Advice

Avoid Making Dropbox Drive Backups of Your Backups!

There is a new feature in Dropbox which allows you to back up the contents of an external hard drive, SSD, flash drive, etc. You may see a message when you connect an external drive, asking if you want to back it up.

This can be a nice way to back up a flash drive or external data drive, but Dropbox may ask if you want to backup your Carbon Copy Cloner and/or Time Machine external backup drive(s). Unless there is a compelling reason to make a redundant backup of your backup drive(s) to Dropbox, I recommend you click the “Don’t ask me again” box and click the “Not now” button:

If you do allow Dropbox to backup your external backup drive(s), note that those drives can contain a LOT of data and will possibly fill the capacity of your Dropbox account. In addition, the upload process will likely take a long time, making your internet connection perform more slowly during the upload. I don’t recommend this.

If you don’t want to see requests from Dropbox to backup external drives when you connect them in the future, you can disable this feature in Dropbox:

1. Click the Dropbox icon in your menu bar
2. Click the circular icon at the upper right.
3. Choose “Preferences…”

4. Click the “Backups” icon at the top
5. UN-check “Show setup notifications when new external drives are plugged in.”:

Now when a new external drive, flash drive, etc. is connected, Dropbox won’t pester you about backing it up.

If you’ve already allowed Dropbox to backup your external backup drive(s), you will see an icon in your Dropbox with the name(s) of the external drives. For example, note the “Kirk’s Flash Drive” icon in my Dropbox below. You can safely delete these items from your Dropbox account to save space:

MacOS Monterey/Big Sur Backups: Q&A

For those who have bought a new computer or have updated their machine to Apple’s Catalina, Big Sur or Monterey operating systems, here are some things to know about the new(ish) APFS disk format, bootable backups and the Carbon Copy Cloner backup program…

Q: Should I continue to use Carbon Copy Cloner to make backups of my data?
A: Absolutely. A backup to an external drive is the best way to recover from a sick drive mechanism, failed operating system update or lost/stolen computer.

Q: Should I make my Carbon Copy Cloner backups “bootable”?
A: This is a tricky question to answer. Prior to Catalina, the answer was “absolutely”. Today things are a bit more complicated… Start with this article by Carbon Copy Cloner’s programmer Mike Bombich:

https://bombich.com/kb/ccc6/cloning-macos-system-volumes-apple-software-restore

As noted in this article, the answer depends on several factors, including which Mac hardware you have (Intel processor vs. Apple “M1” processor), and if you want to preserve previous “Snapshots” (points in time from which you can restore data).

If you’re running an Apple silicon “M1” Mac, I recommend using Carbon Copy Cloner’s “Standard” data-only backup strategy. For Intel-intel based Macs, I still recommend the “Legacy Bootable Backup”.

Q: What do I need to know about backups in Catalin, Big Sur or Monterey?
A: Disks used to boot a Mac are now required to be formatted in Apple’s newer file system (APFS). If you have an older backup drive which was previously set up for an earlier operating system (“Mac OS Extended, Journaled”, a.k.a “HFS +”, it is will likely need to be erased and reformatted as APFS. Note: This will permanently destroy all previous backup data on the drive.

Q: Can I continue to use my old external spinning hard drive for Carbon Copy Cloner bootable backups of Catalina, Big Sur or Monterey?
A: I don’t recommend this. The performance of a spinning hard drive formatted as APFS is terrible. In an emergency it may take 8-10 minutes to boot from a spinning APFS drive (vs. <60 seconds to boot from a backup made to a solid state drive (SSD). SSDs are becoming much more affordable per Gigabyte, are exponentially faster than spinning hard drives, and are more resilient to bumps and bruises due to them having no motor or moving parts to wear out.

As of this writing (October, 2021), a name-brand 1TB SSD can be had for around $155 and a 2TB model for ~$300.

Q: Should I upgrade to Carbon Copy Cloner 6?
A: If you’re running Mac OS Catalina, Big Sur, Monterey or later I recommend updating to Carbon Copy Cloner 6. CCC6 is significantly faster and the upgrade price is only $20. Here’s a list of some of the new features:

https://bombich.com/blog/2021/05/19/ccc-6-here-faster-backups-better-accountability-dark-mode-and-so-much-more

Note: Carbon Copy Cloner 6’s user interface is a bit different and may take some getting used to. If you’re running a version of Mac OS before Catalina, Carbon Copy Cloner 5 still works fine.

Q: Should I run both Carbon Copy Cloner and Time Machine backups?
A: Yes. Keeping multiple backups is always a good idea and Time Machine and Carbon Copy Cloner will work to save your data in different ways, depending on the crisis/scenario.

Q: Can I keep using my old spinning external drive for Time Machine backups?
A: Yes. As long as you have enough ports on your computer to connect both drives (or are comfortable rotating external drives on a regular basis), your old Time Machine disk can still be used. If your old spinning drive was previously partitioned for both Carbon Copy Cloner and Time Machine, the Carbon Copy Cloner volume can usually be deleted, making more room available for future Time Machine backups.

Q: Should I exclude my external backup drive from Spotlight indexing?
A: Yes! This prevents a scenario where you search for a file and inadvertently open the copy on the backup drive. If you then edit and save your changes, those changes will NOT reside in the original file on your internal storage. This can be confusing later when you open the original file and your edits are not there!

Q: The icon for my external backup device disappeared from the Desktop during the first run of a Legacy Bootable Backup run. What’s up with that?
A: This is a normal, (but annoying) behavior of Apple’s ASR tool which Carbon Copy Cloner uses to create a bootable clone. The destination disk’s icon will appear again when the copy is finished.

There are plenty of options and questions involved in backing up your Mac. Feel free to contact me via email or the “Contact” section on the right of this page for technical translation and/or advice on or help with any of the above.

Kirk van Moon
LANsharks Consulting

Using Quad9’s Free Service to Protect Your Mac Online

The internet is ripe with scams, malware and phishing attempts. A common method for hackers to obtain your important usernames/passwords is to set up a site which looks *very* similar to your financial institution’s or webmail login. If you don’t notice the address is slightly different than the actual site (i.e. www.citibank.com vs. www.citiibank.com), you may be fooled into providing your credentials at a fake site. The scammers then use the credentials you entered to log in to the real site and drain your bank account, read your personal email, etc.

To help prevent these types of scams, I recommend a free service from a company called Quad9, as a filter for malware and fraudulent sites. A bit of background first, but if you’re already convinced you can skip to the Setup Guide.

When your computer wants to connect to anything on the internet (a web server, send/receive email, update your calendar, etc.), it first needs to do a “Domain Name Service” (DNS) lookup. The internet works on numerical “IP Addresses,” which look something like 69.27.37.10. But numbers are hard for us humans to remember, so we use named entities instead. Rather than having to remember the numerical IP address for Google’s search page, we just enter www.google.com and the computer does a DNS lookup to find the IP address for that particular server. Think of DNS as the “directory information” or “411” of the internet. Here’s a short video describing how DNS works: https://www.youtube.com/watch?v=kURzoJ0Qj9o

By default, most computer users’ DNS lookups are handled by the DNS server at their ISP. This generally works fine, except:

1. The DNS server at your ISP will resolve any domain name your computer asks for. Therefore, if you enter www.infectmycomputerwithmalware.com, the ISP’s name server will diligently do the lookup and point your computer to the IP address of the server which serves that website. There is no filtering or anything to protect your computer from visiting some of the dark and crusty locations on the internet, which may be ripe with malware, viruses and other bad stuff.

2. Most ISPs look at the sites you visit (not the actual pages, but the internet addresses), based on your DNS queries. So if you visit www.iwantanewmazzerati.com, expect to see some advertising for new sports cars soon. This data is then sold to advertisers and used for who-knows-what marketing and other purposes.

I use and am a big fan of Quad9. Quad9 works in tandem with IBM’s security databases and financial companies who keep lists of known-bad-news and look-alike domains. The Quad9 DNS servers will not allow your computer to resolve the name of a known-malicious or look-alike domain to an IP address which your computer would then connect with. So even if you enter www.bankofamerrica.com (note the misspelling with a second “r”), your browser won’t be directed to a fraudulent site asking for your login/password or whatever malicious content is served at that site. In addition, Quad9 doesn’t collect, track or sell any of your DNS searches.

Using Quad9 is particularly helpful in preventing email scams which may point your computer to a website which looks exactly like that of a site you use regularly.

The setup of Quad9 takes literally 2 minutes to enter 9.9.9.9 in your DNS server settings in System Preferences > Network > Advanced.

Setup Guide: https://www.youtube.com/embed/NM4AdfEnAmY?autoplay=1

I can’t recommend this simple step strongly enough. Let me know if you have questions or need a hand. Feel free to share this with those who may benefit.

Kirk out

P.S. I also urge you to enable two-factor authentication at any site where it is offered, particularly for financial institutions.