ZellSF wrote:I'm also really confused as to someone claiming to take privacy and security seriously (Ed Oscuro) and not being knowledgeable about modern encryption. If you care about privacy and security every storage device that leaves your house for any reason should be encrypted.
The simple answer to your complaint is that very quickly the additional measures a person can take for "data security" come with diminishing returns - and also may come with specific disadvantages. In my case, I simply don't care to transfer my files over the internet, Encrypted or not. There's no getting beyond that. Of course, this won't hold for everybody else. There's also competing preferences (how much do I want to pay for off-site backup if it provides no tangible value to me, and additionally if that's money I could instead spend on faster, probably more useful fast local storage?). This isn't to say you don't make a good point - but sometimes the answer can come back that encryption and offsite backup isn't the right answer. FOR EXAMPLE: Known hoarders / traders of illegal files get essentially no benefit from encrypting files, lol, because the Justice Department brings down their door and says
you have no reasonable expectation of privacy. And even if you aren't doing anything ethically or morally wrong, you still have signified you have no expectation of privacy from the moment you put the garbage at the side of the road.
You're still right: There are cases where encryption is an obvious value. Nobody in this day and age would tolerate having their login net traffic or their browser's password files unencrypted.
But try as I might, I don't see where I would want to send large bunches of files elsewhere which I wouldn't be able to publicly stand by. If it's just my passwords, I'll write that shit down.
If it's embarrassing information (pictures of good times with friends your significant other doesn't want you to hang out with anymore, for example) and thus should be obscured, then you need to rethink the problem. Use a psuedonym instead of, or perhaps in addition to, encryption, or just don't put the files online, or destroy them, maybe.
If it's financially compromising, then my preference is definitely on the "never let it out of my sight" side of things. If I'm not dealing with an institution known to have already backed-up and encrypted the information, I just keep the paper trail. And even then, this is one of those points where we're always waiting for the other shoe to drop. I don't put zero credence in the security and lifespan of The Cloud, but it doesn't seem to offer me much value, either.
If it's a large bunch of files I want to save - well, there's all kinds of ways of handling that. The stuff I did for the Contra HQ (very little really) is not an appropriate target for encryption. That can be freely passed back and forth. Ditto my camera files: I'm not going to put the RAW files (since the metadata can be forged) anywhere without guarantees - the kind of guarantees that data backup procedures don't address - that the files will still be credited to me.
If the argument is that we should spend real money on robust offsite backups - I'd point out that for me (but not for everybody), having the fastest local file I/O possible is more valuable, and I can get that while also getting a new hedge against data loss. Therefore, I am going to save up for a newer disk leapfrogging my older disk (using them as mutual backups of each other) gives me better value. If the criticism of this is that all the data is going to be blown up at once - if I expected some event to occur which would destroy all my backups, I'd spend my effort and money on making sure my hardware was in good condition, that the disks' SMART returns are healthy, and that my walls and roof are good and secure. If I thought that I was going to lose my house in an earthquake or fire...I'd be thinking about getting the hell outta Dodge.
For me, at least, a new disk is overwhelmingly likely to be a better value. I don't run a RAID, but my thinking goes along the lines of probabilities in similar ways. The only thing I'd caution is that, certainly with SSDs, one needs to make sure that your backups won't all be subject to a single point of failure - plugging multiple SSDs into the same failing computer data port could possibly corrupt them all.
ZellSF wrote:Edit: oh and SSD drives have a long lifetime. You have to be seriously trying to kill them with write cycles.
Depends on the scenario. Aside from the link I posted earlier about power-loss related corruption - which is still a big potential problem for many drives, especially given the high parallelism of these drives scattering the data across the physical layout of the SSD - there's still not as big a MTBF advantage for SSDs as people might think. This might still be an issue if you have to keep your computer parts in service for many years. Enterprise drives are a different matter than consumer drives because they have both very long usage in hours
and also much higher sustained and lifetime transfers - even so, only recently have SSDs overtaken mechanical drives in the MTBF category. The MTBF stat is mentioned [url=
http://www.storagereview.com/ssd_vs_hdd]in this article[/i], which I posted earlier.