSS backup
software with strong encryption - I use duplicity but there are other
options) is that you get relatively convenient access to offsite
storage. I can run my backups as often as I want and they're
immediately off-site, so if my house burns down my recovery point is
at most a day in the past (and could be less if I wanted). With most
homebrew solutions that avoid the cloud chances are that you're going
to lose more data. Sure, you could do nightly backups and always
bring the tape with you in the morning, or have a proper
fire/water/whatever-proof safe/etc for media - I'm not saying it isn't
possible to come up with a decent solution. However, the cloud does
get you instant access to offsite storage that you can use in an
unattended manner.

The biggest downside to cloud storage is bandwidth. I'd toss cost in
as well though this is usually not horrible these days. Bandwidth is
usually a big bottleneck though - I am judicious as to what I back up
to the cloud daily because even 50Mbps only gets you so far in a
reasonable amount of time. You can compensate by using the cloud for
frequently-changing higher-value data and augmenting with physical
media or other solutions for stuff that doesn't change much.

--
Rich
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug