Hi All

I have built a linux media server for a friend, this holds his photos music and a few documents.
This server is connected by openvn to my server and his OS and config files (No media) are backed up to my server once a day.
Last night I asked him why I had'nt seen any backups from his server for a while, his answer left me speechless.

The answer was that his wife was working on "secret stuff" (C-I-C rather than anything else) and the fact that his server was backed up to mine was an issue.

Bear in mind that:-
Their internet connection is with a standard commercial ISP
and use Wifi
They have :-
Two Samsung smart TV's
More than one XBMC Arm boxes running a version of linux for stearming of films
2 Iphones and one Ipad
1 Android tablet device
The wife works on a standard Mac via email (a cloud service)

How should I respond to this ?

And be nice he is a friend !!

Thanks

That you're offering the off-site backup facility is nice but it's his choice...
How about encrypting the backups before sending them over and enabling the audit service to "watch" over them?
That way you can never access them accidentally or otherwise and you can (somewhat) prove that.

BTW doesn't the CIC TLA stand for "Christ I'm Confused"? ;-p

Hi UnSpawn

Thanks for the reply, I'm only backing up the OS and its config files none of his data.
I think the wifes belief was I could spy on network traffic and considering the poor reputation of most of the devices on his network I found it annoying that they trust Apple devices not to spy or have weak security. The Samsung tvs are known to spy and sniff. The XBMC boxes could be transmitting to anyone as could the uncontrolled apps on Android etc etc etc However a friend is the risk !!

No knowledge is a dangerous thing I think !

BTW Comercial In Confidence !

Transparency is what you need. Don't "think" but plainly ask if that actually is the case. It should be easy to disprove.


Strictly speaking that has nothing to do with them in relation to you providing your backup service. I do understand your concerns though. If you want to discuss potential privacy concerns (scaring is caring? ;-p) with them then that too could be addressed by auditing.