Thinking Like a Hacker: Red Team Cyber Security Strategies

The Backup Wrap-Up

Player FM - Internet Radio Done Right

اضافه شده در three سال پیش

محتوای ارائه شده توسط W. Curtis Preston (Mr. Backup). تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط W. Curtis Preston (Mr. Backup) یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal

The Head Start: Embracing the Journey

1
Sweat and Resilience: Balancing Chronic Migraine with Fitness Goals 35:02

۳ روز پیش35:02

پخش در آینده

لیست ها

پسندیدن

دوست داشته شد

35:02

The healing power of fitness goes far beyond physical benefits—for today’s guest, it’s a form of self-expression and a celebration of what the body can do. In this episode, host Nora McInerny sits down with fitness personality Ivylis Rivera, who shares her deeply personal journey of navigating life with Chronic Migraine while holding onto her passion for movement. Ivylis opens up about the struggle of staying active while facing the fear of triggering a headache or migraine attack and the resilience it takes to keep pushing forward—a resilience that carried her through the challenging journey of finding a Chronic Migraine treatment plan that worked for her. Join Nora and Ivylis as they explore the concept of “soft living,” a philosophy Ivylis embraces—staying active, listening to your body, and building trust in oneself. Click here for Product Information, including Boxed Warning and Medication Guide, or visit https://abbv.ie/prescribing_info See omnystudio.com/listener for privacy information.…

حدود یک سال پیش 56:24

MP3•خانه قسمت

Dwayne provides captivating examples of how red team cyber security professionals think outside the box to breach networks, emphasizing the need for constant vigilance and adaptability in the face of evolving threats. He also highlights the critical role of collaboration between red and blue teams, stressing the importance of a multi-layered approach to cybersecurity. Packed with practical insights and actionable advice, this episode is an invaluable resource for IT professionals and business leaders alike.

300 قسمت

#Us To Talk

The Backup Wrap-Up

Thinking Like a Hacker: Red Team Cyber Security Strategies

The Backup Wrap-Up

published حدود یک سال پیش

اشتراک گذاری

MP3•خانه قسمت

300 قسمت

#Us To Talk

همه قسمت ها

The Backup Wrap-Up

1
World Backup Day: Take the Pledge to Protect Your Data 34:23

۴ روز پیش34:23

34:23

World Backup Day falls on March 31st - the day before April Fool's Day because not backing up your data is no joke. In this episode, hosts W. Curtis Preston and Prasanna Malaiyandi discuss alarming statistics about data loss and why proper backup strategies are essential for business survival. The hosts break down the famous 3-2-1 backup rule and how it applies to both consumers and enterprises. They examine the growing threat of ransomware, including double extortion attacks where criminals not only encrypt your data but threaten to publish it. With 94% of companies that suffer major data loss failing to recover, and 70% of small businesses closing within a year of significant data loss, World Backup Day serves as a crucial reminder to implement robust backup strategies that include immutable storage and protection for often-overlooked SaaS applications. Stories from this episode: https://www.forbes.com/sites/tomcoughlin/2025/03/31/march-31-is-world-backup-day/ https://objectfirst.com/blog/world-backup-day-2025/ https://www.backupwrapup.com/peter-krogh-who-coined-the-3-2-1-rule-on-our-podcast/…

The Backup Wrap-Up

1
Ransomware Targets VMware ESXi: Melissa Palmer Explains the Threat 51:51

18 روز پیش51:51

51:51

You've found The Backup Wrap-up, your go-to podcast for all things backup, recovery, and cyber-recovery. In this episode, we tackle one of the scariest threats out there - ransomware targeting VMware ESXi environments. I'm joined by Prasanna Malaiyandi and our special guest Melissa Palmer, also known as @vmiss, who's an independent technology analyst and ransomware resiliency architect. We get into why virtualization environments are such juicy targets for attackers, how they're specifically going after vCenter and ESXi hosts, and why your backup strategy is probably missing some critical components. If you've got a virtualized environment, you need to listen to this. Melissa brings her unique perspective from both the virtualization and security worlds to help you protect your most critical infrastructure. So buckle up - this is an episode you can't afford to miss if you want to keep your VMware environment safe from ransomware attacks.…

The Backup Wrap-Up

1
Breaking Down the VeeamOn Announcements for Backup Admins 45:24

25 روز پیش45:24

45:24

In this episode of The Backup Wrap-up, W. Curtis Preston breaks down the key VeeamON announcements from the VeeamON 2025 conference in San Diego. He highlights Veeam's focus on security and ransomware defense, including their new CrowdStrike integration and data resilience maturity model developed with McKinsey and MIT. Curtis shares his excitement about Veeam's long-awaited Linux-based software appliance, which addresses a critical security vulnerability in Windows-based backup systems. He also discusses other major VeeamON announcements like their Anthropic partnership for AI-powered backup content search, Microsoft Intra ID support, and the ability to recover backups to Azure in under five minutes. Whether you're a Veeam customer or just interested in backup technology trends, this episode provides valuable insights into these significant VeeamOn announcements.…

The Backup Wrap-Up

1
DOGE and GSA Claim $1M Savings by Ditching Old Tape Tech 46:17

۵ weeks پیش46:17

46:17

DOGE and GSA recently made headlines with a tweet claiming $1 million annual savings by converting 14,000 magnetic tapes to "permanent modern digital records." In this episode, W. Curtis Preston and Prasanna Malaiyandi analyze whether this claim is possible – although they cannot actually validate it due to lack of information. They discuss that DOGE and GSA's claim is possible given the significant costs of maintaining legacy systems, the migration process would also likely take months and involve substantial upfront expenses. Curtis also shares a humorous story about accidentally pressing an emergency power button during a critical mainframe recovery.…

The Backup Wrap-Up

1
Why Tape Backup for Small Business Makes Sense Against Ransomware 38:03

۶ weeks پیش38:03

38:03

Tape backup for small business might sound like old tech, but Mag Store's new Thunderbolt-compatible tape drive could change that perception. In this episode, we discuss how this new offering potentially opens tape technology to a wider market of SMBs and content creators looking for ransomware protection and cost-effective long-term storage. Curtis and Prasanna dive into the specifics of when tape backup makes financial sense for small business data protection, particularly for companies generating large amounts of data or concerned about cloud security. They explore the $6,000 upfront investment against the long-term benefits of $90 tape cartridges that hold 45TB compressed. Perfect for SMBs with on-premises data or YouTube creators needing affordable archive solutions that are truly air-gapped from ransomware threats.…

The Backup Wrap-Up

1
How Forever Incremental Backup Changed the World 43:46

۷ weeks پیش43:46

43:46

In this episode of The Backup Wrap-Up, Curtis and Prasanna explore how forever incremental backup technology revolutionized the data protection industry. They discuss the evolution from traditional backup methods to modern approaches that eliminate the need for regular full backups, dramatically reducing network traffic, storage requirements, and backup windows. The hosts examine the technical foundations of forever incremental backups, from block-level incremental tracking to backend storage innovations that make multiple recovery points possible without redundant data transfers. They compare older approaches like synthetic fulls with true forever incremental implementations, highlighting the critical differences and benefits. Whether you're still using legacy backup tools or evaluating modern solutions, this episode provides essential insights into why forever incremental has become the standard for efficient, reliable backup systems.…

The Backup Wrap-Up

1
Cloud vs Tape Throwdown: Which is Better for Archiving? 36:14

۸ weeks پیش36:14

36:14

In this episode of The Backup Wrap-Up, we look at the cloud vs tape debate for active archives. The conversation was sparked by a LinkedIn post claiming tape libraries are the only robots not making things easier in 2025, suggesting cloud is superior to tape for active archives. We challenge this premise by pointing out that cloud vs tape is a false dichotomy since many cloud storage vendors use tape for their lowest-cost tiers. We examine key considerations including cost (where tape wins by orders of magnitude), data integrity (where tape actually outperforms disk), and access times (where expectations should align with use cases). For organizations running on-premises infrastructure, we also highlight the often-overlooked egress costs and transfer times associated with cloud storage. Whether you're managing secondary storage or planning an archive strategy, this candid discussion cuts through the marketing hype. Here's the LinkedIn post that sparked the discussion: https://www.linkedin.com/feed/update/urn:li:activity:7300167312144322561/ Here's a recent episode about how tape is not dead: https://www.backupwrapup.com/is-tape-backup-dead-why-it-still-matters/…

The Backup Wrap-Up

1
Disaster Recovery Lessons from 9/11 and Beyond 35:54

۹ weeks پیش35:54

35:54

In this eye-opening episode of The Backup Wrap-up, W. Curtis Preston and Prasanna Malaiyandi unpack crucial disaster recovery lessons from major events like 9/11. They discuss how companies lost both primary and backup data centers when both World Trade Center towers fell, highlighting why geographic separation is non-negotiable. The hosts break down the technical aspects of disaster recovery, comparing hot sites versus cold sites, and the realities of synchronous versus asynchronous replication across distances. Beyond the technical, Curtis and Prasanna share often-overlooked disaster recovery lessons about human factors—where recovery teams will sleep, eat, and work during extended outages when infrastructure is destroyed. They examine a real case from a hurricane-stricken island where teams converted conference rooms to sleeping quarters and relied on satellite communications. Whether you're planning for natural disasters, power outages, or ransomware attacks, these disaster recovery lessons will help ensure your organization can recover when—not if—disaster strikes.…

The Backup Wrap-Up

1
How to Choose the Best Password Manager: Security Features That Matter 41:08

10 weeks پیش41:08

41:08

In this episode of The Backup Wrap-up, Curtis and Prasanna discuss how to choose the best password manager in light of recent security breaches. They examine the LastPass hack that resulted in $150 million of stolen cryptocurrency and what that teaches us about password manager security. The hosts break down the critical security features to look for in the best password manager, including encryption strength, iteration counts, multi-factor authentication options, and passkey support. They emphasize that even with the LastPass breach, using a password manager is still far safer than not using one at all. This episode provides practical guidance on evaluating password manager security beyond the standard feature comparisons, with specific recommendations for cryptocurrency users and insights into the technical aspects of password vault protection. Here are some references for today's episode: https://www.rubrik.com/blog/company/25/rubrik-information-security-team-update https://www.bleepingcomputer.com/news/security/ransomware-gang-encrypted-network-from-a-webcam-to-bypass-edr/ https://krebsonsecurity.com/2023/09/experts-fear-crooks-are-cracking-keys-stolen-in-lastpass-breach/ https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks/…

The Backup Wrap-Up

1
Is Tape Backup Dead? Why This Technology Still Matters 56:25

11 weeks پیش56:25

56:25

Tape backup isn't dead – but it's glory days are gone. In this episode, W. Curtis Preston and Prasanna Malaiyandi discuss why tape backup remains relevant despite its diminished role in operational backups. They reveal how cloud giants have become the biggest consumers of tape technology while explaining common misconceptions about tape's performance. The hosts break down four core advantages tape backup still maintains: unbeatable cost (one to two orders of magnitude cheaper than alternatives), superior speed for bulk transfers, better data integrity with lower bit error rates, and built-in protection against ransomware through true immutability. Whether you're considering your disaster recovery strategy or looking for cost-effective long-term storage, this episode offers valuable insights into why tape backup continues to play a crucial role in modern data protection architectures. Here are some related episodes we talk about in the show: https://www.backupwrapup.com/ovhs-backup-service-didnt-work/ https://www.backupwrapup.com/back-in-my-day-backups-were-really-hard/ https://www.backupwrapup.com/tape-drive-designer-schools-mr-backup-on-tape/…

The Backup Wrap-Up

1
Hide Your Backup Disk from Ransomware 33:26

12 weeks پیش33:26

33:26

In this episode of The Backup Wrap-up, W. Curtis Preston and Prasanna Malaiyandi discuss critical strategies for securing your backup disk against cyber threats. They explain why the default configuration of storing backups in easily accessible directories makes your backup disk vulnerable to threat actors who specifically target backup systems before launching attacks. The conversation covers several effective methods to protect your backup disk, including using proprietary protocols like OST and Boost, implementing Virtual Tape Libraries (VTLs), leveraging dedicated backup appliances, and utilizing object storage both on-premises and in the cloud. Curtis emphasizes that keeping your backup disk out of user space is essential for maintaining security against increasingly sophisticated attackers. This episode provides practical advice for anyone using disk-based backup systems who wants to ensure their backup disk remains secure and recoverable when needed most.…

The Backup Wrap-Up

1
Your 4-Hour Recovery Time Objective is Fantasy 38:40

13 weeks پیش38:40

38:40

Ever wonder why your recovery time objective seems impossible to meet? In this episode, we challenge the common assumption that a four-hour RTO is achievable for most organizations. Host W. Curtis Preston and guest Prasanna Malaiyandi discuss why these aggressive recovery time objectives often exist only on paper. From ransomware attacks to natural disasters, we examine the real-world factors that make rapid recovery more complex than most realize. We break down the differences between recovery time objectives (RTOs) and actual recovery times (RTAs), exploring why organizations need to be more realistic about their recovery capabilities. Whether you're managing backups, planning disaster recovery, or responsible for business continuity, this episode will help you understand what's actually possible when disaster strikes. Check out these older episodes about how a real disaster unfolds: https://www.backupwrapup.com/real-life-hurricane-disaster-recover-story/ https://www.backupwrapup.com/disaster-recovery-after-a-hurricane-a-first-hand-account/…

The Backup Wrap-Up

1
Passwords vs Passkeys: The Future of Backup Security 43:14

14 weeks پیش43:14

43:14

In this eye-opening episode about passwords vs passkeys, W. Curtis Preston and Prasanna Malaiyandi expose why traditional password protection isn't enough for your backup systems anymore. They break down the evolution from basic passwords to MFA, and explain why passkeys and FIDO compliance represent the next level in security. Learn why hackers target backup systems first, how they exploit password vulnerabilities, and why even multi-factor authentication has its weak points. Discover why there hasn't been a single successful attack against FIDO-compliant systems, and why you should be pushing your backup vendors to support passkeys. Whether you're using a traditional backup system or a SaaS solution, this episode gives you the knowledge you need to better protect your last line of defense. We talked about this previous episode: https://www.backupwrapup.com/how-do-you-authenticate-with-all-new-hardware/…

The Backup Wrap-Up

1
No one cares about your backup window! 42:12

15 weeks پیش42:12

42:12

Understanding your backup window is crucial for effective data protection, but there's a twist - it's not just about backup speed. In this episode, we explore why focusing solely on backup speed misses the point entirely. The real measure of success? Your recovery capabilities. Join W. Curtis Preston and Prasanna Malaiyandi as they share war stories about backup windows gone wrong, including a memorable tale involving tape drives that could write but couldn't read. Learn why traditional backup windows have evolved, how modern technologies have changed the game, and most importantly, why your recovery testing matters more than your backup speed. We also dive into deduplication taxes, recovery groups, and why instant recovery capabilities might be your best friend in a crisis. This is the recovery failure we alluded to w/our friend Stuart Liddle: https://www.backupwrapup.com/laptop-restore-nightmare-900gb/…

The Backup Wrap-Up

1
Artificial Intelligence: The Future of Backup? 43:06

16 weeks پیش43:06

43:06

Artificial intelligence in backup isn't just marketing hype - it's changing how we protect our data. In this episode, W. Curtis Preston and Prasanna Malaiyandi break down the practical applications of AI in backup systems, from intelligent scheduling to ransomware detection. Learn how artificial intelligence helps with capacity planning, especially with deduplication systems where predicting storage needs gets tricky. We discuss AI's role in asset discovery, anomaly detection, and even creating better disaster recovery plans. Plus, find out why backing up AI models themselves might become your next big challenge. This no-nonsense look at AI in backup cuts through the confusion and focuses on what really matters - making your backups better.…

The Backup Wrap-Up

1
Disaster Recovery Testing: The Execution Phase 33:11

17 weeks پیش33:11

33:11

In part two of our disaster recovery testing series, we explore the critical steps of executing a DR test. From coordinating teams and documenting issues to maintaining communication channels during the test, this episode covers everything you need to know about running an effective DR test. Host W. Curtis Preston and co-host Prasanna Malaiyandi share practical advice from their extensive experience with disaster recovery testing. They discuss the importance of having backup communication methods, maintaining detailed documentation, and conducting thorough post-test analysis. Learn why testing your DR plan regularly is crucial and how to build a recovery mindset across your organization. Whether you're planning your first DR test or looking to improve your existing testing procedures, this episode provides valuable insights to help ensure your disaster recovery testing success.…

The Backup Wrap-Up

1
Choosing the Best Cloud Backup for Your Small Business 41:36

18 weeks پیش41:36

41:36

Looking for the best cloud backup for small business? This episode cuts straight to what matters. Host W. Curtis Preston and Prasanna Malaiyandi share their expert insights on choosing the right cloud backup solution for your small business needs. They break down the critical features every small business should look for in a cloud backup service, including true immutability, proper implementation of the 3-2-1 rule, and transparent pricing. The discussion covers why cloud backup makes sense for small businesses, how to avoid common pitfalls, and what questions to ask potential providers. Whether you're currently shopping for a backup solution or want to verify your existing setup, this episode provides practical, actionable advice from industry veterans who understand what small businesses really need.…

The Backup Wrap-Up

1
Laptop Restore Nightmare: 900GB Recovery Story 48:32

19 weeks پیش48:32

48:32

A personal laptop restore that should have taken days stretched into weeks, highlighting critical lessons about backup and recovery. When our guest's laptop hard drive failed, he thought replacing it with an SSD and restoring from Carbonite would be straightforward. Instead, he faced constant system crashes, hardware challenges, and a restore speed that would make a snail look fast. (Carbonite did not cause the crashes.) Listen as we break down this laptop restore saga, including why the system kept crashing five times per day, how Carbonite handled the interruptions, and whether paying $100 for a physical drive shipment might have been worth it. Perfect for anyone who wants to learn from someone else's restore challenges before facing their own. Other episodes we talk about in this episode: https://www.backupwrapup.com/how-to-properly-back-up-your-iphone-icloud-is-not-a-backup/ https://www.backupwrapup.com/videos/carbonite-lost-7500-customers-backup-data/ https://www.backupwrapup.com/carbonite-lawsuit-cloud-backup-cautionary-tale/…

The Backup Wrap-Up

1
Making the Case for Your Backup IT Budget 38:18

20 weeks پیش38:18

38:18

Getting the right backup IT budget can feel like pulling teeth, but it doesn't have to be that way. In this episode of The Backup Wrap-up, W. Curtis Preston and Prasanna Malaiyandi share real-world strategies for securing the backup IT budget you need to protect your organization. Learn how to partner with the security and GRC teams to make your case stronger. Find out why ransomware has changed the game when it comes to backup IT budget discussions, and hear practical tips for documenting your needs. Whether you're struggling with outdated systems or fighting for resources, this episode gives you the ammunition you need to get proper funding for your backup infrastructure. Here's a link to the Stoli story if you're interested: https://therecord.media/stoli-group-usa-bankruptcy-filing-ransomware…

The Backup Wrap-Up

1
DR Case Study: A first hand-account 52:46

22 weeks پیش52:46

52:46

(For frequent listeners, I made a mistake with last week's episode. THIS is the episode I meant to publish last week. I know it has the same description. Sorry about that.) This disaster recovery case study takes you inside a real DR scenario when a hurricane devastated an island's data center. Our guest shares his firsthand experience managing recovery efforts with limited resources, no mainland connection, and countless unexpected challenges. (This is the on-the-ground account of the story we told last week with "Harry Potter.") Listen as we explore how basic DR assumptions fell apart, from authentication dependencies to satellite communication limits. Learn why sleeping on air mattresses and eating chicken and rice became part of this disaster recovery case study, and discover critical lessons about DR planning, testing, and documentation that could save your organization. This episode reveals the reality of disaster recovery when everything - including trees - gets stripped away.…

The Backup Wrap-Up

1
NetBackup Disaster: When Nature Strikes Back 44:54

23 weeks پیش44:54

44:54

When a hurricane struck an island data center, one backup admin faced a NetBackup disaster that tested years of experience and planning. This episode reveals the real-world challenges of recovering from a catastrophic event that flooded one data center and disrupted access to Iron Mountain's offsite storage facility. Listen as our guest, a 20-year veteran backup administrator, shares his firsthand account of managing this NetBackup disaster. Learn about the critical decisions made during the three-week recovery process, the unexpected challenges they faced, and the valuable lessons learned about backup infrastructure, replication strategies, and disaster recovery planning. (This is part one of two parts. Next week you will hear from the person on the ground during this disaster.)…

The Backup Wrap-Up

1
Free NetBackup Reader: S2|DATA's Game-Changing Tool 26:47

25 weeks پیش26:47

26:47

S2|DATA has released a free NetBackup reader that gives users complete control over their backup data without requiring a full NetBackup environment. This standalone application allows anyone to quickly catalog and restore data from NetBackup disk images, even if they no longer maintain their NetBackup infrastructure. CEO Brendan Sullivan joins the show to explain why they created this free tool and how it helps organizations maintain access to their legacy backup data. We discuss the challenges of vendor lock-in, the importance of data ownership, and why companies shouldn't have to keep paying for access to their own information. We also cover how S2|DATA offers a range of services for accessing all legacy backup data, not just NetBackup. Whether you're considering moving away from a backup product or simply want easier access to your backup data, this episode explains how this free NetBackup reader can help you take control of your data destiny. You can read about it here: https://s2data.com/libertas-free-backup-reader/…

The Backup Wrap-Up

1
Disaster Recovery Test Gone Wrong 57:01

26 weeks پیش57:01

57:01

In this eye-opening episode, we examine a real-world disaster recovery test gone wrong from Kodiak Island, Alaska. Our guest Paul Van Dyke shares his story of intentionally taking down an entire server environment over a weekend, armed with only backup tapes and determination. This disaster recovery test example showcases both what not to do and valuable lessons learned. Paul walks us through his bold 2001 decision to reorganize storage across five servers by completely wiping them all at once. What was supposed to be a weekend project turned into a five-day marathon, including sleeping on his office floor to swap backup tapes. While he eventually succeeded in restoring everything, this disaster recovery test example demonstrates why proper testing and planning are crucial for any major infrastructure changes. Join us for this candid conversation about backup testing, restoration planning, and the unique challenges of managing IT infrastructure on a remote Alaskan island. Learn from Paul's experience so you don't have to learn these lessons the hard way!…

The Backup Wrap-Up

1
Disaster Recovery Testing: Start Small Before Going Big 37:40

27 weeks پیش37:40

37:40

Ready to level up your disaster recovery testing game? This episode covers everything from basic restore testing to full-scale DR scenarios. Curtis and Prasanna share real-world experiences and practical advice for implementing effective disaster recovery testing strategies. Learn why starting small is crucial, how to define clear success criteria, and ways to test without risking your production environment. We discuss different infrastructure types, from physical servers to cloud platforms, and explain how each requires its own testing approach. Plus, get insights on creating effective runbooks and ensuring your team can execute recovery procedures without depending on specific individuals. Whether you're planning your first DR test or looking to improve existing procedures, this episode provides actionable guidance for building confidence in your recovery capabilities. BTW if you want to watch/listen to the Alaska DR story, I'm actually going to repost it next week.…

The Backup Wrap-Up

1
Detecting Ransomware Before It's Too Late 45:48

28 weeks پیش45:48

45:48

WC continue =====================DESCRIPTION=============== Detecting ransomware requires more than just good antivirus software - it demands a comprehensive approach using multiple tools and techniques. In this episode of The Backup Wrap-up, security expert Mike Saylor breaks down the essential components of ransomware detection, from endpoint protection to network monitoring. Learn about the latest detection tools like XDR, EDR, and SOAR, and discover why many organizations might benefit from working with a managed security service provider. We discuss real-world examples of ransomware detection, including unusual signs that might indicate an attack in progress. Whether you're managing IT for a small business or an enterprise organization, this episode provides practical insights into detecting ransomware before it's too late.…

The Backup Wrap-Up

1
RTO vs RPO: The Foundations of Backup Design 40:22

29 weeks پیش40:22

40:22

In this essential episode of The Backup Wrap-up, we dive deep into RTO vs RPO – the foundational concepts that drive backup and recovery system design. Curtis and Prasanna break down why these aren't just technical metrics, but crucial business decisions that should come from your stakeholders. Learn why different applications need different RTOs and RPOs, how these metrics influence your backup frequency and system design, and why getting them wrong can cost your company millions. We'll show you how to have productive conversations with stakeholders about recovery objectives, and why the common answer of "zero downtime" isn't always the right one. Whether you're new to backup or a seasoned pro, this episode will reshape how you think about recovery objectives.…

The Backup Wrap-Up

1
Backup from Hell: SMB vs 400TB 44:19

30 weeks پیش44:19

44:19

Experience the backup from hell in this eye-opening episode of The Backup Wrap-up. What started as a straightforward 40TB backup spiraled into a months-long battle with 400TB of data, failing tape drives, and directories containing hundreds millions of files. Host W. Curtis Preston shares his first-hand account of tackling this backup from hell, including the challenges of dealing with SMB protocol limitations, tape drive failures, and the infamous "million file problem." Learn why backing up 99 million files in a single directory isn't just challenging - it's nearly impossible over standard protocols. Discover the solutions that finally worked, from switching to disk-based backup to implementing local tar backups. Whether you're a backup admin or IT professional, this episode offers valuable insights into handling extreme backup scenarios.…

The Backup Wrap-Up

1
Election Integrity 101: What Every Voter Should Know 1:03:40

31 weeks پیش1:03:40

1:03:40

In this important episode, we tackle the crucial topic of election integrity. As a seasoned poll worker and site manager, I take you behind the scenes of our voting process, revealing the numerous safeguards and checks in place to ensure fair and accurate elections. We debunk common myths, explain the importance of paper ballots, and discuss how mail-in voting actually works. You'll learn about the rigorous signature verification process, the role of election observers, and why it's nearly impossible to commit large-scale voter fraud. Whether you're skeptical about our electoral system or simply curious, this episode provides valuable insights into how we maintain election integrity. Don't miss this chance to understand the nuts and bolts of our democratic process and why you can trust in the security of your vote.…

The Backup Wrap-Up

1
The Dark Side of Backup System Consolidation 43:06

32 weeks پیش43:06

43:06

In this eye-opening episode of The Backup Wrap-up, we look at the dangers of the consolidating backup market, a trend that's reshaping the industry. We talk about recent major acquisitions like Cohesity's purchase of Veritas and Salesforce's takeover of OwnBackup, examining the implications for customers and the market at large. After covering each acquisition, we talk about the often-overlooked risks of keeping legacy backup systems operational post-consolidation, including security vulnerabilities and ongoing costs. We also address the challenges of data accessibility and the potential legal ramifications of retaining old backups. Whether you're a seasoned IT professional or new to the world of data protection, this episode offers valuable insights into navigating the complex landscape of backup market consolidation.…

The Backup Wrap-Up

1
Rogue Administrator Nightmare: Lessons from a Real-Life Attack 38:05

33 weeks پیش38:05

38:05

In this episode of The Backup Wrap-up that proves Curtis right :) we look into the shocking case of a rogue administrator who held an entire company's IT infrastructure hostage. We explore how Daniel Rhyne, a core infrastructure engineer, managed to lock out his colleagues and demand a $750,000 ransom. This real-world example highlights the critical importance of safeguarding against insider threats. We look into practical strategies to prevent such incidents, including implementing least privilege access, enforcing "four eyes" principles for critical changes, and maintaining robust logging and auditing systems. The discussion also covers recovery options and the vital role of off-site immutable backups in mitigating damage from rogue administrators. Whether you're an IT professional or business leader, this episode provides essential insights into protecting your organization from the potentially devastating actions of trusted insiders gone rogue.…

The Backup Wrap-Up

1
Business Impact Analysis: Your Key to Resilient Operations 46:22

34 weeks پیش46:22

46:22

In this episode of The Backup Wrap-up, we explore the critical process of a business impact analysis (BIA) and its importance for organizations of all sizes. Our expert guest, Dr. Mike Saylor, shares valuable insights on conducting effective BIAs, including why it's best to have a third party perform them. We discuss how business impact analysis informs disaster recovery plans, aligns IT with business needs, and helps justify crucial investments in resilient systems. You'll learn about the steps involved in a BIA, from stakeholder identification to financial impact assessment, and understand how this process can save your organization time, money, and headaches in the long run. Whether you're an IT professional or a business leader, this episode provides essential knowledge for protecting your organization's critical functions and ensuring business continuity.…

The Backup Wrap-Up

1
Building a Resilient Ransomware Backup Strategy 50:40

35 weeks پیش50:40

50:40

In this essential episode of The Backup Wrap-up, we delve into the critical components of a robust ransomware backup strategy. We explore the concept of dwell time and its implications on backup retention periods, emphasizing the need for longer-term storage solutions. Our discussion covers the importance of frequent backups and designing systems with multiple recovery options. We examine the benefits of cutting-edge technologies like snapshots, replication, and cloud-based recovery solutions in crafting an effective ransomware backup strategy. The episode also tackles the nuances of database versus file system recovery and provides insights on evaluating the importance of encrypted data. Whether you're an IT professional or a business owner, this episode offers valuable guidance on fortifying your ransomware backup strategy to protect your critical data assets.…

The Backup Wrap-Up

1
Detecting Ransomware Before It's Too Late 45:25

36 weeks پیش45:25

45:25

In this eye-opening episode of The Backup Wrap-up, we delve into the critical topic of detecting ransomware. Joined by cybersecurity expert Dr. Mike Sailor, we explore the subtle signs that could indicate a ransomware attack in progress. From slight performance degradation to unusual network behavior, we cover the early warning signs that every IT professional and digital asset owner should be aware of. Our discussion goes beyond just identifying threats. We examine the role of advanced security tools like SIEM and XDR in early ransomware detection, and why integrating these with endpoint protection is crucial for an effective defense strategy. We also stress the importance of having a solid incident response plan and the benefits of virtualization in recovery efforts. Whether you're looking to bolster your organization's cybersecurity or simply protect your personal data, this episode provides invaluable insights into detecting ransomware before it's too late.…

The Backup Wrap-Up

1
Tabletop Exercises: Your Secret Weapon Against Cyberattacks 47:32

37 weeks پیش47:32

47:32

In this eye-opening episode of The Backup Wrap-up, we delve into the world of tabletop exercises and their crucial role in cybersecurity preparedness. Our guest expert, Mike Saylor from Black Swan Security, guides us through the ins and outs of planning and executing effective tabletop exercises. We explore why these simulations are essential for organizations of all sizes, and how they can dramatically improve incident response capabilities. Listeners will gain valuable insights into selecting the right scenarios, involving key stakeholders, and creating a safe environment for learning. We also discuss common pitfalls to avoid and the importance of regular practice. Whether you're new to tabletop exercises or looking to enhance your existing program, this episode provides practical advice for strengthening your organization's cyber resilience. Don't miss this opportunity to level up your incident response game!…

The Backup Wrap-Up

1
Fostering a Culture of Cybersecurity with Training 45:01

38 weeks پیش45:01

45:01

In this important episode of The Backup Wrap-Up, we delve into the world of cybersecurity training. We explore why effective training is crucial in today's digital landscape and how to implement a comprehensive program that goes beyond just ticking boxes. From creating robust cybersecurity policies to conducting engaging, frequent training sessions, we cover it all. Learn why rewarding vigilance is more effective than punishing mistakes, and how to foster a security-aware culture in your organization. We discuss the importance of relevant, interactive training methods, including simulated phishing tests, and how to train users to spot suspicious activity beyond just phishing attempts. Whether you're an IT professional or a business owner, this episode provides valuable insights to enhance your cybersecurity training efforts and strengthen your organization's digital defenses.…

The Backup Wrap-Up

1
Incident Response Plan 101: From BIA to Execution 37:00

39 weeks پیش37:00

37:00

In this very dense episode of The Backup Wrap-up, we delve into the critical world of incident response plans, from the business impact analysis (BIA) to finalizing its creation. Our expert guest, Dr. Mike Saylor, CEO of Blackswan Security, shares invaluable insights on crafting and implementing effective incident response strategies. We explore the key components of a robust plan, from conducting a business impact analysis to creating scenario-specific playbooks. Learn why having an incident response plan is crucial in today's cyber threat landscape and how to design one that works for your organization. We discuss the importance of regular updates, secure storage, and testing through tabletop exercises. Whether you're an IT professional or a business leader, this episode provides practical advice on preparing for and managing potential security incidents. Don't miss this essential guide to strengthening your organization's cyber resilience through comprehensive incident response planning.…

The Backup Wrap-Up

1
Reducing Your Cyberattack Blast Radius: Expert Tips 37:51

40 weeks پیش37:51

37:51

In this eye-opening episode of The Backup Wrap-up, we delve into the critical concept of minimizing the cyberattack blast radius. Joined by cybersecurity expert Dr. Mike Saylor, we explore practical strategies to significantly reduce the impact of a breach on your organization. We start by discussing the principle of least privilege access and its role in containing a cyberattack's blast radius. Next, we examine the importance of network segmentation in limiting the spread of an attack. The conversation then shifts to the often-overlooked aspect of controlling outbound traffic to prevent data exfiltration. Throughout the episode, we provide actionable insights and best practices that IT professionals and business owners can implement to enhance their cybersecurity posture. By focusing on minimizing the cyberattack blast radius, organizations can better protect their digital assets and mitigate potential damages in the event of a breach.…

The Backup Wrap-Up

1
Ransomware Forensics: Preserving Digital Evidence 45:10

41 weeks پیش45:10

45:10

In this episode of The Backup Wrap-Up, we delve into the crucial world of ransomware forensics with cybersecurity expert Mike Saylor. We explore the essential steps and tools used in forensic analysis during a cyber attack, highlighting the importance of preserving evidence and navigating the complexities of both traditional and mobile device forensics. From log preservation to forensic imaging, we discuss how organizations can prepare for and respond to ransomware incidents. Mike shares insights on the different forensic tools available, their applications, and the challenges faced in modern cybersecurity investigations. We also touch on the importance of having a forensic response plan in place before an attack occurs. Whether you're an IT professional or simply interested in cybersecurity, this episode offers valuable knowledge about the forensic processes that help unravel cyber attacks and protect valuable data. Tune in to enhance your understanding of ransomware forensics and strengthen your organization's cyber defenses.…

The Backup Wrap-Up

1
The Cyber Insurance Playbook: What You Need to Know 50:02

42 weeks پیش50:02

50:02

Dive into the world of cyber insurance with our latest episode featuring expert Mike Saylor. We explore the evolving landscape of cyber insurance policies and their crucial role in today's digital security strategies. Learn why cyber insurance is more than just a financial safeguard and how it can be a proactive tool in your cybersecurity arsenal. Mike shares invaluable insights on maximizing your cyber insurance benefits, from understanding policy nuances to leveraging your insurer's expertise. We discuss common misconceptions, the importance of pre-incident preparation, and strategies for effective incident response. Whether you're a small business owner or a corporate executive, this episode provides essential knowledge to navigate the complex terrain of cyber insurance and protect your digital assets.…

The Backup Wrap-Up

1
Advanced Ransomware Prevention 44:06

43 weeks پیش44:06

44:06

In this important episode of "The Backup Wrap-Up," we continue our discussion on ransomware, and dive deeper into the world of ransomware prevention. We assume you've done the basics (password & patch management, and MFA), and want to do more. As cyber threats continue to evolve, it's more important than ever to stay ahead of potential attacks. We discuss a range of strategies to protect your organization, from application whitelisting to securing service accounts. Among other things, our conversation covers the importance of restricting risky network protocols, implementing multi-factor authentication, and employing reputable anti-malware software. We also explore the benefits of penetration testing and red team exercises. Additionally, we emphasize the significance of establishing relationships with blue teams and law enforcement resources before an attack occurs. Join us as we provide actionable insights on ransomware prevention, helping you build a robust defense against this pervasive cyber threat. Whether you're an IT professional or a business owner, this episode is packed with valuable information to enhance your cybersecurity posture.…

The Backup Wrap-Up

1
IT Security Audit Essentials: Protect Your Network 38:19

45 weeks پیش38:19

38:19

In this episode of The Backup Wrap-Up, we delve into the critical world of IT security audits. We explore why these audits are essential for maintaining a robust cybersecurity posture and how they can help organizations identify and address potential vulnerabilities. Our discussion covers key elements of surviving an IT security audit, including user education, application whitelisting, and securing remote access protocols. We also touch on the importance of regular security assessments and proactive measures to stay ahead of cyber threats. Whether you're an IT professional or a business owner, this episode provides valuable insights into conducting thorough IT security audits and implementing best practices to protect your digital assets. Tune in to learn how you can strengthen your organization's defenses and become a cybersecurity hero.…

The Backup Wrap-Up

1
How to Stop Ransomware: 3 Essential Strategies 48:27

46 weeks پیش48:27

48:27

Discover how to stop ransomware in its tracks with this informative episode of The Backup Wrap-up. Hosts W. Curtis Preston and Prasanna Malaiyandi look into three crucial strategies that can prevent 90% or more of ransomware attacks. Learn why patch management is your first line of defense and how to implement it effectively. Explore the world of password security and discover why a robust password management system is essential. Finally, uncover the power of multi-factor authentication in thwarting unauthorized access. Don't miss this opportunity to strengthen your cybersecurity defenses and stay one step ahead of cybercriminals.…

The Backup Wrap-Up

1
Immutable Backups: Your Ultimate Defense Against Ransomware 44:31

47 weeks پیش44:31

44:31

In this episode, we delve into the world of immutable backups, a crucial component of modern data protection strategies. We explore why immutable backups have become increasingly important in the face of sophisticated cyber threats, especially ransomware attacks that target backup systems. The episode covers the evolution from tape backups to disk-based systems and cloud solutions, highlighting how this shift has introduced new security challenges. We discuss the spectrum of immutability in backup systems, from basic file system protections to fully immutable cloud storage options. The conversation touches on various implementations of immutable backups, their strengths, and potential vulnerabilities. We also address the importance of multi-factor authentication and awareness of emerging threats like AI-based voice impersonation.…

The Backup Wrap-Up

1
Protect Backups from Ransomware: Expert Strategies 34:50

48 weeks پیش34:50

34:50

In this crucial episode, we delve into how to protect backups from ransomware, a critical concern for IT professionals and business owners alike. We explore why backup systems are prime targets for cybercriminals and the devastating consequences of a successful attack. Our discussion covers essential strategies to fortify your backups, including implementing immutable storage, using local accounts instead of Active Directory, and employing network segmentation. We also emphasize the importance of robust monitoring systems and regular patching. By understanding the risks and implementing these protective measures, you can significantly enhance your organization's resilience against ransomware attacks. Don't miss this vital information on how to protect backups from ransomware and secure your data's last line of defense.…

The Backup Wrap-Up

1
Ransomware 101: What is ransomware? 35:26

49 weeks پیش35:26

35:26

This episode about what is ransomware is the first in a new series on the topic. The episode explores what it is, how it works, and why it has become such a significant threat to businesses and individuals alike. We discuss the evolution of ransomware attacks, from simple data encryption to sophisticated extortion schemes involving data exfiltration and direct attacks on backup systems. Our conversation highlights the importance of prevention and detection measures, such as robust access controls, limiting internet-facing systems, and monitoring for data exfiltration. We also emphasize the critical role of backup and recovery strategies, including offline and immutable backups, in mitigating the impact of ransomware attacks. Throughout the episode, we provide insights into the complex ransomware threat landscape and offer practical advice for organizations looking to protect their data and systems from this ever-evolving threat.…

The Backup Wrap-Up

1
XDR vs SIEM: Do you need to choose? 44:20

50 weeks پیش44:20

44:20

In this episode, we explore the differences between XDR and SIEM, two crucial tools in the world of security monitoring. Our guest, Dez Rock, CEO of SIEMonster, shares her fascinating journey from professional hacker to building an affordable, scalable SIEM solution that encompasses SOAR and XDR capabilities. We discuss the importance of evaluating security tools based on their true capabilities rather than just market perception, and Dez provides real-world examples of how SIEMonster's SIEM/XDR tool automatically detected and shut down a ransomware attack at a large hospital client. Tune in to learn about the evolving security landscape, the pros and cons of XDR vs SIEM, and how you may not have to choose! Whether you're an IT professional or simply interested in the latest cybersecurity trends, this episode offers valuable insights into the future of security monitoring.…

The Backup Wrap-Up

1
Strengthening Your Cybersecurity Blue Team: Pro Tips 51:30

51 weeks پیش51:30

51:30

In this episode, we explore the essential strategies and best practices for building and optimizing a blue team cybersecurity approach. Our guest, Mike Saylor, shares his expertise on how organizations can effectively prepare for and respond to cyber incidents. From establishing relationships with law enforcement to conducting tabletop exercises and understanding cyber insurance policies, Mike provides valuable insights to help companies strengthen their cybersecurity posture. Throughout the episode, we discuss the importance of focusing on detection and response capabilities, not just prevention, and how a well-prepared blue team can make all the difference in the face of a cyber threat. Mike also shares real-world stories that illustrate the key lessons and takeaways for organizations looking to enhance their cybersecurity efforts. Tune in to learn how you can better protect your company from cyber threats with a robust blue team approach.…

The Backup Wrap-Up

1
Thinking Like a Hacker: Red Team Cyber Security Strategies 56:24

52 weeks پیش56:24

56:24

In this popular episode from last year, we explore the fascinating world of red team cyber security with Dwayne Laflotte, a seasoned expert in offensive cybersecurity. Dwayne shares his wealth of knowledge and experience, diving into the tactics and strategies employed by red teams to identify vulnerabilities and strengthen an organization's defenses. From exploiting backup systems to the importance of least privilege and strong passwords, this episode is a must-listen for anyone interested in bolstering their cybersecurity posture. Dwayne provides captivating examples of how red team cyber security professionals think outside the box to breach networks, emphasizing the need for constant vigilance and adaptability in the face of evolving threats. He also highlights the critical role of collaboration between red and blue teams, stressing the importance of a multi-layered approach to cybersecurity. Packed with practical insights and actionable advice, this episode is an invaluable resource for IT professionals and business leaders alike.…

The Backup Wrap-Up

1
Google Cloud Disaster Recovery: Lessons from UniSuper's Close Call 31:26

1 year پیش31:26

31:26

In this episode, we delve into the critical importance of Google Cloud disaster recovery planning through the lens of UniSuper's recent brush with catastrophe. When Google accidentally deleted UniSuper's entire VMware environment, the Australian pension provider faced the terrifying prospect of losing access to $125 billion in assets and the data of over 600,000 members. Hosts W. Curtis Preston and Prasanna Malaiyandi dissect the incident, highlighting how UniSuper's adherence to the 3-2-1 backup rule and use of third-party backup solutions ultimately saved the day. They explore the key lessons learned from this Google Cloud disaster, including the importance of having isolated data copies, clear communication during outages, and a robust recovery strategy. This real-world case study serves as a stark reminder of the risks associated with relying solely on cloud providers for data protection and the necessity of comprehensive Google Cloud disaster recovery planning.…

The Backup Wrap-Up

1
Electronic Discovery tools that extract from backups 52:06

1 year پیش52:06

52:06

In this episode, we explore the world of electronic discovery tools and how they're transforming the legal landscape. Our guest, Brendan Sullivan, shares his expertise on the challenges companies face when dealing with legacy data and the importance of using the right tools for eDiscovery. Learn how purpose-built software can greatly enhance efficiency, accuracy, and defensibility in the eDiscovery process. Brendan also discusses the growing need for data remediation and migration services, as well as the role of computer forensics and eDiscovery platforms in building strong legal cases. Whether you're a legal professional looking to streamline your workflow or simply interested in the intersection of technology and law, this episode is a must-listen.…

The Backup Wrap-Up

1
Cloud Disaster Recovery: Lessons from Failures 42:00

1 year پیش42:00

42:00

Capping our series on cloud disasters is this one on cloud disaster recovery. In this episode, we review the lessons we learned from discussing 10 cloud disasters. We talk about the critical strategies and techniques to ensure your data is protected and recoverable in the event of a disaster in the cloud. From the basic 3-2-1 rule to the pitfalls of solely trusting your cloud provider for proper disaster recovery, we dive into real-world examples and expert insights to help you build a robust cloud disaster recovery plan for your cloud data. Discover the importance of regular testing, the role of third-party backup solutions, and the key considerations for choosing a reliable cloud provider. Whether you're a small business or a large enterprise, this episode provides actionable advice to enhance your cloud disaster recovery posture and maintain business continuity in the face of unexpected disruptions. Tune in now and learn how to safeguard your valuable data in the cloud era.…

The Backup Wrap-Up

1
Life Uncontained YouTube Channel Loses Month of Footage in Crash 41:41

1 year پیش41:41

41:41

In this episode, we discuss the devastating crash experienced by the popular YouTube channel "Life Uncontained," which resulted in the loss of a month's worth of irreplaceable video footage. The Life Uncontained crash serves as a stark reminder of the importance of proper backup strategies for protecting valuable digital assets. We delve into the lessons learned from this unfortunate incident and explore the best practices for safeguarding your data from hardware failures and other potential disasters. From the 3-2-1 backup rule to the use of multiple storage media, we cover the essential steps you can take to minimize the risk of catastrophic data loss. Whether you're a content creator, business owner, or simply someone who values their digital memories, this episode provides crucial insights into the world of data protection and backup. Don't miss this opportunity to learn from the "Life Uncontained" story and fortify your own backup plan. https://www.youtube.com/watch?v=fQsTs3C0T-c&ab_channel=LifeUncontained…

The Backup Wrap-Up

1
The Disastrous Dedoose Crash: Lessons Learned 39:57

1 year پیش39:57

39:57

In 2014, the cloud-based research platform Dedoose suffered a catastrophic crash, losing customer data and backups simultaneously. We examine the causes of the Dedoose crash, its impact on users, and crucial lessons for anyone relying on SaaS. Learn how subpar backup practices, like monthly-only backups and overwriting previous versions, can lead to disaster. Hear how Dedoose responded and key steps to prevent your own cloud data calamity. Links from this episode: https://www.informationweek.com/it-infrastructure/social-science-site-using-azure-loses-data#close-modal https://www.insidehighered.com/news/2014/05/16/dedoose-crash-shows-dangers-handing-data-cloud-services https://www.latimes.com/business/technology/la-fi-tn-dedoose-crash-academic-cloud-20140512-story.html https://www.chronicle.com/blogs/wiredcampus/hazards-of-the-cloud-data-storage-services-crash-sets-back-researchers https://web.archive.org/web/20230927112141/https://www.dedoose.com/blog/dedoose-update-significant-data-recovery-successful-how-to-save-a-project-locally https://web.archive.org/web/20140512214308/http://blog.dedoose.com/2014/05/dedooses-black-eye-crash-and-recovery-efforts/ https://www.dedoose.com/about/security…

The Backup Wrap-Up

1
StorageCraft Outage: Lessons from a Cloud Backup Disaster 34:35

1 year پیش34:35

34:35

In this episode, we examine the StorageCraft outage that erased customer backup data during a botched cloud migration. We compare StorageCraft's response to Carbonite's in a similar incident and discuss the critical lessons for backup vendors and customers. Learn the importance of meticulous migration processes, potential backup resiliency strategies, and what to do if your cloud backups disappear. Don't miss these vital insights to avoid cloud backup disasters and ensure your data is always recoverable. Stories covering this outage: https://www.crn.com/slide-shows/storage/arcserve-ceo-storagecraft-backup-data-loss-not-acceptable https://www.techtarget.com/searchdisasterrecovery/news/252515647/StorageCraft-DRaaS-outage-highlights-layered-protection-need https://www.reddit.com/r/msp/comments/tgggey/just_got_a_call_from_storagecraft_cloud_data_is/ https://blocksandfiles.com/2022/03/22/arcserve-storagecraft-operation-has-lost-customer-data/ https://www.channele2e.com/news/arcserve-storagecraft-draas-suffers-cloud-data-protection-issues…

The Backup Wrap-Up

1
Rackspace Ransomware Attack: Lessons Learned 42:06

1 year پیش42:06

42:06

In this episode, we examine the Rackspace ransomware attack that crippled the company's hosted exchange environment, affecting thousands of customers. We discuss the timeline of events, the importance of timely patching, and the challenges Rackspace faced in restoring customer data. Learn about the value of comprehensive disaster recovery plans and third-party backups in protecting your organization from similar attacks. Don't miss this opportunity to gain valuable insights from one of the most significant ransomware incidents in recent years.…

The Backup Wrap-Up

1
The Carbonite Lawsuit: A Cloud Backup Cautionary Tale 46:13

1 year پیش46:13

46:13

In this episode, we uncover the troubled history of Carbonite, a once prominent cloud backup provider plagued by lawsuits. In one Carbonite lawsuit they were the plaintiff, in another they were the defendant. From using inadequate storage arrays to failing to protect customer data, Carbonite's story serves as a warning for backup customers. Learn the importance of thoroughly vetting backup vendors and the risks of blindly trusting marketing claims. Don't miss this deep dive into Carbonite's multi-million dollar legal battles and valuable lessons for anyone relying on cloud backup services. Stories discussed in this episode: https://backupcentral.com/carbonite-liar/ https://archive.nytimes.com/pogue.blogs.nytimes.com/2009/01/27/carbonite-stacks-the-deck-on-amazon/ https://www.theregister.com/2009/03/23/carbonite_sues_promise/ https://www.backblaze.com/blog/carbonite-data-loss-reports-miss-the-point/ https://www.datacenterknowledge.com/archives/2009/03/23/carbonite-lawsuit-reveals-data-loss https://www.datacenterknowledge.com/archives/2009/03/25/more-on-carbonites-data-loss https://archive.nytimes.com/pogue.blogs.nytimes.com/2009/01/27/carbonite-stacks-the-deck-on-amazon/ https://www.computerworld.com/article/2481289/carbonite-loses-7-500-customers--files--ouch-.html https://techcrunch.com/2009/01/03/journalspace-drama-all-data-lost-without-backup-company-deadpooled/ https://archive.nytimes.com/bits.blogs.nytimes.com/2008/09/11/carbonite-steps-up-the-competition-in-online-back-up/?scp=1&sq=mozy&st=cse&apage=2#comments https://www.cnet.com/tech/tech-industry/carbonite-sues-hardware-maker-reseller/ https://fingfx.thomsonreuters.com/gfx/legaldocs/byprkkkozve/01312024carbonite.pdf…

The Backup Wrap-Up

1
Salesforce.com's Permission Slip-Up (Another Cloud Disaster) 33:54

1 year پیش33:54

33:54

In this episode of The Backup Wrap-Up, Curtis and his co-host dive into the chaos caused by Salesforce's accidental "modify all" permission change in 2019. They explore the fallout from this real-world SaaS disaster, including how Salesforce scrambled to restore proper permissions and the frustration felt by impacted customers. Curtis and his co-host discuss the crucial role third-party backups could have played in mitigating the impact of this incident, and why relying solely on a SaaS vendor's recovery capabilities can leave organizations vulnerable. They also share practical advice on how listeners can avoid similar cloud disasters by implementing a comprehensive backup strategy for their SaaS applications. Whether you're a Salesforce user, a SaaS enthusiast, or simply interested in the world of data protection, this episode offers valuable insights and entertaining anecdotes that will help you become a Cyber Recovery Hero. Tune in to learn, laugh, and discover how to safeguard your organization's critical data in the cloud. Links Original SF post: https://issues.salesforce.com/issue/a028c00000qQ53kAAC/user-profiles-and-permission-sets-related-to-pardot-licensed-orgs-were-modified-by-salesforce Second post: https://salesforce.stackexchange.com/questions/262830/salesforce-bug-enabled-modify-all Big deal: https://appomni.com/blog_post/2019-blog-modify-all/ SF follow up: https://help.salesforce.com/s/articleView?id=000384056&type=1…

The Backup Wrap-Up

1
KPMG Blunder Proves Microsoft 365 Needs Backup (Cloud Disasters) 40:56

1 year پیش40:56

40:56

In this shocking episode of The Backup Wrap-up, we delve into the jaw-dropping data loss disaster that struck global consulting giant KPMG at the height of the 2020 pandemic. With one errant click, a Microsoft 365 admin accidentally wiped out months of critical Teams chat data for a staggering 145,000 employees. Join host W. Curtis Preston as he unravels this extraordinary tale of digital destruction and explores the crucial lessons it holds for organizations relying on Microsoft 365 and other SaaS platforms. Curtis breaks down the differences between retention policies and actual backups, exposes common misconceptions about cloud provider data protection responsibilities, and highlights the potential legal and compliance nightmares that can arise from such catastrophic data loss. If you're using Microsoft 365 or any SaaS application, you can't afford to miss this vital wake-up call. Tune in to discover why a robust third-party backup strategy is essential, no matter how big your company or how reliable your cloud provider seems. Learn from KPMG's misfortune and ensure your organization's critical data is always protected, in the cloud and beyond. Don't become the next cautionary tale – listen now and secure your SaaS data before it's too late!…

The Backup Wrap-Up

1
OVHCloud Dumpster Fire (Cloud Disasters) 36:52

1 year پیش36:52

36:52

In this important episode of the Backup Wrap-up, W. Curtis Preston, AKA Mr. Backup, takes you on a deep dive into the shocking story of the OVHCloud data center fire of 2021. This catastrophic event left hundreds of customers scrambling to recover their precious data (often without backups), exposing the startling truth about OVHCloud's data center and backup practices and the devastating consequences of misplaced trust in cloud providers. As usual, Curtis is joined by co-host Prasanna Malaiyandi as they unravel the complex web of controversial decisions, legal battles, and hard lessons learned from this disastrous incident. They explore the factors contributing to the fire's severity, the staggering extent of the data loss, and the eye-opening revelations about OVHCloud's backup infrastructure. But this episode is more than just a cautionary tale. Curtis and Prasanna delve into the crucial questions every organization must ask their cloud provider to ensure their data is truly secure. They share invaluable insights and actionable advice to help you avoid falling victim to a similar fate. Whether you're an IT professional responsible for safeguarding your company's data or an individual looking to protect your digital life, this episode is a must-listen. You'll come away with a deeper understanding of the risks associated with cloud storage, the importance of robust backup strategies, and the steps you can take to become a cyber-recovery hero. Don't miss this opportunity to learn from one of the most significant cloud disasters in recent history. Tune in now and discover how you can keep your data out of the fire and emerge as an unsung hero in the world of backup and recovery. Articles covering this story: https://www.datacenterdynamics.com/en/news/ovh-fire-octave-klaba-says-ups-systems-were-ablaze/ https://www.datacenterdynamics.com/en/news/fire-could-cost-ovhcloud-105-million-ipo-filing-reveals/ https://www.datacenterdynamics.com/en/news/ovhcloud-ordered-to-pay-250k-to-two-customers-who-lost-data-in-strasbourg-data-center-fire/ https://www.datacenterdynamics.com/en/news/ovhcloud-fire-report-sbg2-data-center-had-wooden-ceilings-no-extinguisher-and-no-power-cut-out/ Election worker episode: https://www.backupwrapup.com/election-poll-site-manager-explains-us-election-systems/…

The Backup Wrap-Up

1
Cloud disasters: Musey deletes their own company! 26:13

1 year پیش26:13

26:13

In this episode, we uncover the little-known but cautionary tale of Musey, a startup building an interior design app that catastrophically lost everything when an admin accidentally deleted their entire Google Workspace account. We dive deep into: How a single slip-up by an admin led to over $1.5 million of intellectual property stored in Google Drive getting instantly wiped out Musey's desperate attempts to get their data back by contacting Google and even filing a lawsuit How not even the cloud giants like Google have an obligation to restore customer data lost due to error or malfeasance Why you absolutley need independent backups of cloud data instead of blindly trusting sync and retention policies The devastating story of Musey serves as a sobering reminder that human error can still trump even the most resilient cloud platforms. Don’t miss this rare peek behind the curtain at a colossal cloud failure that very few people know about. Story: https://www.theregister.com/2019/07/05/musey_v_google_lawsuit/ Lawsuit filed: https://regmedia.co.uk/2019/07/05/musey_v_google.pdf Lawsuit pulled: https://dockets.justia.com/docket/california/candce/4:2019cv03864/344456 Museyapp.com 6/6/19 says “buy this domain”: https://web.archive.org/web/20190606022957/http://www.museyapp.com/…

The Backup Wrap-Up

1
Cloud catastrophes: Codespaces.com deleted out of existence 35:57

1 year پیش35:57

35:57

In 2014, software-as-a-service company Code Spaces disappeared overnight after a devastating cyber attack. Thousands of coders lost access to their work when insufficient cloud backups failed under pressure. The company was forced to go out of business. Learn the tragic tale of how Code Spaces ignored standard data protection rules, putting their business and clients at risk. We’ll unpack what went wrong with their cloud architecture and backup systems, allowing a single hacker to destroy their SaaS company. Understand why you still need backup - even native cloud redundancy isn't enough. Our hosts explore the hard lessons from this cloud catastrophe and equip you with actionable advice around security, access controls, preparation, and backup policies. Safeguard your slice of the cloud and avoid the mistakes that ultimately shuttered Code Spaces. Articles covering this story: https://www.esecurityplanet.com/networks/code-spaces-destroyed-by-cyber-attack/ https://www.itgovernance.co.uk/blog/the-attack-that-forced-code-spaces-out-of-business-what-went-wrong https://www.breaches.cloud/incidents/codespaces/ https://threatpost.com/hacker-puts-hosting-service-code-spaces-out-of-business/106761/ https://thehackernews.com/2014/06/cyber-attack-on-code-spaces-puts.html https://www.csoonline.com/article/547518/disaster-recovery-code-spaces-forced-to-close-its-doors-after-security-incident.html https://blogs.manageengine.com/it-security/passwordmanagerpro/2014/08/20/code-spaces-aws-security-breach-a-sad-reminder-of-the-importance-of-cloud-environment-password-management.html…

The Backup Wrap-Up

1
Crafting the Perfect Disaster Recovery Runbook 39:56

1 year پیش39:56

39:56

In this information-packed episode, backup guru W. Curtis Preston and expert guest Prasanna Malaiyandi explore the elements of crafting an effective disaster recovery (DR) runbook. They discuss how a properly structured runbook eliminates confusion during crises by clearly outlining responsibilities and contacts. From making runbooks accessible and absorbed to keeping them actionable with constant updates and tests, they share the 8 critical factors for DR success. Tune in to transform your backup admins into confident cyber recovery heroes with battle-tested runbooks.…

The Backup Wrap-Up

1
To DRaaS or Not to DRaaS? Comparing Disaster Recovery Approaches 39:01

1 year پیش39:01

39:01

Disaster lurks around every corner - ransomware, natural disasters, human errors. Are you thinking about all the data and systems at risk. Is your organization prepared? In this episode, Curtis and Prasanna pull back the curtain on the disaster recovery decision - to build or to buy? They unpack the tradeoffs around cost, complexity, control, and even cybersecurity. Whether you're an anxious IT leader losing sleep over business continuity or just disaster recovery curious, you won't want to miss this episode. Will your DR strategy survive? Tune in now to find out!…

The Backup Wrap-Up

1
Hot, Warm, and Cold: DR Site Strategies 40:23

1 year پیش40:23

40:23

Creating an effective DR strategy means understanding the critical differences between hot, warm, and cold recovery sites. Join backup guru W. Curtis Preston and his cohost Prasanna Malaiyandi for the latest Backup Wrap-Up as they outline real-world strategies to match your RTO, RPO, and budget. You’ll learn the unique benefits and challenges of using both primary for hot sites, and backup replication to cost-effectively create warm recovery sites. They also tackle the complexities of cloud DR for VMware environments. Can you do DR of VMware to AWS? What conversion hurdles do you need to plan for? Tune in to find out. Whether you're a scrappy SMB or an enterprise with serious SLAs, this tactical episode delivers actionable advice to advance your resilience game. Learn how to leverage the cloud's economies of scale and keep business running no matter what gets thrown your way. The backup wrap up turns unappreciated backup admins into cyber recovery heroes.…

The Backup Wrap-Up

1
Disaster Recovery Site: Build, Buy, or Cloud? 31:43

1 year پیش31:43

31:43

When disaster strikes, you better have a solid plan for where you’ll recover your operations. Join me, W. Curtis Preston, and Prasanna Malaiyandi, as we explore the nitty-gritty details of your three main options for a disaster recovery site. We’ll dig into the pros, cons, risks, and costs associated with rolling your own DR site, hiring a third-party service, or leveraging the public cloud. Each path has its twists and turns. How do you keep a secondary site in sync? What if a regional disaster takes down your DR provider? Can the cloud flex to meet your recovery needs? Tune in for straight-shooting answers. This episode tackles the tough questions so you can make informed, bulletproof decisions on housing your failover infrastructure. As always, I’m drawing from decades of experience as a recovering backup admin, and I've designed this podcast just for pros like yourself. Batten down the hatches and prepare to take notes - it’s time to build a life raft for your data! For those interested in The Gobox Studio, here you go! https://goboxstudio.com/…

The Backup Wrap-Up

1
Disaster Recovery 101: Laying the Groundwork for a Good DR Plan 46:56

1 year پیش46:56

46:56

Staying resilient in the face of disaster is crucial for any organization today. In this episode, we dive deep into crafting robust disaster recovery plans that help you outmaneuver outages. We discuss critical groundwork like taking inventory across environments and analyzing risk to determine what to prioritize recovering when the worst happens. Whether it's ransomware, natural disasters, or other threats taking systems down, smart preparation makes all the difference. Key highlights include: Figuring out what scenarios are most likely to impact your business based on risk profiles Making sure you have visibility into all areas – whether data centers, cloud, SaaS, or endpoints Tackling basic protections first before advanced options Understanding regional risks that may be unique to your geography Thinking through tests that validate your ability to recover when needed The right disaster recovery means being able to get back to business rapidly. By learning from unfortunate events others have endured, you can architect resilience that lets you bounce back better no matter the scenario.…

The Backup Wrap-Up

1
Disaster Recovery 101 - Back to the Fundamentals 37:45

1 year پیش37:45

37:45

Are your backups collecting virtual dust rather than readying you for the next unavoidable disaster? Get back to basics on crafting an ironclad disaster recovery plan. We outline the essential infrastructure, applications, staffing, and execution steps often glossed over by the check-the-box enterprise crowd. Going beyond mere data recovery, we detail considerations around standing up replacement infrastructure, understanding system interdependencies, and restoring functionality faster with increased automation. Cloud's scaling and affordability make DR exercises less daunting these days if configured properly on the front-end. With major outages increasingly likely, the principles detailed could dictate whether your business emerges unscathed or shutters for good. We share tips for pragmatic preparation reflecting our scar tissue from failures past when lackadaisical DR rigor proved painful. Ever try troubleshooting recovery steps in the midst of a raging hurricane...or gotten that dreaded 2AM offline alert while welcoming your newborn? We have! Major takeaways: Start recovery documentation with manual steps, increase automation later Test often - the cloud enables cost-effective exercising at scale Availability outshines recovery - build resilient systems and staff cross-training Know precise RTOs and RPOs aligned to business priority and appetite Stay tuned as we separate the mavens from the mayhem when adverse events strike. Get your data DR ducks in order now before things migrate south! News articles from this episode: https://www.bleepingcomputer.com/news/security/50k-wordpress-sites-exposed-to-rce-attacks-by-critical-bug-in-backup-plugin/ https://jorgedelacruz.uk/2023/12/06/veeam-whats-new-in-veeam-backup-and-replication-v12-1-major-new-features/…

The Backup Wrap-Up

1
Backup Fails at Archive: Billion-Dollar eDiscovery Disasters 53:04

1 year پیش53:04

53:04

In this episode, Curtis and Prasanna do a deep dive on the differences between data backup and data archiving. They thoroughly explain that while backup focuses on restoring systems and files to a prior point in time, archiving is all about being able to search and retrieve specific information for legal or regulatory purposes. Key reasons you'll want to tune in: Learn exactly why companies archive data and how regulatory compliance and legal eDiscovery requests require specialized archive capabilities. Understand the dangers of using your backup system as an archive for eDiscovery - lacking full search and exposing too much irrelevant data risks your legal case. Hear multiple real-world horror stories of companies failing legal cases due to lacking proper archives - to the tune of billions of dollars lost. Get clear examples of how continuous, comprehensive archiving captures all versions of files, emails, and data - including deleted and intermediate items. Get a life-line for those of you who are still using your backup system as an archive If you need to implement archiving or fix broken archive approaches that risk legal noncompliance, this episode delivers an excellent primer on how archive differs from backup and what genuine archive systems can do. https://support.google.com/drive/thread/245861992?sjid=15540859157109248518-NC https://support.google.com/drive/answer/14286582?sjid=8199341837463411967-NA https://blog.23andme.com/articles/addressing-data-security-concerns https://www.backupwrapup.com/what-is-archive-and-retrieve-backup-to-basics/ https://www.sullivanstrickler.com…

The Backup Wrap-Up

1
Backup to Basics: Traditional Data Sources 50:37

1 year پیش50:37

50:37

We’re going back to basics in 2024! Our hosts revisit their smash hit episode from last year all about protecting those traditional data sources like physical servers, VMs, laptops, desktops, and mobile devices. From on-prem to mobile, should it all get backed up? How and why? Tune in as Curtis and Prasanna rehash their spirited debate over backup best practices across your infrastructure and walk through real-world examples of what can go wrong. It’s chock full of fundamental wisdom for data protection pros getting started and veterans alike. Whether you’re making big cloud migrations or maintaining legacy systems, don’t miss this special re-release dedicated to the building blocks of backup as we start the year on a backup to basics kick.…

The Backup Wrap-Up

1
Get Ready Before You Get Got: Ransomware Response Planning 48:52

1 year پیش48:52

48:52

This timely episode features an in-depth discussion between cybersecurity expert Melissa Palmer (@vmiss) and hosts W. Curtis Preston and Prasanna Malaiyandi on the crucial role preparation and planning play in effectively responding to and recovering from the inevitable ransomware attack. They stress that flying by the seat of your pants without an incident response plan when ransomware hits leads to chaotic, inefficient efforts and substantially higher costs. Melissa outlines pragmatic steps organizations should take before an attack to develop and test response playbooks, have partnerships in place with response firms, coordinate across internal teams, bolster detection capabilities, and harden backup/recovery mechanisms. Curtis and Prasanna dive into real-world ransomware response scenarios to highlight the complexity organizations face in assessing the scope of damage from attacks and recalibrating restoration priorities. Melissa offers tips on creating robust processes to rebuild compromised environments quickly. They discuss table-top exercises as cost-efficient ways to uncover plan gaps and get stakeholders aligned on roles and timeline expectations. With Melissa's depth of experience assisting ransomware victims, she provides unique insights into preparation best practices often neglected until the worst happens. For IT/security leaders looking to build organizational resilience against ransomware threats, this engaging episode delivers actionable advice on architecting defense-in-depth capabilities tailored to your business requirements. Join us for a great episode!…

The Backup Wrap-Up

1
To Change or Not to Change Your Backup System 45:38

1 year پیش45:38

45:38

Changing your organization's backup system is no easy task - it requires careful evaluation of requirements, risks, and capabilities. Many admins get stuck with backup environments they've outgrown or that lag on modern demands. On this episode, backup guru W. Curtis Preston and his cohost Prasanna Malaiyandi lend their expertise to help you determine if and when migrating your backup solution makes sense. You'll learn: Key indicators that your current system is no longer fitting your needs How to clearly define backup requirements and alignment to recovery objectives Ways to evaluate ease of use, security, and other qualitative factors Guidance on integrating specialized systems only when necessary The importance of prioritizing immutable storage and rapid recovery Change management best practices that curb instability With ransomware threats growing, the bar for backup keeps rising. Tune in as our two hosts cover everything you need to make backup system change decisions that balance innovation, budget, and risk - avoiding needless switches while still meeting evolving data protection demands. You'll gain real-world clarity that turns unappreciated backup admins into cyber recovery heroes.…

The Backup Wrap-Up

1
Why you should care about Copy Data Management 41:29

1 year پیش41:29

41:29

After diving into the details of the recent Okta breach enabled by password manager vulnerabilities, Curtis and Prasanna tackle the growing issue of copy data sprawl. They define copy data management – the practice of tracking and governing all duplicated production data for backup, DR, development, analytics etc. What problems result from copy proliferation? How feasible is a single consolidated platform? What regulatory and cost implications exist? Tune in as our hosts break down best practices for cataloging, securing, reducing, and better leveraging your organization’s data copies. Specific topics covered include: Password manager risks exposed in Okta hack Copy data management 101 Storage cost, compliance, security issues Tools and solutions landscape Backup reuse considerations and cautions Cloud vs. data center copy management Join Curtis and Prasanna for another engaging combination of news commentary, frameworks, debates, warnings, and recommendations – this week with a data protection slant. Whether you’re a backup admin or IT leader grappling with copy sprawl, this insightful episode has something for you! Articles discussed in this week's episode: https://sec.okta.com/harfiles https://arstechnica.com/information-technology/2023/11/no-okta-senior-management-not-an-errant-employee-caused-you-to-get-hacked/ https://finance.yahoo.com/news/druva-expands-multi-cloud-protection-140000597.htmlhttps://finance.yahoo.com/news/druva-expands-multi-cloud-protection-140000597.html…

The Backup Wrap-Up

1
Snap, Replicate, & Protect: Leveraging Near CDP 40:06

1 year پیش40:06

40:06

Tired of backup windows and 24-hour recovery point objectives? Then it's time to learn about how snapshots and replication work together to create near-continuous data protection, or near-CDP. In this episode, backup experts W. Curtis Preston and Prasanna Malaiyandi dive into leveraging snapshots for instant point-in-time recovery and replication for an offsite copy. By combining these technologies, you can achieve recovery point objectives measured in minutes rather than hours or days. Listen in to understand what near CDP is, how it differs from backup and true CDP, and the key capabilities it enables. Discover when to take crash-consistent vs application-consistent snapshots. Learn how near CDP integrates with backup software and how you can use replicated snapshots for automated recovery testing. If you need tighter RPOs and near-instant RTOs for your mission-critical systems, you can’t afford to miss this explanation of how snap and replicate delivers a high-frequency, budget-friendly data protection option. Tune in to become a hero by enabling your organization to recover quickly from data corruption, ransomware, and other threats!…

The Backup Wrap-Up

1
Reborn and Reimagined: Don't Write Off Tape Just Yet 51:10

1 year پیش51:10

51:10

Ransomware attacks and data breaches dominate the headlines, but is your data protection strategy truly secure? This must-listen episode dives deep on an unsung hero of cyber resilience - tape. Tape may have been written off by some as a legacy technology, yet it offers unparalleled air gap protection that no hacker can penetrate. Top experts from Fujifilm and IBM (sponsors of this episode) reveal the major advances that make modern tape more scalable, reliable, and cost-effective than ever before. Learn how the pioneering capabilities of the newest LTO-9 drives and 50TB tape cartridges can economically safeguard tens or hundreds of petabytes. Hear the shocking sustainability advantage, with tape generating 97% less CO2 emissions and using drastically less power than comparable disk solutions. With powerful integrated encryption, quantum-safe algorithms on the horizon, and clever optimizations to tame growing data volumes, tape has been reborn as the undisputed information lifeline every organization needs. Don't let your backups remain exposed - get the insider intel on fortifying your last line of defense with tried and tested tape. Stories referenced in the episode: https://blocksandfiles.com/2023/11/03/backblaze-shard-stash-cache/ https://blocksandfiles.com/2023/11/06/cohesity-smartfiles-becomes-snowflake-analytics-playground/…

The Backup Wrap-Up

1
Virtually Air Gapped: Assessing Cloud Data Protection 50:27

۲ years پیش50:27

50:27

What does "air gap" really mean when it comes to backups? Curtis takes us back to the early days of offsite tape backups with Iron Mountain to explore the principles behind physical air gaps. We learn about barcode tracking, unmarked vans, and multi-factor delete authorization. How do modern "virtual air gaps" in the cloud compare? Are backup vendors misusing important security terms? Join us as we separate marketing hype from real backup protection and learn timeless lessons around alerting, access controls, and immutable data. After this episode, you'll know how to assess if your backups are following air gap principles - no matter what technology you use.…

The Backup Wrap-Up

1
Snapshots vs. Backups: Understanding the Difference 49:08

۲ years پیش49:08

49:08

In this episode of The Backup Wrap-Up, host W. Curtis Preston discusses the importance of understanding the difference between snapshots and backups. He emphasizes that storage snapshots should not be considered as true backups. The episode also covers the recent 1Password and Okta hack, highlighting the frustration of such incidents, especially for those who advocate for password managers and cloud technologies. Tune in to learn more about the risks and implications of relying solely on snapshots and the importance of proper backup strategies.…

The Backup Wrap-Up

1
CDP: The Next Great Thing in DR? 43:22

۲ years پیش43:22

43:22

In this episode of the Backup Wrap-Up, W. Curtis Preston and Prasanna Malaiyandi discuss Continuous Data Protection (CDP) and its potential as the next great thing in disaster recovery. They explore the concept of meeting an RTO and RPO of zero and question why CDP isn't used for all backups in DR. Tune in to learn more about CDP and its role in backup and disaster recovery. Article mentioned in the story: https://www.theregister.com/2023/10/10/ransomware_attacks_register_record_speeds…

The Backup Wrap-Up

1
The Role of Replication in Modern Data Protection systems 45:05

۲ years پیش45:05

45:05

In this episode, W. Curtis Preston, aka Mr. Backup, and Prasanna Malaiyandi discuss the fundamental technology of replication in data protection systems. They explore what replication is, how it differs from other methods, and why it's not used for everything. They also delve into the differences between synchronous and asynchronous replication and why it matters. The hosts also share news of a backup company called Alcion, which recently raised funding with support from Veeam, a backup company investing in Alcion's focus on Microsoft 365 backups for SMB customers. They also discuss a report from ESG about how cloud backup has evolved. The episode provides insights into the world of data protection and highlights the importance of replication in safeguarding valuable data. Articles discussed in this episode: https://www.techtarget.com/searchdatabackup/news/366552363/Veeam-leads-funding-round-for-SaaS-backup-provider-Alcion https://www.techtarget.com/searchdatabackup/feature/Cloud-backup-and-disaster-recovery-evolve-toward-maturity…

The Backup Wrap-Up

1
Is it a backup or just a copy? 46:52

۲ years پیش46:52

46:52

In this episode of the Backup Wrap-Up, host W. Curtis Preston discusses the importance of distinguishing between a copy and a backup to ensure the protection of valuable data. He also explores key backup concepts such as multiplexing, incremental backups, block-level incremental backups, and source-side deduplication. The episode kicks off with a discussion on the recent MGM hack, highlighting the significant impact it had on the hotel chain and the potential for personal information leaks. Tune in to learn how to safeguard your data effectively and become a backup hero. Articles mentioned in the episode: https://www.reddit.com/r/vegas/comments/16hxwj0/explain_like_i_am_5_mgm_hacking/ https://www.reversinglabs.com/blog/what-we-know-about-blackcat-and-the-mgm-hack…

The Backup Wrap-Up

1
The importance of backing up cloud resources 36:11

۲ years پیش36:11

36:11

In this episode of the Backup Wrap-up, we continue our Backup to Basics series by discussing the importance of protecting cloud infrastructure, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). We then dive into the differences between these various cloud services and highlight the need to back up various components of each. We also discuss a recent incident where a Danish hosting company lost a significant amount of customer data due to a ransomware attack, emphasizing the ongoing threat of ransomware and the vulnerability of service providers. Tune in to learn more about safeguarding your data in the cloud. Links to articles mentioned in the post: https://www.bleepingcomputer.com/news/security/hosting-firm-says-it-lost-all-customer-data-after-ransomware-attack/ https://www.pcmag.com/how-to/how-to-back-up-restore-your-documents-in-windows-10…

The Backup Wrap-Up

1
The Importance of Backing Up IOT Devices 37:52

۲ years پیش37:52

37:52

In this episode of the Backup Wrap-Up, host W. Curtis Preston and co-host Prasanna Malaiyandi explore the topic of data protection in the Internet of Things (IoT) era. With the increasing number of IoT devices in our homes and organizations, it is crucial to understand how to back up and secure the data generated by these devices. They discuss the importance of knowing which devices create important data and where that data is being stored. They also discuss IBM's release of a 150 terabyte tape, which showcases advancements in data storage capacity, and a TechTarget ESG survey about the use of the cloud in data protection. Tune in to this informative episode for insights on safeguarding your IoT data.…

The Backup Wrap-Up

1
Hybrid Cloud Storage: Back it up or not? 27:33

۲ years پیش27:33

27:33

In this episode of the Backup Wrap-Up, host W. Curtis Preston, also known as Mr. Backup, and his co-host Prasanna Malaiyandi, discuss the importance (or not) of backing up data in hybrid cloud storage systems, with a possibly surprising answer. The episode begins with backup-related news, followed by a deep dive into a single area or lesson that can help protect against ransomware. The news segment includes a story about Toyota, where multiple manufacturing plants shut down during their production process. Tune in for the answer to the question about backing up hybrid storage systems, and to learn more about data backup and disaster recovery systems.…

The Backup Wrap-Up

1
Restore it All is Changing Its Name 1:55

۲ years پیش1:55

1:55

This is a very short episode to explain our name change and a few other minor changes to the format. The show you know and love is getting better! (Prasanna and I aren't going anywhere.)

The Backup Wrap-Up

1
The Merging Worlds of Information Security and Data Protection 35:31

۲ years پیش35:31

35:31

In this episode of the Restore It All podcast, W. Curtis Preston, a.k.a. Mr. Backup, and Prasanna Malaiyandi are joined by Chris Groot and Stefan Voss from N-Able, a company specializing in backup, data protection and security systems. Nable focuses on serving the needs of managed service providers to deliver excellent service to small and medium-sized businesses. They discuss the importance of catering to the "Fortune 5 million," which includes businesses with 20 to 2000 employees, highlighting the significant role that small businesses play in our economy. Tune in to learn more about Nable's approach to the cloud data protection space and their goal of making backup admins indispensable.…

The Backup Wrap-Up

1
Why it's process, then people, then technology 35:30

۲ years پیش35:30

35:30

In this episode of Backup Central's Restore It All podcast, the host welcomes cyber expert Rick Mishka to discuss the three aspects of IT: process, people, and technology. They explore the misconception that a new piece of gear or software is always the solution to every problem, particularly in preventing data exfiltration. Rick also shares insights into his short-form podcast, Cyber Pros, where he covers cybersecurity topics in just nine minutes. Tune in to gain valuable perspectives on backup, DR, and data protection.…

The Backup Wrap-Up

1
The Unforeseen U-turn: Inside Microsoft 365's Backup Revolution 34:37

۲ years پیش34:37

34:37

In this episode of Restore it All, our hosts Curtis and Prasanna delve deep into the recent significant developments in the world of data backups, with a special spotlight on Microsoft 365's about-face on native user backups. They dissect Microsoft's sudden realization of its potential revenue streams and the ramifications of its new direction. The duo also discusses the intricacies of Microsoft's new backup APIs, sharing insights into the former approaches and the strategic changes aimed at enhancing backup efficiency. They traverse the landscapes of various vendors like AWS and Salesforce, drawing parallels and noting divergences in their backup strategies. Tune in as Curtis and Prasanna ponder the pros and cons of entrusting your backup with the same vendor, emphasizing the importance of not putting all eggs in one basket. The episode beckons listeners to contemplate crucial questions concerning data storage, protection, and ransomware attacks, urging for a meticulous evaluation of Microsoft's new offerings. As they navigate these shifts, the hosts can't help but say, "I told you so," emphasizing the dire need for backing up SaaS services. The conversation leaves listeners with pertinent questions and considerations, beckoning them to anticipate the forthcoming nuances in backup offerings from giants like Microsoft and Salesforce. Join us for an episode packed with expert analysis, predictions, and a little bit of gloating, as the world of data backup takes a turn no one saw coming but was perhaps desperately needed.…

The Backup Wrap-Up

1
Are password managers no longer an option? 39:37

۲ years پیش39:37

39:37

In this episode, we look at the latest Ransomware Trends Report from Veeam, which gives us a view into the sobering world of ransomware attacks and the critical lessons they teach us about cyber defense. Join W. Curtis Preston (Mr. Backup) and Prasanna Malaiyandi, as they break down the key insights from the report. We explore the ruthless tactics of ransomware operators, the eye-opening stats on recovery time, and the evolving strategies of cyber insurers. From the importance of robust password management and multi-factor authentication to the strategies for safeguarding your backup server, we lay out a battle plan to protect your digital fortress. Tune in to discover why ransomware isn't just a threat—it's a wake-up call for businesses everywhere to bolster their defenses and emerge stronger against the rising tide of cyber threats. Your data's future might just depend on it.…

The Backup Wrap-Up

1
Identity Orchestration: Simplifying Multi-Cloud Identity Management 49:51

۲ years پیش49:51

49:51

In this episode, W. Curtis Preston and Prasanna Malaiyandi are joined by Eric Olden, the CEO of Strata Identity. With over 25 years of experience in the cybersecurity industry, Eric sheds light on the concept of Identity Orchestration and how it addresses the complexities of modern identity management in multi-cloud environments. He discusses the evolution of technology consumption, the philosophy of "bought not sold," and the creation of a new product category in the world of identity management. Eric explains how Strata Identity's platform acts as an abstraction layer, allowing organizations to seamlessly integrate and switch between different identity providers without rewriting applications. He also shares insights on modernization, just-in-time provisioning, and the benefits of the open free IDQL standard. Don't miss this engaging discussion about identity orchestration and its role in simplifying the management of identities across diverse cloud ecosystems.…

The Backup Wrap-Up

1
Red team leader shares how to think like a hacker 1:04:35

۲ years پیش1:04:35

1:04:35

Our guest this week is a specialist at offensive cybersecurity; that is, they keep you safe by attacking you and showing you your vulnerabilities. They're a red team. We've got the leader of their red team, Duanne Laflotte, to help us understand how hackers think – and what we can do to stop them. He confirmed some of the recommendations we often make (Ahem: password managers good), but showed us some defenses aren't that helpful. A particularly relevant part to our backup audience is what he told us about the vulnerabilities of our backup system. At least one of them Mr. Backup had never thought of. Duanne is fun and scary all at the same time. I know this will be one of our top episodes this year.…

The Backup Wrap-Up

1
Blue team stories from the cyber attack trenches 57:48

۲ years پیش57:48

57:48

Nothing tells the story like a good story, right? This week we have Mike Saylor, the CEO of Black Swan, a cybersecurity company. Boy, has he been in the trenches. He tells some great stories about responding to cyber attacks. They're great stories and he's a great storyteller. We also learn about FBI Infragard, a partnership between the FBI and the private sector. We hope you enjoy the episode.…

The Backup Wrap-Up

1
Should you disclose your cyber attack? 55:15

۲ years پیش55:15

55:15

This week the SEC has made a new rule that publicly traded companies must disclose any cyber attacks within four days. What if you're not a publicly traded company in the US? Should you reveal what happened to you? We bring in a wireless cyber security expert, Scott Schober of Berkeley Varitronics Systems, to talk about this topic. Closely related is also what should you do when you personally make a big mistake. Should you tell your boss? What if you're a boss and someone makes a mistake? How should you respond? We get into all of this and more in the week's exciting episode.…

The Backup Wrap-Up

1
Backup security is abysmal, says backup security expert 45:53

۲ years پیش45:53

45:53

During this recording, Mr. Backup asked our guest how many backup systems that he had looked at had at least one critical security flaw, he said pretty much 100%. Holy. Cow. Doron Pinhas runs a company called Continuity Software, that does security assessments of storage and backup and recovery systems. They got the permission of some of their customers to anonymize and publish their findings, and the results were abysmal. (You can read the report yourself here .) He said it was extremely rare to find a backup environment that was properly configured from a security standpoint. He then went on to explain the kinds of things they look for, and how you can secure your storage and backup and recovery environments. He also explained how such environments are typically overlooked by most security scans! He said they have a lot of resources on their website to help you, and they also have automated tools that will ensure you stay secure once you zipped things up. If I were you, I'd check out those resources right now!…

The Backup Wrap-Up

1
Your backup product is probably lying to you 1:01:47

۲ years پیش1:01:47

1:01:47

Krista Macomber, analyst from the Futurum Group, joins us this week to talk about a number of things, but one thing really bubbled up to the top: co-opting of marketing terms. That is, it's probably using terms to describe their product, because they think you want to hear them. Two big ones these days are "air gapped" and "immutable." Krista and Mr. Backup talk about what these terms really mean – and whether or not your product should be using them to describe their product. You may not get any answers from this episode, but your darn sure will get some questions to back to your backup vendor with.…

The Backup Wrap-Up

1
Former Green Beret advises us on Cyber Security 1:02:54

۲ years پیش1:02:54

1:02:54

Today we are proud to have as our guest, Zach Fuller, a founding partner of the Silent Sector, a cybersecurity firm -- and a former Green Beret who served in combat. We talk a little about how his service made him the person he is today, and how it lead him ultimately into helping people protect their own data. We talk about his top few things he wishes people would do to secure their environments (in addition to Mr. Backup's usual suggestions of password management, MFA, and patch management). we found Zach a very engaging person, and we know you'll learn a lot.…

The Backup Wrap-Up

1
How to foster a culture of recovery in your organization 1:01:13

۲ years پیش1:01:13

1:01:13

Our guest this week (Jim Love from the Hashtag Trending podcast and IT World Canada) touched on something we thought was profound. He felt that some organizations had what he called a "culture of recovery," meaning that they took recovery into account in all aspects of the org. He explained how he fostered this in companies where he worked, and how you can do the same. We also covered generative AI, and he shared several other tips from his many years in the business. Learn the old ways!…

The Backup Wrap-Up

1
How to PROPERLY back up your iPhone (iCloud is not a backup!) 51:59

۲ years پیش51:59

51:59

iCloud is not a backup; it is a synchronization tool. If you delete things on your phone, it deletes them in iCloud. iCloud is not a backup. In fact, if you have storage optimization turned on, the high-resolution verion of your photos is stored in only one place. If you delete it, it's gone forever. Mr. Backup tries tries three different ways to back up your iPhone, and finally settled on idrive. iDrive was the only solution we found that worked for both iPhone and Android (including if you turned on optimized storage). If you'd like to try it, make sure to use the link below. Listeners to the podcast get 90% off their first year using the following link (We will also get a referral fee): https://www.idrive.com/idrive/o/p/backupcentral/partner90…

The Backup Wrap-Up

1
Cyber expert not happy with state of cybersecurity today 56:10

۲ years پیش56:10

56:10

This week we talk with Eric Jeffery, a cybersecurity SE and host of the Cyber Security Grey Beard podcast, and he is just a little miffed about how organizations are responding to cyber attacks today. It's not so much about how they respond to the attack itself; it's how they communicate what happened to the public – if at all. He's submitting what happened at the LA Unified School District as his case in point. He's a bit fired up, so this will be a fun one.…

The Backup Wrap-Up

1
How do you authenticate with all new hardware? 55:18

۲ years پیش55:18

55:18

Imagine you're a small business or household that just lost everything in a fire, and your phones, ipads, and laptops went up in flames too. Where do you start? You've got a cloud-based password manager (e.g. Dashlane, OnePassword, KeyPass) and MFA system (e.g. Google Authenticator, Authy). How do you authenticate yourself with these systems if you have all new hardware? That's what we're talking about in this episode. We reference this great previous episode about being prepared for disasters: https://www.backupcentral.com/how-to-prepare-for-an-emergency-at-home-and-work/…

The Backup Wrap-Up

1
You could lose access to iCloud account data forever! 42:24

۲ years پیش42:24

42:24

There was a shocking article by Joanna Stern of the Wall Street Journal about how you are a simple bar trick away from losing access to all your photos (and some money) forever. All they need to do is steal your iPhone after seeing you type in your passcode, and they can lock you out of your account forever. 1. This is why we back up stuff and 2. There is a way to stop this. I'm not yet sure how vulnerable Android folks are to the same problem. If I've piqued your interest, this is the episode for you. Here are two YouTube videos where the WSJ talks about this: https://www.youtube.com/watch?v=QUYODQB_2wQ https://www.youtube.com/watch?v=tCfb9Wizq9Q…

The Backup Wrap-Up

1
How to back up and recover a database (Backup to Basics series) 56:40

۲ years پیش56:40

56:40

Have we got a packed episode for you. This week in our continued Backup to Basics series, we dive deep into the various options for backing up and recovering databases, along with the pros and cons of each. Want to figure out the best way to back up your traditional or modern database? This is your episode. As usual, Mr. Backup and Prasanna also manage to make it fun. This is a great episode and we think you'll enjoy it.…

The Backup Wrap-Up

1
Flash expert schools Mr. Backup 1:02:38

۲ years پیش1:02:38

1:02:38

A few weeks ago, Mr. Backup (W. Curtis Preston) said he didn't understand why people used flash for backups. He said it was overkill. A few days later, Howard Marks of Vast (friend of the pod) took issue with that statement, and asked for the chance to defend Vast's title, so to speak. Howard is a friend of the pod and we were happy to say yes. We also take the opportunity to get an update on Vast, and discuss their data reduction techniques in more detail. Bonus points if you get the cover art reference.…

The Backup Wrap-Up

1
What are SIEM, SOAR, EDR, XDR? Are they available as a service? 47:27

۲ years پیش47:27

47:27

Are you doing all you can to stop ransomware attacks before they happen, or kill them the moment they show up? Have you looked into this and found yourself swimming in alphabet soup (SIEM, SOAR, EDR, XDR)? Have you looked at some of these tools and found them to be prohibitively expensive or too complex? This is the episode for you. We have Dez Rock, CEO of SIEMonster, a SIEM/SOAR/XDR as a service company. She helps us weed our way through these acronyms, and then tells us about how SIEMonster (pronounced sea-monster) is bringing this important technology to companies of all sizes.…

The Backup Wrap-Up

1
What can you learn from the LastPass hack? 55:51

۲ years پیش55:51

55:51

Last year LastPass suffered two hacks that left their customer's data exposed. What can you learn from this event, even if you're not a LastPass customer? We use this hack as an example of what your company should do (or not do) if it ever suffers such a hack. We also talk about password managers, and what this hack means to those who use them. You do use one, right? This is a great episode, chock full of information. We hope you enjoy it.…

The Backup Wrap-Up

1
Backing up databases, Part 1 (Backup to basics) 44:29

۲ years پیش44:29

44:29

It was a dark and stormy night in 1993 when paris (the database server) went down. It would be a night the new backup admin would never forget because he couldn't restore the database from backup. The only bright side of that very sad story is that it launched a career. Yes, that's the night W. Curtis Preston started his path toward Mr. Backup. Hear him tell the story in his own words, in the middle of the backup to basics series about backing up databases. Avoid the mistake that could have (but did not) cost him his job and enjoy a good episode while you're at it!…

The Backup Wrap-Up

1
What computers should you back up? (Backup to Basics Series) 52:35

۲ years پیش52:35

52:35

Are you backing up all the things you should be backing up? In this latest episode of our Backup to Basics series, Mr. Backup & Prasanna look at the list of the traditional things we think about backing up: servers, databases, laptops, mobile devices, file servers, virtualization servers, etc. The big question tackled in this episode is what of these things should you be backing up? Mr. Backup, of course, takes a pretty hard line about backup, but he may surprise you on some of his exceptions. We hope you enjoy the episode.…

The Backup Wrap-Up

1
Can you apply least privilege to private data? 55:55

۲ years پیش55:55

55:55

You know how we tell you to limit the amount of privilege each admin gets, in order to limit the blast radius if their account is compromised? What if you could apply that concept to applications that use private data to accomplish their task? We blindly give everything we have on each person to just about any app that needs anything. But if you had an app that only needs first name and email address, why not just give it that? And if it asks for more than that, what if you had a way to give it masked data, since it doesn't really need it anyway? That's how I would describe Sky Flow, a privacy as a service company, after interviewing its Head of Marketing, Sean Falconer. Fascinating new approach to the problem of personal data sprawl.…

The Backup Wrap-Up

1
Six vulnerabilities your password manager might have 1:02:27

۲ years پیش1:02:27

1:02:27

I was shocked to learn that my favorite password manager had a few known vulnerabilities, and you might be shocked too! We found this great research paper from the University of York, and invited one of the co-authors on to discuss it. Siamek Shahandasthi, an Associate Professor from the University of York, explained all the vulnerabilities discussed in the paper, and why each is important. I was able to verify that at least one is still found in my current password manager. How many are in yours? Let's pressure the companies to address these, shall we? Check out the paper yourself here: https://eprints.whiterose.ac.uk/158056/8/Revisiting_Security_Vulnerabilities_in_Commercial_Password_Managers_2.pdf…

The Backup Wrap-Up

1
What is deduplication and how does it work? (Backup to Basics series) 48:53

۲ years پیش48:53

48:53

In our latest episode of the Backup to Basics series, we talk about what I think is the most important invention in my career: deduplication. Without dedupe, much of what we do in backup and recovery, and disaster recovery, would simply not be possible. Without dedupe there really is no disk backup market; there is no cloud backup market. I'd be out of a job! What is dedupe, anyway, and how does it work? What are the different kinds of dedupe and does that matter? You should learn a lot about this important topic.…

The Backup Wrap-Up

1
Preparing an incident response plan for ransomware 49:08

۲ years پیش49:08

49:08

An incident response plan is the key to successfully surviving a ransomware attack, and it's a bit like Dramamine. The time to get one is too late to get one. @Vmiss (Melissa Palmer) joins us again to talk about this important topic. We talk about the important role cyber insurance companies can play in helping you find an IR team and helping you develop a plan. (They can actually force you to do so in order to get coverage.) @vmiss was a blast to talk to again, and we're sure you'll enjoy this episode.…

The Backup Wrap-Up

1
What to do with your network in a ransomware attack 1:00:50

۲ years پیش1:00:50

1:00:50

We have talked about this a lot on the pod, and now we have someone that can explain what you actually do with your network when you get a ransomware attack. It's Tom Hollingsworth from Gestalt IT, and we're excited to have him on the pod. Some of his recommendations of course, require some configuration in advance. We talk about VLANs, SEIM and access management tools, and why many networking admins are terrified of the "reject all" concept that would actually make your network much more resilient in an attack. There is some really good stuff in this episode.…

The Backup Wrap-Up

1
Could your backup system achieve Sheltered Harbor certification? 53:08

۲ years پیش53:08

53:08

Sheltered Harbor is a non-profit organization dedicated to making sure financial organizations are able to recover after a cyber attack. Even if you're not a financial institution, there is a lot to learn hear. They've done a lot of work to make this standard practical in the real world. If nothing else, you can review what they ask orgs to do and see if you can apply it to your own environment. We once again have Eric Bursley to guide us through the topic. Even Mr. Backup learned something!…

The Backup Wrap-Up

1
Do you need a managed security service provider (MSSP)? 1:01:07

۲ years پیش1:01:07

1:01:07

Today we're visited by Scott McCrady, the CEO of Solcyber, a leading managed security service provider. He says they're changing the model of how small and medium-sized companies secure their infrastructure against attacks, without any of the typical upfront cost or ongoing maintenance hassles of traditional methods. Have you tried securing your environment, only to suffer "alert fatigue?" Scott feels your pain and has fixed this by doing all of that as a service, which you pay for like a typical SaaS offering. Just a per-user fee per month - one SKU. It's a new way to secure your infrastructure.…

The Backup Wrap-Up

1
@vmiss warns about ransomware attacks on VMware 50:49

۲ years پیش50:49

50:49

How great is it to discuss your favorite topics, learn something new, and have a great time all at the same time? That's what this episode is like. @vmiss (AKA Melissa Palmer) came on the pod for the first time this week. I've read a lot of her content and tweets over the years, and it was great to finally put a face to the name. She knows her stuff when it comes to security, since she was actually working in it before she got into VMware. It was a great conversation I think you'll learn a lot from.…

The Backup Wrap-Up

1
Block ransomware from writing to your Windows Veeam backup server 45:29

۲ years پیش45:29

45:29

We've talked a bit on this podcast about ransomware groups targeting Windows-based backup servers, and Veeam specifically . There's a new product on the market targeted at this problem, and it's called Blocky for Veeam from Grau Data. Today we have the founder & CEO of Grau Data, Herbert Grau, and their head of North American operations, David Cerf. What we didn't know until recording this episode is that these are the same people that used to make the gigantic Grau tape libraries that is used covet back in the 90s! They got out of the hardware business and have been making software ever since. Blocky for Veeam is a new application of another battle-tested product. Fascinating story, and one that will have other applications in the future.…

The Backup Wrap-Up

1
Don't be like LastPass 39:49

۲ years پیش39:49

39:49

LastPass made some serious blunders: how they responded to the hack in August, code they created before August, and how they configured their backup system. All of that came to a head at the end of 2023 when the hackers from August used stolen credentials to download a backed up copy of customer information. Most of it was encrypted, but they still gained a lot of information. Many are calling for customers to leave the product. However, even if you're not a lastpass customer, there are lessons to be learned here. Learn those lessons and don't be like LastPass.…

The Backup Wrap-Up

1
Mr. Backup reflects on 30-year career 53:13

۲ years پیش53:13

53:13

Today (Jan 23) marks 30 years to the day that W. Curtis Preston joined the backup industry. Fresh out of the US Navy and wanting to make a name for himself, he joined MBNA, a 35-billion dollar credit card company as "the backup guy." Within seven years he would write the industry's first book dedicated to backup, and since that time, he's gone on to be the world's leading expert in backup and recovery. What were backups like in 1993? How have things changed over the years? And how did he apapt to all of those changes? Prasanna takes the lead as host for this episode, asking Curtis a number of very insightful questions. Be sure to join us for this very special episode.…

The Backup Wrap-Up

1
Protecting backups from ransomware (Backup to Basics) 46:40

۲ years پیش46:40

46:40

The latest in our Backup to Basics series is about making sure hackers don't delete, encrypt, or exfiltrate your backups as part of a ransomware attack. (Our Backup to Basics series reviews topics from Curtis' latest book Modern Data Protection, which you can download at druva.com/e-book .) We talk about how and why hackers are specifically targeting your backup system to either disable it or use it as a source for exfiltration. Then we talk about a number of things you can do to defend your backup system against these attacks. This is our most important episode in a while.…

The Backup Wrap-Up

1
Backup team completes two-year project in three months 51:31

۲ years پیش51:31

51:31

Hear the incredible story of Albert Uy , who was handed a two-year project that had already wasted 18 months. They told him he had four months to complete it. He looked at that timeline and told them there was only one way he could do, by switching horses in mid-stream. Not only did they finish it in time; they finished it early. Albert has also managed backup teams for many years, so before we cover this project story, we talk about backup has progressed over the years. We also talk about how much easier his job got once he started using Druva has his backup solution.…

The Backup Wrap-Up

1
Best of 2022 - Backups, Security, and Ransomware 28:02

۲ years پیش28:02

28:02

Nothing but the best for our listeners! Curtis and Prasanna review their favorite episodes from 2022, from the time Curtis had to restore Backup Central to the shocking outage at Rackspace ( which is still ongoing!). This is your chance to catch up on what you missed last year as we prepare for a new year! Here are links to all the episodes discussed. Happy New Year! Mr. Backup Forced to Restore Backup Central Restore Test Failed to Bad Documentation Security expert rips Okta for their response to hack How to prevent ransomware, slow its spread, and respond if you get it How to prepare for an emergency (at home and work) Backup practitioner tells stories from the trenches Top 5 security mistakes you're making in the cloud International lawyer discusses e-discovery in US & other countries Shocking RackSpace Hosted Exchange Ransomware Attack…

The Backup Wrap-Up

1
Shocking RackSpace Hosted Exchange Ransomware Attack 44:00

۲ years پیش44:00

44:00

Tomorrow marks two weeks from when the RackSpace outage started on Dec 2, 2022. They confirmed it was via a ransomware attack and it is not. going. well. We're going to do a deeper dive into this once it is all over, but this is a first-blush look at what is happening and RackSpace's reaction to it. When we recorded this episode, their reaction was not looking good. I'm sad to say it's gotten even worse. Check it out!…

The Backup Wrap-Up

1
Understanding Backup Levels (Backup to Basics Series) 37:17

۲ years پیش37:17

37:17

Ok, so maybe not the most interesting topic. ;) But we promise you, this episode has a great story that involves Mr. Backup being kidnapped by a client, basically because he had a backup level issue. Learn about full backups, incrementals, cumulative incrementals, differentials, numbered levels, tower of hanoi backups, and why all this matters. It turns out it matters a lot more these days for structured backups than filesystem backups, which have typically gone to an incremental forever setup.…

The Backup Wrap-Up

1
Risk Management Advice from an industry expert 38:13

۲ years پیش38:13

38:13

This episode we have Boris Agranovich, who has been a risk manager for decades, and speaks SIX languages (Russian, Ukrainian, Hebrew, Dutch, English, and Spanish). How amazing is that? He started the Global Risk Community, the largest online community for risk managers, and it's doing very well. We talk about the differences between what we do (as IT risk managers) and what he does, where he's managing risk for the entire organization. Fascinating guy with a unique perspective.…

The Backup Wrap-Up

1
What is archive and retrieve? (Backup to Basics) 44:34

۲ years پیش44:34

44:34

Archive is NOT backup, and hopefully this episode will help you understand how/why that is the case. In this continued romp through W. Curtis Preston's Modern Data Protection, we explore the definition of archive, and how different it is from backup. You should have no trouble understanding the difference between the two after listening to this episode. As usual, Mr. Backup fills in the definition with interesting stories of what happens when you confuse backup and archive. Enjoy!…

The Backup Wrap-Up

1
What is backup and restore? (Backup to Basics Series) 45:08

۳ years پیش45:08

45:08

As we continue our "Backup to Basics" series, we touch on one of the most important questions of all: what is backup and restore? (And how does it different than archive and retrieve?) The answer to these questions are both simple and nuanced. It's important to have a solid understanding of backup and restore in order to understand how archive is different. Reminder: You can download a complimentary copy of Mr. Backup's latest book, Modern Data Protection here: https://druva.com/ebook .…

The Backup Wrap-Up

1
Divining Requirements out of the Organization 39:43

۳ years پیش39:43

39:43

This episode follows the previous one in a very interesting way. We have a guest, Eric Bursley, whose job is to divine business and technical requirements from a vendor perspective at Presidio, an IT solutions provider. He consults with customers and helps them get from "I want" to "I need." This was a fascinating conversation that took a turn into (surprise) ransomware. Eric is a fan of the pod and knows his stuff. As mentioned in the podcast, here is a link to the music video that is the theme song of the podcast: https://www.youtube.com/watch?v=fPoE7nlgYe4 The episode where we meet the voice behind the song: https://player.captivate.fm/episode/b60b207b-2dfc-4b38-b5ea-1cd4c6231025…

The Backup Wrap-Up

1
Getting approval for a new backup design (Backup to Basics Series) 47:00

۳ years پیش47:00

47:00

We say it all the time: your backup requirements must be based on business/organizational needs. If you keep that mind, not only will your organization be better off, it'll be easier to get approval for the new backup system you want. This episode of our Backup to Basics series goes right to that core idea, and we get advice directly from one of our favorite guests: Jeff Rochlin. He is now the Head of Technical Operations at the LA Studio of Framestore, a visual effects company. In his 30+ year career he has designed and implemented dozens of systems (at least one of them with Mr. Backup). He shares with us his tips on how to design the system AND how to get it approved. If you'd like to see what Jeff and Curtis do for fun, check out their other podcast, The Things That Entertain Us.…

The Backup Wrap-Up

1
When to use public or private cloud AND how to protect it 42:47

۳ years پیش42:47

42:47

If you have sometimes wondered if your apps should be in a public cloud, private cloud, or in your own datacenter, have we got the episode for you. And we'll also talk about how to protect those apps regardless of where they reside. We looked hard for an unbiased cloud expert, and I think we hit gold. We found Sagi Brody, the CTO of Opti9, an MSP that supports both public and private clouds, as well as on-premises backup infrastructure! We talk extensively about which types of things are appropriate (from a cost and risk perspective) to go into the public cloud, private cloud, SaaS apps, and even your own datacenter. It was an informative and entertaining conversation that we're sure you will enjoy.…

The Backup Wrap-Up

1
Why do we even back up? (Backup to Basics Series) 39:34

۳ years پیش39:34

39:34

We get right to the heart of the matter in this next episode of our Backup to Basics series. (See what we did there?). Why do we even back up? It is expensive, time consuming, and no one seems to want to be in charge of it, so we do we even do it anyway. This episode is based on Chapter 1 of W. Curtis Preston's latest O'Reilly book, Modern Data Protection, which you can download for free courtesy of Curtis' employer, Druva . Curtis believes there are three categories of reasons: human disasters, mechanical failures, and natural disasters. We talk about the odds of each of these happening, and how that's changed over the years. The episode also starts with Mr. Backup telling the story of how he got into backup in the first place, as well as telling the story of the first time he lost data. It's the whole reason he ended up dedicating his career to backup, and he learned a lot of things from that failure. Here are the links to other episodes we discuss in this episode of the pod. Real Life Hurricane Disaster Recovery Story Disaster Recovery after a hurricane - a First Hand Account Stop Ransomware Attacks in Seconds . (Includes the Derecho story)…

The Backup Wrap-Up

1
International lawyer discusses e-discovery in US & other countries 45:11

۳ years پیش45:11

45:11

This week are we pleased to announce we have Joe Dehner, specialist in International Law, to discuss the legal side of e-discovery and all the things that go with it. For the first time on Restore it All, we have a lawyer discussing legal things! (Usually we just tell you we're not lawyers!) My favorite part was listening to him tell stories from actual cases that make the various points we discuss. I also enjoyed when we talk about the e-discovery boogey man, adverse inference. If you have heard me talk about this before, it's usually around the context of backup and archive – and how they are different! Hear it from the horse's mouth, so to speak.…

The Backup Wrap-Up

1
Your cyber insurance doesn't want to pay for your hack 38:40

۳ years پیش38:40

38:40

This is a trend that's happening around the globe, and the news we got from Lloyd's of London Insurance in August is just the latest example. They're looking to exclude payments for "catastropic" and "state-sponsored" attacks. We talk about what that means. We also discuss how a plaintiff lost a recent lawsuit against their insurance company, getting $100K when what they wanted was $600K. It was how their policy was written. We also talk about a new show (streaming on Peacock in the US) called "The Undeclared War" that is technically fictional but seems all too real. We finish up with a discussion of how we see the roll of cyber insurance in this scary world of ransomware. Saddle up and listen up!…

The Backup Wrap-Up

1
Learning lessons from the Uber and LA USD cyberattacks 41:31

۳ years پیش41:31

41:31

The Uber attack is huge. The initial penetration teaches about MFA, and how they were able to escalate their privileges from there is simply wrong, wrong, wrong. What can you learn from this? Well, we have a cybersecurity expert, and host of the Tech and Main podcast, on the pod this week to help us figure that out. We had planned to just talk about the Uber attack, but he also wanted to talk about what happened to the LA Unified School District. Do you have kids in school, or know someone employed in K-12 education? Shaun St. Hill makes a solid point or two about what they should be doing. All that and Curtis complaining about how much he spent on his vacation to Hawaii. Boo hoo, right?…

The Backup Wrap-Up

1
Top 5 security mistakes you're making in the cloud 43:16

۳ years پیش43:16

43:16

Cyber security attacks are everywhere, and they're definitely going after what you have running in your favorite hyperscaler. Today we are joined by Paul Hadgy, CEO of Horangi Security, a cyber security company specializing in securing your cloud infrastructure. We talk about a number of things, but at one point, Mr. Backup asked him what the thought was the five biggest security mistakes people make when building out their cloud infrastructure. He gave us a pretty good list, and then talked about how they're able to secure it AND make sure you're properly utilizing it. (They can tell you resources you're paying for that you shouldn't be!) Great interview with Paul.…

The Backup Wrap-Up

1
How to back up Jira 45:27

۳ years پیش45:27

45:27

Jira is yet another service that could be at the center of your organization, and losing the data stored in there could cost you a lot. Did you know it doesn't even have an audit trail for many things? Not only can you lose data, you might not know what was deleted or who did it! We are joined this week from two representatives from Revyz, a new service to back up Jira. They talk about what to back up and what you can do for free, along with what functionality that misses out on. They then explain how their new service works and what it offers. Great episode where I learned a lot. Even if you don't use Jira, you will find a lot of useful info in this episode.…

The Backup Wrap-Up

1
What are RTO and RPO & how do they drive backup design? 41:54

۳ years پیش41:54

41:54

If you don't meet your company's Recovery time objective (RTO) and Recovery Point Objective with your backup design, nothing else matters. Seriously. No one cares if you can back up – only that you can restore in a timeframe they consider reasonable. The only way that's going to happen is if you agree to these times UPFRONT. In this episode in our new back to basics series, we'll jump right into this extremely important topic. We'll explain what RTO & RPO are, what recovery time and recovery point actual are, and how they relate to RTO & RPO. We'll also explain how to get your company to agree to them.…

The Backup Wrap-Up

1
Why you need a password manager 47:36

۳ years پیش47:36

47:36

Why don't you have a password manager already? Our guest this week, Chris Hayner, blogger at hayner.net and host of the Chaos Lever podcast, wrote a great blog called Yes, you need a password manager. "Yes, You Do Need A Password Manager, Brett. Yes You Do!" Both Prasanna and Curtis DO have password managers, so he's preaching to the choir. But if you'd like to hear the argument for why you need one, and arguments against many of the usual excuses for not having one, then this is the episode you need. And, as usual, we have a little fun along the way.…

The Backup Wrap-Up

1
Datacore becomes leader in container-attached storage 43:01

۳ years پیش43:01

43:01

Datacore has been one of the storage industry's best-kept secrets for a long time, quietly growing a dedicated customer base in Fort Lauderdale. Their CEO, Dave Zabrowski, joins us on this episode to explain their background, and tells us about how their technology and some savvy business decisions resulted in them owning Open EBS, the most popular container-attached storage platform. Datacore is a software-defined storage product that virtualizing pretty much any kind of storage into any other kind of storage, giving you exactly what you need, without vendor lock-in. Join us on this podcast to hear what's special about Datacore.…

The Backup Wrap-Up

1
M-disc founder explains how it keeps data for 1000 years 45:22

۳ years پیش45:22

45:22

This week we have Barry Lunt, one of two founders of Milleniata, the creators of M-Disc. The company may be gone, but the format lives on. Most modern DVD and Blu-Ray drives can write to M-Disc, and Verbatim still sells it. Barry explains to us why they decided to make M-Disc, and why it's different than any other optical product. He also offers a shocker: a study done many years ago that shows that recordable DVDs are nowhere near as good at holding onto data as they claim. There is a lot of good info in this episode. Hope you like it.…

The Backup Wrap-Up

1
The industry's first $10M data resiliency guarantee (From Druva) 41:58

۳ years پیش41:58

41:58

Druva's new data resiliency guarantee covers more than any other guarantee in the data protection/data resilience segment. It also was written with no silly exclusions (like some other guarantees) that are simply there to keep from having to pay anyone. It requires only a certain service level and that the customer follows Druva's best practices. It protects against the five areas of risk, including cyber, human, application, operational, and environmental. It includes SLAs for uptime, backup success, restore success, immutability, and confidentiality. This week we have Stephen Manley, Druva's CTO, to tell us about this new guarantee. Check out the new guarantee here: https://www.druva.com/resilience-guarantee/…

The Backup Wrap-Up

1
Warshipping: The latest trick in the bad actor's playbook 37:42

۳ years پیش37:42

37:42

Warshipping is yet another way hackers are taking advantage of how the pandemic has changed the workplace. Did you know you could be hacked by UPS, Fedex, or the postal service? Warshipping is shipping a self-powered device in a package so that it arrives at your office and is left unattended. (It's sent to someone working from home.) The device then sits there, sniffing the wifi, and eventually cracking your WiFi network and attempting to steal secrets. This isn't science fiction; it's reality. It's enabled by so much remote work, and by technology such as the Raspberry Pi. Read all about it in this article in DarkReading.com: https://www.darkreading.com/edge-articles/i-built-a-cheap-warshipping-device-in-just-three-hours-and-so-can-you In this episode, Prasanna and Curtis discuss what this is, how it works, and what you need to do to stop this new attack vector.…

The Backup Wrap-Up

1
Really inexpensive AND secure storage systems for backup 51:35

۳ years پیش51:35

51:35

If you're one of those people that look at typical storage offerings for backup and recovery and say, "I can't afford this," you're not alone. A lot of ready-to-go storage solutions can get very expensive very quickly. Our guest this week (Erik Ableson from Infrageeks.com ) ran into this a lot with his small-government customers and SMBs in France, and knew he had to get creative. He wanted to build a hardened Linux repository for Veeam backups, and he also wanted an S3 object storage system to serve as the second copy. His customers couldn't easily buy cloud services, so he needed something they could own and manage themselves. (He explains the unique reason they can't buy cloud services.) He built the Linux repository using a Synology box to run both the storage and a Linux VM, and he built the object storage system out of the free version of MinIO and what I will call a very unique build of hardware. Learn the details in this fun episode of a real practitioner's solution to a unique and challenging problem.…

The Backup Wrap-Up

1
Using and backing up Hammerspace's global filesystem 35:58

۳ years پیش35:58

35:58

Hammerspace offers a global filesystem that creates a single namespace across multiple storage systems and cloud storage providers. Hammerspace's name is inspired by the name for the magical place that cartoon characters get them from (e.g. Bugs Bunny pulling a huge hammer out of his pocket). They've taken a different approach to a global filesystem, using metadata to significantly minimize actual data movement and increase performance. Molly Presley, their SVP of Marketing (and friend of the pod!), explains the interesting use cases for this technology.…

The Backup Wrap-Up

1
The Five Most Dangerous New Cyber Attack Techniques (A review of the RSA Keynote) 40:54

۳ years پیش40:54

40:54

2022 is a new world in the cyber attack space, and Katie Nickels, SANS instructor, and director of intelligence at threat detection vendor Red Canary, describes the top five new attack they are seeing in the space. Spoiler alert: one of them is attacks against backups! Learn from an expert as we discuss the top five attacks they are seeing right now. We talk about living off the cloud, MFA exploits, an increase in nation-state hackers, the increased use of stalkerware, and YES: attacks against backup infrastructure. We discuss each of these in this important episode of Restore it All!…

The Backup Wrap-Up

1
Is M-Disc the ultimate archive medium for SMBs and home users? 46:50

۳ years پیش46:50

46:50

This week we talk about this exciting "new" medium for archiving data that is especially attractive to SMBs and home users. It's an optical disc that looks like a DVD and is readable in all Blu-Ray drives, but underneath it's something very different. If you haven't heard of it, then you're in luck! Thanks to Daniel Rosehill, backup anorak and friend of the show, we're going to talk about it – and its competitors on this week's episode! We discuss the good and bad about using all of the following for archiving: paper, SSD, disk, tape, DVD, Blu-Ray, ending with M-Disc. Learn what's wrong with these other mediums, and what's so great about this one in another fun episode of Restore it All!…

The Backup Wrap-Up

1
Backup practitioner tells stories from the trenches 47:45

۳ years پیش47:45

47:45

Someone that knew Bill Gates when he was a boy in on the podcast this week, although we only talk about Bill Gates for a moment. He has 30+ years in backup experience and tells us what it's been like to adapt to all of the backup changes over the years. His first backup was to punch cards and punch tape, and he was in the same Boy Scout troop as Bill Gates. Fans of the podcast know his name already, as it comes up randomly on the show as a friend of Curtis. But this is the first time Stuart Liddle has graced us with his presence. Like Mr. Backup, his career starts with a data loss story that actually involved people having to re-enter data. We discuss a lot of configuring and running backups, including deciding on retention periods, treating all backups the same (or not), virtual tape libraries and other dedupe systems, and how important a change management data database (CMDB) is. We also talk about the danger of becoming entrenched in a specialty like backup, knowing only one specialty or product. We talk about how it's not good for you or your company. Finally we talk about the different way people are using the cloud today for IT and backup, and how that affects cost. Curtis and Prasanna use a great analogy that helps it make sense. This week's episode is fully of useful information.…

The Backup Wrap-Up

1
Just do something! (about your security and your backups) 47:05

۳ years پیش47:05

47:05

Today we are joined by security expert and host of the Secure Talk podcast , Mark Shriner, to discuss information security. (Make sure to check out his podcast here: http://www.securetalkpodcast.com/) We talk about it from a personal perspective, as well as for organizations. Mark, Curtis, and Prasanna talk about what are the bare minimum things you should be doing as an individual to protect your personal information and data, both from a security and backup perspective. We then move on to talking about it from a company perspective, and how very important things like MFA (while good) do not solve everything, and then we talk about many other things you could be doing. Then there was the moment that created the title of the podcast, where Prasanna disagreed with Curtis – but not quite. When it comes to information security and data protection (and many things in life), perfect is the enemy of good. Try not to be overwhelmed with all the things you could or should be doing; just pick something and do something. Something is always better than nothing when it comes to these areas. This episode is jam-packed with good information you won't want to miss.…

The Backup Wrap-Up

1
Seven reasons why your restore may slower than your backup 47:26

۳ years پیش47:26

47:26

So many people are surprised when their restore is slower than their backup. You shouldn't be, as it's quite common. The good news is there are things you can do to make it faster – if you know them in advance. W. Curtis Preston (Mr. Backup) and Prasanna Malaiyandi tackle the seven reasons why your restore may be slower than your backup. Topics covered include RAID penalties, tape issues, database concerns, and others. You'll walk away knowing what to do in order to find out how slow your restores are – and how to fix them. This podcast is packed with good info! (And the death of a USB hub.)…

The Backup Wrap-Up

1
Data protection warrior explains LTO & RDX 1:30:50

۳ years پیش1:30:50

1:30:50

Pat Mayock is a Data Protection Warrior for HPE, and he helped us to understand where he thinks LTO & RDX (a removable disk technology) sit in the market. He explains how much tape is used today in enterprise and cloud environments, especially in the public cloud that so many think is a tapeless world. He says the cloud vendors are some of LTO's biggest customers! We talk about what LTO is good at, what it's not so good at, and what that means for how you should use it. Then we shift gears to talk about RDX, a removable disk product that has been around for roughly 15 years. It consists of a docking station and a disk-based cartridge that is built to kind of resemble a tape! Each cartridge contains a single disk drive that you can use very much like you would use a tape, except it appears as a drive letter (mounted filesystem) versus a tape drive. He explains what its target market is and how it meets a niche in the removable storage market in between removable USB disks and a standalone LTO tape drive. This is a fascinating episode you won't want to miss.…

The Backup Wrap-Up

1
Top seven things you must stop doing with your backups 48:39

۳ years پیش48:39

48:39

This whole episode is a Mr. Backup rant, where he talks about things that people should really stop doing with their backup systems, starting with backing up directly to tape. There is a place for tape, but it is NOT at the front end of the backup system. Curtis and Prasanna passionately discuss and explain several relics of the ways we used to do things, and why they no longer make sense. Another one is repeated full backups - synthetic or otherwise. Many of them can be addressed by just changing how you use your backup product, but a few of them may cause you to think about making a change. (Hint: if your backup product has been around for more than 20 years, it probably can't get away from some of the relics of the past.)…

The Backup Wrap-Up

1
How to prepare for an emergency (at home and work) 47:28

۳ years پیش47:28

47:28

This week we are joined by emergency preparedness expert and prolific author and speaker, Virginia Nicols, webmaster of EmergencyPlanGuide.org. We talk about why and how to prepare for a disaster/emergency in your personal life, as well as how to do it for a small business. This is a bit different than our usual episode, as there is very little talk about backup and recovery. We talk about where to start when assessing what to do, and what steps you can take right away to prepare. Virginia is extremely knowledgeable on the subject and we learned a lot. You will too!…

The Backup Wrap-Up

1
Snorkel42, security expert from reddit, explains his security cadence series 54:00

۳ years پیش54:00

54:00

If you liked last week's episode where we talked about this "so let's talk about ransomware" series on reddit, you'll love this week. We have the author, Snorkel42, to talk about the origins behind the security cadence series, and why he decided to finally write some on ransomware. (He explains that everything he talks about his ransomware, but he admits he's been "Mr. Myagi'ing" it for a while.). This guy knows his stuff, and this is the second time he has been on the podcast. He's knowledgeable and entertaining. One of those rare combinations. This is a great episode you will not want to miss. Here are the three posts: https://www.reddit.com/r/sysadmin/comments/tdvbp4/security_cadence_okay_fine_lets_talk_ransomware/ https://www.reddit.com/r/SecurityCadence/comments/tedapy/security_cadence_ransomware_part_2_actions_on/ https://www.reddit.com/r/SecurityCadence/comments/tfm927/security_cadence_ransomware_part_3_the_worst_case/…

The Backup Wrap-Up

1
How to prevent ransomware, slow its spread, and respond if you get it 39:03

۳ years پیش39:03

39:03

This week, Prasanna and Mr. Backup (W. Curtis Preston) review a series of posts made by Snorkel42, who previously appeared on this podcast in the episode called "Security expert rips Okta for their response to hack." Things were recorded out of order, so this is the episode where we discovered him on Reddit, and tried our best to distill several thousand words into about 30 mins of advice on how to protect against ransomware. We talk about how to prevent getting it in the first place, how to limit its damage if you do get it, and how to respond and restore your data once that happens. There is a ton of really good advice here, so check it out! Here are the three posts: https://www.reddit.com/r/sysadmin/comments/tdvbp4/security_cadence_okay_fine_lets_talk_ransomware/ https://www.reddit.com/r/SecurityCadence/comments/tedapy/security_cadence_ransomware_part_2_actions_on/ https://www.reddit.com/r/SecurityCadence/comments/tfm927/security_cadence_ransomware_part_3_the_worst_case/…

The Backup Wrap-Up

1
Vast Data really does appear to be "vast" 1:00:41

۳ years پیش1:00:41

1:00:41

Vast is a massively-scalable storage system designed around multiple pieces of technology that weren't available just a few years ago (e.g. NVMe, Storage class memory, QLC) that offers both file and object functionality, immutable snapshots, and integration with the cloud to address the "smoking hole" problem. Their typical sale (of which they've made many) is north of $1 million, and they have many exabytes of disk in the wild. It's a scale-out storage system without all the typical East-West traffic such systems have. We do our best to poke holes in their offering, but Howard Marks goes toe-to-toe quite well. This one went a little long (one hour) but we truly were fascinated with the Vast story Howard was telling.…

The Backup Wrap-Up

1
A look inside the Conti ransomware group 43:13

۳ years پیش43:13

43:13

This episode is a unique look inside the Conti ransomware group, courtesy of a four-part series from Krebs on Security. We review the interesting takeaways from Brian Kreb's series of over 12,000-words from quite a bit of research. The series was inspired by a hack of Conti that resulted in a traunch of internal documents being made public. This gives a unique view into how the organization thinks, how it is laid out just like any other business, the weapons it uses to spread ransomware, and its attempts to branch out to other areas of cybercrime. If you enjoy the episode, be sure to check out the articles that inspired it: https://krebsonsecurity.com/2022/03/conti-ransomware-group-diaries-part-i-evasion https://krebsonsecurity.com/2022/03/conti-ransomware-group-diaries-part-ii-the-office https://krebsonsecurity.com/2022/03/conti-ransomware-group-diaries-part-iii-weaponry https://krebsonsecurity.com/2022/03/conti-ransomware-group-diaries-part-iv-cryptocrime…

The Backup Wrap-Up

1
Backup is evil (or at least how many people do it is) 48:52

۳ years پیش48:52

48:52

This week we are joined by John "Ricky" Martin, Director of Strategy at NetApp (and former owner of a tape recovery business), to talk about his paper that declares that backup is fundamentally evil and done in an unintelligent way. Mr. Backup wasn't sure how this one was going to go, and there were at least one or two arguments along the way. No blows were thrown, though. We definitely talk about what a tape recovery business is, and what it was like to do that. We also talk about tape backup, full backups, multiplexing, tape handling, and other elements of how backup is still done today by many people. It's a fun episode where you should learn a lot.…

The Backup Wrap-Up

1
Security expert rips Okta for their response to hack 34:01

۳ years پیش34:01

34:01

We have none other than Snorkel42 from Reddit on the podcast today. He has 20 years experience in InfoSec, and is a prolific writer on Reddit under the handle Snorkel42. (Check out his posts here: https://www.reddit.com/user/snorkel42/). (We will not be using his given name during the recording.). He thinks Okta managed to turn a mole hill into a mountain by incorrectly handling the hack that happened in January – that we just learned about last week. That's right, we just found out about a hack that actually happened in January! We dive deep into what happened, what it means, and how the worst problem of all is how Okta responded to it. Our expert says he no longer trusts Okta, and gives advice to customers on what to do next. This is a very timely episode that you will really enjoy – unless you're an Okta customer or employee.…

The Backup Wrap-Up

1
Restore test fails due to bad documentation 46:06

۳ years پیش46:06

46:06

Gary Williams tells a great story about earlier in his career that taught him the value of testing backups and updating documentation. He explains how he thought his backups were fine, until a "new guy" came onto the scene and dared to ask the question, "When was the last time you tested your backups?" As Gary explains, sometimes new people have the best perspective. They let him do the first test, and .... it failed spectacularly! It all came down to the documentation they were so proud of. Hear Gary's story and learn from his mistake – one that defined his career. (Mr. Backup also tells the story that defined his career as well!)…

The Backup Wrap-Up

1
Should you backup SaaS with BaaS? 35:37

۳ years پیش35:37

35:37

When you back up your SaaS apps (because you know you are supposed to), should you back them up to a SaaS service or on on-premises backup system? After defining what SaaS is and isn't, Prasanna and Curtis discuss this important question. First they look at how sizing a SaaS system for backup is different than when you do it in a datacenter, and how that creates challenges for backup design. Does it make sense to use on-premises backup to backup a cloud resource like SaaS?…

The Backup Wrap-Up

1
Top 10 Ransomware Attacks of 2021 33:50

۳ years پیش33:50

33:50

Learn from others' mistakes by reviewing last year's worst ransomware attacks with Mr. Backup and Prasanna Malaiyandi. Listen to them review the 10 worst attacks from 2021, then discuss lessons learned: Colonial Pipeline, BrennTag, Acer, JBS, Quanta, NBA,AXA, CNA, CD Projekt, and Kaseya. Then they discuss the trends they see, and the lessons we can all learn from these horrible attacks.…

The Backup Wrap-Up

1
Mr. Backup takes on reddit about Microsoft 365 backup 40:06

۳ years پیش40:06

40:06

W. Curtis Preston (Mr. Backup) and Prasanna Malaiyandi weigh in on a reddit thread that started with a simple question from a user. He has MSPs trying to sell him a solution to back up Microsoft 365, and he's wondering if that's even necessary. As usual on reddit, there are many opinions. Mr. Backup debates the various points being made by the anit-backup crowd, including an article arguing the same point. We start with an overview of why it's important, then we take on the various arguments used to support not backing it up. We talk about how retention policies are not backup, and why. Even retention lock doesn't help, and neither do lagged copies of Exchange Online. We also talk about how the e-discovery tool is NOT a restore tool and will not give you what you're looking for. Finally, we talk about the idea that backup tools can't do DR for Exchange online, and how that is used to bash them as well. Great discussion on this one.…

The Backup Wrap-Up

1
Mr. Backup Forced to Restore BackupCentral.com! 49:29

۳ years پیش49:29

49:29

On this week's episode of Backup Central's Restore it All, Mr. Backup himself becomes the guest, while Prasanna Malaiyandi takes over as host. W. Curtis Preston explains the backup configuration of the website behind the Restore it All podcast, and how bit rot caused him to have to restore part of it. We talk about bit rot, the 3-2-1 rule, off-site backups, backups stored in S3 and Google Drive, and what it's like to restore part of a MySQL database. Luckily, the folks at LiquidWeb were very helpful. Watch Curtis explain how practices what he preaches over at BackupCentral.com. If you want to watch the video version of this episode, it's here: https://www.youtube.com/watch?v=I3285etiYBs…

The Backup Wrap-Up

1
Should DR/backup folks report to the security team? 1:08:03

۳ years پیش1:08:03

1:08:03

This is a response to Tom Hollingsworth's (@networkingnerd) video "Disaster Recovery is a Security Function," found here: https://gestaltit.com/tomversations/tom/disaster-recovery-is-a-security-function-tomversations-episode-25/. I respectfully disagree w/Tom's assertions in his video, and decided to use this as the first episode I'm going to publish a video version of. You can listen to the podcast on all the usual podcast channels, or watch the video version on youtube here: https://youtu.be/ym_ibNWVjgA Tom said that backup and security are very closely related, and suggested that if we reported to the same team, we could perhaps accomplish more together. While I understand the point he is making, I disagree with it, and Prasanna and I discuss it on this episode. We believe Tom's opinion comes from an outdated concept of how security works in backup systems; we haven't worked like that in quite some time. I explain how modern backup systems work from a security perspective, then talk about the idea of backup folks reporting to security folks. I think it's a bad idea for several reasons.…

The Backup Wrap-Up

1
What Can We Learn From University of Kyoto Losing 77 TB of Research Data? 53:12

۳ years پیش53:12

53:12

This week's episode is about an incident that happened at the University of Kyoto, Japan, where they lost 77 TB of research data forever. What can we learn from what happened to them? First we discuss the concept of "we can't afford backup," that seems to be prevalent in a lot of universities and research institutions. We then ask and answer the question of whether or not it is every OK to not backup data, along with whose responsibility is it? We pause the recording for what appears at first to be a spam call, but you'll have to listen to hear that. We talk about what happened there, including a letter from HPE apologizing for what happened. Kudos to HPE for that. We also discuss a story from my very first week on the job in 1993; it's not pretty.…

The Backup Wrap-Up

1
Free backup tools for MySQL & MongoDB explained by author of Learning MySQL 58:27

۳ years پیش58:27

58:27

Vinicius "Vinny" Grippa, the co-author of O'Reilly's Learning MySQL (now in its second edition) talks MySQL and MongoDB, as well as that all-important topic of how to back them up! We first learn a little bit about Percona, where Vinny works, as they consult in the database space. We then discussed a hot topic from Curtis, which is this idea of companies that say they don't want an IT department. We then discuss the book, Learning MySQL 2nd edition, and Vinny's top 3 performance suggestions for MySQL, including a discussion about the differences between MyISAM and InnoDB tables. We then discuss the typical ways people back up MySQL and MongoDB, followed by a discussion of two free tools that Percona makes available: Xtrabackup and PerconaBackup for MongoDB. It is a fascinating discussion you won't want to miss.…

The Backup Wrap-Up

1
Happy Data Privacy Day! 40:59

۳ years پیش40:59

40:59

This week we celebrate Data Privacy Day, which is an international event that occurs every year on 28 January. According to its website, "The purpose of Data Privacy Day is to raise awareness and promote privacy and data protection best practices. It is currently observed in the United States, Canada, Nigeria, Israel and 47 European countries." Prasanna and Curtis discuss the latest in privacy practices and regulations, drawing on Prasanna's new experience protecting the privacy of Zoom's customers. We talk about the difference between PII and Personal Data, different regulations around the world, and some new tech features you can use to protect your privacy. We also discuss a few gotchas out there, such as Verizon's new system that they require you to opt out of! Happy Data Privacy Day, everyone!…

The Backup Wrap-Up

1
Does K8s still need DR? O'Reilly K8s Author On the Hot Seat! 57:54

۳ years پیش57:54

57:54

Things got a little tense on this week's podcast when James Strong (@strongjz, Co-Author of O'Reilly's Networking & Kubernetes) hinted at DR being a thing of the past with K8s. Mr. Backups was having none of that. No blows were thrown, mostly because it was all online, but it was a really good conversation that K8s and DR enthusiasts alike will find interesting. We also cover the new book, Networking and Kubernetes, by James Strong and Vallery Lancey, including why the decided to write it, and what it covers. We talk about monitoring K8s networking, and James uses at least 25 acronyms that may be new to some listeners. Don't worry: we make him explain all of them.…

The Backup Wrap-Up

1
Resiliency expert reviews Major Facebook Outage 56:08

۳ years پیش56:08

56:08

Bob Plankers, resiliency specialist from VMware, joins us on this week's podcast, as we examine last year's major Facebook outage that took out Facebook, WhatsApp, and Instagram all at once. We discuss what we believe happened, just how bad it got, and our thoughts as to what we can learn from this huge outage. This isn't schadenfreude, and we acknowledge that we are Monday morning quarterbacking. It's an attempt to LEARN from the misfortunes of others – not to take joy in them. Solid discussion with @plankers.…

The Backup Wrap-Up

1
Remembering the Best and Worst of 2021 58:59

۳ years پیش58:59

58:59

On this first business day of 2022, let’s take a look back at the year that was. It was, of course, another year of COVID. In fact, Curtis contracted COVID right at the end, despite being boosted. This is also the year of the OVH fire that we talked about for three episodes: https://www.backupcentral.com/datacenter-manager-dan-frith-discusses-the-ovh-fire-restore-it-all-podcast-105/ https://www.backupcentral.com/how-do-you-prove-your-backup-service-is-real-restore-it-all-podcast-106/ https://www.backupcentral.com/ovhs-backup-service-didnt-work-restore-it-all-podcast-107/ We think our most interesting episode of the year goes to Paul VanDyke from Kodiak Island, who deleted his whole environment and then tested his backups: https://www.backupcentral.com/it-admin-deletes-entire-datacenter-then-tests-his-backups-restore-it-all-podcast-135/ We even had a barbecue episode. No backups, just beef and BBQ. https://www.backupcentral.com/no-backups-just-beef-bbq-restore-it-all-bonus-episode/ Prasanna said he learned a lot about tape this year from these three episodes: https://www.backupcentral.com/tape-drive-designer-schools-mr-backup-on-tape-restore-it-all-podcast-111/ https://www.backupcentral.com/deep-dive-into-why-tape-still-has-a-future-in-storage-restore-it-all-podcast-129/ https://www.backupcentral.com/fujifilm-tape-evangelist-explains-past-present-future-of-tape-lto-restore-it-all-podcast-132/ We think our best “get” was Peter Krogh, who talked about how he coined the term “3-2-1 Rule” while writing the first edition of The DAM Book: Digital Asset Management for Photographers. https://www.backupcentral.com/peter-krogh-who-coined-the-3-2-1-rule-on-our-podcast-restore-it-all-podcast-131/ This led to a brief discussion about solar flares, where I mention a talk I watched by Intel. This is a link to that talk: https://techfieldday.com/event/eicd16/ We also had two Druva competitors on this year, Veeam and HYCU. https://www.backupcentral.com/dave-russell-answers-our-questions-about-veeam-restore-it-all-podcast-104/ https://www.backupcentral.com/veeam-reps-explain-defense-against-conti-ransomware-restore-it-all-podcast-127/ https://www.backupcentral.com/hycu-vp-explains-their-service-to-mr-backup-2/ The big winner of the year was ransomware. We talked about it a lot: https://www.backupcentral.com/ransomware-victim-tells-his-story-restore-it-all-podcast-96/ https://www.backupcentral.com/is-entity-level-encryption-the-answer-to-exfiltration-ransomware-restore-it-all-podast-119/ https://www.backupcentral.com/protecting-your-network-from-ransomware-restore-it-all-podcast-122/ https://www.backupcentral.com/restoring-quickly-from-a-ransomare-attack-with-a-long-dwell-time-restore-it-all-podcast-123/ https://www.backupcentral.com/veeam-reps-explain-defense-against-conti-ransomware-restore-it-all-podcast-127/ Curtis this everyone should be looking into an intelligent DDI (DNS, DHCP, IP management) system that will spot (and stop) ransomware when it tries to reach out to its command and control servers. https://www.backupcentral.com/stop-ransomware-in-its-tracks-with-dns-dhcp-ipam-restore-it-all-podcast-87/ You also need to monitor your bandwidth to look for exfiltration: https://www.backupcentral.com/securing-speeding-up-network-traffic/ https://www.backupcentral.com/stop-ransomware-attacks-in-seconds-restore-it-all-podcast-126/ Finally, we talked a little about the book, and the upcoming 2022. https://www.backupcentral.com/why-you-need-a-copy-of-modern-data-protection-restore-it-all-podcast-110/ Happy New Year, everyone! Here’s to a better 2022!…

The Backup Wrap-Up

1
IT Admin deletes entire datacenter THEN tests his backups! 58:40

۳ years پیش58:40

58:40

This week’s guest tells the most incredible story we’ve ever had on the podcast. We’ve had ransomware restores, disaster recoveries after a hurricane, but we’ve never had someone who deleted their entire computing environment and then restored it using their backups. (Backups that had never been tested to this degree, BTW.) Paul VanDyke is the IT Supervisor at the Kodiak Island Borough in Alaska, which is the second largest island in the US and has to satisfy its backup and DR needs while staying on the island. Cloud resources are not a possibility due to bandwidth concerns, so he’s doing things “old school.” We first talk about the kinds of things they are protecting from, including tsunamis, fires, and strong winds. They are primarily based on tape, and for DR they store copies of all backups in a nearby safe. We discussed ways they could improve their resilience, such as shipping some tapes to a location on the mainland. But the highlight of this episode is the story of when Paul intentionally destroyed his entire environment and then tested his backup system! He learned many valuable lessons, starting with “don’t ever do that again!” Luckily, his test was successful, albeit not without some challenges. He wiped the storage arrays on five servers: two domain controllers, an email server, a file server, and an application server and then restored them. (He had his reasons for doing it this way, which he goes into in the podcast.) One big thing he learned was how restores are often slower than backups. So he prioritized critical apps (e.g. email, fileserver, logins) and got them up by Monday morning. Then it took him a few more days to get the application server up and running due to a more complicated restore. We have a really good discussion on how Paul could have done things better, including a really good idea that Prasanna came up with it. Curtis also tells a similar story about the first time he “tested” backups when he actually needed them, versus doing it in advance. We cover a number of topics and questions on this podcast: What was an Exabyte Mammoth (M2) tape drive? What is a helical scan tape drive? What is multiplexing? Why can restores be slower than backups? What happens when you rebuild a RAID array? Should you have a post-mortem after a large incident? How important is recovery testing? How important is it to set expectations in IT, especially when it comes to recovery times?…

The Backup Wrap-Up

1
ZFS filesystem in the cloud – just for your backups 1:04:11

۳ years پیش1:04:11

1:04:11

The founder of rsync.net, John Kozubik, joins us on the podcast this week. It's a unique offering: a ZFS filesystem running in a private cloud – accessible only via SSH – that is designed just for sending your backup data to. They support anything that can run over SSH. Use rsync, scp, etc. to copy your data unencrypted, or something like restic, duplicity, or borg, if you want your backups to be encrypted. (All backups are encrypted in flight, of course, because they are all over SSH.). The servers are completely locked down except for the SSH port, so they're about as secure as they can be for what they are. You can configure ssh to behave the way you want it (e.g. passphrase, MFA, etc.), and the ZFS filesystem automatically creates daily snapshots of the backups you send there. (More complicated schedules can also be created.) You pay by the gigabyte ($.025/GB/mth) for the size of the ZFS filesystem and its associated snapshots, but they urge you to NOT over-provision. Provisioning is easy and non-disruptive, so only add storage when you need it. For an extra fee ($.017/GB/mth), they can also replicate your backups to another region. It's a no-nonsense offering that seems to be unique out there – especially when you add the ZFS features. Check out the website and rsync.net, and you'll see they aren't spending any money on being flashy. They just want to build a rock-solid ZFS syncing destination that is separate from any cloud provides.…

The Backup Wrap-Up

1
Rclone creator Nick Craig-Wood Explains This Powerful Tool 46:38

۳ years پیش46:38

46:38

This week, we talk to Nick Craigwood, the creator and principal developer of rclone, a very popular open-source tool for copying data to and from cloud providers. Rclone is downloaded roughly 250,000 times each month, and has over 30,000 stars on GitHub. There are six core developers, and a great community of users and other developers at rclone.org. We talk a little bit about Nick’s development philosophy, which is that he doesn’t mind adding features - as long as they don’t break backwards compatibility. Then we talk about how rclone works, and what it’s like to sync a filesystem to an object store – including support for multi-part uploads and downloads. We also talk about rclone’s encryption support, while Nick was “relaxing” on holiday. We then talked about how rclone can be used to minimize the risk of backing up to any one cloud provider, preventing things like what happened during the OVH fire earlier in 2021. We also discuss some strategies, such as backing up directly to two different clouds, versus backing up to one, then syncing to another – and how CloudFlare’s R2 might figure into things. Finally, we talk about Nick’s plans for rclone’s future, such as making their web UI better to increase usability for many more people – while not sacrificing the command line. Join us for a fascinating episode, the first one where we’re talking to the creator of the tool in question. Don’t forget the drawing for a free e-book version of Modern Data Protection. All you have to do to be eligible is sign up for my newsletter at https://www.backupcentral.com/subscribe-to-our-newsletter/…

The Backup Wrap-Up

1
FujiFilm Tape Evangelist Explains Past, Present & Future of Tape/LTO 52:07

۳ years پیش52:07

52:07

Fujifilm's tape evangelist, Rich Gadomski, joins us for an interesting discussion on tape and LTO. We talk about the different subtrates that have been used over the years, and how that changed things. We then talk about LTO-9 and what that brings to market. We also talk about how tape has seen a bit of a resurgence in interest in the backup market due to the advent of ransomware. Always fun to talk to someone that can talk at this depth on such things.…

The Backup Wrap-Up

1
Peter Krogh, who coined "the 3-2-1 rule," on our podcast! 58:55

۳ years پیش58:55

58:55

The term "3-2-1 rule" comes up on almost every episode, and we have the guy that coined it with us on the podcast! How exciting! Peter Krogh coined the term fifteen years ago. He is now Chief Product Officer at Tandem Vault, but this week he is talking to us. He first talks about how he coined the term “3-2-1 Rule” while writing the first edition of The DAM Book: Digital Asset Management for Photographers, now in it’s 3rd edition. He didn’t invent the idea of three copies and offsite backup, but he did distill it down to what we now refer to as the 3-2-1 rule. (Three copies on two media types, one of which is offsite.) We’ve played with it a bit over the years, but that is the core idea.) He explains how digital photographers were some of the first to need significant amounts of storage -- and to have the need to protect that storage so they don’t lose everything. Hard drives were too small to hold your whole collection, so what do you do? Like a lot of folks in this space, his love for good backups goes back to a moment when he thought he lost it all. Curtis then tells his very similar story of how his company almost lost the company’s purchasing database, which also launched his career in backups. Peter then explains the incredible importance of metadata, and the huge importance it plays in the overall value of an image. Then we get into the nitty-gritty of what the person who coined the term “3-2-1 rule” was thinking for each of the numbers. And interestingly enough, Mr. Backup had a slightly different understanding of the 2! Peter feels that the “2” refers to different media types. (This led to a very interesting discussion about how you do what he’s asking for in today’s cloud world.) One idea he talked about is that if you have two hard drives on the same network, they’re still subject to many of the same risks, which isn’t really keeping in line with the original idea of the 2. We then talk about those that believe that RAID is backup, and follow that with a discussion about how SaaS services aren’t backing up your data – unless they specifically say they do so in your contract. Then we get into a discussion of Peter’s company, Tandem Vault, and how they have designed the next generation of Digital Asset Management and delivered it as a SaaS offering.…

The Backup Wrap-Up

1
Mr. Backup and Mr. SQL argue over how to backup SQL Server 55:42

۴ years پیش55:42

55:42

Ever had questions about SQL Server, Azure, SQL Server ON Azure, how to backup SQL Server, or how to backup Azure? This is the episode for you. Denny Cherry, a SQL Server and Azure specialist and author of seven books, talks to us about both of these technologies. Before talking about anything important, we tackle the mystery of how you pronounce Azure. Surprise! I was pronouncing it wrong, according to Denny, who talks to Microsoft people all the time. We first talk about performance tuning, and Denny explains some things that most DBAs can do to improve performance, starting with indexes. (He also explains what an index is for those that don’t know.) We then talk about how bad query code needs to be in order to justify looking into that, and he gives us a few examples. We also (of course) talk about backing up SQL Server, starting with the political discussion of WHO should own the backup process: a backup admin or a DBA? Denny and Curtis clearly do not agree on this one, but the discussion is a good one. Grab your popcorn! One of Denny’s best quotes is that he feels one of the primary jobs of the DBA is to be able to restore the database if something happens and if you can’t do that, nothing else matters. So beautiful. Then the topic of dedupe comes up and things get heated again; our guest hates dedupe and Curtis loves it. That was another good discussion. Short version: make sure you have more than one copy of a deduped data store. We continue the discussion of different ways to backup SQL Server, and Denny definitely prefers the native backup capabilities of SQL Server, and he explains why. Curtis then makes a suggestion on a way for DBAs and backup admins to both get what they want, but it doesn’t sound like Denny is taking the bait. After a brief discussion on SQL Server vs Oracle, we move into the various ways one can use SQL Server in Azure. Denny’s gives advice as to what makes sense for most customers – and his opinion on the question of whether or not you save money in the cloud. Short answer: not usually, but you get a lot more power, flexibility and ease of use. Regarding Azure vs AWS, it appears that Azure is very equivalent to AWS in overall functionality at this point, and there appears to be a number of cost and functionality advantages to running SQL Server in the cloud. One of the biggest advantages is that you can use an on-prem license of SQL Server in the PaaS version of it in the cloud. That’s pretty cool. We also talk about how roughly half of the VMs in Azure run Linux, and why that might be the case. All-in-all it’s a really interesting podcast, even though we almost came to blows once or twice. (OK, not really.) But really good discussions about SQL Server, Azure, and backups of both.…

The Backup Wrap-Up

1
Deep dive into why tape still has a future in storage 54:45

۴ years پیش54:45

54:45

Mark Lantz, Manager CloudFPGA and Tape Technologies for IBM, joins us on this week’s podcast to talk about how he feels that tape still has a future in data storage. We talk about past and future advancements in the substrates tape uses, as well as how tape has not approached the superparamagnetic limit, the way we have with disk. (This is the limit at which you cannot increase the storage capacity of a particular magnetic medium without creating more problems.) We have reached this limit on disk, where the magnetic grains have gotten so small, they can’t get any smaller without assistance. One such method of assistance is heat-assisted magnetic recording (HAMR), which we discuss – and how HAMR comes with its own problems. By contrast, tape hasn’t come even close to the superparamagnetic limit. In fact, tape can scale the aerial density 100X before it starts getting close. We also discuss coercivity and bit error rate (BER), which are extremely important concepts to understand. Another topic we talk about is how tape is getting better at scaling capacity faster than speed, because most people do not need faster tapes. (We talk about how and why we can’t stream the ones they have.) We finish out the podcast with an explanation of why helican scan drives (e.g. 8mm, 4mm, & AIT) all disappeared overnight. We cover a lot of territory in this episode, so buckle up!…

The Backup Wrap-Up

1
Transfer backups from one product to the next 43:24

۴ years پیش43:24

43:24

Every wondered what you're supposed to do with all your old backups, now that you've moved on to another backup product? Simon Brown from StoneRam believes he has the answer to this problem that has plagued backup customers (and vendors) for ages. He's able to transfer backup data out of common backup formats and into your new product, or restore backups from your old product without having to maintain that infrastructure. It's a fascinating approach to this age-old problem. Check them out at https://www.stoneram.com.…

The Backup Wrap-Up

1
Veeam reps explain defense against Conti ransomware 49:17

۴ years پیش49:17

49:17

After the recent stories about Veeam customers being directly targeted by the Conti ransomware group, we invited Rick Vanover and Dave Russell from Veeam to discuss the topic on the podcast. The stories in the press seemed to focus on the attack, as well as how ruthless the Conti ransomware gang tends to be. We thought we'd give Veeam a chance to explain exactly what Veeam customers can do to protect their backups from being exfiltrated and deleted. It seems that Rick, Dave, and company are doing everything they can to explain to all Veeam customers that this is something they should pay attention to. The following are two resources they said should prove useful: Ransomware in 2022: 7 Capabilities You Need for Rapid and Reliable Recovery https://bit.ly/3m32gI8 5 Ransomware Protection Best Practices https://bit.ly/3nh7aAx…

The Backup Wrap-Up

1
Stop Ransomware Attacks in Seconds 53:16

۴ years پیش53:16

53:16

This week we are joined by Greg Edwards, CEO and founder of CryptoStopper, to discuss once again the important topic of ransomware. We talk about the challenges typically experienced by ransomware victims, especially exfiltration and potential exposure of sensitive data. The only way to stop that particular attack is stop the data from being exfiltrated in the first place. CryptoStopper has a way to detect that a ransomware attack has begun, but stopping it before it does any actual damage.…

The Backup Wrap-Up

1
ZFS is not magic - it needs backup and RAID 52:24

۴ years پیش52:24

52:24

This one will get you talking! Jody Bruchon, author of “ZFS won’t save you: fancy filesystem fanatics need to get a clue about bit rot (and RAID-5),”, joins us on the podcast. The blog post went viral, resulting in three times as many words in the comments as the original article had. We start with an explanation of bit rot, why it happens, and why ZFS won’t be able to fix all bit rot. (For more information on bit rot, check out Episode 111 of this podcast here: https://www.backupcentral.com/tape-drive-designer-schools-mr-backup-on-tape-restore-it-all-podcast-111/). Jody then explains how ZFS needs disk redundancy in order for its self-healing features to work, and how if you don’t have that, you’re going to need backup to repair a ZFS volume damaged by bit rot. (We also talk about how it’s possible for a bit to be flipped without being noticed – even with ZFS.) Jody’s main concern is that people talk about how ZFS can be used to repair data corruption – without explaining how you need RAID-Z (or something) to use those features. He also explains why he prefers RAID-5 or RAID-10 to RAID-6. We then discuss “shucking,” the practice of buying external drives and ripping the drive out of them – to save money. Curtis (Mr. Backup) then gets into an argument with Jody about the merits of Blu-Ray vs disk vs tape as a backup medium. Jody has some good points, but Curtis was unconvinced. If you want to read Jody Bruchon’s original article, you can do so here: https://www.jodybruchon.com/2017/03/07/zfs-wont-save-you-fancy-filesystem-fanatics-need-to-get-a-clue-about-bit-rot-and-raid-5/…

The Backup Wrap-Up

1
How good is your backup system, really? 39:47

۴ years پیش39:47

39:47

Inspired by the article "How good is your backup, really?" by Sandra Vogel, we discuss how to evaluate and potentially redesign your backup system. We talk about different kinds of backup systems, and how that impacts how you evaluate them. We also talk about how important it is these days to ensure that your backups are impervious to ransomware. We also talk about the importance of including recovery testing in your evaluation, and what kinds of restores to test. Here's a link to the original article: https://www.itpro.com/server-storage/backup/357713/how-good-is-your-backup-really…

The Backup Wrap-Up

1
Restoring quickly from a ransomare attack with a long dwell time 49:08

۴ years پیش49:08

49:08

We talk to Celeste Kinswood from Druva about cyber resilience, and specifically ransomware attacks that have long dwell times – which is most of them. The median dwell time (the time between infection and you finding out you have ransomware) is 23 days, and the average is around 90. It's encrypting files during that entire time, and responding to that is beyond difficult. Celeste talks about a novel approach that Druva is taking to solve this growing challenge.…

The Backup Wrap-Up

1
Protecting Your Network from Ransomware 42:48

۴ years پیش42:48

42:48

We review and discuss Mark Dargin's Network World article "Credible threat: how to protect networks from ransomware." His article lays out several steps, each of which we discuss and expand upon: train your people, update your servers and apps, antivirus tools on endpointsm backup your data (of course), test your backups, and conduct vulnerability assessments (Pen tests). Read the original article here: https://www.networkworld.com/article/3218708/how-to-protect-your-network-from-ransomware-attacks.html…

The Backup Wrap-Up

1
We found a company that verifies backups as a service! 50:44

۴ years پیش50:44

50:44

We all know how important it is to verify your backups. But many companies simply lack the technical ability or time to do such a thing. Chris Marshall's company, VerifiedBackups.com to the rescue. They have a service that is aimed at companies with under 100 GB of SQL data. and will do an end-to-end verification of your SQL backups, guaranteeing that they are recoverable and safely stored offsite. I'm a fan of "as a service" anything, but this really takes the cake. Such an important thing to do, and he makes it happen.…

The Backup Wrap-Up

1
Is Entity-Level Encryption The Answer to Exfiltration Ransomware? 1:00:53

۴ years پیش1:00:53

1:00:53

Brian Greenberg and Cameron Laghaeian argue the point that individually encrypting each entity in a database storing personal information is the only true way to stop ransomware attacks that have exfiltrated data and threaten to release it. While Mr. Backup likes the idea, there was a pretty heated discussion on this episode, because he believes that doing this will roll back all advancements in backup in the last twenty years. Thanks to an olive branch from Cameron, though, they may have come to a hybrid solution that makes both sides happy. This is a great episode with heated discussion and good news for companies trying to protect themselves from ransomware attacks that include exfiltration of data.…

The Backup Wrap-Up

1
Is Apple Violating iPhone Users' Privacy? 50:30

۴ years پیش50:30

50:30

In this privacy-themed podcast, we start with Apple's bombshell of a new feature, where they are scanning your pictures to see if you have any child porn on your Apple devices. While stopping child porn is a laudable goal, we discuss the privacy ramifications of this feature. We also discuss how Apple's iCloud backups aren't encrypted! The next topic is Luxembourg's huge $900M GDPR fine levied against Amazon for failure to get permission to track users. Then finally we discuss Prasanna's experience with using CCPA to find out how a company got his cell phone number. Spoiler alert: it's a sad ending. We then round out the podcast by discussing whether or not we need a more Federal response to privacy in the US.…

The Backup Wrap-Up

1
CockroachDB: the SQL database as resilient as its namesake 1:00:21

۴ years پیش1:00:21

1:00:21

Dave Lukens from Cockroach Labs joins us to discuss CochroachDB, a highly resilient SQL ACID-compliant database. We discuss the CAP theorum, which says you can choose any two from Consistency, Availability, and Partition Tolerance – but you can't have all three. We talk about which two they chose, and why they believe they're the most resilient SQL database. We also, of course, discuss how you back this monster up! (We also discuss why it's named CockroachDB, and it's exactly what we thought!)…

The Backup Wrap-Up

1
No backups - just beef & bbq 48:12

۴ years پیش48:12

48:12

In this bonus episode of Restore it All, Mr. Backup talks BBQ! A few months ago, Curtis did a 15-stop BBQ tour of Texas, and made a series of youtube videos (https://www.youtube.com/wcpreston) about it. This is a bonus episode where Prasanna interviews him about his experience. If you have no interest in BBQ or beef, you can skip this one. Our regular episode will go live next Monday.…

The Backup Wrap-Up

1
HYCU VP explains their service to Mr. Backup 58:21

۴ years پیش58:21

58:21

Subbiah Sundaram, VP of Products at HYCU, joins Mr. Backup and Prasanna Malaiyandi on the podcast to explain the evolution of the HYCU product line. They have expanded well beyond their original product that was aimed at Nutanix AHV. In addition to VMware, they've added support for Google Cloud Platform, Azure, Kubernetes, and Microsoft 365. They are also clearly focused on delivering their offerings as a service. We then have a very interesting discussion about the use of the multi-region object storage that Google Cloud offers.…

The Backup Wrap-Up

1
Mr. Backup Grills StorOne on Their Data Protection Story 1:01:40

۴ years پیش1:01:40

1:01:40

Mr. Backup and Prasanna grill George Crump, CMO of StorOne, a software-defined storage company, about their product. We start with an overview, alon with George's claims about not needing backup... .then we challenge him on that topic. George used to be Curtis' boss, so this one's a fun one.

The Backup Wrap-Up

1
Emmy Winning Sound Mixer Explains Movie Archiving 55:30

۴ years پیش55:30

55:30

We are super excited to have the Emmy Winning sound mixer Larry Blake on the podcast to talk about his upcoming book "Solving The Digital Dilemma." It is a response to "The Digital Dilemma," which is a paper released in 2007 by the Academy's Sci-Tech Council that discusses long term archiving of a movie. (It describes a very NON-digital solution.) He has edited the sound on over 60 motion pictures, over 30 of which with Oscar-winning director Steven Soderbergh. This is both a very entertaining and very informative podcast about the about the art and science of archiving motion pictures.…

The Backup Wrap-Up

1
Information Security Expert Says it Must Evolve 41:40

۴ years پیش41:40

41:40

Wolfgang Goerlich, Advisory CISO, explains the current state of information security, and why he thinks many environments are focusing on the wrong things. We speak about ransomware, extortionware, and phishing, even giving examples where we know we have personally been phished! He explains how this illustrates his point that we need more emphasis in different areas of information security.…

The Backup Wrap-Up

1
Are You Vulnerable to an Attack like the one on Kaseya? 38:46

۴ years پیش38:46

38:46

Mr. Backup and Prasanna discuss the Kaseya attack that happened over the July 4th weekend of 2021. First, we talk about how bad actors use long weekends for attacks, then discuss various things you can/should do to ensure that your environment would not be vulnerable to such an attack. We talk about the kinds of questions that even an unskilled person can ask to help mitigate this risk, including (especially) the all-important questions about backups. We also talk about the need for establishing a "bat-phone" type connection between your environment and any providers you may be using. We have a short talk about the impact that all these attacks are having on ransomware costs, and how you can use your DR site to test patches.…

The Backup Wrap-Up

1
Tape Drive Designer Schools Mr. Backup on Tape 1:03:04

۴ years پیش1:03:04

1:03:04

Joe Jurneke has been designing the innards of magnetic devices since 1973, and now he's here to answer our questions. He started with disk, and moved over to tape over thirty years ago, and is now retired – but consults with the tape industry from time to time. We talk in detail about how tape drives work they way they do, their reliability and more. We take down a couple of myths from the guy that was there, even correcting a misunderstanding Mr. Backup has had for many years. If the phrase "magneto crystalline anisotropy" has been used on any other podcast, we'd be surprised. This is a good one you won't want to miss.…

The Backup Wrap-Up

1
Why you need a copy of Modern Data Protection 1:03:17

۴ years پیش1:03:17

1:03:17

We cover my latest book, Modern Data Protection, by O'Reilly & Associates on this podcast. I give an overview of the book, which covers the "Why, What, Where, and How" of backup, archive, and disaster recovery. After giving an overview of the book, I talk about why I wrote, and what it's like to write a book for O'Reilly. Prasanna acted as a tech editor on the book, so he offered his unique perspective as well.…

The Backup Wrap-Up

1
Can OVH properly redesign their backup infrastructure? 44:41

۴ years پیش44:41

44:41

Prasanna and Curtis discuss whether or not can (or will) OVH properly redesign their backup infrastructure to prevent another incident like what happened in March, where many customers lost their sites forever. As we discussed in our previous podcast, OVH had a backup service already that people paid for, and it was not up to the task. OVH"s CEO made an 8-minute video where he discussed some of the things they were going to do to make things better, and we discuss what he said. We talk about their idea of a centralized region just for backups, and whether or not that's a good idea. We also talk about how big of a job they have in front of them. We applaud what we see, but have many concerns that the brief video do not address. We also talk about how this plan is supposed to take five years, and what do OVH customers do in the meantime?…

The Backup Wrap-Up

1
ComplyTrust: Remembering those you need to forget 57:37

۴ years پیش57:37

57:37

We talk to Mike Johnson of ComplyTrust, who says they "remember those you are supposed to forget." We talk about the data management challenges created by data subject access requests (DSARs), right-of-erasure (ROE, AKA right to be forgotten, or RTBF) requests, and the fact that we have many parts of the datacenter that are much better at remembering than forgetting. Backups are a particular challenge, but Mike brings up other challenges, such as mergers and acquisitions, and salespeople importing old data. ComplyTrust SaaS offering has a unique solution to this problem by remembering (on your behalf) those you are supposed to forget, and continually checking to see that they stay forgotten.…

The Backup Wrap-Up

1
OVH's Backup Service Didn't Work 43:30

۴ years پیش43:30

43:30

This week we discuss further lessons from the OVH fire, which starts with an admission by the CEO that some customers who paid for the backup service lost their backups in the fire. It then morphs into a discussion about designing resilient systems, starting with the concept of designing for failure. You have to protect against both physical and logical damage to your apps and data. We talk about using both cloud-native apps that have resiliency built in, vs having to add resiliency to your own app. Most importantly, know how your app/data is protected, and don't tolerate wishy-washy terminology in your service agreements. Above all, test, test, test!…

The Backup Wrap-Up

1
How do You Prove Your Backup Service is Real? 47:46

۴ years پیش47:46

47:46

This week we discuss a topic brought up by the OVH fire. It appears some people actually had a contractual backup service that wasn't doing it's job. How do you verify that a service you're paying for is real, and is doing what it claims to be doing? Especially how do you make sure they are storing data offsite? We've got some ideas.…

The Backup Wrap-Up

1
Datacenter manager Dan Frith discusses the OVH Fire 52:41

۴ years پیش52:41

52:41

Datacenter manager Dan Frith (@penguinpunk) joins us on the podcast for our first discussion of the #OVHFire. A massive fire destroyed a datacenter of a large cloud provider in Europe, and millions of websites disappeared. We talk about the lessons we can learn from this event. Dan talks about how outsourcing the servers doesn't outsource the responsibility for data protection. I make the point that this fire shows what happens when you completely rely on a single entity for both production and data protection. We end up talking about the 3-2-1 rule and how it applies in this scenario. I also give a discount code during the podcast for my new O'Reilly book Modern Data Protection, which is now available for purchase. If you use the URL below and the code I give on the podcast, you can get 35% of the retail price. https://shop.aer.io/oreilly/p/Modern_Data_Protection_Ensuring_Recoverability_of_/9781492094050-9149…

The Backup Wrap-Up

1
Dave Russell answers our questions about Veeam 1:10:04

۴ years پیش1:10:04

1:10:04

It only took us 100 episodes, but we finally got Dave Russell, VP of Enterprise Strategy at Veeam, as our guest on the podcast. Dave and Curtis go way back, and this was a great discussion. We cover the proper use of tape, and what it was like for Dave when he went to Veeam. Another big discussion point was Dave clearing up misconceptions (some of which may have come from this podcast) about what Insight Partners acquiring Veeam really meant. We then get into a great discussion about how Veeam works, ending that discussion with Dave explaining what Veeam is doing to address concerns about Windows and ransomware.…

The Backup Wrap-Up

1
Fortune 100 company considers changing backup product 45:53

۴ years پیش45:53

45:53

Our anonymous guest this week is from a Fortune 100 company who is considering swapping out their backup product. Our guest has been at the company for over 20 years, and remembers swapping out NetWorker for NetBackup many years ago. Now he is considering swapping out NetBackup to address his challenges with that product. We discuss a number of topics, including the age-old argument of who should be in charge of database backups, as well as the challenges of moving to a modern backup product when you are still using operating systems not usually supporting by such products. Our guest's final thoughts center on the importance of a good relationship with the vendor in question.…

The Backup Wrap-Up

1
Veeam User Warns About Item-Level Retention in Microsoft 365 Backup 55:47

۴ years پیش55:47

55:47

A Veeam user warns of what he felt is a confusing option in Veeam Backup for Microsoft 365. He says he likes the product, but that the first retention setting mentioned in the documentation (item-level retention) might not do what you think it does. He thinks everyone should use snapshot-level retention, which behaves more traditionally. We also discuss IBM Spectrum Protect (AKA TSM) a little bit, as they also use that product. Our guest is speaking on conditions of anonymity, so we gave him a fake name (Puddleglum) and altered his voice in the recording. (Want to talk about your environment, but don't want to use your name? We'd love to have you on and we'll keep you anonymous too!)…

The Backup Wrap-Up

1
Securing & speeding up network traffic w/o VPN or SD-WAN 50:11

۴ years پیش50:11

50:11

Adi Ruppin, founder of Ananda Networks, joins us on the podcast to discuss how they secure – and increase the performance of – network traffic without deploying a VPN or SD-WAN. He talks about how the technologies we use for networking are actually very old designs that come with a lot of downsides. Ananda Networks aims to address those downsides while giving you everything a VPN and SD-WAN do – and more. Faster and more secure internet connections without the technologies we usually use for such things.…

The Backup Wrap-Up

1
What we learned in 100 episodes of Backup Central's Restore it All 59:06

۴ years پیش59:06

59:06

It's hard to believe, but this is our 100th episode! Prasanna and Curtis discuss the favorite topics we've had over 100 episodes, as well as the many things we've learned along the way. We talk about containers and K8s, tape, COVID-19, election security, and how recoveries are impacted by other factors. We also talked extensively about ransomware, and talked to someone who had actually been through a recovery from an attack. We talked about DDI, cloud backups, the importance of segregating your Windows backup server, and many things about the 120+ database products that have to be backed up. Thank you so much to our listeners! We look forward to 100 more episodes!…

The Backup Wrap-Up

1
Kubernetes Expert Explains K8s, the CSI, and backups 55:15

۴ years پیش55:15

55:15

Russ Cantwell (@rcantw3ll), CTO of SHI Corp, joins us to talk about Kubernetes, the Container Storage Interface (CSI), and backups. Before we get to that, however, we talk about how he, his pregnant wife, and two-year old child all got COVID-19. We discuss how that went and continues to go, and then we talk about Kubernetes. (If you're not interested in our banter, and just want to hear about K8s, just fast-forward to 11:50.)…

The Backup Wrap-Up

1
Porteguese University Using Open-Source Backup Tools 52:02

۴ years پیش52:02

52:02

Another industry veteran, Jose Calhariz. joins us this week to explain how he uses the community versions of two open-source backup tools to meet his university's backup needs, while saving money. We have a very interesting discussion that includes coverage of dump, tar, and Amanda. Jose also tells a great story of a huge recovery he had to do, that took several days.…

The Backup Wrap-Up

1
Create a physical air-gap without using tape using portable disk 51:18

۴ years پیش51:18

51:18

Darren McBride, CEO of Highly Reliable Systems (http://high-rely.com/ ) joins us on this podcast to talk about their product, which he says is designed for SMBs to get reliable offsite backup without using tape or an Internet connection. They have purpose-built appliances that support mirroring, but with removable disks. This product has been on the market for almost twenty years, but is having a surge in demand due to the desire by many companies to have an air-gapped backup for ransomware protection purposes.…

The Backup Wrap-Up

1
Ransomware Victim Tells HIs Story 1:02:14

۴ years پیش1:02:14

1:02:14

In May of 2020, Tony Mendoza of Spectra Logic found out his company had been attacked by ransomware. Hear his harrowing tale of how long it took just to get the data center ready for a restore, and then the various tools they used to bring things back online. He did not want to pay that ransom! Spectra Logic is actually a tape vendor, so Tony has a unique viewpoint. We thank him so much for being so candid about his experience. You will learn a lot.…

The Backup Wrap-Up

1
Bacula: Sucking the Vital Essence from your computers 53:14

۴ years پیش53:14

53:14

Rob Morrison joins us from Bacula Systems, the commercial arm of the open-source backup product, Bacula. It's tagline is that it roams the datacenter at night and sucks the vital essence from your computers. Bacula Systems has come a long way since I first saw them years ago. Check out what they're been up to.…

The Backup Wrap-Up

1
Back in my day, backups were really hard 56:03

۴ years پیش56:03

56:03

This week’s episode is dedicated to my friend Jim Bougor, who passed on this week. Jim, this week’s guest (Darryl Baker), and I all worked at Collective Technologies back in the day. Darryl comes with over 30 years of backup and IT experience, and he and I walk down memory lane about the way things used to be with backups. Apropos for women’s history month, we also talk about Grace Hopper and Ada Lovelace a little bit. The Grace Hopper speech Darryl references can be seen here: https://www.youtube.com/watch?v=9eyFDBPk4Yw&ab_channel=funbury We talk about all sorts of tape drives from the old days including: 9-track, VHS, QIC-180, 8mm, AIT, 4mm, TK-70s, DLTs, and LTOs. We discuss the concept of coercivity and how that relates to magnetic media. We also discuss the difference between helical scan and linear tape drives, and Darryl’s theory as to why helical scan disappeared.…

The Backup Wrap-Up

1
Distributed Ledger (e.g. BlockChain) expert explains how to use it for security 1:00:51

۴ years پیش1:00:51

1:00:51

Chainkit Founder & CEO Val Bercovici returns to the podcast to build on what we learned last week. This week we talk about how distributed ledger technology (such as the one in BlockChain, but there are others), can be used to increase security. We talk about the SolarWinds hack and how that could have been prevented using such technology.…

به Player FM خوش آمدید!

Player FM در سراسر وب را برای یافتن پادکست های با کیفیت اسکن می کند تا همین الان لذت ببرید. این بهترین برنامه ی پادکست است که در اندروید، آیفون و وب کار می کند. ثبت نام کنید تا اشتراک های شما در بین دستگاه های مختلف همگام سازی شود.