81–90 of 358 posts
Earlier quoted context omitted.
This is also very typical for regular alarm systems with a keypad. A PIN disarms the alarms system, the same PIN + 1 disarms the alarm system and notifies security.
I worked at a place where the duress code was ROT5: 1234 was your normal access code, 6789 lerted security.
Earlier quoted context omitted.
I worked at a place where the duress code was ROT5: 1234 was your normal access code, 6789 lerted security.
You're supposed to ROT5 mentally while in a state of high stress?
You could set this up with three possible passwords, #1 for normal login, #2 for what looks like normal login but deletes most sensitive things and #3 that wipes the disk encryption keys and reboots. If forced by criminals or a not so free government enter #2 and pretend everything is normal. If pressured by the US or EU government with your lawyer present enter #3, see it fail and claim you forgot the encryption key…
Using #3 could land you in jail indefinitely in the UK I believe: if they don’t believe you forgot the password, they can interpret that as a refusal to give them the password (or unlock the computer), and jail you for this… until you give them the password. Which you can’t, because there is no password at this point. So either you admit that you just wiped your computer with the panic password, or you can shut up an…
Earlier quoted context omitted.
https://xkcd.com/538/
The duress credentials are exactly how you avoid the "pipe wrench" scenario. The point of the FDE in that case is simply to prevent them from looking on the disk without your supervision.
They don't keep it from being applied.
The company that was pitching my employer retina scanners on data center doors 20 years ago had an idea like this. Left eye gets you in, right eye gets you in and alerts security.
yeah there's that one guy who tried to cross the border from canada and got blocked for having scruff on his phone https://www.huffingtonpost.ca/2017/02/22/canadian-man-custom... 5 years on we're somehow all managing our own crypto keys, the phone is the key to unlock our digital lives, so we're all in the counterintelligence game. more tools like this.
Earlier quoted context omitted.
This is also very typical for regular alarm systems with a keypad. A PIN disarms the alarms system, the same PIN + 1 disarms the alarm system and notifies security.
I worked at a place where the duress code was ROT5: 1234 was your normal access code, 6789 lerted security.