bk99.de entertain the web since 1997

bk99.de
g · SecurityCurated

Network backup Bacula 2.0 with encryption

Summary

In January 2007 the free network backup software Bacula appeared in version 2.0 and could now store data encrypted on volumes. Also new were the migration of jobs between volumes, faster restores from hard disk, better support for removable media and the BWeb web interface. Scripts could be started on server and client before and after jobs.

Ideas

  • Bacula is a collection of programs for central backups on the network.
  • Encryption on the volumes protects backups on third-party media.
  • Scripts before and after jobs allow, for example, consistent database dumps.
  • Further components such as the Director were ported to Windows.

Insights

  • Backups without encryption shift the data protection risk onto the storage media.
  • Preparing and following up jobs is often more important than the copy itself.

Facts

  • Bacula 2.0 brought the BWeb web interface.
  • Jobs and volumes could be temporarily disabled.
  • Bacula is licensed under an extended version of the GPL.

References

Critique

  • The report describes features but says nothing about key management and restoring encrypted backups.

Remarks

  • In 2010 the fork Bareos emerged from Bacula and is also widely used today.

Recommendations

  • Encrypt backups and keep the keys separately and backed up yourself.
  • Use pre-job scripts for consistent database backups.

Read the original article

Search the Web Archive

g · 2020

The tricks with the Google security hole

In early 2020 Trend Micro found malicious apps in the Google Play Store that exploited an Android hole previously used by customers of the spyware maker NSO. Google itself had discovered the hole around a year and a half earlier. The apps Camero and Filecrypt Manager served as droppers and secretly installed the spy app Callcam.

g · 2014

Intelligence service ensured weak GSM encryption

According to the Norwegian newspaper Aftenposten, the British intelligence service pushed in the 1980s for GSM to be only weakly encrypted. Originally the standard was to offer 128 bits, but A5/1 ended up with an effective 54 bits; the British even wanted only 48 bits. Germany, fearing espionage by the Eastern Bloc, pushed for stronger encryption.

g · 2012

Bug in network protocol causes crashes

Since Linux 2.6.36 the IGMP code of the IPv4 stack had contained a bug that could trigger a kernel panic (CVE-2012-0207). Simon McVittie found it after a notebook crashed several times: a crash log recorded with netconsole revealed a division by zero when processing an IGMP packet. The bug was fixed in 3.0.17, 3.1.9 and 3.2.1.