Y
Hacker News
new
|
ask
|
show
|
jobs
by
simonw
14 days ago
For logging, in particular for an environment where you don't want a leaked credential to allow the deletion of any previously recorded files.
1 comments
Natfan
14 days ago
does write only prevent overwrites?
link
ufmace
13 days ago
It does effectively, if you turn on bucket versioning.
I think write-only is worthwhile for database backups to guard against a ransomware compromise.
link
simonw
14 days ago
Good point, no it doesn't.
link
Natfan
14 days ago
but i suppose if you're prefixing your entries with enough entropy, it'd be quite difficult for adversaries to predict and overwrite files without an `ls` equivalent
link