[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Sheflug] Linux Security

Hi Matt, Ben,

Perfect. That is just what I wanted.
I need to rebuild some of the laptops I have around here, so I will give
LUKS a try. I am fortunate enough that I only tend to use a laptop for
Linux meetings or visiting Hackspace, so nothing that the world could not
see.
I tend to use rsync for backups, but the Borg looks interesting because of
the deduplication and the Restic because I could practice with S3 buckets.
I have just installed both Borg and Restic to try tonight.

At the moment I am using a mixture of SSDs and Spinning Rust. I tend to use
Spinning Rust for off line storage because they tend to be about 1/3rd
cheaper and so I can have multiple copies. SSDs I tend to use for OSes on
the grounds that when they do fail, it is an easy replacement and
reinstall. I have not had an SSD fail yet and most are around 18000 hours.

Regards
John




On Tue, 9 Jul 2024 at 12:20, Ben Oliver <ben@xxxxxxxxxxxx> wrote:

> On 2024-07-09 12:08:33, Matt Marsh wrote:
> >You mentioned that you have a concern about your whole data being
> dependant
> >on the small part of the drive where the keys are stored. I understand
> the
> >concern, but these days SSDs rarely fail - and if they do, it is often
> all or
> >nothing. It's not quite the same as in the days of spinning platters. And
> of
> >course, you should have an adequate backup strategy in place for these
> sorts
> >of eventualities anyway...
>
> This is my thought too. You can and should backup your LUKS header, but
> also
> your data.
>
> These days backups can also be done versioned and encrypted using a tool
> like
> borg [0] or restic [1]
>
> I've had drive failures but encryption has never been an obstacle to
> recovering data.
>
> However I really do like having peace of mind that if someone were to
> pinch my
> device the data on it remains private.
>
> [0] - https://www.borgbackup.org/
> [1] - https://restic.net/
>
> _______________________________________________
> Sheffield Linux User's Group
> http://sheflug.org.uk/mailman/listinfo/sheflug_sheflug.org.uk
> FAQ at: http://www.sheflug.org.uk/mailfaq.html
>
> GNU - The Choice of a Complete Generation
>
_______________________________________________
Sheffield Linux User's Group
http://sheflug.org.uk/mailman/listinfo/sheflug_sheflug.org.uk
FAQ at: http://www.sheflug.org.uk/mailfaq.html

GNU - The Choice of a Complete Generation