« All posts

Backup Quietly Resurrects Deleted Users

Backups can inadvertently restore deleted users. Recording deletes is crucial for maintaining security.

Every incremental backup assumes changes are tracked by timestamps. However, when a row is deleted, it leaves no trace, making it invisible to backups. This means that restoring from a backup can inadvertently reinstate users or credentials that were meant to be removed, posing significant security risks. The solution lies in treating deletes as events, ensuring they are recorded and managed properly in backups.