Question

HI there:

I m a software developer and as (probably) most of you, have an app that has data that i want to back up to a different location.

I created this little application that will back up my data every so often and then keep a copy to ourselves and do another copy and upload it to S3.

The “customer” (ie the actual owner of this data) asked me, how secure is that, and I though well…

• We have many locations where the data is stored, so at least there will be a copy of the data available
• The way we upload the data is safe ( or so I think)
• The data in S3 is encrypted

So I would consider that safe enough for this app,
Am I missing something?

Answer 1

The only two things that I’d make sure are that:

1. You authenticate for uploading the data with SSL (assuming the data is encrypted when you upload, otherwise it should be)
2. You don’t store the encryption key anywhere where the data is stored.

Based on where I’ve seen data lost recently I’d say you are more likely to lose it through one of your servers being hacked or a laptop being stolen than a MITM attack or Amazon being hacked.

I’d ask why you don’t store it encrypted for your local backup too?