{"id":3191,"date":"2011-06-21T12:28:05","date_gmt":"2011-06-21T02:28:05","guid":{"rendered":"http:\/\/nsrd.info\/blog\/?p=3191"},"modified":"2018-12-11T15:01:01","modified_gmt":"2018-12-11T05:01:01","slug":"this-is-wrong","status":"publish","type":"post","link":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/","title":{"rendered":"This is wrong"},"content":{"rendered":"<p>In &#8220;<a href=\"http:\/\/mobile.itnews.com.au\/Article.aspx?CIID=261195&amp;type=News\">Distribute.IT reveals shared server data loss &#8211; News &#8211; iTnews Mobile Edition<\/a>&#8221; (June 21, 2011), we&#8217;re told:<\/p>\n<blockquote><p>Distribute.IT has revealed that production data and backups for four of its shared servers were erased in a debilitating hack on its systems over a week ago.<\/p>\n<p>&#8230;<\/p>\n<p>&#8220;In assessing the situation, our greatest fears have been confirmed that not only was the production data erased during the attack, but also key backups, snapshots and other information that would allow us to reconstruct these Servers from the remaining data,&#8221; the company reported.<\/p><\/blockquote>\n<p>You may think that I&#8217;m saying the hack is wrong &#8211; and anyone conducting such a malicious attack is certainly being particularly unpleasant. But the simple truth is that such an attack should <em>not<\/em> be capable of rendering a company unable to recover its data.<\/p>\n<p>It suggests multiple design failures on behalf of Distribute.IT:<\/p>\n<ul>\n<li>Backups were not physically isolated; regardless of whether you can erase the current backup, or all the backups on nearline storage, there should be backup copies that are sent off-site and removed from such attack;<\/li>\n<li>Alternatively, if there were offsite backups \u2013 if they <em>were<\/em> physically isolated, they were not sufficiently secured;<\/li>\n<li>Retention policies seem inappropriately small; why could they not recover from say, a week ago, or two weeks ago? The loss of some data even under a sustained hack should be somewhat reversible if longer-term backups can be recovered from. Instead, we&#8217;re told: &#8220;we have been advised by the recovery teams that the chances for recovery beyond the data and files so far retrieved are slim&#8221;.<\/li>\n<\/ul>\n<p>It&#8217;s also worth noting that this goes to demonstrate a worst case scenario about snapshots \u2013 they&#8217;re typically reliant on some preservation of original data (either running disks, or ensuring that the amount of data deleted\/corrupted doesn&#8217;t exceed snapshot capacity).<\/p>\n<p>I&#8217;m not crowing about data loss \u2013 I completely sympathise with Distribute.IT on this incident. However, it is undoubtedly the case that with an appropriately designed backup system, this level of data destruction should <em>not<\/em> have happened to them.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In &#8220;Distribute.IT reveals shared server data loss &#8211; News &#8211; iTnews Mobile Edition&#8221; (June 21, 2011), we&#8217;re told: Distribute.IT has&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3,4,5,8],"tags":[123,1245,335,421,422],"class_list":["post-3191","post","type-post","status-publish","format-standard","hentry","category-architecture","category-aside","category-backup-theory","category-data-loss","tag-attack","tag-data-loss","tag-distribute-it","tag-hacker","tag-hacking"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"RAID isn&#039;t backup, on-platform protection isn&#039;t backup, and other lessons from hosting provider failures.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Preston de Guise\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Data Protection Hub | All things Data Protection\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"This is wrong | Data Protection Hub\" \/>\n\t\t<meta property=\"og:description\" content=\"RAID isn&#039;t backup, on-platform protection isn&#039;t backup, and other lessons from hosting provider failures.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2011-06-21T02:28:05+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2018-12-11T05:01:01+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:title\" content=\"This is wrong | Data Protection Hub\" \/>\n\t\t<meta name=\"twitter:description\" content=\"RAID isn&#039;t backup, on-platform protection isn&#039;t backup, and other lessons from hosting provider failures.\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#article\",\"name\":\"This is wrong | Data Protection Hub\",\"headline\":\"This is wrong\",\"author\":{\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/author\\\/nsrd\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/#person\"},\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#articleImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d274b0939f505e2f4b85a111bdf61ff0fafc11f17dcd667d16a47d0a3de63a1d?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Preston de Guise\"},\"datePublished\":\"2011-06-21T12:28:05+10:00\",\"dateModified\":\"2018-12-11T15:01:01+10:00\",\"inLanguage\":\"en-US\",\"commentCount\":2,\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#webpage\"},\"articleSection\":\"Architecture, Aside, Backup theory, Data loss, attack, Data loss, Distribute.IT, hacker, hacking\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nsrd.info\\\/blog\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/category\\\/architecture\\\/#listItem\",\"name\":\"Architecture\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/category\\\/architecture\\\/#listItem\",\"position\":2,\"name\":\"Architecture\",\"item\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/category\\\/architecture\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#listItem\",\"name\":\"This is wrong\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#listItem\",\"position\":3,\"name\":\"This is wrong\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/category\\\/architecture\\\/#listItem\",\"name\":\"Architecture\"}}]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/#person\",\"name\":\"Preston de Guise\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#personImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d274b0939f505e2f4b85a111bdf61ff0fafc11f17dcd667d16a47d0a3de63a1d?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Preston de Guise\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/author\\\/nsrd\\\/#author\",\"url\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/author\\\/nsrd\\\/\",\"name\":\"Preston de Guise\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d274b0939f505e2f4b85a111bdf61ff0fafc11f17dcd667d16a47d0a3de63a1d?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Preston de Guise\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#webpage\",\"url\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/\",\"name\":\"This is wrong | Data Protection Hub\",\"description\":\"RAID isn't backup, on-platform protection isn't backup, and other lessons from hosting provider failures.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/2011\\\/06\\\/21\\\/this-is-wrong\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/author\\\/nsrd\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/author\\\/nsrd\\\/#author\"},\"datePublished\":\"2011-06-21T12:28:05+10:00\",\"dateModified\":\"2018-12-11T15:01:01+10:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/\",\"name\":\"Data Protection Hub\",\"description\":\"All things Data Protection\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/nsrd.info\\\/blog\\\/#person\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"This is wrong | Data Protection Hub","description":"RAID isn't backup, on-platform protection isn't backup, and other lessons from hosting provider failures.","canonical_url":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#article","name":"This is wrong | Data Protection Hub","headline":"This is wrong","author":{"@id":"https:\/\/nsrd.info\/blog\/author\/nsrd\/#author"},"publisher":{"@id":"https:\/\/nsrd.info\/blog\/#person"},"image":{"@type":"ImageObject","@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#articleImage","url":"https:\/\/secure.gravatar.com\/avatar\/d274b0939f505e2f4b85a111bdf61ff0fafc11f17dcd667d16a47d0a3de63a1d?s=96&d=mm&r=g","width":96,"height":96,"caption":"Preston de Guise"},"datePublished":"2011-06-21T12:28:05+10:00","dateModified":"2018-12-11T15:01:01+10:00","inLanguage":"en-US","commentCount":2,"mainEntityOfPage":{"@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#webpage"},"isPartOf":{"@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#webpage"},"articleSection":"Architecture, Aside, Backup theory, Data loss, attack, Data loss, Distribute.IT, hacker, hacking"},{"@type":"BreadcrumbList","@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/nsrd.info\/blog#listItem","position":1,"name":"Home","item":"https:\/\/nsrd.info\/blog","nextItem":{"@type":"ListItem","@id":"https:\/\/nsrd.info\/blog\/category\/architecture\/#listItem","name":"Architecture"}},{"@type":"ListItem","@id":"https:\/\/nsrd.info\/blog\/category\/architecture\/#listItem","position":2,"name":"Architecture","item":"https:\/\/nsrd.info\/blog\/category\/architecture\/","nextItem":{"@type":"ListItem","@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#listItem","name":"This is wrong"},"previousItem":{"@type":"ListItem","@id":"https:\/\/nsrd.info\/blog#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#listItem","position":3,"name":"This is wrong","previousItem":{"@type":"ListItem","@id":"https:\/\/nsrd.info\/blog\/category\/architecture\/#listItem","name":"Architecture"}}]},{"@type":"Person","@id":"https:\/\/nsrd.info\/blog\/#person","name":"Preston de Guise","image":{"@type":"ImageObject","@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#personImage","url":"https:\/\/secure.gravatar.com\/avatar\/d274b0939f505e2f4b85a111bdf61ff0fafc11f17dcd667d16a47d0a3de63a1d?s=96&d=mm&r=g","width":96,"height":96,"caption":"Preston de Guise"}},{"@type":"Person","@id":"https:\/\/nsrd.info\/blog\/author\/nsrd\/#author","url":"https:\/\/nsrd.info\/blog\/author\/nsrd\/","name":"Preston de Guise","image":{"@type":"ImageObject","@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/d274b0939f505e2f4b85a111bdf61ff0fafc11f17dcd667d16a47d0a3de63a1d?s=96&d=mm&r=g","width":96,"height":96,"caption":"Preston de Guise"}},{"@type":"WebPage","@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#webpage","url":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/","name":"This is wrong | Data Protection Hub","description":"RAID isn't backup, on-platform protection isn't backup, and other lessons from hosting provider failures.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/nsrd.info\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/#breadcrumblist"},"author":{"@id":"https:\/\/nsrd.info\/blog\/author\/nsrd\/#author"},"creator":{"@id":"https:\/\/nsrd.info\/blog\/author\/nsrd\/#author"},"datePublished":"2011-06-21T12:28:05+10:00","dateModified":"2018-12-11T15:01:01+10:00"},{"@type":"WebSite","@id":"https:\/\/nsrd.info\/blog\/#website","url":"https:\/\/nsrd.info\/blog\/","name":"Data Protection Hub","description":"All things Data Protection","inLanguage":"en-US","publisher":{"@id":"https:\/\/nsrd.info\/blog\/#person"}}]},"og:locale":"en_US","og:site_name":"Data Protection Hub | All things Data Protection","og:type":"article","og:title":"This is wrong | Data Protection Hub","og:description":"RAID isn't backup, on-platform protection isn't backup, and other lessons from hosting provider failures.","og:url":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/","article:published_time":"2011-06-21T02:28:05+00:00","article:modified_time":"2018-12-11T05:01:01+00:00","twitter:card":"summary","twitter:title":"This is wrong | Data Protection Hub","twitter:description":"RAID isn't backup, on-platform protection isn't backup, and other lessons from hosting provider failures."},"aioseo_meta_data":{"post_id":"3191","title":null,"description":"RAID isn't backup, on-platform protection isn't backup, and other lessons from hosting provider failures.","keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-21 05:23:02","updated":"2025-07-20 04:54:13","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/nsrd.info\/blog\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/nsrd.info\/blog\/category\/architecture\/\" title=\"Architecture\">Architecture<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tThis is wrong\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/nsrd.info\/blog"},{"label":"Architecture","link":"https:\/\/nsrd.info\/blog\/category\/architecture\/"},{"label":"This is wrong","link":"https:\/\/nsrd.info\/blog\/2011\/06\/21\/this-is-wrong\/"}],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pKpIN-Pt","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/3191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/comments?post=3191"}],"version-history":[{"count":1,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/3191\/revisions"}],"predecessor-version":[{"id":7505,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/3191\/revisions\/7505"}],"wp:attachment":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media?parent=3191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/categories?post=3191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/tags?post=3191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}