Real password:
woD3PRBgELFHH9nuABH]ksD
Duress password:
duress123
PAM Duress – Alternate passwords for panic situations
11–20 of 358 posts
Re: PAM Duress – Alternate passwords for panic situations
#12There's always a big issue with systems like this: Any sophisticated attacker will have an image of the machine he's trying to get into at hand to stop exactly what this pam module is trying to achieve from happening. All this would do is make you appear in a worse light to the deciding judge when it comes to trial or get your other kneecap shattered in a not so civil situation.
Lawenforcement yes, but I'm not sure most criminals are digital enough. Especially if it all looks just normal logged in, but in the background deletes some hidden files.
Re: PAM Duress – Alternate passwords for panic situations
#13I think it should be pretty trivial to have a hidden dualboot, let's say you have some plain boring Windows that takes 10% of you drive and 90% is unassigned. In reality that's encrypted LVM disk with bootloader on a flash drive that is easily tossed away if necessary. Or zapped in a microwave if you watched too much of Mr. Robot.
Re: PAM Duress – Alternate passwords for panic situations
#14There's always a big issue with systems like this: Any sophisticated attacker will have an image of the machine he's trying to get into at hand to stop exactly what this pam module is trying to achieve from happening. All this would do is make you appear in a worse light to the deciding judge when it comes to trial or get your other kneecap shattered in a not so civil situation.
So you're saying if I'm held at gunpoint or forced to surrender my password at the US airport that a password to clear my account of anything would be useless?
Neither of them know anything about me.
It reminds me of the Trezor hardware wallet that allows you to have multiple passwords into your account. If your forced to give access you can log into the version with little in it. Nobody knows that you have secondary accounts with more in it...
Re: PAM Duress – Alternate passwords for panic situations
#15Nice, pretty cool stuff. In high-school I worked on something similar (https://github.com/rafket/pam_duress), though this seems to have a somewhat cleaner implementation which is nice to see, and hopefully a more eager maintainer.
Re: PAM Duress – Alternate passwords for panic situations
#16Real password: woD3PRBgELFHH9nuABH]ksD Duress password: duress123
Duress password "1234", just make sure you have a very good backup and disable SSH password login. Anyone trying to snoop around is going to trigger it.
Re: PAM Duress – Alternate passwords for panic situations
#17The company that was pitching my employer retina scanners on data center doors 20 years ago had an idea like this. Left eye gets you in, right eye gets you in and alerts security.
Re: PAM Duress – Alternate passwords for panic situations
#18It's a very cool idea, but I think it would be most useful if applied to things like phones. I suspect most people pressed for passwords, are using a GUI system.
Exactly. It would be great to have a secondary pin (or my middle finger fingerprint, for example) in my phone to enter in a dummy environment with a few games, some family pics and so.
Re: PAM Duress – Alternate passwords for panic situations
#19I think it should be pretty trivial to have a hidden dualboot, let's say you have some plain boring Windows that takes 10% of you drive and 90% is unassigned. In reality that's encrypted LVM disk with bootloader on a flash drive that is easily tossed away if necessary. Or zapped in a microwave if you watched too much of Mr. Robot.
I think VeraCrypt already enables this. It's called Hidden OS or something like that.
Re: PAM Duress – Alternate passwords for panic situations
#20yeah there's that one guy who tried to cross the border from canada and got blocked for having scruff on his phone
https://www.huffingtonpost.ca/2017/02/22/canadian-man-custom...
5 years on we're somehow all managing our own crypto keys, the phone is the key to unlock our digital lives, so we're all in the counterintelligence game. more tools like this.