On Sun, Apr 04, 2021 at 09:48:22PM +0200, hvjunk wrote: > Disgruntled *and* ransomware, well… that exact same disgruntled employee > that corrupted your tarsnap keys, already deleted all the old tarsnap > backups from before the ransomware attack ;(
That's why you don't give random employees access to the full tarsnap keys. Create write-only keys so that your employees can create archives, but they cannot read or delete them: https://www.tarsnap.com/tips.html#write-only-keys Cheers, - Graham Percival
