Live data from Hacker News

Show HN: End-to-End Encrypted Dead Man's Switch

cipherwill.com

1–10 of 56 posts

Re: Show HN: End-to-End Encrypted Dead Man's Switch

#3
I feel like these services have a chicken egg dilemma.

For example, I'm highly interested in it, but don't sign up because I don't know if they'll be around in a year or 10. So I'd like to see one long established before going all in, but it's hard for one to get long established without early users.

Re: Show HN: End-to-End Encrypted Dead Man's Switch

#4
Since your service is centralized, what is the sequence of events that leads to my digital data being disclosed without my consent/death? For example, if I am a beneficiary of Jane Doe, and I hack Cipherwill, can I get the keys I need to steal Jane Doe’s data while she is alive?

Re: Show HN: End-to-End Encrypted Dead Man's Switch

#5
> Securely store crypto wallets, investments, bank details, emails, logins, and notes in Cipherwill.

I don’t have any investments or crypto and, sorry, if I ever did I wouldn’t trust you with that info and give you the means to rob and/or steal my identity. That’s a bold ask with a closed source app.

I built my own dead man’s switch, which lives in the open on GitHub. It’s a simple rails app w/ encrypted tables and some background jobs to send email checks and reset numbers, or blast out info if you’re not answering. I have no valuable info to put in it.

Re: Show HN: End-to-End Encrypted Dead Man's Switch

#6

> Securely store crypto wallets, investments, bank details, emails, logins, and notes in Cipherwill. I don’t have any investments or crypto and, sorry, if I ever did I wouldn’t trust you with that info and give you the means to rob and/or steal my identity. That’s a bold ask with a closed source app. I built my own dead man’s switch, which lives in the open on GitHub. It’s a simple rails app w/ encrypted tables and s…

Hey, I totally get your concerns — trust is crucial with personal data. It's awesome, you've built your own dead man's switch on GitHub! Our encryption means we can’t access your info — it’s yours and your beneficiaries’. But if your setup works for you, that’s great. Thanks for sharing!

Re: Show HN: End-to-End Encrypted Dead Man's Switch

#7
I'm not sure there's anything a service like this could do to assure me that (1) I can trust them, and (2) that they can actually make the UX of this meaningfully better, without compromising security fundamentally.

For now, I'm rocking:

* yubikeys pre-provisioned with keys given to select family members

* sops to encrypt my "will" to those keys

* sops-encrypted file hosted on google drive, pre-shared to select family members

Luckily I have enough technical family and friends that they would eventually figure out how to run `sops decrypt`. And/or enough funds that they can hire someone if need be.

Weakest part here is my BIP39 is not Shamir'd, so a rouge family member could empty my wallet. But I trust them. More than a third party presuming-for-profit service. :( Not to be a party-pooper, it's a neat idea.

(edit, s/bip32/bip39/g)

Re: Show HN: End-to-End Encrypted Dead Man's Switch

#8
post #3

I feel like these services have a chicken egg dilemma. For example, I'm highly interested in it, but don't sign up because I don't know if they'll be around in a year or 10. So I'd like to see one long established before going all in, but it's hard for one to get long established without early users.

I totally get that dilemma! It’s hard to commit without knowing if a service will be around long-term. Cipherwill is dedicated to the long haul and is also hosted on decentralized blockchain storage for added security and longevity.

Re: Show HN: End-to-End Encrypted Dead Man's Switch

#10
post #4

Since your service is centralized, what is the sequence of events that leads to my digital data being disclosed without my consent/death? For example, if I am a beneficiary of Jane Doe, and I hack Cipherwill, can I get the keys I need to steal Jane Doe’s data while she is alive?

Cipherwill’s encryption is designed so that even if someone hacks the platform, they can’t access anyone’s data. The encryption keys are split between the user and their beneficiaries, and no one — including us — can access the data without the owner’s consent or passing. So, even if you're a beneficiary, you can’t get Jane Doe’s data while she’s alive.
Post reply on HN