Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

I am in need of help with an ibackup.com account.  My client doesn't know their encryption key to restore from their backup.  The key is not encrypted on the website for entry.

Posted on 2014-07-22
3
Medium Priority
?
425 Views
Last Modified: 2014-08-11
My client doesn't know their encryption key for their account.  They thought they had it written down, but cannot locate it.  This is needed to be put in on the website to allow for the restore of data.  

The passkey they enter is not encrypted on the site. (ie. They are not entering the hash in to the field, just the password)  

I have spoken to tier 1 and tier 2 and both said that they do not store the password data so they are not able to reset the key without resetting the entire account and losing all of the backup data.  The techs told me to try and keep guessing passwords and brute force in.  This doesn't seem like a great use of our time.  Does anyone have any advice?  Thank you.
0
Comment
Question by:mjsimmer
  • 2
3 Comments
 
LVL 5

Expert Comment

by:amac81
ID: 40212421
I have been in a similar scenario with iBackup and their technicians are correct.  Their systems handle the encryption using the key without any interaction.

Perhaps they could send you the encrypted copy of the backup set on a USB disk and you could brute force that....might be best case.
0
 

Accepted Solution

by:
mjsimmer earned 0 total points
ID: 40244520
We gave up and hope the data can be recovered off of the drive.
0
 

Author Closing Comment

by:mjsimmer
ID: 40252652
No real solution. That is why it is encrypted. If the customer loses the password shame on them!
0

Featured Post

Ready for your healthcare security check-up?

In the past few years, healthcare organizations have become a prime target for advanced attacks. Does your organization have what it needs to defend itself? Schedule your healthcare security check-up today and download our free Healthcare Security Resource Kit today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes Administrators rights are not enough. These cases call for the SYSTEM account. The process in this article outlines the steps required to execute commands using the SYSTEM account.
What monsters are hiding in your child's room? In this article I will share with you a tech horror story that could happen to anyone, along with some tips on how you can prevent it from happening to you.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

927 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question