I think you missed my point. I was suggesting that the live server should access... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

cperciva on Feb 22, 2012 | parent | context | favorite | on: How to do cheap backups

I think you missed my point. I was suggesting that the live server should access the backup server via an append-only interface, i.e., one which doesn't allow it to delete backups or modify them.

snowwrestler on Feb 22, 2012 [–]

Now the security of your backups is completely dependent on the construction of the append-only interface. Are you 100% certain it can't be compromised or permission-escalated?

cperciva on Feb 22, 2012 | [–]

It's much easier to build an append-only interface than a read-only-and-only-read-some-files-not-others interface.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact