41–50 of 358 posts
What I never quite understand is how this can work in practice. When someone is under real duress, they do not always behave in a logical way and may be too stressed to remember certain details like a password that they never use...
Practise.
"In Australian and British English, 'practise' is the verb and 'practice' is the noun. In American English, 'practice' is both the verb and the noun."
The company that was pitching my employer retina scanners on data center doors 20 years ago had an idea like this. Left eye gets you in, right eye gets you in and alerts security.
As long as the sides are the employee's choice (i.e. the threat actor needs to not be able to know which eye is the duress one).
Earlier quoted context omitted.
If you're held under gunpoint, that script that wipes your entire hard drive will only make your day worse. AFAIK if you actually get detained and questioned at airports, your drive will already get imaged before any password is even tried. You may be able to get away with this on a mobile device where this feature isn't generally expected (because who uses Linux on a smartphone in the first place). I always wonder a…
What does it matter if your drive is imaged if you are using full disk encryption?
Earlier quoted context omitted.
So you're saying if I'm held at gunpoint or forced to surrender my password at the US airport that a password to clear my account of anything would be useless? Neither of them know anything about me. It reminds me of the Trezor hardware wallet that allows you to have multiple passwords into your account. If your forced to give access you can log into the version with little in it. Nobody knows that you have secondary…
If you're held under gunpoint, that script that wipes your entire hard drive will only make your day worse. AFAIK if you actually get detained and questioned at airports, your drive will already get imaged before any password is even tried. You may be able to get away with this on a mobile device where this feature isn't generally expected (because who uses Linux on a smartphone in the first place). I always wonder a…
Then I'll just use a script that doesn't make it look like I deleted everything.
Nice, pretty cool stuff. In high-school I worked on something similar ( https://github.com/rafket/pam_duress ), though this seems to have a somewhat cleaner implementation which is nice to see, and hopefully a more eager maintainer.
I’m reading the readme of your project, and got to the part where it says > for example a mail could be automatically sent from his computer to a rescuer, a script could delete sensitive files in his hard-disk or a certain Rick Astley song could be appropriately played And I’m just imagining someone having set two duress passwords; one for kidnapping situations and one that they put there as a joke. And then they get…
I think it should be pretty trivial to have a hidden dualboot, let's say you have some plain boring Windows that takes 10% of you drive and 90% is unassigned. In reality that's encrypted LVM disk with bootloader on a flash drive that is easily tossed away if necessary. Or zapped in a microwave if you watched too much of Mr. Robot.
The company that was pitching my employer retina scanners on data center doors 20 years ago had an idea like this. Left eye gets you in, right eye gets you in and alerts security.
A PIN disarms the alarms system, the same PIN + 1 disarms the alarm system and notifies security.
Earlier quoted context omitted.
If you're held under gunpoint, that script that wipes your entire hard drive will only make your day worse. AFAIK if you actually get detained and questioned at airports, your drive will already get imaged before any password is even tried. You may be able to get away with this on a mobile device where this feature isn't generally expected (because who uses Linux on a smartphone in the first place). I always wonder a…
What does it matter if your drive is imaged if you are using full disk encryption?
Earlier quoted context omitted.
What does it matter if your drive is imaged if you are using full disk encryption?
They can try their luck again at having you give access.