Well, if that happened, it would all be encrypted, right? Oh…. They’d be able to log in to the cloud account as me and do whatever they want – like download backups of our customer database! The one containing all the super secret information they are hiring us to store!

I hope no one scanned the network, found my backup script, read it, and then scraped my username and password. Of course, there’s that backup account I rarely think about. What’s that, you say? Our development environment was compromised by a hack of another service we use? They were able to roam around our computing environment for a few days undetected? I should probably change my passwords. Now it’ll run around the clock and copy our crown jewels into a safe space in the cloud. I’ll just hardcode a username and password into the script. Modern-day cloud storage and bandwidth mean all I have to do is write a shell script, right? The cloud storage has some security in it, of course, so I’m going to need the shell script to authenticate itself. I mean, how hard can it be? You just have to copy data from one place to another place and have some versioning so you can restore older files, right?

I’m referring to the latest LastPass hack, where it appears a backup copy of its customer database was stolen by hackers.īackups (and their security) should come with a disclaimer like they do on stunt shows: don’t try this at home. It appears that because they did that (and other things), customer data was stolen. It is mind-boggling to me that a $200 million dollar company would have a home-grown backup system – one that stores other people’s sensitive data, no less.

Lastpass backup vault