Folks who run their own #selfhosted #git services: tell me about how your #backups work. #selfhosting #git #gitolite #forgejo #gitea #gogs
Folks who run their own #selfhosted #git services: tell me about how your #backups work. #selfhosting #git #gitolite #forgejo #gitea #gogs
I just completely wiped a Docker volume by fat-fingering a path.
Thanks to backups, data loss is near zero.
- - -
J’ai complètement supprimé un volume Docker en tapant incorrectement un chemin.
À cause que j’ai une sauvegarde, la perte de données est presque nulle.
#UK orders #Apple to let it spy on users’ #encrypted accounts
Secret order requires blanket access to protected #cloud #backups around the world, which if implemented would undermine Apple’s #privacy pledge to its users.
https://www.washingtonpost.com/technology/2025/02/07/apple-encryption-backdoor-uk/
https://archive.ph/Yd3rQ
#surveillance #encryption
~2003 I asked my friend about good Linux backup software.
He told me to use rsync in a script, with cron or whatever, and basically roll a solution myself. I thought that was such a hack-y way of doing it.
But he was right. Rsync rules.
Also, software using rsync like rsnapshot and BackupPC, and countless others, are very good.
@duckyfella @MaliciousCarp Depends on the exact config and whether or not one just needs a stupid #dlna server (even the OG #RaspberryPi Model B can run minidlna
fast enough to stream 1080p video with ease.
As for other #Server tasks, the #fanless #ThinClients are perfect for offloading tasks like #Backups, #Filesharing and "#Homelab|bing" aka. doing some "#FuckAroundAndFindOut" - kind of #testing.
Really simple instructions on how to help archive the US Government's websites:
https://wiki.archiveteam.org/index.php/ArchiveTeam_Warrior#Installing_and_running_with_Docker
Although #ArchiveTeam are not affiliated with with the #InternetArchive, that is where the archived sites are stored.
Ich empfehle die elektronische Patientenakte (#ePA) als sicheren Cloud-Speicher für private #Backups. Einfach das #ZIP in #PDF umbenennen, verschlüsseln und hochladen – schon habt ihr #kostenlosen #Speicherplatz! Und das Beste: Die #Krankenkasse übernimmt die #Hosting-Kosten. #ePA #CloudBackup #Datensicherheit
Are you a fellow data hoarder? Have some spare terabytes? Start here:
https://commoncrawl.org/blog/january-2025-crawl-archive-now-available
https://meta.wikimedia.org/wiki/Data_dump_torrents#English_Wikipedia
https://github.com/end-of-term/eot2024
https://github.com/internetarchive/dweb-mirror
https://archive.org/details/20250128-cdc-datasets
https://wiki.archiveteam.org/index.php/Main_Page
https://github.com/lisawilliams/NIH_Data
https://archive.org/details/academictorrents_c5bf370a90cae548d5a306c1be7d79186b9f60b9
Today it suddenly occurred to me, "Hmm, I bet #rclone supports a compression backend. If so, then I could be compressing my cloud backups to save on storage costs." So I went and looked it up, and indeed it does, and I could.
There's even a "union" backend I could use to migrate gradually to compressed backups rather than paying download and upload costs to recompress everything.
Seems like a great idea, right? Or _is_ it?
#tech #backups #hacking 1/2
So I've been trying to figure out the answer to a theoretical problem: what would I do if I was in a foreign country and had my phone and laptop seized / stolen?
I'm not too concerned about the shit on them, but nowadays everything is 2FA. Even my password manager needs second factor auth on a new device, and the second factor is email which... You guessed it needs a second factor. I feel like I'm one lost device from disaster.
How do you go from zero to re-equipped with your logins without access to your own desk and devices?
Would it be insane to post an encrypted binary blob in like a public git repo? Random webpage? What encryption would be sufficient to confidentiality drop an entire password vault, ssh keys, etc into a public space?
(Encryption not my area of expertise)
Wall of the Fallen.
This is your semi-regularly-scheduled reminder to do your backups!
I've programmed computers since 1984 (https://liw.fi/40/). I was part of #Linux from the beginning. I was a #Debian developer for about 20 years (1996-2018). I care about #SoftwareFreedom and #CivilLiberties. I think about #backups. My main hobby is #OpenSource development. I have too many personal projects (https://app.radicle.xyz/nodes/radicle.liw.fi/). I work on #Radicle (https://radicle.xyz/).
My other hobby is classic European men's style. I like to wear a #suit. Preferably with a vest.
The Archivist Prayer
O data, copy, copy thyself onto the migration drive: that thou mightest live for ever.
@TindrasGrove +9001%
Also 3-2-1 #backups are vital!
We've put together 4 resolutions to help you protect your digital presence in 2025, including strong #passwords and/or #passkeys, preventing #phishing, safeguarding your financial data, and making regular #backups a habit.
Learn more: https://globalcyberalliance.org/cybersecurity-resolutions-2025/
@alper : forget the marketing blah about public key encryption; it's advantages are extremely exaggerated.
Just think of each passkey as an extremely strong and unique password tied to the domain name of a website.
The strength of passkeys (the WebAuthn protocol actually) lies in the fact that software (not the user):
1) Insists that the connection uses https;
2) Uses the passkey only if the domain name of the website (as shown in the browser's address bar) is the same (*) as the one used when the passkey was created.
(*) It's a bit more complicated than that: subdomains may be permitted under certain conditions.
Unintentionally logging into a fake website with a look-a-like domain name (phishing) is impossible (an "Adversary in the Middle" attack is possible only if a fake website possesses a certificate deemed valid by your browser, like I wrote about in https://infosec.exchange/@ErikvanStraten/112914050216821746).
However, passkeys suck in practice (Dan Goodin is right), see https://infosec.exchange/@ErikvanStraten/113730072998238596.