3 ms·
As with all security it's a matter of layers, with each layer making it more difficult, but perhaps not impossible to bypass. A simple deadman's switch might be
by milesvp 9y ago
As with all security it's a matter of layers, with each layer making it more difficult, but perhaps not impossible to bypass. A simple deadman's switch might be to host some key piece of the software on a remote server that is harder to access geopolitically and have it stop responding without a periodic login. Recurse a few layers in different geopolitical zones, and it could be a relatively effective deadman's switch. Performance may take a hit such that some kind of in memory caching is needed, but anyone seizing the servers would have to know to capture the memory and not just the disks before the switch activates in this case and it would still probably be effective.
Add in some server wipe jobs, and maybe add some kind of man in the middle payload modifications as well, and you could keep some computer forensics techs scrambling to try to find it all. It'd be a pain to maintain it all, and it'd probably be the operator in the end who compromised everything, but it could be done.
- Vespasian 9y agoWhy would any admin do this? It would absolutely ruin their chances of getting a more lenient sentence by cooperating with the authorities. The police have these people in physical custody. Why would they take a fall for their (also criminal) customers? There is nothing to gain but much to loose. PS: If there is not enough evidence for prosecution, having a dead man's switch would be incredibly stupid. It announces to everyone "You got the right guys. Keep digging for evidence"
- mullen 9y ago> Why would any admin do this? It would absolutely ruin their chances of getting a more lenient sentence by cooperating with the authorities. The police have these people in physical custody. Why would they take a fall for their (also criminal) customers? There is nothing to gain but much to loose. Actually, having the DB and all important files encrypted would be a better negotiating position for the admin. If the police catch the Admin and also get the DB and important files unencrypted, what is the admins negotiating position? They have the Admin and the important files. In a perfect world, for the police, they want both, but a second best choice would be having the DB and important files with some jail time for the Admin. If I was the Admin I would give the police a choice, you can get me or can get me with reduced jail time and the DB and important file. You can get the conviction for the Admin and the buyers of the drugs too or Life for the Admin and let thousands of buyers and seller go free. Encrypted files would put the Admin in a great position.