-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi,
On 15/11/18 2:01 am, Lee wrote: > What are you using to backup your files to an encrypted usb drive? In an ideal world: 1. Don't use TrueCrypt any longer, VeraCrypt is the natural replacement in the Winblows world. TrueCrypt hasn't been considered safe for quite some time and whilst I think VeraCrypt is fine, it has the same original base as TrueCrypt and, in theory, goes against the original TC license, but whose going to stop them? I do use VeraCrypt on Windows machines. 2. Don't use ANY drive or flash memory type device without encryption for data you care about and which must be secure as you can never be 100% certain that wear leveling (or other mechanisms) won't leave your data behind because a block on the media gets remapped and the original block gets abandoned. That is, any media type may well silently re-map data sectors transparently. That includes traditional spinning rust, Linux installs do need a non-encrypted /boot partition, but everything else should be fully encrypted. EFI/UEFI could adjust your options for booting, as would GPT vs MBR type disks disk labeling. 3. Encrypt with LUKS (full disk encryption) where you can, the entire device, partition only if you need to. Actual backup, there are so many options. Have multiple USB drives of same size, update drive 1 to drive 2 using rsync -- then next drive 2 to drive 3. Use rsnapshot for the backups with hourly, daily, weekly ... and more if needed, snapshots. Save encrypted backups to off-site storage or at least keep one encrypted backup off site at all times -- hence why at least 3 drives. I'm not going to be exhaustive, but you get the idea that there are loads of options. If you do use dump (and restore), of any variant, do the dump with the file system NOT mounted. Cheers A. -----BEGIN PGP SIGNATURE----- iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCW+xWagAKCRCoFmvLt+/i +5xmAQCt4vdtmgjyT3IlbidGZ8e81sIPUNeMMYdnpVZV/0zMTQD/Y6JxDK397kZ8 Lw2fMdNQBptueYI1FED7HZ1KxncQwxw= =w4dn -----END PGP SIGNATURE-----
