Thoughts on Preventing or Reducing Ransomware

I've become increasingly convinced that the only long-term reliable solution against hypothetical ransomware attacks are airgapped backups. In some industries, there exists the concept of data-diodes that restrict the flow of information in only certain directions.

There almost needs to be a reliable, push-button WORM-filesystem "box" that people can plug into their computer a few times a week to perform a full snapshot. Storage is cheap, it's the implementation that's always the barrier.

limit everyone's access to the good shit.