Live data from Hacker News

Tarsnap is cozy

til.andrew-quinn.me

81–83 of 83 posts

Re: Tarsnap is cozy

#81
post #47

Earlier quoted context omitted.

Same but with rustic because I found it used significantly less memory. https://rustic.cli.rs/

Is it stable? I've been using restic for a while, and I'm interested in rustic, but I have no idea how stable it is overall. Obviously it's still in beta so I won't use it in prod but curious what others experiences have been like.

I'd say its stable. It's one of those projects that's in perennial beta.

Re: Tarsnap is cozy

#82
post #66

Earlier quoted context omitted.

Again, this isn’t at all in the scope of restic’s docs. If you’re using S3 as the storage, it’s on you to understand how S3 works and what permissions are needed, just like it’s on you to understand how your local file system works and file permissions work if you use the local file system as a backend. If you don’t understand S3 or don’t want to learn, then that’s fine, and you can pay the premium to tarsnap for sim…

I still completely disagree. It’s on me to understand IAM. It should not be on me to understand the way that restic uses S3 such that I can determine whether I can credibly restore from an S3 bucket after a compromised client gets permission to create objects that didn’t previously exist. Or to create new corrupt versions of existing objects. For that matter, suppose an attacker modifies an object and replaces it wit…

[deleted]

Re: Tarsnap is cozy

#83

Earlier quoted context omitted.

Again, this isn’t at all in the scope of restic’s docs. If you’re using S3 as the storage, it’s on you to understand how S3 works and what permissions are needed, just like it’s on you to understand how your local file system works and file permissions work if you use the local file system as a backend. If you don’t understand S3 or don’t want to learn, then that’s fine, and you can pay the premium to tarsnap for sim…

I think you two may be talking past each other a bit here. Bear in mind I am not a security expert, just a spirited hobbyist; I may be missing something. As stated in my digital resilience audit, I actually use both Tarsnap and restic for different use cases. That said: Tarsnap's deduplication works on the archive level, not on the particular files etc within the archive. Someone can set up a write-only Tarsnap key a…

[deleted]
Post reply on HN