- Site menu:
- Latest Discussions
- Latest Newswire
- Archives
- Submit Story
- Story HOWTO
- Syndicate
- E-mail Alerts
7 of the Best Free Linux Online Backup Solutions
There are many different ways of backing up data, each with their inherent advantages and disadvantages. With ever faster internet speeds, the online backup method has become an increasingly attractive option, enabling users to save files so they are safe and secure, and then access them from anywhere in the world. There are many service providers that offer a Linux compatible online backup system. All of the online solutions featured in this article offer users some free online space (varying between 1GB and 50GB), with the exception of CrashPlan. Typical features that they provide include encryption, online access to files, data compression, bandwidth usage, continuous backup, file-by-file-restore, multiple versioning, redundancy, although some are only available for paid accounts. |
|
|
Comments (16)
Spideroak can't see your data because you get a unique encryption key. If you lose your password you lose all access to your backups. I use them and like them a lot; it is easy to set up both shared and private directories, and they don't care how many people you share your account with.
There is a term for that, TC, don't recall what it is right now, but it is a requirement for offsite storage of sensitive personal and financial data that must meet guidelines (sox, credit card info, etc) that the offsite storage provider not have access to the encryption keys. I have also used SpiderOak and found it pretty nice, especially since I had the data of 5 computers on the one account since the total was less than one hundred gigs.
I'm glad to see a report on Spideroak. Their offer seemed on the "too good to be true" side. There is at least one distribution offering Spideroak in its default. I can't remember which one, though.
But how do they show you that they don't have access to your data? How does a company even know what is going on? It's not just dishonest employees, though they exist. Look at the information Google's Streetmaps had access to and nobody in the company even knew it. And is it really the case that your password can't be changed? I'm skeptical. All anyone can say is that the company claims you are the only one with access to your data.
Just for the record, I know such a cross-platform setup is possible, and workable, because I worked with one for 2-1/2 years.
bigg, thats the tricky part, 1: how much do you trust and 2: proving a negative. I'll stick with my own backups for myself.
I agree with azerthoth and bigg 100%. Spideroak may well be the best solution out there for those who absolutely need an online backup solution. There are other solutions available to me and my business that I trust more.
You can also be unrealistically cautious. Spideroak would have to run an elaborate and sophisticated scam to defeat their customers generating their own encryption keys and passwords. I don't know why they would want to in any case, since most folks give up their personal stuff without a second thought. I've also read tales of renting space from services like Amazon's EC2 and encrypting your stuff. At worst they can delete your data.
rijelkentaurus, I think the term you're looking for is "zero knowledge." Dropbox and other online backup services also offer zero-knowledge encrypted backups.
rijelkentaurus, I think the term you're looking for is "zero knowledge." Dropbox and other online backup services also offer zero-knowledge encrypted backups.
TC, not that I am claiming that Spideroak or anyone is actually doing this, but it's the work of moments for many here to put a password/encryption key interface on the user end and making it look legit but in actuality has zero effect on the server end. Easier actually than having to actually make it work properly on both ends.
So it does devolve to trust and proving the negative IMHO. I am sure that they are doing exactly what they claim, but for the most part I have trust issues when it comes to my data and the corp-rat mind set. For me, the cost of high capacity USB hard drives is sufficiently low, and the form factor sufficiently small, as to let me keep backups for several systems in a fairly small fireproof safe.
So it does devolve to trust and proving the negative IMHO. I am sure that they are doing exactly what they claim, but for the most part I have trust issues when it comes to my data and the corp-rat mind set. For me, the cost of high capacity USB hard drives is sufficiently low, and the form factor sufficiently small, as to let me keep backups for several systems in a fairly small fireproof safe.
TC, I agree the level of risk with Spideroak or a service that does essentially the same thing is small but, as az points out, it isn't zero. I have to have a colocated server for my business anyway so I have two geographically distinct locations. Using the existing backup solutions adds zero cost for me so even a tiny added risk (and cost) of an online service simply makes no sense. I suspect that is true of many businesses.
I guess, for some companies, losing their data is more costly than someone else illegitimately copying their data without consent.
@hkwint, the same term generally refers to both events. "Lost data" refers to data over which the proper owner has lost control. Can't get to it, or can't prevent others from getting to it.
If it's stolen, but encrypted (preferably with multiple keys over many files), so what? Recover the encrypted data from backup, you still have your key(s), and you're as good as your most recent backup.
OTOH, look up CardSystems to see what happens to someone who loses control of data that isn't encrypted.
If it's stolen, but encrypted (preferably with multiple keys over many files), so what? Recover the encrypted data from backup, you still have your key(s), and you're as good as your most recent backup.
OTOH, look up CardSystems to see what happens to someone who loses control of data that isn't encrypted.
...and we all know that encryption can absolutely never, ever be broken, even if someone if determined and has huge resources to throw at the problem.
That's a fair point. With 8,192-bit encryption on today's hardware, it would have to be a huge stroke of luck to find the key before the data becomes essentially worthless. That's part of the advantage of multiple keys over multiple files: a database log file should use one key, the schema another, and the main DB yet another. Only with all 3 keys can one have full access to the data; an outside file structure analysis program may (or may not) be able to find which X-ray images correspond to which patient ID's.
But not to worry. As hardware improves, and today's keys become more susceptible to discovery, the same improved hardware will support stronger encryption algorithms and longer keys.
But not to worry. As hardware improves, and today's keys become more susceptible to discovery, the same improved hardware will support stronger encryption algorithms and longer keys.
Once, I made some calculations on 256 bit AES.
There are 2^256 possible keys, which can be written as 10^77.
Imagine all Top 500 supercomputers being as fast as Chinese Nebulae (no 1) and running at max speed (3PFlop) and being able to test one key per flop, it would still take 10^52 years (or something) to brute-force the password.
Given earth ceases to exist somewhere within 10^9 year, I'd say brute-forcing is not an option - even for the most determined. Especially not with layered encryption schemes.
So if you use a truly random password, about the only thing you'd have to ask yourself is: Do you trust Belgians?
Imagine all Top 500 supercomputers being as fast as Chinese Nebulae (no 1) and running at max speed (3PFlop) and being able to test one key per flop, it would still take 10^52 years (or something) to brute-force the password.
Given earth ceases to exist somewhere within 10^9 year, I'd say brute-forcing is not an option - even for the most determined. Especially not with layered encryption schemes.
So if you use a truly random password, about the only thing you'd have to ask yourself is: Do you trust Belgians?
Post a comment
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
Sign up and post (it is free) or Log in and post
I'm all for off site backups, preferably on a server I have control over. Granted, if I place a server in a colocation facility or rent a managed server there is some risk that the hosting company may fail in all the same ways. However, I do have the ability to secure my data to whatever extent I deem appropriate. That is as close to an online backup as I am willing to go.