diff --git a/doc/EN/backups.org b/doc/EN/backups.org index 4861a387..da17a1b8 100644 --- a/doc/EN/backups.org +++ b/doc/EN/backups.org @@ -18,6 +18,8 @@ #+END_CENTER * Backup to USB +First and foremost - *encrypt your USB drives*! Even if you think you have "/nothing to hide/" if you accidentally lose a USB thumb drive (it's easy to lose small objects) and it's not encrypted then potentially someone might be able to obtain enough information about you to commit identity fraud, take out loans, open bank accounts, etc. Use LUKS encryption. In Ubuntu you can do this using the /Disk Utility/ application. Some instructions [[https://help.ubuntu.com/community/EncryptedFilesystemsOnRemovableStorage][can be found here]]. + Insert a USB thumb drive into the front socket of the Beaglebone Black. Log into the system and become the root user, then run the /backup/ command. @@ -28,7 +30,7 @@ su backup #+END_SRC -If this is the first time that you've made a backup then you will be prompted for your GPG key password. +Type in the password for the USB drive, then if this is the first time that you've made a backup then you will be prompted for your GPG key passphrase. When the backup ends remove the USB drive and keep it somewhere safe. Even if it gets lost or falls into the wrong hands the content is encrypted and so is unlikely to become a source of leaks. * Restore from USB @@ -42,7 +44,7 @@ su restore #+END_SRC -You will be prompted to enter your GPG key password, then when the restore is complete you can remove the USB drive. +Enter the password for the USB drive, then you will be prompted to enter your GPG key passphrase. When the restore is complete you can remove the USB drive. * Distributed backups Distributed backups are a better way of ensuring the persistence of your data, such that even if your system gets stolen or destroyed then the data will still be recoverable from your friends. Since the backups are encrypted your friends (or anyone else with access to their systems) won't be able to read your backed up content even if their systems are subsequently compromised. diff --git a/doc/EN/installation.org b/doc/EN/installation.org index 64098004..2467afb3 100644 --- a/doc/EN/installation.org +++ b/doc/EN/installation.org @@ -181,7 +181,7 @@ On your internet router, typically under firewall settings, open the following p * Keydrives After installing for the first time it's a good idea to create some keydrives. These will store your gpg key so that if all else fails you will still be able to restore from backup. There are two ways to do this: ** Master Keydrive -This is the traditional security model in which you carry your full keyring on an encrypted USB drive. To make a master keydrive first format a USB drive as a LUKS encrypted drive. In Ubuntu this can be done from the "Discs" application. Then plug it into the Freedombone system, then from your local machine run: +This is the traditional security model in which you carry your full keyring on an encrypted USB drive. To make a master keydrive first format a USB drive as a LUKS encrypted drive. In Ubuntu this can be [[https://help.ubuntu.com/community/EncryptedFilesystemsOnRemovableStorage][done from the /Disk Utility/ application]]. Then plug it into the Freedombone system, then from your local machine run: #+BEGIN_SRC bash ssh myusername@mydomainname -p 2222 @@ -193,7 +193,7 @@ exit If you are on a Beaglebone Black then use /sda/ rather than /sdb/ for the drive parameter. ** Fragment keydrives -This breaks your GPG key into a number of fragments and randomly selects one to add to the USB drive. First format a USB drive as a LUKS encrypted drive. In Ubuntu this can be done from the "Discs" application. Plug it into the Freedombone system then from your local machine run the following commands: +This breaks your GPG key into a number of fragments and randomly selects one to add to the USB drive. First format a USB drive as a LUKS encrypted drive. In Ubuntu this [[https://help.ubuntu.com/community/EncryptedFilesystemsOnRemovableStorage][can be done from the /Disk Utility/ application]]. Plug it into the Freedombone system then from your local machine run the following commands: #+BEGIN_SRC bash ssh myusername@mydomainname -p 2222 diff --git a/website/EN/backups.html b/website/EN/backups.html index a404124e..0e68662d 100644 --- a/website/EN/backups.html +++ b/website/EN/backups.html @@ -4,16 +4,22 @@ - + +