Forgot your password?

typodupeerror

Comment: Re:Hard drives have replaced tape... (Score 1) 403

by pe1chl (#38096096) Attached to: Why Do Companies Backup So Infrequently?

Wait until your boss deletes that important document and your RAID system has deleted it on all drives in the array immediately at his request.

Or your business application is slowly corrupting the database and it is noticed (or finally confirmed) only after 3 weeks of use.

At that time you want to be able to get old data back. This is not something your array is going to be able to provide you.

Comment: Re:Who are these companies? (Score 1) 403

by pe1chl (#38096070) Attached to: Why Do Companies Backup So Infrequently?

Of course when someone had deleted half of the data in your finance database and you would notice it on the year or month close, you would already have overwritten all your backup media and lost your data forever.

Some time, someone will come at your desk and ask "I'm sure I had that contract in my documents folder last year but when I look now it has vanished".
At that moment you will realize that your backup rotation scheme is not as clever as you first believed.

Comment: Don't have the bandwidth for a cloud backup (Score 2) 403

by pe1chl (#38095866) Attached to: Why Do Companies Backup So Infrequently?

I'm not sure how everyone gets so ecstatic about those cloud backups. When we would need to send all our data over the internet connection it would take an unworkable amount of time to complete the backup.
Even to the local LTO-4 drive, which runs at over a gigabit per second, the backup takes an appreciable amount of time.
Cloud backup may be good for a 3-man company doing document editing, but with the amounts of data that are common these days, and the speeds of internet connection that you normally have, I don't see it as a realistic possibility.

Comment: Re:Who uses tape any more? (Score 4, Insightful) 403

by pe1chl (#38095804) Attached to: Why Do Companies Backup So Infrequently?

RAID is not a replacement for a backup.
RAID will safeguard you against the failure of a single disk (if and only if you monitor the system and replace disks as they fail), but backup will give you back your data as it was before your application destroyed it or your user deleted it. That is something completely different.

Comment: There are too many PDF features (Score 1) 257

by pe1chl (#37877352) Attached to: Meet Firefox's Built-In PDF Reader

What people apparently don't realize is that there are way too many features in PDF to do a quick and dirty viewer.
It will probably work on some simple PDFs created by a "print to PDF" tool, but once you start viewing more advanced PDFs you will be in trouble.
Some time ago we switched from Adobe Reader to a competitor PDF reader where I work, and we still encounter PDFs that view OK in Adobe but fail in the new viewer.
Especially (but not only) PDFs that contain user fillable forms cause trouble.

The experience is much like using another browser than Internet Explorer was 5 years ago.
Often it worked, but frequently you encountered pages that won't render or function correctly.

Comment: Re:At some point (Score 1) 111

by pe1chl (#37329138) Attached to: GlobalSign Suspends Issuance of SSL Certificates

The thing is that it does not matter at all how secure the organization you buy your certificate from is.
What matters is how secure the lease secure of those hundreds of organizations that sell certificates is.
You can buy your certificate from the most secure one, but someone else can buy or steal it from the least secure organization and it will be trusted just as much.

Comment: Re:Crypto is hard (Score 1) 78

by pe1chl (#37303440) Attached to: Dutch Government Revokes Diginotar Certificates

To revoke the DigiNotar intermediate, a browser that has OCSP or CRL does not need an update. At least if it is formally revoked by Dutch state (which it isn't, AFAIK).

The updates are only required for root certificate revocations, apparently there is no OCSP or CRL for those (something that should be fixed).
But Mozilla is not distrusting the certificates based on revocation, but guided by the "CN=DigiNotar" in their issuer field.
That is why they need to upgrade the code.

In fact it is ugly, hardcoded exceptions for specific mishaps are being added to the software.
Something should be done that enables control of this kind of mishaps without having to update the software.

E.g. at work we have a Mozilla Seamonkey 2.0 deployment that I cannot yet upgrade to 2.3 because of bugs in that version and there are
no updates to 2.0 released anymore. Of course OCSP is enabled, but it would be better if it also worked for root certificates.

Comment: Re:Untrust Diginotar (Score 1) 78

by pe1chl (#37301344) Attached to: Dutch Government Revokes Diginotar Certificates

They should, but they haven't done that yet.
There is a security bulletin 2607712 that explains what they did for Vista and newer, but for XP and 2003 they should release a new version of rootsupd.exe that will update the list of root certificates.
This is not an update to IE but to a separate Windows component that stores the root certificates.

Say something you'll be sorry for, I love receiving apologies.

Working...