3 ms·
Setting GPS locations where the vault can be readded to your device and disallowing it everywhere else would be good.
by kybernetikos 9y ago
Setting GPS locations where the vault can be readded to your device and disallowing it everywhere else would be good.
- Eliezer 9y agoCame here to make the same suggestion, and strongly agree. I should not be able to re-add the vault if I am not in my house.
- MatthewWilkes 9y agoI thought about mentioning this too, as well as things like IP addresses and 2FA. The problem with GPS is proving that the location or request isn't spoofed. Ultimately, the phone is trusted when it supplies coordinates, so a determined adversary can easily circumvent it (for example, a SDR running a GPS spoofer). That's not to say it's a bad idea, as it certainly inproves security, but we are talking about state level targeting here. The other options, like IP and 2FA are more likely to result in failure demand by non-expert users. It's really tricky to get the balance right, as it's hard to justify to yourself a full wipe when going to a relatively low but nonzero risk country.
- SparkyMcUnicorn 9y agoGPS location can easily be spoofed, and your ID has an address on it.