Hacker News new | ask | show | jobs
by newnamenewface 1812 days ago
Seems like all* you need is to have production be able to push a new backup with a cool off period of a non-negligible, not-too-long period.

*Please point out how wrong this is.
2 comments
koolba 1812 days ago
Production can push as many backups as it wants, it shouldn’t be able to overwrite the previous backups. Deletion and expiry has to happen separately. There’s no reason for it to even be able to list the backups and that restriction combined with a randomized backup ID (in addition to any date/time tagging) limits the ability to corrupt the backups.
link
blueblob 1812 days ago
Seems to me it would be better to have the backup pull from production so the scripts cannot be reverse engineered. Maybe it's just 6 in one and a half dozen in the other though.
link