Comments on: If an online backup provider was subpoenaed, would it have to hand your data over? http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/ Daily resource for independent consumer information and service reviews Sun, 12 Feb 2012 03:05:30 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: Brock Chvilicek http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/comment-page-1/#comment-68459 Brock Chvilicek Mon, 02 Jan 2012 02:28:04 +0000 http://www.nextadvisor.com/blog/?p=2742#comment-68459 Thanks a lot for sharing this with all people you really know what you're speaking approximately! Bookmarked. Please additionally talk over with my site =). We can have a link trade contract between us! Thanks a lot for sharing this with all people you really know what you're speaking approximately! Bookmarked. Please additionally talk over with my site =). We can have a link trade contract between us!

]]> By: Monroe Sinner http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/comment-page-1/#comment-67674 Monroe Sinner Tue, 27 Dec 2011 11:09:45 +0000 http://www.nextadvisor.com/blog/?p=2742#comment-67674 i own a female bull terrier 5yrs from dog pound and what u said was true i couldn't of asked for a nicer dog (unless u get in the way of her food) i love Maddy she is gorgous i own a female bull terrier 5yrs from dog pound and what u said was true i couldn't of asked for a nicer dog (unless u get in the way of her food)
i love Maddy she is gorgous

]]> By: Laverne http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/comment-page-1/#comment-64034 Laverne Fri, 02 Dec 2011 21:14:33 +0000 http://www.nextadvisor.com/blog/?p=2742#comment-64034 Wanted to drop a remark and let you know your Feed isnt functioning today. I tried including it to my Yahoo reader account but got nothing. Wanted to drop a remark and let you know your Feed isnt functioning today. I tried including it to my Yahoo reader account but got nothing.

]]> By: queenof hearts costumes http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/comment-page-1/#comment-54145 queenof hearts costumes Mon, 18 Jul 2011 06:16:30 +0000 http://www.nextadvisor.com/blog/?p=2742#comment-54145 When I start your Rss feed it appears to be to be a lot of nonsense, is the issue on my side? When I start your Rss feed it appears to be to be a lot of nonsense, is the issue on my side?

]]> By: Alvn http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/comment-page-1/#comment-46722 Alvn Fri, 14 Jan 2011 13:46:49 +0000 http://www.nextadvisor.com/blog/?p=2742#comment-46722 What if the SaaS provider uses "shared" resources? Customer A & Customer B were backed up to the same resources. Customer A is subpoenaed. What happens to customer B's data? What if the subpoena cover the physical device, hard-drive or tape? What if the SaaS provider uses "shared" resources? Customer A & Customer B were backed up to the same resources. Customer A is subpoenaed. What happens to customer B's data? What if the subpoena cover the physical device, hard-drive or tape?

]]> By: Manuel Herrera http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/comment-page-1/#comment-36696 Manuel Herrera Tue, 10 Aug 2010 14:14:29 +0000 http://www.nextadvisor.com/blog/?p=2742#comment-36696 What if the provider is sent a NSL (National Security Letter)? They will be forced to give your information AND to keep the fact a secret. For some online backup services, encryption happens in the client computer, so there is no easy way to recover the keys unless the client software is modified. But for other services that encrypt the data only in the server, there is usually a procedure to recover the encryption keys (I once used a service which offered encryption key recovery). In that case, your only protection to store confidential data, is to encrypt it yourself before running the backup. There are lot of software to encrypt your files. Read "Online Backup: Worth the Risk?" article from SANS Institute at: http://www.sans.org/reading_room/whitepapers/backup/ Just my two cents. Manuel. What if the provider is sent a NSL (National Security Letter)? They will be forced to give your information AND to keep the fact a secret.

For some online backup services, encryption happens in the client computer, so there is no easy way to recover the keys unless the client software is modified. But for other services that encrypt the data only in the server, there is usually a procedure to recover the encryption keys (I once used a service which offered encryption key recovery).

In that case, your only protection to store confidential data, is to encrypt it yourself before running the backup. There are lot of software to encrypt your files.

Read "Online Backup: Worth the Risk?" article from SANS Institute at:
http://www.sans.org/reading_room/whitepapers/backup/

Just my two cents.

Manuel.

]]> By: Timothy Cahill http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/comment-page-1/#comment-31653 Timothy Cahill Mon, 31 Aug 2009 13:52:14 +0000 http://www.nextadvisor.com/blog/?p=2742#comment-31653 Yes, I am a provider and we do not have our customers encryption key. I just wanted to address this situation in regards to a data subpoena (I was actually just discussing this subject with an attorney the other day). Yes, I am a provider and we do not have our customers encryption key. I just wanted to address this situation in regards to a data subpoena (I was actually just discussing this subject with an attorney the other day).

]]> By: John Doyle http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/comment-page-1/#comment-31642 John Doyle Sun, 30 Aug 2009 11:17:21 +0000 http://www.nextadvisor.com/blog/?p=2742#comment-31642 Most providers don't actually have the encryption keys so they would essentially be handing over encrypted data,which without the customer keys would be useless. I guess if the customer was forced to hand over the encryption keys as part of the discovery process then,yes they could access the data. Most providers don't actually have the encryption keys so they would essentially be handing over encrypted data,which without the customer keys would be useless.
I guess if the customer was forced to hand over the encryption keys as part of the discovery process then,yes they could access the data.

]]> By: B Caron http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/comment-page-1/#comment-31641 B Caron Sun, 30 Aug 2009 02:14:06 +0000 http://www.nextadvisor.com/blog/?p=2742#comment-31641 This has nothing to do with your subject but I have found no forums or blogs to tell my story. I am a subscriber to Carbonite, I got in early when the price was 49.95. I just did a restore to a new computer and had to do most of it myself. I am so grateful that I did this BEFORE a hard drive failure, which I was fairly certain was imminent. I asked for assistance, through the program installed on my computer by the company. It has been exactly one full week and NO ONE has bothered to contact me. I would never suggest that anyone use this service. Save your money and buy a back up device!!! This has nothing to do with your subject but I have found no forums or blogs to tell my story. I am a subscriber to Carbonite, I got in early when the price was 49.95. I just did a restore to a new computer and had to do most of it myself. I am so grateful that I did this BEFORE a hard drive failure, which I was fairly certain was imminent. I asked for assistance, through the program installed on my computer by the company. It has been exactly one full week and NO ONE has bothered to contact me. I would never suggest that anyone use this service. Save your money and buy a back up device!!!

]]> By: Timothy Cahill http://www.nextadvisor.com/blog/2009/08/27/if-an-online-backup-provider-was-subpoenaed-would-it-have-to-hand-your-data-over/comment-page-1/#comment-31628 Timothy Cahill Fri, 28 Aug 2009 14:02:17 +0000 http://www.nextadvisor.com/blog/?p=2742#comment-31628 Food for thought with this excellent question would be encryption. As a data storage provider, if forced to turn over a clients data and it is encrypted, and me as a data storage provider that does not have any means to obtain my clients encryption code; I would just essentially be turning over jibberish. How does this play into the whole scenario? Food for thought with this excellent question would be encryption. As a data storage provider, if forced to turn over a clients data and it is encrypted, and me as a data storage provider that does not have any means to obtain my clients encryption code; I would just essentially be turning over jibberish. How does this play into the whole scenario?

]]>