4 ms·
passwords are bad, but I like that someone needs to beat a password out of me and can't just scan or rip out my implant. neither scenario is part of my threat
by tribby 9y ago
passwords are bad, but I like that someone needs to beat a password out of me and can't just scan or rip out my implant.
neither scenario is part of my threat model, so I get that my objection isn't practical/rational. but I'd prefer my important passwords stay in my head, and not my body.
I'd also be concerned about what I could be compelled to do with such a chip at a border crossing.
privacy as a moral imperative doesn't make my life any easier (I still lose my keys all the time), but I'm not quite ready to get chipped, either.
- fpoling 9y agoAccording various articles about methods Soviet and Russian special forces has been using to extract information from the heads of their victims only people with no feeling of pain can withstand it. The claim is that using a metal file against teeth works in 99% of cases.
- tribby 9y agoI don't doubt this (though I'm interested in your sources!), but as I said I'm not making an argument of practicality. passwords are based on consent, regardless of whether or not that consent is coerced handily by special forces. the difference between an FSB agent filing your teeth and a border agent waving their chip reader at you isn't one strictly of outcome.
- imtringued 9y agoIf you value your unharmed body more than the password you still have the option to reveal it. With an implant your body will always be harmed against your will.
- lrvick 9y agoWhy would the body need to be harmed? Any NFC scanner can read the encrypted content, and trying to remove it forcefully is likely to damage it.
- lrvick 9y agoAssuming someone scanned my implants, they will only get encrypted data. They would also need the high entropy passphrase in my brain to make any use of it. Assuming my HSM devices are damaged, (Or assuming I manage to forget my pin 3 times be it accidentally or intentionally), It would require more than my implant to reconstruct keys to my password manager data is encryptded to should I forget this high entropy passphrase. It would also require finding multiple individuals that all live in different countries to obtain the needed Shamir's Secret Sharing peices. I know a lot of people in a lot of countries and I highly doubt anyone is going to be able to identify the correct ones much less have the legal jurisdiction to compel them all to reveal their SSSS parts. It allows me to honestly say it is not possible for me to decrypt the needed data. In a more probable scenario than government actors coming after me... if I were to suffer a head injury these individuals could help me recover my access. If I were to die, they can ensure my assets are made available to others of my choosing. Having an escape hatch made of distributed trust solves a lot of problems.
- tribby 9y agolate to reply, but thanks for the explanation. from the way you described it initially (car keys specifically) it sounded like no pin was needed.