this post was submitted on 27 Apr 2026
1294 points (98.6% liked)

Technology

88183 readers
3233 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Pika@sh.itjust.works 1 points 4 months ago

they have a third party hosting provider that keeps backups on the same storage volume as production? That right there is a whole other concern.

whoever decided that backups need to be directly tied to storage volumes needs to reevaluate hardcore. I see no reason to link it directly to storage volumes and deleting a storage volume should not delete the backups that are tied to that volume. That is a systematic flaw that was just waiting to be abused.

In this case, it was an AI agent "going rogue", but what if it was a hostile attacker that just decided they wanted to be malicious. deleting a storage volume, using an API key, should not delete the backups that are associated with that volume, Realistically, that should be a whole separate system, and you should be able to restore backups that are under your account to whatever volume you want to.