There should be no over-ruling this ...
So, we need someone to develop a "write-once" filesystem? Although I suppose even that fs could be subverted, given suitable system privileges, by installing a hacked rw version of the same and mounting (and then altering) the backups filesystem with it.
OK, so all (suitably paranoid) backups should only be to write-once media, then?
Biting the hand that feeds IT
