3 ms·
This is one reason I've always wanted to have two separate authentication credentials for one user. Unfortunately, I've yet to find an acceptable or easy way to
by stryk 10y ago
This is one reason I've always wanted to have two separate authentication credentials for one user. Unfortunately, I've yet to find an acceptable or easy way to implement that on any device that would need it (your phone, your laptop, any device which you want to keep stuff private). For example: have one authentication method that unlocks the device to the typical desktop environment, command line, or whatever -- just a typical GUI that people would expect to see upon logging in. And then have another (hidden) authentication method to unlock the device into the REAL meat & potatoes. Useful for situations like this when law enforcement demands it, or when TSA/Customs in a foreign country demand you open and boot your laptop at a foreign airport. Is there any way to implement this on Android, iOS, GNU/Linux, or Windows?
- dlp211 10y agoTruecrypt had something like this for PC's. The project shut down though.
- raihansaputra 10y agoVeracrypt (the most popular fork of Truecrypt) has this ability too. And some Truecrypt user still trust Truecrypt after the latest audit found no signals of backdoors.
- viral_krieger 10y agoI think Qubes OS (https://en.wikipedia.org/wiki/Qubes_OS https://en.wikipedia.org/wiki/Qubes_OS) does something similar to what you're looking for. You can set it up so when you login your "qube" (The virtual machine you're currently using) is a normal looking operating system that doesn't have access to any of your protected files. You can then load up your protected files and programs by starting another password protected "qube", which is similar to starting another VM.
- stryk 10y agoThis looks very, very interesting. I'll have a deeper look into Qubes this weekend for sure. I wonder how good their repos are in terms of up-to-date packages and software
- null0pointer 10y agoWhat about a 'distress' password that unlocks the device to a benign but plausible state?
- stryk 10y agoThis is EXACTLY a best-case-scenario, but I have no idea if/how it can be done. (ie: one user account, username: <user1>, but <password1> unlocks and boots into a typical desktop, and a separate <password2> unlocks into another totally different environment)