Why would I send sensitive data to an unknown website? Makes no sense. And if the data is too valuable, good reason to kill me and get a treat.
Dead Man's Switch
71–80 of 101 posts
Re: Dead Man's Switch
#72Earlier quoted context omitted.
A week seems like a short amount of time. If you're dead, we're not talking about safety here—urgency is less important. I think even a mail every month would be sufficient.
That's what http://www.deadmansswitch.net/ (disclosure: I wrote it) does, it also has configurable intervals so you can make them as short or as long as you want. It sends you an email every interval, and, if you don't reply to any of them, it sends your messages.
Can I have copies of all the user submitted data? Probably full of bank account details, safe combos, etc.
Re: Dead Man's Switch
#73Earlier quoted context omitted.
Yup. It was stated over and over again that SSNs were not supposed to be a form of ID, but nobody pays attention...
I've always wondered how the SS administration deals with this. SSN _should_ be unique, but in practice they're not, so how do these people deal with taxes and _gasp_, social security?
If I were to guess I'd say they use other ID factors such as name/dob
Re: Dead Man's Switch
#74Earlier quoted context omitted.
The form action for registration is not https. Also, they have nothing to prevent a MITM from changing where the form action goes. Why would anyone use this...
I see this: Email: Password: Create an account Also, what does/can anyone do to prevent a MITM attack? Even if thy sent a HSTS header or a redirect, they're still subject to that.
That is the login form. I'm not sure how to paste code onto hacker news so here is a pastebin of the registration form.
Well a better practice would be all HTTPS for the site. There are a lot of problems with this and I will probably write a blog post about it.
Everything about this site misses every best practice. 1. No CSRF tokens 2. Small secret tokens to trigger the switch. 3. passwords over http...
It's a joke.
Re: Dead Man's Switch
#75Earlier quoted context omitted.
What prevents the bad guy from torturing you until you disable the DMS, then kill you?
Any good DMS of that calibre can't be disabled. The operator must take upfront payment and not care if you die or not, only fulfilling a contract you can't go back on. Sounds like something a Swiss bank could do for you, if stereotype is to be believed.
Oh man, now that bad guy will torture swiss bankers...
As a second thought, could lead to a slower, but much more interesting movie.
Re: Dead Man's Switch
#76Hmm I don't like the idea of involving a third (untrusted party) with what could be basically the key to your whole online identity. I would love to see a system which allows your heirs to access online accounts without having to fear that a simple government request will hand them everything they need on a silver plate (including stuff not obviously related to you). Probably physical objects need to be involved (cod…
Encrypt what you put behind the Dead Man's Switch, and then give the recipient/heir the key. If you want to get fancy, break the key up into two or more parts and split them among your heirs.
Well, split the payload between them with instructions, and get done for once.
Re: Dead Man's Switch
#77Earlier quoted context omitted.
The cert is expired anyway.
I didn't even check. It expired in Jan 2013....wow I'm betting the project isn't maintained anymore?
The whois record mentions a contact at http://www.digital-z.net/ which returns
One...
May you live in not too interesting dreams.
Thank you and good night.
Re: Dead Man's Switch
#78Earlier quoted context omitted.
I didn't even check. It expired in Jan 2013....wow I'm betting the project isn't maintained anymore?
The whois record mentions a contact at http://www.digital-z.net/ which returns One... May you live in not too interesting dreams. Thank you and good night. ... which would indicate they're gone. And the deadmansswitch.org has a footer that points to http://binarymonkey.com which has a 2008 copyright date. In one year the app's domain will expire which could be unfortunate if anyone expected an actual dead man's switc…
The bottom of the site says copyright 2014.
Re: Dead Man's Switch
#79Please no one actually use this. There is no reason to trust this site with sensitive information, and there is even some evidence it may no longer be maintained (see logn's comment.)
Re: Dead Man's Switch
#80Interesting site. Hope it is difficult to break into.
Does anyone know what happened with the woman who put up a post on Facebook (I think) saying that if people didn't hear back in a certain amount of time, she had last been to visit some guy? I am having a hard time finding the HN link.