Bartfliet wrote: ↑Fri Mar 16, 2018 4:23 pm
thagrol wrote: ↑Fri Mar 16, 2018 1:34 pm
You'll get better performance with the drives directly connected to your PC: full USB speed rather than 100Mb ethernet over a shared USB bus at the Pi end.
Yeah, I know. But I'd prefer it to be on a different machine. This (putting my backups on the raspberry) would be the safest should my windows machine ever get infected with ransomeware or whatever, no?
Not really. If your windows machine can write to a network share it can encrypt the files on it, infect them with a virus, delete them, etc. Windows malware won't run on the Pi but it doesn't have to. If you've mapped the network share to a drive letter the malware doesn't even have to be network aware.
If I was feeling paranoid, I'd do the backup like this:
- (Re)boot my PC to linux
- Mount my windows partitions read only
- Connect to the network share over nfs (not samba)
- Back up
- Reboot to windows.
I'd also be keeping multiple generations of the backed up data. How many depends on how often the backup runs and how long you think it will take you to notice any malware problems, undesired changes/deletions, etc.
I wouldn't be running samba on the server either. Out of the box windows doesn't support nfs, so it's an extra hoop for any malware to jump through.
Edit:
This isn't a foolproff solution, any corrupted/infected files will still be broken and linux isn't free of malware. It should prevent any windows malware from running during the backup though.
Arguing with strangers on the internet since 1993.
