Live data from Hacker News

BusKill – A USB kill cord for laptops

buskill.in

81–90 of 339 posts

Re: BusKill – A USB kill cord for laptops

#81
post #72

Earlier quoted context omitted.

It is. What's the postal address of the "operator of buskill.in" so I can file claims with him?

info@buskill.in

You seem to misunderstand what a postal address is.

The provided information on this website is not enough to do legally binding business (at least in some parts of Europe, it's not only Germany).

Re: BusKill – A USB kill cord for laptops

#82
post #60

Might have protected Ross Ulbricht, but he’s an edge case. Anyone had their laptop yanked away while using it?

I thought standard practice was to run no battery, AC adapter only mode.

They will hit the outlet and bring the AC with them, without bumping voltage.

Re: BusKill – A USB kill cord for laptops

#83
post #72

Earlier quoted context omitted.

info@buskill.in

You seem to misunderstand what a postal address is. The provided information on this website is not enough to do legally binding business (at least in some parts of Europe, it's not only Germany).

In Germany you can enter into a verbal contract without any exchange of personal details. Why would a website be treated differently? I'm curious.

As far as I understand German law is very flexible about what constitutes a valid legally binding contract.

Re: BusKill – A USB kill cord for laptops

#86
post #77

Good to have if you run a dark net marketplace or a political disident ring from public libraries. An additional refinement is to autolock the device if a certain personal key combo (ex. Shit - vol up - vol down) is not pressed every few minutes in response to an audible click. If not unlocked in a minute or so with a complex password, the device halts to a disk encrypted state and unpowered ram, minimizing the windo…

The combo solution is not good enough, especially if you are in public.

If you can be observed to use the combo (which you would have to be using regularly) somebody else could be pressing the combo or they could insert USB device that can generate the combo regularly.

I would also add that locking your laptop is not safe enough if you are serious about this. There are devices that can exfiltrate information from what I understand almost every operating system through USB.

Re: BusKill – A USB kill cord for laptops

#87
post #69

There are mentions in this thread about false positives, risk of data loss, others. This made me think of Star Trek's use of a self destruct phrase. Obviously their method is too slow, but you could have a "duress" phrase and a "all clear" phrase. User-Defined Phrase: "Please dont kill me", activates "duress" mode. - A daemon listens in the background for a phrase of your choice. When detected, your laptop makes a so…

I always thought that a lock screen with two passwords would be an interesting idea. Say the BusKill locks your system and sends a request to a server. If you don't enter the correct password to abort the script within a few seconds, it will run on your server, which sends a distress mail/call to emergency contacts, revoke all ssh keys/passwords etc. If however the distress password gets entered, the script still run…

Truecrypt had this exact function - one password would decrypt your drive sort of on one end, and start the OS there, another password would decrypt the drive on the other end, and start the OS installed there - so you always had perfectly plausible deniability, since the drive taken as a whole looked like a completely normal encrypted drive(in fact you could accidentally destroy the hidden partition by overwriting "empty" area while booted into the non-secret OS). Always thought that was super cool.

Re: BusKill – A USB kill cord for laptops

#88

Windows: Sorry, Dave, we can't shut your system down right now, you have 3 apps keeping it from shutting down and we have 37 updates to Edge Browser to install... Have a nice day.

https://docs.microsoft.com/en-us/windows/win32/api/winuser/n...

EWX_FORCEIFHUNG 0x00000010

Forces processes to terminate if they do not respond to the WM_QUERYENDSESSION or WM_ENDSESSION message within the timeout interval. For more information, see the Remarks.

If the EWX_FORCEIFHUNG value is specified, the system forces hung applications to close and does not display the dialog box.

Re: BusKill – A USB kill cord for laptops

#89
post #69

There are mentions in this thread about false positives, risk of data loss, others. This made me think of Star Trek's use of a self destruct phrase. Obviously their method is too slow, but you could have a "duress" phrase and a "all clear" phrase. User-Defined Phrase: "Please dont kill me", activates "duress" mode. - A daemon listens in the background for a phrase of your choice. When detected, your laptop makes a so…

I always thought that a lock screen with two passwords would be an interesting idea. Say the BusKill locks your system and sends a request to a server. If you don't enter the correct password to abort the script within a few seconds, it will run on your server, which sends a distress mail/call to emergency contacts, revoke all ssh keys/passwords etc. If however the distress password gets entered, the script still run…

Have I got a PAM module for you: https://github.com/nuvious/pam-duress

Re: BusKill – A USB kill cord for laptops

#90

BusKill can trigger your laptop to lock, shutdown, or self-destruct if it's physically separated from you. I understand lock and shutdown but self-destruct? Really? Your laptop/data is one bump away from destroying itself?

There are any number of ways to do this, but one is a LUKS encrypted file system and "self destruct" is wiping out the LUKS header and halting. Only the backup of the LUKS header (not with you at the time!) will restore the data.

Yeah, I have that on my servers in case somebody tries to hack them. There is a secret to logging to my machines and if you miss it the machine self destructs in a reversible way. Can't give more information but it is pretty easy to boot it again.

One thing of note here, don't put LUKS header on any kind of flash (like SSD) or SMR HDD.

Post reply on HN