Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I agree.

The tagline is "Backups for the truly paranoid". Yet the site looks like it was built by one person as a hobby. Why would the truly paranoid trust this web site to store his files?

Tarsnap requires the user to be a unix-geek that can compile the program himself and use the command line. But if I'm a truly paranoid hacker, wouldn't I just write a quick python script myself to encrypt and backup my files to S3? Why would I trust you? One thing that may help is that you should let the user upload the files to their own S3 account, not to your S3 account. That would certainly make me more likely to use it.

Also, nowhere on the home page does it tell me what makes Tarsnap so special. To me, it's just another backup program. What's special about it that makes it good for the truly paranoid? Tell me that up front.



From what I can grasp from their page, the paranoid part comes from the encryption used.


And, ironically, I'm not sure which I'm more paranoid about: Having other people read my backups, or accidentally screwing up my encryption protocol and being unable to recover my backups.

My worst nightmare is securely encrypting everything with a single key and than somehow losing that key to a fire, a thief, a tragic laundry incident, or a filing error (oops, I changed keys and accidentally shredded the new one instead of the old one! Oops, I put the paper with the key in this bag but then I forgot about it for a week, and cleaned out the bag, and the piece of paper got picked up by the office cleaning staff!)

I wish I could afford to use nothing but the Linus Torvalds approach to backups: Upload everything to the cloud in plain text and try to convince people to mirror it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: