If you implement a 3-2-1 or 4-3-2 backup strategy, test your backups, and do not open any ports on your host, you’ll likely be alright. But it’s an understandable concern.
I don’t worry about backups (mine are already near-perfect), but the more i open up access to our images, the more…well…open they are. Even if limited to local and firewalled and whatnot. Can’t manually check every update on the source.
And as they say…comfort rarely goes hand-in-hand with security. You gotta give up one for the other.
If you implement a 3-2-1 or 4-3-2 backup strategy, test your backups, and do not open any ports on your host, you’ll likely be alright. But it’s an understandable concern.
I don’t worry about backups (mine are already near-perfect), but the more i open up access to our images, the more…well…open they are. Even if limited to local and firewalled and whatnot. Can’t manually check every update on the source.
And as they say…comfort rarely goes hand-in-hand with security. You gotta give up one for the other.