• 0 Posts
  • 24 Comments
Joined 8 months ago
cake
Cake day: June 24th, 2024

help-circle


  • External HDs are good for short term backup - I do use them for that myself.

    But they are not suitable for long term backup, they are susceptible to damage, sector errors,bit rod and interference.

    If you leave them unpowered for longer times the chances that the mechanical components are gonna fail are actually increased.

    Some of these issues can be reduced,but never fully.

    Additionally there are ransomware viruses that directly attack them - they intentionally encrypt the backups first when the drives are connected before they attack the live data. And in at least one case I know of the attackers bricked the HD firmware.

    Therefore for long term storage of really important things WORM (write once read many) media is to be preferred - even if the attackers can access the disk for some reason they cannot alter the once written data.


  • Personally I store all “Very important data” on it - things I really don’t want to loose even if my data storage at home and my cloud storage gets compromised. Among them:

    • Photos of life events. Wedding, photos of the kids, photos of relatives that are now deceased, etc.

    • Important documents. Birth certificates, copies of IDs, passports, insurance documents, degrees and certificates, banking/taxation/accounting documents, bills for the important stuff like major renovations, the expensive IT stuff, etc.*

    • Backup of important files (for me Uni files for my lectures, some work files, backup of the password DBs, plans for the house, a tutorial how to receive files from the cloud storage, decryption keys, etc.)

    (*: This is more a theoretical choice - as I can get 100GB media for the same price as the 50GB I currently simply copy the full paperless file storage. But the script normally only copies these. They are flagged with a custom field in paperless)

    I do not use addition to the storage,so no “these files are new since the last copy” but I simply make a full backup of these files every time (usually three times a year). This reduces the risk of one backup being compromised - very likely I only fall back 4 month which is tolerable. The discs itself are stored in a locked box in a bank vault a bit further away. I have to go there a few times a year anyway,so it’s not hassle. (And they have great coffee). The box costs me 50€ a year and has enough room for 50 years of M Disks and a few extra items.

    Anything taxation related must be stored for 10 years even by private individuals here,so there is that.

    My customers (smaller health care organisations, e.g. your fellow neighbourhood dentist or GP) usually store patient data and accounting data on them. They need to store them long term (up to 30 years) for legal reasons, additionally they don’t want a opposing lawyer to later tell them “you have manipulated the data”. Having multiple copies that cannot be manipulated reduces that claim to “you manipulated before you stored it” and we have other ways to fight that.




  • M-Disc/Archive Blue ray discs are currently pretty much unrivaled if one needs WORM(write once read many) storage for important data.

    Anything cloud is an issue in that regards, while a few options exist that somewhat imitate WORM to comply with regulations they are often expensive, harder to maintain and, if long term storage is required, prohibitivly expensive.

    The next option, Tandberg RDX needs a far less popular writer, it’s WORM media is far more expensive, far more sensitive towards exterior influences and it’s much harder to make sure you will be able to read the data in 20 years.

    LTO is nice, the tapes are somewhat cheap but the drives are extremely expensive - far to expensive for smaller businesses or consumers.

    (And please for the love of god, normal exterior HDs,etc. are NOT backup media for long term storage, especially not WORM- which is important in times of ransomware attacks)

    So in the end verbatim would be an absolute idiot to destroy this market. I work with a lot of smaller healthcare facilities and they all exclusively work with them - they routinely burn their data on a M-Disc that is then stored in a secure location, as they all need to provide their patient records for at least 10, mostly for 15, in some cases for 30 or more years. The doctors can literally go to jail if they do not comply with that.(And getting hacked or your building burning down is not an excuse)

    As a CEO of a small company we also need to retain certain tax and accounting data for 10 years, some for 20 years. And even as a individual I have some stuff I legally must retain for 10 years.

    And of course photos of important life events and some documents (insurance, mortgage) are also something I don’t want to loose if the house burns down. Therefore the important stuff gets burned to a M-Disc three times a year and then locked into a bank vault quite a bit away.



  • A friend of mine worked on the team that wrote the EU AI legislation. He is a fucking genius and so are his colleagues. There is little chance he can simply “change the definition of open source”. He might be able to challenge the EU definition in court and postpone paying,but be will pay.

    The brussels bureaucracy is a absolutely fed up with US tech bro antics by now and both Microsoft and Google have already learned their lesson. Zuckerbergs Meta still tries to resist,but he will fall as well.

    Funnily this is absolutely speed up by their antics in the US as this leads to more and more lawmakers here realising that the European societies need to be protected from them the same way it needs to be protected from China.





  • Posteo is another alternative for Mail that a lot of people overlook.(And far more “real privacy” than fucking Proton)

    Bitwarden sadly still is a US company and while it hosts in EU as well, some might not think this is enough. In that case Vaultwarden can be selfhosted easily.

    It is not that much work to actually get rid of most possibly unreliable US services,but it’s far more work to get other people to switch as not all services are interoperable yet…


  • Hetzner is rock solid in my experience (and I run multiple server with them both for private and business use). I really can’t complain.

    I have my S3 backups at Ionos these days, they are also fairly large, only marginally more expensive and so far it’s working well. Their cloud/VPS service (the proper one,not the consumer one) is also decent and offers a few (rarely needed) options that Hetzner doesn’t have.


  • Proton has always been sketchy - and I caught flak for it countless times, especially here. But: A company claiming they are "private’ and “secure” because they operate under Swiss privacy laws is already sketchy from the beginning. Why? Because Swiss privacy laws suck,are the worst in Europe and Switzerland is a country known for multiple cases of major intelligence agency overreach - especially towards foreigners and cross-border traffic.

    Legally the Swiss intelligence services can order any “service provider” (that includes proton) to provide them access to traffic coming from foreign countries - this also includes the mandate to provide “technical means”, which is often seen as backdoors. And to make things better the service providers are not allowed to talk about it.

    This alone is a problem. In Protons case what makes matters even worse is the fact that they are an US company de facto operating from the US and therefore are bound by the homeland security act and similar legislation.

    So in the end both the Swiss and US services might read your data.