Another Personal Storage Discussion
-
@Jason said in Another Personal Storage Discussion:
Your average thief will see any kind of encryption and just toss or re-image the device.. It's risk vs reward. They want fast turn over and to get it out of their hands.
Right, but there are two parts to this discussion.
Security of the device (we all know once they have it, you can't guarantee security) ...
and also the idea that you should keep no data local.I guess my biggest question is ... to those who say "keep no data local" ... how do you deal with backups?
Know, as @JaredBusch has said many times, that OneDrive, etc., is SYNC not backup. Which I understand completely. I'm just wondering about those in the "no local data" camp, or those in the "move to O365 for data storage" camp ... what are you doing for backups?
-
@BRRABill said in Another Personal Storage Discussion:
Right, of course, but then my "concern" is the theft of that device. Are we comfortable with Bitlocker keeping it out of non-NSA hands? (AKA your average theif.)
Bitlocker is currently still understood to be completely safe for its intended purpose. It protects a non hibernated/sleep moded powered off computer. Your normal home invasion thief is going to pull the power plug and run away with the device. Once the device is powered down like this, Bitlocker will protect your home made pornos, er I mean data.
Also having a small box like Scott mentions allows you to hide it pretty well too, an Intel NUC and an External HDD, can be hidden pretty easily - though getting power there could present it's own issue.
-
@Dashrender said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
Right, of course, but then my "concern" is the theft of that device. Are we comfortable with Bitlocker keeping it out of non-NSA hands? (AKA your average theif.)
Bitlocker is currently still understood to be completely safe for its intended purpose. It protects a non hibernated/sleep moded powered off computer. Your normal home invasion thief is going to pull the power plug and run away with the device. Once the device is powered down like this, Bitlocker will protect your home made pornos, er I mean data.
Also having a small box like Scott mentions allows you to hide it pretty well too, an Intel NUC and an External HDD, can be hidden pretty easily - though getting power there could present it's own issue.
I'm more interested in hearing how the "no local data" camp deals with this.
IMO, this is a pretty big ML push ... no local data. No servers, and no data on the local machines.
-
@BRRABill said in Another Personal Storage Discussion:
I guess my biggest question is ... to those who say "keep no data local" ... how do you deal with backups?
For personal setups it doesn't matter. Is there really any more security to your server in basement compared to your desktop?
-
@Dashrender said
Bitlocker will protect your home made pornos, er I mean data.
Damn, you figured me out.
-
@Dashrender said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
Right, of course, but then my "concern" is the theft of that device. Are we comfortable with Bitlocker keeping it out of non-NSA hands? (AKA your average theif.)
Bitlocker is currently still understood to be completely safe for its intended purpose. It protects a non hibernated/sleep moded powered off computer.
It's really just "it protects machines when they've not been powered on and decrypted". No need for all of the descriptions of different powered on states.
-
@BRRABill said in Another Personal Storage Discussion:
@Dashrender said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
Right, of course, but then my "concern" is the theft of that device. Are we comfortable with Bitlocker keeping it out of non-NSA hands? (AKA your average theif.)
Bitlocker is currently still understood to be completely safe for its intended purpose. It protects a non hibernated/sleep moded powered off computer. Your normal home invasion thief is going to pull the power plug and run away with the device. Once the device is powered down like this, Bitlocker will protect your home made pornos, er I mean data.
Also having a small box like Scott mentions allows you to hide it pretty well too, an Intel NUC and an External HDD, can be hidden pretty easily - though getting power there could present it's own issue.
I'm more interested in hearing how the "no local data" camp deals with this.
IMO, this is a pretty big ML push ... no local data. No servers, and no data on the local machines.
Stop Listening to everything Scott says and think on your own...
and yes as @JaredBusch said Onedrive etc are sync not backup.
-
@BRRABill said in Another Personal Storage Discussion:
and also the idea that you should keep no data local.
You keep coming back to this one, and @scottalanmiller hasn't chimed in yet to it with regards to a home user situation.
But to me, the general thinking behind no local data is a corporate thing - i.e. no local data on the user's endpoint device, when possible. For example, it's not considered generally possible to send a sales person out with a laptop with no data on it at all, you have no idea what the internet situation will be like at your destination, so you bring the data with you.
Scott I don't think ever found a good solution to his video file dilemma while traveling outside the US. He was looking for a way to get huge video files backed up while on the road. @scottalanmiller did you make any headway?
-
@Jason said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
@Dashrender said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
Right, of course, but then my "concern" is the theft of that device. Are we comfortable with Bitlocker keeping it out of non-NSA hands? (AKA your average theif.)
Bitlocker is currently still understood to be completely safe for its intended purpose. It protects a non hibernated/sleep moded powered off computer. Your normal home invasion thief is going to pull the power plug and run away with the device. Once the device is powered down like this, Bitlocker will protect your home made pornos, er I mean data.
Also having a small box like Scott mentions allows you to hide it pretty well too, an Intel NUC and an External HDD, can be hidden pretty easily - though getting power there could present it's own issue.
I'm more interested in hearing how the "no local data" camp deals with this.
IMO, this is a pretty big ML push ... no local data. No servers, and no data on the local machines.
Stop Listening to everything Scott says and think on your own...
and yes as @JaredBusch said Onedrive etc are sync not backup.
It's more than just @scottalanmiller
It's a pretty prevalent recommendation here when people come to the forum with a question like "I have a smallish company that just uses Office and wants to install a server" ... there is a lot of push (for good reason) to O365.
-
@Dashrender said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
and also the idea that you should keep no data local.
You keep coming back to this one, and @scottalanmiller hasn't chimed in yet to it with regards to a home user situation.
But to me, the general thinking behind no local data is a corporate thing - i.e. no local data on the user's endpoint device, when possible. For example, it's not considered generally possible to send a sales person out with a laptop with no data on it at all, you have no idea what the internet situation will be like at your destination, so you bring the data with you.
Scott I don't think ever found a good solution to his video file dilemma while traveling outside the US. He was looking for a way to get huge video files backed up while on the road. @scottalanmiller did you make any headway?
When would a salesperson bring non-public information to a client, though, in that fashion? If there was proprietary info for the client, it would be sent to them via email or other secure, electronic means. If there was data on the laptop, it would be public info for sales purposes.
In what scenario do you picture sales people on customer sites with proprietary data that needs to be secured needing access to that data? Possible, yes. Common, no.
-
@BRRABill said in Another Personal Storage Discussion:
@Jason said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
@Dashrender said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
Right, of course, but then my "concern" is the theft of that device. Are we comfortable with Bitlocker keeping it out of non-NSA hands? (AKA your average theif.)
Bitlocker is currently still understood to be completely safe for its intended purpose. It protects a non hibernated/sleep moded powered off computer. Your normal home invasion thief is going to pull the power plug and run away with the device. Once the device is powered down like this, Bitlocker will protect your home made pornos, er I mean data.
Also having a small box like Scott mentions allows you to hide it pretty well too, an Intel NUC and an External HDD, can be hidden pretty easily - though getting power there could present it's own issue.
I'm more interested in hearing how the "no local data" camp deals with this.
IMO, this is a pretty big ML push ... no local data. No servers, and no data on the local machines.
Stop Listening to everything Scott says and think on your own...
and yes as @JaredBusch said Onedrive etc are sync not backup.
It's more than just @scottalanmiller
It's a pretty prevalent recommendation here when people come to the forum with a question like "I have a smallish company that just uses Office and wants to install a server" ... there is a lot of push (for good reason) to O365.
Although that is an unrelated push. That's the push to stop running local applications but move to hosted ones. O365 doesn't mean data is non-local. O365 still has locally installed apps, Exchange can sync to local, etc. No local and using SaaS are two different things, but one makes the other much easier.
-
@Dashrender said in Another Personal Storage Discussion:
Scott I don't think ever found a good solution to his video file dilemma while traveling outside the US. He was looking for a way to get huge video files backed up while on the road. @scottalanmiller did you make any headway?
No, but they aren't on my laptop, either
-
@scottalanmiller said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
@Jason said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
@Dashrender said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
Right, of course, but then my "concern" is the theft of that device. Are we comfortable with Bitlocker keeping it out of non-NSA hands? (AKA your average theif.)
Bitlocker is currently still understood to be completely safe for its intended purpose. It protects a non hibernated/sleep moded powered off computer. Your normal home invasion thief is going to pull the power plug and run away with the device. Once the device is powered down like this, Bitlocker will protect your home made pornos, er I mean data.
Also having a small box like Scott mentions allows you to hide it pretty well too, an Intel NUC and an External HDD, can be hidden pretty easily - though getting power there could present it's own issue.
I'm more interested in hearing how the "no local data" camp deals with this.
IMO, this is a pretty big ML push ... no local data. No servers, and no data on the local machines.
Stop Listening to everything Scott says and think on your own...
and yes as @JaredBusch said Onedrive etc are sync not backup.
It's more than just @scottalanmiller
It's a pretty prevalent recommendation here when people come to the forum with a question like "I have a smallish company that just uses Office and wants to install a server" ... there is a lot of push (for good reason) to O365.
Although that is an unrelated push. That's the push to stop running local applications but move to hosted ones. O365 doesn't mean data is non-local. O365 still has locally installed apps, Exchange can sync to local, etc. No local and using SaaS are two different things, but one makes the other much easier.
So you are saying the push to O365 does not include storing the data in OneDrive as well?
-
@BRRABill said in Another Personal Storage Discussion:
@scottalanmiller said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
@Jason said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
@Dashrender said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
Right, of course, but then my "concern" is the theft of that device. Are we comfortable with Bitlocker keeping it out of non-NSA hands? (AKA your average theif.)
Bitlocker is currently still understood to be completely safe for its intended purpose. It protects a non hibernated/sleep moded powered off computer. Your normal home invasion thief is going to pull the power plug and run away with the device. Once the device is powered down like this, Bitlocker will protect your home made pornos, er I mean data.
Also having a small box like Scott mentions allows you to hide it pretty well too, an Intel NUC and an External HDD, can be hidden pretty easily - though getting power there could present it's own issue.
I'm more interested in hearing how the "no local data" camp deals with this.
IMO, this is a pretty big ML push ... no local data. No servers, and no data on the local machines.
Stop Listening to everything Scott says and think on your own...
and yes as @JaredBusch said Onedrive etc are sync not backup.
It's more than just @scottalanmiller
It's a pretty prevalent recommendation here when people come to the forum with a question like "I have a smallish company that just uses Office and wants to install a server" ... there is a lot of push (for good reason) to O365.
Although that is an unrelated push. That's the push to stop running local applications but move to hosted ones. O365 doesn't mean data is non-local. O365 still has locally installed apps, Exchange can sync to local, etc. No local and using SaaS are two different things, but one makes the other much easier.
So you are saying the push to O365 does not include storing the data in OneDrive as well?
Not necessarily. ODfB is only one aspect of O365 storage. There is SharePoint as well. And there are versioning and backup options.
-
A push to O365 also does not mean not using sync functionality. Using ODfB from O365 and syncing that to your local machines would still be using O365 but would also be having local files.
However, it does allow the local files to be disposable. There are two different "no local data" ideologies that are separate but rarely pointed out...
- No local data meaning that the end point is read only and blank so can be exposed or lost anytime.
- No local data meaning that local data is just a copy or working copy or cache of data stored elsewhere and the data is not protected via the end point as it is not the master.
When we are talking about normal office desktops, we normally mean the later. No one (or almost no one) is actually concerned about office theft of desktops (although this happened at Change.org because they are in San Francisco and use Macs so the hardware was worth way too much.) When we are talking about laptops in the field that you want to encrypt, we normally mean the former.
-
@cakeis_not_alie said in Another Personal Storage Discussion:
Apologies if this is a little bit "self promotion", but I may have a relevant article for this discussion: http://webreaktech.com/2016/10/03/archival-cloud-storage-can-be-an-affordable-backup-layer/
Cheers to all!
Not bad. Not what I would call consumer friendly with the IOSafe (to costly) but with other less expensive NASs definitely a decent option.
-
@Dashrender Any old Synology that can use DSM 6 will do. I just prefer the ioSafe because it plugs a specific backup gap. If that gap doesn't worry you, go the cheaper route.
-
@scottalanmiller said
Not necessarily. ODfB is only one aspect of O365 storage. There is SharePoint as well. And there are versioning and backup options.
What backup options are there for ODfB?
-
@BRRABill said in Another Personal Storage Discussion:
@scottalanmiller said
Not necessarily. ODfB is only one aspect of O365 storage. There is SharePoint as well. And there are versioning and backup options.
What backup options are there for ODfB?
-
@BRRABill said in Another Personal Storage Discussion:
@Jason said in Another Personal Storage Discussion:
@BRRABill said in Another Personal Storage Discussion:
@dafyre said in Another Personal Storage Discussion:
@Jason said in Another Personal Storage Discussion:
OneDrive etc as a back the problem comes with malware, randsomeware and accidental deletion.
For a backup you really want it disconnected from the system and read only.
Crashplan works well for this.
Yes, but you have to get the data onto your local machine, which
a) requires an answer to my original question and
b) goes against the policy of many here (such as @scottalanmiller) of not storing data locallyif it's for home it doesn't really matter if you are storing it locally.. you don't for companies cause you want a central place to backup..
At home my workstation laptop (Lenovo P70) is that central place. Crash Plan lets me backup unlimited data from one computer and I backup a lot.
Hey I don't want people seeing all my stuff!
Crashplan always encrypts before sending. Add your own private key and you've got true TNO (trust no one) backups. You just get the fun of trying to secure and backup that private key
