←back to thread

801 points tnorthcutt | 10 comments | | HN request time: 0.864s | source | bottom
Show context
rsync ◴[] No.7524164[source]
As someone who knows a little something about this business, and who has been excited and enthusiastic about tarsnap from day one, I hope Colin pays no attention to what you have written and continues to provide his service (note, I didn't say "run his business") just as he has.

I want to live in a world where tarsnap is sold for picodollars.

replies(4): >>7524205 #>>7524353 #>>7524595 #>>7525046 #
phillmv ◴[] No.7524205[source]
Well, I hope he changes the "auto deleted if you don't check your email for 14 days" and just charges my credit card accordingly. Operating on pre-payment is kind of nutty.
replies(4): >>7524345 #>>7524363 #>>7524395 #>>7525227 #
1. dalke ◴[] No.7524363[source]
The "truly paranoid" would check backup status email more than once every fortnight. ;)
replies(3): >>7524759 #>>7524987 #>>7526693 #
2. mindslight ◴[] No.7524759[source]
One of the benefits of a paranoid setup should be not having to constantly check on things.
replies(1): >>7525404 #
3. kybernetyk ◴[] No.7524987[source]
What happens if I get in an accident and get in a coma for longer than 14 days? What if I get arrested? What if I go on my honeymoon and simply forget about the backup? What if ... truly paranoid people are paranoid about that possibility, too.

I know I am and that this 14 days clause is the only reason why I am not using tarsnap.

replies(3): >>7525780 #>>7525963 #>>7526904 #
4. dalke ◴[] No.7525404[source]
There are many types of paranoia. Micro-managing is one. Eg,

> if you believe you must check on every detail, your style is symptomatic of insecurity or paranoia - http://www.adams-hall.com/micwilstrany.html

In any case, my ";)" from before stands.

5. dalke ◴[] No.7525780[source]
"What-if"s are fun! (Still operating under the ";)" from earlier.)

What if auto-renew were added, but you're robbed and knocked into a coma for 2 months. In the meanwhile, the credit card company notices the suspicious transactions, can't get a hold of you, and cancels the card. Auto-renew occurs 3 days later, but the card number on file doesn't work. Colin Percival calls your phone number, and gets no answer for a month. Then what?

If you're truly paranoid, you might have to consider that possibility as well.

With every scenario and solution you can come up with which require intervention, I can double down on and think of a worse-case scenario where your solution won't work and you'll lose your data. A possible non-intervention solution could work, which is to front-load the account to the limits of your paranoia.

replies(1): >>7526738 #
6. ansible ◴[] No.7525963[source]
Or... you could just put 1 year's worth of funds in your tarnsnap account, and check it every season to top it off.
7. CJefferson ◴[] No.7526693[source]
What is google just decided to filter those e-mails into my spam folder and I miss both? That seems like a very possible thing to happen.
replies(1): >>7527872 #
8. freebs ◴[] No.7526738{3}[source]
What if the payments were taken out of an account automatically and you could load up a reserve with money. This would allow for calculations on your usage:money without it being a major factor on immediate loss of service.
9. ForHackernews ◴[] No.7526904[source]
There are two kinds of paranoia here:

1) Paranoid that you will lose your data.

2) Paranoid that your data will fall into the wrong hands.

It seems to me that Tarsnap values preventing #2 over preventing #1.

To follow on your example, what if the authorities who arrested you want to get their mitts on the data in your tarsnap account? Won't you be happy that your data is irrevocably deleted?

10. dalke ◴[] No.7527872[source]
Why haven't you white-listed them? The problem with the "delete after 14 days" is that it can be hard to predict on your side how long it will take to exhaust credit. But here what you're asking them is to work around a possible misconfiguration on your side. That's a different class of error.

If tarsnap is really a G2G business, then it makes sense to assume you know how to white-list an email address.

How many other misconfigurations should they deal with? What if the battery is dead on your cell phone when they try to call you after several missed the emails? (Or you're out hiking where there's no reception, or on a cruise, or in another country and didn't want to pay high roaming charges, or ...)