Live data from Hacker News

Assume your devices are compromised

go350.com

61–70 of 197 posts

Re: Assume your devices are compromised

#61
post #3

These are fun thought experiments, but I think having a personal Disaster Recovery plan is a far more applicable security exercise. What would you do if you lost your phone? If you were locked out of your google account? If you forgot your password manager master password? If your home was destroyed in a fire? Having a secure plan for quickly recovering from these scenarios is more important than trying to keep state…

Wrong, we need mainstream, stable quantum encryption to prevent cyber attacks.

Re: Assume your devices are compromised

#62

I see a lot of trust in VMs, but jailbreaks exist, in the future I anticipate more spectre/meltdown type vulns, or even physics based attacks like rowhammer. Assuming my threat model was infinite, can I really trust vms?

If your threat model is infinite can you trust anything?

Re: Assume your devices are compromised

#63

To that point, how many people run browser proxies in the cloud to obfuscate their location and minimize the blast radius if compromised? One could filter much of the crapology somewhere safe, and then have a relatively tidy local browsing experience. I'm too busy to take this idea past the handwaving stage, but it seems like someone should have already done the homework.

How would a browser proxy do anything aside from hiding from tracking, and maybe a tiny bit of protection from sites that use browser exploits(Not that it matters much since the only relevant ones are 0days that might not be in blocklists)?

It doesn't seem like it would do much against a device compromise.

Re: Assume your devices are compromised

#64
post #3

These are fun thought experiments, but I think having a personal Disaster Recovery plan is a far more applicable security exercise. What would you do if you lost your phone? If you were locked out of your google account? If you forgot your password manager master password? If your home was destroyed in a fire? Having a secure plan for quickly recovering from these scenarios is more important than trying to keep state…

I debate this with myself often. Short of renting a security box and telling people I trust about it, I haven’t come up with a strategy for the master password. At the moment, I’ve resigned myself to the feeling that if I lose my memory, maybe it’ll be the opportunity for a fresh start, and so losing everything is a feature not a bug.

Bitwarden (premium) has a really nice service of granting access to emergency contact based on prespecified wait time [1]. This can be used in any emergency situation.

[1] https://bitwarden.com/help/emergency-access/

Re: Assume your devices are compromised

#65

To that point, how many people run browser proxies in the cloud to obfuscate their location and minimize the blast radius if compromised? One could filter much of the crapology somewhere safe, and then have a relatively tidy local browsing experience. I'm too busy to take this idea past the handwaving stage, but it seems like someone should have already done the homework.

Cloudflare (and others) are working on it: https://www.cloudflare.com/products/zero-trust/browser-isola...

Re: Assume your devices are compromised

#66
I contemplated building an airgapped secret machine that could only communicate data with outside machines via qr codes and a webcam.

The main reason to do this isn't that the airgapped computer isn't compromised, but that even if it is, I could monitor all data moving in and out of it.

Even a USB drive passed back and forth could secretly transfer data I don't know about. Secret data is so small compared to the size of modern storage that data could easily hide in too many places.

Is that system a little paranoid? Maybe, but I haven't fully trusted any computer since heartbleed.

Re: Assume your devices are compromised

#67
post #51
post #3

These are fun thought experiments, but I think having a personal Disaster Recovery plan is a far more applicable security exercise. What would you do if you lost your phone? If you were locked out of your google account? If you forgot your password manager master password? If your home was destroyed in a fire? Having a secure plan for quickly recovering from these scenarios is more important than trying to keep state…

yeah, I've been thinking a lot about it... Shamir Secret Sharing and splitting the shares in a way that makes sense to me have me piece of mind. I even wrote a trivial console app to let my wife restore my secrets if I were to drop dead tonight.

I was once locked out of some pretty important accounts while traveling overseas. Ever since then, I've been thinking about the importance of being able to "shard" both secrets and authority.

If I were to be imprisoned, for example, I might want my lawyer and family to be able to access all of my emails from two years ago up to one week ago. If I were to suddenly die, I would want my family to have full access to all of my accounts, with little hassle.

I would like to be able to tell my email provider (through my account settings) that if at least two people out of each of these three groups agree that such-and-such condition has been met, then these people will be granted this sort of access. The process would notify the other members of the groups I defined and have a delay to allow some kind of veto/vote if there is any disagreement. It may be a bit fiddly, but if a standard were defined for how the interaction works from a user's perspective (including steps to make sure you understand the consequences of how you've configured it), at least it could work consistently across all kinds of accounts.

Re: Assume your devices are compromised

#68

The lack of per-application isolation with desktops is one of those ugly truths people try and sweep under the rug. I foresee two potential solutions to this. 1) Run everything in a VM like Qubes (essentially nerfs certain application like 3D acceleration without major R&D) 2) Utilize some container runtime to provide isolation for legacy applications and stub out features such as filesystem calls so they do not to b…

Or, just don't install viruses. On Linux I'm sure some AppArmor or flatpak whatever will be the norm one day, once all the kinks are worked out... but for now it seems to work surprisingly well to just not install stuff that isn't popular and trusted.

Maintainers of popular, trusted projects can get compromised. Hackers steal their publishing tokens and then publish a new, malicious version.

Re: Assume your devices are compromised

#69
post #51

Earlier quoted context omitted.

yeah, I've been thinking a lot about it... Shamir Secret Sharing and splitting the shares in a way that makes sense to me have me piece of mind. I even wrote a trivial console app to let my wife restore my secrets if I were to drop dead tonight.

I was once locked out of some pretty important accounts while traveling overseas. Ever since then, I've been thinking about the importance of being able to "shard" both secrets and authority. If I were to be imprisoned, for example, I might want my lawyer and family to be able to access all of my emails from two years ago up to one week ago. If I were to suddenly die, I would want my family to have full access to all…

here you can see how I'm using Shamir Secret Sharing, I gave clear instructions on how to use the shares and in what circumstances.

based on their dynamics, I'm feeling pretty good. I know I have some people there that are tech savvy + some that will take good care of their shares and when they should send those to whom.

Implementation is trivial (especially if you find a library) but maybe you can be inspired by my plan https://g3rv4.com/2022/04/a-plan-for-my-secrets

Re: Assume your devices are compromised

#70

I contemplated building an airgapped secret machine that could only communicate data with outside machines via qr codes and a webcam. The main reason to do this isn't that the airgapped computer isn't compromised, but that even if it is, I could monitor all data moving in and out of it. Even a USB drive passed back and forth could secretly transfer data I don't know about. Secret data is so small compared to the size…

Good luck

https://www.zdnet.com/article/academics-turn-ram-into-wifi-c...

Post reply on HN