I think an app on your phone is a better way, if the phone has not moved in the last 24 hours or whatever, then an email could be sent. Something like that.
Dead Man's Switch
21–30 of 101 posts
Re: Dead Man's Switch
#22This is something I've thought about, and as I see it a lot of the problems common to crypto software are manifest in this space as well. Specifically with regard to security vs useability/ease-of-adoption issues. This particular implementation transmits sensitive data in the clear and does the encryption server-side, so it's hard to take it seriously except as a remote (and unsecure) notification service. Aside from…
Obviously the solution is a DeadManSwitchCoin.
Re: Dead Man's Switch
#23Earlier quoted context omitted.
Probably physical objects need to be involved (code on paper etc) but then again how to make sure the next best burglar doesn't get the prize of his lifetime. Does anyone know of such a solution? Put it in a safe deposit box at your local bank?
Pretty much. All my online logins are long random passwords stored in either 1Password or my phone. I've considered writing up my password (to 1PW), and computer unlock PW, and dropping it in my safe deposit box, updating it monthly or whenever I change those passwords. Any good reason not to?
First thing that comes to mind- not a lawyer but:
It's probably going to be harder to force you to divulge a password in a court case than to just subpoena the piece of paper with your password on it and the computer with the 1PW database.
Re: Dead Man's Switch
#24I wish there was a better way of determining whether you were alive or not. There's an endless number of possibilities as to what could happen in order for me to not be able to go online and verify with that link. Why would I put myself through the stress of potentially forgetting and now I have to worry about the secrets of my dying breathe being released to the public while I'm still around. If I wanted anything to…
A week seems like a short amount of time. If you're dead, we're not talking about safety here—urgency is less important. I think even a mail every month would be sufficient.
Re: Dead Man's Switch
#25Excellent way to make money :) Just run this service for a few years without actually encrypting the data, then charge $20/month to NOT release the information.
Ah, the classic Bait and Switch SaaS.
Re: Dead Man's Switch
#26I wish there was a better way of determining whether you were alive or not. There's an endless number of possibilities as to what could happen in order for me to not be able to go online and verify with that link. Why would I put myself through the stress of potentially forgetting and now I have to worry about the secrets of my dying breathe being released to the public while I'm still around. If I wanted anything to…
How about a site where you enter your SSN? Then if you're ever listed as deceased in the Social Security Death Index, that will be the trigger.
Re: Dead Man's Switch
#27I've thought about that service a lot and this solution is not working because :
* I have to constantly check my mails to prove I'm not dead
* The other person's mail will without any doubt change if I die in 10+ years
* Can this service live up to 50+ years? I'm really doubting that as well.
Re: Dead Man's Switch
#28Earlier quoted context omitted.
Not even just the code....your password and email are both over http.......
The form action for login appears to be https, but not the code... I don't know why people bother not just httpsing everything if they have the cert. It avoids these types of worries and appearance.
The form action for registration is not https. Also, they have nothing to prevent a MITM from changing where the form action goes.
Why would anyone use this...
Re: Dead Man's Switch
#29I think an app on your phone is a better way, if the phone has not moved in the last 24 hours or whatever, then an email could be sent. Something like that.
so if you lose your phone? Change your phone? etc...
Re: Dead Man's Switch
#30This is something I've thought about, and as I see it a lot of the problems common to crypto software are manifest in this space as well. Specifically with regard to security vs useability/ease-of-adoption issues. This particular implementation transmits sensitive data in the clear and does the encryption server-side, so it's hard to take it seriously except as a remote (and unsecure) notification service. Aside from…
Obviously the solution is a DeadManSwitchCoin.
I proposed this in an earlier thread and got some push back on the utility of the concept https://news.ycombinator.com/item?id=6509824