SuperDuper and Ransomware

[MMM]

According to the article below a backup from SuperDuper would be susceptible to ransomware encryption. In other words, if you were infected with ransomware, the SuperDuper backup probably would not help you.

https://www.macworld.com/article/322...=mw_daily_html

The article suggests cloud-hosted backups, but I do not wish to use anything cloud based, unless it is my own cloud (example, NAS).

What is the best way to make my SuperDuper backup not susceptible to ransomware? I have a Synology DS216 private cloud. If I somehow stored a copy of my SuperDuper backup on it, wouldn't that make it secure from ransomware?

[dnanian]

First, it's super unlikely you're going to be hit by ransomware unless you're doing some pretty silly things.

Second, a drive that's not mounted (a rotated backup, for example, or one that's ejected) isn't susceptible to anything, because it's not accessible.

Third, a mix of backups -- local, network Time Machine, network SuperDuper, and -- yes -- cloud, like Backblaze -- means you're really well covered.

I really don't think this is something that you should be worrying about too much...

[corby]

For sure what Dave said.

Plus....it's really a bad idea to keep your backup drive connected to your system because there are many scenarios where you can lose your Mac and your backup (fire. theft, natural disaster, civil unrest, etc).

I know someone that thought they were doing the right thing with automated daily backups....until a burglar took the computer and backup drive.

So....also encrypt! It's easy to do with filevault2

At a minimum, get two backup drives and store one offsite. Consider using cloud with encryption that YOU control...check out ARQ or Cloudberry.