PDA

View Full Version : SEVERE Security defect


pluskey
January 11th, 2008, 12:21 PM
This was touched on in a previous thread, but the problem must be amplified!

I had previously recommended this product line very highly. But, there is a severe security defect in the latest build. Until it is fixed, I suggest that this product be AVOIDED!

If you create an incremental backup job, the template allows you to set a password on the backup set. BUT, if you don't have a base full backup created before the incremental job executes, Acronis TI 11 will create what appears to be a full backup, then subsequently run incremental backups, BUT there will be no password protection!

There is NO NOTICE that the password protection is not being enforced. All of the documentation indicates that passwords are always enforced.

The previous versions automatically recreated the base full backup if it was missing, and always enforced passwords. That allowed you to archive your backup set, say to external hard disk or DVD, then automatically start a new backup set.

What was an excellent feature in previous versions has been broken in this version.

If this defect is corrected in a timely fashion, I would return my rating to best in class, because TrueImage was an excellent product until this problem arose.

Big Tom
January 12th, 2008, 07:58 AM
Thanks for pointing that out but I believe they have more severe problems with that buggy product than a password protection that is not working.... For a lot of people, the whole backup does not work because the scheduler is messed up and "support"/development is not able to fix it......

Tom

pluskey
January 12th, 2008, 08:43 AM
I posted on that issue in the past. I also received from tech support the useless information, including the request to upload lots of captured information for their analysis.

There is no answer as to why the new scheduler just stops running.

Now, there is this security issue.

The several really big issues I see are:

1. Schedule not working
2. Stealth security breach, password protection not being enforced
2.a (related) - no AES encryption, even though it is stated as a feature in the TI 11 home feature list.
3. General lack of responsiveness or interest in fixing these problems!

I have been using TI since V9. I never start using the software until the first service release, but TI11 is simply defective and there seems to be no movement toward fixing these major defects.

davshu
January 12th, 2008, 01:02 PM
To me Security is first, foremost, and most important.

If they are to be taken seriously as a backup provider they need to fix these ASAP.

I purchased Acronis based on recommendations from others (of previous Acronis versions).

I don't think there's much chance of getting my money back, but if it isn't fixed ASAP I can go to the sites where I purchased it and post my opinion.