Mastodawn

The Oops Agent is done. Im finishing up final testing.
It provides true zero-knowledge end-to-end encryption.
Data is encrypted at the source before it ever touches the network.
Even if we were compromised, your data is secure.
#database #buildinpublic #mongodb #postgresql #mysql

Kovac Ivan Mar 5

Update on Oops Agent. The Go-based, zero-knowledge agent is moving along.
I’m weighing two options:
- Providing pre-compiled binaries for immediate use.
- Requiring users to install tools to ensure they know exactly what code is running.
Given that Oops Backup is built on the premise of privacy and security, I’m leaning toward making it easy while providing all the tools for manual verification.
Do you prioritize a 1-minute setup, or do you strictly build from source?
#buildinpublic #database

Show thread

Kovac Ivan Feb 25

@DRYAPAPER Great question. I’m planning to use Envelope Encryption.

Basically, each backup gets its own unique key, which is then wrapped by a Master Key. This allows for key rotation by just re-wrapping the metadata—no need to re-encrypt the actual backup data. For management, I'm looking at using the system's native keychain and providing a BIP-39 recovery phrase at setup.

Kovac Ivan Feb 24

Why settle for standard backups when you can have 𝗭𝗲𝗿𝗼-𝗞𝗻𝗼𝘄𝗹𝗲𝗱𝗴𝗲 𝗘𝟮𝗘𝗘?
The upcoming 𝗢𝗼𝗽𝘀 𝗔𝗴𝗲𝗻𝘁 (built in Go) is designed to handle your PostgreSQL, MySQL, and MongoDB backups with local-first encryption. Your keys never leave your infrastructure.
Security shouldn't be an afterthought.
It’s the core of everything we do at Oops Backup.

#SelfHosted #Database #Privacy #SaaS #CyberSecurity #BuildInPublic

Kovac Ivan Feb 20

Roadmap Update!

Currently prototyping an Open Source Agent for those who need true End-to-End Encryption.

Local Encryption: Data is encrypted on your server before it ever hits the wire.
Zero-Knowledge: We never see your keys or your raw data.
Simplicity: Keeping the 1-line install goal.

Managed backups for speed, Agents for high-security. Best of both worlds coming soon. Stay tuned.

#buildinpublic #indiehackers #selfhosted #SaaS

Kovac Ivan Feb 19

A great lesson in building in public today.

Peteris from Healthchecks called me out on HN regarding End-to-End Encryption. And he was 100% right. my managed setup is "Encrypted at Rest," but not true E2EE because data is "seen" in-flight.

Already updated the site to be technically accurate (no more E2EE buzzwords) and defined Oops Backup as the "easy/managed" choice for indies.

Next?
Building an Open Source Agent for true E2EE.
Thanks for keeping the bar high.

#buildinpublic #SaaS #backup