Comments on: How-To: Automated Backups to Amazon's S3 with Duplicity http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/?utm_source=rss&utm_medium=rss&utm_campaign=how-to-automated-backups-to-amazon-s-s3-with-duplicity wasting your precious bandwidth since 1998 Tue, 03 Jan 2012 03:40:57 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: Nate Murray http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/#comment-360 Nate Murray Tue, 03 Jan 2012 03:40:57 +0000 http://www.randys.org//2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity#comment-360 This is a great post and really helpful. Thanks for writing it. I'd like to point out that compiling your password into a binary as described above provides basically no security. Try this: $ gcc gpg-passphrase.c -o gpg-passphrase $ strings gpg-passphrase #-> your-gpg-passphrase If folks are interested in seeing how to securely embed (or at least obfuscate) strings in binaries, I'd recommend checking out the SO post: http://stackoverflow.com/questions/7624635/how-to-embed-strings-inside-code-of-executable . )One of the interesting ideas is to use a tool called `upx` ) or this one: http://stackoverflow.com/questions/1356896/how-to-hide-a-string-in-binary-code (suggests using hashing, etc.) Hope this helps! This is a great post and really helpful. Thanks for writing it. I’d like to point out that compiling your password into a binary as described above provides basically no security. Try this:

$ gcc gpg-passphrase.c -o gpg-passphrase
$ strings gpg-passphrase
#-> your-gpg-passphrase

If folks are interested in seeing how to securely embed (or at least obfuscate) strings in binaries, I’d recommend checking out the SO post: http://stackoverflow.com/questions/7624635/how-to-embed-strings-inside-code-of-executable . )One of the interesting ideas is to use a tool called `upx` ) or this one: http://stackoverflow.com/questions/1356896/how-to-hide-a-string-in-binary-code (suggests using hashing, etc.)

Hope this helps!

]]> By: user GPG key not able to be used by SUDO - Admins Goodies http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/#comment-233 user GPG key not able to be used by SUDO - Admins Goodies Sun, 21 Aug 2011 04:53:43 +0000 http://www.randys.org//2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity#comment-233 [...] http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/ [...] [...] http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/ [...]

]]> By: randy http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/#comment-176 randy Mon, 31 Jan 2011 01:26:02 +0000 http://www.randys.org//2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity#comment-176 <p>Sorry for the late reply. Yes. If you loose the key, you're pretty hosed. I suppose you could backup the key itself to another system/service as well. Or, better still, back it up to a CD or flash drive and put it in a safe deposit box.</p> Sorry for the late reply. Yes. If you loose the key, you’re pretty hosed. I suppose you could backup the key itself to another system/service as well. Or, better still, back it up to a CD or flash drive and put it in a safe deposit box.

]]> By: Pat Maddox http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/#comment-171 Pat Maddox Sat, 04 Dec 2010 04:00:18 +0000 http://www.randys.org//2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity#comment-171 <p>What happens if you lose the key used to encrypt it? Are you hosed? I'm doing a couple quick tests here, and if I move my .gnupg directory and try to restore from S3, it says that it can't find the key needed to decrypt it.</p> <p>I want to use this to back up my laptop. If my laptop gets destroyed or stolen, and I don't have access to the GPG key I created, then it looks like I'm out of luck, right?</p> <p>If I'm going to use this as an actual backup it seems like I need to forego the PGP key and just use a complicated pass-phrase.</p> <p>Am I off base?</p> What happens if you lose the key used to encrypt it? Are you hosed? I’m doing a couple quick tests here, and if I move my .gnupg directory and try to restore from S3, it says that it can’t find the key needed to decrypt it.

I want to use this to back up my laptop. If my laptop gets destroyed or stolen, and I don’t have access to the GPG key I created, then it looks like I’m out of luck, right?

If I’m going to use this as an actual backup it seems like I need to forego the PGP key and just use a complicated pass-phrase.

Am I off base?

]]> By: user GPG key not able to be used by SUDO Drija http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/#comment-168 user GPG key not able to be used by SUDO Drija Thu, 18 Nov 2010 16:39:27 +0000 http://www.randys.org//2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity#comment-168 <p>[...] http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/ [...]</p> [...] http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/ [...]

]]> By: Duplicity and Amazon S3 Script Drija http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/#comment-167 Duplicity and Amazon S3 Script Drija Mon, 15 Nov 2010 22:24:37 +0000 http://www.randys.org//2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity#comment-167 <p>[...] found a great resource here that helped me get it setup and am using the basic script that was listed there for me and now [...]</p> [...] found a great resource here that helped me get it setup and am using the basic script that was listed there for me and now [...]

]]> By: Security issues related to storing secrets in scripts | Drija http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/#comment-166 Security issues related to storing secrets in scripts | Drija Tue, 09 Nov 2010 18:29:35 +0000 http://www.randys.org//2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity#comment-166 <p>[...] to make all this a little less abstract, this is what got me [...]</p> [...] to make all this a little less abstract, this is what got me [...]

]]> By: Backups « Jasdeep Gosal http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/#comment-153 Backups « Jasdeep Gosal Thu, 19 Aug 2010 16:02:05 +0000 http://www.randys.org//2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity#comment-153 <p>[...] with WordPress »BackupsI set up backups using Amazon S3 and duplicity. I primarily followed this how-to and the comments here. I decided to use this solution instead of Slicehost’s $5/month [...]</p> [...] with WordPress »BackupsI set up backups using Amazon S3 and duplicity. I primarily followed this how-to and the comments here. I decided to use this solution instead of Slicehost’s $5/month [...]

]]> By: Adoption Curve » Blog Archive » links for 2010-05-07 http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/#comment-109 Adoption Curve » Blog Archive » links for 2010-05-07 Sat, 08 May 2010 00:31:13 +0000 http://www.randys.org//2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity#comment-109 <p>[...] How-To: Automated Backups to Amazon’s S3 with Duplicity | randys.org (tags: backup amazons3 duplicity s3 aws) [...]</p> [...] How-To: Automated Backups to Amazon’s S3 with Duplicity | randys.org (tags: backup amazons3 duplicity s3 aws) [...]

]]> By: gwern http://www.randys.org/2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity/#comment-108 gwern Tue, 09 Feb 2010 00:28:55 +0000 http://www.randys.org//2007/11/16/how-to-automated-backups-to-amazon-s-s3-with-duplicity#comment-108 <p>I don't think there's any real need to have a full shell script. This is a one-liner: you can concatenate multiple shell variable definitions, and they will scope only over the one line.</p> <p>Here's an example of what I mean:</p> <p>[07:27 PM] 332Mb$ BAR="bar" [07:27 PM] 332Mb$ FOO="foo" ls .... [07:27 PM] 332Mb$ echo $BAR bar [07:27 PM] 332Mb$ echo $FOO</p> <p>[07:27 PM] 332Mb$</p> <p>The $FOO is gone, but $BAR remains. (And nothing stops one from going 'FOO="foo" BAR="bar"... ls')</p> I don’t think there’s any real need to have a full shell script. This is a one-liner: you can concatenate multiple shell variable definitions, and they will scope only over the one line.

Here’s an example of what I mean:

[07:27 PM] 332Mb$ BAR=”bar”
[07:27 PM] 332Mb$ FOO=”foo” ls
….
[07:27 PM] 332Mb$ echo $BAR
bar
[07:27 PM] 332Mb$ echo $FOO

[07:27 PM] 332Mb$

The $FOO is gone, but $BAR remains. (And nothing stops one from going ‘FOO=”foo” BAR=”bar”… ls’)

]]>