Live data from Hacker News

PAM Duress – Alternate passwords for panic situations

github.com

171–180 of 358 posts

Re: PAM Duress – Alternate passwords for panic situations

#171
post #154

Earlier quoted context omitted.

What do they ask you to show them at airports?

Text messages, maybe photos

> Text messages

Is that from apps like WhatsApp and Telegram? And SMS? What about email?

What happens if you'd say that you can't, because it's your employer's laptop and data, and it's confidential?

Re: PAM Duress – Alternate passwords for panic situations

#172
post #157

Earlier quoted context omitted.

Text messages, maybe photos

Which countries do this? I am pretty sure TSA can only ask you to demonstrate the device functions as intended, usually by powering it on.

They’re referring to customs rather than TSA. Only applicable entering/leaving a country.

Re: PAM Duress – Alternate passwords for panic situations

#174
post #146

Earlier quoted context omitted.

Despite rumors to the contrary, the police aren’t stupid. They are trained to ask questions in ways that elicit a confession or falsehood. The simplest example is asking “Do you know why I pulled you over?”. Typically, people spontaneously confess to speeding, sometimes they break down and admit that someone is wrapped up in a rug in the trunk. The courts have consistently ruled that customs is different and you can…

Time to post this again: https://www.youtube.com/watch?v=d-7o9xYp7eE (Don't talk to the police)

Everytime this is posted I feel the need to mention to Brits specifically: this does not apply.

"It may harm your defence if when questioned you fail to mention something you will later rely on in court".

Failure to answer can seriously harm your defence and I've heard of people I personally know (though I wasn't in the courtroom) where the prosecution hammered the point that they "came up with a plausible sounding story" after the arrest.

Obviously Border Patrol is not the same as being arrested; but this is an important caveat for the video posted.

Talk to british police. If you feel like lying, keep your story straight or give basic facts.

Re: PAM Duress – Alternate passwords for panic situations

#175

perhaps i could use that as a screensaver password to share with my girlfriend? it would close spreadsheets, emacs, un-mount journals and personal drives. PAM's used to reauth from the screen-saver, right?

Depends on your locking program but yes, PAM can be used for that.

Re: PAM Duress – Alternate passwords for panic situations

#176
post #150

perhaps i could use that as a screensaver password to share with my girlfriend? it would close spreadsheets, emacs, un-mount journals and personal drives. PAM's used to reauth from the screen-saver, right?

Might be easier to create a separate login? Some partners expect to share passwords as a trust thing, but my work does not allow it (and most personal devices have access to work stuff).

I don't understand why partners willingly share passwords.

Re: PAM Duress – Alternate passwords for panic situations

#177
post #79

Earlier quoted context omitted.

An interesting way to use this PAM-Duress system would be to write a program that (a) begins recording your microphone and webcam video immediately upon login (b) Aggressively try the hell out of every passwordless Wi-Fi network it can detect, then use headless chrome to aggressively smack every button to get past the stupid login pages (c) Stream that video and audio to a server that saves it.

> begins recording your microphone and webcam video immediately upon login If your camera has an activity light, this might inadvertently worsen your situation.

Just disconnect the light

Re: PAM Duress – Alternate passwords for panic situations

#178
post #177

Earlier quoted context omitted.

> begins recording your microphone and webcam video immediately upon login If your camera has an activity light, this might inadvertently worsen your situation.

Just disconnect the light

> Just disconnect the light

Thanks, I'm cured.

1) A lot of laptops are sealed with glue. "Just disconnecting the light" would involve prying layers apart.

2) Companies may frown upon that if you should try to modify a company issue laptop.

3) Disabling a recording indicator may be illegal where you live.

Re: PAM Duress – Alternate passwords for panic situations

#179

Earlier quoted context omitted.

Text messages, maybe photos

> Text messages Is that from apps like WhatsApp and Telegram? And SMS? What about email? What happens if you'd say that you can't, because it's your employer's laptop and data, and it's confidential?

Personal accounts can be configured to simply not have access to those apps.

"Oh, I don't use Whatsapp."

Re: PAM Duress – Alternate passwords for panic situations

#180
post #178
post #177

Earlier quoted context omitted.

Just disconnect the light

> Just disconnect the light Thanks, I'm cured. 1) A lot of laptops are sealed with glue. "Just disconnecting the light" would involve prying layers apart. 2) Companies may frown upon that if you should try to modify a company issue laptop. 3) Disabling a recording indicator may be illegal where you live.

1) Put a tiny dot of Black 2.0, not very noticeable and blocks the light very well.

2) Don't do personal stuff on your company laptop. If the company doesn't let you modify it, joke's on them, only company files will get leaked. Your personal stuff shouldn't be on that laptop.

3) Fuck that, if there are photons you can collect them

Worst case just do the microphone only.

Post reply on HN