Keeping copious and correct backups of important data is crucial, folks. Losing last year’s tax records is rough. Losing your vacation photos from the time you tightrope-walked across the Grand Canyon is awful. But losing community or customer data is inexcusable. There are many ways to keep your data safe, and if you’ll grant me a moment of your time, I’d like to discuss a few of the methods we use at Bill On Site.
Mirroring
This is the most dangerous backup solution out there and has absolutely ruined people. What? A dangerous backup solution? It’s true. Mirroring is dangerous because it is generally useless and yet lulls people into a false sense of security.
What is mirroring? Glad you asked. Mirroring involves making a straight, 1:1 copy of any data you write, as its written, and putting it somewhere else. Say, on another drive or another machine or even in a whole ‘nother warehouse. The idea here is that if one drive/machine/warehouse explodes, you still have a copy somewhere else to rely on.
Sound, yes. And in fact, Bill On Site has a database mirror that we can rely on if our main database does implode. But sadly, this is where a lot of backup procedures stop, and this is where the danger lies.
For example, a flight simulator community relied on manually mirrored databases, and when a hacker got ahold of the credentials for both servers (presumably the same credentials, or at the very least not treated separately), he wiped both servers and now their data is gone forever.
Journalspace – a 6-year-old company – relied solely on mirroring to their doom, too. Nobody’s coming forth as to exactly what bug/hack caused their entire database to be overwritten, but their mirroring software dutifully overwrote their backup too, nullifying 6 years of journals at a go and breaking thousands of hearts.
Mirroring is a good start, but you can’t end here.
Snapshots
A snapshot is a picture of how something looked at a point in time. So, for example, if you took a snapshot of your database every night, the very worst you could ever possibly be out is 24 hours of data. We use snapshots at Bill On Site, only more frequently than once a day. (Who wants to lose yesterday’s invoices, really?)
And much like how you wouldn’t throw out your snapshots of your vacation from ten years ago because you just had a vacation last week, you wouldn’t throw out your snapshots from a week ago because you just took one yesterday (only for entirely different reasons, I know). Your snapshot from yesterday could be corrupt, or worse, your entire last month’s worth of snapshots could be subtly corrupt in a way that you don’t notice at first. You want to have them all available to restore from, Just In Case.
Offsite backups
Where to store those snapshots? Somewhere else. That’s right. You really don’t want to store your snapshots on the same server as the rest of your data. What if that room caught on fire and took your server with it? You’d have no backups and be ruined, that’s what.
An excellent place to store these backups is Amazon’s S3. You’re charged based on how much bandwidth you use and how much disk space you take up, and since snapshots happen infrequently, this is not a lot of money. If you’re rather concerned about money, you could download your oldest backups, burn them to a couple of DVDs (so you can store them in different locations, natch), and remove them from S3, saving you a few dollars a month. Just so long as this critically important data isn’t all in one spot, you’re much better off.
Different credentials
A whole lot of people get their bank accounts and Paypal hacked because they use the same username and password for their email as they do for their more secure financial logins. Guessing email address passwords is really easy if you know anything about your target – you just fill out the “forgot my password” form, enter in some easy-to-research personal information, and bam. Email account compromised. From there, you can get certain services to just email the password to that service to you in plaintext. (Bad! Bad! Bad! But it still happens…) And then you can use these passwords to log into still other sites because generally people only use one or two passwords.
Don’t think it could happen to you? It’s exactly what happened to Sarah Palin during the election. Some young kid guessed her birthday (wikipedia), zip code (wikipedia + online postal service), and where she met her spouse (wikipedia + some shrewd guessing = “wasilla high”). Suddenly her email account was open to the entirety of the internet, and access was given directly to a bunch of “fun-loving hackers.”
(If you know anything about Anonymous, you’ll know that “fun-loving hackers” is just about the most polite thing that can be said about them. Really, Anonymous makes up the underbelly of the internet, but that is perhaps a topic for another day.)
Realy, you have to make sure your important credentials are different, so that if someone compromises your main server, they don’t instantly gain access to all your backups as well.
Testing Your Backups
Though apocryphal, there’s the ever-popular tale of the computer repair technician visiting a customer whose system had crashed to restore a backup. The technician gets there and asks them to describe their backup process, and is told by the secretary that at the end of each day, she just drags the little “Desktop” icon onto the CD ROM icon, and it backs things up automatically! Of course, things are seldom that simple, and it turns out that for the past three years, she’d been meticulously backing up solely her Desktop folder – where absolutely no documents of importance were stored.
Now, had this company tested their backups, this wouldn’t have been an issue. It would have been caught on day one. Which is why everyone should test their backups – not only when the system is first implemented, but also on a regular basis. Make sure everyone is familiar with the process, and you’ll have much less downtime when things DO happen.
Summary
Proper backups are critical to the continued success of any company that stores any form of information, and they are never as simple as “just doing” one or two things. There are a great many things to keep in mind when considering the safety of your backups, and even the things listed in this article are merely a good starting point.
At Bill On Site, we take data security seriously, and you should too. If you are in charge of any amount of critical business data, and any of the above is news to you, then you have some learning to do. Read a book, take a course, or hire a professional, but do something before the worst happens while you’re unprepared.
Images: FreeDigitalPhotos.net