Backup and DR

“Our backups are immutable” usually means someone ticked a box. Ransomware does not care about the box. It cares whether anyone, including you, can still log in and delete the files. Here is what a hardened Linux repository and a locked deduplication appliance really require, the traps I hit building both, and the commands that prove the lock is real.